@sixb/core 0.1.20 → 0.1.22

package/dist/chunk-d09tj99x.js.map

@@ -1,12 +0,0 @@
-{
-  "version": 3,
-  "sources": ["../src/ontology/vector-profiles.ts", "../src/ontology/registry.ts", "../src/ontology/builders.ts"],
-  "sourcesContent": [
-    "import type { ObjectVectorSearchProfile } from \"./types\"\n\n/** Metadata-only copy. Executable provider objects and credentials never leave the host. */\nexport function snapshotVectorProfiles(\n  profiles: Readonly<Record<string, ObjectVectorSearchProfile>>\n): Readonly<Record<string, ObjectVectorSearchProfile>> {\n  const snapshot: Record<string, ObjectVectorSearchProfile> = Object.create(null)\n  for (const [name, profileDefinition] of Object.entries(profiles)) {\n    const { providerId, modelId, definition } = profileDefinition.model\n    snapshot[name] = Object.freeze({\n      source: Object.freeze([...profileDefinition.source]),\n      model: Object.freeze({\n        providerId,\n        modelId,\n        definition: Object.freeze({\n          kind: \"embedding\" as const,\n          providerId,\n          modelId,\n          dimensions: definition.dimensions,\n          ...(definition.inputMode ? { inputMode: definition.inputMode } : {}),\n          ...(definition.representation\n            ? {\n                representation: Object.freeze({\n                  name: definition.representation.name,\n                  ...(definition.representation.version === undefined\n                    ? {}\n                    : { version: definition.representation.version }),\n                }),\n              }\n            : {}),\n        }),\n      }),\n    })\n  }\n  return Object.freeze(snapshot)\n}\n",
-    "/**\n * Standalone ontology registry — owns all type state and resolution logic.\n *\n * Zero infrastructure dependencies: imports only from the `ontology/` module.\n * Other modules depend on its read-only catalog instead of coupling to the full\n * `Sixb` facade.\n */\n\nimport {\n  formatUnknownObjectTypeMessage,\n  OntologyNotFoundError,\n  OntologyValidationError,\n} from \"./errors\"\nimport type { ObjectTypeWithPropertyTokens } from \"./tokens\"\nimport { createLinkTokenMap, createPropertyTokenMap } from \"./tokens\"\nimport type { ObjectType, Schema, ValueType } from \"./types\"\nimport {\n  validatePrimaryProperties,\n  validatePropertyDefinitions,\n  validateQueryMetadata,\n} from \"./validation\"\nimport { snapshotVectorProfiles } from \"./vector-profiles\"\n\n// ── Input types ──────────────────────────────────────────────\n\n/** Typed wrapper used by `createSixb` to register full ontology documents. */\nexport type OntologyDocumentInput = {\n  readonly id: string\n  readonly version: string\n  readonly objectTypes: readonly ObjectTypeWithPropertyTokens[]\n  readonly valueTypes?: readonly ValueType[]\n}\n\n/**\n * Runtime accepts either full ontology documents or individual object types.\n * This keeps setup flexible while preserving strict typing.\n */\nexport type OntologySource = ObjectTypeWithPropertyTokens | OntologyDocumentInput\n\nexport interface OntologyRegistryOptions {\n  readonly sources: readonly OntologySource[]\n}\n\n/** Read-only access to the host's validated ontology definitions and type graph. */\nexport interface OntologyDefinitionCatalog {\n  listObjectTypes(): readonly ObjectTypeWithPropertyTokens[]\n  getObjectTypeById(objectTypeId: string): ObjectTypeWithPropertyTokens | null\n  resolveObjectType(objectTypeId: string): ObjectTypeWithPropertyTokens\n  getPrimaryPropertyId(objectTypeId: string): string\n  listSubTypes(objectTypeId: string): string[]\n  listAncestorChain(objectType: ObjectType): readonly ObjectTypeWithPropertyTokens[]\n  isValidLinkTarget(expected: string | string[], actual: string): boolean\n  getObjectTypesById(): ReadonlyMap<string, ObjectTypeWithPropertyTokens>\n  getValueTypesById(): ReadonlyMap<string, ValueType>\n  getPrimaryByTypeId(): ReadonlyMap<string, string>\n}\n\n// ── Private helpers ──────────────────────────────────────────\n\nfunction isOntologyDocumentSource(\n  source: OntologySource\n): source is Exclude<OntologySource, ObjectTypeWithPropertyTokens> {\n  return \"objectTypes\" in source\n}\n\n/**\n * Recursively walk a schema tree and collect ValueTypes discovered\n * via `valueTypeRef` nodes that carry a `_resolved` schema.\n *\n * This enables auto-registration: when codegen emits `valueTypeRef(VT)`,\n * it stores the resolved schema (and the semantic type, if any) inline. We\n * extract them here so the runtime `valueTypesById` registry is populated\n * without requiring users to pass ValueTypes explicitly. Unit validation reads\n * the semantic type from that registry, so dropping it would make a\n * unit-bearing value type reject every unit.\n */\nfunction extractValueTypesFromSchema(\n  schema: Schema,\n  collected: Map<string, ValueType>,\n  seen: Set<string>\n): void {\n  if (typeof schema === \"string\") return\n\n  if (schema.type === \"valueTypeRef\") {\n    if (schema._resolved && !seen.has(schema.valueTypeId)) {\n      seen.add(schema.valueTypeId)\n      const localName = schema.valueTypeId.includes(\":\")\n        ? schema.valueTypeId.slice(schema.valueTypeId.indexOf(\":\") + 1)\n        : schema.valueTypeId\n      collected.set(schema.valueTypeId, {\n        id: schema.valueTypeId,\n        name: localName,\n        schema: schema._resolved,\n        ...(schema._semanticType === undefined ? {} : { semanticType: schema._semanticType }),\n      })\n      extractValueTypesFromSchema(schema._resolved, collected, seen)\n    }\n    return\n  }\n\n  if (schema.type === \"object\") {\n    for (const field of Object.values(schema.properties)) {\n      extractValueTypesFromSchema(field.schema, collected, seen)\n    }\n    return\n  }\n\n  if (schema.type === \"array\") {\n    extractValueTypesFromSchema(schema.items, collected, seen)\n    return\n  }\n\n  if (schema.type === \"map\") {\n    extractValueTypesFromSchema(schema.valueSchema, collected, seen)\n  }\n}\n\nfunction collectOntology(sources: readonly OntologySource[]): {\n  objectTypes: ObjectTypeWithPropertyTokens[]\n  valueTypes: ValueType[]\n} {\n  const objectTypes: ObjectTypeWithPropertyTokens[] = []\n  const valueTypes: ValueType[] = []\n  const seenObjectTypes = new Set<ObjectTypeWithPropertyTokens>()\n\n  for (const source of sources) {\n    if (isOntologyDocumentSource(source)) {\n      for (const ot of source.objectTypes) {\n        if (!seenObjectTypes.has(ot)) {\n          seenObjectTypes.add(ot)\n          objectTypes.push(ot)\n        }\n      }\n      valueTypes.push(...(source.valueTypes ?? []))\n    } else {\n      if (!seenObjectTypes.has(source)) {\n        seenObjectTypes.add(source)\n        objectTypes.push(source)\n      }\n    }\n  }\n\n  // Auto-discover ValueTypes embedded in ObjectType schemas via _resolved.\n  // Explicit ValueTypes (from OntologyDocumentInput) take priority.\n  const explicitIds = new Set(valueTypes.map((vt) => vt.id))\n  const discovered = new Map<string, ValueType>()\n\n  for (const objectType of objectTypes) {\n    for (const property of objectType.properties) {\n      extractValueTypesFromSchema(property.schema, discovered, explicitIds)\n    }\n    for (const linkDef of objectType.links) {\n      if (linkDef.properties) {\n        for (const property of linkDef.properties) {\n          extractValueTypesFromSchema(property.schema, discovered, explicitIds)\n        }\n      }\n    }\n  }\n\n  valueTypes.push(...discovered.values())\n\n  return { objectTypes, valueTypes }\n}\n\n// ── OntologyRegistry ─────────────────────────────────────────\n\n/**\n * Self-contained registry for ontology types.\n *\n * Holds all object types, value types, the subtype graph, and the primary\n * property mapping. Validates inheritance chains and flattens inherited\n * properties at construction time.\n *\n * Exposes read-only accessors so consumers never mutate ontology state.\n */\nexport class OntologyRegistry implements OntologyDefinitionCatalog {\n  private readonly objectTypesById = new Map<string, ObjectTypeWithPropertyTokens>()\n  private readonly valueTypesById = new Map<string, ValueType>()\n  private readonly subTypesById = new Map<string, Set<string>>()\n  private readonly primaryByTypeId: Map<string, string>\n\n  constructor(options: OntologyRegistryOptions) {\n    const { objectTypes, valueTypes } = collectOntology(options.sources)\n\n    for (const objectType of objectTypes) {\n      if (this.objectTypesById.has(objectType.id)) {\n        throw new OntologyValidationError(`Duplicate object type id: ${objectType.id}`)\n      }\n      this.objectTypesById.set(objectType.id, objectType)\n    }\n\n    for (const valueType of valueTypes) {\n      if (this.valueTypesById.has(valueType.id)) {\n        throw new OntologyValidationError(`Duplicate value type id: ${valueType.id}`)\n      }\n      this.valueTypesById.set(valueType.id, valueType)\n    }\n\n    this.validateAndBuildExtendsRegistry()\n    this.resolveInheritedProperties()\n    validatePropertyDefinitions(this.objectTypesById, this.valueTypesById)\n    validateQueryMetadata(this.objectTypesById, this.valueTypesById)\n    for (const [id, type] of this.objectTypesById) {\n      if (type.search?.vectors)\n        this.objectTypesById.set(id, {\n          ...type,\n          search: { ...type.search, vectors: snapshotVectorProfiles(type.search.vectors) },\n        })\n    }\n    this.primaryByTypeId = validatePrimaryProperties(this.objectTypesById)\n  }\n\n  // ── Public read API ──────────────────────────────────────\n\n  /** All registered object types. */\n  listObjectTypes(): readonly ObjectTypeWithPropertyTokens[] {\n    return [...this.objectTypesById.values()]\n  }\n\n  /** Lookup an object type by id. Returns `null` if not found. */\n  getObjectTypeById(objectTypeId: string): ObjectTypeWithPropertyTokens | null {\n    return this.objectTypesById.get(objectTypeId) ?? null\n  }\n\n  /**\n   * Lookup an object type by id, throwing if it does not exist.\n   *\n   * Use this when the caller requires the type to exist and should fail\n   * loudly on unknown types (e.g., write operations receiving a type id).\n   */\n  resolveObjectType(objectTypeId: string): ObjectTypeWithPropertyTokens {\n    const objectType = this.objectTypesById.get(objectTypeId)\n    if (!objectType) {\n      throw new OntologyNotFoundError(formatUnknownObjectTypeMessage(objectTypeId))\n    }\n    return objectType\n  }\n\n  /** Get the primary property id for a given object type. Throws if unknown. */\n  getPrimaryPropertyId(objectTypeId: string): string {\n    const id = this.primaryByTypeId.get(objectTypeId)\n    if (!id) throw new OntologyNotFoundError(formatUnknownObjectTypeMessage(objectTypeId))\n    return id\n  }\n\n  /** Collect all transitive sub-types of the given object type id. */\n  listSubTypes(objectTypeId: string): string[] {\n    const result: string[] = []\n    const collect = (typeId: string): void => {\n      const children = this.subTypesById.get(typeId)\n      if (!children) return\n      for (const childId of children) {\n        result.push(childId)\n        collect(childId)\n      }\n    }\n    collect(objectTypeId)\n    return result\n  }\n\n  /** Get the structural extends chain from root ancestor to the provided type. */\n  listAncestorChain(objectType: ObjectType): readonly ObjectTypeWithPropertyTokens[] {\n    const chain: ObjectTypeWithPropertyTokens[] = []\n    let current: ObjectTypeWithPropertyTokens | null = this.resolveObjectType(objectType.id)\n    const seen = new Set<string>()\n\n    while (current) {\n      if (seen.has(current.id)) {\n        throw new OntologyValidationError(\n          `Circular extends chain detected while resolving ancestors for \"${objectType.id}\".`\n        )\n      }\n      seen.add(current.id)\n      chain.push(current)\n      current = current.extends ? this.resolveObjectType(current.extends) : null\n    }\n\n    return chain.reverse()\n  }\n\n  /**\n   * Check whether `actual` is a valid target for a link expecting `expected`.\n   *\n   * Supports wildcard `\"*\"`, single concrete types, and arrays. A type\n   * matches if it equals the expected type or is a transitive subtype.\n   */\n  isValidLinkTarget(expected: string | string[], actual: string): boolean {\n    if (expected === \"*\") return true\n    const types = Array.isArray(expected) ? expected : [expected]\n    if (types.includes(\"*\")) return true\n    for (const type of types) {\n      if (actual === type || this.listSubTypes(type).includes(actual)) return true\n    }\n    return false\n  }\n\n  // ── Map accessors (read-only views) ──────────────────────\n\n  /** Read-only view of all object types by id. */\n  getObjectTypesById(): ReadonlyMap<string, ObjectTypeWithPropertyTokens> {\n    return this.objectTypesById\n  }\n\n  /** Read-only view of all value types by id. */\n  getValueTypesById(): ReadonlyMap<string, ValueType> {\n    return this.valueTypesById\n  }\n\n  /** Read-only view of primary property ids by object type id. */\n  getPrimaryByTypeId(): ReadonlyMap<string, string> {\n    return this.primaryByTypeId\n  }\n\n  // ── Private initialization ───────────────────────────────\n\n  /**\n   * Build the subtype graph from `extends` and `parents` declarations.\n   *\n   * Validates that parent types exist and detects circular `extends` chains.\n   */\n  private validateAndBuildExtendsRegistry(): void {\n    const resolving = new Set<string>()\n    const resolved = new Set<string>()\n\n    const registerChild = (parentId: string, childId: string): void => {\n      let children = this.subTypesById.get(parentId)\n      if (!children) {\n        children = new Set()\n        this.subTypesById.set(parentId, children)\n      }\n      children.add(childId)\n    }\n\n    const visit = (typeId: string, chain: string[]): void => {\n      if (resolved.has(typeId)) return\n\n      const objectType = this.objectTypesById.get(typeId)\n      if (!objectType || !objectType.extends) {\n        resolved.add(typeId)\n        return\n      }\n\n      const parentId = objectType.extends\n\n      if (!this.objectTypesById.has(parentId)) {\n        throw new OntologyValidationError(\n          `ObjectType \"${typeId}\" extends unknown type \"${parentId}\". If \"${parentId}\" comes from an external ontology, add it to 'ontologies' in createSixb().`\n        )\n      }\n\n      if (resolving.has(typeId)) {\n        throw new OntologyValidationError(\n          `Circular extends chain detected: ${[...chain, typeId].join(\" → \")}`\n        )\n      }\n\n      resolving.add(typeId)\n      visit(parentId, [...chain, typeId])\n\n      registerChild(parentId, typeId)\n\n      resolving.delete(typeId)\n      resolved.add(typeId)\n    }\n\n    for (const typeId of this.objectTypesById.keys()) {\n      visit(typeId, [])\n    }\n\n    for (const [typeId, objectType] of this.objectTypesById) {\n      if (!objectType.parents) continue\n      for (const parentId of objectType.parents) {\n        if (parentId === objectType.extends) continue\n        if (!this.objectTypesById.has(parentId)) {\n          throw new OntologyValidationError(\n            `ObjectType \"${typeId}\" lists unknown parent \"${parentId}\" in parents. If \"${parentId}\" comes from an external ontology, add it to 'ontologies' in createSixb().`\n          )\n        }\n        registerChild(parentId, typeId)\n      }\n    }\n  }\n\n  /**\n   * For types with string `extends`, merge parent properties/links\n   * and rebuild tokens. Idempotent: no-op if already flattened (codegen case).\n   */\n  private resolveInheritedProperties(): void {\n    const resolved = new Set<string>()\n\n    const resolve = (typeId: string): void => {\n      if (resolved.has(typeId)) return\n      const objectType = this.objectTypesById.get(typeId)!\n\n      if (!objectType.extends) {\n        resolved.add(typeId)\n        return\n      }\n\n      resolve(objectType.extends)\n      const parent = this.objectTypesById.get(objectType.extends)!\n\n      const mergeById = <T extends { id: string }>(\n        parentItems: readonly T[],\n        childItems: readonly T[]\n      ): T[] => {\n        const childIds = new Set(childItems.map((item) => item.id))\n        const fromParent = parentItems.filter((item) => !childIds.has(item.id))\n        return [...fromParent, ...childItems]\n      }\n\n      const mergedProperties = mergeById(parent.properties, objectType.properties)\n      const mergedLinks = mergeById(parent.links, objectType.links)\n\n      const changed =\n        mergedProperties.length !== objectType.properties.length ||\n        mergedLinks.length !== objectType.links.length\n\n      if (changed) {\n        const merged: ObjectType = {\n          ...objectType,\n          properties: mergedProperties,\n          links: mergedLinks,\n        }\n        const withTokens: ObjectTypeWithPropertyTokens = {\n          ...merged,\n          p: createPropertyTokenMap(merged),\n        }\n        ;(withTokens as ObjectTypeWithPropertyTokens & { l: unknown }).l =\n          createLinkTokenMap(merged)\n        this.objectTypesById.set(typeId, withTokens)\n      }\n\n      resolved.add(typeId)\n    }\n\n    for (const typeId of this.objectTypesById.keys()) {\n      resolve(typeId)\n    }\n  }\n}\n",
-    "/**\n * Builder helpers for ontology modeling.\n *\n * These functions provide shorthand for constructing `ObjectType`, `ValueType`,\n * `Interface`, `Property`, `ObjectLink`, and `EnumSchema` values with sensible\n * defaults so you can focus on the semantics rather than boilerplate.\n *\n * ```ts\n * import { defineObjectType, prop, link, stringEnum } from \"@sixb/core\"\n *\n * const thermostat = defineObjectType({\n *   id: \"thermostat\",\n *   name: \"Thermostat\",\n *   properties: [\n *     prop(\"currentTemperature\", \"double\", {\n *       name: \"Current Temperature\",\n *       semanticType: \"Temperature\",\n *       required: true,\n *     }),\n *     prop(\"mode\", stringEnum([\"off\", \"heat\", \"cool\", \"auto\"])),\n *   ],\n *   links: [\n *     link.ref(\"controls\", \"hvacZone\", { cardinality: \"one\" }),\n *   ],\n * })\n * ```\n */\n\nimport { markingIdsFrom } from \"../security/builders\"\nimport type { MarkingDefinition } from \"../security/types\"\nimport type { ObjectTypeWithPropertyTokens, ObjectTypeWithTokens } from \"./tokens\"\nimport { createLinkTokenMap, createPropertyTokenMap } from \"./tokens\"\nimport type {\n  EnumSchema,\n  Interface,\n  LinkCardinality,\n  ObjectLink,\n  ObjectLinkTargetMetadata,\n  ObjectType,\n  ObjectVectorSearchProfile,\n  Ontology,\n  Property,\n  PropertyMode,\n  PropertyQueryMetadata,\n  Schema,\n  ValueType,\n  ValueTypeRefSchema,\n} from \"./types\"\nimport type { QuantitativeTypeId } from \"./units\"\n\ntype NameFromOptions<TId extends string, TOptions> = TOptions extends {\n  name: infer TName extends string\n}\n  ? TName\n  : TId\n\n/**\n * Preserve literal option values when an option key is provided.\n *\n * Why this exists:\n * - `prop(\"x\", \"string\", { required: true })` should keep `required` as literal `true`\n *   (not widen to `boolean`) so downstream inference can treat the field as required.\n */\ntype FieldFromOptions<TOptions, TKey extends string, TFallback> =\n  TOptions extends Record<TKey, infer TValue>\n    ? { [K in TKey]: TValue }\n    : { [K in TKey]?: TFallback }\n\nconst selfLinkTargetObjectTypeId = \"__sixb.self__\"\ntype SelfLinkTargetObjectTypeId = typeof selfLinkTargetObjectTypeId\n\ntype NormalizeSelfLink<TObjectTypeId extends string, TLink> = TLink extends {\n  targetObjectTypeId: SelfLinkTargetObjectTypeId\n}\n  ? Omit<TLink, \"targetObjectTypeId\"> & { targetObjectTypeId: TObjectTypeId }\n  : TLink\n\ntype NormalizeSelfLinks<TObjectTypeId extends string, TLinks extends readonly ObjectLink[]> = {\n  -readonly [K in keyof TLinks]: NormalizeSelfLink<TObjectTypeId, TLinks[K]>\n}\n\n// ── Extends type utilities ───────────────────────────────────\n\n/**\n * Merge parent + child collections by id. Uses built-in `Exclude` on\n * the element union — no recursion, no \"excessively deep\" errors.\n */\ntype MergedCollection<\n  TParent extends readonly { id: string }[],\n  TChild extends readonly { id: string }[],\n> = Array<Exclude<TParent[number], { id: TChild[number][\"id\"] }> | TChild[number]>\n\n/**\n * Extract child's own collection, normalized as a mutable tuple. Falls back to [].\n */\ntype OwnCollection<TInput, TKey extends string, TItem> =\n  TInput extends Record<TKey, infer T extends readonly TItem[]> ? [...T] : []\n\ntype OwnLinks<TInput> = TInput extends { id: infer TObjectTypeId extends string }\n  ? TInput extends Record<\"links\", infer TLinks extends readonly ObjectLink[]>\n    ? NormalizeSelfLinks<TObjectTypeId, TLinks>\n    : []\n  : []\n\n/**\n * Merge two arrays by id: parent items first, child items override by id.\n */\nfunction mergeById<T extends { id: string }>(parent: readonly T[], child: readonly T[]): T[] {\n  const childIds = new Set(child.map((item) => item.id))\n  const fromParent = parent.filter((item) => !childIds.has(item.id))\n  return [...fromParent, ...child]\n}\n\n// ── Object Type ─────────────────────────────────────────────\n\ntype DefineObjectTypeBase = Omit<ObjectType, \"properties\" | \"links\" | \"extends\" | \"parents\">\n\n/**\n * Structural constraint for the `extends` field.\n *\n * We require only the data needed for merge (id + collections), not the\n * full `ObjectTypeWithTokens<ObjectType>`. The latter requires\n * `LinkTokenMap<ObjectType>` with a `{ [id: string]: LinkToken }` index\n * signature, which is incompatible with the literal-keyed maps produced by\n * concrete `defineObjectType()` calls.\n */\ntype DefineObjectTypeInput = DefineObjectTypeBase & {\n  extends?:\n    | string\n    | {\n        readonly id: string\n        readonly properties: readonly Property[]\n        readonly links: readonly ObjectLink[]\n      }\n  parents?: readonly string[]\n  properties?: readonly Property[]\n  links?: readonly ObjectLink[]\n}\n\n/**\n * Normalize `parents` from readonly tuple to mutable `string[] | undefined`.\n */\ntype NormalizeParents<TInput> = TInput extends { parents: infer P extends readonly string[] }\n  ? { parents: [...P] }\n  : { parents?: undefined }\n\ntype DefineObjectTypeResult<TInput extends DefineObjectTypeInput> = Omit<\n  TInput,\n  \"properties\" | \"links\" | \"extends\" | \"parents\"\n> &\n  (TInput extends {\n    extends: infer TParent extends {\n      id: string\n      properties: readonly Property[]\n      links: readonly ObjectLink[]\n    }\n  }\n    ? NormalizeParents<TInput> & {\n        extends: TParent[\"id\"]\n        properties: MergedCollection<\n          TParent[\"properties\"],\n          OwnCollection<TInput, \"properties\", Property>\n        >\n        links: MergedCollection<TParent[\"links\"], OwnLinks<TInput>>\n      }\n    : TInput extends { extends: infer TParentId extends string }\n      ? {\n          extends: TParentId\n          parents: string[]\n          properties: OwnCollection<TInput, \"properties\", Property>\n          links: OwnLinks<TInput>\n        }\n      : NormalizeParents<TInput> & {\n          extends: undefined\n          properties: OwnCollection<TInput, \"properties\", Property>\n          links: OwnLinks<TInput>\n        })\n\ntype DefineObjectTypeWithTokensResult<TInput extends DefineObjectTypeInput> = ObjectTypeWithTokens<\n  DefineObjectTypeResult<TInput>\n>\n\n/**\n * Define an object type with sensible defaults.\n *\n * `properties` and `links` default to `[]` so you can define\n * a bare object type with just `id` and `name`.\n */\nexport function defineObjectType<const TInput extends DefineObjectTypeInput>(\n  input: TInput\n): DefineObjectTypeWithTokensResult<TInput>\nexport function defineObjectType(input: DefineObjectTypeInput): ObjectTypeWithTokens<ObjectType> {\n  const ext = input.extends\n\n  const ownProperties = input.properties ? [...input.properties] : []\n  const ownLinks = input.links\n    ? input.links.map((link) => normalizeSelfLinkTarget(input.id, link))\n    : []\n\n  let extendsId: string | undefined\n  let parentIds: string[] | undefined\n  let properties: Property[]\n  let links: ObjectLink[]\n\n  if (typeof ext === \"string\") {\n    // Pre-flattened: string extends — no merge, properties/links taken as-is\n    extendsId = ext\n    parentIds = [ext, ...(input.parents ?? []).filter((id) => id !== ext)]\n    properties = ownProperties\n    links = ownLinks\n  } else if (ext != null) {\n    // Object extends — merge parent collections\n    extendsId = ext.id\n    parentIds = [ext.id, ...(input.parents ?? []).filter((id) => id !== ext.id)]\n    properties = mergeById(ext.properties, ownProperties)\n    links = mergeById([...ext.links], ownLinks)\n  } else {\n    // No extends\n    extendsId = undefined\n    parentIds = input.parents ? [...input.parents] : undefined\n    properties = ownProperties\n    links = ownLinks\n  }\n\n  const objectType: ObjectType = {\n    id: input.id,\n    name: input.name,\n    description: input.description,\n    quantityKind: input.quantityKind,\n    seeAlso: input.seeAlso,\n    extends: extendsId,\n    parents: parentIds,\n    implements: input.implements,\n    properties,\n    links,\n    search: input.search,\n    query: input.query,\n  }\n\n  return {\n    ...objectType,\n    l: createLinkTokenMap(objectType),\n    p: createPropertyTokenMap(objectType),\n  }\n}\n\nfunction normalizeSelfLinkTarget(objectTypeId: string, link: ObjectLink): ObjectLink {\n  if (link.targetObjectTypeId !== selfLinkTargetObjectTypeId) {\n    return link\n  }\n\n  return {\n    ...link,\n    targetObjectTypeId: objectTypeId,\n  }\n}\n\n// ── Ontology ────────────────────────────────────────────────\n\ntype DefineOntologyBase = Omit<Ontology, \"objectTypes\" | \"valueTypes\" | \"interfaces\">\n\ntype DefineOntologyInput = DefineOntologyBase & {\n  objectTypes?: readonly ObjectType[]\n  valueTypes?: readonly ValueType[]\n  interfaces?: readonly Interface[]\n}\n\ntype DefineOntologyResult<TInput extends DefineOntologyInput> = Omit<\n  TInput,\n  \"objectTypes\" | \"valueTypes\" | \"interfaces\"\n> & {\n  objectTypes: TInput extends { objectTypes: infer TObjectTypes extends readonly ObjectType[] }\n    ? [...TObjectTypes]\n    : []\n  valueTypes: TInput extends { valueTypes: infer TValueTypes extends readonly ValueType[] }\n    ? [...TValueTypes]\n    : []\n  interfaces: TInput extends { interfaces: infer TInterfaces extends readonly Interface[] }\n    ? [...TInterfaces]\n    : []\n}\n\n/**\n * Define a complete ontology document.\n *\n * `objectTypes`, `valueTypes`, and `interfaces` default to `[]`.\n */\nexport function defineOntology<const TInput extends DefineOntologyInput>(\n  input: TInput\n): DefineOntologyResult<TInput>\nexport function defineOntology(input: DefineOntologyInput): Ontology {\n  return {\n    ...input,\n    objectTypes: input.objectTypes ? [...input.objectTypes] : [],\n    valueTypes: input.valueTypes ? [...input.valueTypes] : [],\n    interfaces: input.interfaces ? [...input.interfaces] : [],\n  }\n}\n\n// ── Value Type ──────────────────────────────────────────────\n\n/**\n * Define a reusable value type.\n *\n * Identity function for type inference and discoverability — the `define*`\n * prefix makes it easy to find all ontology builders.\n */\nexport function defineValueType<const TValueType extends ValueType>(input: TValueType): TValueType {\n  return input\n}\n\n// ── Interface ───────────────────────────────────────────────\n\ntype DefineInterfaceBase = Omit<Interface, \"properties\" | \"links\">\n\ntype DefineInterfaceInput = DefineInterfaceBase & {\n  properties?: readonly Property[]\n  links?: readonly ObjectLink[]\n}\n\ntype DefineInterfaceResult<TInput extends DefineInterfaceInput> = Omit<\n  TInput,\n  \"properties\" | \"links\"\n> & {\n  properties: TInput extends { properties: infer TProperties extends readonly Property[] }\n    ? [...TProperties]\n    : []\n  links: TInput extends { links: infer TLinks extends readonly ObjectLink[] } ? [...TLinks] : []\n}\n\n/**\n * Define a reusable interface contract.\n *\n * `properties` and `links` default to `[]`.\n */\nexport function defineInterface<const TInput extends DefineInterfaceInput>(\n  input: TInput\n): DefineInterfaceResult<TInput>\nexport function defineInterface(input: DefineInterfaceInput): Interface {\n  return {\n    ...input,\n    properties: input.properties ? [...input.properties] : [],\n    links: input.links ? [...input.links] : [],\n  }\n}\n\n// ── Property shorthand ──────────────────────────────────────\n\ntype PropertyOptions = {\n  name?: string\n  description?: string\n  required?: boolean\n  nullable?: boolean\n  primary?: true\n  mode?: PropertyMode\n  semanticType?: QuantitativeTypeId\n  query?: PropertyQueryMetadata\n  /** Readers need a clearance for every marking to receive this property's value. */\n  markings?: readonly MarkingDefinition[]\n}\n\n/** The property records marking ids; only a declared, non-empty list marks it. */\ntype MarkingsFromOptions<TOptions> = TOptions extends {\n  markings: readonly [MarkingDefinition, ...MarkingDefinition[]]\n}\n  ? { markings: readonly string[] }\n  : { markings?: readonly string[] }\n\ntype PropertyResult<\n  TId extends string,\n  TSchema extends Schema,\n  TOptions extends PropertyOptions | undefined,\n> = {\n  id: TId\n  name: NameFromOptions<TId, TOptions>\n  schema: TSchema\n} & FieldFromOptions<TOptions, \"description\", string> &\n  FieldFromOptions<TOptions, \"required\", boolean> &\n  FieldFromOptions<TOptions, \"nullable\", boolean> &\n  FieldFromOptions<TOptions, \"primary\", true> &\n  FieldFromOptions<TOptions, \"mode\", PropertyMode> &\n  FieldFromOptions<TOptions, \"semanticType\", QuantitativeTypeId> &\n  FieldFromOptions<TOptions, \"query\", PropertyQueryMetadata> &\n  MarkingsFromOptions<TOptions>\n\n/**\n * Shorthand for creating a {@link Property}.\n *\n * `name` defaults to `id` — override via `options.name` when you need\n * a separate display name.\n *\n * ```ts\n * prop(\"currentTemperature\", \"double\", {\n *   name: \"Current Temperature\",\n *   semanticType: \"Temperature\",\n *   required: true,\n * })\n * ```\n */\n// Overloads keep option literals (e.g. `required: true`, `mode: \"telemetry\"`) intact.\nexport function prop<const TId extends string, const TSchema extends Schema>(\n  id: TId,\n  schema: TSchema\n): PropertyResult<TId, TSchema, undefined>\nexport function prop<\n  const TId extends string,\n  const TSchema extends Schema,\n  const TOptions extends PropertyOptions,\n>(id: TId, schema: TSchema, options: TOptions): PropertyResult<TId, TSchema, TOptions>\nexport function prop(id: string, schema: Schema, options?: PropertyOptions): Property {\n  const { markings, ...rest } = options ?? {}\n  return {\n    id,\n    name: options?.name ?? id,\n    schema,\n    ...rest,\n    ...(markings && markings.length > 0\n      ? { markings: markingIdsFrom(markings, `Property '${id}' markings`) }\n      : {}),\n  }\n}\n\n// ── Link shorthand ──────────────────────────────────────────\n\n/**\n * Runtime check: does a value look like an ObjectType?\n *\n * Discriminates ObjectType from LinkOptions by checking for `properties` and `links`\n * arrays — ObjectType always has them, LinkOptions never does.\n */\nfunction isObjectTypeLike(value: unknown): value is ObjectType {\n  return (\n    typeof value === \"object\" &&\n    value !== null &&\n    Array.isArray((value as Record<string, unknown>).properties) &&\n    Array.isArray((value as Record<string, unknown>).links)\n  )\n}\n\ntype LinkOptions = {\n  name?: string\n  description?: string\n  cardinality?: LinkCardinality\n  properties?: Property[]\n}\n\ntype LinkResult<\n  TId extends string,\n  TTargetObjectTypeId,\n  TOptions extends LinkOptions | undefined,\n> = {\n  id: TId\n  name: NameFromOptions<TId, TOptions>\n  targetObjectTypeId: TTargetObjectTypeId\n} & FieldFromOptions<TOptions, \"description\", string> &\n  FieldFromOptions<TOptions, \"cardinality\", LinkCardinality> &\n  FieldFromOptions<TOptions, \"properties\", Property[]>\n\nexport type DirectLinkResult<\n  TId extends string,\n  TTargetObjectTypeId,\n  TOptions extends LinkOptions | undefined,\n  TTarget,\n> = LinkResult<TId, TTargetObjectTypeId, TOptions> & ObjectLinkTargetMetadata<TTarget>\n\ntype ObjectTypeIdArray<TTargets extends readonly ObjectType[]> = Array<TTargets[number][\"id\"]>\n/** Keep profile names without carrying provider types through every linked declaration. */\nexport type DirectLinkTarget<\n  TId extends string,\n  TName extends string,\n  TProperties extends Property[],\n  TVectorProfiles extends string = never,\n> = ObjectTypeWithPropertyTokens<\n  {\n    id: TId\n    name: TName\n    properties: TProperties\n    links: ObjectLink[]\n  } & ([TVectorProfiles] extends [never]\n    ? unknown\n    : { search: { vectors: Record<TVectorProfiles, ObjectVectorSearchProfile> } })\n>\n\ntype DirectLinkTargetFor<TTarget extends ObjectType> = TTarget extends ObjectTypeWithPropertyTokens\n  ? DirectLinkTarget<\n      TTarget[\"id\"],\n      TTarget[\"name\"],\n      TTarget[\"properties\"],\n      TTarget extends { search: { vectors: infer TProfiles } }\n        ? Extract<keyof TProfiles, string>\n        : never\n    >\n  : TTarget\n\n/**\n * Shorthand for creating an {@link ObjectLink}.\n *\n * `link(...)` accepts direct ObjectType targets and preserves their type for\n * query authoring. Use `link.ref(...)` for id-only references, `link.self(...)`\n * for recursive links, and `link.any(...)` for wildcard links.\n *\n * ```ts\n * // ObjectType target — extracts .id at runtime and preserves the target type\n * link(\"controls\", HVACZone, { cardinality: \"one\" })\n *\n * // Id target — resolved by the generated ontology type manifest\n * link.ref(\"controls\", \"hvacZone\", { cardinality: \"one\" })\n *\n * // Self target — normalized to the source object type id by defineObjectType()\n * link.self(\"parent\", { cardinality: \"one\" })\n *\n * // Multiple targets\n * link(\"rel\", [TypeA, TypeB])\n *\n * // Wildcard — accepts any target type\n * link.any(\"anything\")\n * link.any(\"anything\", { cardinality: \"many\" })\n * ```\n */\ninterface LinkCallable {\n  <const TId extends string, const TTarget extends ObjectType>(\n    id: TId,\n    target: TTarget\n  ): DirectLinkResult<TId, TTarget[\"id\"], undefined, DirectLinkTargetFor<TTarget>>\n\n  <const TId extends string, const TTarget extends ObjectType, const TOptions extends LinkOptions>(\n    id: TId,\n    target: TTarget,\n    options: TOptions\n  ): DirectLinkResult<TId, TTarget[\"id\"], TOptions, DirectLinkTargetFor<TTarget>>\n\n  <const TId extends string, const TTargets extends readonly ObjectType[]>(\n    id: TId,\n    targets: TTargets\n  ): DirectLinkResult<\n    TId,\n    ObjectTypeIdArray<TTargets>,\n    undefined,\n    DirectLinkTargetFor<TTargets[number]>\n  >\n\n  <\n    const TId extends string,\n    const TTargets extends readonly ObjectType[],\n    const TOptions extends LinkOptions,\n  >(\n    id: TId,\n    targets: TTargets,\n    options: TOptions\n  ): DirectLinkResult<\n    TId,\n    ObjectTypeIdArray<TTargets>,\n    TOptions,\n    DirectLinkTargetFor<TTargets[number]>\n  >\n}\n\ninterface LinkBuilder extends LinkCallable {\n  ref: typeof linkRef\n  self: typeof linkSelf\n  any: typeof linkAny\n}\n\nconst linkImpl = ((\n  id: string,\n  targetOrTargets: ObjectType | readonly ObjectType[],\n  options?: LinkOptions\n): ObjectLink => {\n  if (Array.isArray(targetOrTargets)) {\n    return {\n      id,\n      name: options?.name ?? id,\n      targetObjectTypeId: targetOrTargets.map((target) => target.id),\n      ...options,\n    }\n  }\n\n  if (isObjectTypeLike(targetOrTargets)) {\n    return {\n      id,\n      name: options?.name ?? id,\n      targetObjectTypeId: targetOrTargets.id,\n      ...options,\n    }\n  }\n\n  throw new Error(\n    `[Sixb] link(\"${id}\", ...) requires an ObjectType target. Use link.ref(...) for id references, link.self(...) for self-links, or link.any(...) for wildcard links.`\n  )\n}) as LinkCallable\n\nfunction linkRef<\n  const TId extends string,\n  const TTargetObjectTypeId extends string | readonly string[],\n>(id: TId, targetObjectTypeId: TTargetObjectTypeId): LinkResult<TId, TTargetObjectTypeId, undefined>\nfunction linkRef<\n  const TId extends string,\n  const TTargetObjectTypeId extends string | readonly string[],\n  const TOptions extends LinkOptions,\n>(\n  id: TId,\n  targetObjectTypeId: TTargetObjectTypeId,\n  options: TOptions\n): LinkResult<TId, TTargetObjectTypeId, TOptions>\nfunction linkRef(\n  id: string,\n  targetObjectTypeId: string | readonly string[],\n  options?: LinkOptions\n): ObjectLink {\n  return {\n    id,\n    name: options?.name ?? id,\n    targetObjectTypeId:\n      typeof targetObjectTypeId === \"string\" ? targetObjectTypeId : [...targetObjectTypeId],\n    ...options,\n  }\n}\n\nfunction linkSelf<\n  const TId extends string,\n  const TOptions extends LinkOptions | undefined = undefined,\n>(id: TId, options?: TOptions): LinkResult<TId, SelfLinkTargetObjectTypeId, TOptions> {\n  return {\n    id,\n    name: options?.name ?? id,\n    targetObjectTypeId: selfLinkTargetObjectTypeId,\n    ...options,\n  } as LinkResult<TId, SelfLinkTargetObjectTypeId, TOptions>\n}\n\nfunction linkAny<\n  const TId extends string,\n  const TOptions extends LinkOptions | undefined = undefined,\n>(id: TId, options?: TOptions): LinkResult<TId, \"*\", TOptions> {\n  return {\n    id,\n    name: options?.name ?? id,\n    targetObjectTypeId: \"*\",\n    ...options,\n  } as LinkResult<TId, \"*\", TOptions>\n}\n\nexport const link: LinkBuilder = Object.assign(linkImpl, {\n  ref: linkRef,\n  self: linkSelf,\n  any: linkAny,\n})\n\n// ── ValueType ref shorthand ─────────────────────────────────\n\n/**\n * Create a value-type reference schema.\n *\n * ```ts\n * prop(\"azimuth\", valueTypeRef(\"bsh:AzimuthShape\"))\n * prop(\"area\", valueTypeRef(AreaShape))  // self-contained, no tuple needed\n * ```\n */\n// 1. String id only (existing behavior, no resolution)\nexport function valueTypeRef<const TId extends string>(\n  valueTypeId: TId\n): ValueTypeRefSchema & { valueTypeId: TId }\n// 2. ValueType object (concise, self-contained: carries the schema and the semantic type)\nexport function valueTypeRef<const TVT extends ValueType>(\n  valueType: TVT\n): TVT extends { semanticType: infer TSemanticType extends QuantitativeTypeId }\n  ? {\n      type: \"valueTypeRef\"\n      valueTypeId: TVT[\"id\"]\n      _resolved: TVT[\"schema\"]\n      _semanticType: TSemanticType\n    }\n  : { type: \"valueTypeRef\"; valueTypeId: TVT[\"id\"]; _resolved: TVT[\"schema\"] }\n// 3. String id + explicit schema (escape hatch)\nexport function valueTypeRef<const TId extends string, const TResolved extends Schema>(\n  valueTypeId: TId,\n  resolved: TResolved\n): { type: \"valueTypeRef\"; valueTypeId: TId; _resolved: TResolved }\n// Implementation\nexport function valueTypeRef(\n  idOrValueType: string | ValueType,\n  resolved?: Schema\n): ValueTypeRefSchema {\n  if (typeof idOrValueType === \"string\") {\n    if (resolved !== undefined) {\n      return { type: \"valueTypeRef\", valueTypeId: idOrValueType, _resolved: resolved }\n    }\n    return { type: \"valueTypeRef\", valueTypeId: idOrValueType }\n  }\n  return {\n    type: \"valueTypeRef\",\n    valueTypeId: idOrValueType.id,\n    _resolved: idOrValueType.schema,\n    ...(idOrValueType.semanticType === undefined\n      ? {}\n      : { _semanticType: idOrValueType.semanticType }),\n  }\n}\n\n// ── Enum helpers ────────────────────────────────────────────\n\n/**\n * Create a string enum schema.\n *\n * ```ts\n * prop(\"mode\", stringEnum([\"off\", \"heat\", \"cool\", \"auto\"]))\n * ```\n */\nexport function stringEnum<const V extends readonly string[]>(\n  values: V\n): EnumSchema & {\n  values: [...V]\n} {\n  return { type: \"enum\", valueType: \"string\", values: [...values] }\n}\n\n/**\n * Create an integer enum schema.\n *\n * ```ts\n * prop(\"fanSpeed\", integerEnum([1, 2, 3]))\n * ```\n */\nexport function integerEnum<const V extends readonly number[]>(\n  values: V\n): EnumSchema & {\n  values: [...V]\n} {\n  return { type: \"enum\", valueType: \"integer\", values: [...values] }\n}\n"
-  ],
-  "mappings": ";;;;;;;;;;;;;;;;;;;AAGO,SAAS,sBAAsB,CACpC,UACqD;AAAA,EACrD,MAAM,WAAsD,OAAO,OAAO,IAAI;AAAA,EAC9E,YAAY,MAAM,sBAAsB,OAAO,QAAQ,QAAQ,GAAG;AAAA,IAChE,QAAQ,YAAY,SAAS,eAAe,kBAAkB;AAAA,IAC9D,SAAS,QAAQ,OAAO,OAAO;AAAA,MAC7B,QAAQ,OAAO,OAAO,CAAC,GAAG,kBAAkB,MAAM,CAAC;AAAA,MACnD,OAAO,OAAO,OAAO;AAAA,QACnB;AAAA,QACA;AAAA,QACA,YAAY,OAAO,OAAO;AAAA,UACxB,MAAM;AAAA,UACN;AAAA,UACA;AAAA,UACA,YAAY,WAAW;AAAA,aACnB,WAAW,YAAY,EAAE,WAAW,WAAW,UAAU,IAAI,CAAC;AAAA,aAC9D,WAAW,iBACX;AAAA,YACE,gBAAgB,OAAO,OAAO;AAAA,cAC5B,MAAM,WAAW,eAAe;AAAA,iBAC5B,WAAW,eAAe,YAAY,YACtC,CAAC,IACD,EAAE,SAAS,WAAW,eAAe,QAAQ;AAAA,YACnD,CAAC;AAAA,UACH,IACA,CAAC;AAAA,QACP,CAAC;AAAA,MACH,CAAC;AAAA,IACH,CAAC;AAAA,EACH;AAAA,EACA,OAAO,OAAO,OAAO,QAAQ;AAAA;;;ACyB/B,SAAS,wBAAwB,CAC/B,QACiE;AAAA,EACjE,OAAO,iBAAiB;AAAA;AAc1B,SAAS,2BAA2B,CAClC,QACA,WACA,MACM;AAAA,EACN,IAAI,OAAO,WAAW;AAAA,IAAU;AAAA,EAEhC,IAAI,OAAO,SAAS,gBAAgB;AAAA,IAClC,IAAI,OAAO,aAAa,CAAC,KAAK,IAAI,OAAO,WAAW,GAAG;AAAA,MACrD,KAAK,IAAI,OAAO,WAAW;AAAA,MAC3B,MAAM,YAAY,OAAO,YAAY,SAAS,GAAG,IAC7C,OAAO,YAAY,MAAM,OAAO,YAAY,QAAQ,GAAG,IAAI,CAAC,IAC5D,OAAO;AAAA,MACX,UAAU,IAAI,OAAO,aAAa;AAAA,QAChC,IAAI,OAAO;AAAA,QACX,MAAM;AAAA,QACN,QAAQ,OAAO;AAAA,WACX,OAAO,kBAAkB,YAAY,CAAC,IAAI,EAAE,cAAc,OAAO,cAAc;AAAA,MACrF,CAAC;AAAA,MACD,4BAA4B,OAAO,WAAW,WAAW,IAAI;AAAA,IAC/D;AAAA,IACA;AAAA,EACF;AAAA,EAEA,IAAI,OAAO,SAAS,UAAU;AAAA,IAC5B,WAAW,SAAS,OAAO,OAAO,OAAO,UAAU,GAAG;AAAA,MACpD,4BAA4B,MAAM,QAAQ,WAAW,IAAI;AAAA,IAC3D;AAAA,IACA;AAAA,EACF;AAAA,EAEA,IAAI,OAAO,SAAS,SAAS;AAAA,IAC3B,4BAA4B,OAAO,OAAO,WAAW,IAAI;AAAA,IACzD;AAAA,EACF;AAAA,EAEA,IAAI,OAAO,SAAS,OAAO;AAAA,IACzB,4BAA4B,OAAO,aAAa,WAAW,IAAI;AAAA,EACjE;AAAA;AAGF,SAAS,eAAe,CAAC,SAGvB;AAAA,EACA,MAAM,cAA8C,CAAC;AAAA,EACrD,MAAM,aAA0B,CAAC;AAAA,EACjC,MAAM,kBAAkB,IAAI;AAAA,EAE5B,WAAW,UAAU,SAAS;AAAA,IAC5B,IAAI,yBAAyB,MAAM,GAAG;AAAA,MACpC,WAAW,MAAM,OAAO,aAAa;AAAA,QACnC,IAAI,CAAC,gBAAgB,IAAI,EAAE,GAAG;AAAA,UAC5B,gBAAgB,IAAI,EAAE;AAAA,UACtB,YAAY,KAAK,EAAE;AAAA,QACrB;AAAA,MACF;AAAA,MACA,WAAW,KAAK,GAAI,OAAO,cAAc,CAAC,CAAE;AAAA,IAC9C,EAAO;AAAA,MACL,IAAI,CAAC,gBAAgB,IAAI,MAAM,GAAG;AAAA,QAChC,gBAAgB,IAAI,MAAM;AAAA,QAC1B,YAAY,KAAK,MAAM;AAAA,MACzB;AAAA;AAAA,EAEJ;AAAA,EAIA,MAAM,cAAc,IAAI,IAAI,WAAW,IAAI,CAAC,OAAO,GAAG,EAAE,CAAC;AAAA,EACzD,MAAM,aAAa,IAAI;AAAA,EAEvB,WAAW,cAAc,aAAa;AAAA,IACpC,WAAW,YAAY,WAAW,YAAY;AAAA,MAC5C,4BAA4B,SAAS,QAAQ,YAAY,WAAW;AAAA,IACtE;AAAA,IACA,WAAW,WAAW,WAAW,OAAO;AAAA,MACtC,IAAI,QAAQ,YAAY;AAAA,QACtB,WAAW,YAAY,QAAQ,YAAY;AAAA,UACzC,4BAA4B,SAAS,QAAQ,YAAY,WAAW;AAAA,QACtE;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAAA,EAEA,WAAW,KAAK,GAAG,WAAW,OAAO,CAAC;AAAA,EAEtC,OAAO,EAAE,aAAa,WAAW;AAAA;AAAA;AAc5B,MAAM,kBAAsD;AAAA,EAChD,kBAAkB,IAAI;AAAA,EACtB,iBAAiB,IAAI;AAAA,EACrB,eAAe,IAAI;AAAA,EACnB;AAAA,EAEjB,WAAW,CAAC,SAAkC;AAAA,IAC5C,QAAQ,aAAa,eAAe,gBAAgB,QAAQ,OAAO;AAAA,IAEnE,WAAW,cAAc,aAAa;AAAA,MACpC,IAAI,KAAK,gBAAgB,IAAI,WAAW,EAAE,GAAG;AAAA,QAC3C,MAAM,IAAI,yBAAwB,6BAA6B,WAAW,IAAI;AAAA,MAChF;AAAA,MACA,KAAK,gBAAgB,IAAI,WAAW,IAAI,UAAU;AAAA,IACpD;AAAA,IAEA,WAAW,aAAa,YAAY;AAAA,MAClC,IAAI,KAAK,eAAe,IAAI,UAAU,EAAE,GAAG;AAAA,QACzC,MAAM,IAAI,yBAAwB,4BAA4B,UAAU,IAAI;AAAA,MAC9E;AAAA,MACA,KAAK,eAAe,IAAI,UAAU,IAAI,SAAS;AAAA,IACjD;AAAA,IAEA,KAAK,gCAAgC;AAAA,IACrC,KAAK,2BAA2B;AAAA,IAChC,6BAA4B,KAAK,iBAAiB,KAAK,cAAc;AAAA,IACrE,uBAAsB,KAAK,iBAAiB,KAAK,cAAc;AAAA,IAC/D,YAAY,IAAI,SAAS,KAAK,iBAAiB;AAAA,MAC7C,IAAI,KAAK,QAAQ;AAAA,QACf,KAAK,gBAAgB,IAAI,IAAI;AAAA,aACxB;AAAA,UACH,QAAQ,KAAK,KAAK,QAAQ,SAAS,uBAAuB,KAAK,OAAO,OAAO,EAAE;AAAA,QACjF,CAAC;AAAA,IACL;AAAA,IACA,KAAK,kBAAkB,2BAA0B,KAAK,eAAe;AAAA;AAAA,EAMvE,eAAe,GAA4C;AAAA,IACzD,OAAO,CAAC,GAAG,KAAK,gBAAgB,OAAO,CAAC;AAAA;AAAA,EAI1C,iBAAiB,CAAC,cAA2D;AAAA,IAC3E,OAAO,KAAK,gBAAgB,IAAI,YAAY,KAAK;AAAA;AAAA,EASnD,iBAAiB,CAAC,cAAoD;AAAA,IACpE,MAAM,aAAa,KAAK,gBAAgB,IAAI,YAAY;AAAA,IACxD,IAAI,CAAC,YAAY;AAAA,MACf,MAAM,IAAI,uBAAsB,+BAA+B,YAAY,CAAC;AAAA,IAC9E;AAAA,IACA,OAAO;AAAA;AAAA,EAIT,oBAAoB,CAAC,cAA8B;AAAA,IACjD,MAAM,KAAK,KAAK,gBAAgB,IAAI,YAAY;AAAA,IAChD,IAAI,CAAC;AAAA,MAAI,MAAM,IAAI,uBAAsB,+BAA+B,YAAY,CAAC;AAAA,IACrF,OAAO;AAAA;AAAA,EAIT,YAAY,CAAC,cAAgC;AAAA,IAC3C,MAAM,SAAmB,CAAC;AAAA,IAC1B,MAAM,UAAU,CAAC,WAAyB;AAAA,MACxC,MAAM,WAAW,KAAK,aAAa,IAAI,MAAM;AAAA,MAC7C,IAAI,CAAC;AAAA,QAAU;AAAA,MACf,WAAW,WAAW,UAAU;AAAA,QAC9B,OAAO,KAAK,OAAO;AAAA,QACnB,QAAQ,OAAO;AAAA,MACjB;AAAA;AAAA,IAEF,QAAQ,YAAY;AAAA,IACpB,OAAO;AAAA;AAAA,EAIT,iBAAiB,CAAC,YAAiE;AAAA,IACjF,MAAM,QAAwC,CAAC;AAAA,IAC/C,IAAI,UAA+C,KAAK,kBAAkB,WAAW,EAAE;AAAA,IACvF,MAAM,OAAO,IAAI;AAAA,IAEjB,OAAO,SAAS;AAAA,MACd,IAAI,KAAK,IAAI,QAAQ,EAAE,GAAG;AAAA,QACxB,MAAM,IAAI,yBACR,kEAAkE,WAAW,MAC/E;AAAA,MACF;AAAA,MACA,KAAK,IAAI,QAAQ,EAAE;AAAA,MACnB,MAAM,KAAK,OAAO;AAAA,MAClB,UAAU,QAAQ,UAAU,KAAK,kBAAkB,QAAQ,OAAO,IAAI;AAAA,IACxE;AAAA,IAEA,OAAO,MAAM,QAAQ;AAAA;AAAA,EASvB,iBAAiB,CAAC,UAA6B,QAAyB;AAAA,IACtE,IAAI,aAAa;AAAA,MAAK,OAAO;AAAA,IAC7B,MAAM,QAAQ,MAAM,QAAQ,QAAQ,IAAI,WAAW,CAAC,QAAQ;AAAA,IAC5D,IAAI,MAAM,SAAS,GAAG;AAAA,MAAG,OAAO;AAAA,IAChC,WAAW,QAAQ,OAAO;AAAA,MACxB,IAAI,WAAW,QAAQ,KAAK,aAAa,IAAI,EAAE,SAAS,MAAM;AAAA,QAAG,OAAO;AAAA,IAC1E;AAAA,IACA,OAAO;AAAA;AAAA,EAMT,kBAAkB,GAAsD;AAAA,IACtE,OAAO,KAAK;AAAA;AAAA,EAId,iBAAiB,GAAmC;AAAA,IAClD,OAAO,KAAK;AAAA;AAAA,EAId,kBAAkB,GAAgC;AAAA,IAChD,OAAO,KAAK;AAAA;AAAA,EAUN,+BAA+B,GAAS;AAAA,IAC9C,MAAM,YAAY,IAAI;AAAA,IACtB,MAAM,WAAW,IAAI;AAAA,IAErB,MAAM,gBAAgB,CAAC,UAAkB,YAA0B;AAAA,MACjE,IAAI,WAAW,KAAK,aAAa,IAAI,QAAQ;AAAA,MAC7C,IAAI,CAAC,UAAU;AAAA,QACb,WAAW,IAAI;AAAA,QACf,KAAK,aAAa,IAAI,UAAU,QAAQ;AAAA,MAC1C;AAAA,MACA,SAAS,IAAI,OAAO;AAAA;AAAA,IAGtB,MAAM,QAAQ,CAAC,QAAgB,UAA0B;AAAA,MACvD,IAAI,SAAS,IAAI,MAAM;AAAA,QAAG;AAAA,MAE1B,MAAM,aAAa,KAAK,gBAAgB,IAAI,MAAM;AAAA,MAClD,IAAI,CAAC,cAAc,CAAC,WAAW,SAAS;AAAA,QACtC,SAAS,IAAI,MAAM;AAAA,QACnB;AAAA,MACF;AAAA,MAEA,MAAM,WAAW,WAAW;AAAA,MAE5B,IAAI,CAAC,KAAK,gBAAgB,IAAI,QAAQ,GAAG;AAAA,QACvC,MAAM,IAAI,yBACR,eAAe,iCAAiC,kBAAkB,oFACpE;AAAA,MACF;AAAA,MAEA,IAAI,UAAU,IAAI,MAAM,GAAG;AAAA,QACzB,MAAM,IAAI,yBACR,oCAAoC,CAAC,GAAG,OAAO,MAAM,EAAE,KAAK,UAAK,GACnE;AAAA,MACF;AAAA,MAEA,UAAU,IAAI,MAAM;AAAA,MACpB,MAAM,UAAU,CAAC,GAAG,OAAO,MAAM,CAAC;AAAA,MAElC,cAAc,UAAU,MAAM;AAAA,MAE9B,UAAU,OAAO,MAAM;AAAA,MACvB,SAAS,IAAI,MAAM;AAAA;AAAA,IAGrB,WAAW,UAAU,KAAK,gBAAgB,KAAK,GAAG;AAAA,MAChD,MAAM,QAAQ,CAAC,CAAC;AAAA,IAClB;AAAA,IAEA,YAAY,QAAQ,eAAe,KAAK,iBAAiB;AAAA,MACvD,IAAI,CAAC,WAAW;AAAA,QAAS;AAAA,MACzB,WAAW,YAAY,WAAW,SAAS;AAAA,QACzC,IAAI,aAAa,WAAW;AAAA,UAAS;AAAA,QACrC,IAAI,CAAC,KAAK,gBAAgB,IAAI,QAAQ,GAAG;AAAA,UACvC,MAAM,IAAI,yBACR,eAAe,iCAAiC,6BAA6B,oFAC/E;AAAA,QACF;AAAA,QACA,cAAc,UAAU,MAAM;AAAA,MAChC;AAAA,IACF;AAAA;AAAA,EAOM,0BAA0B,GAAS;AAAA,IACzC,MAAM,WAAW,IAAI;AAAA,IAErB,MAAM,UAAU,CAAC,WAAyB;AAAA,MACxC,IAAI,SAAS,IAAI,MAAM;AAAA,QAAG;AAAA,MAC1B,MAAM,aAAa,KAAK,gBAAgB,IAAI,MAAM;AAAA,MAElD,IAAI,CAAC,WAAW,SAAS;AAAA,QACvB,SAAS,IAAI,MAAM;AAAA,QACnB;AAAA,MACF;AAAA,MAEA,QAAQ,WAAW,OAAO;AAAA,MAC1B,MAAM,SAAS,KAAK,gBAAgB,IAAI,WAAW,OAAO;AAAA,MAE1D,MAAM,YAAY,CAChB,aACA,eACQ;AAAA,QACR,MAAM,WAAW,IAAI,IAAI,WAAW,IAAI,CAAC,SAAS,KAAK,EAAE,CAAC;AAAA,QAC1D,MAAM,aAAa,YAAY,OAAO,CAAC,SAAS,CAAC,SAAS,IAAI,KAAK,EAAE,CAAC;AAAA,QACtE,OAAO,CAAC,GAAG,YAAY,GAAG,UAAU;AAAA;AAAA,MAGtC,MAAM,mBAAmB,UAAU,OAAO,YAAY,WAAW,UAAU;AAAA,MAC3E,MAAM,cAAc,UAAU,OAAO,OAAO,WAAW,KAAK;AAAA,MAE5D,MAAM,UACJ,iBAAiB,WAAW,WAAW,WAAW,UAClD,YAAY,WAAW,WAAW,MAAM;AAAA,MAE1C,IAAI,SAAS;AAAA,QACX,MAAM,SAAqB;AAAA,aACtB;AAAA,UACH,YAAY;AAAA,UACZ,OAAO;AAAA,QACT;AAAA,QACA,MAAM,aAA2C;AAAA,aAC5C;AAAA,UACH,GAAG,wBAAuB,MAAM;AAAA,QAClC;AAAA,QACE,WAA6D,IAC7D,oBAAmB,MAAM;AAAA,QAC3B,KAAK,gBAAgB,IAAI,QAAQ,UAAU;AAAA,MAC7C;AAAA,MAEA,SAAS,IAAI,MAAM;AAAA;AAAA,IAGrB,WAAW,UAAU,KAAK,gBAAgB,KAAK,GAAG;AAAA,MAChD,QAAQ,MAAM;AAAA,IAChB;AAAA;AAEJ;;ACrXA,IAAM,6BAA6B;AAuCnC,SAAS,SAAmC,CAAC,QAAsB,OAA0B;AAAA,EAC3F,MAAM,WAAW,IAAI,IAAI,MAAM,IAAI,CAAC,SAAS,KAAK,EAAE,CAAC;AAAA,EACrD,MAAM,aAAa,OAAO,OAAO,CAAC,SAAS,CAAC,SAAS,IAAI,KAAK,EAAE,CAAC;AAAA,EACjE,OAAO,CAAC,GAAG,YAAY,GAAG,KAAK;AAAA;AAiF1B,SAAS,iBAAgB,CAAC,OAAgE;AAAA,EAC/F,MAAM,MAAM,MAAM;AAAA,EAElB,MAAM,gBAAgB,MAAM,aAAa,CAAC,GAAG,MAAM,UAAU,IAAI,CAAC;AAAA,EAClE,MAAM,WAAW,MAAM,QACnB,MAAM,MAAM,IAAI,CAAC,SAAS,wBAAwB,MAAM,IAAI,IAAI,CAAC,IACjE,CAAC;AAAA,EAEL,IAAI;AAAA,EACJ,IAAI;AAAA,EACJ,IAAI;AAAA,EACJ,IAAI;AAAA,EAEJ,IAAI,OAAO,QAAQ,UAAU;AAAA,IAE3B,YAAY;AAAA,IACZ,YAAY,CAAC,KAAK,IAAI,MAAM,WAAW,CAAC,GAAG,OAAO,CAAC,OAAO,OAAO,GAAG,CAAC;AAAA,IACrE,aAAa;AAAA,IACb,QAAQ;AAAA,EACV,EAAO,SAAI,OAAO,MAAM;AAAA,IAEtB,YAAY,IAAI;AAAA,IAChB,YAAY,CAAC,IAAI,IAAI,IAAI,MAAM,WAAW,CAAC,GAAG,OAAO,CAAC,OAAO,OAAO,IAAI,EAAE,CAAC;AAAA,IAC3E,aAAa,UAAU,IAAI,YAAY,aAAa;AAAA,IACpD,QAAQ,UAAU,CAAC,GAAG,IAAI,KAAK,GAAG,QAAQ;AAAA,EAC5C,EAAO;AAAA,IAEL,YAAY;AAAA,IACZ,YAAY,MAAM,UAAU,CAAC,GAAG,MAAM,OAAO,IAAI;AAAA,IACjD,aAAa;AAAA,IACb,QAAQ;AAAA;AAAA,EAGV,MAAM,aAAyB;AAAA,IAC7B,IAAI,MAAM;AAAA,IACV,MAAM,MAAM;AAAA,IACZ,aAAa,MAAM;AAAA,IACnB,cAAc,MAAM;AAAA,IACpB,SAAS,MAAM;AAAA,IACf,SAAS;AAAA,IACT,SAAS;AAAA,IACT,YAAY,MAAM;AAAA,IAClB;AAAA,IACA;AAAA,IACA,QAAQ,MAAM;AAAA,IACd,OAAO,MAAM;AAAA,EACf;AAAA,EAEA,OAAO;AAAA,OACF;AAAA,IACH,GAAG,oBAAmB,UAAU;AAAA,IAChC,GAAG,wBAAuB,UAAU;AAAA,EACtC;AAAA;AAGF,SAAS,uBAAuB,CAAC,cAAsB,MAA8B;AAAA,EACnF,IAAI,KAAK,uBAAuB,4BAA4B;AAAA,IAC1D,OAAO;AAAA,EACT;AAAA,EAEA,OAAO;AAAA,OACF;AAAA,IACH,oBAAoB;AAAA,EACtB;AAAA;AAoCK,SAAS,eAAc,CAAC,OAAsC;AAAA,EACnE,OAAO;AAAA,OACF;AAAA,IACH,aAAa,MAAM,cAAc,CAAC,GAAG,MAAM,WAAW,IAAI,CAAC;AAAA,IAC3D,YAAY,MAAM,aAAa,CAAC,GAAG,MAAM,UAAU,IAAI,CAAC;AAAA,IACxD,YAAY,MAAM,aAAa,CAAC,GAAG,MAAM,UAAU,IAAI,CAAC;AAAA,EAC1D;AAAA;AAWK,SAAS,gBAAmD,CAAC,OAA+B;AAAA,EACjG,OAAO;AAAA;AA8BF,SAAS,gBAAe,CAAC,OAAwC;AAAA,EACtE,OAAO;AAAA,OACF;AAAA,IACH,YAAY,MAAM,aAAa,CAAC,GAAG,MAAM,UAAU,IAAI,CAAC;AAAA,IACxD,OAAO,MAAM,QAAQ,CAAC,GAAG,MAAM,KAAK,IAAI,CAAC;AAAA,EAC3C;AAAA;AAkEK,SAAS,KAAI,CAAC,IAAY,QAAgB,SAAqC;AAAA,EACpF,QAAQ,aAAa,SAAS,WAAW,CAAC;AAAA,EAC1C,OAAO;AAAA,IACL;AAAA,IACA,MAAM,SAAS,QAAQ;AAAA,IACvB;AAAA,OACG;AAAA,OACC,YAAY,SAAS,SAAS,IAC9B,EAAE,UAAU,eAAe,UAAU,aAAa,cAAc,EAAE,IAClE,CAAC;AAAA,EACP;AAAA;AAWF,SAAS,gBAAgB,CAAC,OAAqC;AAAA,EAC7D,OACE,OAAO,UAAU,YACjB,UAAU,QACV,MAAM,QAAS,MAAkC,UAAU,KAC3D,MAAM,QAAS,MAAkC,KAAK;AAAA;AAgI1D,IAAM,WAAY,CAChB,IACA,iBACA,YACe;AAAA,EACf,IAAI,MAAM,QAAQ,eAAe,GAAG;AAAA,IAClC,OAAO;AAAA,MACL;AAAA,MACA,MAAM,SAAS,QAAQ;AAAA,MACvB,oBAAoB,gBAAgB,IAAI,CAAC,WAAW,OAAO,EAAE;AAAA,SAC1D;AAAA,IACL;AAAA,EACF;AAAA,EAEA,IAAI,iBAAiB,eAAe,GAAG;AAAA,IACrC,OAAO;AAAA,MACL;AAAA,MACA,MAAM,SAAS,QAAQ;AAAA,MACvB,oBAAoB,gBAAgB;AAAA,SACjC;AAAA,IACL;AAAA,EACF;AAAA,EAEA,MAAM,IAAI,MACR,gBAAgB,mJAClB;AAAA;AAgBF,SAAS,OAAO,CACd,IACA,oBACA,SACY;AAAA,EACZ,OAAO;AAAA,IACL;AAAA,IACA,MAAM,SAAS,QAAQ;AAAA,IACvB,oBACE,OAAO,uBAAuB,WAAW,qBAAqB,CAAC,GAAG,kBAAkB;AAAA,OACnF;AAAA,EACL;AAAA;AAGF,SAAS,QAGR,CAAC,IAAS,SAA2E;AAAA,EACpF,OAAO;AAAA,IACL;AAAA,IACA,MAAM,SAAS,QAAQ;AAAA,IACvB,oBAAoB;AAAA,OACjB;AAAA,EACL;AAAA;AAGF,SAAS,OAGR,CAAC,IAAS,SAAoD;AAAA,EAC7D,OAAO;AAAA,IACL;AAAA,IACA,MAAM,SAAS,QAAQ;AAAA,IACvB,oBAAoB;AAAA,OACjB;AAAA,EACL;AAAA;AAGK,IAAM,QAAoB,OAAO,OAAO,UAAU;AAAA,EACvD,KAAK;AAAA,EACL,MAAM;AAAA,EACN,KAAK;AACP,CAAC;AAiCM,SAAS,aAAY,CAC1B,eACA,UACoB;AAAA,EACpB,IAAI,OAAO,kBAAkB,UAAU;AAAA,IACrC,IAAI,aAAa,WAAW;AAAA,MAC1B,OAAO,EAAE,MAAM,gBAAgB,aAAa,eAAe,WAAW,SAAS;AAAA,IACjF;AAAA,IACA,OAAO,EAAE,MAAM,gBAAgB,aAAa,cAAc;AAAA,EAC5D;AAAA,EACA,OAAO;AAAA,IACL,MAAM;AAAA,IACN,aAAa,cAAc;AAAA,IAC3B,WAAW,cAAc;AAAA,OACrB,cAAc,iBAAiB,YAC/B,CAAC,IACD,EAAE,eAAe,cAAc,aAAa;AAAA,EAClD;AAAA;AAYK,SAAS,WAA6C,CAC3D,QAGA;AAAA,EACA,OAAO,EAAE,MAAM,QAAQ,WAAW,UAAU,QAAQ,CAAC,GAAG,MAAM,EAAE;AAAA;AAU3D,SAAS,YAA8C,CAC5D,QAGA;AAAA,EACA,OAAO,EAAE,MAAM,QAAQ,WAAW,WAAW,QAAQ,CAAC,GAAG,MAAM,EAAE;AAAA;",
-  "debugId": "1FDC7067D5F81E0664756E2164756E21",
-  "names": []
-}

package/dist/chunk-ere85b8y.js.map

@@ -1,15 +0,0 @@
-{
-  "version": 3,
-  "sources": ["../src/storage/ai-usage/errors.ts", "../src/storage/ai-usage/in-memory.ts", "../src/storage/ai-cost/analytics.ts", "../src/storage/ai-cost/attribution.ts", "../src/storage/ai-cost/groups.ts", "../src/storage/ai-cost/validation.ts"],
-  "sourcesContent": [
-    "export type AiUsageStorageErrorCode = \"duplicate_id\" | \"missing_execution\"\n\n/** Storage failure specific to the AI model-call usage ledger. */\nexport class AiUsageStorageError extends Error {\n  readonly name = \"AiUsageStorageError\"\n\n  constructor(\n    readonly code: AiUsageStorageErrorCode,\n    message: string\n  ) {\n    super(message)\n  }\n}\n",
-    "import type { ExecutionStorage } from \"../executions\"\nimport { AiUsageStorageError } from \"./errors\"\nimport { assertAiUsageExecutionId, normalizeAiModelCallRecord } from \"./record\"\nimport type {\n  AiModelCallUsageRecord,\n  AiUsageExecutionSummary,\n  AiUsageStorage,\n  GetLatestAiModelCallForExecutionInput,\n  RecordAiModelCallInput,\n  RecordAiModelCallResult,\n  SummarizeAiUsageExecutionInput,\n  SummarizeAiUsageExecutionsInput,\n} from \"./types\"\nimport { aggregateAiModelCallUsage } from \"./usage\"\n\nexport interface InMemoryAiUsageGroupRow {\n  readonly projectId: string\n  readonly usageRecordId: string\n  readonly groupId: string\n  readonly occurredAt: Date\n}\n\nexport interface InMemoryAiUsageStorageSnapshot {\n  readonly records: Map<string, AiModelCallUsageRecord>\n  readonly recordKeysByIdempotencyKey: Map<string, string>\n  readonly groupRows: Map<string, InMemoryAiUsageGroupRow>\n}\n\n/** In-memory model-call ledger used by development runtimes and storage contract tests. */\nexport class InMemoryAiUsageStorage implements AiUsageStorage {\n  private readonly records = new Map<string, AiModelCallUsageRecord>()\n  private readonly recordKeysByIdempotencyKey = new Map<string, string>()\n  private readonly groupRows = new Map<string, InMemoryAiUsageGroupRow>()\n\n  constructor(private readonly executions: Pick<ExecutionStorage, \"getById\">) {}\n\n  async recordModelCall(input: RecordAiModelCallInput): Promise<RecordAiModelCallResult> {\n    const record = normalizeAiModelCallRecord(input)\n    await this.assertExecutionExists(record.projectId, record.executionId)\n    const idempotencyKey = modelCallIdempotencyKey(record)\n    const existingRecordKey = this.recordKeysByIdempotencyKey.get(idempotencyKey)\n    if (existingRecordKey !== undefined) {\n      const existing = this.records.get(existingRecordKey)\n      if (!existing) {\n        throw new Error(\"[Sixb] In-memory AI usage idempotency index is inconsistent.\")\n      }\n      return { record: structuredClone(existing), created: false }\n    }\n\n    const recordKey = modelCallRecordKey(record.projectId, record.id)\n    if (this.records.has(recordKey)) {\n      throw new AiUsageStorageError(\n        \"duplicate_id\",\n        `[Sixb] AI usage record '${record.id}' already exists for project '${record.projectId}'.`\n      )\n    }\n\n    this.records.set(recordKey, structuredClone(record))\n    this.recordKeysByIdempotencyKey.set(idempotencyKey, recordKey)\n    for (const groupId of record.requesterGroupIds) {\n      const row: InMemoryAiUsageGroupRow = {\n        projectId: record.projectId,\n        usageRecordId: record.id,\n        groupId,\n        occurredAt: record.occurredAt,\n      }\n      this.groupRows.set(groupRowKey(row), row)\n    }\n\n    return { record: structuredClone(record), created: true }\n  }\n\n  async getLatestForExecution(\n    input: GetLatestAiModelCallForExecutionInput\n  ): Promise<AiModelCallUsageRecord | null> {\n    assertAiUsageExecutionId(input.executionId)\n    if (typeof input.projectId !== \"string\" || input.projectId.trim().length === 0) {\n      throw new TypeError(\"[Sixb] AI usage projectId must be nonblank.\")\n    }\n\n    let latest: AiModelCallUsageRecord | null = null\n    for (const record of this.records.values()) {\n      if (record.projectId !== input.projectId || record.executionId !== input.executionId) continue\n      if (\n        !latest ||\n        record.occurredAt.getTime() > latest.occurredAt.getTime() ||\n        (record.occurredAt.getTime() === latest.occurredAt.getTime() && record.id > latest.id)\n      ) {\n        latest = record\n      }\n    }\n    return latest ? structuredClone(latest) : null\n  }\n\n  async summarizeExecution(\n    input: SummarizeAiUsageExecutionInput\n  ): Promise<AiUsageExecutionSummary> {\n    const [summary] = await this.summarizeExecutions({\n      projectId: input.projectId,\n      executionIds: [input.executionId],\n    })\n    return summary!\n  }\n\n  async summarizeExecutions(\n    input: SummarizeAiUsageExecutionsInput\n  ): Promise<readonly AiUsageExecutionSummary[]> {\n    if (typeof input.projectId !== \"string\" || input.projectId.trim().length === 0) {\n      throw new TypeError(\"[Sixb] AI usage projectId must be nonblank.\")\n    }\n\n    const usageByExecutionId = new Map<string, AiModelCallUsageRecord[\"usage\"][]>()\n    for (const executionId of input.executionIds) {\n      assertAiUsageExecutionId(executionId)\n      usageByExecutionId.set(executionId, [])\n    }\n    if (usageByExecutionId.size === 0) return []\n\n    for (const record of this.records.values()) {\n      if (record.projectId !== input.projectId) continue\n      usageByExecutionId.get(record.executionId)?.push(record.usage)\n    }\n\n    return input.executionIds.map((executionId) => {\n      const usages = usageByExecutionId.get(executionId) ?? []\n      return {\n        modelCallCount: usages.length,\n        usage: aggregateAiModelCallUsage(usages),\n      }\n    })\n  }\n\n  snapshot(): InMemoryAiUsageStorageSnapshot {\n    return structuredClone({\n      records: this.records,\n      recordKeysByIdempotencyKey: this.recordKeysByIdempotencyKey,\n      groupRows: this.groupRows,\n    })\n  }\n\n  restore(snapshot: InMemoryAiUsageStorageSnapshot): void {\n    replaceMap(this.records, snapshot.records)\n    replaceMap(this.recordKeysByIdempotencyKey, snapshot.recordKeysByIdempotencyKey)\n    replaceMap(this.groupRows, snapshot.groupRows)\n  }\n\n  /** @internal Immutable accounting source used by in-memory AI limit enforcement. */\n  getRecord(projectId: string, id: string): AiModelCallUsageRecord | null {\n    const record = this.records.get(modelCallRecordKey(projectId, id))\n    return record ? structuredClone(record) : null\n  }\n\n  /** @internal Immutable accounting source used by in-memory AI limit status reads. */\n  listRecords(projectId: string): readonly AiModelCallUsageRecord[] {\n    return [...this.records.values()]\n      .filter((record) => record.projectId === projectId)\n      .map((record) => structuredClone(record))\n  }\n\n  private async assertExecutionExists(projectId: string, executionId: string): Promise<void> {\n    const execution = await this.executions.getById({ projectId, id: executionId })\n    if (execution) return\n    throw new AiUsageStorageError(\n      \"missing_execution\",\n      `[Sixb] AI usage execution '${executionId}' does not exist in project '${projectId}'.`\n    )\n  }\n}\n\nfunction modelCallRecordKey(projectId: string, id: string): string {\n  return JSON.stringify([projectId, id])\n}\n\nfunction modelCallIdempotencyKey(\n  record: Pick<\n    AiModelCallUsageRecord,\n    \"projectId\" | \"executionId\" | \"attempt\" | \"callId\" | \"responseId\"\n  >\n): string {\n  return JSON.stringify([\n    record.projectId,\n    record.executionId,\n    record.attempt,\n    record.callId,\n    record.responseId,\n  ])\n}\n\nfunction groupRowKey(row: InMemoryAiUsageGroupRow): string {\n  return JSON.stringify([row.projectId, row.usageRecordId, row.groupId])\n}\n\nfunction replaceMap<TKey, TValue>(target: Map<TKey, TValue>, source: Map<TKey, TValue>): void {\n  target.clear()\n  for (const [key, value] of structuredClone(source)) {\n    target.set(key, value)\n  }\n}\n",
-    "import { type AiModelCallUsageRecord, normalizeAiModelCallUsage } from \"../ai-usage\"\nimport type {\n  AiAccountingAgentBreakdown,\n  AiAccountingAggregate,\n  AiAccountingAttribution,\n  AiAccountingBucket,\n  AiAccountingModelBreakdown,\n  AiAccountingOverview,\n  AiAccountingTimeBucket,\n  AiAccountingWorkflowBreakdown,\n  AiCostSummary,\n  AiModelCallAccountingItem,\n  AiModelCallCostRecord,\n  AiMoney,\n  ListAiModelCallAccountingInput,\n  ListAiModelCallAccountingResult,\n  QueryAiAccountingOverviewInput,\n} from \"./types\"\n\nconst DEFAULT_MODEL_CALL_PAGE_SIZE = 50\nconst MAX_MODEL_CALL_PAGE_SIZE = 200\nconst MAX_CHART_BUCKETS = 10_000\n\n/** One joined immutable model-call row used by in-memory analytics and bounded SQL pages. */\nexport interface AiAccountingRecordSetItem {\n  readonly usage: AiModelCallUsageRecord\n  readonly attribution?: AiAccountingAttribution\n  readonly cost?: AiModelCallCostRecord\n}\n\nexport interface NormalizedAiAccountingQuery {\n  readonly projectId: string\n  readonly from: Date\n  readonly to: Date\n  readonly providerId?: string\n  readonly modelId?: string\n}\n\nexport interface NormalizedAiModelCallAccountingQuery extends NormalizedAiAccountingQuery {\n  readonly executionId?: string\n  readonly valuationStatus?: ListAiModelCallAccountingInput[\"valuationStatus\"]\n  readonly limit: number\n  readonly offset: number\n}\n\ninterface AiAccountingUsageMeterFragment {\n  readonly presentCallCount: string\n  readonly total: string | null\n}\n\n/** One SQL-aggregated currency fragment; providers merge fragments without loading model calls. */\nexport interface AiAccountingAggregateFragment {\n  readonly dimension: \"totals\" | \"series\" | \"model\" | \"agent\" | \"workflow\"\n  readonly start?: Date\n  readonly providerId?: string\n  readonly modelId?: string\n  readonly agentKind?: \"agent\" | \"workflowAgent\"\n  readonly agentStepId?: string\n  readonly workflowId?: string\n  readonly modelCallCount: string\n  readonly usage: {\n    readonly reportedCallCount: string\n    readonly completeCallCount: string\n    readonly inputTokens: AiAccountingUsageMeterFragment\n    readonly outputTokens: AiAccountingUsageMeterFragment\n    readonly uncachedInputTokens: AiAccountingUsageMeterFragment\n    readonly cacheReadInputTokens: AiAccountingUsageMeterFragment\n    readonly cacheWriteInputTokens: AiAccountingUsageMeterFragment\n    readonly textOutputTokens: AiAccountingUsageMeterFragment\n    readonly reasoningOutputTokens: AiAccountingUsageMeterFragment\n    readonly audioDurationMs: AiAccountingUsageMeterFragment\n  }\n  readonly costs: {\n    readonly amount?: AiMoney\n    readonly ratedCallCount: string\n    readonly unpriceableCallCount: string\n    readonly unvaluedCallCount: string\n  }\n}\n\nexport function normalizeAiAccountingQuery(\n  input: Omit<QueryAiAccountingOverviewInput, \"bucket\"> | ListAiModelCallAccountingInput\n): NormalizedAiAccountingQuery {\n  assertNonBlank(input.projectId, \"accounting projectId\")\n  assertDate(input.from, \"accounting from\")\n  assertDate(input.to, \"accounting to\")\n  if (input.from.getTime() >= input.to.getTime()) {\n    throw new TypeError(\"[Sixb] AI accounting from must be before to.\")\n  }\n  if (input.providerId !== undefined) assertNonBlank(input.providerId, \"accounting providerId\")\n  if (input.modelId !== undefined) assertNonBlank(input.modelId, \"accounting modelId\")\n  return {\n    projectId: input.projectId,\n    from: new Date(input.from),\n    to: new Date(input.to),\n    ...(input.providerId === undefined ? {} : { providerId: input.providerId }),\n    ...(input.modelId === undefined ? {} : { modelId: input.modelId }),\n  }\n}\n\nexport function normalizeAiModelCallAccountingQuery(\n  input: ListAiModelCallAccountingInput\n): NormalizedAiModelCallAccountingQuery {\n  const query = normalizeAiAccountingQuery(input)\n  if (input.executionId !== undefined) {\n    assertNonBlank(input.executionId, \"accounting executionId\")\n  }\n  const { limit, offset } = normalizePage(input.limit, input.offset)\n  return {\n    ...query,\n    ...(input.executionId === undefined ? {} : { executionId: input.executionId }),\n    ...(input.valuationStatus === undefined ? {} : { valuationStatus: input.valuationStatus }),\n    limit,\n    offset,\n  }\n}\n\nexport function aiAccountingItemMatchesQuery(\n  item: AiAccountingRecordSetItem,\n  query: NormalizedAiAccountingQuery\n): boolean {\n  const occurredAt = item.usage.occurredAt.getTime()\n  return (\n    item.usage.projectId === query.projectId &&\n    occurredAt >= query.from.getTime() &&\n    occurredAt < query.to.getTime() &&\n    (query.providerId === undefined || item.usage.providerId === query.providerId) &&\n    (query.modelId === undefined || item.usage.requestedModelId === query.modelId)\n  )\n}\n\nexport function buildAiAccountingOverview(\n  input: QueryAiAccountingOverviewInput,\n  source: Iterable<AiAccountingRecordSetItem>\n): AiAccountingOverview {\n  const query = normalizeAiAccountingQuery(input)\n  assertAiAccountingBucket(input.bucket)\n  const items = Array.from(source).filter((item) => aiAccountingItemMatchesQuery(item, query))\n  const periods = accountingPeriods(query.from, query.to, input.bucket)\n  const periodItems = new Map<number, AiAccountingRecordSetItem[]>(\n    periods.map((period) => [period.start.getTime(), []])\n  )\n  const modelItems = new Map<string, AiAccountingRecordSetItem[]>()\n  const agentItems = new Map<string, AiAccountingRecordSetItem[]>()\n  const workflowItems = new Map<string, AiAccountingRecordSetItem[]>()\n\n  for (const item of items) {\n    const periodStart = aiAccountingBucketStart(item.usage.occurredAt, input.bucket).getTime()\n    periodItems.get(periodStart)?.push(item)\n    appendGrouped(\n      modelItems,\n      JSON.stringify([item.usage.providerId, item.usage.requestedModelId]),\n      item\n    )\n    if (item.attribution?.kind === \"agent\") {\n      appendGrouped(agentItems, JSON.stringify([\"agent\"]), item)\n    } else if (item.attribution?.kind === \"workflowAgent\") {\n      appendGrouped(\n        agentItems,\n        JSON.stringify([\n          \"workflowAgent\",\n          item.attribution.workflowId,\n          item.attribution.agentStepId,\n        ]),\n        item\n      )\n    }\n    if (item.attribution?.kind === \"workflowAgent\" || item.attribution?.kind === \"workflow\") {\n      appendGrouped(workflowItems, item.attribution.workflowId, item)\n    }\n  }\n\n  const series: AiAccountingTimeBucket[] = periods.map((period) => ({\n    ...period,\n    ...aggregateAccountingItems(periodItems.get(period.start.getTime()) ?? []),\n  }))\n  const models: AiAccountingModelBreakdown[] = [...modelItems]\n    .map(([key, grouped]) => {\n      const [providerId, modelId] = JSON.parse(key) as [string, string]\n      return { providerId, modelId, ...aggregateAccountingItems(grouped) }\n    })\n    .sort(compareModelBreakdowns)\n  const agents: AiAccountingAgentBreakdown[] = [...agentItems]\n    .map(([key, grouped]) => {\n      const [kind, workflowId, agentStepId] = JSON.parse(key) as [\n        \"agent\" | \"workflowAgent\",\n        string?,\n        string?,\n      ]\n      return kind === \"agent\"\n        ? { kind, ...aggregateAccountingItems(grouped) }\n        : {\n            kind,\n            workflowId: requiredFragmentString(workflowId, \"workflowId\"),\n            agentStepId: requiredFragmentString(agentStepId, \"agentStepId\"),\n            ...aggregateAccountingItems(grouped),\n          }\n    })\n    .sort(compareAgentBreakdowns)\n  const workflows: AiAccountingWorkflowBreakdown[] = [...workflowItems]\n    .map(([workflowId, grouped]) => ({ workflowId, ...aggregateAccountingItems(grouped) }))\n    .sort(compareWorkflowBreakdowns)\n\n  return structuredClone({\n    range: { from: query.from, to: query.to },\n    bucket: input.bucket,\n    totals: aggregateAccountingItems(items),\n    series,\n    models,\n    agents,\n    workflows,\n  })\n}\n\nexport function buildAiAccountingOverviewFromFragments(\n  input: QueryAiAccountingOverviewInput,\n  fragments: Iterable<AiAccountingAggregateFragment>\n): AiAccountingOverview {\n  const query = normalizeAiAccountingQuery(input)\n  const periods = accountingPeriods(query.from, query.to, input.bucket)\n  const totals = aggregateFragmentAccumulator()\n  const series = new Map<number, AggregateFragmentAccumulator>(\n    periods.map((period) => [period.start.getTime(), aggregateFragmentAccumulator()])\n  )\n  const models = new Map<string, AggregateFragmentAccumulator>()\n  const agents = new Map<string, AggregateFragmentAccumulator>()\n  const workflows = new Map<string, AggregateFragmentAccumulator>()\n\n  for (const fragment of fragments) {\n    let target: AggregateFragmentAccumulator\n    switch (fragment.dimension) {\n      case \"totals\":\n        target = totals\n        break\n      case \"series\": {\n        const start = requiredFragmentDate(fragment.start, \"series start\")\n        const existing = series.get(start.getTime())\n        if (!existing) {\n          throw new TypeError(\"[Sixb] AI accounting SQL series returned an unexpected bucket.\")\n        }\n        target = existing\n        break\n      }\n      case \"model\":\n        target = getFragmentAccumulator(\n          models,\n          JSON.stringify([\n            requiredFragmentString(fragment.providerId, \"providerId\"),\n            requiredFragmentString(fragment.modelId, \"modelId\"),\n          ])\n        )\n        break\n      case \"agent\":\n        target = getFragmentAccumulator(\n          agents,\n          JSON.stringify([\n            requiredFragmentString(fragment.agentKind, \"agentKind\"),\n            fragment.workflowId,\n            fragment.agentStepId,\n          ])\n        )\n        break\n      case \"workflow\":\n        target = getFragmentAccumulator(\n          workflows,\n          requiredFragmentString(fragment.workflowId, \"workflowId\")\n        )\n        break\n    }\n    appendAggregateFragment(target, fragment)\n  }\n\n  return structuredClone({\n    range: { from: query.from, to: query.to },\n    bucket: input.bucket,\n    totals: finishAggregateFragment(totals),\n    series: periods.map((period) => ({\n      ...period,\n      ...finishAggregateFragment(series.get(period.start.getTime())!),\n    })),\n    models: [...models]\n      .map(([key, value]) => {\n        const [providerId, modelId] = JSON.parse(key) as [string, string]\n        return { providerId, modelId, ...finishAggregateFragment(value) }\n      })\n      .sort(compareModelBreakdowns),\n    agents: [...agents]\n      .map(([key, value]) => {\n        const [kind, workflowId, agentStepId] = JSON.parse(key) as [\n          \"agent\" | \"workflowAgent\",\n          string?,\n          string?,\n        ]\n        return kind === \"agent\"\n          ? { kind, ...finishAggregateFragment(value) }\n          : {\n              kind,\n              workflowId: requiredFragmentString(workflowId, \"workflowId\"),\n              agentStepId: requiredFragmentString(agentStepId, \"agentStepId\"),\n              ...finishAggregateFragment(value),\n            }\n      })\n      .sort(compareAgentBreakdowns),\n    workflows: [...workflows]\n      .map(([workflowId, value]) => ({ workflowId, ...finishAggregateFragment(value) }))\n      .sort(compareWorkflowBreakdowns),\n  })\n}\n\nexport function buildAiModelCallAccountingList(\n  input: ListAiModelCallAccountingInput,\n  source: Iterable<AiAccountingRecordSetItem>\n): ListAiModelCallAccountingResult {\n  const query = normalizeAiModelCallAccountingQuery(input)\n  const { limit, offset } = query\n  const items = Array.from(source)\n    .filter((item) => aiAccountingItemMatchesQuery(item, query))\n    .map(toAccountingItem)\n    .filter(\n      (item) =>\n        (input.executionId === undefined || item.usage.executionId === input.executionId) &&\n        (input.valuationStatus === undefined || item.valuationStatus === input.valuationStatus)\n    )\n    .sort(compareAccountingItems)\n  const page = items.slice(offset, offset + limit)\n  return structuredClone({\n    items: page,\n    hasMore: offset + page.length < items.length,\n    total: items.length,\n  })\n}\n\nexport function toAccountingItem(item: AiAccountingRecordSetItem): AiModelCallAccountingItem {\n  return {\n    usage: item.usage,\n    ...(item.attribution === undefined ? {} : { attribution: item.attribution }),\n    ...(item.cost === undefined ? {} : { cost: item.cost }),\n    valuationStatus: item.cost?.status ?? \"unvalued\",\n  }\n}\n\nexport function aiAccountingBucketStart(at: Date, bucket: AiAccountingBucket): Date {\n  assertDate(at, \"accounting bucket timestamp\")\n  assertAiAccountingBucket(bucket)\n  const start = new Date(at)\n  start.setUTCMinutes(0, 0, 0)\n  if (bucket === \"hour\") return start\n  start.setUTCHours(0)\n  if (bucket === \"day\") return start\n  const mondayOffset = (start.getUTCDay() + 6) % 7\n  start.setUTCDate(start.getUTCDate() - mondayOffset)\n  return start\n}\n\nfunction aggregateAccountingItems(\n  items: readonly AiAccountingRecordSetItem[]\n): AiAccountingAggregate {\n  const value = aggregateFragmentAccumulator()\n  value.modelCallCount = BigInt(items.length)\n  for (const item of items) {\n    const usage = normalizeAiModelCallUsage(item.usage.usage)\n    if (usage.reportingStatus !== \"unavailable\") value.reportedUsageCallCount += 1n\n    if (usage.reportingStatus === \"complete\") value.completeUsageCallCount += 1n\n    for (const field of AGGREGATE_USAGE_FIELDS) {\n      if (usage[field] === undefined) continue\n      value.usage[field].presentCallCount += 1n\n      value.usage[field].total += BigInt(usage[field])\n    }\n  }\n  return {\n    modelCallCount: items.length,\n    ...finishAggregateUsage(value),\n    costs: aggregateCosts(items),\n  }\n}\n\nfunction aggregateCosts(items: readonly AiAccountingRecordSetItem[]): AiCostSummary {\n  const amounts = new Map<string, bigint>()\n  let ratedCallCount = 0\n  let unpriceableCallCount = 0\n  let unvaluedCallCount = 0\n  for (const item of items) {\n    if (item.cost?.status === \"rated\") {\n      ratedCallCount += 1\n      addAmount(amounts, item.cost.money.currency, item.cost.money.amountNanos)\n    } else if (item.cost?.status === \"unpriceable\") {\n      unpriceableCallCount += 1\n    } else {\n      unvaluedCallCount += 1\n    }\n  }\n  return {\n    amounts: [...amounts]\n      .sort(([left], [right]) => left.localeCompare(right))\n      .map(([currency, amountNanos]) => ({ currency, amountNanos: amountNanos.toString() })),\n    ratedCallCount,\n    unpriceableCallCount,\n    unvaluedCallCount,\n  }\n}\n\nconst AGGREGATE_USAGE_FIELDS = [\n  \"inputTokens\",\n  \"outputTokens\",\n  \"uncachedInputTokens\",\n  \"cacheReadInputTokens\",\n  \"cacheWriteInputTokens\",\n  \"textOutputTokens\",\n  \"reasoningOutputTokens\",\n  \"audioDurationMs\",\n] as const\n\ntype AggregateUsageField = (typeof AGGREGATE_USAGE_FIELDS)[number]\n\ninterface AggregateFragmentAccumulator {\n  modelCallCount: bigint\n  reportedUsageCallCount: bigint\n  completeUsageCallCount: bigint\n  usage: Record<AggregateUsageField, { presentCallCount: bigint; total: bigint }>\n  amounts: Map<string, bigint>\n  ratedCallCount: bigint\n  unpriceableCallCount: bigint\n  unvaluedCallCount: bigint\n}\n\nfunction aggregateFragmentAccumulator(): AggregateFragmentAccumulator {\n  return {\n    modelCallCount: 0n,\n    reportedUsageCallCount: 0n,\n    completeUsageCallCount: 0n,\n    usage: Object.fromEntries(\n      AGGREGATE_USAGE_FIELDS.map((field) => [field, { presentCallCount: 0n, total: 0n }])\n    ) as AggregateFragmentAccumulator[\"usage\"],\n    amounts: new Map(),\n    ratedCallCount: 0n,\n    unpriceableCallCount: 0n,\n    unvaluedCallCount: 0n,\n  }\n}\n\nfunction getFragmentAccumulator(\n  values: Map<string, AggregateFragmentAccumulator>,\n  key: string\n): AggregateFragmentAccumulator {\n  const existing = values.get(key)\n  if (existing) return existing\n  const created = aggregateFragmentAccumulator()\n  values.set(key, created)\n  return created\n}\n\nfunction appendAggregateFragment(\n  target: AggregateFragmentAccumulator,\n  fragment: AiAccountingAggregateFragment\n): void {\n  target.modelCallCount += naturalBigInt(fragment.modelCallCount, \"modelCallCount\")\n  target.reportedUsageCallCount += naturalBigInt(\n    fragment.usage.reportedCallCount,\n    \"reported usage call count\"\n  )\n  target.completeUsageCallCount += naturalBigInt(\n    fragment.usage.completeCallCount,\n    \"complete usage call count\"\n  )\n  for (const field of AGGREGATE_USAGE_FIELDS) {\n    const source = fragment.usage[field]\n    const presentCallCount = naturalBigInt(source.presentCallCount, `${field} call count`)\n    target.usage[field].presentCallCount += presentCallCount\n    if (source.total !== null) {\n      target.usage[field].total += naturalBigInt(source.total, `${field} total`)\n    } else if (presentCallCount !== 0n) {\n      throw new TypeError(`[Sixb] AI accounting SQL ${field} total is missing.`)\n    }\n  }\n  target.ratedCallCount += naturalBigInt(fragment.costs.ratedCallCount, \"rated call count\")\n  target.unpriceableCallCount += naturalBigInt(\n    fragment.costs.unpriceableCallCount,\n    \"unpriceable call count\"\n  )\n  target.unvaluedCallCount += naturalBigInt(fragment.costs.unvaluedCallCount, \"unvalued call count\")\n  if (fragment.costs.amount) {\n    addAmount(target.amounts, fragment.costs.amount.currency, fragment.costs.amount.amountNanos)\n  }\n}\n\nfunction finishAggregateFragment(value: AggregateFragmentAccumulator): AiAccountingAggregate {\n  const classifiedCallCount =\n    value.ratedCallCount + value.unpriceableCallCount + value.unvaluedCallCount\n  if (\n    classifiedCallCount !== value.modelCallCount ||\n    value.reportedUsageCallCount > value.modelCallCount ||\n    value.completeUsageCallCount > value.reportedUsageCallCount ||\n    AGGREGATE_USAGE_FIELDS.some(\n      (field) => value.usage[field].presentCallCount > value.modelCallCount\n    )\n  ) {\n    throw new TypeError(\"[Sixb] AI accounting SQL aggregate counts are inconsistent.\")\n  }\n  const modelCallCount = safeAggregateNumber(value.modelCallCount, \"model-call count\")\n  return {\n    modelCallCount,\n    ...finishAggregateUsage(value),\n    costs: {\n      amounts: [...value.amounts]\n        .sort(([left], [right]) => left.localeCompare(right))\n        .map(([currency, amountNanos]) => ({ currency, amountNanos: amountNanos.toString() })),\n      ratedCallCount: safeAggregateNumber(value.ratedCallCount, \"rated call count\"),\n      unpriceableCallCount: safeAggregateNumber(\n        value.unpriceableCallCount,\n        \"unpriceable call count\"\n      ),\n      unvaluedCallCount: safeAggregateNumber(value.unvaluedCallCount, \"unvalued call count\"),\n    },\n  }\n}\n\nfunction finishAggregateUsage(\n  value: AggregateFragmentAccumulator\n): Pick<AiAccountingAggregate, \"usage\" | \"usageCoverage\"> {\n  const counts: Partial<Record<AggregateUsageField | \"totalTokens\", number>> = {}\n  const fieldCallCounts = {} as Record<AggregateUsageField, number>\n  for (const field of AGGREGATE_USAGE_FIELDS) {\n    const aggregate = value.usage[field]\n    fieldCallCounts[field] = safeAggregateNumber(aggregate.presentCallCount, `${field} call count`)\n    if (aggregate.presentCallCount > 0n) {\n      counts[field] = safeAggregateNumber(aggregate.total, field)\n    }\n  }\n  // Only the top-level meters contribute: cache/reasoning partitions overlap them.\n  if (counts.inputTokens !== undefined || counts.outputTokens !== undefined) {\n    counts.totalTokens = safeAggregateNumber(\n      value.usage.inputTokens.total + value.usage.outputTokens.total,\n      \"totalTokens\"\n    )\n  }\n  return {\n    usage: {\n      ...counts,\n      reportingStatus:\n        value.reportedUsageCallCount === 0n\n          ? \"unavailable\"\n          : value.completeUsageCallCount === value.modelCallCount\n            ? \"complete\"\n            : \"partial\",\n    },\n    usageCoverage: {\n      completeCallCount: safeAggregateNumber(value.completeUsageCallCount, \"complete call count\"),\n      fieldCallCounts,\n    },\n  }\n}\n\nfunction naturalBigInt(value: string, field: string): bigint {\n  if (!/^(0|[1-9]\\d*)$/.test(value)) {\n    throw new TypeError(`[Sixb] AI accounting SQL ${field} must be a natural integer.`)\n  }\n  return BigInt(value)\n}\n\nfunction safeAggregateNumber(value: bigint, field: string): number {\n  if (value > BigInt(Number.MAX_SAFE_INTEGER)) {\n    throw new TypeError(`[Sixb] AI accounting ${field} exceeds the safe integer range.`)\n  }\n  return Number(value)\n}\n\nfunction requiredFragmentString(value: string | undefined, field: string): string {\n  if (value === undefined || value.length === 0) {\n    throw new TypeError(`[Sixb] AI accounting SQL ${field} is missing.`)\n  }\n  return value\n}\n\nfunction requiredFragmentDate(value: Date | undefined, field: string): Date {\n  if (value === undefined) throw new TypeError(`[Sixb] AI accounting SQL ${field} is missing.`)\n  assertDate(value, field)\n  return value\n}\n\nfunction accountingPeriods(\n  from: Date,\n  to: Date,\n  bucket: AiAccountingBucket\n): Array<{ start: Date; end: Date }> {\n  const result: Array<{ start: Date; end: Date }> = []\n  let cursor = aiAccountingBucketStart(from, bucket)\n  while (cursor.getTime() < to.getTime()) {\n    if (result.length >= MAX_CHART_BUCKETS) {\n      throw new RangeError(`[Sixb] AI accounting query exceeds ${MAX_CHART_BUCKETS} chart buckets.`)\n    }\n    const next = nextBucket(cursor, bucket)\n    result.push({ start: new Date(cursor), end: next })\n    cursor = next\n  }\n  return result\n}\n\nfunction nextBucket(start: Date, bucket: AiAccountingBucket): Date {\n  const next = new Date(start)\n  if (bucket === \"hour\") next.setUTCHours(next.getUTCHours() + 1)\n  else if (bucket === \"day\") next.setUTCDate(next.getUTCDate() + 1)\n  else next.setUTCDate(next.getUTCDate() + 7)\n  return next\n}\n\nfunction appendGrouped(\n  groups: Map<string, AiAccountingRecordSetItem[]>,\n  key: string,\n  item: AiAccountingRecordSetItem\n): void {\n  const existing = groups.get(key)\n  if (existing) existing.push(item)\n  else groups.set(key, [item])\n}\n\nfunction addAmount(amounts: Map<string, bigint>, currency: string, amountNanos: string): void {\n  amounts.set(currency, (amounts.get(currency) ?? 0n) + BigInt(amountNanos))\n}\n\nfunction normalizePage(\n  requestedLimit: number | undefined,\n  requestedOffset: number | undefined\n): { limit: number; offset: number } {\n  const limit = requestedLimit ?? DEFAULT_MODEL_CALL_PAGE_SIZE\n  const offset = requestedOffset ?? 0\n  if (!Number.isSafeInteger(limit) || limit < 1 || limit > MAX_MODEL_CALL_PAGE_SIZE) {\n    throw new TypeError(\n      `[Sixb] AI accounting list limit must be an integer between 1 and ${MAX_MODEL_CALL_PAGE_SIZE}.`\n    )\n  }\n  if (!Number.isSafeInteger(offset) || offset < 0) {\n    throw new TypeError(\"[Sixb] AI accounting list offset must be a non-negative integer.\")\n  }\n  return { limit, offset }\n}\n\nfunction compareAccountingItems(\n  left: AiModelCallAccountingItem,\n  right: AiModelCallAccountingItem\n): number {\n  return (\n    right.usage.occurredAt.getTime() - left.usage.occurredAt.getTime() ||\n    left.usage.id.localeCompare(right.usage.id)\n  )\n}\n\nfunction compareAgentBreakdowns(\n  left: AiAccountingAgentBreakdown,\n  right: AiAccountingAgentBreakdown\n): number {\n  return (\n    right.modelCallCount - left.modelCallCount ||\n    agentBreakdownKey(left).localeCompare(agentBreakdownKey(right))\n  )\n}\n\nfunction agentBreakdownKey(value: AiAccountingAgentBreakdown): string {\n  return value.kind === \"agent\"\n    ? \"agent\"\n    : JSON.stringify([\"workflowAgent\", value.workflowId, value.agentStepId])\n}\n\nfunction compareWorkflowBreakdowns(\n  left: AiAccountingWorkflowBreakdown,\n  right: AiAccountingWorkflowBreakdown\n): number {\n  return (\n    right.modelCallCount - left.modelCallCount || left.workflowId.localeCompare(right.workflowId)\n  )\n}\n\nfunction compareModelBreakdowns(\n  left: AiAccountingModelBreakdown,\n  right: AiAccountingModelBreakdown\n): number {\n  return (\n    right.modelCallCount - left.modelCallCount ||\n    left.providerId.localeCompare(right.providerId) ||\n    left.modelId.localeCompare(right.modelId)\n  )\n}\n\nfunction assertAiAccountingBucket(bucket: AiAccountingBucket): void {\n  if (bucket !== \"hour\" && bucket !== \"day\" && bucket !== \"week\") {\n    throw new TypeError(\"[Sixb] AI accounting bucket must be hour, day, or week.\")\n  }\n}\n\nfunction assertDate(value: Date, label: string): void {\n  if (!(value instanceof Date) || !Number.isFinite(value.getTime())) {\n    throw new TypeError(`[Sixb] AI ${label} must be a valid Date.`)\n  }\n}\n\nfunction assertNonBlank(value: string, label: string): void {\n  if (typeof value !== \"string\" || value.trim().length === 0) {\n    throw new TypeError(`[Sixb] AI ${label} must be nonblank.`)\n  }\n}\n",
-    "import type { AiAccountingAttribution } from \"./types\"\n\n/** Direct calls are identified by durable provenance, even when their run has been removed. */\nexport function directModelCallAttribution(\n  kind: string | null,\n  id: string | null,\n  primitiveId: string | null\n): AiAccountingAttribution | undefined {\n  if (!id) return undefined\n  if (kind === \"request\") return { kind, requestId: id }\n  if (kind === \"action\" && primitiveId) return { kind, actionId: primitiveId, actionRunId: id }\n  if (kind === \"workflow\" && primitiveId)\n    return { kind, workflowId: primitiveId, workflowRunId: id }\n  return undefined\n}\n",
-    "import type { AiAccountingRecordSetItem } from \"./analytics\"\nimport { aiAccountingItemMatchesQuery, normalizeAiModelCallAccountingQuery } from \"./analytics\"\nimport { directModelCallAttribution } from \"./attribution\"\nimport type {\n  AiAccountingAttribution,\n  AiBillingIdentity,\n  AiCostSummary,\n  AiModelCallExecutionSummary,\n  AiModelCallGroup,\n  AiModelCallGroupSummary,\n  AiMoney,\n  ListAiModelCallGroupsInput,\n  ListAiModelCallGroupsResult,\n} from \"./types\"\n\nexport interface AiAccountingGroupIdentity {\n  readonly executionId: string\n  readonly attribution?: AiAccountingAttribution\n}\n\n/** A compact SQL aggregate, never the raw provider response or a page of individual calls. */\nexport interface AiModelCallGroupFragment {\n  readonly root: AiAccountingGroupIdentity\n  readonly execution: AiAccountingGroupIdentity\n  readonly model: AiBillingIdentity\n  readonly firstCallAt: Date\n  readonly lastCallAt: Date\n  readonly callCount: string\n  readonly tokenCount: string\n  readonly totalTokens: string | null\n  readonly valuationStatus: \"rated\" | \"unpriceable\" | \"unvalued\"\n  readonly money?: AiMoney\n}\n\n/** Common provider projection; SQL groups meters before returning rows to the runtime. */\nexport interface AiModelCallGroupRow {\n  readonly root_execution_id: string\n  readonly execution_id: string\n  readonly provider_id: string\n  readonly requested_model_id: string\n  readonly first_call_at: Date | string\n  readonly last_call_at: Date | string\n  readonly call_count: string\n  readonly token_count: string\n  readonly total_tokens: string | null\n  readonly valuation_status: AiModelCallGroupFragment[\"valuationStatus\"]\n  readonly amount_currency: string | null\n  readonly amount_high: string | null\n  readonly amount_middle: string | null\n  readonly amount_low: string | null\n  readonly root_agent_run_id: string | null\n  readonly root_thread_id: string | null\n  readonly direct_kind: string | null\n  readonly direct_run_id: string | null\n  readonly parent_run_id: string | null\n  readonly workflow_agent_step_id: string | null\n  readonly workflow_node_run_id: string | null\n  readonly workflow_id: string | null\n  readonly workflow_run_id: string | null\n  readonly executor_kind: string | null\n  readonly executor_id: string | null\n  readonly primitive_id: string | null\n}\n\nexport function aiModelCallGroupFragmentFromRow(\n  row: AiModelCallGroupRow\n): AiModelCallGroupFragment {\n  let attribution = directModelCallAttribution(row.executor_kind, row.executor_id, row.primitive_id)\n  if (row.root_agent_run_id && row.root_thread_id) {\n    attribution = {\n      kind: \"agent\",\n      agentRunId: row.root_agent_run_id,\n      threadId: row.root_thread_id,\n    }\n  } else if (\n    row.workflow_agent_step_id &&\n    row.workflow_node_run_id &&\n    row.workflow_id &&\n    row.workflow_run_id\n  ) {\n    attribution = {\n      kind: \"workflowAgent\",\n      agentStepId: row.workflow_agent_step_id,\n      nodeRunId: row.workflow_node_run_id,\n      workflowId: row.workflow_id,\n      workflowRunId: row.workflow_run_id,\n    }\n  }\n  const executionAttribution: AiAccountingAttribution | undefined =\n    row.direct_kind === \"subagent\" && row.direct_run_id && row.parent_run_id\n      ? { kind: \"subagent\", subagentRunId: row.direct_run_id, parentRunId: row.parent_run_id }\n      : attribution\n  return {\n    root: { executionId: row.root_execution_id, attribution },\n    execution: { executionId: row.execution_id, attribution: executionAttribution },\n    model: { providerId: row.provider_id, modelId: row.requested_model_id },\n    firstCallAt: new Date(row.first_call_at),\n    lastCallAt: new Date(row.last_call_at),\n    callCount: row.call_count,\n    tokenCount: row.token_count,\n    totalTokens: row.total_tokens,\n    valuationStatus: row.valuation_status,\n    ...(row.amount_currency === null\n      ? {}\n      : {\n          money: {\n            currency: row.amount_currency,\n            amountNanos: (\n              BigInt(row.amount_high ?? \"0\") * 1_000_000_000_000n +\n              BigInt(row.amount_middle ?? \"0\") * 1_000_000n +\n              BigInt(row.amount_low ?? \"0\")\n            ).toString(),\n          },\n        }),\n  }\n}\n\nexport function buildAiModelCallGroupsFromFragments(\n  fragments: readonly AiModelCallGroupFragment[]\n): readonly AiModelCallGroup[] {\n  const roots = new Map<string, AiModelCallGroupFragment[]>()\n  for (const fragment of fragments) append(roots, fragment.root.executionId, fragment)\n  return [...roots.values()]\n    .map((rootFragments): AiModelCallGroup => {\n      const first = rootFragments[0]!\n      const executions = new Map<string, AiModelCallGroupFragment[]>()\n      for (const fragment of rootFragments)\n        append(executions, fragment.execution.executionId, fragment)\n      return {\n        ...first.root,\n        ...summarize(rootFragments),\n        ...timeRange(rootFragments),\n        executions: [...executions.values()]\n          .map(\n            (items): AiModelCallExecutionSummary => ({\n              ...items[0]!.execution,\n              ...summarize(items),\n              ...timeRange(items),\n              models: [\n                ...new Map(items.map(({ model }) => [JSON.stringify(model), model])).values(),\n              ].sort(\n                (a, b) =>\n                  compareText(a.providerId, b.providerId) || compareText(a.modelId, b.modelId)\n              ),\n            })\n          )\n          .sort(\n            (a, b) =>\n              a.firstCallAt.getTime() - b.firstCallAt.getTime() ||\n              compareText(a.executionId, b.executionId)\n          ),\n      }\n    })\n    .sort(\n      (a, b) =>\n        b.lastCallAt.getTime() - a.lastCallAt.getTime() || compareText(a.executionId, b.executionId)\n    )\n}\n\nexport function buildAiModelCallGroups(\n  input: ListAiModelCallGroupsInput,\n  source: readonly (AiAccountingRecordSetItem & { readonly root: AiAccountingGroupIdentity })[]\n): ListAiModelCallGroupsResult {\n  const query = normalizeAiModelCallAccountingQuery(input)\n  const fragments = source\n    .filter(\n      (item) =>\n        aiAccountingItemMatchesQuery(item, query) &&\n        (query.valuationStatus === undefined ||\n          (item.cost?.status ?? \"unvalued\") === query.valuationStatus)\n    )\n    .map(\n      (item): AiModelCallGroupFragment => ({\n        root: item.root,\n        execution: { executionId: item.usage.executionId, attribution: item.attribution },\n        model: { providerId: item.usage.providerId, modelId: item.usage.requestedModelId },\n        firstCallAt: item.usage.occurredAt,\n        lastCallAt: item.usage.occurredAt,\n        callCount: \"1\",\n        tokenCount: item.usage.usage.totalTokens === undefined ? \"0\" : \"1\",\n        totalTokens: item.usage.usage.totalTokens?.toString() ?? null,\n        valuationStatus: item.cost?.status ?? \"unvalued\",\n        ...(item.cost && item.cost.status !== \"unpriceable\" ? { money: item.cost.money } : {}),\n      })\n    )\n  const groups = buildAiModelCallGroupsFromFragments(fragments)\n  const items = groups.slice(query.offset, query.offset + query.limit)\n  return structuredClone({\n    items,\n    total: groups.length,\n    hasMore: query.offset + items.length < groups.length,\n  })\n}\n\nfunction summarize(items: readonly AiModelCallGroupFragment[]): AiModelCallGroupSummary {\n  let calls = 0n\n  let tokenCount = 0n\n  let tokens = 0n\n  const counts = { rated: 0n, unpriceable: 0n, unvalued: 0n }\n  const money = new Map<string, bigint>()\n  for (const item of items) {\n    const count = BigInt(item.callCount)\n    calls += count\n    tokenCount += BigInt(item.tokenCount)\n    tokens += BigInt(item.totalTokens ?? \"0\")\n    counts[item.valuationStatus] += count\n    if (item.money)\n      money.set(\n        item.money.currency,\n        (money.get(item.money.currency) ?? 0n) + BigInt(item.money.amountNanos)\n      )\n  }\n  const costs: AiCostSummary = {\n    amounts: [...money]\n      .sort(([a], [b]) => a.localeCompare(b))\n      .map(([currency, amount]) => ({ currency, amountNanos: amount.toString() })),\n    ratedCallCount: safeCount(counts.rated),\n    unpriceableCallCount: safeCount(counts.unpriceable),\n    unvaluedCallCount: safeCount(counts.unvalued),\n  }\n  return {\n    modelCallCount: safeCount(calls),\n    ...(calls === tokenCount ? { totalTokens: safeCount(tokens) } : {}),\n    costs,\n  }\n}\n\nfunction timeRange(items: readonly AiModelCallGroupFragment[]) {\n  let first = items[0]!.firstCallAt.getTime()\n  let last = items[0]!.lastCallAt.getTime()\n  for (const item of items) {\n    first = Math.min(first, item.firstCallAt.getTime())\n    last = Math.max(last, item.lastCallAt.getTime())\n  }\n  return { firstCallAt: new Date(first), lastCallAt: new Date(last) }\n}\n\nfunction compareText(a: string, b: string): number {\n  return a === b ? 0 : a < b ? -1 : 1\n}\n\nfunction safeCount(value: bigint): number {\n  if (value < 0n || value > BigInt(Number.MAX_SAFE_INTEGER))\n    throw new RangeError(\"[Sixb] AI accounting group count exceeds the safe integer range.\")\n  return Number(value)\n}\n\nfunction append<T>(map: Map<string, T[]>, key: string, item: T): void {\n  const items = map.get(key)\n  if (items) items.push(item)\n  else map.set(key, [item])\n}\n",
-    "import { assertJsonObject } from \"../../json\"\nimport type { AiModelCallUsage, AiModelCallUsageRecord } from \"../ai-usage\"\nimport { normalizeAiModelCallUsage } from \"../ai-usage\"\nimport type {\n  AiBillableMeter,\n  AiBillingIdentity,\n  AiCostComponent,\n  AiCostEstimate,\n  AiModelCallCostRecord,\n  AiPriceSource,\n  AiPricingContext,\n  AiRatedModelCallCostRecord,\n  AiUnpriceableModelCallCostRecord,\n  AiUnpriceableReason,\n} from \"./types\"\n\nconst SIGNED_INT64_MAX = 9_223_372_036_854_775_807n\nconst UNITS_PER_MILLION = 1_000_000n\nconst HALF_MILLION = UNITS_PER_MILLION / 2n\nconst MAX_NUMERIC_TEXT_LENGTH = 128\nconst METER_ORDER: Readonly<Record<AiBillableMeter, number>> = {\n  \"tokens.input.total\": 0,\n  \"tokens.input.uncached\": 1,\n  \"tokens.input.cacheRead\": 2,\n  \"tokens.input.cacheWrite\": 3,\n  \"tokens.input.cacheWrite5m\": 4,\n  \"tokens.input.cacheWrite1h\": 5,\n  \"tokens.output.total\": 6,\n  \"tokens.output.text\": 7,\n  \"tokens.output.reasoning\": 8,\n  \"audio.input.milliseconds\": 9,\n}\nconst METERS = new Set(Object.keys(METER_ORDER) as AiBillableMeter[])\nconst UNPRICEABLE_REASONS = new Set<AiUnpriceableReason>([\n  \"missingBillingIdentity\",\n  \"missingRateCard\",\n  \"missingUsageMeter\",\n  \"unsupportedPricingDimension\",\n  \"invalidUsageForFormula\",\n])\nconst CONTEXT_STRING_FIELDS = [\n  \"serviceTier\",\n  \"region\",\n  \"inferenceGeo\",\n  \"routedProviderId\",\n  \"routedModelId\",\n  \"deploymentId\",\n  \"inferenceProfileId\",\n  \"mode\",\n] as const\n\nexport function normalizeAiPricingContext(input: AiPricingContext): AiPricingContext {\n  if (typeof input !== \"object\" || input === null || Array.isArray(input)) {\n    throw new TypeError(\"[Sixb] AI pricing context must be an object.\")\n  }\n  const result: Record<string, string | boolean | number> = {}\n  for (const field of CONTEXT_STRING_FIELDS) {\n    const value = input[field]\n    if (value !== undefined) {\n      assertNonBlank(value, `pricingContext.${field}`)\n      result[field] = value\n    }\n  }\n  if (input.batch !== undefined) {\n    if (typeof input.batch !== \"boolean\") {\n      throw new TypeError(\"[Sixb] AI pricingContext.batch must be boolean.\")\n    }\n    result.batch = input.batch\n  }\n  if (input.cacheWriteTtlSeconds !== undefined) {\n    if (!Number.isSafeInteger(input.cacheWriteTtlSeconds) || input.cacheWriteTtlSeconds <= 0) {\n      throw new TypeError(\n        \"[Sixb] AI pricingContext.cacheWriteTtlSeconds must be a positive safe integer.\"\n      )\n    }\n    result.cacheWriteTtlSeconds = input.cacheWriteTtlSeconds\n  }\n  return result\n}\n\nexport function normalizeAiModelCallCostRecord(\n  input: AiModelCallCostRecord\n): AiModelCallCostRecord {\n  assertNonBlank(input.projectId, \"cost record projectId\")\n  assertNonBlank(input.usageRecordId, \"cost record usageRecordId\")\n  const base = {\n    ...(input.estimate === undefined ? {} : { estimate: normalizeAiCostEstimate(input.estimate) }),\n    projectId: input.projectId,\n    usageRecordId: input.usageRecordId,\n    pricingContext: normalizeAiPricingContext(input.pricingContext),\n    ratedAt: cloneDate(input.ratedAt, \"cost record ratedAt\"),\n  }\n\n  if (input.status === \"rated\") {\n    return normalizeRatedCost(input, {\n      ...base,\n      priceSource: normalizePriceSource(input.priceSource),\n    })\n  }\n  if (input.status === \"unpriceable\") {\n    return normalizeUnpriceableCost(input, {\n      ...base,\n      ...(input.priceSource === undefined\n        ? {}\n        : { priceSource: normalizePriceSource(input.priceSource) }),\n    })\n  }\n  throw new TypeError(\"[Sixb] AI cost status is invalid.\")\n}\n\n/** Verify that a normalized valuation's billed quantities describe its usage record. */\nexport function aiModelCallCostMatchesUsage(\n  record: AiModelCallCostRecord,\n  usageRecord: AiModelCallUsageRecord\n): boolean {\n  if (record.projectId !== usageRecord.projectId || record.usageRecordId !== usageRecord.id) {\n    return false\n  }\n  if (record.estimate?.status === \"rated\") {\n    const usage = normalizeAiModelCallUsage(usageRecord.usage)\n    const components = new Map(\n      record.estimate.components.map((component) => [component.meter, component])\n    )\n    if (!componentsMatchUsage(components, usage)) return false\n  }\n  if (record.status === \"unpriceable\") return true\n  if (record.components.length === 0 && isExternalValuationSource(record.priceSource.sourceId)) {\n    return true\n  }\n\n  const usage = normalizeAiModelCallUsage(usageRecord.usage)\n  const components = new Map(record.components.map((component) => [component.meter, component]))\n  return componentsMatchUsage(components, usage)\n}\n\nfunction componentsMatchUsage(\n  components: ReadonlyMap<AiBillableMeter, AiCostComponent>,\n  usage: AiModelCallUsage\n): boolean {\n  const audio = components.get(\"audio.input.milliseconds\")\n  if (audio) {\n    return (\n      components.size === 1 &&\n      usage.audioDurationMs !== undefined &&\n      BigInt(audio.quantity) === BigInt(usage.audioDurationMs)\n    )\n  }\n\n  return (\n    inputComponentsMatchUsage(components, usage) && outputComponentsMatchUsage(components, usage)\n  )\n}\n\nfunction inputComponentsMatchUsage(\n  components: ReadonlyMap<AiBillableMeter, AiCostComponent>,\n  usage: AiModelCallUsage\n): boolean {\n  if (usage.inputTokens === undefined) return false\n  const total = components.get(\"tokens.input.total\")\n  const directPartitions = [\n    [\"tokens.input.uncached\", usage.uncachedInputTokens],\n    [\"tokens.input.cacheRead\", usage.cacheReadInputTokens],\n    [\"tokens.input.cacheWrite\", usage.cacheWriteInputTokens],\n  ] as const\n  const presentDirect = directPartitions.filter(([meter]) => components.has(meter))\n  const specificWrites = [\n    components.get(\"tokens.input.cacheWrite5m\"),\n    components.get(\"tokens.input.cacheWrite1h\"),\n  ].filter((component): component is AiCostComponent => component !== undefined)\n\n  if (total) {\n    return (\n      presentDirect.length === 0 &&\n      specificWrites.length === 0 &&\n      BigInt(total.quantity) === BigInt(usage.inputTokens)\n    )\n  }\n  if (presentDirect.length === 0 && specificWrites.length === 0) return false\n  if (components.has(\"tokens.input.cacheWrite\") && specificWrites.length > 0) return false\n\n  let quantity = 0n\n  for (const [meter, expected] of presentDirect) {\n    if (expected === undefined) return false\n    const component = components.get(meter)!\n    if (BigInt(component.quantity) !== BigInt(expected)) return false\n    quantity += BigInt(component.quantity)\n  }\n  if (specificWrites.length > 0) {\n    if (usage.cacheWriteInputTokens === undefined) return false\n    const specificWriteQuantity = specificWrites.reduce(\n      (sum, component) => sum + BigInt(component.quantity),\n      0n\n    )\n    if (specificWriteQuantity !== BigInt(usage.cacheWriteInputTokens)) return false\n    quantity += specificWriteQuantity\n  }\n  return quantity === BigInt(usage.inputTokens)\n}\n\nfunction outputComponentsMatchUsage(\n  components: ReadonlyMap<AiBillableMeter, AiCostComponent>,\n  usage: AiModelCallUsage\n): boolean {\n  if (usage.outputTokens === undefined) return false\n  const total = components.get(\"tokens.output.total\")\n  const partitions = [\n    [\"tokens.output.text\", usage.textOutputTokens],\n    [\"tokens.output.reasoning\", usage.reasoningOutputTokens],\n  ] as const\n  const presentPartitions = partitions.filter(([meter]) => components.has(meter))\n\n  if (total) {\n    return presentPartitions.length === 0 && BigInt(total.quantity) === BigInt(usage.outputTokens)\n  }\n  if (presentPartitions.length === 0) return false\n\n  let quantity = 0n\n  for (const [meter, expected] of presentPartitions) {\n    if (expected === undefined) return false\n    const component = components.get(meter)!\n    if (BigInt(component.quantity) !== BigInt(expected)) return false\n    quantity += BigInt(component.quantity)\n  }\n  return quantity === BigInt(usage.outputTokens)\n}\n\nfunction normalizeRatedCost(\n  input: AiRatedModelCallCostRecord,\n  base: Pick<\n    AiRatedModelCallCostRecord,\n    \"projectId\" | \"usageRecordId\" | \"pricingContext\" | \"priceSource\" | \"ratedAt\"\n  >\n): AiRatedModelCallCostRecord {\n  const billingIdentity = normalizeBillingIdentity(input.billingIdentity)\n  const components = input.components.map(normalizeCostComponent).sort(compareComponents)\n  if (components.length === 0 && !isExternalValuationSource(base.priceSource.sourceId)) {\n    throw new TypeError(\"[Sixb] AI rated cost requires components.\")\n  }\n  if (new Set(components.map((component) => component.meter)).size !== components.length) {\n    throw new TypeError(\"[Sixb] AI rated cost cannot contain duplicate meters.\")\n  }\n  const amountNanos = parseNonnegativeInt64(input.money.amountNanos, \"money amountNanos\").toString()\n  if (components.length > 0 && amountNanos !== sumComponents(components)) {\n    throw new TypeError(\"[Sixb] AI cost total does not equal its component charges.\")\n  }\n  return {\n    ...base,\n    status: \"rated\",\n    billingIdentity,\n    money: { currency: normalizeCurrency(input.money.currency), amountNanos },\n    components,\n  }\n}\n\nexport function normalizeAiCostEstimate(value: unknown): AiCostEstimate {\n  assertJsonObject(value, \"AI cost estimate\")\n  if (value.status === \"rated\") {\n    assertJsonObject(value.money, \"estimate money\")\n    const { currency, amountNanos } = value.money\n    if (\n      typeof currency !== \"string\" ||\n      typeof amountNanos !== \"string\" ||\n      !Array.isArray(value.components)\n    )\n      throw new TypeError(\"[Sixb] Invalid cost estimate money or components.\")\n    const components = value.components\n      .map((component) => {\n        assertJsonObject(component, \"estimate component\")\n        const meter = [...METERS].find((meter) => meter === component.meter)\n        if (\n          !meter ||\n          typeof component.quantity !== \"string\" ||\n          typeof component.rateAmountNanosPerMillion !== \"string\" ||\n          typeof component.chargeAmountNanos !== \"string\"\n        )\n          throw new TypeError(\"[Sixb] Invalid cost estimate component.\")\n        return normalizeCostComponent({\n          meter,\n          quantity: component.quantity,\n          rateAmountNanosPerMillion: component.rateAmountNanosPerMillion,\n          chargeAmountNanos: component.chargeAmountNanos,\n        })\n      })\n      .sort(compareComponents)\n    if (\n      !components.length ||\n      new Set(components.map((c) => c.meter)).size !== components.length ||\n      parseNonnegativeInt64(amountNanos, \"estimate amountNanos\").toString() !==\n        sumComponents(components)\n    )\n      throw new TypeError(\n        \"[Sixb] Estimate must contain unique meters whose charges equal its total.\"\n      )\n    return {\n      status: \"rated\",\n      money: { currency: normalizeCurrency(currency), amountNanos },\n      components,\n    }\n  }\n  const reason = [...UNPRICEABLE_REASONS].find((reason) => reason === value.reason)\n  if (value.status !== \"unpriceable\" || !reason)\n    throw new TypeError(\"[Sixb] Invalid cost estimate status or reason.\")\n  let missingMeters: readonly AiBillableMeter[] | undefined\n  if (value.missingMeters !== undefined) {\n    if (!Array.isArray(value.missingMeters))\n      throw new TypeError(\"[Sixb] Invalid estimate missing meters.\")\n    missingMeters = normalizeMissingMeters(\n      value.missingMeters.map((input) => {\n        const meter = [...METERS].find((meter) => meter === input)\n        if (!meter) throw new TypeError(\"[Sixb] Invalid estimate missing meter.\")\n        return meter\n      })\n    )\n  }\n  if (reason === \"missingUsageMeter\" && !missingMeters)\n    throw new TypeError(\"[Sixb] Missing usage estimate requires missingMeters.\")\n  return {\n    status: \"unpriceable\",\n    reason,\n    ...(missingMeters === undefined ? {} : { missingMeters }),\n  }\n}\n\nfunction isExternalValuationSource(sourceId: string): boolean {\n  return sourceId === \"provider-reported\"\n}\n\nfunction normalizeUnpriceableCost(\n  input: AiUnpriceableModelCallCostRecord,\n  base: Pick<\n    AiUnpriceableModelCallCostRecord,\n    \"projectId\" | \"usageRecordId\" | \"pricingContext\" | \"priceSource\" | \"ratedAt\"\n  >\n): AiUnpriceableModelCallCostRecord {\n  if (!UNPRICEABLE_REASONS.has(input.reason)) {\n    throw new TypeError(`[Sixb] AI unpriceable reason '${String(input.reason)}' is invalid.`)\n  }\n  const billingIdentity = input.billingIdentity\n    ? normalizeBillingIdentity(input.billingIdentity)\n    : undefined\n  if (input.reason === \"missingBillingIdentity\" && billingIdentity !== undefined) {\n    throw new TypeError(\"[Sixb] AI missingBillingIdentity cannot contain a billing identity.\")\n  }\n  if (input.reason !== \"missingBillingIdentity\" && billingIdentity === undefined) {\n    throw new TypeError(`[Sixb] AI ${input.reason} requires a billing identity.`)\n  }\n  const missingMeters = normalizeMissingMeters(input.missingMeters)\n  if (input.reason === \"missingUsageMeter\" && !missingMeters) {\n    throw new TypeError(\"[Sixb] AI missingUsageMeter requires missingMeters.\")\n  }\n  return {\n    ...base,\n    status: \"unpriceable\",\n    ...(billingIdentity ? { billingIdentity } : {}),\n    reason: input.reason,\n    ...(missingMeters ? { missingMeters } : {}),\n  }\n}\n\nfunction normalizeCostComponent(input: AiCostComponent): AiCostComponent {\n  if (!METERS.has(input.meter)) {\n    throw new TypeError(`[Sixb] AI cost meter '${String(input.meter)}' is invalid.`)\n  }\n  const expected = calculateComponent(input.meter, input.quantity, input.rateAmountNanosPerMillion)\n  if (expected.chargeAmountNanos !== input.chargeAmountNanos) {\n    throw new TypeError(`[Sixb] AI cost component '${input.meter}' charge is invalid.`)\n  }\n  return expected\n}\n\nfunction calculateComponent(\n  meter: AiBillableMeter,\n  quantity: number | string,\n  rateAmountNanosPerMillion: string\n): AiCostComponent {\n  const normalizedQuantity = parseQuantity(quantity, `${meter} quantity`)\n  const rate = parseNonnegativeInt64(rateAmountNanosPerMillion, `${meter} rate`)\n  const charge = (normalizedQuantity * rate + HALF_MILLION) / UNITS_PER_MILLION\n  assertSignedInt64(charge, `${meter} charge`)\n  return {\n    meter,\n    quantity: normalizedQuantity.toString(),\n    rateAmountNanosPerMillion: rate.toString(),\n    chargeAmountNanos: charge.toString(),\n  }\n}\n\nfunction normalizePriceSource(input: AiPriceSource): AiPriceSource {\n  assertNonBlank(input.sourceId, \"price sourceId\")\n  assertNonBlank(input.sourceEntryId, \"price sourceEntryId\")\n  assertNonBlank(input.sourceVersion, \"price sourceVersion\")\n  if (input.sourceUrl !== undefined) assertNonBlank(input.sourceUrl, \"price sourceUrl\")\n  return {\n    sourceId: input.sourceId,\n    sourceEntryId: input.sourceEntryId,\n    sourceVersion: input.sourceVersion,\n    ...(input.sourceUrl === undefined ? {} : { sourceUrl: input.sourceUrl }),\n    observedAt: cloneDate(input.observedAt, \"price source observedAt\"),\n  }\n}\n\nfunction normalizeBillingIdentity(input: AiBillingIdentity): AiBillingIdentity {\n  assertNonBlank(input.providerId, \"billingIdentity.providerId\")\n  assertNonBlank(input.modelId, \"billingIdentity.modelId\")\n  return { providerId: input.providerId, modelId: input.modelId }\n}\n\nfunction normalizeMissingMeters(\n  input: readonly AiBillableMeter[] | undefined\n): readonly AiBillableMeter[] | undefined {\n  if (!input?.length) return undefined\n  const result = [...new Set(input)]\n  for (const meter of result) {\n    if (!METERS.has(meter)) throw new TypeError(`[Sixb] AI missing meter '${meter}' is invalid.`)\n  }\n  return result.sort((left, right) => METER_ORDER[left] - METER_ORDER[right])\n}\n\nfunction sumComponents(components: readonly AiCostComponent[]): string {\n  let total = 0n\n  for (const component of components) {\n    total += parseNonnegativeInt64(component.chargeAmountNanos, \"component charge\")\n    assertSignedInt64(total, \"cost total\")\n  }\n  return total.toString()\n}\n\nfunction parseQuantity(value: number | string, field: string): bigint {\n  if (typeof value === \"number\") {\n    if (!Number.isSafeInteger(value) || value < 0) {\n      throw new TypeError(`[Sixb] AI ${field} must be a non-negative safe integer.`)\n    }\n    return BigInt(value)\n  }\n  return parseNonnegativeInt64(value, field)\n}\n\nfunction parseNonnegativeInt64(value: string, field: string): bigint {\n  if (\n    typeof value !== \"string\" ||\n    value.length === 0 ||\n    value.length > MAX_NUMERIC_TEXT_LENGTH ||\n    !/^\\d+$/.test(value)\n  ) {\n    throw new TypeError(`[Sixb] AI ${field} must be a non-negative integer string.`)\n  }\n  const parsed = BigInt(value)\n  assertSignedInt64(parsed, field)\n  return parsed\n}\n\nfunction compareComponents(left: AiCostComponent, right: AiCostComponent): number {\n  return METER_ORDER[left.meter] - METER_ORDER[right.meter]\n}\n\nfunction normalizeCurrency(value: string): string {\n  if (!/^[A-Z]{3}$/.test(value)) {\n    throw new TypeError(\"[Sixb] AI currency must be a three-letter uppercase code.\")\n  }\n  return value\n}\n\nfunction assertSignedInt64(value: bigint, field: string): void {\n  if (value < 0n || value > SIGNED_INT64_MAX) {\n    throw new TypeError(`[Sixb] AI ${field} exceeds the signed 64-bit range.`)\n  }\n}\n\nfunction assertNonBlank(value: string, field: string): void {\n  if (typeof value !== \"string\" || value.trim().length === 0) {\n    throw new TypeError(`[Sixb] AI ${field} must be nonblank.`)\n  }\n}\n\nfunction cloneDate(value: Date, field: string): Date {\n  if (!(value instanceof Date) || !Number.isFinite(value.getTime())) {\n    throw new TypeError(`[Sixb] AI ${field} must be a valid Date.`)\n  }\n  return new Date(value)\n}\n"
-  ],
-  "mappings": ";;;;;;;;;;;;AAGO,MAAM,6BAA4B,MAAM;AAAA,EAIlC;AAAA,EAHF,OAAO;AAAA,EAEhB,WAAW,CACA,MACT,SACA;AAAA,IACA,MAAM,OAAO;AAAA,IAHJ;AAAA;AAKb;;;ACiBO,MAAM,wBAAiD;AAAA,EAK/B;AAAA,EAJZ,UAAU,IAAI;AAAA,EACd,6BAA6B,IAAI;AAAA,EACjC,YAAY,IAAI;AAAA,EAEjC,WAAW,CAAkB,YAA+C;AAAA,IAA/C;AAAA;AAAA,OAEvB,gBAAe,CAAC,OAAiE;AAAA,IACrF,MAAM,SAAS,4BAA2B,KAAK;AAAA,IAC/C,MAAM,KAAK,sBAAsB,OAAO,WAAW,OAAO,WAAW;AAAA,IACrE,MAAM,iBAAiB,wBAAwB,MAAM;AAAA,IACrD,MAAM,oBAAoB,KAAK,2BAA2B,IAAI,cAAc;AAAA,IAC5E,IAAI,sBAAsB,WAAW;AAAA,MACnC,MAAM,WAAW,KAAK,QAAQ,IAAI,iBAAiB;AAAA,MACnD,IAAI,CAAC,UAAU;AAAA,QACb,MAAM,IAAI,MAAM,8DAA8D;AAAA,MAChF;AAAA,MACA,OAAO,EAAE,QAAQ,gBAAgB,QAAQ,GAAG,SAAS,MAAM;AAAA,IAC7D;AAAA,IAEA,MAAM,YAAY,mBAAmB,OAAO,WAAW,OAAO,EAAE;AAAA,IAChE,IAAI,KAAK,QAAQ,IAAI,SAAS,GAAG;AAAA,MAC/B,MAAM,IAAI,qBACR,gBACA,2BAA2B,OAAO,mCAAmC,OAAO,aAC9E;AAAA,IACF;AAAA,IAEA,KAAK,QAAQ,IAAI,WAAW,gBAAgB,MAAM,CAAC;AAAA,IACnD,KAAK,2BAA2B,IAAI,gBAAgB,SAAS;AAAA,IAC7D,WAAW,WAAW,OAAO,mBAAmB;AAAA,MAC9C,MAAM,MAA+B;AAAA,QACnC,WAAW,OAAO;AAAA,QAClB,eAAe,OAAO;AAAA,QACtB;AAAA,QACA,YAAY,OAAO;AAAA,MACrB;AAAA,MACA,KAAK,UAAU,IAAI,YAAY,GAAG,GAAG,GAAG;AAAA,IAC1C;AAAA,IAEA,OAAO,EAAE,QAAQ,gBAAgB,MAAM,GAAG,SAAS,KAAK;AAAA;AAAA,OAGpD,sBAAqB,CACzB,OACwC;AAAA,IACxC,0BAAyB,MAAM,WAAW;AAAA,IAC1C,IAAI,OAAO,MAAM,cAAc,YAAY,MAAM,UAAU,KAAK,EAAE,WAAW,GAAG;AAAA,MAC9E,MAAM,IAAI,UAAU,6CAA6C;AAAA,IACnE;AAAA,IAEA,IAAI,SAAwC;AAAA,IAC5C,WAAW,UAAU,KAAK,QAAQ,OAAO,GAAG;AAAA,MAC1C,IAAI,OAAO,cAAc,MAAM,aAAa,OAAO,gBAAgB,MAAM;AAAA,QAAa;AAAA,MACtF,IACE,CAAC,UACD,OAAO,WAAW,QAAQ,IAAI,OAAO,WAAW,QAAQ,KACvD,OAAO,WAAW,QAAQ,MAAM,OAAO,WAAW,QAAQ,KAAK,OAAO,KAAK,OAAO,IACnF;AAAA,QACA,SAAS;AAAA,MACX;AAAA,IACF;AAAA,IACA,OAAO,SAAS,gBAAgB,MAAM,IAAI;AAAA;AAAA,OAGtC,mBAAkB,CACtB,OACkC;AAAA,IAClC,OAAO,WAAW,MAAM,KAAK,oBAAoB;AAAA,MAC/C,WAAW,MAAM;AAAA,MACjB,cAAc,CAAC,MAAM,WAAW;AAAA,IAClC,CAAC;AAAA,IACD,OAAO;AAAA;AAAA,OAGH,oBAAmB,CACvB,OAC6C;AAAA,IAC7C,IAAI,OAAO,MAAM,cAAc,YAAY,MAAM,UAAU,KAAK,EAAE,WAAW,GAAG;AAAA,MAC9E,MAAM,IAAI,UAAU,6CAA6C;AAAA,IACnE;AAAA,IAEA,MAAM,qBAAqB,IAAI;AAAA,IAC/B,WAAW,eAAe,MAAM,cAAc;AAAA,MAC5C,0BAAyB,WAAW;AAAA,MACpC,mBAAmB,IAAI,aAAa,CAAC,CAAC;AAAA,IACxC;AAAA,IACA,IAAI,mBAAmB,SAAS;AAAA,MAAG,OAAO,CAAC;AAAA,IAE3C,WAAW,UAAU,KAAK,QAAQ,OAAO,GAAG;AAAA,MAC1C,IAAI,OAAO,cAAc,MAAM;AAAA,QAAW;AAAA,MAC1C,mBAAmB,IAAI,OAAO,WAAW,GAAG,KAAK,OAAO,KAAK;AAAA,IAC/D;AAAA,IAEA,OAAO,MAAM,aAAa,IAAI,CAAC,gBAAgB;AAAA,MAC7C,MAAM,SAAS,mBAAmB,IAAI,WAAW,KAAK,CAAC;AAAA,MACvD,OAAO;AAAA,QACL,gBAAgB,OAAO;AAAA,QACvB,OAAO,2BAA0B,MAAM;AAAA,MACzC;AAAA,KACD;AAAA;AAAA,EAGH,QAAQ,GAAmC;AAAA,IACzC,OAAO,gBAAgB;AAAA,MACrB,SAAS,KAAK;AAAA,MACd,4BAA4B,KAAK;AAAA,MACjC,WAAW,KAAK;AAAA,IAClB,CAAC;AAAA;AAAA,EAGH,OAAO,CAAC,UAAgD;AAAA,IACtD,WAAW,KAAK,SAAS,SAAS,OAAO;AAAA,IACzC,WAAW,KAAK,4BAA4B,SAAS,0BAA0B;AAAA,IAC/E,WAAW,KAAK,WAAW,SAAS,SAAS;AAAA;AAAA,EAI/C,SAAS,CAAC,WAAmB,IAA2C;AAAA,IACtE,MAAM,SAAS,KAAK,QAAQ,IAAI,mBAAmB,WAAW,EAAE,CAAC;AAAA,IACjE,OAAO,SAAS,gBAAgB,MAAM,IAAI;AAAA;AAAA,EAI5C,WAAW,CAAC,WAAsD;AAAA,IAChE,OAAO,CAAC,GAAG,KAAK,QAAQ,OAAO,CAAC,EAC7B,OAAO,CAAC,WAAW,OAAO,cAAc,SAAS,EACjD,IAAI,CAAC,WAAW,gBAAgB,MAAM,CAAC;AAAA;AAAA,OAG9B,sBAAqB,CAAC,WAAmB,aAAoC;AAAA,IACzF,MAAM,YAAY,MAAM,KAAK,WAAW,QAAQ,EAAE,WAAW,IAAI,YAAY,CAAC;AAAA,IAC9E,IAAI;AAAA,MAAW;AAAA,IACf,MAAM,IAAI,qBACR,qBACA,8BAA8B,2CAA2C,aAC3E;AAAA;AAEJ;AAEA,SAAS,kBAAkB,CAAC,WAAmB,IAAoB;AAAA,EACjE,OAAO,KAAK,UAAU,CAAC,WAAW,EAAE,CAAC;AAAA;AAGvC,SAAS,uBAAuB,CAC9B,QAIQ;AAAA,EACR,OAAO,KAAK,UAAU;AAAA,IACpB,OAAO;AAAA,IACP,OAAO;AAAA,IACP,OAAO;AAAA,IACP,OAAO;AAAA,IACP,OAAO;AAAA,EACT,CAAC;AAAA;AAGH,SAAS,WAAW,CAAC,KAAsC;AAAA,EACzD,OAAO,KAAK,UAAU,CAAC,IAAI,WAAW,IAAI,eAAe,IAAI,OAAO,CAAC;AAAA;AAGvE,SAAS,UAAwB,CAAC,QAA2B,QAAiC;AAAA,EAC5F,OAAO,MAAM;AAAA,EACb,YAAY,KAAK,UAAU,gBAAgB,MAAM,GAAG;AAAA,IAClD,OAAO,IAAI,KAAK,KAAK;AAAA,EACvB;AAAA;;ACjLF,IAAM,+BAA+B;AACrC,IAAM,2BAA2B;AACjC,IAAM,oBAAoB;AA2DnB,SAAS,2BAA0B,CACxC,OAC6B;AAAA,EAC7B,eAAe,MAAM,WAAW,sBAAsB;AAAA,EACtD,WAAW,MAAM,MAAM,iBAAiB;AAAA,EACxC,WAAW,MAAM,IAAI,eAAe;AAAA,EACpC,IAAI,MAAM,KAAK,QAAQ,KAAK,MAAM,GAAG,QAAQ,GAAG;AAAA,IAC9C,MAAM,IAAI,UAAU,8CAA8C;AAAA,EACpE;AAAA,EACA,IAAI,MAAM,eAAe;AAAA,IAAW,eAAe,MAAM,YAAY,uBAAuB;AAAA,EAC5F,IAAI,MAAM,YAAY;AAAA,IAAW,eAAe,MAAM,SAAS,oBAAoB;AAAA,EACnF,OAAO;AAAA,IACL,WAAW,MAAM;AAAA,IACjB,MAAM,IAAI,KAAK,MAAM,IAAI;AAAA,IACzB,IAAI,IAAI,KAAK,MAAM,EAAE;AAAA,OACjB,MAAM,eAAe,YAAY,CAAC,IAAI,EAAE,YAAY,MAAM,WAAW;AAAA,OACrE,MAAM,YAAY,YAAY,CAAC,IAAI,EAAE,SAAS,MAAM,QAAQ;AAAA,EAClE;AAAA;AAGK,SAAS,oCAAmC,CACjD,OACsC;AAAA,EACtC,MAAM,QAAQ,4BAA2B,KAAK;AAAA,EAC9C,IAAI,MAAM,gBAAgB,WAAW;AAAA,IACnC,eAAe,MAAM,aAAa,wBAAwB;AAAA,EAC5D;AAAA,EACA,QAAQ,OAAO,WAAW,cAAc,MAAM,OAAO,MAAM,MAAM;AAAA,EACjE,OAAO;AAAA,OACF;AAAA,OACC,MAAM,gBAAgB,YAAY,CAAC,IAAI,EAAE,aAAa,MAAM,YAAY;AAAA,OACxE,MAAM,oBAAoB,YAAY,CAAC,IAAI,EAAE,iBAAiB,MAAM,gBAAgB;AAAA,IACxF;AAAA,IACA;AAAA,EACF;AAAA;AAGK,SAAS,4BAA4B,CAC1C,MACA,OACS;AAAA,EACT,MAAM,aAAa,KAAK,MAAM,WAAW,QAAQ;AAAA,EACjD,OACE,KAAK,MAAM,cAAc,MAAM,aAC/B,cAAc,MAAM,KAAK,QAAQ,KACjC,aAAa,MAAM,GAAG,QAAQ,MAC7B,MAAM,eAAe,aAAa,KAAK,MAAM,eAAe,MAAM,gBAClE,MAAM,YAAY,aAAa,KAAK,MAAM,qBAAqB,MAAM;AAAA;AAInE,SAAS,yBAAyB,CACvC,OACA,QACsB;AAAA,EACtB,MAAM,QAAQ,4BAA2B,KAAK;AAAA,EAC9C,yBAAyB,MAAM,MAAM;AAAA,EACrC,MAAM,QAAQ,MAAM,KAAK,MAAM,EAAE,OAAO,CAAC,SAAS,6BAA6B,MAAM,KAAK,CAAC;AAAA,EAC3F,MAAM,UAAU,kBAAkB,MAAM,MAAM,MAAM,IAAI,MAAM,MAAM;AAAA,EACpE,MAAM,cAAc,IAAI,IACtB,QAAQ,IAAI,CAAC,WAAW,CAAC,OAAO,MAAM,QAAQ,GAAG,CAAC,CAAC,CAAC,CACtD;AAAA,EACA,MAAM,aAAa,IAAI;AAAA,EACvB,MAAM,aAAa,IAAI;AAAA,EACvB,MAAM,gBAAgB,IAAI;AAAA,EAE1B,WAAW,QAAQ,OAAO;AAAA,IACxB,MAAM,cAAc,wBAAwB,KAAK,MAAM,YAAY,MAAM,MAAM,EAAE,QAAQ;AAAA,IACzF,YAAY,IAAI,WAAW,GAAG,KAAK,IAAI;AAAA,IACvC,cACE,YACA,KAAK,UAAU,CAAC,KAAK,MAAM,YAAY,KAAK,MAAM,gBAAgB,CAAC,GACnE,IACF;AAAA,IACA,IAAI,KAAK,aAAa,SAAS,SAAS;AAAA,MACtC,cAAc,YAAY,KAAK,UAAU,CAAC,OAAO,CAAC,GAAG,IAAI;AAAA,IAC3D,EAAO,SAAI,KAAK,aAAa,SAAS,iBAAiB;AAAA,MACrD,cACE,YACA,KAAK,UAAU;AAAA,QACb;AAAA,QACA,KAAK,YAAY;AAAA,QACjB,KAAK,YAAY;AAAA,MACnB,CAAC,GACD,IACF;AAAA,IACF;AAAA,IACA,IAAI,KAAK,aAAa,SAAS,mBAAmB,KAAK,aAAa,SAAS,YAAY;AAAA,MACvF,cAAc,eAAe,KAAK,YAAY,YAAY,IAAI;AAAA,IAChE;AAAA,EACF;AAAA,EAEA,MAAM,SAAmC,QAAQ,IAAI,CAAC,YAAY;AAAA,OAC7D;AAAA,OACA,yBAAyB,YAAY,IAAI,OAAO,MAAM,QAAQ,CAAC,KAAK,CAAC,CAAC;AAAA,EAC3E,EAAE;AAAA,EACF,MAAM,SAAuC,CAAC,GAAG,UAAU,EACxD,IAAI,EAAE,KAAK,aAAa;AAAA,IACvB,OAAO,YAAY,WAAW,KAAK,MAAM,GAAG;AAAA,IAC5C,OAAO,EAAE,YAAY,YAAY,yBAAyB,OAAO,EAAE;AAAA,GACpE,EACA,KAAK,sBAAsB;AAAA,EAC9B,MAAM,SAAuC,CAAC,GAAG,UAAU,EACxD,IAAI,EAAE,KAAK,aAAa;AAAA,IACvB,OAAO,MAAM,YAAY,eAAe,KAAK,MAAM,GAAG;AAAA,IAKtD,OAAO,SAAS,UACZ,EAAE,SAAS,yBAAyB,OAAO,EAAE,IAC7C;AAAA,MACE;AAAA,MACA,YAAY,uBAAuB,YAAY,YAAY;AAAA,MAC3D,aAAa,uBAAuB,aAAa,aAAa;AAAA,SAC3D,yBAAyB,OAAO;AAAA,IACrC;AAAA,GACL,EACA,KAAK,sBAAsB;AAAA,EAC9B,MAAM,YAA6C,CAAC,GAAG,aAAa,EACjE,IAAI,EAAE,YAAY,cAAc,EAAE,eAAe,yBAAyB,OAAO,EAAE,EAAE,EACrF,KAAK,yBAAyB;AAAA,EAEjC,OAAO,gBAAgB;AAAA,IACrB,OAAO,EAAE,MAAM,MAAM,MAAM,IAAI,MAAM,GAAG;AAAA,IACxC,QAAQ,MAAM;AAAA,IACd,QAAQ,yBAAyB,KAAK;AAAA,IACtC;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF,CAAC;AAAA;AAGI,SAAS,uCAAsC,CACpD,OACA,WACsB;AAAA,EACtB,MAAM,QAAQ,4BAA2B,KAAK;AAAA,EAC9C,MAAM,UAAU,kBAAkB,MAAM,MAAM,MAAM,IAAI,MAAM,MAAM;AAAA,EACpE,MAAM,SAAS,6BAA6B;AAAA,EAC5C,MAAM,SAAS,IAAI,IACjB,QAAQ,IAAI,CAAC,WAAW,CAAC,OAAO,MAAM,QAAQ,GAAG,6BAA6B,CAAC,CAAC,CAClF;AAAA,EACA,MAAM,SAAS,IAAI;AAAA,EACnB,MAAM,SAAS,IAAI;AAAA,EACnB,MAAM,YAAY,IAAI;AAAA,EAEtB,WAAW,YAAY,WAAW;AAAA,IAChC,IAAI;AAAA,IACJ,QAAQ,SAAS;AAAA,WACV;AAAA,QACH,SAAS;AAAA,QACT;AAAA,WACG,UAAU;AAAA,QACb,MAAM,QAAQ,qBAAqB,SAAS,OAAO,cAAc;AAAA,QACjE,MAAM,WAAW,OAAO,IAAI,MAAM,QAAQ,CAAC;AAAA,QAC3C,IAAI,CAAC,UAAU;AAAA,UACb,MAAM,IAAI,UAAU,gEAAgE;AAAA,QACtF;AAAA,QACA,SAAS;AAAA,QACT;AAAA,MACF;AAAA,WACK;AAAA,QACH,SAAS,uBACP,QACA,KAAK,UAAU;AAAA,UACb,uBAAuB,SAAS,YAAY,YAAY;AAAA,UACxD,uBAAuB,SAAS,SAAS,SAAS;AAAA,QACpD,CAAC,CACH;AAAA,QACA;AAAA,WACG;AAAA,QACH,SAAS,uBACP,QACA,KAAK,UAAU;AAAA,UACb,uBAAuB,SAAS,WAAW,WAAW;AAAA,UACtD,SAAS;AAAA,UACT,SAAS;AAAA,QACX,CAAC,CACH;AAAA,QACA;AAAA,WACG;AAAA,QACH,SAAS,uBACP,WACA,uBAAuB,SAAS,YAAY,YAAY,CAC1D;AAAA,QACA;AAAA;AAAA,IAEJ,wBAAwB,QAAQ,QAAQ;AAAA,EAC1C;AAAA,EAEA,OAAO,gBAAgB;AAAA,IACrB,OAAO,EAAE,MAAM,MAAM,MAAM,IAAI,MAAM,GAAG;AAAA,IACxC,QAAQ,MAAM;AAAA,IACd,QAAQ,wBAAwB,MAAM;AAAA,IACtC,QAAQ,QAAQ,IAAI,CAAC,YAAY;AAAA,SAC5B;AAAA,SACA,wBAAwB,OAAO,IAAI,OAAO,MAAM,QAAQ,CAAC,CAAE;AAAA,IAChE,EAAE;AAAA,IACF,QAAQ,CAAC,GAAG,MAAM,EACf,IAAI,EAAE,KAAK,WAAW;AAAA,MACrB,OAAO,YAAY,WAAW,KAAK,MAAM,GAAG;AAAA,MAC5C,OAAO,EAAE,YAAY,YAAY,wBAAwB,KAAK,EAAE;AAAA,KACjE,EACA,KAAK,sBAAsB;AAAA,IAC9B,QAAQ,CAAC,GAAG,MAAM,EACf,IAAI,EAAE,KAAK,WAAW;AAAA,MACrB,OAAO,MAAM,YAAY,eAAe,KAAK,MAAM,GAAG;AAAA,MAKtD,OAAO,SAAS,UACZ,EAAE,SAAS,wBAAwB,KAAK,EAAE,IAC1C;AAAA,QACE;AAAA,QACA,YAAY,uBAAuB,YAAY,YAAY;AAAA,QAC3D,aAAa,uBAAuB,aAAa,aAAa;AAAA,WAC3D,wBAAwB,KAAK;AAAA,MAClC;AAAA,KACL,EACA,KAAK,sBAAsB;AAAA,IAC9B,WAAW,CAAC,GAAG,SAAS,EACrB,IAAI,EAAE,YAAY,YAAY,EAAE,eAAe,wBAAwB,KAAK,EAAE,EAAE,EAChF,KAAK,yBAAyB;AAAA,EACnC,CAAC;AAAA;AAGI,SAAS,8BAA8B,CAC5C,OACA,QACiC;AAAA,EACjC,MAAM,QAAQ,qCAAoC,KAAK;AAAA,EACvD,QAAQ,OAAO,WAAW;AAAA,EAC1B,MAAM,QAAQ,MAAM,KAAK,MAAM,EAC5B,OAAO,CAAC,SAAS,6BAA6B,MAAM,KAAK,CAAC,EAC1D,IAAI,iBAAgB,EACpB,OACC,CAAC,UACE,MAAM,gBAAgB,aAAa,KAAK,MAAM,gBAAgB,MAAM,iBACpE,MAAM,oBAAoB,aAAa,KAAK,oBAAoB,MAAM,gBAC3E,EACC,KAAK,sBAAsB;AAAA,EAC9B,MAAM,OAAO,MAAM,MAAM,QAAQ,SAAS,KAAK;AAAA,EAC/C,OAAO,gBAAgB;AAAA,IACrB,OAAO;AAAA,IACP,SAAS,SAAS,KAAK,SAAS,MAAM;AAAA,IACtC,OAAO,MAAM;AAAA,EACf,CAAC;AAAA;AAGI,SAAS,iBAAgB,CAAC,MAA4D;AAAA,EAC3F,OAAO;AAAA,IACL,OAAO,KAAK;AAAA,OACR,KAAK,gBAAgB,YAAY,CAAC,IAAI,EAAE,aAAa,KAAK,YAAY;AAAA,OACtE,KAAK,SAAS,YAAY,CAAC,IAAI,EAAE,MAAM,KAAK,KAAK;AAAA,IACrD,iBAAiB,KAAK,MAAM,UAAU;AAAA,EACxC;AAAA;AAGK,SAAS,uBAAuB,CAAC,IAAU,QAAkC;AAAA,EAClF,WAAW,IAAI,6BAA6B;AAAA,EAC5C,yBAAyB,MAAM;AAAA,EAC/B,MAAM,QAAQ,IAAI,KAAK,EAAE;AAAA,EACzB,MAAM,cAAc,GAAG,GAAG,CAAC;AAAA,EAC3B,IAAI,WAAW;AAAA,IAAQ,OAAO;AAAA,EAC9B,MAAM,YAAY,CAAC;AAAA,EACnB,IAAI,WAAW;AAAA,IAAO,OAAO;AAAA,EAC7B,MAAM,gBAAgB,MAAM,UAAU,IAAI,KAAK;AAAA,EAC/C,MAAM,WAAW,MAAM,WAAW,IAAI,YAAY;AAAA,EAClD,OAAO;AAAA;AAGT,SAAS,wBAAwB,CAC/B,OACuB;AAAA,EACvB,MAAM,QAAQ,6BAA6B;AAAA,EAC3C,MAAM,iBAAiB,OAAO,MAAM,MAAM;AAAA,EAC1C,WAAW,QAAQ,OAAO;AAAA,IACxB,MAAM,QAAQ,2BAA0B,KAAK,MAAM,KAAK;AAAA,IACxD,IAAI,MAAM,oBAAoB;AAAA,MAAe,MAAM,0BAA0B;AAAA,IAC7E,IAAI,MAAM,oBAAoB;AAAA,MAAY,MAAM,0BAA0B;AAAA,IAC1E,WAAW,SAAS,wBAAwB;AAAA,MAC1C,IAAI,MAAM,WAAW;AAAA,QAAW;AAAA,MAChC,MAAM,MAAM,OAAO,oBAAoB;AAAA,MACvC,MAAM,MAAM,OAAO,SAAS,OAAO,MAAM,MAAM;AAAA,IACjD;AAAA,EACF;AAAA,EACA,OAAO;AAAA,IACL,gBAAgB,MAAM;AAAA,OACnB,qBAAqB,KAAK;AAAA,IAC7B,OAAO,eAAe,KAAK;AAAA,EAC7B;AAAA;AAGF,SAAS,cAAc,CAAC,OAA4D;AAAA,EAClF,MAAM,UAAU,IAAI;AAAA,EACpB,IAAI,iBAAiB;AAAA,EACrB,IAAI,uBAAuB;AAAA,EAC3B,IAAI,oBAAoB;AAAA,EACxB,WAAW,QAAQ,OAAO;AAAA,IACxB,IAAI,KAAK,MAAM,WAAW,SAAS;AAAA,MACjC,kBAAkB;AAAA,MAClB,UAAU,SAAS,KAAK,KAAK,MAAM,UAAU,KAAK,KAAK,MAAM,WAAW;AAAA,IAC1E,EAAO,SAAI,KAAK,MAAM,WAAW,eAAe;AAAA,MAC9C,wBAAwB;AAAA,IAC1B,EAAO;AAAA,MACL,qBAAqB;AAAA;AAAA,EAEzB;AAAA,EACA,OAAO;AAAA,IACL,SAAS,CAAC,GAAG,OAAO,EACjB,KAAK,EAAE,QAAQ,WAAW,KAAK,cAAc,KAAK,CAAC,EACnD,IAAI,EAAE,UAAU,kBAAkB,EAAE,UAAU,aAAa,YAAY,SAAS,EAAE,EAAE;AAAA,IACvF;AAAA,IACA;AAAA,IACA;AAAA,EACF;AAAA;AAGF,IAAM,yBAAyB;AAAA,EAC7B;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAeA,SAAS,4BAA4B,GAAiC;AAAA,EACpE,OAAO;AAAA,IACL,gBAAgB;AAAA,IAChB,wBAAwB;AAAA,IACxB,wBAAwB;AAAA,IACxB,OAAO,OAAO,YACZ,uBAAuB,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,kBAAkB,IAAI,OAAO,GAAG,CAAC,CAAC,CACpF;AAAA,IACA,SAAS,IAAI;AAAA,IACb,gBAAgB;AAAA,IAChB,sBAAsB;AAAA,IACtB,mBAAmB;AAAA,EACrB;AAAA;AAGF,SAAS,sBAAsB,CAC7B,QACA,KAC8B;AAAA,EAC9B,MAAM,WAAW,OAAO,IAAI,GAAG;AAAA,EAC/B,IAAI;AAAA,IAAU,OAAO;AAAA,EACrB,MAAM,UAAU,6BAA6B;AAAA,EAC7C,OAAO,IAAI,KAAK,OAAO;AAAA,EACvB,OAAO;AAAA;AAGT,SAAS,uBAAuB,CAC9B,QACA,UACM;AAAA,EACN,OAAO,kBAAkB,cAAc,SAAS,gBAAgB,gBAAgB;AAAA,EAChF,OAAO,0BAA0B,cAC/B,SAAS,MAAM,mBACf,2BACF;AAAA,EACA,OAAO,0BAA0B,cAC/B,SAAS,MAAM,mBACf,2BACF;AAAA,EACA,WAAW,SAAS,wBAAwB;AAAA,IAC1C,MAAM,SAAS,SAAS,MAAM;AAAA,IAC9B,MAAM,mBAAmB,cAAc,OAAO,kBAAkB,GAAG,kBAAkB;AAAA,IACrF,OAAO,MAAM,OAAO,oBAAoB;AAAA,IACxC,IAAI,OAAO,UAAU,MAAM;AAAA,MACzB,OAAO,MAAM,OAAO,SAAS,cAAc,OAAO,OAAO,GAAG,aAAa;AAAA,IAC3E,EAAO,SAAI,qBAAqB,IAAI;AAAA,MAClC,MAAM,IAAI,UAAU,4BAA4B,yBAAyB;AAAA,IAC3E;AAAA,EACF;AAAA,EACA,OAAO,kBAAkB,cAAc,SAAS,MAAM,gBAAgB,kBAAkB;AAAA,EACxF,OAAO,wBAAwB,cAC7B,SAAS,MAAM,sBACf,wBACF;AAAA,EACA,OAAO,qBAAqB,cAAc,SAAS,MAAM,mBAAmB,qBAAqB;AAAA,EACjG,IAAI,SAAS,MAAM,QAAQ;AAAA,IACzB,UAAU,OAAO,SAAS,SAAS,MAAM,OAAO,UAAU,SAAS,MAAM,OAAO,WAAW;AAAA,EAC7F;AAAA;AAGF,SAAS,uBAAuB,CAAC,OAA4D;AAAA,EAC3F,MAAM,sBACJ,MAAM,iBAAiB,MAAM,uBAAuB,MAAM;AAAA,EAC5D,IACE,wBAAwB,MAAM,kBAC9B,MAAM,yBAAyB,MAAM,kBACrC,MAAM,yBAAyB,MAAM,0BACrC,uBAAuB,KACrB,CAAC,UAAU,MAAM,MAAM,OAAO,mBAAmB,MAAM,cACzD,GACA;AAAA,IACA,MAAM,IAAI,UAAU,6DAA6D;AAAA,EACnF;AAAA,EACA,MAAM,iBAAiB,oBAAoB,MAAM,gBAAgB,kBAAkB;AAAA,EACnF,OAAO;AAAA,IACL;AAAA,OACG,qBAAqB,KAAK;AAAA,IAC7B,OAAO;AAAA,MACL,SAAS,CAAC,GAAG,MAAM,OAAO,EACvB,KAAK,EAAE,QAAQ,WAAW,KAAK,cAAc,KAAK,CAAC,EACnD,IAAI,EAAE,UAAU,kBAAkB,EAAE,UAAU,aAAa,YAAY,SAAS,EAAE,EAAE;AAAA,MACvF,gBAAgB,oBAAoB,MAAM,gBAAgB,kBAAkB;AAAA,MAC5E,sBAAsB,oBACpB,MAAM,sBACN,wBACF;AAAA,MACA,mBAAmB,oBAAoB,MAAM,mBAAmB,qBAAqB;AAAA,IACvF;AAAA,EACF;AAAA;AAGF,SAAS,oBAAoB,CAC3B,OACwD;AAAA,EACxD,MAAM,SAAuE,CAAC;AAAA,EAC9E,MAAM,kBAAkB,CAAC;AAAA,EACzB,WAAW,SAAS,wBAAwB;AAAA,IAC1C,MAAM,YAAY,MAAM,MAAM;AAAA,IAC9B,gBAAgB,SAAS,oBAAoB,UAAU,kBAAkB,GAAG,kBAAkB;AAAA,IAC9F,IAAI,UAAU,mBAAmB,IAAI;AAAA,MACnC,OAAO,SAAS,oBAAoB,UAAU,OAAO,KAAK;AAAA,IAC5D;AAAA,EACF;AAAA,EAEA,IAAI,OAAO,gBAAgB,aAAa,OAAO,iBAAiB,WAAW;AAAA,IACzE,OAAO,cAAc,oBACnB,MAAM,MAAM,YAAY,QAAQ,MAAM,MAAM,aAAa,OACzD,aACF;AAAA,EACF;AAAA,EACA,OAAO;AAAA,IACL,OAAO;AAAA,SACF;AAAA,MACH,iBACE,MAAM,2BAA2B,KAC7B,gBACA,MAAM,2BAA2B,MAAM,iBACrC,aACA;AAAA,IACV;AAAA,IACA,eAAe;AAAA,MACb,mBAAmB,oBAAoB,MAAM,wBAAwB,qBAAqB;AAAA,MAC1F;AAAA,IACF;AAAA,EACF;AAAA;AAGF,SAAS,aAAa,CAAC,OAAe,OAAuB;AAAA,EAC3D,IAAI,CAAC,iBAAiB,KAAK,KAAK,GAAG;AAAA,IACjC,MAAM,IAAI,UAAU,4BAA4B,kCAAkC;AAAA,EACpF;AAAA,EACA,OAAO,OAAO,KAAK;AAAA;AAGrB,SAAS,mBAAmB,CAAC,OAAe,OAAuB;AAAA,EACjE,IAAI,QAAQ,OAAO,OAAO,gBAAgB,GAAG;AAAA,IAC3C,MAAM,IAAI,UAAU,wBAAwB,uCAAuC;AAAA,EACrF;AAAA,EACA,OAAO,OAAO,KAAK;AAAA;AAGrB,SAAS,sBAAsB,CAAC,OAA2B,OAAuB;AAAA,EAChF,IAAI,UAAU,aAAa,MAAM,WAAW,GAAG;AAAA,IAC7C,MAAM,IAAI,UAAU,4BAA4B,mBAAmB;AAAA,EACrE;AAAA,EACA,OAAO;AAAA;AAGT,SAAS,oBAAoB,CAAC,OAAyB,OAAqB;AAAA,EAC1E,IAAI,UAAU;AAAA,IAAW,MAAM,IAAI,UAAU,4BAA4B,mBAAmB;AAAA,EAC5F,WAAW,OAAO,KAAK;AAAA,EACvB,OAAO;AAAA;AAGT,SAAS,iBAAiB,CACxB,MACA,IACA,QACmC;AAAA,EACnC,MAAM,SAA4C,CAAC;AAAA,EACnD,IAAI,SAAS,wBAAwB,MAAM,MAAM;AAAA,EACjD,OAAO,OAAO,QAAQ,IAAI,GAAG,QAAQ,GAAG;AAAA,IACtC,IAAI,OAAO,UAAU,mBAAmB;AAAA,MACtC,MAAM,IAAI,WAAW,sCAAsC,kCAAkC;AAAA,IAC/F;AAAA,IACA,MAAM,OAAO,WAAW,QAAQ,MAAM;AAAA,IACtC,OAAO,KAAK,EAAE,OAAO,IAAI,KAAK,MAAM,GAAG,KAAK,KAAK,CAAC;AAAA,IAClD,SAAS;AAAA,EACX;AAAA,EACA,OAAO;AAAA;AAGT,SAAS,UAAU,CAAC,OAAa,QAAkC;AAAA,EACjE,MAAM,OAAO,IAAI,KAAK,KAAK;AAAA,EAC3B,IAAI,WAAW;AAAA,IAAQ,KAAK,YAAY,KAAK,YAAY,IAAI,CAAC;AAAA,EACzD,SAAI,WAAW;AAAA,IAAO,KAAK,WAAW,KAAK,WAAW,IAAI,CAAC;AAAA,EAC3D;AAAA,SAAK,WAAW,KAAK,WAAW,IAAI,CAAC;AAAA,EAC1C,OAAO;AAAA;AAGT,SAAS,aAAa,CACpB,QACA,KACA,MACM;AAAA,EACN,MAAM,WAAW,OAAO,IAAI,GAAG;AAAA,EAC/B,IAAI;AAAA,IAAU,SAAS,KAAK,IAAI;AAAA,EAC3B;AAAA,WAAO,IAAI,KAAK,CAAC,IAAI,CAAC;AAAA;AAG7B,SAAS,SAAS,CAAC,SAA8B,UAAkB,aAA2B;AAAA,EAC5F,QAAQ,IAAI,WAAW,QAAQ,IAAI,QAAQ,KAAK,MAAM,OAAO,WAAW,CAAC;AAAA;AAG3E,SAAS,aAAa,CACpB,gBACA,iBACmC;AAAA,EACnC,MAAM,QAAQ,kBAAkB;AAAA,EAChC,MAAM,SAAS,mBAAmB;AAAA,EAClC,IAAI,CAAC,OAAO,cAAc,KAAK,KAAK,QAAQ,KAAK,QAAQ,0BAA0B;AAAA,IACjF,MAAM,IAAI,UACR,oEAAoE,2BACtE;AAAA,EACF;AAAA,EACA,IAAI,CAAC,OAAO,cAAc,MAAM,KAAK,SAAS,GAAG;AAAA,IAC/C,MAAM,IAAI,UAAU,kEAAkE;AAAA,EACxF;AAAA,EACA,OAAO,EAAE,OAAO,OAAO;AAAA;AAGzB,SAAS,sBAAsB,CAC7B,MACA,OACQ;AAAA,EACR,OACE,MAAM,MAAM,WAAW,QAAQ,IAAI,KAAK,MAAM,WAAW,QAAQ,KACjE,KAAK,MAAM,GAAG,cAAc,MAAM,MAAM,EAAE;AAAA;AAI9C,SAAS,sBAAsB,CAC7B,MACA,OACQ;AAAA,EACR,OACE,MAAM,iBAAiB,KAAK,kBAC5B,kBAAkB,IAAI,EAAE,cAAc,kBAAkB,KAAK,CAAC;AAAA;AAIlE,SAAS,iBAAiB,CAAC,OAA2C;AAAA,EACpE,OAAO,MAAM,SAAS,UAClB,UACA,KAAK,UAAU,CAAC,iBAAiB,MAAM,YAAY,MAAM,WAAW,CAAC;AAAA;AAG3E,SAAS,yBAAyB,CAChC,MACA,OACQ;AAAA,EACR,OACE,MAAM,iBAAiB,KAAK,kBAAkB,KAAK,WAAW,cAAc,MAAM,UAAU;AAAA;AAIhG,SAAS,sBAAsB,CAC7B,MACA,OACQ;AAAA,EACR,OACE,MAAM,iBAAiB,KAAK,kBAC5B,KAAK,WAAW,cAAc,MAAM,UAAU,KAC9C,KAAK,QAAQ,cAAc,MAAM,OAAO;AAAA;AAI5C,SAAS,wBAAwB,CAAC,QAAkC;AAAA,EAClE,IAAI,WAAW,UAAU,WAAW,SAAS,WAAW,QAAQ;AAAA,IAC9D,MAAM,IAAI,UAAU,yDAAyD;AAAA,EAC/E;AAAA;AAGF,SAAS,UAAU,CAAC,OAAa,OAAqB;AAAA,EACpD,IAAI,EAAE,iBAAiB,SAAS,CAAC,OAAO,SAAS,MAAM,QAAQ,CAAC,GAAG;AAAA,IACjE,MAAM,IAAI,UAAU,aAAa,6BAA6B;AAAA,EAChE;AAAA;AAGF,SAAS,cAAc,CAAC,OAAe,OAAqB;AAAA,EAC1D,IAAI,OAAO,UAAU,YAAY,MAAM,KAAK,EAAE,WAAW,GAAG;AAAA,IAC1D,MAAM,IAAI,UAAU,aAAa,yBAAyB;AAAA,EAC5D;AAAA;;;ACtrBK,SAAS,2BAA0B,CACxC,MACA,IACA,aACqC;AAAA,EACrC,IAAI,CAAC;AAAA,IAAI;AAAA,EACT,IAAI,SAAS;AAAA,IAAW,OAAO,EAAE,MAAM,WAAW,GAAG;AAAA,EACrD,IAAI,SAAS,YAAY;AAAA,IAAa,OAAO,EAAE,MAAM,UAAU,aAAa,aAAa,GAAG;AAAA,EAC5F,IAAI,SAAS,cAAc;AAAA,IACzB,OAAO,EAAE,MAAM,YAAY,aAAa,eAAe,GAAG;AAAA,EAC5D;AAAA;;;ACmDK,SAAS,gCAA+B,CAC7C,KAC0B;AAAA,EAC1B,IAAI,cAAc,4BAA2B,IAAI,eAAe,IAAI,aAAa,IAAI,YAAY;AAAA,EACjG,IAAI,IAAI,qBAAqB,IAAI,gBAAgB;AAAA,IAC/C,cAAc;AAAA,MACZ,MAAM;AAAA,MACN,YAAY,IAAI;AAAA,MAChB,UAAU,IAAI;AAAA,IAChB;AAAA,EACF,EAAO,SACL,IAAI,0BACJ,IAAI,wBACJ,IAAI,eACJ,IAAI,iBACJ;AAAA,IACA,cAAc;AAAA,MACZ,MAAM;AAAA,MACN,aAAa,IAAI;AAAA,MACjB,WAAW,IAAI;AAAA,MACf,YAAY,IAAI;AAAA,MAChB,eAAe,IAAI;AAAA,IACrB;AAAA,EACF;AAAA,EACA,MAAM,uBACJ,IAAI,gBAAgB,cAAc,IAAI,iBAAiB,IAAI,gBACvD,EAAE,MAAM,YAAY,eAAe,IAAI,eAAe,aAAa,IAAI,cAAc,IACrF;AAAA,EACN,OAAO;AAAA,IACL,MAAM,EAAE,aAAa,IAAI,mBAAmB,YAAY;AAAA,IACxD,WAAW,EAAE,aAAa,IAAI,cAAc,aAAa,qBAAqB;AAAA,IAC9E,OAAO,EAAE,YAAY,IAAI,aAAa,SAAS,IAAI,mBAAmB;AAAA,IACtE,aAAa,IAAI,KAAK,IAAI,aAAa;AAAA,IACvC,YAAY,IAAI,KAAK,IAAI,YAAY;AAAA,IACrC,WAAW,IAAI;AAAA,IACf,YAAY,IAAI;AAAA,IAChB,aAAa,IAAI;AAAA,IACjB,iBAAiB,IAAI;AAAA,OACjB,IAAI,oBAAoB,OACxB,CAAC,IACD;AAAA,MACE,OAAO;AAAA,QACL,UAAU,IAAI;AAAA,QACd,cACE,OAAO,IAAI,eAAe,GAAG,IAAI,iBACjC,OAAO,IAAI,iBAAiB,GAAG,IAAI,WACnC,OAAO,IAAI,cAAc,GAAG,GAC5B,SAAS;AAAA,MACb;AAAA,IACF;AAAA,EACN;AAAA;AAGK,SAAS,oCAAmC,CACjD,WAC6B;AAAA,EAC7B,MAAM,QAAQ,IAAI;AAAA,EAClB,WAAW,YAAY;AAAA,IAAW,OAAO,OAAO,SAAS,KAAK,aAAa,QAAQ;AAAA,EACnF,OAAO,CAAC,GAAG,MAAM,OAAO,CAAC,EACtB,IAAI,CAAC,kBAAoC;AAAA,IACxC,MAAM,QAAQ,cAAc;AAAA,IAC5B,MAAM,aAAa,IAAI;AAAA,IACvB,WAAW,YAAY;AAAA,MACrB,OAAO,YAAY,SAAS,UAAU,aAAa,QAAQ;AAAA,IAC7D,OAAO;AAAA,SACF,MAAM;AAAA,SACN,UAAU,aAAa;AAAA,SACvB,UAAU,aAAa;AAAA,MAC1B,YAAY,CAAC,GAAG,WAAW,OAAO,CAAC,EAChC,IACC,CAAC,WAAwC;AAAA,WACpC,MAAM,GAAI;AAAA,WACV,UAAU,KAAK;AAAA,WACf,UAAU,KAAK;AAAA,QAClB,QAAQ;AAAA,UACN,GAAG,IAAI,IAAI,MAAM,IAAI,GAAG,YAAY,CAAC,KAAK,UAAU,KAAK,GAAG,KAAK,CAAC,CAAC,EAAE,OAAO;AAAA,QAC9E,EAAE,KACA,CAAC,GAAG,MACF,YAAY,EAAE,YAAY,EAAE,UAAU,KAAK,YAAY,EAAE,SAAS,EAAE,OAAO,CAC/E;AAAA,MACF,EACF,EACC,KACC,CAAC,GAAG,MACF,EAAE,YAAY,QAAQ,IAAI,EAAE,YAAY,QAAQ,KAChD,YAAY,EAAE,aAAa,EAAE,WAAW,CAC5C;AAAA,IACJ;AAAA,GACD,EACA,KACC,CAAC,GAAG,MACF,EAAE,WAAW,QAAQ,IAAI,EAAE,WAAW,QAAQ,KAAK,YAAY,EAAE,aAAa,EAAE,WAAW,CAC/F;AAAA;AAGG,SAAS,sBAAsB,CACpC,OACA,QAC6B;AAAA,EAC7B,MAAM,QAAQ,qCAAoC,KAAK;AAAA,EACvD,MAAM,YAAY,OACf,OACC,CAAC,SACC,6BAA6B,MAAM,KAAK,MACvC,MAAM,oBAAoB,cACxB,KAAK,MAAM,UAAU,gBAAgB,MAAM,gBAClD,EACC,IACC,CAAC,UAAoC;AAAA,IACnC,MAAM,KAAK;AAAA,IACX,WAAW,EAAE,aAAa,KAAK,MAAM,aAAa,aAAa,KAAK,YAAY;AAAA,IAChF,OAAO,EAAE,YAAY,KAAK,MAAM,YAAY,SAAS,KAAK,MAAM,iBAAiB;AAAA,IACjF,aAAa,KAAK,MAAM;AAAA,IACxB,YAAY,KAAK,MAAM;AAAA,IACvB,WAAW;AAAA,IACX,YAAY,KAAK,MAAM,MAAM,gBAAgB,YAAY,MAAM;AAAA,IAC/D,aAAa,KAAK,MAAM,MAAM,aAAa,SAAS,KAAK;AAAA,IACzD,iBAAiB,KAAK,MAAM,UAAU;AAAA,OAClC,KAAK,QAAQ,KAAK,KAAK,WAAW,gBAAgB,EAAE,OAAO,KAAK,KAAK,MAAM,IAAI,CAAC;AAAA,EACtF,EACF;AAAA,EACF,MAAM,SAAS,qCAAoC,SAAS;AAAA,EAC5D,MAAM,QAAQ,OAAO,MAAM,MAAM,QAAQ,MAAM,SAAS,MAAM,KAAK;AAAA,EACnE,OAAO,gBAAgB;AAAA,IACrB;AAAA,IACA,OAAO,OAAO;AAAA,IACd,SAAS,MAAM,SAAS,MAAM,SAAS,OAAO;AAAA,EAChD,CAAC;AAAA;AAGH,SAAS,SAAS,CAAC,OAAqE;AAAA,EACtF,IAAI,QAAQ;AAAA,EACZ,IAAI,aAAa;AAAA,EACjB,IAAI,SAAS;AAAA,EACb,MAAM,SAAS,EAAE,OAAO,IAAI,aAAa,IAAI,UAAU,GAAG;AAAA,EAC1D,MAAM,QAAQ,IAAI;AAAA,EAClB,WAAW,QAAQ,OAAO;AAAA,IACxB,MAAM,QAAQ,OAAO,KAAK,SAAS;AAAA,IACnC,SAAS;AAAA,IACT,cAAc,OAAO,KAAK,UAAU;AAAA,IACpC,UAAU,OAAO,KAAK,eAAe,GAAG;AAAA,IACxC,OAAO,KAAK,oBAAoB;AAAA,IAChC,IAAI,KAAK;AAAA,MACP,MAAM,IACJ,KAAK,MAAM,WACV,MAAM,IAAI,KAAK,MAAM,QAAQ,KAAK,MAAM,OAAO,KAAK,MAAM,WAAW,CACxE;AAAA,EACJ;AAAA,EACA,MAAM,QAAuB;AAAA,IAC3B,SAAS,CAAC,GAAG,KAAK,EACf,KAAK,EAAE,KAAK,OAAO,EAAE,cAAc,CAAC,CAAC,EACrC,IAAI,EAAE,UAAU,aAAa,EAAE,UAAU,aAAa,OAAO,SAAS,EAAE,EAAE;AAAA,IAC7E,gBAAgB,UAAU,OAAO,KAAK;AAAA,IACtC,sBAAsB,UAAU,OAAO,WAAW;AAAA,IAClD,mBAAmB,UAAU,OAAO,QAAQ;AAAA,EAC9C;AAAA,EACA,OAAO;AAAA,IACL,gBAAgB,UAAU,KAAK;AAAA,OAC3B,UAAU,aAAa,EAAE,aAAa,UAAU,MAAM,EAAE,IAAI,CAAC;AAAA,IACjE;AAAA,EACF;AAAA;AAGF,SAAS,SAAS,CAAC,OAA4C;AAAA,EAC7D,IAAI,QAAQ,MAAM,GAAI,YAAY,QAAQ;AAAA,EAC1C,IAAI,OAAO,MAAM,GAAI,WAAW,QAAQ;AAAA,EACxC,WAAW,QAAQ,OAAO;AAAA,IACxB,QAAQ,KAAK,IAAI,OAAO,KAAK,YAAY,QAAQ,CAAC;AAAA,IAClD,OAAO,KAAK,IAAI,MAAM,KAAK,WAAW,QAAQ,CAAC;AAAA,EACjD;AAAA,EACA,OAAO,EAAE,aAAa,IAAI,KAAK,KAAK,GAAG,YAAY,IAAI,KAAK,IAAI,EAAE;AAAA;AAGpE,SAAS,WAAW,CAAC,GAAW,GAAmB;AAAA,EACjD,OAAO,MAAM,IAAI,IAAI,IAAI,IAAI,KAAK;AAAA;AAGpC,SAAS,SAAS,CAAC,OAAuB;AAAA,EACxC,IAAI,QAAQ,MAAM,QAAQ,OAAO,OAAO,gBAAgB;AAAA,IACtD,MAAM,IAAI,WAAW,kEAAkE;AAAA,EACzF,OAAO,OAAO,KAAK;AAAA;AAGrB,SAAS,MAAS,CAAC,KAAuB,KAAa,MAAe;AAAA,EACpE,MAAM,QAAQ,IAAI,IAAI,GAAG;AAAA,EACzB,IAAI;AAAA,IAAO,MAAM,KAAK,IAAI;AAAA,EACrB;AAAA,QAAI,IAAI,KAAK,CAAC,IAAI,CAAC;AAAA;;;AC1O1B,IAAM,mBAAmB;AACzB,IAAM,oBAAoB;AAC1B,IAAM,eAAe,oBAAoB;AACzC,IAAM,0BAA0B;AAChC,IAAM,cAAyD;AAAA,EAC7D,sBAAsB;AAAA,EACtB,yBAAyB;AAAA,EACzB,0BAA0B;AAAA,EAC1B,2BAA2B;AAAA,EAC3B,6BAA6B;AAAA,EAC7B,6BAA6B;AAAA,EAC7B,uBAAuB;AAAA,EACvB,sBAAsB;AAAA,EACtB,2BAA2B;AAAA,EAC3B,4BAA4B;AAC9B;AACA,IAAM,SAAS,IAAI,IAAI,OAAO,KAAK,WAAW,CAAsB;AACpE,IAAM,sBAAsB,IAAI,IAAyB;AAAA,EACvD;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,CAAC;AACD,IAAM,wBAAwB;AAAA,EAC5B;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAEO,SAAS,0BAAyB,CAAC,OAA2C;AAAA,EACnF,IAAI,OAAO,UAAU,YAAY,UAAU,QAAQ,MAAM,QAAQ,KAAK,GAAG;AAAA,IACvE,MAAM,IAAI,UAAU,8CAA8C;AAAA,EACpE;AAAA,EACA,MAAM,SAAoD,CAAC;AAAA,EAC3D,WAAW,SAAS,uBAAuB;AAAA,IACzC,MAAM,QAAQ,MAAM;AAAA,IACpB,IAAI,UAAU,WAAW;AAAA,MACvB,gBAAe,OAAO,kBAAkB,OAAO;AAAA,MAC/C,OAAO,SAAS;AAAA,IAClB;AAAA,EACF;AAAA,EACA,IAAI,MAAM,UAAU,WAAW;AAAA,IAC7B,IAAI,OAAO,MAAM,UAAU,WAAW;AAAA,MACpC,MAAM,IAAI,UAAU,iDAAiD;AAAA,IACvE;AAAA,IACA,OAAO,QAAQ,MAAM;AAAA,EACvB;AAAA,EACA,IAAI,MAAM,yBAAyB,WAAW;AAAA,IAC5C,IAAI,CAAC,OAAO,cAAc,MAAM,oBAAoB,KAAK,MAAM,wBAAwB,GAAG;AAAA,MACxF,MAAM,IAAI,UACR,gFACF;AAAA,IACF;AAAA,IACA,OAAO,uBAAuB,MAAM;AAAA,EACtC;AAAA,EACA,OAAO;AAAA;AAGF,SAAS,+BAA8B,CAC5C,OACuB;AAAA,EACvB,gBAAe,MAAM,WAAW,uBAAuB;AAAA,EACvD,gBAAe,MAAM,eAAe,2BAA2B;AAAA,EAC/D,MAAM,OAAO;AAAA,OACP,MAAM,aAAa,YAAY,CAAC,IAAI,EAAE,UAAU,wBAAwB,MAAM,QAAQ,EAAE;AAAA,IAC5F,WAAW,MAAM;AAAA,IACjB,eAAe,MAAM;AAAA,IACrB,gBAAgB,2BAA0B,MAAM,cAAc;AAAA,IAC9D,SAAS,UAAU,MAAM,SAAS,qBAAqB;AAAA,EACzD;AAAA,EAEA,IAAI,MAAM,WAAW,SAAS;AAAA,IAC5B,OAAO,mBAAmB,OAAO;AAAA,SAC5B;AAAA,MACH,aAAa,qBAAqB,MAAM,WAAW;AAAA,IACrD,CAAC;AAAA,EACH;AAAA,EACA,IAAI,MAAM,WAAW,eAAe;AAAA,IAClC,OAAO,yBAAyB,OAAO;AAAA,SAClC;AAAA,SACC,MAAM,gBAAgB,YACtB,CAAC,IACD,EAAE,aAAa,qBAAqB,MAAM,WAAW,EAAE;AAAA,IAC7D,CAAC;AAAA,EACH;AAAA,EACA,MAAM,IAAI,UAAU,mCAAmC;AAAA;AAIlD,SAAS,4BAA2B,CACzC,QACA,aACS;AAAA,EACT,IAAI,OAAO,cAAc,YAAY,aAAa,OAAO,kBAAkB,YAAY,IAAI;AAAA,IACzF,OAAO;AAAA,EACT;AAAA,EACA,IAAI,OAAO,UAAU,WAAW,SAAS;AAAA,IACvC,MAAM,QAAQ,2BAA0B,YAAY,KAAK;AAAA,IACzD,MAAM,aAAa,IAAI,IACrB,OAAO,SAAS,WAAW,IAAI,CAAC,cAAc,CAAC,UAAU,OAAO,SAAS,CAAC,CAC5E;AAAA,IACA,IAAI,CAAC,qBAAqB,YAAY,KAAK;AAAA,MAAG,OAAO;AAAA,EACvD;AAAA,EACA,IAAI,OAAO,WAAW;AAAA,IAAe,OAAO;AAAA,EAC5C,IAAI,OAAO,WAAW,WAAW,KAAK,0BAA0B,OAAO,YAAY,QAAQ,GAAG;AAAA,IAC5F,OAAO;AAAA,EACT;AAAA,EAEA,MAAM,QAAQ,2BAA0B,YAAY,KAAK;AAAA,EACzD,MAAM,aAAa,IAAI,IAAI,OAAO,WAAW,IAAI,CAAC,cAAc,CAAC,UAAU,OAAO,SAAS,CAAC,CAAC;AAAA,EAC7F,OAAO,qBAAqB,YAAY,KAAK;AAAA;AAG/C,SAAS,oBAAoB,CAC3B,YACA,OACS;AAAA,EACT,MAAM,QAAQ,WAAW,IAAI,0BAA0B;AAAA,EACvD,IAAI,OAAO;AAAA,IACT,OACE,WAAW,SAAS,KACpB,MAAM,oBAAoB,aAC1B,OAAO,MAAM,QAAQ,MAAM,OAAO,MAAM,eAAe;AAAA,EAE3D;AAAA,EAEA,OACE,0BAA0B,YAAY,KAAK,KAAK,2BAA2B,YAAY,KAAK;AAAA;AAIhG,SAAS,yBAAyB,CAChC,YACA,OACS;AAAA,EACT,IAAI,MAAM,gBAAgB;AAAA,IAAW,OAAO;AAAA,EAC5C,MAAM,QAAQ,WAAW,IAAI,oBAAoB;AAAA,EACjD,MAAM,mBAAmB;AAAA,IACvB,CAAC,yBAAyB,MAAM,mBAAmB;AAAA,IACnD,CAAC,0BAA0B,MAAM,oBAAoB;AAAA,IACrD,CAAC,2BAA2B,MAAM,qBAAqB;AAAA,EACzD;AAAA,EACA,MAAM,gBAAgB,iBAAiB,OAAO,EAAE,WAAW,WAAW,IAAI,KAAK,CAAC;AAAA,EAChF,MAAM,iBAAiB;AAAA,IACrB,WAAW,IAAI,2BAA2B;AAAA,IAC1C,WAAW,IAAI,2BAA2B;AAAA,EAC5C,EAAE,OAAO,CAAC,cAA4C,cAAc,SAAS;AAAA,EAE7E,IAAI,OAAO;AAAA,IACT,OACE,cAAc,WAAW,KACzB,eAAe,WAAW,KAC1B,OAAO,MAAM,QAAQ,MAAM,OAAO,MAAM,WAAW;AAAA,EAEvD;AAAA,EACA,IAAI,cAAc,WAAW,KAAK,eAAe,WAAW;AAAA,IAAG,OAAO;AAAA,EACtE,IAAI,WAAW,IAAI,yBAAyB,KAAK,eAAe,SAAS;AAAA,IAAG,OAAO;AAAA,EAEnF,IAAI,WAAW;AAAA,EACf,YAAY,OAAO,aAAa,eAAe;AAAA,IAC7C,IAAI,aAAa;AAAA,MAAW,OAAO;AAAA,IACnC,MAAM,YAAY,WAAW,IAAI,KAAK;AAAA,IACtC,IAAI,OAAO,UAAU,QAAQ,MAAM,OAAO,QAAQ;AAAA,MAAG,OAAO;AAAA,IAC5D,YAAY,OAAO,UAAU,QAAQ;AAAA,EACvC;AAAA,EACA,IAAI,eAAe,SAAS,GAAG;AAAA,IAC7B,IAAI,MAAM,0BAA0B;AAAA,MAAW,OAAO;AAAA,IACtD,MAAM,wBAAwB,eAAe,OAC3C,CAAC,KAAK,cAAc,MAAM,OAAO,UAAU,QAAQ,GACnD,EACF;AAAA,IACA,IAAI,0BAA0B,OAAO,MAAM,qBAAqB;AAAA,MAAG,OAAO;AAAA,IAC1E,YAAY;AAAA,EACd;AAAA,EACA,OAAO,aAAa,OAAO,MAAM,WAAW;AAAA;AAG9C,SAAS,0BAA0B,CACjC,YACA,OACS;AAAA,EACT,IAAI,MAAM,iBAAiB;AAAA,IAAW,OAAO;AAAA,EAC7C,MAAM,QAAQ,WAAW,IAAI,qBAAqB;AAAA,EAClD,MAAM,aAAa;AAAA,IACjB,CAAC,sBAAsB,MAAM,gBAAgB;AAAA,IAC7C,CAAC,2BAA2B,MAAM,qBAAqB;AAAA,EACzD;AAAA,EACA,MAAM,oBAAoB,WAAW,OAAO,EAAE,WAAW,WAAW,IAAI,KAAK,CAAC;AAAA,EAE9E,IAAI,OAAO;AAAA,IACT,OAAO,kBAAkB,WAAW,KAAK,OAAO,MAAM,QAAQ,MAAM,OAAO,MAAM,YAAY;AAAA,EAC/F;AAAA,EACA,IAAI,kBAAkB,WAAW;AAAA,IAAG,OAAO;AAAA,EAE3C,IAAI,WAAW;AAAA,EACf,YAAY,OAAO,aAAa,mBAAmB;AAAA,IACjD,IAAI,aAAa;AAAA,MAAW,OAAO;AAAA,IACnC,MAAM,YAAY,WAAW,IAAI,KAAK;AAAA,IACtC,IAAI,OAAO,UAAU,QAAQ,MAAM,OAAO,QAAQ;AAAA,MAAG,OAAO;AAAA,IAC5D,YAAY,OAAO,UAAU,QAAQ;AAAA,EACvC;AAAA,EACA,OAAO,aAAa,OAAO,MAAM,YAAY;AAAA;AAG/C,SAAS,kBAAkB,CACzB,OACA,MAI4B;AAAA,EAC5B,MAAM,kBAAkB,yBAAyB,MAAM,eAAe;AAAA,EACtE,MAAM,aAAa,MAAM,WAAW,IAAI,sBAAsB,EAAE,KAAK,iBAAiB;AAAA,EACtF,IAAI,WAAW,WAAW,KAAK,CAAC,0BAA0B,KAAK,YAAY,QAAQ,GAAG;AAAA,IACpF,MAAM,IAAI,UAAU,2CAA2C;AAAA,EACjE;AAAA,EACA,IAAI,IAAI,IAAI,WAAW,IAAI,CAAC,cAAc,UAAU,KAAK,CAAC,EAAE,SAAS,WAAW,QAAQ;AAAA,IACtF,MAAM,IAAI,UAAU,uDAAuD;AAAA,EAC7E;AAAA,EACA,MAAM,cAAc,sBAAsB,MAAM,MAAM,aAAa,mBAAmB,EAAE,SAAS;AAAA,EACjG,IAAI,WAAW,SAAS,KAAK,gBAAgB,cAAc,UAAU,GAAG;AAAA,IACtE,MAAM,IAAI,UAAU,4DAA4D;AAAA,EAClF;AAAA,EACA,OAAO;AAAA,OACF;AAAA,IACH,QAAQ;AAAA,IACR;AAAA,IACA,OAAO,EAAE,UAAU,kBAAkB,MAAM,MAAM,QAAQ,GAAG,YAAY;AAAA,IACxE;AAAA,EACF;AAAA;AAGK,SAAS,uBAAuB,CAAC,OAAgC;AAAA,EACtE,kBAAiB,OAAO,kBAAkB;AAAA,EAC1C,IAAI,MAAM,WAAW,SAAS;AAAA,IAC5B,kBAAiB,MAAM,OAAO,gBAAgB;AAAA,IAC9C,QAAQ,UAAU,gBAAgB,MAAM;AAAA,IACxC,IACE,OAAO,aAAa,YACpB,OAAO,gBAAgB,YACvB,CAAC,MAAM,QAAQ,MAAM,UAAU;AAAA,MAE/B,MAAM,IAAI,UAAU,mDAAmD;AAAA,IACzE,MAAM,aAAa,MAAM,WACtB,IAAI,CAAC,cAAc;AAAA,MAClB,kBAAiB,WAAW,oBAAoB;AAAA,MAChD,MAAM,QAAQ,CAAC,GAAG,MAAM,EAAE,KAAK,CAAC,UAAU,UAAU,UAAU,KAAK;AAAA,MACnE,IACE,CAAC,SACD,OAAO,UAAU,aAAa,YAC9B,OAAO,UAAU,8BAA8B,YAC/C,OAAO,UAAU,sBAAsB;AAAA,QAEvC,MAAM,IAAI,UAAU,yCAAyC;AAAA,MAC/D,OAAO,uBAAuB;AAAA,QAC5B;AAAA,QACA,UAAU,UAAU;AAAA,QACpB,2BAA2B,UAAU;AAAA,QACrC,mBAAmB,UAAU;AAAA,MAC/B,CAAC;AAAA,KACF,EACA,KAAK,iBAAiB;AAAA,IACzB,IACE,CAAC,WAAW,UACZ,IAAI,IAAI,WAAW,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,EAAE,SAAS,WAAW,UAC5D,sBAAsB,aAAa,sBAAsB,EAAE,SAAS,MAClE,cAAc,UAAU;AAAA,MAE1B,MAAM,IAAI,UACR,2EACF;AAAA,IACF,OAAO;AAAA,MACL,QAAQ;AAAA,MACR,OAAO,EAAE,UAAU,kBAAkB,QAAQ,GAAG,YAAY;AAAA,MAC5D;AAAA,IACF;AAAA,EACF;AAAA,EACA,MAAM,SAAS,CAAC,GAAG,mBAAmB,EAAE,KAAK,CAAC,WAAW,WAAW,MAAM,MAAM;AAAA,EAChF,IAAI,MAAM,WAAW,iBAAiB,CAAC;AAAA,IACrC,MAAM,IAAI,UAAU,gDAAgD;AAAA,EACtE,IAAI;AAAA,EACJ,IAAI,MAAM,kBAAkB,WAAW;AAAA,IACrC,IAAI,CAAC,MAAM,QAAQ,MAAM,aAAa;AAAA,MACpC,MAAM,IAAI,UAAU,yCAAyC;AAAA,IAC/D,gBAAgB,uBACd,MAAM,cAAc,IAAI,CAAC,UAAU;AAAA,MACjC,MAAM,QAAQ,CAAC,GAAG,MAAM,EAAE,KAAK,CAAC,UAAU,UAAU,KAAK;AAAA,MACzD,IAAI,CAAC;AAAA,QAAO,MAAM,IAAI,UAAU,wCAAwC;AAAA,MACxE,OAAO;AAAA,KACR,CACH;AAAA,EACF;AAAA,EACA,IAAI,WAAW,uBAAuB,CAAC;AAAA,IACrC,MAAM,IAAI,UAAU,uDAAuD;AAAA,EAC7E,OAAO;AAAA,IACL,QAAQ;AAAA,IACR;AAAA,OACI,kBAAkB,YAAY,CAAC,IAAI,EAAE,cAAc;AAAA,EACzD;AAAA;AAGF,SAAS,yBAAyB,CAAC,UAA2B;AAAA,EAC5D,OAAO,aAAa;AAAA;AAGtB,SAAS,wBAAwB,CAC/B,OACA,MAIkC;AAAA,EAClC,IAAI,CAAC,oBAAoB,IAAI,MAAM,MAAM,GAAG;AAAA,IAC1C,MAAM,IAAI,UAAU,iCAAiC,OAAO,MAAM,MAAM,gBAAgB;AAAA,EAC1F;AAAA,EACA,MAAM,kBAAkB,MAAM,kBAC1B,yBAAyB,MAAM,eAAe,IAC9C;AAAA,EACJ,IAAI,MAAM,WAAW,4BAA4B,oBAAoB,WAAW;AAAA,IAC9E,MAAM,IAAI,UAAU,qEAAqE;AAAA,EAC3F;AAAA,EACA,IAAI,MAAM,WAAW,4BAA4B,oBAAoB,WAAW;AAAA,IAC9E,MAAM,IAAI,UAAU,aAAa,MAAM,qCAAqC;AAAA,EAC9E;AAAA,EACA,MAAM,gBAAgB,uBAAuB,MAAM,aAAa;AAAA,EAChE,IAAI,MAAM,WAAW,uBAAuB,CAAC,eAAe;AAAA,IAC1D,MAAM,IAAI,UAAU,qDAAqD;AAAA,EAC3E;AAAA,EACA,OAAO;AAAA,OACF;AAAA,IACH,QAAQ;AAAA,OACJ,kBAAkB,EAAE,gBAAgB,IAAI,CAAC;AAAA,IAC7C,QAAQ,MAAM;AAAA,OACV,gBAAgB,EAAE,cAAc,IAAI,CAAC;AAAA,EAC3C;AAAA;AAGF,SAAS,sBAAsB,CAAC,OAAyC;AAAA,EACvE,IAAI,CAAC,OAAO,IAAI,MAAM,KAAK,GAAG;AAAA,IAC5B,MAAM,IAAI,UAAU,yBAAyB,OAAO,MAAM,KAAK,gBAAgB;AAAA,EACjF;AAAA,EACA,MAAM,WAAW,mBAAmB,MAAM,OAAO,MAAM,UAAU,MAAM,yBAAyB;AAAA,EAChG,IAAI,SAAS,sBAAsB,MAAM,mBAAmB;AAAA,IAC1D,MAAM,IAAI,UAAU,6BAA6B,MAAM,2BAA2B;AAAA,EACpF;AAAA,EACA,OAAO;AAAA;AAGT,SAAS,kBAAkB,CACzB,OACA,UACA,2BACiB;AAAA,EACjB,MAAM,qBAAqB,cAAc,UAAU,GAAG,gBAAgB;AAAA,EACtE,MAAM,OAAO,sBAAsB,2BAA2B,GAAG,YAAY;AAAA,EAC7E,MAAM,UAAU,qBAAqB,OAAO,gBAAgB;AAAA,EAC5D,kBAAkB,QAAQ,GAAG,cAAc;AAAA,EAC3C,OAAO;AAAA,IACL;AAAA,IACA,UAAU,mBAAmB,SAAS;AAAA,IACtC,2BAA2B,KAAK,SAAS;AAAA,IACzC,mBAAmB,OAAO,SAAS;AAAA,EACrC;AAAA;AAGF,SAAS,oBAAoB,CAAC,OAAqC;AAAA,EACjE,gBAAe,MAAM,UAAU,gBAAgB;AAAA,EAC/C,gBAAe,MAAM,eAAe,qBAAqB;AAAA,EACzD,gBAAe,MAAM,eAAe,qBAAqB;AAAA,EACzD,IAAI,MAAM,cAAc;AAAA,IAAW,gBAAe,MAAM,WAAW,iBAAiB;AAAA,EACpF,OAAO;AAAA,IACL,UAAU,MAAM;AAAA,IAChB,eAAe,MAAM;AAAA,IACrB,eAAe,MAAM;AAAA,OACjB,MAAM,cAAc,YAAY,CAAC,IAAI,EAAE,WAAW,MAAM,UAAU;AAAA,IACtE,YAAY,UAAU,MAAM,YAAY,yBAAyB;AAAA,EACnE;AAAA;AAGF,SAAS,wBAAwB,CAAC,OAA6C;AAAA,EAC7E,gBAAe,MAAM,YAAY,4BAA4B;AAAA,EAC7D,gBAAe,MAAM,SAAS,yBAAyB;AAAA,EACvD,OAAO,EAAE,YAAY,MAAM,YAAY,SAAS,MAAM,QAAQ;AAAA;AAGhE,SAAS,sBAAsB,CAC7B,OACwC;AAAA,EACxC,IAAI,CAAC,OAAO;AAAA,IAAQ;AAAA,EACpB,MAAM,SAAS,CAAC,GAAG,IAAI,IAAI,KAAK,CAAC;AAAA,EACjC,WAAW,SAAS,QAAQ;AAAA,IAC1B,IAAI,CAAC,OAAO,IAAI,KAAK;AAAA,MAAG,MAAM,IAAI,UAAU,4BAA4B,oBAAoB;AAAA,EAC9F;AAAA,EACA,OAAO,OAAO,KAAK,CAAC,MAAM,UAAU,YAAY,QAAQ,YAAY,MAAM;AAAA;AAG5E,SAAS,aAAa,CAAC,YAAgD;AAAA,EACrE,IAAI,QAAQ;AAAA,EACZ,WAAW,aAAa,YAAY;AAAA,IAClC,SAAS,sBAAsB,UAAU,mBAAmB,kBAAkB;AAAA,IAC9E,kBAAkB,OAAO,YAAY;AAAA,EACvC;AAAA,EACA,OAAO,MAAM,SAAS;AAAA;AAGxB,SAAS,aAAa,CAAC,OAAwB,OAAuB;AAAA,EACpE,IAAI,OAAO,UAAU,UAAU;AAAA,IAC7B,IAAI,CAAC,OAAO,cAAc,KAAK,KAAK,QAAQ,GAAG;AAAA,MAC7C,MAAM,IAAI,UAAU,aAAa,4CAA4C;AAAA,IAC/E;AAAA,IACA,OAAO,OAAO,KAAK;AAAA,EACrB;AAAA,EACA,OAAO,sBAAsB,OAAO,KAAK;AAAA;AAG3C,SAAS,qBAAqB,CAAC,OAAe,OAAuB;AAAA,EACnE,IACE,OAAO,UAAU,YACjB,MAAM,WAAW,KACjB,MAAM,SAAS,2BACf,CAAC,QAAQ,KAAK,KAAK,GACnB;AAAA,IACA,MAAM,IAAI,UAAU,aAAa,8CAA8C;AAAA,EACjF;AAAA,EACA,MAAM,SAAS,OAAO,KAAK;AAAA,EAC3B,kBAAkB,QAAQ,KAAK;AAAA,EAC/B,OAAO;AAAA;AAGT,SAAS,iBAAiB,CAAC,MAAuB,OAAgC;AAAA,EAChF,OAAO,YAAY,KAAK,SAAS,YAAY,MAAM;AAAA;AAGrD,SAAS,iBAAiB,CAAC,OAAuB;AAAA,EAChD,IAAI,CAAC,aAAa,KAAK,KAAK,GAAG;AAAA,IAC7B,MAAM,IAAI,UAAU,2DAA2D;AAAA,EACjF;AAAA,EACA,OAAO;AAAA;AAGT,SAAS,iBAAiB,CAAC,OAAe,OAAqB;AAAA,EAC7D,IAAI,QAAQ,MAAM,QAAQ,kBAAkB;AAAA,IAC1C,MAAM,IAAI,UAAU,aAAa,wCAAwC;AAAA,EAC3E;AAAA;AAGF,SAAS,eAAc,CAAC,OAAe,OAAqB;AAAA,EAC1D,IAAI,OAAO,UAAU,YAAY,MAAM,KAAK,EAAE,WAAW,GAAG;AAAA,IAC1D,MAAM,IAAI,UAAU,aAAa,yBAAyB;AAAA,EAC5D;AAAA;AAGF,SAAS,SAAS,CAAC,OAAa,OAAqB;AAAA,EACnD,IAAI,EAAE,iBAAiB,SAAS,CAAC,OAAO,SAAS,MAAM,QAAQ,CAAC,GAAG;AAAA,IACjE,MAAM,IAAI,UAAU,aAAa,6BAA6B;AAAA,EAChE;AAAA,EACA,OAAO,IAAI,KAAK,KAAK;AAAA;",
-  "debugId": "D7C89858E351743364756E2164756E21",
-  "names": []
-}

package/dist/chunk-es1gxsbf.js.map

@@ -1,13 +0,0 @@
-{
-  "version": 3,
-  "sources": ["../src/security/errors.ts", "../src/security/membership-policies.ts", "../src/security/validation.ts", "../src/security/builders.ts"],
-  "sourcesContent": [
-    "export class SecurityValidationError extends Error {\n  readonly name = \"SecurityValidationError\"\n}\n",
-    "import type { MembershipOperation, MembershipPolicyDefinition } from \"./types\"\n\nexport interface MembershipOperationScope {\n  readonly policyIds: readonly string[]\n  readonly groupIds: ReadonlySet<string>\n}\n\nexport interface MembershipPolicyScope {\n  readonly policyIds: readonly string[]\n  readonly operations: Readonly<Record<MembershipOperation, MembershipOperationScope>>\n}\n\nconst MEMBERSHIP_OPERATIONS = [\"invite\", \"assignGroups\", \"suspend\", \"serviceAccounts\"] as const\n\nexport function resolveMembershipPolicyScope(input: {\n  readonly membershipPolicies: readonly MembershipPolicyDefinition[]\n  readonly callerGroupIds: readonly string[]\n}): MembershipPolicyScope {\n  const callerGroups = new Set(input.callerGroupIds)\n  const policyIds: string[] = []\n  const operations = createEmptyOperationScopes()\n\n  for (const policy of input.membershipPolicies) {\n    if (!policy.grantedToGroupIds.some((groupId) => callerGroups.has(groupId))) {\n      continue\n    }\n\n    policyIds.push(policy.id)\n    for (const operation of policy.can) {\n      operations[operation].policyIds.push(policy.id)\n      for (const groupId of policy.scopeGroupIds) {\n        operations[operation].groupIds.add(groupId)\n      }\n    }\n  }\n\n  return {\n    policyIds,\n    operations: {\n      invite: freezeOperationScope(operations.invite),\n      assignGroups: freezeOperationScope(operations.assignGroups),\n      suspend: freezeOperationScope(operations.suspend),\n      serviceAccounts: freezeOperationScope(operations.serviceAccounts),\n    },\n  }\n}\n\nexport function canPerformMembershipOperation(\n  scope: MembershipPolicyScope,\n  operation: MembershipOperation,\n  groupIds: readonly string[]\n): boolean {\n  const operationScope = scope.operations[operation]\n\n  if (operationScope.policyIds.length === 0) {\n    return false\n  }\n\n  if (groupIds.length === 0) {\n    return true\n  }\n\n  return groupIds.every((groupId) => operationScope.groupIds.has(groupId))\n}\n\nexport function missingMembershipGroupIds(\n  scope: MembershipPolicyScope,\n  operation: MembershipOperation,\n  groupIds: readonly string[]\n): readonly string[] {\n  if (groupIds.length === 0) {\n    return []\n  }\n\n  const operationScope = scope.operations[operation]\n  return groupIds.filter((groupId) => !operationScope.groupIds.has(groupId))\n}\n\nfunction createEmptyOperationScopes(): Record<\n  MembershipOperation,\n  { policyIds: string[]; groupIds: Set<string> }\n> {\n  return {\n    invite: { policyIds: [], groupIds: new Set<string>() },\n    assignGroups: { policyIds: [], groupIds: new Set<string>() },\n    suspend: { policyIds: [], groupIds: new Set<string>() },\n    serviceAccounts: { policyIds: [], groupIds: new Set<string>() },\n  }\n}\n\nfunction freezeOperationScope(input: {\n  readonly policyIds: readonly string[]\n  readonly groupIds: ReadonlySet<string>\n}): MembershipOperationScope {\n  return {\n    policyIds: [...input.policyIds],\n    groupIds: new Set(input.groupIds),\n  }\n}\n\nexport function isMembershipOperation(value: unknown): value is MembershipOperation {\n  return MEMBERSHIP_OPERATIONS.includes(value as MembershipOperation)\n}\n",
-    "import {\n  GRANT_KINDS,\n  type GrantUniverseKey,\n  grantKindOf,\n  isSingletonGrantKind,\n} from \"../authorization/grant-kinds\"\nimport { SecurityValidationError } from \"./errors\"\nimport { isMembershipOperation } from \"./membership-policies\"\nimport type {\n  GrantCapability,\n  GrantDefinition,\n  GroupDefinition,\n  MarkingDefinition,\n  MembershipPolicyDefinition,\n  RegisteredSecurityDefinitions,\n  RoleDefinition,\n  Selection,\n} from \"./types\"\n\n/** Registered id universes and singleton capabilities available to role grants. */\ntype RegisteredUniverses = Partial<Record<GrantUniverseKey, ReadonlySet<string>>> & {\n  readonly agentAvailable?: boolean\n}\n\n/**\n * Every grant capability, for validating grants that arrive from untyped code.\n *\n * Written as a total `Record<GrantCapability, true>` rather than a bare array so a capability added\n * to `GrantDefinition` is a compile error here — the same discipline `GRANT_KINDS` uses. The\n * hand-written `capability !== \"view\" && …` chain this replaces would have accepted the new\n * capability at startup and then died on `GRANT_KINDS[kind].universeKey`.\n */\nconst GRANT_CAPABILITIES = Object.keys({\n  view: true,\n  edit: true,\n  append: true,\n  apply: true,\n  share: true,\n  run: true,\n  observe: true,\n  manage: true,\n} satisfies Record<GrantCapability, true>) as readonly GrantCapability[]\n\n/** \"'a', 'b', or 'c'\" — the shape the security errors already use. */\nfunction formatAlternatives(values: readonly string[]): string {\n  const quoted = values.map((value) => `'${value}'`)\n  const last = quoted.at(-1)\n  return quoted.length < 2 ? (last ?? \"\") : `${quoted.slice(0, -1).join(\", \")}, or ${last}`\n}\n\nexport type CreateSecurityError = (message: string) => Error\n\n// Shared, single-source validation primitives. The builders reuse these too, so\n// authoring-time and startup-time checks can never drift apart.\nexport function isRecord(value: unknown): value is Record<string, unknown> {\n  return typeof value === \"object\" && value !== null && !Array.isArray(value)\n}\n\nexport function assertNonEmptyString(\n  value: unknown,\n  field: string,\n  createError: CreateSecurityError = (message) => new SecurityValidationError(message)\n): asserts value is string {\n  if (typeof value !== \"string\" || value.trim().length === 0) {\n    throw createError(`[Sixb] ${field} must not be empty.`)\n  }\n}\n\nexport function assertOptionalString(\n  value: unknown,\n  field: string,\n  createError: CreateSecurityError = (message) => new SecurityValidationError(message)\n): asserts value is string | undefined {\n  if (value === undefined) {\n    return\n  }\n\n  if (typeof value !== \"string\") {\n    throw createError(`[Sixb] ${field} must be a string.`)\n  }\n}\n\nfunction assertStringArray(\n  value: unknown,\n  field: string,\n  createError: CreateSecurityError\n): asserts value is readonly string[] {\n  if (!Array.isArray(value)) {\n    throw createError(`[Sixb] ${field} must be an array of group ids.`)\n  }\n\n  for (const item of value) {\n    assertNonEmptyString(item, `${field} item`, createError)\n  }\n}\n\nfunction assertMembershipOperationArray(\n  value: unknown,\n  field: string,\n  createError: CreateSecurityError\n): asserts value is MembershipPolicyDefinition[\"can\"] {\n  if (!Array.isArray(value)) {\n    throw createError(`[Sixb] ${field} must be an array of membership operations.`)\n  }\n\n  for (const item of value) {\n    if (!isMembershipOperation(item)) {\n      throw createError(\n        `[Sixb] ${field} must contain only membership operations: invite, assignGroups, suspend, serviceAccounts.`\n      )\n    }\n  }\n}\n\nfunction assertNoDuplicateIds(ids: readonly string[], field: string): void {\n  const seen = new Set<string>()\n  for (const id of ids) {\n    if (seen.has(id)) {\n      throw new SecurityValidationError(`[Sixb] ${field} contains duplicate group id '${id}'.`)\n    }\n    seen.add(id)\n  }\n}\n\nfunction assertNoDuplicateOperations(\n  operations: readonly MembershipPolicyDefinition[\"can\"][number][],\n  field: string\n): void {\n  const seen = new Set<string>()\n  for (const operation of operations) {\n    if (seen.has(operation)) {\n      throw new SecurityValidationError(\n        `[Sixb] ${field} contains duplicate operation '${operation}'.`\n      )\n    }\n    seen.add(operation)\n  }\n}\n\nexport function assertMarkingDefinition(\n  value: unknown,\n  createError: CreateSecurityError = (message) => new SecurityValidationError(message)\n): asserts value is MarkingDefinition {\n  if (!isRecord(value)) {\n    throw createError(\"[Sixb] Marking definition must be an object.\")\n  }\n\n  if (value.kind !== \"marking\") {\n    throw createError(\"[Sixb] Marking definition kind must be 'marking'.\")\n  }\n\n  assertNonEmptyString(value.id, \"Marking id\", createError)\n  assertOptionalString(value.label, `Marking '${value.id}' label`, createError)\n  assertOptionalString(value.description, `Marking '${value.id}' description`, createError)\n}\n\nexport function isMarkingDefinition(value: unknown): value is MarkingDefinition {\n  try {\n    assertMarkingDefinition(value, (message) => new Error(message))\n    return true\n  } catch {\n    return false\n  }\n}\n\nexport function assertGroupDefinition(\n  value: unknown,\n  createError: CreateSecurityError = (message) => new SecurityValidationError(message)\n): asserts value is GroupDefinition {\n  if (!isRecord(value)) {\n    throw createError(\"[Sixb] Group definition must be an object.\")\n  }\n\n  if (value.kind !== \"group\") {\n    throw createError(\"[Sixb] Group definition kind must be 'group'.\")\n  }\n\n  assertNonEmptyString(value.id, \"Group id\", createError)\n  assertOptionalString(value.label, `Group '${value.id}' label`, createError)\n  assertOptionalString(value.description, `Group '${value.id}' description`, createError)\n}\n\nexport function isGroupDefinition(value: unknown): value is GroupDefinition {\n  try {\n    assertGroupDefinition(value, (message) => new Error(message))\n    return true\n  } catch {\n    return false\n  }\n}\n\nexport function assertMembershipPolicyDefinition(\n  value: unknown,\n  createError: CreateSecurityError = (message) => new SecurityValidationError(message)\n): asserts value is MembershipPolicyDefinition {\n  if (!isRecord(value)) {\n    throw createError(\"[Sixb] Membership policy definition must be an object.\")\n  }\n\n  if (value.kind !== \"membershipPolicy\") {\n    throw createError(\"[Sixb] Membership policy definition kind must be 'membershipPolicy'.\")\n  }\n\n  assertNonEmptyString(value.id, \"Membership policy id\", createError)\n  assertStringArray(\n    value.grantedToGroupIds,\n    `Membership policy '${value.id}' grantedTo`,\n    createError\n  )\n  assertStringArray(value.scopeGroupIds, `Membership policy '${value.id}' scope`, createError)\n  assertMembershipOperationArray(value.can, `Membership policy '${value.id}' can`, createError)\n}\n\nexport function isMembershipPolicyDefinition(value: unknown): value is MembershipPolicyDefinition {\n  try {\n    assertMembershipPolicyDefinition(value, (message) => new Error(message))\n    return true\n  } catch {\n    return false\n  }\n}\n\nexport function assertGrantDefinition(\n  value: unknown,\n  field: string,\n  createError: CreateSecurityError = (message) => new SecurityValidationError(message)\n): asserts value is GrantDefinition {\n  if (!isRecord(value) || value.kind !== \"grant\") {\n    throw createError(`[Sixb] ${field} must contain only grant definitions from 'can'.`)\n  }\n\n  if (!GRANT_CAPABILITIES.includes(value.capability as GrantCapability)) {\n    throw createError(\n      `[Sixb] ${field} grant capability must be ${formatAlternatives(GRANT_CAPABILITIES)}.`\n    )\n  }\n\n  if (value.capability === \"view\" && value.target !== \"object\" && value.target !== \"dataset\") {\n    throw createError(`[Sixb] ${field} view grant target must be 'object' or 'dataset'.`)\n  }\n\n  if (\n    value.capability === \"run\" &&\n    value.target !== \"workflow\" &&\n    value.target !== \"sync\" &&\n    value.target !== \"pipeline\" &&\n    value.target !== \"agent\"\n  ) {\n    throw createError(\n      `[Sixb] ${field} run grant target must be 'workflow', 'sync', 'pipeline', or 'agent'.`\n    )\n  }\n\n  if (value.capability === \"observe\" && value.target !== \"logs\" && value.target !== \"aiUsage\") {\n    throw createError(`[Sixb] ${field} observe grant target must be 'logs' or 'aiUsage'.`)\n  }\n\n  if (value.capability === \"manage\" && value.target !== \"connector\" && value.target !== \"aiUsage\") {\n    throw createError(`[Sixb] ${field} manage grant target must be 'connector' or 'aiUsage'.`)\n  }\n\n  // The agent, logs and AI usage are one surface each, so their grants select nothing. The checks\n  // above settled the capability and target, so the kind is known.\n  if (isSingletonGrantKind(grantKindOf(value as unknown as GrantDefinition))) {\n    if (value.selection !== undefined) {\n      throw createError(\n        `[Sixb] ${field} ${value.capability} grant on '${value.target}' must not declare a selection.`\n      )\n    }\n    return\n  }\n\n  assertSelection(value.selection, field, createError)\n}\n\nfunction assertSelection(\n  value: unknown,\n  field: string,\n  createError: CreateSecurityError\n): asserts value is Selection {\n  if (!isRecord(value) || typeof value.all !== \"boolean\") {\n    throw createError(`[Sixb] ${field} grant must carry a selection from 'can' or a scope.`)\n  }\n\n  const ids = value.all ? value.except : value.ids\n  if (!Array.isArray(ids)) {\n    throw createError(`[Sixb] ${field} grant selection must list ids.`)\n  }\n\n  for (const id of ids) {\n    assertNonEmptyString(id, `${field} grant selection id`, createError)\n  }\n}\n\nexport function assertRoleDefinition(\n  value: unknown,\n  createError: CreateSecurityError = (message) => new SecurityValidationError(message)\n): asserts value is RoleDefinition {\n  if (!isRecord(value)) {\n    throw createError(\"[Sixb] Role definition must be an object.\")\n  }\n\n  if (value.kind !== \"role\") {\n    throw createError(\"[Sixb] Role definition kind must be 'role'.\")\n  }\n\n  assertNonEmptyString(value.id, \"Role id\", createError)\n  assertOptionalString(value.label, `Role '${value.id}' label`, createError)\n  assertOptionalString(value.description, `Role '${value.id}' description`, createError)\n  assertStringArray(value.grantedToGroupIds, `Role '${value.id}' grantedTo`, createError)\n\n  if (!Array.isArray(value.grants)) {\n    throw createError(`[Sixb] Role '${value.id}' grants must be an array.`)\n  }\n\n  for (const grant of value.grants) {\n    assertGrantDefinition(grant, `Role '${value.id}' grants`, createError)\n  }\n\n  if (value.clearances !== undefined) {\n    assertStringArray(value.clearances, `Role '${value.id}' clearances`, createError)\n  }\n}\n\nexport function isRoleDefinition(value: unknown): value is RoleDefinition {\n  try {\n    assertRoleDefinition(value, (message) => new Error(message))\n    return true\n  } catch {\n    return false\n  }\n}\n\nexport function validateSecurityDefinitionsAtStartup(input: {\n  readonly markings?: readonly MarkingDefinition[]\n  readonly groups: readonly GroupDefinition[]\n  readonly membershipPolicies: readonly MembershipPolicyDefinition[]\n  readonly roles?: readonly RoleDefinition[]\n  /** Registered object type ids — when provided, view grants must reference them. */\n  readonly objectTypeIds?: ReadonlySet<string>\n  /** Registered dataset ids — when provided, dataset view grants must reference them. */\n  readonly datasetIds?: ReadonlySet<string>\n  /** Registered action ids — when provided, apply grants must reference them. */\n  readonly actionIds?: ReadonlySet<string>\n  /** Registered workflow ids — when provided, run grants must reference them. */\n  readonly workflowIds?: ReadonlySet<string>\n  /** Registered sync ids — when provided, sync run grants must reference them. */\n  readonly syncIds?: ReadonlySet<string>\n  /** Registered pipeline ids — when provided, pipeline run grants must reference them. */\n  readonly pipelineIds?: ReadonlySet<string>\n  /** Whether the project's single conversational Agent is configured. */\n  readonly agentAvailable?: boolean\n  /** Registered connector ids — when provided, manage grants must reference them. */\n  readonly connectorIds?: ReadonlySet<string>\n  /** Registered Share ids — when provided, share grants must reference them. */\n  readonly shareIds?: ReadonlySet<string>\n}): RegisteredSecurityDefinitions {\n  const markingsById = new Map<string, MarkingDefinition>()\n  const groupsById = new Map<string, GroupDefinition>()\n  const rolesById = new Map<string, RoleDefinition>()\n  const membershipPoliciesById = new Map<string, MembershipPolicyDefinition>()\n\n  for (const marking of input.markings ?? []) {\n    assertMarkingDefinition(marking)\n\n    if (markingsById.has(marking.id)) {\n      throw new SecurityValidationError(`[Sixb] Duplicate marking id: ${marking.id}`)\n    }\n\n    markingsById.set(marking.id, marking)\n  }\n\n  for (const group of input.groups) {\n    assertGroupDefinition(group)\n\n    if (groupsById.has(group.id)) {\n      throw new SecurityValidationError(`[Sixb] Duplicate group id: ${group.id}`)\n    }\n\n    groupsById.set(group.id, group)\n  }\n\n  for (const role of input.roles ?? []) {\n    assertRoleDefinition(role)\n\n    if (rolesById.has(role.id)) {\n      throw new SecurityValidationError(`[Sixb] Duplicate role id: ${role.id}`)\n    }\n\n    if (role.grantedToGroupIds.length === 0) {\n      throw new SecurityValidationError(\n        `[Sixb] Role '${role.id}' must be granted to at least one group.`\n      )\n    }\n\n    const clearances = role.clearances ?? []\n    if (role.grants.length === 0 && clearances.length === 0) {\n      throw new SecurityValidationError(\n        `[Sixb] Role '${role.id}' must declare at least one grant or clearance.`\n      )\n    }\n\n    assertNoDuplicateIds(role.grantedToGroupIds, `Role '${role.id}' grantedTo`)\n    assertNoDuplicateIds(clearances, `Role '${role.id}' clearances`)\n\n    for (const markingId of clearances) {\n      if (!markingsById.has(markingId)) {\n        throw new SecurityValidationError(\n          `[Sixb] Role '${role.id}' clearances reference unknown marking '${markingId}'. Add it to 'security/markings/' or pass it to createSixb({ markings }).`\n        )\n      }\n    }\n\n    for (const groupId of role.grantedToGroupIds) {\n      if (!groupsById.has(groupId)) {\n        throw new SecurityValidationError(\n          `[Sixb] Role '${role.id}' grantedTo references unknown group '${groupId}'. Add it to 'security/groups/' or pass it to createSixb({ groups }).`\n        )\n      }\n    }\n\n    for (const grant of role.grants) {\n      assertGrantReferences(role.id, grant, input)\n    }\n\n    rolesById.set(role.id, role)\n  }\n\n  for (const policy of input.membershipPolicies) {\n    assertMembershipPolicyDefinition(policy)\n\n    if (membershipPoliciesById.has(policy.id)) {\n      throw new SecurityValidationError(`[Sixb] Duplicate membership policy id: ${policy.id}`)\n    }\n\n    if (policy.grantedToGroupIds.length === 0) {\n      throw new SecurityValidationError(\n        `[Sixb] Membership policy '${policy.id}' must grant membership authority to at least one group.`\n      )\n    }\n\n    if (policy.can.length === 0) {\n      throw new SecurityValidationError(\n        `[Sixb] Membership policy '${policy.id}' must declare at least one operation.`\n      )\n    }\n\n    assertNoDuplicateIds(policy.grantedToGroupIds, `Membership policy '${policy.id}' grantedTo`)\n    assertNoDuplicateIds(policy.scopeGroupIds, `Membership policy '${policy.id}' scope`)\n    assertNoDuplicateOperations(policy.can, `Membership policy '${policy.id}' can`)\n\n    for (const groupId of policy.grantedToGroupIds) {\n      if (!groupsById.has(groupId)) {\n        throw new SecurityValidationError(\n          `[Sixb] Membership policy '${policy.id}' grantedTo references unknown group '${groupId}'. Add it to 'security/groups/' or pass it to createSixb({ groups }).`\n        )\n      }\n    }\n\n    for (const groupId of policy.scopeGroupIds) {\n      if (!groupsById.has(groupId)) {\n        throw new SecurityValidationError(\n          `[Sixb] Membership policy '${policy.id}' scope references unknown group '${groupId}'. Add it to 'security/groups/' or pass it to createSixb({ groups }).`\n        )\n      }\n    }\n\n    membershipPoliciesById.set(policy.id, policy)\n  }\n\n  return {\n    markings: [...markingsById.values()],\n    markingsById,\n    groups: [...groupsById.values()],\n    groupsById,\n    roles: [...rolesById.values()],\n    rolesById,\n    membershipPolicies: [...membershipPoliciesById.values()],\n    membershipPoliciesById,\n  }\n}\n\nfunction assertGrantReferences(\n  roleId: string,\n  grant: GrantDefinition,\n  registered: RegisteredUniverses\n): void {\n  if (grant.capability === \"run\" && grant.target === \"agent\") {\n    const spec = GRANT_KINDS[grantKindOf(grant)]\n    if (!registered.agentAvailable) {\n      throw new SecurityValidationError(\n        `[Sixb] Role '${roleId}' grants ${grant.capability} on the project Agent, but it is unavailable. ${spec.fix}`\n      )\n    }\n    return\n  }\n  // Logs and AI usage are always there; only targeted grants name ids to check.\n  if (!(\"selection\" in grant)) return\n  const kind = grantKindOf(grant)\n  if (isSingletonGrantKind(kind)) return\n  const spec = GRANT_KINDS[kind]\n  const universe = registered[spec.universeKey]\n\n  if (!universe) {\n    return\n  }\n\n  // Explicit selections list ids to include; \"all except\" selections list ids\n  // to exclude. Either way every named id must be registered — an unknown id is\n  // a typo that would silently widen or no-op the grant.\n  const ids = grant.selection.all ? grant.selection.except : grant.selection.ids\n\n  for (const id of ids) {\n    if (!universe.has(id)) {\n      throw new SecurityValidationError(\n        `[Sixb] Role '${roleId}' grants ${grant.capability} on unknown ${spec.subject} '${id}'. ${spec.fix}`\n      )\n    }\n  }\n}\n",
-    "import { SecurityValidationError } from \"./errors\"\nimport type {\n  GrantDefinition,\n  GroupDefinition,\n  MarkingDefinition,\n  MembershipOperation,\n  MembershipPolicyDefinition,\n  RoleDefinition,\n} from \"./types\"\nimport {\n  assertGrantDefinition,\n  assertNonEmptyString,\n  assertOptionalString,\n  isRecord,\n} from \"./validation\"\n\nexport interface DefineGroupOptions {\n  readonly label?: string\n  readonly description?: string\n}\n\nexport interface DefineMarkingOptions {\n  readonly label?: string\n  readonly description?: string\n}\n\nexport interface DefineRoleOptions {\n  readonly label?: string\n  readonly description?: string\n  readonly grantedTo: readonly GroupDefinition[]\n  readonly grants?: readonly GrantDefinition[]\n  /** Markings this role's members may read. */\n  readonly clearances?: readonly MarkingDefinition[]\n}\n\nexport interface DefineMembershipPolicyOptions {\n  readonly grantedTo: readonly GroupDefinition[]\n  readonly scope: readonly GroupDefinition[]\n  readonly can: readonly MembershipOperation[]\n}\n\nconst MEMBERSHIP_OPERATIONS = new Set<MembershipOperation>([\n  \"invite\",\n  \"assignGroups\",\n  \"suspend\",\n  \"serviceAccounts\",\n])\n\nfunction assertNonEmptyArray<T>(value: readonly T[], field: string): void {\n  if (value.length === 0) {\n    throw new SecurityValidationError(`[Sixb] ${field} must not be empty.`)\n  }\n}\n\nfunction groupIdsFrom(groups: readonly GroupDefinition[], field: string): readonly string[] {\n  return groups.map((group) => {\n    if (!isRecord(group) || group.kind !== \"group\") {\n      throw new SecurityValidationError(`[Sixb] ${field} must contain only group definitions.`)\n    }\n\n    assertNonEmptyString(group.id, `${field} group id`)\n    return group.id\n  })\n}\n\nfunction membershipOperationsFrom(\n  operations: readonly MembershipOperation[],\n  field: string\n): readonly MembershipOperation[] {\n  return operations.map((operation) => {\n    if (!MEMBERSHIP_OPERATIONS.has(operation)) {\n      throw new SecurityValidationError(\n        `[Sixb] ${field} must contain only membership operations: invite, assignGroups, suspend, serviceAccounts.`\n      )\n    }\n\n    return operation\n  })\n}\n\nexport function defineGroup<const TId extends string>(\n  id: TId,\n  options: DefineGroupOptions = {}\n): GroupDefinition<TId> {\n  assertNonEmptyString(id, \"Group id\")\n  assertOptionalString(options.label, `Group '${id}' label`)\n  assertOptionalString(options.description, `Group '${id}' description`)\n\n  return {\n    kind: \"group\",\n    id,\n    ...(options.label !== undefined ? { label: options.label } : {}),\n    ...(options.description !== undefined ? { description: options.description } : {}),\n  }\n}\n\n/** Read the ids of marking definitions, rejecting anything else such as a bare id. */\nexport function markingIdsFrom(\n  markings: readonly MarkingDefinition[],\n  field: string\n): readonly string[] {\n  return markings.map((marking) => {\n    if (!isRecord(marking) || marking.kind !== \"marking\") {\n      throw new SecurityValidationError(`[Sixb] ${field} must contain only marking definitions.`)\n    }\n\n    assertNonEmptyString(marking.id, `${field} marking id`)\n    return marking.id\n  })\n}\n\nexport function defineMarking<const TId extends string>(\n  id: TId,\n  options: DefineMarkingOptions = {}\n): MarkingDefinition<TId> {\n  assertNonEmptyString(id, \"Marking id\")\n  assertOptionalString(options.label, `Marking '${id}' label`)\n  assertOptionalString(options.description, `Marking '${id}' description`)\n\n  return {\n    kind: \"marking\",\n    id,\n    ...(options.label !== undefined ? { label: options.label } : {}),\n    ...(options.description !== undefined ? { description: options.description } : {}),\n  }\n}\n\nexport function defineRole<const TId extends string>(\n  id: TId,\n  options: DefineRoleOptions\n): RoleDefinition<TId> {\n  assertNonEmptyString(id, \"Role id\")\n  assertOptionalString(options.label, `Role '${id}' label`)\n  assertOptionalString(options.description, `Role '${id}' description`)\n  assertNonEmptyArray(options.grantedTo, `Role '${id}' grantedTo`)\n\n  const grantedToGroupIds = groupIdsFrom(options.grantedTo, `Role '${id}' grantedTo`)\n  const grants = options.grants ?? []\n  const clearances = markingIdsFrom(options.clearances ?? [], `Role '${id}' clearances`)\n\n  for (const grant of grants) {\n    assertGrantDefinition(grant, `Role '${id}' grants`)\n  }\n\n  if (grants.length === 0 && clearances.length === 0) {\n    throw new SecurityValidationError(\n      `[Sixb] Role '${id}' must declare at least one grant or clearance.`\n    )\n  }\n\n  return {\n    kind: \"role\",\n    id,\n    ...(options.label !== undefined ? { label: options.label } : {}),\n    ...(options.description !== undefined ? { description: options.description } : {}),\n    grantedToGroupIds,\n    grants,\n    ...(clearances.length > 0 ? { clearances } : {}),\n  }\n}\n\nexport function defineMembershipPolicy<const TId extends string>(\n  id: TId,\n  options: DefineMembershipPolicyOptions\n): MembershipPolicyDefinition<TId> {\n  assertNonEmptyString(id, \"Membership policy id\")\n  assertNonEmptyArray(options.grantedTo, `Membership policy '${id}' grantedTo`)\n  assertNonEmptyArray(options.can, `Membership policy '${id}' can`)\n\n  return {\n    kind: \"membershipPolicy\",\n    id,\n    grantedToGroupIds: groupIdsFrom(options.grantedTo, `Membership policy '${id}' grantedTo`),\n    scopeGroupIds: groupIdsFrom(options.scope, `Membership policy '${id}' scope`),\n    can: membershipOperationsFrom(options.can, `Membership policy '${id}' can`),\n  }\n}\n"
-  ],
-  "mappings": ";;;;;;;;AAAO,MAAM,iCAAgC,MAAM;AAAA,EACxC,OAAO;AAClB;;;ACUA,IAAM,wBAAwB,CAAC,UAAU,gBAAgB,WAAW,iBAAiB;AAE9E,SAAS,4BAA4B,CAAC,OAGnB;AAAA,EACxB,MAAM,eAAe,IAAI,IAAI,MAAM,cAAc;AAAA,EACjD,MAAM,YAAsB,CAAC;AAAA,EAC7B,MAAM,aAAa,2BAA2B;AAAA,EAE9C,WAAW,UAAU,MAAM,oBAAoB;AAAA,IAC7C,IAAI,CAAC,OAAO,kBAAkB,KAAK,CAAC,YAAY,aAAa,IAAI,OAAO,CAAC,GAAG;AAAA,MAC1E;AAAA,IACF;AAAA,IAEA,UAAU,KAAK,OAAO,EAAE;AAAA,IACxB,WAAW,aAAa,OAAO,KAAK;AAAA,MAClC,WAAW,WAAW,UAAU,KAAK,OAAO,EAAE;AAAA,MAC9C,WAAW,WAAW,OAAO,eAAe;AAAA,QAC1C,WAAW,WAAW,SAAS,IAAI,OAAO;AAAA,MAC5C;AAAA,IACF;AAAA,EACF;AAAA,EAEA,OAAO;AAAA,IACL;AAAA,IACA,YAAY;AAAA,MACV,QAAQ,qBAAqB,WAAW,MAAM;AAAA,MAC9C,cAAc,qBAAqB,WAAW,YAAY;AAAA,MAC1D,SAAS,qBAAqB,WAAW,OAAO;AAAA,MAChD,iBAAiB,qBAAqB,WAAW,eAAe;AAAA,IAClE;AAAA,EACF;AAAA;AAGK,SAAS,6BAA6B,CAC3C,OACA,WACA,UACS;AAAA,EACT,MAAM,iBAAiB,MAAM,WAAW;AAAA,EAExC,IAAI,eAAe,UAAU,WAAW,GAAG;AAAA,IACzC,OAAO;AAAA,EACT;AAAA,EAEA,IAAI,SAAS,WAAW,GAAG;AAAA,IACzB,OAAO;AAAA,EACT;AAAA,EAEA,OAAO,SAAS,MAAM,CAAC,YAAY,eAAe,SAAS,IAAI,OAAO,CAAC;AAAA;AAGlE,SAAS,yBAAyB,CACvC,OACA,WACA,UACmB;AAAA,EACnB,IAAI,SAAS,WAAW,GAAG;AAAA,IACzB,OAAO,CAAC;AAAA,EACV;AAAA,EAEA,MAAM,iBAAiB,MAAM,WAAW;AAAA,EACxC,OAAO,SAAS,OAAO,CAAC,YAAY,CAAC,eAAe,SAAS,IAAI,OAAO,CAAC;AAAA;AAG3E,SAAS,0BAA0B,GAGjC;AAAA,EACA,OAAO;AAAA,IACL,QAAQ,EAAE,WAAW,CAAC,GAAG,UAAU,IAAI,IAAc;AAAA,IACrD,cAAc,EAAE,WAAW,CAAC,GAAG,UAAU,IAAI,IAAc;AAAA,IAC3D,SAAS,EAAE,WAAW,CAAC,GAAG,UAAU,IAAI,IAAc;AAAA,IACtD,iBAAiB,EAAE,WAAW,CAAC,GAAG,UAAU,IAAI,IAAc;AAAA,EAChE;AAAA;AAGF,SAAS,oBAAoB,CAAC,OAGD;AAAA,EAC3B,OAAO;AAAA,IACL,WAAW,CAAC,GAAG,MAAM,SAAS;AAAA,IAC9B,UAAU,IAAI,IAAI,MAAM,QAAQ;AAAA,EAClC;AAAA;AAGK,SAAS,qBAAqB,CAAC,OAA8C;AAAA,EAClF,OAAO,sBAAsB,SAAS,KAA4B;AAAA;;;ACrEpE,IAAM,qBAAqB,OAAO,KAAK;AAAA,EACrC,MAAM;AAAA,EACN,MAAM;AAAA,EACN,QAAQ;AAAA,EACR,OAAO;AAAA,EACP,OAAO;AAAA,EACP,KAAK;AAAA,EACL,SAAS;AAAA,EACT,QAAQ;AACV,CAAyC;AAGzC,SAAS,kBAAkB,CAAC,QAAmC;AAAA,EAC7D,MAAM,SAAS,OAAO,IAAI,CAAC,UAAU,IAAI,QAAQ;AAAA,EACjD,MAAM,OAAO,OAAO,GAAG,EAAE;AAAA,EACzB,OAAO,OAAO,SAAS,IAAK,QAAQ,KAAM,GAAG,OAAO,MAAM,GAAG,EAAE,EAAE,KAAK,IAAI,SAAS;AAAA;AAO9E,SAAS,QAAQ,CAAC,OAAkD;AAAA,EACzE,OAAO,OAAO,UAAU,YAAY,UAAU,QAAQ,CAAC,MAAM,QAAQ,KAAK;AAAA;AAGrE,SAAS,oBAAoB,CAClC,OACA,OACA,cAAmC,CAAC,YAAY,IAAI,yBAAwB,OAAO,GAC1D;AAAA,EACzB,IAAI,OAAO,UAAU,YAAY,MAAM,KAAK,EAAE,WAAW,GAAG;AAAA,IAC1D,MAAM,YAAY,UAAU,0BAA0B;AAAA,EACxD;AAAA;AAGK,SAAS,oBAAoB,CAClC,OACA,OACA,cAAmC,CAAC,YAAY,IAAI,yBAAwB,OAAO,GAC9C;AAAA,EACrC,IAAI,UAAU,WAAW;AAAA,IACvB;AAAA,EACF;AAAA,EAEA,IAAI,OAAO,UAAU,UAAU;AAAA,IAC7B,MAAM,YAAY,UAAU,yBAAyB;AAAA,EACvD;AAAA;AAGF,SAAS,iBAAiB,CACxB,OACA,OACA,aACoC;AAAA,EACpC,IAAI,CAAC,MAAM,QAAQ,KAAK,GAAG;AAAA,IACzB,MAAM,YAAY,UAAU,sCAAsC;AAAA,EACpE;AAAA,EAEA,WAAW,QAAQ,OAAO;AAAA,IACxB,qBAAqB,MAAM,GAAG,cAAc,WAAW;AAAA,EACzD;AAAA;AAGF,SAAS,8BAA8B,CACrC,OACA,OACA,aACoD;AAAA,EACpD,IAAI,CAAC,MAAM,QAAQ,KAAK,GAAG;AAAA,IACzB,MAAM,YAAY,UAAU,kDAAkD;AAAA,EAChF;AAAA,EAEA,WAAW,QAAQ,OAAO;AAAA,IACxB,IAAI,CAAC,sBAAsB,IAAI,GAAG;AAAA,MAChC,MAAM,YACJ,UAAU,gGACZ;AAAA,IACF;AAAA,EACF;AAAA;AAGF,SAAS,oBAAoB,CAAC,KAAwB,OAAqB;AAAA,EACzE,MAAM,OAAO,IAAI;AAAA,EACjB,WAAW,MAAM,KAAK;AAAA,IACpB,IAAI,KAAK,IAAI,EAAE,GAAG;AAAA,MAChB,MAAM,IAAI,yBAAwB,UAAU,sCAAsC,MAAM;AAAA,IAC1F;AAAA,IACA,KAAK,IAAI,EAAE;AAAA,EACb;AAAA;AAGF,SAAS,2BAA2B,CAClC,YACA,OACM;AAAA,EACN,MAAM,OAAO,IAAI;AAAA,EACjB,WAAW,aAAa,YAAY;AAAA,IAClC,IAAI,KAAK,IAAI,SAAS,GAAG;AAAA,MACvB,MAAM,IAAI,yBACR,UAAU,uCAAuC,aACnD;AAAA,IACF;AAAA,IACA,KAAK,IAAI,SAAS;AAAA,EACpB;AAAA;AAGK,SAAS,uBAAuB,CACrC,OACA,cAAmC,CAAC,YAAY,IAAI,yBAAwB,OAAO,GAC/C;AAAA,EACpC,IAAI,CAAC,SAAS,KAAK,GAAG;AAAA,IACpB,MAAM,YAAY,8CAA8C;AAAA,EAClE;AAAA,EAEA,IAAI,MAAM,SAAS,WAAW;AAAA,IAC5B,MAAM,YAAY,mDAAmD;AAAA,EACvE;AAAA,EAEA,qBAAqB,MAAM,IAAI,cAAc,WAAW;AAAA,EACxD,qBAAqB,MAAM,OAAO,YAAY,MAAM,aAAa,WAAW;AAAA,EAC5E,qBAAqB,MAAM,aAAa,YAAY,MAAM,mBAAmB,WAAW;AAAA;AAGnF,SAAS,mBAAmB,CAAC,OAA4C;AAAA,EAC9E,IAAI;AAAA,IACF,wBAAwB,OAAO,CAAC,YAAY,IAAI,MAAM,OAAO,CAAC;AAAA,IAC9D,OAAO;AAAA,IACP,MAAM;AAAA,IACN,OAAO;AAAA;AAAA;AAIJ,SAAS,qBAAqB,CACnC,OACA,cAAmC,CAAC,YAAY,IAAI,yBAAwB,OAAO,GACjD;AAAA,EAClC,IAAI,CAAC,SAAS,KAAK,GAAG;AAAA,IACpB,MAAM,YAAY,4CAA4C;AAAA,EAChE;AAAA,EAEA,IAAI,MAAM,SAAS,SAAS;AAAA,IAC1B,MAAM,YAAY,+CAA+C;AAAA,EACnE;AAAA,EAEA,qBAAqB,MAAM,IAAI,YAAY,WAAW;AAAA,EACtD,qBAAqB,MAAM,OAAO,UAAU,MAAM,aAAa,WAAW;AAAA,EAC1E,qBAAqB,MAAM,aAAa,UAAU,MAAM,mBAAmB,WAAW;AAAA;AAGjF,SAAS,iBAAiB,CAAC,OAA0C;AAAA,EAC1E,IAAI;AAAA,IACF,sBAAsB,OAAO,CAAC,YAAY,IAAI,MAAM,OAAO,CAAC;AAAA,IAC5D,OAAO;AAAA,IACP,MAAM;AAAA,IACN,OAAO;AAAA;AAAA;AAIJ,SAAS,gCAAgC,CAC9C,OACA,cAAmC,CAAC,YAAY,IAAI,yBAAwB,OAAO,GACtC;AAAA,EAC7C,IAAI,CAAC,SAAS,KAAK,GAAG;AAAA,IACpB,MAAM,YAAY,wDAAwD;AAAA,EAC5E;AAAA,EAEA,IAAI,MAAM,SAAS,oBAAoB;AAAA,IACrC,MAAM,YAAY,sEAAsE;AAAA,EAC1F;AAAA,EAEA,qBAAqB,MAAM,IAAI,wBAAwB,WAAW;AAAA,EAClE,kBACE,MAAM,mBACN,sBAAsB,MAAM,iBAC5B,WACF;AAAA,EACA,kBAAkB,MAAM,eAAe,sBAAsB,MAAM,aAAa,WAAW;AAAA,EAC3F,+BAA+B,MAAM,KAAK,sBAAsB,MAAM,WAAW,WAAW;AAAA;AAGvF,SAAS,4BAA4B,CAAC,OAAqD;AAAA,EAChG,IAAI;AAAA,IACF,iCAAiC,OAAO,CAAC,YAAY,IAAI,MAAM,OAAO,CAAC;AAAA,IACvE,OAAO;AAAA,IACP,MAAM;AAAA,IACN,OAAO;AAAA;AAAA;AAIJ,SAAS,qBAAqB,CACnC,OACA,OACA,cAAmC,CAAC,YAAY,IAAI,yBAAwB,OAAO,GACjD;AAAA,EAClC,IAAI,CAAC,SAAS,KAAK,KAAK,MAAM,SAAS,SAAS;AAAA,IAC9C,MAAM,YAAY,UAAU,uDAAuD;AAAA,EACrF;AAAA,EAEA,IAAI,CAAC,mBAAmB,SAAS,MAAM,UAA6B,GAAG;AAAA,IACrE,MAAM,YACJ,UAAU,kCAAkC,mBAAmB,kBAAkB,IACnF;AAAA,EACF;AAAA,EAEA,IAAI,MAAM,eAAe,UAAU,MAAM,WAAW,YAAY,MAAM,WAAW,WAAW;AAAA,IAC1F,MAAM,YAAY,UAAU,wDAAwD;AAAA,EACtF;AAAA,EAEA,IACE,MAAM,eAAe,SACrB,MAAM,WAAW,cACjB,MAAM,WAAW,UACjB,MAAM,WAAW,cACjB,MAAM,WAAW,SACjB;AAAA,IACA,MAAM,YACJ,UAAU,4EACZ;AAAA,EACF;AAAA,EAEA,IAAI,MAAM,eAAe,aAAa,MAAM,WAAW,UAAU,MAAM,WAAW,WAAW;AAAA,IAC3F,MAAM,YAAY,UAAU,yDAAyD;AAAA,EACvF;AAAA,EAEA,IAAI,MAAM,eAAe,YAAY,MAAM,WAAW,eAAe,MAAM,WAAW,WAAW;AAAA,IAC/F,MAAM,YAAY,UAAU,6DAA6D;AAAA,EAC3F;AAAA,EAIA,IAAI,qBAAqB,YAAY,KAAmC,CAAC,GAAG;AAAA,IAC1E,IAAI,MAAM,cAAc,WAAW;AAAA,MACjC,MAAM,YACJ,UAAU,SAAS,MAAM,wBAAwB,MAAM,uCACzD;AAAA,IACF;AAAA,IACA;AAAA,EACF;AAAA,EAEA,gBAAgB,MAAM,WAAW,OAAO,WAAW;AAAA;AAGrD,SAAS,eAAe,CACtB,OACA,OACA,aAC4B;AAAA,EAC5B,IAAI,CAAC,SAAS,KAAK,KAAK,OAAO,MAAM,QAAQ,WAAW;AAAA,IACtD,MAAM,YAAY,UAAU,2DAA2D;AAAA,EACzF;AAAA,EAEA,MAAM,MAAM,MAAM,MAAM,MAAM,SAAS,MAAM;AAAA,EAC7C,IAAI,CAAC,MAAM,QAAQ,GAAG,GAAG;AAAA,IACvB,MAAM,YAAY,UAAU,sCAAsC;AAAA,EACpE;AAAA,EAEA,WAAW,MAAM,KAAK;AAAA,IACpB,qBAAqB,IAAI,GAAG,4BAA4B,WAAW;AAAA,EACrE;AAAA;AAGK,SAAS,oBAAoB,CAClC,OACA,cAAmC,CAAC,YAAY,IAAI,yBAAwB,OAAO,GAClD;AAAA,EACjC,IAAI,CAAC,SAAS,KAAK,GAAG;AAAA,IACpB,MAAM,YAAY,2CAA2C;AAAA,EAC/D;AAAA,EAEA,IAAI,MAAM,SAAS,QAAQ;AAAA,IACzB,MAAM,YAAY,6CAA6C;AAAA,EACjE;AAAA,EAEA,qBAAqB,MAAM,IAAI,WAAW,WAAW;AAAA,EACrD,qBAAqB,MAAM,OAAO,SAAS,MAAM,aAAa,WAAW;AAAA,EACzE,qBAAqB,MAAM,aAAa,SAAS,MAAM,mBAAmB,WAAW;AAAA,EACrF,kBAAkB,MAAM,mBAAmB,SAAS,MAAM,iBAAiB,WAAW;AAAA,EAEtF,IAAI,CAAC,MAAM,QAAQ,MAAM,MAAM,GAAG;AAAA,IAChC,MAAM,YAAY,gBAAgB,MAAM,8BAA8B;AAAA,EACxE;AAAA,EAEA,WAAW,SAAS,MAAM,QAAQ;AAAA,IAChC,sBAAsB,OAAO,SAAS,MAAM,cAAc,WAAW;AAAA,EACvE;AAAA,EAEA,IAAI,MAAM,eAAe,WAAW;AAAA,IAClC,kBAAkB,MAAM,YAAY,SAAS,MAAM,kBAAkB,WAAW;AAAA,EAClF;AAAA;AAGK,SAAS,gBAAgB,CAAC,OAAyC;AAAA,EACxE,IAAI;AAAA,IACF,qBAAqB,OAAO,CAAC,YAAY,IAAI,MAAM,OAAO,CAAC;AAAA,IAC3D,OAAO;AAAA,IACP,MAAM;AAAA,IACN,OAAO;AAAA;AAAA;AAIJ,SAAS,oCAAoC,CAAC,OAuBnB;AAAA,EAChC,MAAM,eAAe,IAAI;AAAA,EACzB,MAAM,aAAa,IAAI;AAAA,EACvB,MAAM,YAAY,IAAI;AAAA,EACtB,MAAM,yBAAyB,IAAI;AAAA,EAEnC,WAAW,WAAW,MAAM,YAAY,CAAC,GAAG;AAAA,IAC1C,wBAAwB,OAAO;AAAA,IAE/B,IAAI,aAAa,IAAI,QAAQ,EAAE,GAAG;AAAA,MAChC,MAAM,IAAI,yBAAwB,gCAAgC,QAAQ,IAAI;AAAA,IAChF;AAAA,IAEA,aAAa,IAAI,QAAQ,IAAI,OAAO;AAAA,EACtC;AAAA,EAEA,WAAW,SAAS,MAAM,QAAQ;AAAA,IAChC,sBAAsB,KAAK;AAAA,IAE3B,IAAI,WAAW,IAAI,MAAM,EAAE,GAAG;AAAA,MAC5B,MAAM,IAAI,yBAAwB,8BAA8B,MAAM,IAAI;AAAA,IAC5E;AAAA,IAEA,WAAW,IAAI,MAAM,IAAI,KAAK;AAAA,EAChC;AAAA,EAEA,WAAW,QAAQ,MAAM,SAAS,CAAC,GAAG;AAAA,IACpC,qBAAqB,IAAI;AAAA,IAEzB,IAAI,UAAU,IAAI,KAAK,EAAE,GAAG;AAAA,MAC1B,MAAM,IAAI,yBAAwB,6BAA6B,KAAK,IAAI;AAAA,IAC1E;AAAA,IAEA,IAAI,KAAK,kBAAkB,WAAW,GAAG;AAAA,MACvC,MAAM,IAAI,yBACR,gBAAgB,KAAK,4CACvB;AAAA,IACF;AAAA,IAEA,MAAM,aAAa,KAAK,cAAc,CAAC;AAAA,IACvC,IAAI,KAAK,OAAO,WAAW,KAAK,WAAW,WAAW,GAAG;AAAA,MACvD,MAAM,IAAI,yBACR,gBAAgB,KAAK,mDACvB;AAAA,IACF;AAAA,IAEA,qBAAqB,KAAK,mBAAmB,SAAS,KAAK,eAAe;AAAA,IAC1E,qBAAqB,YAAY,SAAS,KAAK,gBAAgB;AAAA,IAE/D,WAAW,aAAa,YAAY;AAAA,MAClC,IAAI,CAAC,aAAa,IAAI,SAAS,GAAG;AAAA,QAChC,MAAM,IAAI,yBACR,gBAAgB,KAAK,6CAA6C,oFACpE;AAAA,MACF;AAAA,IACF;AAAA,IAEA,WAAW,WAAW,KAAK,mBAAmB;AAAA,MAC5C,IAAI,CAAC,WAAW,IAAI,OAAO,GAAG;AAAA,QAC5B,MAAM,IAAI,yBACR,gBAAgB,KAAK,2CAA2C,8EAClE;AAAA,MACF;AAAA,IACF;AAAA,IAEA,WAAW,SAAS,KAAK,QAAQ;AAAA,MAC/B,sBAAsB,KAAK,IAAI,OAAO,KAAK;AAAA,IAC7C;AAAA,IAEA,UAAU,IAAI,KAAK,IAAI,IAAI;AAAA,EAC7B;AAAA,EAEA,WAAW,UAAU,MAAM,oBAAoB;AAAA,IAC7C,iCAAiC,MAAM;AAAA,IAEvC,IAAI,uBAAuB,IAAI,OAAO,EAAE,GAAG;AAAA,MACzC,MAAM,IAAI,yBAAwB,0CAA0C,OAAO,IAAI;AAAA,IACzF;AAAA,IAEA,IAAI,OAAO,kBAAkB,WAAW,GAAG;AAAA,MACzC,MAAM,IAAI,yBACR,6BAA6B,OAAO,4DACtC;AAAA,IACF;AAAA,IAEA,IAAI,OAAO,IAAI,WAAW,GAAG;AAAA,MAC3B,MAAM,IAAI,yBACR,6BAA6B,OAAO,0CACtC;AAAA,IACF;AAAA,IAEA,qBAAqB,OAAO,mBAAmB,sBAAsB,OAAO,eAAe;AAAA,IAC3F,qBAAqB,OAAO,eAAe,sBAAsB,OAAO,WAAW;AAAA,IACnF,4BAA4B,OAAO,KAAK,sBAAsB,OAAO,SAAS;AAAA,IAE9E,WAAW,WAAW,OAAO,mBAAmB;AAAA,MAC9C,IAAI,CAAC,WAAW,IAAI,OAAO,GAAG;AAAA,QAC5B,MAAM,IAAI,yBACR,6BAA6B,OAAO,2CAA2C,8EACjF;AAAA,MACF;AAAA,IACF;AAAA,IAEA,WAAW,WAAW,OAAO,eAAe;AAAA,MAC1C,IAAI,CAAC,WAAW,IAAI,OAAO,GAAG;AAAA,QAC5B,MAAM,IAAI,yBACR,6BAA6B,OAAO,uCAAuC,8EAC7E;AAAA,MACF;AAAA,IACF;AAAA,IAEA,uBAAuB,IAAI,OAAO,IAAI,MAAM;AAAA,EAC9C;AAAA,EAEA,OAAO;AAAA,IACL,UAAU,CAAC,GAAG,aAAa,OAAO,CAAC;AAAA,IACnC;AAAA,IACA,QAAQ,CAAC,GAAG,WAAW,OAAO,CAAC;AAAA,IAC/B;AAAA,IACA,OAAO,CAAC,GAAG,UAAU,OAAO,CAAC;AAAA,IAC7B;AAAA,IACA,oBAAoB,CAAC,GAAG,uBAAuB,OAAO,CAAC;AAAA,IACvD;AAAA,EACF;AAAA;AAGF,SAAS,qBAAqB,CAC5B,QACA,OACA,YACM;AAAA,EACN,IAAI,MAAM,eAAe,SAAS,MAAM,WAAW,SAAS;AAAA,IAC1D,MAAM,OAAO,YAAY,YAAY,KAAK;AAAA,IAC1C,IAAI,CAAC,WAAW,gBAAgB;AAAA,MAC9B,MAAM,IAAI,yBACR,gBAAgB,kBAAkB,MAAM,2DAA2D,KAAK,KAC1G;AAAA,IACF;AAAA,IACA;AAAA,EACF;AAAA,EAEA,IAAI,EAAE,eAAe;AAAA,IAAQ;AAAA,EAC7B,MAAM,OAAO,YAAY,KAAK;AAAA,EAC9B,IAAI,qBAAqB,IAAI;AAAA,IAAG;AAAA,EAChC,MAAM,OAAO,YAAY;AAAA,EACzB,MAAM,WAAW,WAAW,KAAK;AAAA,EAEjC,IAAI,CAAC,UAAU;AAAA,IACb;AAAA,EACF;AAAA,EAKA,MAAM,MAAM,MAAM,UAAU,MAAM,MAAM,UAAU,SAAS,MAAM,UAAU;AAAA,EAE3E,WAAW,MAAM,KAAK;AAAA,IACpB,IAAI,CAAC,SAAS,IAAI,EAAE,GAAG;AAAA,MACrB,MAAM,IAAI,yBACR,gBAAgB,kBAAkB,MAAM,yBAAyB,KAAK,YAAY,QAAQ,KAAK,KACjG;AAAA,IACF;AAAA,EACF;AAAA;;;AC7dF,IAAM,yBAAwB,IAAI,IAAyB;AAAA,EACzD;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,CAAC;AAED,SAAS,mBAAsB,CAAC,OAAqB,OAAqB;AAAA,EACxE,IAAI,MAAM,WAAW,GAAG;AAAA,IACtB,MAAM,IAAI,yBAAwB,UAAU,0BAA0B;AAAA,EACxE;AAAA;AAGF,SAAS,YAAY,CAAC,QAAoC,OAAkC;AAAA,EAC1F,OAAO,OAAO,IAAI,CAAC,UAAU;AAAA,IAC3B,IAAI,CAAC,SAAS,KAAK,KAAK,MAAM,SAAS,SAAS;AAAA,MAC9C,MAAM,IAAI,yBAAwB,UAAU,4CAA4C;AAAA,IAC1F;AAAA,IAEA,qBAAqB,MAAM,IAAI,GAAG,gBAAgB;AAAA,IAClD,OAAO,MAAM;AAAA,GACd;AAAA;AAGH,SAAS,wBAAwB,CAC/B,YACA,OACgC;AAAA,EAChC,OAAO,WAAW,IAAI,CAAC,cAAc;AAAA,IACnC,IAAI,CAAC,uBAAsB,IAAI,SAAS,GAAG;AAAA,MACzC,MAAM,IAAI,yBACR,UAAU,gGACZ;AAAA,IACF;AAAA,IAEA,OAAO;AAAA,GACR;AAAA;AAGI,SAAS,YAAqC,CACnD,IACA,UAA8B,CAAC,GACT;AAAA,EACtB,qBAAqB,IAAI,UAAU;AAAA,EACnC,qBAAqB,QAAQ,OAAO,UAAU,WAAW;AAAA,EACzD,qBAAqB,QAAQ,aAAa,UAAU,iBAAiB;AAAA,EAErE,OAAO;AAAA,IACL,MAAM;AAAA,IACN;AAAA,OACI,QAAQ,UAAU,YAAY,EAAE,OAAO,QAAQ,MAAM,IAAI,CAAC;AAAA,OAC1D,QAAQ,gBAAgB,YAAY,EAAE,aAAa,QAAQ,YAAY,IAAI,CAAC;AAAA,EAClF;AAAA;AAIK,SAAS,cAAc,CAC5B,UACA,OACmB;AAAA,EACnB,OAAO,SAAS,IAAI,CAAC,YAAY;AAAA,IAC/B,IAAI,CAAC,SAAS,OAAO,KAAK,QAAQ,SAAS,WAAW;AAAA,MACpD,MAAM,IAAI,yBAAwB,UAAU,8CAA8C;AAAA,IAC5F;AAAA,IAEA,qBAAqB,QAAQ,IAAI,GAAG,kBAAkB;AAAA,IACtD,OAAO,QAAQ;AAAA,GAChB;AAAA;AAGI,SAAS,cAAuC,CACrD,IACA,UAAgC,CAAC,GACT;AAAA,EACxB,qBAAqB,IAAI,YAAY;AAAA,EACrC,qBAAqB,QAAQ,OAAO,YAAY,WAAW;AAAA,EAC3D,qBAAqB,QAAQ,aAAa,YAAY,iBAAiB;AAAA,EAEvE,OAAO;AAAA,IACL,MAAM;AAAA,IACN;AAAA,OACI,QAAQ,UAAU,YAAY,EAAE,OAAO,QAAQ,MAAM,IAAI,CAAC;AAAA,OAC1D,QAAQ,gBAAgB,YAAY,EAAE,aAAa,QAAQ,YAAY,IAAI,CAAC;AAAA,EAClF;AAAA;AAGK,SAAS,WAAoC,CAClD,IACA,SACqB;AAAA,EACrB,qBAAqB,IAAI,SAAS;AAAA,EAClC,qBAAqB,QAAQ,OAAO,SAAS,WAAW;AAAA,EACxD,qBAAqB,QAAQ,aAAa,SAAS,iBAAiB;AAAA,EACpE,oBAAoB,QAAQ,WAAW,SAAS,eAAe;AAAA,EAE/D,MAAM,oBAAoB,aAAa,QAAQ,WAAW,SAAS,eAAe;AAAA,EAClF,MAAM,SAAS,QAAQ,UAAU,CAAC;AAAA,EAClC,MAAM,aAAa,eAAe,QAAQ,cAAc,CAAC,GAAG,SAAS,gBAAgB;AAAA,EAErF,WAAW,SAAS,QAAQ;AAAA,IAC1B,sBAAsB,OAAO,SAAS,YAAY;AAAA,EACpD;AAAA,EAEA,IAAI,OAAO,WAAW,KAAK,WAAW,WAAW,GAAG;AAAA,IAClD,MAAM,IAAI,yBACR,gBAAgB,mDAClB;AAAA,EACF;AAAA,EAEA,OAAO;AAAA,IACL,MAAM;AAAA,IACN;AAAA,OACI,QAAQ,UAAU,YAAY,EAAE,OAAO,QAAQ,MAAM,IAAI,CAAC;AAAA,OAC1D,QAAQ,gBAAgB,YAAY,EAAE,aAAa,QAAQ,YAAY,IAAI,CAAC;AAAA,IAChF;AAAA,IACA;AAAA,OACI,WAAW,SAAS,IAAI,EAAE,WAAW,IAAI,CAAC;AAAA,EAChD;AAAA;AAGK,SAAS,uBAAgD,CAC9D,IACA,SACiC;AAAA,EACjC,qBAAqB,IAAI,sBAAsB;AAAA,EAC/C,oBAAoB,QAAQ,WAAW,sBAAsB,eAAe;AAAA,EAC5E,oBAAoB,QAAQ,KAAK,sBAAsB,SAAS;AAAA,EAEhE,OAAO;AAAA,IACL,MAAM;AAAA,IACN;AAAA,IACA,mBAAmB,aAAa,QAAQ,WAAW,sBAAsB,eAAe;AAAA,IACxF,eAAe,aAAa,QAAQ,OAAO,sBAAsB,WAAW;AAAA,IAC5E,KAAK,yBAAyB,QAAQ,KAAK,sBAAsB,SAAS;AAAA,EAC5E;AAAA;",
-  "debugId": "5079B2E8C73E746064756E2164756E21",
-  "names": []
-}

package/dist/chunk-gsjm1wms.js.map

@@ -1,10 +0,0 @@
-{
-  "version": 3,
-  "sources": ["../src/authorization/grant-kinds.ts"],
-  "sourcesContent": [
-    "/**\n * Grant kinds: the single source of truth for the (capability, target) space.\n *\n * Every grant collapses to one `GrantKind` discriminant — the same\n * `capability:target` string the decision engine uses as a grant key (e.g.\n * `view:object`, `run:sync`). Resolution, validation, enforcement, and the\n * resolved `GrantIndex` all key off it, so adding a grant family is a single\n * entry in `GRANT_KINDS` plus the compile errors that forces at every consumer.\n */\n\nimport type { GrantDefinition } from \"../security/types\"\n\nexport type GrantKind =\n  | \"view:object\"\n  | \"view:dataset\"\n  | \"edit:object\"\n  | \"append:telemetry\"\n  | \"apply:action\"\n  | \"share:share\"\n  | \"run:workflow\"\n  | \"run:sync\"\n  | \"run:pipeline\"\n  | \"run:agent\"\n  | \"observe:logs\"\n  | \"observe:aiUsage\"\n  | \"manage:connector\"\n  | \"manage:aiUsage\"\n\n/** Capabilities over one project-wide surface: held or not, with no ids to select. */\nexport type SingletonGrantKind = \"run:agent\" | \"observe:logs\" | \"observe:aiUsage\" | \"manage:aiUsage\"\nexport type TargetedGrantKind = Exclude<GrantKind, SingletonGrantKind>\n\n/** Registered id universes a grant kind ranges over, plus subtype expansion. */\nexport interface GrantUniverse {\n  readonly objectTypeIds: ReadonlySet<string>\n  readonly datasetIds: ReadonlySet<string>\n  readonly actionIds: ReadonlySet<string>\n  readonly shareIds: ReadonlySet<string>\n  readonly workflowIds: ReadonlySet<string>\n  readonly syncIds: ReadonlySet<string>\n  readonly pipelineIds: ReadonlySet<string>\n  readonly connectorIds: ReadonlySet<string>\n  readonly getSubTypes: (objectTypeId: string) => readonly string[]\n}\n\n/** The registered-id sets a grant kind validates against (no subtype hook). */\nexport type GrantUniverseKey = Exclude<keyof GrantUniverse, \"getSubTypes\">\n\ninterface TargetedGrantKindSpec {\n  /** Registered universe the grant's ids must belong to. */\n  readonly universeKey: GrantUniverseKey\n  /** Subject noun used in validation errors (\"unknown <subject> '<id>'\"). */\n  readonly subject: string\n  /** Actionable hint appended to the \"unknown <subject>\" error. */\n  readonly fix: string\n  /** Only object-type grants also expand to subtypes. */\n  readonly expandsSubtypes?: true\n}\n\ninterface SingletonGrantKindSpec {\n  /** Project-wide capability with no resource selection; resolves to a boolean. */\n  readonly singleton: true\n  readonly subject: string\n  readonly fix: string\n}\n\n/**\n * The exhaustive grant-kind table. A new grant family is one entry here; the\n * mapped type makes every omission a compile error.\n */\nexport const GRANT_KINDS: {\n  readonly [TKind in GrantKind]: TKind extends SingletonGrantKind\n    ? SingletonGrantKindSpec\n    : TargetedGrantKindSpec\n} = {\n  \"view:object\": {\n    universeKey: \"objectTypeIds\",\n    subject: \"object type\",\n    fix: \"Register it in 'ontology/' or pass it to createSixb({ ontologies }).\",\n    expandsSubtypes: true,\n  },\n  \"view:dataset\": {\n    universeKey: \"datasetIds\",\n    subject: \"dataset\",\n    fix: \"Add it to 'datasets/' or pass it to createSixb({ datasets }).\",\n  },\n  // Deliberately no `expandsSubtypes`: granting writes on a parent type must not\n  // silently extend to types added under it later. `view:object` expands because\n  // a read of a subtype reveals nothing the parent's grant did not already cover.\n  \"edit:object\": {\n    universeKey: \"objectTypeIds\",\n    subject: \"object type\",\n    fix: \"Register it in 'ontology/' or pass it to createSixb({ ontologies }).\",\n  },\n  \"append:telemetry\": {\n    universeKey: \"objectTypeIds\",\n    subject: \"object type\",\n    fix: \"Register it in 'ontology/' or pass it to createSixb({ ontologies }).\",\n  },\n  \"apply:action\": {\n    universeKey: \"actionIds\",\n    subject: \"action\",\n    fix: \"Add it to 'actions/' or pass it to createSixb({ actions }).\",\n  },\n  \"share:share\": {\n    universeKey: \"shareIds\",\n    subject: \"share\",\n    fix: \"Add it to 'shares/' or pass it to createSixb({ shares }).\",\n  },\n  \"run:workflow\": {\n    universeKey: \"workflowIds\",\n    subject: \"workflow\",\n    fix: \"Add it to 'workflows/' or pass it to createSixb({ workflows }).\",\n  },\n  \"run:sync\": {\n    universeKey: \"syncIds\",\n    subject: \"sync\",\n    fix: \"Add it to 'syncs/' or pass it to createSixb({ syncs }).\",\n  },\n  \"run:pipeline\": {\n    universeKey: \"pipelineIds\",\n    subject: \"pipeline\",\n    fix: \"Add it to 'pipelines/' or pass it to createSixb({ pipelines }).\",\n  },\n  \"run:agent\": {\n    singleton: true,\n    subject: \"agent\",\n    fix: \"Configure models.language and use the exported agent reference in can.run(agent).\",\n  },\n  \"observe:logs\": {\n    singleton: true,\n    subject: \"logs\",\n    fix: 'Use can.observe(\"logs\").',\n  },\n  \"observe:aiUsage\": {\n    singleton: true,\n    subject: \"AI usage\",\n    fix: \"Use can.observe(agent.usage).\",\n  },\n  \"manage:connector\": {\n    universeKey: \"connectorIds\",\n    subject: \"connector\",\n    fix: \"Add it to 'connectors/' or pass it to createSixb({ connectors }).\",\n  },\n  \"manage:aiUsage\": {\n    singleton: true,\n    subject: \"AI usage\",\n    fix: \"Use can.manage(agent.usage).\",\n  },\n}\n\nexport const GRANT_KIND_KEYS = Object.keys(GRANT_KINDS) as readonly GrantKind[]\nexport const SINGLETON_GRANT_KIND_KEYS = GRANT_KIND_KEYS.filter(\n  (kind): kind is SingletonGrantKind => \"singleton\" in GRANT_KINDS[kind]\n)\nexport const TARGETED_GRANT_KIND_KEYS = GRANT_KIND_KEYS.filter(\n  (kind): kind is TargetedGrantKind => !(\"singleton\" in GRANT_KINDS[kind])\n)\n\nexport function isSingletonGrantKind(kind: GrantKind): kind is SingletonGrantKind {\n  return \"singleton\" in GRANT_KINDS[kind]\n}\n\n/** The grant kind a stored grant resolves to. */\nexport function grantKindOf(grant: GrantDefinition): GrantKind {\n  switch (grant.capability) {\n    case \"view\":\n      return `view:${grant.target}`\n    case \"edit\":\n      return \"edit:object\"\n    case \"append\":\n      return \"append:telemetry\"\n    case \"apply\":\n      return \"apply:action\"\n    case \"share\":\n      return \"share:share\"\n    case \"run\":\n      return `run:${grant.target}`\n    case \"observe\":\n      return `observe:${grant.target}`\n    case \"manage\":\n      return `manage:${grant.target}`\n  }\n}\n\n/** Mutable grant index: booleans for singleton capabilities, id sets for selected resources. */\nexport type MutableGrantIndex = {\n  [TKind in GrantKind]: TKind extends SingletonGrantKind ? boolean : Set<string>\n}\n\nexport function emptyGrantSets(): MutableGrantIndex {\n  return {\n    \"view:object\": new Set(),\n    \"view:dataset\": new Set(),\n    \"edit:object\": new Set(),\n    \"append:telemetry\": new Set(),\n    \"apply:action\": new Set(),\n    \"share:share\": new Set(),\n    \"run:workflow\": new Set(),\n    \"run:sync\": new Set(),\n    \"run:pipeline\": new Set(),\n    \"run:agent\": false,\n    \"observe:logs\": false,\n    \"observe:aiUsage\": false,\n    \"manage:connector\": new Set(),\n    \"manage:aiUsage\": false,\n  }\n}\n"
-  ],
-  "mappings": ";;AAsEO,IAAM,cAIT;AAAA,EACF,eAAe;AAAA,IACb,aAAa;AAAA,IACb,SAAS;AAAA,IACT,KAAK;AAAA,IACL,iBAAiB;AAAA,EACnB;AAAA,EACA,gBAAgB;AAAA,IACd,aAAa;AAAA,IACb,SAAS;AAAA,IACT,KAAK;AAAA,EACP;AAAA,EAIA,eAAe;AAAA,IACb,aAAa;AAAA,IACb,SAAS;AAAA,IACT,KAAK;AAAA,EACP;AAAA,EACA,oBAAoB;AAAA,IAClB,aAAa;AAAA,IACb,SAAS;AAAA,IACT,KAAK;AAAA,EACP;AAAA,EACA,gBAAgB;AAAA,IACd,aAAa;AAAA,IACb,SAAS;AAAA,IACT,KAAK;AAAA,EACP;AAAA,EACA,eAAe;AAAA,IACb,aAAa;AAAA,IACb,SAAS;AAAA,IACT,KAAK;AAAA,EACP;AAAA,EACA,gBAAgB;AAAA,IACd,aAAa;AAAA,IACb,SAAS;AAAA,IACT,KAAK;AAAA,EACP;AAAA,EACA,YAAY;AAAA,IACV,aAAa;AAAA,IACb,SAAS;AAAA,IACT,KAAK;AAAA,EACP;AAAA,EACA,gBAAgB;AAAA,IACd,aAAa;AAAA,IACb,SAAS;AAAA,IACT,KAAK;AAAA,EACP;AAAA,EACA,aAAa;AAAA,IACX,WAAW;AAAA,IACX,SAAS;AAAA,IACT,KAAK;AAAA,EACP;AAAA,EACA,gBAAgB;AAAA,IACd,WAAW;AAAA,IACX,SAAS;AAAA,IACT,KAAK;AAAA,EACP;AAAA,EACA,mBAAmB;AAAA,IACjB,WAAW;AAAA,IACX,SAAS;AAAA,IACT,KAAK;AAAA,EACP;AAAA,EACA,oBAAoB;AAAA,IAClB,aAAa;AAAA,IACb,SAAS;AAAA,IACT,KAAK;AAAA,EACP;AAAA,EACA,kBAAkB;AAAA,IAChB,WAAW;AAAA,IACX,SAAS;AAAA,IACT,KAAK;AAAA,EACP;AACF;AAEO,IAAM,kBAAkB,OAAO,KAAK,WAAW;AAC/C,IAAM,4BAA4B,gBAAgB,OACvD,CAAC,UAAqC,eAAe,YAAY,MACnE;AACO,IAAM,2BAA2B,gBAAgB,OACtD,CAAC,SAAoC,EAAE,eAAe,YAAY,MACpE;AAEO,SAAS,oBAAoB,CAAC,MAA6C;AAAA,EAChF,OAAO,eAAe,YAAY;AAAA;AAI7B,SAAS,WAAW,CAAC,OAAmC;AAAA,EAC7D,QAAQ,MAAM;AAAA,SACP;AAAA,MACH,OAAO,QAAQ,MAAM;AAAA,SAClB;AAAA,MACH,OAAO;AAAA,SACJ;AAAA,MACH,OAAO;AAAA,SACJ;AAAA,MACH,OAAO;AAAA,SACJ;AAAA,MACH,OAAO;AAAA,SACJ;AAAA,MACH,OAAO,OAAO,MAAM;AAAA,SACjB;AAAA,MACH,OAAO,WAAW,MAAM;AAAA,SACrB;AAAA,MACH,OAAO,UAAU,MAAM;AAAA;AAAA;AAStB,SAAS,cAAc,GAAsB;AAAA,EAClD,OAAO;AAAA,IACL,eAAe,IAAI;AAAA,IACnB,gBAAgB,IAAI;AAAA,IACpB,eAAe,IAAI;AAAA,IACnB,oBAAoB,IAAI;AAAA,IACxB,gBAAgB,IAAI;AAAA,IACpB,eAAe,IAAI;AAAA,IACnB,gBAAgB,IAAI;AAAA,IACpB,YAAY,IAAI;AAAA,IAChB,gBAAgB,IAAI;AAAA,IACpB,aAAa;AAAA,IACb,gBAAgB;AAAA,IAChB,mBAAmB;AAAA,IACnB,oBAAoB,IAAI;AAAA,IACxB,kBAAkB;AAAA,EACpB;AAAA;",
-  "debugId": "1C6F3FFB2BACAB1F64756E2164756E21",
-  "names": []
-}