@sixb/core 0.1.18 → 0.1.20

package/dist/actions/worker.js

@@ -1,325 +0,0 @@
-// @bun
-import"../chunk-jhm3zsa7.js";
-import"../chunk-z3y5kg1x.js";
-import {
-  assertValidFileRefs2,
-  normalizeObjectProperties2,
-  assertKnownProperties2,
-  assertRequiredProperties2,
-  validateObjectProperties2,
-  validatePropertyValue2
-} from "../chunk-y05543x6.js";
-import {
-  EditBatchError2
-} from "../chunk-zvx7h87b.js";
-import {
-  OntologyValidationError2
-} from "../chunk-cqr3acm1.js";
-
-// src/edits/recorder.ts
-import { createHash } from "crypto";
-
-// src/edits/properties.ts
-function normalizeObjectEditProperties(params) {
-  const { objectType, properties, valueTypesById, path } = params;
-  assertKnownProperties2(objectType, properties);
-  assertNoTelemetryProperties(objectType.properties, properties, path);
-  validateObjectProperties2(objectType, properties, valueTypesById);
-  assertValidFileRefs2(properties, objectType.id);
-  return normalizeObjectProperties2(objectType.properties, properties, valueTypesById, path);
-}
-function normalizeLinkEditProperties(params) {
-  const { sourceObjectTypeId, linkId, linkDefinition, properties, valueTypesById } = params;
-  const linkProperties = linkDefinition.properties ?? [];
-  if (linkProperties.length === 0 && Object.keys(properties).length > 0) {
-    throw new OntologyValidationError2(`[Sixb] Link ${sourceObjectTypeId}.${linkId} does not define link properties`);
-  }
-  const knownPropertyIds = new Set(linkProperties.map((property) => property.id));
-  for (const propertyId of Object.keys(properties)) {
-    if (!knownPropertyIds.has(propertyId)) {
-      throw new OntologyValidationError2(`[Sixb] Unknown link property '${propertyId}' for link '${sourceObjectTypeId}.${linkId}'`);
-    }
-  }
-  assertNoTelemetryProperties(linkProperties, properties, `${sourceObjectTypeId}.${linkId}`);
-  for (const [propertyId, value] of Object.entries(properties)) {
-    const property = linkProperties.find((candidate) => candidate.id === propertyId);
-    if (!property)
-      continue;
-    validatePropertyValue2(property, value, `${sourceObjectTypeId}.${linkId}.${propertyId}`, valueTypesById);
-  }
-  assertValidFileRefs2(properties, `${sourceObjectTypeId}.${linkId}`);
-  return normalizeObjectProperties2(linkProperties, properties, valueTypesById, `${sourceObjectTypeId}.${linkId}`);
-}
-function getPrimaryProperty(objectType) {
-  const primaryProperty = objectType.properties.find((property) => property.primary);
-  if (!primaryProperty) {
-    throw new OntologyValidationError2(`[Sixb] Object type '${objectType.id}' has no primary property`);
-  }
-  return primaryProperty;
-}
-function assertPrimaryPropertyNotUpdated(objectType, properties) {
-  const primaryProperty = getPrimaryProperty(objectType);
-  if (Object.hasOwn(properties, primaryProperty.id)) {
-    throw new EditBatchError2(`[Sixb] EditBatch cannot update primary property '${objectType.id}.${primaryProperty.id}'.`);
-  }
-}
-function normalizeEditablePropertyIds(params) {
-  const { objectType, propertyIds, operation } = params;
-  const primaryProperty = getPrimaryProperty(objectType);
-  const normalized = [];
-  const seen = new Set;
-  for (const propertyId of propertyIds) {
-    if (typeof propertyId !== "string" || !propertyId.trim()) {
-      throw new EditBatchError2(`[Sixb] EditBatch ${objectType.id}.${operation} property id must be a non-empty string.`);
-    }
-    const property = objectType.properties.find((candidate) => candidate.id === propertyId);
-    if (!property) {
-      throw new EditBatchError2(`[Sixb] EditBatch ${operation} references unknown property '${objectType.id}.${propertyId}'.`);
-    }
-    if (property.id === primaryProperty.id) {
-      throw new EditBatchError2(`[Sixb] EditBatch cannot ${operation} primary property '${objectType.id}.${propertyId}'.`);
-    }
-    if (property.mode === "telemetry") {
-      throw new EditBatchError2(`[Sixb] EditBatch cannot ${operation} telemetry property '${objectType.id}.${propertyId}'.`);
-    }
-    if (seen.has(propertyId))
-      continue;
-    seen.add(propertyId);
-    normalized.push(propertyId);
-  }
-  if (normalized.length === 0) {
-    throw new EditBatchError2(`[Sixb] EditBatch ${objectType.id}.${operation} requires at least one property id.`);
-  }
-  return normalized;
-}
-function assertNoTelemetryProperties(definitions, properties, path) {
-  for (const propertyId of Object.keys(properties)) {
-    const property = definitions.find((candidate) => candidate.id === propertyId);
-    if (property?.mode === "telemetry") {
-      throw new EditBatchError2(`[Sixb] EditBatch cannot edit telemetry property '${path}.${propertyId}' in the MVP.`);
-    }
-  }
-}
-
-// src/edits/recorder.ts
-var EMPTY_VALUE_TYPES = new Map;
-async function recordEdits(options, handler) {
-  const recorder = createEditRecorder(options);
-  await handler({ objects: recorder.objects });
-  return recorder.toEditBatch();
-}
-function createEditRecorder(options) {
-  if (!options.runId.trim()) {
-    throw new EditBatchError2("[Sixb] recordEdits requires a non-empty runId.");
-  }
-  const operations = [];
-  const valueTypesById = options.valueTypesById ?? EMPTY_VALUE_TYPES;
-  function objects(objectType) {
-    return {
-      byId(primaryId) {
-        return createObjectHandle(objectType, createRef(objectType.id, primaryId));
-      },
-      create(properties) {
-        const operationPath = String(operations.length);
-        const primaryProperty = getPrimaryProperty(objectType);
-        const rawProperties = assertRecord(properties, `${objectType.id}.create.properties`);
-        const primaryValue = rawProperties[primaryProperty.id] ?? generatePrimaryId({
-          runId: options.runId,
-          operationPath,
-          objectTypeId: objectType.id
-        });
-        if (typeof primaryValue !== "string" || !primaryValue.trim()) {
-          throw new EditBatchError2(`[Sixb] EditBatch create '${objectType.id}' primary property '${primaryProperty.id}' must be a non-empty string.`);
-        }
-        const normalizedProperties = normalizeObjectEditProperties({
-          objectType,
-          properties: {
-            ...rawProperties,
-            [primaryProperty.id]: primaryValue
-          },
-          valueTypesById,
-          path: `${objectType.id}.create`
-        });
-        assertRequiredProperties2(objectType, normalizedProperties);
-        operations.push({
-          kind: "object.create",
-          objectTypeId: objectType.id,
-          primaryId: primaryValue,
-          properties: withoutPrimaryProperty(normalizedProperties, primaryProperty.id)
-        });
-        return createObjectHandle(objectType, {
-          objectTypeId: objectType.id,
-          primaryId: primaryValue
-        });
-      }
-    };
-  }
-  function toEditBatch() {
-    return { operations: [...operations] };
-  }
-  function createObjectHandle(objectType, ref) {
-    const handle = {
-      objectTypeId: ref.objectTypeId,
-      primaryId: ref.primaryId
-    };
-    Object.defineProperties(handle, {
-      objectType: {
-        value: objectType
-      },
-      update: {
-        value(properties) {
-          const normalizedProperties = normalizeObjectEditProperties({
-            objectType,
-            properties: assertRecord(properties, `${objectType.id}.update.properties`),
-            valueTypesById,
-            path: `${objectType.id}.update`
-          });
-          assertPrimaryPropertyNotUpdated(objectType, normalizedProperties);
-          if (Object.keys(normalizedProperties).length === 0) {
-            throw new EditBatchError2(`[Sixb] EditBatch update '${objectType.id}:${ref.primaryId}' must set at least one property.`);
-          }
-          operations.push({
-            kind: "object.update",
-            objectTypeId: ref.objectTypeId,
-            primaryId: ref.primaryId,
-            properties: normalizedProperties
-          });
-        }
-      },
-      unset: {
-        value(...propertyIds) {
-          operations.push({
-            kind: "object.unset",
-            objectTypeId: ref.objectTypeId,
-            primaryId: ref.primaryId,
-            propertyIds: normalizeEditablePropertyIds({
-              objectType,
-              propertyIds,
-              operation: "unset"
-            })
-          });
-        }
-      },
-      reset: {
-        value(...propertyIds) {
-          operations.push({
-            kind: "object.reset",
-            objectTypeId: ref.objectTypeId,
-            primaryId: ref.primaryId,
-            propertyIds: normalizeEditablePropertyIds({
-              objectType,
-              propertyIds,
-              operation: "reset"
-            })
-          });
-        }
-      },
-      delete: {
-        value() {
-          operations.push({
-            kind: "object.delete",
-            objectTypeId: ref.objectTypeId,
-            primaryId: ref.primaryId
-          });
-        }
-      },
-      restore: {
-        value() {
-          operations.push({
-            kind: "object.restore",
-            objectTypeId: ref.objectTypeId,
-            primaryId: ref.primaryId
-          });
-        }
-      },
-      link: {
-        value(link, target, linkOptions) {
-          assertLinkTokenSource(ref, link);
-          const properties = linkOptions?.properties === undefined ? undefined : normalizeLinkEditProperties({
-            sourceObjectTypeId: ref.objectTypeId,
-            linkId: link.id,
-            linkDefinition: link.link,
-            properties: linkOptions.properties,
-            valueTypesById
-          });
-          operations.push({
-            kind: "link.upsert",
-            source: toPlainRef(ref),
-            linkId: link.id,
-            target: toPlainRef(target),
-            ...properties !== undefined ? { properties } : {}
-          });
-        }
-      },
-      unlink: {
-        value(link, target) {
-          assertLinkTokenSource(ref, link);
-          operations.push({
-            kind: "link.delete",
-            source: toPlainRef(ref),
-            linkId: link.id,
-            target: toPlainRef(target)
-          });
-        }
-      },
-      resetLink: {
-        value(link, target) {
-          assertLinkTokenSource(ref, link);
-          operations.push({
-            kind: "link.reset",
-            source: toPlainRef(ref),
-            linkId: link.id,
-            target: toPlainRef(target)
-          });
-        }
-      }
-    });
-    return handle;
-  }
-  return {
-    objects,
-    toEditBatch
-  };
-}
-function assertLinkTokenSource(source, link) {
-  if (source.objectTypeId !== link.objectTypeId) {
-    throw new OntologyValidationError2(`[Sixb] Link token ${link.objectTypeId}.${link.id} cannot be used with ${source.objectTypeId}`);
-  }
-}
-function createRef(objectTypeId, primaryId) {
-  return {
-    objectTypeId: assertNonEmptyString(objectTypeId, "objectTypeId"),
-    primaryId: assertNonEmptyString(primaryId, `${objectTypeId}.primaryId`)
-  };
-}
-function generatePrimaryId(params) {
-  const hash = createHash("sha256").update(`${params.runId}:${params.operationPath}:${params.objectTypeId}`).digest("hex").slice(0, 24);
-  return `edit_${hash}`;
-}
-function withoutPrimaryProperty(properties, primaryPropertyId) {
-  const { [primaryPropertyId]: _primary, ...rest } = properties;
-  return rest;
-}
-function assertRecord(value, label) {
-  if (typeof value !== "object" || value === null || Array.isArray(value)) {
-    throw new EditBatchError2(`[Sixb] EditBatch ${label} must be an object.`);
-  }
-  return value;
-}
-function assertNonEmptyString(value, label) {
-  if (typeof value !== "string" || !value.trim()) {
-    throw new EditBatchError2(`[Sixb] EditBatch ${label} must be a non-empty string.`);
-  }
-  return value;
-}
-function toPlainRef(ref) {
-  return {
-    objectTypeId: ref.objectTypeId,
-    primaryId: ref.primaryId
-  };
-}
-export {
-  recordEdits
-};
-
-//# debugId=C332D402574FA7A464756E2164756E21

package/dist/actions/worker.js.map

@@ -1,11 +0,0 @@
-{
-  "version": 3,
-  "sources": ["../src/edits/recorder.ts", "../src/edits/properties.ts"],
-  "sourcesContent": [
-    "import { createHash } from \"node:crypto\"\nimport type { ObjectLink, ValueType } from \"../ontology\"\nimport { OntologyValidationError } from \"../ontology/errors\"\nimport type { ObjectTypeWithPropertyTokens } from \"../ontology/tokens\"\nimport { assertRequiredProperties } from \"../ontology/validation\"\nimport { EditBatchError } from \"./errors\"\nimport {\n  assertPrimaryPropertyNotUpdated,\n  getPrimaryProperty,\n  normalizeEditablePropertyIds,\n  normalizeLinkEditProperties,\n  normalizeObjectEditProperties,\n} from \"./properties\"\nimport type {\n  EditBatch,\n  EditObjectHandle,\n  EditObjectProperties,\n  EditObjectRef,\n  EditOperation,\n  RecordEditsContext,\n  RecordEditsHandler,\n  RecordEditsOptions,\n} from \"./types\"\n\nexport type { RecordEditsHandler, RecordEditsOptions } from \"./types\"\n\nconst EMPTY_VALUE_TYPES = new Map<string, ValueType>()\n\ntype RuntimeEditRecorder = {\n  readonly objects: (objectType: ObjectTypeWithPropertyTokens) => unknown\n  toEditBatch(): EditBatch\n}\n\nexport async function recordEdits(\n  options: RecordEditsOptions,\n  handler: RecordEditsHandler\n): Promise<EditBatch> {\n  const recorder = createEditRecorder(options)\n  await handler({ objects: recorder.objects } as RecordEditsContext)\n  return recorder.toEditBatch()\n}\n\nfunction createEditRecorder(options: RecordEditsOptions): RuntimeEditRecorder {\n  if (!options.runId.trim()) {\n    throw new EditBatchError(\"[Sixb] recordEdits requires a non-empty runId.\")\n  }\n\n  const operations: EditOperation[] = []\n  const valueTypesById = options.valueTypesById ?? EMPTY_VALUE_TYPES\n\n  function objects(objectType: ObjectTypeWithPropertyTokens) {\n    return {\n      byId(primaryId: string) {\n        return createObjectHandle(objectType, createRef(objectType.id, primaryId))\n      },\n\n      create(properties: unknown) {\n        const operationPath = String(operations.length)\n        const primaryProperty = getPrimaryProperty(objectType)\n        const rawProperties = assertRecord(properties, `${objectType.id}.create.properties`)\n        const primaryValue =\n          rawProperties[primaryProperty.id] ??\n          generatePrimaryId({\n            runId: options.runId,\n            operationPath,\n            objectTypeId: objectType.id,\n          })\n\n        if (typeof primaryValue !== \"string\" || !primaryValue.trim()) {\n          throw new EditBatchError(\n            `[Sixb] EditBatch create '${objectType.id}' primary property '${primaryProperty.id}' must be a non-empty string.`\n          )\n        }\n\n        const normalizedProperties = normalizeObjectEditProperties({\n          objectType,\n          properties: {\n            ...rawProperties,\n            [primaryProperty.id]: primaryValue,\n          },\n          valueTypesById,\n          path: `${objectType.id}.create`,\n        })\n        assertRequiredProperties(objectType, normalizedProperties)\n\n        operations.push({\n          kind: \"object.create\",\n          objectTypeId: objectType.id,\n          primaryId: primaryValue,\n          properties: withoutPrimaryProperty(normalizedProperties, primaryProperty.id),\n        })\n        return createObjectHandle(objectType, {\n          objectTypeId: objectType.id,\n          primaryId: primaryValue,\n        })\n      },\n    }\n  }\n\n  function toEditBatch(): EditBatch {\n    return { operations: [...operations] }\n  }\n\n  function createObjectHandle(\n    objectType: ObjectTypeWithPropertyTokens,\n    ref: EditObjectRef\n  ): EditObjectHandle<ObjectTypeWithPropertyTokens> {\n    const handle = {\n      objectTypeId: ref.objectTypeId,\n      primaryId: ref.primaryId,\n    }\n\n    Object.defineProperties(handle, {\n      objectType: {\n        value: objectType,\n      },\n      update: {\n        value(properties: Readonly<Record<string, unknown>>) {\n          const normalizedProperties = normalizeObjectEditProperties({\n            objectType,\n            properties: assertRecord(properties, `${objectType.id}.update.properties`),\n            valueTypesById,\n            path: `${objectType.id}.update`,\n          })\n          assertPrimaryPropertyNotUpdated(objectType, normalizedProperties)\n          // An empty patch resolves to a null override and commits as `unchanged`, so a handler\n          // that built its update conditionally would report a successful run that wrote nothing.\n          if (Object.keys(normalizedProperties).length === 0) {\n            throw new EditBatchError(\n              `[Sixb] EditBatch update '${objectType.id}:${ref.primaryId}' must set at least one property.`\n            )\n          }\n\n          operations.push({\n            kind: \"object.update\",\n            objectTypeId: ref.objectTypeId,\n            primaryId: ref.primaryId,\n            properties: normalizedProperties,\n          })\n        },\n      },\n      unset: {\n        value(...propertyIds: readonly unknown[]) {\n          operations.push({\n            kind: \"object.unset\",\n            objectTypeId: ref.objectTypeId,\n            primaryId: ref.primaryId,\n            propertyIds: normalizeEditablePropertyIds({\n              objectType,\n              propertyIds,\n              operation: \"unset\",\n            }),\n          })\n        },\n      },\n      reset: {\n        value(...propertyIds: readonly unknown[]) {\n          operations.push({\n            kind: \"object.reset\",\n            objectTypeId: ref.objectTypeId,\n            primaryId: ref.primaryId,\n            propertyIds: normalizeEditablePropertyIds({\n              objectType,\n              propertyIds,\n              operation: \"reset\",\n            }),\n          })\n        },\n      },\n      delete: {\n        value() {\n          operations.push({\n            kind: \"object.delete\",\n            objectTypeId: ref.objectTypeId,\n            primaryId: ref.primaryId,\n          })\n        },\n      },\n      restore: {\n        value() {\n          operations.push({\n            kind: \"object.restore\",\n            objectTypeId: ref.objectTypeId,\n            primaryId: ref.primaryId,\n          })\n        },\n      },\n      link: {\n        value(\n          link: { objectTypeId: string; id: string; link: ObjectLink },\n          target: EditObjectRef,\n          linkOptions?: { readonly properties?: Readonly<Record<string, unknown>> }\n        ) {\n          assertLinkTokenSource(ref, link)\n\n          const properties =\n            linkOptions?.properties === undefined\n              ? undefined\n              : normalizeLinkEditProperties({\n                  sourceObjectTypeId: ref.objectTypeId,\n                  linkId: link.id,\n                  linkDefinition: link.link,\n                  properties: linkOptions.properties,\n                  valueTypesById,\n                })\n\n          operations.push({\n            kind: \"link.upsert\",\n            source: toPlainRef(ref),\n            linkId: link.id,\n            target: toPlainRef(target),\n            ...(properties !== undefined ? { properties } : {}),\n          })\n        },\n      },\n      unlink: {\n        value(link: { objectTypeId: string; id: string; link: ObjectLink }, target: EditObjectRef) {\n          assertLinkTokenSource(ref, link)\n\n          operations.push({\n            kind: \"link.delete\",\n            source: toPlainRef(ref),\n            linkId: link.id,\n            target: toPlainRef(target),\n          })\n        },\n      },\n      resetLink: {\n        value(link: { objectTypeId: string; id: string; link: ObjectLink }, target: EditObjectRef) {\n          assertLinkTokenSource(ref, link)\n\n          operations.push({\n            kind: \"link.reset\",\n            source: toPlainRef(ref),\n            linkId: link.id,\n            target: toPlainRef(target),\n          })\n        },\n      },\n    })\n\n    return handle as EditObjectHandle<ObjectTypeWithPropertyTokens>\n  }\n\n  return {\n    objects,\n    toEditBatch,\n  }\n}\n\nfunction assertLinkTokenSource(\n  source: EditObjectRef,\n  link: { readonly objectTypeId: string; readonly id: string }\n): void {\n  if (source.objectTypeId !== link.objectTypeId) {\n    throw new OntologyValidationError(\n      `[Sixb] Link token ${link.objectTypeId}.${link.id} cannot be used with ${source.objectTypeId}`\n    )\n  }\n}\n\nfunction createRef<TObjectTypeId extends string>(\n  objectTypeId: TObjectTypeId,\n  primaryId: string\n): EditObjectRef<TObjectTypeId> {\n  return {\n    objectTypeId: assertNonEmptyString(objectTypeId, \"objectTypeId\") as TObjectTypeId,\n    primaryId: assertNonEmptyString(primaryId, `${objectTypeId}.primaryId`),\n  }\n}\n\nfunction generatePrimaryId(params: {\n  readonly runId: string\n  readonly operationPath: string\n  readonly objectTypeId: string\n}): string {\n  const hash = createHash(\"sha256\")\n    .update(`${params.runId}:${params.operationPath}:${params.objectTypeId}`)\n    .digest(\"hex\")\n    .slice(0, 24)\n  return `edit_${hash}`\n}\n\n/** Primary identity lives in the object ref; managed authority never stores it as a property. */\nfunction withoutPrimaryProperty(\n  properties: EditObjectProperties,\n  primaryPropertyId: string\n): EditObjectProperties {\n  const { [primaryPropertyId]: _primary, ...rest } = properties\n  return rest\n}\n\nfunction assertRecord(value: unknown, label: string): Record<string, unknown> {\n  if (typeof value !== \"object\" || value === null || Array.isArray(value)) {\n    throw new EditBatchError(`[Sixb] EditBatch ${label} must be an object.`)\n  }\n  return value as Record<string, unknown>\n}\n\nfunction assertNonEmptyString(value: unknown, label: string): string {\n  if (typeof value !== \"string\" || !value.trim()) {\n    throw new EditBatchError(`[Sixb] EditBatch ${label} must be a non-empty string.`)\n  }\n  return value\n}\n\nfunction toPlainRef(ref: EditObjectRef): EditObjectRef {\n  return {\n    objectTypeId: ref.objectTypeId,\n    primaryId: ref.primaryId,\n  }\n}\n",
-    "import type { ObjectLink, Property, ValueType } from \"../ontology\"\nimport { OntologyValidationError } from \"../ontology/errors\"\nimport type { ObjectTypeWithPropertyTokens } from \"../ontology/tokens\"\nimport {\n  assertKnownProperties,\n  assertValidFileRefs,\n  normalizeObjectProperties,\n  validateObjectProperties,\n  validatePropertyValue,\n} from \"../ontology/validation\"\nimport { EditBatchError } from \"./errors\"\nimport type { EditObjectProperties } from \"./types\"\n\nexport function normalizeObjectEditProperties(params: {\n  readonly objectType: ObjectTypeWithPropertyTokens\n  readonly properties: Record<string, unknown>\n  readonly valueTypesById: ReadonlyMap<string, ValueType>\n  readonly path: string\n}): EditObjectProperties {\n  const { objectType, properties, valueTypesById, path } = params\n  assertKnownProperties(objectType, properties)\n  assertNoTelemetryProperties(objectType.properties, properties, path)\n  validateObjectProperties(objectType, properties, valueTypesById)\n  assertValidFileRefs(properties, objectType.id)\n  return normalizeObjectProperties(objectType.properties, properties, valueTypesById, path)\n}\n\nexport function normalizeLinkEditProperties(params: {\n  readonly sourceObjectTypeId: string\n  readonly linkId: string\n  readonly linkDefinition: ObjectLink\n  readonly properties: Readonly<Record<string, unknown>>\n  readonly valueTypesById: ReadonlyMap<string, ValueType>\n}): EditObjectProperties {\n  const { sourceObjectTypeId, linkId, linkDefinition, properties, valueTypesById } = params\n  const linkProperties = linkDefinition.properties ?? []\n\n  if (linkProperties.length === 0 && Object.keys(properties).length > 0) {\n    throw new OntologyValidationError(\n      `[Sixb] Link ${sourceObjectTypeId}.${linkId} does not define link properties`\n    )\n  }\n\n  const knownPropertyIds = new Set(linkProperties.map((property) => property.id))\n  for (const propertyId of Object.keys(properties)) {\n    if (!knownPropertyIds.has(propertyId)) {\n      throw new OntologyValidationError(\n        `[Sixb] Unknown link property '${propertyId}' for link '${sourceObjectTypeId}.${linkId}'`\n      )\n    }\n  }\n\n  assertNoTelemetryProperties(linkProperties, properties, `${sourceObjectTypeId}.${linkId}`)\n\n  for (const [propertyId, value] of Object.entries(properties)) {\n    const property = linkProperties.find((candidate) => candidate.id === propertyId)\n    if (!property) continue\n    validatePropertyValue(\n      property,\n      value,\n      `${sourceObjectTypeId}.${linkId}.${propertyId}`,\n      valueTypesById\n    )\n  }\n  assertValidFileRefs(properties, `${sourceObjectTypeId}.${linkId}`)\n\n  return normalizeObjectProperties(\n    linkProperties,\n    properties,\n    valueTypesById,\n    `${sourceObjectTypeId}.${linkId}`\n  )\n}\n\nexport function getPrimaryProperty(objectType: ObjectTypeWithPropertyTokens): Property {\n  const primaryProperty = objectType.properties.find((property) => property.primary)\n  if (!primaryProperty) {\n    throw new OntologyValidationError(\n      `[Sixb] Object type '${objectType.id}' has no primary property`\n    )\n  }\n  return primaryProperty\n}\n\nexport function assertPrimaryPropertyNotUpdated(\n  objectType: ObjectTypeWithPropertyTokens,\n  properties: EditObjectProperties\n): void {\n  const primaryProperty = getPrimaryProperty(objectType)\n  if (Object.hasOwn(properties, primaryProperty.id)) {\n    throw new EditBatchError(\n      `[Sixb] EditBatch cannot update primary property '${objectType.id}.${primaryProperty.id}'.`\n    )\n  }\n}\n\n/** Validates `unset`/`reset` targets: known, non-primary, and not telemetry-backed. */\nexport function normalizeEditablePropertyIds(params: {\n  readonly objectType: ObjectTypeWithPropertyTokens\n  readonly propertyIds: readonly unknown[]\n  readonly operation: \"unset\" | \"reset\"\n}): readonly string[] {\n  const { objectType, propertyIds, operation } = params\n  const primaryProperty = getPrimaryProperty(objectType)\n  const normalized: string[] = []\n  const seen = new Set<string>()\n\n  for (const propertyId of propertyIds) {\n    if (typeof propertyId !== \"string\" || !propertyId.trim()) {\n      throw new EditBatchError(\n        `[Sixb] EditBatch ${objectType.id}.${operation} property id must be a non-empty string.`\n      )\n    }\n    const property = objectType.properties.find((candidate) => candidate.id === propertyId)\n    if (!property) {\n      throw new EditBatchError(\n        `[Sixb] EditBatch ${operation} references unknown property '${objectType.id}.${propertyId}'.`\n      )\n    }\n    if (property.id === primaryProperty.id) {\n      throw new EditBatchError(\n        `[Sixb] EditBatch cannot ${operation} primary property '${objectType.id}.${propertyId}'.`\n      )\n    }\n    if (property.mode === \"telemetry\") {\n      throw new EditBatchError(\n        `[Sixb] EditBatch cannot ${operation} telemetry property '${objectType.id}.${propertyId}'.`\n      )\n    }\n    if (seen.has(propertyId)) continue\n    seen.add(propertyId)\n    normalized.push(propertyId)\n  }\n\n  if (normalized.length === 0) {\n    throw new EditBatchError(\n      `[Sixb] EditBatch ${objectType.id}.${operation} requires at least one property id.`\n    )\n  }\n  return normalized\n}\n\nfunction assertNoTelemetryProperties(\n  definitions: readonly Property[],\n  properties: Readonly<Record<string, unknown>>,\n  path: string\n): void {\n  for (const propertyId of Object.keys(properties)) {\n    const property = definitions.find((candidate) => candidate.id === propertyId)\n    if (property?.mode === \"telemetry\") {\n      throw new EditBatchError(\n        `[Sixb] EditBatch cannot edit telemetry property '${path}.${propertyId}' in the MVP.`\n      )\n    }\n  }\n}\n"
-  ],
-  "mappings": ";;;;;;;;;;;;;;;;;;;AAAA;;;ACaO,SAAS,6BAA6B,CAAC,QAKrB;AAAA,EACvB,QAAQ,YAAY,YAAY,gBAAgB,SAAS;AAAA,EACzD,uBAAsB,YAAY,UAAU;AAAA,EAC5C,4BAA4B,WAAW,YAAY,YAAY,IAAI;AAAA,EACnE,0BAAyB,YAAY,YAAY,cAAc;AAAA,EAC/D,qBAAoB,YAAY,WAAW,EAAE;AAAA,EAC7C,OAAO,2BAA0B,WAAW,YAAY,YAAY,gBAAgB,IAAI;AAAA;AAGnF,SAAS,2BAA2B,CAAC,QAMnB;AAAA,EACvB,QAAQ,oBAAoB,QAAQ,gBAAgB,YAAY,mBAAmB;AAAA,EACnF,MAAM,iBAAiB,eAAe,cAAc,CAAC;AAAA,EAErD,IAAI,eAAe,WAAW,KAAK,OAAO,KAAK,UAAU,EAAE,SAAS,GAAG;AAAA,IACrE,MAAM,IAAI,yBACR,eAAe,sBAAsB,wCACvC;AAAA,EACF;AAAA,EAEA,MAAM,mBAAmB,IAAI,IAAI,eAAe,IAAI,CAAC,aAAa,SAAS,EAAE,CAAC;AAAA,EAC9E,WAAW,cAAc,OAAO,KAAK,UAAU,GAAG;AAAA,IAChD,IAAI,CAAC,iBAAiB,IAAI,UAAU,GAAG;AAAA,MACrC,MAAM,IAAI,yBACR,iCAAiC,yBAAyB,sBAAsB,SAClF;AAAA,IACF;AAAA,EACF;AAAA,EAEA,4BAA4B,gBAAgB,YAAY,GAAG,sBAAsB,QAAQ;AAAA,EAEzF,YAAY,YAAY,UAAU,OAAO,QAAQ,UAAU,GAAG;AAAA,IAC5D,MAAM,WAAW,eAAe,KAAK,CAAC,cAAc,UAAU,OAAO,UAAU;AAAA,IAC/E,IAAI,CAAC;AAAA,MAAU;AAAA,IACf,uBACE,UACA,OACA,GAAG,sBAAsB,UAAU,cACnC,cACF;AAAA,EACF;AAAA,EACA,qBAAoB,YAAY,GAAG,sBAAsB,QAAQ;AAAA,EAEjE,OAAO,2BACL,gBACA,YACA,gBACA,GAAG,sBAAsB,QAC3B;AAAA;AAGK,SAAS,kBAAkB,CAAC,YAAoD;AAAA,EACrF,MAAM,kBAAkB,WAAW,WAAW,KAAK,CAAC,aAAa,SAAS,OAAO;AAAA,EACjF,IAAI,CAAC,iBAAiB;AAAA,IACpB,MAAM,IAAI,yBACR,uBAAuB,WAAW,6BACpC;AAAA,EACF;AAAA,EACA,OAAO;AAAA;AAGF,SAAS,+BAA+B,CAC7C,YACA,YACM;AAAA,EACN,MAAM,kBAAkB,mBAAmB,UAAU;AAAA,EACrD,IAAI,OAAO,OAAO,YAAY,gBAAgB,EAAE,GAAG;AAAA,IACjD,MAAM,IAAI,gBACR,oDAAoD,WAAW,MAAM,gBAAgB,MACvF;AAAA,EACF;AAAA;AAIK,SAAS,4BAA4B,CAAC,QAIvB;AAAA,EACpB,QAAQ,YAAY,aAAa,cAAc;AAAA,EAC/C,MAAM,kBAAkB,mBAAmB,UAAU;AAAA,EACrD,MAAM,aAAuB,CAAC;AAAA,EAC9B,MAAM,OAAO,IAAI;AAAA,EAEjB,WAAW,cAAc,aAAa;AAAA,IACpC,IAAI,OAAO,eAAe,YAAY,CAAC,WAAW,KAAK,GAAG;AAAA,MACxD,MAAM,IAAI,gBACR,oBAAoB,WAAW,MAAM,mDACvC;AAAA,IACF;AAAA,IACA,MAAM,WAAW,WAAW,WAAW,KAAK,CAAC,cAAc,UAAU,OAAO,UAAU;AAAA,IACtF,IAAI,CAAC,UAAU;AAAA,MACb,MAAM,IAAI,gBACR,oBAAoB,0CAA0C,WAAW,MAAM,cACjF;AAAA,IACF;AAAA,IACA,IAAI,SAAS,OAAO,gBAAgB,IAAI;AAAA,MACtC,MAAM,IAAI,gBACR,2BAA2B,+BAA+B,WAAW,MAAM,cAC7E;AAAA,IACF;AAAA,IACA,IAAI,SAAS,SAAS,aAAa;AAAA,MACjC,MAAM,IAAI,gBACR,2BAA2B,iCAAiC,WAAW,MAAM,cAC/E;AAAA,IACF;AAAA,IACA,IAAI,KAAK,IAAI,UAAU;AAAA,MAAG;AAAA,IAC1B,KAAK,IAAI,UAAU;AAAA,IACnB,WAAW,KAAK,UAAU;AAAA,EAC5B;AAAA,EAEA,IAAI,WAAW,WAAW,GAAG;AAAA,IAC3B,MAAM,IAAI,gBACR,oBAAoB,WAAW,MAAM,8CACvC;AAAA,EACF;AAAA,EACA,OAAO;AAAA;AAGT,SAAS,2BAA2B,CAClC,aACA,YACA,MACM;AAAA,EACN,WAAW,cAAc,OAAO,KAAK,UAAU,GAAG;AAAA,IAChD,MAAM,WAAW,YAAY,KAAK,CAAC,cAAc,UAAU,OAAO,UAAU;AAAA,IAC5E,IAAI,UAAU,SAAS,aAAa;AAAA,MAClC,MAAM,IAAI,gBACR,oDAAoD,QAAQ,yBAC9D;AAAA,IACF;AAAA,EACF;AAAA;;;ADhIF,IAAM,oBAAoB,IAAI;AAO9B,eAAsB,WAAW,CAC/B,SACA,SACoB;AAAA,EACpB,MAAM,WAAW,mBAAmB,OAAO;AAAA,EAC3C,MAAM,QAAQ,EAAE,SAAS,SAAS,QAAQ,CAAuB;AAAA,EACjE,OAAO,SAAS,YAAY;AAAA;AAG9B,SAAS,kBAAkB,CAAC,SAAkD;AAAA,EAC5E,IAAI,CAAC,QAAQ,MAAM,KAAK,GAAG;AAAA,IACzB,MAAM,IAAI,gBAAe,gDAAgD;AAAA,EAC3E;AAAA,EAEA,MAAM,aAA8B,CAAC;AAAA,EACrC,MAAM,iBAAiB,QAAQ,kBAAkB;AAAA,EAEjD,SAAS,OAAO,CAAC,YAA0C;AAAA,IACzD,OAAO;AAAA,MACL,IAAI,CAAC,WAAmB;AAAA,QACtB,OAAO,mBAAmB,YAAY,UAAU,WAAW,IAAI,SAAS,CAAC;AAAA;AAAA,MAG3E,MAAM,CAAC,YAAqB;AAAA,QAC1B,MAAM,gBAAgB,OAAO,WAAW,MAAM;AAAA,QAC9C,MAAM,kBAAkB,mBAAmB,UAAU;AAAA,QACrD,MAAM,gBAAgB,aAAa,YAAY,GAAG,WAAW,sBAAsB;AAAA,QACnF,MAAM,eACJ,cAAc,gBAAgB,OAC9B,kBAAkB;AAAA,UAChB,OAAO,QAAQ;AAAA,UACf;AAAA,UACA,cAAc,WAAW;AAAA,QAC3B,CAAC;AAAA,QAEH,IAAI,OAAO,iBAAiB,YAAY,CAAC,aAAa,KAAK,GAAG;AAAA,UAC5D,MAAM,IAAI,gBACR,4BAA4B,WAAW,yBAAyB,gBAAgB,iCAClF;AAAA,QACF;AAAA,QAEA,MAAM,uBAAuB,8BAA8B;AAAA,UACzD;AAAA,UACA,YAAY;AAAA,eACP;AAAA,aACF,gBAAgB,KAAK;AAAA,UACxB;AAAA,UACA;AAAA,UACA,MAAM,GAAG,WAAW;AAAA,QACtB,CAAC;AAAA,QACD,0BAAyB,YAAY,oBAAoB;AAAA,QAEzD,WAAW,KAAK;AAAA,UACd,MAAM;AAAA,UACN,cAAc,WAAW;AAAA,UACzB,WAAW;AAAA,UACX,YAAY,uBAAuB,sBAAsB,gBAAgB,EAAE;AAAA,QAC7E,CAAC;AAAA,QACD,OAAO,mBAAmB,YAAY;AAAA,UACpC,cAAc,WAAW;AAAA,UACzB,WAAW;AAAA,QACb,CAAC;AAAA;AAAA,IAEL;AAAA;AAAA,EAGF,SAAS,WAAW,GAAc;AAAA,IAChC,OAAO,EAAE,YAAY,CAAC,GAAG,UAAU,EAAE;AAAA;AAAA,EAGvC,SAAS,kBAAkB,CACzB,YACA,KACgD;AAAA,IAChD,MAAM,SAAS;AAAA,MACb,cAAc,IAAI;AAAA,MAClB,WAAW,IAAI;AAAA,IACjB;AAAA,IAEA,OAAO,iBAAiB,QAAQ;AAAA,MAC9B,YAAY;AAAA,QACV,OAAO;AAAA,MACT;AAAA,MACA,QAAQ;AAAA,QACN,KAAK,CAAC,YAA+C;AAAA,UACnD,MAAM,uBAAuB,8BAA8B;AAAA,YACzD;AAAA,YACA,YAAY,aAAa,YAAY,GAAG,WAAW,sBAAsB;AAAA,YACzE;AAAA,YACA,MAAM,GAAG,WAAW;AAAA,UACtB,CAAC;AAAA,UACD,gCAAgC,YAAY,oBAAoB;AAAA,UAGhE,IAAI,OAAO,KAAK,oBAAoB,EAAE,WAAW,GAAG;AAAA,YAClD,MAAM,IAAI,gBACR,4BAA4B,WAAW,MAAM,IAAI,4CACnD;AAAA,UACF;AAAA,UAEA,WAAW,KAAK;AAAA,YACd,MAAM;AAAA,YACN,cAAc,IAAI;AAAA,YAClB,WAAW,IAAI;AAAA,YACf,YAAY;AAAA,UACd,CAAC;AAAA;AAAA,MAEL;AAAA,MACA,OAAO;AAAA,QACL,KAAK,IAAI,aAAiC;AAAA,UACxC,WAAW,KAAK;AAAA,YACd,MAAM;AAAA,YACN,cAAc,IAAI;AAAA,YAClB,WAAW,IAAI;AAAA,YACf,aAAa,6BAA6B;AAAA,cACxC;AAAA,cACA;AAAA,cACA,WAAW;AAAA,YACb,CAAC;AAAA,UACH,CAAC;AAAA;AAAA,MAEL;AAAA,MACA,OAAO;AAAA,QACL,KAAK,IAAI,aAAiC;AAAA,UACxC,WAAW,KAAK;AAAA,YACd,MAAM;AAAA,YACN,cAAc,IAAI;AAAA,YAClB,WAAW,IAAI;AAAA,YACf,aAAa,6BAA6B;AAAA,cACxC;AAAA,cACA;AAAA,cACA,WAAW;AAAA,YACb,CAAC;AAAA,UACH,CAAC;AAAA;AAAA,MAEL;AAAA,MACA,QAAQ;AAAA,QACN,KAAK,GAAG;AAAA,UACN,WAAW,KAAK;AAAA,YACd,MAAM;AAAA,YACN,cAAc,IAAI;AAAA,YAClB,WAAW,IAAI;AAAA,UACjB,CAAC;AAAA;AAAA,MAEL;AAAA,MACA,SAAS;AAAA,QACP,KAAK,GAAG;AAAA,UACN,WAAW,KAAK;AAAA,YACd,MAAM;AAAA,YACN,cAAc,IAAI;AAAA,YAClB,WAAW,IAAI;AAAA,UACjB,CAAC;AAAA;AAAA,MAEL;AAAA,MACA,MAAM;AAAA,QACJ,KAAK,CACH,MACA,QACA,aACA;AAAA,UACA,sBAAsB,KAAK,IAAI;AAAA,UAE/B,MAAM,aACJ,aAAa,eAAe,YACxB,YACA,4BAA4B;AAAA,YAC1B,oBAAoB,IAAI;AAAA,YACxB,QAAQ,KAAK;AAAA,YACb,gBAAgB,KAAK;AAAA,YACrB,YAAY,YAAY;AAAA,YACxB;AAAA,UACF,CAAC;AAAA,UAEP,WAAW,KAAK;AAAA,YACd,MAAM;AAAA,YACN,QAAQ,WAAW,GAAG;AAAA,YACtB,QAAQ,KAAK;AAAA,YACb,QAAQ,WAAW,MAAM;AAAA,eACrB,eAAe,YAAY,EAAE,WAAW,IAAI,CAAC;AAAA,UACnD,CAAC;AAAA;AAAA,MAEL;AAAA,MACA,QAAQ;AAAA,QACN,KAAK,CAAC,MAA8D,QAAuB;AAAA,UACzF,sBAAsB,KAAK,IAAI;AAAA,UAE/B,WAAW,KAAK;AAAA,YACd,MAAM;AAAA,YACN,QAAQ,WAAW,GAAG;AAAA,YACtB,QAAQ,KAAK;AAAA,YACb,QAAQ,WAAW,MAAM;AAAA,UAC3B,CAAC;AAAA;AAAA,MAEL;AAAA,MACA,WAAW;AAAA,QACT,KAAK,CAAC,MAA8D,QAAuB;AAAA,UACzF,sBAAsB,KAAK,IAAI;AAAA,UAE/B,WAAW,KAAK;AAAA,YACd,MAAM;AAAA,YACN,QAAQ,WAAW,GAAG;AAAA,YACtB,QAAQ,KAAK;AAAA,YACb,QAAQ,WAAW,MAAM;AAAA,UAC3B,CAAC;AAAA;AAAA,MAEL;AAAA,IACF,CAAC;AAAA,IAED,OAAO;AAAA;AAAA,EAGT,OAAO;AAAA,IACL;AAAA,IACA;AAAA,EACF;AAAA;AAGF,SAAS,qBAAqB,CAC5B,QACA,MACM;AAAA,EACN,IAAI,OAAO,iBAAiB,KAAK,cAAc;AAAA,IAC7C,MAAM,IAAI,yBACR,qBAAqB,KAAK,gBAAgB,KAAK,0BAA0B,OAAO,cAClF;AAAA,EACF;AAAA;AAGF,SAAS,SAAuC,CAC9C,cACA,WAC8B;AAAA,EAC9B,OAAO;AAAA,IACL,cAAc,qBAAqB,cAAc,cAAc;AAAA,IAC/D,WAAW,qBAAqB,WAAW,GAAG,wBAAwB;AAAA,EACxE;AAAA;AAGF,SAAS,iBAAiB,CAAC,QAIhB;AAAA,EACT,MAAM,OAAO,WAAW,QAAQ,EAC7B,OAAO,GAAG,OAAO,SAAS,OAAO,iBAAiB,OAAO,cAAc,EACvE,OAAO,KAAK,EACZ,MAAM,GAAG,EAAE;AAAA,EACd,OAAO,QAAQ;AAAA;AAIjB,SAAS,sBAAsB,CAC7B,YACA,mBACsB;AAAA,EACtB,SAAS,oBAAoB,aAAa,SAAS;AAAA,EACnD,OAAO;AAAA;AAGT,SAAS,YAAY,CAAC,OAAgB,OAAwC;AAAA,EAC5E,IAAI,OAAO,UAAU,YAAY,UAAU,QAAQ,MAAM,QAAQ,KAAK,GAAG;AAAA,IACvE,MAAM,IAAI,gBAAe,oBAAoB,0BAA0B;AAAA,EACzE;AAAA,EACA,OAAO;AAAA;AAGT,SAAS,oBAAoB,CAAC,OAAgB,OAAuB;AAAA,EACnE,IAAI,OAAO,UAAU,YAAY,CAAC,MAAM,KAAK,GAAG;AAAA,IAC9C,MAAM,IAAI,gBAAe,oBAAoB,mCAAmC;AAAA,EAClF;AAAA,EACA,OAAO;AAAA;AAGT,SAAS,UAAU,CAAC,KAAmC;AAAA,EACrD,OAAO;AAAA,IACL,cAAc,IAAI;AAAA,IAClB,WAAW,IAAI;AAAA,EACjB;AAAA;",
-  "debugId": "C332D402574FA7A464756E2164756E21",
-  "names": []
-}

package/dist/auth/audience.d.ts

@@ -1,8 +0,0 @@
-export declare const DEFAULT_AUTH_SESSION_AUDIENCE = "atlas";
-export type AuthSessionAudience = typeof DEFAULT_AUTH_SESSION_AUDIENCE | "app";
-export interface AuthSessionAudienceOptions {
-    readonly audience?: AuthSessionAudience;
-}
-export declare function isValidAuthSessionAudience(value: string): value is AuthSessionAudience;
-export declare function resolveAuthSessionAudience(value: AuthSessionAudience | undefined): AuthSessionAudience;
-//# sourceMappingURL=audience.d.ts.map

package/dist/auth/audience.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"audience.d.ts","sourceRoot":"","sources":["../../src/auth/audience.ts"],"names":[],"mappings":"AAEA,eAAO,MAAM,6BAA6B,UAAU,CAAA;AAEpD,MAAM,MAAM,mBAAmB,GAAG,OAAO,6BAA6B,GAAG,KAAK,CAAA;AAE9E,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,QAAQ,CAAC,EAAE,mBAAmB,CAAA;CACxC;AAED,wBAAgB,0BAA0B,CAAC,KAAK,EAAE,MAAM,GAAG,KAAK,IAAI,mBAAmB,CAEtF;AAED,wBAAgB,0BAA0B,CACxC,KAAK,EAAE,mBAAmB,GAAG,SAAS,GACrC,mBAAmB,CAWrB"}

package/dist/authorization/application-access.d.ts

@@ -1,18 +0,0 @@
-import type { AuthSessionAudience } from "../auth/audience";
-import type { AuthorizationContext, ResolvedRole } from "./types";
-/** Whether declaring roles has enabled an allowlist for an application. */
-export declare function isApplicationAccessControlled(roles: readonly ResolvedRole[], audience: AuthSessionAudience): boolean;
-/**
- * Whether this principal may open this application.
- *
- * KNOWN LIMITATION (0.1.x): application access is the one capability that is **not** deny-by-default.
- * While no role mentions an application, every authenticated principal may open it; the allowlist only
- * switches on once some role grants it. Every other capability — `view`, `apply`, `run`, `observe` —
- * denies unless granted, so this is the single asymmetry in the model.
- *
- * It is deliberate for now: flipping it would lock every project out of Atlas until it declares a role,
- * including projects with no security definitions at all. Closing it means shipping a default grant with
- * the scaffold first, and it is a breaking change for any project relying on the open default.
- */
-export declare function canAccessApplication(authorization: AuthorizationContext, roles: readonly ResolvedRole[], audience: AuthSessionAudience): boolean;
-//# sourceMappingURL=application-access.d.ts.map

package/dist/authorization/application-access.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"application-access.d.ts","sourceRoot":"","sources":["../../src/authorization/application-access.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAA;AAE3D,OAAO,KAAK,EAAE,oBAAoB,EAAE,YAAY,EAAE,MAAM,SAAS,CAAA;AAEjE,2EAA2E;AAC3E,wBAAgB,6BAA6B,CAC3C,KAAK,EAAE,SAAS,YAAY,EAAE,EAC9B,QAAQ,EAAE,mBAAmB,GAC5B,OAAO,CAET;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,oBAAoB,CAClC,aAAa,EAAE,oBAAoB,EACnC,KAAK,EAAE,SAAS,YAAY,EAAE,EAC9B,QAAQ,EAAE,mBAAmB,GAC5B,OAAO,CAKT"}

package/dist/chunk-1hqwggsn.js.map

@@ -1,12 +0,0 @@
-{
-  "version": 3,
-  "sources": ["../src/queues/errors.ts", "../src/queues/in-memory.ts", "../src/queues/indexed-heap.ts"],
-  "sourcesContent": [
-    "/**\n * Error for queue invariants and invalid queue operations.\n */\nexport class QueueError extends Error {\n  readonly name = \"QueueError\"\n}\n",
-    "import { randomUUID } from \"node:crypto\"\nimport type { SixbErrorCode } from \"../errors/types\"\nimport { QueueError } from \"./errors\"\nimport { IndexedHeap } from \"./indexed-heap\"\nimport type {\n  ActionQueueJobFailureCode,\n  ActionRunRequestedQueueJob,\n  AgentQueueJob,\n  AgentQueueJobFailureCode,\n  ClaimedQueueJob,\n  NewQueueJob,\n  PipelineQueueJobFailureCode,\n  PipelineRunRequestedQueueJob,\n  ProjectionQueueJobFailureCode,\n  ProjectionRunRequestedQueueJob,\n  Queue,\n  QueueJob,\n  QueueJobFailure,\n  Queues,\n  SubagentQueueJob,\n  SyncQueueJobFailureCode,\n  SyncRunRequestedQueueJob,\n  VectorIndexingQueueJob,\n  WorkflowQueueJob,\n  WorkflowQueueJobFailureCode,\n} from \"./types\"\n\ntype QueueRecordState = \"queued\" | \"completed\" | \"failed\"\n\ninterface QueueRecord<TQueueJob extends QueueJob = QueueJob> {\n  readonly sequence: number\n  readonly queueId: string\n  job: TQueueJob\n  availableAtMs: number\n  readonly createdAtMs: number\n  leaseExpiryMs: number | null\n  // A leased job stays \"queued\" until a worker completes or fails it.\n  state: QueueRecordState\n  failure: QueueJobFailure | null\n  leaseId: string | null\n  claimedAt: string | null\n  leaseExpiresAt: string | null\n}\n\nfunction assertNonEmpty(value: string, fieldName: string): void {\n  if (value.trim().length === 0) {\n    throw new QueueError(`[Sixb] Queue ${fieldName} must not be empty`)\n  }\n}\n\nfunction parseTimestamp(value: string, fieldName: string): number {\n  const timestamp = Date.parse(value)\n\n  if (Number.isNaN(timestamp)) {\n    throw new QueueError(`[Sixb] Queue ${fieldName} must be a valid timestamp`)\n  }\n\n  return timestamp\n}\n\nfunction assertPositiveNumber(value: number, fieldName: string): void {\n  if (!Number.isFinite(value) || value <= 0) {\n    throw new QueueError(`[Sixb] Queue ${fieldName} must be greater than 0`)\n  }\n}\n\nfunction clearLease(record: QueueRecord): void {\n  record.leaseId = null\n  record.claimedAt = null\n  record.leaseExpiresAt = null\n  record.leaseExpiryMs = null\n}\n\n// Best-effort ordering is part of the contract; this keeps the in-memory provider deterministic.\nfunction compareQueueRecords(left: QueueRecord, right: QueueRecord): number {\n  const availableDifference = left.availableAtMs - right.availableAtMs\n  if (availableDifference !== 0) return availableDifference\n  const createdDifference = left.createdAtMs - right.createdAtMs\n  if (createdDifference !== 0) return createdDifference\n\n  return left.sequence - right.sequence\n}\n\nfunction createQueueJob<TQueueJob extends QueueJob>(\n  projectId: string,\n  newJob: NewQueueJob<TQueueJob>\n): TQueueJob {\n  const createdAt = new Date().toISOString()\n  const availableAt = newJob.availableAt ?? createdAt\n  parseTimestamp(availableAt, \"availableAt\")\n\n  return {\n    id: newJob.id ?? randomUUID(),\n    projectId,\n    createdAt,\n    availableAt,\n    attempt: 0,\n    metadata: newJob.metadata ? structuredClone(newJob.metadata) : undefined,\n    type: newJob.type,\n    payload: structuredClone(newJob.payload),\n  } as TQueueJob\n}\n\nfunction leaseExpiresAtMs(record: QueueRecord): number | null {\n  return record.leaseExpiryMs\n}\n\nfunction eligibleAt(record: QueueRecord): number {\n  return Math.max(record.availableAtMs, record.leaseExpiryMs ?? -Infinity)\n}\n\n// Largest delay `setTimeout` accepts; a waiting claim that wakes early just waits again.\nconst MAX_TIMER_DELAY_MS = 2_147_483_647\n\ninterface QueueLane {\n  // Terminal records remain here for caller-id deduplication, never in the delivery indexes.\n  readonly records: Map<string, QueueRecord>\n  readonly ready: IndexedHeap<QueueRecord>\n  readonly waiting: IndexedHeap<QueueRecord>\n  /** Wakes claims waiting on this lane. */\n  readonly waiters: Set<() => void>\n}\n\nfunction toClaimedQueueJob<TQueueJob extends QueueJob>(\n  record: QueueRecord<TQueueJob>\n): ClaimedQueueJob<TQueueJob> {\n  if (!record.leaseId || !record.claimedAt || !record.leaseExpiresAt) {\n    throw new QueueError(`[Sixb] Queue job '${record.job.id}' is not currently leased`)\n  }\n\n  return {\n    leaseId: record.leaseId,\n    claimedAt: record.claimedAt,\n    leaseExpiresAt: record.leaseExpiresAt,\n    job: structuredClone(record.job),\n  }\n}\n\nclass InMemoryQueueStore {\n  private readonly projects = new Map<string, Map<string, QueueLane>>()\n  private nextSequence = 1\n\n  add<TQueueJob extends QueueJob>(projectId: string, queueId: string, job: TQueueJob): void {\n    const lane = this.lane(projectId, queueId)\n    const record: QueueRecord = {\n      sequence: this.nextSequence++,\n      queueId,\n      job,\n      availableAtMs: parseTimestamp(job.availableAt, \"job.availableAt\"),\n      createdAtMs: parseTimestamp(job.createdAt, \"job.createdAt\"),\n      leaseExpiryMs: null,\n      state: \"queued\",\n      failure: null,\n      leaseId: null,\n      claimedAt: null,\n      leaseExpiresAt: null,\n    }\n    lane.records.set(job.id, record)\n    this.schedule(projectId, record, Date.now())\n  }\n\n  find<TQueueJob extends QueueJob>(\n    projectId: string,\n    queueId: string,\n    jobId: string\n  ): QueueRecord<TQueueJob> | null {\n    return (this.projects.get(projectId)?.get(queueId)?.records.get(jobId) ??\n      null) as QueueRecord<TQueueJob> | null\n  }\n\n  schedule(projectId: string, record: QueueRecord, now: number): void {\n    const lane = this.lane(projectId, record.queueId)\n    if (record.state !== \"queued\") {\n      lane.ready.delete(record)\n      lane.waiting.delete(record)\n    } else if (eligibleAt(record) <= now) {\n      lane.waiting.delete(record)\n      lane.ready.set(record)\n    } else {\n      lane.ready.delete(record)\n      lane.waiting.set(record)\n    }\n    // Any change can make a job claimable or move the next due time; waiters look again.\n    for (const wake of lane.waiters) wake()\n  }\n\n  /** Resolves when the lane changes, its next delayed job or lease comes due, or `signal` aborts. */\n  waitForWork(projectId: string, queueId: string, signal: AbortSignal): Promise<void> {\n    const lane = this.lane(projectId, queueId)\n    const next = lane.waiting.peek()\n    const dueInMs = next ? eligibleAt(next) - Date.now() : MAX_TIMER_DELAY_MS\n    return new Promise((resolve) => {\n      // Always armed: like a blocking read on a socket, a waiting claim keeps its process alive.\n      const timer = setTimeout(wake, Math.min(dueInMs, MAX_TIMER_DELAY_MS))\n      function wake(): void {\n        clearTimeout(timer)\n        lane.waiters.delete(wake)\n        signal.removeEventListener(\"abort\", wake)\n        resolve()\n      }\n      lane.waiters.add(wake)\n      signal.addEventListener(\"abort\", wake, { once: true })\n    })\n  }\n\n  takeReady<TQueueJob extends QueueJob>(\n    projectId: string,\n    queueId: string,\n    now: number,\n    limit: number\n  ): QueueRecord<TQueueJob>[] {\n    const lane = this.projects.get(projectId)?.get(queueId)\n    if (!lane) return []\n    // Wake delayed jobs and expired leases, then order all ready jobs by the original contract.\n    // A lease expiry controls eligibility, not the priority of a redelivered job.\n    while (lane.waiting.peek() && eligibleAt(lane.waiting.peek()!) <= now) {\n      lane.ready.set(lane.waiting.pop()!)\n    }\n    const selected: QueueRecord[] = []\n    while (selected.length < limit) {\n      const record = lane.ready.peek()\n      if (!record || record.availableAtMs > now) break\n      lane.ready.pop()\n      // A backwards wall-clock adjustment can make a previously expired lease live again.\n      if (eligibleAt(record) > now) lane.waiting.set(record)\n      else selected.push(record)\n    }\n    return selected as QueueRecord<TQueueJob>[]\n  }\n\n  private lane(projectId: string, queueId: string): QueueLane {\n    let queues = this.projects.get(projectId)\n    if (!queues) {\n      queues = new Map()\n      this.projects.set(projectId, queues)\n    }\n    let lane = queues.get(queueId)\n    if (!lane) {\n      lane = {\n        records: new Map(),\n        ready: new IndexedHeap(compareQueueRecords),\n        waiting: new IndexedHeap(\n          (left, right) => eligibleAt(left) - eligibleAt(right) || left.sequence - right.sequence\n        ),\n        waiters: new Set(),\n      }\n      queues.set(queueId, lane)\n    }\n    return lane\n  }\n}\n\nclass InMemoryQueue<TQueueJob extends QueueJob, TFailureCode extends SixbErrorCode>\n  implements Queue<TQueueJob, TFailureCode>\n{\n  constructor(\n    private readonly store: InMemoryQueueStore,\n    private readonly queueId: string\n  ) {\n    assertNonEmpty(queueId, \"queueId\")\n  }\n\n  async enqueue(params: {\n    projectId: string\n    jobs: readonly NewQueueJob<TQueueJob>[]\n  }): Promise<readonly TQueueJob[]> {\n    assertNonEmpty(params.projectId, \"projectId\")\n\n    if (params.jobs.length === 0) {\n      return []\n    }\n\n    const createdJobs = params.jobs.map((job) => {\n      if (job.id !== undefined) assertNonEmpty(job.id, \"job.id\")\n      const existing = job.id\n        ? this.store.find<TQueueJob>(params.projectId, this.queueId, job.id)\n        : null\n      if (existing) return existing.job\n\n      const created = createQueueJob(params.projectId, job)\n      this.store.add(params.projectId, this.queueId, created)\n      return created\n    })\n\n    return createdJobs.map((job) => structuredClone(job))\n  }\n\n  async claim(params: {\n    projectId: string\n    workerId: string\n    limit?: number\n    leaseMs?: number\n    signal?: AbortSignal\n  }): Promise<readonly ClaimedQueueJob<TQueueJob>[]> {\n    assertNonEmpty(params.projectId, \"projectId\")\n    assertNonEmpty(params.workerId, \"workerId\")\n\n    const limit = Math.trunc(params.limit ?? 1)\n    if (!(limit > 0)) {\n      return []\n    }\n\n    const leaseMs = params.leaseMs ?? 30_000\n    assertPositiveNumber(leaseMs, \"leaseMs\")\n\n    for (;;) {\n      if (params.signal?.aborted) return []\n      const now = Date.now()\n      const claimedAt = new Date(now).toISOString()\n      // Validate before removing candidates, and cache the same millisecond precision we return.\n      const leaseExpiry = new Date(now + leaseMs)\n      const leaseExpiresAt = leaseExpiry.toISOString()\n      const claimable = this.store.takeReady<TQueueJob>(params.projectId, this.queueId, now, limit)\n      if (claimable.length === 0 && params.signal) {\n        await this.store.waitForWork(params.projectId, this.queueId, params.signal)\n        continue\n      }\n\n      return claimable.map((record) => {\n        // Attempts count claims so redelivery after lease expiry or retry is visible to workers.\n        record.job = {\n          ...record.job,\n          attempt: record.job.attempt + 1,\n        }\n        record.leaseId = randomUUID()\n        record.claimedAt = claimedAt\n        record.leaseExpiresAt = leaseExpiresAt\n        record.leaseExpiryMs = leaseExpiry.getTime()\n        this.store.schedule(params.projectId, record, now)\n\n        return toClaimedQueueJob(record)\n      })\n    }\n  }\n\n  async complete(params: { projectId: string; jobId: string; leaseId: string }): Promise<void> {\n    const record = this.requireActiveLease(params)\n    record.state = \"completed\"\n    clearLease(record)\n    this.store.schedule(params.projectId, record, Date.now())\n  }\n\n  async retry(params: {\n    projectId: string\n    jobId: string\n    leaseId: string\n    availableAt?: string\n  }): Promise<void> {\n    const record = this.requireActiveLease(params)\n    const availableAt = params.availableAt ?? new Date().toISOString()\n    const availableAtMs = parseTimestamp(availableAt, \"availableAt\")\n\n    record.availableAtMs = availableAtMs\n    record.job = {\n      ...record.job,\n      availableAt,\n    }\n    clearLease(record)\n    this.store.schedule(params.projectId, record, Date.now())\n  }\n\n  async fail(params: {\n    projectId: string\n    jobId: string\n    leaseId: string\n    failure: QueueJobFailure<TFailureCode>\n  }): Promise<void> {\n    const record = this.requireActiveLease(params)\n    record.state = \"failed\"\n    record.failure = structuredClone(params.failure)\n    clearLease(record)\n    this.store.schedule(params.projectId, record, Date.now())\n  }\n\n  async renewLease(params: {\n    projectId: string\n    jobId: string\n    leaseId: string\n    leaseMs: number\n  }): Promise<ClaimedQueueJob<TQueueJob> | null> {\n    assertPositiveNumber(params.leaseMs, \"leaseMs\")\n\n    const record = this.store.find<TQueueJob>(params.projectId, this.queueId, params.jobId)\n    if (!record || record.state !== \"queued\") {\n      return null\n    }\n\n    const now = Date.now()\n    const expiresAt = leaseExpiresAtMs(record)\n    if (record.leaseId !== params.leaseId || expiresAt === null) {\n      return null\n    }\n\n    if (expiresAt <= now) {\n      return null\n    }\n\n    const leaseExpiry = new Date(now + params.leaseMs)\n    record.leaseExpiresAt = leaseExpiry.toISOString()\n    record.leaseExpiryMs = leaseExpiry.getTime()\n    this.store.schedule(params.projectId, record, now)\n    return toClaimedQueueJob(record)\n  }\n\n  private requireActiveLease(params: {\n    projectId: string\n    jobId: string\n    leaseId: string\n  }): QueueRecord<TQueueJob> {\n    assertNonEmpty(params.projectId, \"projectId\")\n    assertNonEmpty(params.jobId, \"jobId\")\n    assertNonEmpty(params.leaseId, \"leaseId\")\n\n    const record = this.store.find<TQueueJob>(params.projectId, this.queueId, params.jobId)\n\n    if (!record) {\n      throw new QueueError(`[Sixb] Unknown queue job '${params.jobId}'`)\n    }\n\n    if (record.state !== \"queued\") {\n      throw new QueueError(`[Sixb] Queue job '${params.jobId}' is no longer active`)\n    }\n\n    if (record.leaseId !== params.leaseId || !record.leaseExpiresAt) {\n      throw new QueueError(`[Sixb] Lease mismatch for queue job '${params.jobId}'`)\n    }\n\n    const expiresAt = leaseExpiresAtMs(record)\n    if (expiresAt === null || expiresAt <= Date.now()) {\n      throw new QueueError(`[Sixb] Lease for queue job '${params.jobId}' has expired`)\n    }\n\n    return record\n  }\n}\n\nexport class InMemoryQueues implements Queues {\n  readonly scope = \"process\" as const\n  private readonly store = new InMemoryQueueStore()\n\n  readonly vectorIndexing = new InMemoryQueue<\n    VectorIndexingQueueJob,\n    \"internal.unexpected\" | \"runtime.cancelled\"\n  >(this.store, \"vector.indexing\")\n  readonly syncRuns = new InMemoryQueue<SyncRunRequestedQueueJob, SyncQueueJobFailureCode>(\n    this.store,\n    \"sync.runs\"\n  )\n  readonly pipelines = new InMemoryQueue<PipelineRunRequestedQueueJob, PipelineQueueJobFailureCode>(\n    this.store,\n    \"pipeline.runs\"\n  )\n  readonly projections = new InMemoryQueue<\n    ProjectionRunRequestedQueueJob,\n    ProjectionQueueJobFailureCode\n  >(this.store, \"projection.runs\")\n  readonly workflows = new InMemoryQueue<WorkflowQueueJob, WorkflowQueueJobFailureCode>(\n    this.store,\n    \"workflow.runs\"\n  )\n  readonly actions = new InMemoryQueue<ActionRunRequestedQueueJob, ActionQueueJobFailureCode>(\n    this.store,\n    \"action.runs\"\n  )\n  readonly agents = new InMemoryQueue<AgentQueueJob, AgentQueueJobFailureCode>(\n    this.store,\n    \"agent.runs\"\n  )\n  readonly agentChildren = new InMemoryQueue<SubagentQueueJob, AgentQueueJobFailureCode>(\n    this.store,\n    \"agent.children\"\n  )\n\n  /** Nothing to reach: the store is a field of this object. */\n  health(): Promise<void> {\n    return Promise.resolve()\n  }\n}\n",
-    "/** Internal mutable priority index. Updating or removing an entry never leaves stale copies. */\nexport class IndexedHeap<T> {\n  private readonly items: T[] = []\n  private readonly positions = new Map<T, number>()\n\n  constructor(private readonly compare: (left: T, right: T) => number) {}\n\n  peek(): T | undefined {\n    return this.items[0]\n  }\n\n  pop(): T | undefined {\n    const first = this.peek()\n    if (first !== undefined) this.delete(first)\n    return first\n  }\n\n  set(item: T): void {\n    const index = this.positions.get(item)\n    if (index === undefined) {\n      this.positions.set(item, this.items.length)\n      this.items.push(item)\n      this.up(this.items.length - 1)\n    } else {\n      this.down(this.up(index))\n    }\n  }\n\n  delete(item: T): void {\n    const index = this.positions.get(item)\n    if (index === undefined) return\n    const last = this.items.pop()!\n    this.positions.delete(item)\n    if (index === this.items.length) return\n    this.items[index] = last\n    this.positions.set(last, index)\n    this.down(this.up(index))\n  }\n\n  private up(start: number): number {\n    let index = start\n    while (index > 0) {\n      const parent = Math.floor((index - 1) / 2)\n      if (this.compare(this.items[parent]!, this.items[index]!) <= 0) break\n      this.swap(parent, index)\n      index = parent\n    }\n    return index\n  }\n\n  private down(start: number): void {\n    let index = start\n    while (index * 2 + 1 < this.items.length) {\n      const left = index * 2 + 1\n      const right = left + 1\n      const child =\n        right < this.items.length && this.compare(this.items[right]!, this.items[left]!) < 0\n          ? right\n          : left\n      if (this.compare(this.items[index]!, this.items[child]!) <= 0) break\n      this.swap(index, child)\n      index = child\n    }\n  }\n\n  private swap(left: number, right: number): void {\n    const a = this.items[left]!\n    const b = this.items[right]!\n    this.items[left] = b\n    this.items[right] = a\n    this.positions.set(a, right)\n    this.positions.set(b, left)\n  }\n}\n"
-  ],
-  "mappings": ";;AAGO,MAAM,oBAAmB,MAAM;AAAA,EAC3B,OAAO;AAClB;;ACLA;;;ACCO,MAAM,YAAe;AAAA,EAIG;AAAA,EAHZ,QAAa,CAAC;AAAA,EACd,YAAY,IAAI;AAAA,EAEjC,WAAW,CAAkB,SAAwC;AAAA,IAAxC;AAAA;AAAA,EAE7B,IAAI,GAAkB;AAAA,IACpB,OAAO,KAAK,MAAM;AAAA;AAAA,EAGpB,GAAG,GAAkB;AAAA,IACnB,MAAM,QAAQ,KAAK,KAAK;AAAA,IACxB,IAAI,UAAU;AAAA,MAAW,KAAK,OAAO,KAAK;AAAA,IAC1C,OAAO;AAAA;AAAA,EAGT,GAAG,CAAC,MAAe;AAAA,IACjB,MAAM,QAAQ,KAAK,UAAU,IAAI,IAAI;AAAA,IACrC,IAAI,UAAU,WAAW;AAAA,MACvB,KAAK,UAAU,IAAI,MAAM,KAAK,MAAM,MAAM;AAAA,MAC1C,KAAK,MAAM,KAAK,IAAI;AAAA,MACpB,KAAK,GAAG,KAAK,MAAM,SAAS,CAAC;AAAA,IAC/B,EAAO;AAAA,MACL,KAAK,KAAK,KAAK,GAAG,KAAK,CAAC;AAAA;AAAA;AAAA,EAI5B,MAAM,CAAC,MAAe;AAAA,IACpB,MAAM,QAAQ,KAAK,UAAU,IAAI,IAAI;AAAA,IACrC,IAAI,UAAU;AAAA,MAAW;AAAA,IACzB,MAAM,OAAO,KAAK,MAAM,IAAI;AAAA,IAC5B,KAAK,UAAU,OAAO,IAAI;AAAA,IAC1B,IAAI,UAAU,KAAK,MAAM;AAAA,MAAQ;AAAA,IACjC,KAAK,MAAM,SAAS;AAAA,IACpB,KAAK,UAAU,IAAI,MAAM,KAAK;AAAA,IAC9B,KAAK,KAAK,KAAK,GAAG,KAAK,CAAC;AAAA;AAAA,EAGlB,EAAE,CAAC,OAAuB;AAAA,IAChC,IAAI,QAAQ;AAAA,IACZ,OAAO,QAAQ,GAAG;AAAA,MAChB,MAAM,SAAS,KAAK,OAAO,QAAQ,KAAK,CAAC;AAAA,MACzC,IAAI,KAAK,QAAQ,KAAK,MAAM,SAAU,KAAK,MAAM,MAAO,KAAK;AAAA,QAAG;AAAA,MAChE,KAAK,KAAK,QAAQ,KAAK;AAAA,MACvB,QAAQ;AAAA,IACV;AAAA,IACA,OAAO;AAAA;AAAA,EAGD,IAAI,CAAC,OAAqB;AAAA,IAChC,IAAI,QAAQ;AAAA,IACZ,OAAO,QAAQ,IAAI,IAAI,KAAK,MAAM,QAAQ;AAAA,MACxC,MAAM,OAAO,QAAQ,IAAI;AAAA,MACzB,MAAM,QAAQ,OAAO;AAAA,MACrB,MAAM,QACJ,QAAQ,KAAK,MAAM,UAAU,KAAK,QAAQ,KAAK,MAAM,QAAS,KAAK,MAAM,KAAM,IAAI,IAC/E,QACA;AAAA,MACN,IAAI,KAAK,QAAQ,KAAK,MAAM,QAAS,KAAK,MAAM,MAAO,KAAK;AAAA,QAAG;AAAA,MAC/D,KAAK,KAAK,OAAO,KAAK;AAAA,MACtB,QAAQ;AAAA,IACV;AAAA;AAAA,EAGM,IAAI,CAAC,MAAc,OAAqB;AAAA,IAC9C,MAAM,IAAI,KAAK,MAAM;AAAA,IACrB,MAAM,IAAI,KAAK,MAAM;AAAA,IACrB,KAAK,MAAM,QAAQ;AAAA,IACnB,KAAK,MAAM,SAAS;AAAA,IACpB,KAAK,UAAU,IAAI,GAAG,KAAK;AAAA,IAC3B,KAAK,UAAU,IAAI,GAAG,IAAI;AAAA;AAE9B;;;AD7BA,SAAS,cAAc,CAAC,OAAe,WAAyB;AAAA,EAC9D,IAAI,MAAM,KAAK,EAAE,WAAW,GAAG;AAAA,IAC7B,MAAM,IAAI,YAAW,gBAAgB,6BAA6B;AAAA,EACpE;AAAA;AAGF,SAAS,cAAc,CAAC,OAAe,WAA2B;AAAA,EAChE,MAAM,YAAY,KAAK,MAAM,KAAK;AAAA,EAElC,IAAI,OAAO,MAAM,SAAS,GAAG;AAAA,IAC3B,MAAM,IAAI,YAAW,gBAAgB,qCAAqC;AAAA,EAC5E;AAAA,EAEA,OAAO;AAAA;AAGT,SAAS,oBAAoB,CAAC,OAAe,WAAyB;AAAA,EACpE,IAAI,CAAC,OAAO,SAAS,KAAK,KAAK,SAAS,GAAG;AAAA,IACzC,MAAM,IAAI,YAAW,gBAAgB,kCAAkC;AAAA,EACzE;AAAA;AAGF,SAAS,UAAU,CAAC,QAA2B;AAAA,EAC7C,OAAO,UAAU;AAAA,EACjB,OAAO,YAAY;AAAA,EACnB,OAAO,iBAAiB;AAAA,EACxB,OAAO,gBAAgB;AAAA;AAIzB,SAAS,mBAAmB,CAAC,MAAmB,OAA4B;AAAA,EAC1E,MAAM,sBAAsB,KAAK,gBAAgB,MAAM;AAAA,EACvD,IAAI,wBAAwB;AAAA,IAAG,OAAO;AAAA,EACtC,MAAM,oBAAoB,KAAK,cAAc,MAAM;AAAA,EACnD,IAAI,sBAAsB;AAAA,IAAG,OAAO;AAAA,EAEpC,OAAO,KAAK,WAAW,MAAM;AAAA;AAG/B,SAAS,cAA0C,CACjD,WACA,QACW;AAAA,EACX,MAAM,YAAY,IAAI,KAAK,EAAE,YAAY;AAAA,EACzC,MAAM,cAAc,OAAO,eAAe;AAAA,EAC1C,eAAe,aAAa,aAAa;AAAA,EAEzC,OAAO;AAAA,IACL,IAAI,OAAO,MAAM,WAAW;AAAA,IAC5B;AAAA,IACA;AAAA,IACA;AAAA,IACA,SAAS;AAAA,IACT,UAAU,OAAO,WAAW,gBAAgB,OAAO,QAAQ,IAAI;AAAA,IAC/D,MAAM,OAAO;AAAA,IACb,SAAS,gBAAgB,OAAO,OAAO;AAAA,EACzC;AAAA;AAGF,SAAS,gBAAgB,CAAC,QAAoC;AAAA,EAC5D,OAAO,OAAO;AAAA;AAGhB,SAAS,UAAU,CAAC,QAA6B;AAAA,EAC/C,OAAO,KAAK,IAAI,OAAO,eAAe,OAAO,iBAAiB,SAAS;AAAA;AAIzE,IAAM,qBAAqB;AAW3B,SAAS,iBAA6C,CACpD,QAC4B;AAAA,EAC5B,IAAI,CAAC,OAAO,WAAW,CAAC,OAAO,aAAa,CAAC,OAAO,gBAAgB;AAAA,IAClE,MAAM,IAAI,YAAW,qBAAqB,OAAO,IAAI,6BAA6B;AAAA,EACpF;AAAA,EAEA,OAAO;AAAA,IACL,SAAS,OAAO;AAAA,IAChB,WAAW,OAAO;AAAA,IAClB,gBAAgB,OAAO;AAAA,IACvB,KAAK,gBAAgB,OAAO,GAAG;AAAA,EACjC;AAAA;AAAA;AAGF,MAAM,mBAAmB;AAAA,EACN,WAAW,IAAI;AAAA,EACxB,eAAe;AAAA,EAEvB,GAA+B,CAAC,WAAmB,SAAiB,KAAsB;AAAA,IACxF,MAAM,OAAO,KAAK,KAAK,WAAW,OAAO;AAAA,IACzC,MAAM,SAAsB;AAAA,MAC1B,UAAU,KAAK;AAAA,MACf;AAAA,MACA;AAAA,MACA,eAAe,eAAe,IAAI,aAAa,iBAAiB;AAAA,MAChE,aAAa,eAAe,IAAI,WAAW,eAAe;AAAA,MAC1D,eAAe;AAAA,MACf,OAAO;AAAA,MACP,SAAS;AAAA,MACT,SAAS;AAAA,MACT,WAAW;AAAA,MACX,gBAAgB;AAAA,IAClB;AAAA,IACA,KAAK,QAAQ,IAAI,IAAI,IAAI,MAAM;AAAA,IAC/B,KAAK,SAAS,WAAW,QAAQ,KAAK,IAAI,CAAC;AAAA;AAAA,EAG7C,IAAgC,CAC9B,WACA,SACA,OAC+B;AAAA,IAC/B,OAAQ,KAAK,SAAS,IAAI,SAAS,GAAG,IAAI,OAAO,GAAG,QAAQ,IAAI,KAAK,KACnE;AAAA;AAAA,EAGJ,QAAQ,CAAC,WAAmB,QAAqB,KAAmB;AAAA,IAClE,MAAM,OAAO,KAAK,KAAK,WAAW,OAAO,OAAO;AAAA,IAChD,IAAI,OAAO,UAAU,UAAU;AAAA,MAC7B,KAAK,MAAM,OAAO,MAAM;AAAA,MACxB,KAAK,QAAQ,OAAO,MAAM;AAAA,IAC5B,EAAO,SAAI,WAAW,MAAM,KAAK,KAAK;AAAA,MACpC,KAAK,QAAQ,OAAO,MAAM;AAAA,MAC1B,KAAK,MAAM,IAAI,MAAM;AAAA,IACvB,EAAO;AAAA,MACL,KAAK,MAAM,OAAO,MAAM;AAAA,MACxB,KAAK,QAAQ,IAAI,MAAM;AAAA;AAAA,IAGzB,WAAW,QAAQ,KAAK;AAAA,MAAS,KAAK;AAAA;AAAA,EAIxC,WAAW,CAAC,WAAmB,SAAiB,QAAoC;AAAA,IAClF,MAAM,OAAO,KAAK,KAAK,WAAW,OAAO;AAAA,IACzC,MAAM,OAAO,KAAK,QAAQ,KAAK;AAAA,IAC/B,MAAM,UAAU,OAAO,WAAW,IAAI,IAAI,KAAK,IAAI,IAAI;AAAA,IACvD,OAAO,IAAI,QAAQ,CAAC,YAAY;AAAA,MAE9B,MAAM,QAAQ,WAAW,MAAM,KAAK,IAAI,SAAS,kBAAkB,CAAC;AAAA,MACpE,SAAS,IAAI,GAAS;AAAA,QACpB,aAAa,KAAK;AAAA,QAClB,KAAK,QAAQ,OAAO,IAAI;AAAA,QACxB,OAAO,oBAAoB,SAAS,IAAI;AAAA,QACxC,QAAQ;AAAA;AAAA,MAEV,KAAK,QAAQ,IAAI,IAAI;AAAA,MACrB,OAAO,iBAAiB,SAAS,MAAM,EAAE,MAAM,KAAK,CAAC;AAAA,KACtD;AAAA;AAAA,EAGH,SAAqC,CACnC,WACA,SACA,KACA,OAC0B;AAAA,IAC1B,MAAM,OAAO,KAAK,SAAS,IAAI,SAAS,GAAG,IAAI,OAAO;AAAA,IACtD,IAAI,CAAC;AAAA,MAAM,OAAO,CAAC;AAAA,IAGnB,OAAO,KAAK,QAAQ,KAAK,KAAK,WAAW,KAAK,QAAQ,KAAK,CAAE,KAAK,KAAK;AAAA,MACrE,KAAK,MAAM,IAAI,KAAK,QAAQ,IAAI,CAAE;AAAA,IACpC;AAAA,IACA,MAAM,WAA0B,CAAC;AAAA,IACjC,OAAO,SAAS,SAAS,OAAO;AAAA,MAC9B,MAAM,SAAS,KAAK,MAAM,KAAK;AAAA,MAC/B,IAAI,CAAC,UAAU,OAAO,gBAAgB;AAAA,QAAK;AAAA,MAC3C,KAAK,MAAM,IAAI;AAAA,MAEf,IAAI,WAAW,MAAM,IAAI;AAAA,QAAK,KAAK,QAAQ,IAAI,MAAM;AAAA,MAChD;AAAA,iBAAS,KAAK,MAAM;AAAA,IAC3B;AAAA,IACA,OAAO;AAAA;AAAA,EAGD,IAAI,CAAC,WAAmB,SAA4B;AAAA,IAC1D,IAAI,SAAS,KAAK,SAAS,IAAI,SAAS;AAAA,IACxC,IAAI,CAAC,QAAQ;AAAA,MACX,SAAS,IAAI;AAAA,MACb,KAAK,SAAS,IAAI,WAAW,MAAM;AAAA,IACrC;AAAA,IACA,IAAI,OAAO,OAAO,IAAI,OAAO;AAAA,IAC7B,IAAI,CAAC,MAAM;AAAA,MACT,OAAO;AAAA,QACL,SAAS,IAAI;AAAA,QACb,OAAO,IAAI,YAAY,mBAAmB;AAAA,QAC1C,SAAS,IAAI,YACX,CAAC,MAAM,UAAU,WAAW,IAAI,IAAI,WAAW,KAAK,KAAK,KAAK,WAAW,MAAM,QACjF;AAAA,QACA,SAAS,IAAI;AAAA,MACf;AAAA,MACA,OAAO,IAAI,SAAS,IAAI;AAAA,IAC1B;AAAA,IACA,OAAO;AAAA;AAEX;AAAA;AAEA,MAAM,cAEN;AAAA,EAEqB;AAAA,EACA;AAAA,EAFnB,WAAW,CACQ,OACA,SACjB;AAAA,IAFiB;AAAA,IACA;AAAA,IAEjB,eAAe,SAAS,SAAS;AAAA;AAAA,OAG7B,QAAO,CAAC,QAGoB;AAAA,IAChC,eAAe,OAAO,WAAW,WAAW;AAAA,IAE5C,IAAI,OAAO,KAAK,WAAW,GAAG;AAAA,MAC5B,OAAO,CAAC;AAAA,IACV;AAAA,IAEA,MAAM,cAAc,OAAO,KAAK,IAAI,CAAC,QAAQ;AAAA,MAC3C,IAAI,IAAI,OAAO;AAAA,QAAW,eAAe,IAAI,IAAI,QAAQ;AAAA,MACzD,MAAM,WAAW,IAAI,KACjB,KAAK,MAAM,KAAgB,OAAO,WAAW,KAAK,SAAS,IAAI,EAAE,IACjE;AAAA,MACJ,IAAI;AAAA,QAAU,OAAO,SAAS;AAAA,MAE9B,MAAM,UAAU,eAAe,OAAO,WAAW,GAAG;AAAA,MACpD,KAAK,MAAM,IAAI,OAAO,WAAW,KAAK,SAAS,OAAO;AAAA,MACtD,OAAO;AAAA,KACR;AAAA,IAED,OAAO,YAAY,IAAI,CAAC,QAAQ,gBAAgB,GAAG,CAAC;AAAA;AAAA,OAGhD,MAAK,CAAC,QAMuC;AAAA,IACjD,eAAe,OAAO,WAAW,WAAW;AAAA,IAC5C,eAAe,OAAO,UAAU,UAAU;AAAA,IAE1C,MAAM,QAAQ,KAAK,MAAM,OAAO,SAAS,CAAC;AAAA,IAC1C,IAAI,EAAE,QAAQ,IAAI;AAAA,MAChB,OAAO,CAAC;AAAA,IACV;AAAA,IAEA,MAAM,UAAU,OAAO,WAAW;AAAA,IAClC,qBAAqB,SAAS,SAAS;AAAA,IAEvC,UAAS;AAAA,MACP,IAAI,OAAO,QAAQ;AAAA,QAAS,OAAO,CAAC;AAAA,MACpC,MAAM,MAAM,KAAK,IAAI;AAAA,MACrB,MAAM,YAAY,IAAI,KAAK,GAAG,EAAE,YAAY;AAAA,MAE5C,MAAM,cAAc,IAAI,KAAK,MAAM,OAAO;AAAA,MAC1C,MAAM,iBAAiB,YAAY,YAAY;AAAA,MAC/C,MAAM,YAAY,KAAK,MAAM,UAAqB,OAAO,WAAW,KAAK,SAAS,KAAK,KAAK;AAAA,MAC5F,IAAI,UAAU,WAAW,KAAK,OAAO,QAAQ;AAAA,QAC3C,MAAM,KAAK,MAAM,YAAY,OAAO,WAAW,KAAK,SAAS,OAAO,MAAM;AAAA,QAC1E;AAAA,MACF;AAAA,MAEA,OAAO,UAAU,IAAI,CAAC,WAAW;AAAA,QAE/B,OAAO,MAAM;AAAA,aACR,OAAO;AAAA,UACV,SAAS,OAAO,IAAI,UAAU;AAAA,QAChC;AAAA,QACA,OAAO,UAAU,WAAW;AAAA,QAC5B,OAAO,YAAY;AAAA,QACnB,OAAO,iBAAiB;AAAA,QACxB,OAAO,gBAAgB,YAAY,QAAQ;AAAA,QAC3C,KAAK,MAAM,SAAS,OAAO,WAAW,QAAQ,GAAG;AAAA,QAEjD,OAAO,kBAAkB,MAAM;AAAA,OAChC;AAAA,IACH;AAAA;AAAA,OAGI,SAAQ,CAAC,QAA8E;AAAA,IAC3F,MAAM,SAAS,KAAK,mBAAmB,MAAM;AAAA,IAC7C,OAAO,QAAQ;AAAA,IACf,WAAW,MAAM;AAAA,IACjB,KAAK,MAAM,SAAS,OAAO,WAAW,QAAQ,KAAK,IAAI,CAAC;AAAA;AAAA,OAGpD,MAAK,CAAC,QAKM;AAAA,IAChB,MAAM,SAAS,KAAK,mBAAmB,MAAM;AAAA,IAC7C,MAAM,cAAc,OAAO,eAAe,IAAI,KAAK,EAAE,YAAY;AAAA,IACjE,MAAM,gBAAgB,eAAe,aAAa,aAAa;AAAA,IAE/D,OAAO,gBAAgB;AAAA,IACvB,OAAO,MAAM;AAAA,SACR,OAAO;AAAA,MACV;AAAA,IACF;AAAA,IACA,WAAW,MAAM;AAAA,IACjB,KAAK,MAAM,SAAS,OAAO,WAAW,QAAQ,KAAK,IAAI,CAAC;AAAA;AAAA,OAGpD,KAAI,CAAC,QAKO;AAAA,IAChB,MAAM,SAAS,KAAK,mBAAmB,MAAM;AAAA,IAC7C,OAAO,QAAQ;AAAA,IACf,OAAO,UAAU,gBAAgB,OAAO,OAAO;AAAA,IAC/C,WAAW,MAAM;AAAA,IACjB,KAAK,MAAM,SAAS,OAAO,WAAW,QAAQ,KAAK,IAAI,CAAC;AAAA;AAAA,OAGpD,WAAU,CAAC,QAK8B;AAAA,IAC7C,qBAAqB,OAAO,SAAS,SAAS;AAAA,IAE9C,MAAM,SAAS,KAAK,MAAM,KAAgB,OAAO,WAAW,KAAK,SAAS,OAAO,KAAK;AAAA,IACtF,IAAI,CAAC,UAAU,OAAO,UAAU,UAAU;AAAA,MACxC,OAAO;AAAA,IACT;AAAA,IAEA,MAAM,MAAM,KAAK,IAAI;AAAA,IACrB,MAAM,YAAY,iBAAiB,MAAM;AAAA,IACzC,IAAI,OAAO,YAAY,OAAO,WAAW,cAAc,MAAM;AAAA,MAC3D,OAAO;AAAA,IACT;AAAA,IAEA,IAAI,aAAa,KAAK;AAAA,MACpB,OAAO;AAAA,IACT;AAAA,IAEA,MAAM,cAAc,IAAI,KAAK,MAAM,OAAO,OAAO;AAAA,IACjD,OAAO,iBAAiB,YAAY,YAAY;AAAA,IAChD,OAAO,gBAAgB,YAAY,QAAQ;AAAA,IAC3C,KAAK,MAAM,SAAS,OAAO,WAAW,QAAQ,GAAG;AAAA,IACjD,OAAO,kBAAkB,MAAM;AAAA;AAAA,EAGzB,kBAAkB,CAAC,QAIA;AAAA,IACzB,eAAe,OAAO,WAAW,WAAW;AAAA,IAC5C,eAAe,OAAO,OAAO,OAAO;AAAA,IACpC,eAAe,OAAO,SAAS,SAAS;AAAA,IAExC,MAAM,SAAS,KAAK,MAAM,KAAgB,OAAO,WAAW,KAAK,SAAS,OAAO,KAAK;AAAA,IAEtF,IAAI,CAAC,QAAQ;AAAA,MACX,MAAM,IAAI,YAAW,6BAA6B,OAAO,QAAQ;AAAA,IACnE;AAAA,IAEA,IAAI,OAAO,UAAU,UAAU;AAAA,MAC7B,MAAM,IAAI,YAAW,qBAAqB,OAAO,4BAA4B;AAAA,IAC/E;AAAA,IAEA,IAAI,OAAO,YAAY,OAAO,WAAW,CAAC,OAAO,gBAAgB;AAAA,MAC/D,MAAM,IAAI,YAAW,wCAAwC,OAAO,QAAQ;AAAA,IAC9E;AAAA,IAEA,MAAM,YAAY,iBAAiB,MAAM;AAAA,IACzC,IAAI,cAAc,QAAQ,aAAa,KAAK,IAAI,GAAG;AAAA,MACjD,MAAM,IAAI,YAAW,+BAA+B,OAAO,oBAAoB;AAAA,IACjF;AAAA,IAEA,OAAO;AAAA;AAEX;AAAA;AAEO,MAAM,gBAAiC;AAAA,EACnC,QAAQ;AAAA,EACA,QAAQ,IAAI;AAAA,EAEpB,iBAAiB,IAAI,cAG5B,KAAK,OAAO,iBAAiB;AAAA,EACtB,WAAW,IAAI,cACtB,KAAK,OACL,WACF;AAAA,EACS,YAAY,IAAI,cACvB,KAAK,OACL,eACF;AAAA,EACS,cAAc,IAAI,cAGzB,KAAK,OAAO,iBAAiB;AAAA,EACtB,YAAY,IAAI,cACvB,KAAK,OACL,eACF;AAAA,EACS,UAAU,IAAI,cACrB,KAAK,OACL,aACF;AAAA,EACS,SAAS,IAAI,cACpB,KAAK,OACL,YACF;AAAA,EACS,gBAAgB,IAAI,cAC3B,KAAK,OACL,gBACF;AAAA,EAGA,MAAM,GAAkB;AAAA,IACtB,OAAO,QAAQ,QAAQ;AAAA;AAE3B;",
-  "debugId": "5617F92D0BE33D5564756E2164756E21",
-  "names": []
-}

package/dist/chunk-2jntasmh.js.map

@@ -1,13 +0,0 @@
-{
-  "version": 3,
-  "sources": ["../src/auth/errors.ts", "../src/auth/audience.ts", "../src/auth/cookies.ts", "../src/auth/validation.ts"],
-  "sourcesContent": [
-    "export type AuthRuntimeErrorCode =\n  | \"authentication_required\"\n  | \"auth_storage_missing\"\n  | \"authorization_denied\"\n  | \"invalid_auth_input\"\n  | \"invalid_auth_config\"\n  | \"rate_limited\"\n  | \"production_auth_required\"\n\nexport class AuthRuntimeError extends Error {\n  readonly name = \"AuthRuntimeError\"\n\n  constructor(\n    readonly code: AuthRuntimeErrorCode,\n    message: string\n  ) {\n    super(message)\n  }\n}\n\n/** Why a strategy refused someone who authenticated. Each is something a person can act on. */\nexport type SignInRefusalReason =\n  | \"not_invited\"\n  | \"suspended\"\n  | \"domain_not_allowed\"\n  | \"no_trusted_address\"\n\n/**\n * Thrown by a strategy that refuses a sign-in for a known reason. The sign-in page tells the\n * person which reason, naming `email` when there is one; `message` is for the server log.\n */\nexport class SignInRefusedError extends Error {\n  readonly name = \"SignInRefusedError\"\n\n  constructor(\n    readonly reason: SignInRefusalReason,\n    message: string,\n    readonly email?: string\n  ) {\n    super(message)\n  }\n}\n",
-    "import { AuthRuntimeError } from \"./errors\"\n\nexport const DEFAULT_AUTH_SESSION_AUDIENCE = \"atlas\"\n\nexport type AuthSessionAudience = typeof DEFAULT_AUTH_SESSION_AUDIENCE | \"app\"\n\nexport interface AuthSessionAudienceOptions {\n  readonly audience?: AuthSessionAudience\n}\n\nexport function isValidAuthSessionAudience(value: string): value is AuthSessionAudience {\n  return value === \"atlas\" || value === \"app\"\n}\n\nexport function resolveAuthSessionAudience(\n  value: AuthSessionAudience | undefined\n): AuthSessionAudience {\n  const audience = value ?? DEFAULT_AUTH_SESSION_AUDIENCE\n\n  if (!isValidAuthSessionAudience(audience)) {\n    throw new AuthRuntimeError(\n      \"invalid_auth_config\",\n      `[Sixb] Auth session audience '${audience}' is invalid. Expected 'atlas' or 'app'.`\n    )\n  }\n\n  return audience\n}\n",
-    "import type { AuthSessionAudience } from \"./audience\"\nimport { DEFAULT_AUTH_SESSION_AUDIENCE, resolveAuthSessionAudience } from \"./audience\"\nimport type { AuthCookieOptions } from \"./types\"\n\nexport const DEFAULT_SESSION_COOKIE_NAME = \"sixb_session\"\nexport const DEFAULT_CSRF_COOKIE_NAME = \"sixb_csrf\"\n\nexport interface ResolvedAuthCookieOptions {\n  readonly sessionCookieName: string\n  readonly csrfCookieName: string\n  readonly domain?: string\n  readonly secure: boolean | \"auto\"\n  readonly sameSite: \"strict\"\n  readonly csrfHttpOnly: boolean\n}\n\ninterface CookieSerializationOptions {\n  readonly name: string\n  readonly value: string\n  readonly httpOnly?: boolean\n  readonly maxAge?: number\n  readonly expires?: Date\n  readonly domain?: string\n  readonly secure?: boolean\n  readonly sameSite: \"strict\"\n}\n\nexport function resolveAuthCookieOptions(\n  options: AuthCookieOptions | undefined\n): ResolvedAuthCookieOptions {\n  const resolved = {\n    sessionCookieName: options?.sessionCookieName ?? DEFAULT_SESSION_COOKIE_NAME,\n    csrfCookieName: options?.csrfCookieName ?? DEFAULT_CSRF_COOKIE_NAME,\n    domain: options?.cookieDomain,\n    secure: options?.secure ?? \"auto\",\n    sameSite: options?.sameSite ?? \"strict\",\n    csrfHttpOnly: options?.csrfHttpOnly ?? false,\n  }\n\n  assertValidCookieOptions(resolved)\n  return resolved\n}\n\nexport function resolveAuthCookieOptionsForAudience(\n  options: ResolvedAuthCookieOptions,\n  audience: AuthSessionAudience | undefined\n): ResolvedAuthCookieOptions {\n  const resolvedAudience = resolveAuthSessionAudience(audience)\n  if (resolvedAudience === DEFAULT_AUTH_SESSION_AUDIENCE) {\n    return options\n  }\n\n  return {\n    ...options,\n    sessionCookieName: `${options.sessionCookieName}_${resolvedAudience}`,\n    csrfCookieName: `${options.csrfCookieName}_${resolvedAudience}`,\n  }\n}\n\nexport function parseCookieHeader(header: string | null): ReadonlyMap<string, string> {\n  const cookies = new Map<string, string>()\n  if (!header) {\n    return cookies\n  }\n\n  for (const part of header.split(\";\")) {\n    const separator = part.indexOf(\"=\")\n    if (separator <= 0) {\n      continue\n    }\n\n    const name = part.slice(0, separator).trim()\n    if (!name || cookies.has(name)) {\n      continue\n    }\n\n    const value = part.slice(separator + 1).trim()\n    cookies.set(name, value)\n  }\n\n  return cookies\n}\n\nexport function getCookie(request: Request, name: string): string | undefined {\n  return parseCookieHeader(request.headers.get(\"cookie\")).get(name)\n}\n\nexport function serializeCookie(options: CookieSerializationOptions): string {\n  const parts = [`${options.name}=${options.value}`]\n\n  parts.push(\"Path=/\")\n  parts.push(\"SameSite=Strict\")\n\n  if (options.domain) {\n    parts.push(`Domain=${options.domain}`)\n  }\n\n  if (options.httpOnly) {\n    parts.push(\"HttpOnly\")\n  }\n\n  if (options.secure) {\n    parts.push(\"Secure\")\n  }\n\n  if (options.maxAge !== undefined) {\n    parts.push(`Max-Age=${Math.trunc(options.maxAge)}`)\n  }\n\n  if (options.expires) {\n    parts.push(`Expires=${options.expires.toUTCString()}`)\n  }\n\n  return parts.join(\"; \")\n}\n\nexport function shouldUseSecureCookies(\n  request: Request,\n  options: ResolvedAuthCookieOptions\n): boolean {\n  if (\n    requiresSecureCookieName(options.sessionCookieName) ||\n    requiresSecureCookieName(options.csrfCookieName)\n  ) {\n    return true\n  }\n\n  if (typeof options.secure === \"boolean\") {\n    return options.secure\n  }\n\n  const url = new URL(request.url)\n  if (isLocalhost(url.hostname)) {\n    return false\n  }\n\n  return url.protocol === \"https:\" || process.env.NODE_ENV === \"production\"\n}\n\nexport function createSessionCookieHeader(params: {\n  readonly request: Request\n  readonly value: string\n  readonly expiresAt: Date\n  readonly options: ResolvedAuthCookieOptions\n}): string {\n  const lifetime = resolveCookieLifetime(params.expiresAt)\n  return serializeCookie({\n    name: params.options.sessionCookieName,\n    value: params.value,\n    httpOnly: true,\n    ...lifetime,\n    domain: params.options.domain,\n    secure: shouldUseSecureCookies(params.request, params.options),\n    sameSite: params.options.sameSite,\n  })\n}\n\nexport function createCsrfCookieHeader(params: {\n  readonly request: Request\n  readonly value: string\n  readonly expiresAt: Date\n  readonly options: ResolvedAuthCookieOptions\n}): string {\n  const lifetime = resolveCookieLifetime(params.expiresAt)\n  return serializeCookie({\n    name: params.options.csrfCookieName,\n    value: params.value,\n    httpOnly: params.options.csrfHttpOnly,\n    ...lifetime,\n    domain: params.options.domain,\n    secure: shouldUseSecureCookies(params.request, params.options),\n    sameSite: params.options.sameSite,\n  })\n}\n\nfunction resolveCookieLifetime(expiresAt: Date): {\n  readonly maxAge: number\n  readonly expires: Date\n} {\n  const expiresAtMs = expiresAt.getTime()\n  if (!Number.isFinite(expiresAtMs)) {\n    throw new Error(\"[Sixb] Auth cookie expiresAt must be a valid date.\")\n  }\n\n  return {\n    maxAge: Math.max(0, Math.floor((expiresAtMs - Date.now()) / 1000)),\n    expires: new Date(expiresAtMs),\n  }\n}\n\nexport function clearSessionCookieHeader(params: {\n  readonly request: Request\n  readonly options: ResolvedAuthCookieOptions\n}): string {\n  return serializeCookie({\n    name: params.options.sessionCookieName,\n    value: \"\",\n    httpOnly: true,\n    maxAge: 0,\n    expires: new Date(0),\n    domain: params.options.domain,\n    secure: shouldUseSecureCookies(params.request, params.options),\n    sameSite: params.options.sameSite,\n  })\n}\n\nexport function clearCsrfCookieHeader(params: {\n  readonly request: Request\n  readonly options: ResolvedAuthCookieOptions\n}): string {\n  return serializeCookie({\n    name: params.options.csrfCookieName,\n    value: \"\",\n    maxAge: 0,\n    expires: new Date(0),\n    domain: params.options.domain,\n    secure: shouldUseSecureCookies(params.request, params.options),\n    sameSite: params.options.sameSite,\n  })\n}\n\nfunction isLocalhost(hostname: string): boolean {\n  return hostname === \"localhost\" || hostname === \"127.0.0.1\" || hostname === \"::1\"\n}\n\nfunction assertValidCookieOptions(options: ResolvedAuthCookieOptions): void {\n  assertValidCookieName(options.sessionCookieName, \"sessionCookieName\")\n  assertValidCookieName(options.csrfCookieName, \"csrfCookieName\")\n\n  if (options.sameSite !== \"strict\") {\n    throw new Error(\"[Sixb] Auth cookie sameSite must be 'strict'.\")\n  }\n\n  if (\n    options.domain &&\n    (isHostPrefixedCookieName(options.sessionCookieName) ||\n      isHostPrefixedCookieName(options.csrfCookieName))\n  ) {\n    throw new Error(\"[Sixb] __Host- auth cookies cannot be configured with cookieDomain.\")\n  }\n\n  if (\n    options.secure === false &&\n    (requiresSecureCookieName(options.sessionCookieName) ||\n      requiresSecureCookieName(options.csrfCookieName))\n  ) {\n    throw new Error(\"[Sixb] __Host- auth cookies require secure cookies.\")\n  }\n}\n\nfunction assertValidCookieName(name: string, label: string): void {\n  if (!/^[!#$%&'*+\\-.^_`|~0-9A-Za-z]+$/.test(name)) {\n    throw new Error(`[Sixb] Auth cookie ${label} '${name}' is not a valid cookie name.`)\n  }\n}\n\nfunction isHostPrefixedCookieName(name: string): boolean {\n  return name.startsWith(\"__Host-\")\n}\n\nfunction requiresSecureCookieName(name: string): boolean {\n  return isHostPrefixedCookieName(name) || name.startsWith(\"__Secure-\")\n}\n",
-    "import { resolveAuthCookieOptions } from \"./cookies\"\nimport { AuthRuntimeError } from \"./errors\"\nimport type {\n  AuthSessionOptions,\n  AuthStrategy,\n  InvitationDeliveryAuthStrategy,\n  MagicLinkAuthStrategy,\n  OidcAuthStrategy,\n  ResolvedAuthConfig,\n  SixbAuthConfig,\n} from \"./types\"\n\nconst DAY = 24 * 60 * 60 * 1000\n\nexport const DEFAULT_AUTH_SESSION_IDLE_TIMEOUT_MS = 30 * DAY\nexport const DEFAULT_AUTH_SESSION_RENEWAL_WINDOW_MS = 7 * DAY\nexport const DEFAULT_AUTH_INVITATION_TTL_MS = 7 * DAY\nexport const MAX_AUTH_INVITATION_TTL_MS = 30 * DAY\n/**\n * Default in-process session cache window. Short enough that a revoked session lingers\n * only briefly, long enough to collapse a burst of requests to a single auth resolution.\n */\nexport const DEFAULT_AUTH_SESSION_CACHE_TTL_MS = 5_000\n\nexport { resolveAuthSessionAudience } from \"./audience\"\n\nexport function resolveAuthConfig(config: SixbAuthConfig | undefined): ResolvedAuthConfig {\n  if (!config) {\n    return {\n      strategy: null,\n      session: resolveAuthSessionOptions(undefined),\n      cookies: resolveAuthCookieOptions(undefined),\n    }\n  }\n\n  const strategy = \"strategy\" in config ? config.strategy : config\n  assertValidStrategy(strategy)\n\n  return {\n    strategy,\n    session: resolveAuthSessionOptions(\"strategy\" in config ? config.session : undefined),\n    cookies: resolveAuthCookieOptions(\"strategy\" in config ? config.cookies : undefined),\n  }\n}\n\nexport function resolveInvitationExpiresAt(value: Date | undefined, now: Date): Date {\n  const expiresAt = value\n    ? new Date(value)\n    : new Date(now.getTime() + DEFAULT_AUTH_INVITATION_TTL_MS)\n  const expiresAtTime = expiresAt.getTime()\n\n  if (!Number.isFinite(expiresAtTime)) {\n    throw new AuthRuntimeError(\n      \"invalid_auth_input\",\n      \"[Sixb] Invitation expiresAt must be a valid date.\"\n    )\n  }\n\n  if (expiresAtTime <= now.getTime()) {\n    throw new AuthRuntimeError(\n      \"invalid_auth_input\",\n      \"[Sixb] Invitation expiresAt must be in the future.\"\n    )\n  }\n\n  if (expiresAtTime > now.getTime() + MAX_AUTH_INVITATION_TTL_MS) {\n    throw new AuthRuntimeError(\n      \"invalid_auth_input\",\n      \"[Sixb] Invitation expiresAt must be no more than 30 days in the future.\"\n    )\n  }\n\n  return expiresAt\n}\n\nexport function sanitizeReturnTo(value: string | undefined): string {\n  if (!value || !value.startsWith(\"/\") || value.startsWith(\"//\")) {\n    return \"/\"\n  }\n\n  try {\n    const parsed = new URL(value, \"http://sixb.local\")\n    if (parsed.origin !== \"http://sixb.local\") {\n      return \"/\"\n    }\n\n    return `${parsed.pathname}${parsed.search}${parsed.hash}`\n  } catch {\n    return \"/\"\n  }\n}\n\nexport function assertNonEmpty(value: string, label: string): string {\n  const normalized = value.trim()\n  if (!normalized) {\n    throw new AuthRuntimeError(\"invalid_auth_input\", `[Sixb] ${label} must be a non-empty string.`)\n  }\n  return normalized\n}\n\nexport function normalizePagination(input: { readonly limit?: number; readonly offset?: number }): {\n  readonly limit?: number\n  readonly offset: number\n} {\n  if (input.limit !== undefined && (!Number.isInteger(input.limit) || input.limit < 0)) {\n    throw new AuthRuntimeError(\n      \"invalid_auth_input\",\n      \"[Sixb] Invitation list limit must be a non-negative integer.\"\n    )\n  }\n\n  if (input.offset !== undefined && (!Number.isInteger(input.offset) || input.offset < 0)) {\n    throw new AuthRuntimeError(\n      \"invalid_auth_input\",\n      \"[Sixb] Invitation list offset must be a non-negative integer.\"\n    )\n  }\n\n  return {\n    limit: input.limit,\n    offset: input.offset ?? 0,\n  }\n}\n\nfunction resolveAuthSessionOptions(\n  options: AuthSessionOptions | undefined\n): ResolvedAuthConfig[\"session\"] {\n  const idleTimeoutMs = options?.idleTimeoutMs ?? DEFAULT_AUTH_SESSION_IDLE_TIMEOUT_MS\n  if (!Number.isFinite(idleTimeoutMs) || idleTimeoutMs <= 0) {\n    throw new AuthRuntimeError(\n      \"invalid_auth_config\",\n      \"[Sixb] Auth session idleTimeoutMs must be a positive finite number.\"\n    )\n  }\n\n  const renewalWindowMs = options?.renewalWindowMs ?? DEFAULT_AUTH_SESSION_RENEWAL_WINDOW_MS\n  if (!Number.isFinite(renewalWindowMs) || renewalWindowMs <= 0) {\n    throw new AuthRuntimeError(\n      \"invalid_auth_config\",\n      \"[Sixb] Auth session renewalWindowMs must be a positive finite number.\"\n    )\n  }\n  if (renewalWindowMs >= idleTimeoutMs) {\n    throw new AuthRuntimeError(\n      \"invalid_auth_config\",\n      \"[Sixb] Auth session renewalWindowMs must be less than idleTimeoutMs.\"\n    )\n  }\n\n  const absoluteTimeoutMs = options?.absoluteTimeoutMs\n  if (\n    absoluteTimeoutMs !== undefined &&\n    (!Number.isFinite(absoluteTimeoutMs) || absoluteTimeoutMs <= 0)\n  ) {\n    throw new AuthRuntimeError(\n      \"invalid_auth_config\",\n      \"[Sixb] Auth session absoluteTimeoutMs must be a positive finite number when configured.\"\n    )\n  }\n  if (absoluteTimeoutMs !== undefined && absoluteTimeoutMs < idleTimeoutMs) {\n    throw new AuthRuntimeError(\n      \"invalid_auth_config\",\n      \"[Sixb] Auth session absoluteTimeoutMs must be greater than or equal to idleTimeoutMs.\"\n    )\n  }\n\n  const cacheTtlMs = options?.cacheTtlMs ?? DEFAULT_AUTH_SESSION_CACHE_TTL_MS\n  if (!Number.isFinite(cacheTtlMs) || cacheTtlMs < 0) {\n    throw new AuthRuntimeError(\n      \"invalid_auth_config\",\n      \"[Sixb] Auth session cacheTtlMs must be a non-negative finite number.\"\n    )\n  }\n  if (cacheTtlMs >= renewalWindowMs) {\n    throw new AuthRuntimeError(\n      \"invalid_auth_config\",\n      \"[Sixb] Auth session cacheTtlMs must be less than renewalWindowMs.\"\n    )\n  }\n\n  return {\n    idleTimeoutMs,\n    renewalWindowMs,\n    ...(absoluteTimeoutMs === undefined ? {} : { absoluteTimeoutMs }),\n    cacheTtlMs,\n  }\n}\n\nexport function isMagicLinkAuthStrategy(\n  strategy: AuthStrategy | null\n): strategy is MagicLinkAuthStrategy {\n  if (!strategy || strategy.kind !== \"magicLink\") {\n    return false\n  }\n\n  const candidate = strategy as {\n    readonly requestMagicLink?: unknown\n    readonly completeMagicLinkSignIn?: unknown\n  }\n\n  return (\n    typeof candidate.requestMagicLink === \"function\" &&\n    typeof candidate.completeMagicLinkSignIn === \"function\"\n  )\n}\n\nexport function isInvitationDeliveryAuthStrategy(\n  strategy: AuthStrategy | null\n): strategy is InvitationDeliveryAuthStrategy {\n  if (!strategy) {\n    return false\n  }\n\n  const candidate = strategy as {\n    readonly deliverInvitation?: unknown\n  }\n\n  return typeof candidate.deliverInvitation === \"function\"\n}\n\nexport function isOidcAuthStrategy(strategy: AuthStrategy | null): strategy is OidcAuthStrategy {\n  if (!strategy || strategy.kind !== \"oidc\") {\n    return false\n  }\n\n  const candidate = strategy as {\n    readonly startOidcSignIn?: unknown\n    readonly completeOidcSignIn?: unknown\n  }\n\n  return (\n    typeof candidate.startOidcSignIn === \"function\" &&\n    typeof candidate.completeOidcSignIn === \"function\"\n  )\n}\n\nfunction assertValidStrategy(strategy: AuthStrategy): void {\n  if (!strategy.id.trim()) {\n    throw new AuthRuntimeError(\"invalid_auth_config\", \"[Sixb] Auth strategy id is required.\")\n  }\n}\n"
-  ],
-  "mappings": ";;AASO,MAAM,0BAAyB,MAAM;AAAA,EAI/B;AAAA,EAHF,OAAO;AAAA,EAEhB,WAAW,CACA,MACT,SACA;AAAA,IACA,MAAM,OAAO;AAAA,IAHJ;AAAA;AAKb;AAAA;AAaO,MAAM,4BAA2B,MAAM;AAAA,EAIjC;AAAA,EAEA;AAAA,EALF,OAAO;AAAA,EAEhB,WAAW,CACA,QACT,SACS,OACT;AAAA,IACA,MAAM,OAAO;AAAA,IAJJ;AAAA,IAEA;AAAA;AAIb;;;ACvCO,IAAM,iCAAgC;AAQtC,SAAS,2BAA0B,CAAC,OAA6C;AAAA,EACtF,OAAO,UAAU,WAAW,UAAU;AAAA;AAGjC,SAAS,2BAA0B,CACxC,OACqB;AAAA,EACrB,MAAM,WAAW,SAAS;AAAA,EAE1B,IAAI,CAAC,4BAA2B,QAAQ,GAAG;AAAA,IACzC,MAAM,IAAI,kBACR,uBACA,iCAAiC,kDACnC;AAAA,EACF;AAAA,EAEA,OAAO;AAAA;;;ACtBF,IAAM,+BAA8B;AACpC,IAAM,4BAA2B;AAsBjC,SAAS,yBAAwB,CACtC,SAC2B;AAAA,EAC3B,MAAM,WAAW;AAAA,IACf,mBAAmB,SAAS,qBAAqB;AAAA,IACjD,gBAAgB,SAAS,kBAAkB;AAAA,IAC3C,QAAQ,SAAS;AAAA,IACjB,QAAQ,SAAS,UAAU;AAAA,IAC3B,UAAU,SAAS,YAAY;AAAA,IAC/B,cAAc,SAAS,gBAAgB;AAAA,EACzC;AAAA,EAEA,yBAAyB,QAAQ;AAAA,EACjC,OAAO;AAAA;AAGF,SAAS,mCAAmC,CACjD,SACA,UAC2B;AAAA,EAC3B,MAAM,mBAAmB,4BAA2B,QAAQ;AAAA,EAC5D,IAAI,qBAAqB,gCAA+B;AAAA,IACtD,OAAO;AAAA,EACT;AAAA,EAEA,OAAO;AAAA,OACF;AAAA,IACH,mBAAmB,GAAG,QAAQ,qBAAqB;AAAA,IACnD,gBAAgB,GAAG,QAAQ,kBAAkB;AAAA,EAC/C;AAAA;AAGK,SAAS,kBAAiB,CAAC,QAAoD;AAAA,EACpF,MAAM,UAAU,IAAI;AAAA,EACpB,IAAI,CAAC,QAAQ;AAAA,IACX,OAAO;AAAA,EACT;AAAA,EAEA,WAAW,QAAQ,OAAO,MAAM,GAAG,GAAG;AAAA,IACpC,MAAM,YAAY,KAAK,QAAQ,GAAG;AAAA,IAClC,IAAI,aAAa,GAAG;AAAA,MAClB;AAAA,IACF;AAAA,IAEA,MAAM,OAAO,KAAK,MAAM,GAAG,SAAS,EAAE,KAAK;AAAA,IAC3C,IAAI,CAAC,QAAQ,QAAQ,IAAI,IAAI,GAAG;AAAA,MAC9B;AAAA,IACF;AAAA,IAEA,MAAM,QAAQ,KAAK,MAAM,YAAY,CAAC,EAAE,KAAK;AAAA,IAC7C,QAAQ,IAAI,MAAM,KAAK;AAAA,EACzB;AAAA,EAEA,OAAO;AAAA;AAGF,SAAS,UAAS,CAAC,SAAkB,MAAkC;AAAA,EAC5E,OAAO,mBAAkB,QAAQ,QAAQ,IAAI,QAAQ,CAAC,EAAE,IAAI,IAAI;AAAA;AAG3D,SAAS,gBAAe,CAAC,SAA6C;AAAA,EAC3E,MAAM,QAAQ,CAAC,GAAG,QAAQ,QAAQ,QAAQ,OAAO;AAAA,EAEjD,MAAM,KAAK,QAAQ;AAAA,EACnB,MAAM,KAAK,iBAAiB;AAAA,EAE5B,IAAI,QAAQ,QAAQ;AAAA,IAClB,MAAM,KAAK,UAAU,QAAQ,QAAQ;AAAA,EACvC;AAAA,EAEA,IAAI,QAAQ,UAAU;AAAA,IACpB,MAAM,KAAK,UAAU;AAAA,EACvB;AAAA,EAEA,IAAI,QAAQ,QAAQ;AAAA,IAClB,MAAM,KAAK,QAAQ;AAAA,EACrB;AAAA,EAEA,IAAI,QAAQ,WAAW,WAAW;AAAA,IAChC,MAAM,KAAK,WAAW,KAAK,MAAM,QAAQ,MAAM,GAAG;AAAA,EACpD;AAAA,EAEA,IAAI,QAAQ,SAAS;AAAA,IACnB,MAAM,KAAK,WAAW,QAAQ,QAAQ,YAAY,GAAG;AAAA,EACvD;AAAA,EAEA,OAAO,MAAM,KAAK,IAAI;AAAA;AAGjB,SAAS,uBAAsB,CACpC,SACA,SACS;AAAA,EACT,IACE,yBAAyB,QAAQ,iBAAiB,KAClD,yBAAyB,QAAQ,cAAc,GAC/C;AAAA,IACA,OAAO;AAAA,EACT;AAAA,EAEA,IAAI,OAAO,QAAQ,WAAW,WAAW;AAAA,IACvC,OAAO,QAAQ;AAAA,EACjB;AAAA,EAEA,MAAM,MAAM,IAAI,IAAI,QAAQ,GAAG;AAAA,EAC/B,IAAI,YAAY,IAAI,QAAQ,GAAG;AAAA,IAC7B,OAAO;AAAA,EACT;AAAA,EAEA,OAAO,IAAI,aAAa,YAAY;AAAA;AAG/B,SAAS,0BAAyB,CAAC,QAK/B;AAAA,EACT,MAAM,WAAW,sBAAsB,OAAO,SAAS;AAAA,EACvD,OAAO,iBAAgB;AAAA,IACrB,MAAM,OAAO,QAAQ;AAAA,IACrB,OAAO,OAAO;AAAA,IACd,UAAU;AAAA,OACP;AAAA,IACH,QAAQ,OAAO,QAAQ;AAAA,IACvB,QAAQ,wBAAuB,OAAO,SAAS,OAAO,OAAO;AAAA,IAC7D,UAAU,OAAO,QAAQ;AAAA,EAC3B,CAAC;AAAA;AAGI,SAAS,uBAAsB,CAAC,QAK5B;AAAA,EACT,MAAM,WAAW,sBAAsB,OAAO,SAAS;AAAA,EACvD,OAAO,iBAAgB;AAAA,IACrB,MAAM,OAAO,QAAQ;AAAA,IACrB,OAAO,OAAO;AAAA,IACd,UAAU,OAAO,QAAQ;AAAA,OACtB;AAAA,IACH,QAAQ,OAAO,QAAQ;AAAA,IACvB,QAAQ,wBAAuB,OAAO,SAAS,OAAO,OAAO;AAAA,IAC7D,UAAU,OAAO,QAAQ;AAAA,EAC3B,CAAC;AAAA;AAGH,SAAS,qBAAqB,CAAC,WAG7B;AAAA,EACA,MAAM,cAAc,UAAU,QAAQ;AAAA,EACtC,IAAI,CAAC,OAAO,SAAS,WAAW,GAAG;AAAA,IACjC,MAAM,IAAI,MAAM,oDAAoD;AAAA,EACtE;AAAA,EAEA,OAAO;AAAA,IACL,QAAQ,KAAK,IAAI,GAAG,KAAK,OAAO,cAAc,KAAK,IAAI,KAAK,IAAI,CAAC;AAAA,IACjE,SAAS,IAAI,KAAK,WAAW;AAAA,EAC/B;AAAA;AAGK,SAAS,yBAAwB,CAAC,QAG9B;AAAA,EACT,OAAO,iBAAgB;AAAA,IACrB,MAAM,OAAO,QAAQ;AAAA,IACrB,OAAO;AAAA,IACP,UAAU;AAAA,IACV,QAAQ;AAAA,IACR,SAAS,IAAI,KAAK,CAAC;AAAA,IACnB,QAAQ,OAAO,QAAQ;AAAA,IACvB,QAAQ,wBAAuB,OAAO,SAAS,OAAO,OAAO;AAAA,IAC7D,UAAU,OAAO,QAAQ;AAAA,EAC3B,CAAC;AAAA;AAGI,SAAS,sBAAqB,CAAC,QAG3B;AAAA,EACT,OAAO,iBAAgB;AAAA,IACrB,MAAM,OAAO,QAAQ;AAAA,IACrB,OAAO;AAAA,IACP,QAAQ;AAAA,IACR,SAAS,IAAI,KAAK,CAAC;AAAA,IACnB,QAAQ,OAAO,QAAQ;AAAA,IACvB,QAAQ,wBAAuB,OAAO,SAAS,OAAO,OAAO;AAAA,IAC7D,UAAU,OAAO,QAAQ;AAAA,EAC3B,CAAC;AAAA;AAGH,SAAS,WAAW,CAAC,UAA2B;AAAA,EAC9C,OAAO,aAAa,eAAe,aAAa,eAAe,aAAa;AAAA;AAG9E,SAAS,wBAAwB,CAAC,SAA0C;AAAA,EAC1E,sBAAsB,QAAQ,mBAAmB,mBAAmB;AAAA,EACpE,sBAAsB,QAAQ,gBAAgB,gBAAgB;AAAA,EAE9D,IAAI,QAAQ,aAAa,UAAU;AAAA,IACjC,MAAM,IAAI,MAAM,+CAA+C;AAAA,EACjE;AAAA,EAEA,IACE,QAAQ,WACP,yBAAyB,QAAQ,iBAAiB,KACjD,yBAAyB,QAAQ,cAAc,IACjD;AAAA,IACA,MAAM,IAAI,MAAM,qEAAqE;AAAA,EACvF;AAAA,EAEA,IACE,QAAQ,WAAW,UAClB,yBAAyB,QAAQ,iBAAiB,KACjD,yBAAyB,QAAQ,cAAc,IACjD;AAAA,IACA,MAAM,IAAI,MAAM,qDAAqD;AAAA,EACvE;AAAA;AAGF,SAAS,qBAAqB,CAAC,MAAc,OAAqB;AAAA,EAChE,IAAI,CAAC,iCAAiC,KAAK,IAAI,GAAG;AAAA,IAChD,MAAM,IAAI,MAAM,sBAAsB,UAAU,mCAAmC;AAAA,EACrF;AAAA;AAGF,SAAS,wBAAwB,CAAC,MAAuB;AAAA,EACvD,OAAO,KAAK,WAAW,SAAS;AAAA;AAGlC,SAAS,wBAAwB,CAAC,MAAuB;AAAA,EACvD,OAAO,yBAAyB,IAAI,KAAK,KAAK,WAAW,WAAW;AAAA;;;ACzPtE,IAAM,MAAM,KAAK,KAAK,KAAK;AAEpB,IAAM,wCAAuC,KAAK;AAClD,IAAM,0CAAyC,IAAI;AACnD,IAAM,kCAAiC,IAAI;AAC3C,IAAM,8BAA6B,KAAK;AAKxC,IAAM,qCAAoC;AAI1C,SAAS,kBAAiB,CAAC,QAAwD;AAAA,EACxF,IAAI,CAAC,QAAQ;AAAA,IACX,OAAO;AAAA,MACL,UAAU;AAAA,MACV,SAAS,0BAA0B,SAAS;AAAA,MAC5C,SAAS,0BAAyB,SAAS;AAAA,IAC7C;AAAA,EACF;AAAA,EAEA,MAAM,WAAW,cAAc,SAAS,OAAO,WAAW;AAAA,EAC1D,oBAAoB,QAAQ;AAAA,EAE5B,OAAO;AAAA,IACL;AAAA,IACA,SAAS,0BAA0B,cAAc,SAAS,OAAO,UAAU,SAAS;AAAA,IACpF,SAAS,0BAAyB,cAAc,SAAS,OAAO,UAAU,SAAS;AAAA,EACrF;AAAA;AAGK,SAAS,0BAA0B,CAAC,OAAyB,KAAiB;AAAA,EACnF,MAAM,YAAY,QACd,IAAI,KAAK,KAAK,IACd,IAAI,KAAK,IAAI,QAAQ,IAAI,+BAA8B;AAAA,EAC3D,MAAM,gBAAgB,UAAU,QAAQ;AAAA,EAExC,IAAI,CAAC,OAAO,SAAS,aAAa,GAAG;AAAA,IACnC,MAAM,IAAI,kBACR,sBACA,mDACF;AAAA,EACF;AAAA,EAEA,IAAI,iBAAiB,IAAI,QAAQ,GAAG;AAAA,IAClC,MAAM,IAAI,kBACR,sBACA,oDACF;AAAA,EACF;AAAA,EAEA,IAAI,gBAAgB,IAAI,QAAQ,IAAI,6BAA4B;AAAA,IAC9D,MAAM,IAAI,kBACR,sBACA,yEACF;AAAA,EACF;AAAA,EAEA,OAAO;AAAA;AAoBF,SAAS,eAAc,CAAC,OAAe,OAAuB;AAAA,EACnE,MAAM,aAAa,MAAM,KAAK;AAAA,EAC9B,IAAI,CAAC,YAAY;AAAA,IACf,MAAM,IAAI,kBAAiB,sBAAsB,UAAU,mCAAmC;AAAA,EAChG;AAAA,EACA,OAAO;AAAA;AAGF,SAAS,mBAAmB,CAAC,OAGlC;AAAA,EACA,IAAI,MAAM,UAAU,cAAc,CAAC,OAAO,UAAU,MAAM,KAAK,KAAK,MAAM,QAAQ,IAAI;AAAA,IACpF,MAAM,IAAI,kBACR,sBACA,8DACF;AAAA,EACF;AAAA,EAEA,IAAI,MAAM,WAAW,cAAc,CAAC,OAAO,UAAU,MAAM,MAAM,KAAK,MAAM,SAAS,IAAI;AAAA,IACvF,MAAM,IAAI,kBACR,sBACA,+DACF;AAAA,EACF;AAAA,EAEA,OAAO;AAAA,IACL,OAAO,MAAM;AAAA,IACb,QAAQ,MAAM,UAAU;AAAA,EAC1B;AAAA;AAGF,SAAS,yBAAyB,CAChC,SAC+B;AAAA,EAC/B,MAAM,gBAAgB,SAAS,iBAAiB;AAAA,EAChD,IAAI,CAAC,OAAO,SAAS,aAAa,KAAK,iBAAiB,GAAG;AAAA,IACzD,MAAM,IAAI,kBACR,uBACA,qEACF;AAAA,EACF;AAAA,EAEA,MAAM,kBAAkB,SAAS,mBAAmB;AAAA,EACpD,IAAI,CAAC,OAAO,SAAS,eAAe,KAAK,mBAAmB,GAAG;AAAA,IAC7D,MAAM,IAAI,kBACR,uBACA,uEACF;AAAA,EACF;AAAA,EACA,IAAI,mBAAmB,eAAe;AAAA,IACpC,MAAM,IAAI,kBACR,uBACA,sEACF;AAAA,EACF;AAAA,EAEA,MAAM,oBAAoB,SAAS;AAAA,EACnC,IACE,sBAAsB,cACrB,CAAC,OAAO,SAAS,iBAAiB,KAAK,qBAAqB,IAC7D;AAAA,IACA,MAAM,IAAI,kBACR,uBACA,yFACF;AAAA,EACF;AAAA,EACA,IAAI,sBAAsB,aAAa,oBAAoB,eAAe;AAAA,IACxE,MAAM,IAAI,kBACR,uBACA,uFACF;AAAA,EACF;AAAA,EAEA,MAAM,aAAa,SAAS,cAAc;AAAA,EAC1C,IAAI,CAAC,OAAO,SAAS,UAAU,KAAK,aAAa,GAAG;AAAA,IAClD,MAAM,IAAI,kBACR,uBACA,sEACF;AAAA,EACF;AAAA,EACA,IAAI,cAAc,iBAAiB;AAAA,IACjC,MAAM,IAAI,kBACR,uBACA,mEACF;AAAA,EACF;AAAA,EAEA,OAAO;AAAA,IACL;AAAA,IACA;AAAA,OACI,sBAAsB,YAAY,CAAC,IAAI,EAAE,kBAAkB;AAAA,IAC/D;AAAA,EACF;AAAA;AAGK,SAAS,wBAAuB,CACrC,UACmC;AAAA,EACnC,IAAI,CAAC,YAAY,SAAS,SAAS,aAAa;AAAA,IAC9C,OAAO;AAAA,EACT;AAAA,EAEA,MAAM,YAAY;AAAA,EAKlB,OACE,OAAO,UAAU,qBAAqB,cACtC,OAAO,UAAU,4BAA4B;AAAA;AAI1C,SAAS,iCAAgC,CAC9C,UAC4C;AAAA,EAC5C,IAAI,CAAC,UAAU;AAAA,IACb,OAAO;AAAA,EACT;AAAA,EAEA,MAAM,YAAY;AAAA,EAIlB,OAAO,OAAO,UAAU,sBAAsB;AAAA;AAGzC,SAAS,mBAAkB,CAAC,UAA6D;AAAA,EAC9F,IAAI,CAAC,YAAY,SAAS,SAAS,QAAQ;AAAA,IACzC,OAAO;AAAA,EACT;AAAA,EAEA,MAAM,YAAY;AAAA,EAKlB,OACE,OAAO,UAAU,oBAAoB,cACrC,OAAO,UAAU,uBAAuB;AAAA;AAI5C,SAAS,mBAAmB,CAAC,UAA8B;AAAA,EACzD,IAAI,CAAC,SAAS,GAAG,KAAK,GAAG;AAAA,IACvB,MAAM,IAAI,kBAAiB,uBAAuB,sCAAsC;AAAA,EAC1F;AAAA;",
-  "debugId": "E4EC0B2B5EB9DD3264756E2164756E21",
-  "names": []
-}