@sixb/core 0.1.19 → 0.1.21

package/dist/{chunk-hkc3jct7.js → chunk-c06hmxyy.js}

@@ -24,16 +24,8 @@ function coerceAgentRunFinishReason2(value) {
   }
   return AGENT_RUN_FINISH_REASONS2.includes(value) ? value : "unknown";
 }
-var AGENT_RUN_DIAGNOSTIC_CODES2 = [
-  "output_file_limit_exceeded",
-  "output_file_too_large",
-  "output_budget_exhausted",
-  "output_collection_failed",
-  "output_file_changed",
-  "output_storage_failed",
-  "step_limit_reached"
-];
+var AGENT_RUN_DIAGNOSTIC_CODES2 = ["step_limit_reached"];
 
 export { AGENT_RUN_FAILURE_CODES2, AGENT_RUN_FINISH_REASONS2, coerceAgentRunFinishReason2, AGENT_RUN_DIAGNOSTIC_CODES2 };
 
-//# debugId=DD020A3A47567D1D64756E2164756E21
+//# debugId=8E584B603E78142664756E2164756E21

package/dist/chunk-c06hmxyy.js.map

@@ -0,0 +1,10 @@
+{
+  "version": 3,
+  "sources": ["../src/storage/agents/types.ts"],
+  "sourcesContent": [
+    "import type { AgentMessage, AgentMessagePart, AgentMessageRole } from \"../../agents/message\"\nimport type { AgentReasoning } from \"../../agents/types\"\nimport type { Principal } from \"../../auth\"\nimport type { SixbErrorCode, SixbFailure } from \"../../errors/types\"\nimport type { JsonValue } from \"../../json\"\nimport type { LanguageModelRef } from \"../../models\"\n\n// ── agent_threads — one conversation with an agent ──────────────────────────────────────────────\n\nexport type AgentThreadStatus = \"active\" | \"archived\"\n\n/** Immutable, non-secret application input. Never store resolved env or credentials here. */\nexport type AgentThreadSandboxParams = Readonly<Record<string, JsonValue>>\n\n/** Worker-owned state, independent from the immutable application binding. */\nexport interface AgentThreadSandboxState {\n  /** Exact name passed to the provider. Replacements always receive a fresh name. */\n  readonly name: string\n  readonly status: \"new\" | \"busy\" | \"ready\" | \"blocked\" | \"unavailable\"\n  readonly sourceFingerprint?: string\n  readonly initialized: boolean\n  /** Durable context boundary: local files from before this reset are no longer available. */\n  readonly resetAt?: string\n  /** Never expires automatically: a delayed provider operation must not reach a successor. */\n  readonly owner?: { readonly runId: string; readonly executionToken: string }\n}\n\nexport type TransitionAgentThreadSandboxInput = {\n  readonly projectId: string\n  readonly id: string\n} & (\n  | {\n      readonly action: \"acquire\"\n      readonly runId: string\n      readonly executionToken: string\n      readonly name: string\n      readonly sourceFingerprint: string\n    }\n  | {\n      readonly action: \"replace\"\n      readonly runId: string\n      readonly executionToken: string\n      readonly name: string\n      readonly nextName: string\n    }\n  | {\n      readonly action: \"settle\"\n      readonly runId: string\n      readonly executionToken: string\n      readonly name: string\n      readonly status: \"ready\" | \"blocked\" | \"unavailable\"\n      readonly initialized: boolean\n    }\n  | {\n      readonly action: \"recreate\"\n      readonly expectedSandboxName: string\n      readonly name: string\n    }\n)\n\nexport interface AgentThreadRecord {\n  readonly id: string\n  readonly projectId: string\n  /** Who owns/opened the thread. Reuses the canonical auth principal (gains `agent` later for free). */\n  readonly ownerPrincipal: Principal\n  readonly title?: string\n  readonly sandboxParams?: AgentThreadSandboxParams\n  readonly sandboxState?: AgentThreadSandboxState\n  readonly status: AgentThreadStatus\n  /** Single-flight anchor: the id of the one run currently allowed to write, or `null` when idle. */\n  readonly activeRunId: string | null\n  readonly lastMessageAt?: Date\n  readonly messageCount: number\n  readonly createdAt: Date\n  readonly updatedAt: Date\n}\n\nexport interface CreateAgentThreadInput {\n  readonly id: string\n  readonly projectId: string\n  readonly ownerPrincipal: Principal\n  readonly title?: string\n  readonly sandboxParams?: AgentThreadSandboxParams\n  readonly status?: AgentThreadStatus\n  readonly createdAt?: Date\n  readonly updatedAt?: Date\n}\n\nexport interface ListAgentThreadsInput {\n  readonly projectId: string\n  readonly statuses?: readonly AgentThreadStatus[]\n  readonly ownerPrincipal?: Principal\n  readonly limit?: number\n  readonly offset?: number\n  readonly order?: \"asc\" | \"desc\"\n}\n\nexport interface ListAgentThreadsResult {\n  readonly threads: readonly AgentThreadRecord[]\n  readonly hasMore: boolean\n  readonly total: number\n}\n\n// ── agent_runs — one loop execution (the worker job; attribution + fencing) ───────────────────\n\n/** Lifecycle shared by every durable agent execution, conversational or workflow-owned. */\nexport type AgentExecutionStatus = \"queued\" | \"running\" | \"succeeded\" | \"failed\" | \"cancelled\"\n\nexport type AgentRunStatus = AgentExecutionStatus\nexport type AgentRunKind = \"conversation\" | \"subagent\"\n\n/** Error codes an agent execution can persist and expose through its public contract. */\nexport const AGENT_RUN_FAILURE_CODES = [\n  \"internal.unexpected\",\n  \"runtime.cancelled\",\n  \"agent.execution_failed\",\n  \"ai.usage_limit_exceeded\",\n  \"ai.usage_limit_unavailable\",\n] as const satisfies readonly [SixbErrorCode, ...SixbErrorCode[]]\n\nexport type AgentRunFailureCode = (typeof AGENT_RUN_FAILURE_CODES)[number]\n\n/**\n * Why a run ended — Sixb's provider-independent vocabulary. It includes model-loop reasons plus\n * platform-level endings such as `timeout`, or `interrupted` for a turn whose worker died before\n * finishing it, so reads remain typed and exhaustive. `other` and `unknown` preserve terminal state\n * when a provider adds a new reason.\n */\nexport const AGENT_RUN_FINISH_REASONS = [\n  \"stop\",\n  \"length\",\n  \"content-filter\",\n  \"tool-calls\",\n  \"timeout\",\n  \"interrupted\",\n  \"error\",\n  \"other\",\n  \"unknown\",\n] as const\n\nexport type AgentRunFinishReason = (typeof AGENT_RUN_FINISH_REASONS)[number]\n\n/**\n * Coerce an external finish-reason string — a DB column or an SDK value — to {@link\n * AgentRunFinishReason}. An unrecognised value becomes `\"unknown\"` rather than being dropped.\n */\nexport function coerceAgentRunFinishReason(\n  value: string | null | undefined\n): AgentRunFinishReason | undefined {\n  if (value === null || value === undefined) {\n    return undefined\n  }\n  return (AGENT_RUN_FINISH_REASONS as readonly string[]).includes(value)\n    ? (value as AgentRunFinishReason)\n    : \"unknown\"\n}\n\n/** Stable, user-facing diagnostics emitted by the platform while executing a run. */\nexport const AGENT_RUN_DIAGNOSTIC_CODES = [\"step_limit_reached\"] as const\n\n/**\n * Closed on purpose, and the wire is closed with it.\n *\n * Sixb writes these codes and the generated client is what reads them, so an open union would only\n * be honest if the HTTP schema were open too — and that costs the OpenAPI enum, the client's\n * autocompletion, and the app's exhaustive `switch`. Sixb owns both ends, so a new code is a minor\n * version bump: cheap here, and a broken `switch` is better than a 500 from `z.enum`.\n */\nexport type AgentRunDiagnosticCode = (typeof AGENT_RUN_DIAGNOSTIC_CODES)[number]\nexport type AgentRunDiagnosticSeverity = \"warning\" | \"error\"\n\nexport interface AgentRunDiagnostic {\n  readonly code: AgentRunDiagnosticCode\n  readonly severity: AgentRunDiagnosticSeverity\n  /** What the diagnostic is about: the turn as a whole. */\n  readonly scope: \"run\"\n  /** Sanitized, stable copy suitable for display to an end user. */\n  readonly message: string\n}\n\n/**\n * Authorization state for the current queue delivery.\n *\n * `queueLeaseExpiresAt` is a persisted projection of `ClaimedQueueJob.leaseExpiresAt`, not an\n * independently managed run lease. It may only be extended from a successful queue lease renewal.\n */\nexport interface AgentRunExecution {\n  readonly token: string\n  readonly queueLeaseExpiresAt: Date\n}\n\ninterface AgentRunRecordBase {\n  readonly id: string\n  readonly projectId: string\n  readonly executionId: string\n  readonly status: AgentRunStatus\n  readonly modelId?: string\n  /** Why the run ended (our own SDK-independent enum). */\n  readonly finishReason?: AgentRunFinishReason\n  /** Platform diagnostics are transcript annotations, never agent-authored message content. */\n  readonly diagnostics?: readonly AgentRunDiagnostic[]\n  /** Portable failure snapshot when the run did not succeed. */\n  readonly error?: SixbFailure<AgentRunFailureCode>\n  /** Execution attempts: `0` while queued, `1` on first start, incremented on redelivery. */\n  readonly attempt: number\n  readonly execution?: AgentRunExecution\n  readonly createdAt: Date\n  readonly startedAt?: Date\n  readonly completedAt?: Date\n}\n\nexport interface ConversationAgentRunRecord extends AgentRunRecordBase {\n  readonly kind: \"conversation\"\n  readonly threadId: string\n  readonly triggerMessageId: string\n  /** Immutable model selection captured at admission. Absent only on runs predating this field. */\n  readonly spec?: ConversationAgentRunSpec\n}\n\n/** Immutable, serialisable model selection and requester settings for one conversational turn. */\nexport interface ConversationAgentRunSpec {\n  readonly model: LanguageModelRef\n  readonly reasoning?: AgentReasoning\n  /** Canonical IANA time zone of the requester. Absent uses the project time zone. */\n  readonly timeZone?: string\n  /** Canonical BCP 47 language of the requester. Absent uses the project locale. */\n  readonly locale?: string\n}\n\n/** Immutable, serialisable child configuration captured before dispatch. */\nexport interface SubagentRunSpec {\n  readonly model: LanguageModelRef\n  readonly reasoning?: AgentReasoning\n  /** Focused task supplied by the parent Agent. */\n  readonly task: string\n  /** Project tools available when the child was admitted. Runtime tools are injected separately. */\n  readonly toolNames: readonly string[]\n  readonly maxSteps: number\n}\n\n/** Durable child output returned to its parent by `wait_agent`. */\nexport interface SubagentRunResult {\n  readonly text: string\n}\n\nexport interface SubagentRunRecord extends AgentRunRecordBase {\n  readonly kind: \"subagent\"\n  readonly parentRunId: string\n  /** Stable parent-selected key that makes repeated tool execution idempotent. */\n  readonly spawnKey: string\n  readonly spec: SubagentRunSpec\n  readonly result?: SubagentRunResult\n}\n\nexport type AgentRunRecord = ConversationAgentRunRecord | SubagentRunRecord\n\nexport interface CreateAgentRunInput {\n  readonly id: string\n  readonly projectId: string\n  readonly executionId: string\n  readonly threadId: string\n  readonly triggerMessageId: string\n  readonly spec: ConversationAgentRunSpec\n  readonly createdAt?: Date\n}\n\nexport interface CreateSubagentRunInput {\n  readonly id: string\n  readonly projectId: string\n  readonly executionId: string\n  readonly parentRunId: string\n  /** Current parent delivery token. New children are admitted only while that delivery owns it. */\n  readonly parentExecutionToken: string\n  readonly spawnKey: string\n  readonly spec: SubagentRunSpec\n  /** Internal safety bound enforced atomically across worker processes. */\n  readonly maxActiveChildren: number\n  readonly createdAt?: Date\n}\n\nexport interface StartAgentRunInput {\n  readonly id: string\n  readonly projectId: string\n  readonly modelId?: string\n  readonly execution: AgentRunExecution\n  readonly startedAt?: Date\n}\n\nexport interface FinishQueuedAgentRunInput {\n  readonly id: string\n  readonly projectId: string\n  readonly status: \"failed\" | \"cancelled\"\n  readonly error?: SixbFailure<AgentRunFailureCode>\n  readonly completedAt?: Date\n}\n\nexport interface ReclaimAgentRunInput {\n  readonly id: string\n  readonly projectId: string\n  readonly execution: AgentRunExecution\n}\n\nexport interface ConfirmAgentRunExecutionOwnershipInput {\n  readonly id: string\n  readonly projectId: string\n  readonly executionToken: string\n  /** Exact expiration returned by the queue claim or its latest successful renewal. */\n  readonly queueLeaseExpiresAt: Date\n}\n\nexport type FinishAgentRunInput =\n  | {\n      readonly id: string\n      readonly projectId: string\n      readonly executionToken: string\n      readonly status: \"succeeded\"\n      readonly modelId?: string\n      readonly finishReason?: AgentRunFinishReason\n      readonly diagnostics?: readonly AgentRunDiagnostic[]\n      readonly result?: SubagentRunResult\n      readonly completedAt?: Date\n    }\n  | {\n      readonly id: string\n      readonly projectId: string\n      readonly executionToken: string\n      readonly status: \"failed\" | \"cancelled\"\n      readonly modelId?: string\n      readonly finishReason?: AgentRunFinishReason\n      readonly diagnostics?: readonly AgentRunDiagnostic[]\n      readonly error?: SixbFailure<AgentRunFailureCode>\n      readonly completedAt?: Date\n    }\n\nexport interface ListAgentRunsInput {\n  readonly projectId: string\n  readonly kinds?: readonly AgentRunKind[]\n  readonly threadId?: string\n  readonly parentRunId?: string\n  readonly statuses?: readonly AgentRunStatus[]\n  /** Effective start time; runs that never started use `createdAt`. */\n  readonly startedAfter?: Date\n  /** Effective start time; runs that never started use `createdAt`. */\n  readonly startedBefore?: Date\n  readonly limit?: number\n  readonly offset?: number\n  readonly order?: \"asc\" | \"desc\"\n}\n\nexport interface ListAgentRunsResult {\n  readonly runs: readonly AgentRunRecord[]\n  readonly hasMore: boolean\n  readonly total: number\n}\n\n// ── agent_messages — one message (assistant messages inserted only once finalized) ─────────────\n\nexport type { AgentMessageRole }\n\nexport interface AgentMessageRecord {\n  readonly id: string\n  readonly projectId: string\n  readonly threadId: string\n  /** The run that produced this message; `null` for user-authored messages. */\n  readonly runId: string | null\n  readonly role: AgentMessageRole\n  /** Principal that authored this persisted message: caller for user messages, agent identity later for assistant messages. */\n  readonly authorPrincipal?: Principal\n  /** Monotonic per thread, assigned by the store. */\n  readonly seq: number\n  /** Structured message content — text / reasoning / step boundaries / tool calls. */\n  readonly parts: readonly AgentMessagePart[]\n  /** Message-level metadata (mirrors `UIMessage.metadata`). */\n  readonly metadata?: JsonValue\n  /** Versions the `parts` shape so it can be migrated; stamped from `AGENT_MESSAGE_CONTENT_VERSION`. */\n  readonly contentVersion: number\n  readonly createdAt: Date\n  readonly completedAt?: Date\n}\n\n/** Append a message: a {@link AgentMessage} (role + parts + metadata) plus its storage identity. */\nexport interface AppendAgentMessageInput extends AgentMessage {\n  readonly id: string\n  readonly projectId: string\n  readonly threadId: string\n  readonly runId: string | null\n  readonly authorPrincipal?: Principal\n  readonly createdAt?: Date\n  readonly completedAt?: Date\n}\n\nexport interface DeleteAgentMessagesByRunInput {\n  readonly projectId: string\n  readonly threadId: string\n  readonly runId: string\n}\n\nexport interface ListAgentMessagesInput {\n  readonly projectId: string\n  readonly threadId: string\n  /** Return only messages whose per-thread sequence is greater than this retained boundary. */\n  readonly afterSeq?: number\n  readonly roles?: readonly AgentMessageRole[]\n  readonly limit?: number\n  readonly offset?: number\n  readonly order?: \"asc\" | \"desc\"\n}\n\nexport interface ListAgentMessagesResult {\n  readonly messages: readonly AgentMessageRecord[]\n  readonly hasMore: boolean\n  readonly total: number\n}\n\n// ── agent_context_checkpoints — append-only model-context boundaries ──────────────────────────\n\nexport type AgentContextCheckpointReason = \"threshold\" | \"overflow\"\n\n/**\n * A durable summary boundary used only when projecting a thread into model context.\n *\n * Checkpoints never replace or mutate transcript messages. Normal thread reads remain authoritative\n * and complete; the worker reads the latest checkpoint and only the retained message tail.\n */\nexport interface AgentContextCheckpointRecord {\n  readonly id: string\n  readonly projectId: string\n  readonly threadId: string\n  readonly createdByRunId: string\n  readonly previousCheckpointId?: string\n  readonly reason: AgentContextCheckpointReason\n  readonly summary: string\n  readonly summaryFormatVersion: 1\n  readonly summarizedThroughSeq: number\n  readonly observedHeadSeq: number\n  readonly estimatedInputTokensBefore: number\n  readonly estimatedInputTokensAfter: number\n  readonly summaryModelId: string\n  readonly createdAt: Date\n}\n\nexport interface CreateAgentContextCheckpointInput {\n  readonly id: string\n  readonly projectId: string\n  readonly threadId: string\n  readonly createdByRunId: string\n  /** Compare-and-swap anchor. `null` means the thread must not have a prior checkpoint. */\n  readonly expectedPreviousCheckpointId: string | null\n  /** Compare-and-swap anchor for the complete transcript observed by the summarizer. */\n  readonly expectedHeadSeq: number\n  /** Current delivery token for `createdByRunId`; stale redeliveries must not write. */\n  readonly executionToken: string\n  readonly reason: AgentContextCheckpointReason\n  readonly summary: string\n  readonly summaryFormatVersion: 1\n  readonly summarizedThroughSeq: number\n  readonly observedHeadSeq: number\n  readonly estimatedInputTokensBefore: number\n  readonly estimatedInputTokensAfter: number\n  readonly summaryModelId: string\n  readonly createdAt?: Date\n}\n\n// ── Store ───────────────────────────────────────────────────────────────────────────────────────\n\nexport interface AgentThreadStore {\n  /** Atomic run-fenced transition, or explicit idle-thread recreation. */\n  transitionSandbox(input: TransitionAgentThreadSandboxInput): Promise<AgentThreadSandboxState>\n  create(input: CreateAgentThreadInput): Promise<AgentThreadRecord>\n  getById(params: { projectId: string; id: string }): Promise<AgentThreadRecord | null>\n  /** The threads found, in first-occurrence input order; a missing one is omitted. */\n  getByIds(params: {\n    readonly projectId: string\n    readonly ids: readonly string[]\n  }): Promise<readonly AgentThreadRecord[]>\n  list(input: ListAgentThreadsInput): Promise<ListAgentThreadsResult>\n}\n\nexport interface AgentRunStore {\n  /** Persist a queued run and atomically claim the thread's single-flight slot. */\n  create(input: CreateAgentRunInput): Promise<ConversationAgentRunRecord>\n  /** Persist or replay one idempotent child run while atomically enforcing parent fan-out. */\n  createSubagent(input: CreateSubagentRunInput): Promise<SubagentRunRecord>\n  /** Transition a queued run to running and install the first delivery's execution token. */\n  start(input: StartAgentRunInput): Promise<AgentRunRecord>\n  /** Finish a queued run before execution and release the thread's single-flight slot. */\n  finishQueued(input: FinishQueuedAgentRunInput): Promise<AgentRunRecord>\n  /** Rotate the execution token for a redelivered running job (`attempt++`). */\n  reclaim(input: ReclaimAgentRunInput): Promise<AgentRunRecord>\n  /**\n   * Project the queue's latest confirmed ownership expiration onto the current execution.\n   * Implementations must fence by token and must never move the expiration backwards.\n   */\n  confirmExecutionOwnership(input: ConfirmAgentRunExecutionOwnershipInput): Promise<AgentRunRecord>\n  /** Finalize a run and release the thread's `activeRunId`. */\n  finish(input: FinishAgentRunInput): Promise<AgentRunRecord>\n  getById(params: { projectId: string; id: string }): Promise<AgentRunRecord | null>\n  getByIds(params: {\n    projectId: string\n    ids: readonly string[]\n  }): Promise<readonly AgentRunRecord[]>\n  list(input: ListAgentRunsInput): Promise<ListAgentRunsResult>\n}\n\nexport interface AgentMessageStore {\n  /** Insert a message (its `parts` are the canonical content) and bump thread stats. */\n  append(input: AppendAgentMessageInput): Promise<AgentMessageRecord>\n  /** Delete every message produced by one run and repair the thread's message stats. */\n  deleteByRunId(input: DeleteAgentMessagesByRunInput): Promise<number>\n  getById(params: { projectId: string; id: string }): Promise<AgentMessageRecord | null>\n  list(input: ListAgentMessagesInput): Promise<ListAgentMessagesResult>\n}\n\nexport interface AgentContextCheckpointStore {\n  /**\n   * Append one checkpoint after atomically validating run ownership and both transcript anchors.\n   * Repeating the same payload for the same creating run is idempotent.\n   */\n  create(input: CreateAgentContextCheckpointInput): Promise<AgentContextCheckpointRecord>\n  /** Return checkpoints created by the requested runs, in first-occurrence input order. */\n  getByRunIds(input: {\n    readonly projectId: string\n    readonly runIds: readonly string[]\n  }): Promise<readonly AgentContextCheckpointRecord[]>\n  getLatest(input: {\n    readonly projectId: string\n    readonly threadId: string\n  }): Promise<AgentContextCheckpointRecord | null>\n}\n\nexport interface AgentStorage {\n  readonly threads: AgentThreadStore\n  readonly runs: AgentRunStore\n  readonly messages: AgentMessageStore\n  readonly checkpoints: AgentContextCheckpointStore\n}\n"
+  ],
+  "mappings": ";;AAgHO,IAAM,2BAA0B;AAAA,EACrC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAUO,IAAM,4BAA2B;AAAA,EACtC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAQO,SAAS,2BAA0B,CACxC,OACkC;AAAA,EAClC,IAAI,UAAU,QAAQ,UAAU,WAAW;AAAA,IACzC;AAAA,EACF;AAAA,EACA,OAAQ,0BAA+C,SAAS,KAAK,IAChE,QACD;AAAA;AAIC,IAAM,8BAA6B,CAAC,oBAAoB;",
+  "debugId": "8E584B603E78142664756E2164756E21",
+  "names": []
+}

package/dist/{chunk-q1vkr2ys.js → chunk-c1rxbz5y.js}

@@ -1,7 +1,7 @@
 // @bun
 import {
   ProjectionValidationError2
-} from "./chunk-y7rqfrgg.js";
+} from "./chunk-6vb4st8k.js";
 import {
   sha256Canonical2
 } from "./chunk-7n440zgt.js";
@@ -9,10 +9,10 @@ import {
   ProjectionRunError2,
   assertProjectionRunIdentityMatches2,
   assertProjectionRunDurableExecution2
-} from "./chunk-9ybhtmg4.js";
+} from "./chunk-vvxtn22d.js";
 import {
   createPrimitiveExecutionRecord
-} from "./chunk-nre82s12.js";
+} from "./chunk-vf57cr4t.js";
 import {
   findPrimitiveRunExecution
 } from "./chunk-ey1nk510.js";

package/dist/chunk-cfj9dfbb.js

@@ -0,0 +1,288 @@
+// @bun
+import {
+  isPrimitiveSchema
+} from "./chunk-8frc8a4j.js";
+import {
+  normalizeParams,
+  coerceParamsToTyped
+} from "./chunk-447a5c0p.js";
+import {
+  isPlainRecord
+} from "./chunk-wy0qdqfm.js";
+
+// src/sandboxes/errors.ts
+class SandboxError2 extends Error {
+  name = "SandboxError";
+}
+
+class SandboxStateUnavailableError2 extends SandboxError2 {
+  name = "SandboxStateUnavailableError";
+}
+
+class SandboxNotRunningError2 extends SandboxError2 {
+  name = "SandboxNotRunningError";
+}
+
+class SandboxTimeoutError2 extends SandboxError2 {
+  name = "SandboxTimeoutError";
+}
+
+class SandboxIsolationUnavailableError2 extends SandboxError2 {
+  name = "SandboxIsolationUnavailableError";
+}
+
+// src/ontology/validation/definition.ts
+function assertValidSchema(schema, path, invalid, visiting = new Set) {
+  if (typeof schema === "string") {
+    if (isPrimitiveSchema(schema)) {
+      return;
+    }
+    throw invalid(path);
+  }
+  if (!isPlainRecord(schema) || typeof schema.type !== "string" || visiting.has(schema)) {
+    throw invalid(path);
+  }
+  visiting.add(schema);
+  switch (schema.type) {
+    case "enum": {
+      const values = schema.values;
+      const validValues = isValidEnumValues(values, schema.valueType);
+      if (!validValues || new Set(values).size !== values.length) {
+        throw invalid(path);
+      }
+      break;
+    }
+    case "array":
+      assertValidSchema(schema.items, `${path}.items`, invalid, visiting);
+      break;
+    case "map":
+      if (schema.keySchema !== "string") {
+        throw invalid(path);
+      }
+      assertValidSchema(schema.valueSchema, `${path}.valueSchema`, invalid, visiting);
+      break;
+    case "object": {
+      if (!isPlainRecord(schema.properties)) {
+        throw invalid(path);
+      }
+      for (const [fieldId, field] of Object.entries(schema.properties)) {
+        if (!fieldId.trim() || !isPlainRecord(field) || !("schema" in field)) {
+          throw invalid(`${path}.properties.${fieldId}`);
+        }
+        if (field.required !== undefined && typeof field.required !== "boolean" || field.nullable !== undefined && typeof field.nullable !== "boolean" || field.description !== undefined && (typeof field.description !== "string" || !field.description.trim())) {
+          throw invalid(`${path}.properties.${fieldId}`);
+        }
+        assertValidSchema(field.schema, `${path}.properties.${fieldId}.schema`, invalid, visiting);
+      }
+      break;
+    }
+    case "valueTypeRef":
+      if (typeof schema.valueTypeId !== "string" || !schema.valueTypeId.trim()) {
+        throw invalid(path);
+      }
+      if (schema._resolved !== undefined) {
+        assertValidSchema(schema._resolved, `${path}._resolved`, invalid, visiting);
+      }
+      break;
+    default:
+      throw invalid(path);
+  }
+  visiting.delete(schema);
+}
+function isValidEnumValues(values, valueType) {
+  if (!Array.isArray(values) || values.length === 0) {
+    return false;
+  }
+  for (let index = 0;index < values.length; index += 1) {
+    if (!Object.hasOwn(values, index)) {
+      return false;
+    }
+    const value = values[index];
+    if (valueType === "string" ? typeof value !== "string" : valueType !== "integer" || typeof value !== "number" || !Number.isInteger(value)) {
+      return false;
+    }
+  }
+  return true;
+}
+
+// src/sandboxes/configuration.ts
+function createSandboxDefinition(config, ontology) {
+  const raw = config;
+  if (!isPlainRecord(raw) || config.params !== undefined && !isPlainRecord(raw.params) || config.resolve !== undefined && typeof config.resolve !== "function") {
+    throw new SandboxError2("[Sixb] Sandbox configuration requires a params object and a callable resolver when provided.");
+  }
+  for (const key of Object.keys(config)) {
+    if (!["params", "resolve", "source", "setup", "env", "network", "auth"].includes(key)) {
+      throw new SandboxError2("[Sixb] Unknown sandbox configuration field.");
+    }
+  }
+  if (config.auth !== undefined && typeof config.auth?.authorize !== "function") {
+    throw new SandboxError2("[Sixb] sandboxes.auth requires an authorize function.");
+  }
+  if (config.params !== undefined && config.resolve === undefined) {
+    throw new SandboxError2("[Sixb] Sandbox params require a resolve function.");
+  }
+  if (config.resolve !== undefined && (config.source !== undefined || config.setup !== undefined)) {
+    throw new SandboxError2("[Sixb] Use either static source/setup or resolve, not both.");
+  }
+  const invalid = (path) => new SandboxError2(`[Sixb] ${path} must be a valid parameter declaration; use param(schema).`);
+  for (const [id, value] of Object.entries(config.params ?? {})) {
+    const path = `sandboxes.params.${id}`;
+    if (!id.trim() || !isPlainRecord(value))
+      throw invalid(path);
+    for (const key of Object.keys(value)) {
+      if (!["schema", "required", "nullable", "description", "semanticType"].includes(key)) {
+        throw invalid(path);
+      }
+    }
+    if (value.required !== undefined && typeof value.required !== "boolean" || value.nullable !== undefined && typeof value.nullable !== "boolean" || value.description !== undefined && typeof value.description !== "string" || value.semanticType !== undefined && typeof value.semanticType !== "string")
+      throw invalid(path);
+    const schema = value.schema;
+    if (isPlainRecord(schema) && schema.type === "objectRef") {
+      if (typeof schema.objectTypeId !== "string" || !ontology.getObjectTypesById().has(schema.objectTypeId)) {
+        throw invalid(path);
+      }
+    } else {
+      assertValidSchema(schema, `${path}.schema`, invalid);
+    }
+  }
+  const params = structuredClone(config.params ?? {});
+  const environment = staticSandboxRecipe2(config);
+  const resolve = config.resolve;
+  const authorize = config.auth?.authorize.bind(config.auth);
+  deepFreeze(params);
+  return Object.freeze({
+    params,
+    ...authorize ? { auth: Object.freeze({ authorize }) } : {},
+    resolve: async ({ params: input, sixb }) => {
+      const binding = normalizeParams(ontology.getValueTypesById(), params, input, {
+        kind: "sandbox",
+        id: "sandboxes",
+        path: "sandbox"
+      });
+      const typed = coerceParamsToTyped(params, binding, ontology.getValueTypesById());
+      if (!resolve)
+        return structuredClone(environment);
+      const resolved = captureEnvironment(await resolve({ params: typed, sixb }));
+      return {
+        ...structuredClone(environment),
+        ...resolved,
+        env: { ...environment.env, ...resolved.env }
+      };
+    }
+  });
+}
+function sandboxCredentialIssue2(input) {
+  const { supportsRequestCredentials, auth, source } = input;
+  if (source?.access === "write" && auth === undefined) {
+    return 'Sandbox write access needs source auth: add auth to the sandbox factory or use access "read".';
+  }
+  if (auth !== undefined && !supportsRequestCredentials) {
+    return "Sandbox source auth needs a provider that injects request credentials outside the sandbox: use @sixb/sandboxes-vercel, or remove auth.";
+  }
+  return;
+}
+function staticSandboxRecipe2(configuration) {
+  const { source, setup, env, network } = configuration;
+  return captureEnvironment({
+    ...source === undefined ? {} : { source },
+    ...setup === undefined ? {} : { setup },
+    ...env === undefined ? {} : { env },
+    ...network === undefined ? {} : { network }
+  });
+}
+function captureEnvironment(value) {
+  if (!isPlainRecord(value) || Object.keys(value).some((key) => !["source", "setup", "env", "network"].includes(key))) {
+    return fail("environment");
+  }
+  if (value.source !== undefined)
+    validateSource(value.source);
+  if (value.setup !== undefined)
+    validateSetup(value.setup);
+  if (value.env !== undefined)
+    validateEnv(value.env);
+  if (value.network !== undefined)
+    validateNetwork(value.network);
+  return structuredClone(value);
+}
+function fail(field) {
+  throw new SandboxError2(`[Sixb] Invalid sandbox ${field}.`);
+}
+function validateSource(source) {
+  if (!isPlainRecord(source) || source.type !== "git" || typeof source.url !== "string" || Object.keys(source).some((key) => !["type", "url", "revision", "access"].includes(key))) {
+    fail("source");
+  }
+  const url = parseUrl(source.url, "source URL");
+  if (url.protocol !== "https:" || url.username || url.password || url.search || url.hash) {
+    fail("source URL: expected credential-free HTTPS");
+  }
+  if (url.hostname.includes("*"))
+    fail("source URL: wildcard hosts are not allowed");
+  if (source.revision !== undefined && (typeof source.revision !== "string" || !source.revision.trim() || source.revision.startsWith("-") || /[\x00-\x1f]/.test(source.revision))) {
+    fail("source revision");
+  }
+  if (source.access !== undefined && source.access !== "read" && source.access !== "write") {
+    fail("source access");
+  }
+}
+function validateSetup(setup) {
+  if (!Array.isArray(setup) || setup.some((command) => typeof command !== "string" || !command.trim() || command.includes("\x00"))) {
+    fail("setup");
+  }
+}
+function captureSandboxEnv2(value) {
+  validateEnv(value);
+  return structuredClone(value);
+}
+function validateEnv(env) {
+  if (!isPlainRecord(env) || Object.entries(env).some(([key, entry]) => !key || /[=\0]/.test(key) || typeof entry !== "string" || entry.includes("\x00"))) {
+    fail("env");
+  }
+}
+function validateNetwork(network) {
+  if (!isPlainRecord(network))
+    fail("network");
+  if (network.mode === "restricted") {
+    if (Object.keys(network).some((key) => key !== "mode" && key !== "allow") || !Array.isArray(network.allow)) {
+      fail("network");
+    }
+    for (const target of network.allow)
+      validateNetworkTarget(target);
+    return;
+  }
+  if (network.mode !== "none" && network.mode !== "all" || Object.keys(network).some((key) => key !== "mode")) {
+    fail("network");
+  }
+}
+function validateNetworkTarget(target) {
+  if (!isPlainRecord(target) || typeof target.name !== "string" || !target.name.trim() || typeof target.origin !== "string" || Object.keys(target).some((key) => key !== "name" && key !== "origin")) {
+    fail("network target");
+  }
+  const url = parseUrl(target.origin, "network origin");
+  if (!["http:", "https:"].includes(url.protocol) || url.origin !== target.origin) {
+    fail("network origin");
+  }
+  if (url.hostname.includes("*"))
+    fail("network origin: wildcard hosts are not allowed");
+}
+function parseUrl(value, field) {
+  try {
+    return new URL(value);
+  } catch {
+    return fail(field);
+  }
+}
+function deepFreeze(value, seen = new Set) {
+  if (seen.has(value))
+    return;
+  seen.add(value);
+  for (const child of Object.values(value)) {
+    if (child !== null && typeof child === "object")
+      deepFreeze(child, seen);
+  }
+  Object.freeze(value);
+}
+
+export { assertValidSchema, SandboxError2, SandboxStateUnavailableError2, SandboxNotRunningError2, SandboxTimeoutError2, SandboxIsolationUnavailableError2, createSandboxDefinition, sandboxCredentialIssue2, staticSandboxRecipe2, captureEnvironment, captureSandboxEnv2 };
+
+//# debugId=365C30ED7D7790B264756E2164756E21

package/dist/chunk-cfj9dfbb.js.map

@@ -0,0 +1,12 @@
+{
+  "version": 3,
+  "sources": ["../src/sandboxes/errors.ts", "../src/ontology/validation/definition.ts", "../src/sandboxes/configuration.ts"],
+  "sourcesContent": [
+    "/**\n * Errors thrown by sandbox providers. Hosts can catch SandboxError at the\n * audit boundary while still distinguishing recoverable provider states.\n */\nexport class SandboxError extends Error {\n  readonly name: string = \"SandboxError\"\n}\n\n/** Confirmed missing/expired state. Never use for transport, authorization or session setup errors. */\nexport class SandboxStateUnavailableError extends SandboxError {\n  override readonly name = \"SandboxStateUnavailableError\"\n}\n\n/** runCommand / stop / destroy called after the sandbox is stopped or destroyed. */\nexport class SandboxNotRunningError extends SandboxError {\n  override readonly name = \"SandboxNotRunningError\"\n}\n\n/** Command exceeded its timeout and was killed. */\nexport class SandboxTimeoutError extends SandboxError {\n  override readonly name = \"SandboxTimeoutError\"\n}\n\n/** Requested isolation backend is not available on the host. */\nexport class SandboxIsolationUnavailableError extends SandboxError {\n  override readonly name = \"SandboxIsolationUnavailableError\"\n}\n",
+    "import { isPlainRecord } from \"../../json\"\nimport { isPrimitiveSchema } from \"../primitives\"\n\n/** Validate a declarative schema's shape independently of the primitive that consumes it. */\nexport function assertValidSchema(\n  schema: unknown,\n  path: string,\n  invalid: (path: string) => Error,\n  visiting: Set<object> = new Set()\n): void {\n  if (typeof schema === \"string\") {\n    if (isPrimitiveSchema(schema)) {\n      return\n    }\n    throw invalid(path)\n  }\n  if (!isPlainRecord(schema) || typeof schema.type !== \"string\" || visiting.has(schema)) {\n    throw invalid(path)\n  }\n\n  visiting.add(schema)\n  switch (schema.type) {\n    case \"enum\": {\n      const values = schema.values\n      const validValues = isValidEnumValues(values, schema.valueType)\n      if (!validValues || new Set(values).size !== values.length) {\n        throw invalid(path)\n      }\n      break\n    }\n    case \"array\":\n      assertValidSchema(schema.items, `${path}.items`, invalid, visiting)\n      break\n    case \"map\":\n      if (schema.keySchema !== \"string\") {\n        throw invalid(path)\n      }\n      assertValidSchema(schema.valueSchema, `${path}.valueSchema`, invalid, visiting)\n      break\n    case \"object\": {\n      if (!isPlainRecord(schema.properties)) {\n        throw invalid(path)\n      }\n      for (const [fieldId, field] of Object.entries(schema.properties)) {\n        if (!fieldId.trim() || !isPlainRecord(field) || !(\"schema\" in field)) {\n          throw invalid(`${path}.properties.${fieldId}`)\n        }\n        if (\n          (field.required !== undefined && typeof field.required !== \"boolean\") ||\n          (field.nullable !== undefined && typeof field.nullable !== \"boolean\") ||\n          (field.description !== undefined &&\n            (typeof field.description !== \"string\" || !field.description.trim()))\n        ) {\n          throw invalid(`${path}.properties.${fieldId}`)\n        }\n        assertValidSchema(field.schema, `${path}.properties.${fieldId}.schema`, invalid, visiting)\n      }\n      break\n    }\n    case \"valueTypeRef\":\n      if (typeof schema.valueTypeId !== \"string\" || !schema.valueTypeId.trim()) {\n        throw invalid(path)\n      }\n      if (schema._resolved !== undefined) {\n        assertValidSchema(schema._resolved, `${path}._resolved`, invalid, visiting)\n      }\n      break\n    default:\n      throw invalid(path)\n  }\n  visiting.delete(schema)\n}\n\nfunction isValidEnumValues(values: unknown, valueType: unknown): values is unknown[] {\n  if (!Array.isArray(values) || values.length === 0) {\n    return false\n  }\n\n  for (let index = 0; index < values.length; index += 1) {\n    if (!Object.hasOwn(values, index)) {\n      return false\n    }\n    const value = values[index]\n    if (\n      valueType === \"string\"\n        ? typeof value !== \"string\"\n        : valueType !== \"integer\" || typeof value !== \"number\" || !Number.isInteger(value)\n    ) {\n      return false\n    }\n  }\n  return true\n}\n",
+    "import { isPlainRecord } from \"../json\"\nimport type { OntologyRegistry } from \"../ontology/registry\"\nimport { assertValidSchema } from \"../ontology/validation/definition\"\nimport type { Sixb } from \"../runtime/sixb\"\nimport type { InferParams, ParamsConfig } from \"../shared/params/types\"\nimport { coerceParamsToTyped, normalizeParams } from \"../shared/params/validation\"\nimport type { SandboxSourceAuth } from \"./auth\"\nimport { SandboxError } from \"./errors\"\nimport type { SandboxNetworkPolicy } from \"./sandbox\"\n\n/** Static recipes accept an empty parameter record, not arbitrary undeclared keys. */\nexport type InferSandboxParams<TParams extends ParamsConfig> = keyof TParams extends never\n  ? Record<string, never>\n  : InferParams<TParams>\n\n/** Initial project contents, independent from the provider's runtime image or saved state. */\nexport interface SandboxSource {\n  readonly type: \"git\"\n  readonly url: string\n  readonly revision?: string\n  readonly access?: \"read\" | \"write\"\n}\n\n/** Host-side recipe. Environment values are guest-readable, never a Git credential channel. */\nexport interface SandboxEnvironment {\n  readonly source?: SandboxSource\n  readonly setup?: readonly string[]\n  readonly env?: Readonly<Record<string, string>>\n  readonly network?: SandboxNetworkPolicy\n}\n\nexport interface SandboxResolveContext<TParams = Record<string, unknown>> {\n  readonly params: TParams\n  /** Bound to the current execution; a stored binding is not authorization. */\n  readonly sixb: Sixb\n}\n\n// The recipe both declares and consumes this schema: keep it invariant instead of asking\n// TypeScript to compare the recursive ontology inference through callback variance.\n// Provider option interfaces must preserve this annotation when extending the config.\nexport interface SandboxConfig<in out TParams extends ParamsConfig = ParamsConfig>\n  extends SandboxEnvironment {\n  readonly auth?: SandboxSourceAuth\n  readonly params?: TParams\n  readonly resolve?: (\n    context: SandboxResolveContext<InferParams<NoInfer<TParams>>>\n  ) => SandboxEnvironment | Promise<SandboxEnvironment>\n}\n\n/** Registered project recipe; only thread params cross the durable boundary. */\nexport interface SandboxDefinition {\n  readonly auth?: SandboxSourceAuth\n  readonly params: ParamsConfig\n  readonly resolve: (context: SandboxResolveContext) => Promise<SandboxEnvironment>\n}\n\nexport function createSandboxDefinition<TParams extends ParamsConfig>(\n  config: SandboxConfig<TParams>,\n  ontology: OntologyRegistry\n): SandboxDefinition {\n  const raw: unknown = config\n  if (\n    !isPlainRecord(raw) ||\n    (config.params !== undefined && !isPlainRecord(raw.params)) ||\n    (config.resolve !== undefined && typeof config.resolve !== \"function\")\n  ) {\n    throw new SandboxError(\n      \"[Sixb] Sandbox configuration requires a params object and a callable resolver when provided.\"\n    )\n  }\n  for (const key of Object.keys(config)) {\n    if (![\"params\", \"resolve\", \"source\", \"setup\", \"env\", \"network\", \"auth\"].includes(key)) {\n      throw new SandboxError(\"[Sixb] Unknown sandbox configuration field.\")\n    }\n  }\n  if (config.auth !== undefined && typeof config.auth?.authorize !== \"function\") {\n    throw new SandboxError(\"[Sixb] sandboxes.auth requires an authorize function.\")\n  }\n  if (config.params !== undefined && config.resolve === undefined) {\n    throw new SandboxError(\"[Sixb] Sandbox params require a resolve function.\")\n  }\n  if (config.resolve !== undefined && (config.source !== undefined || config.setup !== undefined)) {\n    throw new SandboxError(\"[Sixb] Use either static source/setup or resolve, not both.\")\n  }\n  const invalid = (path: string) =>\n    new SandboxError(`[Sixb] ${path} must be a valid parameter declaration; use param(schema).`)\n  for (const [id, value] of Object.entries(config.params ?? {})) {\n    const path = `sandboxes.params.${id}`\n    if (!id.trim() || !isPlainRecord(value)) throw invalid(path)\n    for (const key of Object.keys(value)) {\n      if (![\"schema\", \"required\", \"nullable\", \"description\", \"semanticType\"].includes(key)) {\n        throw invalid(path)\n      }\n    }\n    if (\n      (value.required !== undefined && typeof value.required !== \"boolean\") ||\n      (value.nullable !== undefined && typeof value.nullable !== \"boolean\") ||\n      (value.description !== undefined && typeof value.description !== \"string\") ||\n      (value.semanticType !== undefined && typeof value.semanticType !== \"string\")\n    )\n      throw invalid(path)\n    const schema: unknown = value.schema\n    if (isPlainRecord(schema) && schema.type === \"objectRef\") {\n      if (\n        typeof schema.objectTypeId !== \"string\" ||\n        !ontology.getObjectTypesById().has(schema.objectTypeId)\n      ) {\n        throw invalid(path)\n      }\n    } else {\n      assertValidSchema(schema, `${path}.schema`, invalid)\n    }\n  }\n  const params = structuredClone(config.params ?? {}) as ParamsConfig\n  const environment = staticSandboxRecipe(config)\n  // Capture the function too: later mutation of application config must not change this host.\n  // Erase inference only after capturing its schema; every invocation validates and coerces below.\n  const resolve = config.resolve as SandboxConfig[\"resolve\"]\n  const authorize = config.auth?.authorize.bind(config.auth)\n  deepFreeze(params)\n  return Object.freeze({\n    params,\n    ...(authorize ? { auth: Object.freeze({ authorize }) } : {}),\n    resolve: async ({ params: input, sixb }: SandboxResolveContext) => {\n      const binding = normalizeParams(ontology.getValueTypesById(), params, input, {\n        kind: \"sandbox\",\n        id: \"sandboxes\",\n        path: \"sandbox\",\n      })\n      const typed = coerceParamsToTyped(params, binding, ontology.getValueTypesById())\n      if (!resolve) return structuredClone(environment)\n      const resolved = captureEnvironment(await resolve({ params: typed, sixb }))\n      return {\n        ...structuredClone(environment),\n        ...resolved,\n        env: { ...environment.env, ...resolved.env },\n      }\n    },\n  })\n}\n\n/** What the source access rule reads: the provider's capability and one recipe's source. */\ninterface SandboxCredentialRuleInput {\n  readonly supportsRequestCredentials?: boolean\n  /** The factory's source auth; it applies to every recipe the factory resolves. */\n  readonly auth?: unknown\n  readonly source?: SandboxSource\n}\n\n/**\n * Why a recipe cannot get the source access it declares, as a whole message, or undefined.\n *\n * Write access needs source auth. Source auth needs a provider that injects request credentials\n * outside the sandbox, even for a recipe without a source: auth is the factory's, so startup and\n * every run give the same answer. Source auth without a source is otherwise fine; that recipe\n * does not use it.\n */\nexport function sandboxCredentialIssue(input: SandboxCredentialRuleInput): string | undefined {\n  const { supportsRequestCredentials, auth, source } = input\n\n  if (source?.access === \"write\" && auth === undefined) {\n    return 'Sandbox write access needs source auth: add auth to the sandbox factory or use access \"read\".'\n  }\n  if (auth !== undefined && !supportsRequestCredentials) {\n    return \"Sandbox source auth needs a provider that injects request credentials outside the sandbox: use @sixb/sandboxes-vercel, or remove auth.\"\n  }\n\n  return undefined\n}\n\n/** The static part of a recipe, captured: all a run without thread params can apply. */\nexport function staticSandboxRecipe(configuration: {\n  readonly source?: unknown\n  readonly setup?: unknown\n  readonly env?: unknown\n  readonly network?: unknown\n}): SandboxEnvironment {\n  const { source, setup, env, network } = configuration\n  return captureEnvironment({\n    ...(source === undefined ? {} : { source }),\n    ...(setup === undefined ? {} : { setup }),\n    ...(env === undefined ? {} : { env }),\n    ...(network === undefined ? {} : { network }),\n  })\n}\n\n/** Capture declarative data only; never retain caller-owned objects or include values in errors. */\nexport function captureEnvironment(value: unknown): SandboxEnvironment {\n  if (\n    !isPlainRecord(value) ||\n    Object.keys(value).some((key) => ![\"source\", \"setup\", \"env\", \"network\"].includes(key))\n  ) {\n    return fail(\"environment\")\n  }\n  if (value.source !== undefined) validateSource(value.source)\n  if (value.setup !== undefined) validateSetup(value.setup)\n  if (value.env !== undefined) validateEnv(value.env)\n  if (value.network !== undefined) validateNetwork(value.network)\n  // Every field and discriminant has been checked above; return only an isolated snapshot.\n  return structuredClone(value) as SandboxEnvironment\n}\n\nfunction fail(field: string): never {\n  throw new SandboxError(`[Sixb] Invalid sandbox ${field}.`)\n}\n\nfunction validateSource(source: unknown): void {\n  if (\n    !isPlainRecord(source) ||\n    source.type !== \"git\" ||\n    typeof source.url !== \"string\" ||\n    Object.keys(source).some((key) => ![\"type\", \"url\", \"revision\", \"access\"].includes(key))\n  ) {\n    fail(\"source\")\n  }\n  const url = parseUrl(source.url, \"source URL\")\n  if (url.protocol !== \"https:\" || url.username || url.password || url.search || url.hash) {\n    fail(\"source URL: expected credential-free HTTPS\")\n  }\n\n  // The repository host joins the run's network, where \"*\" would open every matching domain.\n  if (url.hostname.includes(\"*\")) fail(\"source URL: wildcard hosts are not allowed\")\n\n  if (\n    source.revision !== undefined &&\n    (typeof source.revision !== \"string\" ||\n      !source.revision.trim() ||\n      source.revision.startsWith(\"-\") ||\n      /[\\x00-\\x1f]/.test(source.revision))\n  ) {\n    fail(\"source revision\")\n  }\n  if (source.access !== undefined && source.access !== \"read\" && source.access !== \"write\") {\n    fail(\"source access\")\n  }\n}\n\nfunction validateSetup(setup: unknown): void {\n  if (\n    !Array.isArray(setup) ||\n    setup.some(\n      (command) => typeof command !== \"string\" || !command.trim() || command.includes(\"\\0\")\n    )\n  ) {\n    fail(\"setup\")\n  }\n}\n\n/** Snapshot guest-readable variables under the recipe `env` rules; never include values in errors. */\nexport function captureSandboxEnv(value: unknown): Readonly<Record<string, string>> {\n  validateEnv(value)\n  return structuredClone(value)\n}\n\nfunction validateEnv(env: unknown): asserts env is Record<string, string> {\n  if (\n    !isPlainRecord(env) ||\n    Object.entries(env).some(\n      ([key, entry]) =>\n        !key || /[=\\0]/.test(key) || typeof entry !== \"string\" || entry.includes(\"\\0\")\n    )\n  ) {\n    fail(\"env\")\n  }\n}\n\nfunction validateNetwork(network: unknown): void {\n  if (!isPlainRecord(network)) fail(\"network\")\n  if (network.mode === \"restricted\") {\n    if (\n      Object.keys(network).some((key) => key !== \"mode\" && key !== \"allow\") ||\n      !Array.isArray(network.allow)\n    ) {\n      fail(\"network\")\n    }\n    for (const target of network.allow) validateNetworkTarget(target)\n    return\n  }\n  if (\n    (network.mode !== \"none\" && network.mode !== \"all\") ||\n    Object.keys(network).some((key) => key !== \"mode\")\n  ) {\n    fail(\"network\")\n  }\n}\n\nfunction validateNetworkTarget(target: unknown): void {\n  if (\n    !isPlainRecord(target) ||\n    typeof target.name !== \"string\" ||\n    !target.name.trim() ||\n    typeof target.origin !== \"string\" ||\n    Object.keys(target).some((key) => key !== \"name\" && key !== \"origin\")\n  ) {\n    fail(\"network target\")\n  }\n  const url = parseUrl(target.origin, \"network origin\")\n  if (![\"http:\", \"https:\"].includes(url.protocol) || url.origin !== target.origin) {\n    fail(\"network origin\")\n  }\n\n  // Providers such as Vercel read \"*\" in a domain as a wildcard: one target would open every\n  // matching domain. List each domain instead.\n  if (url.hostname.includes(\"*\")) fail(\"network origin: wildcard hosts are not allowed\")\n}\n\nfunction parseUrl(value: string, field: string): URL {\n  try {\n    return new URL(value)\n  } catch {\n    return fail(field)\n  }\n}\n\nfunction deepFreeze(value: object, seen = new Set<object>()): void {\n  if (seen.has(value)) return\n  seen.add(value)\n  for (const child of Object.values(value)) {\n    if (child !== null && typeof child === \"object\") deepFreeze(child, seen)\n  }\n  Object.freeze(value)\n}\n"
+  ],
+  "mappings": ";;;;;;;;;;;;;AAIO,MAAM,sBAAqB,MAAM;AAAA,EAC7B,OAAe;AAC1B;AAAA;AAGO,MAAM,sCAAqC,cAAa;AAAA,EAC3C,OAAO;AAC3B;AAAA;AAGO,MAAM,gCAA+B,cAAa;AAAA,EACrC,OAAO;AAC3B;AAAA;AAGO,MAAM,6BAA4B,cAAa;AAAA,EAClC,OAAO;AAC3B;AAAA;AAGO,MAAM,0CAAyC,cAAa;AAAA,EAC/C,OAAO;AAC3B;;;ACtBO,SAAS,iBAAiB,CAC/B,QACA,MACA,SACA,WAAwB,IAAI,KACtB;AAAA,EACN,IAAI,OAAO,WAAW,UAAU;AAAA,IAC9B,IAAI,kBAAkB,MAAM,GAAG;AAAA,MAC7B;AAAA,IACF;AAAA,IACA,MAAM,QAAQ,IAAI;AAAA,EACpB;AAAA,EACA,IAAI,CAAC,cAAc,MAAM,KAAK,OAAO,OAAO,SAAS,YAAY,SAAS,IAAI,MAAM,GAAG;AAAA,IACrF,MAAM,QAAQ,IAAI;AAAA,EACpB;AAAA,EAEA,SAAS,IAAI,MAAM;AAAA,EACnB,QAAQ,OAAO;AAAA,SACR,QAAQ;AAAA,MACX,MAAM,SAAS,OAAO;AAAA,MACtB,MAAM,cAAc,kBAAkB,QAAQ,OAAO,SAAS;AAAA,MAC9D,IAAI,CAAC,eAAe,IAAI,IAAI,MAAM,EAAE,SAAS,OAAO,QAAQ;AAAA,QAC1D,MAAM,QAAQ,IAAI;AAAA,MACpB;AAAA,MACA;AAAA,IACF;AAAA,SACK;AAAA,MACH,kBAAkB,OAAO,OAAO,GAAG,cAAc,SAAS,QAAQ;AAAA,MAClE;AAAA,SACG;AAAA,MACH,IAAI,OAAO,cAAc,UAAU;AAAA,QACjC,MAAM,QAAQ,IAAI;AAAA,MACpB;AAAA,MACA,kBAAkB,OAAO,aAAa,GAAG,oBAAoB,SAAS,QAAQ;AAAA,MAC9E;AAAA,SACG,UAAU;AAAA,MACb,IAAI,CAAC,cAAc,OAAO,UAAU,GAAG;AAAA,QACrC,MAAM,QAAQ,IAAI;AAAA,MACpB;AAAA,MACA,YAAY,SAAS,UAAU,OAAO,QAAQ,OAAO,UAAU,GAAG;AAAA,QAChE,IAAI,CAAC,QAAQ,KAAK,KAAK,CAAC,cAAc,KAAK,KAAK,EAAE,YAAY,QAAQ;AAAA,UACpE,MAAM,QAAQ,GAAG,mBAAmB,SAAS;AAAA,QAC/C;AAAA,QACA,IACG,MAAM,aAAa,aAAa,OAAO,MAAM,aAAa,aAC1D,MAAM,aAAa,aAAa,OAAO,MAAM,aAAa,aAC1D,MAAM,gBAAgB,cACpB,OAAO,MAAM,gBAAgB,YAAY,CAAC,MAAM,YAAY,KAAK,IACpE;AAAA,UACA,MAAM,QAAQ,GAAG,mBAAmB,SAAS;AAAA,QAC/C;AAAA,QACA,kBAAkB,MAAM,QAAQ,GAAG,mBAAmB,kBAAkB,SAAS,QAAQ;AAAA,MAC3F;AAAA,MACA;AAAA,IACF;AAAA,SACK;AAAA,MACH,IAAI,OAAO,OAAO,gBAAgB,YAAY,CAAC,OAAO,YAAY,KAAK,GAAG;AAAA,QACxE,MAAM,QAAQ,IAAI;AAAA,MACpB;AAAA,MACA,IAAI,OAAO,cAAc,WAAW;AAAA,QAClC,kBAAkB,OAAO,WAAW,GAAG,kBAAkB,SAAS,QAAQ;AAAA,MAC5E;AAAA,MACA;AAAA;AAAA,MAEA,MAAM,QAAQ,IAAI;AAAA;AAAA,EAEtB,SAAS,OAAO,MAAM;AAAA;AAGxB,SAAS,iBAAiB,CAAC,QAAiB,WAAyC;AAAA,EACnF,IAAI,CAAC,MAAM,QAAQ,MAAM,KAAK,OAAO,WAAW,GAAG;AAAA,IACjD,OAAO;AAAA,EACT;AAAA,EAEA,SAAS,QAAQ,EAAG,QAAQ,OAAO,QAAQ,SAAS,GAAG;AAAA,IACrD,IAAI,CAAC,OAAO,OAAO,QAAQ,KAAK,GAAG;AAAA,MACjC,OAAO;AAAA,IACT;AAAA,IACA,MAAM,QAAQ,OAAO;AAAA,IACrB,IACE,cAAc,WACV,OAAO,UAAU,WACjB,cAAc,aAAa,OAAO,UAAU,YAAY,CAAC,OAAO,UAAU,KAAK,GACnF;AAAA,MACA,OAAO;AAAA,IACT;AAAA,EACF;AAAA,EACA,OAAO;AAAA;;;ACnCF,SAAS,uBAAqD,CACnE,QACA,UACmB;AAAA,EACnB,MAAM,MAAe;AAAA,EACrB,IACE,CAAC,cAAc,GAAG,KACjB,OAAO,WAAW,aAAa,CAAC,cAAc,IAAI,MAAM,KACxD,OAAO,YAAY,aAAa,OAAO,OAAO,YAAY,YAC3D;AAAA,IACA,MAAM,IAAI,cACR,8FACF;AAAA,EACF;AAAA,EACA,WAAW,OAAO,OAAO,KAAK,MAAM,GAAG;AAAA,IACrC,IAAI,CAAC,CAAC,UAAU,WAAW,UAAU,SAAS,OAAO,WAAW,MAAM,EAAE,SAAS,GAAG,GAAG;AAAA,MACrF,MAAM,IAAI,cAAa,6CAA6C;AAAA,IACtE;AAAA,EACF;AAAA,EACA,IAAI,OAAO,SAAS,aAAa,OAAO,OAAO,MAAM,cAAc,YAAY;AAAA,IAC7E,MAAM,IAAI,cAAa,uDAAuD;AAAA,EAChF;AAAA,EACA,IAAI,OAAO,WAAW,aAAa,OAAO,YAAY,WAAW;AAAA,IAC/D,MAAM,IAAI,cAAa,mDAAmD;AAAA,EAC5E;AAAA,EACA,IAAI,OAAO,YAAY,cAAc,OAAO,WAAW,aAAa,OAAO,UAAU,YAAY;AAAA,IAC/F,MAAM,IAAI,cAAa,6DAA6D;AAAA,EACtF;AAAA,EACA,MAAM,UAAU,CAAC,SACf,IAAI,cAAa,UAAU,gEAAgE;AAAA,EAC7F,YAAY,IAAI,UAAU,OAAO,QAAQ,OAAO,UAAU,CAAC,CAAC,GAAG;AAAA,IAC7D,MAAM,OAAO,oBAAoB;AAAA,IACjC,IAAI,CAAC,GAAG,KAAK,KAAK,CAAC,cAAc,KAAK;AAAA,MAAG,MAAM,QAAQ,IAAI;AAAA,IAC3D,WAAW,OAAO,OAAO,KAAK,KAAK,GAAG;AAAA,MACpC,IAAI,CAAC,CAAC,UAAU,YAAY,YAAY,eAAe,cAAc,EAAE,SAAS,GAAG,GAAG;AAAA,QACpF,MAAM,QAAQ,IAAI;AAAA,MACpB;AAAA,IACF;AAAA,IACA,IACG,MAAM,aAAa,aAAa,OAAO,MAAM,aAAa,aAC1D,MAAM,aAAa,aAAa,OAAO,MAAM,aAAa,aAC1D,MAAM,gBAAgB,aAAa,OAAO,MAAM,gBAAgB,YAChE,MAAM,iBAAiB,aAAa,OAAO,MAAM,iBAAiB;AAAA,MAEnE,MAAM,QAAQ,IAAI;AAAA,IACpB,MAAM,SAAkB,MAAM;AAAA,IAC9B,IAAI,cAAc,MAAM,KAAK,OAAO,SAAS,aAAa;AAAA,MACxD,IACE,OAAO,OAAO,iBAAiB,YAC/B,CAAC,SAAS,mBAAmB,EAAE,IAAI,OAAO,YAAY,GACtD;AAAA,QACA,MAAM,QAAQ,IAAI;AAAA,MACpB;AAAA,IACF,EAAO;AAAA,MACL,kBAAkB,QAAQ,GAAG,eAAe,OAAO;AAAA;AAAA,EAEvD;AAAA,EACA,MAAM,SAAS,gBAAgB,OAAO,UAAU,CAAC,CAAC;AAAA,EAClD,MAAM,cAAc,qBAAoB,MAAM;AAAA,EAG9C,MAAM,UAAU,OAAO;AAAA,EACvB,MAAM,YAAY,OAAO,MAAM,UAAU,KAAK,OAAO,IAAI;AAAA,EACzD,WAAW,MAAM;AAAA,EACjB,OAAO,OAAO,OAAO;AAAA,IACnB;AAAA,OACI,YAAY,EAAE,MAAM,OAAO,OAAO,EAAE,UAAU,CAAC,EAAE,IAAI,CAAC;AAAA,IAC1D,SAAS,SAAS,QAAQ,OAAO,WAAkC;AAAA,MACjE,MAAM,UAAU,gBAAgB,SAAS,kBAAkB,GAAG,QAAQ,OAAO;AAAA,QAC3E,MAAM;AAAA,QACN,IAAI;AAAA,QACJ,MAAM;AAAA,MACR,CAAC;AAAA,MACD,MAAM,QAAQ,oBAAoB,QAAQ,SAAS,SAAS,kBAAkB,CAAC;AAAA,MAC/E,IAAI,CAAC;AAAA,QAAS,OAAO,gBAAgB,WAAW;AAAA,MAChD,MAAM,WAAW,mBAAmB,MAAM,QAAQ,EAAE,QAAQ,OAAO,KAAK,CAAC,CAAC;AAAA,MAC1E,OAAO;AAAA,WACF,gBAAgB,WAAW;AAAA,WAC3B;AAAA,QACH,KAAK,KAAK,YAAY,QAAQ,SAAS,IAAI;AAAA,MAC7C;AAAA;AAAA,EAEJ,CAAC;AAAA;AAmBI,SAAS,uBAAsB,CAAC,OAAuD;AAAA,EAC5F,QAAQ,4BAA4B,MAAM,WAAW;AAAA,EAErD,IAAI,QAAQ,WAAW,WAAW,SAAS,WAAW;AAAA,IACpD,OAAO;AAAA,EACT;AAAA,EACA,IAAI,SAAS,aAAa,CAAC,4BAA4B;AAAA,IACrD,OAAO;AAAA,EACT;AAAA,EAEA;AAAA;AAIK,SAAS,oBAAmB,CAAC,eAKb;AAAA,EACrB,QAAQ,QAAQ,OAAO,KAAK,YAAY;AAAA,EACxC,OAAO,mBAAmB;AAAA,OACpB,WAAW,YAAY,CAAC,IAAI,EAAE,OAAO;AAAA,OACrC,UAAU,YAAY,CAAC,IAAI,EAAE,MAAM;AAAA,OACnC,QAAQ,YAAY,CAAC,IAAI,EAAE,IAAI;AAAA,OAC/B,YAAY,YAAY,CAAC,IAAI,EAAE,QAAQ;AAAA,EAC7C,CAAC;AAAA;AAII,SAAS,kBAAkB,CAAC,OAAoC;AAAA,EACrE,IACE,CAAC,cAAc,KAAK,KACpB,OAAO,KAAK,KAAK,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC,UAAU,SAAS,OAAO,SAAS,EAAE,SAAS,GAAG,CAAC,GACrF;AAAA,IACA,OAAO,KAAK,aAAa;AAAA,EAC3B;AAAA,EACA,IAAI,MAAM,WAAW;AAAA,IAAW,eAAe,MAAM,MAAM;AAAA,EAC3D,IAAI,MAAM,UAAU;AAAA,IAAW,cAAc,MAAM,KAAK;AAAA,EACxD,IAAI,MAAM,QAAQ;AAAA,IAAW,YAAY,MAAM,GAAG;AAAA,EAClD,IAAI,MAAM,YAAY;AAAA,IAAW,gBAAgB,MAAM,OAAO;AAAA,EAE9D,OAAO,gBAAgB,KAAK;AAAA;AAG9B,SAAS,IAAI,CAAC,OAAsB;AAAA,EAClC,MAAM,IAAI,cAAa,0BAA0B,QAAQ;AAAA;AAG3D,SAAS,cAAc,CAAC,QAAuB;AAAA,EAC7C,IACE,CAAC,cAAc,MAAM,KACrB,OAAO,SAAS,SAChB,OAAO,OAAO,QAAQ,YACtB,OAAO,KAAK,MAAM,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC,QAAQ,OAAO,YAAY,QAAQ,EAAE,SAAS,GAAG,CAAC,GACtF;AAAA,IACA,KAAK,QAAQ;AAAA,EACf;AAAA,EACA,MAAM,MAAM,SAAS,OAAO,KAAK,YAAY;AAAA,EAC7C,IAAI,IAAI,aAAa,YAAY,IAAI,YAAY,IAAI,YAAY,IAAI,UAAU,IAAI,MAAM;AAAA,IACvF,KAAK,4CAA4C;AAAA,EACnD;AAAA,EAGA,IAAI,IAAI,SAAS,SAAS,GAAG;AAAA,IAAG,KAAK,4CAA4C;AAAA,EAEjF,IACE,OAAO,aAAa,cACnB,OAAO,OAAO,aAAa,YAC1B,CAAC,OAAO,SAAS,KAAK,KACtB,OAAO,SAAS,WAAW,GAAG,KAC9B,cAAc,KAAK,OAAO,QAAQ,IACpC;AAAA,IACA,KAAK,iBAAiB;AAAA,EACxB;AAAA,EACA,IAAI,OAAO,WAAW,aAAa,OAAO,WAAW,UAAU,OAAO,WAAW,SAAS;AAAA,IACxF,KAAK,eAAe;AAAA,EACtB;AAAA;AAGF,SAAS,aAAa,CAAC,OAAsB;AAAA,EAC3C,IACE,CAAC,MAAM,QAAQ,KAAK,KACpB,MAAM,KACJ,CAAC,YAAY,OAAO,YAAY,YAAY,CAAC,QAAQ,KAAK,KAAK,QAAQ,SAAS,MAAI,CACtF,GACA;AAAA,IACA,KAAK,OAAO;AAAA,EACd;AAAA;AAIK,SAAS,kBAAiB,CAAC,OAAkD;AAAA,EAClF,YAAY,KAAK;AAAA,EACjB,OAAO,gBAAgB,KAAK;AAAA;AAG9B,SAAS,WAAW,CAAC,KAAqD;AAAA,EACxE,IACE,CAAC,cAAc,GAAG,KAClB,OAAO,QAAQ,GAAG,EAAE,KAClB,EAAE,KAAK,WACL,CAAC,OAAO,QAAQ,KAAK,GAAG,KAAK,OAAO,UAAU,YAAY,MAAM,SAAS,MAAI,CACjF,GACA;AAAA,IACA,KAAK,KAAK;AAAA,EACZ;AAAA;AAGF,SAAS,eAAe,CAAC,SAAwB;AAAA,EAC/C,IAAI,CAAC,cAAc,OAAO;AAAA,IAAG,KAAK,SAAS;AAAA,EAC3C,IAAI,QAAQ,SAAS,cAAc;AAAA,IACjC,IACE,OAAO,KAAK,OAAO,EAAE,KAAK,CAAC,QAAQ,QAAQ,UAAU,QAAQ,OAAO,KACpE,CAAC,MAAM,QAAQ,QAAQ,KAAK,GAC5B;AAAA,MACA,KAAK,SAAS;AAAA,IAChB;AAAA,IACA,WAAW,UAAU,QAAQ;AAAA,MAAO,sBAAsB,MAAM;AAAA,IAChE;AAAA,EACF;AAAA,EACA,IACG,QAAQ,SAAS,UAAU,QAAQ,SAAS,SAC7C,OAAO,KAAK,OAAO,EAAE,KAAK,CAAC,QAAQ,QAAQ,MAAM,GACjD;AAAA,IACA,KAAK,SAAS;AAAA,EAChB;AAAA;AAGF,SAAS,qBAAqB,CAAC,QAAuB;AAAA,EACpD,IACE,CAAC,cAAc,MAAM,KACrB,OAAO,OAAO,SAAS,YACvB,CAAC,OAAO,KAAK,KAAK,KAClB,OAAO,OAAO,WAAW,YACzB,OAAO,KAAK,MAAM,EAAE,KAAK,CAAC,QAAQ,QAAQ,UAAU,QAAQ,QAAQ,GACpE;AAAA,IACA,KAAK,gBAAgB;AAAA,EACvB;AAAA,EACA,MAAM,MAAM,SAAS,OAAO,QAAQ,gBAAgB;AAAA,EACpD,IAAI,CAAC,CAAC,SAAS,QAAQ,EAAE,SAAS,IAAI,QAAQ,KAAK,IAAI,WAAW,OAAO,QAAQ;AAAA,IAC/E,KAAK,gBAAgB;AAAA,EACvB;AAAA,EAIA,IAAI,IAAI,SAAS,SAAS,GAAG;AAAA,IAAG,KAAK,gDAAgD;AAAA;AAGvF,SAAS,QAAQ,CAAC,OAAe,OAAoB;AAAA,EACnD,IAAI;AAAA,IACF,OAAO,IAAI,IAAI,KAAK;AAAA,IACpB,MAAM;AAAA,IACN,OAAO,KAAK,KAAK;AAAA;AAAA;AAIrB,SAAS,UAAU,CAAC,OAAe,OAAO,IAAI,KAAqB;AAAA,EACjE,IAAI,KAAK,IAAI,KAAK;AAAA,IAAG;AAAA,EACrB,KAAK,IAAI,KAAK;AAAA,EACd,WAAW,SAAS,OAAO,OAAO,KAAK,GAAG;AAAA,IACxC,IAAI,UAAU,QAAQ,OAAO,UAAU;AAAA,MAAU,WAAW,OAAO,IAAI;AAAA,EACzE;AAAA,EACA,OAAO,OAAO,KAAK;AAAA;",
+  "debugId": "365C30ED7D7790B264756E2164756E21",
+  "names": []
+}

package/dist/{chunk-4tcx876c.js → chunk-cn0fwwhy.js}

@@ -1,9 +1,22 @@
 // @bun
+import {
+  MAX_VECTOR_K,
+  vectorConfiguration,
+  vectorSources,
+  normalizeVector2,
+  hasVectorProfile2,
+  isVectorProfileQuery2,
+  objectBatchKey2,
+  linkBatchKey2,
+  objectLinkCursor2,
+  compareQueryScalarValues,
+  queryScalarValuesEqual
+} from "./chunk-918wwnaa.js";
 import {
   MAX_OBJECT_READ_FACETS2,
   isAllowed2,
   assertAuthorized2
-} from "./chunk-y7rqfrgg.js";
+} from "./chunk-6vb4st8k.js";
 import {
   validateSchemaValue2,
   validatePropertyValue2,
@@ -12,35 +25,22 @@ import {
   isTextSchema,
   isContainsSchema,
   queryScalarKindForSchema
-} from "./chunk-hvsb78a1.js";
+} from "./chunk-8frc8a4j.js";
 import {
   validateRerankingResults
 } from "./chunk-29yx306f.js";
-import {
-  MAX_VECTOR_K,
-  vectorConfiguration,
-  vectorSources,
-  normalizeVector2,
-  hasVectorProfile2,
-  isVectorProfileQuery2,
-  objectBatchKey2,
-  linkBatchKey2,
-  objectLinkCursor2,
-  compareQueryScalarValues,
-  queryScalarValuesEqual
-} from "./chunk-j2bp5ryw.js";
 import {
   ObjectQueryValidationError2,
   ObjectQueryPlanningError2,
   ObjectQueryExecutionError2,
   normalizeObjectQuery2
 } from "./chunk-91mg3nj9.js";
-import {
-  sameEmbeddingModel
-} from "./chunk-kyjcwqz6.js";
 import {
   formatUnknownObjectTypeMessage
 } from "./chunk-cqr3acm1.js";
+import {
+  sameEmbeddingModel
+} from "./chunk-kyjcwqz6.js";
 import {
   normalizeDecimalValue2
 } from "./chunk-3bh94gbw.js";
@@ -2683,4 +2683,4 @@ async function hydrateLinkQueryObjects(projectId, selected, links, storage) {
 }
 export { composeObjectQueryAdmissions, validateObjectQuery2, validateObjectQueryWithAdmission, collectObjectQueryValidationIssues2, resolveObjectQueryResultShape2, planObjectQuery2, executeObjectQuery2, countObjects2, existsObjects2, facetObjects2, validateObjectFacetRequests, explainObjectQuery2, preflightObjectQueryLinks, executeObjectQueryLinks2 };
 
-//# debugId=6A00FC17EF4657DE64756E2164756E21
+//# debugId=721D50E45512FA2D64756E2164756E21