@sixb/core 0.1.17 → 0.1.18

package/dist/{chunk-dmn70ztd.js → chunk-pfp1txq2.js}

@@ -38,11 +38,16 @@ class AgentRequestError2 extends Error {
 var MAX_AGENT_CONTEXT_ENTRIES2 = 12;
 var MAX_AGENT_APP_STATE_ENTRY_BYTES2 = 16 * 1024;
 var MAX_AGENT_APP_STATE_TOTAL_BYTES2 = 64 * 1024;
+var MAX_AGENT_CONTEXT_LABEL_LENGTH2 = 200;
 var agentContext2 = {
-  object(objectType, primaryId) {
+  object(objectType, primaryId, options = {}) {
+    const label = options.label === undefined ? undefined : objectContextLabel(options.label, "agentContext.object() label", (message) => {
+      throw new TypeError(`[Sixb] ${message}.`);
+    });
     return {
       kind: "object",
-      ref: { objectTypeId: objectType.id, primaryId }
+      ref: { objectTypeId: objectType.id, primaryId },
+      ...label === undefined ? {} : { label }
     };
   },
   appState(id, input) {
@@ -69,7 +74,7 @@ function normalizeAgentContextEntries2(input) {
   for (const [index, rawEntry] of input.entries()) {
     const entry = normalizeEntry(rawEntry, index);
     const identity = agentContextIdentity2(entry.context);
-    const serialized = stableJsonStringify2(entry);
+    const serialized = stableJsonStringify2(entry.context.kind === "object" ? { ...entry, context: { kind: "object", ref: entry.context.ref } } : entry);
     const existing = byIdentity.get(identity);
     if (existing !== undefined) {
       if (existing === serialized)
@@ -105,8 +110,13 @@ function normalizeEntry(rawEntry, index) {
       invalidContext(`context[${index}].context.ref must be an object`);
     const objectTypeId = requireNonEmptyString(context.ref.objectTypeId, `context[${index}].context.ref.objectTypeId`);
     const primaryId = requireNonEmptyString(context.ref.primaryId, `context[${index}].context.ref.primaryId`);
+    const label = context.label === undefined ? undefined : objectContextLabel(context.label, `context[${index}].context.label`, invalidContext);
     return {
-      context: { kind: "object", ref: { objectTypeId, primaryId } },
+      context: {
+        kind: "object",
+        ref: { objectTypeId, primaryId },
+        ...label === undefined ? {} : { label }
+      },
       origin: rawEntry.origin
     };
   }
@@ -131,6 +141,15 @@ function normalizeEntry(rawEntry, index) {
   }
   invalidContext(`context[${index}].context.kind must be 'object' or 'app-state'`);
 }
+function objectContextLabel(value, label, fail) {
+  const trimmed = typeof value === "string" ? value.trim() : "";
+  if (!trimmed)
+    fail(`${label} must be a non-empty string`);
+  if (trimmed.length > MAX_AGENT_CONTEXT_LABEL_LENGTH2) {
+    fail(`${label} must be at most ${MAX_AGENT_CONTEXT_LABEL_LENGTH2} characters`);
+  }
+  return trimmed;
+}
 function requireNonEmptyString(value, label) {
   if (typeof value !== "string" || value.trim().length === 0) {
     invalidContext(`${label} must be a non-empty string`);
@@ -147,6 +166,6 @@ function invalidContext(message) {
   throw new AgentRequestError2("invalid_context", `[Sixb] Invalid agent context: ${message}.`);
 }
 
-export { AgentDefinitionError2, AgentToolPublicError2, AgentToolResultValidationError2, AgentRequestError2, MAX_AGENT_CONTEXT_ENTRIES2, MAX_AGENT_APP_STATE_ENTRY_BYTES2, MAX_AGENT_APP_STATE_TOTAL_BYTES2, agentContext2, agentContextIdentity2, agentContextFingerprint2, normalizeAgentContextEntries2 };
+export { AgentDefinitionError2, AgentToolPublicError2, AgentToolResultValidationError2, AgentRequestError2, MAX_AGENT_CONTEXT_ENTRIES2, MAX_AGENT_APP_STATE_ENTRY_BYTES2, MAX_AGENT_APP_STATE_TOTAL_BYTES2, MAX_AGENT_CONTEXT_LABEL_LENGTH2, agentContext2, agentContextIdentity2, agentContextFingerprint2, normalizeAgentContextEntries2 };
 
-//# debugId=20BA4BBDB86CC4AA64756E2164756E21
+//# debugId=D2B517DE0E9AFCDE64756E2164756E21

package/dist/chunk-pfp1txq2.js.map

@@ -0,0 +1,11 @@
+{
+  "version": 3,
+  "sources": ["../src/agents/errors.ts", "../src/agents/context/entries.ts"],
+  "sourcesContent": [
+    "/**\n * Base error for the agents module. Specific subclasses extend this so callers\n * can catch any agent-scoped failure with a single `instanceof AgentDefinitionError` check.\n */\nexport class AgentDefinitionError extends Error {\n  readonly name: string = \"AgentDefinitionError\"\n}\n\n/**\n * An agent-tool failure whose message is intentionally safe to expose to the model and persist in\n * the durable trace. Tool authors must keep the message free of credentials and internal details;\n * unknown errors remain masked by the worker.\n */\nexport class AgentToolPublicError extends Error {\n  readonly name: string = \"AgentToolPublicError\"\n}\n\n/** Raised when an agent tool result cannot cross the durable message boundary. */\nexport class AgentToolResultValidationError extends Error {\n  readonly name = \"AgentToolResultValidationError\"\n\n  constructor(\n    readonly toolName: string,\n    readonly reason: string,\n    options?: ErrorOptions\n  ) {\n    super(`[Sixb] Agent tool '${toolName}' returned an invalid result; ${reason}.`, options)\n  }\n}\n\nexport type AgentRequestErrorCode =\n  | \"agent_selector_removed\"\n  | \"agent_not_found\"\n  | \"model_not_found\"\n  | \"invalid_model_selection\"\n  | \"invalid_locale\"\n  | \"invalid_message\"\n  | \"run_not_found\"\n  | \"run_not_retryable\"\n  | \"thread_not_found\"\n  | \"active_run_exists\"\n  | \"authority_not_inheritable\"\n  | \"invalid_context\"\n  | \"invalid_attachment\"\n  | \"storage_unavailable\"\n  | \"sandbox_not_configured\"\n  | \"invalid_sandbox_params\"\n  | \"sandbox_execution_unavailable\"\n\n/**\n * Raised by {@link requestAgentRun} (the trigger). Callers branch on `code` rather than message text\n * — e.g. the HTTP layer maps `active_run_exists` to 409 and `agent_not_found` to 404.\n */\nexport class AgentRequestError extends Error {\n  readonly name = \"AgentRequestError\"\n\n  constructor(\n    readonly code: AgentRequestErrorCode,\n    message: string\n  ) {\n    super(message)\n  }\n}\n",
+    "import type { JsonValue } from \"../../json\"\nimport { cloneJsonValue, getInvalidJsonValueReason, stableJsonStringify } from \"../../json\"\nimport type { ObjectRef } from \"../../ontology/refs\"\nimport { AgentRequestError } from \"../errors\"\n\nexport type AgentContextInput =\n  | {\n      readonly kind: \"object\"\n      readonly ref: ObjectRef\n      /**\n       * What the chat shows for this object instead of its title. Display only: it is not part of\n       * the context's identity and is never sent to the model.\n       */\n      readonly label?: string\n    }\n  | {\n      readonly kind: \"app-state\"\n      readonly id: string\n      readonly label: string\n      readonly description: string\n      readonly value: JsonValue\n    }\n\nexport type AgentContextOrigin = \"ambient\" | \"explicit\"\n\nexport interface AgentContextEntryInput {\n  readonly context: AgentContextInput\n  readonly origin: AgentContextOrigin\n}\n\n/** Durable user-message part. Origin is display provenance, never an authorization grant. */\nexport interface AgentContextPart extends AgentContextEntryInput {\n  readonly type: \"context\"\n}\n\nexport const MAX_AGENT_CONTEXT_ENTRIES = 12\nexport const MAX_AGENT_APP_STATE_ENTRY_BYTES = 16 * 1024\nexport const MAX_AGENT_APP_STATE_TOTAL_BYTES = 64 * 1024\nexport const MAX_AGENT_CONTEXT_LABEL_LENGTH = 200\n\n/** Typed constructors for context values shared by custom apps and agent clients. */\nexport const agentContext = {\n  object<const TObjectTypeId extends string>(\n    objectType: { readonly id: TObjectTypeId },\n    primaryId: string,\n    options: { readonly label?: string } = {}\n  ) {\n    const label =\n      options.label === undefined\n        ? undefined\n        : objectContextLabel(options.label, \"agentContext.object() label\", (message) => {\n            throw new TypeError(`[Sixb] ${message}.`)\n          })\n    return {\n      kind: \"object\" as const,\n      ref: { objectTypeId: objectType.id, primaryId },\n      ...(label === undefined ? {} : { label }),\n    }\n  },\n\n  appState<const TValue extends JsonValue>(\n    id: string,\n    input: {\n      readonly label: string\n      readonly description: string\n      readonly value: TValue\n    }\n  ) {\n    return { kind: \"app-state\" as const, id, ...input }\n  },\n}\n\n/** Stable identity shared by core deduplication and context-aware clients. */\nexport function agentContextIdentity(context: AgentContextInput): string {\n  return context.kind === \"object\"\n    ? `object:${encodeURIComponent(context.ref.objectTypeId)}:${encodeURIComponent(context.ref.primaryId)}`\n    : `app-state:${encodeURIComponent(context.id)}`\n}\n\n/** Stable semantic key for client-side comparisons. */\nexport function agentContextFingerprint(context: AgentContextInput): string {\n  return stableJsonStringify(context)\n}\n\n/**\n * Validate transport-independent context rules and clone mutable app state before it can become\n * durable. Object existence and visibility are resolved separately because they require a runtime.\n */\nexport function normalizeAgentContextEntries(\n  input: readonly AgentContextEntryInput[] | undefined\n): readonly AgentContextEntryInput[] {\n  if (input === undefined) return []\n  if (!Array.isArray(input)) invalidContext(\"context must be an array\")\n  if (input.length > MAX_AGENT_CONTEXT_ENTRIES) {\n    invalidContext(`context cannot contain more than ${MAX_AGENT_CONTEXT_ENTRIES} entries`)\n  }\n\n  const entries: AgentContextEntryInput[] = []\n  const byIdentity = new Map<string, string>()\n  let totalAppStateBytes = 0\n\n  for (const [index, rawEntry] of input.entries()) {\n    const entry = normalizeEntry(rawEntry, index)\n    const identity = agentContextIdentity(entry.context)\n    // A label is display only, so two entries that differ only by label are the same entry; the\n    // first one's label is kept.\n    const serialized = stableJsonStringify(\n      entry.context.kind === \"object\"\n        ? { ...entry, context: { kind: \"object\", ref: entry.context.ref } }\n        : entry\n    )\n    const existing = byIdentity.get(identity)\n\n    if (existing !== undefined) {\n      if (existing === serialized) continue\n      invalidContext(`context contains conflicting entries for '${identity}'`)\n    }\n\n    if (entry.context.kind === \"app-state\") {\n      const bytes = utf8ByteLength(serialized)\n      if (bytes > MAX_AGENT_APP_STATE_ENTRY_BYTES) {\n        invalidContext(\n          `context entry '${identity}' exceeds the ${MAX_AGENT_APP_STATE_ENTRY_BYTES}-byte limit`\n        )\n      }\n      totalAppStateBytes += bytes\n      if (totalAppStateBytes > MAX_AGENT_APP_STATE_TOTAL_BYTES) {\n        invalidContext(\n          `app-state context exceeds the ${MAX_AGENT_APP_STATE_TOTAL_BYTES}-byte message limit`\n        )\n      }\n    }\n\n    byIdentity.set(identity, serialized)\n    entries.push(entry)\n  }\n\n  return entries\n}\n\nfunction normalizeEntry(rawEntry: unknown, index: number): AgentContextEntryInput {\n  if (!isRecord(rawEntry)) invalidContext(`context[${index}] must be an object`)\n  if (rawEntry.origin !== \"ambient\" && rawEntry.origin !== \"explicit\") {\n    invalidContext(`context[${index}].origin must be 'ambient' or 'explicit'`)\n  }\n  if (!isRecord(rawEntry.context)) invalidContext(`context[${index}].context must be an object`)\n\n  const context = rawEntry.context\n  if (context.kind === \"object\") {\n    if (!isRecord(context.ref)) invalidContext(`context[${index}].context.ref must be an object`)\n    const objectTypeId = requireNonEmptyString(\n      context.ref.objectTypeId,\n      `context[${index}].context.ref.objectTypeId`\n    )\n    const primaryId = requireNonEmptyString(\n      context.ref.primaryId,\n      `context[${index}].context.ref.primaryId`\n    )\n    const label =\n      context.label === undefined\n        ? undefined\n        : objectContextLabel(context.label, `context[${index}].context.label`, invalidContext)\n    return {\n      context: {\n        kind: \"object\",\n        ref: { objectTypeId, primaryId },\n        ...(label === undefined ? {} : { label }),\n      },\n      origin: rawEntry.origin,\n    }\n  }\n\n  if (context.kind === \"app-state\") {\n    const id = requireNonEmptyString(context.id, `context[${index}].context.id`)\n    const label = requireNonEmptyString(context.label, `context[${index}].context.label`)\n    const description = requireNonEmptyString(\n      context.description,\n      `context[${index}].context.description`\n    )\n    const reason = getInvalidJsonValueReason(context.value, `context[${index}].context.value`)\n    if (reason) {\n      invalidContext(`context[${index}].context.value must be a JSON value; ${reason}`)\n    }\n    return {\n      context: {\n        kind: \"app-state\",\n        id,\n        label,\n        description,\n        value: cloneJsonValue(context.value as JsonValue),\n      },\n      origin: rawEntry.origin,\n    }\n  }\n\n  invalidContext(`context[${index}].context.kind must be 'object' or 'app-state'`)\n}\n\nfunction objectContextLabel(\n  value: unknown,\n  label: string,\n  fail: (message: string) => never\n): string {\n  const trimmed = typeof value === \"string\" ? value.trim() : \"\"\n  if (!trimmed) fail(`${label} must be a non-empty string`)\n  if (trimmed.length > MAX_AGENT_CONTEXT_LABEL_LENGTH) {\n    fail(`${label} must be at most ${MAX_AGENT_CONTEXT_LABEL_LENGTH} characters`)\n  }\n  return trimmed\n}\n\nfunction requireNonEmptyString(value: unknown, label: string): string {\n  if (typeof value !== \"string\" || value.trim().length === 0) {\n    invalidContext(`${label} must be a non-empty string`)\n  }\n  return value\n}\n\nfunction utf8ByteLength(value: string): number {\n  return new TextEncoder().encode(value).byteLength\n}\n\nfunction isRecord(value: unknown): value is Record<string, unknown> {\n  return typeof value === \"object\" && value !== null && !Array.isArray(value)\n}\n\nfunction invalidContext(message: string): never {\n  throw new AgentRequestError(\"invalid_context\", `[Sixb] Invalid agent context: ${message}.`)\n}\n"
+  ],
+  "mappings": ";;;;;;;;AAIO,MAAM,8BAA6B,MAAM;AAAA,EACrC,OAAe;AAC1B;AAAA;AAOO,MAAM,8BAA6B,MAAM;AAAA,EACrC,OAAe;AAC1B;AAAA;AAGO,MAAM,wCAAuC,MAAM;AAAA,EAI7C;AAAA,EACA;AAAA,EAJF,OAAO;AAAA,EAEhB,WAAW,CACA,UACA,QACT,SACA;AAAA,IACA,MAAM,sBAAsB,yCAAyC,WAAW,OAAO;AAAA,IAJ9E;AAAA,IACA;AAAA;AAKb;AAAA;AAyBO,MAAM,2BAA0B,MAAM;AAAA,EAIhC;AAAA,EAHF,OAAO;AAAA,EAEhB,WAAW,CACA,MACT,SACA;AAAA,IACA,MAAM,OAAO;AAAA,IAHJ;AAAA;AAKb;;;AC3BO,IAAM,6BAA4B;AAClC,IAAM,mCAAkC,KAAK;AAC7C,IAAM,mCAAkC,KAAK;AAC7C,IAAM,kCAAiC;AAGvC,IAAM,gBAAe;AAAA,EAC1B,MAA0C,CACxC,YACA,WACA,UAAuC,CAAC,GACxC;AAAA,IACA,MAAM,QACJ,QAAQ,UAAU,YACd,YACA,mBAAmB,QAAQ,OAAO,+BAA+B,CAAC,YAAY;AAAA,MAC5E,MAAM,IAAI,UAAU,UAAU,UAAU;AAAA,KACzC;AAAA,IACP,OAAO;AAAA,MACL,MAAM;AAAA,MACN,KAAK,EAAE,cAAc,WAAW,IAAI,UAAU;AAAA,SAC1C,UAAU,YAAY,CAAC,IAAI,EAAE,MAAM;AAAA,IACzC;AAAA;AAAA,EAGF,QAAwC,CACtC,IACA,OAKA;AAAA,IACA,OAAO,EAAE,MAAM,aAAsB,OAAO,MAAM;AAAA;AAEtD;AAGO,SAAS,qBAAoB,CAAC,SAAoC;AAAA,EACvE,OAAO,QAAQ,SAAS,WACpB,UAAU,mBAAmB,QAAQ,IAAI,YAAY,KAAK,mBAAmB,QAAQ,IAAI,SAAS,MAClG,aAAa,mBAAmB,QAAQ,EAAE;AAAA;AAIzC,SAAS,wBAAuB,CAAC,SAAoC;AAAA,EAC1E,OAAO,qBAAoB,OAAO;AAAA;AAO7B,SAAS,6BAA4B,CAC1C,OACmC;AAAA,EACnC,IAAI,UAAU;AAAA,IAAW,OAAO,CAAC;AAAA,EACjC,IAAI,CAAC,MAAM,QAAQ,KAAK;AAAA,IAAG,eAAe,0BAA0B;AAAA,EACpE,IAAI,MAAM,SAAS,4BAA2B;AAAA,IAC5C,eAAe,oCAAoC,oCAAmC;AAAA,EACxF;AAAA,EAEA,MAAM,UAAoC,CAAC;AAAA,EAC3C,MAAM,aAAa,IAAI;AAAA,EACvB,IAAI,qBAAqB;AAAA,EAEzB,YAAY,OAAO,aAAa,MAAM,QAAQ,GAAG;AAAA,IAC/C,MAAM,QAAQ,eAAe,UAAU,KAAK;AAAA,IAC5C,MAAM,WAAW,sBAAqB,MAAM,OAAO;AAAA,IAGnD,MAAM,aAAa,qBACjB,MAAM,QAAQ,SAAS,WACnB,KAAK,OAAO,SAAS,EAAE,MAAM,UAAU,KAAK,MAAM,QAAQ,IAAI,EAAE,IAChE,KACN;AAAA,IACA,MAAM,WAAW,WAAW,IAAI,QAAQ;AAAA,IAExC,IAAI,aAAa,WAAW;AAAA,MAC1B,IAAI,aAAa;AAAA,QAAY;AAAA,MAC7B,eAAe,6CAA6C,WAAW;AAAA,IACzE;AAAA,IAEA,IAAI,MAAM,QAAQ,SAAS,aAAa;AAAA,MACtC,MAAM,QAAQ,eAAe,UAAU;AAAA,MACvC,IAAI,QAAQ,kCAAiC;AAAA,QAC3C,eACE,kBAAkB,yBAAyB,6CAC7C;AAAA,MACF;AAAA,MACA,sBAAsB;AAAA,MACtB,IAAI,qBAAqB,kCAAiC;AAAA,QACxD,eACE,iCAAiC,qDACnC;AAAA,MACF;AAAA,IACF;AAAA,IAEA,WAAW,IAAI,UAAU,UAAU;AAAA,IACnC,QAAQ,KAAK,KAAK;AAAA,EACpB;AAAA,EAEA,OAAO;AAAA;AAGT,SAAS,cAAc,CAAC,UAAmB,OAAuC;AAAA,EAChF,IAAI,CAAC,SAAS,QAAQ;AAAA,IAAG,eAAe,WAAW,0BAA0B;AAAA,EAC7E,IAAI,SAAS,WAAW,aAAa,SAAS,WAAW,YAAY;AAAA,IACnE,eAAe,WAAW,+CAA+C;AAAA,EAC3E;AAAA,EACA,IAAI,CAAC,SAAS,SAAS,OAAO;AAAA,IAAG,eAAe,WAAW,kCAAkC;AAAA,EAE7F,MAAM,UAAU,SAAS;AAAA,EACzB,IAAI,QAAQ,SAAS,UAAU;AAAA,IAC7B,IAAI,CAAC,SAAS,QAAQ,GAAG;AAAA,MAAG,eAAe,WAAW,sCAAsC;AAAA,IAC5F,MAAM,eAAe,sBACnB,QAAQ,IAAI,cACZ,WAAW,iCACb;AAAA,IACA,MAAM,YAAY,sBAChB,QAAQ,IAAI,WACZ,WAAW,8BACb;AAAA,IACA,MAAM,QACJ,QAAQ,UAAU,YACd,YACA,mBAAmB,QAAQ,OAAO,WAAW,wBAAwB,cAAc;AAAA,IACzF,OAAO;AAAA,MACL,SAAS;AAAA,QACP,MAAM;AAAA,QACN,KAAK,EAAE,cAAc,UAAU;AAAA,WAC3B,UAAU,YAAY,CAAC,IAAI,EAAE,MAAM;AAAA,MACzC;AAAA,MACA,QAAQ,SAAS;AAAA,IACnB;AAAA,EACF;AAAA,EAEA,IAAI,QAAQ,SAAS,aAAa;AAAA,IAChC,MAAM,KAAK,sBAAsB,QAAQ,IAAI,WAAW,mBAAmB;AAAA,IAC3E,MAAM,QAAQ,sBAAsB,QAAQ,OAAO,WAAW,sBAAsB;AAAA,IACpF,MAAM,cAAc,sBAClB,QAAQ,aACR,WAAW,4BACb;AAAA,IACA,MAAM,SAAS,2BAA0B,QAAQ,OAAO,WAAW,sBAAsB;AAAA,IACzF,IAAI,QAAQ;AAAA,MACV,eAAe,WAAW,8CAA8C,QAAQ;AAAA,IAClF;AAAA,IACA,OAAO;AAAA,MACL,SAAS;AAAA,QACP,MAAM;AAAA,QACN;AAAA,QACA;AAAA,QACA;AAAA,QACA,OAAO,gBAAe,QAAQ,KAAkB;AAAA,MAClD;AAAA,MACA,QAAQ,SAAS;AAAA,IACnB;AAAA,EACF;AAAA,EAEA,eAAe,WAAW,qDAAqD;AAAA;AAGjF,SAAS,kBAAkB,CACzB,OACA,OACA,MACQ;AAAA,EACR,MAAM,UAAU,OAAO,UAAU,WAAW,MAAM,KAAK,IAAI;AAAA,EAC3D,IAAI,CAAC;AAAA,IAAS,KAAK,GAAG,kCAAkC;AAAA,EACxD,IAAI,QAAQ,SAAS,iCAAgC;AAAA,IACnD,KAAK,GAAG,yBAAyB,4CAA2C;AAAA,EAC9E;AAAA,EACA,OAAO;AAAA;AAGT,SAAS,qBAAqB,CAAC,OAAgB,OAAuB;AAAA,EACpE,IAAI,OAAO,UAAU,YAAY,MAAM,KAAK,EAAE,WAAW,GAAG;AAAA,IAC1D,eAAe,GAAG,kCAAkC;AAAA,EACtD;AAAA,EACA,OAAO;AAAA;AAGT,SAAS,cAAc,CAAC,OAAuB;AAAA,EAC7C,OAAO,IAAI,YAAY,EAAE,OAAO,KAAK,EAAE;AAAA;AAGzC,SAAS,QAAQ,CAAC,OAAkD;AAAA,EAClE,OAAO,OAAO,UAAU,YAAY,UAAU,QAAQ,CAAC,MAAM,QAAQ,KAAK;AAAA;AAG5E,SAAS,cAAc,CAAC,SAAwB;AAAA,EAC9C,MAAM,IAAI,mBAAkB,mBAAmB,iCAAiC,UAAU;AAAA;",
+  "debugId": "D2B517DE0E9AFCDE64756E2164756E21",
+  "names": []
+}

package/dist/chunk-pqajwytd.js.map

@@ -2,10 +2,10 @@
   "version": 3,
   "sources": ["../src/models/language-model.ts", "../src/models/events.ts"],
   "sourcesContent": [
-    "import type { JsonObject, ReadonlyJsonObject } from \"../json\"\nimport type { LanguageModelDefinitionCatalog, ModelDefinitionCatalog } from \"./catalog\"\nimport type { LanguageModelDefinition } from \"./definitions\"\nimport type { LanguageModelStreamEvent } from \"./events\"\nimport type { ModelMessage } from \"./messages\"\nimport type { ModelCostEstimator } from \"./pricing\"\n\nexport const MODEL_REASONING_EFFORTS = [\"minimal\", \"low\", \"medium\", \"high\", \"xhigh\", \"max\"] as const\n\nexport type ModelReasoningEffort = (typeof MODEL_REASONING_EFFORTS)[number]\n\nexport const MODEL_REASONING_LEVELS = [\n  \"provider-default\",\n  \"none\",\n  ...MODEL_REASONING_EFFORTS,\n] as const\n\nexport type ModelReasoningLevel = (typeof MODEL_REASONING_LEVELS)[number]\n\n/** Exact provider-native reasoning budget, expressed in tokens. */\nexport interface ModelReasoningBudget extends ReadonlyJsonObject {\n  readonly budgetTokens: number\n}\n\n/** Provider-neutral reasoning preference accepted by every language-model runtime. */\nexport type ModelReasoning = ModelReasoningLevel | ModelReasoningBudget\n\nexport interface ModelReasoningBudgetCapabilities {\n  readonly min?: number\n  readonly max?: number\n}\n\n/** Controls exposed by one concrete model offering through one provider. */\nexport interface ModelReasoningCapabilities {\n  readonly canDisable?: boolean\n  readonly efforts?: readonly ModelReasoningEffort[]\n  readonly budgetTokens?: ModelReasoningBudgetCapabilities\n}\n\nexport interface ModelCapabilities {\n  readonly inputMediaTypes?: readonly string[] | \"any\"\n  /** `undefined` is unknown, `false` is unsupported, and an object describes supported controls. */\n  readonly reasoning?: false | ModelReasoningCapabilities\n  readonly localTools?: boolean\n  readonly parallelToolCalls?: boolean\n  /** `undefined` is unknown, not an assertion that schema-constrained output is unsupported. */\n  readonly nativeStructuredOutput?: boolean\n  readonly providerExecutedTools?: boolean\n}\n\nexport interface ModelToolSpecification {\n  readonly name: string\n  readonly description: string\n  readonly inputSchema: JsonObject\n}\n\nexport interface ModelResponseFormat {\n  readonly type: \"json\"\n  readonly name: string\n  readonly description?: string\n  readonly schema: JsonObject\n}\n\nexport interface LanguageModelRequest {\n  readonly callId: string\n  readonly messages: readonly ModelMessage[]\n  readonly tools: readonly ModelToolSpecification[]\n  readonly reasoning?: ModelReasoning\n  /** Per-call output ceiling; providers must not exceed a stricter configured model limit. */\n  readonly maxOutputTokens?: number\n  /** Disable automatic prompt caching without overriding explicit provider configuration. */\n  readonly caching?: \"auto\" | \"off\"\n  readonly responseFormat?: ModelResponseFormat\n  readonly signal: AbortSignal\n}\n\nexport interface LanguageModelStream {\n  readonly events: AsyncIterable<LanguageModelStreamEvent>\n}\n\nexport interface LanguageModel {\n  readonly providerId: string\n  readonly modelId: string\n  readonly definition: LanguageModelDefinition\n  readonly costEstimator?: ModelCostEstimator\n  /**\n   * Return an executable model pinned to operational metadata, preserving model identity.\n   * `offline` requires a local snapshot without catalog I/O. Workers retain this model\n   * for generation and compaction; later catalog refreshes must not change its capabilities/limits.\n   * Throw ModelCatalogUnavailableError for catalog transport/access failures to allow workers to\n   * retry with an offline snapshot. Invalid definitions and other resolver errors remain fatal.\n   */\n  resolve?(options?: { readonly offline?: boolean }): Promise<LanguageModel>\n  /** Validate known output constraints without inference. Success does not certify endpoint support. */\n  validateResponseFormat?(format: ModelResponseFormat): void | Promise<void>\n  stream(request: LanguageModelRequest): Promise<LanguageModelStream>\n}\n\n/** The common callable provider shape. Provider packages may accept additional model options. */\nexport interface ModelProvider<TCatalog extends ModelDefinitionCatalog = ModelDefinitionCatalog> {\n  readonly providerId: string\n  readonly catalog: TCatalog\n}\n\nexport interface LanguageModelProvider extends ModelProvider<LanguageModelDefinitionCatalog> {\n  (modelId: string): LanguageModel\n}\n\nexport function isModelReasoning(value: unknown): value is ModelReasoning {\n  if (typeof value === \"string\") {\n    return (MODEL_REASONING_LEVELS as readonly string[]).includes(value)\n  }\n  if (typeof value !== \"object\" || value === null || Array.isArray(value)) return false\n  if (Object.keys(value).length !== 1) return false\n  const budgetTokens = (value as { readonly budgetTokens?: unknown }).budgetTokens\n  return typeof budgetTokens === \"number\" && Number.isSafeInteger(budgetTokens) && budgetTokens >= 0\n}\n\n/** Explain why a request cannot be represented by known model capabilities. Unknown is allowed. */\nexport function modelReasoningSupportIssue(\n  capabilities: ModelCapabilities[\"reasoning\"],\n  reasoning: unknown\n): string | undefined {\n  if (reasoning === undefined) return undefined\n  if (!isModelReasoning(reasoning)) return \"the reasoning preference is invalid\"\n  if (reasoning === \"provider-default\") return undefined\n  if (capabilities === undefined) return undefined\n  if (capabilities === false) return \"reasoning is not supported\"\n  if (reasoning === \"none\") {\n    return capabilities.canDisable === true ? undefined : \"reasoning cannot be disabled\"\n  }\n  if (typeof reasoning === \"string\") {\n    return capabilities.efforts?.includes(reasoning) === true\n      ? undefined\n      : `reasoning effort '${reasoning}' is not supported`\n  }\n  const budget = capabilities.budgetTokens\n  if (budget === undefined) return \"reasoning token budgets are not supported\"\n  if (budget.min !== undefined && reasoning.budgetTokens < budget.min) {\n    return `reasoning token budget must be at least ${budget.min}`\n  }\n  if (budget.max !== undefined && reasoning.budgetTokens > budget.max) {\n    return `reasoning token budget must not exceed ${budget.max}`\n  }\n  return undefined\n}\n",
+    "import type { JsonObject, ReadonlyJsonObject } from \"../json\"\nimport type { LanguageModelDefinitionCatalog, ModelDefinitionCatalog } from \"./catalog\"\nimport type { LanguageModelDefinition } from \"./definitions\"\nimport type { LanguageModelStreamEvent } from \"./events\"\nimport type { ModelMessage } from \"./messages\"\nimport type { ModelCostEstimator } from \"./pricing\"\n\nexport const MODEL_REASONING_EFFORTS = [\"minimal\", \"low\", \"medium\", \"high\", \"xhigh\", \"max\"] as const\n\nexport type ModelReasoningEffort = (typeof MODEL_REASONING_EFFORTS)[number]\n\nexport const MODEL_REASONING_LEVELS = [\n  \"provider-default\",\n  \"none\",\n  ...MODEL_REASONING_EFFORTS,\n] as const\n\nexport type ModelReasoningLevel = (typeof MODEL_REASONING_LEVELS)[number]\n\n/** Exact provider-native reasoning budget, expressed in tokens. */\nexport interface ModelReasoningBudget extends ReadonlyJsonObject {\n  readonly budgetTokens: number\n}\n\n/** Provider-neutral reasoning preference accepted by every language-model runtime. */\nexport type ModelReasoning = ModelReasoningLevel | ModelReasoningBudget\n\nexport interface ModelReasoningBudgetCapabilities {\n  readonly min?: number\n  readonly max?: number\n}\n\n/** Controls exposed by one concrete model offering through one provider. */\nexport interface ModelReasoningCapabilities {\n  readonly canDisable?: boolean\n  readonly efforts?: readonly ModelReasoningEffort[]\n  readonly budgetTokens?: ModelReasoningBudgetCapabilities\n}\n\nexport interface ModelCapabilities {\n  readonly inputMediaTypes?: readonly string[] | \"any\"\n  /** `undefined` is unknown, `false` is unsupported, and an object describes supported controls. */\n  readonly reasoning?: false | ModelReasoningCapabilities\n  readonly localTools?: boolean\n  readonly parallelToolCalls?: boolean\n  /** `undefined` is unknown, not an assertion that schema-constrained output is unsupported. */\n  readonly nativeStructuredOutput?: boolean\n  readonly providerExecutedTools?: boolean\n}\n\nexport interface ModelToolSpecification {\n  readonly name: string\n  readonly description: string\n  readonly inputSchema: JsonObject\n}\n\nexport interface ModelResponseFormat {\n  readonly type: \"json\"\n  readonly name: string\n  readonly description?: string\n  readonly schema: JsonObject\n}\n\nexport interface LanguageModelRequest {\n  readonly callId: string\n  readonly messages: readonly ModelMessage[]\n  readonly tools: readonly ModelToolSpecification[]\n  readonly reasoning?: ModelReasoning\n  /** Per-call output ceiling; providers must not exceed a stricter configured model limit. */\n  readonly maxOutputTokens?: number\n  /** Disable automatic prompt caching without overriding explicit provider configuration. */\n  readonly caching?: \"auto\" | \"off\"\n  readonly responseFormat?: ModelResponseFormat\n  readonly signal: AbortSignal\n}\n\nexport interface LanguageModelStream {\n  readonly events: AsyncIterable<LanguageModelStreamEvent>\n}\n\nexport interface LanguageModel {\n  readonly providerId: string\n  readonly modelId: string\n  readonly definition: LanguageModelDefinition\n  readonly costEstimator?: ModelCostEstimator\n  /**\n   * Reasoning Sixb applies whenever this model runs without an explicit choice: chat turns, AI\n   * workflow steps, subagents, and direct generation. Providers set it from their model options;\n   * Sixb checks it against `definition.capabilities` at startup.\n   */\n  readonly defaultReasoning?: ModelReasoningLevel\n  /**\n   * Return an executable model pinned to operational metadata, preserving model identity.\n   * `offline` requires a local snapshot without catalog I/O. Workers retain this model\n   * for generation and compaction; later catalog refreshes must not change its capabilities/limits.\n   * Throw ModelCatalogUnavailableError for catalog transport/access failures to allow workers to\n   * retry with an offline snapshot. Invalid definitions and other resolver errors remain fatal.\n   */\n  resolve?(options?: { readonly offline?: boolean }): Promise<LanguageModel>\n  /** Validate known output constraints without inference. Success does not certify endpoint support. */\n  validateResponseFormat?(format: ModelResponseFormat): void | Promise<void>\n  stream(request: LanguageModelRequest): Promise<LanguageModelStream>\n}\n\n/** The common callable provider shape. Provider packages may accept additional model options. */\nexport interface ModelProvider<TCatalog extends ModelDefinitionCatalog = ModelDefinitionCatalog> {\n  readonly providerId: string\n  readonly catalog: TCatalog\n}\n\nexport interface LanguageModelProvider extends ModelProvider<LanguageModelDefinitionCatalog> {\n  (modelId: string): LanguageModel\n}\n\nexport function isModelReasoning(value: unknown): value is ModelReasoning {\n  if (typeof value === \"string\") {\n    return (MODEL_REASONING_LEVELS as readonly string[]).includes(value)\n  }\n  if (typeof value !== \"object\" || value === null || Array.isArray(value)) return false\n  if (Object.keys(value).length !== 1) return false\n  const budgetTokens = (value as { readonly budgetTokens?: unknown }).budgetTokens\n  return typeof budgetTokens === \"number\" && Number.isSafeInteger(budgetTokens) && budgetTokens >= 0\n}\n\n/** Explain why a request cannot be represented by known model capabilities. Unknown is allowed. */\nexport function modelReasoningSupportIssue(\n  capabilities: ModelCapabilities[\"reasoning\"],\n  reasoning: unknown\n): string | undefined {\n  if (reasoning === undefined) return undefined\n  if (!isModelReasoning(reasoning)) return \"the reasoning preference is invalid\"\n  if (reasoning === \"provider-default\") return undefined\n  if (capabilities === undefined) return undefined\n  if (capabilities === false) return \"reasoning is not supported\"\n  if (reasoning === \"none\") {\n    return capabilities.canDisable === true ? undefined : \"reasoning cannot be disabled\"\n  }\n  if (typeof reasoning === \"string\") {\n    return capabilities.efforts?.includes(reasoning) === true\n      ? undefined\n      : `reasoning effort '${reasoning}' is not supported`\n  }\n  const budget = capabilities.budgetTokens\n  if (budget === undefined) return \"reasoning token budgets are not supported\"\n  if (budget.min !== undefined && reasoning.budgetTokens < budget.min) {\n    return `reasoning token budget must be at least ${budget.min}`\n  }\n  if (budget.max !== undefined && reasoning.budgetTokens > budget.max) {\n    return `reasoning token budget must not exceed ${budget.max}`\n  }\n  return undefined\n}\n",
     "import type { JsonObject, JsonValue } from \"../json\"\nimport type { ModelReasoning } from \"./language-model\"\nimport type {\n  ModelAssistantPart,\n  ModelToolCallPart,\n  ModelToolResultPart,\n  ProviderData,\n} from \"./messages\"\nimport type { ModelCallCost, ModelCostEstimate, ModelReportedCost } from \"./pricing\"\n\nexport interface ModelRoute {\n  /** Provider selected by a routing gateway, when it differs from the provider being called. */\n  readonly providerId?: string\n  readonly modelId?: string\n}\n\n/** Only identifiers supplied by the provider. Internal call/response fallback IDs never belong here. */\nexport type ModelProviderIds = {\n  readonly requestId?: string\n  readonly responseId?: string\n  readonly generationId?: string\n}\n\nexport function normalizeModelProviderIds(value: unknown): ModelProviderIds {\n  if (typeof value !== \"object\" || value === null || Array.isArray(value))\n    throw new TypeError(\"[Sixb] Provider identifiers must be an object.\")\n  const result: { requestId?: string; responseId?: string; generationId?: string } = {}\n  for (const [key, id] of Object.entries(value)) {\n    if (key !== \"requestId\" && key !== \"responseId\" && key !== \"generationId\") continue\n    if (id === undefined) continue\n    if (typeof id !== \"string\" || !id.trim())\n      throw new TypeError(`[Sixb] Provider ${key} must be nonblank.`)\n    result[key] = id\n  }\n  return Object.freeze(result)\n}\n\nexport type ModelFinishReason =\n  | \"stop\"\n  | \"length\"\n  | \"content-filter\"\n  | \"tool-calls\"\n  | \"pause\"\n  | \"error\"\n  | \"other\"\n  | \"unknown\"\n\nexport interface ModelUsage {\n  /** Audio content duration in milliseconds, rounded to the nearest millisecond. Not billed duration. */\n  readonly audioDurationMs?: number\n  readonly inputTokens?: number\n  readonly outputTokens?: number\n  readonly uncachedInputTokens?: number\n  readonly cacheReadInputTokens?: number\n  readonly cacheWriteInputTokens?: number\n  readonly cacheWrite5mInputTokens?: number\n  readonly cacheWrite1hInputTokens?: number\n  readonly textOutputTokens?: number\n  readonly reasoningOutputTokens?: number\n  readonly raw?: JsonObject\n}\n\nexport type LanguageModelStreamEvent =\n  | { readonly type: \"stream-start\" }\n  | {\n      readonly type: \"response-metadata\"\n      readonly providerIds?: ModelProviderIds\n      readonly id?: string\n      readonly modelId?: string\n    }\n  | { readonly type: \"text-start\"; readonly id: string; readonly providerData?: ProviderData }\n  | { readonly type: \"text-delta\"; readonly id: string; readonly delta: string }\n  | { readonly type: \"text-end\"; readonly id: string; readonly providerData?: ProviderData }\n  | {\n      readonly type: \"reasoning-start\"\n      readonly id: string\n      readonly providerData?: ProviderData\n    }\n  | { readonly type: \"reasoning-delta\"; readonly id: string; readonly delta: string }\n  | { readonly type: \"reasoning-end\"; readonly id: string; readonly providerData?: ProviderData }\n  | {\n      readonly type: \"tool-input-start\"\n      readonly id: string\n      readonly toolName: string\n      readonly providerData?: ProviderData\n      readonly providerExecuted?: boolean\n      readonly dynamic?: boolean\n    }\n  | { readonly type: \"tool-input-delta\"; readonly id: string; readonly delta: string }\n  | { readonly type: \"tool-input-end\"; readonly id: string; readonly providerData?: ProviderData }\n  | {\n      readonly type: \"tool-call\"\n      readonly toolCallId: string\n      readonly toolName: string\n      readonly input: string\n      readonly providerData?: ProviderData\n      readonly providerExecuted?: boolean\n      readonly dynamic?: boolean\n    }\n  | {\n      readonly type: \"tool-result\"\n      readonly toolCallId: string\n      readonly toolName: string\n      readonly output: JsonValue\n      readonly isError?: boolean\n      readonly providerData?: ProviderData\n      readonly providerExecuted?: boolean\n      readonly dynamic?: boolean\n    }\n  | {\n      readonly type: \"provider-state\"\n      readonly providerId: string\n      readonly data: JsonValue\n    }\n  | {\n      readonly type: \"finish\"\n      readonly finishReason: ModelFinishReason\n      readonly rawFinishReason?: string\n      readonly usage: ModelUsage\n      readonly providerData?: ProviderData\n      readonly reportedCost?: ModelReportedCost\n      readonly route?: ModelRoute\n    }\n  | { readonly type: \"error\"; readonly error: unknown }\n\nexport type ModelUiChunk =\n  | { readonly type: \"start-step\" }\n  | { readonly type: \"text-start\"; readonly id: string }\n  | { readonly type: \"text-delta\"; readonly id: string; readonly delta: string }\n  | { readonly type: \"text-end\"; readonly id: string }\n  | { readonly type: \"reasoning-start\"; readonly id: string }\n  | { readonly type: \"reasoning-delta\"; readonly id: string; readonly delta: string }\n  | { readonly type: \"reasoning-end\"; readonly id: string }\n  | {\n      readonly type: \"tool-input-start\"\n      readonly toolCallId: string\n      readonly toolName: string\n    }\n  | {\n      readonly type: \"tool-input-delta\"\n      readonly toolCallId: string\n      readonly toolName: string\n      readonly inputTextDelta: string\n    }\n  | {\n      readonly type: \"tool-input-available\"\n      readonly toolCallId: string\n      readonly toolName: string\n      readonly input: JsonValue\n    }\n  | {\n      readonly type: \"tool-input-error\"\n      readonly toolCallId: string\n      readonly toolName: string\n      readonly input: JsonValue\n      readonly errorText: string\n    }\n  | {\n      readonly type: \"tool-output-available\"\n      readonly toolCallId: string\n      readonly toolName: string\n      readonly output: JsonValue\n    }\n  | {\n      readonly type: \"tool-output-error\"\n      readonly toolCallId: string\n      readonly toolName: string\n      readonly errorText: string\n    }\n  | { readonly type: \"error\"; readonly errorText: string }\n\nexport interface ModelCallEndEvent {\n  readonly modelKind?: import(\"./definitions\").ModelKind\n  readonly providerIds?: ModelProviderIds\n  /** Retained independently when the selected display cost is provider-reported. */\n  readonly estimate?: ModelCostEstimate\n  readonly callId: string\n  readonly providerId: string\n  readonly modelId: string\n  readonly responseId: string\n  readonly responseModelId?: string\n  readonly usage: ModelUsage\n  readonly cost: ModelCallCost\n  readonly requestedReasoning?: ModelReasoning\n  readonly route?: ModelRoute\n}\n\nexport interface ModelStep {\n  readonly content: readonly (ModelAssistantPart | ModelToolResultPart)[]\n  readonly finishReason: ModelFinishReason\n  readonly rawFinishReason?: string\n  readonly usage: ModelUsage\n  readonly responseId: string\n  readonly responseModelId?: string\n  readonly cost: ModelCallCost\n  readonly route?: ModelRoute\n}\n\nexport interface ModelLoopPartial {\n  readonly content: readonly (ModelAssistantPart | ModelToolCallPart | ModelToolResultPart)[]\n}\n"
   ],
-  "mappings": ";;AAOO,IAAM,2BAA0B,CAAC,WAAW,OAAO,UAAU,QAAQ,SAAS,KAAK;AAInF,IAAM,0BAAyB;AAAA,EACpC;AAAA,EACA;AAAA,EACA,GAAG;AACL;AA6FO,SAAS,iBAAgB,CAAC,OAAyC;AAAA,EACxE,IAAI,OAAO,UAAU,UAAU;AAAA,IAC7B,OAAQ,wBAA6C,SAAS,KAAK;AAAA,EACrE;AAAA,EACA,IAAI,OAAO,UAAU,YAAY,UAAU,QAAQ,MAAM,QAAQ,KAAK;AAAA,IAAG,OAAO;AAAA,EAChF,IAAI,OAAO,KAAK,KAAK,EAAE,WAAW;AAAA,IAAG,OAAO;AAAA,EAC5C,MAAM,eAAgB,MAA8C;AAAA,EACpE,OAAO,OAAO,iBAAiB,YAAY,OAAO,cAAc,YAAY,KAAK,gBAAgB;AAAA;AAI5F,SAAS,2BAA0B,CACxC,cACA,WACoB;AAAA,EACpB,IAAI,cAAc;AAAA,IAAW;AAAA,EAC7B,IAAI,CAAC,kBAAiB,SAAS;AAAA,IAAG,OAAO;AAAA,EACzC,IAAI,cAAc;AAAA,IAAoB;AAAA,EACtC,IAAI,iBAAiB;AAAA,IAAW;AAAA,EAChC,IAAI,iBAAiB;AAAA,IAAO,OAAO;AAAA,EACnC,IAAI,cAAc,QAAQ;AAAA,IACxB,OAAO,aAAa,eAAe,OAAO,YAAY;AAAA,EACxD;AAAA,EACA,IAAI,OAAO,cAAc,UAAU;AAAA,IACjC,OAAO,aAAa,SAAS,SAAS,SAAS,MAAM,OACjD,YACA,qBAAqB;AAAA,EAC3B;AAAA,EACA,MAAM,SAAS,aAAa;AAAA,EAC5B,IAAI,WAAW;AAAA,IAAW,OAAO;AAAA,EACjC,IAAI,OAAO,QAAQ,aAAa,UAAU,eAAe,OAAO,KAAK;AAAA,IACnE,OAAO,2CAA2C,OAAO;AAAA,EAC3D;AAAA,EACA,IAAI,OAAO,QAAQ,aAAa,UAAU,eAAe,OAAO,KAAK;AAAA,IACnE,OAAO,0CAA0C,OAAO;AAAA,EAC1D;AAAA,EACA;AAAA;;;ACzHK,SAAS,0BAAyB,CAAC,OAAkC;AAAA,EAC1E,IAAI,OAAO,UAAU,YAAY,UAAU,QAAQ,MAAM,QAAQ,KAAK;AAAA,IACpE,MAAM,IAAI,UAAU,gDAAgD;AAAA,EACtE,MAAM,SAA6E,CAAC;AAAA,EACpF,YAAY,KAAK,OAAO,OAAO,QAAQ,KAAK,GAAG;AAAA,IAC7C,IAAI,QAAQ,eAAe,QAAQ,gBAAgB,QAAQ;AAAA,MAAgB;AAAA,IAC3E,IAAI,OAAO;AAAA,MAAW;AAAA,IACtB,IAAI,OAAO,OAAO,YAAY,CAAC,GAAG,KAAK;AAAA,MACrC,MAAM,IAAI,UAAU,mBAAmB,uBAAuB;AAAA,IAChE,OAAO,OAAO;AAAA,EAChB;AAAA,EACA,OAAO,OAAO,OAAO,MAAM;AAAA;",
+  "mappings": ";;AAOO,IAAM,2BAA0B,CAAC,WAAW,OAAO,UAAU,QAAQ,SAAS,KAAK;AAInF,IAAM,0BAAyB;AAAA,EACpC;AAAA,EACA;AAAA,EACA,GAAG;AACL;AAmGO,SAAS,iBAAgB,CAAC,OAAyC;AAAA,EACxE,IAAI,OAAO,UAAU,UAAU;AAAA,IAC7B,OAAQ,wBAA6C,SAAS,KAAK;AAAA,EACrE;AAAA,EACA,IAAI,OAAO,UAAU,YAAY,UAAU,QAAQ,MAAM,QAAQ,KAAK;AAAA,IAAG,OAAO;AAAA,EAChF,IAAI,OAAO,KAAK,KAAK,EAAE,WAAW;AAAA,IAAG,OAAO;AAAA,EAC5C,MAAM,eAAgB,MAA8C;AAAA,EACpE,OAAO,OAAO,iBAAiB,YAAY,OAAO,cAAc,YAAY,KAAK,gBAAgB;AAAA;AAI5F,SAAS,2BAA0B,CACxC,cACA,WACoB;AAAA,EACpB,IAAI,cAAc;AAAA,IAAW;AAAA,EAC7B,IAAI,CAAC,kBAAiB,SAAS;AAAA,IAAG,OAAO;AAAA,EACzC,IAAI,cAAc;AAAA,IAAoB;AAAA,EACtC,IAAI,iBAAiB;AAAA,IAAW;AAAA,EAChC,IAAI,iBAAiB;AAAA,IAAO,OAAO;AAAA,EACnC,IAAI,cAAc,QAAQ;AAAA,IACxB,OAAO,aAAa,eAAe,OAAO,YAAY;AAAA,EACxD;AAAA,EACA,IAAI,OAAO,cAAc,UAAU;AAAA,IACjC,OAAO,aAAa,SAAS,SAAS,SAAS,MAAM,OACjD,YACA,qBAAqB;AAAA,EAC3B;AAAA,EACA,MAAM,SAAS,aAAa;AAAA,EAC5B,IAAI,WAAW;AAAA,IAAW,OAAO;AAAA,EACjC,IAAI,OAAO,QAAQ,aAAa,UAAU,eAAe,OAAO,KAAK;AAAA,IACnE,OAAO,2CAA2C,OAAO;AAAA,EAC3D;AAAA,EACA,IAAI,OAAO,QAAQ,aAAa,UAAU,eAAe,OAAO,KAAK;AAAA,IACnE,OAAO,0CAA0C,OAAO;AAAA,EAC1D;AAAA,EACA;AAAA;;;AC/HK,SAAS,0BAAyB,CAAC,OAAkC;AAAA,EAC1E,IAAI,OAAO,UAAU,YAAY,UAAU,QAAQ,MAAM,QAAQ,KAAK;AAAA,IACpE,MAAM,IAAI,UAAU,gDAAgD;AAAA,EACtE,MAAM,SAA6E,CAAC;AAAA,EACpF,YAAY,KAAK,OAAO,OAAO,QAAQ,KAAK,GAAG;AAAA,IAC7C,IAAI,QAAQ,eAAe,QAAQ,gBAAgB,QAAQ;AAAA,MAAgB;AAAA,IAC3E,IAAI,OAAO;AAAA,MAAW;AAAA,IACtB,IAAI,OAAO,OAAO,YAAY,CAAC,GAAG,KAAK;AAAA,MACrC,MAAM,IAAI,UAAU,mBAAmB,uBAAuB;AAAA,IAChE,OAAO,OAAO;AAAA,EAChB;AAAA,EACA,OAAO,OAAO,OAAO,MAAM;AAAA;",
   "debugId": "1D80C81FE1B8244564756E2164756E21",
   "names": []
 }

package/dist/{chunk-5be2ath4.js → chunk-qkbx3tf6.js}

@@ -1,4 +1,10 @@
 // @bun
+import {
+  GRANT_KINDS,
+  TARGETED_GRANT_KIND_KEYS,
+  grantKindOf,
+  emptyGrantSets
+} from "./chunk-enpsx8k5.js";
 import {
   createSixbError2
 } from "./chunk-6fsr7y93.js";
@@ -8,7 +14,7 @@ import {
 import {
   findPrimitiveSchema,
   resolveSemanticType2
-} from "./chunk-rpxz486p.js";
+} from "./chunk-y05543x6.js";
 import {
   kernelOperationId,
   kernelOperationFromId
@@ -25,129 +31,6 @@ function agentServiceAccountId2(actorId) {
   return `svc_agent_${actorId}`;
 }
 
-// src/authorization/grant-kinds.ts
-var GRANT_KINDS = {
-  "access:application": {
-    universeKey: "applicationIds",
-    subject: "application",
-    fix: "Use an application exported from '@sixb/core'."
-  },
-  "view:object": {
-    universeKey: "objectTypeIds",
-    subject: "object type",
-    fix: "Register it in 'ontology/' or pass it to createSixb({ ontologies }).",
-    expandsSubtypes: true
-  },
-  "view:dataset": {
-    universeKey: "datasetIds",
-    subject: "dataset",
-    fix: "Add it to 'datasets/' or pass it to createSixb({ datasets })."
-  },
-  "edit:object": {
-    universeKey: "objectTypeIds",
-    subject: "object type",
-    fix: "Register it in 'ontology/' or pass it to createSixb({ ontologies })."
-  },
-  "append:telemetry": {
-    universeKey: "objectTypeIds",
-    subject: "object type",
-    fix: "Register it in 'ontology/' or pass it to createSixb({ ontologies })."
-  },
-  "apply:action": {
-    universeKey: "actionIds",
-    subject: "action",
-    fix: "Add it to 'actions/' or pass it to createSixb({ actions })."
-  },
-  "share:share": {
-    universeKey: "shareIds",
-    subject: "share",
-    fix: "Add it to 'shares/' or pass it to createSixb({ shares })."
-  },
-  "run:workflow": {
-    universeKey: "workflowIds",
-    subject: "workflow",
-    fix: "Add it to 'workflows/' or pass it to createSixb({ workflows })."
-  },
-  "run:sync": {
-    universeKey: "syncIds",
-    subject: "sync",
-    fix: "Add it to 'syncs/' or pass it to createSixb({ syncs })."
-  },
-  "run:pipeline": {
-    universeKey: "pipelineIds",
-    subject: "pipeline",
-    fix: "Add it to 'pipelines/' or pass it to createSixb({ pipelines })."
-  },
-  "run:agent": {
-    singleton: true,
-    subject: "agent",
-    fix: "Configure models.language and use the exported agent reference in can.run(agent)."
-  },
-  "observe:logs": {
-    universeKey: "observableIds",
-    subject: "observability surface",
-    fix: 'Use can.observe("logs").'
-  },
-  "observe:aiUsage": {
-    universeKey: "observableIds",
-    subject: "observability surface",
-    fix: "Use can.observe(agent.usage)."
-  },
-  "manage:connector": {
-    universeKey: "connectorIds",
-    subject: "connector",
-    fix: "Add it to 'connectors/' or pass it to createSixb({ connectors })."
-  },
-  "manage:aiUsage": {
-    universeKey: "manageableIds",
-    subject: "management surface",
-    fix: "Use can.manage(agent.usage)."
-  }
-};
-var GRANT_KIND_KEYS = Object.keys(GRANT_KINDS);
-var TARGETED_GRANT_KIND_KEYS = GRANT_KIND_KEYS.filter((kind) => kind !== "run:agent");
-function grantKindOf(grant) {
-  switch (grant.capability) {
-    case "access":
-      return "access:application";
-    case "view":
-      return `view:${grant.target}`;
-    case "edit":
-      return "edit:object";
-    case "append":
-      return "append:telemetry";
-    case "apply":
-      return "apply:action";
-    case "share":
-      return "share:share";
-    case "run":
-      return `run:${grant.target}`;
-    case "observe":
-      return `observe:${grant.target}`;
-    case "manage":
-      return `manage:${grant.target}`;
-  }
-}
-function emptyGrantSets() {
-  return {
-    "access:application": new Set,
-    "view:object": new Set,
-    "view:dataset": new Set,
-    "edit:object": new Set,
-    "append:telemetry": new Set,
-    "apply:action": new Set,
-    "share:share": new Set,
-    "run:workflow": new Set,
-    "run:sync": new Set,
-    "run:pipeline": new Set,
-    "run:agent": false,
-    "observe:logs": new Set,
-    "observe:aiUsage": new Set,
-    "manage:connector": new Set,
-    "manage:aiUsage": new Set
-  };
-}
-
 // src/storage/objects/execution-limits.ts
 var MAX_OBJECT_READ_FACETS2 = 16;
 var MAX_OUTPUT_JSON_DEPTH = 64;
@@ -729,7 +612,8 @@ function snapshotAuthorizationContext(context) {
     ...context.sessionId === undefined ? {} : { sessionId: context.sessionId },
     groupIds: Object.freeze([...context.groupIds]),
     roleIds: Object.freeze([...context.roleIds]),
-    grants: frozenGrants
+    grants: frozenGrants,
+    clearances: new ImmutableGrantSet(context.clearances ?? [])
   });
 }
 
@@ -1151,6 +1035,7 @@ function resolveAuthorizationContext2(input) {
   const memberGroupIds = new Set(input.groupIds);
   const roleIds = [];
   const grants = emptyGrantSets();
+  const clearances = new Set;
   for (const role of input.roles) {
     if (!role.grantedToGroupIds.some((groupId) => memberGroupIds.has(groupId))) {
       continue;
@@ -1164,13 +1049,17 @@ function resolveAuthorizationContext2(input) {
         grants[kind].add(id);
       }
     }
+    for (const markingId of role.clearances ?? []) {
+      clearances.add(markingId);
+    }
   }
   return {
     principal: input.principal,
     ...input.sessionId !== undefined ? { sessionId: input.sessionId } : {},
     groupIds: input.groupIds,
     roleIds,
-    grants
+    grants,
+    clearances
   };
 }
 // src/projections/errors.ts
@@ -1901,6 +1790,6 @@ function canViewProjection2(authorization, projection) {
 function emptyGrantIndex2() {
   return emptyGrantSets();
 }
-export { ProjectionValidationError2, computeProjectionOwnership2, validateProjectionOwnership2, validateTelemetryProjectionFieldMapping2, validateProjectionsAtStartup, defineProjection2, fromForeignKey2, isObjectProjectionDefinition2, isLinkProjectionDefinition2, isTelemetryProjectionDefinition2, isProjectionDefinition2, projectionTargetOf2, agentServiceAccountId2, GRANT_KINDS, grantKindOf, MAX_OBJECT_READ_FACETS2, ObjectReadLimitExceededError2, snapshotObjectReadExecutionLimits2, assertObjectReadFacetCount2, assertObjectReadOutputWithinLimit2, createPrincipalRuntimeAuthorization, createAgentRuntimeAuthorization, createDisabledRuntimeAuthorization, createDelegatedRuntimeAuthorization, createTrustedPrimitiveRuntimeAuthorization, createKernelRuntimeAuthorization, resolveRuntimeAuthorizationForProject, getAuthorizationRef, captureExecutionScope, resolveExecutionScopeAuthorization, AuthorizationError2, evaluate2, isAllowed2, assertAuthorized2, isRuntimeAllowed2, assertRuntimeAuthorizationBound2, assertCanEdit2, assertCanAppendTelemetry2, assertCanManageConnector2, assertPrivileged2, assertProviderAccess2, isApplicationAccessControlled2, canAccessApplication2, canViewEvent2, resolveRoleGrants2, resolveAuthorizationContext2, canViewActionRun2, canViewWorkflowRun2, canViewWorkflowIntervention2, canViewPipelineRun2, canViewProjectionRun2, canViewProjection2, emptyGrantIndex2 };
+export { ProjectionValidationError2, computeProjectionOwnership2, validateProjectionOwnership2, validateTelemetryProjectionFieldMapping2, validateProjectionsAtStartup, defineProjection2, fromForeignKey2, isObjectProjectionDefinition2, isLinkProjectionDefinition2, isTelemetryProjectionDefinition2, isProjectionDefinition2, projectionTargetOf2, agentServiceAccountId2, MAX_OBJECT_READ_FACETS2, ObjectReadLimitExceededError2, snapshotObjectReadExecutionLimits2, assertObjectReadFacetCount2, assertObjectReadOutputWithinLimit2, createPrincipalRuntimeAuthorization, createAgentRuntimeAuthorization, createDisabledRuntimeAuthorization, createDelegatedRuntimeAuthorization, createTrustedPrimitiveRuntimeAuthorization, createKernelRuntimeAuthorization, resolveRuntimeAuthorizationForProject, getAuthorizationRef, captureExecutionScope, resolveExecutionScopeAuthorization, AuthorizationError2, evaluate2, isAllowed2, assertAuthorized2, isRuntimeAllowed2, assertRuntimeAuthorizationBound2, assertCanEdit2, assertCanAppendTelemetry2, assertCanManageConnector2, assertPrivileged2, assertProviderAccess2, isApplicationAccessControlled2, canAccessApplication2, canViewEvent2, resolveRoleGrants2, resolveAuthorizationContext2, canViewActionRun2, canViewWorkflowRun2, canViewWorkflowIntervention2, canViewPipelineRun2, canViewProjectionRun2, canViewProjection2, emptyGrantIndex2 };
 
-//# debugId=0D4C4769683DF03564756E2164756E21
+//# debugId=EE4F623367B105A264756E2164756E21