@sixb/core 0.1.16 → 0.1.18

package/dist/chunk-667x4drs.js.map

@@ -1,12 +0,0 @@
-{
-  "version": 3,
-  "sources": ["../src/agents/authority.ts", "../src/storage/workflow-runs/errors.ts", "../src/storage/workflow-runs/provider.ts"],
-  "sourcesContent": [
-    "import { principalsEqual, SYSTEM_PRINCIPAL } from \"../auth\"\nimport type { AuthorizationContext } from \"../authorization\"\nimport { resolveAuthorizationContext } from \"../authorization\"\nimport { createSixbError } from \"../errors/internal\"\nimport type { AuthorizablePrincipal, AuthorizationRef } from \"../execution\"\nimport type { SecurityDefinitionCatalog } from \"../security\"\nimport type {\n  AccessTokenRecord,\n  AuthStorage,\n  ServiceAccountGroupMembershipRecord,\n  ServiceAccountRecord,\n  SessionRecord,\n  UserRecord,\n} from \"../storage/auth\"\nimport { AuthStorageError } from \"../storage/auth\"\nimport { agentServiceAccountId } from \"./identity\"\n\nexport type AgentExecutionAuthorization =\n  | { readonly type: \"principal\"; readonly context: AuthorizationContext }\n  | { readonly type: \"disabled\" }\n\ntype UserCredentialRef = NonNullable<\n  Extract<AuthorizationRef, { readonly type: \"principal\" }>[\"credential\"]\n>\n\ninterface CredentialedUserAuthorizationRef {\n  readonly type: \"principal\"\n  readonly principal: Extract<AuthorizablePrincipal, { readonly type: \"user\" }>\n  readonly credential: UserCredentialRef\n}\n\nexport { agentServiceAccountId } from \"./identity\"\n\nexport interface AgentExecutionIdentity {\n  readonly serviceAccount: ServiceAccountRecord\n  readonly principal: Extract<AuthorizablePrincipal, { readonly type: \"serviceAccount\" }>\n  readonly groupMemberships: readonly ServiceAccountGroupMembershipRecord[]\n}\n\n/** Ensure a framework-managed Agent actor exists with exactly its declared group memberships. */\nexport async function ensureManagedAgentExecutionIdentity(input: {\n  readonly auth: AuthStorage | undefined\n  readonly projectId: string\n  readonly actorId: string\n  readonly name: string\n  readonly description: string\n  readonly groupIds: readonly string[]\n}): Promise<AgentExecutionIdentity> {\n  const auth = requireAuthStorage(input.auth)\n  const id = agentServiceAccountId(input.actorId)\n  const now = new Date()\n  const loaded = await loadOrCreateAgentServiceAccount(auth, {\n    id,\n    projectId: input.projectId,\n    name: input.name,\n    description: input.description,\n    updatedAt: now,\n  })\n  assertFrameworkManagedAgentServiceAccount(input.actorId, loaded)\n  assertActiveAgentServiceAccount(input.actorId, loaded)\n  const serviceAccount = await updateAgentServiceAccountMetadata(auth, {\n    existing: loaded,\n    name: input.name,\n    description: input.description,\n    updatedAt: now,\n  })\n  assertActiveAgentServiceAccount(input.actorId, serviceAccount)\n\n  const groupMemberships = requireDefinitionOwnedGroupMemberships(\n    input.actorId,\n    await auth.serviceAccountGroupMemberships.reconcileForServiceAccount({\n      projectId: input.projectId,\n      serviceAccountId: id,\n      groupIds: input.groupIds,\n      source: \"agent\",\n      updatedAt: now,\n    })\n  )\n\n  return {\n    serviceAccount,\n    principal: { type: \"serviceAccount\", id },\n    groupMemberships,\n  }\n}\n\n/** Load the managed identity, recovering only the expected concurrent-create race. */\nasync function loadOrCreateAgentServiceAccount(\n  auth: AuthStorage,\n  input: {\n    readonly id: string\n    readonly projectId: string\n    readonly name: string\n    readonly description: string\n    readonly updatedAt: Date\n  }\n): Promise<ServiceAccountRecord> {\n  const existing = await auth.serviceAccounts.getById({\n    projectId: input.projectId,\n    id: input.id,\n  })\n  if (existing) return existing\n\n  try {\n    return await auth.serviceAccounts.create({\n      id: input.id,\n      projectId: input.projectId,\n      name: input.name,\n      description: input.description,\n      status: \"active\",\n      createdByPrincipal: SYSTEM_PRINCIPAL,\n      createdAt: input.updatedAt,\n      updatedAt: input.updatedAt,\n    })\n  } catch (error) {\n    if (!(error instanceof AuthStorageError) || error.code !== \"duplicate_service_account\") {\n      throw error\n    }\n    const concurrent = await auth.serviceAccounts.getById({\n      projectId: input.projectId,\n      id: input.id,\n    })\n    if (!concurrent) throw error\n    return concurrent\n  }\n}\n\nfunction assertActiveAgentServiceAccount(\n  actorId: string,\n  serviceAccount: ServiceAccountRecord\n): void {\n  if (serviceAccount.status === \"suspended\") {\n    throw new Error(\n      `[Sixb] Agent '${actorId}' service account '${serviceAccount.id}' is suspended.`\n    )\n  }\n}\n\nfunction assertFrameworkManagedAgentServiceAccount(\n  actorId: string,\n  serviceAccount: ServiceAccountRecord\n): void {\n  if (\n    serviceAccount.createdByPrincipal === undefined ||\n    !principalsEqual(serviceAccount.createdByPrincipal, SYSTEM_PRINCIPAL)\n  ) {\n    throw createSixbError(\n      \"agent.execution_failed\",\n      `[Sixb] Agent '${actorId}' cannot use service account '${serviceAccount.id}' because it is not managed by Sixb.`,\n      { details: { actorId, serviceAccountId: serviceAccount.id } }\n    )\n  }\n}\n\nfunction requireDefinitionOwnedGroupMemberships(\n  actorId: string,\n  memberships: readonly ServiceAccountGroupMembershipRecord[]\n): readonly ServiceAccountGroupMembershipRecord[] {\n  const externalGroupIds = memberships\n    .filter((membership) => membership.source !== \"agent\")\n    .map((membership) => membership.groupId)\n  if (externalGroupIds.length > 0) {\n    throw createSixbError(\n      \"agent.execution_failed\",\n      `[Sixb] Agent '${actorId}' service account has group memberships not managed by its definition: ${externalGroupIds.join(\", \")}.`,\n      { details: { actorId, externalGroupIds } }\n    )\n  }\n  return memberships\n}\n\n/** Resolve current grants for the service account referenced by a durable Agent execution. */\nexport async function resolveAgentExecutionAuthorization(input: {\n  readonly auth: AuthStorage | undefined\n  readonly projectId: string\n  readonly actorId: string\n  readonly authorizationRef: AuthorizationRef\n  readonly security: SecurityDefinitionCatalog\n}): Promise<{ readonly identity: AgentExecutionIdentity; readonly context: AuthorizationContext }> {\n  const auth = requireAuthStorage(input.auth)\n  const expectedId = agentServiceAccountId(input.actorId)\n  const principal =\n    input.authorizationRef.type === \"principal\" ? input.authorizationRef.principal : null\n  if (principal?.type !== \"serviceAccount\" || principal.id !== expectedId) {\n    throw new Error(\n      `[Sixb] Agent '${input.actorId}' execution authority must reference service account '${expectedId}'.`\n    )\n  }\n\n  const serviceAccount = await auth.serviceAccounts.getById({\n    projectId: input.projectId,\n    id: principal.id,\n  })\n  if (!serviceAccount || serviceAccount.status !== \"active\") {\n    throw new Error(`[Sixb] Agent service account '${principal.id}' is not active.`)\n  }\n  assertFrameworkManagedAgentServiceAccount(input.actorId, serviceAccount)\n\n  const groupMemberships = requireDefinitionOwnedGroupMemberships(\n    input.actorId,\n    await auth.serviceAccountGroupMemberships.listForServiceAccount({\n      projectId: input.projectId,\n      serviceAccountId: principal.id,\n    })\n  )\n  const identity: AgentExecutionIdentity = {\n    serviceAccount,\n    principal: { type: \"serviceAccount\", id: principal.id },\n    groupMemberships,\n  }\n  return {\n    identity,\n    context: resolveAuthorizationContext({\n      principal: identity.principal,\n      groupIds: groupMemberships.map((membership) => membership.groupId),\n      roles: input.security.listResolvedRoles(),\n    }),\n  }\n}\n\n/** Revalidate the durable user authority inherited by a conversational or child Agent. */\nexport async function resolveInheritedAgentExecutionAuthorization(input: {\n  readonly auth: AuthStorage | undefined\n  readonly projectId: string\n  readonly authorizationRef: AuthorizationRef\n  readonly security: SecurityDefinitionCatalog\n  readonly now?: Date\n}): Promise<AgentExecutionAuthorization> {\n  if (input.authorizationRef.type === \"disabled\") return { type: \"disabled\" }\n\n  const ref = requireCredentialedUserAuthority(input.authorizationRef)\n  const auth = requireAuthStorage(input.auth)\n  const now = input.now ?? new Date()\n  const user = await requireActiveUser(auth, input.projectId, ref.principal.id)\n  const memberships = await auth.groupMemberships.listForUser({\n    projectId: input.projectId,\n    userId: user.id,\n  })\n  const credential = await revalidateUserCredential({\n    auth,\n    projectId: input.projectId,\n    userId: user.id,\n    credential: ref.credential,\n    currentGroupIds: memberships.map((membership) => membership.groupId),\n    now,\n  })\n\n  return {\n    type: \"principal\",\n    context: resolveAuthorizationContext({\n      principal: ref.principal,\n      groupIds: credential.groupIds,\n      roles: input.security.listResolvedRoles(),\n      ...(credential.sessionId === undefined ? {} : { sessionId: credential.sessionId }),\n    }),\n  }\n}\n\nfunction requireCredentialedUserAuthority(ref: AuthorizationRef): CredentialedUserAuthorizationRef {\n  if (ref.type !== \"principal\" || ref.principal.type !== \"user\" || ref.credential === undefined) {\n    throw invalidInheritedAuthority(\"the durable reference is not a credentialed user\")\n  }\n  return {\n    type: \"principal\",\n    principal: { type: \"user\", id: ref.principal.id },\n    credential: { type: ref.credential.type, id: ref.credential.id },\n  }\n}\n\nasync function requireActiveUser(\n  auth: AuthStorage,\n  projectId: string,\n  userId: string\n): Promise<UserRecord> {\n  const user = await auth.users.getById({ projectId, id: userId })\n  if (!user || user.status !== \"active\") {\n    throw invalidInheritedAuthority(`user '${userId}' is not active`)\n  }\n  return user\n}\n\nasync function revalidateUserCredential(input: {\n  readonly auth: AuthStorage\n  readonly projectId: string\n  readonly userId: string\n  readonly credential: UserCredentialRef\n  readonly currentGroupIds: readonly string[]\n  readonly now: Date\n}): Promise<{ readonly groupIds: readonly string[]; readonly sessionId?: string }> {\n  if (input.credential.type === \"session\") {\n    const session = await input.auth.sessions.getById({\n      projectId: input.projectId,\n      id: input.credential.id,\n    })\n    if (!isUsableUserSession(session, input.userId, input.now)) {\n      throw invalidInheritedAuthority(\"the inherited session is no longer valid\")\n    }\n    return { groupIds: input.currentGroupIds, sessionId: session.id }\n  }\n\n  const accessToken = await input.auth.accessTokens.getById({\n    projectId: input.projectId,\n    id: input.credential.id,\n  })\n  if (!isUsableUserAccessToken(accessToken, input.userId, input.now)) {\n    throw invalidInheritedAuthority(\"the inherited access token is no longer valid\")\n  }\n  if (accessToken.groupIds === undefined) return { groupIds: input.currentGroupIds }\n\n  const allowedGroupIds = new Set(accessToken.groupIds)\n  return {\n    groupIds: input.currentGroupIds.filter((groupId) => allowedGroupIds.has(groupId)),\n  }\n}\n\nfunction isUsableUserSession(\n  session: SessionRecord | null,\n  userId: string,\n  now: Date\n): session is SessionRecord {\n  if (!session || session.userId !== userId || session.revokedAt !== undefined) return false\n  if (session.expiresAt.getTime() <= now.getTime()) return false\n  return (\n    session.absoluteExpiresAt === undefined || session.absoluteExpiresAt.getTime() > now.getTime()\n  )\n}\n\nfunction isUsableUserAccessToken(\n  token: AccessTokenRecord | null,\n  userId: string,\n  now: Date\n): token is AccessTokenRecord {\n  if (!token || !principalsEqual(token.subject, { type: \"user\", id: userId })) return false\n  return token.revokedAt === undefined && token.expiresAt.getTime() > now.getTime()\n}\n\nfunction invalidInheritedAuthority(reason: string): Error {\n  return createSixbError(\n    \"agent.execution_failed\",\n    `[Sixb] The Agent execution cannot restore its inherited authority: ${reason}.`\n  )\n}\n\nfunction requireAuthStorage(auth: AuthStorage | undefined): AuthStorage {\n  if (!auth) {\n    throw new Error(\"[Sixb] Agent executions require auth storage.\")\n  }\n  return auth\n}\n\nasync function updateAgentServiceAccountMetadata(\n  auth: AuthStorage,\n  input: {\n    readonly existing: ServiceAccountRecord\n    readonly name: string\n    readonly description: string\n    readonly updatedAt: Date\n  }\n): Promise<ServiceAccountRecord> {\n  if (input.existing.name === input.name && input.existing.description === input.description) {\n    return input.existing\n  }\n  return auth.serviceAccounts.update({\n    projectId: input.existing.projectId,\n    id: input.existing.id,\n    name: input.name,\n    description: input.description,\n    updatedAt: input.updatedAt,\n  })\n}\n",
-    "/**\n * Base error for workflow-run storage operations.\n */\nexport class WorkflowRunError extends Error {\n  readonly name = \"WorkflowRunError\"\n}\n",
-    "import { agentServiceAccountId } from \"../../agents/authority\"\nimport type { ExecutionStorage } from \"../executions\"\nimport { findAgentRunExecution, findPrimitiveRunExecution } from \"../executions/run-link\"\nimport { WorkflowRunError } from \"./errors\"\n\n/** Validate the semantic link between a durable workflow run and its immutable execution. */\nexport async function assertWorkflowRunExecution(input: {\n  readonly executions: ExecutionStorage\n  readonly projectId: string\n  readonly executionId: string\n  readonly runId: string\n  readonly workflowId: string\n}): Promise<void> {\n  const execution = await findPrimitiveRunExecution({\n    executions: input.executions,\n    projectId: input.projectId,\n    executionId: input.executionId,\n    primitive: { kind: \"workflow\", id: input.workflowId, runId: input.runId },\n    sourceTypes: [\"execution\", \"schedule\", \"event\"],\n  })\n  if (!execution) {\n    invalidExecution(input.executionId, input.runId)\n  }\n\n  if (execution.source.type === \"schedule\" || execution.source.type === \"event\") {\n    if (execution.requestedBy !== undefined) {\n      invalidExecution(input.executionId, input.runId)\n    }\n    return\n  }\n\n  // ExecutionStorage already validates the immutable parent reference, correlation id, and\n  // requested-by propagation. This boundary only owns the workflow-specific source restriction.\n  if (execution.source.type !== \"execution\") {\n    invalidExecution(input.executionId, input.runId)\n  }\n}\n\n/** Validate the semantic link between a Workflow Agent-node run and its child execution. */\nexport async function assertWorkflowAgentNodeRunExecution(input: {\n  readonly executions: ExecutionStorage\n  readonly projectId: string\n  readonly executionId: string\n  readonly nodeRunId: string\n  readonly actorId: string\n  readonly workflowExecutionId: string\n}): Promise<void> {\n  const execution = await findAgentRunExecution({\n    executions: input.executions,\n    projectId: input.projectId,\n    executionId: input.executionId,\n    runId: input.nodeRunId,\n    authority: { type: \"managed\", serviceAccountId: agentServiceAccountId(input.actorId) },\n  })\n  if (\n    !execution ||\n    execution.source.type !== \"execution\" ||\n    execution.source.executionId !== input.workflowExecutionId\n  ) {\n    throw new WorkflowRunError(\n      `[Sixb] Execution '${input.executionId}' does not authorize Workflow Agent-node run '${input.nodeRunId}'.`\n    )\n  }\n}\n\nfunction invalidExecution(executionId: string, runId: string): never {\n  throw new WorkflowRunError(\n    `[Sixb] Execution '${executionId}' does not authorize workflow run '${runId}'.`\n  )\n}\n"
-  ],
-  "mappings": ";;;;;;;;;;;;;;;;;;;AAwCA,eAAsB,oCAAmC,CAAC,OAOtB;AAAA,EAClC,MAAM,OAAO,mBAAmB,MAAM,IAAI;AAAA,EAC1C,MAAM,KAAK,uBAAsB,MAAM,OAAO;AAAA,EAC9C,MAAM,MAAM,IAAI;AAAA,EAChB,MAAM,SAAS,MAAM,gCAAgC,MAAM;AAAA,IACzD;AAAA,IACA,WAAW,MAAM;AAAA,IACjB,MAAM,MAAM;AAAA,IACZ,aAAa,MAAM;AAAA,IACnB,WAAW;AAAA,EACb,CAAC;AAAA,EACD,0CAA0C,MAAM,SAAS,MAAM;AAAA,EAC/D,gCAAgC,MAAM,SAAS,MAAM;AAAA,EACrD,MAAM,iBAAiB,MAAM,kCAAkC,MAAM;AAAA,IACnE,UAAU;AAAA,IACV,MAAM,MAAM;AAAA,IACZ,aAAa,MAAM;AAAA,IACnB,WAAW;AAAA,EACb,CAAC;AAAA,EACD,gCAAgC,MAAM,SAAS,cAAc;AAAA,EAE7D,MAAM,mBAAmB,uCACvB,MAAM,SACN,MAAM,KAAK,+BAA+B,2BAA2B;AAAA,IACnE,WAAW,MAAM;AAAA,IACjB,kBAAkB;AAAA,IAClB,UAAU,MAAM;AAAA,IAChB,QAAQ;AAAA,IACR,WAAW;AAAA,EACb,CAAC,CACH;AAAA,EAEA,OAAO;AAAA,IACL;AAAA,IACA,WAAW,EAAE,MAAM,kBAAkB,GAAG;AAAA,IACxC;AAAA,EACF;AAAA;AAIF,eAAe,+BAA+B,CAC5C,MACA,OAO+B;AAAA,EAC/B,MAAM,WAAW,MAAM,KAAK,gBAAgB,QAAQ;AAAA,IAClD,WAAW,MAAM;AAAA,IACjB,IAAI,MAAM;AAAA,EACZ,CAAC;AAAA,EACD,IAAI;AAAA,IAAU,OAAO;AAAA,EAErB,IAAI;AAAA,IACF,OAAO,MAAM,KAAK,gBAAgB,OAAO;AAAA,MACvC,IAAI,MAAM;AAAA,MACV,WAAW,MAAM;AAAA,MACjB,MAAM,MAAM;AAAA,MACZ,aAAa,MAAM;AAAA,MACnB,QAAQ;AAAA,MACR,oBAAoB;AAAA,MACpB,WAAW,MAAM;AAAA,MACjB,WAAW,MAAM;AAAA,IACnB,CAAC;AAAA,IACD,OAAO,OAAO;AAAA,IACd,IAAI,EAAE,iBAAiB,sBAAqB,MAAM,SAAS,6BAA6B;AAAA,MACtF,MAAM;AAAA,IACR;AAAA,IACA,MAAM,aAAa,MAAM,KAAK,gBAAgB,QAAQ;AAAA,MACpD,WAAW,MAAM;AAAA,MACjB,IAAI,MAAM;AAAA,IACZ,CAAC;AAAA,IACD,IAAI,CAAC;AAAA,MAAY,MAAM;AAAA,IACvB,OAAO;AAAA;AAAA;AAIX,SAAS,+BAA+B,CACtC,SACA,gBACM;AAAA,EACN,IAAI,eAAe,WAAW,aAAa;AAAA,IACzC,MAAM,IAAI,MACR,iBAAiB,6BAA6B,eAAe,mBAC/D;AAAA,EACF;AAAA;AAGF,SAAS,yCAAyC,CAChD,SACA,gBACM;AAAA,EACN,IACE,eAAe,uBAAuB,aACtC,CAAC,iBAAgB,eAAe,oBAAoB,iBAAgB,GACpE;AAAA,IACA,MAAM,iBACJ,0BACA,iBAAiB,wCAAwC,eAAe,0CACxE,EAAE,SAAS,EAAE,SAAS,kBAAkB,eAAe,GAAG,EAAE,CAC9D;AAAA,EACF;AAAA;AAGF,SAAS,sCAAsC,CAC7C,SACA,aACgD;AAAA,EAChD,MAAM,mBAAmB,YACtB,OAAO,CAAC,eAAe,WAAW,WAAW,OAAO,EACpD,IAAI,CAAC,eAAe,WAAW,OAAO;AAAA,EACzC,IAAI,iBAAiB,SAAS,GAAG;AAAA,IAC/B,MAAM,iBACJ,0BACA,iBAAiB,iFAAiF,iBAAiB,KAAK,IAAI,MAC5H,EAAE,SAAS,EAAE,SAAS,iBAAiB,EAAE,CAC3C;AAAA,EACF;AAAA,EACA,OAAO;AAAA;AAIT,eAAsB,mCAAkC,CAAC,OAM0C;AAAA,EACjG,MAAM,OAAO,mBAAmB,MAAM,IAAI;AAAA,EAC1C,MAAM,aAAa,uBAAsB,MAAM,OAAO;AAAA,EACtD,MAAM,YACJ,MAAM,iBAAiB,SAAS,cAAc,MAAM,iBAAiB,YAAY;AAAA,EACnF,IAAI,WAAW,SAAS,oBAAoB,UAAU,OAAO,YAAY;AAAA,IACvE,MAAM,IAAI,MACR,iBAAiB,MAAM,gEAAgE,cACzF;AAAA,EACF;AAAA,EAEA,MAAM,iBAAiB,MAAM,KAAK,gBAAgB,QAAQ;AAAA,IACxD,WAAW,MAAM;AAAA,IACjB,IAAI,UAAU;AAAA,EAChB,CAAC;AAAA,EACD,IAAI,CAAC,kBAAkB,eAAe,WAAW,UAAU;AAAA,IACzD,MAAM,IAAI,MAAM,iCAAiC,UAAU,oBAAoB;AAAA,EACjF;AAAA,EACA,0CAA0C,MAAM,SAAS,cAAc;AAAA,EAEvE,MAAM,mBAAmB,uCACvB,MAAM,SACN,MAAM,KAAK,+BAA+B,sBAAsB;AAAA,IAC9D,WAAW,MAAM;AAAA,IACjB,kBAAkB,UAAU;AAAA,EAC9B,CAAC,CACH;AAAA,EACA,MAAM,WAAmC;AAAA,IACvC;AAAA,IACA,WAAW,EAAE,MAAM,kBAAkB,IAAI,UAAU,GAAG;AAAA,IACtD;AAAA,EACF;AAAA,EACA,OAAO;AAAA,IACL;AAAA,IACA,SAAS,6BAA4B;AAAA,MACnC,WAAW,SAAS;AAAA,MACpB,UAAU,iBAAiB,IAAI,CAAC,eAAe,WAAW,OAAO;AAAA,MACjE,OAAO,MAAM,SAAS,kBAAkB;AAAA,IAC1C,CAAC;AAAA,EACH;AAAA;AAIF,eAAsB,4CAA2C,CAAC,OAMzB;AAAA,EACvC,IAAI,MAAM,iBAAiB,SAAS;AAAA,IAAY,OAAO,EAAE,MAAM,WAAW;AAAA,EAE1E,MAAM,MAAM,iCAAiC,MAAM,gBAAgB;AAAA,EACnE,MAAM,OAAO,mBAAmB,MAAM,IAAI;AAAA,EAC1C,MAAM,MAAM,MAAM,OAAO,IAAI;AAAA,EAC7B,MAAM,OAAO,MAAM,kBAAkB,MAAM,MAAM,WAAW,IAAI,UAAU,EAAE;AAAA,EAC5E,MAAM,cAAc,MAAM,KAAK,iBAAiB,YAAY;AAAA,IAC1D,WAAW,MAAM;AAAA,IACjB,QAAQ,KAAK;AAAA,EACf,CAAC;AAAA,EACD,MAAM,aAAa,MAAM,yBAAyB;AAAA,IAChD;AAAA,IACA,WAAW,MAAM;AAAA,IACjB,QAAQ,KAAK;AAAA,IACb,YAAY,IAAI;AAAA,IAChB,iBAAiB,YAAY,IAAI,CAAC,eAAe,WAAW,OAAO;AAAA,IACnE;AAAA,EACF,CAAC;AAAA,EAED,OAAO;AAAA,IACL,MAAM;AAAA,IACN,SAAS,6BAA4B;AAAA,MACnC,WAAW,IAAI;AAAA,MACf,UAAU,WAAW;AAAA,MACrB,OAAO,MAAM,SAAS,kBAAkB;AAAA,SACpC,WAAW,cAAc,YAAY,CAAC,IAAI,EAAE,WAAW,WAAW,UAAU;AAAA,IAClF,CAAC;AAAA,EACH;AAAA;AAGF,SAAS,gCAAgC,CAAC,KAAyD;AAAA,EACjG,IAAI,IAAI,SAAS,eAAe,IAAI,UAAU,SAAS,UAAU,IAAI,eAAe,WAAW;AAAA,IAC7F,MAAM,0BAA0B,kDAAkD;AAAA,EACpF;AAAA,EACA,OAAO;AAAA,IACL,MAAM;AAAA,IACN,WAAW,EAAE,MAAM,QAAQ,IAAI,IAAI,UAAU,GAAG;AAAA,IAChD,YAAY,EAAE,MAAM,IAAI,WAAW,MAAM,IAAI,IAAI,WAAW,GAAG;AAAA,EACjE;AAAA;AAGF,eAAe,iBAAiB,CAC9B,MACA,WACA,QACqB;AAAA,EACrB,MAAM,OAAO,MAAM,KAAK,MAAM,QAAQ,EAAE,WAAW,IAAI,OAAO,CAAC;AAAA,EAC/D,IAAI,CAAC,QAAQ,KAAK,WAAW,UAAU;AAAA,IACrC,MAAM,0BAA0B,SAAS,uBAAuB;AAAA,EAClE;AAAA,EACA,OAAO;AAAA;AAGT,eAAe,wBAAwB,CAAC,OAO2C;AAAA,EACjF,IAAI,MAAM,WAAW,SAAS,WAAW;AAAA,IACvC,MAAM,UAAU,MAAM,MAAM,KAAK,SAAS,QAAQ;AAAA,MAChD,WAAW,MAAM;AAAA,MACjB,IAAI,MAAM,WAAW;AAAA,IACvB,CAAC;AAAA,IACD,IAAI,CAAC,oBAAoB,SAAS,MAAM,QAAQ,MAAM,GAAG,GAAG;AAAA,MAC1D,MAAM,0BAA0B,0CAA0C;AAAA,IAC5E;AAAA,IACA,OAAO,EAAE,UAAU,MAAM,iBAAiB,WAAW,QAAQ,GAAG;AAAA,EAClE;AAAA,EAEA,MAAM,cAAc,MAAM,MAAM,KAAK,aAAa,QAAQ;AAAA,IACxD,WAAW,MAAM;AAAA,IACjB,IAAI,MAAM,WAAW;AAAA,EACvB,CAAC;AAAA,EACD,IAAI,CAAC,wBAAwB,aAAa,MAAM,QAAQ,MAAM,GAAG,GAAG;AAAA,IAClE,MAAM,0BAA0B,+CAA+C;AAAA,EACjF;AAAA,EACA,IAAI,YAAY,aAAa;AAAA,IAAW,OAAO,EAAE,UAAU,MAAM,gBAAgB;AAAA,EAEjF,MAAM,kBAAkB,IAAI,IAAI,YAAY,QAAQ;AAAA,EACpD,OAAO;AAAA,IACL,UAAU,MAAM,gBAAgB,OAAO,CAAC,YAAY,gBAAgB,IAAI,OAAO,CAAC;AAAA,EAClF;AAAA;AAGF,SAAS,mBAAmB,CAC1B,SACA,QACA,KAC0B;AAAA,EAC1B,IAAI,CAAC,WAAW,QAAQ,WAAW,UAAU,QAAQ,cAAc;AAAA,IAAW,OAAO;AAAA,EACrF,IAAI,QAAQ,UAAU,QAAQ,KAAK,IAAI,QAAQ;AAAA,IAAG,OAAO;AAAA,EACzD,OACE,QAAQ,sBAAsB,aAAa,QAAQ,kBAAkB,QAAQ,IAAI,IAAI,QAAQ;AAAA;AAIjG,SAAS,uBAAuB,CAC9B,OACA,QACA,KAC4B;AAAA,EAC5B,IAAI,CAAC,SAAS,CAAC,iBAAgB,MAAM,SAAS,EAAE,MAAM,QAAQ,IAAI,OAAO,CAAC;AAAA,IAAG,OAAO;AAAA,EACpF,OAAO,MAAM,cAAc,aAAa,MAAM,UAAU,QAAQ,IAAI,IAAI,QAAQ;AAAA;AAGlF,SAAS,yBAAyB,CAAC,QAAuB;AAAA,EACxD,OAAO,iBACL,0BACA,sEAAsE,SACxE;AAAA;AAGF,SAAS,kBAAkB,CAAC,MAA4C;AAAA,EACtE,IAAI,CAAC,MAAM;AAAA,IACT,MAAM,IAAI,MAAM,+CAA+C;AAAA,EACjE;AAAA,EACA,OAAO;AAAA;AAGT,eAAe,iCAAiC,CAC9C,MACA,OAM+B;AAAA,EAC/B,IAAI,MAAM,SAAS,SAAS,MAAM,QAAQ,MAAM,SAAS,gBAAgB,MAAM,aAAa;AAAA,IAC1F,OAAO,MAAM;AAAA,EACf;AAAA,EACA,OAAO,KAAK,gBAAgB,OAAO;AAAA,IACjC,WAAW,MAAM,SAAS;AAAA,IAC1B,IAAI,MAAM,SAAS;AAAA,IACnB,MAAM,MAAM;AAAA,IACZ,aAAa,MAAM;AAAA,IACnB,WAAW,MAAM;AAAA,EACnB,CAAC;AAAA;;;AC7WI,MAAM,0BAAyB,MAAM;AAAA,EACjC,OAAO;AAClB;;;ACCA,eAAsB,2BAA0B,CAAC,OAM/B;AAAA,EAChB,MAAM,YAAY,MAAM,0BAA0B;AAAA,IAChD,YAAY,MAAM;AAAA,IAClB,WAAW,MAAM;AAAA,IACjB,aAAa,MAAM;AAAA,IACnB,WAAW,EAAE,MAAM,YAAY,IAAI,MAAM,YAAY,OAAO,MAAM,MAAM;AAAA,IACxE,aAAa,CAAC,aAAa,YAAY,OAAO;AAAA,EAChD,CAAC;AAAA,EACD,IAAI,CAAC,WAAW;AAAA,IACd,iBAAiB,MAAM,aAAa,MAAM,KAAK;AAAA,EACjD;AAAA,EAEA,IAAI,UAAU,OAAO,SAAS,cAAc,UAAU,OAAO,SAAS,SAAS;AAAA,IAC7E,IAAI,UAAU,gBAAgB,WAAW;AAAA,MACvC,iBAAiB,MAAM,aAAa,MAAM,KAAK;AAAA,IACjD;AAAA,IACA;AAAA,EACF;AAAA,EAIA,IAAI,UAAU,OAAO,SAAS,aAAa;AAAA,IACzC,iBAAiB,MAAM,aAAa,MAAM,KAAK;AAAA,EACjD;AAAA;AAIF,eAAsB,oCAAmC,CAAC,OAOxC;AAAA,EAChB,MAAM,YAAY,MAAM,sBAAsB;AAAA,IAC5C,YAAY,MAAM;AAAA,IAClB,WAAW,MAAM;AAAA,IACjB,aAAa,MAAM;AAAA,IACnB,OAAO,MAAM;AAAA,IACb,WAAW,EAAE,MAAM,WAAW,kBAAkB,uBAAsB,MAAM,OAAO,EAAE;AAAA,EACvF,CAAC;AAAA,EACD,IACE,CAAC,aACD,UAAU,OAAO,SAAS,eAC1B,UAAU,OAAO,gBAAgB,MAAM,qBACvC;AAAA,IACA,MAAM,IAAI,kBACR,qBAAqB,MAAM,4DAA4D,MAAM,aAC/F;AAAA,EACF;AAAA;AAGF,SAAS,gBAAgB,CAAC,aAAqB,OAAsB;AAAA,EACnE,MAAM,IAAI,kBACR,qBAAqB,iDAAiD,SACxE;AAAA;",
-  "debugId": "F5DA9E9C95A4C18E64756E2164756E21",
-  "names": []
-}

package/dist/chunk-69266efg.js.map

@@ -1,12 +0,0 @@
-{
-  "version": 3,
-  "sources": ["../src/storage/agents/provider.ts", "../src/agents/types.ts", "../src/storage/agents/errors.ts"],
-  "sourcesContent": [
-    "import { isDeepStrictEqual } from \"node:util\"\nimport { AGENT_REASONING_LEVELS } from \"../../agents/types\"\nimport { isFileRef } from \"../../blob-storage\"\nimport { isJsonObject, isPlainRecord } from \"../../json\"\nimport { isModelReasoning } from \"../../models/language-model\"\nimport type { ExecutionRecord, ExecutionStorage } from \"../executions\"\nimport { findAgentRunExecution } from \"../executions/run-link\"\nimport { AgentStorageError } from \"./errors\"\nimport type {\n  AgentContextCheckpointRecord,\n  AgentMessageRecord,\n  AgentRunRecord,\n  AgentThreadRecord,\n  AgentThreadSandboxParams,\n  AgentThreadSandboxState,\n  ConversationAgentRunSpec,\n  CreateAgentContextCheckpointInput,\n  CreateSubagentRunInput,\n  SubagentRunRecord,\n  SubagentRunResult,\n  TransitionAgentThreadSandboxInput,\n} from \"./types\"\n\n/** Shared state machine. Providers must lock the run, then thread, around this decision/write. */\nexport function transitionAgentThreadSandbox(\n  thread: AgentThreadRecord | null,\n  run: AgentRunRecord | null,\n  input: TransitionAgentThreadSandboxInput\n): AgentThreadSandboxState {\n  const fail = (message: string): never => {\n    throw new AgentStorageError(\"invalid_state\", `[Sixb] Sandbox ${message}`)\n  }\n  if (!thread?.sandboxParams) return fail(\"is not configured on this thread.\")\n  if (!/^[a-zA-Z0-9-]{1,80}$/.test(input.name)) return fail(\"name is invalid.\")\n  const state = thread.sandboxState\n  if (input.action === \"recreate\") {\n    if (thread.activeRunId !== null) return fail(\"cannot be recreated during an active run.\")\n    if (!state || state.name !== input.expectedSandboxName || input.name === state.name)\n      return fail(\"changed; reload before recreating.\")\n    if (![\"busy\", \"blocked\", \"unavailable\"].includes(state.status)) {\n      return fail(\"does not require recovery.\")\n    }\n    return {\n      name: input.name,\n      status: \"new\",\n      initialized: false,\n      resetAt: new Date().toISOString(),\n    }\n  }\n  if (\n    run?.kind !== \"conversation\" ||\n    run.threadId !== thread.id ||\n    run.status !== \"running\" ||\n    thread.activeRunId !== run.id ||\n    run.id !== input.runId ||\n    run.execution?.token !== input.executionToken ||\n    run.execution.queueLeaseExpiresAt.getTime() <= Date.now()\n  ) {\n    throw new AgentStorageError(\"execution_lost\", \"[Sixb] Sandbox execution ownership was lost.\")\n  }\n  if (input.action === \"acquire\") {\n    if (state && state.status !== \"new\" && state.status !== \"ready\") {\n      return fail(\"requires recovery; previous operations may still be in flight.\")\n    }\n    if (state && state.name !== input.name) return fail(\"name changed.\")\n    if (!/^[a-f0-9]{64}$/.test(input.sourceFingerprint))\n      return fail(\"source fingerprint is invalid.\")\n    if (state?.sourceFingerprint && state.sourceFingerprint !== input.sourceFingerprint) {\n      return fail(\"source identity changed; the existing checkout was not opened.\")\n    }\n    return {\n      name: input.name,\n      status: \"busy\",\n      initialized: state?.initialized ?? false,\n      ...(state?.resetAt ? { resetAt: state.resetAt } : {}),\n      sourceFingerprint: input.sourceFingerprint,\n      owner: { runId: input.runId, executionToken: input.executionToken },\n    }\n  }\n  if (\n    state?.status !== \"busy\" ||\n    state.name !== input.name ||\n    state.owner?.runId !== input.runId ||\n    state.owner.executionToken !== input.executionToken\n  ) {\n    return fail(\"is not owned by this execution.\")\n  }\n  if (input.action === \"replace\") {\n    if (\n      !state.initialized ||\n      input.nextName === state.name ||\n      !/^[a-zA-Z0-9-]{1,80}$/.test(input.nextName)\n    ) {\n      return fail(\"replacement requires initialized state and a fresh valid name.\")\n    }\n    // Only the owning worker may report confirmed loss; retain its fence across replacement.\n    return {\n      ...state,\n      name: input.nextName,\n      initialized: false,\n      resetAt: new Date().toISOString(),\n    }\n  }\n  if (input.status === \"ready\" && !input.initialized) return fail(\"initialization is incomplete.\")\n  return {\n    name: state.name,\n    status: input.status,\n    initialized: input.initialized,\n    sourceFingerprint: state.sourceFingerprint,\n    ...(state.resetAt ? { resetAt: state.resetAt } : {}),\n  }\n}\n\n/** Snapshot application parameters independently of worker-owned sandbox state. */\nexport function snapshotAgentThreadSandboxParams(value: unknown): AgentThreadSandboxParams {\n  if (!isPlainRecord(value) || !isJsonObject(value)) {\n    throw new AgentStorageError(\n      \"invalid_input\",\n      \"[Sixb] Thread sandbox must contain only JSON params.\"\n    )\n  }\n  return structuredClone(value)\n}\n\n/** Validate the provider-neutral model selection captured for a conversational turn. */\nexport function assertConversationAgentRunSpec(\n  spec: ConversationAgentRunSpec,\n  prefix = \"Sixb\"\n): void {\n  if (!isRecord(spec) || !isRecord(spec.model)) {\n    throw new AgentStorageError(\n      \"invalid_input\",\n      `[${prefix}] Conversational Agent run spec must contain a model reference.`\n    )\n  }\n  for (const [name, value] of [\n    [\"model.provider\", spec.model.provider],\n    [\"model.modelId\", spec.model.modelId],\n  ] as const) {\n    if (typeof value !== \"string\" || value.trim().length === 0) {\n      throw new AgentStorageError(\n        \"invalid_input\",\n        `[${prefix}] Conversational Agent run '${name}' must not be empty.`\n      )\n    }\n  }\n  if (spec.reasoning !== undefined && !isModelReasoning(spec.reasoning)) {\n    throw new AgentStorageError(\n      \"invalid_input\",\n      `[${prefix}] Conversational Agent reasoning must be one of: ${AGENT_REASONING_LEVELS.join(\", \")}, or a nonnegative budgetTokens object.`\n    )\n  }\n}\n\nfunction isRecord(value: unknown): value is Readonly<Record<string, unknown>> {\n  return typeof value === \"object\" && value !== null && !Array.isArray(value)\n}\n\n/** Validate the semantic link between a conversational Agent run and its immutable execution. */\nexport async function assertAgentRunExecution(input: {\n  readonly executions: ExecutionStorage\n  readonly projectId: string\n  readonly executionId: string\n  readonly runId: string\n}): Promise<ExecutionRecord> {\n  const execution = await findAgentRunExecution({\n    executions: input.executions,\n    projectId: input.projectId,\n    executionId: input.executionId,\n    runId: input.runId,\n    authority: { type: \"inherited\" },\n  })\n  if (!execution) {\n    throw new AgentStorageError(\n      \"invalid_input\",\n      `[Sixb] Execution '${input.executionId}' does not authorize Agent run '${input.runId}'.`\n    )\n  }\n  return execution\n}\n\n/** Validate the provider-neutral payload of an idempotent child admission. */\nexport function assertCreateSubagentRunInput(input: CreateSubagentRunInput, prefix = \"Sixb\"): void {\n  for (const [name, value] of [\n    [\"id\", input.id],\n    [\"projectId\", input.projectId],\n    [\"executionId\", input.executionId],\n    [\"parentRunId\", input.parentRunId],\n    [\"parentExecutionToken\", input.parentExecutionToken],\n    [\"spawnKey\", input.spawnKey],\n    [\"model.provider\", input.spec.model.provider],\n    [\"model.modelId\", input.spec.model.modelId],\n    [\"task\", input.spec.task],\n  ] as const) {\n    if (value.trim().length === 0) {\n      throw new AgentStorageError(\n        \"invalid_input\",\n        `[${prefix}] Subagent run '${name}' must not be empty.`\n      )\n    }\n  }\n  if (input.spawnKey.length > 128) {\n    throw new AgentStorageError(\n      \"invalid_input\",\n      `[${prefix}] Subagent spawn key must not exceed 128 characters.`\n    )\n  }\n  for (const [name, value] of [\n    [\"maxActiveChildren\", input.maxActiveChildren],\n    [\"spec.maxSteps\", input.spec.maxSteps],\n  ] as const) {\n    if (!Number.isSafeInteger(value) || value < 1) {\n      throw new AgentStorageError(\n        \"invalid_input\",\n        `[${prefix}] Subagent run '${name}' must be a positive safe integer.`\n      )\n    }\n  }\n  if (new Set(input.spec.toolNames).size !== input.spec.toolNames.length) {\n    throw new AgentStorageError(\n      \"invalid_input\",\n      `[${prefix}] Subagent run tool names must be unique.`\n    )\n  }\n  if (input.spec.reasoning !== undefined && !isModelReasoning(input.spec.reasoning)) {\n    throw new AgentStorageError(\n      \"invalid_input\",\n      `[${prefix}] Subagent reasoning must be one of: ${AGENT_REASONING_LEVELS.join(\", \")}, or a nonnegative budgetTokens object.`\n    )\n  }\n  if (input.spec.toolNames.some((name) => !name.trim())) {\n    throw new AgentStorageError(\n      \"invalid_input\",\n      `[${prefix}] Subagent run tool names must not be empty.`\n    )\n  }\n  if (input.createdAt && !Number.isFinite(input.createdAt.getTime())) {\n    throw new AgentStorageError(\n      \"invalid_input\",\n      `[${prefix}] Subagent run createdAt must be a valid date.`\n    )\n  }\n}\n\n/** Exact semantic match required when a durable spawn key is replayed. */\nexport function subagentRunMatchesCreateInput(\n  run: AgentRunRecord,\n  input: CreateSubagentRunInput\n): run is SubagentRunRecord {\n  return (\n    run.kind === \"subagent\" &&\n    run.id === input.id &&\n    run.projectId === input.projectId &&\n    run.executionId === input.executionId &&\n    run.parentRunId === input.parentRunId &&\n    run.spawnKey === input.spawnKey &&\n    isDeepStrictEqual(run.spec, input.spec)\n  )\n}\n\n/** Validate the small durable result returned by a successful child. */\nexport function assertSubagentRunResult(\n  result: SubagentRunResult | undefined,\n  runId: string,\n  prefix = \"Sixb\"\n): asserts result is SubagentRunResult {\n  const text = result?.text\n  const files = result?.files\n  const hasText = typeof text === \"string\" && text.trim().length > 0\n  const hasFiles = Array.isArray(files) && files.length > 0 && files.every(isFileRef)\n  if (!result || (!hasText && !hasFiles)) {\n    throw new AgentStorageError(\n      \"invalid_input\",\n      `[${prefix}] Succeeded subagent run '${runId}' requires text or files.`\n    )\n  }\n  if ((text !== undefined && !hasText) || (files !== undefined && !hasFiles)) {\n    throw new AgentStorageError(\n      \"invalid_input\",\n      `[${prefix}] Subagent run '${runId}' has an invalid result.`\n    )\n  }\n}\n\n/** Validate provider-independent checkpoint fields before entering a storage critical section. */\nexport function assertCreateAgentContextCheckpointInput(\n  input: CreateAgentContextCheckpointInput,\n  prefix = \"Sixb\"\n): void {\n  for (const [name, value] of [\n    [\"id\", input.id],\n    [\"projectId\", input.projectId],\n    [\"threadId\", input.threadId],\n    [\"createdByRunId\", input.createdByRunId],\n    [\"executionToken\", input.executionToken],\n    [\"summary\", input.summary],\n    [\"summaryModelId\", input.summaryModelId],\n  ] as const) {\n    if (value.trim().length === 0) {\n      throw new AgentStorageError(\n        \"invalid_input\",\n        `[${prefix}] Agent context checkpoint '${name}' must not be empty.`\n      )\n    }\n  }\n\n  if (input.summaryFormatVersion !== 1) {\n    throw new AgentStorageError(\n      \"invalid_input\",\n      `[${prefix}] Agent context checkpoint summary format version must be 1.`\n    )\n  }\n  if (input.reason !== \"threshold\" && input.reason !== \"overflow\") {\n    throw new AgentStorageError(\n      \"invalid_input\",\n      `[${prefix}] Agent context checkpoint reason must be 'threshold' or 'overflow'.`\n    )\n  }\n  if (\n    input.expectedPreviousCheckpointId !== null &&\n    input.expectedPreviousCheckpointId.trim().length === 0\n  ) {\n    throw new AgentStorageError(\n      \"invalid_input\",\n      `[${prefix}] Agent context checkpoint expected previous id must not be empty.`\n    )\n  }\n  if (input.createdAt && !Number.isFinite(input.createdAt.getTime())) {\n    throw new AgentStorageError(\n      \"invalid_input\",\n      `[${prefix}] Agent context checkpoint createdAt must be a valid date.`\n    )\n  }\n\n  for (const [name, value, minimum] of [\n    [\"expectedHeadSeq\", input.expectedHeadSeq, 1],\n    [\"summarizedThroughSeq\", input.summarizedThroughSeq, 1],\n    [\"observedHeadSeq\", input.observedHeadSeq, 1],\n    [\"estimatedInputTokensBefore\", input.estimatedInputTokensBefore, 0],\n    [\"estimatedInputTokensAfter\", input.estimatedInputTokensAfter, 0],\n  ] as const) {\n    if (!Number.isSafeInteger(value) || value < minimum) {\n      throw new AgentStorageError(\n        \"invalid_input\",\n        `[${prefix}] Agent context checkpoint '${name}' must be a safe integer greater than or equal to ${minimum}.`\n      )\n    }\n  }\n\n  if (input.observedHeadSeq !== input.expectedHeadSeq) {\n    throw new AgentStorageError(\n      \"invalid_input\",\n      `[${prefix}] Agent context checkpoint observed head must equal its expected message head.`\n    )\n  }\n  if (input.summarizedThroughSeq >= input.observedHeadSeq) {\n    throw new AgentStorageError(\n      \"invalid_input\",\n      `[${prefix}] Agent context checkpoint must retain the triggering head message.`\n    )\n  }\n}\n\n/** Assert that the current delivery still owns the active conversational run. */\nexport function assertAgentContextCheckpointAuthority(input: {\n  readonly create: CreateAgentContextCheckpointInput\n  readonly run: AgentRunRecord | null\n  readonly thread: AgentThreadRecord | null\n  readonly prefix?: string\n}): asserts input is typeof input & {\n  readonly run: AgentRunRecord\n  readonly thread: AgentThreadRecord\n} {\n  const { create, run, thread } = input\n  const prefix = input.prefix ?? \"Sixb\"\n  if (!run) {\n    throw new AgentStorageError(\n      \"run_not_found\",\n      `[${prefix}] Agent run '${create.createdByRunId}' not found for project '${create.projectId}'.`\n    )\n  }\n  if (!thread) {\n    throw new AgentStorageError(\n      \"thread_not_found\",\n      `[${prefix}] Agent thread '${create.threadId}' not found for project '${create.projectId}'.`\n    )\n  }\n  if (run.kind !== \"conversation\" || run.threadId !== create.threadId) {\n    throw new AgentStorageError(\n      \"invalid_input\",\n      `[${prefix}] Agent run '${run.id}' does not belong to thread '${create.threadId}'.`\n    )\n  }\n  if (run.status !== \"running\") {\n    throw new AgentStorageError(\n      \"invalid_state\",\n      `[${prefix}] Agent run '${run.id}' is not running (status '${run.status}').`\n    )\n  }\n  if (!run.execution || run.execution.token !== create.executionToken) {\n    throw new AgentStorageError(\n      \"execution_lost\",\n      `[${prefix}] Execution token is no longer current on agent run '${run.id}'.`\n    )\n  }\n  if (thread.activeRunId !== run.id) {\n    throw new AgentStorageError(\n      \"invalid_state\",\n      `[${prefix}] Agent run '${run.id}' no longer owns thread '${thread.id}'.`\n    )\n  }\n}\n\n/** Assert both compare-and-swap anchors and the retained-turn boundary. */\nexport function assertAgentContextCheckpointAnchors(input: {\n  readonly create: CreateAgentContextCheckpointInput\n  readonly latest: AgentContextCheckpointRecord | null\n  readonly headSeq: number\n  readonly firstRetained: AgentMessageRecord | null\n  readonly prefix?: string\n}): void {\n  const { create, latest, headSeq, firstRetained } = input\n  const prefix = input.prefix ?? \"Sixb\"\n  if (headSeq !== create.expectedHeadSeq) {\n    throw new AgentStorageError(\n      \"invalid_state\",\n      `[${prefix}] Agent thread '${create.threadId}' message head changed from ${create.expectedHeadSeq} to ${headSeq}.`\n    )\n  }\n\n  const latestId = latest?.id ?? null\n  if (latestId !== create.expectedPreviousCheckpointId) {\n    throw new AgentStorageError(\n      \"invalid_state\",\n      `[${prefix}] Agent thread '${create.threadId}' checkpoint head changed.`\n    )\n  }\n  if (latest && create.summarizedThroughSeq <= latest.summarizedThroughSeq) {\n    throw new AgentStorageError(\n      \"invalid_input\",\n      `[${prefix}] Agent context checkpoint boundary must advance beyond sequence ${latest.summarizedThroughSeq}.`\n    )\n  }\n  if (!firstRetained || firstRetained.seq !== create.summarizedThroughSeq + 1) {\n    throw new AgentStorageError(\n      \"invalid_state\",\n      `[${prefix}] Agent context checkpoint boundary does not align with stored thread messages.`\n    )\n  }\n  if (firstRetained.role !== \"user\") {\n    throw new AgentStorageError(\n      \"invalid_input\",\n      `[${prefix}] Agent context checkpoint must retain a complete turn beginning with a user message.`\n    )\n  }\n}\n\n/** Validate the mutable anchors again before returning an idempotently created checkpoint. */\nexport function assertAgentContextCheckpointReplayState(input: {\n  readonly create: CreateAgentContextCheckpointInput\n  readonly existing: AgentContextCheckpointRecord\n  readonly latest: AgentContextCheckpointRecord | null\n  readonly headSeq: number\n  readonly prefix?: string\n}): void {\n  const prefix = input.prefix ?? \"Sixb\"\n  if (input.headSeq !== input.create.expectedHeadSeq) {\n    throw new AgentStorageError(\n      \"invalid_state\",\n      `[${prefix}] Agent thread '${input.create.threadId}' message head changed from ${input.create.expectedHeadSeq} to ${input.headSeq}.`\n    )\n  }\n  if (input.latest?.id !== input.existing.id) {\n    throw new AgentStorageError(\n      \"invalid_state\",\n      `[${prefix}] Agent thread '${input.create.threadId}' checkpoint head changed after '${input.existing.id}'.`\n    )\n  }\n}\n\n/** Compare the durable semantic payload; delivery token and generated timestamp are not content. */\nexport function agentContextCheckpointMatchesCreateInput(\n  record: AgentContextCheckpointRecord,\n  input: CreateAgentContextCheckpointInput\n): boolean {\n  return (\n    record.id === input.id &&\n    record.projectId === input.projectId &&\n    record.threadId === input.threadId &&\n    record.createdByRunId === input.createdByRunId &&\n    (record.previousCheckpointId ?? null) === input.expectedPreviousCheckpointId &&\n    record.reason === input.reason &&\n    record.summary === input.summary &&\n    record.summaryFormatVersion === input.summaryFormatVersion &&\n    record.summarizedThroughSeq === input.summarizedThroughSeq &&\n    record.observedHeadSeq === input.observedHeadSeq &&\n    record.estimatedInputTokensBefore === input.estimatedInputTokensBefore &&\n    record.estimatedInputTokensAfter === input.estimatedInputTokensAfter &&\n    record.summaryModelId === input.summaryModelId\n  )\n}\n",
-    "import type { BlobBody, FileRef } from \"../blob-storage\"\nimport type { ConnectorRuntime } from \"../connectors\"\nimport type { JsonPrimitive, JsonValue, ReadonlyJsonValue } from \"../json\"\nimport type { Logger } from \"../logging\"\nimport { type LanguageModelRef, MODEL_REASONING_LEVELS, type ModelReasoning } from \"../models\"\nimport type { InferSchema } from \"../ontology/inference\"\nimport type { Schema } from \"../ontology/types\"\n\nexport type {\n  AgentContextEntryInput,\n  AgentContextInput,\n  AgentContextOrigin,\n  AgentContextPart,\n} from \"./context/entries\"\n\n/** Public capability reference used by security grants such as `can.run(agent)`. */\nexport interface AgentReference {\n  readonly kind: \"agent\"\n  readonly usage: AgentUsageReference\n}\n\n/** Project-wide AI accounting and limit capability, independent of permission to run the Agent. */\nexport interface AgentUsageReference {\n  readonly kind: \"aiUsage\"\n}\n\n/** Public metadata for the project's conversational Agent. */\nexport interface AgentDescriptor {\n  readonly name: string\n  readonly model: LanguageModelRef\n}\n\nexport type AgentReasoning = ModelReasoning\n\n/** @deprecated Use {@link AgentReasoning}. */\nexport type AgentReasoningLevel = AgentReasoning\n\nexport const AGENT_REASONING_LEVELS = MODEL_REASONING_LEVELS\n\ntype Simplify<T> = { [K in keyof T]: T[K] } & {}\ntype JsonifyAgentToolInput<T> = unknown extends T\n  ? ReadonlyJsonValue\n  : T extends Date\n    ? string\n    : T extends readonly (infer TItem)[]\n      ? readonly JsonifyAgentToolInput<TItem>[]\n      : T extends JsonPrimitive\n        ? T\n        : T extends object\n          ? { readonly [K in keyof T]: JsonifyAgentToolInput<T[K]> }\n          : never\n\n/** A model-facing object shape expressed with Sixb's schema DSL. */\nexport type AgentToolInputSchema = Readonly<Record<string, Schema>>\n\n/** Infer the handler input represented by an agent tool schema. */\nexport type InferAgentToolInputSchema<TInput extends AgentToolInputSchema> =\n  string extends keyof TInput\n    ? Readonly<Record<string, unknown>>\n    : Simplify<{\n        readonly [K in keyof TInput]: JsonifyAgentToolInput<InferSchema<TInput[K]>>\n      }>\n\n/** Identifies the conversational, workflow, or child Agent execution that invoked a tool. */\nexport type AgentToolRunInfo =\n  | {\n      readonly kind: \"conversation\"\n      readonly id: string\n      readonly threadId: string\n    }\n  | {\n      readonly kind: \"subagent\"\n      readonly id: string\n      readonly parentRunId: string\n    }\n  | {\n      readonly kind: \"workflow\"\n      readonly id: string\n      readonly workflowId: string\n      readonly stepId: string\n    }\n\n/** Input accepted by the run-scoped artifact publisher exposed to agent tools. */\nexport interface AgentToolArtifactPutInput {\n  readonly body: BlobBody\n  readonly fileName: string\n  readonly mediaType?: string\n}\n\n/** A durable artifact and its path inside the current run sandbox. */\nexport interface AgentToolArtifact {\n  readonly fileRef: FileRef\n  readonly sandboxPath: string\n}\n\n/** The narrow artifact-writing surface available to an agent tool call. */\nexport interface AgentToolArtifacts {\n  put(input: AgentToolArtifactPutInput): Promise<AgentToolArtifact>\n}\n\nexport type AgentToolTextContent = {\n  readonly type: \"text\"\n  readonly text: string\n}\n\nexport type AgentToolFileContent = {\n  readonly type: \"file\"\n  readonly fileRef: FileRef\n}\n\n/** Durable model-facing content returned by a file-aware tool. */\nexport type AgentToolContent = AgentToolTextContent | AgentToolFileContent\n\n/**\n * A file-aware tool result. The tag distinguishes this envelope from an ordinary JSON result while\n * keeping the whole value safe to persist in the durable tool-call trace.\n */\nexport type AgentToolResult = {\n  readonly kind: \"agentToolResult\"\n  readonly content: readonly AgentToolContent[]\n}\n\n/** The narrow, run-scoped surface passed to an agent tool handler. */\nexport interface AgentToolRunContext<\n  TInput extends Readonly<Record<string, unknown>> = Readonly<Record<string, unknown>>,\n> {\n  readonly input: TInput\n  readonly toolCallId: string\n  readonly signal: AbortSignal\n  readonly run: AgentToolRunInfo\n  readonly connector: ConnectorRuntime\n  readonly logger: Logger\n  readonly artifacts: AgentToolArtifacts\n}\n\n/** Agent tool handlers may return only values safe to persist in agent messages. */\nexport type AgentToolHandlerResult =\n  | ReadonlyJsonValue\n  | AgentToolResult\n  | Promise<ReadonlyJsonValue | AgentToolResult>\n\nexport type AgentToolHandler<TInput extends Readonly<Record<string, unknown>>> = (\n  context: AgentToolRunContext<TInput>\n) => AgentToolHandlerResult\n\n/**\n * Runtime definitions are stored heterogeneously. Keep variance erasure at this\n * boundary only; authoring through `run()` remains strictly contravariant.\n */\ntype StoredAgentToolHandler<TInput extends Readonly<Record<string, unknown>>> = {\n  bivarianceHack(context: AgentToolRunContext<TInput>): JsonValue | Promise<JsonValue>\n}[\"bivarianceHack\"]\n\n/** A reusable, inert model tool definition selected explicitly by an agent. */\nexport interface AgentToolDefinition<\n  TName extends string = string,\n  TInput extends AgentToolInputSchema = AgentToolInputSchema,\n> {\n  readonly kind: \"agentTool\"\n  readonly name: TName\n  readonly description: string\n  readonly input: TInput\n  readonly handler: StoredAgentToolHandler<InferAgentToolInputSchema<TInput>>\n}\n\n/** Infer the input received by a tool definition's handler. */\nexport type InferAgentToolInput<TTool extends AgentToolDefinition> = InferAgentToolInputSchema<\n  TTool[\"input\"]\n>\n\nexport interface AgentToolRunBuilder<TName extends string, TInput extends AgentToolInputSchema> {\n  run(\n    handler: AgentToolHandler<InferAgentToolInputSchema<TInput>>\n  ): AgentToolDefinition<TName, TInput>\n}\n\nexport interface AgentToolInputBuilder<TName extends string> {\n  input<const TInput extends AgentToolInputSchema>(\n    input: TInput\n  ): AgentToolRunBuilder<TName, TInput>\n}\n\nexport interface AgentToolDescriptionBuilder<TName extends string> {\n  description(description: string): AgentToolInputBuilder<TName>\n}\n",
-    "export type AgentStorageErrorCode =\n  | \"thread_not_found\"\n  | \"active_run_exists\"\n  | \"active_child_limit\"\n  | \"run_not_found\"\n  | \"invalid_input\"\n  | \"invalid_state\"\n  | \"execution_lost\"\n  | \"duplicate_id\"\n\n/**\n * Error for agent-storage invariants and invalid state transitions (single-flight, execution\n * ownership, run lifecycle, message append). Callers branch on `code` rather than message text.\n */\nexport class AgentStorageError extends Error {\n  readonly name = \"AgentStorageError\"\n\n  constructor(\n    readonly code: AgentStorageErrorCode,\n    message: string\n  ) {\n    super(message)\n  }\n}\n"
-  ],
-  "mappings": ";;;;;;;;;;;;;;;;;AAAA;;;ACqCO,IAAM,0BAAyB;;;ACvB/B,MAAM,2BAA0B,MAAM;AAAA,EAIhC;AAAA,EAHF,OAAO;AAAA,EAEhB,WAAW,CACA,MACT,SACA;AAAA,IACA,MAAM,OAAO;AAAA,IAHJ;AAAA;AAKb;;;AFCO,SAAS,6BAA4B,CAC1C,QACA,KACA,OACyB;AAAA,EACzB,MAAM,OAAO,CAAC,YAA2B;AAAA,IACvC,MAAM,IAAI,mBAAkB,iBAAiB,kBAAkB,SAAS;AAAA;AAAA,EAE1E,IAAI,CAAC,QAAQ;AAAA,IAAe,OAAO,KAAK,mCAAmC;AAAA,EAC3E,IAAI,CAAC,uBAAuB,KAAK,MAAM,IAAI;AAAA,IAAG,OAAO,KAAK,kBAAkB;AAAA,EAC5E,MAAM,QAAQ,OAAO;AAAA,EACrB,IAAI,MAAM,WAAW,YAAY;AAAA,IAC/B,IAAI,OAAO,gBAAgB;AAAA,MAAM,OAAO,KAAK,2CAA2C;AAAA,IACxF,IAAI,CAAC,SAAS,MAAM,SAAS,MAAM,uBAAuB,MAAM,SAAS,MAAM;AAAA,MAC7E,OAAO,KAAK,oCAAoC;AAAA,IAClD,IAAI,CAAC,CAAC,QAAQ,WAAW,aAAa,EAAE,SAAS,MAAM,MAAM,GAAG;AAAA,MAC9D,OAAO,KAAK,4BAA4B;AAAA,IAC1C;AAAA,IACA,OAAO;AAAA,MACL,MAAM,MAAM;AAAA,MACZ,QAAQ;AAAA,MACR,aAAa;AAAA,MACb,SAAS,IAAI,KAAK,EAAE,YAAY;AAAA,IAClC;AAAA,EACF;AAAA,EACA,IACE,KAAK,SAAS,kBACd,IAAI,aAAa,OAAO,MACxB,IAAI,WAAW,aACf,OAAO,gBAAgB,IAAI,MAC3B,IAAI,OAAO,MAAM,SACjB,IAAI,WAAW,UAAU,MAAM,kBAC/B,IAAI,UAAU,oBAAoB,QAAQ,KAAK,KAAK,IAAI,GACxD;AAAA,IACA,MAAM,IAAI,mBAAkB,kBAAkB,8CAA8C;AAAA,EAC9F;AAAA,EACA,IAAI,MAAM,WAAW,WAAW;AAAA,IAC9B,IAAI,SAAS,MAAM,WAAW,SAAS,MAAM,WAAW,SAAS;AAAA,MAC/D,OAAO,KAAK,gEAAgE;AAAA,IAC9E;AAAA,IACA,IAAI,SAAS,MAAM,SAAS,MAAM;AAAA,MAAM,OAAO,KAAK,eAAe;AAAA,IACnE,IAAI,CAAC,iBAAiB,KAAK,MAAM,iBAAiB;AAAA,MAChD,OAAO,KAAK,gCAAgC;AAAA,IAC9C,IAAI,OAAO,qBAAqB,MAAM,sBAAsB,MAAM,mBAAmB;AAAA,MACnF,OAAO,KAAK,gEAAgE;AAAA,IAC9E;AAAA,IACA,OAAO;AAAA,MACL,MAAM,MAAM;AAAA,MACZ,QAAQ;AAAA,MACR,aAAa,OAAO,eAAe;AAAA,SAC/B,OAAO,UAAU,EAAE,SAAS,MAAM,QAAQ,IAAI,CAAC;AAAA,MACnD,mBAAmB,MAAM;AAAA,MACzB,OAAO,EAAE,OAAO,MAAM,OAAO,gBAAgB,MAAM,eAAe;AAAA,IACpE;AAAA,EACF;AAAA,EACA,IACE,OAAO,WAAW,UAClB,MAAM,SAAS,MAAM,QACrB,MAAM,OAAO,UAAU,MAAM,SAC7B,MAAM,MAAM,mBAAmB,MAAM,gBACrC;AAAA,IACA,OAAO,KAAK,iCAAiC;AAAA,EAC/C;AAAA,EACA,IAAI,MAAM,WAAW,WAAW;AAAA,IAC9B,IACE,CAAC,MAAM,eACP,MAAM,aAAa,MAAM,QACzB,CAAC,uBAAuB,KAAK,MAAM,QAAQ,GAC3C;AAAA,MACA,OAAO,KAAK,gEAAgE;AAAA,IAC9E;AAAA,IAEA,OAAO;AAAA,SACF;AAAA,MACH,MAAM,MAAM;AAAA,MACZ,aAAa;AAAA,MACb,SAAS,IAAI,KAAK,EAAE,YAAY;AAAA,IAClC;AAAA,EACF;AAAA,EACA,IAAI,MAAM,WAAW,WAAW,CAAC,MAAM;AAAA,IAAa,OAAO,KAAK,+BAA+B;AAAA,EAC/F,OAAO;AAAA,IACL,MAAM,MAAM;AAAA,IACZ,QAAQ,MAAM;AAAA,IACd,aAAa,MAAM;AAAA,IACnB,mBAAmB,MAAM;AAAA,OACrB,MAAM,UAAU,EAAE,SAAS,MAAM,QAAQ,IAAI,CAAC;AAAA,EACpD;AAAA;AAIK,SAAS,iCAAgC,CAAC,OAA0C;AAAA,EACzF,IAAI,CAAC,cAAc,KAAK,KAAK,CAAC,cAAa,KAAK,GAAG;AAAA,IACjD,MAAM,IAAI,mBACR,iBACA,sDACF;AAAA,EACF;AAAA,EACA,OAAO,gBAAgB,KAAK;AAAA;AAIvB,SAAS,+BAA8B,CAC5C,MACA,SAAS,QACH;AAAA,EACN,IAAI,CAAC,SAAS,IAAI,KAAK,CAAC,SAAS,KAAK,KAAK,GAAG;AAAA,IAC5C,MAAM,IAAI,mBACR,iBACA,IAAI,uEACN;AAAA,EACF;AAAA,EACA,YAAY,MAAM,UAAU;AAAA,IAC1B,CAAC,kBAAkB,KAAK,MAAM,QAAQ;AAAA,IACtC,CAAC,iBAAiB,KAAK,MAAM,OAAO;AAAA,EACtC,GAAY;AAAA,IACV,IAAI,OAAO,UAAU,YAAY,MAAM,KAAK,EAAE,WAAW,GAAG;AAAA,MAC1D,MAAM,IAAI,mBACR,iBACA,IAAI,qCAAqC,0BAC3C;AAAA,IACF;AAAA,EACF;AAAA,EACA,IAAI,KAAK,cAAc,aAAa,CAAC,kBAAiB,KAAK,SAAS,GAAG;AAAA,IACrE,MAAM,IAAI,mBACR,iBACA,IAAI,0DAA0D,wBAAuB,KAAK,IAAI,0CAChG;AAAA,EACF;AAAA;AAGF,SAAS,QAAQ,CAAC,OAA4D;AAAA,EAC5E,OAAO,OAAO,UAAU,YAAY,UAAU,QAAQ,CAAC,MAAM,QAAQ,KAAK;AAAA;AAI5E,eAAsB,wBAAuB,CAAC,OAKjB;AAAA,EAC3B,MAAM,YAAY,MAAM,sBAAsB;AAAA,IAC5C,YAAY,MAAM;AAAA,IAClB,WAAW,MAAM;AAAA,IACjB,aAAa,MAAM;AAAA,IACnB,OAAO,MAAM;AAAA,IACb,WAAW,EAAE,MAAM,YAAY;AAAA,EACjC,CAAC;AAAA,EACD,IAAI,CAAC,WAAW;AAAA,IACd,MAAM,IAAI,mBACR,iBACA,qBAAqB,MAAM,8CAA8C,MAAM,SACjF;AAAA,EACF;AAAA,EACA,OAAO;AAAA;AAIF,SAAS,6BAA4B,CAAC,OAA+B,SAAS,QAAc;AAAA,EACjG,YAAY,MAAM,UAAU;AAAA,IAC1B,CAAC,MAAM,MAAM,EAAE;AAAA,IACf,CAAC,aAAa,MAAM,SAAS;AAAA,IAC7B,CAAC,eAAe,MAAM,WAAW;AAAA,IACjC,CAAC,eAAe,MAAM,WAAW;AAAA,IACjC,CAAC,wBAAwB,MAAM,oBAAoB;AAAA,IACnD,CAAC,YAAY,MAAM,QAAQ;AAAA,IAC3B,CAAC,kBAAkB,MAAM,KAAK,MAAM,QAAQ;AAAA,IAC5C,CAAC,iBAAiB,MAAM,KAAK,MAAM,OAAO;AAAA,IAC1C,CAAC,QAAQ,MAAM,KAAK,IAAI;AAAA,EAC1B,GAAY;AAAA,IACV,IAAI,MAAM,KAAK,EAAE,WAAW,GAAG;AAAA,MAC7B,MAAM,IAAI,mBACR,iBACA,IAAI,yBAAyB,0BAC/B;AAAA,IACF;AAAA,EACF;AAAA,EACA,IAAI,MAAM,SAAS,SAAS,KAAK;AAAA,IAC/B,MAAM,IAAI,mBACR,iBACA,IAAI,4DACN;AAAA,EACF;AAAA,EACA,YAAY,MAAM,UAAU;AAAA,IAC1B,CAAC,qBAAqB,MAAM,iBAAiB;AAAA,IAC7C,CAAC,iBAAiB,MAAM,KAAK,QAAQ;AAAA,EACvC,GAAY;AAAA,IACV,IAAI,CAAC,OAAO,cAAc,KAAK,KAAK,QAAQ,GAAG;AAAA,MAC7C,MAAM,IAAI,mBACR,iBACA,IAAI,yBAAyB,wCAC/B;AAAA,IACF;AAAA,EACF;AAAA,EACA,IAAI,IAAI,IAAI,MAAM,KAAK,SAAS,EAAE,SAAS,MAAM,KAAK,UAAU,QAAQ;AAAA,IACtE,MAAM,IAAI,mBACR,iBACA,IAAI,iDACN;AAAA,EACF;AAAA,EACA,IAAI,MAAM,KAAK,cAAc,aAAa,CAAC,kBAAiB,MAAM,KAAK,SAAS,GAAG;AAAA,IACjF,MAAM,IAAI,mBACR,iBACA,IAAI,8CAA8C,wBAAuB,KAAK,IAAI,0CACpF;AAAA,EACF;AAAA,EACA,IAAI,MAAM,KAAK,UAAU,KAAK,CAAC,SAAS,CAAC,KAAK,KAAK,CAAC,GAAG;AAAA,IACrD,MAAM,IAAI,mBACR,iBACA,IAAI,oDACN;AAAA,EACF;AAAA,EACA,IAAI,MAAM,aAAa,CAAC,OAAO,SAAS,MAAM,UAAU,QAAQ,CAAC,GAAG;AAAA,IAClE,MAAM,IAAI,mBACR,iBACA,IAAI,sDACN;AAAA,EACF;AAAA;AAIK,SAAS,8BAA6B,CAC3C,KACA,OAC0B;AAAA,EAC1B,OACE,IAAI,SAAS,cACb,IAAI,OAAO,MAAM,MACjB,IAAI,cAAc,MAAM,aACxB,IAAI,gBAAgB,MAAM,eAC1B,IAAI,gBAAgB,MAAM,eAC1B,IAAI,aAAa,MAAM,YACvB,kBAAkB,IAAI,MAAM,MAAM,IAAI;AAAA;AAKnC,SAAS,wBAAuB,CACrC,QACA,OACA,SAAS,QAC4B;AAAA,EACrC,MAAM,OAAO,QAAQ;AAAA,EACrB,MAAM,QAAQ,QAAQ;AAAA,EACtB,MAAM,UAAU,OAAO,SAAS,YAAY,KAAK,KAAK,EAAE,SAAS;AAAA,EACjE,MAAM,WAAW,MAAM,QAAQ,KAAK,KAAK,MAAM,SAAS,KAAK,MAAM,MAAM,UAAS;AAAA,EAClF,IAAI,CAAC,UAAW,CAAC,WAAW,CAAC,UAAW;AAAA,IACtC,MAAM,IAAI,mBACR,iBACA,IAAI,mCAAmC,gCACzC;AAAA,EACF;AAAA,EACA,IAAK,SAAS,aAAa,CAAC,WAAa,UAAU,aAAa,CAAC,UAAW;AAAA,IAC1E,MAAM,IAAI,mBACR,iBACA,IAAI,yBAAyB,+BAC/B;AAAA,EACF;AAAA;AAIK,SAAS,wCAAuC,CACrD,OACA,SAAS,QACH;AAAA,EACN,YAAY,MAAM,UAAU;AAAA,IAC1B,CAAC,MAAM,MAAM,EAAE;AAAA,IACf,CAAC,aAAa,MAAM,SAAS;AAAA,IAC7B,CAAC,YAAY,MAAM,QAAQ;AAAA,IAC3B,CAAC,kBAAkB,MAAM,cAAc;AAAA,IACvC,CAAC,kBAAkB,MAAM,cAAc;AAAA,IACvC,CAAC,WAAW,MAAM,OAAO;AAAA,IACzB,CAAC,kBAAkB,MAAM,cAAc;AAAA,EACzC,GAAY;AAAA,IACV,IAAI,MAAM,KAAK,EAAE,WAAW,GAAG;AAAA,MAC7B,MAAM,IAAI,mBACR,iBACA,IAAI,qCAAqC,0BAC3C;AAAA,IACF;AAAA,EACF;AAAA,EAEA,IAAI,MAAM,yBAAyB,GAAG;AAAA,IACpC,MAAM,IAAI,mBACR,iBACA,IAAI,oEACN;AAAA,EACF;AAAA,EACA,IAAI,MAAM,WAAW,eAAe,MAAM,WAAW,YAAY;AAAA,IAC/D,MAAM,IAAI,mBACR,iBACA,IAAI,4EACN;AAAA,EACF;AAAA,EACA,IACE,MAAM,iCAAiC,QACvC,MAAM,6BAA6B,KAAK,EAAE,WAAW,GACrD;AAAA,IACA,MAAM,IAAI,mBACR,iBACA,IAAI,0EACN;AAAA,EACF;AAAA,EACA,IAAI,MAAM,aAAa,CAAC,OAAO,SAAS,MAAM,UAAU,QAAQ,CAAC,GAAG;AAAA,IAClE,MAAM,IAAI,mBACR,iBACA,IAAI,kEACN;AAAA,EACF;AAAA,EAEA,YAAY,MAAM,OAAO,YAAY;AAAA,IACnC,CAAC,mBAAmB,MAAM,iBAAiB,CAAC;AAAA,IAC5C,CAAC,wBAAwB,MAAM,sBAAsB,CAAC;AAAA,IACtD,CAAC,mBAAmB,MAAM,iBAAiB,CAAC;AAAA,IAC5C,CAAC,8BAA8B,MAAM,4BAA4B,CAAC;AAAA,IAClE,CAAC,6BAA6B,MAAM,2BAA2B,CAAC;AAAA,EAClE,GAAY;AAAA,IACV,IAAI,CAAC,OAAO,cAAc,KAAK,KAAK,QAAQ,SAAS;AAAA,MACnD,MAAM,IAAI,mBACR,iBACA,IAAI,qCAAqC,yDAAyD,UACpG;AAAA,IACF;AAAA,EACF;AAAA,EAEA,IAAI,MAAM,oBAAoB,MAAM,iBAAiB;AAAA,IACnD,MAAM,IAAI,mBACR,iBACA,IAAI,sFACN;AAAA,EACF;AAAA,EACA,IAAI,MAAM,wBAAwB,MAAM,iBAAiB;AAAA,IACvD,MAAM,IAAI,mBACR,iBACA,IAAI,2EACN;AAAA,EACF;AAAA;AAIK,SAAS,sCAAqC,CAAC,OAQpD;AAAA,EACA,QAAQ,QAAQ,KAAK,WAAW;AAAA,EAChC,MAAM,SAAS,MAAM,UAAU;AAAA,EAC/B,IAAI,CAAC,KAAK;AAAA,IACR,MAAM,IAAI,mBACR,iBACA,IAAI,sBAAsB,OAAO,0CAA0C,OAAO,aACpF;AAAA,EACF;AAAA,EACA,IAAI,CAAC,QAAQ;AAAA,IACX,MAAM,IAAI,mBACR,oBACA,IAAI,yBAAyB,OAAO,oCAAoC,OAAO,aACjF;AAAA,EACF;AAAA,EACA,IAAI,IAAI,SAAS,kBAAkB,IAAI,aAAa,OAAO,UAAU;AAAA,IACnE,MAAM,IAAI,mBACR,iBACA,IAAI,sBAAsB,IAAI,kCAAkC,OAAO,YACzE;AAAA,EACF;AAAA,EACA,IAAI,IAAI,WAAW,WAAW;AAAA,IAC5B,MAAM,IAAI,mBACR,iBACA,IAAI,sBAAsB,IAAI,+BAA+B,IAAI,WACnE;AAAA,EACF;AAAA,EACA,IAAI,CAAC,IAAI,aAAa,IAAI,UAAU,UAAU,OAAO,gBAAgB;AAAA,IACnE,MAAM,IAAI,mBACR,kBACA,IAAI,8DAA8D,IAAI,MACxE;AAAA,EACF;AAAA,EACA,IAAI,OAAO,gBAAgB,IAAI,IAAI;AAAA,IACjC,MAAM,IAAI,mBACR,iBACA,IAAI,sBAAsB,IAAI,8BAA8B,OAAO,MACrE;AAAA,EACF;AAAA;AAIK,SAAS,oCAAmC,CAAC,OAM3C;AAAA,EACP,QAAQ,QAAQ,QAAQ,SAAS,kBAAkB;AAAA,EACnD,MAAM,SAAS,MAAM,UAAU;AAAA,EAC/B,IAAI,YAAY,OAAO,iBAAiB;AAAA,IACtC,MAAM,IAAI,mBACR,iBACA,IAAI,yBAAyB,OAAO,uCAAuC,OAAO,sBAAsB,UAC1G;AAAA,EACF;AAAA,EAEA,MAAM,WAAW,QAAQ,MAAM;AAAA,EAC/B,IAAI,aAAa,OAAO,8BAA8B;AAAA,IACpD,MAAM,IAAI,mBACR,iBACA,IAAI,yBAAyB,OAAO,oCACtC;AAAA,EACF;AAAA,EACA,IAAI,UAAU,OAAO,wBAAwB,OAAO,sBAAsB;AAAA,IACxE,MAAM,IAAI,mBACR,iBACA,IAAI,0EAA0E,OAAO,uBACvF;AAAA,EACF;AAAA,EACA,IAAI,CAAC,iBAAiB,cAAc,QAAQ,OAAO,uBAAuB,GAAG;AAAA,IAC3E,MAAM,IAAI,mBACR,iBACA,IAAI,uFACN;AAAA,EACF;AAAA,EACA,IAAI,cAAc,SAAS,QAAQ;AAAA,IACjC,MAAM,IAAI,mBACR,iBACA,IAAI,6FACN;AAAA,EACF;AAAA;AAIK,SAAS,wCAAuC,CAAC,OAM/C;AAAA,EACP,MAAM,SAAS,MAAM,UAAU;AAAA,EAC/B,IAAI,MAAM,YAAY,MAAM,OAAO,iBAAiB;AAAA,IAClD,MAAM,IAAI,mBACR,iBACA,IAAI,yBAAyB,MAAM,OAAO,uCAAuC,MAAM,OAAO,sBAAsB,MAAM,UAC5H;AAAA,EACF;AAAA,EACA,IAAI,MAAM,QAAQ,OAAO,MAAM,SAAS,IAAI;AAAA,IAC1C,MAAM,IAAI,mBACR,iBACA,IAAI,yBAAyB,MAAM,OAAO,4CAA4C,MAAM,SAAS,MACvG;AAAA,EACF;AAAA;AAIK,SAAS,yCAAwC,CACtD,QACA,OACS;AAAA,EACT,OACE,OAAO,OAAO,MAAM,MACpB,OAAO,cAAc,MAAM,aAC3B,OAAO,aAAa,MAAM,YAC1B,OAAO,mBAAmB,MAAM,mBAC/B,OAAO,wBAAwB,UAAU,MAAM,gCAChD,OAAO,WAAW,MAAM,UACxB,OAAO,YAAY,MAAM,WACzB,OAAO,yBAAyB,MAAM,wBACtC,OAAO,yBAAyB,MAAM,wBACtC,OAAO,oBAAoB,MAAM,mBACjC,OAAO,+BAA+B,MAAM,8BAC5C,OAAO,8BAA8B,MAAM,6BAC3C,OAAO,mBAAmB,MAAM;AAAA;",
-  "debugId": "D063548BEBDA9CF264756E2164756E21",
-  "names": []
-}