@sixb/core 0.1.20 → 0.1.22

package/dist/{chunk-1sr8ryzk.js → chunk-661ezhks.js}

@@ -129,6 +129,7 @@ var SIXB_API_ROUTES2 = [
     path: "/api/objects/query",
     accessToken: true,
     agentApi: true,
+    agentEffect: "read",
     sharedSession: true
   },
   {
@@ -137,6 +138,7 @@ var SIXB_API_ROUTES2 = [
     path: "/api/objects/query/links",
     accessToken: true,
     agentApi: true,
+    agentEffect: "read",
     sharedSession: true
   },
   {
@@ -145,6 +147,7 @@ var SIXB_API_ROUTES2 = [
     path: "/api/objects/query/count",
     accessToken: true,
     agentApi: true,
+    agentEffect: "read",
     sharedSession: true
   },
   {
@@ -153,6 +156,7 @@ var SIXB_API_ROUTES2 = [
     path: "/api/objects/query/exists",
     accessToken: true,
     agentApi: true,
+    agentEffect: "read",
     sharedSession: true
   },
   {
@@ -161,6 +165,7 @@ var SIXB_API_ROUTES2 = [
     path: "/api/objects/query/facets",
     accessToken: true,
     agentApi: true,
+    agentEffect: "read",
     sharedSession: true
   },
   {
@@ -171,6 +176,15 @@ var SIXB_API_ROUTES2 = [
     agentApi: true,
     sharedSession: true
   },
+  {
+    operationId: "getObjectByUniqueProperty",
+    method: "POST",
+    path: "/api/objects/:objectTypeId/by/:propertyId",
+    accessToken: true,
+    agentApi: true,
+    agentEffect: "read",
+    sharedSession: true
+  },
   {
     operationId: "upsertObject",
     method: "PUT",
@@ -205,6 +219,7 @@ var SIXB_API_ROUTES2 = [
     path: "/api/telemetry/history",
     accessToken: true,
     agentApi: true,
+    agentEffect: "read",
     sharedSession: true
   },
   {
@@ -261,6 +276,7 @@ var SIXB_API_ROUTES2 = [
     path: "/api/actions/:actionId",
     accessToken: true,
     agentApi: true,
+    agentEffect: "action",
     sharedSession: true
   },
   {
@@ -268,7 +284,8 @@ var SIXB_API_ROUTES2 = [
     method: "POST",
     path: "/api/files",
     accessToken: true,
-    agentApi: true
+    agentApi: true,
+    agentEffect: "file"
   },
   {
     operationId: "listActionRuns",
@@ -318,7 +335,8 @@ var SIXB_API_ROUTES2 = [
     method: "POST",
     path: "/api/workflows/:workflowId/runs",
     accessToken: true,
-    agentApi: true
+    agentApi: true,
+    agentEffect: "workflow"
   },
   {
     operationId: "listWorkflowRuns",
@@ -390,6 +408,147 @@ var SIXB_API_ROUTES2 = [
     accessToken: true,
     agentApi: false
   },
+  {
+    operationId: "getAgentChildFileContent",
+    method: "GET",
+    path: "/api/agent-threads/:threadId/child-files/content",
+    accessToken: true,
+    agentApi: false
+  },
+  {
+    operationId: "headAgentChildFileContent",
+    method: "HEAD",
+    path: "/api/agent-threads/:threadId/child-files/content",
+    accessToken: true,
+    agentApi: false
+  },
+  {
+    operationId: "getAgentMemory",
+    method: "GET",
+    path: "/api/agent-memory/:repo",
+    accessToken: true,
+    agentApi: true
+  },
+  {
+    operationId: "listAgentMemoryRevisions",
+    method: "GET",
+    path: "/api/agent-memory/:repo/revisions",
+    accessToken: true,
+    agentApi: false
+  },
+  {
+    operationId: "saveAgentMemory",
+    method: "POST",
+    path: "/api/agent-memory/:repo/revisions",
+    accessToken: true,
+    agentApi: true,
+    agentEffect: "memory"
+  },
+  {
+    operationId: "deleteAgentMemory",
+    method: "DELETE",
+    path: "/api/agent-memory/:repo",
+    accessToken: true,
+    agentApi: false
+  },
+  {
+    operationId: "listArtifacts",
+    method: "GET",
+    path: "/api/artifacts",
+    accessToken: true,
+    agentApi: false
+  },
+  {
+    operationId: "createArtifact",
+    method: "POST",
+    path: "/api/artifacts",
+    accessToken: true,
+    agentApi: false
+  },
+  {
+    operationId: "getArtifact",
+    method: "GET",
+    path: "/api/artifacts/:artifactId",
+    accessToken: true,
+    agentApi: false
+  },
+  {
+    operationId: "deleteArtifact",
+    method: "DELETE",
+    path: "/api/artifacts/:artifactId",
+    accessToken: true,
+    agentApi: false
+  },
+  {
+    operationId: "getArtifactState",
+    method: "GET",
+    path: "/api/artifacts/:artifactId/state",
+    accessToken: true,
+    agentApi: false
+  },
+  {
+    operationId: "clearArtifactState",
+    method: "DELETE",
+    path: "/api/artifacts/:artifactId/state",
+    accessToken: true,
+    agentApi: false
+  },
+  {
+    operationId: "setArtifactState",
+    method: "PUT",
+    path: "/api/artifacts/:artifactId/state/:key",
+    accessToken: true,
+    agentApi: false
+  },
+  {
+    operationId: "deleteArtifactStateValue",
+    method: "DELETE",
+    path: "/api/artifacts/:artifactId/state/:key",
+    accessToken: true,
+    agentApi: false
+  },
+  {
+    operationId: "publishArtifactVersion",
+    method: "POST",
+    path: "/api/artifacts/:artifactId/versions",
+    accessToken: true,
+    agentApi: false
+  },
+  {
+    operationId: "getArtifactVersion",
+    method: "GET",
+    path: "/api/artifacts/:artifactId/versions/:version",
+    accessToken: true,
+    agentApi: false
+  },
+  {
+    operationId: "getArtifactQuery",
+    method: "GET",
+    path: "/api/artifacts/:artifactId/versions/:version/queries/:name",
+    accessToken: true,
+    agentApi: false
+  },
+  {
+    operationId: "createArtifactFrame",
+    method: "POST",
+    path: "/api/artifacts/:artifactId/versions/:version/frame",
+    accessToken: true,
+    agentApi: false
+  },
+  {
+    operationId: "getArtifactFileContent",
+    method: "GET",
+    path: "/api/artifacts/:artifactId/versions/:version/content",
+    accessToken: true,
+    agentApi: false
+  },
+  {
+    operationId: "headArtifactFileContent",
+    method: "HEAD",
+    path: "/api/artifacts/:artifactId/versions/:version/content",
+    accessToken: true,
+    agentApi: false
+  },
   {
     operationId: "searchObjects",
     method: "GET",
@@ -412,6 +571,117 @@ var SIXB_API_ROUTES2 = [
     accessToken: true,
     agentApi: false
   },
+  {
+    operationId: "getActivityCaptureConfig",
+    method: "GET",
+    path: "/api/activity/capture-config",
+    accessToken: false,
+    agentApi: false,
+    sharedSession: true
+  },
+  {
+    operationId: "captureActivity",
+    method: "POST",
+    path: "/api/activity/events",
+    accessToken: false,
+    agentApi: false,
+    sharedSession: true
+  },
+  {
+    operationId: "listActivityVisits",
+    method: "GET",
+    path: "/api/activity/visits",
+    accessToken: true,
+    agentApi: false
+  },
+  {
+    operationId: "listActivityUsers",
+    method: "GET",
+    path: "/api/activity/users",
+    accessToken: true,
+    agentApi: false
+  },
+  {
+    operationId: "getActivitySummary",
+    method: "GET",
+    path: "/api/activity/summary",
+    accessToken: true,
+    agentApi: false
+  },
+  {
+    operationId: "getActivityCalendar",
+    method: "GET",
+    path: "/api/activity/calendar",
+    accessToken: true,
+    agentApi: false
+  },
+  {
+    operationId: "getActivityVisitTimeline",
+    method: "GET",
+    path: "/api/activity/visits/:visitId/timeline",
+    accessToken: true,
+    agentApi: false
+  },
+  {
+    operationId: "listActivityConnections",
+    method: "GET",
+    path: "/api/activity/connections",
+    accessToken: true,
+    agentApi: false
+  },
+  {
+    operationId: "listUsers",
+    method: "GET",
+    path: "/api/users",
+    accessToken: true,
+    agentApi: true
+  },
+  {
+    operationId: "getUser",
+    method: "GET",
+    path: "/api/users/:userId",
+    accessToken: true,
+    agentApi: true
+  },
+  {
+    operationId: "listModels",
+    method: "GET",
+    path: "/api/models",
+    accessToken: true,
+    agentApi: true
+  },
+  {
+    operationId: "generateText",
+    method: "POST",
+    path: "/api/models/language/generations",
+    accessToken: true,
+    agentApi: true,
+    agentEffect: "model"
+  },
+  {
+    operationId: "generateImages",
+    method: "POST",
+    path: "/api/models/image/generations",
+    accessToken: true,
+    agentApi: true,
+    agentEffect: "model"
+  },
+  {
+    operationId: "generateSpeech",
+    method: "POST",
+    path: "/api/models/audio/speech",
+    accessToken: true,
+    agentApi: true,
+    agentEffect: "model"
+  },
+  {
+    operationId: "transcribeAudio",
+    method: "POST",
+    path: "/api/models/audio/transcriptions",
+    accessToken: true,
+    agentApi: true,
+    agentEffect: "model"
+  },
   {
     operationId: "getAiAccountingOverview",
     method: "GET",
@@ -426,6 +696,27 @@ var SIXB_API_ROUTES2 = [
     accessToken: true,
     agentApi: false
   },
+  {
+    operationId: "getAiModelCallFiles",
+    method: "GET",
+    path: "/api/ai/model-calls/:callId/files",
+    accessToken: true,
+    agentApi: true
+  },
+  {
+    operationId: "getAiModelCallFileContent",
+    method: "GET",
+    path: "/api/ai/model-calls/:callId/files/content",
+    accessToken: true,
+    agentApi: true
+  },
+  {
+    operationId: "headAiModelCallFileContent",
+    method: "HEAD",
+    path: "/api/ai/model-calls/:callId/files/content",
+    accessToken: true,
+    agentApi: false
+  },
   {
     operationId: "listAiModelCallGroups",
     method: "GET",
@@ -476,11 +767,17 @@ var SIXB_API_ROUTES2 = [
     agentApi: false
   }
 ];
-for (const route of SIXB_API_ROUTES2) {
-  if (route.agentApi && !route.accessToken) {
-    throw new Error(`[Sixb] agent API route '${route.method} ${route.path}' must also be an access-token route.`);
+function assertSixbApiRoutes(routes) {
+  for (const route of routes) {
+    if (route.agentApi && !route.accessToken) {
+      throw new Error(`[Sixb] agent API route '${route.method} ${route.path}' must also be an access-token route.`);
+    }
+    if (route.agentApi && route.method !== "GET" && route.agentEffect === undefined) {
+      throw new Error(`[Sixb] agent API route '${route.method} ${route.path}' must declare its agentEffect.`);
+    }
   }
 }
+assertSixbApiRoutes(SIXB_API_ROUTES2);
 
 // src/http/route-pattern.ts
 function pathSegmentsFor2(pathname) {
@@ -508,4 +805,4 @@ function normalizeRoutePath2(pathname) {
 
 export { SIXB_API_ROUTES2, pathSegmentsFor2, matchesPathPattern2, normalizeRoutePath2 };
 
-//# debugId=64C5A59BC4D88AEB64756E2164756E21
+//# debugId=417CCDE96E10FD7D64756E2164756E21

package/dist/chunk-661ezhks.js.map

@@ -0,0 +1,11 @@
+{
+  "version": 3,
+  "sources": ["../src/http/api-routes.ts", "../src/http/route-pattern.ts"],
+  "sourcesContent": [
+    "/**\n * The single source of truth for the Sixb HTTP API surface and its auth capabilities.\n *\n * Two views are derived from this one table:\n * - `AGENT_API_ROUTES` (@sixb/core agent gateway) = the `agentApi` rows, projected to {method, path}.\n * - `ACCESS_TOKEN_ROUTES` (@sixb/server bearer boundary) = the `accessToken` rows, with operationId.\n *\n * Because both views are projections of this table, the agent gateway allow-list is structurally a\n * subset of the bearer boundary — the invariant below enforces `agentApi ⇒ accessToken` at load\n * time. This table lives in @sixb/core (never @sixb/server) because @sixb/server depends on core,\n * not the reverse; the operationId strings are opaque here.\n */\nexport interface SixbApiRoute {\n  /** OpenAPI operationId — the server keys its bearer security requirement off this. */\n  readonly operationId: string\n  readonly method: string\n  readonly path: string\n  /** The route accepts a bearer access token (enforced by the server access-token boundary). */\n  readonly accessToken: boolean\n  /** The route is proxied by the agent API gateway (a strict subset of the accessToken routes). */\n  readonly agentApi: boolean\n  /**\n   * What the route changes when the Agent calls it, for every `agentApi` route but a GET. The\n   * gateway holds `action` and `workflow` calls for the requester's approval when their mode asks.\n   */\n  readonly agentEffect?: AgentApiEffect\n  /** The canonical handler may run under an explicitly selected shared session. */\n  readonly sharedSession?: boolean\n}\n\n/**\n * `read` changes nothing (a read sent as POST); `memory` writes the Agent's own notes; `file` stores\n * a blob nothing points at yet; `model` costs what AI limits already bound.\n */\nexport type AgentApiEffect = \"read\" | \"action\" | \"workflow\" | \"memory\" | \"file\" | \"model\"\n\nexport const SIXB_API_ROUTES: readonly SixbApiRoute[] = [\n  {\n    operationId: \"getProjectInfo\",\n    method: \"GET\",\n    path: \"/api/project\",\n    accessToken: true,\n    agentApi: true,\n  },\n  // Token and service-account management is bearer-capable so the CLI can authenticate with a\n  // personal access token. It is NOT exposed to agents. The runtime still confines every operation\n  // to the caller's own groups, and service-account tokens are rejected (only user principals may\n  // manage credentials). Creating a token is the exception: it takes a signed-in session, so no\n  // access token can mint one broader or longer-lived than itself.\n  {\n    operationId: \"getAuthAccessManagementOptions\",\n    method: \"GET\",\n    path: \"/api/auth/access-management-options\",\n    accessToken: true,\n    agentApi: false,\n  },\n  {\n    operationId: \"listAuthAccessTokens\",\n    method: \"GET\",\n    path: \"/api/auth/access-tokens\",\n    accessToken: true,\n    agentApi: false,\n  },\n  {\n    operationId: \"createAuthPersonalAccessToken\",\n    method: \"POST\",\n    path: \"/api/auth/access-tokens\",\n    accessToken: false,\n    agentApi: false,\n  },\n  {\n    operationId: \"revokeAuthAccessToken\",\n    method: \"POST\",\n    path: \"/api/auth/access-tokens/:tokenId/revoke\",\n    accessToken: true,\n    agentApi: false,\n  },\n  {\n    operationId: \"listAuthServiceAccounts\",\n    method: \"GET\",\n    path: \"/api/auth/service-accounts\",\n    accessToken: true,\n    agentApi: false,\n  },\n  {\n    operationId: \"createAuthServiceAccount\",\n    method: \"POST\",\n    path: \"/api/auth/service-accounts\",\n    accessToken: true,\n    agentApi: false,\n  },\n  {\n    operationId: \"disableAuthServiceAccount\",\n    method: \"POST\",\n    path: \"/api/auth/service-accounts/:serviceAccountId/disable\",\n    accessToken: true,\n    agentApi: false,\n  },\n  {\n    operationId: \"listAuthServiceAccountAccessTokens\",\n    method: \"GET\",\n    path: \"/api/auth/service-accounts/:serviceAccountId/access-tokens\",\n    accessToken: true,\n    agentApi: false,\n  },\n  {\n    operationId: \"createAuthServiceAccountAccessToken\",\n    method: \"POST\",\n    path: \"/api/auth/service-accounts/:serviceAccountId/access-tokens\",\n    accessToken: false,\n    agentApi: false,\n  },\n  {\n    operationId: \"revokeAuthServiceAccountAccessToken\",\n    method: \"POST\",\n    path: \"/api/auth/service-accounts/:serviceAccountId/access-tokens/:tokenId/revoke\",\n    accessToken: true,\n    agentApi: false,\n  },\n  // Share lifecycle management is bearer-capable for programmatic administration but never\n  // agent-proxied. Shared sessions themselves use the canonical object/action routes and land in\n  // the request boundary separately.\n  {\n    operationId: \"issueSharedAccessGrant\",\n    method: \"POST\",\n    path: \"/api/share-grants\",\n    accessToken: true,\n    agentApi: false,\n  },\n  {\n    operationId: \"listSharedAccessGrants\",\n    method: \"GET\",\n    path: \"/api/share-grants\",\n    accessToken: true,\n    agentApi: false,\n  },\n  {\n    operationId: \"revokeSharedAccessGrant\",\n    method: \"DELETE\",\n    path: \"/api/share-grants/:grantId\",\n    accessToken: true,\n    agentApi: false,\n  },\n  {\n    operationId: \"listObjectTypes\",\n    method: \"GET\",\n    path: \"/api/object-types\",\n    accessToken: true,\n    agentApi: true,\n    sharedSession: true,\n  },\n  {\n    operationId: \"getObjectType\",\n    method: \"GET\",\n    path: \"/api/object-types/:objectTypeId\",\n    accessToken: true,\n    agentApi: true,\n    sharedSession: true,\n  },\n  {\n    operationId: \"listObjects\",\n    method: \"GET\",\n    path: \"/api/objects\",\n    accessToken: true,\n    agentApi: true,\n    sharedSession: true,\n  },\n  {\n    operationId: \"queryObjects\",\n    method: \"POST\",\n    path: \"/api/objects/query\",\n    accessToken: true,\n    agentApi: true,\n    agentEffect: \"read\",\n    sharedSession: true,\n  },\n  {\n    operationId: \"queryObjectLinks\",\n    method: \"POST\",\n    path: \"/api/objects/query/links\",\n    accessToken: true,\n    agentApi: true,\n    agentEffect: \"read\",\n    sharedSession: true,\n  },\n  {\n    operationId: \"countObjects\",\n    method: \"POST\",\n    path: \"/api/objects/query/count\",\n    accessToken: true,\n    agentApi: true,\n    agentEffect: \"read\",\n    sharedSession: true,\n  },\n  {\n    operationId: \"existsObjects\",\n    method: \"POST\",\n    path: \"/api/objects/query/exists\",\n    accessToken: true,\n    agentApi: true,\n    agentEffect: \"read\",\n    sharedSession: true,\n  },\n  {\n    operationId: \"facetObjects\",\n    method: \"POST\",\n    path: \"/api/objects/query/facets\",\n    accessToken: true,\n    agentApi: true,\n    agentEffect: \"read\",\n    sharedSession: true,\n  },\n  {\n    operationId: \"getObject\",\n    method: \"GET\",\n    path: \"/api/objects/:objectTypeId/:objectId\",\n    accessToken: true,\n    agentApi: true,\n    sharedSession: true,\n  },\n  // A read: POST only so the value, an email say, stays out of URLs and their logs.\n  {\n    operationId: \"getObjectByUniqueProperty\",\n    method: \"POST\",\n    path: \"/api/objects/:objectTypeId/by/:propertyId\",\n    accessToken: true,\n    agentApi: true,\n    agentEffect: \"read\",\n    sharedSession: true,\n  },\n  // The four write routes. Bearer-capable because their execution facade enforces authorization\n  // (`edit:object` / `append:telemetry`), which is exactly the precondition this table requires.\n  // NOT agent-proxied: letting an agent turn write objects on its own is a separate decision, and\n  // the gateway already hands routes an execution SDK, so flipping `agentApi` later needs no\n  // authorization work — only that decision.\n  {\n    operationId: \"upsertObject\",\n    method: \"PUT\",\n    path: \"/api/objects/:objectTypeId/:objectId\",\n    accessToken: true,\n    agentApi: false,\n  },\n  {\n    operationId: \"upsertObjectLink\",\n    method: \"PUT\",\n    path: \"/api/objects/:objectTypeId/:objectId/links/:linkId\",\n    accessToken: true,\n    agentApi: false,\n  },\n  {\n    operationId: \"removeObjectLink\",\n    method: \"DELETE\",\n    path: \"/api/objects/:objectTypeId/:objectId/links/:linkId\",\n    accessToken: true,\n    agentApi: false,\n  },\n  {\n    operationId: \"appendTelemetry\",\n    method: \"POST\",\n    path: \"/api/objects/:objectTypeId/:objectId/telemetry/:propertyId\",\n    accessToken: true,\n    agentApi: false,\n  },\n  {\n    operationId: \"getBulkTelemetryHistory\",\n    method: \"POST\",\n    path: \"/api/telemetry/history\",\n    accessToken: true,\n    agentApi: true,\n    agentEffect: \"read\",\n    sharedSession: true,\n  },\n  {\n    operationId: \"getTelemetryHistory\",\n    method: \"GET\",\n    path: \"/api/objects/:objectTypeId/:objectId/telemetry/:propertyId/history\",\n    accessToken: true,\n    agentApi: true,\n    sharedSession: true,\n  },\n  {\n    operationId: \"getLatestTelemetry\",\n    method: \"GET\",\n    path: \"/api/objects/:objectTypeId/:objectId/telemetry/:propertyId/latest\",\n    accessToken: true,\n    agentApi: true,\n    sharedSession: true,\n  },\n  {\n    operationId: \"getObjectFileContent\",\n    method: \"GET\",\n    path: \"/api/objects/:objectTypeId/:objectId/files/content\",\n    accessToken: true,\n    agentApi: true,\n    sharedSession: true,\n  },\n  {\n    // Bearer-capable (CLI/programmatic existence + range probes) but NOT agent-proxied: the agent\n    // API gateway only forwards GET/POST, and an agent gains nothing from HEAD over GET (a file's\n    // size already travels in its FileRef). Keeping this agentApi:true would throw at gateway\n    // registration (\"Unsupported agent API gateway method 'HEAD'\") and stop the server booting.\n    operationId: \"headObjectFileContent\",\n    method: \"HEAD\",\n    path: \"/api/objects/:objectTypeId/:objectId/files/content\",\n    accessToken: true,\n    agentApi: false,\n    sharedSession: true,\n  },\n  {\n    operationId: \"listActions\",\n    method: \"GET\",\n    path: \"/api/actions\",\n    accessToken: true,\n    agentApi: true,\n    sharedSession: true,\n  },\n  {\n    operationId: \"getAction\",\n    method: \"GET\",\n    path: \"/api/actions/:actionId\",\n    accessToken: true,\n    agentApi: true,\n    sharedSession: true,\n  },\n  {\n    operationId: \"requestAction\",\n    method: \"POST\",\n    path: \"/api/actions/:actionId\",\n    accessToken: true,\n    agentApi: true,\n    agentEffect: \"action\",\n    sharedSession: true,\n  },\n  {\n    operationId: \"uploadFileRaw\",\n    method: \"POST\",\n    path: \"/api/files\",\n    accessToken: true,\n    agentApi: true,\n    agentEffect: \"file\",\n  },\n  {\n    operationId: \"listActionRuns\",\n    method: \"GET\",\n    path: \"/api/action-runs\",\n    accessToken: true,\n    agentApi: true,\n  },\n  {\n    operationId: \"getActionRun\",\n    method: \"GET\",\n    path: \"/api/action-runs/:runId\",\n    accessToken: true,\n    agentApi: true,\n    sharedSession: true,\n  },\n  {\n    operationId: \"getActionRunFileContent\",\n    method: \"GET\",\n    path: \"/api/action-runs/:runId/files/content\",\n    accessToken: true,\n    agentApi: true,\n  },\n  {\n    operationId: \"headActionRunFileContent\",\n    method: \"HEAD\",\n    path: \"/api/action-runs/:runId/files/content\",\n    accessToken: true,\n    agentApi: false,\n  },\n  {\n    operationId: \"listWorkflows\",\n    method: \"GET\",\n    path: \"/api/workflows\",\n    accessToken: true,\n    agentApi: true,\n  },\n  {\n    operationId: \"getWorkflow\",\n    method: \"GET\",\n    path: \"/api/workflows/:workflowId\",\n    accessToken: true,\n    agentApi: true,\n  },\n  {\n    operationId: \"requestWorkflowRun\",\n    method: \"POST\",\n    path: \"/api/workflows/:workflowId/runs\",\n    accessToken: true,\n    agentApi: true,\n    agentEffect: \"workflow\",\n  },\n  {\n    operationId: \"listWorkflowRuns\",\n    method: \"GET\",\n    path: \"/api/workflow-runs\",\n    accessToken: true,\n    agentApi: true,\n  },\n  {\n    operationId: \"getWorkflowRun\",\n    method: \"GET\",\n    path: \"/api/workflow-runs/:runId\",\n    accessToken: true,\n    agentApi: true,\n  },\n  {\n    operationId: \"cancelWorkflowRun\",\n    method: \"POST\",\n    path: \"/api/workflow-runs/:runId/cancel\",\n    accessToken: true,\n    agentApi: false,\n  },\n  {\n    operationId: \"getWorkflowAgentNodeExecution\",\n    method: \"GET\",\n    path: \"/api/workflow-runs/:runId/nodes/:nodeKey/agent-execution\",\n    accessToken: true,\n    agentApi: false,\n  },\n  {\n    operationId: \"getWorkflowRunFileContent\",\n    method: \"GET\",\n    path: \"/api/workflow-runs/:runId/files/content\",\n    accessToken: true,\n    agentApi: true,\n  },\n  {\n    operationId: \"headWorkflowRunFileContent\",\n    method: \"HEAD\",\n    path: \"/api/workflow-runs/:runId/files/content\",\n    accessToken: true,\n    agentApi: false,\n  },\n  {\n    operationId: \"getWorkflowNodeRunFileContent\",\n    method: \"GET\",\n    path: \"/api/workflow-runs/:runId/nodes/:nodeKey/files/content\",\n    accessToken: true,\n    agentApi: false,\n  },\n  {\n    operationId: \"headWorkflowNodeRunFileContent\",\n    method: \"HEAD\",\n    path: \"/api/workflow-runs/:runId/nodes/:nodeKey/files/content\",\n    accessToken: true,\n    agentApi: false,\n  },\n  {\n    operationId: \"getAgentMessageFileContent\",\n    method: \"GET\",\n    path: \"/api/agent-threads/:threadId/messages/:messageId/files/content\",\n    accessToken: true,\n    agentApi: true,\n  },\n  {\n    operationId: \"headAgentMessageFileContent\",\n    method: \"HEAD\",\n    path: \"/api/agent-threads/:threadId/messages/:messageId/files/content\",\n    accessToken: true,\n    agentApi: false,\n  },\n  // A sub-agent's files are for people reading its conversation; its parent got them from\n  // `wait_agent`.\n  {\n    operationId: \"getAgentChildFileContent\",\n    method: \"GET\",\n    path: \"/api/agent-threads/:threadId/child-files/content\",\n    accessToken: true,\n    agentApi: false,\n  },\n  {\n    operationId: \"headAgentChildFileContent\",\n    method: \"HEAD\",\n    path: \"/api/agent-threads/:threadId/child-files/content\",\n    accessToken: true,\n    agentApi: false,\n  },\n  // The Agent reads and saves its memory with `sixb memory` in its sandbox. Its history and deleting\n  // a repo are for people, so they stay off the gateway.\n  {\n    operationId: \"getAgentMemory\",\n    method: \"GET\",\n    path: \"/api/agent-memory/:repo\",\n    accessToken: true,\n    agentApi: true,\n  },\n  {\n    operationId: \"listAgentMemoryRevisions\",\n    method: \"GET\",\n    path: \"/api/agent-memory/:repo/revisions\",\n    accessToken: true,\n    agentApi: false,\n  },\n  {\n    operationId: \"saveAgentMemory\",\n    method: \"POST\",\n    path: \"/api/agent-memory/:repo/revisions\",\n    accessToken: true,\n    agentApi: true,\n    agentEffect: \"memory\",\n  },\n  {\n    operationId: \"deleteAgentMemory\",\n    method: \"DELETE\",\n    path: \"/api/agent-memory/:repo\",\n    accessToken: true,\n    agentApi: false,\n  },\n  // Artifacts are reachable with an access token, so the CLI and integrations can publish them. The\n  // Agent publishes through its own tool, not the gateway.\n  {\n    operationId: \"listArtifacts\",\n    method: \"GET\",\n    path: \"/api/artifacts\",\n    accessToken: true,\n    agentApi: false,\n  },\n  {\n    operationId: \"createArtifact\",\n    method: \"POST\",\n    path: \"/api/artifacts\",\n    accessToken: true,\n    agentApi: false,\n  },\n  {\n    operationId: \"getArtifact\",\n    method: \"GET\",\n    path: \"/api/artifacts/:artifactId\",\n    accessToken: true,\n    agentApi: false,\n  },\n  {\n    operationId: \"deleteArtifact\",\n    method: \"DELETE\",\n    path: \"/api/artifacts/:artifactId\",\n    accessToken: true,\n    agentApi: false,\n  },\n  {\n    operationId: \"getArtifactState\",\n    method: \"GET\",\n    path: \"/api/artifacts/:artifactId/state\",\n    accessToken: true,\n    agentApi: false,\n  },\n  {\n    operationId: \"clearArtifactState\",\n    method: \"DELETE\",\n    path: \"/api/artifacts/:artifactId/state\",\n    accessToken: true,\n    agentApi: false,\n  },\n  {\n    operationId: \"setArtifactState\",\n    method: \"PUT\",\n    path: \"/api/artifacts/:artifactId/state/:key\",\n    accessToken: true,\n    agentApi: false,\n  },\n  {\n    operationId: \"deleteArtifactStateValue\",\n    method: \"DELETE\",\n    path: \"/api/artifacts/:artifactId/state/:key\",\n    accessToken: true,\n    agentApi: false,\n  },\n  {\n    operationId: \"publishArtifactVersion\",\n    method: \"POST\",\n    path: \"/api/artifacts/:artifactId/versions\",\n    accessToken: true,\n    agentApi: false,\n  },\n  {\n    operationId: \"getArtifactVersion\",\n    method: \"GET\",\n    path: \"/api/artifacts/:artifactId/versions/:version\",\n    accessToken: true,\n    agentApi: false,\n  },\n  {\n    operationId: \"getArtifactQuery\",\n    method: \"GET\",\n    path: \"/api/artifacts/:artifactId/versions/:version/queries/:name\",\n    accessToken: true,\n    agentApi: false,\n  },\n  {\n    operationId: \"createArtifactFrame\",\n    method: \"POST\",\n    path: \"/api/artifacts/:artifactId/versions/:version/frame\",\n    accessToken: true,\n    agentApi: false,\n  },\n  {\n    operationId: \"getArtifactFileContent\",\n    method: \"GET\",\n    path: \"/api/artifacts/:artifactId/versions/:version/content\",\n    accessToken: true,\n    agentApi: false,\n  },\n  {\n    operationId: \"headArtifactFileContent\",\n    method: \"HEAD\",\n    path: \"/api/artifacts/:artifactId/versions/:version/content\",\n    accessToken: true,\n    agentApi: false,\n  },\n  {\n    operationId: \"searchObjects\",\n    method: \"GET\",\n    path: \"/api/objects/search\",\n    accessToken: true,\n    agentApi: true,\n    sharedSession: true,\n  },\n  {\n    operationId: \"listEvents\",\n    method: \"GET\",\n    path: \"/api/events\",\n    accessToken: true,\n    agentApi: false,\n  },\n  {\n    operationId: \"listLogs\",\n    method: \"GET\",\n    path: \"/api/logs\",\n    accessToken: true,\n    agentApi: false,\n  },\n  // A browser records its own activity, signed in or through a shared link. Access tokens never\n  // do: a script is not a visit.\n  {\n    operationId: \"getActivityCaptureConfig\",\n    method: \"GET\",\n    path: \"/api/activity/capture-config\",\n    accessToken: false,\n    agentApi: false,\n    sharedSession: true,\n  },\n  {\n    operationId: \"captureActivity\",\n    method: \"POST\",\n    path: \"/api/activity/events\",\n    accessToken: false,\n    agentApi: false,\n    sharedSession: true,\n  },\n  {\n    operationId: \"listActivityVisits\",\n    method: \"GET\",\n    path: \"/api/activity/visits\",\n    accessToken: true,\n    agentApi: false,\n  },\n  {\n    operationId: \"listActivityUsers\",\n    method: \"GET\",\n    path: \"/api/activity/users\",\n    accessToken: true,\n    agentApi: false,\n  },\n  {\n    operationId: \"getActivitySummary\",\n    method: \"GET\",\n    path: \"/api/activity/summary\",\n    accessToken: true,\n    agentApi: false,\n  },\n  {\n    operationId: \"getActivityCalendar\",\n    method: \"GET\",\n    path: \"/api/activity/calendar\",\n    accessToken: true,\n    agentApi: false,\n  },\n  {\n    operationId: \"getActivityVisitTimeline\",\n    method: \"GET\",\n    path: \"/api/activity/visits/:visitId/timeline\",\n    accessToken: true,\n    agentApi: false,\n  },\n  {\n    operationId: \"listActivityConnections\",\n    method: \"GET\",\n    path: \"/api/activity/connections\",\n    accessToken: true,\n    agentApi: false,\n  },\n  {\n    operationId: \"listUsers\",\n    method: \"GET\",\n    path: \"/api/users\",\n    accessToken: true,\n    agentApi: true,\n  },\n  {\n    operationId: \"getUser\",\n    method: \"GET\",\n    path: \"/api/users/:userId\",\n    accessToken: true,\n    agentApi: true,\n  },\n  {\n    operationId: \"listModels\",\n    method: \"GET\",\n    path: \"/api/models\",\n    accessToken: true,\n    agentApi: true,\n  },\n  {\n    operationId: \"generateText\",\n    method: \"POST\",\n    path: \"/api/models/language/generations\",\n    accessToken: true,\n    agentApi: true,\n    agentEffect: \"model\",\n  },\n  {\n    operationId: \"generateImages\",\n    method: \"POST\",\n    path: \"/api/models/image/generations\",\n    accessToken: true,\n    agentApi: true,\n    agentEffect: \"model\",\n  },\n  {\n    operationId: \"generateSpeech\",\n    method: \"POST\",\n    path: \"/api/models/audio/speech\",\n    accessToken: true,\n    agentApi: true,\n    agentEffect: \"model\",\n  },\n  {\n    operationId: \"transcribeAudio\",\n    method: \"POST\",\n    path: \"/api/models/audio/transcriptions\",\n    accessToken: true,\n    agentApi: true,\n    agentEffect: \"model\",\n  },\n  {\n    operationId: \"getAiAccountingOverview\",\n    method: \"GET\",\n    path: \"/api/ai/accounting/overview\",\n    accessToken: true,\n    agentApi: false,\n  },\n  {\n    operationId: \"listAiModelCalls\",\n    method: \"GET\",\n    path: \"/api/ai/model-calls\",\n    accessToken: true,\n    agentApi: false,\n  },\n  {\n    operationId: \"getAiModelCallFiles\",\n    method: \"GET\",\n    path: \"/api/ai/model-calls/:callId/files\",\n    accessToken: true,\n    agentApi: true,\n  },\n  {\n    operationId: \"getAiModelCallFileContent\",\n    method: \"GET\",\n    path: \"/api/ai/model-calls/:callId/files/content\",\n    accessToken: true,\n    agentApi: true,\n  },\n  {\n    operationId: \"headAiModelCallFileContent\",\n    method: \"HEAD\",\n    path: \"/api/ai/model-calls/:callId/files/content\",\n    accessToken: true,\n    agentApi: false,\n  },\n  {\n    operationId: \"listAiModelCallGroups\",\n    method: \"GET\",\n    path: \"/api/ai/model-call-groups\",\n    accessToken: true,\n    agentApi: false,\n  },\n  {\n    operationId: \"listAiLimitPolicies\",\n    method: \"GET\",\n    path: \"/api/ai/limits\",\n    accessToken: true,\n    agentApi: false,\n  },\n  {\n    operationId: \"getAiLimitStatus\",\n    method: \"GET\",\n    path: \"/api/ai/limits/status\",\n    accessToken: true,\n    agentApi: false,\n  },\n  {\n    operationId: \"getAiLimitSubjectOptions\",\n    method: \"GET\",\n    path: \"/api/ai/limits/subjects\",\n    accessToken: true,\n    agentApi: false,\n  },\n  {\n    operationId: \"createAiLimitPolicy\",\n    method: \"POST\",\n    path: \"/api/ai/limits\",\n    accessToken: true,\n    agentApi: false,\n  },\n  {\n    operationId: \"updateAiLimitPolicy\",\n    method: \"PUT\",\n    path: \"/api/ai/limits/:limitId\",\n    accessToken: true,\n    agentApi: false,\n  },\n  {\n    operationId: \"deleteAiLimitPolicy\",\n    method: \"DELETE\",\n    path: \"/api/ai/limits/:limitId\",\n    accessToken: true,\n    agentApi: false,\n  },\n]\n\n/**\n * The table's invariants, enforced at module load. A gateway-proxied route must also be a bearer\n * route, or the gateway would expose a surface the access-token boundary does not recognize. A\n * gateway-proxied route that can change state names what it changes, so a route added later cannot\n * skip the approval gate by accident.\n */\nexport function assertSixbApiRoutes(routes: readonly SixbApiRoute[]): void {\n  for (const route of routes) {\n    if (route.agentApi && !route.accessToken) {\n      throw new Error(\n        `[Sixb] agent API route '${route.method} ${route.path}' must also be an access-token route.`\n      )\n    }\n    if (route.agentApi && route.method !== \"GET\" && route.agentEffect === undefined) {\n      throw new Error(\n        `[Sixb] agent API route '${route.method} ${route.path}' must declare its agentEffect.`\n      )\n    }\n  }\n}\n\nassertSixbApiRoutes(SIXB_API_ROUTES)\n",
+    "/**\n * Shared HTTP route-pattern matching. Used by both the agent API gateway allow-list (@sixb/core)\n * and the server's access-token boundary (@sixb/server) so the two never drift.\n */\n\n/** Split a path into its non-empty segments (drops leading/trailing/empty parts). */\nexport function pathSegmentsFor(pathname: string): string[] {\n  return pathname.split(\"/\").filter(Boolean)\n}\n\n/**\n * Match a concrete pathname against a route pattern. A `:param` pattern segment matches any single\n * non-empty segment; every other segment must match exactly. Segment counts must be equal.\n */\nexport function matchesPathPattern(pathname: string, pattern: string): boolean {\n  const pathSegments = pathSegmentsFor(pathname)\n  const patternSegments = pathSegmentsFor(pattern)\n\n  if (pathSegments.length !== patternSegments.length) {\n    return false\n  }\n\n  return patternSegments.every((patternSegment, index) => {\n    if (patternSegment.startsWith(\":\")) {\n      return pathSegments[index] !== \"\"\n    }\n    return patternSegment === pathSegments[index]\n  })\n}\n\n/** Strip a single trailing slash so `/api/foo` and `/api/foo/` compare equal (leaves \"/\" alone). */\nexport function normalizeRoutePath(pathname: string): string {\n  if (pathname.length > 1 && pathname.endsWith(\"/\")) {\n    return pathname.slice(0, -1)\n  }\n  return pathname\n}\n"
+  ],
+  "mappings": ";;AAoCO,IAAM,mBAA2C;AAAA,EACtD;AAAA,IACE,aAAa;AAAA,IACb,QAAQ;AAAA,IACR,MAAM;AAAA,IACN,aAAa;AAAA,IACb,UAAU;AAAA,EACZ;AAAA,EAMA;AAAA,IACE,aAAa;AAAA,IACb,QAAQ;AAAA,IACR,MAAM;AAAA,IACN,aAAa;AAAA,IACb,UAAU;AAAA,EACZ;AAAA,EACA;AAAA,IACE,aAAa;AAAA,IACb,QAAQ;AAAA,IACR,MAAM;AAAA,IACN,aAAa;AAAA,IACb,UAAU;AAAA,EACZ;AAAA,EACA;AAAA,IACE,aAAa;AAAA,IACb,QAAQ;AAAA,IACR,MAAM;AAAA,IACN,aAAa;AAAA,IACb,UAAU;AAAA,EACZ;AAAA,EACA;AAAA,IACE,aAAa;AAAA,IACb,QAAQ;AAAA,IACR,MAAM;AAAA,IACN,aAAa;AAAA,IACb,UAAU;AAAA,EACZ;AAAA,EACA;AAAA,IACE,aAAa;AAAA,IACb,QAAQ;AAAA,IACR,MAAM;AAAA,IACN,aAAa;AAAA,IACb,UAAU;AAAA,EACZ;AAAA,EACA;AAAA,IACE,aAAa;AAAA,IACb,QAAQ;AAAA,IACR,MAAM;AAAA,IACN,aAAa;AAAA,IACb,UAAU;AAAA,EACZ;AAAA,EACA;AAAA,IACE,aAAa;AAAA,IACb,QAAQ;AAAA,IACR,MAAM;AAAA,IACN,aAAa;AAAA,IACb,UAAU;AAAA,EACZ;AAAA,EACA;AAAA,IACE,aAAa;AAAA,IACb,QAAQ;AAAA,IACR,MAAM;AAAA,IACN,aAAa;AAAA,IACb,UAAU;AAAA,EACZ;AAAA,EACA;AAAA,IACE,aAAa;AAAA,IACb,QAAQ;AAAA,IACR,MAAM;AAAA,IACN,aAAa;AAAA,IACb,UAAU;AAAA,EACZ;AAAA,EACA;AAAA,IACE,aAAa;AAAA,IACb,QAAQ;AAAA,IACR,MAAM;AAAA,IACN,aAAa;AAAA,IACb,UAAU;AAAA,EACZ;AAAA,EAIA;AAAA,IACE,aAAa;AAAA,IACb,QAAQ;AAAA,IACR,MAAM;AAAA,IACN,aAAa;AAAA,IACb,UAAU;AAAA,EACZ;AAAA,EACA;AAAA,IACE,aAAa;AAAA,IACb,QAAQ;AAAA,IACR,MAAM;AAAA,IACN,aAAa;AAAA,IACb,UAAU;AAAA,EACZ;AAAA,EACA;AAAA,IACE,aAAa;AAAA,IACb,QAAQ;AAAA,IACR,MAAM;AAAA,IACN,aAAa;AAAA,IACb,UAAU;AAAA,EACZ;AAAA,EACA;AAAA,IACE,aAAa;AAAA,IACb,QAAQ;AAAA,IACR,MAAM;AAAA,IACN,aAAa;AAAA,IACb,UAAU;AAAA,IACV,eAAe;AAAA,EACjB;AAAA,EACA;AAAA,IACE,aAAa;AAAA,IACb,QAAQ;AAAA,IACR,MAAM;AAAA,IACN,aAAa;AAAA,IACb,UAAU;AAAA,IACV,eAAe;AAAA,EACjB;AAAA,EACA;AAAA,IACE,aAAa;AAAA,IACb,QAAQ;AAAA,IACR,MAAM;AAAA,IACN,aAAa;AAAA,IACb,UAAU;AAAA,IACV,eAAe;AAAA,EACjB;AAAA,EACA;AAAA,IACE,aAAa;AAAA,IACb,QAAQ;AAAA,IACR,MAAM;AAAA,IACN,aAAa;AAAA,IACb,UAAU;AAAA,IACV,aAAa;AAAA,IACb,eAAe;AAAA,EACjB;AAAA,EACA;AAAA,IACE,aAAa;AAAA,IACb,QAAQ;AAAA,IACR,MAAM;AAAA,IACN,aAAa;AAAA,IACb,UAAU;AAAA,IACV,aAAa;AAAA,IACb,eAAe;AAAA,EACjB;AAAA,EACA;AAAA,IACE,aAAa;AAAA,IACb,QAAQ;AAAA,IACR,MAAM;AAAA,IACN,aAAa;AAAA,IACb,UAAU;AAAA,IACV,aAAa;AAAA,IACb,eAAe;AAAA,EACjB;AAAA,EACA;AAAA,IACE,aAAa;AAAA,IACb,QAAQ;AAAA,IACR,MAAM;AAAA,IACN,aAAa;AAAA,IACb,UAAU;AAAA,IACV,aAAa;AAAA,IACb,eAAe;AAAA,EACjB;AAAA,EACA;AAAA,IACE,aAAa;AAAA,IACb,QAAQ;AAAA,IACR,MAAM;AAAA,IACN,aAAa;AAAA,IACb,UAAU;AAAA,IACV,aAAa;AAAA,IACb,eAAe;AAAA,EACjB;AAAA,EACA;AAAA,IACE,aAAa;AAAA,IACb,QAAQ;AAAA,IACR,MAAM;AAAA,IACN,aAAa;AAAA,IACb,UAAU;AAAA,IACV,eAAe;AAAA,EACjB;AAAA,EAEA;AAAA,IACE,aAAa;AAAA,IACb,QAAQ;AAAA,IACR,MAAM;AAAA,IACN,aAAa;AAAA,IACb,UAAU;AAAA,IACV,aAAa;AAAA,IACb,eAAe;AAAA,EACjB;AAAA,EAMA;AAAA,IACE,aAAa;AAAA,IACb,QAAQ;AAAA,IACR,MAAM;AAAA,IACN,aAAa;AAAA,IACb,UAAU;AAAA,EACZ;AAAA,EACA;AAAA,IACE,aAAa;AAAA,IACb,QAAQ;AAAA,IACR,MAAM;AAAA,IACN,aAAa;AAAA,IACb,UAAU;AAAA,EACZ;AAAA,EACA;AAAA,IACE,aAAa;AAAA,IACb,QAAQ;AAAA,IACR,MAAM;AAAA,IACN,aAAa;AAAA,IACb,UAAU;AAAA,EACZ;AAAA,EACA;AAAA,IACE,aAAa;AAAA,IACb,QAAQ;AAAA,IACR,MAAM;AAAA,IACN,aAAa;AAAA,IACb,UAAU;AAAA,EACZ;AAAA,EACA;AAAA,IACE,aAAa;AAAA,IACb,QAAQ;AAAA,IACR,MAAM;AAAA,IACN,aAAa;AAAA,IACb,UAAU;AAAA,IACV,aAAa;AAAA,IACb,eAAe;AAAA,EACjB;AAAA,EACA;AAAA,IACE,aAAa;AAAA,IACb,QAAQ;AAAA,IACR,MAAM;AAAA,IACN,aAAa;AAAA,IACb,UAAU;AAAA,IACV,eAAe;AAAA,EACjB;AAAA,EACA;AAAA,IACE,aAAa;AAAA,IACb,QAAQ;AAAA,IACR,MAAM;AAAA,IACN,aAAa;AAAA,IACb,UAAU;AAAA,IACV,eAAe;AAAA,EACjB;AAAA,EACA;AAAA,IACE,aAAa;AAAA,IACb,QAAQ;AAAA,IACR,MAAM;AAAA,IACN,aAAa;AAAA,IACb,UAAU;AAAA,IACV,eAAe;AAAA,EACjB;AAAA,EACA;AAAA,IAKE,aAAa;AAAA,IACb,QAAQ;AAAA,IACR,MAAM;AAAA,IACN,aAAa;AAAA,IACb,UAAU;AAAA,IACV,eAAe;AAAA,EACjB;AAAA,EACA;AAAA,IACE,aAAa;AAAA,IACb,QAAQ;AAAA,IACR,MAAM;AAAA,IACN,aAAa;AAAA,IACb,UAAU;AAAA,IACV,eAAe;AAAA,EACjB;AAAA,EACA;AAAA,IACE,aAAa;AAAA,IACb,QAAQ;AAAA,IACR,MAAM;AAAA,IACN,aAAa;AAAA,IACb,UAAU;AAAA,IACV,eAAe;AAAA,EACjB;AAAA,EACA;AAAA,IACE,aAAa;AAAA,IACb,QAAQ;AAAA,IACR,MAAM;AAAA,IACN,aAAa;AAAA,IACb,UAAU;AAAA,IACV,aAAa;AAAA,IACb,eAAe;AAAA,EACjB;AAAA,EACA;AAAA,IACE,aAAa;AAAA,IACb,QAAQ;AAAA,IACR,MAAM;AAAA,IACN,aAAa;AAAA,IACb,UAAU;AAAA,IACV,aAAa;AAAA,EACf;AAAA,EACA;AAAA,IACE,aAAa;AAAA,IACb,QAAQ;AAAA,IACR,MAAM;AAAA,IACN,aAAa;AAAA,IACb,UAAU;AAAA,EACZ;AAAA,EACA;AAAA,IACE,aAAa;AAAA,IACb,QAAQ;AAAA,IACR,MAAM;AAAA,IACN,aAAa;AAAA,IACb,UAAU;AAAA,IACV,eAAe;AAAA,EACjB;AAAA,EACA;AAAA,IACE,aAAa;AAAA,IACb,QAAQ;AAAA,IACR,MAAM;AAAA,IACN,aAAa;AAAA,IACb,UAAU;AAAA,EACZ;AAAA,EACA;AAAA,IACE,aAAa;AAAA,IACb,QAAQ;AAAA,IACR,MAAM;AAAA,IACN,aAAa;AAAA,IACb,UAAU;AAAA,EACZ;AAAA,EACA;AAAA,IACE,aAAa;AAAA,IACb,QAAQ;AAAA,IACR,MAAM;AAAA,IACN,aAAa;AAAA,IACb,UAAU;AAAA,EACZ;AAAA,EACA;AAAA,IACE,aAAa;AAAA,IACb,QAAQ;AAAA,IACR,MAAM;AAAA,IACN,aAAa;AAAA,IACb,UAAU;AAAA,EACZ;AAAA,EACA;AAAA,IACE,aAAa;AAAA,IACb,QAAQ;AAAA,IACR,MAAM;AAAA,IACN,aAAa;AAAA,IACb,UAAU;AAAA,IACV,aAAa;AAAA,EACf;AAAA,EACA;AAAA,IACE,aAAa;AAAA,IACb,QAAQ;AAAA,IACR,MAAM;AAAA,IACN,aAAa;AAAA,IACb,UAAU;AAAA,EACZ;AAAA,EACA;AAAA,IACE,aAAa;AAAA,IACb,QAAQ;AAAA,IACR,MAAM;AAAA,IACN,aAAa;AAAA,IACb,UAAU;AAAA,EACZ;AAAA,EACA;AAAA,IACE,aAAa;AAAA,IACb,QAAQ;AAAA,IACR,MAAM;AAAA,IACN,aAAa;AAAA,IACb,UAAU;AAAA,EACZ;AAAA,EACA;AAAA,IACE,aAAa;AAAA,IACb,QAAQ;AAAA,IACR,MAAM;AAAA,IACN,aAAa;AAAA,IACb,UAAU;AAAA,EACZ;AAAA,EACA;AAAA,IACE,aAAa;AAAA,IACb,QAAQ;AAAA,IACR,MAAM;AAAA,IACN,aAAa;AAAA,IACb,UAAU;AAAA,EACZ;AAAA,EACA;AAAA,IACE,aAAa;AAAA,IACb,QAAQ;AAAA,IACR,MAAM;AAAA,IACN,aAAa;AAAA,IACb,UAAU;AAAA,EACZ;AAAA,EACA;AAAA,IACE,aAAa;AAAA,IACb,QAAQ;AAAA,IACR,MAAM;AAAA,IACN,aAAa;AAAA,IACb,UAAU;AAAA,EACZ;AAAA,EACA;AAAA,IACE,aAAa;AAAA,IACb,QAAQ;AAAA,IACR,MAAM;AAAA,IACN,aAAa;AAAA,IACb,UAAU;AAAA,EACZ;AAAA,EACA;AAAA,IACE,aAAa;AAAA,IACb,QAAQ;AAAA,IACR,MAAM;AAAA,IACN,aAAa;AAAA,IACb,UAAU;AAAA,EACZ;AAAA,EACA;AAAA,IACE,aAAa;AAAA,IACb,QAAQ;AAAA,IACR,MAAM;AAAA,IACN,aAAa;AAAA,IACb,UAAU;AAAA,EACZ;AAAA,EAGA;AAAA,IACE,aAAa;AAAA,IACb,QAAQ;AAAA,IACR,MAAM;AAAA,IACN,aAAa;AAAA,IACb,UAAU;AAAA,EACZ;AAAA,EACA;AAAA,IACE,aAAa;AAAA,IACb,QAAQ;AAAA,IACR,MAAM;AAAA,IACN,aAAa;AAAA,IACb,UAAU;AAAA,EACZ;AAAA,EAGA;AAAA,IACE,aAAa;AAAA,IACb,QAAQ;AAAA,IACR,MAAM;AAAA,IACN,aAAa;AAAA,IACb,UAAU;AAAA,EACZ;AAAA,EACA;AAAA,IACE,aAAa;AAAA,IACb,QAAQ;AAAA,IACR,MAAM;AAAA,IACN,aAAa;AAAA,IACb,UAAU;AAAA,EACZ;AAAA,EACA;AAAA,IACE,aAAa;AAAA,IACb,QAAQ;AAAA,IACR,MAAM;AAAA,IACN,aAAa;AAAA,IACb,UAAU;AAAA,IACV,aAAa;AAAA,EACf;AAAA,EACA;AAAA,IACE,aAAa;AAAA,IACb,QAAQ;AAAA,IACR,MAAM;AAAA,IACN,aAAa;AAAA,IACb,UAAU;AAAA,EACZ;AAAA,EAGA;AAAA,IACE,aAAa;AAAA,IACb,QAAQ;AAAA,IACR,MAAM;AAAA,IACN,aAAa;AAAA,IACb,UAAU;AAAA,EACZ;AAAA,EACA;AAAA,IACE,aAAa;AAAA,IACb,QAAQ;AAAA,IACR,MAAM;AAAA,IACN,aAAa;AAAA,IACb,UAAU;AAAA,EACZ;AAAA,EACA;AAAA,IACE,aAAa;AAAA,IACb,QAAQ;AAAA,IACR,MAAM;AAAA,IACN,aAAa;AAAA,IACb,UAAU;AAAA,EACZ;AAAA,EACA;AAAA,IACE,aAAa;AAAA,IACb,QAAQ;AAAA,IACR,MAAM;AAAA,IACN,aAAa;AAAA,IACb,UAAU;AAAA,EACZ;AAAA,EACA;AAAA,IACE,aAAa;AAAA,IACb,QAAQ;AAAA,IACR,MAAM;AAAA,IACN,aAAa;AAAA,IACb,UAAU;AAAA,EACZ;AAAA,EACA;AAAA,IACE,aAAa;AAAA,IACb,QAAQ;AAAA,IACR,MAAM;AAAA,IACN,aAAa;AAAA,IACb,UAAU;AAAA,EACZ;AAAA,EACA;AAAA,IACE,aAAa;AAAA,IACb,QAAQ;AAAA,IACR,MAAM;AAAA,IACN,aAAa;AAAA,IACb,UAAU;AAAA,EACZ;AAAA,EACA;AAAA,IACE,aAAa;AAAA,IACb,QAAQ;AAAA,IACR,MAAM;AAAA,IACN,aAAa;AAAA,IACb,UAAU;AAAA,EACZ;AAAA,EACA;AAAA,IACE,aAAa;AAAA,IACb,QAAQ;AAAA,IACR,MAAM;AAAA,IACN,aAAa;AAAA,IACb,UAAU;AAAA,EACZ;AAAA,EACA;AAAA,IACE,aAAa;AAAA,IACb,QAAQ;AAAA,IACR,MAAM;AAAA,IACN,aAAa;AAAA,IACb,UAAU;AAAA,EACZ;AAAA,EACA;AAAA,IACE,aAAa;AAAA,IACb,QAAQ;AAAA,IACR,MAAM;AAAA,IACN,aAAa;AAAA,IACb,UAAU;AAAA,EACZ;AAAA,EACA;AAAA,IACE,aAAa;AAAA,IACb,QAAQ;AAAA,IACR,MAAM;AAAA,IACN,aAAa;AAAA,IACb,UAAU;AAAA,EACZ;AAAA,EACA;AAAA,IACE,aAAa;AAAA,IACb,QAAQ;AAAA,IACR,MAAM;AAAA,IACN,aAAa;AAAA,IACb,UAAU;AAAA,EACZ;AAAA,EACA;AAAA,IACE,aAAa;AAAA,IACb,QAAQ;AAAA,IACR,MAAM;AAAA,IACN,aAAa;AAAA,IACb,UAAU;AAAA,EACZ;AAAA,EACA;AAAA,IACE,aAAa;AAAA,IACb,QAAQ;AAAA,IACR,MAAM;AAAA,IACN,aAAa;AAAA,IACb,UAAU;AAAA,IACV,eAAe;AAAA,EACjB;AAAA,EACA;AAAA,IACE,aAAa;AAAA,IACb,QAAQ;AAAA,IACR,MAAM;AAAA,IACN,aAAa;AAAA,IACb,UAAU;AAAA,EACZ;AAAA,EACA;AAAA,IACE,aAAa;AAAA,IACb,QAAQ;AAAA,IACR,MAAM;AAAA,IACN,aAAa;AAAA,IACb,UAAU;AAAA,EACZ;AAAA,EAGA;AAAA,IACE,aAAa;AAAA,IACb,QAAQ;AAAA,IACR,MAAM;AAAA,IACN,aAAa;AAAA,IACb,UAAU;AAAA,IACV,eAAe;AAAA,EACjB;AAAA,EACA;AAAA,IACE,aAAa;AAAA,IACb,QAAQ;AAAA,IACR,MAAM;AAAA,IACN,aAAa;AAAA,IACb,UAAU;AAAA,IACV,eAAe;AAAA,EACjB;AAAA,EACA;AAAA,IACE,aAAa;AAAA,IACb,QAAQ;AAAA,IACR,MAAM;AAAA,IACN,aAAa;AAAA,IACb,UAAU;AAAA,EACZ;AAAA,EACA;AAAA,IACE,aAAa;AAAA,IACb,QAAQ;AAAA,IACR,MAAM;AAAA,IACN,aAAa;AAAA,IACb,UAAU;AAAA,EACZ;AAAA,EACA;AAAA,IACE,aAAa;AAAA,IACb,QAAQ;AAAA,IACR,MAAM;AAAA,IACN,aAAa;AAAA,IACb,UAAU;AAAA,EACZ;AAAA,EACA;AAAA,IACE,aAAa;AAAA,IACb,QAAQ;AAAA,IACR,MAAM;AAAA,IACN,aAAa;AAAA,IACb,UAAU;AAAA,EACZ;AAAA,EACA;AAAA,IACE,aAAa;AAAA,IACb,QAAQ;AAAA,IACR,MAAM;AAAA,IACN,aAAa;AAAA,IACb,UAAU;AAAA,EACZ;AAAA,EACA;AAAA,IACE,aAAa;AAAA,IACb,QAAQ;AAAA,IACR,MAAM;AAAA,IACN,aAAa;AAAA,IACb,UAAU;AAAA,EACZ;AAAA,EACA;AAAA,IACE,aAAa;AAAA,IACb,QAAQ;AAAA,IACR,MAAM;AAAA,IACN,aAAa;AAAA,IACb,UAAU;AAAA,EACZ;AAAA,EACA;AAAA,IACE,aAAa;AAAA,IACb,QAAQ;AAAA,IACR,MAAM;AAAA,IACN,aAAa;AAAA,IACb,UAAU;AAAA,EACZ;AAAA,EACA;AAAA,IACE,aAAa;AAAA,IACb,QAAQ;AAAA,IACR,MAAM;AAAA,IACN,aAAa;AAAA,IACb,UAAU;AAAA,EACZ;AAAA,EACA;AAAA,IACE,aAAa;AAAA,IACb,QAAQ;AAAA,IACR,MAAM;AAAA,IACN,aAAa;AAAA,IACb,UAAU;AAAA,IACV,aAAa;AAAA,EACf;AAAA,EACA;AAAA,IACE,aAAa;AAAA,IACb,QAAQ;AAAA,IACR,MAAM;AAAA,IACN,aAAa;AAAA,IACb,UAAU;AAAA,IACV,aAAa;AAAA,EACf;AAAA,EACA;AAAA,IACE,aAAa;AAAA,IACb,QAAQ;AAAA,IACR,MAAM;AAAA,IACN,aAAa;AAAA,IACb,UAAU;AAAA,IACV,aAAa;AAAA,EACf;AAAA,EACA;AAAA,IACE,aAAa;AAAA,IACb,QAAQ;AAAA,IACR,MAAM;AAAA,IACN,aAAa;AAAA,IACb,UAAU;AAAA,IACV,aAAa;AAAA,EACf;AAAA,EACA;AAAA,IACE,aAAa;AAAA,IACb,QAAQ;AAAA,IACR,MAAM;AAAA,IACN,aAAa;AAAA,IACb,UAAU;AAAA,EACZ;AAAA,EACA;AAAA,IACE,aAAa;AAAA,IACb,QAAQ;AAAA,IACR,MAAM;AAAA,IACN,aAAa;AAAA,IACb,UAAU;AAAA,EACZ;AAAA,EACA;AAAA,IACE,aAAa;AAAA,IACb,QAAQ;AAAA,IACR,MAAM;AAAA,IACN,aAAa;AAAA,IACb,UAAU;AAAA,EACZ;AAAA,EACA;AAAA,IACE,aAAa;AAAA,IACb,QAAQ;AAAA,IACR,MAAM;AAAA,IACN,aAAa;AAAA,IACb,UAAU;AAAA,EACZ;AAAA,EACA;AAAA,IACE,aAAa;AAAA,IACb,QAAQ;AAAA,IACR,MAAM;AAAA,IACN,aAAa;AAAA,IACb,UAAU;AAAA,EACZ;AAAA,EACA;AAAA,IACE,aAAa;AAAA,IACb,QAAQ;AAAA,IACR,MAAM;AAAA,IACN,aAAa;AAAA,IACb,UAAU;AAAA,EACZ;AAAA,EACA;AAAA,IACE,aAAa;AAAA,IACb,QAAQ;AAAA,IACR,MAAM;AAAA,IACN,aAAa;AAAA,IACb,UAAU;AAAA,EACZ;AAAA,EACA;AAAA,IACE,aAAa;AAAA,IACb,QAAQ;AAAA,IACR,MAAM;AAAA,IACN,aAAa;AAAA,IACb,UAAU;AAAA,EACZ;AAAA,EACA;AAAA,IACE,aAAa;AAAA,IACb,QAAQ;AAAA,IACR,MAAM;AAAA,IACN,aAAa;AAAA,IACb,UAAU;AAAA,EACZ;AAAA,EACA;AAAA,IACE,aAAa;AAAA,IACb,QAAQ;AAAA,IACR,MAAM;AAAA,IACN,aAAa;AAAA,IACb,UAAU;AAAA,EACZ;AAAA,EACA;AAAA,IACE,aAAa;AAAA,IACb,QAAQ;AAAA,IACR,MAAM;AAAA,IACN,aAAa;AAAA,IACb,UAAU;AAAA,EACZ;AAAA,EACA;AAAA,IACE,aAAa;AAAA,IACb,QAAQ;AAAA,IACR,MAAM;AAAA,IACN,aAAa;AAAA,IACb,UAAU;AAAA,EACZ;AACF;AAQO,SAAS,mBAAmB,CAAC,QAAuC;AAAA,EACzE,WAAW,SAAS,QAAQ;AAAA,IAC1B,IAAI,MAAM,YAAY,CAAC,MAAM,aAAa;AAAA,MACxC,MAAM,IAAI,MACR,2BAA2B,MAAM,UAAU,MAAM,2CACnD;AAAA,IACF;AAAA,IACA,IAAI,MAAM,YAAY,MAAM,WAAW,SAAS,MAAM,gBAAgB,WAAW;AAAA,MAC/E,MAAM,IAAI,MACR,2BAA2B,MAAM,UAAU,MAAM,qCACnD;AAAA,IACF;AAAA,EACF;AAAA;AAGF,oBAAoB,gBAAe;;;AC70B5B,SAAS,gBAAe,CAAC,UAA4B;AAAA,EAC1D,OAAO,SAAS,MAAM,GAAG,EAAE,OAAO,OAAO;AAAA;AAOpC,SAAS,mBAAkB,CAAC,UAAkB,SAA0B;AAAA,EAC7E,MAAM,eAAe,iBAAgB,QAAQ;AAAA,EAC7C,MAAM,kBAAkB,iBAAgB,OAAO;AAAA,EAE/C,IAAI,aAAa,WAAW,gBAAgB,QAAQ;AAAA,IAClD,OAAO;AAAA,EACT;AAAA,EAEA,OAAO,gBAAgB,MAAM,CAAC,gBAAgB,UAAU;AAAA,IACtD,IAAI,eAAe,WAAW,GAAG,GAAG;AAAA,MAClC,OAAO,aAAa,WAAW;AAAA,IACjC;AAAA,IACA,OAAO,mBAAmB,aAAa;AAAA,GACxC;AAAA;AAII,SAAS,mBAAkB,CAAC,UAA0B;AAAA,EAC3D,IAAI,SAAS,SAAS,KAAK,SAAS,SAAS,GAAG,GAAG;AAAA,IACjD,OAAO,SAAS,MAAM,GAAG,EAAE;AAAA,EAC7B;AAAA,EACA,OAAO;AAAA;",
+  "debugId": "417CCDE96E10FD7D64756E2164756E21",
+  "names": []
+}

package/dist/{chunk-z3y5kg1x.js → chunk-6eqsgvxk.js}

@@ -1,7 +1,7 @@
 // @bun
 // src/errors/failure-message.ts
 var messages = new WeakMap;
-function withFailureMessage(error, message) {
+function withFailureMessage2(error, message) {
   messages.set(error, message);
   return error;
 }
@@ -9,6 +9,6 @@ function failureMessage(error) {
   return messages.get(error);
 }
 
-export { withFailureMessage, failureMessage };
+export { withFailureMessage2, failureMessage };
 
-//# debugId=74A0067BB65A9F8664756E2164756E21
+//# debugId=9C0589F2232B669A64756E2164756E21

package/dist/{chunk-z3y5kg1x.js.map → chunk-6eqsgvxk.js.map}

@@ -4,7 +4,7 @@
   "sourcesContent": [
     "const messages = new WeakMap<object, string>()\n\n/**\n * Mark a framework-authored explanation for durable diagnostics. Use schema metadata and fixed\n * text only, never exception messages, input values, provider payloads, or arbitrary object keys.\n * Identity-based storage prevents an external error from opting in with a lookalike property.\n */\nexport function withFailureMessage<T extends Error>(error: T, message: string): T {\n  messages.set(error, message)\n  return error\n}\n\nexport function failureMessage(error: object): string | undefined {\n  return messages.get(error)\n}\n"
   ],
-  "mappings": ";;AAAA,IAAM,WAAW,IAAI;AAOd,SAAS,kBAAmC,CAAC,OAAU,SAAoB;AAAA,EAChF,SAAS,IAAI,OAAO,OAAO;AAAA,EAC3B,OAAO;AAAA;AAGF,SAAS,cAAc,CAAC,OAAmC;AAAA,EAChE,OAAO,SAAS,IAAI,KAAK;AAAA;",
-  "debugId": "74A0067BB65A9F8664756E2164756E21",
+  "mappings": ";;AAAA,IAAM,WAAW,IAAI;AAOd,SAAS,mBAAmC,CAAC,OAAU,SAAoB;AAAA,EAChF,SAAS,IAAI,OAAO,OAAO;AAAA,EAC3B,OAAO;AAAA;AAGF,SAAS,cAAc,CAAC,OAAmC;AAAA,EAChE,OAAO,SAAS,IAAI,KAAK;AAAA;",
+  "debugId": "9C0589F2232B669A64756E2164756E21",
   "names": []
 }

package/dist/{chunk-c85m1hyj.js → chunk-6n69k945.js}

@@ -2,10 +2,10 @@
 import {
   normalizeSchemaValue2,
   coerceSchemaValueToTyped2
-} from "./chunk-hvsb78a1.js";
+} from "./chunk-65pyhyas.js";
 import {
   validateSchemaOrRefValue2
-} from "./chunk-v9xd5wzd.js";
+} from "./chunk-bab05bhg.js";
 import {
   OntologyValidationError2
 } from "./chunk-cqr3acm1.js";

package/dist/{chunk-xfs8x8m9.js → chunk-6p0pastb.js}

@@ -2,17 +2,17 @@
 import {
   createSixbError2,
   toSixbFailure2
-} from "./chunk-8mx7qw3y.js";
+} from "./chunk-zbc929zg.js";
 import {
   reportRunFailure2
-} from "./chunk-fa02jy15.js";
+} from "./chunk-48jezz3j.js";
 import {
   resolveExecutionScopeAuthorization,
   assertAuthorized2
-} from "./chunk-d0bqz29d.js";
+} from "./chunk-yc9ners4.js";
 import {
   SYNC_RUN_FAILURE_CODES2
-} from "./chunk-n33z5bjw.js";
+} from "./chunk-ezne9wc9.js";
 import {
   SyncRunError2
 } from "./chunk-jmfet9r4.js";
@@ -20,7 +20,7 @@ import {
   executionRecordInputFromRuntime,
   ensureExecutionRecord2,
   createPrimitiveExecutionRecord
-} from "./chunk-9dmt152s.js";
+} from "./chunk-hyesv9dv.js";
 
 // src/syncs/errors.ts
 class SyncValidationError2 extends Error {