@sixb/core 0.1.18 → 0.1.20

package/dist/testing/materializer-storage-contract.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"materializer-storage-contract.d.ts","sourceRoot":"","sources":["../../src/testing/materializer-storage-contract.ts"],"names":[],"mappings":"AACA,OAAO,EASL,KAAK,OAAO,EACb,MAAM,IAAI,CAAA;AA8BX,MAAM,WAAW,mCAAmC,CAAC,QAAQ,SAAS,OAAO;IAC3E,QAAQ,CAAC,aAAa,EAAE,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAA;IAC1D,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,EAAE,QAAQ,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAC9D,wEAAwE;IACxE,QAAQ,CAAC,sBAAsB,CAAC,EAAE,OAAO,CAAA;IACzC;;;OAGG;IACH,QAAQ,CAAC,uBAAuB,CAAC,EAAE,CAAC,OAAO,EAAE,QAAQ,KAAK,OAAO,CAAC,IAAI,CAAC,CAAA;IACvE,kEAAkE;IAClE,QAAQ,CAAC,kBAAkB,EAAE,CAAC,OAAO,EAAE,QAAQ,KAAK,OAAO,CAAC,MAAM,CAAC,CAAA;IACnE;;;OAGG;IACH,QAAQ,CAAC,sBAAsB,CAAC,EAAE,CAAC,OAAO,EAAE,QAAQ,KAAK,OAAO,CAAC,IAAI,CAAC,CAAA;CACvE;AA6FD,wBAAgB,mCAAmC,CAAC,QAAQ,SAAS,OAAO,EAC1E,IAAI,EAAE,MAAM,EACZ,QAAQ,EAAE,mCAAmC,CAAC,QAAQ,CAAC,GACtD,IAAI,CAokDN"}
+{"version":3,"file":"materializer-storage-contract.d.ts","sourceRoot":"","sources":["../../src/testing/materializer-storage-contract.ts"],"names":[],"mappings":"AACA,OAAO,EASL,KAAK,OAAO,EACb,MAAM,IAAI,CAAA;AAoCX,MAAM,WAAW,mCAAmC,CAAC,QAAQ,SAAS,OAAO;IAC3E,QAAQ,CAAC,aAAa,EAAE,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAA;IAC1D,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,EAAE,QAAQ,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAC9D,wEAAwE;IACxE,QAAQ,CAAC,sBAAsB,CAAC,EAAE,OAAO,CAAA;IACzC;;;OAGG;IACH,QAAQ,CAAC,uBAAuB,CAAC,EAAE,CAAC,OAAO,EAAE,QAAQ,KAAK,OAAO,CAAC,IAAI,CAAC,CAAA;IACvE,kEAAkE;IAClE,QAAQ,CAAC,kBAAkB,EAAE,CAAC,OAAO,EAAE,QAAQ,KAAK,OAAO,CAAC,MAAM,CAAC,CAAA;IACnE;;;OAGG;IACH,QAAQ,CAAC,sBAAsB,CAAC,EAAE,CAAC,OAAO,EAAE,QAAQ,KAAK,OAAO,CAAC,IAAI,CAAC,CAAA;CACvE;AA6FD,wBAAgB,mCAAmC,CAAC,QAAQ,SAAS,OAAO,EAC1E,IAAI,EAAE,MAAM,EACZ,QAAQ,EAAE,mCAAmC,CAAC,QAAQ,CAAC,GACtD,IAAI,CAsrDN"}

package/dist/testing/queues-contract.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"queues-contract.d.ts","sourceRoot":"","sources":["../../src/testing/queues-contract.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAgD,MAAM,EAAE,MAAM,iBAAiB,CAAA;AAU3F,MAAM,WAAW,yBAAyB;IACxC,0EAA0E;IAC1E,QAAQ,CAAC,YAAY,EAAE,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAA;IACrD,sDAAsD;IACtD,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAC5D;;;OAGG;IACH,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAA;IAC9B;;;OAGG;IACH,QAAQ,CAAC,uBAAuB,CAAC,EAAE,MAAM,CAAA;IACzC;;OAEG;IACH,QAAQ,CAAC,iBAAiB,CAAC,EAAE,MAAM,CAAA;CACpC;AAED;;;;;;;GAOG;AACH,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,yBAAyB,GAAG,IAAI,CAksB7F"}
+{"version":3,"file":"queues-contract.d.ts","sourceRoot":"","sources":["../../src/testing/queues-contract.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAgD,MAAM,EAAE,MAAM,iBAAiB,CAAA;AAU3F,MAAM,WAAW,yBAAyB;IACxC,0EAA0E;IAC1E,QAAQ,CAAC,YAAY,EAAE,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAA;IACrD,sDAAsD;IACtD,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAC5D;;;OAGG;IACH,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAA;IAC9B;;;OAGG;IACH,QAAQ,CAAC,uBAAuB,CAAC,EAAE,MAAM,CAAA;IACzC;;OAEG;IACH,QAAQ,CAAC,iBAAiB,CAAC,EAAE,MAAM,CAAA;CACpC;AAED;;;;;;;GAOG;AACH,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,yBAAyB,GAAG,IAAI,CAgrB7F"}

package/dist/webhooks/internal.js

@@ -1,21 +1,21 @@
 // @bun
-import"../chunk-6fsr7y93.js";
+import"../chunk-8mx7qw3y.js";
 import"../chunk-z3y5kg1x.js";
-import"../chunk-enpsx8k5.js";
-import"../chunk-qkbx3tf6.js";
+import"../chunk-gsjm1wms.js";
+import"../chunk-d0bqz29d.js";
 import"../chunk-v4jbb3rs.js";
 import"../chunk-jhm3zsa7.js";
-import"../chunk-y05543x6.js";
+import"../chunk-hvsb78a1.js";
 import {
   createConnectorCodedError,
   getConnectorExecutionSourceResolver
-} from "../chunk-f1zxad2t.js";
-import"../chunk-y2aq6ag9.js";
-import"../chunk-fc5zfxy1.js";
-import"../chunk-6h5m9xjx.js";
-import"../chunk-xt1zt7gv.js";
-import"../chunk-rt9p8m9t.js";
-import"../chunk-2jntasmh.js";
+} from "../chunk-tg2cw67r.js";
+import"../chunk-a40ad1ft.js";
+import"../chunk-b38szspf.js";
+import"../chunk-vpq4shxz.js";
+import"../chunk-es1gxsbf.js";
+import"../chunk-v9xd5wzd.js";
+import"../chunk-hcbyfxbe.js";
 import"../chunk-pqajwytd.js";
 import"../chunk-29yx306f.js";
 import"../chunk-gfdh9kqa.js";
@@ -24,38 +24,38 @@ import"../chunk-s54c868q.js";
 import"../chunk-ere85b8y.js";
 import"../chunk-4as3wt1c.js";
 import"../chunk-h89wz928.js";
-import"../chunk-zxawp1n2.js";
+import"../chunk-9w055r5b.js";
 import {
   ExecutionStorageError2
 } from "../chunk-tw03bsmb.js";
-import"../chunk-bs7sqkre.js";
-import"../chunk-b9affek3.js";
+import"../chunk-d09tj99x.js";
+import"../chunk-7n440zgt.js";
 import {
   canRetryWebhookRun2
-} from "../chunk-qq90g05n.js";
-import"../chunk-wt4szfec.js";
+} from "../chunk-n33z5bjw.js";
+import"../chunk-pbcbn83d.js";
 import"../chunk-qczk96d9.js";
 import"../chunk-mmagke4x.js";
 import"../chunk-hn2r7z41.js";
-import"../chunk-4wn7bxxa.js";
+import"../chunk-9ybhtmg4.js";
 import"../chunk-jmfet9r4.js";
 import {
   WebhookRunError2
 } from "../chunk-qf954wje.js";
-import"../chunk-d0eb5yy6.js";
-import {
-  isOAuthConnectorDefinition2,
-  isStaticConnectorDefinition2
-} from "../chunk-9x8dybsb.js";
+import"../chunk-rrzt8jdy.js";
 import {
   createPrimitiveExecutionRecord
-} from "../chunk-ex496vct.js";
+} from "../chunk-9dmt152s.js";
 import"../chunk-br3k6qbf.js";
 import {
   isStorageSerializationFailure2
-} from "../chunk-y9jmd7e5.js";
+} from "../chunk-s16apyk9.js";
 import"../chunk-rj69qcrd.js";
-import"../chunk-vx2yp45y.js";
+import {
+  isOAuthConnectorDefinition2,
+  isStaticConnectorDefinition2
+} from "../chunk-9x8dybsb.js";
+import"../chunk-c85m1hyj.js";
 // src/webhooks/connections.ts
 function createWebhookConnections(runtime, definition) {
   return {
@@ -198,4 +198,4 @@ export {
   isStaticConnectorDefinition2 as isStaticConnectorDefinition
 };
 
-//# debugId=394D87A98F7033E164756E2164756E21
+//# debugId=6A0B81958550879664756E2164756E21

package/dist/webhooks/internal.js.map

@@ -6,6 +6,6 @@
     "import { randomUUID } from \"node:crypto\"\nimport { createPrimitiveExecutionRecord } from \"../execution/durable\"\nimport type { ExecutionRecord, Storage, WebhookRunRecord } from \"../storage\"\nimport {\n  canRetryWebhookRun,\n  ExecutionStorageError,\n  isStorageSerializationFailure,\n  WebhookRunError,\n} from \"../storage\"\n\nconst MAX_ADMISSION_ATTEMPTS = 3\n\nexport interface AdmitWebhookRunInput {\n  readonly projectId: string\n  readonly storage: Storage\n  readonly runId: string\n  readonly connectorId: string\n  readonly webhookId: string\n  readonly method: string\n  readonly route: string\n  readonly requestBodyBytes: number\n  readonly requestBodySha256: string\n  readonly idempotencyKey?: string\n}\n\nexport type AdmitWebhookRunResult =\n  | {\n      readonly status: \"admitted\"\n      readonly run: WebhookRunRecord\n      readonly execution: ExecutionRecord\n      readonly retried: boolean\n    }\n  | {\n      readonly status: \"duplicate\" | \"in_progress\"\n      readonly run: WebhookRunRecord\n    }\n\n/** Persist or reclaim one verified Webhook delivery before its protected handler executes. */\nexport async function admitWebhookRun(input: AdmitWebhookRunInput): Promise<AdmitWebhookRunResult> {\n  assertAdmissionInput(input)\n  let attempt = 0\n\n  // Concurrent deliveries may both observe no run before one transaction commits. Retry only\n  // serialization and uniqueness races so the loser can reload the winning run; every other error\n  // fails immediately, and repeated contention remains bounded by MAX_ADMISSION_ATTEMPTS.\n  while (true) {\n    attempt += 1\n    try {\n      return await input.storage.transaction((tx) => admitWebhookRunTransaction(tx, input), {\n        isolation: \"serializable\",\n      })\n    } catch (error) {\n      if (attempt >= MAX_ADMISSION_ATTEMPTS || !isConcurrentAdmissionConflict(error)) {\n        throw error\n      }\n    }\n  }\n}\n\nasync function admitWebhookRunTransaction(\n  storage: Storage,\n  input: AdmitWebhookRunInput\n): Promise<AdmitWebhookRunResult> {\n  const runs = requireWebhookRunStorage(storage)\n  const existing = input.idempotencyKey\n    ? await runs.getByDelivery({\n        projectId: input.projectId,\n        connectorId: input.connectorId,\n        webhookId: input.webhookId,\n        idempotencyKey: input.idempotencyKey,\n      })\n    : null\n\n  if (existing) {\n    assertSameDelivery(existing, input)\n    if (existing.status === \"running\") return { status: \"in_progress\", run: existing }\n    if (!canRetryWebhookRun(existing)) return { status: \"duplicate\", run: existing }\n\n    const execution = await requireWebhookExecution(storage, existing)\n    const run = await runs.restart({\n      projectId: input.projectId,\n      id: existing.id,\n    })\n    return { status: \"admitted\", run, execution, retried: true }\n  }\n\n  const executionInput = createPrimitiveExecutionRecord({\n    id: `exec_${randomUUID()}`,\n    primitive: { kind: \"webhook\", id: input.route, runId: input.runId },\n    origin: {\n      type: \"automatic\",\n      projectId: input.projectId,\n      source: { type: \"webhook\", deliveryId: input.runId },\n      correlationId: input.runId,\n    },\n  })\n  const execution = await storage.executions.create(executionInput)\n  const run = await runs.start({\n    id: input.runId,\n    projectId: input.projectId,\n    executionId: execution.id,\n    connectorId: input.connectorId,\n    webhookId: input.webhookId,\n    method: input.method,\n    route: input.route,\n    requestBodyBytes: input.requestBodyBytes,\n    requestBodySha256: input.requestBodySha256,\n    idempotencyKey: input.idempotencyKey,\n  })\n  return { status: \"admitted\", run, execution, retried: false }\n}\n\nfunction assertSameDelivery(existing: WebhookRunRecord, input: AdmitWebhookRunInput): void {\n  if (\n    existing.connectorId !== input.connectorId ||\n    existing.webhookId !== input.webhookId ||\n    existing.method !== input.method ||\n    existing.route !== input.route ||\n    existing.requestBodyBytes !== input.requestBodyBytes ||\n    existing.requestBodySha256 !== input.requestBodySha256\n  ) {\n    throw new WebhookRunError(\n      `[Sixb] Webhook delivery '${input.idempotencyKey}' conflicts with run '${existing.id}'.`,\n      \"delivery_conflict\"\n    )\n  }\n}\n\nasync function requireWebhookExecution(\n  storage: Storage,\n  run: WebhookRunRecord\n): Promise<ExecutionRecord> {\n  const execution = await storage.executions.getById({\n    projectId: run.projectId,\n    id: run.executionId,\n  })\n  if (!execution) {\n    throw new WebhookRunError(\n      `[Sixb] Execution '${run.executionId}' for Webhook run '${run.id}' was not found.`,\n      \"invalid_execution\"\n    )\n  }\n  return execution\n}\n\nfunction requireWebhookRunStorage(storage: Storage): NonNullable<Storage[\"webhookRuns\"]> {\n  if (!storage.webhookRuns) {\n    throw new WebhookRunError(\"[Sixb] Webhook run storage is not configured.\")\n  }\n  return storage.webhookRuns\n}\n\nfunction assertAdmissionInput(input: AdmitWebhookRunInput): void {\n  if (input.idempotencyKey !== undefined && !input.idempotencyKey.trim()) {\n    throw new WebhookRunError(\"[Sixb] Webhook idempotency key must not be empty.\")\n  }\n  if (!Number.isSafeInteger(input.requestBodyBytes) || input.requestBodyBytes < 0) {\n    throw new WebhookRunError(\"[Sixb] Webhook request body bytes must be a non-negative integer.\")\n  }\n  if (!/^[a-f0-9]{64}$/.test(input.requestBodySha256)) {\n    throw new WebhookRunError(\"[Sixb] Webhook request body SHA-256 must be lowercase hexadecimal.\")\n  }\n}\n\nfunction isConcurrentAdmissionConflict(error: unknown): boolean {\n  return (\n    isStorageSerializationFailure(error) ||\n    (error instanceof ExecutionStorageError && error.code === \"duplicate_execution\") ||\n    (error instanceof WebhookRunError &&\n      (error.code === \"duplicate_run\" || error.code === \"invalid_transition\"))\n  )\n}\n"
   ],
   "mappings": ";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAMO,SAAS,wBAAwB,CACtC,SACA,YACoB;AAAA,EACpB,OAAO;AAAA,SACC,WAAU,CAAC,WAAW;AAAA,MAC1B,IAAI,CAAC,4BAA2B,UAAU,GAAG;AAAA,QAC3C,MAAM,0BACJ,mCACA,sEACF;AAAA,MACF;AAAA,MACA,IAAI,OAAO,cAAc,YAAY,CAAC,UAAU,KAAK,GAAG;AAAA,QACtD,MAAM,0BACJ,mCACA,gDACF;AAAA,MACF;AAAA,MACA,MAAM,WAAW,oCAAoC,OAAO;AAAA,MAC5D,MAAM,UAAU,MAAM,SAAS,KAAK,UAAU;AAAA,MAC9C,OAAO,QAAQ,QAAQ,CAAC,WAAW;AAAA,QACjC,MAAM,aAAa,OAAO;AAAA,QAC1B,IAAI,CAAC,cAAc,WAAW,QAAQ,OAAO;AAAA,UAAW,OAAO,CAAC;AAAA,QAChE,MAAM,eAAe,WAAW;AAAA,QAChC,IAAI;AAAA,QACJ,OAAO;AAAA,UACL;AAAA,YACE;AAAA,YACA,MAAM,GAAG;AAAA,cACP,mBAAmB,YAAY;AAAA,gBAC7B,MAAM,WAAW,MAAM,SAAS,KAAK,UAAU,GAAG,KAChD,CAAC,cACC,UAAU,YAAY,OAAO,gBAC7B,UAAU,WAAW,QAAQ,OAAO,SACxC;AAAA,gBACA,IAAI,CAAC;AAAA,kBACH,MAAM,0BACJ,uBACA,0DACF;AAAA,gBACF,OAAO,QAAQ,QAAQ,IAAI,gBAAgB,EAAE,MAAM;AAAA,iBAClD;AAAA,cACH,OAAO;AAAA;AAAA,UAEX;AAAA,QACF;AAAA,OACD;AAAA;AAAA,EAEL;AAAA;;ACtDF;AAUA,IAAM,yBAAyB;AA4B/B,eAAsB,eAAe,CAAC,OAA6D;AAAA,EACjG,qBAAqB,KAAK;AAAA,EAC1B,IAAI,UAAU;AAAA,EAKd,OAAO,MAAM;AAAA,IACX,WAAW;AAAA,IACX,IAAI;AAAA,MACF,OAAO,MAAM,MAAM,QAAQ,YAAY,CAAC,OAAO,2BAA2B,IAAI,KAAK,GAAG;AAAA,QACpF,WAAW;AAAA,MACb,CAAC;AAAA,MACD,OAAO,OAAO;AAAA,MACd,IAAI,WAAW,0BAA0B,CAAC,8BAA8B,KAAK,GAAG;AAAA,QAC9E,MAAM;AAAA,MACR;AAAA;AAAA,EAEJ;AAAA;AAGF,eAAe,0BAA0B,CACvC,SACA,OACgC;AAAA,EAChC,MAAM,OAAO,yBAAyB,OAAO;AAAA,EAC7C,MAAM,WAAW,MAAM,iBACnB,MAAM,KAAK,cAAc;AAAA,IACvB,WAAW,MAAM;AAAA,IACjB,aAAa,MAAM;AAAA,IACnB,WAAW,MAAM;AAAA,IACjB,gBAAgB,MAAM;AAAA,EACxB,CAAC,IACD;AAAA,EAEJ,IAAI,UAAU;AAAA,IACZ,mBAAmB,UAAU,KAAK;AAAA,IAClC,IAAI,SAAS,WAAW;AAAA,MAAW,OAAO,EAAE,QAAQ,eAAe,KAAK,SAAS;AAAA,IACjF,IAAI,CAAC,oBAAmB,QAAQ;AAAA,MAAG,OAAO,EAAE,QAAQ,aAAa,KAAK,SAAS;AAAA,IAE/E,MAAM,YAAY,MAAM,wBAAwB,SAAS,QAAQ;AAAA,IACjE,MAAM,MAAM,MAAM,KAAK,QAAQ;AAAA,MAC7B,WAAW,MAAM;AAAA,MACjB,IAAI,SAAS;AAAA,IACf,CAAC;AAAA,IACD,OAAO,EAAE,QAAQ,YAAY,KAAK,WAAW,SAAS,KAAK;AAAA,EAC7D;AAAA,EAEA,MAAM,iBAAiB,+BAA+B;AAAA,IACpD,IAAI,QAAQ,WAAW;AAAA,IACvB,WAAW,EAAE,MAAM,WAAW,IAAI,MAAM,OAAO,OAAO,MAAM,MAAM;AAAA,IAClE,QAAQ;AAAA,MACN,MAAM;AAAA,MACN,WAAW,MAAM;AAAA,MACjB,QAAQ,EAAE,MAAM,WAAW,YAAY,MAAM,MAAM;AAAA,MACnD,eAAe,MAAM;AAAA,IACvB;AAAA,EACF,CAAC;AAAA,EACD,MAAM,YAAY,MAAM,QAAQ,WAAW,OAAO,cAAc;AAAA,EAChE,MAAM,MAAM,MAAM,KAAK,MAAM;AAAA,IAC3B,IAAI,MAAM;AAAA,IACV,WAAW,MAAM;AAAA,IACjB,aAAa,UAAU;AAAA,IACvB,aAAa,MAAM;AAAA,IACnB,WAAW,MAAM;AAAA,IACjB,QAAQ,MAAM;AAAA,IACd,OAAO,MAAM;AAAA,IACb,kBAAkB,MAAM;AAAA,IACxB,mBAAmB,MAAM;AAAA,IACzB,gBAAgB,MAAM;AAAA,EACxB,CAAC;AAAA,EACD,OAAO,EAAE,QAAQ,YAAY,KAAK,WAAW,SAAS,MAAM;AAAA;AAG9D,SAAS,kBAAkB,CAAC,UAA4B,OAAmC;AAAA,EACzF,IACE,SAAS,gBAAgB,MAAM,eAC/B,SAAS,cAAc,MAAM,aAC7B,SAAS,WAAW,MAAM,UAC1B,SAAS,UAAU,MAAM,SACzB,SAAS,qBAAqB,MAAM,oBACpC,SAAS,sBAAsB,MAAM,mBACrC;AAAA,IACA,MAAM,IAAI,iBACR,4BAA4B,MAAM,uCAAuC,SAAS,QAClF,mBACF;AAAA,EACF;AAAA;AAGF,eAAe,uBAAuB,CACpC,SACA,KAC0B;AAAA,EAC1B,MAAM,YAAY,MAAM,QAAQ,WAAW,QAAQ;AAAA,IACjD,WAAW,IAAI;AAAA,IACf,IAAI,IAAI;AAAA,EACV,CAAC;AAAA,EACD,IAAI,CAAC,WAAW;AAAA,IACd,MAAM,IAAI,iBACR,qBAAqB,IAAI,iCAAiC,IAAI,sBAC9D,mBACF;AAAA,EACF;AAAA,EACA,OAAO;AAAA;AAGT,SAAS,wBAAwB,CAAC,SAAuD;AAAA,EACvF,IAAI,CAAC,QAAQ,aAAa;AAAA,IACxB,MAAM,IAAI,iBAAgB,+CAA+C;AAAA,EAC3E;AAAA,EACA,OAAO,QAAQ;AAAA;AAGjB,SAAS,oBAAoB,CAAC,OAAmC;AAAA,EAC/D,IAAI,MAAM,mBAAmB,aAAa,CAAC,MAAM,eAAe,KAAK,GAAG;AAAA,IACtE,MAAM,IAAI,iBAAgB,mDAAmD;AAAA,EAC/E;AAAA,EACA,IAAI,CAAC,OAAO,cAAc,MAAM,gBAAgB,KAAK,MAAM,mBAAmB,GAAG;AAAA,IAC/E,MAAM,IAAI,iBAAgB,mEAAmE;AAAA,EAC/F;AAAA,EACA,IAAI,CAAC,iBAAiB,KAAK,MAAM,iBAAiB,GAAG;AAAA,IACnD,MAAM,IAAI,iBAAgB,oEAAoE;AAAA,EAChG;AAAA;AAGF,SAAS,6BAA6B,CAAC,OAAyB;AAAA,EAC9D,OACE,+BAA8B,KAAK,KAClC,iBAAiB,0BAAyB,MAAM,SAAS,yBACzD,iBAAiB,qBACf,MAAM,SAAS,mBAAmB,MAAM,SAAS;AAAA;",
-  "debugId": "394D87A98F7033E164756E2164756E21",
+  "debugId": "6A0B81958550879664756E2164756E21",
   "names": []
 }

package/dist/workers/index.js

@@ -1,7 +1,7 @@
 // @bun
 import {
   captureSixbFailure2
-} from "../chunk-6fsr7y93.js";
+} from "../chunk-8mx7qw3y.js";
 import"../chunk-z3y5kg1x.js";
 
 // src/workers/errors.ts

package/dist/workflows/index.js

@@ -8,13 +8,14 @@ import {
   defineWorkflow2,
   createWorkflowNodeFailure2,
   unwrapWorkflowNodeFailure2
-} from "../chunk-1b1f2d5f.js";
-import"../chunk-e1c18xjx.js";
+} from "../chunk-k6q3n2sc.js";
+import"../chunk-nq6gpjt7.js";
 import"../chunk-fb3feg1e.js";
-import"../chunk-dfm066qg.js";
-import"../chunk-r2y23egw.js";
-import"../chunk-p844e0rn.js";
-import"../chunk-vgk3hknm.js";
+import"../chunk-yxd3nnqt.js";
+import"../chunk-bkpke1sg.js";
+import"../chunk-tpn40322.js";
+import"../chunk-1k89ecfr.js";
+import"../chunk-1sr8ryzk.js";
 import {
   WorkflowDefinitionError2,
   WorkflowValidationError2,
@@ -44,72 +45,68 @@ import {
   snapshotWorkflowActionInput2,
   WorkflowRunDispatcher2,
   requestWorkflowRun2
-} from "../chunk-fe52eczz.js";
-import"../chunk-yv9czyfr.js";
-import"../chunk-f1zxad2t.js";
-import"../chunk-za5yd58j.js";
-import"../chunk-v6xpd60t.js";
-import"../chunk-k6hrnf35.js";
+} from "../chunk-6c6sn0bh.js";
+import"../chunk-xfs8x8m9.js";
+import"../chunk-tg2cw67r.js";
+import"../chunk-fkgc1wt8.js";
+import"../chunk-4vyr1j8f.js";
+import"../chunk-hjzdd750.js";
 import"../chunk-mfs23znk.js";
-import"../chunk-ny3xyvcn.js";
+import"../chunk-1zq2p6g0.js";
 import"../chunk-99nd4rc1.js";
-import"../chunk-2vhg6ysa.js";
-import"../chunk-qxvp5epv.js";
-import"../chunk-85cd7e8c.js";
-import"../chunk-1sr8ryzk.js";
-import"../chunk-3zxk45er.js";
-import"../chunk-5a4a52tq.js";
-import"../chunk-6gmfggss.js";
-import"../chunk-bwjcehza.js";
-import"../chunk-rz53yb4v.js";
-import"../chunk-tffvfy6s.js";
-import"../chunk-fx93hd2n.js";
-import"../chunk-p0dqwj3n.js";
-import"../chunk-ex496vct.js";
-import"../chunk-htr6wjmv.js";
-import"../chunk-qq90g05n.js";
-import"../chunk-4wn7bxxa.js";
+import"../chunk-vyf9kfqf.js";
+import"../chunk-bx9q3cwv.js";
+import"../chunk-yevzdx4y.js";
+import"../chunk-9dmt152s.js";
+import"../chunk-n33z5bjw.js";
+import"../chunk-9ybhtmg4.js";
 import"../chunk-br3k6qbf.js";
 import"../chunk-jmfet9r4.js";
 import"../chunk-qf954wje.js";
-import"../chunk-d0eb5yy6.js";
+import"../chunk-rrzt8jdy.js";
 import"../chunk-tw03bsmb.js";
-import"../chunk-zxawp1n2.js";
-import"../chunk-y9jmd7e5.js";
+import"../chunk-9w055r5b.js";
+import"../chunk-s16apyk9.js";
 import"../chunk-hn2r7z41.js";
 import"../chunk-h89wz928.js";
-import"../chunk-wt4szfec.js";
+import"../chunk-pbcbn83d.js";
 import"../chunk-qczk96d9.js";
 import"../chunk-mmagke4x.js";
-import"../chunk-y2aq6ag9.js";
-import"../chunk-fc5zfxy1.js";
+import"../chunk-b38szspf.js";
+import"../chunk-a40ad1ft.js";
 import"../chunk-s54c868q.js";
 import"../chunk-ere85b8y.js";
 import"../chunk-rj69qcrd.js";
 import"../chunk-4as3wt1c.js";
-import"../chunk-b9affek3.js";
 import"../chunk-29yx306f.js";
 import"../chunk-pqajwytd.js";
-import"../chunk-bs7sqkre.js";
-import"../chunk-wr8qp979.js";
-import"../chunk-vjcd8d27.js";
-import"../chunk-kkqwzy6h.js";
+import"../chunk-d09tj99x.js";
+import"../chunk-3qms4nax.js";
+import"../chunk-7n440zgt.js";
+import"../chunk-m427qgq0.js";
+import"../chunk-fa02jy15.js";
+import"../chunk-7t429e3f.js";
+import"../chunk-3zxk45er.js";
+import"../chunk-5a4a52tq.js";
+import"../chunk-t7x8dmn0.js";
+import"../chunk-way52z4h.js";
+import"../chunk-0yh890a4.js";
 import"../chunk-gc4ntf7d.js";
 import"../chunk-gfdh9kqa.js";
 import"../chunk-pfp1txq2.js";
-import"../chunk-22v5bpz3.js";
-import"../chunk-6h5m9xjx.js";
-import"../chunk-vx2yp45y.js";
-import"../chunk-rt9p8m9t.js";
-import"../chunk-qkbx3tf6.js";
+import"../chunk-5e43w60z.js";
+import"../chunk-vpq4shxz.js";
+import"../chunk-c85m1hyj.js";
+import"../chunk-v9xd5wzd.js";
+import"../chunk-es1gxsbf.js";
+import"../chunk-hcbyfxbe.js";
+import"../chunk-d0bqz29d.js";
 import"../chunk-v4jbb3rs.js";
-import"../chunk-xt1zt7gv.js";
-import"../chunk-enpsx8k5.js";
-import"../chunk-y05543x6.js";
+import"../chunk-hvsb78a1.js";
+import"../chunk-gsjm1wms.js";
 import"../chunk-jhm3zsa7.js";
-import"../chunk-6fsr7y93.js";
+import"../chunk-8mx7qw3y.js";
 import"../chunk-z3y5kg1x.js";
-import"../chunk-2jntasmh.js";
 export {
   WorkflowDefinitionError2 as WorkflowDefinitionError,
   WorkflowRunDispatcher2 as WorkflowRunDispatcher,
@@ -149,4 +146,4 @@ export {
   workflowAgentStepActorId2 as workflowAgentStepActorId
 };
 
-//# debugId=CBE91B0E56FB23E364756E2164756E21
+//# debugId=26BA62DA2C73FF4764756E2164756E21

package/dist/workflows/index.js.map

@@ -4,6 +4,6 @@
   "sourcesContent": [
   ],
   "mappings": "",
-  "debugId": "CBE91B0E56FB23E364756E2164756E21",
+  "debugId": "26BA62DA2C73FF4764756E2164756E21",
   "names": []
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sixb/core",
-  "version": "0.1.18",
+  "version": "0.1.20",
   "description": "The ontology-first runtime for Sixb — objects, links, telemetry, actions, and provider contracts",
   "keywords": [
     "sixb",
@@ -77,12 +77,6 @@
       "import": "./dist/events/selectors/index.js",
       "default": "./dist/events/selectors/index.js"
     },
-    "./internal/action-edits": {
-      "types": "./dist/actions/worker.d.ts",
-      "bun": "./src/actions/worker.ts",
-      "import": "./dist/actions/worker.js",
-      "default": "./dist/actions/worker.js"
-    },
     "./internal/actions": {
       "types": "./dist/actions/index.d.ts",
       "bun": "./src/actions/index.ts",
@@ -461,6 +455,12 @@
       "import": "./dist/sandboxes/index.js",
       "default": "./dist/sandboxes/index.js"
     },
+    "./security": {
+      "types": "./dist/security/public.d.ts",
+      "bun": "./src/security/public.ts",
+      "import": "./dist/security/public.js",
+      "default": "./dist/security/public.js"
+    },
     "./storage": {
       "types": "./dist/storage/index.d.ts",
       "bun": "./src/storage/index.ts",
@@ -478,7 +478,7 @@
     "build": "bun ../../scripts/build-package.ts",
     "typecheck": "tsc --noEmit",
     "test": "bun test",
-    "test:e2e": "bun ../../scripts/ci-guard.ts --stall 120 --max 600 bun test ./tests/published-artifacts.e2e.ts",
+    "test:e2e": "bun ../../scripts/ci-guard.ts --stall 120 --max 600 bun test ./tests/published-artifacts.e2e.ts ./tests/browser-entries.e2e.ts",
     "prepack": "bun run build"
   },
   "devDependencies": {

package/src/actions/commit-edits.ts

@@ -10,8 +10,7 @@ import type {
   OntologyOperationOutcome,
 } from "../materializer"
 import type { OntologyMutationRuntime } from "../runtime/ontology-mutations"
-import type { Storage } from "../storage/types"
-import { ActionEditCommitError } from "./errors"
+import type { RecordActionRunInput } from "../storage"
 
 /** Exact reads an Action handler depended on, protected by row-level CAS at commit time. */
 export interface ActionReadDependencies {
@@ -24,9 +23,8 @@ const NO_READ_DEPENDENCIES: ActionReadDependencies = { objects: [], links: [], l
 
 export interface CommitActionEditsInput {
   readonly mutations: Pick<OntologyMutationRuntime, "commitEdits">
-  readonly projectId: string
-  readonly runId: string
-  readonly actionId: string
+  /** The run's terminal record, which the commit inserts with its edits. */
+  readonly run: RecordActionRunInput
   readonly batch: EditBatch
   readonly dependencies?: ActionReadDependencies
 }
@@ -44,19 +42,14 @@ export interface ActionEditCommitResult {
   readonly committedAt: Date
 }
 
-export interface FindActionEditCommitInput {
-  readonly storage: Pick<Storage, "ontology">
-  readonly projectId: string
-  readonly runId: string
-}
-
 /**
  * Commits one Action run's recorded edits as a single atomic ontology commit.
  *
  * The batch lowers to canonical Materializer operations and the Materializer validates the Action run
- * identity, applies managed authority, resolves effective state, writes the authoritative commit, and
- * inserts outbox facts in one transaction. Repeating the call for the same run replays that commit;
- * a divergent request for the same run is a typed idempotency conflict.
+ * identity, applies managed authority, resolves effective state, writes the authoritative commit,
+ * inserts outbox facts, and records the run in one transaction. Repeating the call for the same run
+ * replays that commit without recording anything; a divergent request for the same run is a typed
+ * idempotency conflict.
  */
 export async function commitActionEdits(
   input: CommitActionEditsInput
@@ -64,7 +57,8 @@ export async function commitActionEdits(
   const dependencies = input.dependencies ?? NO_READ_DEPENDENCIES
   const commit = await input.mutations.commitEdits({
     mode: "atomic",
-    source: { kind: "action", actionId: input.actionId, runId: input.runId },
+    source: { kind: "action", actionId: input.run.actionId, runId: input.run.id },
+    run: input.run,
     operations: lowerEditBatch(input.batch),
     expectedObjects: dependencies.objects,
     expectedLinks: dependencies.links,
@@ -73,28 +67,6 @@ export async function commitActionEdits(
   return toActionEditCommitResult(commit)
 }
 
-/**
- * Resolves the authoritative commit an Action run already produced, if any.
- *
- * Resume uses the exact `{ actionRunId }` origin instead of rerunning handlers, so a redelivered run
- * returns the persisted result without recomputing an idempotency hash.
- */
-export async function findActionEditCommit(
-  input: FindActionEditCommitInput
-): Promise<ActionEditCommitResult | null> {
-  const record = await input.storage.ontology.commits.getByOrigin({
-    projectId: input.projectId,
-    origin: { kind: "action", actionRunId: input.runId },
-  })
-  if (!record) return null
-  if (record.result.kind !== "edit") {
-    throw new ActionEditCommitError(
-      `[Sixb] Action run '${input.runId}' resolved a '${record.result.kind}' commit instead of an edit commit.`
-    )
-  }
-  return toActionEditCommitResult({ ...record.result, created: false })
-}
-
 function toActionEditCommitResult(commit: EditCommitResult): ActionEditCommitResult {
   return {
     commitId: commit.commitId,

package/src/actions/errors.ts

@@ -2,10 +2,6 @@ export class ActionDefinitionError extends Error {
   readonly name = "ActionDefinitionError"
 }
 
-export class ActionEditCommitError extends Error {
-  readonly name = "ActionEditCommitError"
-}
-
 export function missingActionMutationMessage(actionId: string): string {
   return `Action "${actionId}" must declare .writeback(...) or .edits(...).`
 }

package/src/actions/execution.ts

@@ -14,13 +14,7 @@ import type {
 } from "../storage/action-runs"
 import { assertObjectReadOutputWithinLimit } from "../storage/objects/execution-limits"
 import { type ActionDescriptor, snapshotActionDescriptor } from "./descriptor"
-import {
-  type RequestActionAndWaitInput,
-  type RequestActionInput,
-  type RequestActionResult,
-  requestAction,
-  requestActionAndWait,
-} from "./request"
+import { type RequestActionInput, requestAction } from "./request"
 import { canDelegationAccessActionRun } from "./run-authorization"
 import type { ActionDefinition } from "./types"
 
@@ -36,8 +30,15 @@ export interface ActionsRuntime {
   getById(actionId: string): ActionDescriptor | null
   listGlobal(): readonly ActionDescriptor[]
   listForType(objectType: ObjectType): readonly ActionDescriptor[]
-  request(input: RequestActionInput): Promise<RequestActionResult>
-  requestAndWait(input: RequestActionAndWaitInput): Promise<ActionRunRecord>
+  /**
+   * Run an Action in this process and return its terminal record, without waiting for its effects.
+   * A run that fails resolves with status `failed`. The call rejects when the request itself is
+   * refused (unknown action, invalid params, missing authority, a run id this process is still
+   * running, a stopping runtime), and with `internal.unexpected` when a run that started could not
+   * be recorded: requesting it again with the same run id returns its record if it was recorded, and
+   * runs it again otherwise.
+   */
+  request(input: RequestActionInput): Promise<ActionRunRecord>
   readonly runs: ActionRunsRuntime
 }
 
@@ -107,7 +108,6 @@ export function createActionsRuntime(
           )
       ),
     request: (input) => requestAction(runtime, execution, input),
-    requestAndWait: (input) => requestActionAndWait(runtime, execution, input),
     runs: {
       getById: async (runId) => {
         if (

package/src/actions/index.ts

@@ -1,28 +1,11 @@
 export { defineAction, optional, param } from "./builders"
-export type {
-  ActionEditCommitResult,
-  ActionReadDependencies,
-  CommitActionEditsInput,
-  FindActionEditCommitInput,
-} from "./commit-edits"
-export { commitActionEdits, findActionEditCommit } from "./commit-edits"
-export { ActionDefinitionError, ActionEditCommitError } from "./errors"
-export type {
-  ActionReadFacadeOptions,
-  ActionTelemetryReadSource,
-} from "./read-facade"
-export { ActionReadRecorder, createActionReadFacade } from "./read-facade"
+export { ActionDefinitionError } from "./errors"
 export type { ActionDefinitionCatalog, ActionRegistryOptions } from "./registry"
 export { ActionRegistry } from "./registry"
-export type {
-  RequestActionAndWaitInput,
-  RequestActionAndWaitOptions,
-  RequestActionInput,
-  RequestActionOptions,
-  RequestActionResult,
-  WaitForActionRunInput,
-} from "./request"
-export { requestAction, requestActionAndWait, waitForActionRun } from "./request"
+export type { RequestActionInput, RequestActionOptions } from "./request"
+export { requestAction } from "./request"
+export { drainActionRuns } from "./run/executor"
+export { ACTION_RUN_DRAIN_TIMEOUT_MS } from "./run/signals"
 export type {
   ActionBinding,
   ActionBlobContext,
@@ -73,9 +56,7 @@ export type {
   ObjectActionPhaseBuilder,
 } from "./types"
 export {
-  coerceActionParamsToTyped,
   isActionDefinition,
   isGlobalActionDefinition,
   isObjectActionDefinition,
 } from "./validation"
-export { runActionValidators } from "./validators"