@sixb/core 0.1.6 → 0.1.8

package/dist/execution/primitive.js

@@ -1,67 +1,76 @@
 // @bun
 import {
   isBoundSixb
-} from "../chunk-nva1xkjz.js";
-import"../chunk-tg5mee00.js";
-import"../chunk-8gv5z0zm.js";
-import"../chunk-5sxb1168.js";
-import"../chunk-4rh2m6zg.js";
+} from "../chunk-xajtptbw.js";
+import"../chunk-wtf06et8.js";
+import"../chunk-c15dr03f.js";
+import"../chunk-v4en4jc2.js";
+import"../chunk-w9tg6yyb.js";
+import"../chunk-aa2pen2v.js";
 import {
   getOntologyMutationRuntime
 } from "../chunk-xhy826cz.js";
-import"../chunk-md8k0r54.js";
-import"../chunk-rte5sm3z.js";
-import"../chunk-qewtks41.js";
-import"../chunk-8b55ygje.js";
-import"../chunk-51fjndv0.js";
+import"../chunk-4rh2m6zg.js";
 import"../chunk-8m5ejdpn.js";
 import"../chunk-nf4r78r4.js";
-import"../chunk-0hc5j867.js";
-import"../chunk-a44d5zgd.js";
-import"../chunk-nkbfrt0c.js";
+import"../chunk-359jm1jw.js";
+import"../chunk-n4khvw9n.js";
+import"../chunk-pc7ys28c.js";
+import"../chunk-v1xppd0y.js";
+import"../chunk-h5vqbfmd.js";
+import"../chunk-q0k9nc5a.js";
+import"../chunk-rte5sm3z.js";
+import"../chunk-f26bck4t.js";
 import"../chunk-96swp2wd.js";
 import {
   restoreTrustedPrimitiveExecutionScope
-} from "../chunk-f6erf2vv.js";
-import"../chunk-t624af60.js";
-import"../chunk-72q2y8hn.js";
-import"../chunk-xc7hq65b.js";
-import"../chunk-cy0n5dms.js";
-import"../chunk-dysw7nsm.js";
-import"../chunk-62c7t4jc.js";
-import"../chunk-ezake7g1.js";
-import"../chunk-fe5ev6mr.js";
-import"../chunk-htq0qh7z.js";
-import"../chunk-xkthy56g.js";
-import"../chunk-1g8negke.js";
-import"../chunk-hceck7dq.js";
-import"../chunk-t9xghkva.js";
-import"../chunk-drjqm1aa.js";
+} from "../chunk-k522z7v6.js";
+import"../chunk-sbzzr4kx.js";
+import"../chunk-4jjp5k14.js";
+import"../chunk-rv2hkwwa.js";
+import"../chunk-nx7k8tpr.js";
+import"../chunk-4yqmp43v.js";
+import"../chunk-wdage1eb.js";
+import"../chunk-5ntny1qx.js";
+import"../chunk-nn0tekr1.js";
+import"../chunk-p03r0h5s.js";
+import"../chunk-jecn6t54.js";
 import"../chunk-5gd7tpv6.js";
-import"../chunk-h9kxd41f.js";
+import"../chunk-rafagrwr.js";
+import"../chunk-8tsf6dmc.js";
+import"../chunk-yp8ee62z.js";
+import"../chunk-ka3a2ft3.js";
+import"../chunk-w1tvjszy.js";
+import"../chunk-p1rzczbt.js";
+import"../chunk-j1sbhm7p.js";
 import"../chunk-9dzba0f2.js";
-import"../chunk-vybf6pkp.js";
+import"../chunk-dbc80ad7.js";
 import"../chunk-ry24jbr1.js";
-import"../chunk-3j7573mj.js";
-import"../chunk-4gz41why.js";
+import"../chunk-p2vqaxkc.js";
+import"../chunk-trxxmgnf.js";
 import"../chunk-zcnhxkvd.js";
+import"../chunk-w3e09qqk.js";
+import"../chunk-51fjndv0.js";
 import"../chunk-1evzqhks.js";
-import"../chunk-dsrkgtnh.js";
-import"../chunk-bhxaq2nn.js";
+import"../chunk-jq43kdvk.js";
+import"../chunk-qw9gvjv5.js";
 import"../chunk-yt8wphsx.js";
-import"../chunk-rdeagz6b.js";
-import"../chunk-dm72y8wt.js";
-import"../chunk-t0jjkep3.js";
-import"../chunk-1e8m6yn3.js";
-import"../chunk-rhrbz7d4.js";
+import"../chunk-5e3pq99w.js";
+import"../chunk-7y0f6rf1.js";
+import"../chunk-d8qkxt2v.js";
+import"../chunk-4sm0aznx.js";
+import"../chunk-4a849fr1.js";
+import"../chunk-2dw777qw.js";
+import"../chunk-19jp6g9d.js";
 import"../chunk-xwnf87e1.js";
-import"../chunk-f83ka50g.js";
-import"../chunk-rnshztfq.js";
-import"../chunk-04b07a9q.js";
+import"../chunk-p1x242ad.js";
+import"../chunk-r8jrnexe.js";
+import"../chunk-h0k55pc7.js";
 import"../chunk-dktq02ne.js";
-import"../chunk-zqysyfjt.js";
-import"../chunk-0172wgm9.js";
-import"../chunk-t8t39h7v.js";
+import"../chunk-04b07a9q.js";
+import"../chunk-08m3b6w8.js";
+import"../chunk-2xns679x.js";
+import"../chunk-n6jxh8sw.js";
 import"../chunk-y64skrwp.js";
 
 // src/execution/primitive.ts
@@ -87,4 +96,4 @@ export {
   bindDurablePrimitiveExecution
 };
 
-//# debugId=E4BA1F2A0FAF53ED64756E2164756E21
+//# debugId=70A35A5EF49A574764756E2164756E21

package/dist/execution/primitive.js.map

@@ -4,7 +4,7 @@
   "sourcesContent": [
     "import type { OntologySource } from \"../ontology\"\nimport type { OntologyMutationRuntime } from \"../runtime/ontology-mutations\"\nimport { getOntologyMutationRuntime } from \"../runtime/ontology-mutations\"\nimport { isBoundSixb, type Sixb } from \"../runtime/sixb\"\nimport type { ExecutionRecord } from \"../storage/executions\"\nimport { restoreTrustedPrimitiveExecutionScope } from \"./durable\"\nimport type { ExecutionScope, TrustedPrimitiveRef } from \"./types\"\n\n/** Minimal host boundary required by trusted primitive workers. */\nexport interface PrimitiveExecutionHost {\n  readonly id: string\n  withScope(scope: ExecutionScope): object\n}\n\nexport interface BoundPrimitiveExecution {\n  readonly sixb: Sixb<readonly OntologySource[]>\n  /** Internal mutation port guarded by the same runtime authority as `sixb`. */\n  readonly ontologyMutations: OntologyMutationRuntime\n}\n\n/** Bind a worker to the immutable execution already owned by its durable primitive run. */\nexport function bindDurablePrimitiveExecution(\n  host: PrimitiveExecutionHost,\n  input: {\n    readonly execution: ExecutionRecord\n    readonly primitive: TrustedPrimitiveRef\n  }\n): BoundPrimitiveExecution {\n  return bindPrimitiveScope(host, restoreTrustedPrimitiveExecutionScope(input))\n}\n\nfunction bindPrimitiveScope(\n  host: PrimitiveExecutionHost,\n  scope: ExecutionScope\n): BoundPrimitiveExecution {\n  let ontologyMutations: OntologyMutationRuntime | undefined\n\n  const sixb = host.withScope(scope)\n  if (!isBoundSixb(sixb)) {\n    throw new Error(\"[Sixb] Primitive execution host returned an invalid bound SDK.\")\n  }\n  const bound: BoundPrimitiveExecution = {\n    sixb,\n    get ontologyMutations() {\n      ontologyMutations ??= getOntologyMutationRuntime(sixb)\n      return ontologyMutations\n    },\n  }\n  return Object.freeze(bound)\n}\n"
   ],
-  "mappings": ";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAqBO,SAAS,6BAA6B,CAC3C,MACA,OAIyB;AAAA,EACzB,OAAO,mBAAmB,MAAM,sCAAsC,KAAK,CAAC;AAAA;AAG9E,SAAS,kBAAkB,CACzB,MACA,OACyB;AAAA,EACzB,IAAI;AAAA,EAEJ,MAAM,OAAO,KAAK,UAAU,KAAK;AAAA,EACjC,IAAI,CAAC,YAAY,IAAI,GAAG;AAAA,IACtB,MAAM,IAAI,MAAM,gEAAgE;AAAA,EAClF;AAAA,EACA,MAAM,QAAiC;AAAA,IACrC;AAAA,QACI,iBAAiB,GAAG;AAAA,MACtB,sBAAsB,2BAA2B,IAAI;AAAA,MACrD,OAAO;AAAA;AAAA,EAEX;AAAA,EACA,OAAO,OAAO,OAAO,KAAK;AAAA;",
-  "debugId": "E4BA1F2A0FAF53ED64756E2164756E21",
+  "mappings": ";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAqBO,SAAS,6BAA6B,CAC3C,MACA,OAIyB;AAAA,EACzB,OAAO,mBAAmB,MAAM,sCAAsC,KAAK,CAAC;AAAA;AAG9E,SAAS,kBAAkB,CACzB,MACA,OACyB;AAAA,EACzB,IAAI;AAAA,EAEJ,MAAM,OAAO,KAAK,UAAU,KAAK;AAAA,EACjC,IAAI,CAAC,YAAY,IAAI,GAAG;AAAA,IACtB,MAAM,IAAI,MAAM,gEAAgE;AAAA,EAClF;AAAA,EACA,MAAM,QAAiC;AAAA,IACrC;AAAA,QACI,iBAAiB,GAAG;AAAA,MACtB,sBAAsB,2BAA2B,IAAI;AAAA,MACrD,OAAO;AAAA;AAAA,EAEX;AAAA,EACA,OAAO,OAAO,OAAO,KAAK;AAAA;",
+  "debugId": "70A35A5EF49A574764756E2164756E21",
   "names": []
 }

package/dist/execution/request.d.ts

@@ -1,9 +1,12 @@
 import type { AuthorizationContext } from "../authorization";
 import type { OntologySource } from "../ontology";
 import { type Sixb } from "../runtime/sixb";
+import { type ShareAccessPlan } from "../shares/access-plan";
+import type { ObjectReadExecutionLimits } from "../storage/objects/execution-limits";
 import type { AuthorizationRef, ExecutionScope } from "./types";
 export type { ActionRunsRuntime, ActionsRuntime } from "../actions/execution";
-export type { AgentRunListResult, AgentRunsRuntime, AgentRunView, AgentsRuntime, AgentThreadsRuntime, CreateExecutionAgentThreadInput, ExecutionAgentRequestInput, ListExecutionAgentThreadsInput, } from "../agents/execution";
+export type { AgentRunListResult, AgentRunsRuntime, AgentRuntime, AgentRunView, AgentThreadsRuntime, CreateExecutionAgentThreadInput, ExecutionAgentRequestInput, ExecutionAgentRunResult, ListExecutionAgentThreadsInput, } from "../agents/execution";
+export type { AgentDescriptor } from "../agents/types";
 export type { AuthorizationContext } from "../authorization";
 export type { DatasetsRuntime } from "../datasets/execution";
 export type { EventsRuntime } from "../events/execution";
@@ -13,6 +16,7 @@ export type { PipelineRunsRuntime, PipelinesRuntime, } from "../pipelines/execut
 export type { ProjectionRunsRuntime, ProjectionsRuntime, } from "../projections/execution";
 export type { RuleStatesRuntime, RulesRuntime } from "../rules/execution";
 export type { Sixb } from "../runtime/sixb";
+export type { AgentThreadRecord, ListAgentThreadsResult } from "../storage/agents";
 export type { SyncRunsRuntime, SyncsRuntime } from "../syncs/execution";
 export type { LatestWorkflowRunListResult, ListWorkflowRunNodesInput, WorkflowAgentNodeRunView, WorkflowInterventionsRuntime, WorkflowNodeRunListResult, WorkflowNodeRunView, WorkflowRunListResult, WorkflowRunsRuntime, WorkflowRunView, WorkflowsRuntime, } from "../workflows/execution";
 export type { AuthorizationRef, ExecutionContext } from "./types";
@@ -22,6 +26,15 @@ export type RequestExecutionAuthorization = {
     readonly credential?: Extract<AuthorizationRef, {
         readonly type: "principal";
     }>["credential"];
+} | {
+    readonly type: "delegated";
+    readonly access: ShareAccessPlan;
+    readonly limits?: ObjectReadExecutionLimits;
+    readonly delegation: {
+        readonly kind: "share";
+        readonly grantId: string;
+        readonly sessionId: string;
+    };
 } | {
     readonly type: "disabled";
 };

package/dist/execution/request.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"request.d.ts","sourceRoot":"","sources":["../../src/execution/request.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,kBAAkB,CAAA;AAC5D,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,aAAa,CAAA;AACjD,OAAO,EAAe,KAAK,IAAI,EAAE,MAAM,iBAAiB,CAAA;AAExD,OAAO,KAAK,EAAE,gBAAgB,EAAE,cAAc,EAAE,MAAM,SAAS,CAAA;AAE/D,YAAY,EAAE,iBAAiB,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAA;AAC7E,YAAY,EACV,kBAAkB,EAClB,gBAAgB,EAChB,YAAY,EACZ,aAAa,EACb,mBAAmB,EACnB,+BAA+B,EAC/B,0BAA0B,EAC1B,8BAA8B,GAC/B,MAAM,qBAAqB,CAAA;AAC5B,YAAY,EAAE,oBAAoB,EAAE,MAAM,kBAAkB,CAAA;AAC5D,YAAY,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAA;AAC5D,YAAY,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAA;AACxD,YAAY,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAA;AACvD,YAAY,EACV,yBAAyB,EACzB,kBAAkB,EAClB,cAAc,GACf,MAAM,sBAAsB,CAAA;AAC7B,YAAY,EACV,mBAAmB,EACnB,gBAAgB,GACjB,MAAM,wBAAwB,CAAA;AAC/B,YAAY,EACV,qBAAqB,EACrB,kBAAkB,GACnB,MAAM,0BAA0B,CAAA;AACjC,YAAY,EAAE,iBAAiB,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAA;AACzE,YAAY,EAAE,IAAI,EAAE,MAAM,iBAAiB,CAAA;AAC3C,YAAY,EAAE,eAAe,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAA;AACvE,YAAY,EACV,2BAA2B,EAC3B,yBAAyB,EACzB,wBAAwB,EACxB,4BAA4B,EAC5B,yBAAyB,EACzB,mBAAmB,EACnB,qBAAqB,EACrB,mBAAmB,EACnB,eAAe,EACf,gBAAgB,GACjB,MAAM,wBAAwB,CAAA;AAC/B,YAAY,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,MAAM,SAAS,CAAA;AAEjE,MAAM,MAAM,6BAA6B,GACrC;IACE,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAA;IAC1B,QAAQ,CAAC,OAAO,EAAE,oBAAoB,CAAA;IACtC,QAAQ,CAAC,UAAU,CAAC,EAAE,OAAO,CAAC,gBAAgB,EAAE;QAAE,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAA;KAAE,CAAC,CAAC,YAAY,CAAC,CAAA;CAC9F,GACD;IAAE,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAA;CAAE,CAAA;AAEjC,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAA;IACzB,QAAQ,CAAC,aAAa,EAAE,6BAA6B,CAAA;CACtD;AAED,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;IACnB,SAAS,CAAC,KAAK,EAAE,cAAc,GAAG,MAAM,CAAA;CACzC;AAED,kGAAkG;AAClG,wBAAgB,oBAAoB,CAClC,IAAI,EAAE,oBAAoB,EAC1B,KAAK,EAAE,yBAAyB,GAC/B,IAAI,CAAC,SAAS,cAAc,EAAE,CAAC,CAqBjC"}
+{"version":3,"file":"request.d.ts","sourceRoot":"","sources":["../../src/execution/request.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,kBAAkB,CAAA;AAC5D,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,aAAa,CAAA;AACjD,OAAO,EAAe,KAAK,IAAI,EAAE,MAAM,iBAAiB,CAAA;AACxD,OAAO,EAEL,KAAK,eAAe,EAErB,MAAM,uBAAuB,CAAA;AAC9B,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,qCAAqC,CAAA;AAMpF,OAAO,KAAK,EAAE,gBAAgB,EAAE,cAAc,EAAE,MAAM,SAAS,CAAA;AAE/D,YAAY,EAAE,iBAAiB,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAA;AAC7E,YAAY,EACV,kBAAkB,EAClB,gBAAgB,EAChB,YAAY,EACZ,YAAY,EACZ,mBAAmB,EACnB,+BAA+B,EAC/B,0BAA0B,EAC1B,uBAAuB,EACvB,8BAA8B,GAC/B,MAAM,qBAAqB,CAAA;AAC5B,YAAY,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAA;AACtD,YAAY,EAAE,oBAAoB,EAAE,MAAM,kBAAkB,CAAA;AAC5D,YAAY,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAA;AAC5D,YAAY,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAA;AACxD,YAAY,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAA;AACvD,YAAY,EACV,yBAAyB,EACzB,kBAAkB,EAClB,cAAc,GACf,MAAM,sBAAsB,CAAA;AAC7B,YAAY,EACV,mBAAmB,EACnB,gBAAgB,GACjB,MAAM,wBAAwB,CAAA;AAC/B,YAAY,EACV,qBAAqB,EACrB,kBAAkB,GACnB,MAAM,0BAA0B,CAAA;AACjC,YAAY,EAAE,iBAAiB,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAA;AACzE,YAAY,EAAE,IAAI,EAAE,MAAM,iBAAiB,CAAA;AAC3C,YAAY,EAAE,iBAAiB,EAAE,sBAAsB,EAAE,MAAM,mBAAmB,CAAA;AAClF,YAAY,EAAE,eAAe,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAA;AACvE,YAAY,EACV,2BAA2B,EAC3B,yBAAyB,EACzB,wBAAwB,EACxB,4BAA4B,EAC5B,yBAAyB,EACzB,mBAAmB,EACnB,qBAAqB,EACrB,mBAAmB,EACnB,eAAe,EACf,gBAAgB,GACjB,MAAM,wBAAwB,CAAA;AAC/B,YAAY,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,MAAM,SAAS,CAAA;AAEjE,MAAM,MAAM,6BAA6B,GACrC;IACE,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAA;IAC1B,QAAQ,CAAC,OAAO,EAAE,oBAAoB,CAAA;IACtC,QAAQ,CAAC,UAAU,CAAC,EAAE,OAAO,CAAC,gBAAgB,EAAE;QAAE,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAA;KAAE,CAAC,CAAC,YAAY,CAAC,CAAA;CAC9F,GACD;IACE,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAA;IAC1B,QAAQ,CAAC,MAAM,EAAE,eAAe,CAAA;IAChC,QAAQ,CAAC,MAAM,CAAC,EAAE,yBAAyB,CAAA;IAC3C,QAAQ,CAAC,UAAU,EAAE;QACnB,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAA;QACtB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;QACxB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;KAC3B,CAAA;CACF,GACD;IAAE,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAA;CAAE,CAAA;AAEjC,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAA;IACzB,QAAQ,CAAC,aAAa,EAAE,6BAA6B,CAAA;CACtD;AAED,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;IACnB,SAAS,CAAC,KAAK,EAAE,cAAc,GAAG,MAAM,CAAA;CACzC;AAED,kGAAkG;AAClG,wBAAgB,oBAAoB,CAClC,IAAI,EAAE,oBAAoB,EAC1B,KAAK,EAAE,yBAAyB,GAC/B,IAAI,CAAC,SAAS,cAAc,EAAE,CAAC,CAUjC"}

package/dist/execution/request.js

@@ -1,67 +1,80 @@
 // @bun
 import {
+  createDelegatedRequestScope,
   createDisabledRequestScope,
   createPrincipalRequestScope
-} from "../chunk-x2yw73hy.js";
+} from "../chunk-fvt9rjsa.js";
 import {
   isBoundSixb
-} from "../chunk-nva1xkjz.js";
-import"../chunk-tg5mee00.js";
-import"../chunk-8gv5z0zm.js";
-import"../chunk-5sxb1168.js";
-import"../chunk-4rh2m6zg.js";
+} from "../chunk-xajtptbw.js";
+import"../chunk-wtf06et8.js";
+import"../chunk-c15dr03f.js";
+import"../chunk-v4en4jc2.js";
+import"../chunk-w9tg6yyb.js";
+import"../chunk-aa2pen2v.js";
 import"../chunk-xhy826cz.js";
-import"../chunk-md8k0r54.js";
-import"../chunk-rte5sm3z.js";
-import"../chunk-qewtks41.js";
-import"../chunk-8b55ygje.js";
-import"../chunk-51fjndv0.js";
+import"../chunk-4rh2m6zg.js";
 import"../chunk-8m5ejdpn.js";
 import"../chunk-nf4r78r4.js";
-import"../chunk-0hc5j867.js";
-import"../chunk-a44d5zgd.js";
-import"../chunk-nkbfrt0c.js";
+import"../chunk-359jm1jw.js";
+import"../chunk-n4khvw9n.js";
+import"../chunk-pc7ys28c.js";
+import"../chunk-v1xppd0y.js";
+import"../chunk-h5vqbfmd.js";
+import"../chunk-q0k9nc5a.js";
+import"../chunk-rte5sm3z.js";
+import"../chunk-f26bck4t.js";
 import"../chunk-96swp2wd.js";
-import"../chunk-f6erf2vv.js";
-import"../chunk-t624af60.js";
-import"../chunk-72q2y8hn.js";
-import"../chunk-xc7hq65b.js";
-import"../chunk-cy0n5dms.js";
-import"../chunk-dysw7nsm.js";
-import"../chunk-62c7t4jc.js";
-import"../chunk-ezake7g1.js";
-import"../chunk-fe5ev6mr.js";
-import"../chunk-htq0qh7z.js";
-import"../chunk-xkthy56g.js";
-import"../chunk-1g8negke.js";
-import"../chunk-hceck7dq.js";
-import"../chunk-t9xghkva.js";
-import"../chunk-drjqm1aa.js";
+import"../chunk-k522z7v6.js";
+import"../chunk-sbzzr4kx.js";
+import"../chunk-4jjp5k14.js";
+import"../chunk-rv2hkwwa.js";
+import {
+  objectReadScopeForAccessPlan,
+  snapshotShareAccessPlan
+} from "../chunk-nx7k8tpr.js";
+import"../chunk-4yqmp43v.js";
+import"../chunk-wdage1eb.js";
+import"../chunk-5ntny1qx.js";
+import"../chunk-nn0tekr1.js";
+import"../chunk-p03r0h5s.js";
+import"../chunk-jecn6t54.js";
 import"../chunk-5gd7tpv6.js";
-import"../chunk-h9kxd41f.js";
+import"../chunk-rafagrwr.js";
+import"../chunk-8tsf6dmc.js";
+import"../chunk-yp8ee62z.js";
+import"../chunk-ka3a2ft3.js";
+import"../chunk-w1tvjszy.js";
+import"../chunk-p1rzczbt.js";
+import"../chunk-j1sbhm7p.js";
 import"../chunk-9dzba0f2.js";
-import"../chunk-vybf6pkp.js";
+import"../chunk-dbc80ad7.js";
 import"../chunk-ry24jbr1.js";
-import"../chunk-3j7573mj.js";
-import"../chunk-4gz41why.js";
+import"../chunk-p2vqaxkc.js";
+import"../chunk-trxxmgnf.js";
 import"../chunk-zcnhxkvd.js";
+import"../chunk-w3e09qqk.js";
+import"../chunk-51fjndv0.js";
 import"../chunk-1evzqhks.js";
-import"../chunk-dsrkgtnh.js";
-import"../chunk-bhxaq2nn.js";
+import"../chunk-jq43kdvk.js";
+import"../chunk-qw9gvjv5.js";
 import"../chunk-yt8wphsx.js";
-import"../chunk-rdeagz6b.js";
-import"../chunk-dm72y8wt.js";
-import"../chunk-t0jjkep3.js";
-import"../chunk-1e8m6yn3.js";
-import"../chunk-rhrbz7d4.js";
+import"../chunk-5e3pq99w.js";
+import"../chunk-7y0f6rf1.js";
+import"../chunk-d8qkxt2v.js";
+import"../chunk-4sm0aznx.js";
+import"../chunk-4a849fr1.js";
+import"../chunk-2dw777qw.js";
+import"../chunk-19jp6g9d.js";
 import"../chunk-xwnf87e1.js";
-import"../chunk-f83ka50g.js";
-import"../chunk-rnshztfq.js";
-import"../chunk-04b07a9q.js";
+import"../chunk-p1x242ad.js";
+import"../chunk-r8jrnexe.js";
+import"../chunk-h0k55pc7.js";
 import"../chunk-dktq02ne.js";
-import"../chunk-zqysyfjt.js";
-import"../chunk-0172wgm9.js";
-import"../chunk-t8t39h7v.js";
+import"../chunk-04b07a9q.js";
+import"../chunk-08m3b6w8.js";
+import"../chunk-2xns679x.js";
+import"../chunk-n6jxh8sw.js";
 import"../chunk-y64skrwp.js";
 
 // src/execution/request.ts
@@ -69,19 +82,44 @@ import { randomUUID } from "crypto";
 function bindRequestExecution(host, input) {
   const requestId = requestIdentifier(input.request);
   const correlationId = correlationIdentifier(input.request, requestId);
-  const scope = input.authorization.type === "principal" ? createPrincipalRequestScope({
-    projectId: host.id,
-    requestId,
-    correlationId,
-    context: input.authorization.context,
-    ...input.authorization.credential === undefined ? {} : { credential: input.authorization.credential }
-  }) : createDisabledRequestScope({ projectId: host.id, requestId, correlationId });
+  const scope = createRequestScope(host.id, requestId, correlationId, input.authorization);
   const sixb = host.withScope(scope);
   if (!isBoundSixb(sixb)) {
     throw new Error("[Sixb] Request host did not return an execution-bound Sixb SDK.");
   }
   return sixb;
 }
+function createRequestScope(projectId, requestId, correlationId, authorization) {
+  switch (authorization.type) {
+    case "principal":
+      return createPrincipalRequestScope({
+        projectId,
+        requestId,
+        correlationId,
+        context: authorization.context,
+        ...authorization.credential === undefined ? {} : { credential: authorization.credential }
+      });
+    case "delegated": {
+      const access = snapshotShareAccessPlan(authorization.access);
+      return createDelegatedRequestScope({
+        projectId,
+        requestId,
+        correlationId,
+        objectRead: {
+          selection: objectReadScopeForAccessPlan(access),
+          limits: authorization.limits ?? {
+            maxTraversalFacts: 1e4,
+            maxOutputJsonBytes: 8 * 1024 * 1024
+          }
+        },
+        actionApply: access.grants.flatMap((grant) => grant.kind === "action.apply" ? grant.subjects.map((subject) => ({ actionId: grant.actionId, subject })) : []),
+        delegation: authorization.delegation
+      });
+    }
+    case "disabled":
+      return createDisabledRequestScope({ projectId, requestId, correlationId });
+  }
+}
 function requestIdentifier(request) {
   return headerIdentifier(request, "x-request-id") ?? `req_${randomUUID()}`;
 }
@@ -96,4 +134,4 @@ export {
   bindRequestExecution
 };
 
-//# debugId=3784441E6A6BD84464756E2164756E21
+//# debugId=3A610E7E0D5C317F64756E2164756E21

package/dist/execution/request.js.map

@@ -2,9 +2,9 @@
   "version": 3,
   "sources": ["../src/execution/request.ts"],
   "sourcesContent": [
-    "import { randomUUID } from \"node:crypto\"\nimport type { AuthorizationContext } from \"../authorization\"\nimport type { OntologySource } from \"../ontology\"\nimport { isBoundSixb, type Sixb } from \"../runtime/sixb\"\nimport { createDisabledRequestScope, createPrincipalRequestScope } from \"./scopes\"\nimport type { AuthorizationRef, ExecutionScope } from \"./types\"\n\nexport type { ActionRunsRuntime, ActionsRuntime } from \"../actions/execution\"\nexport type {\n  AgentRunListResult,\n  AgentRunsRuntime,\n  AgentRunView,\n  AgentsRuntime,\n  AgentThreadsRuntime,\n  CreateExecutionAgentThreadInput,\n  ExecutionAgentRequestInput,\n  ListExecutionAgentThreadsInput,\n} from \"../agents/execution\"\nexport type { AuthorizationContext } from \"../authorization\"\nexport type { DatasetsRuntime } from \"../datasets/execution\"\nexport type { EventsRuntime } from \"../events/execution\"\nexport type { LogsRuntime } from \"../logging/execution\"\nexport type {\n  ExecutionObjectByIdHandle,\n  ExecutionObjectSet,\n  ObjectsRuntime,\n} from \"../objects/execution\"\nexport type {\n  PipelineRunsRuntime,\n  PipelinesRuntime,\n} from \"../pipelines/execution\"\nexport type {\n  ProjectionRunsRuntime,\n  ProjectionsRuntime,\n} from \"../projections/execution\"\nexport type { RuleStatesRuntime, RulesRuntime } from \"../rules/execution\"\nexport type { Sixb } from \"../runtime/sixb\"\nexport type { SyncRunsRuntime, SyncsRuntime } from \"../syncs/execution\"\nexport type {\n  LatestWorkflowRunListResult,\n  ListWorkflowRunNodesInput,\n  WorkflowAgentNodeRunView,\n  WorkflowInterventionsRuntime,\n  WorkflowNodeRunListResult,\n  WorkflowNodeRunView,\n  WorkflowRunListResult,\n  WorkflowRunsRuntime,\n  WorkflowRunView,\n  WorkflowsRuntime,\n} from \"../workflows/execution\"\nexport type { AuthorizationRef, ExecutionContext } from \"./types\"\n\nexport type RequestExecutionAuthorization =\n  | {\n      readonly type: \"principal\"\n      readonly context: AuthorizationContext\n      readonly credential?: Extract<AuthorizationRef, { readonly type: \"principal\" }>[\"credential\"]\n    }\n  | { readonly type: \"disabled\" }\n\nexport interface BindRequestExecutionInput {\n  readonly request: Request\n  readonly authorization: RequestExecutionAuthorization\n}\n\nexport interface RequestExecutionHost {\n  readonly id: string\n  withScope(scope: ExecutionScope): object\n}\n\n/** Bind one HTTP or WebSocket request without exposing trusted or kernel capability factories. */\nexport function bindRequestExecution(\n  host: RequestExecutionHost,\n  input: BindRequestExecutionInput\n): Sixb<readonly OntologySource[]> {\n  const requestId = requestIdentifier(input.request)\n  const correlationId = correlationIdentifier(input.request, requestId)\n  const scope =\n    input.authorization.type === \"principal\"\n      ? createPrincipalRequestScope({\n          projectId: host.id,\n          requestId,\n          correlationId,\n          context: input.authorization.context,\n          ...(input.authorization.credential === undefined\n            ? {}\n            : { credential: input.authorization.credential }),\n        })\n      : createDisabledRequestScope({ projectId: host.id, requestId, correlationId })\n\n  const sixb = host.withScope(scope)\n  if (!isBoundSixb(sixb)) {\n    throw new Error(\"[Sixb] Request host did not return an execution-bound Sixb SDK.\")\n  }\n  return sixb\n}\n\nfunction requestIdentifier(request: Request): string {\n  return headerIdentifier(request, \"x-request-id\") ?? `req_${randomUUID()}`\n}\n\nfunction correlationIdentifier(request: Request, requestId: string): string {\n  return headerIdentifier(request, \"x-correlation-id\") ?? requestId\n}\n\nfunction headerIdentifier(request: Request, name: string): string | undefined {\n  const value = request.headers.get(name)?.trim()\n  return value ? value : undefined\n}\n"
+    "import { randomUUID } from \"node:crypto\"\nimport type { AuthorizationContext } from \"../authorization\"\nimport type { OntologySource } from \"../ontology\"\nimport { isBoundSixb, type Sixb } from \"../runtime/sixb\"\nimport {\n  objectReadScopeForAccessPlan,\n  type ShareAccessPlan,\n  snapshotShareAccessPlan,\n} from \"../shares/access-plan\"\nimport type { ObjectReadExecutionLimits } from \"../storage/objects/execution-limits\"\nimport {\n  createDelegatedRequestScope,\n  createDisabledRequestScope,\n  createPrincipalRequestScope,\n} from \"./scopes\"\nimport type { AuthorizationRef, ExecutionScope } from \"./types\"\n\nexport type { ActionRunsRuntime, ActionsRuntime } from \"../actions/execution\"\nexport type {\n  AgentRunListResult,\n  AgentRunsRuntime,\n  AgentRuntime,\n  AgentRunView,\n  AgentThreadsRuntime,\n  CreateExecutionAgentThreadInput,\n  ExecutionAgentRequestInput,\n  ExecutionAgentRunResult,\n  ListExecutionAgentThreadsInput,\n} from \"../agents/execution\"\nexport type { AgentDescriptor } from \"../agents/types\"\nexport type { AuthorizationContext } from \"../authorization\"\nexport type { DatasetsRuntime } from \"../datasets/execution\"\nexport type { EventsRuntime } from \"../events/execution\"\nexport type { LogsRuntime } from \"../logging/execution\"\nexport type {\n  ExecutionObjectByIdHandle,\n  ExecutionObjectSet,\n  ObjectsRuntime,\n} from \"../objects/execution\"\nexport type {\n  PipelineRunsRuntime,\n  PipelinesRuntime,\n} from \"../pipelines/execution\"\nexport type {\n  ProjectionRunsRuntime,\n  ProjectionsRuntime,\n} from \"../projections/execution\"\nexport type { RuleStatesRuntime, RulesRuntime } from \"../rules/execution\"\nexport type { Sixb } from \"../runtime/sixb\"\nexport type { AgentThreadRecord, ListAgentThreadsResult } from \"../storage/agents\"\nexport type { SyncRunsRuntime, SyncsRuntime } from \"../syncs/execution\"\nexport type {\n  LatestWorkflowRunListResult,\n  ListWorkflowRunNodesInput,\n  WorkflowAgentNodeRunView,\n  WorkflowInterventionsRuntime,\n  WorkflowNodeRunListResult,\n  WorkflowNodeRunView,\n  WorkflowRunListResult,\n  WorkflowRunsRuntime,\n  WorkflowRunView,\n  WorkflowsRuntime,\n} from \"../workflows/execution\"\nexport type { AuthorizationRef, ExecutionContext } from \"./types\"\n\nexport type RequestExecutionAuthorization =\n  | {\n      readonly type: \"principal\"\n      readonly context: AuthorizationContext\n      readonly credential?: Extract<AuthorizationRef, { readonly type: \"principal\" }>[\"credential\"]\n    }\n  | {\n      readonly type: \"delegated\"\n      readonly access: ShareAccessPlan\n      readonly limits?: ObjectReadExecutionLimits\n      readonly delegation: {\n        readonly kind: \"share\"\n        readonly grantId: string\n        readonly sessionId: string\n      }\n    }\n  | { readonly type: \"disabled\" }\n\nexport interface BindRequestExecutionInput {\n  readonly request: Request\n  readonly authorization: RequestExecutionAuthorization\n}\n\nexport interface RequestExecutionHost {\n  readonly id: string\n  withScope(scope: ExecutionScope): object\n}\n\n/** Bind one HTTP or WebSocket request without exposing trusted or kernel capability factories. */\nexport function bindRequestExecution(\n  host: RequestExecutionHost,\n  input: BindRequestExecutionInput\n): Sixb<readonly OntologySource[]> {\n  const requestId = requestIdentifier(input.request)\n  const correlationId = correlationIdentifier(input.request, requestId)\n  const scope = createRequestScope(host.id, requestId, correlationId, input.authorization)\n\n  const sixb = host.withScope(scope)\n  if (!isBoundSixb(sixb)) {\n    throw new Error(\"[Sixb] Request host did not return an execution-bound Sixb SDK.\")\n  }\n  return sixb\n}\n\nfunction createRequestScope(\n  projectId: string,\n  requestId: string,\n  correlationId: string,\n  authorization: RequestExecutionAuthorization\n): ExecutionScope {\n  switch (authorization.type) {\n    case \"principal\":\n      return createPrincipalRequestScope({\n        projectId,\n        requestId,\n        correlationId,\n        context: authorization.context,\n        ...(authorization.credential === undefined ? {} : { credential: authorization.credential }),\n      })\n    case \"delegated\": {\n      const access = snapshotShareAccessPlan(authorization.access)\n      return createDelegatedRequestScope({\n        projectId,\n        requestId,\n        correlationId,\n        objectRead: {\n          selection: objectReadScopeForAccessPlan(access),\n          limits: authorization.limits ?? {\n            maxTraversalFacts: 10_000,\n            maxOutputJsonBytes: 8 * 1024 * 1024,\n          },\n        },\n        actionApply: access.grants.flatMap((grant) =>\n          grant.kind === \"action.apply\"\n            ? grant.subjects.map((subject) => ({ actionId: grant.actionId, subject }))\n            : []\n        ),\n        delegation: authorization.delegation,\n      })\n    }\n    case \"disabled\":\n      return createDisabledRequestScope({ projectId, requestId, correlationId })\n  }\n}\n\nfunction requestIdentifier(request: Request): string {\n  return headerIdentifier(request, \"x-request-id\") ?? `req_${randomUUID()}`\n}\n\nfunction correlationIdentifier(request: Request, requestId: string): string {\n  return headerIdentifier(request, \"x-correlation-id\") ?? requestId\n}\n\nfunction headerIdentifier(request: Request, name: string): string | undefined {\n  const value = request.headers.get(name)?.trim()\n  return value ? value : undefined\n}\n"
   ],
-  "mappings": ";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA;AAuEO,SAAS,oBAAoB,CAClC,MACA,OACiC;AAAA,EACjC,MAAM,YAAY,kBAAkB,MAAM,OAAO;AAAA,EACjD,MAAM,gBAAgB,sBAAsB,MAAM,SAAS,SAAS;AAAA,EACpE,MAAM,QACJ,MAAM,cAAc,SAAS,cACzB,4BAA4B;AAAA,IAC1B,WAAW,KAAK;AAAA,IAChB;AAAA,IACA;AAAA,IACA,SAAS,MAAM,cAAc;AAAA,OACzB,MAAM,cAAc,eAAe,YACnC,CAAC,IACD,EAAE,YAAY,MAAM,cAAc,WAAW;AAAA,EACnD,CAAC,IACD,2BAA2B,EAAE,WAAW,KAAK,IAAI,WAAW,cAAc,CAAC;AAAA,EAEjF,MAAM,OAAO,KAAK,UAAU,KAAK;AAAA,EACjC,IAAI,CAAC,YAAY,IAAI,GAAG;AAAA,IACtB,MAAM,IAAI,MAAM,iEAAiE;AAAA,EACnF;AAAA,EACA,OAAO;AAAA;AAGT,SAAS,iBAAiB,CAAC,SAA0B;AAAA,EACnD,OAAO,iBAAiB,SAAS,cAAc,KAAK,OAAO,WAAW;AAAA;AAGxE,SAAS,qBAAqB,CAAC,SAAkB,WAA2B;AAAA,EAC1E,OAAO,iBAAiB,SAAS,kBAAkB,KAAK;AAAA;AAG1D,SAAS,gBAAgB,CAAC,SAAkB,MAAkC;AAAA,EAC5E,MAAM,QAAQ,QAAQ,QAAQ,IAAI,IAAI,GAAG,KAAK;AAAA,EAC9C,OAAO,QAAQ,QAAQ;AAAA;",
-  "debugId": "3784441E6A6BD84464756E2164756E21",
+  "mappings": ";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA;AA8FO,SAAS,oBAAoB,CAClC,MACA,OACiC;AAAA,EACjC,MAAM,YAAY,kBAAkB,MAAM,OAAO;AAAA,EACjD,MAAM,gBAAgB,sBAAsB,MAAM,SAAS,SAAS;AAAA,EACpE,MAAM,QAAQ,mBAAmB,KAAK,IAAI,WAAW,eAAe,MAAM,aAAa;AAAA,EAEvF,MAAM,OAAO,KAAK,UAAU,KAAK;AAAA,EACjC,IAAI,CAAC,YAAY,IAAI,GAAG;AAAA,IACtB,MAAM,IAAI,MAAM,iEAAiE;AAAA,EACnF;AAAA,EACA,OAAO;AAAA;AAGT,SAAS,kBAAkB,CACzB,WACA,WACA,eACA,eACgB;AAAA,EAChB,QAAQ,cAAc;AAAA,SACf;AAAA,MACH,OAAO,4BAA4B;AAAA,QACjC;AAAA,QACA;AAAA,QACA;AAAA,QACA,SAAS,cAAc;AAAA,WACnB,cAAc,eAAe,YAAY,CAAC,IAAI,EAAE,YAAY,cAAc,WAAW;AAAA,MAC3F,CAAC;AAAA,SACE,aAAa;AAAA,MAChB,MAAM,SAAS,wBAAwB,cAAc,MAAM;AAAA,MAC3D,OAAO,4BAA4B;AAAA,QACjC;AAAA,QACA;AAAA,QACA;AAAA,QACA,YAAY;AAAA,UACV,WAAW,6BAA6B,MAAM;AAAA,UAC9C,QAAQ,cAAc,UAAU;AAAA,YAC9B,mBAAmB;AAAA,YACnB,oBAAoB,IAAI,OAAO;AAAA,UACjC;AAAA,QACF;AAAA,QACA,aAAa,OAAO,OAAO,QAAQ,CAAC,UAClC,MAAM,SAAS,iBACX,MAAM,SAAS,IAAI,CAAC,aAAa,EAAE,UAAU,MAAM,UAAU,QAAQ,EAAE,IACvE,CAAC,CACP;AAAA,QACA,YAAY,cAAc;AAAA,MAC5B,CAAC;AAAA,IACH;AAAA,SACK;AAAA,MACH,OAAO,2BAA2B,EAAE,WAAW,WAAW,cAAc,CAAC;AAAA;AAAA;AAI/E,SAAS,iBAAiB,CAAC,SAA0B;AAAA,EACnD,OAAO,iBAAiB,SAAS,cAAc,KAAK,OAAO,WAAW;AAAA;AAGxE,SAAS,qBAAqB,CAAC,SAAkB,WAA2B;AAAA,EAC1E,OAAO,iBAAiB,SAAS,kBAAkB,KAAK;AAAA;AAG1D,SAAS,gBAAgB,CAAC,SAAkB,MAAkC;AAAA,EAC5E,MAAM,QAAQ,QAAQ,QAAQ,IAAI,IAAI,GAAG,KAAK;AAAA,EAC9C,OAAO,QAAQ,QAAQ;AAAA;",
+  "debugId": "3A610E7E0D5C317F64756E2164756E21",
   "names": []
 }

package/dist/execution/scopes.d.ts

@@ -1,4 +1,6 @@
 import type { AuthorizationContext } from "../authorization";
+import type { ObjectReadExecutionLimits, SelectedObjectReadScope } from "../storage";
+import { type DelegatedActionApplyTarget } from "./authorization";
 import type { AuthorizationRef, ExecutionScope, ExecutionSource, KernelOperation } from "./types";
 export declare function createPrincipalRequestScope(input: {
     readonly projectId: string;
@@ -14,6 +16,20 @@ export declare function createDisabledRequestScope(input: {
     readonly requestId: string;
     readonly correlationId: string;
 }): ExecutionScope;
+/** Internal request scope carrying only a finite object-read selection. */
+export declare function createDelegatedRequestScope(input: {
+    readonly projectId: string;
+    readonly requestId: string;
+    readonly correlationId: string;
+    readonly objectRead: {
+        readonly selection: SelectedObjectReadScope;
+        readonly limits: ObjectReadExecutionLimits;
+    };
+    readonly actionApply?: readonly DelegatedActionApplyTarget[];
+    readonly delegation?: Extract<AuthorizationRef, {
+        readonly type: "delegated";
+    }>["delegation"];
+}): ExecutionScope;
 export declare function createKernelScope(input: {
     readonly projectId: string;
     readonly operation: KernelOperation;

package/dist/execution/scopes.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"scopes.d.ts","sourceRoot":"","sources":["../../src/execution/scopes.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,kBAAkB,CAAA;AAM5D,OAAO,KAAK,EAEV,gBAAgB,EAEhB,cAAc,EACd,eAAe,EACf,eAAe,EAChB,MAAM,SAAS,CAAA;AAEhB,wBAAgB,2BAA2B,CAAC,KAAK,EAAE;IACjD,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAA;IAC9B,QAAQ,CAAC,OAAO,EAAE,oBAAoB,CAAA;IACtC,QAAQ,CAAC,UAAU,CAAC,EAAE,OAAO,CAAC,gBAAgB,EAAE;QAAE,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAA;KAAE,CAAC,CAAC,YAAY,CAAC,CAAA;CAC9F,GAAG,cAAc,CAgBjB;AAED,wBAAgB,0BAA0B,CAAC,KAAK,EAAE;IAChD,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAA;CAC/B,GAAG,cAAc,CAKjB;AAED,wBAAgB,iBAAiB,CAAC,KAAK,EAAE;IACvC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,SAAS,EAAE,eAAe,CAAA;IACnC,QAAQ,CAAC,MAAM,EAAE,eAAe,CAAA;IAChC,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAA;CAChC,GAAG,cAAc,CAYjB;AAyBD,wBAAgB,kBAAkB,CAAC,KAAK,EAAE;IACxC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,OAAO,CAAC,EAAE,oBAAoB,CAAA;IACvC,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAA;IAC7B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAA;CAChC,GAAG,cAAc,CAgBjB"}
+{"version":3,"file":"scopes.d.ts","sourceRoot":"","sources":["../../src/execution/scopes.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,kBAAkB,CAAA;AAC5D,OAAO,KAAK,EAAE,yBAAyB,EAAE,uBAAuB,EAAE,MAAM,YAAY,CAAA;AACpF,OAAO,EAKL,KAAK,0BAA0B,EAChC,MAAM,iBAAiB,CAAA;AACxB,OAAO,KAAK,EAEV,gBAAgB,EAEhB,cAAc,EACd,eAAe,EACf,eAAe,EAChB,MAAM,SAAS,CAAA;AAEhB,wBAAgB,2BAA2B,CAAC,KAAK,EAAE;IACjD,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAA;IAC9B,QAAQ,CAAC,OAAO,EAAE,oBAAoB,CAAA;IACtC,QAAQ,CAAC,UAAU,CAAC,EAAE,OAAO,CAAC,gBAAgB,EAAE;QAAE,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAA;KAAE,CAAC,CAAC,YAAY,CAAC,CAAA;CAC9F,GAAG,cAAc,CAgBjB;AAED,wBAAgB,0BAA0B,CAAC,KAAK,EAAE;IAChD,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAA;CAC/B,GAAG,cAAc,CAMjB;AAED,2EAA2E;AAC3E,wBAAgB,2BAA2B,CAAC,KAAK,EAAE;IACjD,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAA;IAC9B,QAAQ,CAAC,UAAU,EAAE;QACnB,QAAQ,CAAC,SAAS,EAAE,uBAAuB,CAAA;QAC3C,QAAQ,CAAC,MAAM,EAAE,yBAAyB,CAAA;KAC3C,CAAA;IACD,QAAQ,CAAC,WAAW,CAAC,EAAE,SAAS,0BAA0B,EAAE,CAAA;IAC5D,QAAQ,CAAC,UAAU,CAAC,EAAE,OAAO,CAAC,gBAAgB,EAAE;QAAE,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAA;KAAE,CAAC,CAAC,YAAY,CAAC,CAAA;CAC9F,GAAG,cAAc,CAajB;AAED,wBAAgB,iBAAiB,CAAC,KAAK,EAAE;IACvC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,SAAS,EAAE,eAAe,CAAA;IACnC,QAAQ,CAAC,MAAM,EAAE,eAAe,CAAA;IAChC,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAA;CAChC,GAAG,cAAc,CAYjB;AAyBD,wBAAgB,kBAAkB,CAAC,KAAK,EAAE;IACxC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,OAAO,CAAC,EAAE,oBAAoB,CAAA;IACvC,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAA;IAC7B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAA;CAChC,GAAG,cAAc,CAgBjB"}

package/dist/execution/types.d.ts

@@ -10,6 +10,12 @@ export interface TrustedPrimitiveRef {
     readonly id: string;
     readonly runId: string;
 }
+/** Durable provenance for authority delegated by one shared-access browser session. */
+export interface SharedAccessDelegationRef {
+    readonly kind: "share";
+    readonly grantId: string;
+    readonly sessionId: string;
+}
 export type KernelOperation = {
     readonly type: "ontology.recover";
     readonly recoveryId: string;
@@ -25,7 +31,7 @@ export type ExecutionExecutor = {
     readonly runId: string;
 } | {
     readonly type: "agent";
-    readonly agentId: string;
+    readonly actorId?: string;
     readonly runId: string;
 } | {
     readonly type: "kernel";
@@ -79,6 +85,9 @@ export type AuthorizationRef = {
 } | {
     readonly type: "trustedPrimitive";
     readonly primitive: TrustedPrimitiveRef;
+} | {
+    readonly type: "delegated";
+    readonly delegation: SharedAccessDelegationRef;
 } | {
     readonly type: "kernel";
     readonly operation: KernelOperation;

package/dist/execution/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/execution/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,eAAe,CAAA;AAE9C,2EAA2E;AAC3E,MAAM,MAAM,qBAAqB,GAAG,OAAO,CAAC,SAAS,EAAE;IAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,gBAAgB,CAAA;CAAE,CAAC,CAAA;AAEpG,8EAA8E;AAC9E,MAAM,MAAM,oBAAoB,GAC5B,QAAQ,GACR,UAAU,GACV,YAAY,GACZ,MAAM,GACN,MAAM,GACN,SAAS,GACT,UAAU,CAAA;AAEd,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,IAAI,EAAE,oBAAoB,CAAA;IACnC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;IACnB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;CACvB;AAED,MAAM,MAAM,eAAe,GAAG;IAC5B,QAAQ,CAAC,IAAI,EAAE,kBAAkB,CAAA;IACjC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;CAC5B,CAAA;AAED,6FAA6F;AAC7F,MAAM,MAAM,iBAAiB,GACzB;IAAE,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;IAAC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;CAAE,GACxD;IACE,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAA;IAC1B,QAAQ,CAAC,IAAI,EAAE,oBAAoB,CAAA;IACnC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;IACnB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;CACvB,GACD;IAAE,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GAC5E;IAAE,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC;IAAC,QAAQ,CAAC,SAAS,EAAE,eAAe,CAAA;CAAE,CAAA;AAEpE;;;;GAIG;AACH,MAAM,MAAM,eAAe,GACvB;IAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;CAAE,GACrD;IAAE,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;IAAC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;CAAE,GACzD;IAAE,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GACvD;IAAE,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GACpD;IAAE,QAAQ,CAAC,IAAI,EAAE,gBAAgB,CAAC;IAAC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;CAAE,GAC3F;IAAE,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC;IAAC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAA;CAAE,CAAA;AAEhE,2FAA2F;AAC3F,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;IACnB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,WAAW,CAAC,EAAE,qBAAqB,CAAA;IAC5C,QAAQ,CAAC,QAAQ,EAAE,iBAAiB,CAAA;IACpC,QAAQ,CAAC,MAAM,EAAE,eAAe,CAAA;IAChC,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAA;CAC/B;AAED,kGAAkG;AAClG,MAAM,MAAM,gBAAgB,GACxB;IACE,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAA;IAC1B,QAAQ,CAAC,SAAS,EAAE,qBAAqB,CAAA;IACzC,QAAQ,CAAC,UAAU,CAAC,EAChB;QAAE,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;QAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;KAAE,GACjD;QAAE,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAC;QAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;KAAE,CAAA;CAC1D,GACD;IAAE,QAAQ,CAAC,IAAI,EAAE,kBAAkB,CAAC;IAAC,QAAQ,CAAC,SAAS,EAAE,mBAAmB,CAAA;CAAE,GAC9E;IAAE,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC;IAAC,QAAQ,CAAC,SAAS,EAAE,eAAe,CAAA;CAAE,GAChE;IAAE,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAA;CAAE,CAAA;AAEjC,cAAM,8BAA8B;;IAGlC,OAAO;IAEP,MAAM,CAAC,MAAM,IAAI,8BAA8B;IAM/C,MAAM,CAAC,EAAE,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,8BAA8B;CAGnE;AAED;;;;;GAKG;AACH,MAAM,MAAM,oBAAoB,GAAG,8BAA8B,CAAA;AAEjE,gGAAgG;AAChG,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,SAAS,EAAE,gBAAgB,CAAA;IACpC,QAAQ,CAAC,aAAa,EAAE,oBAAoB,CAAA;CAC7C;AAED,2EAA2E;AAC3E,wBAAgB,oCAAoC,IAAI,oBAAoB,CAE3E;AAED,mFAAmF;AACnF,wBAAgB,gCAAgC,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,oBAAoB,CAE9F"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/execution/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,eAAe,CAAA;AAE9C,2EAA2E;AAC3E,MAAM,MAAM,qBAAqB,GAAG,OAAO,CAAC,SAAS,EAAE;IAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,gBAAgB,CAAA;CAAE,CAAC,CAAA;AAEpG,8EAA8E;AAC9E,MAAM,MAAM,oBAAoB,GAC5B,QAAQ,GACR,UAAU,GACV,YAAY,GACZ,MAAM,GACN,MAAM,GACN,SAAS,GACT,UAAU,CAAA;AAEd,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,IAAI,EAAE,oBAAoB,CAAA;IACnC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;IACnB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;CACvB;AAED,uFAAuF;AACvF,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAA;IACtB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;IACxB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;CAC3B;AAED,MAAM,MAAM,eAAe,GAAG;IAC5B,QAAQ,CAAC,IAAI,EAAE,kBAAkB,CAAA;IACjC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;CAC5B,CAAA;AAED,6FAA6F;AAC7F,MAAM,MAAM,iBAAiB,GACzB;IAAE,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;IAAC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;CAAE,GACxD;IACE,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAA;IAC1B,QAAQ,CAAC,IAAI,EAAE,oBAAoB,CAAA;IACnC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;IACnB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;CACvB,GACD;IAAE,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;IAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GAC7E;IAAE,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC;IAAC,QAAQ,CAAC,SAAS,EAAE,eAAe,CAAA;CAAE,CAAA;AAEpE;;;;GAIG;AACH,MAAM,MAAM,eAAe,GACvB;IAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;CAAE,GACrD;IAAE,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;IAAC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;CAAE,GACzD;IAAE,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GACvD;IAAE,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GACpD;IAAE,QAAQ,CAAC,IAAI,EAAE,gBAAgB,CAAC;IAAC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;CAAE,GAC3F;IAAE,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC;IAAC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAA;CAAE,CAAA;AAEhE,2FAA2F;AAC3F,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;IACnB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,WAAW,CAAC,EAAE,qBAAqB,CAAA;IAC5C,QAAQ,CAAC,QAAQ,EAAE,iBAAiB,CAAA;IACpC,QAAQ,CAAC,MAAM,EAAE,eAAe,CAAA;IAChC,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAA;CAC/B;AAED,kGAAkG;AAClG,MAAM,MAAM,gBAAgB,GACxB;IACE,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAA;IAC1B,QAAQ,CAAC,SAAS,EAAE,qBAAqB,CAAA;IACzC,QAAQ,CAAC,UAAU,CAAC,EAChB;QAAE,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;QAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;KAAE,GACjD;QAAE,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAC;QAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;KAAE,CAAA;CAC1D,GACD;IAAE,QAAQ,CAAC,IAAI,EAAE,kBAAkB,CAAC;IAAC,QAAQ,CAAC,SAAS,EAAE,mBAAmB,CAAA;CAAE,GAC9E;IAAE,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC;IAAC,QAAQ,CAAC,UAAU,EAAE,yBAAyB,CAAA;CAAE,GAC9E;IAAE,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC;IAAC,QAAQ,CAAC,SAAS,EAAE,eAAe,CAAA;CAAE,GAChE;IAAE,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAA;CAAE,CAAA;AAEjC,cAAM,8BAA8B;;IAGlC,OAAO;IAEP,MAAM,CAAC,MAAM,IAAI,8BAA8B;IAM/C,MAAM,CAAC,EAAE,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,8BAA8B;CAGnE;AAED;;;;;GAKG;AACH,MAAM,MAAM,oBAAoB,GAAG,8BAA8B,CAAA;AAEjE,gGAAgG;AAChG,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,SAAS,EAAE,gBAAgB,CAAA;IACpC,QAAQ,CAAC,aAAa,EAAE,oBAAoB,CAAA;CAC7C;AAED,2EAA2E;AAC3E,wBAAgB,oCAAoC,IAAI,oBAAoB,CAE3E;AAED,mFAAmF;AACnF,wBAAgB,gCAAgC,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,oBAAoB,CAE9F"}

package/dist/http/api-routes.d.ts

@@ -19,6 +19,8 @@ export interface SixbApiRoute {
     readonly accessToken: boolean;
     /** The route is proxied by the agent API gateway (a strict subset of the accessToken routes). */
     readonly agentApi: boolean;
+    /** The canonical handler may run under an explicitly selected shared session. */
+    readonly sharedSession?: boolean;
 }
 export declare const SIXB_API_ROUTES: readonly SixbApiRoute[];
 //# sourceMappingURL=api-routes.d.ts.map

package/dist/http/api-routes.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"api-routes.d.ts","sourceRoot":"","sources":["../../src/http/api-routes.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AACH,MAAM,WAAW,YAAY;IAC3B,sFAAsF;IACtF,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAA;IAC5B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,8FAA8F;IAC9F,QAAQ,CAAC,WAAW,EAAE,OAAO,CAAA;IAC7B,iGAAiG;IACjG,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAA;CAC3B;AAED,eAAO,MAAM,eAAe,EAAE,SAAS,YAAY,EAiYlD,CAAA"}
+{"version":3,"file":"api-routes.d.ts","sourceRoot":"","sources":["../../src/http/api-routes.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AACH,MAAM,WAAW,YAAY;IAC3B,sFAAsF;IACtF,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAA;IAC5B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,8FAA8F;IAC9F,QAAQ,CAAC,WAAW,EAAE,OAAO,CAAA;IAC7B,iGAAiG;IACjG,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAA;IAC1B,iFAAiF;IACjF,QAAQ,CAAC,aAAa,CAAC,EAAE,OAAO,CAAA;CACjC;AAED,eAAO,MAAM,eAAe,EAAE,SAAS,YAAY,EA2elD,CAAA"}

package/dist/http/index.js

@@ -4,7 +4,7 @@ import {
   matchesPathPattern,
   normalizeRoutePath,
   pathSegmentsFor
-} from "../chunk-qewtks41.js";
+} from "../chunk-9nbmsvn5.js";
 import"../chunk-y64skrwp.js";
 export {
   pathSegmentsFor,

package/dist/index.d.ts

@@ -1,5 +1,5 @@
-export type { ArraySchema, ComplexSchema, DirectLinkResult, DirectLinkTarget, EnumSchema, InferSchemaOrRef, Interface, LinkCardinality, LinkToken, LinkTokenMap, MapSchema, ObjectFieldSchema, ObjectLink, ObjectLinkTargetMetadata, ObjectLinkTargetType, ObjectRef, ObjectRefSchema, ObjectSchema, ObjectType, ObjectTypeSearchMetadata, ObjectTypeWithPropertyTokens, ObjectTypeWithTokens, Ontology, OntologyDefinitionCatalog, OntologyRegistryOptions, PrimitiveSchema, Property, PropertyMode, PropertyQueryMetadata, PropertyToken, PropertyTokenMap, Schema, SchemaOrRef, SixbObjectTypeMap, ValueType, ValueTypeRefSchema, } from "./ontology";
-export { defineInterface, defineObjectType, defineOntology, defineValueType, integerEnum, isObjectRefSchema, link, OntologyRegistry, prop, ref, stringEnum, validateSchemaOrRefValue, valueTypeRef, } from "./ontology";
+export type { ArraySchema, ComplexSchema, DirectLinkResult, DirectLinkTarget, EnumSchema, InferSchemaOrRef, Interface, LinkCardinality, LinkPathSelection, LinkPathSelectionBuilder, LinkPathSelectionInput, LinkPathSelectionMode, LinkToken, LinkTokenMap, MapSchema, ObjectFieldSchema, ObjectLink, ObjectLinkTargetMetadata, ObjectLinkTargetType, ObjectRef, ObjectRefSchema, ObjectSchema, ObjectType, ObjectTypeSearchMetadata, ObjectTypeWithPropertyTokens, ObjectTypeWithTokens, Ontology, OntologyDefinitionCatalog, OntologyRegistryOptions, PrimitiveSchema, Property, PropertyMode, PropertyQueryMetadata, PropertyToken, PropertyTokenMap, Schema, SchemaOrRef, SixbObjectTypeMap, ValueType, ValueTypeRefSchema, } from "./ontology";
+export { defineInterface, defineObjectType, defineOntology, defineValueType, integerEnum, isObjectRefSchema, link, OntologyRegistry, objectRef, prop, ref, stringEnum, validateSchemaOrRefValue, valueTypeRef, } from "./ontology";
 export type { ActionBinding, ActionBlobContext, ActionBuilder, ActionDefinition, ActionDefinitionCatalog, ActionEditsContext, ActionEditsHandler, ActionEffectsContext, ActionEffectsHandler, ActionObjectSubject, ActionParamConfig, ActionParamsConfig, ActionReadFacade, ActionReadObjectByIdHandle, ActionReadObjectSet, ActionReadObjectSetSource, ActionRunPhaseInfo, ActionRuntimeFacade, ActionSubject, ActionTargetObject, ActionTelemetryHistoryBatchInput, ActionTelemetryHistoryBatchResult, ActionTelemetryHistorySeriesInput, ActionTelemetryObjectSet, ActionTelemetryPropertyToken, ActionTelemetryReadFacade, ActionValidationContext, ActionValidator, ActionWritebackContext, ActionWritebackHandler, ActionWritebackValue, GlobalActionAfterEditsBuilder, GlobalActionAfterWritebackBuilder, GlobalActionDefinition, GlobalActionEditsContext, GlobalActionEditsHandler, GlobalActionEffectsContext, GlobalActionEffectsHandler, GlobalActionParamsBuilder, GlobalActionPhaseBuilder, GlobalActionValidationContext, GlobalActionValidator, GlobalActionWritebackContext, GlobalActionWritebackHandler, InferActionParams, ObjectActionAfterEditsBuilder, ObjectActionAfterWritebackBuilder, ObjectActionDefinition, ObjectActionParamsBuilder, ObjectActionPhaseBuilder, RequestActionAndWaitInput, RequestActionAndWaitOptions, RequestActionInput, RequestActionOptions, RequestActionResult, WaitForActionRunInput, } from "./actions";
 export { ActionDefinitionError, defineAction, isActionDefinition, isGlobalActionDefinition, isObjectActionDefinition, optional, param, requestAction, requestActionAndWait, waitForActionRun, } from "./actions";
 /**
@@ -32,8 +32,11 @@ export type { AuthCookieOptions, AuthSessionAudience, AuthSessionAudienceOptions
 export { DEFAULT_AUTH_SESSION_AUDIENCE, isValidAuthSessionAudience, principalsEqual, resolveAuthSessionAudience, SYSTEM_PRINCIPAL, } from "./auth";
 export type { AuthorizationContext, GrantIndex, GrantKind } from "./authorization";
 export { AuthorizationError, canAccessApplication, emptyGrantIndex, isAllowed, isApplicationAccessControlled, resolveAuthorizationContext, } from "./authorization";
-export type { AccessGrant, AppendGrant, ApplicationDefinition, ApplyGrant, BreadthSelector, BreadthTarget, DefineGroupOptions, DefineMembershipPolicyOptions, DefineRoleOptions, EditGrant, GrantCapability, GrantDefinition, GroupDefinition, GroupReference, ManageGrant, MembershipOperation, MembershipPolicyDefinition, ObserveGrant, ObserveGrantTarget, RegisteredSecurityDefinitions, RoleDefinition, RunGrant, RunGrantTarget, SecurityDefinitionCatalog, Selection, ViewGrant, ViewGrantTarget, } from "./security";
+export type { AiUsageLimitGroupOption, AiUsageLimitServiceAccountOption, AiUsageLimitSubjectOptions, AiUsageLimitUserOption, AiUsageRuntime, CreateAiUsageLimitPolicyInput, ListAiUsageLimitPoliciesInput, ListAiUsageLimitStatusesInput, ListAiUsageModelCallGroupsInput, ListAiUsageModelCallsInput, QueryAiUsageOverviewInput, UpdateAiUsageLimitPolicyInput, } from "./ai-usage";
+export type { AccessGrant, AgentRunGrant, AppendGrant, ApplicationDefinition, ApplyGrant, BreadthSelector, BreadthTarget, DefineGroupOptions, DefineMembershipPolicyOptions, DefineRoleOptions, EditGrant, GrantCapability, GrantDefinition, GroupDefinition, GroupReference, ManageGrant, ManageGrantTarget, MembershipOperation, MembershipPolicyDefinition, ObserveGrant, ObserveGrantTarget, RegisteredSecurityDefinitions, RoleDefinition, RunGrant, RunGrantTarget, SecurityDefinitionCatalog, Selection, ShareGrant, ViewGrant, ViewGrantTarget, } from "./security";
 export { applications, can, defineGroup, defineMembershipPolicy, defineRole, every, SecurityValidationError, } from "./security";
+export type { DefineShareOptions, IssueSharedAccessByIdInput, IssueSharedAccessInput, ListSharedAccessByIdInput, ListSharedAccessInput, ShareActionGrant, ShareActionGrantBuilder, ShareDefinition, SharedAccessGrant, SharedAccessGrantListResult, SharedAccessInvitation, ShareErrorReason, ShareScopeGrant, SharesRuntime, ShareTarget, ShareViewGrant, ShareViewGrantBuilder, } from "./shares";
+export { defineShare, ShareDefinitionError, ShareError } from "./shares";
 export type { CreateExecutionInput, DurableExecutionExecutor, DurableExecutionSource, ExecutionRecord, ExecutionStorage, InMemoryStorageOptions, MigrationCapableStorage, MigrationReport, MigrationState, MigrationStatus, Storage, StorageMigrationResult, StorageMigrator, StorageSchemaCheck, StorageTransactionOptions, } from "./storage";
 export { checkStorageSchema, InMemoryFileUploadSessions, InMemoryStorage, isMigrationCapableStorage, migrateStorage, } from "./storage";
 export type { BlobBody, BlobByteRange, BlobDigest, BlobInfo, BlobStorage, FileRef, } from "./blob-storage";
@@ -56,19 +59,20 @@ export type { CronScheduleBuilder, CronScheduleDefinition, CronScheduleTriggerDe
 export { defineSchedule, isScheduleDefinition, ScheduleValidationError, } from "./schedules";
 export type { PipelineBuilder, PipelineDefinition, PipelineGraph, PipelineRunRequestOptions, PipelineRunRequestResult, PipelineSequenceGraph, PipelineStepDefinition, PipelineStepExecutor, PipelineStepExecutorBuilder, PipelineStepInput, PipelineStepInputBuilder, PipelineStepNode, PipelineStepOutput, PipelineStepOutputBuilder, PipelineStepOutputOptions, PipelineStepRunContext, PipelineStepRunHandler, RequestPipelineRunInput, } from "./pipelines";
 export { definePipeline, definePipelineStep, isPipelineDefinition, isPipelineStepDefinition, PipelineError, requestPipelineRun, } from "./pipelines";
-export type { AgentStepBuilder, AgentStepDefinition, AgentStepOutputBuilder, AgentStepPrompt, AgentStepPromptBuilder, AgentStepPromptContext, InferAgentStepInput, InferAgentStepOutput, InferInterventionInput, InferInterventionResponse, InferStepInput, InferStepOutput, InferWorkflowContract, InferWorkflowInput, InterventionBuilder, InterventionDefaultsHandler, InterventionDefaultsRuntimeHandler, InterventionDefinition, InterventionFieldConfig, InterventionResponseBuilder, InterventionResponseConfig, InterventionResponseDraftBuilder, InterventionResponseField, RequestWorkflowRunInput, StepBuilder, StepDefinition, StepHandler, StepOutputBuilder, StepRunBuilder, StepRunContext, WorkflowActionDefinition, WorkflowActionMapper, WorkflowActionMapperResult, WorkflowAgentNodeDefinition, WorkflowBuilder, WorkflowChainDefinition, WorkflowDefinition, WorkflowDraftBuilder, WorkflowMapperContext, WorkflowRunRequestOptions, WorkflowRunRequestResult, WorkflowRunSource, WorkflowRuntimeFacade, WorkflowScheduleMapper, WorkflowScheduleTriggerDefinition, WorkflowStepMapper, WorkflowStepOutputs, WorkflowTriggerDefinition, } from "./workflows";
+export type { AgentStepBuilder, AgentStepDefinition, AgentStepOutputBuilder, AgentStepPrompt, AgentStepPromptBuilder, AgentStepPromptContext, DefineAgentStepConfig, InferAgentStepInput, InferAgentStepOutput, InferInterventionInput, InferInterventionResponse, InferStepInput, InferStepOutput, InferWorkflowContract, InferWorkflowInput, InterventionBuilder, InterventionDefaultsHandler, InterventionDefaultsRuntimeHandler, InterventionDefinition, InterventionFieldConfig, InterventionResponseBuilder, InterventionResponseConfig, InterventionResponseDraftBuilder, InterventionResponseField, RequestWorkflowRunInput, StepBuilder, StepDefinition, StepHandler, StepOutputBuilder, StepRunBuilder, StepRunContext, WorkflowActionDefinition, WorkflowActionMapper, WorkflowActionMapperResult, WorkflowAgentNodeDefinition, WorkflowBuilder, WorkflowChainDefinition, WorkflowDefinition, WorkflowDraftBuilder, WorkflowMapperContext, WorkflowRunRequestOptions, WorkflowRunRequestResult, WorkflowRunSource, WorkflowRuntimeFacade, WorkflowScheduleMapper, WorkflowScheduleTriggerDefinition, WorkflowStepMapper, WorkflowStepOutputs, WorkflowTriggerDefinition, } from "./workflows";
 export { defineAgentStep, defineIntervention, defineWorkflow, defineWorkflowStep, interventionField, isAgentStepDefinition, isInterventionDefinition, isStepDefinition, isWorkflowDefinition, requestWorkflowRun, WorkflowDefinitionError, WorkflowValidationError, } from "./workflows";
 export type { AuthorizablePrincipal, AuthorizationRef, ExecutionContext, ExecutionExecutor, ExecutionScope, ExecutionSource, KernelOperation, RuntimeAuthorization, TrustedPrimitiveKind, TrustedPrimitiveRef, } from "./execution";
 export type { ActionRunsRuntime, ActionsRuntime } from "./actions/execution";
-export type { AgentRunListResult, AgentRunsRuntime, AgentRunView, AgentsRuntime, AgentThreadsRuntime, ExecutionAgentRunResult, } from "./agents/execution";
+export type { AgentRunListResult, AgentRunsRuntime, AgentRuntime, AgentRunView, AgentThreadsRuntime, ExecutionAgentRunResult, } from "./agents/execution";
 export type { BlobsRuntime } from "./blob-storage/execution";
 export type { ConnectorRuntime } from "./connectors/execution";
-export type { DatasetsRuntime } from "./datasets/execution";
+export type { DatasetIngestInput, DatasetIngestResult, DatasetsRuntime } from "./datasets/execution";
 export type { SixbActionPhaseFailedContext, SixbErrorContext, SixbErrorHandler, SixbEventDeliveryFailedContext, SixbFailedRun, SixbRuleEvaluationFailedContext, SixbRunFailedContext, SixbRunFailureByKind, SixbRunIdentityByKind, } from "./error-reporting/types";
 export type { SixbErrorCode, SixbFailure } from "./errors/types";
 export type { EventsRuntime } from "./events/execution";
 export type { LogsRuntime } from "./logging/execution";
 export type { OntologyMaintenanceCleanupSnapshot, OntologyMaintenanceHandle, OntologyMaintenanceOptions, OntologyMaintenanceSnapshot, OntologyOperationalStatus, SixbReadiness, } from "./maintenance";
+export type { LanguageModel, LanguageModelDefinition, LanguageModelRateCard, ProviderData, } from "./models";
 export type { ExecutionObjectByIdHandle, ExecutionObjectSet, ObjectQueryLinksInput, ObjectQueryLinksResult, ObjectsRuntime, } from "./objects/execution";
 export type { PipelineRunsRuntime, PipelinesRuntime } from "./pipelines/execution";
 export type { ProjectionRunsRuntime, ProjectionsRuntime, } from "./projections/execution";
@@ -79,10 +83,12 @@ export type { SchedulesRuntime } from "./schedules/execution";
 export type { ActionRunFailure, ActionRunFailureCode, ActionRunPhase, AgentRunFailureCode, AiCostSummary, PipelineRunFailureCode, ProjectionRunFailureCode, SyncRunFailureCode, WebhookRunFailureCode, WorkflowRunFailureCode, } from "./storage";
 export type { SyncRunsRuntime, SyncsRuntime } from "./syncs/execution";
 export type { LatestWorkflowRunListResult, ListWorkflowRunNodesInput, WorkflowAgentNodeRunView, WorkflowInterventionsRuntime, WorkflowNodeRunListResult, WorkflowNodeRunView, WorkflowRunListResult, WorkflowRunsRuntime, WorkflowRunView, WorkflowsRuntime, } from "./workflows/execution";
-export type { AgentContextConfig, AgentContextEntryInput, AgentContextInput, AgentContextOrigin, AgentContextPart, AgentDefinition, AgentFileDataProjection, AgentFileDataResolverInput, AgentFilePart, AgentInboundUiMessage, AgentInboundUiMessagePart, AgentLoopConfig, AgentMessage, AgentMessagePart, AgentMessagePartType, AgentMessageRole, AgentModelAssistantPart, AgentModelFilePart, AgentModelMessage, AgentModelReasoningPart, AgentModelTextPart, AgentModelToolCallPart, AgentModelToolOutput, AgentModelToolResultPart, AgentReasoningLevel, AgentReasoningPart, AgentRequestErrorCode, AgentStepStartPart, AgentTextPart, AgentToolArtifact, AgentToolArtifactPutInput, AgentToolArtifacts, AgentToolCallPart, AgentToolCallState, AgentToolContent, AgentToolDefinition, AgentToolDescriptionBuilder, AgentToolFileContent, AgentToolHandler, AgentToolHandlerResult, AgentToolInputBuilder, AgentToolInputSchema, AgentToolResult, AgentToolResultFileResolverInput, AgentToolRunBuilder, AgentToolRunContext, AgentToolRunInfo, AgentToolTextContent, AgentUiMessage, AgentUiMessagePart, AgentUiToolPart, DefineAgentConfig, InferAgentToolInput, InferAgentToolInputSchema, RequestAgentRunInput, RequestAgentRunResult, } from "./agents";
-export { AGENT_REASONING_LEVELS, AgentDefinitionError, AgentRequestError, AgentToolPublicError, agentContext, agentContextIdentity, defineAgent, defineAgentTool, isAgentDefinition, MAX_AGENT_APP_STATE_ENTRY_BYTES, MAX_AGENT_APP_STATE_TOTAL_BYTES, MAX_AGENT_CONTEXT_ENTRIES, requestAgentRun, } from "./agents";
-export type { LanguageModelCatalog, LanguageModelEntry, ModelCatalog, ModelCatalogInput, } from "./models";
+export type { AgentContextEntryInput, AgentContextInput, AgentContextOrigin, AgentContextPart, AgentDescriptor, AgentFileDataProjection, AgentFileDataResolverInput, AgentFilePart, AgentMessage, AgentMessagePart, AgentMessagePartType, AgentMessageRole, AgentProviderStatePart, AgentReasoning, AgentReasoningLevel, AgentReasoningPart, AgentReference, AgentRequestErrorCode, AgentStepStartPart, AgentTextPart, AgentToolArtifact, AgentToolArtifactPutInput, AgentToolArtifacts, AgentToolCallPart, AgentToolCallState, AgentToolCatalog, AgentToolContent, AgentToolDefinition, AgentToolDescriptionBuilder, AgentToolFileContent, AgentToolHandler, AgentToolHandlerResult, AgentToolInputBuilder, AgentToolInputSchema, AgentToolResult, AgentToolResultFileResolverInput, AgentToolRunBuilder, AgentToolRunContext, AgentToolRunInfo, AgentToolTextContent, AgentUsageReference, InferAgentToolInput, InferAgentToolInputSchema, RequestAgentRunInput, RequestAgentRunResult, } from "./agents";
+export { AGENT_REASONING_LEVELS, AgentDefinitionError, AgentRequestError, AgentToolPublicError, agent, agentContext, agentContextIdentity, defineAgentTool, MAX_AGENT_APP_STATE_ENTRY_BYTES, MAX_AGENT_APP_STATE_TOTAL_BYTES, MAX_AGENT_CONTEXT_ENTRIES, requestAgentRun, } from "./agents";
+export type { AgentThreadRecord, ListAgentThreadsResult } from "./storage/agents";
+export type { LanguageModelCatalog, LanguageModelEntry, LanguageModelRef, ModelCatalog, ModelCatalogInput, } from "./models";
 export { CronValidationError } from "./schedules";
+export type { ActionDescriptor, ActionDescriptorBinding, ActionParamDescriptor, ActionPhaseDescriptor, } from "./actions/descriptor";
 export type { ForeignKeyDescriptor, LinkProjectionDefinition, LinkProjectionTarget, ObjectProjectionBuilder, ObjectProjectionConflictResolution, ObjectProjectionDefinition, ObjectProjectionTarget, ProjectionDefinition, ProjectionDefinitionCatalog, ProjectionForeignKeyInput, ProjectionTarget, ProjectionTargetByKind, SourceEditConflictResolution, TelemetryProjectionDefinition, TelemetryProjectionPropertyMapping, } from "./projections";
 export { defineProjection, fromForeignKey, isLinkProjectionDefinition, isObjectProjectionDefinition, isProjectionDefinition, isTelemetryProjectionDefinition, } from "./projections";
 //# sourceMappingURL=index.d.ts.map