@sixb/core 0.1.19 → 0.1.21

package/dist/chunk-s16apyk9.js

@@ -1,256 +0,0 @@
-// @bun
-import {
-  ACTION_RUN_PHASES2,
-  parseActionRunFailure2
-} from "./chunk-b38szspf.js";
-import {
-  isFileRef2
-} from "./chunk-jhm3zsa7.js";
-import {
-  createObjectOperationScope2
-} from "./chunk-qczk96d9.js";
-import {
-  ActionRunError2
-} from "./chunk-y0c4e6ex.js";
-import {
-  assertJsonValue2,
-  cloneJsonValue2,
-  stableJsonStringify2
-} from "./chunk-wy0qdqfm.js";
-
-// src/storage/action-runs/idempotency.ts
-function actionSubjectsEqual(left, right) {
-  if (left.kind !== right.kind)
-    return false;
-  if (left.kind === "none")
-    return true;
-  if (right.kind === "none")
-    return false;
-  return left.objectTypeId === right.objectTypeId && left.primaryId === right.primaryId;
-}
-function actionRunParamsEqual(left, right) {
-  return stableJsonStringify2(left) === stableJsonStringify2(right);
-}
-function actionRunRequestsEqual(left, right) {
-  return left.actionId === right.actionId && actionSubjectsEqual(left.subject, right.subject) && actionRunParamsEqual(left.params, right.params);
-}
-function actionRunPhaseRecordsEqual(left, right) {
-  return actionRunParamsEqual(stripPhaseRecordCompletedAt(left), stripPhaseRecordCompletedAt(right));
-}
-function stripPhaseRecordCompletedAt(record) {
-  const { completedAt: _completedAt, ...stableRecord } = record;
-  return stableRecord;
-}
-
-// src/storage/action-runs/record.ts
-function normalizeRecordActionRunInput2(input) {
-  const label = `[Sixb] Action run '${input.id}'`;
-  for (const field of ["id", "projectId", "executionId", "actionId", "idempotencyKey"]) {
-    if (typeof input[field] !== "string" || input[field].trim().length === 0) {
-      throw new ActionRunError2(`${label} must have a nonblank ${field}.`);
-    }
-  }
-  const status = input.status;
-  if (status !== "succeeded" && status !== "failed") {
-    throw new ActionRunError2(`${label} has unknown status '${status}'.`);
-  }
-  if (!ACTION_RUN_PHASES2.includes(input.phase)) {
-    throw new ActionRunError2(`${label} has unknown phase '${input.phase}'.`);
-  }
-  if (input.phase === "effects") {
-    throw new ActionRunError2(`${label} is recorded before its effects run.`);
-  }
-  const startedAt = requireDate(input.startedAt, `${label} startedAt`);
-  const finishedAt = requireDate(input.finishedAt, `${label} finishedAt`);
-  if (finishedAt < startedAt) {
-    throw new ActionRunError2(`${label} cannot finish before it started.`);
-  }
-  assertJsonValue2(input.params, `${label} params`);
-  const fields = {
-    id: input.id,
-    projectId: input.projectId,
-    executionId: input.executionId,
-    actionId: input.actionId,
-    subject: structuredClone(input.subject),
-    phase: input.phase,
-    startedAt,
-    finishedAt,
-    params: structuredClone(input.params),
-    idempotencyKey: input.idempotencyKey,
-    ...input.writeback === undefined ? {} : { writeback: normalizeWriteback(input.writeback, label) }
-  };
-  if (input.status === "succeeded") {
-    if (input.error !== undefined) {
-      throw new ActionRunError2(`${label} succeeded, so it cannot record a failure.`);
-    }
-    return { ...fields, status: "succeeded" };
-  }
-  const error = parseActionRunFailure2(input.error, input.phase);
-  if (error.details.runId !== input.id || error.details.actionId !== input.actionId) {
-    throw new ActionRunError2(`${label} records the failure of another run.`);
-  }
-  return { ...fields, status: "failed", error };
-}
-function resolveActionRunEffects2(existing, input) {
-  const label = `[Sixb] Action run '${input.id}'`;
-  if (!existing) {
-    throw new ActionRunError2(`${label} not found for project '${input.projectId}'.`);
-  }
-  const completedAt = requireDate(input.completedAt ?? new Date, `${label} effects`);
-  const effects = input.status === "succeeded" ? { status: "succeeded", completedAt } : { status: "failed", completedAt, error: parseActionRunFailure2(input.error, "effects") };
-  if (existing.effects) {
-    if (actionRunPhaseRecordsEqual(existing.effects, effects))
-      return { run: existing, effects: null };
-    throw new ActionRunError2(`${label} already has a different effects record.`);
-  }
-  if (existing.status !== "succeeded" || existing.phase !== "commit") {
-    throw new ActionRunError2(`${label} cannot record effects: it ended '${existing.status}' in phase '${existing.phase}'.`);
-  }
-  return { run: existing, effects };
-}
-function normalizeWriteback(writeback, label) {
-  const completedAt = requireDate(writeback.completedAt, `${label} writeback`);
-  if (writeback.status === "succeeded") {
-    assertJsonValue2(writeback.result, `${label} writeback result`);
-    return { status: "succeeded", completedAt, result: cloneJsonValue2(writeback.result) };
-  }
-  return {
-    status: "failed",
-    completedAt,
-    error: parseActionRunFailure2(writeback.error, "writeback")
-  };
-}
-function requireDate(value, label) {
-  const date = value instanceof Date ? new Date(value) : new Date(Number.NaN);
-  if (!Number.isFinite(date.getTime())) {
-    throw new ActionRunError2(`${label} must be a valid date.`);
-  }
-  return date;
-}
-
-// src/storage/errors.ts
-class ObjectNotFoundError2 extends Error {
-  objectTypeId;
-  primaryId;
-  context;
-  name = "ObjectNotFoundError";
-  constructor(objectTypeId, primaryId, context) {
-    super(`[Sixb] ${context}: ${objectTypeId}:${primaryId}`);
-    this.objectTypeId = objectTypeId;
-    this.primaryId = primaryId;
-    this.context = context;
-  }
-}
-
-class ObjectStorageError2 extends Error {
-  name = "ObjectStorageError";
-}
-
-class StorageTransactionError2 extends Error {
-  name = "StorageTransactionError";
-  code;
-  cause;
-  constructor(message, options = {}) {
-    super(message);
-    this.code = options.code;
-    this.cause = options.cause;
-  }
-}
-function isStorageSerializationFailure2(error) {
-  return error instanceof StorageTransactionError2 && error.code === "serialization_failure";
-}
-
-// src/storage/file-download-grants/record.ts
-function parseFileDownloadGrantRow2(row) {
-  const id = text(row.id, "id", String(row.id));
-  const file = typeof row.file === "string" ? JSON.parse(row.file) : row.file;
-  if (!isFileRef2(file))
-    throw corrupt(id, "file is not a file reference");
-  return {
-    id,
-    projectId: text(row.projectId, "projectId", id),
-    tokenHash: text(row.tokenHash, "tokenHash", id),
-    file,
-    executionId: text(row.executionId, "executionId", id),
-    createdAt: date(row.createdAt, "createdAt", id),
-    expiresAt: date(row.expiresAt, "expiresAt", id),
-    ...row.revokedAt == null ? {} : { revokedAt: date(row.revokedAt, "revokedAt", id) }
-  };
-}
-function cloneFileDownloadGrantRecord(record) {
-  return structuredClone(record);
-}
-function text(value, column, id) {
-  if (typeof value !== "string" || value.length === 0)
-    throw corrupt(id, `${column} is not text`);
-  return value;
-}
-function date(value, column, id) {
-  const parsed = value instanceof Date || typeof value === "string" ? new Date(value) : null;
-  if (!parsed || !Number.isFinite(parsed.getTime()))
-    throw corrupt(id, `${column} is not a date`);
-  return parsed;
-}
-function corrupt(id, reason) {
-  return new Error(`[Sixb] Stored file download grant '${id}' is invalid: ${reason}.`);
-}
-
-// src/storage/pipeline-runs/idempotency.ts
-function canRequeuePipelineRunAfterEnqueueFailure2(existing, input) {
-  return existing.status === "failed" && existing.error?.code === "queue.enqueue_failed" && existing.error.retryable && existing.executionId === input.executionId && existing.pipelineId === input.pipelineId;
-}
-
-// src/storage/sync-runs/idempotency.ts
-function canRequeueSyncRunAfterEnqueueFailure2(existing, input) {
-  return existing.status === "failed" && existing.error?.code === "queue.enqueue_failed" && existing.error.retryable && existing.executionId === input.executionId && existing.syncId === input.syncId && existing.datasetId === input.datasetId && existing.mode === input.mode && existing.expectedLatestVersionId === input.expectedLatestVersionId && existing.commitMessage === input.commitMessage;
-}
-
-// src/storage/transaction.ts
-function createTransactionStorageProxy2(target, isActive) {
-  const proxies = new WeakMap;
-  const objectStorage = createObjectOperationScope2(target.objects, {
-    assertAvailable: () => assertTransactionActive2(isActive),
-    run: async (operation) => {
-      assertTransactionActive2(isActive);
-      return operation();
-    }
-  });
-  const wrap = (value) => {
-    const existing = proxies.get(value);
-    if (existing)
-      return existing;
-    const proxy = new Proxy(value, {
-      get(current, property, receiver) {
-        assertTransactionActive2(isActive);
-        const result = current === target && property === "objects" ? objectStorage : Reflect.get(current, property, receiver);
-        if (typeof result === "function") {
-          return (...args) => {
-            assertTransactionActive2(isActive);
-            return result.apply(current, args);
-          };
-        }
-        if (result && typeof result === "object") {
-          return wrap(result);
-        }
-        return result;
-      }
-    });
-    proxies.set(value, proxy);
-    return proxy;
-  };
-  return wrap(target);
-}
-function assertTransactionActive2(isActive) {
-  if (!isActive()) {
-    throw new StorageTransactionError2("[Sixb] Transaction storage cannot be used after transaction completion.", { code: "transaction_inactive" });
-  }
-}
-function throwNestedStorageTransaction2() {
-  throw new StorageTransactionError2("[Sixb] Nested storage transactions are not supported yet.", {
-    code: "nested_transaction"
-  });
-}
-
-export { actionSubjectsEqual, actionRunRequestsEqual, normalizeRecordActionRunInput2, resolveActionRunEffects2, ObjectNotFoundError2, ObjectStorageError2, StorageTransactionError2, isStorageSerializationFailure2, parseFileDownloadGrantRow2, cloneFileDownloadGrantRecord, canRequeuePipelineRunAfterEnqueueFailure2, canRequeueSyncRunAfterEnqueueFailure2, createTransactionStorageProxy2, assertTransactionActive2, throwNestedStorageTransaction2 };
-
-//# debugId=B710291DEE8F3A1864756E2164756E21

package/dist/chunk-s16apyk9.js.map

@@ -1,16 +0,0 @@
-{
-  "version": 3,
-  "sources": ["../src/storage/action-runs/idempotency.ts", "../src/storage/action-runs/record.ts", "../src/storage/errors.ts", "../src/storage/file-download-grants/record.ts", "../src/storage/pipeline-runs/idempotency.ts", "../src/storage/sync-runs/idempotency.ts", "../src/storage/transaction.ts"],
-  "sourcesContent": [
-    "import type { ActionSubject } from \"../../actions\"\nimport { stableJsonStringify } from \"../../json\"\nimport type { ActionRunEffectsRecord, ActionRunRecord, ActionRunWritebackRecord } from \"./types\"\n\nexport function actionSubjectsEqual(left: ActionSubject, right: ActionSubject): boolean {\n  if (left.kind !== right.kind) return false\n  if (left.kind === \"none\") return true\n  if (right.kind === \"none\") return false\n  return left.objectTypeId === right.objectTypeId && left.primaryId === right.primaryId\n}\n\nexport function actionRunParamsEqual(left: unknown, right: unknown): boolean {\n  return stableJsonStringify(left) === stableJsonStringify(right)\n}\n\n/** Whether two runs carry the same request: the same Action, subject, and params. */\nexport function actionRunRequestsEqual(\n  left: Pick<ActionRunRecord, \"actionId\" | \"subject\" | \"params\">,\n  right: Pick<ActionRunRecord, \"actionId\" | \"subject\" | \"params\">\n): boolean {\n  return (\n    left.actionId === right.actionId &&\n    actionSubjectsEqual(left.subject, right.subject) &&\n    actionRunParamsEqual(left.params, right.params)\n  )\n}\n\nexport type ActionRunPhaseRecord = ActionRunWritebackRecord | ActionRunEffectsRecord\n\nexport function actionRunPhaseRecordsEqual(\n  left: ActionRunPhaseRecord,\n  right: ActionRunPhaseRecord\n): boolean {\n  return actionRunParamsEqual(stripPhaseRecordCompletedAt(left), stripPhaseRecordCompletedAt(right))\n}\n\nfunction stripPhaseRecordCompletedAt(\n  record: ActionRunPhaseRecord\n): Omit<ActionRunPhaseRecord, \"completedAt\"> {\n  const { completedAt: _completedAt, ...stableRecord } = record\n  return stableRecord\n}\n",
-    "import { assertJsonValue, cloneJsonValue } from \"../../json\"\nimport { ActionRunError } from \"./errors\"\nimport { parseActionRunFailure } from \"./failure\"\nimport { actionRunPhaseRecordsEqual } from \"./idempotency\"\nimport type {\n  ActionRunEffectsRecord,\n  ActionRunRecord,\n  ActionRunWritebackRecord,\n  RecordActionEffectsInput,\n  RecordActionRunInput,\n} from \"./types\"\nimport { ACTION_RUN_PHASES } from \"./types\"\n\n/**\n * Validate a terminal run record before a provider inserts it, and detach it from the caller.\n *\n * Every provider records through this, so a stored run always reads back as the record that was\n * written: a failed run carries the failure of the phase it ended in, and a succeeded one none. A\n * run is recorded before its effects run, so no record starts in the `effects` phase.\n */\nexport function normalizeRecordActionRunInput(input: RecordActionRunInput): RecordActionRunInput {\n  const label = `[Sixb] Action run '${input.id}'`\n  for (const field of [\"id\", \"projectId\", \"executionId\", \"actionId\", \"idempotencyKey\"] as const) {\n    if (typeof input[field] !== \"string\" || input[field].trim().length === 0) {\n      throw new ActionRunError(`${label} must have a nonblank ${field}.`)\n    }\n  }\n  const status: string = input.status\n  if (status !== \"succeeded\" && status !== \"failed\") {\n    throw new ActionRunError(`${label} has unknown status '${status}'.`)\n  }\n  if (!(ACTION_RUN_PHASES as readonly string[]).includes(input.phase)) {\n    throw new ActionRunError(`${label} has unknown phase '${input.phase}'.`)\n  }\n  if (input.phase === \"effects\") {\n    throw new ActionRunError(`${label} is recorded before its effects run.`)\n  }\n  const startedAt = requireDate(input.startedAt, `${label} startedAt`)\n  const finishedAt = requireDate(input.finishedAt, `${label} finishedAt`)\n  if (finishedAt < startedAt) {\n    throw new ActionRunError(`${label} cannot finish before it started.`)\n  }\n  assertJsonValue(input.params, `${label} params`)\n\n  const fields = {\n    id: input.id,\n    projectId: input.projectId,\n    executionId: input.executionId,\n    actionId: input.actionId,\n    subject: structuredClone(input.subject),\n    phase: input.phase,\n    startedAt,\n    finishedAt,\n    params: structuredClone(input.params),\n    idempotencyKey: input.idempotencyKey,\n    ...(input.writeback === undefined\n      ? {}\n      : { writeback: normalizeWriteback(input.writeback, label) }),\n  }\n\n  if (input.status === \"succeeded\") {\n    if (input.error !== undefined) {\n      throw new ActionRunError(`${label} succeeded, so it cannot record a failure.`)\n    }\n    return { ...fields, status: \"succeeded\" }\n  }\n  const error = parseActionRunFailure(input.error, input.phase)\n  if (error.details.runId !== input.id || error.details.actionId !== input.actionId) {\n    throw new ActionRunError(`${label} records the failure of another run.`)\n  }\n  return { ...fields, status: \"failed\", error }\n}\n\n/**\n * Resolve what recording effects does to the stored run: write `effects`, or nothing (`null`) when\n * an equal outcome is already recorded.\n *\n * Effects run only after a succeeded run committed its edits, and their outcome is recorded once.\n */\nexport function resolveActionRunEffects(\n  existing: ActionRunRecord | null,\n  input: RecordActionEffectsInput\n): { readonly run: ActionRunRecord; readonly effects: ActionRunEffectsRecord | null } {\n  const label = `[Sixb] Action run '${input.id}'`\n  if (!existing) {\n    throw new ActionRunError(`${label} not found for project '${input.projectId}'.`)\n  }\n  const completedAt = requireDate(input.completedAt ?? new Date(), `${label} effects`)\n  const effects: ActionRunEffectsRecord =\n    input.status === \"succeeded\"\n      ? { status: \"succeeded\", completedAt }\n      : { status: \"failed\", completedAt, error: parseActionRunFailure(input.error, \"effects\") }\n\n  if (existing.effects) {\n    if (actionRunPhaseRecordsEqual(existing.effects, effects))\n      return { run: existing, effects: null }\n    throw new ActionRunError(`${label} already has a different effects record.`)\n  }\n  if (existing.status !== \"succeeded\" || existing.phase !== \"commit\") {\n    throw new ActionRunError(\n      `${label} cannot record effects: it ended '${existing.status}' in phase '${existing.phase}'.`\n    )\n  }\n  return { run: existing, effects }\n}\n\nfunction normalizeWriteback(\n  writeback: ActionRunWritebackRecord,\n  label: string\n): ActionRunWritebackRecord {\n  const completedAt = requireDate(writeback.completedAt, `${label} writeback`)\n  if (writeback.status === \"succeeded\") {\n    assertJsonValue(writeback.result, `${label} writeback result`)\n    return { status: \"succeeded\", completedAt, result: cloneJsonValue(writeback.result) }\n  }\n  return {\n    status: \"failed\",\n    completedAt,\n    error: parseActionRunFailure(writeback.error, \"writeback\"),\n  }\n}\n\n/** A detached copy of `value`, which must be a valid date. */\nfunction requireDate(value: Date, label: string): Date {\n  const date = value instanceof Date ? new Date(value) : new Date(Number.NaN)\n  if (!Number.isFinite(date.getTime())) {\n    throw new ActionRunError(`${label} must be a valid date.`)\n  }\n  return date\n}\n",
-    "/**\n * Thrown when a storage lookup by primary ID finds no matching object.\n * Carries structured context so callers can discriminate without string parsing.\n */\nexport class ObjectNotFoundError extends Error {\n  readonly name = \"ObjectNotFoundError\"\n\n  constructor(\n    readonly objectTypeId: string,\n    readonly primaryId: string,\n    readonly context: string\n  ) {\n    super(`[Sixb] ${context}: ${objectTypeId}:${primaryId}`)\n  }\n}\n\nexport class ObjectStorageError extends Error {\n  readonly name = \"ObjectStorageError\"\n}\n\nexport type StorageTransactionErrorCode =\n  | \"nested_transaction\"\n  | \"serialization_failure\"\n  | \"transaction_inactive\"\n\nexport interface StorageTransactionErrorOptions {\n  readonly cause?: unknown\n  readonly code?: StorageTransactionErrorCode\n}\n\nexport class StorageTransactionError extends Error {\n  readonly name = \"StorageTransactionError\"\n  readonly code?: StorageTransactionErrorCode\n  override readonly cause?: unknown\n\n  constructor(message: string, options: StorageTransactionErrorOptions = {}) {\n    super(message)\n    this.code = options.code\n    this.cause = options.cause\n  }\n}\n\nexport function isStorageSerializationFailure(error: unknown): boolean {\n  return error instanceof StorageTransactionError && error.code === \"serialization_failure\"\n}\n",
-    "import { isFileRef } from \"../../blob-storage\"\nimport type { FileDownloadGrantRecord } from \"./types\"\n\n/**\n * Rebuilds a grant from a provider row with camelCase keys. `file` may arrive parsed (jsonb) or\n * as text (SQLite), and timestamps as `Date` or ISO text. Fails closed on corruption: a grant that\n * cannot be read must not serve a file.\n */\nexport function parseFileDownloadGrantRow(row: {\n  readonly [column: string]: unknown\n}): FileDownloadGrantRecord {\n  const id = text(row.id, \"id\", String(row.id))\n  const file = typeof row.file === \"string\" ? JSON.parse(row.file) : row.file\n  if (!isFileRef(file)) throw corrupt(id, \"file is not a file reference\")\n\n  return {\n    id,\n    projectId: text(row.projectId, \"projectId\", id),\n    tokenHash: text(row.tokenHash, \"tokenHash\", id),\n    file,\n    executionId: text(row.executionId, \"executionId\", id),\n    createdAt: date(row.createdAt, \"createdAt\", id),\n    expiresAt: date(row.expiresAt, \"expiresAt\", id),\n    ...(row.revokedAt == null ? {} : { revokedAt: date(row.revokedAt, \"revokedAt\", id) }),\n  }\n}\n\nexport function cloneFileDownloadGrantRecord(\n  record: FileDownloadGrantRecord\n): FileDownloadGrantRecord {\n  return structuredClone(record)\n}\n\nfunction text(value: unknown, column: string, id: string): string {\n  if (typeof value !== \"string\" || value.length === 0) throw corrupt(id, `${column} is not text`)\n  return value\n}\n\nfunction date(value: unknown, column: string, id: string): Date {\n  const parsed = value instanceof Date || typeof value === \"string\" ? new Date(value) : null\n  if (!parsed || !Number.isFinite(parsed.getTime())) throw corrupt(id, `${column} is not a date`)\n  return parsed\n}\n\nfunction corrupt(id: string, reason: string): Error {\n  return new Error(`[Sixb] Stored file download grant '${id}' is invalid: ${reason}.`)\n}\n",
-    "import type { PipelineRunRecord, QueuePipelineRunInput } from \"./types\"\n\nexport function canRequeuePipelineRunAfterEnqueueFailure(\n  existing: PipelineRunRecord,\n  input: QueuePipelineRunInput\n): boolean {\n  return (\n    existing.status === \"failed\" &&\n    existing.error?.code === \"queue.enqueue_failed\" &&\n    existing.error.retryable &&\n    existing.executionId === input.executionId &&\n    existing.pipelineId === input.pipelineId\n  )\n}\n",
-    "import type { QueueSyncRunInput, SyncRunRecord } from \"./types\"\n\nexport function canRequeueSyncRunAfterEnqueueFailure(\n  existing: SyncRunRecord,\n  input: QueueSyncRunInput\n): boolean {\n  return (\n    existing.status === \"failed\" &&\n    existing.error?.code === \"queue.enqueue_failed\" &&\n    existing.error.retryable &&\n    existing.executionId === input.executionId &&\n    existing.syncId === input.syncId &&\n    existing.datasetId === input.datasetId &&\n    existing.mode === input.mode &&\n    existing.expectedLatestVersionId === input.expectedLatestVersionId &&\n    existing.commitMessage === input.commitMessage\n  )\n}\n",
-    "import { StorageTransactionError } from \"./errors\"\nimport { createObjectOperationScope } from \"./operation-scope\"\nimport type { Storage } from \"./types\"\n\ntype ObjectLike = Record<PropertyKey, unknown>\n\nexport function createTransactionStorageProxy<T extends Storage>(\n  target: T,\n  isActive: () => boolean\n): T {\n  const proxies = new WeakMap<object, object>()\n  const objectStorage = createObjectOperationScope(target.objects, {\n    assertAvailable: () => assertTransactionActive(isActive),\n    run: async <TResult>(operation: () => Promise<TResult> | TResult): Promise<TResult> => {\n      assertTransactionActive(isActive)\n      return operation()\n    },\n  })\n\n  const wrap = <TValue extends object>(value: TValue): TValue => {\n    const existing = proxies.get(value)\n    if (existing) return existing as TValue\n\n    const proxy = new Proxy(value as ObjectLike, {\n      // The guard runs on property access and on call. Its purpose is to fail fast when a\n      // transaction handle (`tx`) leaks past the transaction's lifetime — using it afterward is a\n      // bug, not a recoverable state. Overhead is bounded: only the storage namespaces reachable\n      // from `tx` are wrapped (a handful), not the row/link data graph, and never per-record.\n      get(current, property, receiver) {\n        assertTransactionActive(isActive)\n        const result =\n          current === target && property === \"objects\"\n            ? objectStorage\n            : Reflect.get(current, property, receiver)\n        if (typeof result === \"function\") {\n          return (...args: unknown[]) => {\n            assertTransactionActive(isActive)\n            return result.apply(current, args)\n          }\n        }\n        if (result && typeof result === \"object\") {\n          return wrap(result)\n        }\n        return result\n      },\n    })\n\n    proxies.set(value, proxy)\n    return proxy as TValue\n  }\n\n  return wrap(target)\n}\n\nexport function assertTransactionActive(isActive: () => boolean): void {\n  if (!isActive()) {\n    throw new StorageTransactionError(\n      \"[Sixb] Transaction storage cannot be used after transaction completion.\",\n      { code: \"transaction_inactive\" }\n    )\n  }\n}\n\nexport function throwNestedStorageTransaction(): never {\n  throw new StorageTransactionError(\"[Sixb] Nested storage transactions are not supported yet.\", {\n    code: \"nested_transaction\",\n  })\n}\n"
-  ],
-  "mappings": ";;;;;;;;;;;;;;;;;;;;;AAIO,SAAS,mBAAmB,CAAC,MAAqB,OAA+B;AAAA,EACtF,IAAI,KAAK,SAAS,MAAM;AAAA,IAAM,OAAO;AAAA,EACrC,IAAI,KAAK,SAAS;AAAA,IAAQ,OAAO;AAAA,EACjC,IAAI,MAAM,SAAS;AAAA,IAAQ,OAAO;AAAA,EAClC,OAAO,KAAK,iBAAiB,MAAM,gBAAgB,KAAK,cAAc,MAAM;AAAA;AAGvE,SAAS,oBAAoB,CAAC,MAAe,OAAyB;AAAA,EAC3E,OAAO,qBAAoB,IAAI,MAAM,qBAAoB,KAAK;AAAA;AAIzD,SAAS,sBAAsB,CACpC,MACA,OACS;AAAA,EACT,OACE,KAAK,aAAa,MAAM,YACxB,oBAAoB,KAAK,SAAS,MAAM,OAAO,KAC/C,qBAAqB,KAAK,QAAQ,MAAM,MAAM;AAAA;AAM3C,SAAS,0BAA0B,CACxC,MACA,OACS;AAAA,EACT,OAAO,qBAAqB,4BAA4B,IAAI,GAAG,4BAA4B,KAAK,CAAC;AAAA;AAGnG,SAAS,2BAA2B,CAClC,QAC2C;AAAA,EAC3C,QAAQ,aAAa,iBAAiB,iBAAiB;AAAA,EACvD,OAAO;AAAA;;;ACpBF,SAAS,8BAA6B,CAAC,OAAmD;AAAA,EAC/F,MAAM,QAAQ,sBAAsB,MAAM;AAAA,EAC1C,WAAW,SAAS,CAAC,MAAM,aAAa,eAAe,YAAY,gBAAgB,GAAY;AAAA,IAC7F,IAAI,OAAO,MAAM,WAAW,YAAY,MAAM,OAAO,KAAK,EAAE,WAAW,GAAG;AAAA,MACxE,MAAM,IAAI,gBAAe,GAAG,8BAA8B,QAAQ;AAAA,IACpE;AAAA,EACF;AAAA,EACA,MAAM,SAAiB,MAAM;AAAA,EAC7B,IAAI,WAAW,eAAe,WAAW,UAAU;AAAA,IACjD,MAAM,IAAI,gBAAe,GAAG,6BAA6B,UAAU;AAAA,EACrE;AAAA,EACA,IAAI,CAAE,mBAAwC,SAAS,MAAM,KAAK,GAAG;AAAA,IACnE,MAAM,IAAI,gBAAe,GAAG,4BAA4B,MAAM,SAAS;AAAA,EACzE;AAAA,EACA,IAAI,MAAM,UAAU,WAAW;AAAA,IAC7B,MAAM,IAAI,gBAAe,GAAG,2CAA2C;AAAA,EACzE;AAAA,EACA,MAAM,YAAY,YAAY,MAAM,WAAW,GAAG,iBAAiB;AAAA,EACnE,MAAM,aAAa,YAAY,MAAM,YAAY,GAAG,kBAAkB;AAAA,EACtE,IAAI,aAAa,WAAW;AAAA,IAC1B,MAAM,IAAI,gBAAe,GAAG,wCAAwC;AAAA,EACtE;AAAA,EACA,iBAAgB,MAAM,QAAQ,GAAG,cAAc;AAAA,EAE/C,MAAM,SAAS;AAAA,IACb,IAAI,MAAM;AAAA,IACV,WAAW,MAAM;AAAA,IACjB,aAAa,MAAM;AAAA,IACnB,UAAU,MAAM;AAAA,IAChB,SAAS,gBAAgB,MAAM,OAAO;AAAA,IACtC,OAAO,MAAM;AAAA,IACb;AAAA,IACA;AAAA,IACA,QAAQ,gBAAgB,MAAM,MAAM;AAAA,IACpC,gBAAgB,MAAM;AAAA,OAClB,MAAM,cAAc,YACpB,CAAC,IACD,EAAE,WAAW,mBAAmB,MAAM,WAAW,KAAK,EAAE;AAAA,EAC9D;AAAA,EAEA,IAAI,MAAM,WAAW,aAAa;AAAA,IAChC,IAAI,MAAM,UAAU,WAAW;AAAA,MAC7B,MAAM,IAAI,gBAAe,GAAG,iDAAiD;AAAA,IAC/E;AAAA,IACA,OAAO,KAAK,QAAQ,QAAQ,YAAY;AAAA,EAC1C;AAAA,EACA,MAAM,QAAQ,uBAAsB,MAAM,OAAO,MAAM,KAAK;AAAA,EAC5D,IAAI,MAAM,QAAQ,UAAU,MAAM,MAAM,MAAM,QAAQ,aAAa,MAAM,UAAU;AAAA,IACjF,MAAM,IAAI,gBAAe,GAAG,2CAA2C;AAAA,EACzE;AAAA,EACA,OAAO,KAAK,QAAQ,QAAQ,UAAU,MAAM;AAAA;AASvC,SAAS,wBAAuB,CACrC,UACA,OACoF;AAAA,EACpF,MAAM,QAAQ,sBAAsB,MAAM;AAAA,EAC1C,IAAI,CAAC,UAAU;AAAA,IACb,MAAM,IAAI,gBAAe,GAAG,gCAAgC,MAAM,aAAa;AAAA,EACjF;AAAA,EACA,MAAM,cAAc,YAAY,MAAM,eAAe,IAAI,MAAQ,GAAG,eAAe;AAAA,EACnF,MAAM,UACJ,MAAM,WAAW,cACb,EAAE,QAAQ,aAAa,YAAY,IACnC,EAAE,QAAQ,UAAU,aAAa,OAAO,uBAAsB,MAAM,OAAO,SAAS,EAAE;AAAA,EAE5F,IAAI,SAAS,SAAS;AAAA,IACpB,IAAI,2BAA2B,SAAS,SAAS,OAAO;AAAA,MACtD,OAAO,EAAE,KAAK,UAAU,SAAS,KAAK;AAAA,IACxC,MAAM,IAAI,gBAAe,GAAG,+CAA+C;AAAA,EAC7E;AAAA,EACA,IAAI,SAAS,WAAW,eAAe,SAAS,UAAU,UAAU;AAAA,IAClE,MAAM,IAAI,gBACR,GAAG,0CAA0C,SAAS,qBAAqB,SAAS,SACtF;AAAA,EACF;AAAA,EACA,OAAO,EAAE,KAAK,UAAU,QAAQ;AAAA;AAGlC,SAAS,kBAAkB,CACzB,WACA,OAC0B;AAAA,EAC1B,MAAM,cAAc,YAAY,UAAU,aAAa,GAAG,iBAAiB;AAAA,EAC3E,IAAI,UAAU,WAAW,aAAa;AAAA,IACpC,iBAAgB,UAAU,QAAQ,GAAG,wBAAwB;AAAA,IAC7D,OAAO,EAAE,QAAQ,aAAa,aAAa,QAAQ,gBAAe,UAAU,MAAM,EAAE;AAAA,EACtF;AAAA,EACA,OAAO;AAAA,IACL,QAAQ;AAAA,IACR;AAAA,IACA,OAAO,uBAAsB,UAAU,OAAO,WAAW;AAAA,EAC3D;AAAA;AAIF,SAAS,WAAW,CAAC,OAAa,OAAqB;AAAA,EACrD,MAAM,OAAO,iBAAiB,OAAO,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,OAAO,GAAG;AAAA,EAC1E,IAAI,CAAC,OAAO,SAAS,KAAK,QAAQ,CAAC,GAAG;AAAA,IACpC,MAAM,IAAI,gBAAe,GAAG,6BAA6B;AAAA,EAC3D;AAAA,EACA,OAAO;AAAA;;;AC5HF,MAAM,6BAA4B,MAAM;AAAA,EAIlC;AAAA,EACA;AAAA,EACA;AAAA,EALF,OAAO;AAAA,EAEhB,WAAW,CACA,cACA,WACA,SACT;AAAA,IACA,MAAM,UAAU,YAAY,gBAAgB,WAAW;AAAA,IAJ9C;AAAA,IACA;AAAA,IACA;AAAA;AAIb;AAAA;AAEO,MAAM,4BAA2B,MAAM;AAAA,EACnC,OAAO;AAClB;AAAA;AAYO,MAAM,iCAAgC,MAAM;AAAA,EACxC,OAAO;AAAA,EACP;AAAA,EACS;AAAA,EAElB,WAAW,CAAC,SAAiB,UAA0C,CAAC,GAAG;AAAA,IACzE,MAAM,OAAO;AAAA,IACb,KAAK,OAAO,QAAQ;AAAA,IACpB,KAAK,QAAQ,QAAQ;AAAA;AAEzB;AAEO,SAAS,8BAA6B,CAAC,OAAyB;AAAA,EACrE,OAAO,iBAAiB,4BAA2B,MAAM,SAAS;AAAA;;;ACnC7D,SAAS,0BAAyB,CAAC,KAEd;AAAA,EAC1B,MAAM,KAAK,KAAK,IAAI,IAAI,MAAM,OAAO,IAAI,EAAE,CAAC;AAAA,EAC5C,MAAM,OAAO,OAAO,IAAI,SAAS,WAAW,KAAK,MAAM,IAAI,IAAI,IAAI,IAAI;AAAA,EACvE,IAAI,CAAC,WAAU,IAAI;AAAA,IAAG,MAAM,QAAQ,IAAI,8BAA8B;AAAA,EAEtE,OAAO;AAAA,IACL;AAAA,IACA,WAAW,KAAK,IAAI,WAAW,aAAa,EAAE;AAAA,IAC9C,WAAW,KAAK,IAAI,WAAW,aAAa,EAAE;AAAA,IAC9C;AAAA,IACA,aAAa,KAAK,IAAI,aAAa,eAAe,EAAE;AAAA,IACpD,WAAW,KAAK,IAAI,WAAW,aAAa,EAAE;AAAA,IAC9C,WAAW,KAAK,IAAI,WAAW,aAAa,EAAE;AAAA,OAC1C,IAAI,aAAa,OAAO,CAAC,IAAI,EAAE,WAAW,KAAK,IAAI,WAAW,aAAa,EAAE,EAAE;AAAA,EACrF;AAAA;AAGK,SAAS,4BAA4B,CAC1C,QACyB;AAAA,EACzB,OAAO,gBAAgB,MAAM;AAAA;AAG/B,SAAS,IAAI,CAAC,OAAgB,QAAgB,IAAoB;AAAA,EAChE,IAAI,OAAO,UAAU,YAAY,MAAM,WAAW;AAAA,IAAG,MAAM,QAAQ,IAAI,GAAG,oBAAoB;AAAA,EAC9F,OAAO;AAAA;AAGT,SAAS,IAAI,CAAC,OAAgB,QAAgB,IAAkB;AAAA,EAC9D,MAAM,SAAS,iBAAiB,QAAQ,OAAO,UAAU,WAAW,IAAI,KAAK,KAAK,IAAI;AAAA,EACtF,IAAI,CAAC,UAAU,CAAC,OAAO,SAAS,OAAO,QAAQ,CAAC;AAAA,IAAG,MAAM,QAAQ,IAAI,GAAG,sBAAsB;AAAA,EAC9F,OAAO;AAAA;AAGT,SAAS,OAAO,CAAC,IAAY,QAAuB;AAAA,EAClD,OAAO,IAAI,MAAM,sCAAsC,mBAAmB,SAAS;AAAA;;;AC3C9E,SAAS,yCAAwC,CACtD,UACA,OACS;AAAA,EACT,OACE,SAAS,WAAW,YACpB,SAAS,OAAO,SAAS,0BACzB,SAAS,MAAM,aACf,SAAS,gBAAgB,MAAM,eAC/B,SAAS,eAAe,MAAM;AAAA;;;ACT3B,SAAS,qCAAoC,CAClD,UACA,OACS;AAAA,EACT,OACE,SAAS,WAAW,YACpB,SAAS,OAAO,SAAS,0BACzB,SAAS,MAAM,aACf,SAAS,gBAAgB,MAAM,eAC/B,SAAS,WAAW,MAAM,UAC1B,SAAS,cAAc,MAAM,aAC7B,SAAS,SAAS,MAAM,QACxB,SAAS,4BAA4B,MAAM,2BAC3C,SAAS,kBAAkB,MAAM;AAAA;;;ACT9B,SAAS,8BAAgD,CAC9D,QACA,UACG;AAAA,EACH,MAAM,UAAU,IAAI;AAAA,EACpB,MAAM,gBAAgB,4BAA2B,OAAO,SAAS;AAAA,IAC/D,iBAAiB,MAAM,yBAAwB,QAAQ;AAAA,IACvD,KAAK,OAAgB,cAAkE;AAAA,MACrF,yBAAwB,QAAQ;AAAA,MAChC,OAAO,UAAU;AAAA;AAAA,EAErB,CAAC;AAAA,EAED,MAAM,OAAO,CAAwB,UAA0B;AAAA,IAC7D,MAAM,WAAW,QAAQ,IAAI,KAAK;AAAA,IAClC,IAAI;AAAA,MAAU,OAAO;AAAA,IAErB,MAAM,QAAQ,IAAI,MAAM,OAAqB;AAAA,MAK3C,GAAG,CAAC,SAAS,UAAU,UAAU;AAAA,QAC/B,yBAAwB,QAAQ;AAAA,QAChC,MAAM,SACJ,YAAY,UAAU,aAAa,YAC/B,gBACA,QAAQ,IAAI,SAAS,UAAU,QAAQ;AAAA,QAC7C,IAAI,OAAO,WAAW,YAAY;AAAA,UAChC,OAAO,IAAI,SAAoB;AAAA,YAC7B,yBAAwB,QAAQ;AAAA,YAChC,OAAO,OAAO,MAAM,SAAS,IAAI;AAAA;AAAA,QAErC;AAAA,QACA,IAAI,UAAU,OAAO,WAAW,UAAU;AAAA,UACxC,OAAO,KAAK,MAAM;AAAA,QACpB;AAAA,QACA,OAAO;AAAA;AAAA,IAEX,CAAC;AAAA,IAED,QAAQ,IAAI,OAAO,KAAK;AAAA,IACxB,OAAO;AAAA;AAAA,EAGT,OAAO,KAAK,MAAM;AAAA;AAGb,SAAS,wBAAuB,CAAC,UAA+B;AAAA,EACrE,IAAI,CAAC,SAAS,GAAG;AAAA,IACf,MAAM,IAAI,yBACR,2EACA,EAAE,MAAM,uBAAuB,CACjC;AAAA,EACF;AAAA;AAGK,SAAS,8BAA6B,GAAU;AAAA,EACrD,MAAM,IAAI,yBAAwB,6DAA6D;AAAA,IAC7F,MAAM;AAAA,EACR,CAAC;AAAA;",
-  "debugId": "B710291DEE8F3A1864756E2164756E21",
-  "names": []
-}

package/dist/chunk-s54c868q.js.map

@@ -1,12 +0,0 @@
-{
-  "version": 3,
-  "sources": ["../src/storage/agents/provider.ts", "../src/agents/types.ts", "../src/storage/agents/errors.ts"],
-  "sourcesContent": [
-    "import { isDeepStrictEqual } from \"node:util\"\nimport { AGENT_REASONING_LEVELS } from \"../../agents/types\"\nimport { isFileRef } from \"../../blob-storage\"\nimport { isJsonObject, isPlainRecord } from \"../../json\"\nimport { isModelReasoning } from \"../../models/language-model\"\nimport type { ExecutionRecord, ExecutionStorage } from \"../executions\"\nimport { findAgentRunExecution } from \"../executions/run-link\"\nimport { AgentStorageError } from \"./errors\"\nimport type {\n  AgentContextCheckpointRecord,\n  AgentMessageRecord,\n  AgentRunRecord,\n  AgentThreadRecord,\n  AgentThreadSandboxParams,\n  AgentThreadSandboxState,\n  ConversationAgentRunSpec,\n  CreateAgentContextCheckpointInput,\n  CreateSubagentRunInput,\n  SubagentRunRecord,\n  SubagentRunResult,\n  TransitionAgentThreadSandboxInput,\n} from \"./types\"\n\n/** Shared state machine. Providers must lock the run, then thread, around this decision/write. */\nexport function transitionAgentThreadSandbox(\n  thread: AgentThreadRecord | null,\n  run: AgentRunRecord | null,\n  input: TransitionAgentThreadSandboxInput\n): AgentThreadSandboxState {\n  const fail = (message: string): never => {\n    throw new AgentStorageError(\"invalid_state\", `[Sixb] Sandbox ${message}`)\n  }\n  if (!thread?.sandboxParams) return fail(\"is not configured on this thread.\")\n  if (!/^[a-zA-Z0-9-]{1,80}$/.test(input.name)) return fail(\"name is invalid.\")\n  const state = thread.sandboxState\n  if (input.action === \"recreate\") {\n    if (thread.activeRunId !== null) return fail(\"cannot be recreated during an active run.\")\n    if (!state || state.name !== input.expectedSandboxName || input.name === state.name)\n      return fail(\"changed; reload before recreating.\")\n    if (![\"busy\", \"blocked\", \"unavailable\"].includes(state.status)) {\n      return fail(\"does not require recovery.\")\n    }\n    return {\n      name: input.name,\n      status: \"new\",\n      initialized: false,\n      resetAt: new Date().toISOString(),\n    }\n  }\n  if (\n    run?.kind !== \"conversation\" ||\n    run.threadId !== thread.id ||\n    run.status !== \"running\" ||\n    thread.activeRunId !== run.id ||\n    run.id !== input.runId ||\n    run.execution?.token !== input.executionToken ||\n    run.execution.queueLeaseExpiresAt.getTime() <= Date.now()\n  ) {\n    throw new AgentStorageError(\"execution_lost\", \"[Sixb] Sandbox execution ownership was lost.\")\n  }\n  if (input.action === \"acquire\") {\n    if (state && state.status !== \"new\" && state.status !== \"ready\") {\n      return fail(\"requires recovery; previous operations may still be in flight.\")\n    }\n    if (state && state.name !== input.name) return fail(\"name changed.\")\n    if (!/^[a-f0-9]{64}$/.test(input.sourceFingerprint))\n      return fail(\"source fingerprint is invalid.\")\n    if (state?.sourceFingerprint && state.sourceFingerprint !== input.sourceFingerprint) {\n      return fail(\"source identity changed; the existing checkout was not opened.\")\n    }\n    return {\n      name: input.name,\n      status: \"busy\",\n      initialized: state?.initialized ?? false,\n      ...(state?.resetAt ? { resetAt: state.resetAt } : {}),\n      sourceFingerprint: input.sourceFingerprint,\n      owner: { runId: input.runId, executionToken: input.executionToken },\n    }\n  }\n  if (\n    state?.status !== \"busy\" ||\n    state.name !== input.name ||\n    state.owner?.runId !== input.runId ||\n    state.owner.executionToken !== input.executionToken\n  ) {\n    return fail(\"is not owned by this execution.\")\n  }\n  if (input.action === \"replace\") {\n    if (\n      !state.initialized ||\n      input.nextName === state.name ||\n      !/^[a-zA-Z0-9-]{1,80}$/.test(input.nextName)\n    ) {\n      return fail(\"replacement requires initialized state and a fresh valid name.\")\n    }\n    // Only the owning worker may report confirmed loss; retain its fence across replacement.\n    return {\n      ...state,\n      name: input.nextName,\n      initialized: false,\n      resetAt: new Date().toISOString(),\n    }\n  }\n  if (input.status === \"ready\" && !input.initialized) return fail(\"initialization is incomplete.\")\n  return {\n    name: state.name,\n    status: input.status,\n    initialized: input.initialized,\n    sourceFingerprint: state.sourceFingerprint,\n    ...(state.resetAt ? { resetAt: state.resetAt } : {}),\n  }\n}\n\n/** Snapshot application parameters independently of worker-owned sandbox state. */\nexport function snapshotAgentThreadSandboxParams(value: unknown): AgentThreadSandboxParams {\n  if (!isPlainRecord(value) || !isJsonObject(value)) {\n    throw new AgentStorageError(\n      \"invalid_input\",\n      \"[Sixb] Thread sandbox must contain only JSON params.\"\n    )\n  }\n  return structuredClone(value)\n}\n\n/** Validate the provider-neutral model selection captured for a conversational turn. */\nexport function assertConversationAgentRunSpec(\n  spec: ConversationAgentRunSpec,\n  prefix = \"Sixb\"\n): void {\n  if (!isRecord(spec) || !isRecord(spec.model)) {\n    throw new AgentStorageError(\n      \"invalid_input\",\n      `[${prefix}] Conversational Agent run spec must contain a model reference.`\n    )\n  }\n  for (const [name, value] of [\n    [\"model.provider\", spec.model.provider],\n    [\"model.modelId\", spec.model.modelId],\n  ] as const) {\n    if (typeof value !== \"string\" || value.trim().length === 0) {\n      throw new AgentStorageError(\n        \"invalid_input\",\n        `[${prefix}] Conversational Agent run '${name}' must not be empty.`\n      )\n    }\n  }\n  if (spec.reasoning !== undefined && !isModelReasoning(spec.reasoning)) {\n    throw new AgentStorageError(\n      \"invalid_input\",\n      `[${prefix}] Conversational Agent reasoning must be one of: ${AGENT_REASONING_LEVELS.join(\", \")}, or a nonnegative budgetTokens object.`\n    )\n  }\n  for (const [name, value] of [\n    [\"timeZone\", spec.timeZone],\n    [\"locale\", spec.locale],\n  ] as const) {\n    if (value !== undefined && (typeof value !== \"string\" || value.trim().length === 0)) {\n      throw new AgentStorageError(\n        \"invalid_input\",\n        `[${prefix}] Conversational Agent run '${name}' must be a non-empty string.`\n      )\n    }\n  }\n}\n\nfunction isRecord(value: unknown): value is Readonly<Record<string, unknown>> {\n  return typeof value === \"object\" && value !== null && !Array.isArray(value)\n}\n\n/** Validate the semantic link between a conversational Agent run and its immutable execution. */\nexport async function assertAgentRunExecution(input: {\n  readonly executions: ExecutionStorage\n  readonly projectId: string\n  readonly executionId: string\n  readonly runId: string\n}): Promise<ExecutionRecord> {\n  const execution = await findAgentRunExecution({\n    executions: input.executions,\n    projectId: input.projectId,\n    executionId: input.executionId,\n    runId: input.runId,\n    authority: { type: \"inherited\" },\n  })\n  if (!execution) {\n    throw new AgentStorageError(\n      \"invalid_input\",\n      `[Sixb] Execution '${input.executionId}' does not authorize Agent run '${input.runId}'.`\n    )\n  }\n  return execution\n}\n\n/** Validate the provider-neutral payload of an idempotent child admission. */\nexport function assertCreateSubagentRunInput(input: CreateSubagentRunInput, prefix = \"Sixb\"): void {\n  for (const [name, value] of [\n    [\"id\", input.id],\n    [\"projectId\", input.projectId],\n    [\"executionId\", input.executionId],\n    [\"parentRunId\", input.parentRunId],\n    [\"parentExecutionToken\", input.parentExecutionToken],\n    [\"spawnKey\", input.spawnKey],\n    [\"model.provider\", input.spec.model.provider],\n    [\"model.modelId\", input.spec.model.modelId],\n    [\"task\", input.spec.task],\n  ] as const) {\n    if (value.trim().length === 0) {\n      throw new AgentStorageError(\n        \"invalid_input\",\n        `[${prefix}] Subagent run '${name}' must not be empty.`\n      )\n    }\n  }\n  if (input.spawnKey.length > 128) {\n    throw new AgentStorageError(\n      \"invalid_input\",\n      `[${prefix}] Subagent spawn key must not exceed 128 characters.`\n    )\n  }\n  for (const [name, value] of [\n    [\"maxActiveChildren\", input.maxActiveChildren],\n    [\"spec.maxSteps\", input.spec.maxSteps],\n  ] as const) {\n    if (!Number.isSafeInteger(value) || value < 1) {\n      throw new AgentStorageError(\n        \"invalid_input\",\n        `[${prefix}] Subagent run '${name}' must be a positive safe integer.`\n      )\n    }\n  }\n  if (new Set(input.spec.toolNames).size !== input.spec.toolNames.length) {\n    throw new AgentStorageError(\n      \"invalid_input\",\n      `[${prefix}] Subagent run tool names must be unique.`\n    )\n  }\n  if (input.spec.reasoning !== undefined && !isModelReasoning(input.spec.reasoning)) {\n    throw new AgentStorageError(\n      \"invalid_input\",\n      `[${prefix}] Subagent reasoning must be one of: ${AGENT_REASONING_LEVELS.join(\", \")}, or a nonnegative budgetTokens object.`\n    )\n  }\n  if (input.spec.toolNames.some((name) => !name.trim())) {\n    throw new AgentStorageError(\n      \"invalid_input\",\n      `[${prefix}] Subagent run tool names must not be empty.`\n    )\n  }\n  if (input.createdAt && !Number.isFinite(input.createdAt.getTime())) {\n    throw new AgentStorageError(\n      \"invalid_input\",\n      `[${prefix}] Subagent run createdAt must be a valid date.`\n    )\n  }\n}\n\n/** Exact semantic match required when a durable spawn key is replayed. */\nexport function subagentRunMatchesCreateInput(\n  run: AgentRunRecord,\n  input: CreateSubagentRunInput\n): run is SubagentRunRecord {\n  return (\n    run.kind === \"subagent\" &&\n    run.id === input.id &&\n    run.projectId === input.projectId &&\n    run.executionId === input.executionId &&\n    run.parentRunId === input.parentRunId &&\n    run.spawnKey === input.spawnKey &&\n    isDeepStrictEqual(run.spec, input.spec)\n  )\n}\n\n/** Validate the small durable result returned by a successful child. */\nexport function assertSubagentRunResult(\n  result: SubagentRunResult | undefined,\n  runId: string,\n  prefix = \"Sixb\"\n): asserts result is SubagentRunResult {\n  const text = result?.text\n  const files = result?.files\n  const hasText = typeof text === \"string\" && text.trim().length > 0\n  const hasFiles = Array.isArray(files) && files.length > 0 && files.every(isFileRef)\n  if (!result || (!hasText && !hasFiles)) {\n    throw new AgentStorageError(\n      \"invalid_input\",\n      `[${prefix}] Succeeded subagent run '${runId}' requires text or files.`\n    )\n  }\n  if ((text !== undefined && !hasText) || (files !== undefined && !hasFiles)) {\n    throw new AgentStorageError(\n      \"invalid_input\",\n      `[${prefix}] Subagent run '${runId}' has an invalid result.`\n    )\n  }\n}\n\n/** Validate provider-independent checkpoint fields before entering a storage critical section. */\nexport function assertCreateAgentContextCheckpointInput(\n  input: CreateAgentContextCheckpointInput,\n  prefix = \"Sixb\"\n): void {\n  for (const [name, value] of [\n    [\"id\", input.id],\n    [\"projectId\", input.projectId],\n    [\"threadId\", input.threadId],\n    [\"createdByRunId\", input.createdByRunId],\n    [\"executionToken\", input.executionToken],\n    [\"summary\", input.summary],\n    [\"summaryModelId\", input.summaryModelId],\n  ] as const) {\n    if (value.trim().length === 0) {\n      throw new AgentStorageError(\n        \"invalid_input\",\n        `[${prefix}] Agent context checkpoint '${name}' must not be empty.`\n      )\n    }\n  }\n\n  if (input.summaryFormatVersion !== 1) {\n    throw new AgentStorageError(\n      \"invalid_input\",\n      `[${prefix}] Agent context checkpoint summary format version must be 1.`\n    )\n  }\n  if (input.reason !== \"threshold\" && input.reason !== \"overflow\") {\n    throw new AgentStorageError(\n      \"invalid_input\",\n      `[${prefix}] Agent context checkpoint reason must be 'threshold' or 'overflow'.`\n    )\n  }\n  if (\n    input.expectedPreviousCheckpointId !== null &&\n    input.expectedPreviousCheckpointId.trim().length === 0\n  ) {\n    throw new AgentStorageError(\n      \"invalid_input\",\n      `[${prefix}] Agent context checkpoint expected previous id must not be empty.`\n    )\n  }\n  if (input.createdAt && !Number.isFinite(input.createdAt.getTime())) {\n    throw new AgentStorageError(\n      \"invalid_input\",\n      `[${prefix}] Agent context checkpoint createdAt must be a valid date.`\n    )\n  }\n\n  for (const [name, value, minimum] of [\n    [\"expectedHeadSeq\", input.expectedHeadSeq, 1],\n    [\"summarizedThroughSeq\", input.summarizedThroughSeq, 1],\n    [\"observedHeadSeq\", input.observedHeadSeq, 1],\n    [\"estimatedInputTokensBefore\", input.estimatedInputTokensBefore, 0],\n    [\"estimatedInputTokensAfter\", input.estimatedInputTokensAfter, 0],\n  ] as const) {\n    if (!Number.isSafeInteger(value) || value < minimum) {\n      throw new AgentStorageError(\n        \"invalid_input\",\n        `[${prefix}] Agent context checkpoint '${name}' must be a safe integer greater than or equal to ${minimum}.`\n      )\n    }\n  }\n\n  if (input.observedHeadSeq !== input.expectedHeadSeq) {\n    throw new AgentStorageError(\n      \"invalid_input\",\n      `[${prefix}] Agent context checkpoint observed head must equal its expected message head.`\n    )\n  }\n  if (input.summarizedThroughSeq >= input.observedHeadSeq) {\n    throw new AgentStorageError(\n      \"invalid_input\",\n      `[${prefix}] Agent context checkpoint must retain the triggering head message.`\n    )\n  }\n}\n\n/** Assert that the current delivery still owns the active conversational run. */\nexport function assertAgentContextCheckpointAuthority(input: {\n  readonly create: CreateAgentContextCheckpointInput\n  readonly run: AgentRunRecord | null\n  readonly thread: AgentThreadRecord | null\n  readonly prefix?: string\n}): asserts input is typeof input & {\n  readonly run: AgentRunRecord\n  readonly thread: AgentThreadRecord\n} {\n  const { create, run, thread } = input\n  const prefix = input.prefix ?? \"Sixb\"\n  if (!run) {\n    throw new AgentStorageError(\n      \"run_not_found\",\n      `[${prefix}] Agent run '${create.createdByRunId}' not found for project '${create.projectId}'.`\n    )\n  }\n  if (!thread) {\n    throw new AgentStorageError(\n      \"thread_not_found\",\n      `[${prefix}] Agent thread '${create.threadId}' not found for project '${create.projectId}'.`\n    )\n  }\n  if (run.kind !== \"conversation\" || run.threadId !== create.threadId) {\n    throw new AgentStorageError(\n      \"invalid_input\",\n      `[${prefix}] Agent run '${run.id}' does not belong to thread '${create.threadId}'.`\n    )\n  }\n  if (run.status !== \"running\") {\n    throw new AgentStorageError(\n      \"invalid_state\",\n      `[${prefix}] Agent run '${run.id}' is not running (status '${run.status}').`\n    )\n  }\n  if (!run.execution || run.execution.token !== create.executionToken) {\n    throw new AgentStorageError(\n      \"execution_lost\",\n      `[${prefix}] Execution token is no longer current on agent run '${run.id}'.`\n    )\n  }\n  if (thread.activeRunId !== run.id) {\n    throw new AgentStorageError(\n      \"invalid_state\",\n      `[${prefix}] Agent run '${run.id}' no longer owns thread '${thread.id}'.`\n    )\n  }\n}\n\n/** Assert both compare-and-swap anchors and the retained-turn boundary. */\nexport function assertAgentContextCheckpointAnchors(input: {\n  readonly create: CreateAgentContextCheckpointInput\n  readonly latest: AgentContextCheckpointRecord | null\n  readonly headSeq: number\n  readonly firstRetained: AgentMessageRecord | null\n  readonly prefix?: string\n}): void {\n  const { create, latest, headSeq, firstRetained } = input\n  const prefix = input.prefix ?? \"Sixb\"\n  if (headSeq !== create.expectedHeadSeq) {\n    throw new AgentStorageError(\n      \"invalid_state\",\n      `[${prefix}] Agent thread '${create.threadId}' message head changed from ${create.expectedHeadSeq} to ${headSeq}.`\n    )\n  }\n\n  const latestId = latest?.id ?? null\n  if (latestId !== create.expectedPreviousCheckpointId) {\n    throw new AgentStorageError(\n      \"invalid_state\",\n      `[${prefix}] Agent thread '${create.threadId}' checkpoint head changed.`\n    )\n  }\n  if (latest && create.summarizedThroughSeq <= latest.summarizedThroughSeq) {\n    throw new AgentStorageError(\n      \"invalid_input\",\n      `[${prefix}] Agent context checkpoint boundary must advance beyond sequence ${latest.summarizedThroughSeq}.`\n    )\n  }\n  if (!firstRetained || firstRetained.seq !== create.summarizedThroughSeq + 1) {\n    throw new AgentStorageError(\n      \"invalid_state\",\n      `[${prefix}] Agent context checkpoint boundary does not align with stored thread messages.`\n    )\n  }\n  if (firstRetained.role !== \"user\") {\n    throw new AgentStorageError(\n      \"invalid_input\",\n      `[${prefix}] Agent context checkpoint must retain a complete turn beginning with a user message.`\n    )\n  }\n}\n\n/** Validate the mutable anchors again before returning an idempotently created checkpoint. */\nexport function assertAgentContextCheckpointReplayState(input: {\n  readonly create: CreateAgentContextCheckpointInput\n  readonly existing: AgentContextCheckpointRecord\n  readonly latest: AgentContextCheckpointRecord | null\n  readonly headSeq: number\n  readonly prefix?: string\n}): void {\n  const prefix = input.prefix ?? \"Sixb\"\n  if (input.headSeq !== input.create.expectedHeadSeq) {\n    throw new AgentStorageError(\n      \"invalid_state\",\n      `[${prefix}] Agent thread '${input.create.threadId}' message head changed from ${input.create.expectedHeadSeq} to ${input.headSeq}.`\n    )\n  }\n  if (input.latest?.id !== input.existing.id) {\n    throw new AgentStorageError(\n      \"invalid_state\",\n      `[${prefix}] Agent thread '${input.create.threadId}' checkpoint head changed after '${input.existing.id}'.`\n    )\n  }\n}\n\n/** Compare the durable semantic payload; delivery token and generated timestamp are not content. */\nexport function agentContextCheckpointMatchesCreateInput(\n  record: AgentContextCheckpointRecord,\n  input: CreateAgentContextCheckpointInput\n): boolean {\n  return (\n    record.id === input.id &&\n    record.projectId === input.projectId &&\n    record.threadId === input.threadId &&\n    record.createdByRunId === input.createdByRunId &&\n    (record.previousCheckpointId ?? null) === input.expectedPreviousCheckpointId &&\n    record.reason === input.reason &&\n    record.summary === input.summary &&\n    record.summaryFormatVersion === input.summaryFormatVersion &&\n    record.summarizedThroughSeq === input.summarizedThroughSeq &&\n    record.observedHeadSeq === input.observedHeadSeq &&\n    record.estimatedInputTokensBefore === input.estimatedInputTokensBefore &&\n    record.estimatedInputTokensAfter === input.estimatedInputTokensAfter &&\n    record.summaryModelId === input.summaryModelId\n  )\n}\n",
-    "import type { ActionsRuntime } from \"../actions/execution\"\nimport type { BlobBody, FileRef, OpenedFileRef } from \"../blob-storage\"\nimport type { ConnectorRuntime } from \"../connectors\"\nimport type { JsonPrimitive, JsonValue, ReadonlyJsonValue } from \"../json\"\nimport type { Logger } from \"../logging\"\nimport { type LanguageModelRef, MODEL_REASONING_LEVELS, type ModelReasoning } from \"../models\"\nimport type { ModelsRuntime } from \"../models/generation-types\"\nimport type { InferSchema } from \"../ontology/inference\"\nimport type { Schema } from \"../ontology/types\"\nimport type { ObjectReader } from \"../runtime/types\"\n\nexport type {\n  AgentContextEntryInput,\n  AgentContextInput,\n  AgentContextOrigin,\n  AgentContextPart,\n} from \"./context/entries\"\n\n/** Public capability reference used by security grants such as `can.run(agent)`. */\nexport interface AgentReference {\n  readonly kind: \"agent\"\n  readonly usage: AgentUsageReference\n}\n\n/** Project-wide AI accounting and limit capability, independent of permission to run the Agent. */\nexport interface AgentUsageReference {\n  readonly kind: \"aiUsage\"\n}\n\n/** Public metadata for the project's conversational Agent. */\nexport interface AgentDescriptor {\n  readonly name: string\n  readonly model: LanguageModelRef\n}\n\nexport type AgentReasoning = ModelReasoning\n\nexport const AGENT_REASONING_LEVELS = MODEL_REASONING_LEVELS\n\ntype Simplify<T> = { [K in keyof T]: T[K] } & {}\ntype JsonifyAgentToolInput<T> = unknown extends T\n  ? ReadonlyJsonValue\n  : T extends Date\n    ? string\n    : T extends readonly (infer TItem)[]\n      ? readonly JsonifyAgentToolInput<TItem>[]\n      : T extends JsonPrimitive\n        ? T\n        : T extends object\n          ? { readonly [K in keyof T]: JsonifyAgentToolInput<T[K]> }\n          : never\n\n/** A model-facing object shape expressed with Sixb's schema DSL. */\nexport type AgentToolInputSchema = Readonly<Record<string, Schema>>\n\n/** Infer the handler input represented by an agent tool schema. */\nexport type InferAgentToolInputSchema<TInput extends AgentToolInputSchema> =\n  string extends keyof TInput\n    ? Readonly<Record<string, unknown>>\n    : Simplify<{\n        readonly [K in keyof TInput]: JsonifyAgentToolInput<InferSchema<TInput[K]>>\n      }>\n\n/** Identifies the conversational, workflow, or child Agent execution that invoked a tool. */\nexport type AgentToolRunInfo =\n  | {\n      readonly kind: \"conversation\"\n      readonly id: string\n      readonly threadId: string\n    }\n  | {\n      readonly kind: \"subagent\"\n      readonly id: string\n      readonly parentRunId: string\n    }\n  | {\n      readonly kind: \"workflow\"\n      readonly id: string\n      readonly workflowId: string\n      readonly stepId: string\n    }\n\n/** Input accepted by the run-scoped artifact publisher exposed to agent tools. */\nexport interface AgentToolArtifactPutInput {\n  readonly body: BlobBody\n  readonly fileName: string\n  readonly mediaType?: string\n}\n\n/** A durable artifact and its path inside the current run sandbox. */\nexport interface AgentToolArtifact {\n  readonly fileRef: FileRef\n  readonly sandboxPath: string\n}\n\n/** The narrow artifact-writing surface available to an agent tool call. */\nexport interface AgentToolArtifacts {\n  put(input: AgentToolArtifactPutInput): Promise<AgentToolArtifact>\n}\n\n/**\n * The files attached to the run that invoked a tool: the messages of a chat's thread, or the input\n * files of a workflow AI task. A child Agent has none.\n */\nexport interface AgentToolAttachments {\n  /**\n   * Open an attachment by the `key` the Agent sees in `$SIXB_ATTACHMENTS`. Returns null when its\n   * stored file is gone, and throws an `AgentToolPublicError` for a key that is not one of this\n   * run's attachments.\n   */\n  open(key: string): Promise<OpenedFileRef | null>\n}\n\nexport type AgentToolTextContent = {\n  readonly type: \"text\"\n  readonly text: string\n}\n\nexport type AgentToolFileContent = {\n  readonly type: \"file\"\n  readonly fileRef: FileRef\n}\n\n/** Durable model-facing content returned by a file-aware tool. */\nexport type AgentToolContent = AgentToolTextContent | AgentToolFileContent\n\n/**\n * A file-aware tool result. The tag distinguishes this envelope from an ordinary JSON result while\n * keeping the whole value safe to persist in the durable tool-call trace.\n */\nexport type AgentToolResult = {\n  readonly kind: \"agentToolResult\"\n  readonly content: readonly AgentToolContent[]\n}\n\n/**\n * The run's domain SDK as an agent tool sees it. Unlike workflow steps and actions, it acts as the\n * run's requester: the signed-in user in a chat, that same user in a child Agent, and the step's\n * groups in a workflow AI task.\n *\n * A structural view of the public `Sixb` SDK, like `WorkflowRuntimeFacade`: the handler receives the\n * run's bound SDK, and this type guides it to what a tool should do. It reads objects and changes\n * them by requesting actions, which validate and record the change. Authority comes from the run,\n * not from this view.\n */\nexport interface AgentToolRuntimeFacade extends ObjectReader {\n  readonly actions: ActionsRuntime\n  readonly models: ModelsRuntime\n  readonly connector: ConnectorRuntime\n}\n\n/** The narrow, run-scoped surface passed to an agent tool handler. */\nexport interface AgentToolRunContext<\n  TInput extends Readonly<Record<string, unknown>> = Readonly<Record<string, unknown>>,\n> {\n  readonly input: TInput\n  readonly toolCallId: string\n  readonly signal: AbortSignal\n  readonly run: AgentToolRunInfo\n  readonly sixb: AgentToolRuntimeFacade\n  readonly logger: Logger\n  readonly artifacts: AgentToolArtifacts\n  readonly attachments: AgentToolAttachments\n}\n\n/** Agent tool handlers may return only values safe to persist in agent messages. */\nexport type AgentToolHandlerResult =\n  | ReadonlyJsonValue\n  | AgentToolResult\n  | Promise<ReadonlyJsonValue | AgentToolResult>\n\nexport type AgentToolHandler<TInput extends Readonly<Record<string, unknown>>> = (\n  context: AgentToolRunContext<TInput>\n) => AgentToolHandlerResult\n\n/**\n * Runtime definitions are stored heterogeneously. Keep variance erasure at this\n * boundary only; authoring through `run()` remains strictly contravariant.\n */\ntype StoredAgentToolHandler<TInput extends Readonly<Record<string, unknown>>> = {\n  bivarianceHack(context: AgentToolRunContext<TInput>): JsonValue | Promise<JsonValue>\n}[\"bivarianceHack\"]\n\n/** A reusable, inert model tool definition selected explicitly by an agent. */\nexport interface AgentToolDefinition<\n  TName extends string = string,\n  TInput extends AgentToolInputSchema = AgentToolInputSchema,\n> {\n  readonly kind: \"agentTool\"\n  readonly name: TName\n  readonly description: string\n  readonly input: TInput\n  readonly handler: StoredAgentToolHandler<InferAgentToolInputSchema<TInput>>\n}\n\n/** Infer the input received by a tool definition's handler. */\nexport type InferAgentToolInput<TTool extends AgentToolDefinition> = InferAgentToolInputSchema<\n  TTool[\"input\"]\n>\n\nexport interface AgentToolRunBuilder<TName extends string, TInput extends AgentToolInputSchema> {\n  run(\n    handler: AgentToolHandler<InferAgentToolInputSchema<TInput>>\n  ): AgentToolDefinition<TName, TInput>\n}\n\nexport interface AgentToolInputBuilder<TName extends string> {\n  input<const TInput extends AgentToolInputSchema>(\n    input: TInput\n  ): AgentToolRunBuilder<TName, TInput>\n}\n\nexport interface AgentToolDescriptionBuilder<TName extends string> {\n  description(description: string): AgentToolInputBuilder<TName>\n}\n",
-    "export type AgentStorageErrorCode =\n  | \"thread_not_found\"\n  | \"active_run_exists\"\n  | \"active_child_limit\"\n  | \"run_not_found\"\n  | \"invalid_input\"\n  | \"invalid_state\"\n  | \"execution_lost\"\n  | \"duplicate_id\"\n\n/**\n * Error for agent-storage invariants and invalid state transitions (single-flight, execution\n * ownership, run lifecycle, message append). Callers branch on `code` rather than message text.\n */\nexport class AgentStorageError extends Error {\n  readonly name = \"AgentStorageError\"\n\n  constructor(\n    readonly code: AgentStorageErrorCode,\n    message: string\n  ) {\n    super(message)\n  }\n}\n"
-  ],
-  "mappings": ";;;;;;;;;;;;;;;;;AAAA;;;ACqCO,IAAM,0BAAyB;;;ACvB/B,MAAM,2BAA0B,MAAM;AAAA,EAIhC;AAAA,EAHF,OAAO;AAAA,EAEhB,WAAW,CACA,MACT,SACA;AAAA,IACA,MAAM,OAAO;AAAA,IAHJ;AAAA;AAKb;;;AFCO,SAAS,6BAA4B,CAC1C,QACA,KACA,OACyB;AAAA,EACzB,MAAM,OAAO,CAAC,YAA2B;AAAA,IACvC,MAAM,IAAI,mBAAkB,iBAAiB,kBAAkB,SAAS;AAAA;AAAA,EAE1E,IAAI,CAAC,QAAQ;AAAA,IAAe,OAAO,KAAK,mCAAmC;AAAA,EAC3E,IAAI,CAAC,uBAAuB,KAAK,MAAM,IAAI;AAAA,IAAG,OAAO,KAAK,kBAAkB;AAAA,EAC5E,MAAM,QAAQ,OAAO;AAAA,EACrB,IAAI,MAAM,WAAW,YAAY;AAAA,IAC/B,IAAI,OAAO,gBAAgB;AAAA,MAAM,OAAO,KAAK,2CAA2C;AAAA,IACxF,IAAI,CAAC,SAAS,MAAM,SAAS,MAAM,uBAAuB,MAAM,SAAS,MAAM;AAAA,MAC7E,OAAO,KAAK,oCAAoC;AAAA,IAClD,IAAI,CAAC,CAAC,QAAQ,WAAW,aAAa,EAAE,SAAS,MAAM,MAAM,GAAG;AAAA,MAC9D,OAAO,KAAK,4BAA4B;AAAA,IAC1C;AAAA,IACA,OAAO;AAAA,MACL,MAAM,MAAM;AAAA,MACZ,QAAQ;AAAA,MACR,aAAa;AAAA,MACb,SAAS,IAAI,KAAK,EAAE,YAAY;AAAA,IAClC;AAAA,EACF;AAAA,EACA,IACE,KAAK,SAAS,kBACd,IAAI,aAAa,OAAO,MACxB,IAAI,WAAW,aACf,OAAO,gBAAgB,IAAI,MAC3B,IAAI,OAAO,MAAM,SACjB,IAAI,WAAW,UAAU,MAAM,kBAC/B,IAAI,UAAU,oBAAoB,QAAQ,KAAK,KAAK,IAAI,GACxD;AAAA,IACA,MAAM,IAAI,mBAAkB,kBAAkB,8CAA8C;AAAA,EAC9F;AAAA,EACA,IAAI,MAAM,WAAW,WAAW;AAAA,IAC9B,IAAI,SAAS,MAAM,WAAW,SAAS,MAAM,WAAW,SAAS;AAAA,MAC/D,OAAO,KAAK,gEAAgE;AAAA,IAC9E;AAAA,IACA,IAAI,SAAS,MAAM,SAAS,MAAM;AAAA,MAAM,OAAO,KAAK,eAAe;AAAA,IACnE,IAAI,CAAC,iBAAiB,KAAK,MAAM,iBAAiB;AAAA,MAChD,OAAO,KAAK,gCAAgC;AAAA,IAC9C,IAAI,OAAO,qBAAqB,MAAM,sBAAsB,MAAM,mBAAmB;AAAA,MACnF,OAAO,KAAK,gEAAgE;AAAA,IAC9E;AAAA,IACA,OAAO;AAAA,MACL,MAAM,MAAM;AAAA,MACZ,QAAQ;AAAA,MACR,aAAa,OAAO,eAAe;AAAA,SAC/B,OAAO,UAAU,EAAE,SAAS,MAAM,QAAQ,IAAI,CAAC;AAAA,MACnD,mBAAmB,MAAM;AAAA,MACzB,OAAO,EAAE,OAAO,MAAM,OAAO,gBAAgB,MAAM,eAAe;AAAA,IACpE;AAAA,EACF;AAAA,EACA,IACE,OAAO,WAAW,UAClB,MAAM,SAAS,MAAM,QACrB,MAAM,OAAO,UAAU,MAAM,SAC7B,MAAM,MAAM,mBAAmB,MAAM,gBACrC;AAAA,IACA,OAAO,KAAK,iCAAiC;AAAA,EAC/C;AAAA,EACA,IAAI,MAAM,WAAW,WAAW;AAAA,IAC9B,IACE,CAAC,MAAM,eACP,MAAM,aAAa,MAAM,QACzB,CAAC,uBAAuB,KAAK,MAAM,QAAQ,GAC3C;AAAA,MACA,OAAO,KAAK,gEAAgE;AAAA,IAC9E;AAAA,IAEA,OAAO;AAAA,SACF;AAAA,MACH,MAAM,MAAM;AAAA,MACZ,aAAa;AAAA,MACb,SAAS,IAAI,KAAK,EAAE,YAAY;AAAA,IAClC;AAAA,EACF;AAAA,EACA,IAAI,MAAM,WAAW,WAAW,CAAC,MAAM;AAAA,IAAa,OAAO,KAAK,+BAA+B;AAAA,EAC/F,OAAO;AAAA,IACL,MAAM,MAAM;AAAA,IACZ,QAAQ,MAAM;AAAA,IACd,aAAa,MAAM;AAAA,IACnB,mBAAmB,MAAM;AAAA,OACrB,MAAM,UAAU,EAAE,SAAS,MAAM,QAAQ,IAAI,CAAC;AAAA,EACpD;AAAA;AAIK,SAAS,iCAAgC,CAAC,OAA0C;AAAA,EACzF,IAAI,CAAC,cAAc,KAAK,KAAK,CAAC,cAAa,KAAK,GAAG;AAAA,IACjD,MAAM,IAAI,mBACR,iBACA,sDACF;AAAA,EACF;AAAA,EACA,OAAO,gBAAgB,KAAK;AAAA;AAIvB,SAAS,+BAA8B,CAC5C,MACA,SAAS,QACH;AAAA,EACN,IAAI,CAAC,SAAS,IAAI,KAAK,CAAC,SAAS,KAAK,KAAK,GAAG;AAAA,IAC5C,MAAM,IAAI,mBACR,iBACA,IAAI,uEACN;AAAA,EACF;AAAA,EACA,YAAY,MAAM,UAAU;AAAA,IAC1B,CAAC,kBAAkB,KAAK,MAAM,QAAQ;AAAA,IACtC,CAAC,iBAAiB,KAAK,MAAM,OAAO;AAAA,EACtC,GAAY;AAAA,IACV,IAAI,OAAO,UAAU,YAAY,MAAM,KAAK,EAAE,WAAW,GAAG;AAAA,MAC1D,MAAM,IAAI,mBACR,iBACA,IAAI,qCAAqC,0BAC3C;AAAA,IACF;AAAA,EACF;AAAA,EACA,IAAI,KAAK,cAAc,aAAa,CAAC,kBAAiB,KAAK,SAAS,GAAG;AAAA,IACrE,MAAM,IAAI,mBACR,iBACA,IAAI,0DAA0D,wBAAuB,KAAK,IAAI,0CAChG;AAAA,EACF;AAAA,EACA,YAAY,MAAM,UAAU;AAAA,IAC1B,CAAC,YAAY,KAAK,QAAQ;AAAA,IAC1B,CAAC,UAAU,KAAK,MAAM;AAAA,EACxB,GAAY;AAAA,IACV,IAAI,UAAU,cAAc,OAAO,UAAU,YAAY,MAAM,KAAK,EAAE,WAAW,IAAI;AAAA,MACnF,MAAM,IAAI,mBACR,iBACA,IAAI,qCAAqC,mCAC3C;AAAA,IACF;AAAA,EACF;AAAA;AAGF,SAAS,QAAQ,CAAC,OAA4D;AAAA,EAC5E,OAAO,OAAO,UAAU,YAAY,UAAU,QAAQ,CAAC,MAAM,QAAQ,KAAK;AAAA;AAI5E,eAAsB,wBAAuB,CAAC,OAKjB;AAAA,EAC3B,MAAM,YAAY,MAAM,sBAAsB;AAAA,IAC5C,YAAY,MAAM;AAAA,IAClB,WAAW,MAAM;AAAA,IACjB,aAAa,MAAM;AAAA,IACnB,OAAO,MAAM;AAAA,IACb,WAAW,EAAE,MAAM,YAAY;AAAA,EACjC,CAAC;AAAA,EACD,IAAI,CAAC,WAAW;AAAA,IACd,MAAM,IAAI,mBACR,iBACA,qBAAqB,MAAM,8CAA8C,MAAM,SACjF;AAAA,EACF;AAAA,EACA,OAAO;AAAA;AAIF,SAAS,6BAA4B,CAAC,OAA+B,SAAS,QAAc;AAAA,EACjG,YAAY,MAAM,UAAU;AAAA,IAC1B,CAAC,MAAM,MAAM,EAAE;AAAA,IACf,CAAC,aAAa,MAAM,SAAS;AAAA,IAC7B,CAAC,eAAe,MAAM,WAAW;AAAA,IACjC,CAAC,eAAe,MAAM,WAAW;AAAA,IACjC,CAAC,wBAAwB,MAAM,oBAAoB;AAAA,IACnD,CAAC,YAAY,MAAM,QAAQ;AAAA,IAC3B,CAAC,kBAAkB,MAAM,KAAK,MAAM,QAAQ;AAAA,IAC5C,CAAC,iBAAiB,MAAM,KAAK,MAAM,OAAO;AAAA,IAC1C,CAAC,QAAQ,MAAM,KAAK,IAAI;AAAA,EAC1B,GAAY;AAAA,IACV,IAAI,MAAM,KAAK,EAAE,WAAW,GAAG;AAAA,MAC7B,MAAM,IAAI,mBACR,iBACA,IAAI,yBAAyB,0BAC/B;AAAA,IACF;AAAA,EACF;AAAA,EACA,IAAI,MAAM,SAAS,SAAS,KAAK;AAAA,IAC/B,MAAM,IAAI,mBACR,iBACA,IAAI,4DACN;AAAA,EACF;AAAA,EACA,YAAY,MAAM,UAAU;AAAA,IAC1B,CAAC,qBAAqB,MAAM,iBAAiB;AAAA,IAC7C,CAAC,iBAAiB,MAAM,KAAK,QAAQ;AAAA,EACvC,GAAY;AAAA,IACV,IAAI,CAAC,OAAO,cAAc,KAAK,KAAK,QAAQ,GAAG;AAAA,MAC7C,MAAM,IAAI,mBACR,iBACA,IAAI,yBAAyB,wCAC/B;AAAA,IACF;AAAA,EACF;AAAA,EACA,IAAI,IAAI,IAAI,MAAM,KAAK,SAAS,EAAE,SAAS,MAAM,KAAK,UAAU,QAAQ;AAAA,IACtE,MAAM,IAAI,mBACR,iBACA,IAAI,iDACN;AAAA,EACF;AAAA,EACA,IAAI,MAAM,KAAK,cAAc,aAAa,CAAC,kBAAiB,MAAM,KAAK,SAAS,GAAG;AAAA,IACjF,MAAM,IAAI,mBACR,iBACA,IAAI,8CAA8C,wBAAuB,KAAK,IAAI,0CACpF;AAAA,EACF;AAAA,EACA,IAAI,MAAM,KAAK,UAAU,KAAK,CAAC,SAAS,CAAC,KAAK,KAAK,CAAC,GAAG;AAAA,IACrD,MAAM,IAAI,mBACR,iBACA,IAAI,oDACN;AAAA,EACF;AAAA,EACA,IAAI,MAAM,aAAa,CAAC,OAAO,SAAS,MAAM,UAAU,QAAQ,CAAC,GAAG;AAAA,IAClE,MAAM,IAAI,mBACR,iBACA,IAAI,sDACN;AAAA,EACF;AAAA;AAIK,SAAS,8BAA6B,CAC3C,KACA,OAC0B;AAAA,EAC1B,OACE,IAAI,SAAS,cACb,IAAI,OAAO,MAAM,MACjB,IAAI,cAAc,MAAM,aACxB,IAAI,gBAAgB,MAAM,eAC1B,IAAI,gBAAgB,MAAM,eAC1B,IAAI,aAAa,MAAM,YACvB,kBAAkB,IAAI,MAAM,MAAM,IAAI;AAAA;AAKnC,SAAS,wBAAuB,CACrC,QACA,OACA,SAAS,QAC4B;AAAA,EACrC,MAAM,OAAO,QAAQ;AAAA,EACrB,MAAM,QAAQ,QAAQ;AAAA,EACtB,MAAM,UAAU,OAAO,SAAS,YAAY,KAAK,KAAK,EAAE,SAAS;AAAA,EACjE,MAAM,WAAW,MAAM,QAAQ,KAAK,KAAK,MAAM,SAAS,KAAK,MAAM,MAAM,UAAS;AAAA,EAClF,IAAI,CAAC,UAAW,CAAC,WAAW,CAAC,UAAW;AAAA,IACtC,MAAM,IAAI,mBACR,iBACA,IAAI,mCAAmC,gCACzC;AAAA,EACF;AAAA,EACA,IAAK,SAAS,aAAa,CAAC,WAAa,UAAU,aAAa,CAAC,UAAW;AAAA,IAC1E,MAAM,IAAI,mBACR,iBACA,IAAI,yBAAyB,+BAC/B;AAAA,EACF;AAAA;AAIK,SAAS,wCAAuC,CACrD,OACA,SAAS,QACH;AAAA,EACN,YAAY,MAAM,UAAU;AAAA,IAC1B,CAAC,MAAM,MAAM,EAAE;AAAA,IACf,CAAC,aAAa,MAAM,SAAS;AAAA,IAC7B,CAAC,YAAY,MAAM,QAAQ;AAAA,IAC3B,CAAC,kBAAkB,MAAM,cAAc;AAAA,IACvC,CAAC,kBAAkB,MAAM,cAAc;AAAA,IACvC,CAAC,WAAW,MAAM,OAAO;AAAA,IACzB,CAAC,kBAAkB,MAAM,cAAc;AAAA,EACzC,GAAY;AAAA,IACV,IAAI,MAAM,KAAK,EAAE,WAAW,GAAG;AAAA,MAC7B,MAAM,IAAI,mBACR,iBACA,IAAI,qCAAqC,0BAC3C;AAAA,IACF;AAAA,EACF;AAAA,EAEA,IAAI,MAAM,yBAAyB,GAAG;AAAA,IACpC,MAAM,IAAI,mBACR,iBACA,IAAI,oEACN;AAAA,EACF;AAAA,EACA,IAAI,MAAM,WAAW,eAAe,MAAM,WAAW,YAAY;AAAA,IAC/D,MAAM,IAAI,mBACR,iBACA,IAAI,4EACN;AAAA,EACF;AAAA,EACA,IACE,MAAM,iCAAiC,QACvC,MAAM,6BAA6B,KAAK,EAAE,WAAW,GACrD;AAAA,IACA,MAAM,IAAI,mBACR,iBACA,IAAI,0EACN;AAAA,EACF;AAAA,EACA,IAAI,MAAM,aAAa,CAAC,OAAO,SAAS,MAAM,UAAU,QAAQ,CAAC,GAAG;AAAA,IAClE,MAAM,IAAI,mBACR,iBACA,IAAI,kEACN;AAAA,EACF;AAAA,EAEA,YAAY,MAAM,OAAO,YAAY;AAAA,IACnC,CAAC,mBAAmB,MAAM,iBAAiB,CAAC;AAAA,IAC5C,CAAC,wBAAwB,MAAM,sBAAsB,CAAC;AAAA,IACtD,CAAC,mBAAmB,MAAM,iBAAiB,CAAC;AAAA,IAC5C,CAAC,8BAA8B,MAAM,4BAA4B,CAAC;AAAA,IAClE,CAAC,6BAA6B,MAAM,2BAA2B,CAAC;AAAA,EAClE,GAAY;AAAA,IACV,IAAI,CAAC,OAAO,cAAc,KAAK,KAAK,QAAQ,SAAS;AAAA,MACnD,MAAM,IAAI,mBACR,iBACA,IAAI,qCAAqC,yDAAyD,UACpG;AAAA,IACF;AAAA,EACF;AAAA,EAEA,IAAI,MAAM,oBAAoB,MAAM,iBAAiB;AAAA,IACnD,MAAM,IAAI,mBACR,iBACA,IAAI,sFACN;AAAA,EACF;AAAA,EACA,IAAI,MAAM,wBAAwB,MAAM,iBAAiB;AAAA,IACvD,MAAM,IAAI,mBACR,iBACA,IAAI,2EACN;AAAA,EACF;AAAA;AAIK,SAAS,sCAAqC,CAAC,OAQpD;AAAA,EACA,QAAQ,QAAQ,KAAK,WAAW;AAAA,EAChC,MAAM,SAAS,MAAM,UAAU;AAAA,EAC/B,IAAI,CAAC,KAAK;AAAA,IACR,MAAM,IAAI,mBACR,iBACA,IAAI,sBAAsB,OAAO,0CAA0C,OAAO,aACpF;AAAA,EACF;AAAA,EACA,IAAI,CAAC,QAAQ;AAAA,IACX,MAAM,IAAI,mBACR,oBACA,IAAI,yBAAyB,OAAO,oCAAoC,OAAO,aACjF;AAAA,EACF;AAAA,EACA,IAAI,IAAI,SAAS,kBAAkB,IAAI,aAAa,OAAO,UAAU;AAAA,IACnE,MAAM,IAAI,mBACR,iBACA,IAAI,sBAAsB,IAAI,kCAAkC,OAAO,YACzE;AAAA,EACF;AAAA,EACA,IAAI,IAAI,WAAW,WAAW;AAAA,IAC5B,MAAM,IAAI,mBACR,iBACA,IAAI,sBAAsB,IAAI,+BAA+B,IAAI,WACnE;AAAA,EACF;AAAA,EACA,IAAI,CAAC,IAAI,aAAa,IAAI,UAAU,UAAU,OAAO,gBAAgB;AAAA,IACnE,MAAM,IAAI,mBACR,kBACA,IAAI,8DAA8D,IAAI,MACxE;AAAA,EACF;AAAA,EACA,IAAI,OAAO,gBAAgB,IAAI,IAAI;AAAA,IACjC,MAAM,IAAI,mBACR,iBACA,IAAI,sBAAsB,IAAI,8BAA8B,OAAO,MACrE;AAAA,EACF;AAAA;AAIK,SAAS,oCAAmC,CAAC,OAM3C;AAAA,EACP,QAAQ,QAAQ,QAAQ,SAAS,kBAAkB;AAAA,EACnD,MAAM,SAAS,MAAM,UAAU;AAAA,EAC/B,IAAI,YAAY,OAAO,iBAAiB;AAAA,IACtC,MAAM,IAAI,mBACR,iBACA,IAAI,yBAAyB,OAAO,uCAAuC,OAAO,sBAAsB,UAC1G;AAAA,EACF;AAAA,EAEA,MAAM,WAAW,QAAQ,MAAM;AAAA,EAC/B,IAAI,aAAa,OAAO,8BAA8B;AAAA,IACpD,MAAM,IAAI,mBACR,iBACA,IAAI,yBAAyB,OAAO,oCACtC;AAAA,EACF;AAAA,EACA,IAAI,UAAU,OAAO,wBAAwB,OAAO,sBAAsB;AAAA,IACxE,MAAM,IAAI,mBACR,iBACA,IAAI,0EAA0E,OAAO,uBACvF;AAAA,EACF;AAAA,EACA,IAAI,CAAC,iBAAiB,cAAc,QAAQ,OAAO,uBAAuB,GAAG;AAAA,IAC3E,MAAM,IAAI,mBACR,iBACA,IAAI,uFACN;AAAA,EACF;AAAA,EACA,IAAI,cAAc,SAAS,QAAQ;AAAA,IACjC,MAAM,IAAI,mBACR,iBACA,IAAI,6FACN;AAAA,EACF;AAAA;AAIK,SAAS,wCAAuC,CAAC,OAM/C;AAAA,EACP,MAAM,SAAS,MAAM,UAAU;AAAA,EAC/B,IAAI,MAAM,YAAY,MAAM,OAAO,iBAAiB;AAAA,IAClD,MAAM,IAAI,mBACR,iBACA,IAAI,yBAAyB,MAAM,OAAO,uCAAuC,MAAM,OAAO,sBAAsB,MAAM,UAC5H;AAAA,EACF;AAAA,EACA,IAAI,MAAM,QAAQ,OAAO,MAAM,SAAS,IAAI;AAAA,IAC1C,MAAM,IAAI,mBACR,iBACA,IAAI,yBAAyB,MAAM,OAAO,4CAA4C,MAAM,SAAS,MACvG;AAAA,EACF;AAAA;AAIK,SAAS,yCAAwC,CACtD,QACA,OACS;AAAA,EACT,OACE,OAAO,OAAO,MAAM,MACpB,OAAO,cAAc,MAAM,aAC3B,OAAO,aAAa,MAAM,YAC1B,OAAO,mBAAmB,MAAM,mBAC/B,OAAO,wBAAwB,UAAU,MAAM,gCAChD,OAAO,WAAW,MAAM,UACxB,OAAO,YAAY,MAAM,WACzB,OAAO,yBAAyB,MAAM,wBACtC,OAAO,yBAAyB,MAAM,wBACtC,OAAO,oBAAoB,MAAM,mBACjC,OAAO,+BAA+B,MAAM,8BAC5C,OAAO,8BAA8B,MAAM,6BAC3C,OAAO,mBAAmB,MAAM;AAAA;",
-  "debugId": "1F52FEF450649B4C64756E2164756E21",
-  "names": []
-}

package/dist/chunk-tw03bsmb.js.map

@@ -1,11 +0,0 @@
-{
-  "version": 3,
-  "sources": ["../src/storage/executions/errors.ts", "../src/storage/executions/validation.ts"],
-  "sourcesContent": [
-    "export type ExecutionStorageErrorCode =\n  | \"duplicate_execution\"\n  | \"invalid_credential\"\n  | \"invalid_input\"\n  | \"invalid_parent_execution\"\n  | \"missing_credential\"\n  | \"missing_parent_execution\"\n  | \"missing_principal\"\n\n/** Stable error raised when an execution record would violate ledger invariants. */\nexport class ExecutionStorageError extends Error {\n  readonly name = \"ExecutionStorageError\"\n\n  constructor(\n    readonly code: ExecutionStorageErrorCode,\n    message: string,\n    options: ErrorOptions = {}\n  ) {\n    super(message, options)\n  }\n}\n",
-    "import { isDeepStrictEqual } from \"node:util\"\nimport { normalizeRequesterGroupIds, snapshotRequesterGroupIds } from \"../../auth/attribution\"\nimport { kernelOperationId } from \"../../execution/kernel-operation\"\nimport type {\n  AuthorizablePrincipal,\n  AuthorizationRef,\n  KernelOperation,\n} from \"../../execution/types\"\nimport type { AuthStorage } from \"../auth\"\nimport { ExecutionStorageError } from \"./errors\"\nimport type {\n  CreateExecutionInput,\n  DurableExecutionExecutor,\n  DurableExecutionSource,\n  ExecutionRecord,\n} from \"./types\"\n\nexport interface ExecutionValidationLookup {\n  readonly auth: AuthStorage\n  getExecution(params: {\n    readonly projectId: string\n    readonly id: string\n  }): Promise<ExecutionRecord | null>\n  getShareSession(params: {\n    readonly projectId: string\n    readonly id: string\n  }): Promise<{ readonly grantId: string } | null>\n}\n\n/** Capture accounting attribution at the same storage boundary that admits the execution. */\nexport async function prepareExecutionRecord(\n  input: CreateExecutionInput,\n  lookup: ExecutionValidationLookup\n): Promise<ExecutionRecord> {\n  let groups = input.requesterGroupIds\n  if (groups === undefined && input.source.type === \"execution\") {\n    const parent = await lookup.getExecution({\n      projectId: input.projectId,\n      id: input.source.executionId,\n    })\n    groups = parent?.requesterGroupIds\n  } else if (groups === undefined && input.requestedBy) {\n    groups = await snapshotRequesterGroupIds({\n      auth: lookup.auth,\n      projectId: input.projectId,\n      principal: input.requestedBy,\n    })\n  }\n  const record = normalizeExecutionRecord({ ...input, requesterGroupIds: groups ?? [] })\n  await validateExecutionRecordReferences(record, lookup)\n  return record\n}\n\nexport function normalizeExecutionRecord(\n  input: CreateExecutionInput,\n  createdAt: Date = new Date()\n): ExecutionRecord {\n  const record: ExecutionRecord = {\n    id: input.id,\n    projectId: input.projectId,\n    requesterGroupIds: normalizeRequesterGroupIds(input.requesterGroupIds ?? []),\n    ...(input.requestedBy === undefined ? {} : { requestedBy: structuredClone(input.requestedBy) }),\n    executor: structuredClone(input.executor),\n    source: structuredClone(input.source),\n    correlationId: input.correlationId,\n    authorizationRef: structuredClone(input.authorizationRef),\n    createdAt: new Date(createdAt),\n  }\n\n  assertRecordShape(record)\n  assertExecutorAuthority(record)\n  return record\n}\n\nexport async function validateExecutionRecordReferences(\n  record: ExecutionRecord,\n  lookup: ExecutionValidationLookup\n): Promise<void> {\n  await validatePrincipal(record.requestedBy, record.projectId, \"Requested-by principal\", lookup)\n\n  if (record.authorizationRef.type === \"principal\") {\n    await validatePrincipal(\n      record.authorizationRef.principal,\n      record.projectId,\n      \"Authority principal\",\n      lookup\n    )\n    await validateCredential(record, lookup)\n  }\n  if (record.authorizationRef.type === \"delegated\") {\n    await validateDelegation(record, lookup)\n  }\n\n  await validateParent(record, lookup)\n}\n\nexport function cloneExecutionRecord(record: ExecutionRecord): ExecutionRecord {\n  return structuredClone(record)\n}\n\nfunction assertRecordShape(record: ExecutionRecord): void {\n  assertNonBlank(record.id, \"Execution id\")\n  assertNonBlank(record.projectId, \"Execution project id\")\n  assertNonBlank(record.correlationId, \"Execution correlation id\")\n  assertValidDate(record.createdAt, \"Execution createdAt\")\n\n  if (record.requestedBy) {\n    assertPrincipal(record.requestedBy, \"Requested-by principal\")\n  }\n\n  assertExecutor(record.executor)\n  assertSource(record.source)\n  assertAuthorizationRef(record.authorizationRef)\n}\n\nfunction assertExecutor(executor: DurableExecutionExecutor): void {\n  switch (executor.type) {\n    case \"request\":\n      assertNonBlank(executor.requestId, \"Executor request id\")\n      return\n    case \"primitive\":\n      assertTrustedPrimitiveKind(executor.kind, \"Executor primitive kind\")\n      assertNonBlank(executor.runId, \"Executor primitive run id\")\n      return\n    case \"agent\":\n      assertNonBlank(executor.runId, \"Executor agent run id\")\n      return\n    case \"kernel\":\n      assertKernelOperation(executor.operation, \"Executor kernel operation\")\n      return\n    default:\n      invalid(`Unknown execution executor type '${String((executor as { type?: unknown }).type)}'.`)\n  }\n}\n\nfunction assertSource(source: DurableExecutionSource): void {\n  switch (source.type) {\n    case \"ontologyCommit\":\n      assertNonBlank(source.commitId, \"Execution source commit id\")\n      return\n    case \"http\":\n      assertNonBlank(source.requestId, \"Execution source request id\")\n      return\n    case \"webhook\":\n      assertNonBlank(source.deliveryId, \"Execution source delivery id\")\n      return\n    case \"schedule\":\n    case \"event\":\n      assertNonBlank(source.eventId, \"Execution source event id\")\n      return\n    case \"datasetVersion\":\n      assertNonBlank(source.datasetId, \"Execution source dataset id\")\n      assertNonBlank(source.versionId, \"Execution source dataset version id\")\n      return\n    case \"execution\":\n      assertNonBlank(source.executionId, \"Execution source execution id\")\n      return\n    default:\n      invalid(\n        `Execution source type '${String((source as { type?: unknown }).type)}' is not durable.`\n      )\n  }\n}\n\nfunction assertAuthorizationRef(ref: AuthorizationRef): void {\n  switch (ref.type) {\n    case \"principal\":\n      assertPrincipal(ref.principal, \"Authority principal\")\n      if (ref.credential) {\n        if (ref.credential.type !== \"session\" && ref.credential.type !== \"accessToken\") {\n          invalid(\n            `Unknown authority credential type '${String(\n              (ref.credential as { type?: unknown }).type\n            )}'.`\n          )\n        }\n        assertNonBlank(ref.credential.id, \"Authority credential id\")\n      }\n      return\n    case \"trustedPrimitive\":\n      assertTrustedPrimitiveKind(ref.primitive.kind, \"Authority primitive kind\")\n      assertNonBlank(ref.primitive.id, \"Authority primitive id\")\n      assertNonBlank(ref.primitive.runId, \"Authority primitive run id\")\n      return\n    case \"delegated\":\n      if (ref.delegation.kind !== \"share\") {\n        invalid(\n          `Unknown authority delegation kind '${String(\n            (ref.delegation as { kind?: unknown }).kind\n          )}'.`\n        )\n      }\n      assertNonBlank(ref.delegation.grantId, \"Authority delegation grant id\")\n      assertNonBlank(ref.delegation.sessionId, \"Authority delegation session id\")\n      return\n    case \"kernel\":\n      assertKernelOperation(ref.operation, \"Authority kernel operation\")\n      return\n    case \"disabled\":\n      return\n    default:\n      invalid(`Unknown authorization reference type '${String((ref as { type?: unknown }).type)}'.`)\n  }\n}\n\nfunction assertExecutorAuthority(record: ExecutionRecord): void {\n  const { executor, authorizationRef, requestedBy, source } = record\n\n  switch (executor.type) {\n    case \"request\": {\n      if (source.type !== \"http\" || source.requestId !== executor.requestId) {\n        invalid(\"Request executions require a matching HTTP source request id.\")\n      }\n      if (authorizationRef.type === \"principal\") {\n        if (!principalsEqual(requestedBy, authorizationRef.principal)) {\n          invalid(\"Request authority must match its requested-by principal.\")\n        }\n        return\n      }\n      if (authorizationRef.type === \"disabled\") {\n        if (requestedBy !== undefined) {\n          invalid(\"Auth-disabled request executions cannot have a requested-by principal.\")\n        }\n        return\n      }\n      if (authorizationRef.type === \"delegated\") {\n        if (requestedBy !== undefined) {\n          invalid(\"Delegated request executions cannot have a requested-by principal.\")\n        }\n        return\n      }\n      invalid(\"Request executions require principal, delegated, or explicitly disabled authority.\")\n      break\n    }\n    case \"primitive\": {\n      if (authorizationRef.type !== \"trustedPrimitive\") {\n        invalid(\"Primitive executions require trusted primitive authority.\")\n      }\n      if (\n        authorizationRef.primitive.kind !== executor.kind ||\n        authorizationRef.primitive.runId !== executor.runId\n      ) {\n        invalid(\"Trusted primitive authority must match the executor kind and run id.\")\n      }\n      return\n    }\n    case \"agent\": {\n      if (source.type !== \"execution\") {\n        invalid(\"Agent executions require a parent execution source.\")\n      }\n      if (\n        authorizationRef.type === \"principal\" &&\n        authorizationRef.principal.type === \"serviceAccount\" &&\n        authorizationRef.credential === undefined\n      ) {\n        return\n      }\n      if (\n        authorizationRef.type === \"principal\" &&\n        authorizationRef.principal.type === \"user\" &&\n        authorizationRef.credential !== undefined\n      ) {\n        return\n      }\n      if (authorizationRef.type === \"disabled\") return\n      invalid(\n        \"Agent executions require managed service-account, credentialed user, or explicitly disabled authority.\"\n      )\n      break\n    }\n    case \"kernel\": {\n      if (\n        authorizationRef.type !== \"kernel\" ||\n        !kernelOperationsEqual(authorizationRef.operation, executor.operation)\n      ) {\n        invalid(\"Kernel authority must match the executor operation.\")\n      }\n      if (requestedBy !== undefined) {\n        invalid(\"Kernel executions cannot have a requested-by principal.\")\n      }\n      return\n    }\n  }\n}\n\nasync function validatePrincipal(\n  principal: AuthorizablePrincipal | undefined,\n  projectId: string,\n  label: string,\n  lookup: ExecutionValidationLookup\n): Promise<void> {\n  if (!principal) return\n\n  const record =\n    principal.type === \"user\"\n      ? await lookup.auth.users.getById({ projectId, id: principal.id })\n      : await lookup.auth.serviceAccounts.getById({ projectId, id: principal.id })\n  if (!record) {\n    throw new ExecutionStorageError(\n      \"missing_principal\",\n      `[Sixb] ${label} '${principal.id}' does not exist in project '${projectId}'.`\n    )\n  }\n}\n\nasync function validateCredential(\n  record: ExecutionRecord,\n  lookup: ExecutionValidationLookup\n): Promise<void> {\n  if (record.authorizationRef.type !== \"principal\" || !record.authorizationRef.credential) return\n\n  const { principal, credential } = record.authorizationRef\n  if (credential.type === \"session\") {\n    const session = await lookup.auth.sessions.getById({\n      projectId: record.projectId,\n      id: credential.id,\n    })\n    if (!session) {\n      throw new ExecutionStorageError(\n        \"missing_credential\",\n        `[Sixb] Authority session '${credential.id}' does not exist in project '${record.projectId}'.`\n      )\n    }\n    if (principal.type !== \"user\" || session.userId !== principal.id) {\n      throw new ExecutionStorageError(\n        \"invalid_credential\",\n        `[Sixb] Authority session '${credential.id}' does not belong to principal '${principal.id}'.`\n      )\n    }\n    return\n  }\n\n  const token = await lookup.auth.accessTokens.getById({\n    projectId: record.projectId,\n    id: credential.id,\n  })\n  if (!token) {\n    throw new ExecutionStorageError(\n      \"missing_credential\",\n      `[Sixb] Authority access token '${credential.id}' does not exist in project '${record.projectId}'.`\n    )\n  }\n  if (!principalsEqual(token.subject, principal)) {\n    throw new ExecutionStorageError(\n      \"invalid_credential\",\n      `[Sixb] Authority access token '${credential.id}' does not belong to principal '${principal.id}'.`\n    )\n  }\n}\n\nasync function validateDelegation(\n  record: ExecutionRecord,\n  lookup: ExecutionValidationLookup\n): Promise<void> {\n  if (record.authorizationRef.type !== \"delegated\") return\n  const { grantId, sessionId } = record.authorizationRef.delegation\n  const session = await lookup.getShareSession({ projectId: record.projectId, id: sessionId })\n  if (!session) {\n    throw new ExecutionStorageError(\n      \"missing_credential\",\n      `[Sixb] Authority shared session '${sessionId}' does not exist in project '${record.projectId}'.`\n    )\n  }\n  if (session.grantId !== grantId) {\n    throw new ExecutionStorageError(\n      \"invalid_credential\",\n      `[Sixb] Authority shared session '${sessionId}' does not belong to grant '${grantId}'.`\n    )\n  }\n}\n\nasync function validateParent(\n  record: ExecutionRecord,\n  lookup: ExecutionValidationLookup\n): Promise<void> {\n  if (record.source.type !== \"execution\") return\n  const parentExecutionId = record.source.executionId\n\n  const parent = await lookup.getExecution({\n    projectId: record.projectId,\n    id: parentExecutionId,\n  })\n  if (!parent) {\n    throw new ExecutionStorageError(\n      \"missing_parent_execution\",\n      `[Sixb] Parent execution '${parentExecutionId}' does not exist in project '${record.projectId}'.`\n    )\n  }\n  if (parent.correlationId !== record.correlationId) {\n    throw new ExecutionStorageError(\n      \"invalid_parent_execution\",\n      `[Sixb] Child execution '${record.id}' must preserve its parent correlation id.`\n    )\n  }\n  if (!principalsEqual(parent.requestedBy, record.requestedBy)) {\n    throw new ExecutionStorageError(\n      \"invalid_parent_execution\",\n      `[Sixb] Child execution '${record.id}' must preserve its parent requested-by principal.`\n    )\n  }\n  if (!isDeepStrictEqual(parent.requesterGroupIds, record.requesterGroupIds)) {\n    throw new ExecutionStorageError(\n      \"invalid_parent_execution\",\n      `[Sixb] Child execution '${record.id}' must preserve its parent requester-group snapshot.`\n    )\n  }\n  if (\n    record.executor.type === \"agent\" &&\n    isInheritedAgentAuthority(record.authorizationRef) &&\n    !isDeepStrictEqual(parent.authorizationRef, record.authorizationRef)\n  ) {\n    throw new ExecutionStorageError(\n      \"invalid_parent_execution\",\n      `[Sixb] Child Agent execution '${record.id}' must inherit its parent's authorization reference.`\n    )\n  }\n}\n\nfunction isInheritedAgentAuthority(ref: AuthorizationRef): boolean {\n  return (\n    ref.type === \"disabled\" ||\n    (ref.type === \"principal\" && ref.principal.type === \"user\" && ref.credential !== undefined)\n  )\n}\n\nfunction assertPrincipal(principal: AuthorizablePrincipal, label: string): void {\n  if (principal.type !== \"user\" && principal.type !== \"serviceAccount\") {\n    invalid(`${label} has unsupported type '${String((principal as { type?: unknown }).type)}'.`)\n  }\n  assertNonBlank(principal.id, `${label} id`)\n}\n\nfunction assertKernelOperation(operation: KernelOperation, label: string): void {\n  if (operation.type !== \"ontology.recover\" && operation.type !== \"ontology.indexVectors\") {\n    invalid(`${label} has unsupported type '${String((operation as { type?: unknown }).type)}'.`)\n  }\n  assertNonBlank(kernelOperationId(operation), `${label} operation id`)\n}\n\nfunction assertTrustedPrimitiveKind(value: string, label: string): void {\n  if (!TRUSTED_PRIMITIVE_KINDS.has(value)) {\n    invalid(`${label} '${value}' is not supported.`)\n  }\n}\n\nfunction assertNonBlank(value: string, label: string): void {\n  if (typeof value !== \"string\" || !value.trim()) {\n    invalid(`${label} must be a non-empty string.`)\n  }\n}\n\nfunction assertValidDate(value: Date, label: string): void {\n  if (!(value instanceof Date) || !Number.isFinite(value.getTime())) {\n    invalid(`${label} must be a valid date.`)\n  }\n}\n\nfunction principalsEqual(\n  left: AuthorizablePrincipal | undefined,\n  right: AuthorizablePrincipal | undefined\n): boolean {\n  return left?.type === right?.type && left?.id === right?.id\n}\n\nfunction kernelOperationsEqual(left: KernelOperation, right: KernelOperation): boolean {\n  return left.type === right.type && kernelOperationId(left) === kernelOperationId(right)\n}\n\nfunction invalid(message: string): never {\n  throw new ExecutionStorageError(\"invalid_input\", `[Sixb] ${message}`)\n}\n\nconst TRUSTED_PRIMITIVE_KINDS = new Set([\n  \"action\",\n  \"pipeline\",\n  \"projection\",\n  \"rule\",\n  \"sync\",\n  \"webhook\",\n  \"workflow\",\n])\n"
-  ],
-  "mappings": ";;;;;;;;;;AAUO,MAAM,+BAA8B,MAAM;AAAA,EAIpC;AAAA,EAHF,OAAO;AAAA,EAEhB,WAAW,CACA,MACT,SACA,UAAwB,CAAC,GACzB;AAAA,IACA,MAAM,SAAS,OAAO;AAAA,IAJb;AAAA;AAMb;;;ACpBA;AA8BA,eAAsB,uBAAsB,CAC1C,OACA,QAC0B;AAAA,EAC1B,IAAI,SAAS,MAAM;AAAA,EACnB,IAAI,WAAW,aAAa,MAAM,OAAO,SAAS,aAAa;AAAA,IAC7D,MAAM,SAAS,MAAM,OAAO,aAAa;AAAA,MACvC,WAAW,MAAM;AAAA,MACjB,IAAI,MAAM,OAAO;AAAA,IACnB,CAAC;AAAA,IACD,SAAS,QAAQ;AAAA,EACnB,EAAO,SAAI,WAAW,aAAa,MAAM,aAAa;AAAA,IACpD,SAAS,MAAM,0BAA0B;AAAA,MACvC,MAAM,OAAO;AAAA,MACb,WAAW,MAAM;AAAA,MACjB,WAAW,MAAM;AAAA,IACnB,CAAC;AAAA,EACH;AAAA,EACA,MAAM,SAAS,0BAAyB,KAAK,OAAO,mBAAmB,UAAU,CAAC,EAAE,CAAC;AAAA,EACrF,MAAM,mCAAkC,QAAQ,MAAM;AAAA,EACtD,OAAO;AAAA;AAGF,SAAS,yBAAwB,CACtC,OACA,YAAkB,IAAI,MACL;AAAA,EACjB,MAAM,SAA0B;AAAA,IAC9B,IAAI,MAAM;AAAA,IACV,WAAW,MAAM;AAAA,IACjB,mBAAmB,2BAA2B,MAAM,qBAAqB,CAAC,CAAC;AAAA,OACvE,MAAM,gBAAgB,YAAY,CAAC,IAAI,EAAE,aAAa,gBAAgB,MAAM,WAAW,EAAE;AAAA,IAC7F,UAAU,gBAAgB,MAAM,QAAQ;AAAA,IACxC,QAAQ,gBAAgB,MAAM,MAAM;AAAA,IACpC,eAAe,MAAM;AAAA,IACrB,kBAAkB,gBAAgB,MAAM,gBAAgB;AAAA,IACxD,WAAW,IAAI,KAAK,SAAS;AAAA,EAC/B;AAAA,EAEA,kBAAkB,MAAM;AAAA,EACxB,wBAAwB,MAAM;AAAA,EAC9B,OAAO;AAAA;AAGT,eAAsB,kCAAiC,CACrD,QACA,QACe;AAAA,EACf,MAAM,kBAAkB,OAAO,aAAa,OAAO,WAAW,0BAA0B,MAAM;AAAA,EAE9F,IAAI,OAAO,iBAAiB,SAAS,aAAa;AAAA,IAChD,MAAM,kBACJ,OAAO,iBAAiB,WACxB,OAAO,WACP,uBACA,MACF;AAAA,IACA,MAAM,mBAAmB,QAAQ,MAAM;AAAA,EACzC;AAAA,EACA,IAAI,OAAO,iBAAiB,SAAS,aAAa;AAAA,IAChD,MAAM,mBAAmB,QAAQ,MAAM;AAAA,EACzC;AAAA,EAEA,MAAM,eAAe,QAAQ,MAAM;AAAA;AAG9B,SAAS,oBAAoB,CAAC,QAA0C;AAAA,EAC7E,OAAO,gBAAgB,MAAM;AAAA;AAG/B,SAAS,iBAAiB,CAAC,QAA+B;AAAA,EACxD,eAAe,OAAO,IAAI,cAAc;AAAA,EACxC,eAAe,OAAO,WAAW,sBAAsB;AAAA,EACvD,eAAe,OAAO,eAAe,0BAA0B;AAAA,EAC/D,gBAAgB,OAAO,WAAW,qBAAqB;AAAA,EAEvD,IAAI,OAAO,aAAa;AAAA,IACtB,gBAAgB,OAAO,aAAa,wBAAwB;AAAA,EAC9D;AAAA,EAEA,eAAe,OAAO,QAAQ;AAAA,EAC9B,aAAa,OAAO,MAAM;AAAA,EAC1B,uBAAuB,OAAO,gBAAgB;AAAA;AAGhD,SAAS,cAAc,CAAC,UAA0C;AAAA,EAChE,QAAQ,SAAS;AAAA,SACV;AAAA,MACH,eAAe,SAAS,WAAW,qBAAqB;AAAA,MACxD;AAAA,SACG;AAAA,MACH,2BAA2B,SAAS,MAAM,yBAAyB;AAAA,MACnE,eAAe,SAAS,OAAO,2BAA2B;AAAA,MAC1D;AAAA,SACG;AAAA,MACH,eAAe,SAAS,OAAO,uBAAuB;AAAA,MACtD;AAAA,SACG;AAAA,MACH,sBAAsB,SAAS,WAAW,2BAA2B;AAAA,MACrE;AAAA;AAAA,MAEA,QAAQ,oCAAoC,OAAQ,SAAgC,IAAI,KAAK;AAAA;AAAA;AAInG,SAAS,YAAY,CAAC,QAAsC;AAAA,EAC1D,QAAQ,OAAO;AAAA,SACR;AAAA,MACH,eAAe,OAAO,UAAU,4BAA4B;AAAA,MAC5D;AAAA,SACG;AAAA,MACH,eAAe,OAAO,WAAW,6BAA6B;AAAA,MAC9D;AAAA,SACG;AAAA,MACH,eAAe,OAAO,YAAY,8BAA8B;AAAA,MAChE;AAAA,SACG;AAAA,SACA;AAAA,MACH,eAAe,OAAO,SAAS,2BAA2B;AAAA,MAC1D;AAAA,SACG;AAAA,MACH,eAAe,OAAO,WAAW,6BAA6B;AAAA,MAC9D,eAAe,OAAO,WAAW,qCAAqC;AAAA,MACtE;AAAA,SACG;AAAA,MACH,eAAe,OAAO,aAAa,+BAA+B;AAAA,MAClE;AAAA;AAAA,MAEA,QACE,0BAA0B,OAAQ,OAA8B,IAAI,oBACtE;AAAA;AAAA;AAIN,SAAS,sBAAsB,CAAC,KAA6B;AAAA,EAC3D,QAAQ,IAAI;AAAA,SACL;AAAA,MACH,gBAAgB,IAAI,WAAW,qBAAqB;AAAA,MACpD,IAAI,IAAI,YAAY;AAAA,QAClB,IAAI,IAAI,WAAW,SAAS,aAAa,IAAI,WAAW,SAAS,eAAe;AAAA,UAC9E,QACE,sCAAsC,OACnC,IAAI,WAAkC,IACzC,KACF;AAAA,QACF;AAAA,QACA,eAAe,IAAI,WAAW,IAAI,yBAAyB;AAAA,MAC7D;AAAA,MACA;AAAA,SACG;AAAA,MACH,2BAA2B,IAAI,UAAU,MAAM,0BAA0B;AAAA,MACzE,eAAe,IAAI,UAAU,IAAI,wBAAwB;AAAA,MACzD,eAAe,IAAI,UAAU,OAAO,4BAA4B;AAAA,MAChE;AAAA,SACG;AAAA,MACH,IAAI,IAAI,WAAW,SAAS,SAAS;AAAA,QACnC,QACE,sCAAsC,OACnC,IAAI,WAAkC,IACzC,KACF;AAAA,MACF;AAAA,MACA,eAAe,IAAI,WAAW,SAAS,+BAA+B;AAAA,MACtE,eAAe,IAAI,WAAW,WAAW,iCAAiC;AAAA,MAC1E;AAAA,SACG;AAAA,MACH,sBAAsB,IAAI,WAAW,4BAA4B;AAAA,MACjE;AAAA,SACG;AAAA,MACH;AAAA;AAAA,MAEA,QAAQ,yCAAyC,OAAQ,IAA2B,IAAI,KAAK;AAAA;AAAA;AAInG,SAAS,uBAAuB,CAAC,QAA+B;AAAA,EAC9D,QAAQ,UAAU,kBAAkB,aAAa,WAAW;AAAA,EAE5D,QAAQ,SAAS;AAAA,SACV,WAAW;AAAA,MACd,IAAI,OAAO,SAAS,UAAU,OAAO,cAAc,SAAS,WAAW;AAAA,QACrE,QAAQ,+DAA+D;AAAA,MACzE;AAAA,MACA,IAAI,iBAAiB,SAAS,aAAa;AAAA,QACzC,IAAI,CAAC,gBAAgB,aAAa,iBAAiB,SAAS,GAAG;AAAA,UAC7D,QAAQ,0DAA0D;AAAA,QACpE;AAAA,QACA;AAAA,MACF;AAAA,MACA,IAAI,iBAAiB,SAAS,YAAY;AAAA,QACxC,IAAI,gBAAgB,WAAW;AAAA,UAC7B,QAAQ,wEAAwE;AAAA,QAClF;AAAA,QACA;AAAA,MACF;AAAA,MACA,IAAI,iBAAiB,SAAS,aAAa;AAAA,QACzC,IAAI,gBAAgB,WAAW;AAAA,UAC7B,QAAQ,oEAAoE;AAAA,QAC9E;AAAA,QACA;AAAA,MACF;AAAA,MACA,QAAQ,oFAAoF;AAAA,MAC5F;AAAA,IACF;AAAA,SACK,aAAa;AAAA,MAChB,IAAI,iBAAiB,SAAS,oBAAoB;AAAA,QAChD,QAAQ,2DAA2D;AAAA,MACrE;AAAA,MACA,IACE,iBAAiB,UAAU,SAAS,SAAS,QAC7C,iBAAiB,UAAU,UAAU,SAAS,OAC9C;AAAA,QACA,QAAQ,sEAAsE;AAAA,MAChF;AAAA,MACA;AAAA,IACF;AAAA,SACK,SAAS;AAAA,MACZ,IAAI,OAAO,SAAS,aAAa;AAAA,QAC/B,QAAQ,qDAAqD;AAAA,MAC/D;AAAA,MACA,IACE,iBAAiB,SAAS,eAC1B,iBAAiB,UAAU,SAAS,oBACpC,iBAAiB,eAAe,WAChC;AAAA,QACA;AAAA,MACF;AAAA,MACA,IACE,iBAAiB,SAAS,eAC1B,iBAAiB,UAAU,SAAS,UACpC,iBAAiB,eAAe,WAChC;AAAA,QACA;AAAA,MACF;AAAA,MACA,IAAI,iBAAiB,SAAS;AAAA,QAAY;AAAA,MAC1C,QACE,wGACF;AAAA,MACA;AAAA,IACF;AAAA,SACK,UAAU;AAAA,MACb,IACE,iBAAiB,SAAS,YAC1B,CAAC,sBAAsB,iBAAiB,WAAW,SAAS,SAAS,GACrE;AAAA,QACA,QAAQ,qDAAqD;AAAA,MAC/D;AAAA,MACA,IAAI,gBAAgB,WAAW;AAAA,QAC7B,QAAQ,yDAAyD;AAAA,MACnE;AAAA,MACA;AAAA,IACF;AAAA;AAAA;AAIJ,eAAe,iBAAiB,CAC9B,WACA,WACA,OACA,QACe;AAAA,EACf,IAAI,CAAC;AAAA,IAAW;AAAA,EAEhB,MAAM,SACJ,UAAU,SAAS,SACf,MAAM,OAAO,KAAK,MAAM,QAAQ,EAAE,WAAW,IAAI,UAAU,GAAG,CAAC,IAC/D,MAAM,OAAO,KAAK,gBAAgB,QAAQ,EAAE,WAAW,IAAI,UAAU,GAAG,CAAC;AAAA,EAC/E,IAAI,CAAC,QAAQ;AAAA,IACX,MAAM,IAAI,uBACR,qBACA,UAAU,UAAU,UAAU,kCAAkC,aAClE;AAAA,EACF;AAAA;AAGF,eAAe,kBAAkB,CAC/B,QACA,QACe;AAAA,EACf,IAAI,OAAO,iBAAiB,SAAS,eAAe,CAAC,OAAO,iBAAiB;AAAA,IAAY;AAAA,EAEzF,QAAQ,WAAW,eAAe,OAAO;AAAA,EACzC,IAAI,WAAW,SAAS,WAAW;AAAA,IACjC,MAAM,UAAU,MAAM,OAAO,KAAK,SAAS,QAAQ;AAAA,MACjD,WAAW,OAAO;AAAA,MAClB,IAAI,WAAW;AAAA,IACjB,CAAC;AAAA,IACD,IAAI,CAAC,SAAS;AAAA,MACZ,MAAM,IAAI,uBACR,sBACA,6BAA6B,WAAW,kCAAkC,OAAO,aACnF;AAAA,IACF;AAAA,IACA,IAAI,UAAU,SAAS,UAAU,QAAQ,WAAW,UAAU,IAAI;AAAA,MAChE,MAAM,IAAI,uBACR,sBACA,6BAA6B,WAAW,qCAAqC,UAAU,MACzF;AAAA,IACF;AAAA,IACA;AAAA,EACF;AAAA,EAEA,MAAM,QAAQ,MAAM,OAAO,KAAK,aAAa,QAAQ;AAAA,IACnD,WAAW,OAAO;AAAA,IAClB,IAAI,WAAW;AAAA,EACjB,CAAC;AAAA,EACD,IAAI,CAAC,OAAO;AAAA,IACV,MAAM,IAAI,uBACR,sBACA,kCAAkC,WAAW,kCAAkC,OAAO,aACxF;AAAA,EACF;AAAA,EACA,IAAI,CAAC,gBAAgB,MAAM,SAAS,SAAS,GAAG;AAAA,IAC9C,MAAM,IAAI,uBACR,sBACA,kCAAkC,WAAW,qCAAqC,UAAU,MAC9F;AAAA,EACF;AAAA;AAGF,eAAe,kBAAkB,CAC/B,QACA,QACe;AAAA,EACf,IAAI,OAAO,iBAAiB,SAAS;AAAA,IAAa;AAAA,EAClD,QAAQ,SAAS,cAAc,OAAO,iBAAiB;AAAA,EACvD,MAAM,UAAU,MAAM,OAAO,gBAAgB,EAAE,WAAW,OAAO,WAAW,IAAI,UAAU,CAAC;AAAA,EAC3F,IAAI,CAAC,SAAS;AAAA,IACZ,MAAM,IAAI,uBACR,sBACA,oCAAoC,yCAAyC,OAAO,aACtF;AAAA,EACF;AAAA,EACA,IAAI,QAAQ,YAAY,SAAS;AAAA,IAC/B,MAAM,IAAI,uBACR,sBACA,oCAAoC,wCAAwC,WAC9E;AAAA,EACF;AAAA;AAGF,eAAe,cAAc,CAC3B,QACA,QACe;AAAA,EACf,IAAI,OAAO,OAAO,SAAS;AAAA,IAAa;AAAA,EACxC,MAAM,oBAAoB,OAAO,OAAO;AAAA,EAExC,MAAM,SAAS,MAAM,OAAO,aAAa;AAAA,IACvC,WAAW,OAAO;AAAA,IAClB,IAAI;AAAA,EACN,CAAC;AAAA,EACD,IAAI,CAAC,QAAQ;AAAA,IACX,MAAM,IAAI,uBACR,4BACA,4BAA4B,iDAAiD,OAAO,aACtF;AAAA,EACF;AAAA,EACA,IAAI,OAAO,kBAAkB,OAAO,eAAe;AAAA,IACjD,MAAM,IAAI,uBACR,4BACA,2BAA2B,OAAO,8CACpC;AAAA,EACF;AAAA,EACA,IAAI,CAAC,gBAAgB,OAAO,aAAa,OAAO,WAAW,GAAG;AAAA,IAC5D,MAAM,IAAI,uBACR,4BACA,2BAA2B,OAAO,sDACpC;AAAA,EACF;AAAA,EACA,IAAI,CAAC,kBAAkB,OAAO,mBAAmB,OAAO,iBAAiB,GAAG;AAAA,IAC1E,MAAM,IAAI,uBACR,4BACA,2BAA2B,OAAO,wDACpC;AAAA,EACF;AAAA,EACA,IACE,OAAO,SAAS,SAAS,WACzB,0BAA0B,OAAO,gBAAgB,KACjD,CAAC,kBAAkB,OAAO,kBAAkB,OAAO,gBAAgB,GACnE;AAAA,IACA,MAAM,IAAI,uBACR,4BACA,iCAAiC,OAAO,wDAC1C;AAAA,EACF;AAAA;AAGF,SAAS,yBAAyB,CAAC,KAAgC;AAAA,EACjE,OACE,IAAI,SAAS,cACZ,IAAI,SAAS,eAAe,IAAI,UAAU,SAAS,UAAU,IAAI,eAAe;AAAA;AAIrF,SAAS,eAAe,CAAC,WAAkC,OAAqB;AAAA,EAC9E,IAAI,UAAU,SAAS,UAAU,UAAU,SAAS,kBAAkB;AAAA,IACpE,QAAQ,GAAG,+BAA+B,OAAQ,UAAiC,IAAI,KAAK;AAAA,EAC9F;AAAA,EACA,eAAe,UAAU,IAAI,GAAG,UAAU;AAAA;AAG5C,SAAS,qBAAqB,CAAC,WAA4B,OAAqB;AAAA,EAC9E,IAAI,UAAU,SAAS,sBAAsB,UAAU,SAAS,yBAAyB;AAAA,IACvF,QAAQ,GAAG,+BAA+B,OAAQ,UAAiC,IAAI,KAAK;AAAA,EAC9F;AAAA,EACA,eAAe,kBAAkB,SAAS,GAAG,GAAG,oBAAoB;AAAA;AAGtE,SAAS,0BAA0B,CAAC,OAAe,OAAqB;AAAA,EACtE,IAAI,CAAC,wBAAwB,IAAI,KAAK,GAAG;AAAA,IACvC,QAAQ,GAAG,UAAU,0BAA0B;AAAA,EACjD;AAAA;AAGF,SAAS,cAAc,CAAC,OAAe,OAAqB;AAAA,EAC1D,IAAI,OAAO,UAAU,YAAY,CAAC,MAAM,KAAK,GAAG;AAAA,IAC9C,QAAQ,GAAG,mCAAmC;AAAA,EAChD;AAAA;AAGF,SAAS,eAAe,CAAC,OAAa,OAAqB;AAAA,EACzD,IAAI,EAAE,iBAAiB,SAAS,CAAC,OAAO,SAAS,MAAM,QAAQ,CAAC,GAAG;AAAA,IACjE,QAAQ,GAAG,6BAA6B;AAAA,EAC1C;AAAA;AAGF,SAAS,eAAe,CACtB,MACA,OACS;AAAA,EACT,OAAO,MAAM,SAAS,OAAO,QAAQ,MAAM,OAAO,OAAO;AAAA;AAG3D,SAAS,qBAAqB,CAAC,MAAuB,OAAiC;AAAA,EACrF,OAAO,KAAK,SAAS,MAAM,QAAQ,kBAAkB,IAAI,MAAM,kBAAkB,KAAK;AAAA;AAGxF,SAAS,OAAO,CAAC,SAAwB;AAAA,EACvC,MAAM,IAAI,uBAAsB,iBAAiB,UAAU,SAAS;AAAA;AAGtE,IAAM,0BAA0B,IAAI,IAAI;AAAA,EACtC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,CAAC;",
-  "debugId": "12B08F503967185464756E2164756E21",
-  "names": []
-}

package/dist/chunk-wwdfe68s.js

@@ -1,128 +0,0 @@
-// @bun
-import {
-  requireAccountingCapabilities,
-  createAiModelCallLimitController2,
-  AiModelCallRecorder2,
-  enqueueAiModelCallRecovery2
-} from "./chunk-7mbzgd9m.js";
-import {
-  executionRecordInputFromRuntime,
-  ensureExecutionRecord2
-} from "./chunk-nre82s12.js";
-
-// src/runtime/ontology-mutations.ts
-var ontologyMutationRuntimeKey = Symbol("sixb.ontologyMutationRuntime");
-function registerOntologyMutationRuntime2(owner, runtime) {
-  const registered = owner[ontologyMutationRuntimeKey];
-  if (registered && registered !== runtime) {
-    throw new Error("[Sixb] Ontology mutation runtime is already registered for this owner.");
-  }
-  Object.defineProperty(owner, ontologyMutationRuntimeKey, {
-    configurable: false,
-    enumerable: true,
-    value: runtime,
-    writable: false
-  });
-}
-function getOntologyMutationRuntime2(owner) {
-  const runtime = owner[ontologyMutationRuntimeKey];
-  if (runtime)
-    return runtime;
-  throw new Error("[Sixb] Ontology mutation runtime is not registered for this runtime context.");
-}
-function shareOntologyMutationRuntime2(source, target) {
-  registerOntologyMutationRuntime2(target, getOntologyMutationRuntime2(source));
-}
-function createOntologyMutationRuntime2(input) {
-  const runtime = {
-    getProjectionSource: (source) => input.materializer.projections.getActive(source),
-    commitEdits: (command) => commitAndNotify(() => input.materializer.edits.commit(command), input.notifyCommittedFacts),
-    replaceProjection: (command) => commitAndNotify(() => input.materializer.projections.replace(command), input.notifyCommittedFacts),
-    finishProjection: (command) => input.materializer.projections.finishRun(command),
-    appendTelemetry: (command) => commitAndNotify(() => input.materializer.telemetry.append(command), input.notifyCommittedFacts)
-  };
-  return Object.freeze(runtime);
-}
-async function commitAndNotify(commit, notify) {
-  const result = await commit();
-  if (result.eventCount > 0)
-    notifyWithoutAffectingCommit(notify);
-  return result;
-}
-function notifyWithoutAffectingCommit(notify) {
-  try {
-    notify();
-  } catch (error) {
-    console.error("[Sixb] Failed to wake the ontology outbox dispatcher:", error);
-  }
-}
-
-// src/models/execution/session.ts
-class ModelExecutionSession {
-  runtime;
-  execution;
-  binding;
-  recorder;
-  constructor(runtime, execution) {
-    this.runtime = runtime;
-    this.execution = execution;
-  }
-  bind(input) {
-    if (this.binding)
-      throw new Error("[SixbModels] Execution attempt is already bound.");
-    this.binding = { ...input };
-  }
-  signal(signal) {
-    const binding = this.requireBinding();
-    return signal ? AbortSignal.any([binding.signal, signal]) : binding.signal;
-  }
-  async admitEmbeddingCall(admit) {
-    const admission = this.requireBinding().embeddingAdmission;
-    if (admission)
-      await admission(admit);
-    else
-      await admit();
-  }
-  accounting() {
-    const { accounting } = this.requireBinding();
-    this.recorder ??= accounting ? Promise.resolve(accounting) : this.createRecorder();
-    return this.recorder;
-  }
-  requireBinding() {
-    if (!this.binding) {
-      throw new Error("[SixbModels] Model calls require a bound request or worker execution attempt.");
-    }
-    return this.binding;
-  }
-  async createRecorder() {
-    const runtime = this.runtime;
-    const execution = this.execution;
-    const { attempt } = this.requireBinding();
-    const storage = {
-      ...requireAccountingCapabilities(runtime.storage),
-      transaction: runtime.storage.transaction.bind(runtime.storage)
-    };
-    const { requesterGroupIds } = await ensureExecutionRecord2(runtime.storage.executions, executionRecordInputFromRuntime({
-      execution,
-      runtimeAuthorization: runtime.runtimeAuthorization
-    }));
-    return new AiModelCallRecorder2({
-      storage,
-      projectId: runtime.projectId,
-      executionId: execution.id,
-      attempt,
-      requesterGroupIds,
-      limits: createAiModelCallLimitController2({
-        storage,
-        projectId: runtime.projectId,
-        requestedBy: execution.requestedBy,
-        requesterGroupIds
-      }),
-      recoverAiModelCall: (input) => enqueueAiModelCallRecovery2(runtime.queues.agents, input)
-    });
-  }
-}
-
-export { registerOntologyMutationRuntime2, getOntologyMutationRuntime2, shareOntologyMutationRuntime2, createOntologyMutationRuntime2, ModelExecutionSession };
-
-//# debugId=68E7C49FC6F738D764756E2164756E21