@sixb/core 0.1.16 → 0.1.18

package/dist/{chunk-zdkcdshk.js → chunk-y9jmd7e5.js}

@@ -1,7 +1,10 @@
 // @bun
+import {
+  isFileRef2
+} from "./chunk-jhm3zsa7.js";
 import {
   createObjectOperationScope2
-} from "./chunk-mr60an99.js";
+} from "./chunk-qczk96d9.js";
 import {
   stableJsonStringify2
 } from "./chunk-wy0qdqfm.js";
@@ -71,6 +74,41 @@ function isStorageSerializationFailure2(error) {
   return error instanceof StorageTransactionError2 && error.code === "serialization_failure";
 }
 
+// src/storage/file-download-grants/record.ts
+function parseFileDownloadGrantRow2(row) {
+  const id = text(row.id, "id", String(row.id));
+  const file = typeof row.file === "string" ? JSON.parse(row.file) : row.file;
+  if (!isFileRef2(file))
+    throw corrupt(id, "file is not a file reference");
+  return {
+    id,
+    projectId: text(row.projectId, "projectId", id),
+    tokenHash: text(row.tokenHash, "tokenHash", id),
+    file,
+    executionId: text(row.executionId, "executionId", id),
+    createdAt: date(row.createdAt, "createdAt", id),
+    expiresAt: date(row.expiresAt, "expiresAt", id),
+    ...row.revokedAt == null ? {} : { revokedAt: date(row.revokedAt, "revokedAt", id) }
+  };
+}
+function cloneFileDownloadGrantRecord(record) {
+  return structuredClone(record);
+}
+function text(value, column, id) {
+  if (typeof value !== "string" || value.length === 0)
+    throw corrupt(id, `${column} is not text`);
+  return value;
+}
+function date(value, column, id) {
+  const parsed = value instanceof Date || typeof value === "string" ? new Date(value) : null;
+  if (!parsed || !Number.isFinite(parsed.getTime()))
+    throw corrupt(id, `${column} is not a date`);
+  return parsed;
+}
+function corrupt(id, reason) {
+  return new Error(`[Sixb] Stored file download grant '${id}' is invalid: ${reason}.`);
+}
+
 // src/storage/pipeline-runs/idempotency.ts
 function canRequeuePipelineRunAfterEnqueueFailure2(existing, input) {
   return existing.status === "failed" && existing.error?.code === "queue.enqueue_failed" && existing.error.retryable && existing.executionId === input.executionId && existing.pipelineId === input.pipelineId;
@@ -127,6 +165,6 @@ function throwNestedStorageTransaction2() {
   });
 }
 
-export { actionSubjectsEqual2, actionRunParamsEqual2, actionRunPhaseRecordsEqual2, finishActionRunPhase2, canRequeueActionRunAfterEnqueueFailure2, isTerminalActionRun2, ObjectNotFoundError2, ObjectStorageError2, StorageTransactionError2, isStorageSerializationFailure2, canRequeuePipelineRunAfterEnqueueFailure2, canRequeueSyncRunAfterEnqueueFailure2, createTransactionStorageProxy2, assertTransactionActive2, throwNestedStorageTransaction2 };
+export { actionSubjectsEqual2, actionRunParamsEqual2, actionRunPhaseRecordsEqual2, finishActionRunPhase2, canRequeueActionRunAfterEnqueueFailure2, isTerminalActionRun2, ObjectNotFoundError2, ObjectStorageError2, StorageTransactionError2, isStorageSerializationFailure2, parseFileDownloadGrantRow2, cloneFileDownloadGrantRecord, canRequeuePipelineRunAfterEnqueueFailure2, canRequeueSyncRunAfterEnqueueFailure2, createTransactionStorageProxy2, assertTransactionActive2, throwNestedStorageTransaction2 };
 
-//# debugId=440B9D15F80B0E4C64756E2164756E21
+//# debugId=8C3E5A53727ECCEF64756E2164756E21

package/dist/{chunk-zdkcdshk.js.map → chunk-y9jmd7e5.js.map}

@@ -1,14 +1,15 @@
 {
   "version": 3,
-  "sources": ["../src/storage/action-runs/idempotency.ts", "../src/storage/errors.ts", "../src/storage/pipeline-runs/idempotency.ts", "../src/storage/sync-runs/idempotency.ts", "../src/storage/transaction.ts"],
+  "sources": ["../src/storage/action-runs/idempotency.ts", "../src/storage/errors.ts", "../src/storage/file-download-grants/record.ts", "../src/storage/pipeline-runs/idempotency.ts", "../src/storage/sync-runs/idempotency.ts", "../src/storage/transaction.ts"],
   "sourcesContent": [
     "import type { ActionSubject } from \"../../actions\"\nimport { stableJsonStringify } from \"../../json\"\nimport type {\n  ActionRunEffectsRecord,\n  ActionRunPhase,\n  ActionRunRecord,\n  ActionRunWritebackRecord,\n  FinishActionRunInput,\n  QueueActionRunInput,\n} from \"./types\"\n\nexport function actionSubjectsEqual(left: ActionSubject, right: ActionSubject): boolean {\n  if (left.kind !== right.kind) return false\n  if (left.kind === \"none\") return true\n  if (right.kind === \"none\") return false\n  return left.objectTypeId === right.objectTypeId && left.primaryId === right.primaryId\n}\n\nexport function actionRunParamsEqual(left: unknown, right: unknown): boolean {\n  return stableJsonStringify(left) === stableJsonStringify(right)\n}\n\nexport type ActionRunPhaseRecord = ActionRunWritebackRecord | ActionRunEffectsRecord\n\nexport function actionRunPhaseRecordsEqual(\n  left: ActionRunPhaseRecord,\n  right: ActionRunPhaseRecord\n): boolean {\n  return actionRunParamsEqual(stripPhaseRecordCompletedAt(left), stripPhaseRecordCompletedAt(right))\n}\n\nexport function finishActionRunPhase(\n  input: FinishActionRunInput,\n  current: ActionRunPhase | null | undefined\n): ActionRunPhase {\n  if (input.status === \"succeeded\") {\n    return input.phase ?? current ?? \"validation\"\n  }\n\n  return input.error.details.phase\n}\n\nexport function canRequeueActionRunAfterEnqueueFailure(\n  existing: ActionRunRecord,\n  input: QueueActionRunInput\n): boolean {\n  return (\n    existing.status === \"failed\" &&\n    existing.phase === \"enqueue\" &&\n    existing.executionId === input.executionId &&\n    existing.error?.retryable === true &&\n    existing.actionId === input.actionId &&\n    existing.idempotencyKey === input.idempotencyKey &&\n    actionSubjectsEqual(existing.subject, input.subject) &&\n    actionRunParamsEqual(existing.params, input.params)\n  )\n}\n\nexport function isTerminalActionRun(record: Pick<ActionRunRecord, \"status\">): boolean {\n  return (\n    record.status === \"succeeded\" || record.status === \"failed\" || record.status === \"cancelled\"\n  )\n}\n\nfunction stripPhaseRecordCompletedAt(\n  record: ActionRunPhaseRecord\n): Omit<ActionRunPhaseRecord, \"completedAt\"> {\n  const { completedAt: _completedAt, ...stableRecord } = record\n  return stableRecord\n}\n",
     "/**\n * Thrown when a storage lookup by primary ID finds no matching object.\n * Carries structured context so callers can discriminate without string parsing.\n */\nexport class ObjectNotFoundError extends Error {\n  readonly name = \"ObjectNotFoundError\"\n\n  constructor(\n    readonly objectTypeId: string,\n    readonly primaryId: string,\n    readonly context: string\n  ) {\n    super(`[Sixb] ${context}: ${objectTypeId}:${primaryId}`)\n  }\n}\n\nexport class ObjectStorageError extends Error {\n  readonly name = \"ObjectStorageError\"\n}\n\nexport type StorageTransactionErrorCode =\n  | \"nested_transaction\"\n  | \"serialization_failure\"\n  | \"transaction_inactive\"\n\nexport interface StorageTransactionErrorOptions {\n  readonly cause?: unknown\n  readonly code?: StorageTransactionErrorCode\n}\n\nexport class StorageTransactionError extends Error {\n  readonly name = \"StorageTransactionError\"\n  readonly code?: StorageTransactionErrorCode\n  override readonly cause?: unknown\n\n  constructor(message: string, options: StorageTransactionErrorOptions = {}) {\n    super(message)\n    this.code = options.code\n    this.cause = options.cause\n  }\n}\n\nexport function isStorageSerializationFailure(error: unknown): boolean {\n  return error instanceof StorageTransactionError && error.code === \"serialization_failure\"\n}\n",
+    "import { isFileRef } from \"../../blob-storage\"\nimport type { FileDownloadGrantRecord } from \"./types\"\n\n/**\n * Rebuilds a grant from a provider row with camelCase keys. `file` may arrive parsed (jsonb) or\n * as text (SQLite), and timestamps as `Date` or ISO text. Fails closed on corruption: a grant that\n * cannot be read must not serve a file.\n */\nexport function parseFileDownloadGrantRow(row: {\n  readonly [column: string]: unknown\n}): FileDownloadGrantRecord {\n  const id = text(row.id, \"id\", String(row.id))\n  const file = typeof row.file === \"string\" ? JSON.parse(row.file) : row.file\n  if (!isFileRef(file)) throw corrupt(id, \"file is not a file reference\")\n\n  return {\n    id,\n    projectId: text(row.projectId, \"projectId\", id),\n    tokenHash: text(row.tokenHash, \"tokenHash\", id),\n    file,\n    executionId: text(row.executionId, \"executionId\", id),\n    createdAt: date(row.createdAt, \"createdAt\", id),\n    expiresAt: date(row.expiresAt, \"expiresAt\", id),\n    ...(row.revokedAt == null ? {} : { revokedAt: date(row.revokedAt, \"revokedAt\", id) }),\n  }\n}\n\nexport function cloneFileDownloadGrantRecord(\n  record: FileDownloadGrantRecord\n): FileDownloadGrantRecord {\n  return structuredClone(record)\n}\n\nfunction text(value: unknown, column: string, id: string): string {\n  if (typeof value !== \"string\" || value.length === 0) throw corrupt(id, `${column} is not text`)\n  return value\n}\n\nfunction date(value: unknown, column: string, id: string): Date {\n  const parsed = value instanceof Date || typeof value === \"string\" ? new Date(value) : null\n  if (!parsed || !Number.isFinite(parsed.getTime())) throw corrupt(id, `${column} is not a date`)\n  return parsed\n}\n\nfunction corrupt(id: string, reason: string): Error {\n  return new Error(`[Sixb] Stored file download grant '${id}' is invalid: ${reason}.`)\n}\n",
     "import type { PipelineRunRecord, QueuePipelineRunInput } from \"./types\"\n\nexport function canRequeuePipelineRunAfterEnqueueFailure(\n  existing: PipelineRunRecord,\n  input: QueuePipelineRunInput\n): boolean {\n  return (\n    existing.status === \"failed\" &&\n    existing.error?.code === \"queue.enqueue_failed\" &&\n    existing.error.retryable &&\n    existing.executionId === input.executionId &&\n    existing.pipelineId === input.pipelineId\n  )\n}\n",
     "import type { QueueSyncRunInput, SyncRunRecord } from \"./types\"\n\nexport function canRequeueSyncRunAfterEnqueueFailure(\n  existing: SyncRunRecord,\n  input: QueueSyncRunInput\n): boolean {\n  return (\n    existing.status === \"failed\" &&\n    existing.error?.code === \"queue.enqueue_failed\" &&\n    existing.error.retryable &&\n    existing.executionId === input.executionId &&\n    existing.syncId === input.syncId &&\n    existing.datasetId === input.datasetId &&\n    existing.mode === input.mode &&\n    existing.expectedLatestVersionId === input.expectedLatestVersionId &&\n    existing.commitMessage === input.commitMessage\n  )\n}\n",
     "import { StorageTransactionError } from \"./errors\"\nimport { createObjectOperationScope } from \"./operation-scope\"\nimport type { Storage } from \"./types\"\n\ntype ObjectLike = Record<PropertyKey, unknown>\n\nexport function createTransactionStorageProxy<T extends Storage>(\n  target: T,\n  isActive: () => boolean\n): T {\n  const proxies = new WeakMap<object, object>()\n  const objectStorage = createObjectOperationScope(target.objects, {\n    assertAvailable: () => assertTransactionActive(isActive),\n    run: async <TResult>(operation: () => Promise<TResult> | TResult): Promise<TResult> => {\n      assertTransactionActive(isActive)\n      return operation()\n    },\n  })\n\n  const wrap = <TValue extends object>(value: TValue): TValue => {\n    const existing = proxies.get(value)\n    if (existing) return existing as TValue\n\n    const proxy = new Proxy(value as ObjectLike, {\n      // The guard runs on property access and on call. Its purpose is to fail fast when a\n      // transaction handle (`tx`) leaks past the transaction's lifetime — using it afterward is a\n      // bug, not a recoverable state. Overhead is bounded: only the storage namespaces reachable\n      // from `tx` are wrapped (a handful), not the row/link data graph, and never per-record.\n      get(current, property, receiver) {\n        assertTransactionActive(isActive)\n        const result =\n          current === target && property === \"objects\"\n            ? objectStorage\n            : Reflect.get(current, property, receiver)\n        if (typeof result === \"function\") {\n          return (...args: unknown[]) => {\n            assertTransactionActive(isActive)\n            return result.apply(current, args)\n          }\n        }\n        if (result && typeof result === \"object\") {\n          return wrap(result)\n        }\n        return result\n      },\n    })\n\n    proxies.set(value, proxy)\n    return proxy as TValue\n  }\n\n  return wrap(target)\n}\n\nexport function assertTransactionActive(isActive: () => boolean): void {\n  if (!isActive()) {\n    throw new StorageTransactionError(\n      \"[Sixb] Transaction storage cannot be used after transaction completion.\",\n      { code: \"transaction_inactive\" }\n    )\n  }\n}\n\nexport function throwNestedStorageTransaction(): never {\n  throw new StorageTransactionError(\"[Sixb] Nested storage transactions are not supported yet.\", {\n    code: \"nested_transaction\",\n  })\n}\n"
   ],
-  "mappings": ";;;;;;;;;AAWO,SAAS,oBAAmB,CAAC,MAAqB,OAA+B;AAAA,EACtF,IAAI,KAAK,SAAS,MAAM;AAAA,IAAM,OAAO;AAAA,EACrC,IAAI,KAAK,SAAS;AAAA,IAAQ,OAAO;AAAA,EACjC,IAAI,MAAM,SAAS;AAAA,IAAQ,OAAO;AAAA,EAClC,OAAO,KAAK,iBAAiB,MAAM,gBAAgB,KAAK,cAAc,MAAM;AAAA;AAGvE,SAAS,qBAAoB,CAAC,MAAe,OAAyB;AAAA,EAC3E,OAAO,qBAAoB,IAAI,MAAM,qBAAoB,KAAK;AAAA;AAKzD,SAAS,2BAA0B,CACxC,MACA,OACS;AAAA,EACT,OAAO,sBAAqB,4BAA4B,IAAI,GAAG,4BAA4B,KAAK,CAAC;AAAA;AAG5F,SAAS,qBAAoB,CAClC,OACA,SACgB;AAAA,EAChB,IAAI,MAAM,WAAW,aAAa;AAAA,IAChC,OAAO,MAAM,SAAS,WAAW;AAAA,EACnC;AAAA,EAEA,OAAO,MAAM,MAAM,QAAQ;AAAA;AAGtB,SAAS,uCAAsC,CACpD,UACA,OACS;AAAA,EACT,OACE,SAAS,WAAW,YACpB,SAAS,UAAU,aACnB,SAAS,gBAAgB,MAAM,eAC/B,SAAS,OAAO,cAAc,QAC9B,SAAS,aAAa,MAAM,YAC5B,SAAS,mBAAmB,MAAM,kBAClC,qBAAoB,SAAS,SAAS,MAAM,OAAO,KACnD,sBAAqB,SAAS,QAAQ,MAAM,MAAM;AAAA;AAI/C,SAAS,oBAAmB,CAAC,QAAkD;AAAA,EACpF,OACE,OAAO,WAAW,eAAe,OAAO,WAAW,YAAY,OAAO,WAAW;AAAA;AAIrF,SAAS,2BAA2B,CAClC,QAC2C;AAAA,EAC3C,QAAQ,aAAa,iBAAiB,iBAAiB;AAAA,EACvD,OAAO;AAAA;;;AChEF,MAAM,6BAA4B,MAAM;AAAA,EAIlC;AAAA,EACA;AAAA,EACA;AAAA,EALF,OAAO;AAAA,EAEhB,WAAW,CACA,cACA,WACA,SACT;AAAA,IACA,MAAM,UAAU,YAAY,gBAAgB,WAAW;AAAA,IAJ9C;AAAA,IACA;AAAA,IACA;AAAA;AAIb;AAAA;AAEO,MAAM,4BAA2B,MAAM;AAAA,EACnC,OAAO;AAClB;AAAA;AAYO,MAAM,iCAAgC,MAAM;AAAA,EACxC,OAAO;AAAA,EACP;AAAA,EACS;AAAA,EAElB,WAAW,CAAC,SAAiB,UAA0C,CAAC,GAAG;AAAA,IACzE,MAAM,OAAO;AAAA,IACb,KAAK,OAAO,QAAQ;AAAA,IACpB,KAAK,QAAQ,QAAQ;AAAA;AAEzB;AAEO,SAAS,8BAA6B,CAAC,OAAyB;AAAA,EACrE,OAAO,iBAAiB,4BAA2B,MAAM,SAAS;AAAA;;;ACzC7D,SAAS,yCAAwC,CACtD,UACA,OACS;AAAA,EACT,OACE,SAAS,WAAW,YACpB,SAAS,OAAO,SAAS,0BACzB,SAAS,MAAM,aACf,SAAS,gBAAgB,MAAM,eAC/B,SAAS,eAAe,MAAM;AAAA;;;ACT3B,SAAS,qCAAoC,CAClD,UACA,OACS;AAAA,EACT,OACE,SAAS,WAAW,YACpB,SAAS,OAAO,SAAS,0BACzB,SAAS,MAAM,aACf,SAAS,gBAAgB,MAAM,eAC/B,SAAS,WAAW,MAAM,UAC1B,SAAS,cAAc,MAAM,aAC7B,SAAS,SAAS,MAAM,QACxB,SAAS,4BAA4B,MAAM,2BAC3C,SAAS,kBAAkB,MAAM;AAAA;;;ACT9B,SAAS,8BAAgD,CAC9D,QACA,UACG;AAAA,EACH,MAAM,UAAU,IAAI;AAAA,EACpB,MAAM,gBAAgB,4BAA2B,OAAO,SAAS;AAAA,IAC/D,iBAAiB,MAAM,yBAAwB,QAAQ;AAAA,IACvD,KAAK,OAAgB,cAAkE;AAAA,MACrF,yBAAwB,QAAQ;AAAA,MAChC,OAAO,UAAU;AAAA;AAAA,EAErB,CAAC;AAAA,EAED,MAAM,OAAO,CAAwB,UAA0B;AAAA,IAC7D,MAAM,WAAW,QAAQ,IAAI,KAAK;AAAA,IAClC,IAAI;AAAA,MAAU,OAAO;AAAA,IAErB,MAAM,QAAQ,IAAI,MAAM,OAAqB;AAAA,MAK3C,GAAG,CAAC,SAAS,UAAU,UAAU;AAAA,QAC/B,yBAAwB,QAAQ;AAAA,QAChC,MAAM,SACJ,YAAY,UAAU,aAAa,YAC/B,gBACA,QAAQ,IAAI,SAAS,UAAU,QAAQ;AAAA,QAC7C,IAAI,OAAO,WAAW,YAAY;AAAA,UAChC,OAAO,IAAI,SAAoB;AAAA,YAC7B,yBAAwB,QAAQ;AAAA,YAChC,OAAO,OAAO,MAAM,SAAS,IAAI;AAAA;AAAA,QAErC;AAAA,QACA,IAAI,UAAU,OAAO,WAAW,UAAU;AAAA,UACxC,OAAO,KAAK,MAAM;AAAA,QACpB;AAAA,QACA,OAAO;AAAA;AAAA,IAEX,CAAC;AAAA,IAED,QAAQ,IAAI,OAAO,KAAK;AAAA,IACxB,OAAO;AAAA;AAAA,EAGT,OAAO,KAAK,MAAM;AAAA;AAGb,SAAS,wBAAuB,CAAC,UAA+B;AAAA,EACrE,IAAI,CAAC,SAAS,GAAG;AAAA,IACf,MAAM,IAAI,yBACR,2EACA,EAAE,MAAM,uBAAuB,CACjC;AAAA,EACF;AAAA;AAGK,SAAS,8BAA6B,GAAU;AAAA,EACrD,MAAM,IAAI,yBAAwB,6DAA6D;AAAA,IAC7F,MAAM;AAAA,EACR,CAAC;AAAA;",
-  "debugId": "440B9D15F80B0E4C64756E2164756E21",
+  "mappings": ";;;;;;;;;;;;AAWO,SAAS,oBAAmB,CAAC,MAAqB,OAA+B;AAAA,EACtF,IAAI,KAAK,SAAS,MAAM;AAAA,IAAM,OAAO;AAAA,EACrC,IAAI,KAAK,SAAS;AAAA,IAAQ,OAAO;AAAA,EACjC,IAAI,MAAM,SAAS;AAAA,IAAQ,OAAO;AAAA,EAClC,OAAO,KAAK,iBAAiB,MAAM,gBAAgB,KAAK,cAAc,MAAM;AAAA;AAGvE,SAAS,qBAAoB,CAAC,MAAe,OAAyB;AAAA,EAC3E,OAAO,qBAAoB,IAAI,MAAM,qBAAoB,KAAK;AAAA;AAKzD,SAAS,2BAA0B,CACxC,MACA,OACS;AAAA,EACT,OAAO,sBAAqB,4BAA4B,IAAI,GAAG,4BAA4B,KAAK,CAAC;AAAA;AAG5F,SAAS,qBAAoB,CAClC,OACA,SACgB;AAAA,EAChB,IAAI,MAAM,WAAW,aAAa;AAAA,IAChC,OAAO,MAAM,SAAS,WAAW;AAAA,EACnC;AAAA,EAEA,OAAO,MAAM,MAAM,QAAQ;AAAA;AAGtB,SAAS,uCAAsC,CACpD,UACA,OACS;AAAA,EACT,OACE,SAAS,WAAW,YACpB,SAAS,UAAU,aACnB,SAAS,gBAAgB,MAAM,eAC/B,SAAS,OAAO,cAAc,QAC9B,SAAS,aAAa,MAAM,YAC5B,SAAS,mBAAmB,MAAM,kBAClC,qBAAoB,SAAS,SAAS,MAAM,OAAO,KACnD,sBAAqB,SAAS,QAAQ,MAAM,MAAM;AAAA;AAI/C,SAAS,oBAAmB,CAAC,QAAkD;AAAA,EACpF,OACE,OAAO,WAAW,eAAe,OAAO,WAAW,YAAY,OAAO,WAAW;AAAA;AAIrF,SAAS,2BAA2B,CAClC,QAC2C;AAAA,EAC3C,QAAQ,aAAa,iBAAiB,iBAAiB;AAAA,EACvD,OAAO;AAAA;;;AChEF,MAAM,6BAA4B,MAAM;AAAA,EAIlC;AAAA,EACA;AAAA,EACA;AAAA,EALF,OAAO;AAAA,EAEhB,WAAW,CACA,cACA,WACA,SACT;AAAA,IACA,MAAM,UAAU,YAAY,gBAAgB,WAAW;AAAA,IAJ9C;AAAA,IACA;AAAA,IACA;AAAA;AAIb;AAAA;AAEO,MAAM,4BAA2B,MAAM;AAAA,EACnC,OAAO;AAClB;AAAA;AAYO,MAAM,iCAAgC,MAAM;AAAA,EACxC,OAAO;AAAA,EACP;AAAA,EACS;AAAA,EAElB,WAAW,CAAC,SAAiB,UAA0C,CAAC,GAAG;AAAA,IACzE,MAAM,OAAO;AAAA,IACb,KAAK,OAAO,QAAQ;AAAA,IACpB,KAAK,QAAQ,QAAQ;AAAA;AAEzB;AAEO,SAAS,8BAA6B,CAAC,OAAyB;AAAA,EACrE,OAAO,iBAAiB,4BAA2B,MAAM,SAAS;AAAA;;;ACnC7D,SAAS,0BAAyB,CAAC,KAEd;AAAA,EAC1B,MAAM,KAAK,KAAK,IAAI,IAAI,MAAM,OAAO,IAAI,EAAE,CAAC;AAAA,EAC5C,MAAM,OAAO,OAAO,IAAI,SAAS,WAAW,KAAK,MAAM,IAAI,IAAI,IAAI,IAAI;AAAA,EACvE,IAAI,CAAC,WAAU,IAAI;AAAA,IAAG,MAAM,QAAQ,IAAI,8BAA8B;AAAA,EAEtE,OAAO;AAAA,IACL;AAAA,IACA,WAAW,KAAK,IAAI,WAAW,aAAa,EAAE;AAAA,IAC9C,WAAW,KAAK,IAAI,WAAW,aAAa,EAAE;AAAA,IAC9C;AAAA,IACA,aAAa,KAAK,IAAI,aAAa,eAAe,EAAE;AAAA,IACpD,WAAW,KAAK,IAAI,WAAW,aAAa,EAAE;AAAA,IAC9C,WAAW,KAAK,IAAI,WAAW,aAAa,EAAE;AAAA,OAC1C,IAAI,aAAa,OAAO,CAAC,IAAI,EAAE,WAAW,KAAK,IAAI,WAAW,aAAa,EAAE,EAAE;AAAA,EACrF;AAAA;AAGK,SAAS,4BAA4B,CAC1C,QACyB;AAAA,EACzB,OAAO,gBAAgB,MAAM;AAAA;AAG/B,SAAS,IAAI,CAAC,OAAgB,QAAgB,IAAoB;AAAA,EAChE,IAAI,OAAO,UAAU,YAAY,MAAM,WAAW;AAAA,IAAG,MAAM,QAAQ,IAAI,GAAG,oBAAoB;AAAA,EAC9F,OAAO;AAAA;AAGT,SAAS,IAAI,CAAC,OAAgB,QAAgB,IAAkB;AAAA,EAC9D,MAAM,SAAS,iBAAiB,QAAQ,OAAO,UAAU,WAAW,IAAI,KAAK,KAAK,IAAI;AAAA,EACtF,IAAI,CAAC,UAAU,CAAC,OAAO,SAAS,OAAO,QAAQ,CAAC;AAAA,IAAG,MAAM,QAAQ,IAAI,GAAG,sBAAsB;AAAA,EAC9F,OAAO;AAAA;AAGT,SAAS,OAAO,CAAC,IAAY,QAAuB;AAAA,EAClD,OAAO,IAAI,MAAM,sCAAsC,mBAAmB,SAAS;AAAA;;;AC3C9E,SAAS,yCAAwC,CACtD,UACA,OACS;AAAA,EACT,OACE,SAAS,WAAW,YACpB,SAAS,OAAO,SAAS,0BACzB,SAAS,MAAM,aACf,SAAS,gBAAgB,MAAM,eAC/B,SAAS,eAAe,MAAM;AAAA;;;ACT3B,SAAS,qCAAoC,CAClD,UACA,OACS;AAAA,EACT,OACE,SAAS,WAAW,YACpB,SAAS,OAAO,SAAS,0BACzB,SAAS,MAAM,aACf,SAAS,gBAAgB,MAAM,eAC/B,SAAS,WAAW,MAAM,UAC1B,SAAS,cAAc,MAAM,aAC7B,SAAS,SAAS,MAAM,QACxB,SAAS,4BAA4B,MAAM,2BAC3C,SAAS,kBAAkB,MAAM;AAAA;;;ACT9B,SAAS,8BAAgD,CAC9D,QACA,UACG;AAAA,EACH,MAAM,UAAU,IAAI;AAAA,EACpB,MAAM,gBAAgB,4BAA2B,OAAO,SAAS;AAAA,IAC/D,iBAAiB,MAAM,yBAAwB,QAAQ;AAAA,IACvD,KAAK,OAAgB,cAAkE;AAAA,MACrF,yBAAwB,QAAQ;AAAA,MAChC,OAAO,UAAU;AAAA;AAAA,EAErB,CAAC;AAAA,EAED,MAAM,OAAO,CAAwB,UAA0B;AAAA,IAC7D,MAAM,WAAW,QAAQ,IAAI,KAAK;AAAA,IAClC,IAAI;AAAA,MAAU,OAAO;AAAA,IAErB,MAAM,QAAQ,IAAI,MAAM,OAAqB;AAAA,MAK3C,GAAG,CAAC,SAAS,UAAU,UAAU;AAAA,QAC/B,yBAAwB,QAAQ;AAAA,QAChC,MAAM,SACJ,YAAY,UAAU,aAAa,YAC/B,gBACA,QAAQ,IAAI,SAAS,UAAU,QAAQ;AAAA,QAC7C,IAAI,OAAO,WAAW,YAAY;AAAA,UAChC,OAAO,IAAI,SAAoB;AAAA,YAC7B,yBAAwB,QAAQ;AAAA,YAChC,OAAO,OAAO,MAAM,SAAS,IAAI;AAAA;AAAA,QAErC;AAAA,QACA,IAAI,UAAU,OAAO,WAAW,UAAU;AAAA,UACxC,OAAO,KAAK,MAAM;AAAA,QACpB;AAAA,QACA,OAAO;AAAA;AAAA,IAEX,CAAC;AAAA,IAED,QAAQ,IAAI,OAAO,KAAK;AAAA,IACxB,OAAO;AAAA;AAAA,EAGT,OAAO,KAAK,MAAM;AAAA;AAGb,SAAS,wBAAuB,CAAC,UAA+B;AAAA,EACrE,IAAI,CAAC,SAAS,GAAG;AAAA,IACf,MAAM,IAAI,yBACR,2EACA,EAAE,MAAM,uBAAuB,CACjC;AAAA,EACF;AAAA;AAGK,SAAS,8BAA6B,GAAU;AAAA,EACrD,MAAM,IAAI,yBAAwB,6DAA6D;AAAA,IAC7F,MAAM;AAAA,EACR,CAAC;AAAA;",
+  "debugId": "8C3E5A53727ECCEF64756E2164756E21",
   "names": []
 }

package/dist/{chunk-nkbev3tr.js → chunk-yv9czyfr.js}

@@ -9,10 +9,10 @@ import {
 import {
   resolveExecutionScopeAuthorization,
   assertAuthorized2
-} from "./chunk-69kt9q43.js";
+} from "./chunk-qkbx3tf6.js";
 import {
   SYNC_RUN_FAILURE_CODES2
-} from "./chunk-6z1q7j19.js";
+} from "./chunk-qq90g05n.js";
 import {
   SyncRunError2
 } from "./chunk-jmfet9r4.js";
@@ -20,7 +20,7 @@ import {
   executionRecordInputFromRuntime,
   ensureExecutionRecord2,
   createPrimitiveExecutionRecord
-} from "./chunk-7g2gjvah.js";
+} from "./chunk-ex496vct.js";
 
 // src/syncs/errors.ts
 class SyncValidationError2 extends Error {

package/dist/{chunk-z5rnrmz1.js → chunk-yw9pyg66.js}

@@ -18,6 +18,7 @@ var MAX_TIMER_DELAY_MS = 2147483647;
 class SchedulerRuntime2 {
   schedules;
   events;
+  timeZone;
   now;
   started = false;
   timer = null;
@@ -26,6 +27,7 @@ class SchedulerRuntime2 {
   constructor(options) {
     this.schedules = options.schedules.filter(isCronSchedule);
     this.events = options.events;
+    this.timeZone = options.timeZone === "UTC" ? undefined : options.timeZone;
     this.now = options.now ?? (() => new Date);
   }
   async start() {
@@ -41,7 +43,7 @@ class SchedulerRuntime2 {
     const now = this.now();
     for (const schedule of this.schedules) {
       try {
-        const next = nextCronOccurrence2(schedule.trigger.expression, now, schedule.trigger.timezone);
+        const next = nextCronOccurrence2(schedule.trigger.expression, now, schedule.trigger.timezone ?? this.timeZone);
         this.nextOccurrences.set(schedule.id, next);
       } catch (error) {
         console.error(`[Sixb] Scheduler failed to compute next occurrence for '${schedule.id}':`, error);
@@ -119,7 +121,7 @@ class SchedulerRuntime2 {
         ]
       }, { source: "Sixb" }));
       try {
-        const next = nextCronOccurrence2(schedule.trigger.expression, occurrenceAt, schedule.trigger.timezone);
+        const next = nextCronOccurrence2(schedule.trigger.expression, occurrenceAt, schedule.trigger.timezone ?? this.timeZone);
         this.nextOccurrences.set(schedule.id, next);
       } catch (error) {
         console.error(`[Sixb] Scheduler failed to compute next occurrence for '${schedule.id}':`, error);
@@ -138,4 +140,4 @@ function isCronSchedule(schedule) {
 }
 export { SchedulerError2, SchedulerValidationError2, SchedulerRuntime2 };
 
-//# debugId=70376D7DF936561764756E2164756E21
+//# debugId=333A174F24D18A6464756E2164756E21

package/dist/chunk-yw9pyg66.js.map

@@ -0,0 +1,11 @@
+{
+  "version": 3,
+  "sources": ["../src/scheduler/errors.ts", "../src/scheduler/runtime.ts"],
+  "sourcesContent": [
+    "export class SchedulerError extends Error {\n  readonly name = \"SchedulerError\"\n}\n\nexport class SchedulerValidationError extends Error {\n  readonly name = \"SchedulerValidationError\"\n}\n",
+    "import type { DomainEventLog } from \"../events\"\nimport { nextCronOccurrence } from \"../schedules/next-occurrence\"\nimport type { CronScheduleDefinition, ScheduleDefinition } from \"../schedules/types\"\nimport { SchedulerValidationError } from \"./errors\"\n\n/** Matches the `onError` flush budget: long enough for a healthy broker, short enough to shut down. */\nconst DEFAULT_EMIT_DRAIN_TIMEOUT_MS = 5_000\n\n/**\n * Largest delay `setTimeout` accepts before it overflows its 32-bit counter.\n *\n * Node coerces anything larger to `1`, so an unclamped monthly or yearly occurrence would fire\n * immediately, find nothing due, and re-arm on the next tick -- spinning the event loop and\n * emitting a `TimeoutOverflowWarning` for every re-arm until the occurrence came into range.\n */\nconst MAX_TIMER_DELAY_MS = 2_147_483_647\n\nexport interface SchedulerRuntimeOptions {\n  schedules: readonly ScheduleDefinition[]\n  events: DomainEventLog\n  /** Evaluates cron schedules that set no time zone of their own. Defaults to UTC. */\n  timeZone?: string\n  now?: () => Date\n}\n\n/** Process lifecycle surface exposed by SixbHost. */\nexport interface SchedulerController {\n  start(): Promise<void>\n  stop(): Promise<void>\n}\n\nexport class SchedulerRuntime implements SchedulerController {\n  private readonly schedules: readonly CronScheduleDefinition[]\n  private readonly events: DomainEventLog\n  private readonly timeZone: string | undefined\n  private readonly now: () => Date\n  private started = false\n  private timer: ReturnType<typeof setTimeout> | null = null\n  private readonly nextOccurrences = new Map<string, Date>()\n  private readonly pendingEmits = new Set<Promise<void>>()\n\n  constructor(options: SchedulerRuntimeOptions) {\n    this.schedules = options.schedules.filter(isCronSchedule)\n    this.events = options.events\n    // `undefined` keeps the arithmetic UTC path; an explicit \"UTC\" would go through Intl.\n    this.timeZone = options.timeZone === \"UTC\" ? undefined : options.timeZone\n    this.now = options.now ?? (() => new Date())\n  }\n\n  async start(): Promise<void> {\n    if (this.started) return\n\n    const seenIds = new Set<string>()\n    for (const schedule of this.schedules) {\n      if (seenIds.has(schedule.id)) {\n        throw new SchedulerValidationError(`Duplicate schedule id '${schedule.id}'.`)\n      }\n      seenIds.add(schedule.id)\n    }\n\n    const now = this.now()\n    for (const schedule of this.schedules) {\n      // Syntactically valid expressions can still have no reachable occurrence -- `0 0 30 2 *`\n      // parses but never matches. `tick()` already tolerates that per schedule; start-up must\n      // agree, or one unschedulable expression stops every other schedule in the project and\n      // crash-loops the scheduler role.\n      try {\n        const next = nextCronOccurrence(\n          schedule.trigger.expression,\n          now,\n          schedule.trigger.timezone ?? this.timeZone\n        )\n        this.nextOccurrences.set(schedule.id, next)\n      } catch (error) {\n        console.error(\n          `[Sixb] Scheduler failed to compute next occurrence for '${schedule.id}':`,\n          error\n        )\n      }\n    }\n\n    this.armTimer()\n    this.started = true\n  }\n\n  async stop(): Promise<void> {\n    if (this.timer !== null) {\n      clearTimeout(this.timer)\n      this.timer = null\n    }\n    this.nextOccurrences.clear()\n    this.started = false\n    await this.drainEmits()\n  }\n\n  /**\n   * Wait for in-flight `schedule.triggered` emits so shutdown does not return mid-delivery.\n   *\n   * Bounded on purpose. `emit` never rejects, so an emit that never *settles* — a broker that accepts\n   * the call and then hangs — would make `stop()` wait forever, turning a provider stall into a\n   * process that cannot shut down. Losing the wait is recoverable; losing shutdown is not.\n   */\n  private async drainEmits(timeoutMs = DEFAULT_EMIT_DRAIN_TIMEOUT_MS): Promise<void> {\n    if (this.pendingEmits.size === 0) return\n\n    let timer: ReturnType<typeof setTimeout> | undefined\n    try {\n      const drained = await Promise.race([\n        Promise.all([...this.pendingEmits]).then(() => true),\n        new Promise<false>((resolve) => {\n          timer = setTimeout(() => resolve(false), timeoutMs)\n        }),\n      ])\n      if (!drained) {\n        console.error(\n          `[Sixb] Timed out after ${timeoutMs}ms waiting for ${this.pendingEmits.size} schedule emit(s) to settle.`\n        )\n      }\n    } finally {\n      if (timer) clearTimeout(timer)\n    }\n  }\n\n  private armTimer(): void {\n    if (this.timer !== null) {\n      clearTimeout(this.timer)\n      this.timer = null\n    }\n\n    let earliest: Date | null = null\n    for (const date of this.nextOccurrences.values()) {\n      if (earliest === null || date.getTime() < earliest.getTime()) {\n        earliest = date\n      }\n    }\n\n    if (earliest === null) return\n\n    // Waking early is harmless: `tick()` re-arms from the same occurrence map, so a clamped delay\n    // just becomes several sleeps instead of one.\n    const delayMs = Math.min(\n      Math.max(0, earliest.getTime() - this.now().getTime()),\n      MAX_TIMER_DELAY_MS\n    )\n    this.timer = setTimeout(() => this.tick(), delayMs)\n  }\n\n  private tick(): void {\n    const now = this.now()\n\n    // Collect all due schedules\n    const dueSchedules: Array<{ schedule: CronScheduleDefinition; occurrenceAt: Date }> = []\n    for (const schedule of this.schedules) {\n      const occurrence = this.nextOccurrences.get(schedule.id)\n      if (occurrence && occurrence.getTime() <= now.getTime()) {\n        dueSchedules.push({ schedule, occurrenceAt: occurrence })\n      }\n    }\n\n    // Emit events and recalculate next occurrences\n    for (const { schedule, occurrenceAt } of dueSchedules) {\n      const occurrenceAtIso = occurrenceAt.toISOString()\n      // `emit` reports instead of rejecting, so nothing is swallowed here. The previous\n      // `void this.events.append(...)` inside a `try` could not observe a rejection at all: a broker\n      // outage meant the schedule silently never fired.\n      this.track(\n        this.events.emit(\n          {\n            events: [\n              {\n                type: \"schedule.triggered\",\n                payload: {\n                  scheduleId: schedule.id,\n                  occurrenceAt: occurrenceAtIso,\n                  triggeredAt: now.toISOString(),\n                  occurrenceKey: `${schedule.id}:${occurrenceAtIso}`,\n                },\n              },\n            ],\n          },\n          { source: \"Sixb\" }\n        )\n      )\n\n      // Calculate next from the logical occurrence time (not now) to avoid drift\n      try {\n        const next = nextCronOccurrence(\n          schedule.trigger.expression,\n          occurrenceAt,\n          schedule.trigger.timezone ?? this.timeZone\n        )\n        this.nextOccurrences.set(schedule.id, next)\n      } catch (error) {\n        console.error(\n          `[Sixb] Scheduler failed to compute next occurrence for '${schedule.id}':`,\n          error\n        )\n        this.nextOccurrences.delete(schedule.id)\n      }\n    }\n\n    this.armTimer()\n  }\n\n  /** Keep in-flight emits awaitable so `stop()` does not return mid-delivery. */\n  private track(emit: Promise<void>): void {\n    const tracked = emit.finally(() => this.pendingEmits.delete(tracked))\n    this.pendingEmits.add(tracked)\n  }\n}\n\nfunction isCronSchedule(schedule: ScheduleDefinition): schedule is CronScheduleDefinition {\n  return schedule.trigger.type === \"cron\"\n}\n"
+  ],
+  "mappings": ";;;;;;AAAO,MAAM,wBAAuB,MAAM;AAAA,EAC/B,OAAO;AAClB;AAAA;AAEO,MAAM,kCAAiC,MAAM;AAAA,EACzC,OAAO;AAClB;;ACAA,IAAM,gCAAgC;AAStC,IAAM,qBAAqB;AAAA;AAgBpB,MAAM,kBAAgD;AAAA,EAC1C;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACT,UAAU;AAAA,EACV,QAA8C;AAAA,EACrC,kBAAkB,IAAI;AAAA,EACtB,eAAe,IAAI;AAAA,EAEpC,WAAW,CAAC,SAAkC;AAAA,IAC5C,KAAK,YAAY,QAAQ,UAAU,OAAO,cAAc;AAAA,IACxD,KAAK,SAAS,QAAQ;AAAA,IAEtB,KAAK,WAAW,QAAQ,aAAa,QAAQ,YAAY,QAAQ;AAAA,IACjE,KAAK,MAAM,QAAQ,QAAQ,MAAM,IAAI;AAAA;AAAA,OAGjC,MAAK,GAAkB;AAAA,IAC3B,IAAI,KAAK;AAAA,MAAS;AAAA,IAElB,MAAM,UAAU,IAAI;AAAA,IACpB,WAAW,YAAY,KAAK,WAAW;AAAA,MACrC,IAAI,QAAQ,IAAI,SAAS,EAAE,GAAG;AAAA,QAC5B,MAAM,IAAI,0BAAyB,0BAA0B,SAAS,MAAM;AAAA,MAC9E;AAAA,MACA,QAAQ,IAAI,SAAS,EAAE;AAAA,IACzB;AAAA,IAEA,MAAM,MAAM,KAAK,IAAI;AAAA,IACrB,WAAW,YAAY,KAAK,WAAW;AAAA,MAKrC,IAAI;AAAA,QACF,MAAM,OAAO,oBACX,SAAS,QAAQ,YACjB,KACA,SAAS,QAAQ,YAAY,KAAK,QACpC;AAAA,QACA,KAAK,gBAAgB,IAAI,SAAS,IAAI,IAAI;AAAA,QAC1C,OAAO,OAAO;AAAA,QACd,QAAQ,MACN,2DAA2D,SAAS,QACpE,KACF;AAAA;AAAA,IAEJ;AAAA,IAEA,KAAK,SAAS;AAAA,IACd,KAAK,UAAU;AAAA;AAAA,OAGX,KAAI,GAAkB;AAAA,IAC1B,IAAI,KAAK,UAAU,MAAM;AAAA,MACvB,aAAa,KAAK,KAAK;AAAA,MACvB,KAAK,QAAQ;AAAA,IACf;AAAA,IACA,KAAK,gBAAgB,MAAM;AAAA,IAC3B,KAAK,UAAU;AAAA,IACf,MAAM,KAAK,WAAW;AAAA;AAAA,OAUV,WAAU,CAAC,YAAY,+BAA8C;AAAA,IACjF,IAAI,KAAK,aAAa,SAAS;AAAA,MAAG;AAAA,IAElC,IAAI;AAAA,IACJ,IAAI;AAAA,MACF,MAAM,UAAU,MAAM,QAAQ,KAAK;AAAA,QACjC,QAAQ,IAAI,CAAC,GAAG,KAAK,YAAY,CAAC,EAAE,KAAK,MAAM,IAAI;AAAA,QACnD,IAAI,QAAe,CAAC,YAAY;AAAA,UAC9B,QAAQ,WAAW,MAAM,QAAQ,KAAK,GAAG,SAAS;AAAA,SACnD;AAAA,MACH,CAAC;AAAA,MACD,IAAI,CAAC,SAAS;AAAA,QACZ,QAAQ,MACN,0BAA0B,2BAA2B,KAAK,aAAa,kCACzE;AAAA,MACF;AAAA,cACA;AAAA,MACA,IAAI;AAAA,QAAO,aAAa,KAAK;AAAA;AAAA;AAAA,EAIzB,QAAQ,GAAS;AAAA,IACvB,IAAI,KAAK,UAAU,MAAM;AAAA,MACvB,aAAa,KAAK,KAAK;AAAA,MACvB,KAAK,QAAQ;AAAA,IACf;AAAA,IAEA,IAAI,WAAwB;AAAA,IAC5B,WAAW,QAAQ,KAAK,gBAAgB,OAAO,GAAG;AAAA,MAChD,IAAI,aAAa,QAAQ,KAAK,QAAQ,IAAI,SAAS,QAAQ,GAAG;AAAA,QAC5D,WAAW;AAAA,MACb;AAAA,IACF;AAAA,IAEA,IAAI,aAAa;AAAA,MAAM;AAAA,IAIvB,MAAM,UAAU,KAAK,IACnB,KAAK,IAAI,GAAG,SAAS,QAAQ,IAAI,KAAK,IAAI,EAAE,QAAQ,CAAC,GACrD,kBACF;AAAA,IACA,KAAK,QAAQ,WAAW,MAAM,KAAK,KAAK,GAAG,OAAO;AAAA;AAAA,EAG5C,IAAI,GAAS;AAAA,IACnB,MAAM,MAAM,KAAK,IAAI;AAAA,IAGrB,MAAM,eAAgF,CAAC;AAAA,IACvF,WAAW,YAAY,KAAK,WAAW;AAAA,MACrC,MAAM,aAAa,KAAK,gBAAgB,IAAI,SAAS,EAAE;AAAA,MACvD,IAAI,cAAc,WAAW,QAAQ,KAAK,IAAI,QAAQ,GAAG;AAAA,QACvD,aAAa,KAAK,EAAE,UAAU,cAAc,WAAW,CAAC;AAAA,MAC1D;AAAA,IACF;AAAA,IAGA,aAAa,UAAU,kBAAkB,cAAc;AAAA,MACrD,MAAM,kBAAkB,aAAa,YAAY;AAAA,MAIjD,KAAK,MACH,KAAK,OAAO,KACV;AAAA,QACE,QAAQ;AAAA,UACN;AAAA,YACE,MAAM;AAAA,YACN,SAAS;AAAA,cACP,YAAY,SAAS;AAAA,cACrB,cAAc;AAAA,cACd,aAAa,IAAI,YAAY;AAAA,cAC7B,eAAe,GAAG,SAAS,MAAM;AAAA,YACnC;AAAA,UACF;AAAA,QACF;AAAA,MACF,GACA,EAAE,QAAQ,OAAO,CACnB,CACF;AAAA,MAGA,IAAI;AAAA,QACF,MAAM,OAAO,oBACX,SAAS,QAAQ,YACjB,cACA,SAAS,QAAQ,YAAY,KAAK,QACpC;AAAA,QACA,KAAK,gBAAgB,IAAI,SAAS,IAAI,IAAI;AAAA,QAC1C,OAAO,OAAO;AAAA,QACd,QAAQ,MACN,2DAA2D,SAAS,QACpE,KACF;AAAA,QACA,KAAK,gBAAgB,OAAO,SAAS,EAAE;AAAA;AAAA,IAE3C;AAAA,IAEA,KAAK,SAAS;AAAA;AAAA,EAIR,KAAK,CAAC,MAA2B;AAAA,IACvC,MAAM,UAAU,KAAK,QAAQ,MAAM,KAAK,aAAa,OAAO,OAAO,CAAC;AAAA,IACpE,KAAK,aAAa,IAAI,OAAO;AAAA;AAEjC;AAEA,SAAS,cAAc,CAAC,UAAkE;AAAA,EACxF,OAAO,SAAS,QAAQ,SAAS;AAAA;",
+  "debugId": "333A174F24D18A6464756E2164756E21",
+  "names": []
+}

package/dist/{chunk-cxj8y8t0.js → chunk-za5yd58j.js}

@@ -2,11 +2,11 @@
 import {
   isPrimitiveSchema,
   primitiveTraits
-} from "./chunk-swxzncrv.js";
+} from "./chunk-y05543x6.js";
 import {
   ShareDefinitionError2,
   snapshotShareDefinition
-} from "./chunk-2xvgy3x5.js";
+} from "./chunk-6h5m9xjx.js";
 import {
   snapshotShareAccessPlan
 } from "./chunk-br3k6qbf.js";

package/dist/{chunk-zb47r1c8.js → chunk-zb77kjth.js}

@@ -7,13 +7,13 @@ import {
   ConnectorError2,
   createConnectorCodedError,
   getConnectorExecutionSourceResolver
-} from "./chunk-nvymebc1.js";
+} from "./chunk-f1zxad2t.js";
 import {
   isDatasetDefinition2
-} from "./chunk-cd234ba4.js";
+} from "./chunk-rz53yb4v.js";
 import {
   SyncValidationError2
-} from "./chunk-nkbev3tr.js";
+} from "./chunk-yv9czyfr.js";
 import {
   isOAuthConnectorAdapter,
   isConnectorDefinition

package/dist/{chunk-dp7yk20b.js → chunk-zxawp1n2.js}

@@ -1,7 +1,7 @@
 // @bun
 import {
   principalsEqual2
-} from "./chunk-2xvgy3x5.js";
+} from "./chunk-6h5m9xjx.js";
 import {
   createFileUploadId2,
   isFileUploadSessionExpired,

package/dist/datasets/builders.d.ts

@@ -1,6 +1,9 @@
+import type { MarkingDefinition } from "../security/types";
 import type { DatasetColumnDefinition, DatasetColumnNameOf, DatasetColumnType, DatasetDefinition, DatasetPrimaryKey } from "./types";
 type DatasetColumnOptions = {
     readonly nullable?: boolean;
+    /** Principals need a clearance for every marking to read this column. */
+    readonly markings?: readonly MarkingDefinition[];
 };
 type DefineDatasetOptions = {
     readonly schema: readonly DatasetColumnDefinition[];
@@ -52,10 +55,18 @@ type DerivedBaseColumns<TParent extends DatasetDefinition, TOptions extends Deri
 type DerivedColumns<TParent extends DatasetDefinition, TOptions extends DeriveDatasetOptions<TParent> | undefined> = TOptions extends {
     readonly add: infer TAdd;
 } ? TAdd extends readonly DatasetColumnDefinition[] ? AddColumns<DerivedBaseColumns<TParent, TOptions>, TAdd> : DerivedBaseColumns<TParent, TOptions> : DerivedBaseColumns<TParent, TOptions>;
+/** The column records marking ids; only a declared, non-empty list marks it. */
+type MarkingsFromOptions<TOptions> = TOptions extends {
+    readonly markings: readonly [MarkingDefinition, ...MarkingDefinition[]];
+} ? {
+    readonly markings: readonly string[];
+} : {
+    readonly markings?: readonly string[];
+};
 type DatasetColumnResult<TName extends string, TType extends DatasetColumnType, TOptions extends DatasetColumnOptions | undefined> = {
     readonly name: TName;
     readonly type: TType;
-} & FieldFromOptions<TOptions, "nullable", boolean>;
+} & FieldFromOptions<TOptions, "nullable", boolean> & MarkingsFromOptions<TOptions>;
 type DatasetDefinitionResult<TId extends string, TOptions extends DefineDatasetOptions> = Omit<DatasetDefinition<TId, TOptions["schema"]>, "primaryKey" | "sequenceBy" | "partitionBy" | "description"> & FieldFromOptions<TOptions, "sequenceBy", string> & FieldFromOptions<TOptions, "primaryKey", DatasetPrimaryKey> & FieldFromOptions<TOptions, "partitionBy", readonly string[]> & FieldFromOptions<TOptions, "description", string>;
 type DerivedDatasetDefinitionResult<TId extends string, TParent extends DatasetDefinition, TOptions extends DeriveDatasetOptions<TParent> | undefined> = Omit<DatasetDefinition<TId, DerivedColumns<TParent, TOptions>>, "primaryKey" | "sequenceBy" | "partitionBy" | "description"> & FieldFromOptions<TOptions, "sequenceBy", string> & FieldFromOptions<TOptions, "primaryKey", DatasetPrimaryKey> & FieldFromOptions<TOptions, "partitionBy", readonly string[]> & FieldFromOptions<TOptions, "description", string>;
 type CheckedDeriveDatasetOptions<TParent extends DatasetDefinition, TOptions extends DeriveDatasetOptions<TParent>> = TOptions & {

package/dist/datasets/builders.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"builders.d.ts","sourceRoot":"","sources":["../../src/datasets/builders.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EACV,uBAAuB,EACvB,mBAAmB,EACnB,iBAAiB,EACjB,iBAAiB,EACjB,iBAAiB,EAClB,MAAM,SAAS,CAAA;AAGhB,KAAK,oBAAoB,GAAG;IAC1B,QAAQ,CAAC,QAAQ,CAAC,EAAE,OAAO,CAAA;CAC5B,CAAA;AAED,KAAK,oBAAoB,GAAG;IAC1B,QAAQ,CAAC,MAAM,EAAE,SAAS,uBAAuB,EAAE,CAAA;IACnD,QAAQ,CAAC,UAAU,CAAC,EAAE,iBAAiB,CAAA;IACvC,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAA;IAC5B,QAAQ,CAAC,WAAW,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;IACxC,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAA;CAC9B,CAAA;AAED,KAAK,oBAAoB,CAAC,OAAO,SAAS,iBAAiB,IAAI;IAC7D,QAAQ,CAAC,IAAI,CAAC,EAAE,SAAS,mBAAmB,CAAC,OAAO,CAAC,EAAE,CAAA;IACvD,QAAQ,CAAC,GAAG,CAAC,EAAE,SAAS,uBAAuB,EAAE,CAAA;IACjD,QAAQ,CAAC,UAAU,CAAC,EAAE,iBAAiB,CAAA;IACvC,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAA;IAC5B,QAAQ,CAAC,WAAW,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;IACxC,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAA;CAC9B,CAAA;AAED,KAAK,gBAAgB,CAAC,QAAQ,EAAE,IAAI,SAAS,MAAM,EAAE,SAAS,IAAI,QAAQ,SAAS;IACjF,QAAQ,EAAE,CAAC,IAAI,IAAI,GAAG,MAAM,MAAM;CACnC,GACG,MAAM,SAAS,SAAS,GACtB;IAAE,QAAQ,EAAE,CAAC,IAAI,IAAI,GAAG,MAAM;CAAE,GAChC;IAAE,QAAQ,EAAE,CAAC,IAAI,IAAI,CAAC,CAAC,EAAE,SAAS;CAAE,GACtC;IAAE,QAAQ,EAAE,CAAC,IAAI,IAAI,CAAC,CAAC,EAAE,SAAS;CAAE,CAAA;AAExC,KAAK,YAAY,CAAC,QAAQ,SAAS,SAAS,uBAAuB,EAAE,IAAI,QAAQ,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,CAAA;AAEjG,KAAK,kBAAkB,CACrB,QAAQ,SAAS,SAAS,uBAAuB,EAAE,EACnD,KAAK,SAAS,YAAY,CAAC,QAAQ,CAAC,IAClC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE;IAAE,QAAQ,CAAC,IAAI,EAAE,KAAK,CAAA;CAAE,CAAC,CAAA;AAEvD,KAAK,sBAAsB,CAAC,QAAQ,SAAS,SAAS,uBAAuB,EAAE,IAC7E,MAAM,SAAS,YAAY,CAAC,QAAQ,CAAC,GACjC,MAAM,GACN;KACG,KAAK,IAAI,YAAY,CAAC,QAAQ,CAAC,GAAG,kBAAkB,CACnD,QAAQ,EACR,KAAK,CACN,CAAC,MAAM,CAAC,SAAS,QAAQ,GACtB,kBAAkB,CAAC,QAAQ,EAAE,KAAK,CAAC,SAAS;QAAE,QAAQ,CAAC,QAAQ,EAAE,IAAI,CAAA;KAAE,GACrE,KAAK,GACL,KAAK,GACP,KAAK;CACV,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC,CAAA;AAE/B,KAAK,2BAA2B,CAAC,QAAQ,SAAS,oBAAoB,IAAI,QAAQ,GAAG;IACnF,QAAQ,CAAC,UAAU,CAAC,EAAE,iBAAiB,CAAC,sBAAsB,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAA;IACnF,QAAQ,CAAC,UAAU,CAAC,EAAE,oBAAoB,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAA;CAC/D,CAAA;AAED,KAAK,oBAAoB,CAAC,QAAQ,SAAS,SAAS,uBAAuB,EAAE,IAC3E,MAAM,SAAS,YAAY,CAAC,QAAQ,CAAC,GACjC,MAAM,GACN;KACG,KAAK,IAAI,YAAY,CAAC,QAAQ,CAAC,GAAG,kBAAkB,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC,MAAM,CAAC,SAC1E,WAAW,GACX,OAAO,GACP,kBAAkB,CAAC,QAAQ,EAAE,KAAK,CAAC,SAAS;QAAE,QAAQ,CAAC,QAAQ,EAAE,IAAI,CAAA;KAAE,GACrE,KAAK,GACL,KAAK,GACP,KAAK;CACV,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC,CAAA;AAE/B,KAAK,WAAW,CACd,QAAQ,SAAS,SAAS,uBAAuB,EAAE,EACnD,MAAM,SAAS,SAAS,YAAY,CAAC,QAAQ,CAAC,EAAE,IAC9C,MAAM,SAAS,SAAS,CAAC,MAAM,KAAK,EAAE,GAAG,MAAM,KAAK,CAAC,GACrD,KAAK,SAAS,YAAY,CAAC,QAAQ,CAAC,GAClC,KAAK,SAAS,SAAS,YAAY,CAAC,QAAQ,CAAC,EAAE,GAC7C,SAAS,CAAC,kBAAkB,CAAC,QAAQ,EAAE,KAAK,CAAC,EAAE,GAAG,WAAW,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC,GAC/E,KAAK,GACP,KAAK,GACP,MAAM,SAAS,SAAS,EAAE,GACxB,SAAS,EAAE,GACX,SAAS,kBAAkB,CAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,CAAA;AAE7D,KAAK,UAAU,CACb,QAAQ,SAAS,SAAS,uBAAuB,EAAE,EACnD,IAAI,SAAS,SAAS,uBAAuB,EAAE,IAC7C,SAAS,CAAC,GAAG,QAAQ,EAAE,GAAG,IAAI,CAAC,CAAA;AAEnC,KAAK,kBAAkB,CACrB,OAAO,SAAS,iBAAiB,EACjC,QAAQ,SAAS,oBAAoB,CAAC,OAAO,CAAC,GAAG,SAAS,IACxD,QAAQ,SAAS;IAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,KAAK,CAAA;CAAE,GAC/C,KAAK,SAAS,SAAS,mBAAmB,CAAC,OAAO,CAAC,EAAE,GACnD,WAAW,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,SAAS,CAAC,EAAE,KAAK,CAAC,GAChD,OAAO,CAAC,QAAQ,CAAC,CAAC,SAAS,CAAC,GAC9B,OAAO,CAAC,QAAQ,CAAC,CAAC,SAAS,CAAC,CAAA;AAEhC,KAAK,cAAc,CACjB,OAAO,SAAS,iBAAiB,EACjC,QAAQ,SAAS,oBAAoB,CAAC,OAAO,CAAC,GAAG,SAAS,IACxD,QAAQ,SAAS;IAAE,QAAQ,CAAC,GAAG,EAAE,MAAM,IAAI,CAAA;CAAE,GAC7C,IAAI,SAAS,SAAS,uBAAuB,EAAE,GAC7C,UAAU,CAAC,kBAAkB,CAAC,OAAO,EAAE,QAAQ,CAAC,EAAE,IAAI,CAAC,GACvD,kBAAkB,CAAC,OAAO,EAAE,QAAQ,CAAC,GACvC,kBAAkB,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAA;AAEzC,KAAK,mBAAmB,CACtB,KAAK,SAAS,MAAM,EACpB,KAAK,SAAS,iBAAiB,EAC/B,QAAQ,SAAS,oBAAoB,GAAG,SAAS,IAC/C;IACF,QAAQ,CAAC,IAAI,EAAE,KAAK,CAAA;IACpB,QAAQ,CAAC,IAAI,EAAE,KAAK,CAAA;CACrB,GAAG,gBAAgB,CAAC,QAAQ,EAAE,UAAU,EAAE,OAAO,CAAC,CAAA;AAEnD,KAAK,uBAAuB,CAAC,GAAG,SAAS,MAAM,EAAE,QAAQ,SAAS,oBAAoB,IAAI,IAAI,CAC5F,iBAAiB,CAAC,GAAG,EAAE,QAAQ,CAAC,QAAQ,CAAC,CAAC,EAC1C,YAAY,GAAG,YAAY,GAAG,aAAa,GAAG,aAAa,CAC5D,GACC,gBAAgB,CAAC,QAAQ,EAAE,YAAY,EAAE,MAAM,CAAC,GAChD,gBAAgB,CAAC,QAAQ,EAAE,YAAY,EAAE,iBAAiB,CAAC,GAC3D,gBAAgB,CAAC,QAAQ,EAAE,aAAa,EAAE,SAAS,MAAM,EAAE,CAAC,GAC5D,gBAAgB,CAAC,QAAQ,EAAE,aAAa,EAAE,MAAM,CAAC,CAAA;AAEnD,KAAK,8BAA8B,CACjC,GAAG,SAAS,MAAM,EAClB,OAAO,SAAS,iBAAiB,EACjC,QAAQ,SAAS,oBAAoB,CAAC,OAAO,CAAC,GAAG,SAAS,IACxD,IAAI,CACN,iBAAiB,CAAC,GAAG,EAAE,cAAc,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,EACzD,YAAY,GAAG,YAAY,GAAG,aAAa,GAAG,aAAa,CAC5D,GACC,gBAAgB,CAAC,QAAQ,EAAE,YAAY,EAAE,MAAM,CAAC,GAChD,gBAAgB,CAAC,QAAQ,EAAE,YAAY,EAAE,iBAAiB,CAAC,GAC3D,gBAAgB,CAAC,QAAQ,EAAE,aAAa,EAAE,SAAS,MAAM,EAAE,CAAC,GAC5D,gBAAgB,CAAC,QAAQ,EAAE,aAAa,EAAE,MAAM,CAAC,CAAA;AAEnD,KAAK,2BAA2B,CAC9B,OAAO,SAAS,iBAAiB,EACjC,QAAQ,SAAS,oBAAoB,CAAC,OAAO,CAAC,IAC5C,QAAQ,GAAG;IACb,QAAQ,CAAC,UAAU,CAAC,EAAE,iBAAiB,CAAC,sBAAsB,CAAC,cAAc,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAA;IAClG,QAAQ,CAAC,UAAU,CAAC,EAAE,oBAAoB,CAAC,cAAc,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAA;CAC9E,CAAA;AAED,wBAAgB,GAAG,CAAC,KAAK,CAAC,KAAK,SAAS,MAAM,EAAE,KAAK,CAAC,KAAK,SAAS,iBAAiB,EACnF,IAAI,EAAE,KAAK,EACX,IAAI,EAAE,KAAK,GACV,mBAAmB,CAAC,KAAK,EAAE,KAAK,EAAE,SAAS,CAAC,CAAA;AAC/C,wBAAgB,GAAG,CACjB,KAAK,CAAC,KAAK,SAAS,MAAM,EAC1B,KAAK,CAAC,KAAK,SAAS,iBAAiB,EACrC,KAAK,CAAC,QAAQ,SAAS,oBAAoB,EAC3C,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,GAAG,mBAAmB,CAAC,KAAK,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAA;AAiG3F,iBAAS,0BAA0B,CAAC,GAAG,SAAS,MAAM,EAAE,EAAE,EAAE,GAAG;;eAGvC,OAAO,SAAS,iBAAiB,UAC7C,OAAO,GACd,8BAA8B,CAAC,GAAG,EAAE,OAAO,EAAE,SAAS,CAAC;eAElD,OAAO,SAAS,iBAAiB,QACjC,QAAQ,SAAS,oBAAoB,CAAC,OAAO,CAAC,UAE5C,OAAO,WACN,2BAA2B,CAAC,OAAO,EAAE,QAAQ,CAAC,GACtD,8BAA8B,CAAC,GAAG,EAAE,OAAO,EAAE,QAAQ,CAAC;;EAS1D;AAED,wBAAgB,aAAa,CAAC,KAAK,CAAC,GAAG,SAAS,MAAM,EACpD,EAAE,EAAE,GAAG,GACN,UAAU,CAAC,OAAO,0BAA0B,CAAC,GAAG,CAAC,CAAC,CAAA;AACrD,wBAAgB,aAAa,CAC3B,KAAK,CAAC,GAAG,SAAS,MAAM,EACxB,KAAK,CAAC,QAAQ,SAAS,oBAAoB,EAC3C,EAAE,EAAE,GAAG,EAAE,OAAO,EAAE,2BAA2B,CAAC,QAAQ,CAAC,GAAG,uBAAuB,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAA"}
+{"version":3,"file":"builders.d.ts","sourceRoot":"","sources":["../../src/datasets/builders.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAA;AAE1D,OAAO,KAAK,EACV,uBAAuB,EACvB,mBAAmB,EACnB,iBAAiB,EACjB,iBAAiB,EACjB,iBAAiB,EAClB,MAAM,SAAS,CAAA;AAGhB,KAAK,oBAAoB,GAAG;IAC1B,QAAQ,CAAC,QAAQ,CAAC,EAAE,OAAO,CAAA;IAC3B,yEAAyE;IACzE,QAAQ,CAAC,QAAQ,CAAC,EAAE,SAAS,iBAAiB,EAAE,CAAA;CACjD,CAAA;AAED,KAAK,oBAAoB,GAAG;IAC1B,QAAQ,CAAC,MAAM,EAAE,SAAS,uBAAuB,EAAE,CAAA;IACnD,QAAQ,CAAC,UAAU,CAAC,EAAE,iBAAiB,CAAA;IACvC,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAA;IAC5B,QAAQ,CAAC,WAAW,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;IACxC,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAA;CAC9B,CAAA;AAED,KAAK,oBAAoB,CAAC,OAAO,SAAS,iBAAiB,IAAI;IAC7D,QAAQ,CAAC,IAAI,CAAC,EAAE,SAAS,mBAAmB,CAAC,OAAO,CAAC,EAAE,CAAA;IACvD,QAAQ,CAAC,GAAG,CAAC,EAAE,SAAS,uBAAuB,EAAE,CAAA;IACjD,QAAQ,CAAC,UAAU,CAAC,EAAE,iBAAiB,CAAA;IACvC,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAA;IAC5B,QAAQ,CAAC,WAAW,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;IACxC,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAA;CAC9B,CAAA;AAED,KAAK,gBAAgB,CAAC,QAAQ,EAAE,IAAI,SAAS,MAAM,EAAE,SAAS,IAAI,QAAQ,SAAS;IACjF,QAAQ,EAAE,CAAC,IAAI,IAAI,GAAG,MAAM,MAAM;CACnC,GACG,MAAM,SAAS,SAAS,GACtB;IAAE,QAAQ,EAAE,CAAC,IAAI,IAAI,GAAG,MAAM;CAAE,GAChC;IAAE,QAAQ,EAAE,CAAC,IAAI,IAAI,CAAC,CAAC,EAAE,SAAS;CAAE,GACtC;IAAE,QAAQ,EAAE,CAAC,IAAI,IAAI,CAAC,CAAC,EAAE,SAAS;CAAE,CAAA;AAExC,KAAK,YAAY,CAAC,QAAQ,SAAS,SAAS,uBAAuB,EAAE,IAAI,QAAQ,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,CAAA;AAEjG,KAAK,kBAAkB,CACrB,QAAQ,SAAS,SAAS,uBAAuB,EAAE,EACnD,KAAK,SAAS,YAAY,CAAC,QAAQ,CAAC,IAClC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE;IAAE,QAAQ,CAAC,IAAI,EAAE,KAAK,CAAA;CAAE,CAAC,CAAA;AAEvD,KAAK,sBAAsB,CAAC,QAAQ,SAAS,SAAS,uBAAuB,EAAE,IAC7E,MAAM,SAAS,YAAY,CAAC,QAAQ,CAAC,GACjC,MAAM,GACN;KACG,KAAK,IAAI,YAAY,CAAC,QAAQ,CAAC,GAAG,kBAAkB,CACnD,QAAQ,EACR,KAAK,CACN,CAAC,MAAM,CAAC,SAAS,QAAQ,GACtB,kBAAkB,CAAC,QAAQ,EAAE,KAAK,CAAC,SAAS;QAAE,QAAQ,CAAC,QAAQ,EAAE,IAAI,CAAA;KAAE,GACrE,KAAK,GACL,KAAK,GACP,KAAK;CACV,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC,CAAA;AAE/B,KAAK,2BAA2B,CAAC,QAAQ,SAAS,oBAAoB,IAAI,QAAQ,GAAG;IACnF,QAAQ,CAAC,UAAU,CAAC,EAAE,iBAAiB,CAAC,sBAAsB,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAA;IACnF,QAAQ,CAAC,UAAU,CAAC,EAAE,oBAAoB,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAA;CAC/D,CAAA;AAED,KAAK,oBAAoB,CAAC,QAAQ,SAAS,SAAS,uBAAuB,EAAE,IAC3E,MAAM,SAAS,YAAY,CAAC,QAAQ,CAAC,GACjC,MAAM,GACN;KACG,KAAK,IAAI,YAAY,CAAC,QAAQ,CAAC,GAAG,kBAAkB,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC,MAAM,CAAC,SAC1E,WAAW,GACX,OAAO,GACP,kBAAkB,CAAC,QAAQ,EAAE,KAAK,CAAC,SAAS;QAAE,QAAQ,CAAC,QAAQ,EAAE,IAAI,CAAA;KAAE,GACrE,KAAK,GACL,KAAK,GACP,KAAK;CACV,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC,CAAA;AAE/B,KAAK,WAAW,CACd,QAAQ,SAAS,SAAS,uBAAuB,EAAE,EACnD,MAAM,SAAS,SAAS,YAAY,CAAC,QAAQ,CAAC,EAAE,IAC9C,MAAM,SAAS,SAAS,CAAC,MAAM,KAAK,EAAE,GAAG,MAAM,KAAK,CAAC,GACrD,KAAK,SAAS,YAAY,CAAC,QAAQ,CAAC,GAClC,KAAK,SAAS,SAAS,YAAY,CAAC,QAAQ,CAAC,EAAE,GAC7C,SAAS,CAAC,kBAAkB,CAAC,QAAQ,EAAE,KAAK,CAAC,EAAE,GAAG,WAAW,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC,GAC/E,KAAK,GACP,KAAK,GACP,MAAM,SAAS,SAAS,EAAE,GACxB,SAAS,EAAE,GACX,SAAS,kBAAkB,CAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,CAAA;AAE7D,KAAK,UAAU,CACb,QAAQ,SAAS,SAAS,uBAAuB,EAAE,EACnD,IAAI,SAAS,SAAS,uBAAuB,EAAE,IAC7C,SAAS,CAAC,GAAG,QAAQ,EAAE,GAAG,IAAI,CAAC,CAAA;AAEnC,KAAK,kBAAkB,CACrB,OAAO,SAAS,iBAAiB,EACjC,QAAQ,SAAS,oBAAoB,CAAC,OAAO,CAAC,GAAG,SAAS,IACxD,QAAQ,SAAS;IAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,KAAK,CAAA;CAAE,GAC/C,KAAK,SAAS,SAAS,mBAAmB,CAAC,OAAO,CAAC,EAAE,GACnD,WAAW,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,SAAS,CAAC,EAAE,KAAK,CAAC,GAChD,OAAO,CAAC,QAAQ,CAAC,CAAC,SAAS,CAAC,GAC9B,OAAO,CAAC,QAAQ,CAAC,CAAC,SAAS,CAAC,CAAA;AAEhC,KAAK,cAAc,CACjB,OAAO,SAAS,iBAAiB,EACjC,QAAQ,SAAS,oBAAoB,CAAC,OAAO,CAAC,GAAG,SAAS,IACxD,QAAQ,SAAS;IAAE,QAAQ,CAAC,GAAG,EAAE,MAAM,IAAI,CAAA;CAAE,GAC7C,IAAI,SAAS,SAAS,uBAAuB,EAAE,GAC7C,UAAU,CAAC,kBAAkB,CAAC,OAAO,EAAE,QAAQ,CAAC,EAAE,IAAI,CAAC,GACvD,kBAAkB,CAAC,OAAO,EAAE,QAAQ,CAAC,GACvC,kBAAkB,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAA;AAEzC,gFAAgF;AAChF,KAAK,mBAAmB,CAAC,QAAQ,IAAI,QAAQ,SAAS;IACpD,QAAQ,CAAC,QAAQ,EAAE,SAAS,CAAC,iBAAiB,EAAE,GAAG,iBAAiB,EAAE,CAAC,CAAA;CACxE,GACG;IAAE,QAAQ,CAAC,QAAQ,EAAE,SAAS,MAAM,EAAE,CAAA;CAAE,GACxC;IAAE,QAAQ,CAAC,QAAQ,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;CAAE,CAAA;AAE7C,KAAK,mBAAmB,CACtB,KAAK,SAAS,MAAM,EACpB,KAAK,SAAS,iBAAiB,EAC/B,QAAQ,SAAS,oBAAoB,GAAG,SAAS,IAC/C;IACF,QAAQ,CAAC,IAAI,EAAE,KAAK,CAAA;IACpB,QAAQ,CAAC,IAAI,EAAE,KAAK,CAAA;CACrB,GAAG,gBAAgB,CAAC,QAAQ,EAAE,UAAU,EAAE,OAAO,CAAC,GACjD,mBAAmB,CAAC,QAAQ,CAAC,CAAA;AAE/B,KAAK,uBAAuB,CAAC,GAAG,SAAS,MAAM,EAAE,QAAQ,SAAS,oBAAoB,IAAI,IAAI,CAC5F,iBAAiB,CAAC,GAAG,EAAE,QAAQ,CAAC,QAAQ,CAAC,CAAC,EAC1C,YAAY,GAAG,YAAY,GAAG,aAAa,GAAG,aAAa,CAC5D,GACC,gBAAgB,CAAC,QAAQ,EAAE,YAAY,EAAE,MAAM,CAAC,GAChD,gBAAgB,CAAC,QAAQ,EAAE,YAAY,EAAE,iBAAiB,CAAC,GAC3D,gBAAgB,CAAC,QAAQ,EAAE,aAAa,EAAE,SAAS,MAAM,EAAE,CAAC,GAC5D,gBAAgB,CAAC,QAAQ,EAAE,aAAa,EAAE,MAAM,CAAC,CAAA;AAEnD,KAAK,8BAA8B,CACjC,GAAG,SAAS,MAAM,EAClB,OAAO,SAAS,iBAAiB,EACjC,QAAQ,SAAS,oBAAoB,CAAC,OAAO,CAAC,GAAG,SAAS,IACxD,IAAI,CACN,iBAAiB,CAAC,GAAG,EAAE,cAAc,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,EACzD,YAAY,GAAG,YAAY,GAAG,aAAa,GAAG,aAAa,CAC5D,GACC,gBAAgB,CAAC,QAAQ,EAAE,YAAY,EAAE,MAAM,CAAC,GAChD,gBAAgB,CAAC,QAAQ,EAAE,YAAY,EAAE,iBAAiB,CAAC,GAC3D,gBAAgB,CAAC,QAAQ,EAAE,aAAa,EAAE,SAAS,MAAM,EAAE,CAAC,GAC5D,gBAAgB,CAAC,QAAQ,EAAE,aAAa,EAAE,MAAM,CAAC,CAAA;AAEnD,KAAK,2BAA2B,CAC9B,OAAO,SAAS,iBAAiB,EACjC,QAAQ,SAAS,oBAAoB,CAAC,OAAO,CAAC,IAC5C,QAAQ,GAAG;IACb,QAAQ,CAAC,UAAU,CAAC,EAAE,iBAAiB,CAAC,sBAAsB,CAAC,cAAc,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAA;IAClG,QAAQ,CAAC,UAAU,CAAC,EAAE,oBAAoB,CAAC,cAAc,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAA;CAC9E,CAAA;AAED,wBAAgB,GAAG,CAAC,KAAK,CAAC,KAAK,SAAS,MAAM,EAAE,KAAK,CAAC,KAAK,SAAS,iBAAiB,EACnF,IAAI,EAAE,KAAK,EACX,IAAI,EAAE,KAAK,GACV,mBAAmB,CAAC,KAAK,EAAE,KAAK,EAAE,SAAS,CAAC,CAAA;AAC/C,wBAAgB,GAAG,CACjB,KAAK,CAAC,KAAK,SAAS,MAAM,EAC1B,KAAK,CAAC,KAAK,SAAS,iBAAiB,EACrC,KAAK,CAAC,QAAQ,SAAS,oBAAoB,EAC3C,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,GAAG,mBAAmB,CAAC,KAAK,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAA;AAqG3F,iBAAS,0BAA0B,CAAC,GAAG,SAAS,MAAM,EAAE,EAAE,EAAE,GAAG;;eAGvC,OAAO,SAAS,iBAAiB,UAC7C,OAAO,GACd,8BAA8B,CAAC,GAAG,EAAE,OAAO,EAAE,SAAS,CAAC;eAElD,OAAO,SAAS,iBAAiB,QACjC,QAAQ,SAAS,oBAAoB,CAAC,OAAO,CAAC,UAE5C,OAAO,WACN,2BAA2B,CAAC,OAAO,EAAE,QAAQ,CAAC,GACtD,8BAA8B,CAAC,GAAG,EAAE,OAAO,EAAE,QAAQ,CAAC;;EAS1D;AAED,wBAAgB,aAAa,CAAC,KAAK,CAAC,GAAG,SAAS,MAAM,EACpD,EAAE,EAAE,GAAG,GACN,UAAU,CAAC,OAAO,0BAA0B,CAAC,GAAG,CAAC,CAAC,CAAA;AACrD,wBAAgB,aAAa,CAC3B,KAAK,CAAC,GAAG,SAAS,MAAM,EACxB,KAAK,CAAC,QAAQ,SAAS,oBAAoB,EAC3C,EAAE,EAAE,GAAG,EAAE,OAAO,EAAE,2BAA2B,CAAC,QAAQ,CAAC,GAAG,uBAAuB,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAA"}

package/dist/datasets/execution.d.ts

@@ -1,8 +1,9 @@
 import type { BlobStorage } from "../blob-storage";
 import type { ExecutionContext } from "../execution";
 import type { DatasetMergeCommitResult } from "../lake-storage/merge";
-import type { DatasetRow, LakeStorage } from "../lake-storage/types";
+import type { DatasetRow, DatasetVersion, LakeStorage } from "../lake-storage/types";
 import type { SixbRuntimeContext } from "../runtime/types";
+import type { Redactions } from "../security/types";
 import type { MergeChange } from "./changes";
 import type { DatasetDefinition } from "./types";
 export interface DatasetIngestInput {
@@ -13,9 +14,34 @@ export interface DatasetIngestInput {
 export type DatasetIngestResult = DatasetMergeCommitResult & {
     readonly rowsRead: number;
 };
+export interface DatasetReadRowsInput {
+    /** Defaults to the latest version. */
+    readonly versionId?: string;
+    /** Defaults to every column of the version, in schema order. */
+    readonly columns?: readonly string[];
+    readonly limit?: number;
+    readonly offset?: number;
+    readonly signal?: AbortSignal;
+}
+export interface DatasetRows {
+    readonly version: DatasetVersion;
+    /** Columns each row holds. Redacted columns are left out. */
+    readonly columns: readonly string[];
+    /**
+     * Every column of the dataset the reader cannot read, whether or not it was requested. Absent
+     * when the reader can read every column.
+     */
+    readonly redactions?: Redactions;
+    readonly rows: AsyncIterable<DatasetRow>;
+}
 export interface DatasetsRuntime {
     list(): readonly DatasetDefinition[];
     getById(datasetId: string): DatasetDefinition | null;
+    /**
+     * Read rows of one version. Returns null when the dataset has no version yet or the requested
+     * version does not exist.
+     */
+    readRows(dataset: DatasetDefinition, input?: DatasetReadRowsInput): Promise<DatasetRows | null>;
     ingest(dataset: DatasetDefinition, input: DatasetIngestInput): Promise<DatasetIngestResult>;
 }
 export declare function createDatasetsRuntime(runtime: SixbRuntimeContext, execution: ExecutionContext, source: Pick<DatasetsRuntime, "list" | "getById">, lakeStorage: LakeStorage, blobStorage: Pick<BlobStorage, "stat">): DatasetsRuntime;

package/dist/datasets/execution.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"execution.d.ts","sourceRoot":"","sources":["../../src/datasets/execution.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAA;AAClD,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAA;AAEpD,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,uBAAuB,CAAA;AAErE,OAAO,KAAK,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAA;AACpE,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAA;AAC1D,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,WAAW,CAAA;AAC5C,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,SAAS,CAAA;AAGhD,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,OAAO,EACZ,QAAQ,CAAC,WAAW,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC,GAC7C,aAAa,CAAC,WAAW,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC,CAAA;IACtD,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAA;CAC9B;AAED,qFAAqF;AACrF,MAAM,MAAM,mBAAmB,GAAG,wBAAwB,GAAG;IAAE,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,CAAA;AAE1F,MAAM,WAAW,eAAe;IAC9B,IAAI,IAAI,SAAS,iBAAiB,EAAE,CAAA;IACpC,OAAO,CAAC,SAAS,EAAE,MAAM,GAAG,iBAAiB,GAAG,IAAI,CAAA;IACpD,MAAM,CAAC,OAAO,EAAE,iBAAiB,EAAE,KAAK,EAAE,kBAAkB,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAAA;CAC5F;AAED,wBAAgB,qBAAqB,CACnC,OAAO,EAAE,kBAAkB,EAC3B,SAAS,EAAE,gBAAgB,EAC3B,MAAM,EAAE,IAAI,CAAC,eAAe,EAAE,MAAM,GAAG,SAAS,CAAC,EACjD,WAAW,EAAE,WAAW,EACxB,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,MAAM,CAAC,GACrC,eAAe,CA4DjB"}
+{"version":3,"file":"execution.d.ts","sourceRoot":"","sources":["../../src/datasets/execution.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAA;AAClD,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAA;AAEpD,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,uBAAuB,CAAA;AAErE,OAAO,KAAK,EAAE,UAAU,EAAE,cAAc,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAA;AACpF,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAA;AAE1D,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAA;AACnD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,WAAW,CAAA;AAC5C,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,SAAS,CAAA;AAGhD,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,OAAO,EACZ,QAAQ,CAAC,WAAW,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC,GAC7C,aAAa,CAAC,WAAW,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC,CAAA;IACtD,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAA;CAC9B;AAED,qFAAqF;AACrF,MAAM,MAAM,mBAAmB,GAAG,wBAAwB,GAAG;IAAE,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,CAAA;AAE1F,MAAM,WAAW,oBAAoB;IACnC,sCAAsC;IACtC,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAA;IAC3B,gEAAgE;IAChE,QAAQ,CAAC,OAAO,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;IACpC,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAA;IACxB,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAA;CAC9B;AAED,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,OAAO,EAAE,cAAc,CAAA;IAChC,6DAA6D;IAC7D,QAAQ,CAAC,OAAO,EAAE,SAAS,MAAM,EAAE,CAAA;IACnC;;;OAGG;IACH,QAAQ,CAAC,UAAU,CAAC,EAAE,UAAU,CAAA;IAChC,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAC,UAAU,CAAC,CAAA;CACzC;AAED,MAAM,WAAW,eAAe;IAC9B,IAAI,IAAI,SAAS,iBAAiB,EAAE,CAAA;IACpC,OAAO,CAAC,SAAS,EAAE,MAAM,GAAG,iBAAiB,GAAG,IAAI,CAAA;IACpD;;;OAGG;IACH,QAAQ,CAAC,OAAO,EAAE,iBAAiB,EAAE,KAAK,CAAC,EAAE,oBAAoB,GAAG,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC,CAAA;IAC/F,MAAM,CAAC,OAAO,EAAE,iBAAiB,EAAE,KAAK,EAAE,kBAAkB,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAAA;CAC5F;AAED,wBAAgB,qBAAqB,CACnC,OAAO,EAAE,kBAAkB,EAC3B,SAAS,EAAE,gBAAgB,EAC3B,MAAM,EAAE,IAAI,CAAC,eAAe,EAAE,MAAM,GAAG,SAAS,CAAC,EACjD,WAAW,EAAE,WAAW,EACxB,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,MAAM,CAAC,GACrC,eAAe,CAkGjB"}

package/dist/datasets/index.d.ts

@@ -2,7 +2,7 @@ export { col, defineDataset } from "./builders";
 export type { MergeChange } from "./changes";
 export { change } from "./changes";
 export { DatasetValidationError } from "./errors";
-export type { DatasetIngestInput, DatasetIngestResult, DatasetsRuntime } from "./execution";
+export type { DatasetIngestInput, DatasetIngestResult, DatasetReadRowsInput, DatasetRows, DatasetsRuntime, } from "./execution";
 export type { DatasetColumnDefinition, DatasetColumnDefinitionOf, DatasetColumnNameOf, DatasetColumnType, DatasetColumnTypeOf, DatasetColumnUnionOf, DatasetDefinition, DatasetPrimaryKey, DatasetSchema, } from "./types";
 export { getDatasetRowValidationError, isDatasetDefinition } from "./validation";
 //# sourceMappingURL=index.d.ts.map

package/dist/datasets/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/datasets/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,GAAG,EAAE,aAAa,EAAE,MAAM,YAAY,CAAA;AAC/C,YAAY,EAAE,WAAW,EAAE,MAAM,WAAW,CAAA;AAC5C,OAAO,EAAE,MAAM,EAAE,MAAM,WAAW,CAAA;AAClC,OAAO,EAAE,sBAAsB,EAAE,MAAM,UAAU,CAAA;AACjD,YAAY,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,eAAe,EAAE,MAAM,aAAa,CAAA;AAC3F,YAAY,EACV,uBAAuB,EACvB,yBAAyB,EACzB,mBAAmB,EACnB,iBAAiB,EACjB,mBAAmB,EACnB,oBAAoB,EACpB,iBAAiB,EACjB,iBAAiB,EACjB,aAAa,GACd,MAAM,SAAS,CAAA;AAChB,OAAO,EAAE,4BAA4B,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAA"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/datasets/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,GAAG,EAAE,aAAa,EAAE,MAAM,YAAY,CAAA;AAC/C,YAAY,EAAE,WAAW,EAAE,MAAM,WAAW,CAAA;AAC5C,OAAO,EAAE,MAAM,EAAE,MAAM,WAAW,CAAA;AAClC,OAAO,EAAE,sBAAsB,EAAE,MAAM,UAAU,CAAA;AACjD,YAAY,EACV,kBAAkB,EAClB,mBAAmB,EACnB,oBAAoB,EACpB,WAAW,EACX,eAAe,GAChB,MAAM,aAAa,CAAA;AACpB,YAAY,EACV,uBAAuB,EACvB,yBAAyB,EACzB,mBAAmB,EACnB,iBAAiB,EACjB,mBAAmB,EACnB,oBAAoB,EACpB,iBAAiB,EACjB,iBAAiB,EACjB,aAAa,GACd,MAAM,SAAS,CAAA;AAChB,OAAO,EAAE,4BAA4B,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAA"}

package/dist/datasets/types.d.ts

@@ -3,6 +3,8 @@ export interface DatasetColumnDefinition<TName extends string = string, TType ex
     readonly name: TName;
     readonly type: TType;
     readonly nullable?: boolean;
+    /** Marking ids. Principals need a clearance for each one to read this column. */
+    readonly markings?: readonly string[];
 }
 export interface DatasetSchema<TColumns extends readonly DatasetColumnDefinition[] = readonly DatasetColumnDefinition[]> {
     readonly columns: TColumns;

package/dist/datasets/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/datasets/types.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,iBAAiB,GACzB,QAAQ,GACR,SAAS,GACT,OAAO,GACP,SAAS,GACT,SAAS,GACT,MAAM,GACN,WAAW,GACX,MAAM,GACN,SAAS,CAAA;AAEb,MAAM,WAAW,uBAAuB,CACtC,KAAK,SAAS,MAAM,GAAG,MAAM,EAC7B,KAAK,SAAS,iBAAiB,GAAG,iBAAiB;IAEnD,QAAQ,CAAC,IAAI,EAAE,KAAK,CAAA;IACpB,QAAQ,CAAC,IAAI,EAAE,KAAK,CAAA;IACpB,QAAQ,CAAC,QAAQ,CAAC,EAAE,OAAO,CAAA;CAC5B;AAED,MAAM,WAAW,aAAa,CAC5B,QAAQ,SAAS,SAAS,uBAAuB,EAAE,GAAG,SAAS,uBAAuB,EAAE;IAExF,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAA;CAC3B;AAED,MAAM,MAAM,iBAAiB,CAAC,WAAW,SAAS,MAAM,GAAG,MAAM,IAC7D,WAAW,GACX,SAAS,CAAC,WAAW,EAAE,WAAW,EAAE,GAAG,WAAW,EAAE,CAAC,CAAA;AAEzD,MAAM,WAAW,iBAAiB,CAChC,GAAG,SAAS,MAAM,GAAG,MAAM,EAC3B,QAAQ,SAAS,SAAS,uBAAuB,EAAE,GAAG,SAAS,uBAAuB,EAAE;IAExF,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAA;IACxB,QAAQ,CAAC,EAAE,EAAE,GAAG,CAAA;IAChB,QAAQ,CAAC,MAAM,EAAE,aAAa,CAAC,QAAQ,CAAC,CAAA;IACxC,QAAQ,CAAC,UAAU,CAAC,EAAE,iBAAiB,CAAA;IACvC,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAA;IAC5B,QAAQ,CAAC,WAAW,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;IACxC,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAA;CAC9B;AAED,MAAM,MAAM,oBAAoB,CAAC,QAAQ,SAAS,iBAAiB,IACjE,QAAQ,CAAC,QAAQ,CAAC,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,CAAA;AAEvC,MAAM,MAAM,mBAAmB,CAAC,QAAQ,SAAS,iBAAiB,IAChE,oBAAoB,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,CAAA;AAExC,MAAM,MAAM,yBAAyB,CACnC,QAAQ,SAAS,iBAAiB,EAClC,KAAK,SAAS,mBAAmB,CAAC,QAAQ,CAAC,IACzC,OAAO,CAAC,oBAAoB,CAAC,QAAQ,CAAC,EAAE;IAAE,QAAQ,CAAC,IAAI,EAAE,KAAK,CAAA;CAAE,CAAC,CAAA;AAErE,MAAM,MAAM,mBAAmB,CAC7B,QAAQ,SAAS,iBAAiB,EAClC,KAAK,SAAS,mBAAmB,CAAC,QAAQ,CAAC,IACzC,yBAAyB,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC,MAAM,CAAC,CAAA"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/datasets/types.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,iBAAiB,GACzB,QAAQ,GACR,SAAS,GACT,OAAO,GACP,SAAS,GACT,SAAS,GACT,MAAM,GACN,WAAW,GACX,MAAM,GACN,SAAS,CAAA;AAEb,MAAM,WAAW,uBAAuB,CACtC,KAAK,SAAS,MAAM,GAAG,MAAM,EAC7B,KAAK,SAAS,iBAAiB,GAAG,iBAAiB;IAEnD,QAAQ,CAAC,IAAI,EAAE,KAAK,CAAA;IACpB,QAAQ,CAAC,IAAI,EAAE,KAAK,CAAA;IACpB,QAAQ,CAAC,QAAQ,CAAC,EAAE,OAAO,CAAA;IAC3B,iFAAiF;IACjF,QAAQ,CAAC,QAAQ,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;CACtC;AAED,MAAM,WAAW,aAAa,CAC5B,QAAQ,SAAS,SAAS,uBAAuB,EAAE,GAAG,SAAS,uBAAuB,EAAE;IAExF,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAA;CAC3B;AAED,MAAM,MAAM,iBAAiB,CAAC,WAAW,SAAS,MAAM,GAAG,MAAM,IAC7D,WAAW,GACX,SAAS,CAAC,WAAW,EAAE,WAAW,EAAE,GAAG,WAAW,EAAE,CAAC,CAAA;AAEzD,MAAM,WAAW,iBAAiB,CAChC,GAAG,SAAS,MAAM,GAAG,MAAM,EAC3B,QAAQ,SAAS,SAAS,uBAAuB,EAAE,GAAG,SAAS,uBAAuB,EAAE;IAExF,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAA;IACxB,QAAQ,CAAC,EAAE,EAAE,GAAG,CAAA;IAChB,QAAQ,CAAC,MAAM,EAAE,aAAa,CAAC,QAAQ,CAAC,CAAA;IACxC,QAAQ,CAAC,UAAU,CAAC,EAAE,iBAAiB,CAAA;IACvC,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAA;IAC5B,QAAQ,CAAC,WAAW,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;IACxC,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAA;CAC9B;AAED,MAAM,MAAM,oBAAoB,CAAC,QAAQ,SAAS,iBAAiB,IACjE,QAAQ,CAAC,QAAQ,CAAC,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,CAAA;AAEvC,MAAM,MAAM,mBAAmB,CAAC,QAAQ,SAAS,iBAAiB,IAChE,oBAAoB,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,CAAA;AAExC,MAAM,MAAM,yBAAyB,CACnC,QAAQ,SAAS,iBAAiB,EAClC,KAAK,SAAS,mBAAmB,CAAC,QAAQ,CAAC,IACzC,OAAO,CAAC,oBAAoB,CAAC,QAAQ,CAAC,EAAE;IAAE,QAAQ,CAAC,IAAI,EAAE,KAAK,CAAA;CAAE,CAAC,CAAA;AAErE,MAAM,MAAM,mBAAmB,CAC7B,QAAQ,SAAS,iBAAiB,EAClC,KAAK,SAAS,mBAAmB,CAAC,QAAQ,CAAC,IACzC,yBAAyB,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC,MAAM,CAAC,CAAA"}

package/dist/datasets/write.d.ts

@@ -26,6 +26,11 @@ export interface WriteDatasetInput<TValue extends DatasetWriteValue = DatasetWri
 export type WriteDatasetResult = DatasetMergeCommitResult & {
     readonly rowsRead: number;
 };
+/**
+ * The definition the lake receives. Markings are enforced from the registered definition and never
+ * stored, so a stored schema cannot keep a classification the code has since changed.
+ */
+export declare function lakeDatasetDefinition(dataset: DatasetDefinition): DatasetDefinition;
 /**
  * Validate, stage, and commit one dataset write using existing lake sessions.
  *

package/dist/datasets/write.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"write.d.ts","sourceRoot":"","sources":["../../src/datasets/write.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAW,MAAM,iBAAiB,CAAA;AAE3D,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,uBAAuB,CAAA;AAErE,OAAO,KAAK,EACV,eAAe,EAEf,gBAAgB,EAChB,WAAW,EACZ,MAAM,uBAAuB,CAAA;AAE9B,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,SAAS,CAAA;AAGhD,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAA;CACxB;AAED,MAAM,WAAW,iBAAiB,CAAC,MAAM,SAAS,iBAAiB,GAAG,iBAAiB;IACrF,QAAQ,CAAC,WAAW,EAAE,WAAW,CAAA;IACjC,QAAQ,CAAC,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,MAAM,CAAC,CAAA;IAC/C,QAAQ,CAAC,OAAO,EAAE,iBAAiB,CAAA;IACnC,QAAQ,CAAC,IAAI,EAAE,gBAAgB,GAAG,OAAO,CAAA;IACzC,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAA;IAC5B,qFAAqF;IACrF,UAAU,IAAI,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC,CAAA;IAC/D,QAAQ,CAAC,QAAQ,CAAC,EAAE,eAAe,CAAA;IACnC,QAAQ,CAAC,uBAAuB,CAAC,EAAE,MAAM,CAAA;IACzC,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAA;IAC/B,uEAAuE;IACvE,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAA;IAC7B,mFAAmF;IACnF,MAAM,CAAC,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAA;IAC/B,qEAAqE;IACrE,kBAAkB,CAAC,CAAC,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAA;CAC/E;AAED,MAAM,MAAM,kBAAkB,GAAG,wBAAwB,GAAG;IAAE,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,CAAA;AAEzF;;;;;;GAMG;AACH,wBAAsB,YAAY,CAAC,MAAM,SAAS,iBAAiB,EACjE,KAAK,EAAE,iBAAiB,CAAC,MAAM,CAAC,GAC/B,OAAO,CAAC,kBAAkB,CAAC,CAgF7B"}
+{"version":3,"file":"write.d.ts","sourceRoot":"","sources":["../../src/datasets/write.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAW,MAAM,iBAAiB,CAAA;AAG3D,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,uBAAuB,CAAA;AAErE,OAAO,KAAK,EACV,eAAe,EAEf,gBAAgB,EAChB,WAAW,EACZ,MAAM,uBAAuB,CAAA;AAE9B,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,SAAS,CAAA;AAGhD,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAA;CACxB;AAED,MAAM,WAAW,iBAAiB,CAAC,MAAM,SAAS,iBAAiB,GAAG,iBAAiB;IACrF,QAAQ,CAAC,WAAW,EAAE,WAAW,CAAA;IACjC,QAAQ,CAAC,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,MAAM,CAAC,CAAA;IAC/C,QAAQ,CAAC,OAAO,EAAE,iBAAiB,CAAA;IACnC,QAAQ,CAAC,IAAI,EAAE,gBAAgB,GAAG,OAAO,CAAA;IACzC,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAA;IAC5B,qFAAqF;IACrF,UAAU,IAAI,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC,CAAA;IAC/D,QAAQ,CAAC,QAAQ,CAAC,EAAE,eAAe,CAAA;IACnC,QAAQ,CAAC,uBAAuB,CAAC,EAAE,MAAM,CAAA;IACzC,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAA;IAC/B,uEAAuE;IACvE,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAA;IAC7B,mFAAmF;IACnF,MAAM,CAAC,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAA;IAC/B,qEAAqE;IACrE,kBAAkB,CAAC,CAAC,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAA;CAC/E;AAED,MAAM,MAAM,kBAAkB,GAAG,wBAAwB,GAAG;IAAE,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,CAAA;AAEzF;;;GAGG;AACH,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,iBAAiB,GAAG,iBAAiB,CAMnF;AAED;;;;;;GAMG;AACH,wBAAsB,YAAY,CAAC,MAAM,SAAS,iBAAiB,EACjE,KAAK,EAAE,iBAAiB,CAAC,MAAM,CAAC,GAC/B,OAAO,CAAC,kBAAkB,CAAC,CAiF7B"}

package/dist/datasets/write.js

@@ -1,14 +1,19 @@
 // @bun
 import {
+  lakeDatasetDefinition2,
   writeDataset2
-} from "../chunk-91kcnbf0.js";
-import"../chunk-rb143ggb.js";
-import"../chunk-cd234ba4.js";
-import"../chunk-39tqv9hz.js";
+} from "../chunk-6gmfggss.js";
+import"../chunk-bwjcehza.js";
+import"../chunk-rz53yb4v.js";
+import"../chunk-gc4ntf7d.js";
 import"../chunk-gfdh9kqa.js";
+import"../chunk-xt1zt7gv.js";
+import"../chunk-enpsx8k5.js";
+import"../chunk-jhm3zsa7.js";
 import"../chunk-z3y5kg1x.js";
 export {
+  lakeDatasetDefinition2 as lakeDatasetDefinition,
   writeDataset2 as writeDataset
 };
 
-//# debugId=80D0570B78642AFA64756E2164756E21
+//# debugId=BE521B98716AE2F064756E2164756E21

package/dist/datasets/write.js.map

@@ -4,6 +4,6 @@
   "sourcesContent": [
   ],
   "mappings": "",
-  "debugId": "80D0570B78642AFA64756E2164756E21",
+  "debugId": "BE521B98716AE2F064756E2164756E21",
   "names": []
 }

package/dist/edits/properties.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"properties.d.ts","sourceRoot":"","sources":["../../src/edits/properties.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,aAAa,CAAA;AAElE,OAAO,KAAK,EAAE,4BAA4B,EAAE,MAAM,oBAAoB,CAAA;AAQtE,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,SAAS,CAAA;AAEnD,wBAAgB,6BAA6B,CAAC,MAAM,EAAE;IACpD,QAAQ,CAAC,UAAU,EAAE,4BAA4B,CAAA;IACjD,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IAC5C,QAAQ,CAAC,cAAc,EAAE,WAAW,CAAC,MAAM,EAAE,SAAS,CAAC,CAAA;IACvD,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;CACtB,GAAG,oBAAoB,CAMvB;AAED,wBAAgB,2BAA2B,CAAC,MAAM,EAAE;IAClD,QAAQ,CAAC,kBAAkB,EAAE,MAAM,CAAA;IACnC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,cAAc,EAAE,UAAU,CAAA;IACnC,QAAQ,CAAC,UAAU,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAA;IACtD,QAAQ,CAAC,cAAc,EAAE,WAAW,CAAC,MAAM,EAAE,SAAS,CAAC,CAAA;CACxD,GAAG,oBAAoB,CAsCvB;AAED,wBAAgB,kBAAkB,CAAC,UAAU,EAAE,4BAA4B,GAAG,QAAQ,CAQrF;AAED,wBAAgB,+BAA+B,CAC7C,UAAU,EAAE,4BAA4B,EACxC,UAAU,EAAE,oBAAoB,GAC/B,IAAI,CAON;AAED,uFAAuF;AACvF,wBAAgB,4BAA4B,CAAC,MAAM,EAAE;IACnD,QAAQ,CAAC,UAAU,EAAE,4BAA4B,CAAA;IACjD,QAAQ,CAAC,WAAW,EAAE,SAAS,OAAO,EAAE,CAAA;IACxC,QAAQ,CAAC,SAAS,EAAE,OAAO,GAAG,OAAO,CAAA;CACtC,GAAG,SAAS,MAAM,EAAE,CAuCpB"}
+{"version":3,"file":"properties.d.ts","sourceRoot":"","sources":["../../src/edits/properties.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,aAAa,CAAA;AAElE,OAAO,KAAK,EAAE,4BAA4B,EAAE,MAAM,oBAAoB,CAAA;AAStE,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,SAAS,CAAA;AAEnD,wBAAgB,6BAA6B,CAAC,MAAM,EAAE;IACpD,QAAQ,CAAC,UAAU,EAAE,4BAA4B,CAAA;IACjD,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IAC5C,QAAQ,CAAC,cAAc,EAAE,WAAW,CAAC,MAAM,EAAE,SAAS,CAAC,CAAA;IACvD,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;CACtB,GAAG,oBAAoB,CAOvB;AAED,wBAAgB,2BAA2B,CAAC,MAAM,EAAE;IAClD,QAAQ,CAAC,kBAAkB,EAAE,MAAM,CAAA;IACnC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,cAAc,EAAE,UAAU,CAAA;IACnC,QAAQ,CAAC,UAAU,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAA;IACtD,QAAQ,CAAC,cAAc,EAAE,WAAW,CAAC,MAAM,EAAE,SAAS,CAAC,CAAA;CACxD,GAAG,oBAAoB,CAuCvB;AAED,wBAAgB,kBAAkB,CAAC,UAAU,EAAE,4BAA4B,GAAG,QAAQ,CAQrF;AAED,wBAAgB,+BAA+B,CAC7C,UAAU,EAAE,4BAA4B,EACxC,UAAU,EAAE,oBAAoB,GAC/B,IAAI,CAON;AAED,uFAAuF;AACvF,wBAAgB,4BAA4B,CAAC,MAAM,EAAE;IACnD,QAAQ,CAAC,UAAU,EAAE,4BAA4B,CAAA;IACjD,QAAQ,CAAC,WAAW,EAAE,SAAS,OAAO,EAAE,CAAA;IACxC,QAAQ,CAAC,SAAS,EAAE,OAAO,GAAG,OAAO,CAAA;CACtC,GAAG,SAAS,MAAM,EAAE,CAuCpB"}

package/dist/events/execution.d.ts

@@ -2,7 +2,8 @@ import type { SixbRuntimeContext } from "../runtime/types";
 import type { EventsAppendInput, EventsEmitOptions, EventsReadInput, EventsSubscribeInput } from "./service";
 import type { StoredDomainEvent } from "./types";
 export interface EventsRuntime {
-    canRead(event: StoredDomainEvent): boolean;
+    /** The event as this execution may read it: hidden events are `undefined`, others redacted. */
+    readable(event: StoredDomainEvent): StoredDomainEvent | undefined;
     append(input: EventsAppendInput): Promise<readonly StoredDomainEvent[]>;
     emit(input: EventsAppendInput, options: EventsEmitOptions): Promise<void>;
     read(input?: EventsReadInput): Promise<readonly StoredDomainEvent[]>;

package/dist/events/execution.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"execution.d.ts","sourceRoot":"","sources":["../../src/events/execution.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAA;AAC1D,OAAO,KAAK,EACV,iBAAiB,EACjB,iBAAiB,EACjB,eAAe,EACf,oBAAoB,EACrB,MAAM,WAAW,CAAA;AAClB,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,SAAS,CAAA;AAEhD,MAAM,WAAW,aAAa;IAC5B,OAAO,CAAC,KAAK,EAAE,iBAAiB,GAAG,OAAO,CAAA;IAC1C,MAAM,CAAC,KAAK,EAAE,iBAAiB,GAAG,OAAO,CAAC,SAAS,iBAAiB,EAAE,CAAC,CAAA;IACvE,IAAI,CAAC,KAAK,EAAE,iBAAiB,EAAE,OAAO,EAAE,iBAAiB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IACzE,IAAI,CAAC,KAAK,CAAC,EAAE,eAAe,GAAG,OAAO,CAAC,SAAS,iBAAiB,EAAE,CAAC,CAAA;IACpE,YAAY,IAAI,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAAA;IAC3C,SAAS,CACP,KAAK,EAAE,oBAAoB,EAC3B,OAAO,EAAE,CAAC,MAAM,EAAE,SAAS,iBAAiB,EAAE,KAAK,OAAO,GACzD,OAAO,CAAC,MAAM,IAAI,CAAC,CAAA;CACvB;AAED,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,kBAAkB,GAAG,aAAa,CAuE9E"}
+{"version":3,"file":"execution.d.ts","sourceRoot":"","sources":["../../src/events/execution.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAA;AAC1D,OAAO,KAAK,EACV,iBAAiB,EACjB,iBAAiB,EACjB,eAAe,EACf,oBAAoB,EACrB,MAAM,WAAW,CAAA;AAClB,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,SAAS,CAAA;AAEhD,MAAM,WAAW,aAAa;IAC5B,+FAA+F;IAC/F,QAAQ,CAAC,KAAK,EAAE,iBAAiB,GAAG,iBAAiB,GAAG,SAAS,CAAA;IACjE,MAAM,CAAC,KAAK,EAAE,iBAAiB,GAAG,OAAO,CAAC,SAAS,iBAAiB,EAAE,CAAC,CAAA;IACvE,IAAI,CAAC,KAAK,EAAE,iBAAiB,EAAE,OAAO,EAAE,iBAAiB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IACzE,IAAI,CAAC,KAAK,CAAC,EAAE,eAAe,GAAG,OAAO,CAAC,SAAS,iBAAiB,EAAE,CAAC,CAAA;IACpE,YAAY,IAAI,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAAA;IAC3C,SAAS,CACP,KAAK,EAAE,oBAAoB,EAC3B,OAAO,EAAE,CAAC,MAAM,EAAE,SAAS,iBAAiB,EAAE,KAAK,OAAO,GACzD,OAAO,CAAC,MAAM,IAAI,CAAC,CAAA;CACvB;AAED,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,kBAAkB,GAAG,aAAa,CAoE9E"}

package/dist/events/types/objects.d.ts

@@ -1,3 +1,4 @@
+import type { Redactions } from "../../security/types";
 import type { EventEnvelope } from "../envelope";
 import type { PropertyChangeMap } from "../property-changes";
 export interface ObjectMutationEventPayload<TValue = unknown> {
@@ -5,11 +6,15 @@ export interface ObjectMutationEventPayload<TValue = unknown> {
     primaryId: string;
     properties: Record<string, TValue>;
     propertyChanges: PropertyChangeMap<TValue>;
+    /** Properties omitted for this reader, which lacks their clearance. Never stored. */
+    redactions?: Redactions;
 }
 export interface ObjectDeletedEventPayload<TValue = unknown> {
     objectTypeId: string;
     primaryId: string;
     propertyChanges: PropertyChangeMap<TValue>;
+    /** Properties omitted for this reader, which lacks their clearance. Never stored. */
+    redactions?: Redactions;
 }
 export interface ObjectCreatedEvent extends EventEnvelope {
     type: "object.created";

package/dist/events/types/objects.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"objects.d.ts","sourceRoot":"","sources":["../../../src/events/types/objects.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,aAAa,CAAA;AAChD,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAA;AAE5D,MAAM,WAAW,0BAA0B,CAAC,MAAM,GAAG,OAAO;IAC1D,YAAY,EAAE,MAAM,CAAA;IACpB,SAAS,EAAE,MAAM,CAAA;IACjB,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IAClC,eAAe,EAAE,iBAAiB,CAAC,MAAM,CAAC,CAAA;CAC3C;AAED,MAAM,WAAW,yBAAyB,CAAC,MAAM,GAAG,OAAO;IACzD,YAAY,EAAE,MAAM,CAAA;IACpB,SAAS,EAAE,MAAM,CAAA;IACjB,eAAe,EAAE,iBAAiB,CAAC,MAAM,CAAC,CAAA;CAC3C;AAED,MAAM,WAAW,kBAAmB,SAAQ,aAAa;IACvD,IAAI,EAAE,gBAAgB,CAAA;IACtB,KAAK,EAAE,SAAS,CAAA;IAChB,YAAY,EAAE,MAAM,CAAA;IACpB,OAAO,EAAE,0BAA0B,CAAA;CACpC;AAED,MAAM,WAAW,kBAAmB,SAAQ,aAAa;IACvD,IAAI,EAAE,gBAAgB,CAAA;IACtB,KAAK,EAAE,SAAS,CAAA;IAChB,YAAY,EAAE,MAAM,CAAA;IACpB,OAAO,EAAE,0BAA0B,CAAA;CACpC;AAED,MAAM,WAAW,kBAAmB,SAAQ,aAAa;IACvD,IAAI,EAAE,gBAAgB,CAAA;IACtB,KAAK,EAAE,SAAS,CAAA;IAChB,YAAY,EAAE,MAAM,CAAA;IACpB,OAAO,EAAE,yBAAyB,CAAA;CACnC;AAED,MAAM,MAAM,WAAW,GAAG,kBAAkB,GAAG,kBAAkB,GAAG,kBAAkB,CAAA"}
+{"version":3,"file":"objects.d.ts","sourceRoot":"","sources":["../../../src/events/types/objects.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAA;AACtD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,aAAa,CAAA;AAChD,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAA;AAE5D,MAAM,WAAW,0BAA0B,CAAC,MAAM,GAAG,OAAO;IAC1D,YAAY,EAAE,MAAM,CAAA;IACpB,SAAS,EAAE,MAAM,CAAA;IACjB,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IAClC,eAAe,EAAE,iBAAiB,CAAC,MAAM,CAAC,CAAA;IAC1C,qFAAqF;IACrF,UAAU,CAAC,EAAE,UAAU,CAAA;CACxB;AAED,MAAM,WAAW,yBAAyB,CAAC,MAAM,GAAG,OAAO;IACzD,YAAY,EAAE,MAAM,CAAA;IACpB,SAAS,EAAE,MAAM,CAAA;IACjB,eAAe,EAAE,iBAAiB,CAAC,MAAM,CAAC,CAAA;IAC1C,qFAAqF;IACrF,UAAU,CAAC,EAAE,UAAU,CAAA;CACxB;AAED,MAAM,WAAW,kBAAmB,SAAQ,aAAa;IACvD,IAAI,EAAE,gBAAgB,CAAA;IACtB,KAAK,EAAE,SAAS,CAAA;IAChB,YAAY,EAAE,MAAM,CAAA;IACpB,OAAO,EAAE,0BAA0B,CAAA;CACpC;AAED,MAAM,WAAW,kBAAmB,SAAQ,aAAa;IACvD,IAAI,EAAE,gBAAgB,CAAA;IACtB,KAAK,EAAE,SAAS,CAAA;IAChB,YAAY,EAAE,MAAM,CAAA;IACpB,OAAO,EAAE,0BAA0B,CAAA;CACpC;AAED,MAAM,WAAW,kBAAmB,SAAQ,aAAa;IACvD,IAAI,EAAE,gBAAgB,CAAA;IACtB,KAAK,EAAE,SAAS,CAAA;IAChB,YAAY,EAAE,MAAM,CAAA;IACpB,OAAO,EAAE,yBAAyB,CAAA;CACnC;AAED,MAAM,MAAM,WAAW,GAAG,kBAAkB,GAAG,kBAAkB,GAAG,kBAAkB,CAAA"}

package/dist/execution/agent.d.ts

@@ -1,4 +1,5 @@
 import { type AgentExecutionAuthorization } from "../agents/authority";
+import type { AiModelCallRecorder } from "../models/execution/model-call-recorder";
 import { type Sixb } from "../runtime/sixb";
 import type { ExecutionRecord } from "../storage/executions";
 export { ensureExecutionRecord } from "./durable";
@@ -33,6 +34,15 @@ export declare function bindDurableAgentExecution(host: AgentExecutionHost, inpu
     readonly runId: string;
     readonly authorization: AgentExecutionAuthorization;
 }): Sixb;
+/**
+ * Account model calls made through a run's bound SDK — by its tools, or embeddings behind their
+ * searches — like the run's own: same execution attempt, limits, failure state and cancellation.
+ * The attempt is the recorder's, so the two cannot diverge.
+ */
+export declare function bindAgentModelExecution(sixb: Sixb, input: {
+    readonly signal: AbortSignal;
+    readonly accounting: AiModelCallRecorder;
+}): void;
 /** Restore one provider-validated Agent execution with its currently resolved grants. */
 export declare function restoreAgentExecutionScope(input: {
     readonly execution: ExecutionRecord;

package/dist/execution/agent.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"agent.d.ts","sourceRoot":"","sources":["../../src/execution/agent.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,2BAA2B,EAAyB,MAAM,qBAAqB,CAAA;AAC7F,OAAO,EAAe,KAAK,IAAI,EAAE,MAAM,iBAAiB,CAAA;AACxD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAA;AAG5D,OAAO,EAAE,qBAAqB,EAAE,MAAM,WAAW,CAAA;AAGjD,OAAO,KAAK,EACV,qBAAqB,EAErB,cAAc,EACd,oBAAoB,EACrB,MAAM,SAAS,CAAA;AAEhB,uDAAuD;AACvD,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;IACnB,SAAS,CAAC,KAAK,EAAE,cAAc,GAAG,MAAM,CAAA;CACzC;AAED,yGAAyG;AACzG,wBAAgB,mCAAmC,CAAC,aAAa,EAAE,oBAAoB,GAAG,OAAO,CAMhG;AAED,qFAAqF;AACrF,wBAAgB,0BAA0B,CAAC,KAAK,EAAE;IAChD,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;IACnB,QAAQ,CAAC,MAAM,EAAE,eAAe,CAAA;IAChC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;IACxB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC,qBAAqB,EAAE;QAAE,QAAQ,CAAC,IAAI,EAAE,gBAAgB,CAAA;KAAE,CAAC,CAAA;CACxF,GAAG,IAAI,CAAC,eAAe,EAAE,WAAW,CAAC,CAiBrC;AAED,4FAA4F;AAC5F,wBAAgB,mCAAmC,CAAC,KAAK,EAAE;IACzD,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;IACnB,QAAQ,CAAC,MAAM,EAAE,eAAe,CAAA;IAChC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;CACvB,GAAG,IAAI,CAAC,eAAe,EAAE,WAAW,CAAC,CA4BrC;AAED,uFAAuF;AACvF,wBAAgB,yBAAyB,CACvC,IAAI,EAAE,kBAAkB,EACxB,KAAK,EAAE;IACL,QAAQ,CAAC,SAAS,EAAE,eAAe,CAAA;IACnC,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,aAAa,EAAE,2BAA2B,CAAA;CACpD,GACA,IAAI,CAON;AAED,yFAAyF;AACzF,wBAAgB,0BAA0B,CAAC,KAAK,EAAE;IAChD,QAAQ,CAAC,SAAS,EAAE,eAAe,CAAA;IACnC,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,aAAa,EAAE,2BAA2B,CAAA;CACpD,GAAG,cAAc,CAiCjB;AAED,oFAAoF;AACpF,wBAAgB,0BAA0B,CAAC,KAAK,EAAE;IAChD,QAAQ,CAAC,SAAS,EAAE,eAAe,CAAA;IACnC,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,aAAa,EAAE,2BAA2B,CAAA;CACpD,GAAG,IAAI,CAgCP"}
+{"version":3,"file":"agent.d.ts","sourceRoot":"","sources":["../../src/execution/agent.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,2BAA2B,EAAyB,MAAM,qBAAqB,CAAA;AAE7F,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,yCAAyC,CAAA;AAClF,OAAO,EAAe,KAAK,IAAI,EAAE,MAAM,iBAAiB,CAAA;AACxD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAA;AAG5D,OAAO,EAAE,qBAAqB,EAAE,MAAM,WAAW,CAAA;AAGjD,OAAO,KAAK,EACV,qBAAqB,EAErB,cAAc,EACd,oBAAoB,EACrB,MAAM,SAAS,CAAA;AAEhB,uDAAuD;AACvD,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;IACnB,SAAS,CAAC,KAAK,EAAE,cAAc,GAAG,MAAM,CAAA;CACzC;AAED,yGAAyG;AACzG,wBAAgB,mCAAmC,CAAC,aAAa,EAAE,oBAAoB,GAAG,OAAO,CAMhG;AAED,qFAAqF;AACrF,wBAAgB,0BAA0B,CAAC,KAAK,EAAE;IAChD,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;IACnB,QAAQ,CAAC,MAAM,EAAE,eAAe,CAAA;IAChC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;IACxB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC,qBAAqB,EAAE;QAAE,QAAQ,CAAC,IAAI,EAAE,gBAAgB,CAAA;KAAE,CAAC,CAAA;CACxF,GAAG,IAAI,CAAC,eAAe,EAAE,WAAW,CAAC,CAiBrC;AAED,4FAA4F;AAC5F,wBAAgB,mCAAmC,CAAC,KAAK,EAAE;IACzD,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;IACnB,QAAQ,CAAC,MAAM,EAAE,eAAe,CAAA;IAChC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;CACvB,GAAG,IAAI,CAAC,eAAe,EAAE,WAAW,CAAC,CA4BrC;AAED,uFAAuF;AACvF,wBAAgB,yBAAyB,CACvC,IAAI,EAAE,kBAAkB,EACxB,KAAK,EAAE;IACL,QAAQ,CAAC,SAAS,EAAE,eAAe,CAAA;IACnC,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,aAAa,EAAE,2BAA2B,CAAA;CACpD,GACA,IAAI,CAON;AAED;;;;GAIG;AACH,wBAAgB,uBAAuB,CACrC,IAAI,EAAE,IAAI,EACV,KAAK,EAAE;IACL,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAA;IAC5B,QAAQ,CAAC,UAAU,EAAE,mBAAmB,CAAA;CACzC,GACA,IAAI,CAYN;AAED,yFAAyF;AACzF,wBAAgB,0BAA0B,CAAC,KAAK,EAAE;IAChD,QAAQ,CAAC,SAAS,EAAE,eAAe,CAAA;IACnC,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,aAAa,EAAE,2BAA2B,CAAA;CACpD,GAAG,cAAc,CAiCjB;AAED,oFAAoF;AACpF,wBAAgB,0BAA0B,CAAC,KAAK,EAAE;IAChD,QAAQ,CAAC,SAAS,EAAE,eAAe,CAAA;IACnC,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,aAAa,EAAE,2BAA2B,CAAA;CACpD,GAAG,IAAI,CAgCP"}