@sixb/core 0.1.17 → 0.1.18

package/dist/{chunk-9se093qz.js.map → chunk-gc4ntf7d.js.map}

@@ -6,6 +6,6 @@
     "import { blobIdFromDigest } from \"./derive\"\nimport { BlobStorageError } from \"./errors\"\nimport type {\n  BlobByteRange,\n  BlobInfo,\n  BlobStorage,\n  FileRef,\n  PutBlobInput,\n  RangeReadableBlobStorage,\n} from \"./types\"\nimport {\n  assertExpectedBlobSize,\n  assertValidExpectedBlobSize,\n  computeBlobDigest,\n  createFileRef,\n  readBlobBody,\n} from \"./utils\"\n\ntype StoredBlob = {\n  readonly bytes: Uint8Array\n  readonly info: BlobInfo\n}\n\nexport class InMemoryBlobStorage implements BlobStorage, RangeReadableBlobStorage {\n  private readonly blobsById = new Map<string, StoredBlob>()\n\n  async put(input: PutBlobInput): Promise<FileRef> {\n    assertValidExpectedBlobSize(input.expectedSizeBytes)\n    const bytes = await readBlobBody(input.body, input.signal)\n    assertExpectedBlobSize(input.expectedSizeBytes, bytes.byteLength, \"BlobStorage\")\n    const digest = computeBlobDigest(bytes)\n    const blobId = blobIdFromDigest(digest)\n\n    let stored = this.blobsById.get(blobId)\n    if (!stored) {\n      stored = {\n        bytes,\n        info: {\n          blobId,\n          digest,\n          sizeBytes: bytes.byteLength,\n        },\n      }\n      this.blobsById.set(blobId, stored)\n    }\n\n    return createFileRef(input, stored.info)\n  }\n\n  async open(blobId: string): Promise<ReadableStream<Uint8Array>> {\n    const stored = this.requireStoredBlob(blobId)\n    return new Blob([new Uint8Array(stored.bytes)]).stream()\n  }\n\n  async openRange(blobId: string, range: BlobByteRange): Promise<ReadableStream<Uint8Array>> {\n    const stored = this.requireStoredBlob(blobId)\n    const bytes = stored.bytes.slice(range.start, range.endInclusive + 1)\n    return new Blob([bytes]).stream()\n  }\n\n  async stat(blobId: string): Promise<BlobInfo | null> {\n    const stored = this.blobsById.get(blobId)\n    return stored ? { ...stored.info } : null\n  }\n\n  private requireStoredBlob(blobId: string): StoredBlob {\n    const stored = this.blobsById.get(blobId)\n    if (!stored) {\n      throw new BlobStorageError(`[BlobStorage] Unknown blob '${blobId}'`)\n    }\n\n    return stored\n  }\n}\n"
   ],
   "mappings": ";;;;;;;;AAAA;AAKO,SAAS,eAAc,CAAC,OAA6C;AAAA,EAC1E,IAAI,iBAAiB,gBAAgB;AAAA,IACnC,OAAO;AAAA,EACT;AAAA,EAEA,IAAI,iBAAiB,MAAM;AAAA,IACzB,OAAO,MAAM,OAAO;AAAA,EACtB;AAAA,EAEA,IAAI,iBAAiB,aAAa;AAAA,IAChC,OAAO,IAAI,KAAK,CAAC,MAAM,MAAM,CAAC,CAAC,CAAC,EAAE,OAAO;AAAA,EAC3C;AAAA,EAEA,MAAM,QAAQ,IAAI,WAAW,IAAI,YAAY,MAAM,UAAU,CAAC;AAAA,EAC9D,MAAM,IAAI,KAAK;AAAA,EACf,OAAO,IAAI,KAAK,CAAC,KAAK,CAAC,EAAE,OAAO;AAAA;AAGlC,eAAsB,aAAY,CAChC,OACA,QACqB;AAAA,EAErB,QAAQ,eAAe;AAAA,EAEvB,IAAI,iBAAiB,YAAY;AAAA,IAC/B,OAAO,IAAI,WAAW,KAAK;AAAA,EAC7B;AAAA,EAEA,IAAI,iBAAiB,aAAa;AAAA,IAChC,OAAO,IAAI,WAAW,MAAM,MAAM,CAAC,CAAC;AAAA,EACtC;AAAA,EAEA,IAAI,iBAAiB,MAAM;AAAA,IACzB,MAAM,QAAQ,IAAI,WAAW,MAAM,MAAM,YAAY,CAAC;AAAA,IACtD,QAAQ,eAAe;AAAA,IACvB,OAAO;AAAA,EACT;AAAA,EAEA,MAAM,SAAS,MAAM,UAAU;AAAA,EAC/B,MAAM,SAAuB,CAAC;AAAA,EAC9B,IAAI,aAAa;AAAA,EACjB,MAAM,gBAAgB,MAAM;AAAA,IACrB,OAAO,OAAO,QAAQ,MAAM;AAAA;AAAA,EAEnC,QAAQ,iBAAiB,SAAS,eAAe,EAAE,MAAM,KAAK,CAAC;AAAA,EAE/D,IAAI;AAAA,IACF,OAAO,MAAM;AAAA,MACX,QAAQ,MAAM,UAAU,MAAM,OAAO,KAAK;AAAA,MAC1C,QAAQ,eAAe;AAAA,MACvB,IAAI,MAAM;AAAA,QACR;AAAA,MACF;AAAA,MAEA,MAAM,QAAQ,IAAI,WAAW,KAAK;AAAA,MAClC,OAAO,KAAK,KAAK;AAAA,MACjB,cAAc,MAAM;AAAA,IACtB;AAAA,YACA;AAAA,IACA,QAAQ,oBAAoB,SAAS,aAAa;AAAA,IAClD,OAAO,YAAY;AAAA;AAAA,EAGrB,MAAM,QAAQ,IAAI,WAAW,UAAU;AAAA,EACvC,IAAI,SAAS;AAAA,EACb,WAAW,SAAS,QAAQ;AAAA,IAC1B,MAAM,IAAI,OAAO,MAAM;AAAA,IACvB,UAAU,MAAM;AAAA,EAClB;AAAA,EAEA,OAAO;AAAA;AAGF,SAAS,uBAAsB,CACpC,mBACA,iBACA,WAAW,eACL;AAAA,EACN,6BAA4B,mBAAmB,QAAQ;AAAA,EACvD,IAAI,sBAAsB,WAAW;AAAA,IACnC;AAAA,EACF;AAAA,EAEA,IAAI,oBAAoB,mBAAmB;AAAA,IACzC,MAAM,IAAI,kBACR,IAAI,0CAA0C,qCAAqC,kBACrF;AAAA,EACF;AAAA;AAGK,SAAS,4BAA2B,CACzC,mBACA,WAAW,eACL;AAAA,EACN,IAAI,sBAAsB,WAAW;AAAA,IACnC;AAAA,EACF;AAAA,EAEA,IAAI,CAAC,OAAO,cAAc,iBAAiB,KAAK,oBAAoB,GAAG;AAAA,IACrE,MAAM,IAAI,kBACR,IAAI,kEACN;AAAA,EACF;AAAA;AAGK,SAAS,kBAAiB,CAAC,OAA+B;AAAA,EAC/D,MAAM,OAAO,WAAW,QAAQ,EAAE,OAAO,KAAK,EAAE,OAAO,KAAK;AAAA,EAC5D,OAAO,UAAU;AAAA;AAGZ,SAAS,cAAa,CAAC,OAAqB,MAAyB;AAAA,EAC1E,OAAO;AAAA,IACL,QAAQ,KAAK;AAAA,IACb,QAAQ,KAAK;AAAA,IACb,WAAW,KAAK;AAAA,OACZ,MAAM,aAAa,YAAY,EAAE,UAAU,MAAM,SAAS,IAAI,CAAC;AAAA,OAC/D,MAAM,cAAc,YAAY,EAAE,WAAW,MAAM,UAAU,IAAI,CAAC;AAAA,OAClE,MAAM,gBAAgB,YAAY,EAAE,aAAa,MAAM,YAAY,IAAI,CAAC;AAAA,EAC9E;AAAA;;;ACrGK,MAAM,qBAAqE;AAAA,EAC/D,YAAY,IAAI;AAAA,OAE3B,IAAG,CAAC,OAAuC;AAAA,IAC/C,6BAA4B,MAAM,iBAAiB;AAAA,IACnD,MAAM,QAAQ,MAAM,cAAa,MAAM,MAAM,MAAM,MAAM;AAAA,IACzD,wBAAuB,MAAM,mBAAmB,MAAM,YAAY,aAAa;AAAA,IAC/E,MAAM,SAAS,mBAAkB,KAAK;AAAA,IACtC,MAAM,SAAS,kBAAiB,MAAM;AAAA,IAEtC,IAAI,SAAS,KAAK,UAAU,IAAI,MAAM;AAAA,IACtC,IAAI,CAAC,QAAQ;AAAA,MACX,SAAS;AAAA,QACP;AAAA,QACA,MAAM;AAAA,UACJ;AAAA,UACA;AAAA,UACA,WAAW,MAAM;AAAA,QACnB;AAAA,MACF;AAAA,MACA,KAAK,UAAU,IAAI,QAAQ,MAAM;AAAA,IACnC;AAAA,IAEA,OAAO,eAAc,OAAO,OAAO,IAAI;AAAA;AAAA,OAGnC,KAAI,CAAC,QAAqD;AAAA,IAC9D,MAAM,SAAS,KAAK,kBAAkB,MAAM;AAAA,IAC5C,OAAO,IAAI,KAAK,CAAC,IAAI,WAAW,OAAO,KAAK,CAAC,CAAC,EAAE,OAAO;AAAA;AAAA,OAGnD,UAAS,CAAC,QAAgB,OAA2D;AAAA,IACzF,MAAM,SAAS,KAAK,kBAAkB,MAAM;AAAA,IAC5C,MAAM,QAAQ,OAAO,MAAM,MAAM,MAAM,OAAO,MAAM,eAAe,CAAC;AAAA,IACpE,OAAO,IAAI,KAAK,CAAC,KAAK,CAAC,EAAE,OAAO;AAAA;AAAA,OAG5B,KAAI,CAAC,QAA0C;AAAA,IACnD,MAAM,SAAS,KAAK,UAAU,IAAI,MAAM;AAAA,IACxC,OAAO,SAAS,KAAK,OAAO,KAAK,IAAI;AAAA;AAAA,EAG/B,iBAAiB,CAAC,QAA4B;AAAA,IACpD,MAAM,SAAS,KAAK,UAAU,IAAI,MAAM;AAAA,IACxC,IAAI,CAAC,QAAQ;AAAA,MACX,MAAM,IAAI,kBAAiB,+BAA+B,SAAS;AAAA,IACrE;AAAA,IAEA,OAAO;AAAA;AAEX;",
-  "debugId": "952B02F894863A4864756E2164756E21",
+  "debugId": "4CEC9C8A0E6E7B7264756E2164756E21",
   "names": []
 }

package/dist/{chunk-98cw09sw.js → chunk-hkc3jct7.js}

@@ -13,6 +13,7 @@ var AGENT_RUN_FINISH_REASONS2 = [
   "content-filter",
   "tool-calls",
   "timeout",
+  "interrupted",
   "error",
   "other",
   "unknown"
@@ -29,9 +30,10 @@ var AGENT_RUN_DIAGNOSTIC_CODES2 = [
   "output_budget_exhausted",
   "output_collection_failed",
   "output_file_changed",
-  "output_storage_failed"
+  "output_storage_failed",
+  "step_limit_reached"
 ];
 
 export { AGENT_RUN_FAILURE_CODES2, AGENT_RUN_FINISH_REASONS2, coerceAgentRunFinishReason2, AGENT_RUN_DIAGNOSTIC_CODES2 };
 
-//# debugId=305DAAAEB1335EE664756E2164756E21
+//# debugId=DD020A3A47567D1D64756E2164756E21

package/dist/chunk-hkc3jct7.js.map

@@ -0,0 +1,10 @@
+{
+  "version": 3,
+  "sources": ["../src/storage/agents/types.ts"],
+  "sourcesContent": [
+    "import type { AgentMessage, AgentMessagePart, AgentMessageRole } from \"../../agents/message\"\nimport type { AgentReasoning } from \"../../agents/types\"\nimport type { Principal } from \"../../auth\"\nimport type { FileRef } from \"../../blob-storage\"\nimport type { SixbErrorCode, SixbFailure } from \"../../errors/types\"\nimport type { JsonValue } from \"../../json\"\nimport type { LanguageModelRef } from \"../../models\"\n\n// ── agent_threads — one conversation with an agent ──────────────────────────────────────────────\n\nexport type AgentThreadStatus = \"active\" | \"archived\"\n\n/** Immutable, non-secret application input. Never store resolved env or credentials here. */\nexport type AgentThreadSandboxParams = Readonly<Record<string, JsonValue>>\n\n/** Worker-owned state, independent from the immutable application binding. */\nexport interface AgentThreadSandboxState {\n  /** Exact name passed to the provider. Replacements always receive a fresh name. */\n  readonly name: string\n  readonly status: \"new\" | \"busy\" | \"ready\" | \"blocked\" | \"unavailable\"\n  readonly sourceFingerprint?: string\n  readonly initialized: boolean\n  /** Durable context boundary: local files from before this reset are no longer available. */\n  readonly resetAt?: string\n  /** Never expires automatically: a delayed provider operation must not reach a successor. */\n  readonly owner?: { readonly runId: string; readonly executionToken: string }\n}\n\nexport type TransitionAgentThreadSandboxInput = {\n  readonly projectId: string\n  readonly id: string\n} & (\n  | {\n      readonly action: \"acquire\"\n      readonly runId: string\n      readonly executionToken: string\n      readonly name: string\n      readonly sourceFingerprint: string\n    }\n  | {\n      readonly action: \"replace\"\n      readonly runId: string\n      readonly executionToken: string\n      readonly name: string\n      readonly nextName: string\n    }\n  | {\n      readonly action: \"settle\"\n      readonly runId: string\n      readonly executionToken: string\n      readonly name: string\n      readonly status: \"ready\" | \"blocked\" | \"unavailable\"\n      readonly initialized: boolean\n    }\n  | {\n      readonly action: \"recreate\"\n      readonly expectedSandboxName: string\n      readonly name: string\n    }\n)\n\nexport interface AgentThreadRecord {\n  readonly id: string\n  readonly projectId: string\n  /** Who owns/opened the thread. Reuses the canonical auth principal (gains `agent` later for free). */\n  readonly ownerPrincipal: Principal\n  readonly title?: string\n  readonly sandboxParams?: AgentThreadSandboxParams\n  readonly sandboxState?: AgentThreadSandboxState\n  readonly status: AgentThreadStatus\n  /** Single-flight anchor: the id of the one run currently allowed to write, or `null` when idle. */\n  readonly activeRunId: string | null\n  readonly lastMessageAt?: Date\n  readonly messageCount: number\n  readonly createdAt: Date\n  readonly updatedAt: Date\n}\n\nexport interface CreateAgentThreadInput {\n  readonly id: string\n  readonly projectId: string\n  readonly ownerPrincipal: Principal\n  readonly title?: string\n  readonly sandboxParams?: AgentThreadSandboxParams\n  readonly status?: AgentThreadStatus\n  readonly createdAt?: Date\n  readonly updatedAt?: Date\n}\n\nexport interface ListAgentThreadsInput {\n  readonly projectId: string\n  readonly statuses?: readonly AgentThreadStatus[]\n  readonly ownerPrincipal?: Principal\n  readonly limit?: number\n  readonly offset?: number\n  readonly order?: \"asc\" | \"desc\"\n}\n\nexport interface ListAgentThreadsResult {\n  readonly threads: readonly AgentThreadRecord[]\n  readonly hasMore: boolean\n  readonly total: number\n}\n\n// ── agent_runs — one loop execution (the worker job; attribution + fencing) ───────────────────\n\n/** Lifecycle shared by every durable agent execution, conversational or workflow-owned. */\nexport type AgentExecutionStatus = \"queued\" | \"running\" | \"succeeded\" | \"failed\" | \"cancelled\"\n\nexport type AgentRunStatus = AgentExecutionStatus\nexport type AgentRunKind = \"conversation\" | \"subagent\"\n\n/** Error codes an agent execution can persist and expose through its public contract. */\nexport const AGENT_RUN_FAILURE_CODES = [\n  \"internal.unexpected\",\n  \"runtime.cancelled\",\n  \"agent.execution_failed\",\n  \"ai.usage_limit_exceeded\",\n  \"ai.usage_limit_unavailable\",\n] as const satisfies readonly [SixbErrorCode, ...SixbErrorCode[]]\n\nexport type AgentRunFailureCode = (typeof AGENT_RUN_FAILURE_CODES)[number]\n\n/**\n * Why a run ended — Sixb's provider-independent vocabulary. It includes model-loop reasons plus\n * platform-level endings such as `timeout`, or `interrupted` for a turn whose worker died before\n * finishing it, so reads remain typed and exhaustive. `other` and `unknown` preserve terminal state\n * when a provider adds a new reason.\n */\nexport const AGENT_RUN_FINISH_REASONS = [\n  \"stop\",\n  \"length\",\n  \"content-filter\",\n  \"tool-calls\",\n  \"timeout\",\n  \"interrupted\",\n  \"error\",\n  \"other\",\n  \"unknown\",\n] as const\n\nexport type AgentRunFinishReason = (typeof AGENT_RUN_FINISH_REASONS)[number]\n\n/**\n * Coerce an external finish-reason string — a DB column or an SDK value — to {@link\n * AgentRunFinishReason}. An unrecognised value becomes `\"unknown\"` rather than being dropped.\n */\nexport function coerceAgentRunFinishReason(\n  value: string | null | undefined\n): AgentRunFinishReason | undefined {\n  if (value === null || value === undefined) {\n    return undefined\n  }\n  return (AGENT_RUN_FINISH_REASONS as readonly string[]).includes(value)\n    ? (value as AgentRunFinishReason)\n    : \"unknown\"\n}\n\n/** Stable, user-facing diagnostics emitted by the platform while executing a run. */\nexport const AGENT_RUN_DIAGNOSTIC_CODES = [\n  \"output_file_limit_exceeded\",\n  \"output_file_too_large\",\n  \"output_budget_exhausted\",\n  \"output_collection_failed\",\n  \"output_file_changed\",\n  \"output_storage_failed\",\n  \"step_limit_reached\",\n] as const\n\n/**\n * Closed on purpose, and the wire is closed with it.\n *\n * Sixb writes these codes and the generated client is what reads them, so an open union would only\n * be honest if the HTTP schema were open too — and that costs the OpenAPI enum, the client's\n * autocompletion, and Atlas's exhaustive `switch`. Sixb owns both ends, so a new code is a minor\n * version bump: cheap here, and a broken `switch` is better than a 500 from `z.enum`.\n */\nexport type AgentRunDiagnosticCode = (typeof AGENT_RUN_DIAGNOSTIC_CODES)[number]\nexport type AgentRunDiagnosticSeverity = \"warning\" | \"error\"\n\nexport interface AgentRunDiagnostic {\n  readonly code: AgentRunDiagnosticCode\n  readonly severity: AgentRunDiagnosticSeverity\n  /** `output` for published files, `run` for the turn as a whole. */\n  readonly scope: \"output\" | \"run\"\n  /** Relative path inside the run's published output directory, when one file is involved. */\n  readonly path?: string\n  /** Sanitized, stable copy suitable for display to an end user. */\n  readonly message: string\n}\n\n/**\n * Authorization state for the current queue delivery.\n *\n * `queueLeaseExpiresAt` is a persisted projection of `ClaimedQueueJob.leaseExpiresAt`, not an\n * independently managed run lease. It may only be extended from a successful queue lease renewal.\n */\nexport interface AgentRunExecution {\n  readonly token: string\n  readonly queueLeaseExpiresAt: Date\n}\n\ninterface AgentRunRecordBase {\n  readonly id: string\n  readonly projectId: string\n  readonly executionId: string\n  readonly status: AgentRunStatus\n  readonly modelId?: string\n  /** Why the run ended (our own SDK-independent enum). */\n  readonly finishReason?: AgentRunFinishReason\n  /** Platform diagnostics are transcript annotations, never agent-authored message content. */\n  readonly diagnostics?: readonly AgentRunDiagnostic[]\n  /** Portable failure snapshot when the run did not succeed. */\n  readonly error?: SixbFailure<AgentRunFailureCode>\n  /** Execution attempts: `0` while queued, `1` on first start, incremented on redelivery. */\n  readonly attempt: number\n  readonly execution?: AgentRunExecution\n  readonly createdAt: Date\n  readonly startedAt?: Date\n  readonly completedAt?: Date\n}\n\nexport interface ConversationAgentRunRecord extends AgentRunRecordBase {\n  readonly kind: \"conversation\"\n  readonly threadId: string\n  readonly triggerMessageId: string\n  /** Immutable model selection captured at admission. Absent only on runs predating this field. */\n  readonly spec?: ConversationAgentRunSpec\n}\n\n/** Immutable, serialisable model selection and requester settings for one conversational turn. */\nexport interface ConversationAgentRunSpec {\n  readonly model: LanguageModelRef\n  readonly reasoning?: AgentReasoning\n  /** Canonical IANA time zone of the requester. Absent uses the project time zone. */\n  readonly timeZone?: string\n  /** Canonical BCP 47 language of the requester. Absent uses the project locale. */\n  readonly locale?: string\n}\n\n/** Immutable, serialisable child configuration captured before dispatch. */\nexport interface SubagentRunSpec {\n  readonly model: LanguageModelRef\n  readonly reasoning?: AgentReasoning\n  /** Focused task supplied by the parent Agent. */\n  readonly task: string\n  /** Project tools available when the child was admitted. Runtime tools are injected separately. */\n  readonly toolNames: readonly string[]\n  readonly maxSteps: number\n}\n\n/** Durable child output returned to its parent by `wait_agent`. */\nexport interface SubagentRunResult {\n  readonly text?: string\n  readonly files?: readonly FileRef[]\n}\n\nexport interface SubagentRunRecord extends AgentRunRecordBase {\n  readonly kind: \"subagent\"\n  readonly parentRunId: string\n  /** Stable parent-selected key that makes repeated tool execution idempotent. */\n  readonly spawnKey: string\n  readonly spec: SubagentRunSpec\n  readonly result?: SubagentRunResult\n}\n\nexport type AgentRunRecord = ConversationAgentRunRecord | SubagentRunRecord\n\nexport interface CreateAgentRunInput {\n  readonly id: string\n  readonly projectId: string\n  readonly executionId: string\n  readonly threadId: string\n  readonly triggerMessageId: string\n  readonly spec: ConversationAgentRunSpec\n  readonly createdAt?: Date\n}\n\nexport interface CreateSubagentRunInput {\n  readonly id: string\n  readonly projectId: string\n  readonly executionId: string\n  readonly parentRunId: string\n  /** Current parent delivery token. New children are admitted only while that delivery owns it. */\n  readonly parentExecutionToken: string\n  readonly spawnKey: string\n  readonly spec: SubagentRunSpec\n  /** Internal safety bound enforced atomically across worker processes. */\n  readonly maxActiveChildren: number\n  readonly createdAt?: Date\n}\n\nexport interface StartAgentRunInput {\n  readonly id: string\n  readonly projectId: string\n  readonly modelId?: string\n  readonly execution: AgentRunExecution\n  readonly startedAt?: Date\n}\n\nexport interface FinishQueuedAgentRunInput {\n  readonly id: string\n  readonly projectId: string\n  readonly status: \"failed\" | \"cancelled\"\n  readonly error?: SixbFailure<AgentRunFailureCode>\n  readonly completedAt?: Date\n}\n\nexport interface ReclaimAgentRunInput {\n  readonly id: string\n  readonly projectId: string\n  readonly execution: AgentRunExecution\n}\n\nexport interface ConfirmAgentRunExecutionOwnershipInput {\n  readonly id: string\n  readonly projectId: string\n  readonly executionToken: string\n  /** Exact expiration returned by the queue claim or its latest successful renewal. */\n  readonly queueLeaseExpiresAt: Date\n}\n\nexport type FinishAgentRunInput =\n  | {\n      readonly id: string\n      readonly projectId: string\n      readonly executionToken: string\n      readonly status: \"succeeded\"\n      readonly modelId?: string\n      readonly finishReason?: AgentRunFinishReason\n      readonly diagnostics?: readonly AgentRunDiagnostic[]\n      readonly result?: SubagentRunResult\n      readonly completedAt?: Date\n    }\n  | {\n      readonly id: string\n      readonly projectId: string\n      readonly executionToken: string\n      readonly status: \"failed\" | \"cancelled\"\n      readonly modelId?: string\n      readonly finishReason?: AgentRunFinishReason\n      readonly diagnostics?: readonly AgentRunDiagnostic[]\n      readonly error?: SixbFailure<AgentRunFailureCode>\n      readonly completedAt?: Date\n    }\n\nexport interface ListAgentRunsInput {\n  readonly projectId: string\n  readonly kinds?: readonly AgentRunKind[]\n  readonly threadId?: string\n  readonly parentRunId?: string\n  readonly statuses?: readonly AgentRunStatus[]\n  /** Effective start time; runs that never started use `createdAt`. */\n  readonly startedAfter?: Date\n  /** Effective start time; runs that never started use `createdAt`. */\n  readonly startedBefore?: Date\n  readonly limit?: number\n  readonly offset?: number\n  readonly order?: \"asc\" | \"desc\"\n}\n\nexport interface ListAgentRunsResult {\n  readonly runs: readonly AgentRunRecord[]\n  readonly hasMore: boolean\n  readonly total: number\n}\n\n// ── agent_messages — one message (assistant messages inserted only once finalized) ─────────────\n\nexport type { AgentMessageRole }\n\nexport interface AgentMessageRecord {\n  readonly id: string\n  readonly projectId: string\n  readonly threadId: string\n  /** The run that produced this message; `null` for user-authored messages. */\n  readonly runId: string | null\n  readonly role: AgentMessageRole\n  /** Principal that authored this persisted message: caller for user messages, agent identity later for assistant messages. */\n  readonly authorPrincipal?: Principal\n  /** Monotonic per thread, assigned by the store. */\n  readonly seq: number\n  /** Structured message content — text / reasoning / step boundaries / tool calls. */\n  readonly parts: readonly AgentMessagePart[]\n  /** Message-level metadata (mirrors `UIMessage.metadata`). */\n  readonly metadata?: JsonValue\n  /** Versions the `parts` shape so it can be migrated; stamped from `AGENT_MESSAGE_CONTENT_VERSION`. */\n  readonly contentVersion: number\n  readonly createdAt: Date\n  readonly completedAt?: Date\n}\n\n/** Append a message: a {@link AgentMessage} (role + parts + metadata) plus its storage identity. */\nexport interface AppendAgentMessageInput extends AgentMessage {\n  readonly id: string\n  readonly projectId: string\n  readonly threadId: string\n  readonly runId: string | null\n  readonly authorPrincipal?: Principal\n  readonly createdAt?: Date\n  readonly completedAt?: Date\n}\n\nexport interface DeleteAgentMessagesByRunInput {\n  readonly projectId: string\n  readonly threadId: string\n  readonly runId: string\n}\n\nexport interface ListAgentMessagesInput {\n  readonly projectId: string\n  readonly threadId: string\n  /** Return only messages whose per-thread sequence is greater than this retained boundary. */\n  readonly afterSeq?: number\n  readonly roles?: readonly AgentMessageRole[]\n  readonly limit?: number\n  readonly offset?: number\n  readonly order?: \"asc\" | \"desc\"\n}\n\nexport interface ListAgentMessagesResult {\n  readonly messages: readonly AgentMessageRecord[]\n  readonly hasMore: boolean\n  readonly total: number\n}\n\n// ── agent_context_checkpoints — append-only model-context boundaries ──────────────────────────\n\nexport type AgentContextCheckpointReason = \"threshold\" | \"overflow\"\n\n/**\n * A durable summary boundary used only when projecting a thread into model context.\n *\n * Checkpoints never replace or mutate transcript messages. Normal thread reads remain authoritative\n * and complete; the worker reads the latest checkpoint and only the retained message tail.\n */\nexport interface AgentContextCheckpointRecord {\n  readonly id: string\n  readonly projectId: string\n  readonly threadId: string\n  readonly createdByRunId: string\n  readonly previousCheckpointId?: string\n  readonly reason: AgentContextCheckpointReason\n  readonly summary: string\n  readonly summaryFormatVersion: 1\n  readonly summarizedThroughSeq: number\n  readonly observedHeadSeq: number\n  readonly estimatedInputTokensBefore: number\n  readonly estimatedInputTokensAfter: number\n  readonly summaryModelId: string\n  readonly createdAt: Date\n}\n\nexport interface CreateAgentContextCheckpointInput {\n  readonly id: string\n  readonly projectId: string\n  readonly threadId: string\n  readonly createdByRunId: string\n  /** Compare-and-swap anchor. `null` means the thread must not have a prior checkpoint. */\n  readonly expectedPreviousCheckpointId: string | null\n  /** Compare-and-swap anchor for the complete transcript observed by the summarizer. */\n  readonly expectedHeadSeq: number\n  /** Current delivery token for `createdByRunId`; stale redeliveries must not write. */\n  readonly executionToken: string\n  readonly reason: AgentContextCheckpointReason\n  readonly summary: string\n  readonly summaryFormatVersion: 1\n  readonly summarizedThroughSeq: number\n  readonly observedHeadSeq: number\n  readonly estimatedInputTokensBefore: number\n  readonly estimatedInputTokensAfter: number\n  readonly summaryModelId: string\n  readonly createdAt?: Date\n}\n\n// ── Store ───────────────────────────────────────────────────────────────────────────────────────\n\nexport interface AgentThreadStore {\n  /** Atomic run-fenced transition, or explicit idle-thread recreation. */\n  transitionSandbox(input: TransitionAgentThreadSandboxInput): Promise<AgentThreadSandboxState>\n  create(input: CreateAgentThreadInput): Promise<AgentThreadRecord>\n  getById(params: { projectId: string; id: string }): Promise<AgentThreadRecord | null>\n  list(input: ListAgentThreadsInput): Promise<ListAgentThreadsResult>\n}\n\nexport interface AgentRunStore {\n  /** Persist a queued run and atomically claim the thread's single-flight slot. */\n  create(input: CreateAgentRunInput): Promise<ConversationAgentRunRecord>\n  /** Persist or replay one idempotent child run while atomically enforcing parent fan-out. */\n  createSubagent(input: CreateSubagentRunInput): Promise<SubagentRunRecord>\n  /** Transition a queued run to running and install the first delivery's execution token. */\n  start(input: StartAgentRunInput): Promise<AgentRunRecord>\n  /** Finish a queued run before execution and release the thread's single-flight slot. */\n  finishQueued(input: FinishQueuedAgentRunInput): Promise<AgentRunRecord>\n  /** Rotate the execution token for a redelivered running job (`attempt++`). */\n  reclaim(input: ReclaimAgentRunInput): Promise<AgentRunRecord>\n  /**\n   * Project the queue's latest confirmed ownership expiration onto the current execution.\n   * Implementations must fence by token and must never move the expiration backwards.\n   */\n  confirmExecutionOwnership(input: ConfirmAgentRunExecutionOwnershipInput): Promise<AgentRunRecord>\n  /** Finalize a run and release the thread's `activeRunId`. */\n  finish(input: FinishAgentRunInput): Promise<AgentRunRecord>\n  getById(params: { projectId: string; id: string }): Promise<AgentRunRecord | null>\n  getByIds(params: {\n    projectId: string\n    ids: readonly string[]\n  }): Promise<readonly AgentRunRecord[]>\n  list(input: ListAgentRunsInput): Promise<ListAgentRunsResult>\n}\n\nexport interface AgentMessageStore {\n  /** Insert a message (its `parts` are the canonical content) and bump thread stats. */\n  append(input: AppendAgentMessageInput): Promise<AgentMessageRecord>\n  /** Delete every message produced by one run and repair the thread's message stats. */\n  deleteByRunId(input: DeleteAgentMessagesByRunInput): Promise<number>\n  getById(params: { projectId: string; id: string }): Promise<AgentMessageRecord | null>\n  list(input: ListAgentMessagesInput): Promise<ListAgentMessagesResult>\n}\n\nexport interface AgentContextCheckpointStore {\n  /**\n   * Append one checkpoint after atomically validating run ownership and both transcript anchors.\n   * Repeating the same payload for the same creating run is idempotent.\n   */\n  create(input: CreateAgentContextCheckpointInput): Promise<AgentContextCheckpointRecord>\n  /** Return checkpoints created by the requested runs, in first-occurrence input order. */\n  getByRunIds(input: {\n    readonly projectId: string\n    readonly runIds: readonly string[]\n  }): Promise<readonly AgentContextCheckpointRecord[]>\n  getLatest(input: {\n    readonly projectId: string\n    readonly threadId: string\n  }): Promise<AgentContextCheckpointRecord | null>\n}\n\nexport interface AgentStorage {\n  readonly threads: AgentThreadStore\n  readonly runs: AgentRunStore\n  readonly messages: AgentMessageStore\n  readonly checkpoints: AgentContextCheckpointStore\n}\n"
+  ],
+  "mappings": ";;AAiHO,IAAM,2BAA0B;AAAA,EACrC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAUO,IAAM,4BAA2B;AAAA,EACtC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAQO,SAAS,2BAA0B,CACxC,OACkC;AAAA,EAClC,IAAI,UAAU,QAAQ,UAAU,WAAW;AAAA,IACzC;AAAA,EACF;AAAA,EACA,OAAQ,0BAA+C,SAAS,KAAK,IAChE,QACD;AAAA;AAIC,IAAM,8BAA6B;AAAA,EACxC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;",
+  "debugId": "DD020A3A47567D1D64756E2164756E21",
+  "names": []
+}

package/dist/{chunk-pja9jfz6.js → chunk-htr6wjmv.js}

@@ -3,7 +3,7 @@ import {
   MAX_OBJECT_READ_FACETS2,
   isAllowed2,
   assertAuthorized2
-} from "./chunk-5be2ath4.js";
+} from "./chunk-qkbx3tf6.js";
 import {
   validateSchemaValue2,
   validatePropertyValue2,
@@ -12,10 +12,10 @@ import {
   isTextSchema,
   isContainsSchema,
   queryScalarKindForSchema
-} from "./chunk-rpxz486p.js";
+} from "./chunk-y05543x6.js";
 import {
   validateRerankingResults
-} from "./chunk-s7ftxrdr.js";
+} from "./chunk-29yx306f.js";
 import {
   hasVectorProfile2,
   isVectorProfileQuery2,
@@ -28,7 +28,7 @@ import {
   vectorConfiguration,
   vectorSources,
   normalizeVector2
-} from "./chunk-5yd8cchh.js";
+} from "./chunk-qq90g05n.js";
 import {
   normalizeObjectQuery2,
   ObjectQueryValidationError2,
@@ -67,6 +67,41 @@ var NOOP_QUERY_ADMISSION = Object.freeze({
   }),
   set: (input) => input.states[0] ?? NOOP_ADMISSION_STATE
 });
+function composeObjectQueryAdmissions(first, second) {
+  const parts = new WeakMap;
+  const join = (left, right) => {
+    const state = Object.freeze({});
+    parts.set(state, [left, right]);
+    return state;
+  };
+  const split = (state) => {
+    const pair = parts.get(state);
+    if (!pair)
+      throw new Error("[Sixb] Composed query admission received a foreign state.");
+    return pair;
+  };
+  const transition = (left, right) => {
+    const denial = left.denial ?? right.denial;
+    return { state: join(left.state, right.state), ...denial ? { denial } : {} };
+  };
+  const admission = {
+    empty: () => join(first.empty(), second.empty()),
+    source: (input) => transition(first.source(input), second.source(input)),
+    edge: (input) => {
+      const [left, right] = split(input.state);
+      return transition(first.edge({ ...input, state: left }), second.edge({ ...input, state: right }));
+    },
+    property: (input) => {
+      const [left, right] = split(input.state);
+      return first.property({ ...input, state: left }) ?? second.property({ ...input, state: right });
+    },
+    set: (input) => {
+      const pairs = input.states.map(split);
+      return join(first.set({ ...input, states: pairs.map(([left]) => left) }), second.set({ ...input, states: pairs.map(([, right]) => right) }));
+    }
+  };
+  return Object.freeze(admission);
+}
 function validateObjectQuery2(query, options) {
   const admitted = validateObjectQueryWithAdmission(query, options, NOOP_QUERY_ADMISSION);
   return {
@@ -299,7 +334,7 @@ function validateStart(objectTypeId, includeSubtypes, path, ctx) {
     addIssue(ctx, path, "unknown_object_type", formatUnknownObjectTypeMessage(objectTypeId));
     return { result: { objectTypeIds: [] }, query: { kind: "start", objectTypeId } };
   }
-  const objectTypeIds = includeSubtypes ? uniqueStrings([objectTypeId, ...ctx.ontology.listSubTypes(objectTypeId)]) : [objectTypeId];
+  const objectTypeIds = includeSubtypes ? withSubtypes([objectTypeId], ctx) : [objectTypeId];
   return { result: { objectTypeIds }, query: { kind: "start", objectTypeId, includeSubtypes } };
 }
 function validatePredicate(predicate, shape, admissionState, path, ctx) {
@@ -513,16 +548,15 @@ function validateTextQuery(query, fields, shape, admissionState, path, ctx) {
       addIssue(ctx, path, "missing_text_fields", `Object type '${objectType.id}' must define search.defaultText or the text query must specify fields`);
       continue;
     }
+    const admitted = admitTextFields(fieldIds, fields === undefined, {
+      state: admissionState,
+      objectTypeId: objectType.id,
+      path: `${path}.fields`,
+      ctx
+    });
     if (fieldsByObjectType)
-      fieldsByObjectType[objectType.id] = uniqueStrings(fieldIds);
+      fieldsByObjectType[objectType.id] = uniqueStrings(admitted);
     for (const fieldId of fieldIds) {
-      admitProperty(ctx, {
-        state: admissionState,
-        propertyId: fieldId,
-        objectTypeId: objectType.id,
-        use: "text",
-        path: `${path}.fields`
-      });
       const property = getProperty(objectType, fieldId);
       if (!property) {
         addIssue(ctx, path, "unknown_text_field", `Text query references unknown property '${fieldId}' on '${objectType.id}'`);
@@ -538,6 +572,29 @@ function validateTextQuery(query, fields, shape, admissionState, path, ctx) {
   }
   return fieldsByObjectType ? { fieldsByObjectType } : {};
 }
+function admitTextFields(fieldIds, defaults, input) {
+  const admitted = [];
+  let firstDenial;
+  for (const fieldId of fieldIds) {
+    const denial = input.ctx.admission.property({
+      state: input.state,
+      propertyId: fieldId,
+      objectTypeId: input.objectTypeId,
+      use: "text",
+      path: input.path
+    });
+    if (!denial) {
+      admitted.push(fieldId);
+    } else if (!defaults) {
+      recordAdmissionDenial(input.ctx, denial);
+    } else {
+      firstDenial ??= denial;
+    }
+  }
+  if (admitted.length === 0 && firstDenial)
+    recordAdmissionDenial(input.ctx, firstDenial);
+  return admitted;
+}
 function validateVectorProfileQuery(query, shape, state, path, ctx) {
   const types = getObjectTypesForResult(shape, ctx);
   if (types.length !== 1 || !Number.isSafeInteger(query.k) || query.k < 1 || query.k > MAX_VECTOR_K) {
@@ -605,7 +662,9 @@ function validateOutgoingTraverse(linkId, shape, path, ctx) {
       }
     }
   }
-  return { objectTypeIds: uniqueStrings(targetTypeIds) };
+  const objectTypeIds = uniqueStrings(targetTypeIds);
+  touchLinkTargets(objectTypeIds, ctx);
+  return { objectTypeIds };
 }
 function validateIncomingTraverse(linkId, sourceObjectTypeId, shape, path, ctx) {
   let candidateTypes = ctx.ontology.listObjectTypes();
@@ -688,7 +747,14 @@ function resolveOutgoingExpansionTargets(linkId, sourceObjectTypeId, shape, path
   if (!foundOnAnyType) {
     addIssue(ctx, path, "unknown_expand_link", `Expansion references link '${linkId}' not present on result type ${shape.objectTypeIds.join(" | ")} (an expand abandoned by a later traverse?)`);
   }
-  return { objectTypeIds: uniqueStrings(targetTypeIds) };
+  const objectTypeIds = uniqueStrings(targetTypeIds);
+  touchLinkTargets(objectTypeIds, ctx);
+  return { objectTypeIds };
+}
+function touchLinkTargets(objectTypeIds, ctx) {
+  for (const objectTypeId of withSubtypes(objectTypeIds, ctx)) {
+    ctx.touchedObjectTypeIds.add(objectTypeId);
+  }
 }
 function resolveIncomingExpansionTargets(linkId, sourceObjectTypeId, shape, path, ctx) {
   let candidateTypes = ctx.ontology.listObjectTypes();
@@ -900,6 +966,9 @@ function keyForTypeIds(typeIds) {
 function uniqueStrings(values) {
   return [...new Set(values)];
 }
+function withSubtypes(objectTypeIds, ctx) {
+  return uniqueStrings(objectTypeIds.flatMap((id) => [id, ...ctx.ontology.listSubTypes(id)]));
+}
 function admitTransition(ctx, transition) {
   if (transition.denial)
     recordAdmissionDenial(ctx, transition.denial);
@@ -1385,15 +1454,7 @@ var DEFAULT_MAX_FACET_LIMIT = 1000;
 var DEFAULT_MAX_EXPANSION_FANOUT = 1000;
 var PAGE_TOKEN_PREFIX = "offset:";
 async function executeObjectQuery2(input, options) {
-  const normalized = normalizeObjectQuery2(input.query);
-  const validated = validateObjectQuery2(normalized, {
-    ontology: options.ontology,
-    maxLimit: options.maxLimit,
-    maxPageSize: options.maxPageSize,
-    maxRefs: options.maxRefs,
-    normalize: false
-  });
-  assertQueryViewable(input.projectId, validated, options);
+  const validated = validateExecutableQuery(input, options);
   const capabilities = options.storage.queryCapabilities();
   const hasQueryObjects = typeof options.storage.queryObjects === "function";
   const hasCountObjects = typeof options.storage.countObjects === "function";
@@ -1458,15 +1519,7 @@ async function executeObjectQuery2(input, options) {
   return { ...fallback, plan };
 }
 async function countObjects2(input, options) {
-  const normalized = normalizeObjectQuery2(input.query);
-  const validated = validateObjectQuery2(normalized, {
-    ontology: options.ontology,
-    maxLimit: options.maxLimit,
-    maxPageSize: options.maxPageSize,
-    maxRefs: options.maxRefs,
-    normalize: false
-  });
-  assertQueryViewable(input.projectId, validated, options);
+  const validated = validateExecutableQuery(input, options);
   const capabilities = options.storage.queryCapabilities();
   const hasQueryObjects = typeof options.storage.queryObjects === "function";
   const hasCountObjects = typeof options.storage.countObjects === "function";
@@ -1512,15 +1565,7 @@ async function countObjects2(input, options) {
   return { count: evaluation.total, plan };
 }
 async function existsObjects2(input, options) {
-  const normalized = normalizeObjectQuery2(input.query);
-  const validated = validateObjectQuery2(normalized, {
-    ontology: options.ontology,
-    maxLimit: options.maxLimit,
-    maxPageSize: options.maxPageSize,
-    maxRefs: options.maxRefs,
-    normalize: false
-  });
-  assertQueryViewable(input.projectId, validated, options);
+  const validated = validateExecutableQuery(input, options);
   const capabilities = options.storage.queryCapabilities();
   const hasQueryObjects = typeof options.storage.queryObjects === "function";
   const hasCountObjects = typeof options.storage.countObjects === "function";
@@ -1566,16 +1611,18 @@ async function existsObjects2(input, options) {
   return { exists: evaluation.total > 0, plan };
 }
 async function facetObjects2(input, options) {
-  const normalized = normalizeObjectQuery2(input.query);
-  const validated = validateObjectQuery2(normalized, {
-    ontology: options.ontology,
-    maxLimit: options.maxLimit,
-    maxPageSize: options.maxPageSize,
-    maxRefs: options.maxRefs,
-    normalize: false
-  });
-  assertQueryViewable(input.projectId, validated, options);
+  const validated = validateExecutableQuery(input, options);
   const facets = validateObjectFacetRequests(input.facets, validated.result.objectTypeIds, options);
+  facets.forEach((facet, index) => {
+    const denial = options.admission?.property({
+      state: validated.admissionState,
+      propertyId: facet.propertyId,
+      use: "facet",
+      path: `$.facets[${index}].propertyId`
+    });
+    if (denial)
+      throw denial;
+  });
   const aggregateQuery = stripOuterRowShape(validated.query);
   const capabilities = options.storage.queryCapabilities();
   const hasQueryObjects = typeof options.storage.queryObjects === "function";
@@ -1625,6 +1672,21 @@ async function facetObjects2(input, options) {
     plan
   };
 }
+function validateExecutableQuery(input, options) {
+  const validationOptions = {
+    ontology: options.ontology,
+    maxLimit: options.maxLimit,
+    maxPageSize: options.maxPageSize,
+    maxRefs: options.maxRefs,
+    normalize: false
+  };
+  const normalized = normalizeObjectQuery2(input.query);
+  const validated = validateObjectQuery2(normalized, validationOptions);
+  assertQueryViewable(input.projectId, validated, options);
+  if (!options.admission)
+    return { ...validated, admissionState: {} };
+  return validateObjectQueryWithAdmission(normalized, validationOptions, options.admission);
+}
 function assertQueryViewable(projectId, validated, authorization) {
   if (!authorization.runtimeAuthorization && !authorization.authorization)
     return;
@@ -2619,6 +2681,6 @@ async function hydrateLinkQueryObjects(projectId, selected, links, storage) {
     return row ? [row] : [];
   });
 }
-export { validateObjectQuery2, validateObjectQueryWithAdmission, collectObjectQueryValidationIssues2, resolveObjectQueryResultShape2, planObjectQuery2, executeObjectQuery2, countObjects2, existsObjects2, facetObjects2, validateObjectFacetRequests, explainObjectQuery2, preflightObjectQueryLinks, executeObjectQueryLinks2 };
+export { composeObjectQueryAdmissions, validateObjectQuery2, validateObjectQueryWithAdmission, collectObjectQueryValidationIssues2, resolveObjectQueryResultShape2, planObjectQuery2, executeObjectQuery2, countObjects2, existsObjects2, facetObjects2, validateObjectFacetRequests, explainObjectQuery2, preflightObjectQueryLinks, executeObjectQueryLinks2 };
 
-//# debugId=A31A747EB003D67964756E2164756E21
+//# debugId=E66D459FE088A8ED64756E2164756E21