@sixb/core 0.1.17 → 0.1.19

package/src/ontology/validation/index.ts

@@ -24,6 +24,7 @@ export {
 } from "./properties"
 export { validateQueryMetadata } from "./query"
 export {
+  assertValidFileRefs,
   isRecord,
   resolveValueTypeRef,
   resolveValueTypeSchema,

package/src/ontology/validation/schema.ts

@@ -1,4 +1,4 @@
-import { isFileRef } from "../../blob-storage/validation"
+import { isFileRef, isValidFileRef } from "../../blob-storage/validation"
 import { withFailureMessage } from "../../errors/failure-message"
 import type { ObjectFieldSchema, Schema, ValueType, ValueTypeRefSchema } from ".."
 import { isDecimalString } from "../decimal"
@@ -201,6 +201,31 @@ export function validateSchemaValue(
   }
 }
 
+/**
+ * Reject a value from a caller that holds a file reference whose `mediaType` is not exactly one
+ * media type, anywhere inside it. Call it where caller input is accepted, after
+ * `validateSchemaValue`; that validator also re-checks stored state, which must keep loading
+ * references written before the rule.
+ */
+export function assertValidFileRefs(value: unknown, path: string): void {
+  if (isFileRef(value)) {
+    if (!isValidFileRef(value)) {
+      throw withFailureMessage(
+        new OntologyValidationError(
+          `[Sixb] Property ${path}.mediaType must be one media type, such as "application/pdf"`
+        ),
+        `Property ${path}.mediaType must be one media type, such as "application/pdf".`
+      )
+    }
+    return
+  }
+  if (Array.isArray(value)) {
+    for (const [index, item] of value.entries()) assertValidFileRefs(item, `${path}[${index}]`)
+  } else if (isRecord(value)) {
+    for (const [key, item] of Object.entries(value)) assertValidFileRefs(item, `${path}.${key}`)
+  }
+}
+
 function validateFieldValue(
   field: ObjectFieldSchema,
   value: unknown,

package/src/queues/in-memory.ts

@@ -3,8 +3,6 @@ import type { SixbErrorCode } from "../errors/types"
 import { QueueError } from "./errors"
 import { IndexedHeap } from "./indexed-heap"
 import type {
-  ActionQueueJobFailureCode,
-  ActionRunRequestedQueueJob,
   AgentQueueJob,
   AgentQueueJobFailureCode,
   ClaimedQueueJob,
@@ -458,10 +456,6 @@ export class InMemoryQueues implements Queues {
     this.store,
     "workflow.runs"
   )
-  readonly actions = new InMemoryQueue<ActionRunRequestedQueueJob, ActionQueueJobFailureCode>(
-    this.store,
-    "action.runs"
-  )
   readonly agents = new InMemoryQueue<AgentQueueJob, AgentQueueJobFailureCode>(
     this.store,
     "agent.runs"

package/src/queues/index.ts

@@ -15,8 +15,6 @@ export type { ProviderScope } from "../provider-scope"
 export { QueueError } from "./errors"
 export { InMemoryQueues } from "./in-memory"
 export type {
-  ActionQueueJobFailureCode,
-  ActionRunRequestedQueueJob,
   AgentAiUsageRecordRequestedQueueJob,
   AgentQueueJob,
   AgentQueueJobFailureCode,

package/src/queues/types.ts

@@ -6,7 +6,6 @@ import type {
 } from "../models/execution/types"
 import type { ProjectionRunFailureCode } from "../projections/types"
 import type { ProviderScope } from "../provider-scope"
-import type { ActionRunFailureCode } from "../storage/action-runs/types"
 import type { AgentRunFailureCode } from "../storage/agents/types"
 import type { PipelineRunFailureCode } from "../storage/pipeline-runs/types"
 import type { SyncRunFailureCode } from "../storage/sync-runs/types"
@@ -48,7 +47,6 @@ export type SyncQueueJobFailureCode = SyncRunFailureCode
 export type PipelineQueueJobFailureCode = PipelineRunFailureCode
 export type ProjectionQueueJobFailureCode = ProjectionRunFailureCode
 export type WorkflowQueueJobFailureCode = WorkflowRunFailureCode
-export type ActionQueueJobFailureCode = ActionRunFailureCode
 export type AgentQueueJobFailureCode = AgentRunFailureCode
 
 export interface ClaimedQueueJob<TQueueJob extends QueueJob = QueueJob> {
@@ -176,14 +174,6 @@ export interface WorkflowRunResumeRequestedQueueJob
 
 export type WorkflowQueueJob = WorkflowRunRequestedQueueJob | WorkflowRunResumeRequestedQueueJob
 
-export interface ActionRunRequestedQueueJob
-  extends QueueJob<
-    "action.run.requested",
-    {
-      readonly runId: string
-    }
-  > {}
-
 /**
  * An agent turn is requested for a thread. The payload points to the durable queued run created
  * with the user message; the worker transitions it to running and installs the delivery's execution
@@ -245,7 +235,6 @@ export interface Queues {
   readonly pipelines: Queue<PipelineRunRequestedQueueJob, PipelineQueueJobFailureCode>
   readonly projections: Queue<ProjectionRunRequestedQueueJob, ProjectionQueueJobFailureCode>
   readonly workflows: Queue<WorkflowQueueJob, WorkflowQueueJobFailureCode>
-  readonly actions: Queue<ActionRunRequestedQueueJob, ActionQueueJobFailureCode>
   readonly agents: Queue<AgentQueueJob, AgentQueueJobFailureCode>
   /** Internal capacity reserved for headless child runs. */
   readonly agentChildren: Queue<SubagentQueueJob, AgentQueueJobFailureCode>

package/src/runtime/create.ts

@@ -4,7 +4,12 @@ import type { AgentToolDefinition } from "../agents"
 import { assertNoAgentDefinitions } from "../agents/retired-config"
 import type { SixbAuthConfig } from "../auth"
 import type { BlobStorage } from "../blob-storage"
-import { discoverOntologySources, discoverProjectDefinitions } from "../bootstrap"
+import {
+  discoverAgentSkills,
+  discoverOntologyFiles,
+  discoverProjectInstructions,
+} from "../bootstrap/agent-context"
+import { discoverOntologySources, discoverProjectDefinitions } from "../bootstrap/discovery"
 import type { Broker } from "../broker"
 import type { ConnectorConnectionOptions, ConnectorDefinition } from "../connectors/types"
 import type { DatasetDefinition } from "../datasets"
@@ -20,7 +25,12 @@ import type { Queues } from "../queues"
 import type { RuleDefinition } from "../rules"
 import type { SandboxFactory } from "../sandboxes"
 import type { ScheduleDefinition } from "../schedules"
-import type { GroupDefinition, MembershipPolicyDefinition, RoleDefinition } from "../security"
+import type {
+  GroupDefinition,
+  MarkingDefinition,
+  MembershipPolicyDefinition,
+  RoleDefinition,
+} from "../security"
 import type { ParamsConfig } from "../shared/params/types"
 import type { ShareDefinition } from "../shares"
 import type { Storage } from "../storage"
@@ -32,6 +42,13 @@ import type { OntologySource } from "./types"
 
 export interface CreateSixbOptions<in out TParams extends ParamsConfig = ParamsConfig> {
   id?: string
+  /** BCP 47 language of the project, such as `"fr-FR"`. Defaults to `"en"`. */
+  locale?: string
+  /**
+   * IANA time zone of the project, such as `"Europe/Paris"`. Defaults to `"UTC"`. Cron schedules
+   * without their own time zone and agent runs use it.
+   */
+  timeZone?: string
   broker: Broker
   storage: Storage
   lakeStorage: LakeStorage
@@ -63,6 +80,7 @@ export interface CreateSixbOptions<in out TParams extends ParamsConfig = ParamsC
   projections?: readonly ProjectionDefinition[]
   rules?: readonly RuleDefinition[]
   workflows?: readonly WorkflowDefinition[]
+  markings?: readonly MarkingDefinition[]
   groups?: readonly GroupDefinition[]
   roles?: readonly RoleDefinition[]
   membershipPolicies?: readonly MembershipPolicyDefinition[]
@@ -78,7 +96,8 @@ export interface CreateSixbOptions<in out TParams extends ParamsConfig = ParamsC
  * The host auto-discovers exported definitions from `ontology/`, `actions/`, `datasets/`,
  * `connectors/`, `syncs/`, `schedules/`, `pipelines/`, `projections/`,
  * `rules/`, `workflows/`, `shares/`, and `security/{groups,roles,policies}/`
- * relative to `projectRoot`.
+ * relative to `projectRoot`, along with the Agent's `skills/`, `SIXB.md`, and the docs and scripts
+ * under `ontology/`.
  */
 export async function createSixb<const TParams extends ParamsConfig = ParamsConfig>(
   options: CreateSixbOptions<TParams>
@@ -87,7 +106,7 @@ export async function createSixb<const TParams extends ParamsConfig = ParamsConf
   const projectRoot = resolve(options.projectRoot ?? process.cwd())
 
   const discoveredOntology = await discoverOntologySources(projectRoot)
-  const allSources = [...(options.ontologies ?? []), ...discoveredOntology]
+  const allSources = [...(options.ontologies ?? []), ...discoveredOntology.sources]
 
   if (allSources.length === 0) {
     throw new RuntimeError(
@@ -96,12 +115,17 @@ export async function createSixb<const TParams extends ParamsConfig = ParamsConf
   }
 
   const definitions = await discoverProjectDefinitions(projectRoot)
+  const skills = await discoverAgentSkills(projectRoot)
+  const instructions = await discoverProjectInstructions(projectRoot)
+  const ontologyFiles = await discoverOntologyFiles(projectRoot)
 
   // Explicit definitions come first so local setup can override ordering while duplicate ids are
   // still rejected by the SixbHost constructor. Every family merges — `actions` and `projections`
   // used to *replace* discovery instead, silently and undocumented.
   return new SixbHost<TParams>({
     id: options.id,
+    locale: options.locale,
+    timeZone: options.timeZone,
     ontology: allSources,
     broker: options.broker,
     storage: options.storage,
@@ -124,11 +148,17 @@ export async function createSixb<const TParams extends ParamsConfig = ParamsConf
     projections: [...(options.projections ?? []), ...definitions.projections],
     rules: [...(options.rules ?? []), ...definitions.rules],
     workflows: [...(options.workflows ?? []), ...definitions.workflows],
+    markings: [...(options.markings ?? []), ...definitions.markings],
     groups: [...(options.groups ?? []), ...definitions.groups],
     roles: [...(options.roles ?? []), ...definitions.roles],
     membershipPolicies: [...(options.membershipPolicies ?? []), ...definitions.membershipPolicies],
     models: options.models,
     tools: options.tools,
+    agent: {
+      skills,
+      ...(instructions === undefined ? {} : { instructions }),
+      ontologyDocs: { modules: discoveredOntology.modules, ...ontologyFiles },
+    },
     shares: [...(options.shares ?? []), ...definitions.shares],
     auth: options.auth,
   })

package/src/runtime/definitions.ts

@@ -1,5 +1,5 @@
 import type { ActionDefinitionCatalog } from "../actions"
-import type { AgentToolCatalog } from "../agents"
+import type { AgentDefinitions, AgentToolCatalog } from "../agents"
 import type { ConnectorDefinition } from "../connectors"
 import type { DatasetDefinition } from "../datasets"
 import type { ModelCatalog } from "../models"
@@ -24,6 +24,8 @@ export interface SixbDefinitions {
   readonly ontology: OntologyDefinitionCatalog
   readonly actions: ActionDefinitionCatalog
   readonly tools: AgentToolCatalog
+  /** The project files the Agent reads: `skills/`, `SIXB.md`, and the docs of `ontology/`. */
+  readonly agent: AgentDefinitions
   readonly connectors: DefinitionCatalog<ConnectorDefinition>
   readonly datasets: DefinitionCatalog<DatasetDefinition>
   /** Absent until a project configures `models` in createSixb(). */

package/src/runtime/host.ts

@@ -6,8 +6,9 @@
  */
 
 import { resolve } from "node:path"
+import { ActionRunExecutor, registerActionRunExecutor } from "../actions/run/executor"
 import type { ActionDefinition } from "../actions/types"
-import type { AgentToolDefinition } from "../agents"
+import type { AgentDefinitionsInput, AgentToolDefinition } from "../agents"
 import {
   AuthRuntime,
   AuthRuntimeError,
@@ -74,6 +75,7 @@ import { type SchedulerController, SchedulerRuntime } from "../scheduler"
 import type { ScheduleDefinition } from "../schedules"
 import type {
   GroupDefinition,
+  MarkingDefinition,
   MembershipPolicyDefinition,
   RoleDefinition,
   SecurityDefinitionCatalog,
@@ -86,6 +88,13 @@ import type { RegisteredWebhook } from "../webhooks"
 import { WebhookRegistry, WebhookValidationError } from "../webhooks"
 import type { WorkflowDefinition } from "../workflows"
 import type { SixbDefinitions } from "./definitions"
+import { RuntimeError } from "./errors"
+import {
+  canonicalLocale,
+  canonicalTimeZone,
+  DEFAULT_PROJECT_LOCALE,
+  DEFAULT_PROJECT_TIME_ZONE,
+} from "./locale"
 import {
   createOntologyMutationRuntime,
   registerOntologyMutationRuntime,
@@ -98,6 +107,10 @@ import type { OntologySource, SixbHostContext, SixbRuntimeContext } from "./type
 
 export interface SixbHostOptions<in out TParams extends ParamsConfig = ParamsConfig> {
   id?: string
+  /** BCP 47 language of the project. Defaults to `"en"`. */
+  locale?: string
+  /** IANA time zone of the project. Defaults to `"UTC"`. */
+  timeZone?: string
   ontology: readonly OntologySource[]
   broker: Broker
   storage: Storage
@@ -129,6 +142,9 @@ export interface SixbHostOptions<in out TParams extends ParamsConfig = ParamsCon
   models?: ModelCatalogInput
   /** Project tools available to Agent runtimes. */
   tools?: readonly AgentToolDefinition[]
+  /** The project files the Agent reads. createSixb() discovers them. */
+  agent?: AgentDefinitionsInput
+  markings?: readonly MarkingDefinition[]
   groups?: readonly GroupDefinition[]
   roles?: readonly RoleDefinition[]
   membershipPolicies?: readonly MembershipPolicyDefinition[]
@@ -141,6 +157,10 @@ export interface SixbHostOptions<in out TParams extends ParamsConfig = ParamsCon
 // return `SixbHost` that returns `new SixbHost(options)`.
 export class SixbHost<in out TParams extends ParamsConfig = ParamsConfig> {
   readonly projectId: string
+  /** Canonical BCP 47 language of the project. */
+  readonly locale: string
+  /** Canonical IANA time zone of the project. */
+  readonly timeZone: string
   private readonly webhookRegistry: WebhookRegistry
   private readonly hostContext: SixbHostContext
   private readonly committedFacts: OntologyOutboxDispatcher
@@ -167,6 +187,8 @@ export class SixbHost<in out TParams extends ParamsConfig = ParamsConfig> {
   constructor(options: SixbHostOptions<TParams>) {
     const errorReporter = attachSixbErrorReporter(this, options.onError)
     this.projectId = options.id ?? "default"
+    this.locale = resolveProjectLocale(options.locale)
+    this.timeZone = resolveProjectTimeZone(options.timeZone)
     this.broker = options.broker
     this.eventService = createDomainEventService({
       projectId: this.projectId,
@@ -273,6 +295,10 @@ export class SixbHost<in out TParams extends ParamsConfig = ParamsConfig> {
     }
     registerProjectionRegistry(this.hostContext, definitions.projections)
     shareSixbErrorReporter(this, this.hostContext)
+    // Bound SDKs run requested Actions through the context; the host drains them on shutdown.
+    const executor = new ActionRunExecutor(this)
+    registerActionRunExecutor(this, executor)
+    registerActionRunExecutor(this.hostContext, executor)
     registerVectorIndexingRuntime(
       this,
       createVectorIndexingRuntime(this.hostContext, this.materializer)
@@ -280,6 +306,7 @@ export class SixbHost<in out TParams extends ParamsConfig = ParamsConfig> {
     this.scheduler = new SchedulerRuntime({
       schedules: definitions.schedules.list(),
       events: this.eventService,
+      timeZone: this.timeZone,
     })
   }
 
@@ -410,6 +437,28 @@ export type SixbHostView = Omit<SixbHost, "withScope"> & {
   withScope(scope: ExecutionScope): object
 }
 
+function resolveProjectLocale(locale: unknown): string {
+  if (locale === undefined) return DEFAULT_PROJECT_LOCALE
+  const canonical = canonicalLocale(locale)
+  if (canonical === undefined) {
+    throw new RuntimeError(
+      `[Sixb] 'locale' must be a BCP 47 language tag such as "fr-FR"; received ${JSON.stringify(locale)}.`
+    )
+  }
+  return canonical
+}
+
+function resolveProjectTimeZone(timeZone: unknown): string {
+  if (timeZone === undefined) return DEFAULT_PROJECT_TIME_ZONE
+  const canonical = canonicalTimeZone(timeZone)
+  if (canonical === undefined) {
+    throw new RuntimeError(
+      `[Sixb] 'timeZone' must be an IANA time zone such as "Europe/Paris"; received ${JSON.stringify(timeZone)}.`
+    )
+  }
+  return canonical
+}
+
 function validateAuthStrategySecurityReferences(
   strategy: ReturnType<AuthRuntime["getStrategy"]>,
   security: SecurityDefinitionCatalog

package/src/runtime/index.ts

@@ -30,12 +30,15 @@ export { SixbHost } from "./host"
 export type { Sixb } from "./sixb"
 export type {
   BatchItemResult,
+  FileListPropertyToken,
+  FilePropertyToken,
   ListResult,
   ListResultWithoutTotal,
   ObjectByIdHandle,
   ObjectExpandBuilder,
   ObjectExpandOptions,
   ObjectExpansionSort,
+  ObjectFileHandle,
   ObjectQueryBuilder,
   ObjectQueryFacetBucket,
   ObjectQueryFacetInput,

package/src/runtime/locale.ts

@@ -0,0 +1,26 @@
+/** Language assumed when a project sets none. */
+export const DEFAULT_PROJECT_LOCALE = "en"
+
+/** Time zone assumed when a project sets none; cron schedules have always used it. */
+export const DEFAULT_PROJECT_TIME_ZONE = "UTC"
+
+/** The canonical form of a BCP 47 language tag (`fr-fr` → `fr-FR`), or `undefined` if invalid. */
+export function canonicalLocale(value: unknown): string | undefined {
+  if (typeof value !== "string") return undefined
+  try {
+    const [locale] = Intl.getCanonicalLocales(value)
+    return locale
+  } catch {
+    return undefined
+  }
+}
+
+/** The canonical IANA name of a time zone (`europe/paris` → `Europe/Paris`), or `undefined`. */
+export function canonicalTimeZone(value: unknown): string | undefined {
+  if (typeof value !== "string" || value.trim() !== value || value === "") return undefined
+  try {
+    return new Intl.DateTimeFormat("en-US", { timeZone: value }).resolvedOptions().timeZone
+  } catch {
+    return undefined
+  }
+}

package/src/runtime/resolve-definitions.ts

@@ -1,7 +1,8 @@
 import { ActionRegistry } from "../actions"
 import type { ActionDefinition } from "../actions/types"
-import type { AgentToolDefinition } from "../agents"
+import type { AgentDefinitionsInput, AgentToolDefinition } from "../agents"
 import { assertNoAgentDefinitions } from "../agents/retired-config"
+import { createAgentSkillCatalog } from "../agents/skills"
 import { createAgentToolCatalog } from "../agents/tool-catalog"
 import type { ConnectorDefinition } from "../connectors"
 import type { DatasetDefinition } from "../datasets/types"
@@ -9,6 +10,7 @@ import { assertDatasetDefinition } from "../datasets/validation"
 import { createModelCatalog, type ModelCatalogInput } from "../models"
 import { sameEmbeddingModel } from "../models/embedding-model"
 import { OntologyRegistry } from "../ontology"
+import { createOntologyDocsCatalog } from "../ontology/docs"
 import type { PipelineDefinition } from "../pipelines/types"
 import { ProjectionRegistry } from "../projections"
 import type { ProjectionDefinition } from "../projections/types"
@@ -16,10 +18,12 @@ import { type RuleDefinition, validateRulesAtStartup } from "../rules"
 import { type ScheduleDefinition, validateSchedulesAtStartup } from "../schedules"
 import {
   type GroupDefinition,
+  type MarkingDefinition,
   type MembershipPolicyDefinition,
   type RoleDefinition,
   SecurityRegistry,
 } from "../security"
+import { validateMarkingsAtStartup } from "../security/markings"
 import { type ShareDefinition, validateSharesAtStartup } from "../shares"
 import type { SyncDefinition } from "../syncs"
 import {
@@ -44,8 +48,10 @@ interface DefinitionOptions {
   readonly rules?: readonly RuleDefinition[]
   readonly workflows?: readonly WorkflowDefinition[]
   readonly tools?: readonly AgentToolDefinition[]
+  readonly agent?: AgentDefinitionsInput
   readonly models?: ModelCatalogInput
   readonly shares?: readonly ShareDefinition[]
+  readonly markings?: readonly MarkingDefinition[]
   readonly groups?: readonly GroupDefinition[]
   readonly roles?: readonly RoleDefinition[]
   readonly membershipPolicies?: readonly MembershipPolicyDefinition[]
@@ -89,6 +95,11 @@ export function resolveDefinitions(options: DefinitionOptions): ResolvedDefiniti
     }
   }
   const tools = createAgentToolCatalog(options.tools)
+  const skills = createAgentSkillCatalog(options.agent?.skills)
+  const ontologyDocs = createOntologyDocsCatalog({
+    objectTypes: ontology.listObjectTypes(),
+    ...(options.agent?.ontologyDocs === undefined ? {} : { docs: options.agent.ontologyDocs }),
+  })
   const connectorsById = indexUniqueDefinitions("connector", options.connectors ?? [])
 
   // Datasets resolve first because syncs, pipelines, projections, and security depend on them.
@@ -134,7 +145,6 @@ export function resolveDefinitions(options: DefinitionOptions): ResolvedDefiniti
 
   validateSchedulesAtStartup(schedules, ontology, {
     registeredRuleIds: new Set(rulesById.keys()),
-    registeredActionIds,
     registeredDatasetIds: new Set(datasetsById.keys()),
     registeredSyncIds: new Set(syncsById.keys()),
     registeredPipelineIds: new Set(pipelinesById.keys()),
@@ -152,10 +162,12 @@ export function resolveDefinitions(options: DefinitionOptions): ResolvedDefiniti
     registeredActionIds,
     ...(models === undefined ? {} : { models }),
     tools,
+    skills,
   })
   const workflowsById = indexUniqueDefinitions("workflow", workflows)
 
   const security = new SecurityRegistry({
+    markings: options.markings ?? [],
     groups: options.groups ?? [],
     roles: options.roles ?? [],
     membershipPolicies: options.membershipPolicies ?? [],
@@ -181,11 +193,25 @@ export function resolveDefinitions(options: DefinitionOptions): ResolvedDefiniti
     syncs,
     telemetryProjections: projectionRegistry.listTelemetry(),
   })
+  validateMarkingsAtStartup({
+    markingIds: new Set(security.listMarkings().map((marking) => marking.id)),
+    ontology,
+    datasetsById,
+    pipelines,
+    projections: projectionRegistry,
+  })
 
   return Object.freeze({
     ontology,
     actions: actionRegistry,
     tools,
+    agent: Object.freeze({
+      skills,
+      ...(options.agent?.instructions === undefined
+        ? {}
+        : { instructions: options.agent.instructions }),
+      ontologyDocs,
+    }),
     connectors: createDefinitionCatalog(connectorsById),
     datasets: createDefinitionCatalog(datasetsById),
     ...(models === undefined ? {} : { models }),

package/src/runtime/sixb.ts

@@ -110,7 +110,7 @@ function createExecutionFacades<TParams extends Record<string, unknown>>(
   dependencies: SixbDependencies
 ): Omit<Sixb<TParams>, "execution"> {
   return {
-    objects: createObjectsRuntime(runtime, execution),
+    objects: createObjectsRuntime(runtime, execution, dependencies.blobStorage),
     actions: createActionsRuntime(runtime, execution),
     datasets: createDatasetsRuntime(
       runtime,