@sixb/core 0.1.6 → 0.1.7

package/dist/chunk-hceck7dq.js.map

@@ -1,10 +0,0 @@
-{
-  "version": 3,
-  "sources": ["../src/agents/authority.ts"],
-  "sourcesContent": [
-    "import { SYSTEM_PRINCIPAL } from \"../auth\"\nimport type { AuthorizationContext } from \"../authorization\"\nimport { resolveAuthorizationContext } from \"../authorization\"\nimport type { AuthorizablePrincipal, AuthorizationRef } from \"../execution\"\nimport type { SecurityDefinitionCatalog } from \"../security\"\nimport type {\n  AuthStorage,\n  ServiceAccountGroupMembershipRecord,\n  ServiceAccountRecord,\n} from \"../storage/auth\"\nimport { AuthStorageError } from \"../storage/auth\"\nimport type { AgentDefinition } from \"./types\"\n\nexport interface AgentExecutionIdentity {\n  readonly serviceAccount: ServiceAccountRecord\n  readonly principal: Extract<AuthorizablePrincipal, { readonly type: \"serviceAccount\" }>\n  readonly groupMemberships: readonly ServiceAccountGroupMembershipRecord[]\n}\n\nexport function agentServiceAccountId(agentId: string): string {\n  return `svc_agent_${agentId}`\n}\n\n/** Ensure the definition-owned service account exists before an Agent execution is admitted. */\nexport async function ensureAgentExecutionIdentity(input: {\n  readonly auth: AuthStorage | undefined\n  readonly projectId: string\n  readonly agent: AgentDefinition\n}): Promise<AgentExecutionIdentity> {\n  const auth = requireAuthStorage(input.auth)\n  const id = agentServiceAccountId(input.agent.id)\n  const name = input.agent.name\n  const description = `Managed service account for agent '${input.agent.id}'.`\n  const now = new Date()\n  const loaded = await loadOrCreateAgentServiceAccount(auth, {\n    id,\n    projectId: input.projectId,\n    name,\n    description,\n    updatedAt: now,\n  })\n  assertActiveAgentServiceAccount(input.agent.id, loaded)\n  const serviceAccount = await updateAgentServiceAccountMetadata(auth, {\n    existing: loaded,\n    name,\n    description,\n    updatedAt: now,\n  })\n  assertActiveAgentServiceAccount(input.agent.id, serviceAccount)\n\n  const groupMemberships = await auth.serviceAccountGroupMemberships.reconcileForServiceAccount({\n    projectId: input.projectId,\n    serviceAccountId: id,\n    groupIds: input.agent.groupIds,\n    source: \"agent\",\n    updatedAt: now,\n  })\n\n  return {\n    serviceAccount,\n    principal: { type: \"serviceAccount\", id },\n    groupMemberships,\n  }\n}\n\n/** Load the managed identity, recovering only the expected concurrent-create race. */\nasync function loadOrCreateAgentServiceAccount(\n  auth: AuthStorage,\n  input: {\n    readonly id: string\n    readonly projectId: string\n    readonly name: string\n    readonly description: string\n    readonly updatedAt: Date\n  }\n): Promise<ServiceAccountRecord> {\n  const existing = await auth.serviceAccounts.getById({\n    projectId: input.projectId,\n    id: input.id,\n  })\n  if (existing) return existing\n\n  try {\n    return await auth.serviceAccounts.create({\n      id: input.id,\n      projectId: input.projectId,\n      name: input.name,\n      description: input.description,\n      status: \"active\",\n      createdByPrincipal: SYSTEM_PRINCIPAL,\n      createdAt: input.updatedAt,\n      updatedAt: input.updatedAt,\n    })\n  } catch (error) {\n    if (!(error instanceof AuthStorageError) || error.code !== \"duplicate_service_account\") {\n      throw error\n    }\n    const concurrent = await auth.serviceAccounts.getById({\n      projectId: input.projectId,\n      id: input.id,\n    })\n    if (!concurrent) throw error\n    return concurrent\n  }\n}\n\nfunction assertActiveAgentServiceAccount(\n  agentId: string,\n  serviceAccount: ServiceAccountRecord\n): void {\n  if (serviceAccount.status === \"suspended\") {\n    throw new Error(\n      `[Sixb] Agent '${agentId}' service account '${serviceAccount.id}' is suspended.`\n    )\n  }\n}\n\n/** Resolve current grants for the service account referenced by a durable Agent execution. */\nexport async function resolveAgentExecutionAuthorization(input: {\n  readonly auth: AuthStorage | undefined\n  readonly projectId: string\n  readonly agentId: string\n  readonly authorizationRef: AuthorizationRef\n  readonly security: SecurityDefinitionCatalog\n}): Promise<{ readonly identity: AgentExecutionIdentity; readonly context: AuthorizationContext }> {\n  const auth = requireAuthStorage(input.auth)\n  const expectedId = agentServiceAccountId(input.agentId)\n  const principal =\n    input.authorizationRef.type === \"principal\" ? input.authorizationRef.principal : null\n  if (principal?.type !== \"serviceAccount\" || principal.id !== expectedId) {\n    throw new Error(\n      `[Sixb] Agent '${input.agentId}' execution authority must reference service account '${expectedId}'.`\n    )\n  }\n\n  const serviceAccount = await auth.serviceAccounts.getById({\n    projectId: input.projectId,\n    id: principal.id,\n  })\n  if (!serviceAccount || serviceAccount.status !== \"active\") {\n    throw new Error(`[Sixb] Agent service account '${principal.id}' is not active.`)\n  }\n\n  const groupMemberships = await auth.serviceAccountGroupMemberships.listForServiceAccount({\n    projectId: input.projectId,\n    serviceAccountId: principal.id,\n  })\n  const identity: AgentExecutionIdentity = {\n    serviceAccount,\n    principal: { type: \"serviceAccount\", id: principal.id },\n    groupMemberships,\n  }\n  return {\n    identity,\n    context: resolveAuthorizationContext({\n      principal: identity.principal,\n      groupIds: groupMemberships.map((membership) => membership.groupId),\n      roles: input.security.listResolvedRoles(),\n    }),\n  }\n}\n\nfunction requireAuthStorage(auth: AuthStorage | undefined): AuthStorage {\n  if (!auth) {\n    throw new Error(\"[Sixb] Agent executions require auth storage.\")\n  }\n  return auth\n}\n\nasync function updateAgentServiceAccountMetadata(\n  auth: AuthStorage,\n  input: {\n    readonly existing: ServiceAccountRecord\n    readonly name: string\n    readonly description: string\n    readonly updatedAt: Date\n  }\n): Promise<ServiceAccountRecord> {\n  if (input.existing.name === input.name && input.existing.description === input.description) {\n    return input.existing\n  }\n  return auth.serviceAccounts.update({\n    projectId: input.existing.projectId,\n    id: input.existing.id,\n    name: input.name,\n    description: input.description,\n    updatedAt: input.updatedAt,\n  })\n}\n"
-  ],
-  "mappings": ";;;;;;;;;;AAmBO,SAAS,qBAAqB,CAAC,SAAyB;AAAA,EAC7D,OAAO,aAAa;AAAA;AAItB,eAAsB,4BAA4B,CAAC,OAIf;AAAA,EAClC,MAAM,OAAO,mBAAmB,MAAM,IAAI;AAAA,EAC1C,MAAM,KAAK,sBAAsB,MAAM,MAAM,EAAE;AAAA,EAC/C,MAAM,OAAO,MAAM,MAAM;AAAA,EACzB,MAAM,cAAc,sCAAsC,MAAM,MAAM;AAAA,EACtE,MAAM,MAAM,IAAI;AAAA,EAChB,MAAM,SAAS,MAAM,gCAAgC,MAAM;AAAA,IACzD;AAAA,IACA,WAAW,MAAM;AAAA,IACjB;AAAA,IACA;AAAA,IACA,WAAW;AAAA,EACb,CAAC;AAAA,EACD,gCAAgC,MAAM,MAAM,IAAI,MAAM;AAAA,EACtD,MAAM,iBAAiB,MAAM,kCAAkC,MAAM;AAAA,IACnE,UAAU;AAAA,IACV;AAAA,IACA;AAAA,IACA,WAAW;AAAA,EACb,CAAC;AAAA,EACD,gCAAgC,MAAM,MAAM,IAAI,cAAc;AAAA,EAE9D,MAAM,mBAAmB,MAAM,KAAK,+BAA+B,2BAA2B;AAAA,IAC5F,WAAW,MAAM;AAAA,IACjB,kBAAkB;AAAA,IAClB,UAAU,MAAM,MAAM;AAAA,IACtB,QAAQ;AAAA,IACR,WAAW;AAAA,EACb,CAAC;AAAA,EAED,OAAO;AAAA,IACL;AAAA,IACA,WAAW,EAAE,MAAM,kBAAkB,GAAG;AAAA,IACxC;AAAA,EACF;AAAA;AAIF,eAAe,+BAA+B,CAC5C,MACA,OAO+B;AAAA,EAC/B,MAAM,WAAW,MAAM,KAAK,gBAAgB,QAAQ;AAAA,IAClD,WAAW,MAAM;AAAA,IACjB,IAAI,MAAM;AAAA,EACZ,CAAC;AAAA,EACD,IAAI;AAAA,IAAU,OAAO;AAAA,EAErB,IAAI;AAAA,IACF,OAAO,MAAM,KAAK,gBAAgB,OAAO;AAAA,MACvC,IAAI,MAAM;AAAA,MACV,WAAW,MAAM;AAAA,MACjB,MAAM,MAAM;AAAA,MACZ,aAAa,MAAM;AAAA,MACnB,QAAQ;AAAA,MACR,oBAAoB;AAAA,MACpB,WAAW,MAAM;AAAA,MACjB,WAAW,MAAM;AAAA,IACnB,CAAC;AAAA,IACD,OAAO,OAAO;AAAA,IACd,IAAI,EAAE,iBAAiB,qBAAqB,MAAM,SAAS,6BAA6B;AAAA,MACtF,MAAM;AAAA,IACR;AAAA,IACA,MAAM,aAAa,MAAM,KAAK,gBAAgB,QAAQ;AAAA,MACpD,WAAW,MAAM;AAAA,MACjB,IAAI,MAAM;AAAA,IACZ,CAAC;AAAA,IACD,IAAI,CAAC;AAAA,MAAY,MAAM;AAAA,IACvB,OAAO;AAAA;AAAA;AAIX,SAAS,+BAA+B,CACtC,SACA,gBACM;AAAA,EACN,IAAI,eAAe,WAAW,aAAa;AAAA,IACzC,MAAM,IAAI,MACR,iBAAiB,6BAA6B,eAAe,mBAC/D;AAAA,EACF;AAAA;AAIF,eAAsB,kCAAkC,CAAC,OAM0C;AAAA,EACjG,MAAM,OAAO,mBAAmB,MAAM,IAAI;AAAA,EAC1C,MAAM,aAAa,sBAAsB,MAAM,OAAO;AAAA,EACtD,MAAM,YACJ,MAAM,iBAAiB,SAAS,cAAc,MAAM,iBAAiB,YAAY;AAAA,EACnF,IAAI,WAAW,SAAS,oBAAoB,UAAU,OAAO,YAAY;AAAA,IACvE,MAAM,IAAI,MACR,iBAAiB,MAAM,gEAAgE,cACzF;AAAA,EACF;AAAA,EAEA,MAAM,iBAAiB,MAAM,KAAK,gBAAgB,QAAQ;AAAA,IACxD,WAAW,MAAM;AAAA,IACjB,IAAI,UAAU;AAAA,EAChB,CAAC;AAAA,EACD,IAAI,CAAC,kBAAkB,eAAe,WAAW,UAAU;AAAA,IACzD,MAAM,IAAI,MAAM,iCAAiC,UAAU,oBAAoB;AAAA,EACjF;AAAA,EAEA,MAAM,mBAAmB,MAAM,KAAK,+BAA+B,sBAAsB;AAAA,IACvF,WAAW,MAAM;AAAA,IACjB,kBAAkB,UAAU;AAAA,EAC9B,CAAC;AAAA,EACD,MAAM,WAAmC;AAAA,IACvC;AAAA,IACA,WAAW,EAAE,MAAM,kBAAkB,IAAI,UAAU,GAAG;AAAA,IACtD;AAAA,EACF;AAAA,EACA,OAAO;AAAA,IACL;AAAA,IACA,SAAS,4BAA4B;AAAA,MACnC,WAAW,SAAS;AAAA,MACpB,UAAU,iBAAiB,IAAI,CAAC,eAAe,WAAW,OAAO;AAAA,MACjE,OAAO,MAAM,SAAS,kBAAkB;AAAA,IAC1C,CAAC;AAAA,EACH;AAAA;AAGF,SAAS,kBAAkB,CAAC,MAA4C;AAAA,EACtE,IAAI,CAAC,MAAM;AAAA,IACT,MAAM,IAAI,MAAM,+CAA+C;AAAA,EACjE;AAAA,EACA,OAAO;AAAA;AAGT,eAAe,iCAAiC,CAC9C,MACA,OAM+B;AAAA,EAC/B,IAAI,MAAM,SAAS,SAAS,MAAM,QAAQ,MAAM,SAAS,gBAAgB,MAAM,aAAa;AAAA,IAC1F,OAAO,MAAM;AAAA,EACf;AAAA,EACA,OAAO,KAAK,gBAAgB,OAAO;AAAA,IACjC,WAAW,MAAM,SAAS;AAAA,IAC1B,IAAI,MAAM,SAAS;AAAA,IACnB,MAAM,MAAM;AAAA,IACZ,aAAa,MAAM;AAAA,IACnB,WAAW,MAAM;AAAA,EACnB,CAAC;AAAA;",
-  "debugId": "BAD526CB9A059A9B64756E2164756E21",
-  "names": []
-}

package/dist/chunk-n4spznws.js.map

@@ -1,11 +0,0 @@
-{
-  "version": 3,
-  "sources": ["../src/workflows/builders.ts", "../src/workflows/failure.ts"],
-  "sourcesContent": [
-    "import type { ActionDefinition } from \"../actions\"\nimport { isActionDefinition } from \"../actions\"\nimport type { AgentDefinition } from \"../agents\"\nimport { isAgentDefinition } from \"../agents\"\nimport type { SchemaOrRef } from \"../ontology\"\nimport type { ScheduleDefinition, ScheduleDefinitionForEvent } from \"../schedules\"\nimport { isScheduleDefinition } from \"../schedules\"\nimport { WorkflowDefinitionError } from \"./errors\"\nimport type {\n  AgentStepBuilder,\n  AgentStepDefinition,\n  InterventionBuilder,\n  InterventionDefaultsRuntimeHandler,\n  InterventionDefinition,\n  InterventionFieldConfig,\n  StepBuilder,\n  StepDefinition,\n  StepHandler,\n  WorkflowBuilder,\n  WorkflowChainDefinition,\n  WorkflowNodeDefinition,\n  WorkflowScheduleMapper,\n  WorkflowTriggerDefinition,\n} from \"./types\"\nimport {\n  assertNonEmpty,\n  isAgentStepDefinition,\n  isInterventionDefinition,\n  isStepDefinition,\n} from \"./validation\"\n\ntype InterventionOptions = {\n  description?: string\n}\n\ntype RuntimeWorkflowInput = Record<string, SchemaOrRef>\ntype RuntimeWorkflowValueInput = Record<string, unknown>\ntype RuntimeWorkflowMapper = (...args: never[]) => unknown\ntype RuntimeWorkflowScheduleMapper = WorkflowScheduleMapper<unknown, RuntimeWorkflowValueInput>\ntype RuntimeWorkflowThenDefinition =\n  | StepDefinition\n  | InterventionDefinition\n  | ActionDefinition\n  | AgentStepDefinition\ntype RuntimeWorkflowThen = (\n  nodeDefinition: RuntimeWorkflowThenDefinition,\n  mapper?: RuntimeWorkflowMapper\n) => WorkflowChainDefinition\ntype RuntimeWorkflowDraftBuilder = {\n  when(schedule: ScheduleDefinition): RuntimeWorkflowDraftBuilder\n  when(\n    schedule: ScheduleDefinitionForEvent,\n    mapper: RuntimeWorkflowScheduleMapper\n  ): RuntimeWorkflowDraftBuilder\n  readonly then: RuntimeWorkflowThen\n}\n\n/**\n * See the action-param helper for why widened booleans are rejected. Optional\n * response fields must be an explicit literal decision so inference stays honest.\n */\ntype StrictBoolean<T extends boolean> = boolean extends T ? never : T\n\ntype InterventionFieldResult<TSchema extends SchemaOrRef, TRequired extends boolean> = {\n  readonly schema: TSchema\n  readonly required: TRequired\n  readonly description?: string\n}\n\nexport function interventionField<const TSchema extends SchemaOrRef>(\n  schema: TSchema\n): InterventionFieldResult<TSchema, true>\nexport function interventionField<\n  const TSchema extends SchemaOrRef,\n  const TRequired extends boolean = true,\n>(\n  schema: TSchema,\n  options: {\n    required?: StrictBoolean<TRequired>\n    description?: string\n  }\n): InterventionFieldResult<TSchema, TRequired>\nexport function interventionField(\n  schema: SchemaOrRef,\n  options?: { required?: boolean; description?: string }\n): InterventionFieldConfig {\n  return {\n    schema,\n    required: options?.required ?? true,\n    ...(options?.description !== undefined ? { description: options.description } : {}),\n  }\n}\n\nexport function defineWorkflowStep<const TId extends string>(id: TId): StepBuilder<TId> {\n  assertNonEmpty(id, \"Step\", \"id\")\n\n  return {\n    input(input: RuntimeWorkflowInput): unknown {\n      return {\n        output(output: RuntimeWorkflowInput): unknown {\n          return {\n            run(handler: StepHandler<Record<string, unknown>, Record<string, unknown>>): unknown {\n              return {\n                kind: \"step\",\n                id,\n                input,\n                output,\n                handler,\n              }\n            },\n          }\n        },\n      }\n    },\n  } as unknown as StepBuilder<TId>\n}\n\nexport function defineAgentStep<const TId extends string, const TAgent extends AgentDefinition>(\n  id: TId,\n  agent: TAgent\n): AgentStepBuilder<TId, TAgent> {\n  assertNonEmpty(id, \"Agent step\", \"id\")\n  if (!isAgentDefinition(agent)) {\n    throw new WorkflowDefinitionError(`Agent step \"${id}\" references an invalid agent.`)\n  }\n\n  return {\n    input(input: RuntimeWorkflowInput): unknown {\n      return {\n        output(output: RuntimeWorkflowInput): unknown {\n          return {\n            prompt(prompt: unknown): unknown {\n              if (typeof prompt !== \"function\") {\n                throw new WorkflowDefinitionError(`Agent step \"${id}\" prompt must be a function.`)\n              }\n              return { kind: \"agentStep\", id, agent, input, output, prompt }\n            },\n          }\n        },\n      }\n    },\n  } as unknown as AgentStepBuilder<TId, TAgent>\n}\n\nexport function defineIntervention<const TId extends string>(\n  id: TId,\n  options?: InterventionOptions\n): InterventionBuilder<TId> {\n  assertNonEmpty(id, \"Intervention\", \"id\")\n\n  return {\n    input(input: RuntimeWorkflowInput): unknown {\n      return {\n        response(response: Record<string, unknown>): unknown {\n          return createInterventionDefinition({\n            id,\n            input,\n            response,\n            description: options?.description,\n          })\n        },\n      }\n    },\n  } as unknown as InterventionBuilder<TId>\n}\n\nexport function defineWorkflow<const TId extends string>(id: TId): WorkflowBuilder<TId> {\n  assertNonEmpty(id, \"Workflow\", \"id\")\n\n  return {\n    input(input: RuntimeWorkflowInput): unknown {\n      return createWorkflowDraftBuilder(id, input)\n    },\n  } as unknown as WorkflowBuilder<TId>\n}\n\nfunction createWorkflowDraftBuilder(\n  id: string,\n  input: RuntimeWorkflowInput\n): RuntimeWorkflowDraftBuilder {\n  const triggers: WorkflowTriggerDefinition[] = []\n  const nodes: WorkflowNodeDefinition[] = []\n  let definition: WorkflowChainDefinition | null = null\n\n  const appendNode = (\n    nodeDefinition: unknown,\n    mapper?: unknown,\n    ...extraArgs: unknown[]\n  ): WorkflowChainDefinition => {\n    if (extraArgs.length > 0) {\n      throw new WorkflowDefinitionError(`Invalid workflow \"${id}\" .then(...) call.`)\n    }\n\n    if (isStepDefinition(nodeDefinition)) {\n      if (mapper !== undefined && !isRuntimeWorkflowMapper(mapper)) {\n        throw new WorkflowDefinitionError(`Invalid workflow \"${id}\" .then(...) call.`)\n      }\n\n      nodes.push(createStepNode(id, nodes, nodeDefinition, mapper))\n      definition ??= createWorkflowDefinition(id, input, triggers, nodes, appendNode)\n      return definition\n    }\n\n    if (isAgentStepDefinition(nodeDefinition)) {\n      if (mapper !== undefined && !isRuntimeWorkflowMapper(mapper)) {\n        throw new WorkflowDefinitionError(`Invalid workflow \"${id}\" .then(...) call.`)\n      }\n\n      nodes.push(createAgentNode(id, nodes, nodeDefinition, mapper))\n      definition ??= createWorkflowDefinition(id, input, triggers, nodes, appendNode)\n      return definition\n    }\n\n    if (isInterventionDefinition(nodeDefinition)) {\n      if (mapper !== undefined && !isRuntimeWorkflowMapper(mapper)) {\n        throw new WorkflowDefinitionError(`Invalid workflow \"${id}\" .then(...) call.`)\n      }\n\n      nodes.push(createInterventionNode(id, nodes, nodeDefinition, mapper))\n      definition ??= createWorkflowDefinition(id, input, triggers, nodes, appendNode)\n      return definition\n    }\n\n    if (isActionDefinition(nodeDefinition)) {\n      if (mapper !== undefined && !isRuntimeWorkflowMapper(mapper)) {\n        throw new WorkflowDefinitionError(`Invalid workflow \"${id}\" .then(...) call.`)\n      }\n\n      nodes.push(createActionNode(id, nodes, nodeDefinition, mapper))\n      definition ??= createWorkflowDefinition(id, input, triggers, nodes, appendNode)\n      return definition\n    }\n\n    throw new WorkflowDefinitionError(`Invalid workflow \"${id}\" .then(...) call.`)\n  }\n\n  let draft: RuntimeWorkflowDraftBuilder\n\n  function when(schedule: ScheduleDefinition): RuntimeWorkflowDraftBuilder\n  function when(\n    schedule: ScheduleDefinitionForEvent,\n    mapper: RuntimeWorkflowScheduleMapper\n  ): RuntimeWorkflowDraftBuilder\n  function when(\n    schedule: unknown,\n    mapper?: unknown,\n    ...extraArgs: unknown[]\n  ): RuntimeWorkflowDraftBuilder {\n    if (extraArgs.length > 0) {\n      throw new WorkflowDefinitionError(`Invalid workflow \"${id}\" .when(...) call.`)\n    }\n\n    if (isScheduleDefinition(schedule)) {\n      if (mapper !== undefined && schedule.trigger.type !== \"event\") {\n        throw new WorkflowDefinitionError(`Workflow \"${id}\" cron schedules do not accept a mapper.`)\n      }\n      if (mapper !== undefined && !isRuntimeWorkflowScheduleMapper(mapper)) {\n        throw new WorkflowDefinitionError(`Invalid workflow \"${id}\" .when(...) schedule mapper.`)\n      }\n\n      triggers.push({\n        type: \"schedule\",\n        scheduleId: schedule.id,\n        ...(mapper !== undefined ? { mapper } : {}),\n      })\n      return draft\n    }\n\n    throw new WorkflowDefinitionError(`Workflow \"${id}\" .when(...) only accepts schedules.`)\n  }\n\n  draft = {\n    when,\n    // biome-ignore lint/suspicious/noThenProperty: Workflows intentionally expose a chainable .then(...) DSL.\n    then: appendNode,\n  }\n\n  return draft\n}\n\nfunction createWorkflowDefinition(\n  id: string,\n  input: RuntimeWorkflowInput,\n  triggers: readonly WorkflowTriggerDefinition[],\n  nodes: readonly WorkflowNodeDefinition[],\n  then: (\n    nodeDefinition: unknown,\n    mapper?: unknown,\n    ...extraArgs: unknown[]\n  ) => WorkflowChainDefinition\n): WorkflowChainDefinition {\n  return {\n    kind: \"workflow\",\n    id,\n    input,\n    triggers,\n    nodes,\n    then,\n  } as unknown as WorkflowChainDefinition\n}\n\nfunction createStepNode(\n  workflowId: string,\n  nodes: readonly WorkflowNodeDefinition[],\n  step: StepDefinition,\n  mapper: RuntimeWorkflowMapper | undefined\n): WorkflowNodeDefinition {\n  const key = deriveWorkflowNodeKey(step.id)\n  assertNodeKey(workflowId, step.id, key)\n  assertUniqueNode(workflowId, nodes, step.id, key)\n\n  return {\n    type: \"step\",\n    id: step.id,\n    key,\n    step,\n    ...(mapper !== undefined ? { mapper } : {}),\n  }\n}\n\nfunction createAgentNode(\n  workflowId: string,\n  nodes: readonly WorkflowNodeDefinition[],\n  agentStep: AgentStepDefinition,\n  mapper: RuntimeWorkflowMapper | undefined\n): WorkflowNodeDefinition {\n  const key = deriveWorkflowNodeKey(agentStep.id)\n  assertNodeKey(workflowId, agentStep.id, key)\n  assertUniqueNode(workflowId, nodes, agentStep.id, key)\n\n  return {\n    type: \"agent\",\n    id: agentStep.id,\n    key,\n    agentStep,\n    ...(mapper !== undefined ? { mapper } : {}),\n  }\n}\n\nfunction createInterventionDefinition(input: {\n  readonly id: string\n  readonly input: RuntimeWorkflowInput\n  readonly response: Record<string, unknown>\n  readonly description?: string\n}): unknown {\n  const base = {\n    kind: \"intervention\" as const,\n    id: input.id,\n    input: input.input,\n    response: input.response,\n    ...(input.description !== undefined ? { description: input.description } : {}),\n  }\n\n  const defaults = (handlerOrContext: unknown) => {\n    if (typeof handlerOrContext === \"function\") {\n      return {\n        ...base,\n        defaults: handlerOrContext as InterventionDefaultsRuntimeHandler,\n      }\n    }\n\n    // A no-defaults intervention is still usable as a definition immediately after\n    // `.response(...)`. Treating the builder method as an empty default handler keeps\n    // future executor code simple if it calls `definition.defaults?.(ctx) ?? {}`.\n    return {}\n  }\n\n  Object.defineProperty(base, \"defaults\", {\n    value: defaults,\n    enumerable: false,\n  })\n\n  return base\n}\n\nfunction createActionNode(\n  workflowId: string,\n  nodes: readonly WorkflowNodeDefinition[],\n  action: ActionDefinition,\n  mapper: RuntimeWorkflowMapper | undefined\n): WorkflowNodeDefinition {\n  const key = deriveWorkflowNodeKey(action.id)\n  assertNodeKey(workflowId, action.id, key)\n  assertUniqueNode(workflowId, nodes, action.id, key)\n\n  return {\n    type: \"action\",\n    id: action.id,\n    key,\n    action,\n    ...(mapper !== undefined ? { mapper } : {}),\n  }\n}\n\nfunction createInterventionNode(\n  workflowId: string,\n  nodes: readonly WorkflowNodeDefinition[],\n  intervention: InterventionDefinition,\n  mapper: RuntimeWorkflowMapper | undefined\n): WorkflowNodeDefinition {\n  const key = deriveWorkflowNodeKey(intervention.id)\n  assertNodeKey(workflowId, intervention.id, key)\n  assertUniqueNode(workflowId, nodes, intervention.id, key)\n\n  return {\n    type: \"intervention\",\n    id: intervention.id,\n    key,\n    intervention,\n    ...(mapper !== undefined ? { mapper } : {}),\n  } as WorkflowNodeDefinition\n}\n\nfunction assertNodeKey(workflowId: string, nodeId: string, key: string): void {\n  if (key.length === 0) {\n    throw new WorkflowDefinitionError(\n      `Workflow \"${workflowId}\" node id \"${nodeId}\" must contain at least one letter or number.`\n    )\n  }\n}\n\nfunction assertUniqueNode(\n  workflowId: string,\n  nodes: readonly WorkflowNodeDefinition[],\n  nodeId: string,\n  key: string\n): void {\n  const duplicateId = nodes.find((node) => node.id === nodeId)\n  if (duplicateId) {\n    throw new WorkflowDefinitionError(\n      `Duplicate workflow node id \"${nodeId}\" in workflow \"${workflowId}\".`\n    )\n  }\n\n  const duplicateKey = nodes.find((node) => node.key === key)\n  if (duplicateKey) {\n    throw new WorkflowDefinitionError(\n      `Duplicate workflow node key \"${key}\" in workflow \"${workflowId}\". Node ids \"${duplicateKey.id}\" and \"${nodeId}\" derive the same key.`\n    )\n  }\n}\n\nfunction deriveWorkflowNodeKey(id: string): string {\n  const segments = id\n    .trim()\n    .split(/[^A-Za-z0-9]+/)\n    .filter((segment) => segment.length > 0)\n\n  return segments\n    .map((segment, index) => {\n      const normalized = uncapitalize(segment)\n      return index === 0 ? normalized : capitalize(normalized)\n    })\n    .join(\"\")\n}\n\nfunction uncapitalize(value: string): string {\n  return value.length === 0 ? value : `${value[0].toLowerCase()}${value.slice(1)}`\n}\n\nfunction capitalize(value: string): string {\n  return value.length === 0 ? value : `${value[0].toUpperCase()}${value.slice(1)}`\n}\n\nfunction isRuntimeWorkflowMapper(value: unknown): value is RuntimeWorkflowMapper {\n  return typeof value === \"function\"\n}\n\nfunction isRuntimeWorkflowScheduleMapper(value: unknown): value is RuntimeWorkflowScheduleMapper {\n  return typeof value === \"function\"\n}\n",
-    "import { createSixbError, isSixbError, summarizeErrorMessage } from \"../errors/internal\"\n\ninterface WorkflowNodeFailureIdentityBase {\n  readonly workflowId: string\n  readonly workflowRunId: string\n  readonly nodeId: string\n  readonly nodeRunId?: string\n}\n\nexport interface WorkflowNodeFailureIdentity extends WorkflowNodeFailureIdentityBase {\n  readonly child:\n    | { readonly type: \"step\"; readonly stepId: string }\n    | {\n        readonly type: \"action\"\n        readonly actionId: string\n        readonly actionRunId?: string\n      }\n    | { readonly type: \"agent\"; readonly agentId: string }\n    | { readonly type: \"intervention\"; readonly interventionId: string }\n}\n\n/** Translate a node-local failure into the workflow primitive's durable vocabulary. */\nexport function createWorkflowNodeFailure(error: unknown, identity: WorkflowNodeFailureIdentity) {\n  return createSixbError(\n    \"workflow.node_failed\",\n    summarizeErrorMessage(error, \"Workflow node execution failed.\"),\n    {\n      cause: error,\n      details: workflowNodeFailureDetails(identity),\n    }\n  )\n}\n\n/** Recover the native child error for direct callers and error-monitoring integrations. */\nexport function unwrapWorkflowNodeFailure(error: unknown): unknown {\n  return isSixbError(error) && error.code === \"workflow.node_failed\" && error.cause !== undefined\n    ? error.cause\n    : error\n}\n\nfunction workflowNodeFailureDetails(identity: WorkflowNodeFailureIdentity) {\n  const base = {\n    workflowId: identity.workflowId,\n    workflowRunId: identity.workflowRunId,\n    nodeId: identity.nodeId,\n    ...(identity.nodeRunId ? { nodeRunId: identity.nodeRunId } : {}),\n  }\n\n  switch (identity.child.type) {\n    case \"step\":\n      return { ...base, stepId: identity.child.stepId }\n    case \"action\":\n      return {\n        ...base,\n        actionId: identity.child.actionId,\n        ...(identity.child.actionRunId ? { actionRunId: identity.child.actionRunId } : {}),\n      }\n    case \"agent\":\n      return { ...base, agentId: identity.child.agentId }\n    case \"intervention\":\n      return { ...base, interventionId: identity.child.interventionId }\n  }\n}\n"
-  ],
-  "mappings": ";;;;;;;;;;;;;;;;;;;;;;AAkFO,SAAS,iBAAiB,CAC/B,QACA,SACyB;AAAA,EACzB,OAAO;AAAA,IACL;AAAA,IACA,UAAU,SAAS,YAAY;AAAA,OAC3B,SAAS,gBAAgB,YAAY,EAAE,aAAa,QAAQ,YAAY,IAAI,CAAC;AAAA,EACnF;AAAA;AAGK,SAAS,kBAA4C,CAAC,IAA2B;AAAA,EACtF,eAAe,IAAI,QAAQ,IAAI;AAAA,EAE/B,OAAO;AAAA,IACL,KAAK,CAAC,OAAsC;AAAA,MAC1C,OAAO;AAAA,QACL,MAAM,CAAC,QAAuC;AAAA,UAC5C,OAAO;AAAA,YACL,GAAG,CAAC,SAAiF;AAAA,cACnF,OAAO;AAAA,gBACL,MAAM;AAAA,gBACN;AAAA,gBACA;AAAA,gBACA;AAAA,gBACA;AAAA,cACF;AAAA;AAAA,UAEJ;AAAA;AAAA,MAEJ;AAAA;AAAA,EAEJ;AAAA;AAGK,SAAS,eAA+E,CAC7F,IACA,OAC+B;AAAA,EAC/B,eAAe,IAAI,cAAc,IAAI;AAAA,EACrC,IAAI,CAAC,kBAAkB,KAAK,GAAG;AAAA,IAC7B,MAAM,IAAI,wBAAwB,eAAe,kCAAkC;AAAA,EACrF;AAAA,EAEA,OAAO;AAAA,IACL,KAAK,CAAC,OAAsC;AAAA,MAC1C,OAAO;AAAA,QACL,MAAM,CAAC,QAAuC;AAAA,UAC5C,OAAO;AAAA,YACL,MAAM,CAAC,QAA0B;AAAA,cAC/B,IAAI,OAAO,WAAW,YAAY;AAAA,gBAChC,MAAM,IAAI,wBAAwB,eAAe,gCAAgC;AAAA,cACnF;AAAA,cACA,OAAO,EAAE,MAAM,aAAa,IAAI,OAAO,OAAO,QAAQ,OAAO;AAAA;AAAA,UAEjE;AAAA;AAAA,MAEJ;AAAA;AAAA,EAEJ;AAAA;AAGK,SAAS,kBAA4C,CAC1D,IACA,SAC0B;AAAA,EAC1B,eAAe,IAAI,gBAAgB,IAAI;AAAA,EAEvC,OAAO;AAAA,IACL,KAAK,CAAC,OAAsC;AAAA,MAC1C,OAAO;AAAA,QACL,QAAQ,CAAC,UAA4C;AAAA,UACnD,OAAO,6BAA6B;AAAA,YAClC;AAAA,YACA;AAAA,YACA;AAAA,YACA,aAAa,SAAS;AAAA,UACxB,CAAC;AAAA;AAAA,MAEL;AAAA;AAAA,EAEJ;AAAA;AAGK,SAAS,cAAwC,CAAC,IAA+B;AAAA,EACtF,eAAe,IAAI,YAAY,IAAI;AAAA,EAEnC,OAAO;AAAA,IACL,KAAK,CAAC,OAAsC;AAAA,MAC1C,OAAO,2BAA2B,IAAI,KAAK;AAAA;AAAA,EAE/C;AAAA;AAGF,SAAS,0BAA0B,CACjC,IACA,OAC6B;AAAA,EAC7B,MAAM,WAAwC,CAAC;AAAA,EAC/C,MAAM,QAAkC,CAAC;AAAA,EACzC,IAAI,aAA6C;AAAA,EAEjD,MAAM,aAAa,CACjB,gBACA,WACG,cACyB;AAAA,IAC5B,IAAI,UAAU,SAAS,GAAG;AAAA,MACxB,MAAM,IAAI,wBAAwB,qBAAqB,sBAAsB;AAAA,IAC/E;AAAA,IAEA,IAAI,iBAAiB,cAAc,GAAG;AAAA,MACpC,IAAI,WAAW,aAAa,CAAC,wBAAwB,MAAM,GAAG;AAAA,QAC5D,MAAM,IAAI,wBAAwB,qBAAqB,sBAAsB;AAAA,MAC/E;AAAA,MAEA,MAAM,KAAK,eAAe,IAAI,OAAO,gBAAgB,MAAM,CAAC;AAAA,MAC5D,eAAe,yBAAyB,IAAI,OAAO,UAAU,OAAO,UAAU;AAAA,MAC9E,OAAO;AAAA,IACT;AAAA,IAEA,IAAI,sBAAsB,cAAc,GAAG;AAAA,MACzC,IAAI,WAAW,aAAa,CAAC,wBAAwB,MAAM,GAAG;AAAA,QAC5D,MAAM,IAAI,wBAAwB,qBAAqB,sBAAsB;AAAA,MAC/E;AAAA,MAEA,MAAM,KAAK,gBAAgB,IAAI,OAAO,gBAAgB,MAAM,CAAC;AAAA,MAC7D,eAAe,yBAAyB,IAAI,OAAO,UAAU,OAAO,UAAU;AAAA,MAC9E,OAAO;AAAA,IACT;AAAA,IAEA,IAAI,yBAAyB,cAAc,GAAG;AAAA,MAC5C,IAAI,WAAW,aAAa,CAAC,wBAAwB,MAAM,GAAG;AAAA,QAC5D,MAAM,IAAI,wBAAwB,qBAAqB,sBAAsB;AAAA,MAC/E;AAAA,MAEA,MAAM,KAAK,uBAAuB,IAAI,OAAO,gBAAgB,MAAM,CAAC;AAAA,MACpE,eAAe,yBAAyB,IAAI,OAAO,UAAU,OAAO,UAAU;AAAA,MAC9E,OAAO;AAAA,IACT;AAAA,IAEA,IAAI,mBAAmB,cAAc,GAAG;AAAA,MACtC,IAAI,WAAW,aAAa,CAAC,wBAAwB,MAAM,GAAG;AAAA,QAC5D,MAAM,IAAI,wBAAwB,qBAAqB,sBAAsB;AAAA,MAC/E;AAAA,MAEA,MAAM,KAAK,iBAAiB,IAAI,OAAO,gBAAgB,MAAM,CAAC;AAAA,MAC9D,eAAe,yBAAyB,IAAI,OAAO,UAAU,OAAO,UAAU;AAAA,MAC9E,OAAO;AAAA,IACT;AAAA,IAEA,MAAM,IAAI,wBAAwB,qBAAqB,sBAAsB;AAAA;AAAA,EAG/E,IAAI;AAAA,EAOJ,SAAS,IAAI,CACX,UACA,WACG,WAC0B;AAAA,IAC7B,IAAI,UAAU,SAAS,GAAG;AAAA,MACxB,MAAM,IAAI,wBAAwB,qBAAqB,sBAAsB;AAAA,IAC/E;AAAA,IAEA,IAAI,qBAAqB,QAAQ,GAAG;AAAA,MAClC,IAAI,WAAW,aAAa,SAAS,QAAQ,SAAS,SAAS;AAAA,QAC7D,MAAM,IAAI,wBAAwB,aAAa,4CAA4C;AAAA,MAC7F;AAAA,MACA,IAAI,WAAW,aAAa,CAAC,gCAAgC,MAAM,GAAG;AAAA,QACpE,MAAM,IAAI,wBAAwB,qBAAqB,iCAAiC;AAAA,MAC1F;AAAA,MAEA,SAAS,KAAK;AAAA,QACZ,MAAM;AAAA,QACN,YAAY,SAAS;AAAA,WACjB,WAAW,YAAY,EAAE,OAAO,IAAI,CAAC;AAAA,MAC3C,CAAC;AAAA,MACD,OAAO;AAAA,IACT;AAAA,IAEA,MAAM,IAAI,wBAAwB,aAAa,wCAAwC;AAAA;AAAA,EAGzF,QAAQ;AAAA,IACN;AAAA,IAEA,MAAM;AAAA,EACR;AAAA,EAEA,OAAO;AAAA;AAGT,SAAS,wBAAwB,CAC/B,IACA,OACA,UACA,OACA,MAKyB;AAAA,EACzB,OAAO;AAAA,IACL,MAAM;AAAA,IACN;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF;AAAA;AAGF,SAAS,cAAc,CACrB,YACA,OACA,MACA,QACwB;AAAA,EACxB,MAAM,MAAM,sBAAsB,KAAK,EAAE;AAAA,EACzC,cAAc,YAAY,KAAK,IAAI,GAAG;AAAA,EACtC,iBAAiB,YAAY,OAAO,KAAK,IAAI,GAAG;AAAA,EAEhD,OAAO;AAAA,IACL,MAAM;AAAA,IACN,IAAI,KAAK;AAAA,IACT;AAAA,IACA;AAAA,OACI,WAAW,YAAY,EAAE,OAAO,IAAI,CAAC;AAAA,EAC3C;AAAA;AAGF,SAAS,eAAe,CACtB,YACA,OACA,WACA,QACwB;AAAA,EACxB,MAAM,MAAM,sBAAsB,UAAU,EAAE;AAAA,EAC9C,cAAc,YAAY,UAAU,IAAI,GAAG;AAAA,EAC3C,iBAAiB,YAAY,OAAO,UAAU,IAAI,GAAG;AAAA,EAErD,OAAO;AAAA,IACL,MAAM;AAAA,IACN,IAAI,UAAU;AAAA,IACd;AAAA,IACA;AAAA,OACI,WAAW,YAAY,EAAE,OAAO,IAAI,CAAC;AAAA,EAC3C;AAAA;AAGF,SAAS,4BAA4B,CAAC,OAK1B;AAAA,EACV,MAAM,OAAO;AAAA,IACX,MAAM;AAAA,IACN,IAAI,MAAM;AAAA,IACV,OAAO,MAAM;AAAA,IACb,UAAU,MAAM;AAAA,OACZ,MAAM,gBAAgB,YAAY,EAAE,aAAa,MAAM,YAAY,IAAI,CAAC;AAAA,EAC9E;AAAA,EAEA,MAAM,WAAW,CAAC,qBAA8B;AAAA,IAC9C,IAAI,OAAO,qBAAqB,YAAY;AAAA,MAC1C,OAAO;AAAA,WACF;AAAA,QACH,UAAU;AAAA,MACZ;AAAA,IACF;AAAA,IAKA,OAAO,CAAC;AAAA;AAAA,EAGV,OAAO,eAAe,MAAM,YAAY;AAAA,IACtC,OAAO;AAAA,IACP,YAAY;AAAA,EACd,CAAC;AAAA,EAED,OAAO;AAAA;AAGT,SAAS,gBAAgB,CACvB,YACA,OACA,QACA,QACwB;AAAA,EACxB,MAAM,MAAM,sBAAsB,OAAO,EAAE;AAAA,EAC3C,cAAc,YAAY,OAAO,IAAI,GAAG;AAAA,EACxC,iBAAiB,YAAY,OAAO,OAAO,IAAI,GAAG;AAAA,EAElD,OAAO;AAAA,IACL,MAAM;AAAA,IACN,IAAI,OAAO;AAAA,IACX;AAAA,IACA;AAAA,OACI,WAAW,YAAY,EAAE,OAAO,IAAI,CAAC;AAAA,EAC3C;AAAA;AAGF,SAAS,sBAAsB,CAC7B,YACA,OACA,cACA,QACwB;AAAA,EACxB,MAAM,MAAM,sBAAsB,aAAa,EAAE;AAAA,EACjD,cAAc,YAAY,aAAa,IAAI,GAAG;AAAA,EAC9C,iBAAiB,YAAY,OAAO,aAAa,IAAI,GAAG;AAAA,EAExD,OAAO;AAAA,IACL,MAAM;AAAA,IACN,IAAI,aAAa;AAAA,IACjB;AAAA,IACA;AAAA,OACI,WAAW,YAAY,EAAE,OAAO,IAAI,CAAC;AAAA,EAC3C;AAAA;AAGF,SAAS,aAAa,CAAC,YAAoB,QAAgB,KAAmB;AAAA,EAC5E,IAAI,IAAI,WAAW,GAAG;AAAA,IACpB,MAAM,IAAI,wBACR,aAAa,wBAAwB,qDACvC;AAAA,EACF;AAAA;AAGF,SAAS,gBAAgB,CACvB,YACA,OACA,QACA,KACM;AAAA,EACN,MAAM,cAAc,MAAM,KAAK,CAAC,SAAS,KAAK,OAAO,MAAM;AAAA,EAC3D,IAAI,aAAa;AAAA,IACf,MAAM,IAAI,wBACR,+BAA+B,wBAAwB,cACzD;AAAA,EACF;AAAA,EAEA,MAAM,eAAe,MAAM,KAAK,CAAC,SAAS,KAAK,QAAQ,GAAG;AAAA,EAC1D,IAAI,cAAc;AAAA,IAChB,MAAM,IAAI,wBACR,gCAAgC,qBAAqB,0BAA0B,aAAa,YAAY,8BAC1G;AAAA,EACF;AAAA;AAGF,SAAS,qBAAqB,CAAC,IAAoB;AAAA,EACjD,MAAM,WAAW,GACd,KAAK,EACL,MAAM,eAAe,EACrB,OAAO,CAAC,YAAY,QAAQ,SAAS,CAAC;AAAA,EAEzC,OAAO,SACJ,IAAI,CAAC,SAAS,UAAU;AAAA,IACvB,MAAM,aAAa,aAAa,OAAO;AAAA,IACvC,OAAO,UAAU,IAAI,aAAa,WAAW,UAAU;AAAA,GACxD,EACA,KAAK,EAAE;AAAA;AAGZ,SAAS,YAAY,CAAC,OAAuB;AAAA,EAC3C,OAAO,MAAM,WAAW,IAAI,QAAQ,GAAG,MAAM,GAAG,YAAY,IAAI,MAAM,MAAM,CAAC;AAAA;AAG/E,SAAS,UAAU,CAAC,OAAuB;AAAA,EACzC,OAAO,MAAM,WAAW,IAAI,QAAQ,GAAG,MAAM,GAAG,YAAY,IAAI,MAAM,MAAM,CAAC;AAAA;AAG/E,SAAS,uBAAuB,CAAC,OAAgD;AAAA,EAC/E,OAAO,OAAO,UAAU;AAAA;AAG1B,SAAS,+BAA+B,CAAC,OAAwD;AAAA,EAC/F,OAAO,OAAO,UAAU;AAAA;;AC/bnB,SAAS,yBAAyB,CAAC,OAAgB,UAAuC;AAAA,EAC/F,OAAO,gBACL,wBACA,sBAAsB,OAAO,iCAAiC,GAC9D;AAAA,IACE,OAAO;AAAA,IACP,SAAS,2BAA2B,QAAQ;AAAA,EAC9C,CACF;AAAA;AAIK,SAAS,yBAAyB,CAAC,OAAyB;AAAA,EACjE,OAAO,YAAY,KAAK,KAAK,MAAM,SAAS,0BAA0B,MAAM,UAAU,YAClF,MAAM,QACN;AAAA;AAGN,SAAS,0BAA0B,CAAC,UAAuC;AAAA,EACzE,MAAM,OAAO;AAAA,IACX,YAAY,SAAS;AAAA,IACrB,eAAe,SAAS;AAAA,IACxB,QAAQ,SAAS;AAAA,OACb,SAAS,YAAY,EAAE,WAAW,SAAS,UAAU,IAAI,CAAC;AAAA,EAChE;AAAA,EAEA,QAAQ,SAAS,MAAM;AAAA,SAChB;AAAA,MACH,OAAO,KAAK,MAAM,QAAQ,SAAS,MAAM,OAAO;AAAA,SAC7C;AAAA,MACH,OAAO;AAAA,WACF;AAAA,QACH,UAAU,SAAS,MAAM;AAAA,WACrB,SAAS,MAAM,cAAc,EAAE,aAAa,SAAS,MAAM,YAAY,IAAI,CAAC;AAAA,MAClF;AAAA,SACG;AAAA,MACH,OAAO,KAAK,MAAM,SAAS,SAAS,MAAM,QAAQ;AAAA,SAC/C;AAAA,MACH,OAAO,KAAK,MAAM,gBAAgB,SAAS,MAAM,eAAe;AAAA;AAAA;",
-  "debugId": "5C2B621CC3B063C864756E2164756E21",
-  "names": []
-}