@sixb/core 0.1.17 → 0.1.19

package/dist/{chunk-h3v76ams.js → chunk-jhm3zsa7.js}

@@ -11,6 +11,26 @@ function blobIdFromDigest2(digest) {
   return `blob_${blobDigestHex2(digest)}`;
 }
 
+// src/blob-storage/media-type.ts
+var TOKEN = "[!#$%&'*+.^_`|~0-9A-Za-z-]+";
+var QUOTED_STRING = '"[\\t\\x20\\x21\\x23-\\x2b\\x2d-\\x5b\\x5d-\\x7e]*"';
+var PARAMETER = `[\\t ]*;[\\t ]*(${TOKEN})=(${TOKEN}|${QUOTED_STRING})`;
+var MEDIA_TYPE_PATTERN = new RegExp(`^(${TOKEN})/(${TOKEN})((?:${PARAMETER})*)$`);
+var PARAMETER_PATTERN = new RegExp(PARAMETER, "g");
+function canonicalMediaType2(value) {
+  if (typeof value !== "string")
+    return null;
+  const match = MEDIA_TYPE_PATTERN.exec(value);
+  if (!match)
+    return null;
+  const [, type, subtype, parameters] = match;
+  let canonical = `${type.toLowerCase()}/${subtype.toLowerCase()}`;
+  for (const [, name, parameterValue] of parameters.matchAll(PARAMETER_PATTERN)) {
+    canonical += `;${name.toLowerCase()}=${parameterValue}`;
+  }
+  return canonical;
+}
+
 // src/blob-storage/validation.ts
 function isBlobDigest2(value) {
   return typeof value === "string" && value.startsWith("sha256:") && value.length > "sha256:".length;
@@ -18,6 +38,9 @@ function isBlobDigest2(value) {
 function isFileRef2(value) {
   return isPlainRecord(value) && typeof value.blobId === "string" && value.blobId.trim().length > 0 && isBlobDigest2(value.digest) && value.blobId === blobIdFromDigest2(value.digest) && typeof value.sizeBytes === "number" && Number.isInteger(value.sizeBytes) && value.sizeBytes >= 0 && (value.fileName === undefined || typeof value.fileName === "string") && (value.mediaType === undefined || typeof value.mediaType === "string") && (value.logicalPath === undefined || typeof value.logicalPath === "string");
 }
+function isValidFileRef(value) {
+  return isFileRef2(value) && (value.mediaType === undefined || canonicalMediaType2(value.mediaType) !== null);
+}
 function supportsDirectUpload2(storage) {
   const candidate = storage;
   return typeof candidate.createUpload === "function" && typeof candidate.signUploadPart === "function" && typeof candidate.completeUpload === "function" && typeof candidate.abortUpload === "function";
@@ -27,6 +50,6 @@ function supportsRangeRead2(storage) {
   return typeof candidate.openRange === "function";
 }
 
-export { blobDigestHex2, blobIdFromDigest2, isBlobDigest2, isFileRef2, supportsDirectUpload2, supportsRangeRead2 };
+export { blobDigestHex2, blobIdFromDigest2, canonicalMediaType2, isBlobDigest2, isFileRef2, isValidFileRef, supportsDirectUpload2, supportsRangeRead2 };
 
-//# debugId=D9C9AEAF96D925AF64756E2164756E21
+//# debugId=91CB77087AB7E2E164756E2164756E21

package/dist/chunk-jhm3zsa7.js.map

@@ -0,0 +1,12 @@
+{
+  "version": 3,
+  "sources": ["../src/blob-storage/derive.ts", "../src/blob-storage/media-type.ts", "../src/blob-storage/validation.ts"],
+  "sourcesContent": [
+    "import type { BlobDigest } from \"./types\"\n\n// Pure, crypto-free derivations of blob identity from a digest. Kept out of\n// `utils.ts` (which imports `node:crypto`) so the browser-safe `./browser`\n// barrel can reuse them without dragging Node crypto into the client bundle.\n\nexport function blobDigestHex(digest: BlobDigest): string {\n  return digest.slice(\"sha256:\".length)\n}\n\nexport function blobIdFromDigest(digest: BlobDigest): string {\n  return `blob_${blobDigestHex(digest)}`\n}\n",
+    "// One media type as RFC 9110 defines it: `type/subtype`, each a token, then optional\n// `;name=value` parameters whose value is a token or a quoted string. Stricter than the RFC where\n// leniency only invites a second reading: no surrounding whitespace, no empty parameters, no\n// escapes, and no comma anywhere. Browsers read a comma-separated value as a list of types and\n// use the last valid one, so a value with a comma can mean something other than its first type.\nconst TOKEN = \"[!#$%&'*+.^_`|~0-9A-Za-z-]+\"\nconst QUOTED_STRING = '\"[\\\\t\\\\x20\\\\x21\\\\x23-\\\\x2b\\\\x2d-\\\\x5b\\\\x5d-\\\\x7e]*\"'\nconst PARAMETER = `[\\\\t ]*;[\\\\t ]*(${TOKEN})=(${TOKEN}|${QUOTED_STRING})`\nconst MEDIA_TYPE_PATTERN = new RegExp(`^(${TOKEN})/(${TOKEN})((?:${PARAMETER})*)$`)\nconst PARAMETER_PATTERN = new RegExp(PARAMETER, \"g\")\n\n/**\n * The canonical form of a single well-formed media type, or `null` for anything else.\n *\n * Type, subtype, and parameter names are case-insensitive, so they are lowercased; parameter\n * values keep their case. `\"Text/Plain; Charset=UTF-8\"` becomes `\"text/plain;charset=UTF-8\"`.\n */\nexport function canonicalMediaType(value: unknown): string | null {\n  if (typeof value !== \"string\") return null\n  const match = MEDIA_TYPE_PATTERN.exec(value)\n  if (!match) return null\n\n  const [, type, subtype, parameters] = match\n  let canonical = `${type.toLowerCase()}/${subtype.toLowerCase()}`\n  for (const [, name, parameterValue] of parameters.matchAll(PARAMETER_PATTERN)) {\n    canonical += `;${name.toLowerCase()}=${parameterValue}`\n  }\n  return canonical\n}\n",
+    "import { isPlainRecord } from \"../json\"\nimport { blobIdFromDigest } from \"./derive\"\nimport { canonicalMediaType } from \"./media-type\"\nimport type {\n  BlobDigest,\n  BlobStorage,\n  DirectUploadBlobStorage,\n  FileRef,\n  RangeReadableBlobStorage,\n} from \"./types\"\n\nexport function isBlobDigest(value: unknown): value is BlobDigest {\n  return typeof value === \"string\" && value.startsWith(\"sha256:\") && value.length > \"sha256:\".length\n}\n\nexport function isFileRef(value: unknown): value is FileRef {\n  return (\n    isPlainRecord(value) &&\n    typeof value.blobId === \"string\" &&\n    value.blobId.trim().length > 0 &&\n    isBlobDigest(value.digest) &&\n    // Blob identity is content-addressed: the id must be derivable from the digest.\n    // Rejecting a mismatch guards against tampered or malformed references.\n    value.blobId === blobIdFromDigest(value.digest) &&\n    typeof value.sizeBytes === \"number\" &&\n    Number.isInteger(value.sizeBytes) &&\n    value.sizeBytes >= 0 &&\n    (value.fileName === undefined || typeof value.fileName === \"string\") &&\n    (value.mediaType === undefined || typeof value.mediaType === \"string\") &&\n    (value.logicalPath === undefined || typeof value.logicalPath === \"string\")\n  )\n}\n\n/**\n * `isFileRef`, plus a `mediaType` that, when present, is exactly one media type. Paths that store\n * a reference a caller hands them use this. Reads keep `isFileRef`, so references stored before\n * the rule still load; file routes re-parse the type before serving it.\n */\nexport function isValidFileRef(value: unknown): value is FileRef {\n  return (\n    isFileRef(value) &&\n    (value.mediaType === undefined || canonicalMediaType(value.mediaType) !== null)\n  )\n}\n\nexport function supportsDirectUpload(\n  storage: BlobStorage\n): storage is BlobStorage & DirectUploadBlobStorage {\n  const candidate = storage as Partial<DirectUploadBlobStorage>\n  return (\n    typeof candidate.createUpload === \"function\" &&\n    typeof candidate.signUploadPart === \"function\" &&\n    typeof candidate.completeUpload === \"function\" &&\n    typeof candidate.abortUpload === \"function\"\n  )\n}\n\nexport function supportsRangeRead(\n  storage: BlobStorage\n): storage is BlobStorage & RangeReadableBlobStorage {\n  const candidate = storage as Partial<RangeReadableBlobStorage>\n  return typeof candidate.openRange === \"function\"\n}\n"
+  ],
+  "mappings": ";;;;;;AAMO,SAAS,cAAa,CAAC,QAA4B;AAAA,EACxD,OAAO,OAAO,MAAM,UAAU,MAAM;AAAA;AAG/B,SAAS,iBAAgB,CAAC,QAA4B;AAAA,EAC3D,OAAO,QAAQ,eAAc,MAAM;AAAA;;;ACNrC,IAAM,QAAQ;AACd,IAAM,gBAAgB;AACtB,IAAM,YAAY,mBAAmB,WAAW,SAAS;AACzD,IAAM,qBAAqB,IAAI,OAAO,KAAK,WAAW,aAAa,eAAe;AAClF,IAAM,oBAAoB,IAAI,OAAO,WAAW,GAAG;AAQ5C,SAAS,mBAAkB,CAAC,OAA+B;AAAA,EAChE,IAAI,OAAO,UAAU;AAAA,IAAU,OAAO;AAAA,EACtC,MAAM,QAAQ,mBAAmB,KAAK,KAAK;AAAA,EAC3C,IAAI,CAAC;AAAA,IAAO,OAAO;AAAA,EAEnB,SAAS,MAAM,SAAS,cAAc;AAAA,EACtC,IAAI,YAAY,GAAG,KAAK,YAAY,KAAK,QAAQ,YAAY;AAAA,EAC7D,cAAc,MAAM,mBAAmB,WAAW,SAAS,iBAAiB,GAAG;AAAA,IAC7E,aAAa,IAAI,KAAK,YAAY,KAAK;AAAA,EACzC;AAAA,EACA,OAAO;AAAA;;;AChBF,SAAS,aAAY,CAAC,OAAqC;AAAA,EAChE,OAAO,OAAO,UAAU,YAAY,MAAM,WAAW,SAAS,KAAK,MAAM,SAAS,UAAU;AAAA;AAGvF,SAAS,UAAS,CAAC,OAAkC;AAAA,EAC1D,OACE,cAAc,KAAK,KACnB,OAAO,MAAM,WAAW,YACxB,MAAM,OAAO,KAAK,EAAE,SAAS,KAC7B,cAAa,MAAM,MAAM,KAGzB,MAAM,WAAW,kBAAiB,MAAM,MAAM,KAC9C,OAAO,MAAM,cAAc,YAC3B,OAAO,UAAU,MAAM,SAAS,KAChC,MAAM,aAAa,MAClB,MAAM,aAAa,aAAa,OAAO,MAAM,aAAa,cAC1D,MAAM,cAAc,aAAa,OAAO,MAAM,cAAc,cAC5D,MAAM,gBAAgB,aAAa,OAAO,MAAM,gBAAgB;AAAA;AAS9D,SAAS,cAAc,CAAC,OAAkC;AAAA,EAC/D,OACE,WAAU,KAAK,MACd,MAAM,cAAc,aAAa,oBAAmB,MAAM,SAAS,MAAM;AAAA;AAIvE,SAAS,qBAAoB,CAClC,SACkD;AAAA,EAClD,MAAM,YAAY;AAAA,EAClB,OACE,OAAO,UAAU,iBAAiB,cAClC,OAAO,UAAU,mBAAmB,cACpC,OAAO,UAAU,mBAAmB,cACpC,OAAO,UAAU,gBAAgB;AAAA;AAI9B,SAAS,kBAAiB,CAC/B,SACmD;AAAA,EACnD,MAAM,YAAY;AAAA,EAClB,OAAO,OAAO,UAAU,cAAc;AAAA;",
+  "debugId": "91CB77087AB7E2E164756E2164756E21",
+  "names": []
+}

package/dist/{chunk-w9yycd3t.js → chunk-kg5j6fct.js}

@@ -3,7 +3,7 @@ import {
   createPrincipalRuntimeAuthorization,
   createDisabledRuntimeAuthorization,
   createDelegatedRuntimeAuthorization
-} from "./chunk-5be2ath4.js";
+} from "./chunk-y7rqfrgg.js";
 
 // src/execution/scopes.ts
 import { randomUUID } from "crypto";
@@ -60,12 +60,8 @@ function createTestingScope(input) {
   });
 }
 function withoutSession(context) {
-  return {
-    principal: context.principal,
-    groupIds: context.groupIds,
-    roleIds: context.roleIds,
-    grants: context.grants
-  };
+  const { sessionId: _sessionId, ...withoutSessionId } = context;
+  return withoutSessionId;
 }
 function createRequestExecution(input) {
   assertNonEmpty(input.projectId, "Execution project id");
@@ -103,4 +99,4 @@ function assertNonEmpty(value, label) {
 
 export { createPrincipalRequestScope, createDisabledRequestScope, createDelegatedRequestScope, createTestingScope };
 
-//# debugId=D67EDA8B3AA3264264756E2164756E21
+//# debugId=1E19649F1CE57F6964756E2164756E21

package/dist/{chunk-w9yycd3t.js.map → chunk-kg5j6fct.js.map}

@@ -2,9 +2,9 @@
   "version": 3,
   "sources": ["../src/execution/scopes.ts"],
   "sourcesContent": [
-    "import { randomUUID } from \"node:crypto\"\nimport type { AuthorizationContext } from \"../authorization\"\nimport type { ObjectReadExecutionLimits, SelectedObjectReadScope } from \"../storage\"\nimport {\n  createDelegatedRuntimeAuthorization,\n  createDisabledRuntimeAuthorization,\n  createKernelRuntimeAuthorization,\n  createPrincipalRuntimeAuthorization,\n  type DelegatedActionApplyTarget,\n} from \"./authorization\"\nimport type {\n  AuthorizablePrincipal,\n  AuthorizationRef,\n  ExecutionContext,\n  ExecutionScope,\n  ExecutionSource,\n  KernelOperation,\n} from \"./types\"\n\nexport function createPrincipalRequestScope(input: {\n  readonly projectId: string\n  readonly requestId: string\n  readonly correlationId: string\n  readonly context: AuthorizationContext\n  readonly credential?: Extract<AuthorizationRef, { readonly type: \"principal\" }>[\"credential\"]\n}): ExecutionScope {\n  const execution = createRequestExecution({\n    projectId: input.projectId,\n    requestId: input.requestId,\n    correlationId: input.correlationId,\n    requestedBy: asAuthorizablePrincipal(input.context.principal),\n  })\n\n  return Object.freeze({\n    execution,\n    authorization: createPrincipalRuntimeAuthorization({\n      execution,\n      context: input.context,\n      ...(input.credential === undefined ? {} : { credential: input.credential }),\n    }),\n  })\n}\n\nexport function createDisabledRequestScope(input: {\n  readonly projectId: string\n  readonly requestId: string\n  readonly correlationId: string\n}): ExecutionScope {\n  const execution = createRequestExecution(input)\n  return Object.freeze({\n    execution,\n    authorization: createDisabledRuntimeAuthorization(execution),\n  })\n}\n\n/** Internal request scope carrying only a finite object-read selection. */\nexport function createDelegatedRequestScope(input: {\n  readonly projectId: string\n  readonly requestId: string\n  readonly correlationId: string\n  readonly objectRead: {\n    readonly selection: SelectedObjectReadScope\n    readonly limits: ObjectReadExecutionLimits\n  }\n  readonly actionApply?: readonly DelegatedActionApplyTarget[]\n  readonly delegation?: Extract<AuthorizationRef, { readonly type: \"delegated\" }>[\"delegation\"]\n}): ExecutionScope {\n  const execution = createRequestExecution(input)\n  const actionApply = input.actionApply\n  const delegation = input.delegation\n  return Object.freeze({\n    execution,\n    authorization: createDelegatedRuntimeAuthorization({\n      execution,\n      objectRead: input.objectRead,\n      ...(actionApply === undefined ? {} : { actionApply }),\n      ...(delegation === undefined ? {} : { delegation }),\n    }),\n  })\n}\n\nexport function createKernelScope(input: {\n  readonly projectId: string\n  readonly operation: KernelOperation\n  readonly source: ExecutionSource\n  readonly correlationId?: string\n}): ExecutionScope {\n  const operation = Object.freeze({ ...input.operation })\n  const execution = createKernelExecution({\n    projectId: input.projectId,\n    operation,\n    source: input.source,\n    correlationId: input.correlationId,\n  })\n  return Object.freeze({\n    execution,\n    authorization: createKernelRuntimeAuthorization({ execution, operation }),\n  })\n}\n\nfunction createKernelExecution(input: {\n  readonly projectId: string\n  readonly operation: KernelOperation\n  readonly source: ExecutionSource\n  readonly correlationId?: string\n}): ExecutionContext {\n  const source = snapshotExecutionSource(input.source)\n  assertNestedProvenance(source, input.correlationId)\n  return freezeExecution({\n    id: `exec_${randomUUID()}`,\n    projectId: input.projectId,\n    executor: Object.freeze({ type: \"kernel\", operation: input.operation }),\n    source,\n    correlationId: input.correlationId ?? `corr_${randomUUID()}`,\n  })\n}\n\nfunction assertNestedProvenance(source: ExecutionSource, correlationId: string | undefined): void {\n  if (source.type === \"execution\" && correlationId === undefined) {\n    throw new Error(\"[Sixb] Nested execution must preserve its parent correlation id.\")\n  }\n}\n\nexport function createTestingScope(input: {\n  readonly projectId: string\n  readonly context?: AuthorizationContext\n  readonly executionId?: string\n  readonly requestId?: string\n  readonly correlationId?: string\n}): ExecutionScope {\n  const context = input.context ? withoutSession(input.context) : undefined\n  const requestId = input.requestId ?? `test_request_${randomUUID()}`\n  const execution = createRequestExecution({\n    projectId: input.projectId,\n    requestId,\n    correlationId: input.correlationId ?? `test_correlation_${randomUUID()}`,\n    ...(context === undefined ? {} : { requestedBy: asAuthorizablePrincipal(context.principal) }),\n    executionId: input.executionId,\n  })\n  return Object.freeze({\n    execution,\n    authorization: context\n      ? createPrincipalRuntimeAuthorization({ execution, context })\n      : createDisabledRuntimeAuthorization(execution),\n  })\n}\n\nfunction withoutSession(context: AuthorizationContext): AuthorizationContext {\n  return {\n    principal: context.principal,\n    groupIds: context.groupIds,\n    roleIds: context.roleIds,\n    grants: context.grants,\n  }\n}\n\nfunction createRequestExecution(input: {\n  readonly projectId: string\n  readonly requestId: string\n  readonly correlationId: string\n  readonly requestedBy?: AuthorizablePrincipal\n  readonly executionId?: string\n}): ExecutionContext {\n  assertNonEmpty(input.projectId, \"Execution project id\")\n  assertNonEmpty(input.requestId, \"Execution request id\")\n  assertNonEmpty(input.correlationId, \"Execution correlation id\")\n  const id = input.executionId ?? `exec_${randomUUID()}`\n  assertNonEmpty(id, \"Execution id\")\n  return freezeExecution({\n    id,\n    projectId: input.projectId,\n    ...(input.requestedBy === undefined ? {} : { requestedBy: input.requestedBy }),\n    executor: Object.freeze({ type: \"request\", requestId: input.requestId }),\n    source: Object.freeze({ type: \"http\", requestId: input.requestId }),\n    correlationId: input.correlationId,\n  })\n}\n\nfunction freezeExecution(execution: ExecutionContext): ExecutionContext {\n  assertNonEmpty(execution.id, \"Execution id\")\n  assertNonEmpty(execution.projectId, \"Execution project id\")\n  assertNonEmpty(execution.correlationId, \"Execution correlation id\")\n  return Object.freeze(execution)\n}\n\nfunction snapshotExecutionSource(source: ExecutionSource): ExecutionSource {\n  const field = sourceIdentifier(source)\n  assertNonEmpty(field.value, field.label)\n  if (source.type === \"datasetVersion\") {\n    assertNonEmpty(source.datasetId, \"Execution source dataset id\")\n  }\n  return Object.freeze({ ...source })\n}\n\nfunction sourceIdentifier(source: ExecutionSource): {\n  readonly label: string\n  readonly value: string\n} {\n  switch (source.type) {\n    case \"ontologyCommit\":\n      return { label: \"Execution source commit id\", value: source.commitId }\n    case \"http\":\n      return { label: \"Execution source request id\", value: source.requestId }\n    case \"webhook\":\n      return { label: \"Execution source delivery id\", value: source.deliveryId }\n    case \"schedule\":\n    case \"event\":\n      return { label: \"Execution source event id\", value: source.eventId }\n    case \"datasetVersion\":\n      return { label: \"Execution source dataset version id\", value: source.versionId }\n    case \"execution\":\n      return { label: \"Execution source execution id\", value: source.executionId }\n  }\n}\n\nfunction asAuthorizablePrincipal(\n  principal: AuthorizationContext[\"principal\"]\n): AuthorizablePrincipal {\n  if (principal.type !== \"user\" && principal.type !== \"serviceAccount\") {\n    throw new Error(`[Sixb] Principal type '${principal.type}' cannot hold runtime authorization.`)\n  }\n  assertNonEmpty(principal.id, \"Execution principal id\")\n  return Object.freeze({ type: principal.type, id: principal.id })\n}\n\nfunction assertNonEmpty(value: string, label: string): void {\n  if (!value.trim()) {\n    throw new Error(`[Sixb] ${label} must not be empty.`)\n  }\n}\n"
+    "import { randomUUID } from \"node:crypto\"\nimport type { AuthorizationContext } from \"../authorization\"\nimport type { ObjectReadExecutionLimits, SelectedObjectReadScope } from \"../storage\"\nimport {\n  createDelegatedRuntimeAuthorization,\n  createDisabledRuntimeAuthorization,\n  createKernelRuntimeAuthorization,\n  createPrincipalRuntimeAuthorization,\n  type DelegatedActionApplyTarget,\n} from \"./authorization\"\nimport type {\n  AuthorizablePrincipal,\n  AuthorizationRef,\n  ExecutionContext,\n  ExecutionScope,\n  ExecutionSource,\n  KernelOperation,\n} from \"./types\"\n\nexport function createPrincipalRequestScope(input: {\n  readonly projectId: string\n  readonly requestId: string\n  readonly correlationId: string\n  readonly context: AuthorizationContext\n  readonly credential?: Extract<AuthorizationRef, { readonly type: \"principal\" }>[\"credential\"]\n}): ExecutionScope {\n  const execution = createRequestExecution({\n    projectId: input.projectId,\n    requestId: input.requestId,\n    correlationId: input.correlationId,\n    requestedBy: asAuthorizablePrincipal(input.context.principal),\n  })\n\n  return Object.freeze({\n    execution,\n    authorization: createPrincipalRuntimeAuthorization({\n      execution,\n      context: input.context,\n      ...(input.credential === undefined ? {} : { credential: input.credential }),\n    }),\n  })\n}\n\nexport function createDisabledRequestScope(input: {\n  readonly projectId: string\n  readonly requestId: string\n  readonly correlationId: string\n}): ExecutionScope {\n  const execution = createRequestExecution(input)\n  return Object.freeze({\n    execution,\n    authorization: createDisabledRuntimeAuthorization(execution),\n  })\n}\n\n/** Internal request scope carrying only a finite object-read selection. */\nexport function createDelegatedRequestScope(input: {\n  readonly projectId: string\n  readonly requestId: string\n  readonly correlationId: string\n  readonly objectRead: {\n    readonly selection: SelectedObjectReadScope\n    readonly limits: ObjectReadExecutionLimits\n  }\n  readonly actionApply?: readonly DelegatedActionApplyTarget[]\n  readonly delegation?: Extract<AuthorizationRef, { readonly type: \"delegated\" }>[\"delegation\"]\n}): ExecutionScope {\n  const execution = createRequestExecution(input)\n  const actionApply = input.actionApply\n  const delegation = input.delegation\n  return Object.freeze({\n    execution,\n    authorization: createDelegatedRuntimeAuthorization({\n      execution,\n      objectRead: input.objectRead,\n      ...(actionApply === undefined ? {} : { actionApply }),\n      ...(delegation === undefined ? {} : { delegation }),\n    }),\n  })\n}\n\nexport function createKernelScope(input: {\n  readonly projectId: string\n  readonly operation: KernelOperation\n  readonly source: ExecutionSource\n  readonly correlationId?: string\n}): ExecutionScope {\n  const operation = Object.freeze({ ...input.operation })\n  const execution = createKernelExecution({\n    projectId: input.projectId,\n    operation,\n    source: input.source,\n    correlationId: input.correlationId,\n  })\n  return Object.freeze({\n    execution,\n    authorization: createKernelRuntimeAuthorization({ execution, operation }),\n  })\n}\n\nfunction createKernelExecution(input: {\n  readonly projectId: string\n  readonly operation: KernelOperation\n  readonly source: ExecutionSource\n  readonly correlationId?: string\n}): ExecutionContext {\n  const source = snapshotExecutionSource(input.source)\n  assertNestedProvenance(source, input.correlationId)\n  return freezeExecution({\n    id: `exec_${randomUUID()}`,\n    projectId: input.projectId,\n    executor: Object.freeze({ type: \"kernel\", operation: input.operation }),\n    source,\n    correlationId: input.correlationId ?? `corr_${randomUUID()}`,\n  })\n}\n\nfunction assertNestedProvenance(source: ExecutionSource, correlationId: string | undefined): void {\n  if (source.type === \"execution\" && correlationId === undefined) {\n    throw new Error(\"[Sixb] Nested execution must preserve its parent correlation id.\")\n  }\n}\n\nexport function createTestingScope(input: {\n  readonly projectId: string\n  readonly context?: AuthorizationContext\n  readonly executionId?: string\n  readonly requestId?: string\n  readonly correlationId?: string\n}): ExecutionScope {\n  const context = input.context ? withoutSession(input.context) : undefined\n  const requestId = input.requestId ?? `test_request_${randomUUID()}`\n  const execution = createRequestExecution({\n    projectId: input.projectId,\n    requestId,\n    correlationId: input.correlationId ?? `test_correlation_${randomUUID()}`,\n    ...(context === undefined ? {} : { requestedBy: asAuthorizablePrincipal(context.principal) }),\n    executionId: input.executionId,\n  })\n  return Object.freeze({\n    execution,\n    authorization: context\n      ? createPrincipalRuntimeAuthorization({ execution, context })\n      : createDisabledRuntimeAuthorization(execution),\n  })\n}\n\nfunction withoutSession(context: AuthorizationContext): AuthorizationContext {\n  const { sessionId: _sessionId, ...withoutSessionId } = context\n  return withoutSessionId\n}\n\nfunction createRequestExecution(input: {\n  readonly projectId: string\n  readonly requestId: string\n  readonly correlationId: string\n  readonly requestedBy?: AuthorizablePrincipal\n  readonly executionId?: string\n}): ExecutionContext {\n  assertNonEmpty(input.projectId, \"Execution project id\")\n  assertNonEmpty(input.requestId, \"Execution request id\")\n  assertNonEmpty(input.correlationId, \"Execution correlation id\")\n  const id = input.executionId ?? `exec_${randomUUID()}`\n  assertNonEmpty(id, \"Execution id\")\n  return freezeExecution({\n    id,\n    projectId: input.projectId,\n    ...(input.requestedBy === undefined ? {} : { requestedBy: input.requestedBy }),\n    executor: Object.freeze({ type: \"request\", requestId: input.requestId }),\n    source: Object.freeze({ type: \"http\", requestId: input.requestId }),\n    correlationId: input.correlationId,\n  })\n}\n\nfunction freezeExecution(execution: ExecutionContext): ExecutionContext {\n  assertNonEmpty(execution.id, \"Execution id\")\n  assertNonEmpty(execution.projectId, \"Execution project id\")\n  assertNonEmpty(execution.correlationId, \"Execution correlation id\")\n  return Object.freeze(execution)\n}\n\nfunction snapshotExecutionSource(source: ExecutionSource): ExecutionSource {\n  const field = sourceIdentifier(source)\n  assertNonEmpty(field.value, field.label)\n  if (source.type === \"datasetVersion\") {\n    assertNonEmpty(source.datasetId, \"Execution source dataset id\")\n  }\n  return Object.freeze({ ...source })\n}\n\nfunction sourceIdentifier(source: ExecutionSource): {\n  readonly label: string\n  readonly value: string\n} {\n  switch (source.type) {\n    case \"ontologyCommit\":\n      return { label: \"Execution source commit id\", value: source.commitId }\n    case \"http\":\n      return { label: \"Execution source request id\", value: source.requestId }\n    case \"webhook\":\n      return { label: \"Execution source delivery id\", value: source.deliveryId }\n    case \"schedule\":\n    case \"event\":\n      return { label: \"Execution source event id\", value: source.eventId }\n    case \"datasetVersion\":\n      return { label: \"Execution source dataset version id\", value: source.versionId }\n    case \"execution\":\n      return { label: \"Execution source execution id\", value: source.executionId }\n  }\n}\n\nfunction asAuthorizablePrincipal(\n  principal: AuthorizationContext[\"principal\"]\n): AuthorizablePrincipal {\n  if (principal.type !== \"user\" && principal.type !== \"serviceAccount\") {\n    throw new Error(`[Sixb] Principal type '${principal.type}' cannot hold runtime authorization.`)\n  }\n  assertNonEmpty(principal.id, \"Execution principal id\")\n  return Object.freeze({ type: principal.type, id: principal.id })\n}\n\nfunction assertNonEmpty(value: string, label: string): void {\n  if (!value.trim()) {\n    throw new Error(`[Sixb] ${label} must not be empty.`)\n  }\n}\n"
   ],
-  "mappings": ";;;;;;;;AAAA;AAmBO,SAAS,2BAA2B,CAAC,OAMzB;AAAA,EACjB,MAAM,YAAY,uBAAuB;AAAA,IACvC,WAAW,MAAM;AAAA,IACjB,WAAW,MAAM;AAAA,IACjB,eAAe,MAAM;AAAA,IACrB,aAAa,wBAAwB,MAAM,QAAQ,SAAS;AAAA,EAC9D,CAAC;AAAA,EAED,OAAO,OAAO,OAAO;AAAA,IACnB;AAAA,IACA,eAAe,oCAAoC;AAAA,MACjD;AAAA,MACA,SAAS,MAAM;AAAA,SACX,MAAM,eAAe,YAAY,CAAC,IAAI,EAAE,YAAY,MAAM,WAAW;AAAA,IAC3E,CAAC;AAAA,EACH,CAAC;AAAA;AAGI,SAAS,0BAA0B,CAAC,OAIxB;AAAA,EACjB,MAAM,YAAY,uBAAuB,KAAK;AAAA,EAC9C,OAAO,OAAO,OAAO;AAAA,IACnB;AAAA,IACA,eAAe,mCAAmC,SAAS;AAAA,EAC7D,CAAC;AAAA;AAII,SAAS,2BAA2B,CAAC,OAUzB;AAAA,EACjB,MAAM,YAAY,uBAAuB,KAAK;AAAA,EAC9C,MAAM,cAAc,MAAM;AAAA,EAC1B,MAAM,aAAa,MAAM;AAAA,EACzB,OAAO,OAAO,OAAO;AAAA,IACnB;AAAA,IACA,eAAe,oCAAoC;AAAA,MACjD;AAAA,MACA,YAAY,MAAM;AAAA,SACd,gBAAgB,YAAY,CAAC,IAAI,EAAE,YAAY;AAAA,SAC/C,eAAe,YAAY,CAAC,IAAI,EAAE,WAAW;AAAA,IACnD,CAAC;AAAA,EACH,CAAC;AAAA;AA6CI,SAAS,kBAAkB,CAAC,OAMhB;AAAA,EACjB,MAAM,UAAU,MAAM,UAAU,eAAe,MAAM,OAAO,IAAI;AAAA,EAChE,MAAM,YAAY,MAAM,aAAa,gBAAgB,WAAW;AAAA,EAChE,MAAM,YAAY,uBAAuB;AAAA,IACvC,WAAW,MAAM;AAAA,IACjB;AAAA,IACA,eAAe,MAAM,iBAAiB,oBAAoB,WAAW;AAAA,OACjE,YAAY,YAAY,CAAC,IAAI,EAAE,aAAa,wBAAwB,QAAQ,SAAS,EAAE;AAAA,IAC3F,aAAa,MAAM;AAAA,EACrB,CAAC;AAAA,EACD,OAAO,OAAO,OAAO;AAAA,IACnB;AAAA,IACA,eAAe,UACX,oCAAoC,EAAE,WAAW,QAAQ,CAAC,IAC1D,mCAAmC,SAAS;AAAA,EAClD,CAAC;AAAA;AAGH,SAAS,cAAc,CAAC,SAAqD;AAAA,EAC3E,OAAO;AAAA,IACL,WAAW,QAAQ;AAAA,IACnB,UAAU,QAAQ;AAAA,IAClB,SAAS,QAAQ;AAAA,IACjB,QAAQ,QAAQ;AAAA,EAClB;AAAA;AAGF,SAAS,sBAAsB,CAAC,OAMX;AAAA,EACnB,eAAe,MAAM,WAAW,sBAAsB;AAAA,EACtD,eAAe,MAAM,WAAW,sBAAsB;AAAA,EACtD,eAAe,MAAM,eAAe,0BAA0B;AAAA,EAC9D,MAAM,KAAK,MAAM,eAAe,QAAQ,WAAW;AAAA,EACnD,eAAe,IAAI,cAAc;AAAA,EACjC,OAAO,gBAAgB;AAAA,IACrB;AAAA,IACA,WAAW,MAAM;AAAA,OACb,MAAM,gBAAgB,YAAY,CAAC,IAAI,EAAE,aAAa,MAAM,YAAY;AAAA,IAC5E,UAAU,OAAO,OAAO,EAAE,MAAM,WAAW,WAAW,MAAM,UAAU,CAAC;AAAA,IACvE,QAAQ,OAAO,OAAO,EAAE,MAAM,QAAQ,WAAW,MAAM,UAAU,CAAC;AAAA,IAClE,eAAe,MAAM;AAAA,EACvB,CAAC;AAAA;AAGH,SAAS,eAAe,CAAC,WAA+C;AAAA,EACtE,eAAe,UAAU,IAAI,cAAc;AAAA,EAC3C,eAAe,UAAU,WAAW,sBAAsB;AAAA,EAC1D,eAAe,UAAU,eAAe,0BAA0B;AAAA,EAClE,OAAO,OAAO,OAAO,SAAS;AAAA;AAiChC,SAAS,uBAAuB,CAC9B,WACuB;AAAA,EACvB,IAAI,UAAU,SAAS,UAAU,UAAU,SAAS,kBAAkB;AAAA,IACpE,MAAM,IAAI,MAAM,0BAA0B,UAAU,0CAA0C;AAAA,EAChG;AAAA,EACA,eAAe,UAAU,IAAI,wBAAwB;AAAA,EACrD,OAAO,OAAO,OAAO,EAAE,MAAM,UAAU,MAAM,IAAI,UAAU,GAAG,CAAC;AAAA;AAGjE,SAAS,cAAc,CAAC,OAAe,OAAqB;AAAA,EAC1D,IAAI,CAAC,MAAM,KAAK,GAAG;AAAA,IACjB,MAAM,IAAI,MAAM,UAAU,0BAA0B;AAAA,EACtD;AAAA;",
-  "debugId": "D67EDA8B3AA3264264756E2164756E21",
+  "mappings": ";;;;;;;;AAAA;AAmBO,SAAS,2BAA2B,CAAC,OAMzB;AAAA,EACjB,MAAM,YAAY,uBAAuB;AAAA,IACvC,WAAW,MAAM;AAAA,IACjB,WAAW,MAAM;AAAA,IACjB,eAAe,MAAM;AAAA,IACrB,aAAa,wBAAwB,MAAM,QAAQ,SAAS;AAAA,EAC9D,CAAC;AAAA,EAED,OAAO,OAAO,OAAO;AAAA,IACnB;AAAA,IACA,eAAe,oCAAoC;AAAA,MACjD;AAAA,MACA,SAAS,MAAM;AAAA,SACX,MAAM,eAAe,YAAY,CAAC,IAAI,EAAE,YAAY,MAAM,WAAW;AAAA,IAC3E,CAAC;AAAA,EACH,CAAC;AAAA;AAGI,SAAS,0BAA0B,CAAC,OAIxB;AAAA,EACjB,MAAM,YAAY,uBAAuB,KAAK;AAAA,EAC9C,OAAO,OAAO,OAAO;AAAA,IACnB;AAAA,IACA,eAAe,mCAAmC,SAAS;AAAA,EAC7D,CAAC;AAAA;AAII,SAAS,2BAA2B,CAAC,OAUzB;AAAA,EACjB,MAAM,YAAY,uBAAuB,KAAK;AAAA,EAC9C,MAAM,cAAc,MAAM;AAAA,EAC1B,MAAM,aAAa,MAAM;AAAA,EACzB,OAAO,OAAO,OAAO;AAAA,IACnB;AAAA,IACA,eAAe,oCAAoC;AAAA,MACjD;AAAA,MACA,YAAY,MAAM;AAAA,SACd,gBAAgB,YAAY,CAAC,IAAI,EAAE,YAAY;AAAA,SAC/C,eAAe,YAAY,CAAC,IAAI,EAAE,WAAW;AAAA,IACnD,CAAC;AAAA,EACH,CAAC;AAAA;AA6CI,SAAS,kBAAkB,CAAC,OAMhB;AAAA,EACjB,MAAM,UAAU,MAAM,UAAU,eAAe,MAAM,OAAO,IAAI;AAAA,EAChE,MAAM,YAAY,MAAM,aAAa,gBAAgB,WAAW;AAAA,EAChE,MAAM,YAAY,uBAAuB;AAAA,IACvC,WAAW,MAAM;AAAA,IACjB;AAAA,IACA,eAAe,MAAM,iBAAiB,oBAAoB,WAAW;AAAA,OACjE,YAAY,YAAY,CAAC,IAAI,EAAE,aAAa,wBAAwB,QAAQ,SAAS,EAAE;AAAA,IAC3F,aAAa,MAAM;AAAA,EACrB,CAAC;AAAA,EACD,OAAO,OAAO,OAAO;AAAA,IACnB;AAAA,IACA,eAAe,UACX,oCAAoC,EAAE,WAAW,QAAQ,CAAC,IAC1D,mCAAmC,SAAS;AAAA,EAClD,CAAC;AAAA;AAGH,SAAS,cAAc,CAAC,SAAqD;AAAA,EAC3E,QAAQ,WAAW,eAAe,qBAAqB;AAAA,EACvD,OAAO;AAAA;AAGT,SAAS,sBAAsB,CAAC,OAMX;AAAA,EACnB,eAAe,MAAM,WAAW,sBAAsB;AAAA,EACtD,eAAe,MAAM,WAAW,sBAAsB;AAAA,EACtD,eAAe,MAAM,eAAe,0BAA0B;AAAA,EAC9D,MAAM,KAAK,MAAM,eAAe,QAAQ,WAAW;AAAA,EACnD,eAAe,IAAI,cAAc;AAAA,EACjC,OAAO,gBAAgB;AAAA,IACrB;AAAA,IACA,WAAW,MAAM;AAAA,OACb,MAAM,gBAAgB,YAAY,CAAC,IAAI,EAAE,aAAa,MAAM,YAAY;AAAA,IAC5E,UAAU,OAAO,OAAO,EAAE,MAAM,WAAW,WAAW,MAAM,UAAU,CAAC;AAAA,IACvE,QAAQ,OAAO,OAAO,EAAE,MAAM,QAAQ,WAAW,MAAM,UAAU,CAAC;AAAA,IAClE,eAAe,MAAM;AAAA,EACvB,CAAC;AAAA;AAGH,SAAS,eAAe,CAAC,WAA+C;AAAA,EACtE,eAAe,UAAU,IAAI,cAAc;AAAA,EAC3C,eAAe,UAAU,WAAW,sBAAsB;AAAA,EAC1D,eAAe,UAAU,eAAe,0BAA0B;AAAA,EAClE,OAAO,OAAO,OAAO,SAAS;AAAA;AAiChC,SAAS,uBAAuB,CAC9B,WACuB;AAAA,EACvB,IAAI,UAAU,SAAS,UAAU,UAAU,SAAS,kBAAkB;AAAA,IACpE,MAAM,IAAI,MAAM,0BAA0B,UAAU,0CAA0C;AAAA,EAChG;AAAA,EACA,eAAe,UAAU,IAAI,wBAAwB;AAAA,EACrD,OAAO,OAAO,OAAO,EAAE,MAAM,UAAU,MAAM,IAAI,UAAU,GAAG,CAAC;AAAA;AAGjE,SAAS,cAAc,CAAC,OAAe,OAAqB;AAAA,EAC1D,IAAI,CAAC,MAAM,KAAK,GAAG;AAAA,IACjB,MAAM,IAAI,MAAM,UAAU,0BAA0B;AAAA,EACtD;AAAA;",
+  "debugId": "1E19649F1CE57F6964756E2164756E21",
   "names": []
 }

package/dist/{chunk-vp3z1ckh.js → chunk-kyzq4wy9.js}

@@ -3,29 +3,29 @@ import {
   createSixbError2,
   captureSixbFailure2,
   isSixbError2
-} from "./chunk-6fsr7y93.js";
+} from "./chunk-8mx7qw3y.js";
 import {
   reportVectorIndexingFailure
-} from "./chunk-vjcd8d27.js";
+} from "./chunk-fa02jy15.js";
 import {
   createKernelRuntimeAuthorization
-} from "./chunk-5be2ath4.js";
+} from "./chunk-y7rqfrgg.js";
 import {
   estimateModelCall
-} from "./chunk-s7ftxrdr.js";
+} from "./chunk-29yx306f.js";
 import {
   vectorConfiguration,
   vectorSources,
   normalizeVector2,
   VECTOR_INDEXING_FAILURE_CODES2
-} from "./chunk-5yd8cchh.js";
+} from "./chunk-j2bp5ryw.js";
 import {
   ModelExecutionSession
-} from "./chunk-52c5zb0z.js";
+} from "./chunk-wwdfe68s.js";
 import {
   executionRecordInputFromRuntime,
   ensureExecutionRecord2
-} from "./chunk-a7er86jd.js";
+} from "./chunk-nre82s12.js";
 import {
   MaterializationConflictError2
 } from "./chunk-96yw3pwd.js";

package/dist/{chunk-wr8qp979.js → chunk-m427qgq0.js}

@@ -1,7 +1,11 @@
 // @bun
-import {
-  EditBatchError2
-} from "./chunk-zvx7h87b.js";
+// src/edits/errors.ts
+class EditBatchError2 extends Error {
+  constructor(message) {
+    super(message);
+    this.name = "EditBatchError";
+  }
+}
 // src/edits/normalize.ts
 function lowerEditBatch2(batch) {
   return batch.operations.map((operation, index) => lowerEditOperation(operation, `op:${index}`));
@@ -71,6 +75,6 @@ function linkRef(operation) {
     target: objectRef(operation.target)
   };
 }
-export { lowerEditBatch2 };
+export { EditBatchError2, lowerEditBatch2 };
 
-//# debugId=3E3A4925005DA0FA64756E2164756E21
+//# debugId=71829CB23DF77C1F64756E2164756E21

package/dist/{chunk-wr8qp979.js.map → chunk-m427qgq0.js.map}

@@ -1,10 +1,11 @@
 {
   "version": 3,
-  "sources": ["../src/edits/normalize.ts"],
+  "sources": ["../src/edits/errors.ts", "../src/edits/normalize.ts"],
   "sourcesContent": [
+    "export class EditBatchError extends Error {\n  constructor(message: string) {\n    super(message)\n    this.name = \"EditBatchError\"\n  }\n}\n",
     "import type { OntologyEditOperation } from \"../materialization/model\"\nimport { EditBatchError } from \"./errors\"\nimport type { EditBatch, EditObjectRef, EditOperation } from \"./types\"\n\n/**\n * Lowers an authored batch onto the canonical Materializer operation union.\n *\n * This is a mechanical translation. The recorder validates what a handler authored, and the\n * Materializer validates refs, property values, and Ontology semantics when it commits, so nothing\n * is re-checked here.\n *\n * Operation ids carry the authoring ordinal, so repeated operations on one entity keep their\n * sequence and every outcome maps back to the operation that produced it.\n */\nexport function lowerEditBatch(batch: EditBatch): readonly OntologyEditOperation[] {\n  return batch.operations.map((operation, index) => lowerEditOperation(operation, `op:${index}`))\n}\n\nfunction lowerEditOperation(operation: EditOperation, id: string): OntologyEditOperation {\n  switch (operation.kind) {\n    case \"object.create\":\n      return {\n        id,\n        kind: \"object.create\",\n        ref: objectRef(operation),\n        properties: operation.properties,\n      }\n    case \"object.update\":\n      return {\n        id,\n        kind: \"object.patch\",\n        ref: objectRef(operation),\n        set: operation.properties,\n        unset: [],\n        reset: [],\n      }\n    case \"object.unset\":\n      return {\n        id,\n        kind: \"object.patch\",\n        ref: objectRef(operation),\n        set: {},\n        unset: operation.propertyIds,\n        reset: [],\n      }\n    case \"object.reset\":\n      return {\n        id,\n        kind: \"object.patch\",\n        ref: objectRef(operation),\n        set: {},\n        unset: [],\n        reset: operation.propertyIds,\n      }\n    case \"object.delete\":\n      return { id, kind: \"object.delete\", ref: objectRef(operation) }\n    case \"object.restore\":\n      return { id, kind: \"object.restore\", ref: objectRef(operation) }\n    case \"link.upsert\":\n      return {\n        id,\n        kind: \"link.upsert\",\n        ref: linkRef(operation),\n        ...(operation.properties !== undefined ? { properties: operation.properties } : {}),\n      }\n    case \"link.delete\":\n      return { id, kind: \"link.delete\", ref: linkRef(operation) }\n    case \"link.reset\":\n      return { id, kind: \"link.reset\", ref: linkRef(operation) }\n    default:\n      throw new EditBatchError(\n        `[Sixb] Unknown EditBatch operation kind '${String((operation as { kind?: unknown }).kind)}'.`\n      )\n  }\n}\n\nfunction objectRef(operation: { objectTypeId: string; primaryId: string }) {\n  return { objectTypeId: operation.objectTypeId, primaryId: operation.primaryId }\n}\n\nfunction linkRef(operation: { source: EditObjectRef; linkId: string; target: EditObjectRef }) {\n  return {\n    source: objectRef(operation.source),\n    linkId: operation.linkId,\n    target: objectRef(operation.target),\n  }\n}\n"
   ],
-  "mappings": ";;;;;AAcO,SAAS,eAAc,CAAC,OAAoD;AAAA,EACjF,OAAO,MAAM,WAAW,IAAI,CAAC,WAAW,UAAU,mBAAmB,WAAW,MAAM,OAAO,CAAC;AAAA;AAGhG,SAAS,kBAAkB,CAAC,WAA0B,IAAmC;AAAA,EACvF,QAAQ,UAAU;AAAA,SACX;AAAA,MACH,OAAO;AAAA,QACL;AAAA,QACA,MAAM;AAAA,QACN,KAAK,UAAU,SAAS;AAAA,QACxB,YAAY,UAAU;AAAA,MACxB;AAAA,SACG;AAAA,MACH,OAAO;AAAA,QACL;AAAA,QACA,MAAM;AAAA,QACN,KAAK,UAAU,SAAS;AAAA,QACxB,KAAK,UAAU;AAAA,QACf,OAAO,CAAC;AAAA,QACR,OAAO,CAAC;AAAA,MACV;AAAA,SACG;AAAA,MACH,OAAO;AAAA,QACL;AAAA,QACA,MAAM;AAAA,QACN,KAAK,UAAU,SAAS;AAAA,QACxB,KAAK,CAAC;AAAA,QACN,OAAO,UAAU;AAAA,QACjB,OAAO,CAAC;AAAA,MACV;AAAA,SACG;AAAA,MACH,OAAO;AAAA,QACL;AAAA,QACA,MAAM;AAAA,QACN,KAAK,UAAU,SAAS;AAAA,QACxB,KAAK,CAAC;AAAA,QACN,OAAO,CAAC;AAAA,QACR,OAAO,UAAU;AAAA,MACnB;AAAA,SACG;AAAA,MACH,OAAO,EAAE,IAAI,MAAM,iBAAiB,KAAK,UAAU,SAAS,EAAE;AAAA,SAC3D;AAAA,MACH,OAAO,EAAE,IAAI,MAAM,kBAAkB,KAAK,UAAU,SAAS,EAAE;AAAA,SAC5D;AAAA,MACH,OAAO;AAAA,QACL;AAAA,QACA,MAAM;AAAA,QACN,KAAK,QAAQ,SAAS;AAAA,WAClB,UAAU,eAAe,YAAY,EAAE,YAAY,UAAU,WAAW,IAAI,CAAC;AAAA,MACnF;AAAA,SACG;AAAA,MACH,OAAO,EAAE,IAAI,MAAM,eAAe,KAAK,QAAQ,SAAS,EAAE;AAAA,SACvD;AAAA,MACH,OAAO,EAAE,IAAI,MAAM,cAAc,KAAK,QAAQ,SAAS,EAAE;AAAA;AAAA,MAEzD,MAAM,IAAI,gBACR,4CAA4C,OAAQ,UAAiC,IAAI,KAC3F;AAAA;AAAA;AAIN,SAAS,SAAS,CAAC,WAAwD;AAAA,EACzE,OAAO,EAAE,cAAc,UAAU,cAAc,WAAW,UAAU,UAAU;AAAA;AAGhF,SAAS,OAAO,CAAC,WAA6E;AAAA,EAC5F,OAAO;AAAA,IACL,QAAQ,UAAU,UAAU,MAAM;AAAA,IAClC,QAAQ,UAAU;AAAA,IAClB,QAAQ,UAAU,UAAU,MAAM;AAAA,EACpC;AAAA;",
-  "debugId": "3E3A4925005DA0FA64756E2164756E21",
+  "mappings": ";;AAAO,MAAM,wBAAuB,MAAM;AAAA,EACxC,WAAW,CAAC,SAAiB;AAAA,IAC3B,MAAM,OAAO;AAAA,IACb,KAAK,OAAO;AAAA;AAEhB;;ACSO,SAAS,eAAc,CAAC,OAAoD;AAAA,EACjF,OAAO,MAAM,WAAW,IAAI,CAAC,WAAW,UAAU,mBAAmB,WAAW,MAAM,OAAO,CAAC;AAAA;AAGhG,SAAS,kBAAkB,CAAC,WAA0B,IAAmC;AAAA,EACvF,QAAQ,UAAU;AAAA,SACX;AAAA,MACH,OAAO;AAAA,QACL;AAAA,QACA,MAAM;AAAA,QACN,KAAK,UAAU,SAAS;AAAA,QACxB,YAAY,UAAU;AAAA,MACxB;AAAA,SACG;AAAA,MACH,OAAO;AAAA,QACL;AAAA,QACA,MAAM;AAAA,QACN,KAAK,UAAU,SAAS;AAAA,QACxB,KAAK,UAAU;AAAA,QACf,OAAO,CAAC;AAAA,QACR,OAAO,CAAC;AAAA,MACV;AAAA,SACG;AAAA,MACH,OAAO;AAAA,QACL;AAAA,QACA,MAAM;AAAA,QACN,KAAK,UAAU,SAAS;AAAA,QACxB,KAAK,CAAC;AAAA,QACN,OAAO,UAAU;AAAA,QACjB,OAAO,CAAC;AAAA,MACV;AAAA,SACG;AAAA,MACH,OAAO;AAAA,QACL;AAAA,QACA,MAAM;AAAA,QACN,KAAK,UAAU,SAAS;AAAA,QACxB,KAAK,CAAC;AAAA,QACN,OAAO,CAAC;AAAA,QACR,OAAO,UAAU;AAAA,MACnB;AAAA,SACG;AAAA,MACH,OAAO,EAAE,IAAI,MAAM,iBAAiB,KAAK,UAAU,SAAS,EAAE;AAAA,SAC3D;AAAA,MACH,OAAO,EAAE,IAAI,MAAM,kBAAkB,KAAK,UAAU,SAAS,EAAE;AAAA,SAC5D;AAAA,MACH,OAAO;AAAA,QACL;AAAA,QACA,MAAM;AAAA,QACN,KAAK,QAAQ,SAAS;AAAA,WAClB,UAAU,eAAe,YAAY,EAAE,YAAY,UAAU,WAAW,IAAI,CAAC;AAAA,MACnF;AAAA,SACG;AAAA,MACH,OAAO,EAAE,IAAI,MAAM,eAAe,KAAK,QAAQ,SAAS,EAAE;AAAA,SACvD;AAAA,MACH,OAAO,EAAE,IAAI,MAAM,cAAc,KAAK,QAAQ,SAAS,EAAE;AAAA;AAAA,MAEzD,MAAM,IAAI,gBACR,4CAA4C,OAAQ,UAAiC,IAAI,KAC3F;AAAA;AAAA;AAIN,SAAS,SAAS,CAAC,WAAwD;AAAA,EACzE,OAAO,EAAE,cAAc,UAAU,cAAc,WAAW,UAAU,UAAU;AAAA;AAGhF,SAAS,OAAO,CAAC,WAA6E;AAAA,EAC5F,OAAO;AAAA,IACL,QAAQ,UAAU,UAAU,MAAM;AAAA,IAClC,QAAQ,UAAU;AAAA,IAClB,QAAQ,UAAU,UAAU,MAAM;AAAA,EACpC;AAAA;",
+  "debugId": "71829CB23DF77C1F64756E2164756E21",
   "names": []
 }

package/dist/{chunk-c2rga5cx.js → chunk-mfs23znk.js}

@@ -1,7 +1,7 @@
 // @bun
 import {
   defineLanguageModel2
-} from "./chunk-s7ftxrdr.js";
+} from "./chunk-29yx306f.js";
 import {
   ModelCatalogUnavailableError2
 } from "./chunk-kyjcwqz6.js";

package/dist/{chunk-e1c18xjx.js → chunk-nq6gpjt7.js}

@@ -2,7 +2,7 @@
 import {
   eventSelectorSpec2,
   buildEventSelectorPredicate2
-} from "./chunk-dfm066qg.js";
+} from "./chunk-yxd3nnqt.js";
 import {
   ScheduleValidationError2,
   createCronMatcher2
@@ -368,9 +368,6 @@ function assertEventSource(source) {
     case "rules":
       assertNonEmpty(source.ruleId ?? "", "event source ruleId");
       return;
-    case "actions":
-      assertNonEmpty(source.actionId ?? "", "event source actionId");
-      return;
     case "datasets":
       assertNonEmpty(source.datasetId ?? "", "event source datasetId");
       return;
@@ -381,7 +378,7 @@ function assertEventSource(source) {
       assertNonEmpty(source.pipelineId ?? "", "event source pipelineId");
       return;
     default:
-      throw new ScheduleValidationError2("Schedule event source must select object, link, rule, action, dataset, sync, or pipeline events.");
+      throw new ScheduleValidationError2("Schedule event source must select object, link, rule, dataset, sync, or pipeline events.");
   }
 }
 function defineSchedule2(id) {
@@ -513,26 +510,6 @@ function buildEventScheduleContext2(event) {
           primaryId: event.payload.subject.primaryId
         }
       };
-    case "action.requested":
-      return {
-        actionId: event.payload.actionId,
-        runId: event.payload.runId,
-        ...actionSubjectContext(event.payload.subject),
-        params: { ...event.payload.params }
-      };
-    case "action.completed":
-      return {
-        actionId: event.payload.actionId,
-        runId: event.payload.runId,
-        ...actionSubjectContext(event.payload.subject)
-      };
-    case "action.failed":
-      return {
-        actionId: event.payload.actionId,
-        runId: event.payload.runId,
-        ...actionSubjectContext(event.payload.subject),
-        error: event.payload.error
-      };
     case "dataset.version.committed":
       return { ...event.payload };
     case "sync.run.finished":
@@ -543,17 +520,6 @@ function buildEventScheduleContext2(event) {
       return null;
   }
 }
-function actionSubjectContext(subject) {
-  if (subject.kind !== "object" || subject.objectTypeId === undefined || subject.primaryId === undefined) {
-    return {};
-  }
-  return {
-    subject: {
-      objectTypeId: subject.objectTypeId,
-      primaryId: subject.primaryId
-    }
-  };
-}
 function fieldsForEvent(event) {
   if (event.topic !== "links") {
     return {};
@@ -620,7 +586,6 @@ function isScheduleReference2(value) {
 var objectEventTypes = new Set(["object.created", "object.updated", "object.deleted"]);
 var linkEventTypes = new Set(["link.created", "link.updated", "link.deleted"]);
 var ruleEventTypes = new Set(["rule.triggered", "rule.resolved"]);
-var actionEventTypes = new Set(["action.requested", "action.completed", "action.failed"]);
 var datasetEventTypes = new Set(["dataset.version.committed"]);
 var syncEventTypes = new Set(["sync.run.finished"]);
 var pipelineEventTypes = new Set(["pipeline.run.finished"]);
@@ -707,9 +672,6 @@ function assertEventSourceShape(value, path, createError) {
     case "rules":
       assertNonEmptyString2(value.ruleId, `${path} ruleId`, createError);
       return;
-    case "actions":
-      assertNonEmptyString2(value.actionId, `${path} actionId`, createError);
-      return;
     case "datasets":
       assertNonEmptyString2(value.datasetId, `${path} datasetId`, createError);
       return;
@@ -722,7 +684,7 @@ function assertEventSourceShape(value, path, createError) {
       assertRunStatus(value.runStatus, path, createError);
       return;
     default:
-      throw createError(`${path} must select object, link, rule, action, dataset, sync, or pipeline events.`);
+      throw createError(`${path} must select object, link, rule, dataset, sync, or pipeline events.`);
   }
 }
 function assertRunStatus(value, path, createError) {
@@ -759,9 +721,6 @@ function validateEventSchedule(schedule, ontology, options) {
     case "rules":
       validateRegisteredSource(schedule, source.ruleId, options.registeredRuleIds, ruleEventTypes, "rule");
       return;
-    case "actions":
-      validateRegisteredSource(schedule, source.actionId, options.registeredActionIds, actionEventTypes, "action");
-      return;
     case "datasets":
       validateRegisteredSource(schedule, source.datasetId, options.registeredDatasetIds, datasetEventTypes, "dataset");
       return;
@@ -864,4 +823,4 @@ function validateConditionPredicate(schedule, propertyIds, predicate, link) {
 }
 export { assertPredicateShape, createPropertyPredicateBuilder, createLinkPredicateBuilder, allPredicates, anyPredicates, notPredicate, defineSchedule2, eventScheduleSubscribedEventTypes2, evaluateEventSchedule2, buildEventScheduleContext2, isScheduleReference2, assertScheduleDefinition2, isScheduleDefinition2, validateSchedulesAtStartup2 };
 
-//# debugId=4282720793B2F7A764756E2164756E21
+//# debugId=7C0C2D81ADFC7E2C64756E2164756E21