@sixb/core 0.1.17 → 0.1.19

package/dist/{chunk-y2aq6ag9.js → chunk-b38szspf.js}

@@ -1,28 +1,19 @@
 // @bun
 import {
   parseSixbFailure2
-} from "./chunk-6fsr7y93.js";
+} from "./chunk-8mx7qw3y.js";
 import {
   isPlainRecord
 } from "./chunk-wy0qdqfm.js";
 
 // src/storage/action-runs/types.ts
-var ACTION_RUN_PHASES2 = [
-  "request",
-  "enqueue",
-  "validation",
-  "writeback",
-  "edits",
-  "commit",
-  "effects",
-  "cancelled"
-];
+var ACTION_RUN_PHASES2 = ["validation", "writeback", "edits", "commit", "effects"];
 var ACTION_RUN_FAILURE_CODES2 = [
   "internal.unexpected",
   "runtime.cancelled",
-  "queue.enqueue_failed",
   "action.phase_failed",
-  "action.read_conflict"
+  "action.read_conflict",
+  "action.timeout"
 ];
 
 // src/storage/action-runs/failure.ts
@@ -57,4 +48,4 @@ function parseStoredActionRunFailureValue(value) {
 
 export { ACTION_RUN_PHASES2, ACTION_RUN_FAILURE_CODES2, serializeActionRunFailure2, parseActionRunFailure2 };
 
-//# debugId=4C1D77261542AF7164756E2164756E21
+//# debugId=79EFE10C9637F4B164756E2164756E21

package/dist/chunk-b38szspf.js.map

@@ -0,0 +1,11 @@
+{
+  "version": 3,
+  "sources": ["../src/storage/action-runs/types.ts", "../src/storage/action-runs/failure.ts"],
+  "sourcesContent": [
+    "import type { ActionSubject } from \"../../actions\"\nimport type { SixbErrorCode, SixbFailure } from \"../../errors/types\"\nimport type { JsonValue } from \"../../json\"\n\n/**\n * How a run ended. A run is recorded once, when it ends: while it executes, the request that runs\n * it is its only state.\n */\nexport type ActionRunStatus = \"succeeded\" | \"failed\"\n\n/** The phases of a run, in the order it reaches them. */\nexport const ACTION_RUN_PHASES = [\"validation\", \"writeback\", \"edits\", \"commit\", \"effects\"] as const\n\nexport type ActionRunPhase = (typeof ACTION_RUN_PHASES)[number]\n\nexport type ActionRunParams = Readonly<Record<string, JsonValue>>\n\n/** Error codes an action run or phase record can persist and expose. */\nexport const ACTION_RUN_FAILURE_CODES = [\n  \"internal.unexpected\",\n  \"runtime.cancelled\",\n  \"action.phase_failed\",\n  \"action.read_conflict\",\n  \"action.timeout\",\n] as const satisfies readonly [SixbErrorCode, ...SixbErrorCode[]]\n\nexport type ActionRunFailureCode = (typeof ACTION_RUN_FAILURE_CODES)[number]\n\nexport interface ActionRunFailureDetails<TPhase extends ActionRunPhase = ActionRunPhase> {\n  readonly actionId: string\n  readonly runId: string\n  readonly phase: TPhase\n}\n\n/** Portable failure record with Action's required correlation details. */\nexport interface ActionRunFailure<TPhase extends ActionRunPhase = ActionRunPhase>\n  extends Omit<SixbFailure<ActionRunFailureCode>, \"details\"> {\n  readonly details: ActionRunFailureDetails<TPhase>\n}\n\nexport type ActionRunWritebackRecord =\n  | {\n      readonly status: \"succeeded\"\n      readonly completedAt: Date\n      readonly result: JsonValue\n      readonly error?: never\n    }\n  | {\n      readonly status: \"failed\"\n      readonly completedAt: Date\n      readonly result?: never\n      readonly error: ActionRunFailure<\"writeback\">\n    }\n\nexport type ActionRunEffectsRecord =\n  | {\n      readonly status: \"succeeded\"\n      readonly completedAt: Date\n      readonly error?: never\n    }\n  | {\n      readonly status: \"failed\"\n      readonly completedAt: Date\n      readonly error: ActionRunFailure<\"effects\">\n    }\n\ninterface ActionRunRecordFields {\n  readonly id: string\n  readonly projectId: string\n  readonly executionId: string\n  readonly actionId: string\n  readonly subject: ActionSubject\n  /** The last phase the run reached. */\n  readonly phase: ActionRunPhase\n  readonly startedAt: Date\n  readonly finishedAt: Date\n  readonly params: ActionRunParams\n  readonly idempotencyKey: string\n  readonly writeback?: ActionRunWritebackRecord\n}\n\n/** A run's terminal record, as it is written once when the run ends. */\nexport type RecordActionRunInput =\n  | (ActionRunRecordFields & { readonly status: \"succeeded\"; readonly error?: never })\n  | (ActionRunRecordFields & { readonly status: \"failed\"; readonly error: ActionRunFailure })\n\n/**\n * A recorded run. Its effects run after its record is written, so their outcome is the one part\n * recorded later, on a succeeded run that committed edits.\n */\nexport type ActionRunRecord = RecordActionRunInput & {\n  readonly effects?: ActionRunEffectsRecord\n}\n\nexport type RecordActionEffectsInput =\n  | {\n      readonly id: string\n      readonly projectId: string\n      readonly status: \"succeeded\"\n      readonly completedAt?: Date\n    }\n  | {\n      readonly id: string\n      readonly projectId: string\n      readonly status: \"failed\"\n      readonly completedAt?: Date\n      readonly error: ActionRunFailure<\"effects\">\n    }\n\nexport interface ListActionRunsInput {\n  readonly projectId: string\n  readonly actionId?: string\n  readonly actionIds?: readonly string[]\n  readonly subject?: ActionSubject\n  readonly objectTypeId?: string\n  readonly objectTypeIds?: readonly string[]\n  readonly primaryId?: string\n  readonly statuses?: readonly ActionRunStatus[]\n  readonly startedAfter?: Date\n  readonly startedBefore?: Date\n  readonly limit?: number\n  readonly offset?: number\n  readonly order?: \"asc\" | \"desc\"\n}\n\nexport interface ListActionRunsResult {\n  readonly runs: readonly ActionRunRecord[]\n  readonly hasMore: boolean\n  readonly total: number\n}\n\nexport interface ActionRunStorage {\n  /**\n   * Insert a run's terminal record.\n   *\n   * A run is recorded once: a run id that already has a record is refused with an\n   * `ActionRunError`, and so is an execution that already recorded another run. The execution must\n   * be the trusted primitive execution created for this run.\n   */\n  record(input: RecordActionRunInput): Promise<ActionRunRecord>\n  /**\n   * Record the outcome of the effects of a succeeded run that committed edits, once. Recording an\n   * equal outcome again returns the run unchanged.\n   */\n  recordEffects(input: RecordActionEffectsInput): Promise<ActionRunRecord>\n  getById(params: { projectId: string; id: string }): Promise<ActionRunRecord | null>\n  /** Runs ordered by `startedAt`, then id. */\n  list(input: ListActionRunsInput): Promise<ListActionRunsResult>\n}\n",
+    "import { parseSixbFailure } from \"../../errors/internal\"\nimport { isPlainRecord } from \"../../json\"\nimport {\n  ACTION_RUN_FAILURE_CODES,\n  ACTION_RUN_PHASES,\n  type ActionRunFailure,\n  type ActionRunFailureDetails,\n  type ActionRunPhase,\n} from \"./types\"\n\n/** Serializes the canonical failure plus Action's typed lifecycle extension. */\nexport function serializeActionRunFailure<TPhase extends ActionRunPhase>(\n  failure: ActionRunFailure<TPhase>,\n  expectedPhase?: TPhase\n): string {\n  const parsed =\n    expectedPhase === undefined\n      ? parseActionRunFailure(failure)\n      : parseActionRunFailure(failure, expectedPhase)\n  return JSON.stringify(parsed)\n}\n\n/** Validates and detaches an Action failure read from a storage boundary. */\nexport function parseActionRunFailure<TPhase extends ActionRunPhase>(\n  value: unknown,\n  expectedPhase: TPhase\n): ActionRunFailure<TPhase>\nexport function parseActionRunFailure(value: unknown): ActionRunFailure\nexport function parseActionRunFailure(\n  value: unknown,\n  expectedPhase?: ActionRunPhase\n): ActionRunFailure {\n  const candidate = parseStoredActionRunFailureValue(value)\n  const failure = parseSixbFailure(candidate, ACTION_RUN_FAILURE_CODES)\n  const details = failure.details\n  if (\n    !isPlainRecord(details) ||\n    typeof details.actionId !== \"string\" ||\n    typeof details.runId !== \"string\" ||\n    typeof details.phase !== \"string\" ||\n    !(ACTION_RUN_PHASES as readonly string[]).includes(details.phase)\n  ) {\n    throw new Error(\n      \"[Sixb] Stored failure is invalid: Action details must contain actionId, runId, and a known phase.\"\n    )\n  }\n  if (expectedPhase !== undefined && details.phase !== expectedPhase) {\n    throw new Error(`[Sixb] Stored Action ${expectedPhase} failure has phase '${details.phase}'.`)\n  }\n\n  return {\n    ...failure,\n    details: details as unknown as ActionRunFailureDetails,\n  }\n}\n\nfunction parseStoredActionRunFailureValue(value: unknown): unknown {\n  if (typeof value !== \"string\") return value\n  try {\n    return JSON.parse(value) as unknown\n  } catch {\n    throw new Error(\"[Sixb] Stored failure is invalid: value is not valid JSON.\")\n  }\n}\n"
+  ],
+  "mappings": ";;;;;;;;;AAWO,IAAM,qBAAoB,CAAC,cAAc,aAAa,SAAS,UAAU,SAAS;AAOlF,IAAM,4BAA2B;AAAA,EACtC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;;;ACbO,SAAS,0BAAwD,CACtE,SACA,eACQ;AAAA,EACR,MAAM,SACJ,kBAAkB,YACd,uBAAsB,OAAO,IAC7B,uBAAsB,SAAS,aAAa;AAAA,EAClD,OAAO,KAAK,UAAU,MAAM;AAAA;AASvB,SAAS,sBAAqB,CACnC,OACA,eACkB;AAAA,EAClB,MAAM,YAAY,iCAAiC,KAAK;AAAA,EACxD,MAAM,UAAU,kBAAiB,WAAW,yBAAwB;AAAA,EACpE,MAAM,UAAU,QAAQ;AAAA,EACxB,IACE,CAAC,cAAc,OAAO,KACtB,OAAO,QAAQ,aAAa,YAC5B,OAAO,QAAQ,UAAU,YACzB,OAAO,QAAQ,UAAU,YACzB,CAAE,mBAAwC,SAAS,QAAQ,KAAK,GAChE;AAAA,IACA,MAAM,IAAI,MACR,mGACF;AAAA,EACF;AAAA,EACA,IAAI,kBAAkB,aAAa,QAAQ,UAAU,eAAe;AAAA,IAClE,MAAM,IAAI,MAAM,wBAAwB,oCAAoC,QAAQ,SAAS;AAAA,EAC/F;AAAA,EAEA,OAAO;AAAA,OACF;AAAA,IACH;AAAA,EACF;AAAA;AAGF,SAAS,gCAAgC,CAAC,OAAyB;AAAA,EACjE,IAAI,OAAO,UAAU;AAAA,IAAU,OAAO;AAAA,EACtC,IAAI;AAAA,IACF,OAAO,KAAK,MAAM,KAAK;AAAA,IACvB,MAAM;AAAA,IACN,MAAM,IAAI,MAAM,4DAA4D;AAAA;AAAA;",
+  "debugId": "79EFE10C9637F4B164756E2164756E21",
+  "names": []
+}

package/dist/{chunk-r2y23egw.js → chunk-bkpke1sg.js}

@@ -22,15 +22,6 @@ function scopeKeysForEvent2(event) {
       return { pipelineId: event.payload.pipelineId, runId: event.payload.runId };
     case "syncs":
       return { syncId: event.payload.syncId, runId: event.payload.runId };
-    case "actions":
-      return {
-        actionId: event.payload.actionId,
-        runId: event.payload.runId,
-        ...event.payload.subject.kind === "object" ? {
-          objectTypeId: event.payload.subject.objectTypeId,
-          primaryId: event.payload.subject.primaryId
-        } : {}
-      };
     case "rules":
       return { ruleId: event.payload.ruleId };
     case "schedules":
@@ -46,4 +37,4 @@ function scopeKeysForEvent2(event) {
 
 export { scopeKeysForEvent2 };
 
-//# debugId=D973C2737779367F64756E2164756E21
+//# debugId=8C7E850AA820D6B464756E2164756E21

package/dist/chunk-bkpke1sg.js.map

@@ -0,0 +1,10 @@
+{
+  "version": 3,
+  "sources": ["../src/events/scope.ts"],
+  "sourcesContent": [
+    "import type { DomainEvent } from \"./types/index\"\n\n/**\n * The scope keys an event can be matched against by a subscription filter.\n *\n * Object identity lives in different payload fields per topic (objects use\n * `objectTypeId`/`primaryId`, telemetry uses `objectId`, links use the source\n * side), so this resolves them topic-aware. It is the single source of truth\n * shared by the client predicate (`buildEventPredicate`) and the server poll\n * filter (`eventMatchesScope`) so the two can never drift — adding a topic is a\n * compile error here until this switch is extended.\n */\nexport interface EventScopeKeys {\n  readonly objectTypeId?: string\n  readonly primaryId?: string\n  readonly propertyId?: string\n  readonly linkId?: string\n  readonly ruleId?: string\n  readonly runId?: string\n  readonly datasetId?: string\n  readonly syncId?: string\n  readonly pipelineId?: string\n}\n\nexport function scopeKeysForEvent(event: DomainEvent): EventScopeKeys {\n  switch (event.topic) {\n    case \"objects\":\n      return { objectTypeId: event.payload.objectTypeId, primaryId: event.payload.primaryId }\n    case \"telemetry\":\n      return {\n        objectTypeId: event.payload.objectTypeId,\n        primaryId: event.payload.objectId,\n        propertyId: event.payload.propertyId,\n      }\n    case \"links\":\n      return {\n        objectTypeId: event.payload.sourceTypeId,\n        primaryId: event.payload.sourceId,\n        linkId: event.payload.linkId,\n      }\n    case \"workflows\":\n      return { runId: event.payload.runId }\n    case \"pipelines\":\n      return { pipelineId: event.payload.pipelineId, runId: event.payload.runId }\n    case \"syncs\":\n      return { syncId: event.payload.syncId, runId: event.payload.runId }\n    case \"rules\":\n      return { ruleId: event.payload.ruleId }\n    case \"schedules\":\n      return {}\n    case \"datasets\":\n      return { datasetId: event.payload.datasetId }\n    default: {\n      // Exhaustiveness guard: a new topic must extend the switch above.\n      const _exhaustive: never = event\n      return _exhaustive\n    }\n  }\n}\n"
+  ],
+  "mappings": ";;AAwBO,SAAS,kBAAiB,CAAC,OAAoC;AAAA,EACpE,QAAQ,MAAM;AAAA,SACP;AAAA,MACH,OAAO,EAAE,cAAc,MAAM,QAAQ,cAAc,WAAW,MAAM,QAAQ,UAAU;AAAA,SACnF;AAAA,MACH,OAAO;AAAA,QACL,cAAc,MAAM,QAAQ;AAAA,QAC5B,WAAW,MAAM,QAAQ;AAAA,QACzB,YAAY,MAAM,QAAQ;AAAA,MAC5B;AAAA,SACG;AAAA,MACH,OAAO;AAAA,QACL,cAAc,MAAM,QAAQ;AAAA,QAC5B,WAAW,MAAM,QAAQ;AAAA,QACzB,QAAQ,MAAM,QAAQ;AAAA,MACxB;AAAA,SACG;AAAA,MACH,OAAO,EAAE,OAAO,MAAM,QAAQ,MAAM;AAAA,SACjC;AAAA,MACH,OAAO,EAAE,YAAY,MAAM,QAAQ,YAAY,OAAO,MAAM,QAAQ,MAAM;AAAA,SACvE;AAAA,MACH,OAAO,EAAE,QAAQ,MAAM,QAAQ,QAAQ,OAAO,MAAM,QAAQ,MAAM;AAAA,SAC/D;AAAA,MACH,OAAO,EAAE,QAAQ,MAAM,QAAQ,OAAO;AAAA,SACnC;AAAA,MACH,OAAO,CAAC;AAAA,SACL;AAAA,MACH,OAAO,EAAE,WAAW,MAAM,QAAQ,UAAU;AAAA,aACrC;AAAA,MAEP,MAAM,cAAqB;AAAA,MAC3B,OAAO;AAAA,IACT;AAAA;AAAA;",
+  "debugId": "8C7E850AA820D6B464756E2164756E21",
+  "names": []
+}

package/dist/{chunk-xyvy73tj.js → chunk-bpgy64fw.js}

@@ -3,7 +3,10 @@ import {
   validatePrimaryProperties2,
   validatePropertyDefinitions2,
   validateQueryMetadata2
-} from "./chunk-rpxz486p.js";
+} from "./chunk-hvsb78a1.js";
+import {
+  markingIdsFrom
+} from "./chunk-xt1zt7gv.js";
 import {
   createPropertyTokenMap2,
   createLinkTokenMap2
@@ -382,11 +385,13 @@ function defineInterface2(input) {
   };
 }
 function prop2(id, schema, options) {
+  const { markings, ...rest } = options ?? {};
   return {
     id,
     name: options?.name ?? id,
     schema,
-    ...options
+    ...rest,
+    ...markings && markings.length > 0 ? { markings: markingIdsFrom(markings, `Property '${id}' markings`) } : {}
   };
 }
 function isObjectTypeLike(value) {
@@ -462,4 +467,4 @@ function integerEnum2(values) {
 }
 export { snapshotVectorProfiles, OntologyRegistry2, defineObjectType2, defineOntology2, defineValueType2, defineInterface2, prop2, link2, valueTypeRef2, stringEnum2, integerEnum2 };
 
-//# debugId=655678819609AD1364756E2164756E21
+//# debugId=1FDC7067D5F81E0664756E2164756E21

package/dist/chunk-bpgy64fw.js.map

@@ -0,0 +1,12 @@
+{
+  "version": 3,
+  "sources": ["../src/ontology/vector-profiles.ts", "../src/ontology/registry.ts", "../src/ontology/builders.ts"],
+  "sourcesContent": [
+    "import type { ObjectVectorSearchProfile } from \"./types\"\n\n/** Metadata-only copy. Executable provider objects and credentials never leave the host. */\nexport function snapshotVectorProfiles(\n  profiles: Readonly<Record<string, ObjectVectorSearchProfile>>\n): Readonly<Record<string, ObjectVectorSearchProfile>> {\n  const snapshot: Record<string, ObjectVectorSearchProfile> = Object.create(null)\n  for (const [name, profileDefinition] of Object.entries(profiles)) {\n    const { providerId, modelId, definition } = profileDefinition.model\n    snapshot[name] = Object.freeze({\n      source: Object.freeze([...profileDefinition.source]),\n      model: Object.freeze({\n        providerId,\n        modelId,\n        definition: Object.freeze({\n          kind: \"embedding\" as const,\n          providerId,\n          modelId,\n          dimensions: definition.dimensions,\n          ...(definition.inputMode ? { inputMode: definition.inputMode } : {}),\n          ...(definition.representation\n            ? {\n                representation: Object.freeze({\n                  name: definition.representation.name,\n                  ...(definition.representation.version === undefined\n                    ? {}\n                    : { version: definition.representation.version }),\n                }),\n              }\n            : {}),\n        }),\n      }),\n    })\n  }\n  return Object.freeze(snapshot)\n}\n",
+    "/**\n * Standalone ontology registry — owns all type state and resolution logic.\n *\n * Zero infrastructure dependencies: imports only from the `ontology/` module.\n * Other modules depend on its read-only catalog instead of coupling to the full\n * `Sixb` facade.\n */\n\nimport {\n  formatUnknownObjectTypeMessage,\n  OntologyNotFoundError,\n  OntologyValidationError,\n} from \"./errors\"\nimport type { ObjectTypeWithPropertyTokens } from \"./tokens\"\nimport { createLinkTokenMap, createPropertyTokenMap } from \"./tokens\"\nimport type { ObjectType, Schema, ValueType } from \"./types\"\nimport {\n  validatePrimaryProperties,\n  validatePropertyDefinitions,\n  validateQueryMetadata,\n} from \"./validation\"\nimport { snapshotVectorProfiles } from \"./vector-profiles\"\n\n// ── Input types ──────────────────────────────────────────────\n\n/** Typed wrapper used by `createSixb` to register full ontology documents. */\nexport type OntologyDocumentInput = {\n  readonly id: string\n  readonly version: string\n  readonly objectTypes: readonly ObjectTypeWithPropertyTokens[]\n  readonly valueTypes?: readonly ValueType[]\n}\n\n/**\n * Runtime accepts either full ontology documents or individual object types.\n * This keeps setup flexible while preserving strict typing.\n */\nexport type OntologySource = ObjectTypeWithPropertyTokens | OntologyDocumentInput\n\nexport interface OntologyRegistryOptions {\n  readonly sources: readonly OntologySource[]\n}\n\n/** Read-only access to the host's validated ontology definitions and type graph. */\nexport interface OntologyDefinitionCatalog {\n  listObjectTypes(): readonly ObjectTypeWithPropertyTokens[]\n  getObjectTypeById(objectTypeId: string): ObjectTypeWithPropertyTokens | null\n  resolveObjectType(objectTypeId: string): ObjectTypeWithPropertyTokens\n  getPrimaryPropertyId(objectTypeId: string): string\n  listSubTypes(objectTypeId: string): string[]\n  listAncestorChain(objectType: ObjectType): readonly ObjectTypeWithPropertyTokens[]\n  isValidLinkTarget(expected: string | string[], actual: string): boolean\n  getObjectTypesById(): ReadonlyMap<string, ObjectTypeWithPropertyTokens>\n  getValueTypesById(): ReadonlyMap<string, ValueType>\n  getPrimaryByTypeId(): ReadonlyMap<string, string>\n}\n\n// ── Private helpers ──────────────────────────────────────────\n\nfunction isOntologyDocumentSource(\n  source: OntologySource\n): source is Exclude<OntologySource, ObjectTypeWithPropertyTokens> {\n  return \"objectTypes\" in source\n}\n\n/**\n * Recursively walk a schema tree and collect ValueTypes discovered\n * via `valueTypeRef` nodes that carry a `_resolved` schema.\n *\n * This enables auto-registration: when codegen emits `valueTypeRef(VT)`,\n * it stores the resolved schema (and the semantic type, if any) inline. We\n * extract them here so the runtime `valueTypesById` registry is populated\n * without requiring users to pass ValueTypes explicitly. Unit validation reads\n * the semantic type from that registry, so dropping it would make a\n * unit-bearing value type reject every unit.\n */\nfunction extractValueTypesFromSchema(\n  schema: Schema,\n  collected: Map<string, ValueType>,\n  seen: Set<string>\n): void {\n  if (typeof schema === \"string\") return\n\n  if (schema.type === \"valueTypeRef\") {\n    if (schema._resolved && !seen.has(schema.valueTypeId)) {\n      seen.add(schema.valueTypeId)\n      const localName = schema.valueTypeId.includes(\":\")\n        ? schema.valueTypeId.slice(schema.valueTypeId.indexOf(\":\") + 1)\n        : schema.valueTypeId\n      collected.set(schema.valueTypeId, {\n        id: schema.valueTypeId,\n        name: localName,\n        schema: schema._resolved,\n        ...(schema._semanticType === undefined ? {} : { semanticType: schema._semanticType }),\n      })\n      extractValueTypesFromSchema(schema._resolved, collected, seen)\n    }\n    return\n  }\n\n  if (schema.type === \"object\") {\n    for (const field of Object.values(schema.properties)) {\n      extractValueTypesFromSchema(field.schema, collected, seen)\n    }\n    return\n  }\n\n  if (schema.type === \"array\") {\n    extractValueTypesFromSchema(schema.items, collected, seen)\n    return\n  }\n\n  if (schema.type === \"map\") {\n    extractValueTypesFromSchema(schema.valueSchema, collected, seen)\n  }\n}\n\nfunction collectOntology(sources: readonly OntologySource[]): {\n  objectTypes: ObjectTypeWithPropertyTokens[]\n  valueTypes: ValueType[]\n} {\n  const objectTypes: ObjectTypeWithPropertyTokens[] = []\n  const valueTypes: ValueType[] = []\n  const seenObjectTypes = new Set<ObjectTypeWithPropertyTokens>()\n\n  for (const source of sources) {\n    if (isOntologyDocumentSource(source)) {\n      for (const ot of source.objectTypes) {\n        if (!seenObjectTypes.has(ot)) {\n          seenObjectTypes.add(ot)\n          objectTypes.push(ot)\n        }\n      }\n      valueTypes.push(...(source.valueTypes ?? []))\n    } else {\n      if (!seenObjectTypes.has(source)) {\n        seenObjectTypes.add(source)\n        objectTypes.push(source)\n      }\n    }\n  }\n\n  // Auto-discover ValueTypes embedded in ObjectType schemas via _resolved.\n  // Explicit ValueTypes (from OntologyDocumentInput) take priority.\n  const explicitIds = new Set(valueTypes.map((vt) => vt.id))\n  const discovered = new Map<string, ValueType>()\n\n  for (const objectType of objectTypes) {\n    for (const property of objectType.properties) {\n      extractValueTypesFromSchema(property.schema, discovered, explicitIds)\n    }\n    for (const linkDef of objectType.links) {\n      if (linkDef.properties) {\n        for (const property of linkDef.properties) {\n          extractValueTypesFromSchema(property.schema, discovered, explicitIds)\n        }\n      }\n    }\n  }\n\n  valueTypes.push(...discovered.values())\n\n  return { objectTypes, valueTypes }\n}\n\n// ── OntologyRegistry ─────────────────────────────────────────\n\n/**\n * Self-contained registry for ontology types.\n *\n * Holds all object types, value types, the subtype graph, and the primary\n * property mapping. Validates inheritance chains and flattens inherited\n * properties at construction time.\n *\n * Exposes read-only accessors so consumers never mutate ontology state.\n */\nexport class OntologyRegistry implements OntologyDefinitionCatalog {\n  private readonly objectTypesById = new Map<string, ObjectTypeWithPropertyTokens>()\n  private readonly valueTypesById = new Map<string, ValueType>()\n  private readonly subTypesById = new Map<string, Set<string>>()\n  private readonly primaryByTypeId: Map<string, string>\n\n  constructor(options: OntologyRegistryOptions) {\n    const { objectTypes, valueTypes } = collectOntology(options.sources)\n\n    for (const objectType of objectTypes) {\n      if (this.objectTypesById.has(objectType.id)) {\n        throw new OntologyValidationError(`Duplicate object type id: ${objectType.id}`)\n      }\n      this.objectTypesById.set(objectType.id, objectType)\n    }\n\n    for (const valueType of valueTypes) {\n      if (this.valueTypesById.has(valueType.id)) {\n        throw new OntologyValidationError(`Duplicate value type id: ${valueType.id}`)\n      }\n      this.valueTypesById.set(valueType.id, valueType)\n    }\n\n    this.validateAndBuildExtendsRegistry()\n    this.resolveInheritedProperties()\n    validatePropertyDefinitions(this.objectTypesById, this.valueTypesById)\n    validateQueryMetadata(this.objectTypesById, this.valueTypesById)\n    for (const [id, type] of this.objectTypesById) {\n      if (type.search?.vectors)\n        this.objectTypesById.set(id, {\n          ...type,\n          search: { ...type.search, vectors: snapshotVectorProfiles(type.search.vectors) },\n        })\n    }\n    this.primaryByTypeId = validatePrimaryProperties(this.objectTypesById)\n  }\n\n  // ── Public read API ──────────────────────────────────────\n\n  /** All registered object types. */\n  listObjectTypes(): readonly ObjectTypeWithPropertyTokens[] {\n    return [...this.objectTypesById.values()]\n  }\n\n  /** Lookup an object type by id. Returns `null` if not found. */\n  getObjectTypeById(objectTypeId: string): ObjectTypeWithPropertyTokens | null {\n    return this.objectTypesById.get(objectTypeId) ?? null\n  }\n\n  /**\n   * Lookup an object type by id, throwing if it does not exist.\n   *\n   * Use this when the caller requires the type to exist and should fail\n   * loudly on unknown types (e.g., write operations receiving a type id).\n   */\n  resolveObjectType(objectTypeId: string): ObjectTypeWithPropertyTokens {\n    const objectType = this.objectTypesById.get(objectTypeId)\n    if (!objectType) {\n      throw new OntologyNotFoundError(formatUnknownObjectTypeMessage(objectTypeId))\n    }\n    return objectType\n  }\n\n  /** Get the primary property id for a given object type. Throws if unknown. */\n  getPrimaryPropertyId(objectTypeId: string): string {\n    const id = this.primaryByTypeId.get(objectTypeId)\n    if (!id) throw new OntologyNotFoundError(formatUnknownObjectTypeMessage(objectTypeId))\n    return id\n  }\n\n  /** Collect all transitive sub-types of the given object type id. */\n  listSubTypes(objectTypeId: string): string[] {\n    const result: string[] = []\n    const collect = (typeId: string): void => {\n      const children = this.subTypesById.get(typeId)\n      if (!children) return\n      for (const childId of children) {\n        result.push(childId)\n        collect(childId)\n      }\n    }\n    collect(objectTypeId)\n    return result\n  }\n\n  /** Get the structural extends chain from root ancestor to the provided type. */\n  listAncestorChain(objectType: ObjectType): readonly ObjectTypeWithPropertyTokens[] {\n    const chain: ObjectTypeWithPropertyTokens[] = []\n    let current: ObjectTypeWithPropertyTokens | null = this.resolveObjectType(objectType.id)\n    const seen = new Set<string>()\n\n    while (current) {\n      if (seen.has(current.id)) {\n        throw new OntologyValidationError(\n          `Circular extends chain detected while resolving ancestors for \"${objectType.id}\".`\n        )\n      }\n      seen.add(current.id)\n      chain.push(current)\n      current = current.extends ? this.resolveObjectType(current.extends) : null\n    }\n\n    return chain.reverse()\n  }\n\n  /**\n   * Check whether `actual` is a valid target for a link expecting `expected`.\n   *\n   * Supports wildcard `\"*\"`, single concrete types, and arrays. A type\n   * matches if it equals the expected type or is a transitive subtype.\n   */\n  isValidLinkTarget(expected: string | string[], actual: string): boolean {\n    if (expected === \"*\") return true\n    const types = Array.isArray(expected) ? expected : [expected]\n    if (types.includes(\"*\")) return true\n    for (const type of types) {\n      if (actual === type || this.listSubTypes(type).includes(actual)) return true\n    }\n    return false\n  }\n\n  // ── Map accessors (read-only views) ──────────────────────\n\n  /** Read-only view of all object types by id. */\n  getObjectTypesById(): ReadonlyMap<string, ObjectTypeWithPropertyTokens> {\n    return this.objectTypesById\n  }\n\n  /** Read-only view of all value types by id. */\n  getValueTypesById(): ReadonlyMap<string, ValueType> {\n    return this.valueTypesById\n  }\n\n  /** Read-only view of primary property ids by object type id. */\n  getPrimaryByTypeId(): ReadonlyMap<string, string> {\n    return this.primaryByTypeId\n  }\n\n  // ── Private initialization ───────────────────────────────\n\n  /**\n   * Build the subtype graph from `extends` and `parents` declarations.\n   *\n   * Validates that parent types exist and detects circular `extends` chains.\n   */\n  private validateAndBuildExtendsRegistry(): void {\n    const resolving = new Set<string>()\n    const resolved = new Set<string>()\n\n    const registerChild = (parentId: string, childId: string): void => {\n      let children = this.subTypesById.get(parentId)\n      if (!children) {\n        children = new Set()\n        this.subTypesById.set(parentId, children)\n      }\n      children.add(childId)\n    }\n\n    const visit = (typeId: string, chain: string[]): void => {\n      if (resolved.has(typeId)) return\n\n      const objectType = this.objectTypesById.get(typeId)\n      if (!objectType || !objectType.extends) {\n        resolved.add(typeId)\n        return\n      }\n\n      const parentId = objectType.extends\n\n      if (!this.objectTypesById.has(parentId)) {\n        throw new OntologyValidationError(\n          `ObjectType \"${typeId}\" extends unknown type \"${parentId}\". If \"${parentId}\" comes from an external ontology, add it to 'ontologies' in createSixb().`\n        )\n      }\n\n      if (resolving.has(typeId)) {\n        throw new OntologyValidationError(\n          `Circular extends chain detected: ${[...chain, typeId].join(\" → \")}`\n        )\n      }\n\n      resolving.add(typeId)\n      visit(parentId, [...chain, typeId])\n\n      registerChild(parentId, typeId)\n\n      resolving.delete(typeId)\n      resolved.add(typeId)\n    }\n\n    for (const typeId of this.objectTypesById.keys()) {\n      visit(typeId, [])\n    }\n\n    for (const [typeId, objectType] of this.objectTypesById) {\n      if (!objectType.parents) continue\n      for (const parentId of objectType.parents) {\n        if (parentId === objectType.extends) continue\n        if (!this.objectTypesById.has(parentId)) {\n          throw new OntologyValidationError(\n            `ObjectType \"${typeId}\" lists unknown parent \"${parentId}\" in parents. If \"${parentId}\" comes from an external ontology, add it to 'ontologies' in createSixb().`\n          )\n        }\n        registerChild(parentId, typeId)\n      }\n    }\n  }\n\n  /**\n   * For types with string `extends`, merge parent properties/links\n   * and rebuild tokens. Idempotent: no-op if already flattened (codegen case).\n   */\n  private resolveInheritedProperties(): void {\n    const resolved = new Set<string>()\n\n    const resolve = (typeId: string): void => {\n      if (resolved.has(typeId)) return\n      const objectType = this.objectTypesById.get(typeId)!\n\n      if (!objectType.extends) {\n        resolved.add(typeId)\n        return\n      }\n\n      resolve(objectType.extends)\n      const parent = this.objectTypesById.get(objectType.extends)!\n\n      const mergeById = <T extends { id: string }>(\n        parentItems: readonly T[],\n        childItems: readonly T[]\n      ): T[] => {\n        const childIds = new Set(childItems.map((item) => item.id))\n        const fromParent = parentItems.filter((item) => !childIds.has(item.id))\n        return [...fromParent, ...childItems]\n      }\n\n      const mergedProperties = mergeById(parent.properties, objectType.properties)\n      const mergedLinks = mergeById(parent.links, objectType.links)\n\n      const changed =\n        mergedProperties.length !== objectType.properties.length ||\n        mergedLinks.length !== objectType.links.length\n\n      if (changed) {\n        const merged: ObjectType = {\n          ...objectType,\n          properties: mergedProperties,\n          links: mergedLinks,\n        }\n        const withTokens: ObjectTypeWithPropertyTokens = {\n          ...merged,\n          p: createPropertyTokenMap(merged),\n        }\n        ;(withTokens as ObjectTypeWithPropertyTokens & { l: unknown }).l =\n          createLinkTokenMap(merged)\n        this.objectTypesById.set(typeId, withTokens)\n      }\n\n      resolved.add(typeId)\n    }\n\n    for (const typeId of this.objectTypesById.keys()) {\n      resolve(typeId)\n    }\n  }\n}\n",
+    "/**\n * Builder helpers for ontology modeling.\n *\n * These functions provide shorthand for constructing `ObjectType`, `ValueType`,\n * `Interface`, `Property`, `ObjectLink`, and `EnumSchema` values with sensible\n * defaults so you can focus on the semantics rather than boilerplate.\n *\n * ```ts\n * import { defineObjectType, prop, link, stringEnum } from \"@sixb/core\"\n *\n * const thermostat = defineObjectType({\n *   id: \"thermostat\",\n *   name: \"Thermostat\",\n *   properties: [\n *     prop(\"currentTemperature\", \"double\", {\n *       name: \"Current Temperature\",\n *       semanticType: \"Temperature\",\n *       required: true,\n *     }),\n *     prop(\"mode\", stringEnum([\"off\", \"heat\", \"cool\", \"auto\"])),\n *   ],\n *   links: [\n *     link.ref(\"controls\", \"hvacZone\", { cardinality: \"one\" }),\n *   ],\n * })\n * ```\n */\n\nimport { markingIdsFrom } from \"../security/builders\"\nimport type { MarkingDefinition } from \"../security/types\"\nimport type { ObjectTypeWithPropertyTokens, ObjectTypeWithTokens } from \"./tokens\"\nimport { createLinkTokenMap, createPropertyTokenMap } from \"./tokens\"\nimport type {\n  EnumSchema,\n  Interface,\n  LinkCardinality,\n  ObjectLink,\n  ObjectLinkTargetMetadata,\n  ObjectType,\n  ObjectVectorSearchProfile,\n  Ontology,\n  Property,\n  PropertyMode,\n  PropertyQueryMetadata,\n  Schema,\n  ValueType,\n  ValueTypeRefSchema,\n} from \"./types\"\nimport type { QuantitativeTypeId } from \"./units\"\n\ntype NameFromOptions<TId extends string, TOptions> = TOptions extends {\n  name: infer TName extends string\n}\n  ? TName\n  : TId\n\n/**\n * Preserve literal option values when an option key is provided.\n *\n * Why this exists:\n * - `prop(\"x\", \"string\", { required: true })` should keep `required` as literal `true`\n *   (not widen to `boolean`) so downstream inference can treat the field as required.\n */\ntype FieldFromOptions<TOptions, TKey extends string, TFallback> =\n  TOptions extends Record<TKey, infer TValue>\n    ? { [K in TKey]: TValue }\n    : { [K in TKey]?: TFallback }\n\nconst selfLinkTargetObjectTypeId = \"__sixb.self__\"\ntype SelfLinkTargetObjectTypeId = typeof selfLinkTargetObjectTypeId\n\ntype NormalizeSelfLink<TObjectTypeId extends string, TLink> = TLink extends {\n  targetObjectTypeId: SelfLinkTargetObjectTypeId\n}\n  ? Omit<TLink, \"targetObjectTypeId\"> & { targetObjectTypeId: TObjectTypeId }\n  : TLink\n\ntype NormalizeSelfLinks<TObjectTypeId extends string, TLinks extends readonly ObjectLink[]> = {\n  -readonly [K in keyof TLinks]: NormalizeSelfLink<TObjectTypeId, TLinks[K]>\n}\n\n// ── Extends type utilities ───────────────────────────────────\n\n/**\n * Merge parent + child collections by id. Uses built-in `Exclude` on\n * the element union — no recursion, no \"excessively deep\" errors.\n */\ntype MergedCollection<\n  TParent extends readonly { id: string }[],\n  TChild extends readonly { id: string }[],\n> = Array<Exclude<TParent[number], { id: TChild[number][\"id\"] }> | TChild[number]>\n\n/**\n * Extract child's own collection, normalized as a mutable tuple. Falls back to [].\n */\ntype OwnCollection<TInput, TKey extends string, TItem> =\n  TInput extends Record<TKey, infer T extends readonly TItem[]> ? [...T] : []\n\ntype OwnLinks<TInput> = TInput extends { id: infer TObjectTypeId extends string }\n  ? TInput extends Record<\"links\", infer TLinks extends readonly ObjectLink[]>\n    ? NormalizeSelfLinks<TObjectTypeId, TLinks>\n    : []\n  : []\n\n/**\n * Merge two arrays by id: parent items first, child items override by id.\n */\nfunction mergeById<T extends { id: string }>(parent: readonly T[], child: readonly T[]): T[] {\n  const childIds = new Set(child.map((item) => item.id))\n  const fromParent = parent.filter((item) => !childIds.has(item.id))\n  return [...fromParent, ...child]\n}\n\n// ── Object Type ─────────────────────────────────────────────\n\ntype DefineObjectTypeBase = Omit<ObjectType, \"properties\" | \"links\" | \"extends\" | \"parents\">\n\n/**\n * Structural constraint for the `extends` field.\n *\n * We require only the data needed for merge (id + collections), not the\n * full `ObjectTypeWithTokens<ObjectType>`. The latter requires\n * `LinkTokenMap<ObjectType>` with a `{ [id: string]: LinkToken }` index\n * signature, which is incompatible with the literal-keyed maps produced by\n * concrete `defineObjectType()` calls.\n */\ntype DefineObjectTypeInput = DefineObjectTypeBase & {\n  extends?:\n    | string\n    | {\n        readonly id: string\n        readonly properties: readonly Property[]\n        readonly links: readonly ObjectLink[]\n      }\n  parents?: readonly string[]\n  properties?: readonly Property[]\n  links?: readonly ObjectLink[]\n}\n\n/**\n * Normalize `parents` from readonly tuple to mutable `string[] | undefined`.\n */\ntype NormalizeParents<TInput> = TInput extends { parents: infer P extends readonly string[] }\n  ? { parents: [...P] }\n  : { parents?: undefined }\n\ntype DefineObjectTypeResult<TInput extends DefineObjectTypeInput> = Omit<\n  TInput,\n  \"properties\" | \"links\" | \"extends\" | \"parents\"\n> &\n  (TInput extends {\n    extends: infer TParent extends {\n      id: string\n      properties: readonly Property[]\n      links: readonly ObjectLink[]\n    }\n  }\n    ? NormalizeParents<TInput> & {\n        extends: TParent[\"id\"]\n        properties: MergedCollection<\n          TParent[\"properties\"],\n          OwnCollection<TInput, \"properties\", Property>\n        >\n        links: MergedCollection<TParent[\"links\"], OwnLinks<TInput>>\n      }\n    : TInput extends { extends: infer TParentId extends string }\n      ? {\n          extends: TParentId\n          parents: string[]\n          properties: OwnCollection<TInput, \"properties\", Property>\n          links: OwnLinks<TInput>\n        }\n      : NormalizeParents<TInput> & {\n          extends: undefined\n          properties: OwnCollection<TInput, \"properties\", Property>\n          links: OwnLinks<TInput>\n        })\n\ntype DefineObjectTypeWithTokensResult<TInput extends DefineObjectTypeInput> = ObjectTypeWithTokens<\n  DefineObjectTypeResult<TInput>\n>\n\n/**\n * Define an object type with sensible defaults.\n *\n * `properties` and `links` default to `[]` so you can define\n * a bare object type with just `id` and `name`.\n */\nexport function defineObjectType<const TInput extends DefineObjectTypeInput>(\n  input: TInput\n): DefineObjectTypeWithTokensResult<TInput>\nexport function defineObjectType(input: DefineObjectTypeInput): ObjectTypeWithTokens<ObjectType> {\n  const ext = input.extends\n\n  const ownProperties = input.properties ? [...input.properties] : []\n  const ownLinks = input.links\n    ? input.links.map((link) => normalizeSelfLinkTarget(input.id, link))\n    : []\n\n  let extendsId: string | undefined\n  let parentIds: string[] | undefined\n  let properties: Property[]\n  let links: ObjectLink[]\n\n  if (typeof ext === \"string\") {\n    // Pre-flattened: string extends — no merge, properties/links taken as-is\n    extendsId = ext\n    parentIds = [ext, ...(input.parents ?? []).filter((id) => id !== ext)]\n    properties = ownProperties\n    links = ownLinks\n  } else if (ext != null) {\n    // Object extends — merge parent collections\n    extendsId = ext.id\n    parentIds = [ext.id, ...(input.parents ?? []).filter((id) => id !== ext.id)]\n    properties = mergeById(ext.properties, ownProperties)\n    links = mergeById([...ext.links], ownLinks)\n  } else {\n    // No extends\n    extendsId = undefined\n    parentIds = input.parents ? [...input.parents] : undefined\n    properties = ownProperties\n    links = ownLinks\n  }\n\n  const objectType: ObjectType = {\n    id: input.id,\n    name: input.name,\n    description: input.description,\n    quantityKind: input.quantityKind,\n    seeAlso: input.seeAlso,\n    extends: extendsId,\n    parents: parentIds,\n    implements: input.implements,\n    properties,\n    links,\n    search: input.search,\n    query: input.query,\n  }\n\n  return {\n    ...objectType,\n    l: createLinkTokenMap(objectType),\n    p: createPropertyTokenMap(objectType),\n  }\n}\n\nfunction normalizeSelfLinkTarget(objectTypeId: string, link: ObjectLink): ObjectLink {\n  if (link.targetObjectTypeId !== selfLinkTargetObjectTypeId) {\n    return link\n  }\n\n  return {\n    ...link,\n    targetObjectTypeId: objectTypeId,\n  }\n}\n\n// ── Ontology ────────────────────────────────────────────────\n\ntype DefineOntologyBase = Omit<Ontology, \"objectTypes\" | \"valueTypes\" | \"interfaces\">\n\ntype DefineOntologyInput = DefineOntologyBase & {\n  objectTypes?: readonly ObjectType[]\n  valueTypes?: readonly ValueType[]\n  interfaces?: readonly Interface[]\n}\n\ntype DefineOntologyResult<TInput extends DefineOntologyInput> = Omit<\n  TInput,\n  \"objectTypes\" | \"valueTypes\" | \"interfaces\"\n> & {\n  objectTypes: TInput extends { objectTypes: infer TObjectTypes extends readonly ObjectType[] }\n    ? [...TObjectTypes]\n    : []\n  valueTypes: TInput extends { valueTypes: infer TValueTypes extends readonly ValueType[] }\n    ? [...TValueTypes]\n    : []\n  interfaces: TInput extends { interfaces: infer TInterfaces extends readonly Interface[] }\n    ? [...TInterfaces]\n    : []\n}\n\n/**\n * Define a complete ontology document.\n *\n * `objectTypes`, `valueTypes`, and `interfaces` default to `[]`.\n */\nexport function defineOntology<const TInput extends DefineOntologyInput>(\n  input: TInput\n): DefineOntologyResult<TInput>\nexport function defineOntology(input: DefineOntologyInput): Ontology {\n  return {\n    ...input,\n    objectTypes: input.objectTypes ? [...input.objectTypes] : [],\n    valueTypes: input.valueTypes ? [...input.valueTypes] : [],\n    interfaces: input.interfaces ? [...input.interfaces] : [],\n  }\n}\n\n// ── Value Type ──────────────────────────────────────────────\n\n/**\n * Define a reusable value type.\n *\n * Identity function for type inference and discoverability — the `define*`\n * prefix makes it easy to find all ontology builders.\n */\nexport function defineValueType<const TValueType extends ValueType>(input: TValueType): TValueType {\n  return input\n}\n\n// ── Interface ───────────────────────────────────────────────\n\ntype DefineInterfaceBase = Omit<Interface, \"properties\" | \"links\">\n\ntype DefineInterfaceInput = DefineInterfaceBase & {\n  properties?: readonly Property[]\n  links?: readonly ObjectLink[]\n}\n\ntype DefineInterfaceResult<TInput extends DefineInterfaceInput> = Omit<\n  TInput,\n  \"properties\" | \"links\"\n> & {\n  properties: TInput extends { properties: infer TProperties extends readonly Property[] }\n    ? [...TProperties]\n    : []\n  links: TInput extends { links: infer TLinks extends readonly ObjectLink[] } ? [...TLinks] : []\n}\n\n/**\n * Define a reusable interface contract.\n *\n * `properties` and `links` default to `[]`.\n */\nexport function defineInterface<const TInput extends DefineInterfaceInput>(\n  input: TInput\n): DefineInterfaceResult<TInput>\nexport function defineInterface(input: DefineInterfaceInput): Interface {\n  return {\n    ...input,\n    properties: input.properties ? [...input.properties] : [],\n    links: input.links ? [...input.links] : [],\n  }\n}\n\n// ── Property shorthand ──────────────────────────────────────\n\ntype PropertyOptions = {\n  name?: string\n  description?: string\n  required?: boolean\n  nullable?: boolean\n  primary?: true\n  mode?: PropertyMode\n  semanticType?: QuantitativeTypeId\n  query?: PropertyQueryMetadata\n  /** Readers need a clearance for every marking to receive this property's value. */\n  markings?: readonly MarkingDefinition[]\n}\n\n/** The property records marking ids; only a declared, non-empty list marks it. */\ntype MarkingsFromOptions<TOptions> = TOptions extends {\n  markings: readonly [MarkingDefinition, ...MarkingDefinition[]]\n}\n  ? { markings: readonly string[] }\n  : { markings?: readonly string[] }\n\ntype PropertyResult<\n  TId extends string,\n  TSchema extends Schema,\n  TOptions extends PropertyOptions | undefined,\n> = {\n  id: TId\n  name: NameFromOptions<TId, TOptions>\n  schema: TSchema\n} & FieldFromOptions<TOptions, \"description\", string> &\n  FieldFromOptions<TOptions, \"required\", boolean> &\n  FieldFromOptions<TOptions, \"nullable\", boolean> &\n  FieldFromOptions<TOptions, \"primary\", true> &\n  FieldFromOptions<TOptions, \"mode\", PropertyMode> &\n  FieldFromOptions<TOptions, \"semanticType\", QuantitativeTypeId> &\n  FieldFromOptions<TOptions, \"query\", PropertyQueryMetadata> &\n  MarkingsFromOptions<TOptions>\n\n/**\n * Shorthand for creating a {@link Property}.\n *\n * `name` defaults to `id` — override via `options.name` when you need\n * a separate display name.\n *\n * ```ts\n * prop(\"currentTemperature\", \"double\", {\n *   name: \"Current Temperature\",\n *   semanticType: \"Temperature\",\n *   required: true,\n * })\n * ```\n */\n// Overloads keep option literals (e.g. `required: true`, `mode: \"telemetry\"`) intact.\nexport function prop<const TId extends string, const TSchema extends Schema>(\n  id: TId,\n  schema: TSchema\n): PropertyResult<TId, TSchema, undefined>\nexport function prop<\n  const TId extends string,\n  const TSchema extends Schema,\n  const TOptions extends PropertyOptions,\n>(id: TId, schema: TSchema, options: TOptions): PropertyResult<TId, TSchema, TOptions>\nexport function prop(id: string, schema: Schema, options?: PropertyOptions): Property {\n  const { markings, ...rest } = options ?? {}\n  return {\n    id,\n    name: options?.name ?? id,\n    schema,\n    ...rest,\n    ...(markings && markings.length > 0\n      ? { markings: markingIdsFrom(markings, `Property '${id}' markings`) }\n      : {}),\n  }\n}\n\n// ── Link shorthand ──────────────────────────────────────────\n\n/**\n * Runtime check: does a value look like an ObjectType?\n *\n * Discriminates ObjectType from LinkOptions by checking for `properties` and `links`\n * arrays — ObjectType always has them, LinkOptions never does.\n */\nfunction isObjectTypeLike(value: unknown): value is ObjectType {\n  return (\n    typeof value === \"object\" &&\n    value !== null &&\n    Array.isArray((value as Record<string, unknown>).properties) &&\n    Array.isArray((value as Record<string, unknown>).links)\n  )\n}\n\ntype LinkOptions = {\n  name?: string\n  description?: string\n  cardinality?: LinkCardinality\n  properties?: Property[]\n}\n\ntype LinkResult<\n  TId extends string,\n  TTargetObjectTypeId,\n  TOptions extends LinkOptions | undefined,\n> = {\n  id: TId\n  name: NameFromOptions<TId, TOptions>\n  targetObjectTypeId: TTargetObjectTypeId\n} & FieldFromOptions<TOptions, \"description\", string> &\n  FieldFromOptions<TOptions, \"cardinality\", LinkCardinality> &\n  FieldFromOptions<TOptions, \"properties\", Property[]>\n\nexport type DirectLinkResult<\n  TId extends string,\n  TTargetObjectTypeId,\n  TOptions extends LinkOptions | undefined,\n  TTarget,\n> = LinkResult<TId, TTargetObjectTypeId, TOptions> & ObjectLinkTargetMetadata<TTarget>\n\ntype ObjectTypeIdArray<TTargets extends readonly ObjectType[]> = Array<TTargets[number][\"id\"]>\n/** Keep profile names without carrying provider types through every linked declaration. */\nexport type DirectLinkTarget<\n  TId extends string,\n  TName extends string,\n  TProperties extends Property[],\n  TVectorProfiles extends string = never,\n> = ObjectTypeWithPropertyTokens<\n  {\n    id: TId\n    name: TName\n    properties: TProperties\n    links: ObjectLink[]\n  } & ([TVectorProfiles] extends [never]\n    ? unknown\n    : { search: { vectors: Record<TVectorProfiles, ObjectVectorSearchProfile> } })\n>\n\ntype DirectLinkTargetFor<TTarget extends ObjectType> = TTarget extends ObjectTypeWithPropertyTokens\n  ? DirectLinkTarget<\n      TTarget[\"id\"],\n      TTarget[\"name\"],\n      TTarget[\"properties\"],\n      TTarget extends { search: { vectors: infer TProfiles } }\n        ? Extract<keyof TProfiles, string>\n        : never\n    >\n  : TTarget\n\n/**\n * Shorthand for creating an {@link ObjectLink}.\n *\n * `link(...)` accepts direct ObjectType targets and preserves their type for\n * query authoring. Use `link.ref(...)` for id-only references, `link.self(...)`\n * for recursive links, and `link.any(...)` for wildcard links.\n *\n * ```ts\n * // ObjectType target — extracts .id at runtime and preserves the target type\n * link(\"controls\", HVACZone, { cardinality: \"one\" })\n *\n * // Id target — resolved by the generated ontology type manifest\n * link.ref(\"controls\", \"hvacZone\", { cardinality: \"one\" })\n *\n * // Self target — normalized to the source object type id by defineObjectType()\n * link.self(\"parent\", { cardinality: \"one\" })\n *\n * // Multiple targets\n * link(\"rel\", [TypeA, TypeB])\n *\n * // Wildcard — accepts any target type\n * link.any(\"anything\")\n * link.any(\"anything\", { cardinality: \"many\" })\n * ```\n */\ninterface LinkCallable {\n  <const TId extends string, const TTarget extends ObjectType>(\n    id: TId,\n    target: TTarget\n  ): DirectLinkResult<TId, TTarget[\"id\"], undefined, DirectLinkTargetFor<TTarget>>\n\n  <const TId extends string, const TTarget extends ObjectType, const TOptions extends LinkOptions>(\n    id: TId,\n    target: TTarget,\n    options: TOptions\n  ): DirectLinkResult<TId, TTarget[\"id\"], TOptions, DirectLinkTargetFor<TTarget>>\n\n  <const TId extends string, const TTargets extends readonly ObjectType[]>(\n    id: TId,\n    targets: TTargets\n  ): DirectLinkResult<\n    TId,\n    ObjectTypeIdArray<TTargets>,\n    undefined,\n    DirectLinkTargetFor<TTargets[number]>\n  >\n\n  <\n    const TId extends string,\n    const TTargets extends readonly ObjectType[],\n    const TOptions extends LinkOptions,\n  >(\n    id: TId,\n    targets: TTargets,\n    options: TOptions\n  ): DirectLinkResult<\n    TId,\n    ObjectTypeIdArray<TTargets>,\n    TOptions,\n    DirectLinkTargetFor<TTargets[number]>\n  >\n}\n\ninterface LinkBuilder extends LinkCallable {\n  ref: typeof linkRef\n  self: typeof linkSelf\n  any: typeof linkAny\n}\n\nconst linkImpl = ((\n  id: string,\n  targetOrTargets: ObjectType | readonly ObjectType[],\n  options?: LinkOptions\n): ObjectLink => {\n  if (Array.isArray(targetOrTargets)) {\n    return {\n      id,\n      name: options?.name ?? id,\n      targetObjectTypeId: targetOrTargets.map((target) => target.id),\n      ...options,\n    }\n  }\n\n  if (isObjectTypeLike(targetOrTargets)) {\n    return {\n      id,\n      name: options?.name ?? id,\n      targetObjectTypeId: targetOrTargets.id,\n      ...options,\n    }\n  }\n\n  throw new Error(\n    `[Sixb] link(\"${id}\", ...) requires an ObjectType target. Use link.ref(...) for id references, link.self(...) for self-links, or link.any(...) for wildcard links.`\n  )\n}) as LinkCallable\n\nfunction linkRef<\n  const TId extends string,\n  const TTargetObjectTypeId extends string | readonly string[],\n>(id: TId, targetObjectTypeId: TTargetObjectTypeId): LinkResult<TId, TTargetObjectTypeId, undefined>\nfunction linkRef<\n  const TId extends string,\n  const TTargetObjectTypeId extends string | readonly string[],\n  const TOptions extends LinkOptions,\n>(\n  id: TId,\n  targetObjectTypeId: TTargetObjectTypeId,\n  options: TOptions\n): LinkResult<TId, TTargetObjectTypeId, TOptions>\nfunction linkRef(\n  id: string,\n  targetObjectTypeId: string | readonly string[],\n  options?: LinkOptions\n): ObjectLink {\n  return {\n    id,\n    name: options?.name ?? id,\n    targetObjectTypeId:\n      typeof targetObjectTypeId === \"string\" ? targetObjectTypeId : [...targetObjectTypeId],\n    ...options,\n  }\n}\n\nfunction linkSelf<\n  const TId extends string,\n  const TOptions extends LinkOptions | undefined = undefined,\n>(id: TId, options?: TOptions): LinkResult<TId, SelfLinkTargetObjectTypeId, TOptions> {\n  return {\n    id,\n    name: options?.name ?? id,\n    targetObjectTypeId: selfLinkTargetObjectTypeId,\n    ...options,\n  } as LinkResult<TId, SelfLinkTargetObjectTypeId, TOptions>\n}\n\nfunction linkAny<\n  const TId extends string,\n  const TOptions extends LinkOptions | undefined = undefined,\n>(id: TId, options?: TOptions): LinkResult<TId, \"*\", TOptions> {\n  return {\n    id,\n    name: options?.name ?? id,\n    targetObjectTypeId: \"*\",\n    ...options,\n  } as LinkResult<TId, \"*\", TOptions>\n}\n\nexport const link: LinkBuilder = Object.assign(linkImpl, {\n  ref: linkRef,\n  self: linkSelf,\n  any: linkAny,\n})\n\n// ── ValueType ref shorthand ─────────────────────────────────\n\n/**\n * Create a value-type reference schema.\n *\n * ```ts\n * prop(\"azimuth\", valueTypeRef(\"bsh:AzimuthShape\"))\n * prop(\"area\", valueTypeRef(AreaShape))  // self-contained, no tuple needed\n * ```\n */\n// 1. String id only (existing behavior, no resolution)\nexport function valueTypeRef<const TId extends string>(\n  valueTypeId: TId\n): ValueTypeRefSchema & { valueTypeId: TId }\n// 2. ValueType object (concise, self-contained: carries the schema and the semantic type)\nexport function valueTypeRef<const TVT extends ValueType>(\n  valueType: TVT\n): TVT extends { semanticType: infer TSemanticType extends QuantitativeTypeId }\n  ? {\n      type: \"valueTypeRef\"\n      valueTypeId: TVT[\"id\"]\n      _resolved: TVT[\"schema\"]\n      _semanticType: TSemanticType\n    }\n  : { type: \"valueTypeRef\"; valueTypeId: TVT[\"id\"]; _resolved: TVT[\"schema\"] }\n// 3. String id + explicit schema (escape hatch)\nexport function valueTypeRef<const TId extends string, const TResolved extends Schema>(\n  valueTypeId: TId,\n  resolved: TResolved\n): { type: \"valueTypeRef\"; valueTypeId: TId; _resolved: TResolved }\n// Implementation\nexport function valueTypeRef(\n  idOrValueType: string | ValueType,\n  resolved?: Schema\n): ValueTypeRefSchema {\n  if (typeof idOrValueType === \"string\") {\n    if (resolved !== undefined) {\n      return { type: \"valueTypeRef\", valueTypeId: idOrValueType, _resolved: resolved }\n    }\n    return { type: \"valueTypeRef\", valueTypeId: idOrValueType }\n  }\n  return {\n    type: \"valueTypeRef\",\n    valueTypeId: idOrValueType.id,\n    _resolved: idOrValueType.schema,\n    ...(idOrValueType.semanticType === undefined\n      ? {}\n      : { _semanticType: idOrValueType.semanticType }),\n  }\n}\n\n// ── Enum helpers ────────────────────────────────────────────\n\n/**\n * Create a string enum schema.\n *\n * ```ts\n * prop(\"mode\", stringEnum([\"off\", \"heat\", \"cool\", \"auto\"]))\n * ```\n */\nexport function stringEnum<const V extends readonly string[]>(\n  values: V\n): EnumSchema & {\n  values: [...V]\n} {\n  return { type: \"enum\", valueType: \"string\", values: [...values] }\n}\n\n/**\n * Create an integer enum schema.\n *\n * ```ts\n * prop(\"fanSpeed\", integerEnum([1, 2, 3]))\n * ```\n */\nexport function integerEnum<const V extends readonly number[]>(\n  values: V\n): EnumSchema & {\n  values: [...V]\n} {\n  return { type: \"enum\", valueType: \"integer\", values: [...values] }\n}\n"
+  ],
+  "mappings": ";;;;;;;;;;;;;;;;;;;AAGO,SAAS,sBAAsB,CACpC,UACqD;AAAA,EACrD,MAAM,WAAsD,OAAO,OAAO,IAAI;AAAA,EAC9E,YAAY,MAAM,sBAAsB,OAAO,QAAQ,QAAQ,GAAG;AAAA,IAChE,QAAQ,YAAY,SAAS,eAAe,kBAAkB;AAAA,IAC9D,SAAS,QAAQ,OAAO,OAAO;AAAA,MAC7B,QAAQ,OAAO,OAAO,CAAC,GAAG,kBAAkB,MAAM,CAAC;AAAA,MACnD,OAAO,OAAO,OAAO;AAAA,QACnB;AAAA,QACA;AAAA,QACA,YAAY,OAAO,OAAO;AAAA,UACxB,MAAM;AAAA,UACN;AAAA,UACA;AAAA,UACA,YAAY,WAAW;AAAA,aACnB,WAAW,YAAY,EAAE,WAAW,WAAW,UAAU,IAAI,CAAC;AAAA,aAC9D,WAAW,iBACX;AAAA,YACE,gBAAgB,OAAO,OAAO;AAAA,cAC5B,MAAM,WAAW,eAAe;AAAA,iBAC5B,WAAW,eAAe,YAAY,YACtC,CAAC,IACD,EAAE,SAAS,WAAW,eAAe,QAAQ;AAAA,YACnD,CAAC;AAAA,UACH,IACA,CAAC;AAAA,QACP,CAAC;AAAA,MACH,CAAC;AAAA,IACH,CAAC;AAAA,EACH;AAAA,EACA,OAAO,OAAO,OAAO,QAAQ;AAAA;;;ACyB/B,SAAS,wBAAwB,CAC/B,QACiE;AAAA,EACjE,OAAO,iBAAiB;AAAA;AAc1B,SAAS,2BAA2B,CAClC,QACA,WACA,MACM;AAAA,EACN,IAAI,OAAO,WAAW;AAAA,IAAU;AAAA,EAEhC,IAAI,OAAO,SAAS,gBAAgB;AAAA,IAClC,IAAI,OAAO,aAAa,CAAC,KAAK,IAAI,OAAO,WAAW,GAAG;AAAA,MACrD,KAAK,IAAI,OAAO,WAAW;AAAA,MAC3B,MAAM,YAAY,OAAO,YAAY,SAAS,GAAG,IAC7C,OAAO,YAAY,MAAM,OAAO,YAAY,QAAQ,GAAG,IAAI,CAAC,IAC5D,OAAO;AAAA,MACX,UAAU,IAAI,OAAO,aAAa;AAAA,QAChC,IAAI,OAAO;AAAA,QACX,MAAM;AAAA,QACN,QAAQ,OAAO;AAAA,WACX,OAAO,kBAAkB,YAAY,CAAC,IAAI,EAAE,cAAc,OAAO,cAAc;AAAA,MACrF,CAAC;AAAA,MACD,4BAA4B,OAAO,WAAW,WAAW,IAAI;AAAA,IAC/D;AAAA,IACA;AAAA,EACF;AAAA,EAEA,IAAI,OAAO,SAAS,UAAU;AAAA,IAC5B,WAAW,SAAS,OAAO,OAAO,OAAO,UAAU,GAAG;AAAA,MACpD,4BAA4B,MAAM,QAAQ,WAAW,IAAI;AAAA,IAC3D;AAAA,IACA;AAAA,EACF;AAAA,EAEA,IAAI,OAAO,SAAS,SAAS;AAAA,IAC3B,4BAA4B,OAAO,OAAO,WAAW,IAAI;AAAA,IACzD;AAAA,EACF;AAAA,EAEA,IAAI,OAAO,SAAS,OAAO;AAAA,IACzB,4BAA4B,OAAO,aAAa,WAAW,IAAI;AAAA,EACjE;AAAA;AAGF,SAAS,eAAe,CAAC,SAGvB;AAAA,EACA,MAAM,cAA8C,CAAC;AAAA,EACrD,MAAM,aAA0B,CAAC;AAAA,EACjC,MAAM,kBAAkB,IAAI;AAAA,EAE5B,WAAW,UAAU,SAAS;AAAA,IAC5B,IAAI,yBAAyB,MAAM,GAAG;AAAA,MACpC,WAAW,MAAM,OAAO,aAAa;AAAA,QACnC,IAAI,CAAC,gBAAgB,IAAI,EAAE,GAAG;AAAA,UAC5B,gBAAgB,IAAI,EAAE;AAAA,UACtB,YAAY,KAAK,EAAE;AAAA,QACrB;AAAA,MACF;AAAA,MACA,WAAW,KAAK,GAAI,OAAO,cAAc,CAAC,CAAE;AAAA,IAC9C,EAAO;AAAA,MACL,IAAI,CAAC,gBAAgB,IAAI,MAAM,GAAG;AAAA,QAChC,gBAAgB,IAAI,MAAM;AAAA,QAC1B,YAAY,KAAK,MAAM;AAAA,MACzB;AAAA;AAAA,EAEJ;AAAA,EAIA,MAAM,cAAc,IAAI,IAAI,WAAW,IAAI,CAAC,OAAO,GAAG,EAAE,CAAC;AAAA,EACzD,MAAM,aAAa,IAAI;AAAA,EAEvB,WAAW,cAAc,aAAa;AAAA,IACpC,WAAW,YAAY,WAAW,YAAY;AAAA,MAC5C,4BAA4B,SAAS,QAAQ,YAAY,WAAW;AAAA,IACtE;AAAA,IACA,WAAW,WAAW,WAAW,OAAO;AAAA,MACtC,IAAI,QAAQ,YAAY;AAAA,QACtB,WAAW,YAAY,QAAQ,YAAY;AAAA,UACzC,4BAA4B,SAAS,QAAQ,YAAY,WAAW;AAAA,QACtE;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAAA,EAEA,WAAW,KAAK,GAAG,WAAW,OAAO,CAAC;AAAA,EAEtC,OAAO,EAAE,aAAa,WAAW;AAAA;AAAA;AAc5B,MAAM,kBAAsD;AAAA,EAChD,kBAAkB,IAAI;AAAA,EACtB,iBAAiB,IAAI;AAAA,EACrB,eAAe,IAAI;AAAA,EACnB;AAAA,EAEjB,WAAW,CAAC,SAAkC;AAAA,IAC5C,QAAQ,aAAa,eAAe,gBAAgB,QAAQ,OAAO;AAAA,IAEnE,WAAW,cAAc,aAAa;AAAA,MACpC,IAAI,KAAK,gBAAgB,IAAI,WAAW,EAAE,GAAG;AAAA,QAC3C,MAAM,IAAI,yBAAwB,6BAA6B,WAAW,IAAI;AAAA,MAChF;AAAA,MACA,KAAK,gBAAgB,IAAI,WAAW,IAAI,UAAU;AAAA,IACpD;AAAA,IAEA,WAAW,aAAa,YAAY;AAAA,MAClC,IAAI,KAAK,eAAe,IAAI,UAAU,EAAE,GAAG;AAAA,QACzC,MAAM,IAAI,yBAAwB,4BAA4B,UAAU,IAAI;AAAA,MAC9E;AAAA,MACA,KAAK,eAAe,IAAI,UAAU,IAAI,SAAS;AAAA,IACjD;AAAA,IAEA,KAAK,gCAAgC;AAAA,IACrC,KAAK,2BAA2B;AAAA,IAChC,6BAA4B,KAAK,iBAAiB,KAAK,cAAc;AAAA,IACrE,uBAAsB,KAAK,iBAAiB,KAAK,cAAc;AAAA,IAC/D,YAAY,IAAI,SAAS,KAAK,iBAAiB;AAAA,MAC7C,IAAI,KAAK,QAAQ;AAAA,QACf,KAAK,gBAAgB,IAAI,IAAI;AAAA,aACxB;AAAA,UACH,QAAQ,KAAK,KAAK,QAAQ,SAAS,uBAAuB,KAAK,OAAO,OAAO,EAAE;AAAA,QACjF,CAAC;AAAA,IACL;AAAA,IACA,KAAK,kBAAkB,2BAA0B,KAAK,eAAe;AAAA;AAAA,EAMvE,eAAe,GAA4C;AAAA,IACzD,OAAO,CAAC,GAAG,KAAK,gBAAgB,OAAO,CAAC;AAAA;AAAA,EAI1C,iBAAiB,CAAC,cAA2D;AAAA,IAC3E,OAAO,KAAK,gBAAgB,IAAI,YAAY,KAAK;AAAA;AAAA,EASnD,iBAAiB,CAAC,cAAoD;AAAA,IACpE,MAAM,aAAa,KAAK,gBAAgB,IAAI,YAAY;AAAA,IACxD,IAAI,CAAC,YAAY;AAAA,MACf,MAAM,IAAI,uBAAsB,+BAA+B,YAAY,CAAC;AAAA,IAC9E;AAAA,IACA,OAAO;AAAA;AAAA,EAIT,oBAAoB,CAAC,cAA8B;AAAA,IACjD,MAAM,KAAK,KAAK,gBAAgB,IAAI,YAAY;AAAA,IAChD,IAAI,CAAC;AAAA,MAAI,MAAM,IAAI,uBAAsB,+BAA+B,YAAY,CAAC;AAAA,IACrF,OAAO;AAAA;AAAA,EAIT,YAAY,CAAC,cAAgC;AAAA,IAC3C,MAAM,SAAmB,CAAC;AAAA,IAC1B,MAAM,UAAU,CAAC,WAAyB;AAAA,MACxC,MAAM,WAAW,KAAK,aAAa,IAAI,MAAM;AAAA,MAC7C,IAAI,CAAC;AAAA,QAAU;AAAA,MACf,WAAW,WAAW,UAAU;AAAA,QAC9B,OAAO,KAAK,OAAO;AAAA,QACnB,QAAQ,OAAO;AAAA,MACjB;AAAA;AAAA,IAEF,QAAQ,YAAY;AAAA,IACpB,OAAO;AAAA;AAAA,EAIT,iBAAiB,CAAC,YAAiE;AAAA,IACjF,MAAM,QAAwC,CAAC;AAAA,IAC/C,IAAI,UAA+C,KAAK,kBAAkB,WAAW,EAAE;AAAA,IACvF,MAAM,OAAO,IAAI;AAAA,IAEjB,OAAO,SAAS;AAAA,MACd,IAAI,KAAK,IAAI,QAAQ,EAAE,GAAG;AAAA,QACxB,MAAM,IAAI,yBACR,kEAAkE,WAAW,MAC/E;AAAA,MACF;AAAA,MACA,KAAK,IAAI,QAAQ,EAAE;AAAA,MACnB,MAAM,KAAK,OAAO;AAAA,MAClB,UAAU,QAAQ,UAAU,KAAK,kBAAkB,QAAQ,OAAO,IAAI;AAAA,IACxE;AAAA,IAEA,OAAO,MAAM,QAAQ;AAAA;AAAA,EASvB,iBAAiB,CAAC,UAA6B,QAAyB;AAAA,IACtE,IAAI,aAAa;AAAA,MAAK,OAAO;AAAA,IAC7B,MAAM,QAAQ,MAAM,QAAQ,QAAQ,IAAI,WAAW,CAAC,QAAQ;AAAA,IAC5D,IAAI,MAAM,SAAS,GAAG;AAAA,MAAG,OAAO;AAAA,IAChC,WAAW,QAAQ,OAAO;AAAA,MACxB,IAAI,WAAW,QAAQ,KAAK,aAAa,IAAI,EAAE,SAAS,MAAM;AAAA,QAAG,OAAO;AAAA,IAC1E;AAAA,IACA,OAAO;AAAA;AAAA,EAMT,kBAAkB,GAAsD;AAAA,IACtE,OAAO,KAAK;AAAA;AAAA,EAId,iBAAiB,GAAmC;AAAA,IAClD,OAAO,KAAK;AAAA;AAAA,EAId,kBAAkB,GAAgC;AAAA,IAChD,OAAO,KAAK;AAAA;AAAA,EAUN,+BAA+B,GAAS;AAAA,IAC9C,MAAM,YAAY,IAAI;AAAA,IACtB,MAAM,WAAW,IAAI;AAAA,IAErB,MAAM,gBAAgB,CAAC,UAAkB,YAA0B;AAAA,MACjE,IAAI,WAAW,KAAK,aAAa,IAAI,QAAQ;AAAA,MAC7C,IAAI,CAAC,UAAU;AAAA,QACb,WAAW,IAAI;AAAA,QACf,KAAK,aAAa,IAAI,UAAU,QAAQ;AAAA,MAC1C;AAAA,MACA,SAAS,IAAI,OAAO;AAAA;AAAA,IAGtB,MAAM,QAAQ,CAAC,QAAgB,UAA0B;AAAA,MACvD,IAAI,SAAS,IAAI,MAAM;AAAA,QAAG;AAAA,MAE1B,MAAM,aAAa,KAAK,gBAAgB,IAAI,MAAM;AAAA,MAClD,IAAI,CAAC,cAAc,CAAC,WAAW,SAAS;AAAA,QACtC,SAAS,IAAI,MAAM;AAAA,QACnB;AAAA,MACF;AAAA,MAEA,MAAM,WAAW,WAAW;AAAA,MAE5B,IAAI,CAAC,KAAK,gBAAgB,IAAI,QAAQ,GAAG;AAAA,QACvC,MAAM,IAAI,yBACR,eAAe,iCAAiC,kBAAkB,oFACpE;AAAA,MACF;AAAA,MAEA,IAAI,UAAU,IAAI,MAAM,GAAG;AAAA,QACzB,MAAM,IAAI,yBACR,oCAAoC,CAAC,GAAG,OAAO,MAAM,EAAE,KAAK,UAAK,GACnE;AAAA,MACF;AAAA,MAEA,UAAU,IAAI,MAAM;AAAA,MACpB,MAAM,UAAU,CAAC,GAAG,OAAO,MAAM,CAAC;AAAA,MAElC,cAAc,UAAU,MAAM;AAAA,MAE9B,UAAU,OAAO,MAAM;AAAA,MACvB,SAAS,IAAI,MAAM;AAAA;AAAA,IAGrB,WAAW,UAAU,KAAK,gBAAgB,KAAK,GAAG;AAAA,MAChD,MAAM,QAAQ,CAAC,CAAC;AAAA,IAClB;AAAA,IAEA,YAAY,QAAQ,eAAe,KAAK,iBAAiB;AAAA,MACvD,IAAI,CAAC,WAAW;AAAA,QAAS;AAAA,MACzB,WAAW,YAAY,WAAW,SAAS;AAAA,QACzC,IAAI,aAAa,WAAW;AAAA,UAAS;AAAA,QACrC,IAAI,CAAC,KAAK,gBAAgB,IAAI,QAAQ,GAAG;AAAA,UACvC,MAAM,IAAI,yBACR,eAAe,iCAAiC,6BAA6B,oFAC/E;AAAA,QACF;AAAA,QACA,cAAc,UAAU,MAAM;AAAA,MAChC;AAAA,IACF;AAAA;AAAA,EAOM,0BAA0B,GAAS;AAAA,IACzC,MAAM,WAAW,IAAI;AAAA,IAErB,MAAM,UAAU,CAAC,WAAyB;AAAA,MACxC,IAAI,SAAS,IAAI,MAAM;AAAA,QAAG;AAAA,MAC1B,MAAM,aAAa,KAAK,gBAAgB,IAAI,MAAM;AAAA,MAElD,IAAI,CAAC,WAAW,SAAS;AAAA,QACvB,SAAS,IAAI,MAAM;AAAA,QACnB;AAAA,MACF;AAAA,MAEA,QAAQ,WAAW,OAAO;AAAA,MAC1B,MAAM,SAAS,KAAK,gBAAgB,IAAI,WAAW,OAAO;AAAA,MAE1D,MAAM,YAAY,CAChB,aACA,eACQ;AAAA,QACR,MAAM,WAAW,IAAI,IAAI,WAAW,IAAI,CAAC,SAAS,KAAK,EAAE,CAAC;AAAA,QAC1D,MAAM,aAAa,YAAY,OAAO,CAAC,SAAS,CAAC,SAAS,IAAI,KAAK,EAAE,CAAC;AAAA,QACtE,OAAO,CAAC,GAAG,YAAY,GAAG,UAAU;AAAA;AAAA,MAGtC,MAAM,mBAAmB,UAAU,OAAO,YAAY,WAAW,UAAU;AAAA,MAC3E,MAAM,cAAc,UAAU,OAAO,OAAO,WAAW,KAAK;AAAA,MAE5D,MAAM,UACJ,iBAAiB,WAAW,WAAW,WAAW,UAClD,YAAY,WAAW,WAAW,MAAM;AAAA,MAE1C,IAAI,SAAS;AAAA,QACX,MAAM,SAAqB;AAAA,aACtB;AAAA,UACH,YAAY;AAAA,UACZ,OAAO;AAAA,QACT;AAAA,QACA,MAAM,aAA2C;AAAA,aAC5C;AAAA,UACH,GAAG,wBAAuB,MAAM;AAAA,QAClC;AAAA,QACE,WAA6D,IAC7D,oBAAmB,MAAM;AAAA,QAC3B,KAAK,gBAAgB,IAAI,QAAQ,UAAU;AAAA,MAC7C;AAAA,MAEA,SAAS,IAAI,MAAM;AAAA;AAAA,IAGrB,WAAW,UAAU,KAAK,gBAAgB,KAAK,GAAG;AAAA,MAChD,QAAQ,MAAM;AAAA,IAChB;AAAA;AAEJ;;ACrXA,IAAM,6BAA6B;AAuCnC,SAAS,SAAmC,CAAC,QAAsB,OAA0B;AAAA,EAC3F,MAAM,WAAW,IAAI,IAAI,MAAM,IAAI,CAAC,SAAS,KAAK,EAAE,CAAC;AAAA,EACrD,MAAM,aAAa,OAAO,OAAO,CAAC,SAAS,CAAC,SAAS,IAAI,KAAK,EAAE,CAAC;AAAA,EACjE,OAAO,CAAC,GAAG,YAAY,GAAG,KAAK;AAAA;AAiF1B,SAAS,iBAAgB,CAAC,OAAgE;AAAA,EAC/F,MAAM,MAAM,MAAM;AAAA,EAElB,MAAM,gBAAgB,MAAM,aAAa,CAAC,GAAG,MAAM,UAAU,IAAI,CAAC;AAAA,EAClE,MAAM,WAAW,MAAM,QACnB,MAAM,MAAM,IAAI,CAAC,SAAS,wBAAwB,MAAM,IAAI,IAAI,CAAC,IACjE,CAAC;AAAA,EAEL,IAAI;AAAA,EACJ,IAAI;AAAA,EACJ,IAAI;AAAA,EACJ,IAAI;AAAA,EAEJ,IAAI,OAAO,QAAQ,UAAU;AAAA,IAE3B,YAAY;AAAA,IACZ,YAAY,CAAC,KAAK,IAAI,MAAM,WAAW,CAAC,GAAG,OAAO,CAAC,OAAO,OAAO,GAAG,CAAC;AAAA,IACrE,aAAa;AAAA,IACb,QAAQ;AAAA,EACV,EAAO,SAAI,OAAO,MAAM;AAAA,IAEtB,YAAY,IAAI;AAAA,IAChB,YAAY,CAAC,IAAI,IAAI,IAAI,MAAM,WAAW,CAAC,GAAG,OAAO,CAAC,OAAO,OAAO,IAAI,EAAE,CAAC;AAAA,IAC3E,aAAa,UAAU,IAAI,YAAY,aAAa;AAAA,IACpD,QAAQ,UAAU,CAAC,GAAG,IAAI,KAAK,GAAG,QAAQ;AAAA,EAC5C,EAAO;AAAA,IAEL,YAAY;AAAA,IACZ,YAAY,MAAM,UAAU,CAAC,GAAG,MAAM,OAAO,IAAI;AAAA,IACjD,aAAa;AAAA,IACb,QAAQ;AAAA;AAAA,EAGV,MAAM,aAAyB;AAAA,IAC7B,IAAI,MAAM;AAAA,IACV,MAAM,MAAM;AAAA,IACZ,aAAa,MAAM;AAAA,IACnB,cAAc,MAAM;AAAA,IACpB,SAAS,MAAM;AAAA,IACf,SAAS;AAAA,IACT,SAAS;AAAA,IACT,YAAY,MAAM;AAAA,IAClB;AAAA,IACA;AAAA,IACA,QAAQ,MAAM;AAAA,IACd,OAAO,MAAM;AAAA,EACf;AAAA,EAEA,OAAO;AAAA,OACF;AAAA,IACH,GAAG,oBAAmB,UAAU;AAAA,IAChC,GAAG,wBAAuB,UAAU;AAAA,EACtC;AAAA;AAGF,SAAS,uBAAuB,CAAC,cAAsB,MAA8B;AAAA,EACnF,IAAI,KAAK,uBAAuB,4BAA4B;AAAA,IAC1D,OAAO;AAAA,EACT;AAAA,EAEA,OAAO;AAAA,OACF;AAAA,IACH,oBAAoB;AAAA,EACtB;AAAA;AAoCK,SAAS,eAAc,CAAC,OAAsC;AAAA,EACnE,OAAO;AAAA,OACF;AAAA,IACH,aAAa,MAAM,cAAc,CAAC,GAAG,MAAM,WAAW,IAAI,CAAC;AAAA,IAC3D,YAAY,MAAM,aAAa,CAAC,GAAG,MAAM,UAAU,IAAI,CAAC;AAAA,IACxD,YAAY,MAAM,aAAa,CAAC,GAAG,MAAM,UAAU,IAAI,CAAC;AAAA,EAC1D;AAAA;AAWK,SAAS,gBAAmD,CAAC,OAA+B;AAAA,EACjG,OAAO;AAAA;AA8BF,SAAS,gBAAe,CAAC,OAAwC;AAAA,EACtE,OAAO;AAAA,OACF;AAAA,IACH,YAAY,MAAM,aAAa,CAAC,GAAG,MAAM,UAAU,IAAI,CAAC;AAAA,IACxD,OAAO,MAAM,QAAQ,CAAC,GAAG,MAAM,KAAK,IAAI,CAAC;AAAA,EAC3C;AAAA;AAkEK,SAAS,KAAI,CAAC,IAAY,QAAgB,SAAqC;AAAA,EACpF,QAAQ,aAAa,SAAS,WAAW,CAAC;AAAA,EAC1C,OAAO;AAAA,IACL;AAAA,IACA,MAAM,SAAS,QAAQ;AAAA,IACvB;AAAA,OACG;AAAA,OACC,YAAY,SAAS,SAAS,IAC9B,EAAE,UAAU,eAAe,UAAU,aAAa,cAAc,EAAE,IAClE,CAAC;AAAA,EACP;AAAA;AAWF,SAAS,gBAAgB,CAAC,OAAqC;AAAA,EAC7D,OACE,OAAO,UAAU,YACjB,UAAU,QACV,MAAM,QAAS,MAAkC,UAAU,KAC3D,MAAM,QAAS,MAAkC,KAAK;AAAA;AAgI1D,IAAM,WAAY,CAChB,IACA,iBACA,YACe;AAAA,EACf,IAAI,MAAM,QAAQ,eAAe,GAAG;AAAA,IAClC,OAAO;AAAA,MACL;AAAA,MACA,MAAM,SAAS,QAAQ;AAAA,MACvB,oBAAoB,gBAAgB,IAAI,CAAC,WAAW,OAAO,EAAE;AAAA,SAC1D;AAAA,IACL;AAAA,EACF;AAAA,EAEA,IAAI,iBAAiB,eAAe,GAAG;AAAA,IACrC,OAAO;AAAA,MACL;AAAA,MACA,MAAM,SAAS,QAAQ;AAAA,MACvB,oBAAoB,gBAAgB;AAAA,SACjC;AAAA,IACL;AAAA,EACF;AAAA,EAEA,MAAM,IAAI,MACR,gBAAgB,mJAClB;AAAA;AAgBF,SAAS,OAAO,CACd,IACA,oBACA,SACY;AAAA,EACZ,OAAO;AAAA,IACL;AAAA,IACA,MAAM,SAAS,QAAQ;AAAA,IACvB,oBACE,OAAO,uBAAuB,WAAW,qBAAqB,CAAC,GAAG,kBAAkB;AAAA,OACnF;AAAA,EACL;AAAA;AAGF,SAAS,QAGR,CAAC,IAAS,SAA2E;AAAA,EACpF,OAAO;AAAA,IACL;AAAA,IACA,MAAM,SAAS,QAAQ;AAAA,IACvB,oBAAoB;AAAA,OACjB;AAAA,EACL;AAAA;AAGF,SAAS,OAGR,CAAC,IAAS,SAAoD;AAAA,EAC7D,OAAO;AAAA,IACL;AAAA,IACA,MAAM,SAAS,QAAQ;AAAA,IACvB,oBAAoB;AAAA,OACjB;AAAA,EACL;AAAA;AAGK,IAAM,QAAoB,OAAO,OAAO,UAAU;AAAA,EACvD,KAAK;AAAA,EACL,MAAM;AAAA,EACN,KAAK;AACP,CAAC;AAiCM,SAAS,aAAY,CAC1B,eACA,UACoB;AAAA,EACpB,IAAI,OAAO,kBAAkB,UAAU;AAAA,IACrC,IAAI,aAAa,WAAW;AAAA,MAC1B,OAAO,EAAE,MAAM,gBAAgB,aAAa,eAAe,WAAW,SAAS;AAAA,IACjF;AAAA,IACA,OAAO,EAAE,MAAM,gBAAgB,aAAa,cAAc;AAAA,EAC5D;AAAA,EACA,OAAO;AAAA,IACL,MAAM;AAAA,IACN,aAAa,cAAc;AAAA,IAC3B,WAAW,cAAc;AAAA,OACrB,cAAc,iBAAiB,YAC/B,CAAC,IACD,EAAE,eAAe,cAAc,aAAa;AAAA,EAClD;AAAA;AAYK,SAAS,WAA6C,CAC3D,QAGA;AAAA,EACA,OAAO,EAAE,MAAM,QAAQ,WAAW,UAAU,QAAQ,CAAC,GAAG,MAAM,EAAE;AAAA;AAU3D,SAAS,YAA8C,CAC5D,QAGA;AAAA,EACA,OAAO,EAAE,MAAM,QAAQ,WAAW,WAAW,QAAQ,CAAC,GAAG,MAAM,EAAE;AAAA;",
+  "debugId": "1FDC7067D5F81E0664756E2164756E21",
+  "names": []
+}

package/dist/{chunk-rb143ggb.js → chunk-bwjcehza.js}

@@ -2,7 +2,7 @@
 import {
   getDatasetSequenceValidationError,
   getDatasetRowValidationError2
-} from "./chunk-cd234ba4.js";
+} from "./chunk-rz53yb4v.js";
 import {
   isPlainRecord
 } from "./chunk-wy0qdqfm.js";

package/dist/{chunk-5thzcb8g.js → chunk-c85m1hyj.js}

@@ -2,10 +2,10 @@
 import {
   normalizeSchemaValue2,
   coerceSchemaValueToTyped2
-} from "./chunk-rpxz486p.js";
+} from "./chunk-hvsb78a1.js";
 import {
   validateSchemaOrRefValue2
-} from "./chunk-rx7h5fdx.js";
+} from "./chunk-v9xd5wzd.js";
 import {
   OntologyValidationError2
 } from "./chunk-cqr3acm1.js";

package/dist/{chunk-e67ynxcr.js → chunk-d2ync1v3.js}

@@ -2,17 +2,17 @@
 import {
   createSixbError2,
   toSixbFailure2
-} from "./chunk-6fsr7y93.js";
+} from "./chunk-8mx7qw3y.js";
 import {
   reportRunFailure2
-} from "./chunk-vjcd8d27.js";
+} from "./chunk-fa02jy15.js";
 import {
   resolveExecutionScopeAuthorization,
   assertAuthorized2
-} from "./chunk-5be2ath4.js";
+} from "./chunk-y7rqfrgg.js";
 import {
   PIPELINE_RUN_FAILURE_CODES2
-} from "./chunk-5yd8cchh.js";
+} from "./chunk-j2bp5ryw.js";
 import {
   PipelineRunError2
 } from "./chunk-mmagke4x.js";
@@ -20,7 +20,7 @@ import {
   executionRecordInputFromRuntime,
   ensureExecutionRecord2,
   createPrimitiveExecutionRecord
-} from "./chunk-a7er86jd.js";
+} from "./chunk-nre82s12.js";
 
 // src/pipelines/errors.ts
 class PipelineError2 extends Error {

package/dist/{chunk-3rrezgyc.js → chunk-dnmadg9k.js}

@@ -3,7 +3,7 @@ import {
   datasetSequenceValue,
   assertDatasetDefinition2,
   getDatasetRowValidationFailure
-} from "./chunk-cd234ba4.js";
+} from "./chunk-rz53yb4v.js";
 import {
   LakeStorageError2,
   LakeConcurrencyError2,
@@ -11,7 +11,7 @@ import {
   encodeDatasetPrimaryKey2,
   getDatasetMergeChangeValidationError2,
   cloneDatasetMergeChange2
-} from "./chunk-rb143ggb.js";
+} from "./chunk-bwjcehza.js";
 import {
   normalizeDecimalValue2
 } from "./chunk-3bh94gbw.js";

package/dist/chunk-enpsx8k5.js

@@ -0,0 +1,127 @@
+// @bun
+// src/authorization/grant-kinds.ts
+var GRANT_KINDS = {
+  "access:application": {
+    universeKey: "applicationIds",
+    subject: "application",
+    fix: "Use an application exported from '@sixb/core'."
+  },
+  "view:object": {
+    universeKey: "objectTypeIds",
+    subject: "object type",
+    fix: "Register it in 'ontology/' or pass it to createSixb({ ontologies }).",
+    expandsSubtypes: true
+  },
+  "view:dataset": {
+    universeKey: "datasetIds",
+    subject: "dataset",
+    fix: "Add it to 'datasets/' or pass it to createSixb({ datasets })."
+  },
+  "edit:object": {
+    universeKey: "objectTypeIds",
+    subject: "object type",
+    fix: "Register it in 'ontology/' or pass it to createSixb({ ontologies })."
+  },
+  "append:telemetry": {
+    universeKey: "objectTypeIds",
+    subject: "object type",
+    fix: "Register it in 'ontology/' or pass it to createSixb({ ontologies })."
+  },
+  "apply:action": {
+    universeKey: "actionIds",
+    subject: "action",
+    fix: "Add it to 'actions/' or pass it to createSixb({ actions })."
+  },
+  "share:share": {
+    universeKey: "shareIds",
+    subject: "share",
+    fix: "Add it to 'shares/' or pass it to createSixb({ shares })."
+  },
+  "run:workflow": {
+    universeKey: "workflowIds",
+    subject: "workflow",
+    fix: "Add it to 'workflows/' or pass it to createSixb({ workflows })."
+  },
+  "run:sync": {
+    universeKey: "syncIds",
+    subject: "sync",
+    fix: "Add it to 'syncs/' or pass it to createSixb({ syncs })."
+  },
+  "run:pipeline": {
+    universeKey: "pipelineIds",
+    subject: "pipeline",
+    fix: "Add it to 'pipelines/' or pass it to createSixb({ pipelines })."
+  },
+  "run:agent": {
+    singleton: true,
+    subject: "agent",
+    fix: "Configure models.language and use the exported agent reference in can.run(agent)."
+  },
+  "observe:logs": {
+    universeKey: "observableIds",
+    subject: "observability surface",
+    fix: 'Use can.observe("logs").'
+  },
+  "observe:aiUsage": {
+    universeKey: "observableIds",
+    subject: "observability surface",
+    fix: "Use can.observe(agent.usage)."
+  },
+  "manage:connector": {
+    universeKey: "connectorIds",
+    subject: "connector",
+    fix: "Add it to 'connectors/' or pass it to createSixb({ connectors })."
+  },
+  "manage:aiUsage": {
+    universeKey: "manageableIds",
+    subject: "management surface",
+    fix: "Use can.manage(agent.usage)."
+  }
+};
+var GRANT_KIND_KEYS = Object.keys(GRANT_KINDS);
+var TARGETED_GRANT_KIND_KEYS = GRANT_KIND_KEYS.filter((kind) => kind !== "run:agent");
+function grantKindOf(grant) {
+  switch (grant.capability) {
+    case "access":
+      return "access:application";
+    case "view":
+      return `view:${grant.target}`;
+    case "edit":
+      return "edit:object";
+    case "append":
+      return "append:telemetry";
+    case "apply":
+      return "apply:action";
+    case "share":
+      return "share:share";
+    case "run":
+      return `run:${grant.target}`;
+    case "observe":
+      return `observe:${grant.target}`;
+    case "manage":
+      return `manage:${grant.target}`;
+  }
+}
+function emptyGrantSets() {
+  return {
+    "access:application": new Set,
+    "view:object": new Set,
+    "view:dataset": new Set,
+    "edit:object": new Set,
+    "append:telemetry": new Set,
+    "apply:action": new Set,
+    "share:share": new Set,
+    "run:workflow": new Set,
+    "run:sync": new Set,
+    "run:pipeline": new Set,
+    "run:agent": false,
+    "observe:logs": new Set,
+    "observe:aiUsage": new Set,
+    "manage:connector": new Set,
+    "manage:aiUsage": new Set
+  };
+}
+
+export { GRANT_KINDS, TARGETED_GRANT_KIND_KEYS, grantKindOf, emptyGrantSets };
+
+//# debugId=C6044AB9EC3A569764756E2164756E21

package/dist/chunk-enpsx8k5.js.map

@@ -0,0 +1,10 @@
+{
+  "version": 3,
+  "sources": ["../src/authorization/grant-kinds.ts"],
+  "sourcesContent": [
+    "/**\n * Grant kinds: the single source of truth for the (capability, target) space.\n *\n * Every grant collapses to one `GrantKind` discriminant — the same\n * `capability:target` string the decision engine uses as a grant key (e.g.\n * `view:object`, `run:sync`). Resolution, validation, enforcement, and the\n * resolved `GrantIndex` all key off it, so adding a grant family is a single\n * entry in `GRANT_KINDS` plus the compile errors that forces at every consumer.\n */\n\nimport type { AgentRunGrant, GrantDefinition } from \"../security/types\"\n\nexport type GrantKind =\n  | \"access:application\"\n  | \"view:object\"\n  | \"view:dataset\"\n  | \"edit:object\"\n  | \"append:telemetry\"\n  | \"apply:action\"\n  | \"share:share\"\n  | \"run:workflow\"\n  | \"run:sync\"\n  | \"run:pipeline\"\n  | \"run:agent\"\n  | \"observe:logs\"\n  | \"observe:aiUsage\"\n  | \"manage:connector\"\n  | \"manage:aiUsage\"\n\nexport type SingletonGrantKind = \"run:agent\"\nexport type TargetedGrantKind = Exclude<GrantKind, SingletonGrantKind>\n\n/** Registered id universes a grant kind ranges over, plus subtype expansion. */\nexport interface GrantUniverse {\n  readonly applicationIds: ReadonlySet<string>\n  readonly objectTypeIds: ReadonlySet<string>\n  readonly datasetIds: ReadonlySet<string>\n  readonly actionIds: ReadonlySet<string>\n  readonly shareIds: ReadonlySet<string>\n  readonly workflowIds: ReadonlySet<string>\n  readonly syncIds: ReadonlySet<string>\n  readonly pipelineIds: ReadonlySet<string>\n  readonly observableIds: ReadonlySet<string>\n  readonly connectorIds: ReadonlySet<string>\n  readonly manageableIds: ReadonlySet<string>\n  readonly getSubTypes: (objectTypeId: string) => readonly string[]\n}\n\n/** The registered-id sets a grant kind validates against (no subtype hook). */\nexport type GrantUniverseKey = Exclude<keyof GrantUniverse, \"getSubTypes\">\n\ninterface TargetedGrantKindSpec {\n  /** Registered universe the grant's ids must belong to. */\n  readonly universeKey: GrantUniverseKey\n  /** Subject noun used in validation errors (\"unknown <subject> '<id>'\"). */\n  readonly subject: string\n  /** Actionable hint appended to the \"unknown <subject>\" error. */\n  readonly fix: string\n  /** Only object-type grants also expand to subtypes. */\n  readonly expandsSubtypes?: true\n}\n\ninterface SingletonGrantKindSpec {\n  /** Project-wide capability with no resource selection; resolves to a boolean. */\n  readonly singleton: true\n  readonly subject: string\n  readonly fix: string\n}\n\n/**\n * The exhaustive grant-kind table. A new grant family is one entry here; the\n * mapped type makes every omission a compile error.\n */\nexport const GRANT_KINDS: {\n  readonly [TKind in GrantKind]: TKind extends SingletonGrantKind\n    ? SingletonGrantKindSpec\n    : TargetedGrantKindSpec\n} = {\n  \"access:application\": {\n    universeKey: \"applicationIds\",\n    subject: \"application\",\n    fix: \"Use an application exported from '@sixb/core'.\",\n  },\n  \"view:object\": {\n    universeKey: \"objectTypeIds\",\n    subject: \"object type\",\n    fix: \"Register it in 'ontology/' or pass it to createSixb({ ontologies }).\",\n    expandsSubtypes: true,\n  },\n  \"view:dataset\": {\n    universeKey: \"datasetIds\",\n    subject: \"dataset\",\n    fix: \"Add it to 'datasets/' or pass it to createSixb({ datasets }).\",\n  },\n  // Deliberately no `expandsSubtypes`: granting writes on a parent type must not\n  // silently extend to types added under it later. `view:object` expands because\n  // a read of a subtype reveals nothing the parent's grant did not already cover.\n  \"edit:object\": {\n    universeKey: \"objectTypeIds\",\n    subject: \"object type\",\n    fix: \"Register it in 'ontology/' or pass it to createSixb({ ontologies }).\",\n  },\n  \"append:telemetry\": {\n    universeKey: \"objectTypeIds\",\n    subject: \"object type\",\n    fix: \"Register it in 'ontology/' or pass it to createSixb({ ontologies }).\",\n  },\n  \"apply:action\": {\n    universeKey: \"actionIds\",\n    subject: \"action\",\n    fix: \"Add it to 'actions/' or pass it to createSixb({ actions }).\",\n  },\n  \"share:share\": {\n    universeKey: \"shareIds\",\n    subject: \"share\",\n    fix: \"Add it to 'shares/' or pass it to createSixb({ shares }).\",\n  },\n  \"run:workflow\": {\n    universeKey: \"workflowIds\",\n    subject: \"workflow\",\n    fix: \"Add it to 'workflows/' or pass it to createSixb({ workflows }).\",\n  },\n  \"run:sync\": {\n    universeKey: \"syncIds\",\n    subject: \"sync\",\n    fix: \"Add it to 'syncs/' or pass it to createSixb({ syncs }).\",\n  },\n  \"run:pipeline\": {\n    universeKey: \"pipelineIds\",\n    subject: \"pipeline\",\n    fix: \"Add it to 'pipelines/' or pass it to createSixb({ pipelines }).\",\n  },\n  \"run:agent\": {\n    singleton: true,\n    subject: \"agent\",\n    fix: \"Configure models.language and use the exported agent reference in can.run(agent).\",\n  },\n  \"observe:logs\": {\n    universeKey: \"observableIds\",\n    subject: \"observability surface\",\n    fix: 'Use can.observe(\"logs\").',\n  },\n  \"observe:aiUsage\": {\n    universeKey: \"observableIds\",\n    subject: \"observability surface\",\n    fix: \"Use can.observe(agent.usage).\",\n  },\n  \"manage:connector\": {\n    universeKey: \"connectorIds\",\n    subject: \"connector\",\n    fix: \"Add it to 'connectors/' or pass it to createSixb({ connectors }).\",\n  },\n  \"manage:aiUsage\": {\n    universeKey: \"manageableIds\",\n    subject: \"management surface\",\n    fix: \"Use can.manage(agent.usage).\",\n  },\n}\n\nexport const GRANT_KIND_KEYS = Object.keys(GRANT_KINDS) as readonly GrantKind[]\nexport const TARGETED_GRANT_KIND_KEYS = GRANT_KIND_KEYS.filter(\n  (kind): kind is TargetedGrantKind => kind !== \"run:agent\"\n)\n\n/** The grant kind a stored grant resolves to. */\nexport function grantKindOf(grant: AgentRunGrant): SingletonGrantKind\nexport function grantKindOf(grant: Exclude<GrantDefinition, AgentRunGrant>): TargetedGrantKind\nexport function grantKindOf(grant: GrantDefinition): GrantKind\nexport function grantKindOf(grant: GrantDefinition): GrantKind {\n  switch (grant.capability) {\n    case \"access\":\n      return \"access:application\"\n    case \"view\":\n      return `view:${grant.target}`\n    case \"edit\":\n      return \"edit:object\"\n    case \"append\":\n      return \"append:telemetry\"\n    case \"apply\":\n      return \"apply:action\"\n    case \"share\":\n      return \"share:share\"\n    case \"run\":\n      return `run:${grant.target}`\n    case \"observe\":\n      return `observe:${grant.target}`\n    case \"manage\":\n      return `manage:${grant.target}`\n  }\n}\n\n/** Mutable grant index: booleans for singleton capabilities, id sets for selected resources. */\nexport type MutableGrantIndex = {\n  [TKind in GrantKind]: TKind extends SingletonGrantKind ? boolean : Set<string>\n}\n\nexport function emptyGrantSets(): MutableGrantIndex {\n  return {\n    \"access:application\": new Set(),\n    \"view:object\": new Set(),\n    \"view:dataset\": new Set(),\n    \"edit:object\": new Set(),\n    \"append:telemetry\": new Set(),\n    \"apply:action\": new Set(),\n    \"share:share\": new Set(),\n    \"run:workflow\": new Set(),\n    \"run:sync\": new Set(),\n    \"run:pipeline\": new Set(),\n    \"run:agent\": false,\n    \"observe:logs\": new Set(),\n    \"observe:aiUsage\": new Set(),\n    \"manage:connector\": new Set(),\n    \"manage:aiUsage\": new Set(),\n  }\n}\n"
+  ],
+  "mappings": ";;AAyEO,IAAM,cAIT;AAAA,EACF,sBAAsB;AAAA,IACpB,aAAa;AAAA,IACb,SAAS;AAAA,IACT,KAAK;AAAA,EACP;AAAA,EACA,eAAe;AAAA,IACb,aAAa;AAAA,IACb,SAAS;AAAA,IACT,KAAK;AAAA,IACL,iBAAiB;AAAA,EACnB;AAAA,EACA,gBAAgB;AAAA,IACd,aAAa;AAAA,IACb,SAAS;AAAA,IACT,KAAK;AAAA,EACP;AAAA,EAIA,eAAe;AAAA,IACb,aAAa;AAAA,IACb,SAAS;AAAA,IACT,KAAK;AAAA,EACP;AAAA,EACA,oBAAoB;AAAA,IAClB,aAAa;AAAA,IACb,SAAS;AAAA,IACT,KAAK;AAAA,EACP;AAAA,EACA,gBAAgB;AAAA,IACd,aAAa;AAAA,IACb,SAAS;AAAA,IACT,KAAK;AAAA,EACP;AAAA,EACA,eAAe;AAAA,IACb,aAAa;AAAA,IACb,SAAS;AAAA,IACT,KAAK;AAAA,EACP;AAAA,EACA,gBAAgB;AAAA,IACd,aAAa;AAAA,IACb,SAAS;AAAA,IACT,KAAK;AAAA,EACP;AAAA,EACA,YAAY;AAAA,IACV,aAAa;AAAA,IACb,SAAS;AAAA,IACT,KAAK;AAAA,EACP;AAAA,EACA,gBAAgB;AAAA,IACd,aAAa;AAAA,IACb,SAAS;AAAA,IACT,KAAK;AAAA,EACP;AAAA,EACA,aAAa;AAAA,IACX,WAAW;AAAA,IACX,SAAS;AAAA,IACT,KAAK;AAAA,EACP;AAAA,EACA,gBAAgB;AAAA,IACd,aAAa;AAAA,IACb,SAAS;AAAA,IACT,KAAK;AAAA,EACP;AAAA,EACA,mBAAmB;AAAA,IACjB,aAAa;AAAA,IACb,SAAS;AAAA,IACT,KAAK;AAAA,EACP;AAAA,EACA,oBAAoB;AAAA,IAClB,aAAa;AAAA,IACb,SAAS;AAAA,IACT,KAAK;AAAA,EACP;AAAA,EACA,kBAAkB;AAAA,IAChB,aAAa;AAAA,IACb,SAAS;AAAA,IACT,KAAK;AAAA,EACP;AACF;AAEO,IAAM,kBAAkB,OAAO,KAAK,WAAW;AAC/C,IAAM,2BAA2B,gBAAgB,OACtD,CAAC,SAAoC,SAAS,WAChD;AAMO,SAAS,WAAW,CAAC,OAAmC;AAAA,EAC7D,QAAQ,MAAM;AAAA,SACP;AAAA,MACH,OAAO;AAAA,SACJ;AAAA,MACH,OAAO,QAAQ,MAAM;AAAA,SAClB;AAAA,MACH,OAAO;AAAA,SACJ;AAAA,MACH,OAAO;AAAA,SACJ;AAAA,MACH,OAAO;AAAA,SACJ;AAAA,MACH,OAAO;AAAA,SACJ;AAAA,MACH,OAAO,OAAO,MAAM;AAAA,SACjB;AAAA,MACH,OAAO,WAAW,MAAM;AAAA,SACrB;AAAA,MACH,OAAO,UAAU,MAAM;AAAA;AAAA;AAStB,SAAS,cAAc,GAAsB;AAAA,EAClD,OAAO;AAAA,IACL,sBAAsB,IAAI;AAAA,IAC1B,eAAe,IAAI;AAAA,IACnB,gBAAgB,IAAI;AAAA,IACpB,eAAe,IAAI;AAAA,IACnB,oBAAoB,IAAI;AAAA,IACxB,gBAAgB,IAAI;AAAA,IACpB,eAAe,IAAI;AAAA,IACnB,gBAAgB,IAAI;AAAA,IACpB,YAAY,IAAI;AAAA,IAChB,gBAAgB,IAAI;AAAA,IACpB,aAAa;AAAA,IACb,gBAAgB,IAAI;AAAA,IACpB,mBAAmB,IAAI;AAAA,IACvB,oBAAoB,IAAI;AAAA,IACxB,kBAAkB,IAAI;AAAA,EACxB;AAAA;",
+  "debugId": "C6044AB9EC3A569764756E2164756E21",
+  "names": []
+}