@sixb/core 0.1.6 → 0.1.8

package/dist/{chunk-5gynx4xn.js → chunk-mwsxn98e.js}

@@ -4,31 +4,32 @@ import {
 } from "./chunk-9t8f5xfx.js";
 import {
   registerProjectionRegistry
-} from "./chunk-819wnjz8.js";
+} from "./chunk-ajnan18g.js";
 import {
   LoggingService
-} from "./chunk-ghteq96b.js";
+} from "./chunk-s5y30bc9.js";
 import {
   OntologyOutboxDispatcher,
   createDomainEventService
-} from "./chunk-f2rt4vkh.js";
+} from "./chunk-n2w475r0.js";
 import {
   discoverOntologySources,
   discoverProjectDefinitions,
-  validateRulesAtStartup
-} from "./chunk-dy311asx.js";
+  validateRulesAtStartup,
+  validateSharesAtStartup
+} from "./chunk-3xep5cjx.js";
 import {
   validateSchedulesAtStartup
 } from "./chunk-5sz8ta9r.js";
 import {
-  assertDatasetDefinition
-} from "./chunk-a31h57d5.js";
+  toolsFromProjectConfig
+} from "./chunk-4qfkag59.js";
 import {
+  assertNoAgentDefinitions,
   createBoundSixb,
-  validateAgentGroupReferences,
-  validateAgentToolsAtStartup,
+  validateWorkflowAgentStepGroupReferences,
   validateWorkflowsAtStartup
-} from "./chunk-nva1xkjz.js";
+} from "./chunk-xajtptbw.js";
 import {
   ConnectorError,
   ConnectorNotFoundError,
@@ -41,7 +42,7 @@ import {
   providerFailureCode,
   recoverConnectorFailure,
   storageBoundaryError
-} from "./chunk-tg5mee00.js";
+} from "./chunk-wtf06et8.js";
 import {
   createOntologyMutationRuntime,
   registerOntologyMutationRuntime
@@ -53,41 +54,48 @@ import {
 import {
   registerConnectorConnectionCallbackProcess
 } from "./chunk-nf4r78r4.js";
+import {
+  assertDatasetDefinition
+} from "./chunk-pc7ys28c.js";
 import {
   ActionRegistry
-} from "./chunk-0hc5j867.js";
+} from "./chunk-v1xppd0y.js";
 import {
-  RuntimeError
-} from "./chunk-a44d5zgd.js";
+  createAuthorizedObjectReader
+} from "./chunk-h5vqbfmd.js";
 import {
   ProjectionRegistry,
   createOntologyMaterializer
-} from "./chunk-nkbfrt0c.js";
+} from "./chunk-f26bck4t.js";
 import {
   ensureExecutionRecord
-} from "./chunk-f6erf2vv.js";
+} from "./chunk-k522z7v6.js";
 import {
   checkStorageSchema,
   isMigrationCapableStorage
-} from "./chunk-t624af60.js";
+} from "./chunk-sbzzr4kx.js";
 import {
   CONNECTOR_CONNECTION_RUN_FAILURE_CODES,
   ConnectorConnectionStorageError
 } from "./chunk-5gd7tpv6.js";
 import {
-  OntologyRegistry
-} from "./chunk-3j7573mj.js";
+  RuntimeError,
+  createModelCatalog
+} from "./chunk-p2vqaxkc.js";
 import {
   attachSixbErrorReporter,
   shareSixbErrorReporter
-} from "./chunk-dsrkgtnh.js";
+} from "./chunk-jq43kdvk.js";
 import {
   reportEventDeliveryFailure
-} from "./chunk-bhxaq2nn.js";
+} from "./chunk-qw9gvjv5.js";
 import {
   AuthRuntime,
   SecurityRegistry
-} from "./chunk-1e8m6yn3.js";
+} from "./chunk-4sm0aznx.js";
+import {
+  OntologyRegistry
+} from "./chunk-2dw777qw.js";
 import {
   AuthRuntimeError,
   isMagicLinkAuthStrategy,
@@ -95,12 +103,13 @@ import {
 } from "./chunk-xwnf87e1.js";
 import {
   AuthorizationError,
+  captureExecutionScope,
   resolveExecutionScopeAuthorization
-} from "./chunk-f83ka50g.js";
+} from "./chunk-p1x242ad.js";
 import {
   captureSixbFailure,
   isSixbError
-} from "./chunk-0172wgm9.js";
+} from "./chunk-2xns679x.js";
 // src/webhooks/errors.ts
 class WebhookValidationError extends Error {
   name = "WebhookValidationError";
@@ -2802,33 +2811,13 @@ async function captureFailure(run, failures, fallback) {
     return fallback;
   }
 }
-// src/runtime/definitions.ts
-function createDefinitionCatalog(definitionsById) {
-  return Object.freeze({
-    list: () => [...definitionsById.values()],
-    getById: (id) => definitionsById.get(id) ?? null
-  });
-}
-
-// src/models/index.ts
-function modelRef(model) {
-  return `${model.provider}/${model.modelId}`;
-}
-function createModelCatalog(input) {
-  const byRef = new Map;
-  for (const model of input.language) {
-    const ref = modelRef(model);
-    if (byRef.has(ref)) {
-      throw new RuntimeError(`[Sixb] Duplicate language model '${ref}' in 'models'. Each provider and model id pair may be configured once.`);
-    }
-    byRef.set(ref, Object.freeze({ ref, provider: model.provider, modelId: model.modelId, model }));
-  }
-  const [defaultEntry] = byRef.values();
-  if (defaultEntry === undefined) {
-    throw new RuntimeError("[Sixb] 'models.language' needs at least one model. Configure one or omit 'models' from createSixb().");
-  }
+// src/agents/tool-catalog.ts
+function createAgentToolCatalog(definitions) {
+  const tools = toolsFromProjectConfig(definitions);
+  const toolsByName = new Map(tools.map((tool) => [tool.name, tool]));
   return Object.freeze({
-    language: Object.freeze({ ...createDefinitionCatalog(byRef), default: defaultEntry })
+    list: () => tools,
+    getByName: (name) => toolsByName.get(name) ?? null
   });
 }
 
@@ -2876,16 +2865,27 @@ function* datasetWriters(syncs, pipelines) {
   }
 }
 
+// src/runtime/definitions.ts
+function createDefinitionCatalog(definitionsById) {
+  return Object.freeze({
+    list: () => [...definitionsById.values()],
+    getById: (id) => definitionsById.get(id) ?? null
+  });
+}
+
 // src/runtime/resolve-definitions.ts
 function resolveDefinitions(options) {
+  assertNoAgentDefinitions(options);
   const ontology = new OntologyRegistry({ sources: options.ontology });
   const actionRegistry = new ActionRegistry({ actions: options.actions ?? [], ontology });
   const registeredActionIds = new Set(actionRegistry.list().map((action) => action.id));
-  const agents = options.agents ?? [];
-  validateAgentToolsAtStartup(agents);
+  const sharesById = validateSharesAtStartup({
+    shares: options.shares ?? [],
+    ontology,
+    actions: actionRegistry
+  });
   const models = options.models === undefined ? undefined : createModelCatalog(options.models);
-  validateAgentModelReferences(agents, models);
-  const agentsById = indexUniqueDefinitions("agent", agents);
+  const tools = createAgentToolCatalog(options.tools);
   const connectorsById = indexUniqueDefinitions("connector", options.connectors ?? []);
   const datasetsById = new Map;
   for (const dataset of options.datasets ?? []) {
@@ -2932,7 +2932,8 @@ function resolveDefinitions(options) {
     workflows: options.workflows ?? [],
     registeredSchedules: schedulesById,
     registeredActionIds,
-    registeredAgentIds: new Set(agentsById.keys())
+    ...models === undefined ? {} : { models },
+    tools
   });
   const workflowsById = indexUniqueDefinitions("workflow", workflows);
   const security = new SecurityRegistry({
@@ -2945,11 +2946,12 @@ function resolveDefinitions(options) {
     workflowIds: new Set(workflowsById.keys()),
     syncIds: new Set(syncsById.keys()),
     pipelineIds: new Set(pipelinesById.keys()),
-    agentIds: new Set(agentsById.keys()),
+    agentAvailable: models !== undefined,
     connectorIds: new Set(connectorsById.keys()),
+    shareIds: new Set(sharesById.keys()),
     getSubTypes: (objectTypeId) => ontology.listSubTypes(objectTypeId)
   });
-  validateAgentGroupReferences(agents, security);
+  validateWorkflowAgentStepGroupReferences(workflows, security);
   const projectionRegistry = new ProjectionRegistry({
     projections: options.projections ?? [],
     ontology,
@@ -2962,7 +2964,7 @@ function resolveDefinitions(options) {
   return Object.freeze({
     ontology,
     actions: actionRegistry,
-    agents: createDefinitionCatalog(agentsById),
+    tools,
     connectors: createDefinitionCatalog(connectorsById),
     datasets: createDefinitionCatalog(datasetsById),
     ...models === undefined ? {} : { models },
@@ -2971,6 +2973,7 @@ function resolveDefinitions(options) {
     rules: createDefinitionCatalog(rulesById),
     schedules: createDefinitionCatalog(schedulesById),
     security,
+    shares: createDefinitionCatalog(sharesById),
     syncs: createDefinitionCatalog(syncsById),
     workflows: createDefinitionCatalog(workflowsById)
   });
@@ -3016,17 +3019,6 @@ function validateScheduleReferences(consumerKind, consumerId, references, schedu
     }
   }
 }
-function validateAgentModelReferences(agents, models) {
-  if (models === undefined) {
-    return;
-  }
-  for (const agent of agents) {
-    const ref = modelRef(agent.model);
-    if (models.language.getById(ref) === null) {
-      throw new RuntimeError(`[Sixb] Agent '${agent.id}' uses unknown language model '${ref}'. Add it to 'models.language' in createSixb().`);
-    }
-  }
-}
 
 // src/runtime/storage-readiness.ts
 var DEFAULT_SCHEMA_RETRY_DELAY_MS = 60000;
@@ -3196,20 +3188,27 @@ class SixbHost {
     });
   }
   withScope(scope) {
-    const authorization = resolveExecutionScopeAuthorization(this.projectId, scope);
-    if (authorization.ref.type === "kernel") {
+    const capturedScope = captureExecutionScope(scope);
+    const authorization = resolveExecutionScopeAuthorization(this.projectId, capturedScope);
+    if (authorization.type === "unrestricted" && authorization.ref.type === "kernel") {
       throw new Error("[Sixb] Kernel authority cannot be bound to the domain SDK.");
     }
+    const objectReader = createAuthorizedObjectReader({
+      scope: capturedScope,
+      ontology: this.hostContext.ontology,
+      objectStorage: this.storage.objects
+    });
     const runtime = {
       ...this.hostContext,
-      runtimeAuthorization: scope.authorization,
+      runtimeAuthorization: capturedScope.authorization,
+      objectReader,
       ...authorization.type === "principal" ? { authorization: authorization.context } : {}
     };
     registerOntologyMutationRuntime(runtime, createOntologyMutationRuntime({
-      materializer: this.materializer.withScope(scope),
+      materializer: this.materializer.withScope(capturedScope),
       notifyCommittedFacts: () => this.committedFacts.notify()
     }));
-    return createBoundSixb(runtime, this.sixbDependencies(), scope.execution);
+    return createBoundSixb(runtime, this.sixbDependencies(), capturedScope.execution);
   }
   get id() {
     return this.projectId;
@@ -3250,7 +3249,8 @@ class SixbHost {
       logging: this.logging,
       connectorService: this.connectorService,
       ...this.connectorService.connectionProcess === undefined ? {} : { connectorConnections: this.connectorService.connectionProcess },
-      blobStorage: this.blobStorage
+      blobStorage: this.blobStorage,
+      lakeStorage: this.lakeStorage
     };
   }
 }
@@ -3287,6 +3287,7 @@ function assertConnectorConnectionSurfaces(connectors) {
 
 // src/runtime/create.ts
 async function createSixb(options) {
+  assertNoAgentDefinitions(options);
   const projectRoot = resolve2(options.projectRoot ?? process.cwd());
   const discoveredOntology = await discoverOntologySources(projectRoot);
   const allSources = [...options.ontologies ?? [], ...discoveredOntology];
@@ -3321,11 +3322,12 @@ async function createSixb(options) {
     groups: [...options.groups ?? [], ...definitions.groups],
     roles: [...options.roles ?? [], ...definitions.roles],
     membershipPolicies: [...options.membershipPolicies ?? [], ...definitions.membershipPolicies],
-    agents: [...options.agents ?? [], ...definitions.agents],
     models: options.models,
+    tools: options.tools,
+    shares: [...options.shares ?? [], ...definitions.shares],
     auth: options.auth
   });
 }
 export { WebhookValidationError, defineWebhook, webhookConnector, UnverifiedWebhookError, resolveWebhookVerification, warnUnverifiedWebhook, SixbHost, createSixb };
 
-//# debugId=44FA1D0A5E5FF34064756E2164756E21
+//# debugId=34CB5AA96E2012A064756E2164756E21