@sixb/core 0.1.6 → 0.1.7

package/dist/agents/streams.js

@@ -13,6 +13,7 @@ import {
   agentRunControlStreamId,
   agentRunFinishedEvent,
   agentRunStreamDefinition,
+  agentRunStreamEventBase,
   agentRunStreamId,
   agentRunStreamIdempotencyKey,
   isAgentRunActivityEvent,
@@ -21,10 +22,10 @@ import {
   publishAgentRunCancel,
   publishAgentRunFinished,
   subscribeAgentRunCancel
-} from "../chunk-dm72y8wt.js";
-import"../chunk-t0jjkep3.js";
-import"../chunk-0172wgm9.js";
-import"../chunk-t8t39h7v.js";
+} from "../chunk-7y0f6rf1.js";
+import"../chunk-d8qkxt2v.js";
+import"../chunk-2xns679x.js";
+import"../chunk-n6jxh8sw.js";
 import"../chunk-y64skrwp.js";
 export {
   subscribeAgentRunCancel,
@@ -35,6 +36,7 @@ export {
   isAgentRunActivityEvent,
   agentRunStreamIdempotencyKey,
   agentRunStreamId,
+  agentRunStreamEventBase,
   agentRunStreamDefinition,
   agentRunFinishedEvent,
   agentRunControlStreamId,
@@ -50,4 +52,4 @@ export {
   AGENT_ACTIVITY_STREAM_ID
 };
 
-//# debugId=37D1CCE42757910764756E2164756E21
+//# debugId=023A2403FDCC318264756E2164756E21

package/dist/agents/streams.js.map

@@ -4,6 +4,6 @@
   "sourcesContent": [
   ],
   "mappings": "",
-  "debugId": "37D1CCE42757910764756E2164756E21",
+  "debugId": "023A2403FDCC318264756E2164756E21",
   "names": []
 }

package/dist/agents/tool-catalog.d.ts

@@ -0,0 +1,9 @@
+import type { AgentToolDefinition } from "./types";
+/** Immutable catalog of project tools registered with a Sixb host. */
+export interface AgentToolCatalog {
+    list(): readonly AgentToolDefinition[];
+    getByName(name: string): AgentToolDefinition | null;
+}
+/** Validate, normalize, and index the tools supplied through `createSixb({ tools })`. */
+export declare function createAgentToolCatalog(definitions: readonly AgentToolDefinition[] | undefined): AgentToolCatalog;
+//# sourceMappingURL=tool-catalog.d.ts.map

package/dist/agents/tool-catalog.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tool-catalog.d.ts","sourceRoot":"","sources":["../../src/agents/tool-catalog.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,SAAS,CAAA;AAElD,sEAAsE;AACtE,MAAM,WAAW,gBAAgB;IAC/B,IAAI,IAAI,SAAS,mBAAmB,EAAE,CAAA;IACtC,SAAS,CAAC,IAAI,EAAE,MAAM,GAAG,mBAAmB,GAAG,IAAI,CAAA;CACpD;AAED,yFAAyF;AACzF,wBAAgB,sBAAsB,CACpC,WAAW,EAAE,SAAS,mBAAmB,EAAE,GAAG,SAAS,GACtD,gBAAgB,CAQlB"}

package/dist/agents/tool-definition.d.ts

@@ -6,4 +6,5 @@ export declare function createAgentToolDefinition<const TName extends string, co
     readonly handler: AgentToolHandler<InferAgentToolInputSchema<TInput>>;
 }): AgentToolDefinition<TName, TInput>;
 export declare function toolsFromDefinitions(agentId: string, tools: readonly AgentToolDefinition[] | undefined): readonly AgentToolDefinition[];
+export declare function toolsFromProjectConfig(tools: readonly AgentToolDefinition[] | undefined): readonly AgentToolDefinition[];
 //# sourceMappingURL=tool-definition.d.ts.map

package/dist/agents/tool-definition.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"tool-definition.d.ts","sourceRoot":"","sources":["../../src/agents/tool-definition.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EACV,mBAAmB,EACnB,gBAAgB,EAChB,oBAAoB,EACpB,yBAAyB,EAC1B,MAAM,SAAS,CAAA;AAWhB,wBAAgB,yBAAyB,CACvC,KAAK,CAAC,KAAK,SAAS,MAAM,EAC1B,KAAK,CAAC,MAAM,SAAS,oBAAoB,EACzC,UAAU,EAAE;IACZ,QAAQ,CAAC,IAAI,EAAE,KAAK,CAAA;IACpB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAA;IAC5B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,OAAO,EAAE,gBAAgB,CAAC,yBAAyB,CAAC,MAAM,CAAC,CAAC,CAAA;CACtE,GAAG,mBAAmB,CAAC,KAAK,EAAE,MAAM,CAAC,CAwCrC;AAED,wBAAgB,oBAAoB,CAClC,OAAO,EAAE,MAAM,EACf,KAAK,EAAE,SAAS,mBAAmB,EAAE,GAAG,SAAS,GAChD,SAAS,mBAAmB,EAAE,CAiBhC"}
+{"version":3,"file":"tool-definition.d.ts","sourceRoot":"","sources":["../../src/agents/tool-definition.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EACV,mBAAmB,EACnB,gBAAgB,EAChB,oBAAoB,EACpB,yBAAyB,EAC1B,MAAM,SAAS,CAAA;AAYhB,wBAAgB,yBAAyB,CACvC,KAAK,CAAC,KAAK,SAAS,MAAM,EAC1B,KAAK,CAAC,MAAM,SAAS,oBAAoB,EACzC,UAAU,EAAE;IACZ,QAAQ,CAAC,IAAI,EAAE,KAAK,CAAA;IACpB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAA;IAC5B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,OAAO,EAAE,gBAAgB,CAAC,yBAAyB,CAAC,MAAM,CAAC,CAAC,CAAA;CACtE,GAAG,mBAAmB,CAAC,KAAK,EAAE,MAAM,CAAC,CAwCrC;AAED,wBAAgB,oBAAoB,CAClC,OAAO,EAAE,MAAM,EACf,KAAK,EAAE,SAAS,mBAAmB,EAAE,GAAG,SAAS,GAChD,SAAS,mBAAmB,EAAE,CAahC;AAED,wBAAgB,sBAAsB,CACpC,KAAK,EAAE,SAAS,mBAAmB,EAAE,GAAG,SAAS,GAChD,SAAS,mBAAmB,EAAE,CAYhC"}

package/dist/agents/types.d.ts

@@ -1,35 +1,29 @@
-import type { LanguageModelV4, LanguageModelV4CallOptions } from "@ai-sdk/provider";
 import type { BlobBody, FileRef } from "../blob-storage";
 import type { ConnectorRuntime } from "../connectors";
 import type { JsonPrimitive, JsonValue, ReadonlyJsonValue } from "../json";
 import type { Logger } from "../logging";
+import { type LanguageModelRef, type ModelReasoning } from "../models";
 import type { InferSchema } from "../ontology/inference";
 import type { Schema } from "../ontology/types";
-import type { GroupDefinition } from "../security";
 export type { AgentContextEntryInput, AgentContextInput, AgentContextOrigin, AgentContextPart, } from "./context";
-export type AgentReasoningLevel = NonNullable<LanguageModelV4CallOptions["reasoning"]>;
-export declare const AGENT_REASONING_LEVELS: readonly ["provider-default", "none", "minimal", "low", "medium", "high", "xhigh"];
-export interface AgentContextConfig {
-    /** Override the provider context-window size inferred by the agent worker. */
-    readonly windowTokens?: number;
-    /** Tokens reserved for the next response and compaction work. */
-    readonly reserveTokens?: number;
-    /** Approximate recent-message budget retained verbatim after compaction. */
-    readonly keepRecentTokens?: number;
+/** Public capability reference used by security grants such as `can.run(agent)`. */
+export interface AgentReference {
+    readonly kind: "agent";
+    readonly usage: AgentUsageReference;
 }
-/**
- * Loop / stop controls for an agent run.
- *
- * Consumed by the agent worker when it executes a run.
- */
-export interface AgentLoopConfig {
-    readonly stopWhen?: {
-        readonly maxSteps?: number;
-    };
-    readonly context?: AgentContextConfig;
-    /** Automatic provider prompt caching. Defaults to `auto`; use `off` to opt out. */
-    readonly caching?: "auto" | "off";
+/** Project-wide AI accounting and limit capability, independent of permission to run the Agent. */
+export interface AgentUsageReference {
+    readonly kind: "aiUsage";
+}
+/** Public metadata for the project's conversational Agent. */
+export interface AgentDescriptor {
+    readonly name: string;
+    readonly model: LanguageModelRef;
 }
+export type AgentReasoning = ModelReasoning;
+/** @deprecated Use {@link AgentReasoning}. */
+export type AgentReasoningLevel = AgentReasoning;
+export declare const AGENT_REASONING_LEVELS: readonly ["provider-default", "none", "minimal", "low", "medium", "high", "xhigh", "max"];
 type Simplify<T> = {
     [K in keyof T]: T[K];
 } & {};
@@ -42,12 +36,21 @@ export type AgentToolInputSchema = Readonly<Record<string, Schema>>;
 export type InferAgentToolInputSchema<TInput extends AgentToolInputSchema> = string extends keyof TInput ? Readonly<Record<string, unknown>> : Simplify<{
     readonly [K in keyof TInput]: JsonifyAgentToolInput<InferSchema<TInput[K]>>;
 }>;
-/** Identifies the agent execution that invoked a tool. */
-export interface AgentToolRunInfo {
+/** Identifies the conversational, workflow, or child Agent execution that invoked a tool. */
+export type AgentToolRunInfo = {
+    readonly kind: "conversation";
     readonly id: string;
-    readonly agentId: string;
-    readonly threadId?: string;
-}
+    readonly threadId: string;
+} | {
+    readonly kind: "subagent";
+    readonly id: string;
+    readonly parentRunId: string;
+} | {
+    readonly kind: "workflow";
+    readonly id: string;
+    readonly workflowId: string;
+    readonly stepId: string;
+};
 /** Input accepted by the run-scoped artifact publisher exposed to agent tools. */
 export interface AgentToolArtifactPutInput {
     readonly body: BlobBody;
@@ -120,44 +123,4 @@ export interface AgentToolInputBuilder<TName extends string> {
 export interface AgentToolDescriptionBuilder<TName extends string> {
     description(description: string): AgentToolInputBuilder<TName>;
 }
-/**
- * Declarative config accepted by {@link defineAgent}.
- *
- * Every field is a static value. `instructions` is a plain string; widening it to
- * `string | (ctx) => string` later would be backwards-compatible.
- */
-export interface DefineAgentConfig {
-    readonly name: string;
-    readonly description?: string;
-    readonly model: LanguageModelV4;
-    readonly reasoning?: AgentReasoningLevel;
-    readonly providerOptions?: LanguageModelV4CallOptions["providerOptions"];
-    readonly instructions: string;
-    readonly groups?: readonly GroupDefinition[];
-    /** Reusable tools this agent is explicitly allowed to call. */
-    readonly tools?: readonly AgentToolDefinition[];
-    readonly loop?: AgentLoopConfig;
-}
-/**
- * Agent definition registered with Sixb.
- *
- * Definitions are safe to export from `agents/` modules; the runtime loads and
- * registers them. The agent worker runs them as streaming turns. The `model` is an
- * AI SDK language model instance and is therefore not serialisable — the worker
- * resolves a definition from its own discovery rather than over the wire.
- */
-export interface AgentDefinition<TId extends string = string> {
-    readonly kind: "agent";
-    readonly id: TId;
-    readonly name: string;
-    readonly description?: string;
-    readonly model: LanguageModelV4;
-    readonly reasoning?: AgentReasoningLevel;
-    readonly providerOptions?: LanguageModelV4CallOptions["providerOptions"];
-    readonly instructions: string;
-    readonly groupIds: readonly string[];
-    /** Selected tool definitions, normalized to an empty array when omitted. */
-    readonly tools: readonly AgentToolDefinition[];
-    readonly loop?: AgentLoopConfig;
-}
 //# sourceMappingURL=types.d.ts.map

package/dist/agents/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/agents/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,0BAA0B,EAAE,MAAM,kBAAkB,CAAA;AACnF,OAAO,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,iBAAiB,CAAA;AACxD,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAA;AACrD,OAAO,KAAK,EAAE,aAAa,EAAE,SAAS,EAAE,iBAAiB,EAAE,MAAM,SAAS,CAAA;AAC1E,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,YAAY,CAAA;AACxC,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAA;AACxD,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAA;AAC/C,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,aAAa,CAAA;AAElD,YAAY,EACV,sBAAsB,EACtB,iBAAiB,EACjB,kBAAkB,EAClB,gBAAgB,GACjB,MAAM,WAAW,CAAA;AAElB,MAAM,MAAM,mBAAmB,GAAG,WAAW,CAAC,0BAA0B,CAAC,WAAW,CAAC,CAAC,CAAA;AAEtF,eAAO,MAAM,sBAAsB,oFAQgB,CAAA;AAEnD,MAAM,WAAW,kBAAkB;IACjC,8EAA8E;IAC9E,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAA;IAC9B,iEAAiE;IACjE,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAA;IAC/B,4EAA4E;IAC5E,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAA;CACnC;AAED;;;;GAIG;AACH,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,QAAQ,CAAC,EAAE;QAClB,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;KAC3B,CAAA;IACD,QAAQ,CAAC,OAAO,CAAC,EAAE,kBAAkB,CAAA;IACrC,mFAAmF;IACnF,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,KAAK,CAAA;CAClC;AAED,KAAK,QAAQ,CAAC,CAAC,IAAI;KAAG,CAAC,IAAI,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;CAAE,GAAG,EAAE,CAAA;AAChD,KAAK,qBAAqB,CAAC,CAAC,IAAI,OAAO,SAAS,CAAC,GAC7C,iBAAiB,GACjB,CAAC,SAAS,IAAI,GACZ,MAAM,GACN,CAAC,SAAS,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,GAChC,SAAS,qBAAqB,CAAC,KAAK,CAAC,EAAE,GACvC,CAAC,SAAS,aAAa,GACrB,CAAC,GACD,CAAC,SAAS,MAAM,GACd;IAAE,QAAQ,EAAE,CAAC,IAAI,MAAM,CAAC,GAAG,qBAAqB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;CAAE,GACxD,KAAK,CAAA;AAEjB,oEAAoE;AACpE,MAAM,MAAM,oBAAoB,GAAG,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAA;AAEnE,mEAAmE;AACnE,MAAM,MAAM,yBAAyB,CAAC,MAAM,SAAS,oBAAoB,IACvE,MAAM,SAAS,MAAM,MAAM,GACvB,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,GACjC,QAAQ,CAAC;IACP,QAAQ,EAAE,CAAC,IAAI,MAAM,MAAM,GAAG,qBAAqB,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;CAC5E,CAAC,CAAA;AAER,0DAA0D;AAC1D,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;IACnB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;IACxB,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;CAC3B;AAED,kFAAkF;AAClF,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAA;IACvB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAA;CAC5B;AAED,sEAAsE;AACtE,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAA;IACzB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAA;CAC7B;AAED,2EAA2E;AAC3E,MAAM,WAAW,kBAAkB;IACjC,GAAG,CAAC,KAAK,EAAE,yBAAyB,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAAA;CAClE;AAED,MAAM,MAAM,oBAAoB,GAAG;IACjC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;CACtB,CAAA;AAED,MAAM,MAAM,oBAAoB,GAAG;IACjC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAA;CAC1B,CAAA;AAED,kEAAkE;AAClE,MAAM,MAAM,gBAAgB,GAAG,oBAAoB,GAAG,oBAAoB,CAAA;AAE1E;;;GAGG;AACH,MAAM,MAAM,eAAe,GAAG;IAC5B,QAAQ,CAAC,IAAI,EAAE,iBAAiB,CAAA;IAChC,QAAQ,CAAC,OAAO,EAAE,SAAS,gBAAgB,EAAE,CAAA;CAC9C,CAAA;AAED,sEAAsE;AACtE,MAAM,WAAW,mBAAmB,CAClC,MAAM,SAAS,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,GAAG,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAEpF,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAA;IAC5B,QAAQ,CAAC,GAAG,EAAE,gBAAgB,CAAA;IAC9B,QAAQ,CAAC,SAAS,EAAE,gBAAgB,CAAA;IACpC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,SAAS,EAAE,kBAAkB,CAAA;CACvC;AAED,oFAAoF;AACpF,MAAM,MAAM,sBAAsB,GAC9B,iBAAiB,GACjB,eAAe,GACf,OAAO,CAAC,iBAAiB,GAAG,eAAe,CAAC,CAAA;AAEhD,MAAM,MAAM,gBAAgB,CAAC,MAAM,SAAS,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,IAAI,CAC/E,OAAO,EAAE,mBAAmB,CAAC,MAAM,CAAC,KACjC,sBAAsB,CAAA;AAE3B;;;GAGG;AACH,KAAK,sBAAsB,CAAC,MAAM,SAAS,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,IAAI;IAC9E,cAAc,CAAC,OAAO,EAAE,mBAAmB,CAAC,MAAM,CAAC,GAAG,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC,CAAA;CACrF,CAAC,gBAAgB,CAAC,CAAA;AAEnB,+EAA+E;AAC/E,MAAM,WAAW,mBAAmB,CAClC,KAAK,SAAS,MAAM,GAAG,MAAM,EAC7B,MAAM,SAAS,oBAAoB,GAAG,oBAAoB;IAE1D,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAA;IAC1B,QAAQ,CAAC,IAAI,EAAE,KAAK,CAAA;IACpB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAA;IAC5B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,OAAO,EAAE,sBAAsB,CAAC,yBAAyB,CAAC,MAAM,CAAC,CAAC,CAAA;CAC5E;AAED,+DAA+D;AAC/D,MAAM,MAAM,mBAAmB,CAAC,KAAK,SAAS,mBAAmB,IAAI,yBAAyB,CAC5F,KAAK,CAAC,OAAO,CAAC,CACf,CAAA;AAED,MAAM,WAAW,mBAAmB,CAAC,KAAK,SAAS,MAAM,EAAE,MAAM,SAAS,oBAAoB;IAC5F,GAAG,CACD,OAAO,EAAE,gBAAgB,CAAC,yBAAyB,CAAC,MAAM,CAAC,CAAC,GAC3D,mBAAmB,CAAC,KAAK,EAAE,MAAM,CAAC,CAAA;CACtC;AAED,MAAM,WAAW,qBAAqB,CAAC,KAAK,SAAS,MAAM;IACzD,KAAK,CAAC,KAAK,CAAC,MAAM,SAAS,oBAAoB,EAC7C,KAAK,EAAE,MAAM,GACZ,mBAAmB,CAAC,KAAK,EAAE,MAAM,CAAC,CAAA;CACtC;AAED,MAAM,WAAW,2BAA2B,CAAC,KAAK,SAAS,MAAM;IAC/D,WAAW,CAAC,WAAW,EAAE,MAAM,GAAG,qBAAqB,CAAC,KAAK,CAAC,CAAA;CAC/D;AAED;;;;;GAKG;AACH,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAA;IAC7B,QAAQ,CAAC,KAAK,EAAE,eAAe,CAAA;IAC/B,QAAQ,CAAC,SAAS,CAAC,EAAE,mBAAmB,CAAA;IACxC,QAAQ,CAAC,eAAe,CAAC,EAAE,0BAA0B,CAAC,iBAAiB,CAAC,CAAA;IACxE,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAA;IAC7B,QAAQ,CAAC,MAAM,CAAC,EAAE,SAAS,eAAe,EAAE,CAAA;IAC5C,+DAA+D;IAC/D,QAAQ,CAAC,KAAK,CAAC,EAAE,SAAS,mBAAmB,EAAE,CAAA;IAC/C,QAAQ,CAAC,IAAI,CAAC,EAAE,eAAe,CAAA;CAChC;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,eAAe,CAAC,GAAG,SAAS,MAAM,GAAG,MAAM;IAC1D,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAA;IACtB,QAAQ,CAAC,EAAE,EAAE,GAAG,CAAA;IAChB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAA;IAC7B,QAAQ,CAAC,KAAK,EAAE,eAAe,CAAA;IAC/B,QAAQ,CAAC,SAAS,CAAC,EAAE,mBAAmB,CAAA;IACxC,QAAQ,CAAC,eAAe,CAAC,EAAE,0BAA0B,CAAC,iBAAiB,CAAC,CAAA;IACxE,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAA;IAC7B,QAAQ,CAAC,QAAQ,EAAE,SAAS,MAAM,EAAE,CAAA;IACpC,4EAA4E;IAC5E,QAAQ,CAAC,KAAK,EAAE,SAAS,mBAAmB,EAAE,CAAA;IAC9C,QAAQ,CAAC,IAAI,CAAC,EAAE,eAAe,CAAA;CAChC"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/agents/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,iBAAiB,CAAA;AACxD,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAA;AACrD,OAAO,KAAK,EAAE,aAAa,EAAE,SAAS,EAAE,iBAAiB,EAAE,MAAM,SAAS,CAAA;AAC1E,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,YAAY,CAAA;AACxC,OAAO,EAAE,KAAK,gBAAgB,EAA0B,KAAK,cAAc,EAAE,MAAM,WAAW,CAAA;AAC9F,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAA;AACxD,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAA;AAE/C,YAAY,EACV,sBAAsB,EACtB,iBAAiB,EACjB,kBAAkB,EAClB,gBAAgB,GACjB,MAAM,WAAW,CAAA;AAElB,oFAAoF;AACpF,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAA;IACtB,QAAQ,CAAC,KAAK,EAAE,mBAAmB,CAAA;CACpC;AAED,mGAAmG;AACnG,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAA;CACzB;AAED,8DAA8D;AAC9D,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,KAAK,EAAE,gBAAgB,CAAA;CACjC;AAED,MAAM,MAAM,cAAc,GAAG,cAAc,CAAA;AAE3C,8CAA8C;AAC9C,MAAM,MAAM,mBAAmB,GAAG,cAAc,CAAA;AAEhD,eAAO,MAAM,sBAAsB,2FAAyB,CAAA;AAE5D,KAAK,QAAQ,CAAC,CAAC,IAAI;KAAG,CAAC,IAAI,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;CAAE,GAAG,EAAE,CAAA;AAChD,KAAK,qBAAqB,CAAC,CAAC,IAAI,OAAO,SAAS,CAAC,GAC7C,iBAAiB,GACjB,CAAC,SAAS,IAAI,GACZ,MAAM,GACN,CAAC,SAAS,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,GAChC,SAAS,qBAAqB,CAAC,KAAK,CAAC,EAAE,GACvC,CAAC,SAAS,aAAa,GACrB,CAAC,GACD,CAAC,SAAS,MAAM,GACd;IAAE,QAAQ,EAAE,CAAC,IAAI,MAAM,CAAC,GAAG,qBAAqB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;CAAE,GACxD,KAAK,CAAA;AAEjB,oEAAoE;AACpE,MAAM,MAAM,oBAAoB,GAAG,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAA;AAEnE,mEAAmE;AACnE,MAAM,MAAM,yBAAyB,CAAC,MAAM,SAAS,oBAAoB,IACvE,MAAM,SAAS,MAAM,MAAM,GACvB,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,GACjC,QAAQ,CAAC;IACP,QAAQ,EAAE,CAAC,IAAI,MAAM,MAAM,GAAG,qBAAqB,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;CAC5E,CAAC,CAAA;AAER,6FAA6F;AAC7F,MAAM,MAAM,gBAAgB,GACxB;IACE,QAAQ,CAAC,IAAI,EAAE,cAAc,CAAA;IAC7B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;IACnB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;CAC1B,GACD;IACE,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAA;IACzB,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;IACnB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAA;CAC7B,GACD;IACE,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAA;IACzB,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;IACnB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;CACxB,CAAA;AAEL,kFAAkF;AAClF,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAA;IACvB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAA;CAC5B;AAED,sEAAsE;AACtE,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAA;IACzB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAA;CAC7B;AAED,2EAA2E;AAC3E,MAAM,WAAW,kBAAkB;IACjC,GAAG,CAAC,KAAK,EAAE,yBAAyB,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAAA;CAClE;AAED,MAAM,MAAM,oBAAoB,GAAG;IACjC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;CACtB,CAAA;AAED,MAAM,MAAM,oBAAoB,GAAG;IACjC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAA;CAC1B,CAAA;AAED,kEAAkE;AAClE,MAAM,MAAM,gBAAgB,GAAG,oBAAoB,GAAG,oBAAoB,CAAA;AAE1E;;;GAGG;AACH,MAAM,MAAM,eAAe,GAAG;IAC5B,QAAQ,CAAC,IAAI,EAAE,iBAAiB,CAAA;IAChC,QAAQ,CAAC,OAAO,EAAE,SAAS,gBAAgB,EAAE,CAAA;CAC9C,CAAA;AAED,sEAAsE;AACtE,MAAM,WAAW,mBAAmB,CAClC,MAAM,SAAS,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,GAAG,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAEpF,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAA;IAC5B,QAAQ,CAAC,GAAG,EAAE,gBAAgB,CAAA;IAC9B,QAAQ,CAAC,SAAS,EAAE,gBAAgB,CAAA;IACpC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,SAAS,EAAE,kBAAkB,CAAA;CACvC;AAED,oFAAoF;AACpF,MAAM,MAAM,sBAAsB,GAC9B,iBAAiB,GACjB,eAAe,GACf,OAAO,CAAC,iBAAiB,GAAG,eAAe,CAAC,CAAA;AAEhD,MAAM,MAAM,gBAAgB,CAAC,MAAM,SAAS,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,IAAI,CAC/E,OAAO,EAAE,mBAAmB,CAAC,MAAM,CAAC,KACjC,sBAAsB,CAAA;AAE3B;;;GAGG;AACH,KAAK,sBAAsB,CAAC,MAAM,SAAS,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,IAAI;IAC9E,cAAc,CAAC,OAAO,EAAE,mBAAmB,CAAC,MAAM,CAAC,GAAG,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC,CAAA;CACrF,CAAC,gBAAgB,CAAC,CAAA;AAEnB,+EAA+E;AAC/E,MAAM,WAAW,mBAAmB,CAClC,KAAK,SAAS,MAAM,GAAG,MAAM,EAC7B,MAAM,SAAS,oBAAoB,GAAG,oBAAoB;IAE1D,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAA;IAC1B,QAAQ,CAAC,IAAI,EAAE,KAAK,CAAA;IACpB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAA;IAC5B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,OAAO,EAAE,sBAAsB,CAAC,yBAAyB,CAAC,MAAM,CAAC,CAAC,CAAA;CAC5E;AAED,+DAA+D;AAC/D,MAAM,MAAM,mBAAmB,CAAC,KAAK,SAAS,mBAAmB,IAAI,yBAAyB,CAC5F,KAAK,CAAC,OAAO,CAAC,CACf,CAAA;AAED,MAAM,WAAW,mBAAmB,CAAC,KAAK,SAAS,MAAM,EAAE,MAAM,SAAS,oBAAoB;IAC5F,GAAG,CACD,OAAO,EAAE,gBAAgB,CAAC,yBAAyB,CAAC,MAAM,CAAC,CAAC,GAC3D,mBAAmB,CAAC,KAAK,EAAE,MAAM,CAAC,CAAA;CACtC;AAED,MAAM,WAAW,qBAAqB,CAAC,KAAK,SAAS,MAAM;IACzD,KAAK,CAAC,KAAK,CAAC,MAAM,SAAS,oBAAoB,EAC7C,KAAK,EAAE,MAAM,GACZ,mBAAmB,CAAC,KAAK,EAAE,MAAM,CAAC,CAAA;CACtC;AAED,MAAM,WAAW,2BAA2B,CAAC,KAAK,SAAS,MAAM;IAC/D,WAAW,CAAC,WAAW,EAAE,MAAM,GAAG,qBAAqB,CAAC,KAAK,CAAC,CAAA;CAC/D"}

package/dist/agents/validation.d.ts

@@ -1,10 +1,9 @@
 import { type JsonValue } from "../json";
 import { type ValueType } from "../ontology";
-import type { GroupDefinition, SecurityDefinitionCatalog } from "../security";
-import { type AgentDefinition, type AgentLoopConfig, type AgentReasoningLevel, type AgentToolDefinition, type AgentToolInputSchema, type DefineAgentConfig } from "./types";
-export declare const AGENT_RESERVED_TOOL_NAMES: readonly ["bash", "read", "view_file"];
+import type { GroupDefinition } from "../security";
+import type { AgentToolDefinition, AgentToolInputSchema } from "./types";
+export declare const AGENT_RESERVED_TOOL_NAMES: readonly ["bash", "read", "view_file", "spawn_agent", "wait_agent"];
 export declare function assertNonEmpty(value: string, field: string): void;
-export declare function isAgentDefinition(value: unknown): value is AgentDefinition;
 export declare function isAgentToolDefinition(value: unknown): value is AgentToolDefinition;
 export declare function assertValidAgentToolName(name: unknown): asserts name is string;
 export declare function assertValidAgentToolDescription(name: string, description: unknown): void;
@@ -12,12 +11,7 @@ export declare function assertValidAgentToolInput(name: string, input: unknown):
 export declare function validateAndSnapshotAgentToolInput<TInput extends AgentToolInputSchema>(toolName: string, input: TInput): TInput;
 /** Validate model input against a tool schema, normalize it to JSON, and lock the snapshot. */
 export declare function validateAndNormalizeAgentToolInput(toolName: string, shape: AgentToolInputSchema, value: unknown, valueTypesById: ReadonlyMap<string, ValueType>): Record<string, JsonValue>;
-/** Revalidate and lock tool definitions supplied directly to the runtime. */
-export declare function validateAgentToolsAtStartup(agents: readonly AgentDefinition[]): void;
-export declare function resolveAgentLoopConfig(loop: AgentLoopConfig | undefined): AgentLoopConfig | undefined;
-export declare function assertValidReasoningLevel(reasoning: AgentReasoningLevel | undefined): void;
-export declare function assertValidProviderOptions(providerOptions: DefineAgentConfig["providerOptions"]): void;
 export declare function groupIdsFromDefinitions(agentId: string, groups: readonly GroupDefinition[] | undefined): readonly string[];
-export declare function validateAgentGroupReferences(agents: readonly AgentDefinition[], security: SecurityDefinitionCatalog): void;
 export declare function assertValidAgentToolDefinitions(agentId: string, tools: readonly AgentToolDefinition[]): void;
+export declare function assertValidProjectAgentToolDefinitions(tools: readonly AgentToolDefinition[]): void;
 //# sourceMappingURL=validation.d.ts.map

package/dist/agents/validation.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"validation.d.ts","sourceRoot":"","sources":["../../src/agents/validation.ts"],"names":[],"mappings":"AAAA,OAAO,EAA4C,KAAK,SAAS,EAAE,MAAM,SAAS,CAAA;AAClF,OAAO,EAIL,KAAK,SAAS,EAEf,MAAM,aAAa,CAAA;AACpB,OAAO,KAAK,EAAE,eAAe,EAAE,yBAAyB,EAAE,MAAM,aAAa,CAAA;AAE7E,OAAO,EAGL,KAAK,eAAe,EACpB,KAAK,eAAe,EACpB,KAAK,mBAAmB,EACxB,KAAK,mBAAmB,EACxB,KAAK,oBAAoB,EACzB,KAAK,iBAAiB,EACvB,MAAM,SAAS,CAAA;AAehB,eAAO,MAAM,yBAAyB,wCAAyC,CAAA;AAE/E,wBAAgB,cAAc,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI,CAIjE;AAED,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,eAAe,CAY1E;AAED,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,mBAAmB,CASlF;AAED,wBAAgB,wBAAwB,CAAC,IAAI,EAAE,OAAO,GAAG,OAAO,CAAC,IAAI,IAAI,MAAM,CAS9E;AAED,wBAAgB,+BAA+B,CAAC,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,OAAO,GAAG,IAAI,CAIxF;AAED,wBAAgB,yBAAyB,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,GAAG,IAAI,CAa5E;AAED,wBAAgB,iCAAiC,CAAC,MAAM,SAAS,oBAAoB,EACnF,QAAQ,EAAE,MAAM,EAChB,KAAK,EAAE,MAAM,GACZ,MAAM,CASR;AAED,+FAA+F;AAC/F,wBAAgB,kCAAkC,CAChD,QAAQ,EAAE,MAAM,EAChB,KAAK,EAAE,oBAAoB,EAC3B,KAAK,EAAE,OAAO,EACd,cAAc,EAAE,WAAW,CAAC,MAAM,EAAE,SAAS,CAAC,GAC7C,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,CAwB3B;AAED,6EAA6E;AAC7E,wBAAgB,2BAA2B,CAAC,MAAM,EAAE,SAAS,eAAe,EAAE,GAAG,IAAI,CAcpF;AAED,wBAAgB,sBAAsB,CACpC,IAAI,EAAE,eAAe,GAAG,SAAS,GAChC,eAAe,GAAG,SAAS,CAqB7B;AAsBD,wBAAgB,yBAAyB,CAAC,SAAS,EAAE,mBAAmB,GAAG,SAAS,GAAG,IAAI,CAS1F;AAED,wBAAgB,0BAA0B,CACxC,eAAe,EAAE,iBAAiB,CAAC,iBAAiB,CAAC,GACpD,IAAI,CAyBN;AAED,wBAAgB,uBAAuB,CACrC,OAAO,EAAE,MAAM,EACf,MAAM,EAAE,SAAS,eAAe,EAAE,GAAG,SAAS,GAC7C,SAAS,MAAM,EAAE,CAcnB;AAED,wBAAgB,4BAA4B,CAC1C,MAAM,EAAE,SAAS,eAAe,EAAE,EAClC,QAAQ,EAAE,yBAAyB,GAClC,IAAI,CAWN;AA6HD,wBAAgB,+BAA+B,CAC7C,OAAO,EAAE,MAAM,EACf,KAAK,EAAE,SAAS,mBAAmB,EAAE,GACpC,IAAI,CAoBN"}
+{"version":3,"file":"validation.d.ts","sourceRoot":"","sources":["../../src/agents/validation.ts"],"names":[],"mappings":"AAAA,OAAO,EAA4C,KAAK,SAAS,EAAE,MAAM,SAAS,CAAA;AAClF,OAAO,EAIL,KAAK,SAAS,EAEf,MAAM,aAAa,CAAA;AACpB,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,aAAa,CAAA;AAElD,OAAO,KAAK,EAAE,mBAAmB,EAAE,oBAAoB,EAAE,MAAM,SAAS,CAAA;AAexE,eAAO,MAAM,yBAAyB,qEAM5B,CAAA;AAEV,wBAAgB,cAAc,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI,CAIjE;AAED,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,mBAAmB,CASlF;AAED,wBAAgB,wBAAwB,CAAC,IAAI,EAAE,OAAO,GAAG,OAAO,CAAC,IAAI,IAAI,MAAM,CAS9E;AAED,wBAAgB,+BAA+B,CAAC,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,OAAO,GAAG,IAAI,CAIxF;AAED,wBAAgB,yBAAyB,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,GAAG,IAAI,CAa5E;AAED,wBAAgB,iCAAiC,CAAC,MAAM,SAAS,oBAAoB,EACnF,QAAQ,EAAE,MAAM,EAChB,KAAK,EAAE,MAAM,GACZ,MAAM,CASR;AAED,+FAA+F;AAC/F,wBAAgB,kCAAkC,CAChD,QAAQ,EAAE,MAAM,EAChB,KAAK,EAAE,oBAAoB,EAC3B,KAAK,EAAE,OAAO,EACd,cAAc,EAAE,WAAW,CAAC,MAAM,EAAE,SAAS,CAAC,GAC7C,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,CAwB3B;AAED,wBAAgB,uBAAuB,CACrC,OAAO,EAAE,MAAM,EACf,MAAM,EAAE,SAAS,eAAe,EAAE,GAAG,SAAS,GAC7C,SAAS,MAAM,EAAE,CAcnB;AA+FD,wBAAgB,+BAA+B,CAC7C,OAAO,EAAE,MAAM,EACf,KAAK,EAAE,SAAS,mBAAmB,EAAE,GACpC,IAAI,CAMN;AAED,wBAAgB,sCAAsC,CACpD,KAAK,EAAE,SAAS,mBAAmB,EAAE,GACpC,IAAI,CAKN"}

package/dist/ai-usage/execution.d.ts

@@ -0,0 +1,53 @@
+import type { SixbRuntimeContext } from "../runtime/types";
+import type { SecurityDefinitionCatalog } from "../security";
+import type { AiAccountingOverview, AiLimitPolicy, AiLimitPolicyStatus, CreateAiLimitPolicyInput, ListAiLimitPoliciesInput, ListAiLimitPolicyStatusesInput, ListAiModelCallAccountingInput, ListAiModelCallAccountingResult, ListAiModelCallGroupsInput, ListAiModelCallGroupsResult, QueryAiAccountingOverviewInput, ServiceAccountStatus, UpdateAiLimitPolicyInput, UserStatus } from "../storage";
+export type QueryAiUsageOverviewInput = Omit<QueryAiAccountingOverviewInput, "projectId">;
+export type ListAiUsageModelCallsInput = Omit<ListAiModelCallAccountingInput, "projectId">;
+export type ListAiUsageModelCallGroupsInput = Omit<ListAiModelCallGroupsInput, "projectId">;
+export type ListAiUsageLimitPoliciesInput = Omit<ListAiLimitPoliciesInput, "projectId">;
+export type ListAiUsageLimitStatusesInput = Omit<ListAiLimitPolicyStatusesInput, "projectId" | "existingGroupIds" | "at">;
+export type CreateAiUsageLimitPolicyInput = Omit<CreateAiLimitPolicyInput, "id" | "projectId" | "createdAt"> & {
+    readonly id?: string;
+};
+export type UpdateAiUsageLimitPolicyInput = Omit<UpdateAiLimitPolicyInput, "projectId" | "updatedAt">;
+export interface AiUsageLimitGroupOption {
+    readonly id: string;
+    readonly label?: string;
+    readonly description?: string;
+}
+export interface AiUsageLimitUserOption {
+    readonly id: string;
+    readonly email: string;
+    readonly displayName?: string;
+    readonly status: UserStatus;
+}
+export interface AiUsageLimitServiceAccountOption {
+    readonly id: string;
+    readonly name: string;
+    readonly description?: string;
+    readonly status: ServiceAccountStatus;
+}
+export interface AiUsageLimitSubjectOptions {
+    readonly groups: readonly AiUsageLimitGroupOption[];
+    readonly users: readonly AiUsageLimitUserOption[];
+    readonly serviceAccounts: readonly AiUsageLimitServiceAccountOption[];
+}
+/** Project AI accounting and limit controls bound to one execution's authority. */
+export interface AiUsageRuntime {
+    readonly accountingConfigured: boolean;
+    readonly limitsConfigured: boolean;
+    assertObservable(): void;
+    assertManageable(): void;
+    canManageLimits(): boolean;
+    queryOverview(input: QueryAiUsageOverviewInput): Promise<AiAccountingOverview>;
+    listModelCalls(input: ListAiUsageModelCallsInput): Promise<ListAiModelCallAccountingResult>;
+    listModelCallGroups(input: ListAiUsageModelCallGroupsInput): Promise<ListAiModelCallGroupsResult>;
+    listLimitPolicies(input?: ListAiUsageLimitPoliciesInput): Promise<readonly AiLimitPolicy[]>;
+    listLimitStatuses(input?: ListAiUsageLimitStatusesInput): Promise<readonly AiLimitPolicyStatus[]>;
+    listLimitSubjectOptions(): Promise<AiUsageLimitSubjectOptions>;
+    createLimitPolicy(input: CreateAiUsageLimitPolicyInput): Promise<AiLimitPolicy>;
+    updateLimitPolicy(input: UpdateAiUsageLimitPolicyInput): Promise<AiLimitPolicy>;
+    deleteLimitPolicy(id: string): Promise<boolean>;
+}
+export declare function createAiUsageRuntime(runtime: SixbRuntimeContext, security: SecurityDefinitionCatalog): AiUsageRuntime;
+//# sourceMappingURL=execution.d.ts.map

package/dist/ai-usage/execution.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"execution.d.ts","sourceRoot":"","sources":["../../src/ai-usage/execution.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAA;AAC1D,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,aAAa,CAAA;AAC5D,OAAO,KAAK,EACV,oBAAoB,EACpB,aAAa,EACb,mBAAmB,EACnB,wBAAwB,EACxB,wBAAwB,EACxB,8BAA8B,EAC9B,8BAA8B,EAC9B,+BAA+B,EAC/B,0BAA0B,EAC1B,2BAA2B,EAC3B,8BAA8B,EAC9B,oBAAoB,EACpB,wBAAwB,EACxB,UAAU,EACX,MAAM,YAAY,CAAA;AAEnB,MAAM,MAAM,yBAAyB,GAAG,IAAI,CAAC,8BAA8B,EAAE,WAAW,CAAC,CAAA;AACzF,MAAM,MAAM,0BAA0B,GAAG,IAAI,CAAC,8BAA8B,EAAE,WAAW,CAAC,CAAA;AAC1F,MAAM,MAAM,+BAA+B,GAAG,IAAI,CAAC,0BAA0B,EAAE,WAAW,CAAC,CAAA;AAC3F,MAAM,MAAM,6BAA6B,GAAG,IAAI,CAAC,wBAAwB,EAAE,WAAW,CAAC,CAAA;AACvF,MAAM,MAAM,6BAA6B,GAAG,IAAI,CAC9C,8BAA8B,EAC9B,WAAW,GAAG,kBAAkB,GAAG,IAAI,CACxC,CAAA;AACD,MAAM,MAAM,6BAA6B,GAAG,IAAI,CAC9C,wBAAwB,EACxB,IAAI,GAAG,WAAW,GAAG,WAAW,CACjC,GAAG;IAAE,QAAQ,CAAC,EAAE,CAAC,EAAE,MAAM,CAAA;CAAE,CAAA;AAC5B,MAAM,MAAM,6BAA6B,GAAG,IAAI,CAC9C,wBAAwB,EACxB,WAAW,GAAG,WAAW,CAC1B,CAAA;AAED,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;IACnB,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAA;CAC9B;AAED,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;IACnB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAA;IAC7B,QAAQ,CAAC,MAAM,EAAE,UAAU,CAAA;CAC5B;AAED,MAAM,WAAW,gCAAgC;IAC/C,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;IACnB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAA;IAC7B,QAAQ,CAAC,MAAM,EAAE,oBAAoB,CAAA;CACtC;AAED,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,MAAM,EAAE,SAAS,uBAAuB,EAAE,CAAA;IACnD,QAAQ,CAAC,KAAK,EAAE,SAAS,sBAAsB,EAAE,CAAA;IACjD,QAAQ,CAAC,eAAe,EAAE,SAAS,gCAAgC,EAAE,CAAA;CACtE;AAED,mFAAmF;AACnF,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,oBAAoB,EAAE,OAAO,CAAA;IACtC,QAAQ,CAAC,gBAAgB,EAAE,OAAO,CAAA;IAClC,gBAAgB,IAAI,IAAI,CAAA;IACxB,gBAAgB,IAAI,IAAI,CAAA;IACxB,eAAe,IAAI,OAAO,CAAA;IAC1B,aAAa,CAAC,KAAK,EAAE,yBAAyB,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAAA;IAC9E,cAAc,CAAC,KAAK,EAAE,0BAA0B,GAAG,OAAO,CAAC,+BAA+B,CAAC,CAAA;IAC3F,mBAAmB,CAAC,KAAK,EAAE,+BAA+B,GAAG,OAAO,CAAC,2BAA2B,CAAC,CAAA;IACjG,iBAAiB,CAAC,KAAK,CAAC,EAAE,6BAA6B,GAAG,OAAO,CAAC,SAAS,aAAa,EAAE,CAAC,CAAA;IAC3F,iBAAiB,CAAC,KAAK,CAAC,EAAE,6BAA6B,GAAG,OAAO,CAAC,SAAS,mBAAmB,EAAE,CAAC,CAAA;IACjG,uBAAuB,IAAI,OAAO,CAAC,0BAA0B,CAAC,CAAA;IAC9D,iBAAiB,CAAC,KAAK,EAAE,6BAA6B,GAAG,OAAO,CAAC,aAAa,CAAC,CAAA;IAC/E,iBAAiB,CAAC,KAAK,EAAE,6BAA6B,GAAG,OAAO,CAAC,aAAa,CAAC,CAAA;IAC/E,iBAAiB,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;CAChD;AAED,wBAAgB,oBAAoB,CAClC,OAAO,EAAE,kBAAkB,EAC3B,QAAQ,EAAE,yBAAyB,GAClC,cAAc,CA8GhB"}

package/dist/ai-usage/index.d.ts

@@ -0,0 +1,3 @@
+export type { AiUsageLimitGroupOption, AiUsageLimitServiceAccountOption, AiUsageLimitSubjectOptions, AiUsageLimitUserOption, AiUsageRuntime, CreateAiUsageLimitPolicyInput, ListAiUsageLimitPoliciesInput, ListAiUsageLimitStatusesInput, ListAiUsageModelCallGroupsInput, ListAiUsageModelCallsInput, QueryAiUsageOverviewInput, UpdateAiUsageLimitPolicyInput, } from "./execution";
+export { createAiUsageRuntime } from "./execution";
+//# sourceMappingURL=index.d.ts.map

package/dist/ai-usage/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/ai-usage/index.ts"],"names":[],"mappings":"AAAA,YAAY,EACV,uBAAuB,EACvB,gCAAgC,EAChC,0BAA0B,EAC1B,sBAAsB,EACtB,cAAc,EACd,6BAA6B,EAC7B,6BAA6B,EAC7B,6BAA6B,EAC7B,+BAA+B,EAC/B,0BAA0B,EAC1B,yBAAyB,EACzB,6BAA6B,GAC9B,MAAM,aAAa,CAAA;AACpB,OAAO,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAA"}

package/dist/auth/index.js

@@ -20,11 +20,11 @@ import {
   parseSessionCookieValue,
   principalsEqual,
   verifyDoubleSubmitCsrf
-} from "../chunk-1e8m6yn3.js";
+} from "../chunk-rre42skh.js";
 import {
   normalizeRequesterGroupIds,
   snapshotRequesterGroupIds
-} from "../chunk-rhrbz7d4.js";
+} from "../chunk-4a849fr1.js";
 import {
   AuthRuntimeError,
   DEFAULT_AUTH_INVITATION_TTL_MS,
@@ -51,13 +51,13 @@ import {
   serializeCookie,
   shouldUseSecureCookies
 } from "../chunk-xwnf87e1.js";
-import"../chunk-f83ka50g.js";
-import"../chunk-rnshztfq.js";
+import"../chunk-37wk412q.js";
+import"../chunk-d63tybny.js";
 import"../chunk-04b07a9q.js";
 import"../chunk-dktq02ne.js";
-import"../chunk-zqysyfjt.js";
-import"../chunk-0172wgm9.js";
-import"../chunk-t8t39h7v.js";
+import"../chunk-08m3b6w8.js";
+import"../chunk-2xns679x.js";
+import"../chunk-n6jxh8sw.js";
 import"../chunk-y64skrwp.js";
 export {
   verifyDoubleSubmitCsrf,

package/dist/authorization/decision.d.ts

@@ -43,9 +43,12 @@ export type AuthzRequest = {
     readonly pipelineId: string;
 } | {
     readonly kind: "agent.run";
-    readonly agentId: string;
 } | {
     readonly kind: "logs.observe";
+} | {
+    readonly kind: "aiUsage.observe";
+} | {
+    readonly kind: "aiUsage.manage";
 } | {
     readonly kind: "connector.manage";
     readonly connectorId: string;
@@ -110,7 +113,7 @@ export declare function assertPrivileged(runtime: AuthorizedRuntime, operation:
  * Assert access to process providers that trusted executions and genuine agent runs may use.
  *
  * Agent provenance alone is not authority: the registered capability must be bound to the exact
- * same agent and run before this check succeeds.
+ * same execution identity and run before this check succeeds.
  */
 export declare function assertProviderAccess(runtime: AuthorizedRuntime, execution: ExecutionContext, operation: string): void;
 export {};

package/dist/authorization/decision.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"decision.d.ts","sourceRoot":"","sources":["../../src/authorization/decision.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAA;AAC3D,OAAO,EACL,KAAK,4BAA4B,EAElC,MAAM,4BAA4B,CAAA;AACnC,OAAO,KAAK,EAAE,gBAAgB,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAA;AAGhF,OAAO,KAAK,EAAE,oBAAoB,EAAc,MAAM,SAAS,CAAA;AAE/D,8EAA8E;AAC9E,MAAM,MAAM,YAAY,GACpB;IAAE,QAAQ,CAAC,IAAI,EAAE,oBAAoB,CAAC;IAAC,QAAQ,CAAC,QAAQ,EAAE,mBAAmB,CAAA;CAAE,GAC/E;IAAE,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAC;IAAC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAA;CAAE,GAC/D;IAAE,QAAQ,CAAC,IAAI,EAAE,cAAc,CAAC;IAAC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;CAAE,GAC7D;IAAE,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAC;IAAC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAA;CAAE,GAC/D;IAAE,QAAQ,CAAC,IAAI,EAAE,kBAAkB,CAAC;IAAC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAA;CAAE,GACpE;IAAE,QAAQ,CAAC,IAAI,EAAE,cAAc,CAAC;IAAC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,GAC5D;IAAE,QAAQ,CAAC,IAAI,EAAE,cAAc,CAAC;IAAC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;CAAE,GAC9D;IAAE,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GACtD;IAAE,QAAQ,CAAC,IAAI,EAAE,cAAc,CAAC;IAAC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;CAAE,GAC9D;IAAE,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GACxD;IAAE,QAAQ,CAAC,IAAI,EAAE,cAAc,CAAA;CAAE,GACjC;IAAE,QAAQ,CAAC,IAAI,EAAE,kBAAkB,CAAC;IAAC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAA;CAAE,GACnE;IAAE,QAAQ,CAAC,IAAI,EAAE,cAAc,CAAC;IAAC,QAAQ,CAAC,oBAAoB,EAAE,SAAS,MAAM,EAAE,CAAA;CAAE,CAAA;AAEvF,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAA;IACzB,8DAA8D;IAC9D,QAAQ,CAAC,YAAY,EAAE,SAAS,MAAM,EAAE,CAAA;IACxC,6DAA6D;IAC7D,QAAQ,CAAC,OAAO,EAAE,SAAS,MAAM,EAAE,CAAA;CACpC;AAED,UAAU,iBAAiB;IACzB,QAAQ,CAAC,oBAAoB,CAAC,EAAE,oBAAoB,CAAA;IACpD,QAAQ,CAAC,aAAa,CAAC,EAAE,oBAAoB,CAAA;CAC9C;AAmDD,oEAAoE;AACpE,wBAAgB,QAAQ,CACtB,aAAa,EAAE,oBAAoB,GAAG,IAAI,GAAG,SAAS,EACtD,OAAO,EAAE,YAAY,GACpB,aAAa,CAOf;AAED,wBAAgB,SAAS,CACvB,aAAa,EAAE,oBAAoB,GAAG,IAAI,GAAG,SAAS,EACtD,OAAO,EAAE,YAAY,GACpB,OAAO,CAET;AAED,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,iBAAiB,EAAE,OAAO,EAAE,YAAY,GAAG,IAAI,CAYxF;AAED,2FAA2F;AAC3F,wBAAgB,+BAA+B,CAC7C,OAAO,EAAE,iBAAiB,GACzB,OAAO,CAAC,4BAA4B,EAAE;IAAE,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAA;CAAE,CAAC,CASpE;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,aAAa,CAAC,OAAO,EAAE,iBAAiB,EAAE,YAAY,EAAE,MAAM,GAAG,IAAI,CAGpF;AAED;;;;;;GAMG;AACH,wBAAgB,wBAAwB,CAAC,OAAO,EAAE,iBAAiB,EAAE,YAAY,EAAE,MAAM,GAAG,IAAI,CAE/F;AAED,mFAAmF;AACnF,wBAAgB,wBAAwB,CAAC,OAAO,EAAE,iBAAiB,EAAE,WAAW,EAAE,MAAM,GAAG,IAAI,CAE9F;AAED;;;;;;;GAOG;AACH,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,iBAAiB,EAAE,SAAS,EAAE,MAAM,GAAG,IAAI,CAUpF;AAED;;;;;GAKG;AACH,wBAAgB,oBAAoB,CAClC,OAAO,EAAE,iBAAiB,EAC1B,SAAS,EAAE,gBAAgB,EAC3B,SAAS,EAAE,MAAM,GAChB,IAAI,CAsBN"}
+{"version":3,"file":"decision.d.ts","sourceRoot":"","sources":["../../src/authorization/decision.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAA;AAC3D,OAAO,EACL,KAAK,4BAA4B,EAElC,MAAM,4BAA4B,CAAA;AACnC,OAAO,KAAK,EAAE,gBAAgB,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAA;AAGhF,OAAO,KAAK,EAAE,oBAAoB,EAAc,MAAM,SAAS,CAAA;AAE/D,8EAA8E;AAC9E,MAAM,MAAM,YAAY,GACpB;IAAE,QAAQ,CAAC,IAAI,EAAE,oBAAoB,CAAC;IAAC,QAAQ,CAAC,QAAQ,EAAE,mBAAmB,CAAA;CAAE,GAC/E;IAAE,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAC;IAAC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAA;CAAE,GAC/D;IAAE,QAAQ,CAAC,IAAI,EAAE,cAAc,CAAC;IAAC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;CAAE,GAC7D;IAAE,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAC;IAAC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAA;CAAE,GAC/D;IAAE,QAAQ,CAAC,IAAI,EAAE,kBAAkB,CAAC;IAAC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAA;CAAE,GACpE;IAAE,QAAQ,CAAC,IAAI,EAAE,cAAc,CAAC;IAAC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,GAC5D;IAAE,QAAQ,CAAC,IAAI,EAAE,cAAc,CAAC;IAAC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;CAAE,GAC9D;IAAE,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GACtD;IAAE,QAAQ,CAAC,IAAI,EAAE,cAAc,CAAC;IAAC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;CAAE,GAC9D;IAAE,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAA;CAAE,GAC9B;IAAE,QAAQ,CAAC,IAAI,EAAE,cAAc,CAAA;CAAE,GACjC;IAAE,QAAQ,CAAC,IAAI,EAAE,iBAAiB,CAAA;CAAE,GACpC;IAAE,QAAQ,CAAC,IAAI,EAAE,gBAAgB,CAAA;CAAE,GACnC;IAAE,QAAQ,CAAC,IAAI,EAAE,kBAAkB,CAAC;IAAC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAA;CAAE,GACnE;IAAE,QAAQ,CAAC,IAAI,EAAE,cAAc,CAAC;IAAC,QAAQ,CAAC,oBAAoB,EAAE,SAAS,MAAM,EAAE,CAAA;CAAE,CAAA;AAEvF,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAA;IACzB,8DAA8D;IAC9D,QAAQ,CAAC,YAAY,EAAE,SAAS,MAAM,EAAE,CAAA;IACxC,6DAA6D;IAC7D,QAAQ,CAAC,OAAO,EAAE,SAAS,MAAM,EAAE,CAAA;CACpC;AAED,UAAU,iBAAiB;IACzB,QAAQ,CAAC,oBAAoB,CAAC,EAAE,oBAAoB,CAAA;IACpD,QAAQ,CAAC,aAAa,CAAC,EAAE,oBAAoB,CAAA;CAC9C;AA8DD,oEAAoE;AACpE,wBAAgB,QAAQ,CACtB,aAAa,EAAE,oBAAoB,GAAG,IAAI,GAAG,SAAS,EACtD,OAAO,EAAE,YAAY,GACpB,aAAa,CAOf;AAED,wBAAgB,SAAS,CACvB,aAAa,EAAE,oBAAoB,GAAG,IAAI,GAAG,SAAS,EACtD,OAAO,EAAE,YAAY,GACpB,OAAO,CAET;AAED,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,iBAAiB,EAAE,OAAO,EAAE,YAAY,GAAG,IAAI,CAYxF;AAED,2FAA2F;AAC3F,wBAAgB,+BAA+B,CAC7C,OAAO,EAAE,iBAAiB,GACzB,OAAO,CAAC,4BAA4B,EAAE;IAAE,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAA;CAAE,CAAC,CASpE;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,aAAa,CAAC,OAAO,EAAE,iBAAiB,EAAE,YAAY,EAAE,MAAM,GAAG,IAAI,CAGpF;AAED;;;;;;GAMG;AACH,wBAAgB,wBAAwB,CAAC,OAAO,EAAE,iBAAiB,EAAE,YAAY,EAAE,MAAM,GAAG,IAAI,CAE/F;AAED,mFAAmF;AACnF,wBAAgB,wBAAwB,CAAC,OAAO,EAAE,iBAAiB,EAAE,WAAW,EAAE,MAAM,GAAG,IAAI,CAE9F;AAED;;;;;;;GAOG;AACH,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,iBAAiB,EAAE,SAAS,EAAE,MAAM,GAAG,IAAI,CAUpF;AAED;;;;;GAKG;AACH,wBAAgB,oBAAoB,CAClC,OAAO,EAAE,iBAAiB,EAC1B,SAAS,EAAE,gBAAgB,EAC3B,SAAS,EAAE,MAAM,GAChB,IAAI,CAsBN"}

package/dist/authorization/grant-kinds.d.ts

@@ -7,8 +7,10 @@
  * resolved `GrantIndex` all key off it, so adding a grant family is a single
  * entry in `GRANT_KINDS` plus the compile errors that forces at every consumer.
  */
-import type { GrantDefinition } from "../security/types";
-export type GrantKind = "access:application" | "view:object" | "view:dataset" | "edit:object" | "append:telemetry" | "apply:action" | "run:workflow" | "run:sync" | "run:pipeline" | "run:agent" | "observe:logs" | "manage:connector";
+import type { AgentRunGrant, GrantDefinition } from "../security/types";
+export type GrantKind = "access:application" | "view:object" | "view:dataset" | "edit:object" | "append:telemetry" | "apply:action" | "run:workflow" | "run:sync" | "run:pipeline" | "run:agent" | "observe:logs" | "observe:aiUsage" | "manage:connector" | "manage:aiUsage";
+export type SingletonGrantKind = "run:agent";
+export type TargetedGrantKind = Exclude<GrantKind, SingletonGrantKind>;
 /** Registered id universes a grant kind ranges over, plus subtype expansion. */
 export interface GrantUniverse {
     readonly applicationIds: ReadonlySet<string>;
@@ -18,14 +20,14 @@ export interface GrantUniverse {
     readonly workflowIds: ReadonlySet<string>;
     readonly syncIds: ReadonlySet<string>;
     readonly pipelineIds: ReadonlySet<string>;
-    readonly agentIds: ReadonlySet<string>;
     readonly observableIds: ReadonlySet<string>;
     readonly connectorIds: ReadonlySet<string>;
+    readonly manageableIds: ReadonlySet<string>;
     readonly getSubTypes: (objectTypeId: string) => readonly string[];
 }
 /** The registered-id sets a grant kind validates against (no subtype hook). */
 export type GrantUniverseKey = Exclude<keyof GrantUniverse, "getSubTypes">;
-interface GrantKindSpec {
+interface TargetedGrantKindSpec {
     /** Registered universe the grant's ids must belong to. */
     readonly universeKey: GrantUniverseKey;
     /** Subject noun used in validation errors ("unknown <subject> '<id>'"). */
@@ -35,15 +37,29 @@ interface GrantKindSpec {
     /** Only object-type grants also expand to subtypes. */
     readonly expandsSubtypes?: true;
 }
+interface SingletonGrantKindSpec {
+    /** Project-wide capability with no resource selection; resolves to a boolean. */
+    readonly singleton: true;
+    readonly subject: string;
+    readonly fix: string;
+}
 /**
  * The exhaustive grant-kind table. A new grant family is one entry here; the
- * `Record<GrantKind, …>` makes every omission a compile error.
+ * mapped type makes every omission a compile error.
  */
-export declare const GRANT_KINDS: Record<GrantKind, GrantKindSpec>;
+export declare const GRANT_KINDS: {
+    readonly [TKind in GrantKind]: TKind extends SingletonGrantKind ? SingletonGrantKindSpec : TargetedGrantKindSpec;
+};
 export declare const GRANT_KIND_KEYS: readonly GrantKind[];
+export declare const TARGETED_GRANT_KIND_KEYS: TargetedGrantKind[];
 /** The grant kind a stored grant resolves to. */
+export declare function grantKindOf(grant: AgentRunGrant): SingletonGrantKind;
+export declare function grantKindOf(grant: Exclude<GrantDefinition, AgentRunGrant>): TargetedGrantKind;
 export declare function grantKindOf(grant: GrantDefinition): GrantKind;
-/** A fresh, mutable grant index with one empty id set per kind. */
-export declare function emptyGrantSets(): Record<GrantKind, Set<string>>;
+/** Mutable grant index: booleans for singleton capabilities, id sets for selected resources. */
+export type MutableGrantIndex = {
+    [TKind in GrantKind]: TKind extends SingletonGrantKind ? boolean : Set<string>;
+};
+export declare function emptyGrantSets(): MutableGrantIndex;
 export {};
 //# sourceMappingURL=grant-kinds.d.ts.map

package/dist/authorization/grant-kinds.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"grant-kinds.d.ts","sourceRoot":"","sources":["../../src/authorization/grant-kinds.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAA;AAExD,MAAM,MAAM,SAAS,GACjB,oBAAoB,GACpB,aAAa,GACb,cAAc,GACd,aAAa,GACb,kBAAkB,GAClB,cAAc,GACd,cAAc,GACd,UAAU,GACV,cAAc,GACd,WAAW,GACX,cAAc,GACd,kBAAkB,CAAA;AAEtB,gFAAgF;AAChF,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,cAAc,EAAE,WAAW,CAAC,MAAM,CAAC,CAAA;IAC5C,QAAQ,CAAC,aAAa,EAAE,WAAW,CAAC,MAAM,CAAC,CAAA;IAC3C,QAAQ,CAAC,UAAU,EAAE,WAAW,CAAC,MAAM,CAAC,CAAA;IACxC,QAAQ,CAAC,SAAS,EAAE,WAAW,CAAC,MAAM,CAAC,CAAA;IACvC,QAAQ,CAAC,WAAW,EAAE,WAAW,CAAC,MAAM,CAAC,CAAA;IACzC,QAAQ,CAAC,OAAO,EAAE,WAAW,CAAC,MAAM,CAAC,CAAA;IACrC,QAAQ,CAAC,WAAW,EAAE,WAAW,CAAC,MAAM,CAAC,CAAA;IACzC,QAAQ,CAAC,QAAQ,EAAE,WAAW,CAAC,MAAM,CAAC,CAAA;IACtC,QAAQ,CAAC,aAAa,EAAE,WAAW,CAAC,MAAM,CAAC,CAAA;IAC3C,QAAQ,CAAC,YAAY,EAAE,WAAW,CAAC,MAAM,CAAC,CAAA;IAC1C,QAAQ,CAAC,WAAW,EAAE,CAAC,YAAY,EAAE,MAAM,KAAK,SAAS,MAAM,EAAE,CAAA;CAClE;AAED,+EAA+E;AAC/E,MAAM,MAAM,gBAAgB,GAAG,OAAO,CAAC,MAAM,aAAa,EAAE,aAAa,CAAC,CAAA;AAE1E,UAAU,aAAa;IACrB,0DAA0D;IAC1D,QAAQ,CAAC,WAAW,EAAE,gBAAgB,CAAA;IACtC,2EAA2E;IAC3E,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;IACxB,iEAAiE;IACjE,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAA;IACpB,uDAAuD;IACvD,QAAQ,CAAC,eAAe,CAAC,EAAE,IAAI,CAAA;CAChC;AAED;;;GAGG;AACH,eAAO,MAAM,WAAW,EAAE,MAAM,CAAC,SAAS,EAAE,aAAa,CAiExD,CAAA;AAED,eAAO,MAAM,eAAe,EAA+B,SAAS,SAAS,EAAE,CAAA;AAE/E,iDAAiD;AACjD,wBAAgB,WAAW,CAAC,KAAK,EAAE,eAAe,GAAG,SAAS,CAmB7D;AAED,mEAAmE;AACnE,wBAAgB,cAAc,IAAI,MAAM,CAAC,SAAS,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAM/D"}
+{"version":3,"file":"grant-kinds.d.ts","sourceRoot":"","sources":["../../src/authorization/grant-kinds.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,KAAK,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAA;AAEvE,MAAM,MAAM,SAAS,GACjB,oBAAoB,GACpB,aAAa,GACb,cAAc,GACd,aAAa,GACb,kBAAkB,GAClB,cAAc,GACd,cAAc,GACd,UAAU,GACV,cAAc,GACd,WAAW,GACX,cAAc,GACd,iBAAiB,GACjB,kBAAkB,GAClB,gBAAgB,CAAA;AAEpB,MAAM,MAAM,kBAAkB,GAAG,WAAW,CAAA;AAC5C,MAAM,MAAM,iBAAiB,GAAG,OAAO,CAAC,SAAS,EAAE,kBAAkB,CAAC,CAAA;AAEtE,gFAAgF;AAChF,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,cAAc,EAAE,WAAW,CAAC,MAAM,CAAC,CAAA;IAC5C,QAAQ,CAAC,aAAa,EAAE,WAAW,CAAC,MAAM,CAAC,CAAA;IAC3C,QAAQ,CAAC,UAAU,EAAE,WAAW,CAAC,MAAM,CAAC,CAAA;IACxC,QAAQ,CAAC,SAAS,EAAE,WAAW,CAAC,MAAM,CAAC,CAAA;IACvC,QAAQ,CAAC,WAAW,EAAE,WAAW,CAAC,MAAM,CAAC,CAAA;IACzC,QAAQ,CAAC,OAAO,EAAE,WAAW,CAAC,MAAM,CAAC,CAAA;IACrC,QAAQ,CAAC,WAAW,EAAE,WAAW,CAAC,MAAM,CAAC,CAAA;IACzC,QAAQ,CAAC,aAAa,EAAE,WAAW,CAAC,MAAM,CAAC,CAAA;IAC3C,QAAQ,CAAC,YAAY,EAAE,WAAW,CAAC,MAAM,CAAC,CAAA;IAC1C,QAAQ,CAAC,aAAa,EAAE,WAAW,CAAC,MAAM,CAAC,CAAA;IAC3C,QAAQ,CAAC,WAAW,EAAE,CAAC,YAAY,EAAE,MAAM,KAAK,SAAS,MAAM,EAAE,CAAA;CAClE;AAED,+EAA+E;AAC/E,MAAM,MAAM,gBAAgB,GAAG,OAAO,CAAC,MAAM,aAAa,EAAE,aAAa,CAAC,CAAA;AAE1E,UAAU,qBAAqB;IAC7B,0DAA0D;IAC1D,QAAQ,CAAC,WAAW,EAAE,gBAAgB,CAAA;IACtC,2EAA2E;IAC3E,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;IACxB,iEAAiE;IACjE,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAA;IACpB,uDAAuD;IACvD,QAAQ,CAAC,eAAe,CAAC,EAAE,IAAI,CAAA;CAChC;AAED,UAAU,sBAAsB;IAC9B,iFAAiF;IACjF,QAAQ,CAAC,SAAS,EAAE,IAAI,CAAA;IACxB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;IACxB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAA;CACrB;AAED;;;GAGG;AACH,eAAO,MAAM,WAAW,EAAE;IACxB,QAAQ,EAAE,KAAK,IAAI,SAAS,GAAG,KAAK,SAAS,kBAAkB,GAC3D,sBAAsB,GACtB,qBAAqB;CA4E1B,CAAA;AAED,eAAO,MAAM,eAAe,EAA+B,SAAS,SAAS,EAAE,CAAA;AAC/E,eAAO,MAAM,wBAAwB,qBAEpC,CAAA;AAED,iDAAiD;AACjD,wBAAgB,WAAW,CAAC,KAAK,EAAE,aAAa,GAAG,kBAAkB,CAAA;AACrE,wBAAgB,WAAW,CAAC,KAAK,EAAE,OAAO,CAAC,eAAe,EAAE,aAAa,CAAC,GAAG,iBAAiB,CAAA;AAC9F,wBAAgB,WAAW,CAAC,KAAK,EAAE,eAAe,GAAG,SAAS,CAAA;AAsB9D,gGAAgG;AAChG,MAAM,MAAM,iBAAiB,GAAG;KAC7B,KAAK,IAAI,SAAS,GAAG,KAAK,SAAS,kBAAkB,GAAG,OAAO,GAAG,GAAG,CAAC,MAAM,CAAC;CAC/E,CAAA;AAED,wBAAgB,cAAc,IAAI,iBAAiB,CAiBlD"}

package/dist/authorization/index.d.ts

@@ -1,6 +1,6 @@
 export { canAccessApplication, isApplicationAccessControlled } from "./application-access";
 export type { AuthzDecision, AuthzRequest } from "./decision";
-export { assertAuthorized, assertCanAppendTelemetry, assertCanEdit, assertCanManageConnector, assertPrivileged, assertProviderAccess, evaluate, isAllowed, } from "./decision";
+export { assertAuthorized, assertCanAppendTelemetry, assertCanEdit, assertCanManageConnector, assertPrivileged, assertProviderAccess, assertRuntimeAuthorizationBound, evaluate, isAllowed, } from "./decision";
 export { AuthorizationError } from "./errors";
 export { canViewEvent } from "./event-visibility";
 export type { GrantKind, GrantUniverse } from "./grant-kinds";

package/dist/authorization/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/authorization/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oBAAoB,EAAE,6BAA6B,EAAE,MAAM,sBAAsB,CAAA;AAC1F,YAAY,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,YAAY,CAAA;AAC7D,OAAO,EACL,gBAAgB,EAChB,wBAAwB,EACxB,aAAa,EACb,wBAAwB,EACxB,gBAAgB,EAChB,oBAAoB,EACpB,QAAQ,EACR,SAAS,GACV,MAAM,YAAY,CAAA;AACnB,OAAO,EAAE,kBAAkB,EAAE,MAAM,UAAU,CAAA;AAC7C,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAA;AACjD,YAAY,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,eAAe,CAAA;AAC7D,OAAO,EAAE,2BAA2B,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAA;AAC1E,OAAO,EACL,gBAAgB,EAChB,kBAAkB,EAClB,iBAAiB,EACjB,oBAAoB,EACpB,2BAA2B,EAC3B,kBAAkB,GACnB,MAAM,kBAAkB,CAAA;AACzB,YAAY,EAAE,oBAAoB,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAA;AAC7E,OAAO,EAAE,eAAe,EAAE,MAAM,SAAS,CAAA"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/authorization/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oBAAoB,EAAE,6BAA6B,EAAE,MAAM,sBAAsB,CAAA;AAC1F,YAAY,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,YAAY,CAAA;AAC7D,OAAO,EACL,gBAAgB,EAChB,wBAAwB,EACxB,aAAa,EACb,wBAAwB,EACxB,gBAAgB,EAChB,oBAAoB,EACpB,+BAA+B,EAC/B,QAAQ,EACR,SAAS,GACV,MAAM,YAAY,CAAA;AACnB,OAAO,EAAE,kBAAkB,EAAE,MAAM,UAAU,CAAA;AAC7C,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAA;AACjD,YAAY,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,eAAe,CAAA;AAC7D,OAAO,EAAE,2BAA2B,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAA;AAC1E,OAAO,EACL,gBAAgB,EAChB,kBAAkB,EAClB,iBAAiB,EACjB,oBAAoB,EACpB,2BAA2B,EAC3B,kBAAkB,GACnB,MAAM,kBAAkB,CAAA;AACzB,YAAY,EAAE,oBAAoB,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAA;AAC7E,OAAO,EAAE,eAAe,EAAE,MAAM,SAAS,CAAA"}

package/dist/authorization/index.js

@@ -7,6 +7,7 @@ import {
   assertCanManageConnector,
   assertPrivileged,
   assertProviderAccess,
+  assertRuntimeAuthorizationBound,
   canAccessApplication,
   canViewActionRun,
   canViewEvent,
@@ -21,13 +22,13 @@ import {
   isApplicationAccessControlled,
   resolveAuthorizationContext,
   resolveRoleGrants
-} from "../chunk-f83ka50g.js";
-import"../chunk-rnshztfq.js";
+} from "../chunk-37wk412q.js";
+import"../chunk-d63tybny.js";
 import"../chunk-04b07a9q.js";
 import"../chunk-dktq02ne.js";
-import"../chunk-zqysyfjt.js";
-import"../chunk-0172wgm9.js";
-import"../chunk-t8t39h7v.js";
+import"../chunk-08m3b6w8.js";
+import"../chunk-2xns679x.js";
+import"../chunk-n6jxh8sw.js";
 import"../chunk-y64skrwp.js";
 export {
   resolveRoleGrants,
@@ -44,6 +45,7 @@ export {
   canViewEvent,
   canViewActionRun,
   canAccessApplication,
+  assertRuntimeAuthorizationBound,
   assertProviderAccess,
   assertPrivileged,
   assertCanManageConnector,
@@ -53,4 +55,4 @@ export {
   AuthorizationError
 };
 
-//# debugId=4F829428F4D4A05C64756E2164756E21
+//# debugId=B639BE7F6042DEDB64756E2164756E21

package/dist/authorization/index.js.map

@@ -4,6 +4,6 @@
   "sourcesContent": [
   ],
   "mappings": "",
-  "debugId": "4F829428F4D4A05C64756E2164756E21",
+  "debugId": "B639BE7F6042DEDB64756E2164756E21",
   "names": []
 }

package/dist/authorization/resolve.d.ts

@@ -3,11 +3,11 @@ import type { RoleDefinition } from "../security";
 import { type GrantUniverse } from "./grant-kinds";
 import type { AuthorizationContext, GrantIndex, ResolvedRole } from "./types";
 /**
- * Expand a role's grants into concrete id sets once at startup.
+ * Resolve a role's grants once at startup.
  *
  * Broad grants (`every.object().except([...])`) expand against the registered
- * universe; object-type grants also expand to subtypes. The result holds only
- * `Set`s, so per-request resolution and runtime checks stay simple `set.has`.
+ * universe; object-type grants also expand to subtypes. Resource grants become
+ * id sets; the project Agent grant becomes a boolean.
  * The per-kind universe and subtype rules come from the `GRANT_KINDS` table, so
  * this loop never enumerates targets by hand.
  */

package/dist/authorization/resolve.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"resolve.d.ts","sourceRoot":"","sources":["../../src/authorization/resolve.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,eAAe,CAAA;AAC9C,OAAO,KAAK,EAAE,cAAc,EAAa,MAAM,aAAa,CAAA;AAC5D,OAAO,EAIL,KAAK,aAAa,EAEnB,MAAM,eAAe,CAAA;AACtB,OAAO,KAAK,EAAE,oBAAoB,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAA;AAE7E;;;;;;;;GAQG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,cAAc,EAAE,QAAQ,EAAE,aAAa,GAAG,UAAU,CAe3F;AA4BD;;;;;;GAMG;AACH,wBAAgB,2BAA2B,CAAC,KAAK,EAAE;IACjD,QAAQ,CAAC,SAAS,EAAE,SAAS,CAAA;IAC7B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,QAAQ,EAAE,SAAS,MAAM,EAAE,CAAA;IACpC,QAAQ,CAAC,KAAK,EAAE,SAAS,YAAY,EAAE,CAAA;CACxC,GAAG,oBAAoB,CAyBvB"}
+{"version":3,"file":"resolve.d.ts","sourceRoot":"","sources":["../../src/authorization/resolve.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,eAAe,CAAA;AAC9C,OAAO,KAAK,EAAE,cAAc,EAAa,MAAM,aAAa,CAAA;AAC5D,OAAO,EAGL,KAAK,aAAa,EAGnB,MAAM,eAAe,CAAA;AACtB,OAAO,KAAK,EAAE,oBAAoB,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAA;AAE7E;;;;;;;;GAQG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,cAAc,EAAE,QAAQ,EAAE,aAAa,GAAG,UAAU,CAmB3F;AA4BD;;;;;;GAMG;AACH,wBAAgB,2BAA2B,CAAC,KAAK,EAAE;IACjD,QAAQ,CAAC,SAAS,EAAE,SAAS,CAAA;IAC7B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,QAAQ,EAAE,SAAS,MAAM,EAAE,CAAA;IACpC,QAAQ,CAAC,KAAK,EAAE,SAAS,YAAY,EAAE,CAAA;CACxC,GAAG,oBAAoB,CA4BvB"}

package/dist/authorization/types.d.ts

@@ -7,15 +7,17 @@
  * Group and role ids are retained so decisions stay explainable.
  */
 import type { Principal } from "../auth/types";
-import { type GrantKind } from "./grant-kinds";
+import { type GrantKind, type SingletonGrantKind } from "./grant-kinds";
 /**
- * Grants resolved to concrete id sets, keyed by grant kind (`view:object`,
- * `run:sync`, …). Broad grants and object subtypes are already expanded, so
- * enforcement is a single `grants[kind].has(id)` lookup. Keyed by `GrantKind`
+ * Grants keyed by kind (`view:object`, `run:sync`, …). Resource selections resolve
+ * to id sets; project-wide singleton capabilities resolve to booleans.
+ * Broad grants and object subtypes are already expanded. Keyed by `GrantKind`
  * so a new grant family adds one key, not a new bucket every consumer must
  * learn.
  */
-export type GrantIndex = Readonly<Record<GrantKind, ReadonlySet<string>>>;
+export type GrantIndex = Readonly<{
+    [TKind in GrantKind]: TKind extends SingletonGrantKind ? boolean : ReadonlySet<string>;
+}>;
 /**
  * A grant index that grants nothing, as the base for a hand-built context — typically in tests.
  *

package/dist/authorization/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/authorization/types.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,eAAe,CAAA;AAC9C,OAAO,EAAkB,KAAK,SAAS,EAAE,MAAM,eAAe,CAAA;AAE9D;;;;;;GAMG;AACH,MAAM,MAAM,UAAU,GAAG,QAAQ,CAAC,MAAM,CAAC,SAAS,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,CAAA;AAEzE;;;;;;;;;;;GAWG;AACH,wBAAgB,eAAe,IAAI,UAAU,CAE5C;AAED,0EAA0E;AAC1E,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;IACnB,QAAQ,CAAC,iBAAiB,EAAE,SAAS,MAAM,EAAE,CAAA;IAC7C,QAAQ,CAAC,MAAM,EAAE,UAAU,CAAA;CAC5B;AAED,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,SAAS,EAAE,SAAS,CAAA;IAC7B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,QAAQ,EAAE,SAAS,MAAM,EAAE,CAAA;IACpC,0EAA0E;IAC1E,QAAQ,CAAC,OAAO,EAAE,SAAS,MAAM,EAAE,CAAA;IACnC,QAAQ,CAAC,MAAM,EAAE,UAAU,CAAA;CAC5B"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/authorization/types.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,eAAe,CAAA;AAC9C,OAAO,EAAkB,KAAK,SAAS,EAAE,KAAK,kBAAkB,EAAE,MAAM,eAAe,CAAA;AAEvF;;;;;;GAMG;AACH,MAAM,MAAM,UAAU,GAAG,QAAQ,CAAC;KAC/B,KAAK,IAAI,SAAS,GAAG,KAAK,SAAS,kBAAkB,GAAG,OAAO,GAAG,WAAW,CAAC,MAAM,CAAC;CACvF,CAAC,CAAA;AAEF;;;;;;;;;;;GAWG;AACH,wBAAgB,eAAe,IAAI,UAAU,CAE5C;AAED,0EAA0E;AAC1E,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;IACnB,QAAQ,CAAC,iBAAiB,EAAE,SAAS,MAAM,EAAE,CAAA;IAC7C,QAAQ,CAAC,MAAM,EAAE,UAAU,CAAA;CAC5B;AAED,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,SAAS,EAAE,SAAS,CAAA;IAC7B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,QAAQ,EAAE,SAAS,MAAM,EAAE,CAAA;IACpC,0EAA0E;IAC1E,QAAQ,CAAC,OAAO,EAAE,SAAS,MAAM,EAAE,CAAA;IACnC,QAAQ,CAAC,MAAM,EAAE,UAAU,CAAA;CAC5B"}