@sixb/core 0.1.6 → 0.1.8

package/dist/shares/internal.js

@@ -0,0 +1,239 @@
+// @bun
+import {
+  intersectShareAccessPlans
+} from "../chunk-z4ccwbkz.js";
+import {
+  compileShareAccessPlan
+} from "../chunk-v4en4jc2.js";
+import"../chunk-sbzzr4kx.js";
+import"../chunk-4jjp5k14.js";
+import"../chunk-rv2hkwwa.js";
+import {
+  snapshotShareAccessPlan
+} from "../chunk-nx7k8tpr.js";
+import {
+  ShareSessionStorageError
+} from "../chunk-4yqmp43v.js";
+import"../chunk-wdage1eb.js";
+import"../chunk-5ntny1qx.js";
+import"../chunk-nn0tekr1.js";
+import"../chunk-p03r0h5s.js";
+import"../chunk-jecn6t54.js";
+import"../chunk-5gd7tpv6.js";
+import"../chunk-rafagrwr.js";
+import"../chunk-8tsf6dmc.js";
+import"../chunk-yp8ee62z.js";
+import"../chunk-ka3a2ft3.js";
+import"../chunk-w1tvjszy.js";
+import"../chunk-p1rzczbt.js";
+import"../chunk-j1sbhm7p.js";
+import"../chunk-9dzba0f2.js";
+import"../chunk-dbc80ad7.js";
+import"../chunk-ry24jbr1.js";
+import"../chunk-p2vqaxkc.js";
+import"../chunk-trxxmgnf.js";
+import"../chunk-zcnhxkvd.js";
+import"../chunk-w3e09qqk.js";
+import"../chunk-51fjndv0.js";
+import"../chunk-d8qkxt2v.js";
+import {
+  formatSessionCookieValue,
+  parseSessionCookieValue
+} from "../chunk-4sm0aznx.js";
+import"../chunk-4a849fr1.js";
+import"../chunk-2dw777qw.js";
+import"../chunk-19jp6g9d.js";
+import"../chunk-xwnf87e1.js";
+import"../chunk-p1x242ad.js";
+import"../chunk-r8jrnexe.js";
+import"../chunk-h0k55pc7.js";
+import"../chunk-dktq02ne.js";
+import"../chunk-04b07a9q.js";
+import"../chunk-08m3b6w8.js";
+import"../chunk-2xns679x.js";
+import"../chunk-n6jxh8sw.js";
+import"../chunk-y64skrwp.js";
+
+// src/shares/session-protocol.ts
+import { createHash, randomBytes, randomUUID, timingSafeEqual } from "crypto";
+var DEFAULT_SHARED_SESSION_INACTIVITY_TTL_MS = 15 * 60000;
+var MAX_CREATE_ATTEMPTS = 5;
+var SECRET_PATTERN = /^[A-Za-z0-9_-]{43}$/;
+
+class SharedSessionProtocol {
+  host;
+  inactivityTtlMs;
+  now;
+  constructor(options) {
+    if (!options.host.storage.shareGrants || !options.host.storage.shareSessions) {
+      throw new Error("[Sixb] Shared sessions require share grant and session storage.");
+    }
+    const inactivityTtlMs = options.inactivityTtlMs ?? DEFAULT_SHARED_SESSION_INACTIVITY_TTL_MS;
+    if (!Number.isSafeInteger(inactivityTtlMs) || inactivityTtlMs <= 0) {
+      throw new Error("[Sixb] Shared session inactivity TTL must be a positive integer.");
+    }
+    this.host = options.host;
+    this.inactivityTtlMs = inactivityTtlMs;
+    this.now = options.now ?? (() => new Date);
+  }
+  async exchange(grantId, secret) {
+    if (!validIdentifier(grantId) || !validSecret(secret))
+      return null;
+    const now = this.currentTime();
+    for (let attempt = 0;attempt < MAX_CREATE_ATTEMPTS; attempt += 1) {
+      const sessionSecret = randomBytes(32).toString("base64url");
+      const sessionId = `shs_${randomUUID()}`;
+      try {
+        const result = await this.host.storage.transaction(async (tx) => {
+          const grant = await activeGrant(tx, this.host.projectId, grantId, now);
+          const secretMatches = secretMatchesHash(secret, grant?.tokenHash ?? "");
+          if (!grant || !secretMatches)
+            return null;
+          const sessions = requireSessions(tx);
+          const absoluteExpiresAt = new Date(grant.expiresAt);
+          const session = await sessions.create({
+            id: sessionId,
+            projectId: this.host.projectId,
+            grantId: grant.id,
+            tokenHash: sha256(sessionSecret),
+            createdAt: now,
+            expiresAt: inactivityDeadline(now, absoluteExpiresAt, this.inactivityTtlMs),
+            absoluteExpiresAt
+          });
+          return { grant, session };
+        });
+        if (!result)
+          return null;
+        return {
+          context: this.context(result.grant, result.session),
+          cookieValue: formatSessionCookieValue(sessionId, sessionSecret)
+        };
+      } catch (error) {
+        if (error instanceof ShareSessionStorageError && error.code === "duplicate" && attempt < MAX_CREATE_ATTEMPTS - 1) {
+          continue;
+        }
+        throw error;
+      }
+    }
+    return null;
+  }
+  async resolve(grantId, cookieValue, options = {}) {
+    if (!validIdentifier(grantId) || !validCookieValue(cookieValue))
+      return null;
+    const credential = parseSessionCookieValue(cookieValue);
+    if (!credential || !validIdentifier(credential.sessionId) || !validSecret(credential.sessionSecret)) {
+      return null;
+    }
+    const now = this.currentTime();
+    const tokenHash = sha256(credential.sessionSecret);
+    const result = await this.host.storage.transaction(async (tx) => {
+      const sessions = requireSessions(tx);
+      const current = await sessions.getById({
+        projectId: this.host.projectId,
+        id: credential.sessionId
+      });
+      const secretMatches = secretMatchesHash(credential.sessionSecret, current?.tokenHash ?? "");
+      if (!current || current.grantId !== grantId || current.revokedAt !== undefined || current.expiresAt.getTime() <= now.getTime() || current.absoluteExpiresAt.getTime() <= now.getTime() || !secretMatches) {
+        return null;
+      }
+      const grant = await activeGrant(tx, this.host.projectId, grantId, now);
+      if (!grant || current.absoluteExpiresAt.getTime() !== grant.expiresAt.getTime()) {
+        return null;
+      }
+      if (options.activity !== "foreground")
+        return { grant, session: current };
+      const renewed = await sessions.renewIfValid({
+        projectId: this.host.projectId,
+        id: current.id,
+        grantId,
+        tokenHash,
+        now,
+        expiresAt: inactivityDeadline(now, current.absoluteExpiresAt, this.inactivityTtlMs)
+      });
+      return renewed ? { grant, session: renewed } : null;
+    });
+    return result ? this.context(result.grant, result.session) : null;
+  }
+  async revoke(context) {
+    const revokedAt = this.currentTime();
+    await this.host.storage.transaction(async (tx) => {
+      const session = await requireSessions(tx).getById({
+        projectId: this.host.projectId,
+        id: context.sessionId
+      });
+      if (!session || session.grantId !== context.grantId)
+        return;
+      await requireSessions(tx).revoke({
+        projectId: this.host.projectId,
+        id: context.sessionId,
+        revokedAt
+      });
+    });
+  }
+  context(grant, session) {
+    return {
+      grantId: grant.id,
+      sessionId: session.id,
+      destinationPath: grant.destinationPath,
+      access: effectiveAccess(this.host, grant),
+      expiresAt: new Date(session.expiresAt),
+      absoluteExpiresAt: new Date(session.absoluteExpiresAt)
+    };
+  }
+  currentTime() {
+    const now = this.now();
+    if (!(now instanceof Date) || !Number.isFinite(now.getTime())) {
+      throw new Error("[Sixb] Shared session clock returned an invalid date.");
+    }
+    return new Date(now);
+  }
+}
+function effectiveAccess(host, grant) {
+  const definition = host.definitions.shares.getById(grant.definitionId);
+  if (!definition || definition.target.objectTypeId !== grant.target.objectTypeId) {
+    return snapshotShareAccessPlan({ grants: [] });
+  }
+  const current = compileShareAccessPlan({
+    share: definition,
+    target: grant.target,
+    ontology: host.definitions.ontology,
+    actions: host.definitions.actions
+  });
+  return intersectShareAccessPlans(grant.authoritySnapshot.access, current);
+}
+async function activeGrant(storage, projectId, grantId, now) {
+  const grant = await storage.shareGrants?.getById({ projectId, id: grantId });
+  return !grant || grant.revokedAt !== undefined || grant.expiresAt.getTime() <= now.getTime() ? null : grant;
+}
+function requireSessions(storage) {
+  if (!storage.shareSessions) {
+    throw new Error("[Sixb] Shared session storage is not configured.");
+  }
+  return storage.shareSessions;
+}
+function inactivityDeadline(now, absolute, ttlMs) {
+  return new Date(Math.min(absolute.getTime(), now.getTime() + ttlMs));
+}
+function secretMatchesHash(secret, expectedHash) {
+  const actual = createHash("sha256").update(secret).digest();
+  const expected = /^[0-9a-f]{64}$/.test(expectedHash) ? Buffer.from(expectedHash, "hex") : Buffer.alloc(actual.length);
+  return timingSafeEqual(actual, expected);
+}
+function sha256(value) {
+  return createHash("sha256").update(value).digest("hex");
+}
+function validIdentifier(value) {
+  return typeof value === "string" && value.length > 0 && value.length <= 128 && value.trim() === value;
+}
+function validSecret(value) {
+  return typeof value === "string" && SECRET_PATTERN.test(value);
+}
+function validCookieValue(value) {
+  return typeof value === "string" && value.length <= 256;
+}
+export {
+  SharedSessionProtocol,
+  DEFAULT_SHARED_SESSION_INACTIVITY_TTL_MS
+};
+
+//# debugId=31BD510D0F8EF3FB64756E2164756E21

package/dist/shares/internal.js.map

@@ -0,0 +1,10 @@
+{
+  "version": 3,
+  "sources": ["../src/shares/session-protocol.ts"],
+  "sourcesContent": [
+    "import { createHash, randomBytes, randomUUID, timingSafeEqual } from \"node:crypto\"\nimport { formatSessionCookieValue, parseSessionCookieValue } from \"../auth/sessions\"\nimport type { SixbHostView } from \"../runtime\"\nimport type { ShareGrantRecord, ShareSessionRecord, Storage } from \"../storage\"\nimport { ShareSessionStorageError } from \"../storage\"\nimport { type ShareAccessPlan, snapshotShareAccessPlan } from \"./access-plan\"\nimport { compileShareAccessPlan } from \"./compiler\"\nimport { intersectShareAccessPlans } from \"./intersection\"\n\nexport const DEFAULT_SHARED_SESSION_INACTIVITY_TTL_MS = 15 * 60_000\n\nconst MAX_CREATE_ATTEMPTS = 5\nconst SECRET_PATTERN = /^[A-Za-z0-9_-]{43}$/\n\nexport interface SharedSessionContext {\n  readonly grantId: string\n  readonly sessionId: string\n  readonly destinationPath: string\n  readonly access: ShareAccessPlan\n  readonly expiresAt: Date\n  readonly absoluteExpiresAt: Date\n}\n\nexport interface SharedSessionCredential {\n  readonly context: SharedSessionContext\n  /** Opaque value for the HttpOnly shared-session cookie. */\n  readonly cookieValue: string\n}\n\nexport interface SharedSessionProtocolOptions {\n  readonly host: SixbHostView\n  readonly inactivityTtlMs?: number\n  readonly now?: () => Date\n}\n\n/**\n * Framework-owned shared-session lifecycle.\n *\n * Link and session secrets are verified here. Callers receive only an effective access plan built\n * from the issued snapshot intersected with the Share definition registered now.\n */\nexport class SharedSessionProtocol {\n  private readonly host: SixbHostView\n  private readonly inactivityTtlMs: number\n  private readonly now: () => Date\n\n  constructor(options: SharedSessionProtocolOptions) {\n    if (!options.host.storage.shareGrants || !options.host.storage.shareSessions) {\n      throw new Error(\"[Sixb] Shared sessions require share grant and session storage.\")\n    }\n    const inactivityTtlMs = options.inactivityTtlMs ?? DEFAULT_SHARED_SESSION_INACTIVITY_TTL_MS\n    if (!Number.isSafeInteger(inactivityTtlMs) || inactivityTtlMs <= 0) {\n      throw new Error(\"[Sixb] Shared session inactivity TTL must be a positive integer.\")\n    }\n    this.host = options.host\n    this.inactivityTtlMs = inactivityTtlMs\n    this.now = options.now ?? (() => new Date())\n  }\n\n  async exchange(grantId: string, secret: string): Promise<SharedSessionCredential | null> {\n    if (!validIdentifier(grantId) || !validSecret(secret)) return null\n    const now = this.currentTime()\n\n    for (let attempt = 0; attempt < MAX_CREATE_ATTEMPTS; attempt += 1) {\n      const sessionSecret = randomBytes(32).toString(\"base64url\")\n      const sessionId = `shs_${randomUUID()}`\n      try {\n        const result = await this.host.storage.transaction(async (tx) => {\n          const grant = await activeGrant(tx, this.host.projectId, grantId, now)\n          const secretMatches = secretMatchesHash(secret, grant?.tokenHash ?? \"\")\n          if (!grant || !secretMatches) return null\n          const sessions = requireSessions(tx)\n          const absoluteExpiresAt = new Date(grant.expiresAt)\n          const session = await sessions.create({\n            id: sessionId,\n            projectId: this.host.projectId,\n            grantId: grant.id,\n            tokenHash: sha256(sessionSecret),\n            createdAt: now,\n            expiresAt: inactivityDeadline(now, absoluteExpiresAt, this.inactivityTtlMs),\n            absoluteExpiresAt,\n          })\n          return { grant, session }\n        })\n        if (!result) return null\n        return {\n          context: this.context(result.grant, result.session),\n          cookieValue: formatSessionCookieValue(sessionId, sessionSecret),\n        }\n      } catch (error) {\n        if (\n          error instanceof ShareSessionStorageError &&\n          error.code === \"duplicate\" &&\n          attempt < MAX_CREATE_ATTEMPTS - 1\n        ) {\n          continue\n        }\n        throw error\n      }\n    }\n\n    return null\n  }\n\n  async resolve(\n    grantId: string,\n    cookieValue: string | undefined,\n    options: { readonly activity?: \"background\" | \"foreground\" } = {}\n  ): Promise<SharedSessionContext | null> {\n    if (!validIdentifier(grantId) || !validCookieValue(cookieValue)) return null\n    const credential = parseSessionCookieValue(cookieValue)\n    if (\n      !credential ||\n      !validIdentifier(credential.sessionId) ||\n      !validSecret(credential.sessionSecret)\n    ) {\n      return null\n    }\n    const now = this.currentTime()\n    const tokenHash = sha256(credential.sessionSecret)\n\n    const result = await this.host.storage.transaction(async (tx) => {\n      const sessions = requireSessions(tx)\n      const current = await sessions.getById({\n        projectId: this.host.projectId,\n        id: credential.sessionId,\n      })\n      const secretMatches = secretMatchesHash(credential.sessionSecret, current?.tokenHash ?? \"\")\n      if (\n        !current ||\n        current.grantId !== grantId ||\n        current.revokedAt !== undefined ||\n        current.expiresAt.getTime() <= now.getTime() ||\n        current.absoluteExpiresAt.getTime() <= now.getTime() ||\n        !secretMatches\n      ) {\n        return null\n      }\n\n      const grant = await activeGrant(tx, this.host.projectId, grantId, now)\n      if (!grant || current.absoluteExpiresAt.getTime() !== grant.expiresAt.getTime()) {\n        return null\n      }\n\n      if (options.activity !== \"foreground\") return { grant, session: current }\n\n      const renewed = await sessions.renewIfValid({\n        projectId: this.host.projectId,\n        id: current.id,\n        grantId,\n        tokenHash,\n        now,\n        expiresAt: inactivityDeadline(now, current.absoluteExpiresAt, this.inactivityTtlMs),\n      })\n      return renewed ? { grant, session: renewed } : null\n    })\n\n    return result ? this.context(result.grant, result.session) : null\n  }\n\n  async revoke(context: Pick<SharedSessionContext, \"grantId\" | \"sessionId\">): Promise<void> {\n    const revokedAt = this.currentTime()\n    await this.host.storage.transaction(async (tx) => {\n      const session = await requireSessions(tx).getById({\n        projectId: this.host.projectId,\n        id: context.sessionId,\n      })\n      if (!session || session.grantId !== context.grantId) return\n      await requireSessions(tx).revoke({\n        projectId: this.host.projectId,\n        id: context.sessionId,\n        revokedAt,\n      })\n    })\n  }\n\n  private context(grant: ShareGrantRecord, session: ShareSessionRecord): SharedSessionContext {\n    return {\n      grantId: grant.id,\n      sessionId: session.id,\n      destinationPath: grant.destinationPath,\n      access: effectiveAccess(this.host, grant),\n      expiresAt: new Date(session.expiresAt),\n      absoluteExpiresAt: new Date(session.absoluteExpiresAt),\n    }\n  }\n\n  private currentTime(): Date {\n    const now = this.now()\n    if (!(now instanceof Date) || !Number.isFinite(now.getTime())) {\n      throw new Error(\"[Sixb] Shared session clock returned an invalid date.\")\n    }\n    return new Date(now)\n  }\n}\n\nfunction effectiveAccess(host: SixbHostView, grant: ShareGrantRecord): ShareAccessPlan {\n  const definition = host.definitions.shares.getById(grant.definitionId)\n  if (!definition || definition.target.objectTypeId !== grant.target.objectTypeId) {\n    return snapshotShareAccessPlan({ grants: [] })\n  }\n  const current = compileShareAccessPlan({\n    share: definition,\n    target: grant.target,\n    ontology: host.definitions.ontology,\n    actions: host.definitions.actions,\n  })\n  return intersectShareAccessPlans(grant.authoritySnapshot.access, current)\n}\n\nasync function activeGrant(\n  storage: Storage,\n  projectId: string,\n  grantId: string,\n  now: Date\n): Promise<ShareGrantRecord | null> {\n  const grant = await storage.shareGrants?.getById({ projectId, id: grantId })\n  return !grant || grant.revokedAt !== undefined || grant.expiresAt.getTime() <= now.getTime()\n    ? null\n    : grant\n}\n\nfunction requireSessions(storage: Storage): NonNullable<Storage[\"shareSessions\"]> {\n  if (!storage.shareSessions) {\n    throw new Error(\"[Sixb] Shared session storage is not configured.\")\n  }\n  return storage.shareSessions\n}\n\nfunction inactivityDeadline(now: Date, absolute: Date, ttlMs: number): Date {\n  return new Date(Math.min(absolute.getTime(), now.getTime() + ttlMs))\n}\n\nfunction secretMatchesHash(secret: string, expectedHash: string): boolean {\n  const actual = createHash(\"sha256\").update(secret).digest()\n  const expected = /^[0-9a-f]{64}$/.test(expectedHash)\n    ? Buffer.from(expectedHash, \"hex\")\n    : Buffer.alloc(actual.length)\n  return timingSafeEqual(actual, expected)\n}\n\nfunction sha256(value: string): string {\n  return createHash(\"sha256\").update(value).digest(\"hex\")\n}\n\nfunction validIdentifier(value: unknown): value is string {\n  return (\n    typeof value === \"string\" && value.length > 0 && value.length <= 128 && value.trim() === value\n  )\n}\n\nfunction validSecret(value: unknown): value is string {\n  return typeof value === \"string\" && SECRET_PATTERN.test(value)\n}\n\nfunction validCookieValue(value: unknown): value is string {\n  return typeof value === \"string\" && value.length <= 256\n}\n"
+  ],
+  "mappings": ";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA;AASO,IAAM,2CAA2C,KAAK;AAE7D,IAAM,sBAAsB;AAC5B,IAAM,iBAAiB;AAAA;AA6BhB,MAAM,sBAAsB;AAAA,EAChB;AAAA,EACA;AAAA,EACA;AAAA,EAEjB,WAAW,CAAC,SAAuC;AAAA,IACjD,IAAI,CAAC,QAAQ,KAAK,QAAQ,eAAe,CAAC,QAAQ,KAAK,QAAQ,eAAe;AAAA,MAC5E,MAAM,IAAI,MAAM,iEAAiE;AAAA,IACnF;AAAA,IACA,MAAM,kBAAkB,QAAQ,mBAAmB;AAAA,IACnD,IAAI,CAAC,OAAO,cAAc,eAAe,KAAK,mBAAmB,GAAG;AAAA,MAClE,MAAM,IAAI,MAAM,kEAAkE;AAAA,IACpF;AAAA,IACA,KAAK,OAAO,QAAQ;AAAA,IACpB,KAAK,kBAAkB;AAAA,IACvB,KAAK,MAAM,QAAQ,QAAQ,MAAM,IAAI;AAAA;AAAA,OAGjC,SAAQ,CAAC,SAAiB,QAAyD;AAAA,IACvF,IAAI,CAAC,gBAAgB,OAAO,KAAK,CAAC,YAAY,MAAM;AAAA,MAAG,OAAO;AAAA,IAC9D,MAAM,MAAM,KAAK,YAAY;AAAA,IAE7B,SAAS,UAAU,EAAG,UAAU,qBAAqB,WAAW,GAAG;AAAA,MACjE,MAAM,gBAAgB,YAAY,EAAE,EAAE,SAAS,WAAW;AAAA,MAC1D,MAAM,YAAY,OAAO,WAAW;AAAA,MACpC,IAAI;AAAA,QACF,MAAM,SAAS,MAAM,KAAK,KAAK,QAAQ,YAAY,OAAO,OAAO;AAAA,UAC/D,MAAM,QAAQ,MAAM,YAAY,IAAI,KAAK,KAAK,WAAW,SAAS,GAAG;AAAA,UACrE,MAAM,gBAAgB,kBAAkB,QAAQ,OAAO,aAAa,EAAE;AAAA,UACtE,IAAI,CAAC,SAAS,CAAC;AAAA,YAAe,OAAO;AAAA,UACrC,MAAM,WAAW,gBAAgB,EAAE;AAAA,UACnC,MAAM,oBAAoB,IAAI,KAAK,MAAM,SAAS;AAAA,UAClD,MAAM,UAAU,MAAM,SAAS,OAAO;AAAA,YACpC,IAAI;AAAA,YACJ,WAAW,KAAK,KAAK;AAAA,YACrB,SAAS,MAAM;AAAA,YACf,WAAW,OAAO,aAAa;AAAA,YAC/B,WAAW;AAAA,YACX,WAAW,mBAAmB,KAAK,mBAAmB,KAAK,eAAe;AAAA,YAC1E;AAAA,UACF,CAAC;AAAA,UACD,OAAO,EAAE,OAAO,QAAQ;AAAA,SACzB;AAAA,QACD,IAAI,CAAC;AAAA,UAAQ,OAAO;AAAA,QACpB,OAAO;AAAA,UACL,SAAS,KAAK,QAAQ,OAAO,OAAO,OAAO,OAAO;AAAA,UAClD,aAAa,yBAAyB,WAAW,aAAa;AAAA,QAChE;AAAA,QACA,OAAO,OAAO;AAAA,QACd,IACE,iBAAiB,4BACjB,MAAM,SAAS,eACf,UAAU,sBAAsB,GAChC;AAAA,UACA;AAAA,QACF;AAAA,QACA,MAAM;AAAA;AAAA,IAEV;AAAA,IAEA,OAAO;AAAA;AAAA,OAGH,QAAO,CACX,SACA,aACA,UAA+D,CAAC,GAC1B;AAAA,IACtC,IAAI,CAAC,gBAAgB,OAAO,KAAK,CAAC,iBAAiB,WAAW;AAAA,MAAG,OAAO;AAAA,IACxE,MAAM,aAAa,wBAAwB,WAAW;AAAA,IACtD,IACE,CAAC,cACD,CAAC,gBAAgB,WAAW,SAAS,KACrC,CAAC,YAAY,WAAW,aAAa,GACrC;AAAA,MACA,OAAO;AAAA,IACT;AAAA,IACA,MAAM,MAAM,KAAK,YAAY;AAAA,IAC7B,MAAM,YAAY,OAAO,WAAW,aAAa;AAAA,IAEjD,MAAM,SAAS,MAAM,KAAK,KAAK,QAAQ,YAAY,OAAO,OAAO;AAAA,MAC/D,MAAM,WAAW,gBAAgB,EAAE;AAAA,MACnC,MAAM,UAAU,MAAM,SAAS,QAAQ;AAAA,QACrC,WAAW,KAAK,KAAK;AAAA,QACrB,IAAI,WAAW;AAAA,MACjB,CAAC;AAAA,MACD,MAAM,gBAAgB,kBAAkB,WAAW,eAAe,SAAS,aAAa,EAAE;AAAA,MAC1F,IACE,CAAC,WACD,QAAQ,YAAY,WACpB,QAAQ,cAAc,aACtB,QAAQ,UAAU,QAAQ,KAAK,IAAI,QAAQ,KAC3C,QAAQ,kBAAkB,QAAQ,KAAK,IAAI,QAAQ,KACnD,CAAC,eACD;AAAA,QACA,OAAO;AAAA,MACT;AAAA,MAEA,MAAM,QAAQ,MAAM,YAAY,IAAI,KAAK,KAAK,WAAW,SAAS,GAAG;AAAA,MACrE,IAAI,CAAC,SAAS,QAAQ,kBAAkB,QAAQ,MAAM,MAAM,UAAU,QAAQ,GAAG;AAAA,QAC/E,OAAO;AAAA,MACT;AAAA,MAEA,IAAI,QAAQ,aAAa;AAAA,QAAc,OAAO,EAAE,OAAO,SAAS,QAAQ;AAAA,MAExE,MAAM,UAAU,MAAM,SAAS,aAAa;AAAA,QAC1C,WAAW,KAAK,KAAK;AAAA,QACrB,IAAI,QAAQ;AAAA,QACZ;AAAA,QACA;AAAA,QACA;AAAA,QACA,WAAW,mBAAmB,KAAK,QAAQ,mBAAmB,KAAK,eAAe;AAAA,MACpF,CAAC;AAAA,MACD,OAAO,UAAU,EAAE,OAAO,SAAS,QAAQ,IAAI;AAAA,KAChD;AAAA,IAED,OAAO,SAAS,KAAK,QAAQ,OAAO,OAAO,OAAO,OAAO,IAAI;AAAA;AAAA,OAGzD,OAAM,CAAC,SAA6E;AAAA,IACxF,MAAM,YAAY,KAAK,YAAY;AAAA,IACnC,MAAM,KAAK,KAAK,QAAQ,YAAY,OAAO,OAAO;AAAA,MAChD,MAAM,UAAU,MAAM,gBAAgB,EAAE,EAAE,QAAQ;AAAA,QAChD,WAAW,KAAK,KAAK;AAAA,QACrB,IAAI,QAAQ;AAAA,MACd,CAAC;AAAA,MACD,IAAI,CAAC,WAAW,QAAQ,YAAY,QAAQ;AAAA,QAAS;AAAA,MACrD,MAAM,gBAAgB,EAAE,EAAE,OAAO;AAAA,QAC/B,WAAW,KAAK,KAAK;AAAA,QACrB,IAAI,QAAQ;AAAA,QACZ;AAAA,MACF,CAAC;AAAA,KACF;AAAA;AAAA,EAGK,OAAO,CAAC,OAAyB,SAAmD;AAAA,IAC1F,OAAO;AAAA,MACL,SAAS,MAAM;AAAA,MACf,WAAW,QAAQ;AAAA,MACnB,iBAAiB,MAAM;AAAA,MACvB,QAAQ,gBAAgB,KAAK,MAAM,KAAK;AAAA,MACxC,WAAW,IAAI,KAAK,QAAQ,SAAS;AAAA,MACrC,mBAAmB,IAAI,KAAK,QAAQ,iBAAiB;AAAA,IACvD;AAAA;AAAA,EAGM,WAAW,GAAS;AAAA,IAC1B,MAAM,MAAM,KAAK,IAAI;AAAA,IACrB,IAAI,EAAE,eAAe,SAAS,CAAC,OAAO,SAAS,IAAI,QAAQ,CAAC,GAAG;AAAA,MAC7D,MAAM,IAAI,MAAM,uDAAuD;AAAA,IACzE;AAAA,IACA,OAAO,IAAI,KAAK,GAAG;AAAA;AAEvB;AAEA,SAAS,eAAe,CAAC,MAAoB,OAA0C;AAAA,EACrF,MAAM,aAAa,KAAK,YAAY,OAAO,QAAQ,MAAM,YAAY;AAAA,EACrE,IAAI,CAAC,cAAc,WAAW,OAAO,iBAAiB,MAAM,OAAO,cAAc;AAAA,IAC/E,OAAO,wBAAwB,EAAE,QAAQ,CAAC,EAAE,CAAC;AAAA,EAC/C;AAAA,EACA,MAAM,UAAU,uBAAuB;AAAA,IACrC,OAAO;AAAA,IACP,QAAQ,MAAM;AAAA,IACd,UAAU,KAAK,YAAY;AAAA,IAC3B,SAAS,KAAK,YAAY;AAAA,EAC5B,CAAC;AAAA,EACD,OAAO,0BAA0B,MAAM,kBAAkB,QAAQ,OAAO;AAAA;AAG1E,eAAe,WAAW,CACxB,SACA,WACA,SACA,KACkC;AAAA,EAClC,MAAM,QAAQ,MAAM,QAAQ,aAAa,QAAQ,EAAE,WAAW,IAAI,QAAQ,CAAC;AAAA,EAC3E,OAAO,CAAC,SAAS,MAAM,cAAc,aAAa,MAAM,UAAU,QAAQ,KAAK,IAAI,QAAQ,IACvF,OACA;AAAA;AAGN,SAAS,eAAe,CAAC,SAAyD;AAAA,EAChF,IAAI,CAAC,QAAQ,eAAe;AAAA,IAC1B,MAAM,IAAI,MAAM,kDAAkD;AAAA,EACpE;AAAA,EACA,OAAO,QAAQ;AAAA;AAGjB,SAAS,kBAAkB,CAAC,KAAW,UAAgB,OAAqB;AAAA,EAC1E,OAAO,IAAI,KAAK,KAAK,IAAI,SAAS,QAAQ,GAAG,IAAI,QAAQ,IAAI,KAAK,CAAC;AAAA;AAGrE,SAAS,iBAAiB,CAAC,QAAgB,cAA+B;AAAA,EACxE,MAAM,SAAS,WAAW,QAAQ,EAAE,OAAO,MAAM,EAAE,OAAO;AAAA,EAC1D,MAAM,WAAW,iBAAiB,KAAK,YAAY,IAC/C,OAAO,KAAK,cAAc,KAAK,IAC/B,OAAO,MAAM,OAAO,MAAM;AAAA,EAC9B,OAAO,gBAAgB,QAAQ,QAAQ;AAAA;AAGzC,SAAS,MAAM,CAAC,OAAuB;AAAA,EACrC,OAAO,WAAW,QAAQ,EAAE,OAAO,KAAK,EAAE,OAAO,KAAK;AAAA;AAGxD,SAAS,eAAe,CAAC,OAAiC;AAAA,EACxD,OACE,OAAO,UAAU,YAAY,MAAM,SAAS,KAAK,MAAM,UAAU,OAAO,MAAM,KAAK,MAAM;AAAA;AAI7F,SAAS,WAAW,CAAC,OAAiC;AAAA,EACpD,OAAO,OAAO,UAAU,YAAY,eAAe,KAAK,KAAK;AAAA;AAG/D,SAAS,gBAAgB,CAAC,OAAiC;AAAA,EACzD,OAAO,OAAO,UAAU,YAAY,MAAM,UAAU;AAAA;",
+  "debugId": "31BD510D0F8EF3FB64756E2164756E21",
+  "names": []
+}

package/dist/shares/intersection.d.ts

@@ -0,0 +1,9 @@
+import { type ShareAccessPlan } from "./access-plan";
+/**
+ * Narrow an issued snapshot by the Share definition registered now.
+ *
+ * Intersection is recursive and id-based. Anything added to the definition or ontology after
+ * issuance is absent from `issued` and therefore cannot appear in the effective plan.
+ */
+export declare function intersectShareAccessPlans(issued: ShareAccessPlan, current: ShareAccessPlan): ShareAccessPlan;
+//# sourceMappingURL=intersection.d.ts.map

package/dist/shares/intersection.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"intersection.d.ts","sourceRoot":"","sources":["../../src/shares/intersection.ts"],"names":[],"mappings":"AAQA,OAAO,EAAE,KAAK,eAAe,EAA2B,MAAM,eAAe,CAAA;AAE7E;;;;;GAKG;AACH,wBAAgB,yBAAyB,CACvC,MAAM,EAAE,eAAe,EACvB,OAAO,EAAE,eAAe,GACvB,eAAe,CAwCjB"}

package/dist/shares/session-protocol.d.ts

@@ -0,0 +1,41 @@
+import type { SixbHostView } from "../runtime";
+import { type ShareAccessPlan } from "./access-plan";
+export declare const DEFAULT_SHARED_SESSION_INACTIVITY_TTL_MS: number;
+export interface SharedSessionContext {
+    readonly grantId: string;
+    readonly sessionId: string;
+    readonly destinationPath: string;
+    readonly access: ShareAccessPlan;
+    readonly expiresAt: Date;
+    readonly absoluteExpiresAt: Date;
+}
+export interface SharedSessionCredential {
+    readonly context: SharedSessionContext;
+    /** Opaque value for the HttpOnly shared-session cookie. */
+    readonly cookieValue: string;
+}
+export interface SharedSessionProtocolOptions {
+    readonly host: SixbHostView;
+    readonly inactivityTtlMs?: number;
+    readonly now?: () => Date;
+}
+/**
+ * Framework-owned shared-session lifecycle.
+ *
+ * Link and session secrets are verified here. Callers receive only an effective access plan built
+ * from the issued snapshot intersected with the Share definition registered now.
+ */
+export declare class SharedSessionProtocol {
+    private readonly host;
+    private readonly inactivityTtlMs;
+    private readonly now;
+    constructor(options: SharedSessionProtocolOptions);
+    exchange(grantId: string, secret: string): Promise<SharedSessionCredential | null>;
+    resolve(grantId: string, cookieValue: string | undefined, options?: {
+        readonly activity?: "background" | "foreground";
+    }): Promise<SharedSessionContext | null>;
+    revoke(context: Pick<SharedSessionContext, "grantId" | "sessionId">): Promise<void>;
+    private context;
+    private currentTime;
+}
+//# sourceMappingURL=session-protocol.d.ts.map

package/dist/shares/session-protocol.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-protocol.d.ts","sourceRoot":"","sources":["../../src/shares/session-protocol.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,YAAY,CAAA;AAG9C,OAAO,EAAE,KAAK,eAAe,EAA2B,MAAM,eAAe,CAAA;AAI7E,eAAO,MAAM,wCAAwC,QAAc,CAAA;AAKnE,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;IACxB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAA;IAChC,QAAQ,CAAC,MAAM,EAAE,eAAe,CAAA;IAChC,QAAQ,CAAC,SAAS,EAAE,IAAI,CAAA;IACxB,QAAQ,CAAC,iBAAiB,EAAE,IAAI,CAAA;CACjC;AAED,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,OAAO,EAAE,oBAAoB,CAAA;IACtC,2DAA2D;IAC3D,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAA;CAC7B;AAED,MAAM,WAAW,4BAA4B;IAC3C,QAAQ,CAAC,IAAI,EAAE,YAAY,CAAA;IAC3B,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAA;IACjC,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,IAAI,CAAA;CAC1B;AAED;;;;;GAKG;AACH,qBAAa,qBAAqB;IAChC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAc;IACnC,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAQ;IACxC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAY;gBAEpB,OAAO,EAAE,4BAA4B;IAa3C,QAAQ,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,uBAAuB,GAAG,IAAI,CAAC;IA6ClF,OAAO,CACX,OAAO,EAAE,MAAM,EACf,WAAW,EAAE,MAAM,GAAG,SAAS,EAC/B,OAAO,GAAE;QAAE,QAAQ,CAAC,QAAQ,CAAC,EAAE,YAAY,GAAG,YAAY,CAAA;KAAO,GAChE,OAAO,CAAC,oBAAoB,GAAG,IAAI,CAAC;IAoDjC,MAAM,CAAC,OAAO,EAAE,IAAI,CAAC,oBAAoB,EAAE,SAAS,GAAG,WAAW,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC;IAgBzF,OAAO,CAAC,OAAO;IAWf,OAAO,CAAC,WAAW;CAOpB"}

package/dist/shares/types.d.ts

@@ -0,0 +1,51 @@
+import type { ObjectActionDefinition } from "../actions";
+import type { LinkPathSelectionInput, LinkPathSelectionMode, ObjectTypeWithPropertyTokens } from "../ontology";
+declare const shareTargetBrand: unique symbol;
+/** Contextual placeholder for the one exact object supplied when a Share is issued. */
+export interface ShareTarget<TObjectTypeId extends string = string> {
+    readonly [shareTargetBrand]: true;
+    readonly objectTypeId: TObjectTypeId;
+}
+export interface ShareViewGrant<TObjectTypeId extends string = string> {
+    readonly kind: "object.view";
+    readonly targetObjectTypeId: TObjectTypeId;
+    readonly links: LinkPathSelectionMode;
+}
+export interface ShareViewGrantBuilder<TObjectTypeId extends string = string> extends ShareViewGrant<TObjectTypeId> {
+    /** Include every direct link present when a grant is issued. Nested links remain excluded. */
+    withLinks(): ShareViewGrant<TObjectTypeId>;
+    /** Include only these link paths. Use a bare link token when it has no nested links. */
+    withLinks<const TLinks extends readonly LinkPathSelectionInput<TObjectTypeId>[]>(links: TLinks): ShareViewGrant<TObjectTypeId>;
+}
+export interface ShareActionGrant<TActionId extends string = string, TObjectTypeId extends string = string> {
+    readonly kind: "action.apply";
+    readonly actionId: TActionId;
+    readonly subjectObjectTypeId: TObjectTypeId;
+}
+export interface ShareActionGrantBuilder<TAction extends ObjectActionDefinition = ObjectActionDefinition> {
+    on(target: ShareTarget<TAction["binding"]["objectType"]["id"]>): ShareActionGrant<TAction["id"], TAction["binding"]["objectType"]["id"]>;
+}
+export type ShareScopeGrant = ShareViewGrant | ShareActionGrant;
+export interface ShareDefinition<TId extends string = string, TTargetObjectTypeId extends string = string> {
+    readonly kind: "share";
+    /**
+     * Durable authority identity. Removing a definition suspends its grants; reusing the id can make
+     * unexpired grants effective again after intersection. Revoke them before permanent removal.
+     */
+    readonly id: TId;
+    readonly target: {
+        readonly kind: "object";
+        readonly objectTypeId: TTargetObjectTypeId;
+    };
+    readonly grants: readonly ShareScopeGrant[];
+    readonly description?: string;
+}
+export interface DefineShareOptions<TTarget extends ObjectTypeWithPropertyTokens, TGrants extends readonly ShareScopeGrant[]> {
+    readonly target: TTarget;
+    readonly grants: (context: {
+        readonly target: ShareTarget<TTarget["id"]>;
+    }) => TGrants;
+    readonly description?: string;
+}
+export {};
+//# sourceMappingURL=types.d.ts.map

package/dist/shares/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/shares/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,YAAY,CAAA;AACxD,OAAO,KAAK,EACV,sBAAsB,EACtB,qBAAqB,EACrB,4BAA4B,EAC7B,MAAM,aAAa,CAAA;AAEpB,OAAO,CAAC,MAAM,gBAAgB,EAAE,OAAO,MAAM,CAAA;AAE7C,uFAAuF;AACvF,MAAM,WAAW,WAAW,CAAC,aAAa,SAAS,MAAM,GAAG,MAAM;IAChE,QAAQ,CAAC,CAAC,gBAAgB,CAAC,EAAE,IAAI,CAAA;IACjC,QAAQ,CAAC,YAAY,EAAE,aAAa,CAAA;CACrC;AAED,MAAM,WAAW,cAAc,CAAC,aAAa,SAAS,MAAM,GAAG,MAAM;IACnE,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAA;IAC5B,QAAQ,CAAC,kBAAkB,EAAE,aAAa,CAAA;IAC1C,QAAQ,CAAC,KAAK,EAAE,qBAAqB,CAAA;CACtC;AAED,MAAM,WAAW,qBAAqB,CAAC,aAAa,SAAS,MAAM,GAAG,MAAM,CAC1E,SAAQ,cAAc,CAAC,aAAa,CAAC;IACrC,8FAA8F;IAC9F,SAAS,IAAI,cAAc,CAAC,aAAa,CAAC,CAAA;IAC1C,wFAAwF;IACxF,SAAS,CAAC,KAAK,CAAC,MAAM,SAAS,SAAS,sBAAsB,CAAC,aAAa,CAAC,EAAE,EAC7E,KAAK,EAAE,MAAM,GACZ,cAAc,CAAC,aAAa,CAAC,CAAA;CACjC;AAED,MAAM,WAAW,gBAAgB,CAC/B,SAAS,SAAS,MAAM,GAAG,MAAM,EACjC,aAAa,SAAS,MAAM,GAAG,MAAM;IAErC,QAAQ,CAAC,IAAI,EAAE,cAAc,CAAA;IAC7B,QAAQ,CAAC,QAAQ,EAAE,SAAS,CAAA;IAC5B,QAAQ,CAAC,mBAAmB,EAAE,aAAa,CAAA;CAC5C;AAED,MAAM,WAAW,uBAAuB,CACtC,OAAO,SAAS,sBAAsB,GAAG,sBAAsB;IAE/D,EAAE,CACA,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,CAAC,GAC1D,gBAAgB,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,CAAC,CAAA;CAC3E;AAED,MAAM,MAAM,eAAe,GAAG,cAAc,GAAG,gBAAgB,CAAA;AAE/D,MAAM,WAAW,eAAe,CAC9B,GAAG,SAAS,MAAM,GAAG,MAAM,EAC3B,mBAAmB,SAAS,MAAM,GAAG,MAAM;IAE3C,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAA;IACtB;;;OAGG;IACH,QAAQ,CAAC,EAAE,EAAE,GAAG,CAAA;IAChB,QAAQ,CAAC,MAAM,EAAE;QACf,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAA;QACvB,QAAQ,CAAC,YAAY,EAAE,mBAAmB,CAAA;KAC3C,CAAA;IACD,QAAQ,CAAC,MAAM,EAAE,SAAS,eAAe,EAAE,CAAA;IAC3C,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAA;CAC9B;AAED,MAAM,WAAW,kBAAkB,CACjC,OAAO,SAAS,4BAA4B,EAC5C,OAAO,SAAS,SAAS,eAAe,EAAE;IAE1C,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAA;IACxB,QAAQ,CAAC,MAAM,EAAE,CAAC,OAAO,EAAE;QAAE,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAA;KAAE,KAAK,OAAO,CAAA;IACtF,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAA;CAC9B"}

package/dist/shares/validation.d.ts

@@ -0,0 +1,11 @@
+import type { ActionDefinitionCatalog } from "../actions";
+import type { OntologyDefinitionCatalog } from "../ontology";
+import type { ShareDefinition } from "./types";
+/** Cross-validate discovered Share definitions after ontology and Actions are registered. */
+export declare function validateSharesAtStartup(input: {
+    readonly shares: readonly ShareDefinition[];
+    readonly ontology: OntologyDefinitionCatalog;
+    readonly actions: ActionDefinitionCatalog;
+}): ReadonlyMap<string, ShareDefinition>;
+export declare function assertShareDefinitionEnvelope(value: unknown): asserts value is ShareDefinition;
+//# sourceMappingURL=validation.d.ts.map

package/dist/shares/validation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"validation.d.ts","sourceRoot":"","sources":["../../src/shares/validation.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,YAAY,CAAA;AACzD,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,aAAa,CAAA;AAI5D,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,SAAS,CAAA;AAE9C,6FAA6F;AAC7F,wBAAgB,uBAAuB,CAAC,KAAK,EAAE;IAC7C,QAAQ,CAAC,MAAM,EAAE,SAAS,eAAe,EAAE,CAAA;IAC3C,QAAQ,CAAC,QAAQ,EAAE,yBAAyB,CAAA;IAC5C,QAAQ,CAAC,OAAO,EAAE,uBAAuB,CAAA;CAC1C,GAAG,WAAW,CAAC,MAAM,EAAE,eAAe,CAAC,CAmBvC;AAED,wBAAgB,6BAA6B,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAAC,KAAK,IAAI,eAAe,CAE9F"}

package/dist/storage/action-runs/failure.js

@@ -2,9 +2,9 @@
 import {
   parseActionRunFailure,
   serializeActionRunFailure
-} from "../../chunk-htq0qh7z.js";
-import"../../chunk-0172wgm9.js";
-import"../../chunk-t8t39h7v.js";
+} from "../../chunk-ka3a2ft3.js";
+import"../../chunk-2xns679x.js";
+import"../../chunk-n6jxh8sw.js";
 import"../../chunk-y64skrwp.js";
 export {
   serializeActionRunFailure,

package/dist/storage/action-runs/provider.js

@@ -1,8 +1,8 @@
 // @bun
 import {
   assertActionRunExecution
-} from "../../chunk-xkthy56g.js";
-import"../../chunk-t9xghkva.js";
+} from "../../chunk-w1tvjszy.js";
+import"../../chunk-j1sbhm7p.js";
 import"../../chunk-ry24jbr1.js";
 import"../../chunk-dktq02ne.js";
 import"../../chunk-y64skrwp.js";

package/dist/storage/agents/errors.d.ts

@@ -1,4 +1,4 @@
-export type AgentStorageErrorCode = "thread_not_found" | "active_run_exists" | "run_not_found" | "invalid_input" | "invalid_state" | "execution_lost" | "duplicate_id";
+export type AgentStorageErrorCode = "thread_not_found" | "active_run_exists" | "active_child_limit" | "run_not_found" | "invalid_input" | "invalid_state" | "execution_lost" | "duplicate_id";
 /**
  * Error for agent-storage invariants and invalid state transitions (single-flight, execution
  * ownership, run lifecycle, message append). Callers branch on `code` rather than message text.

package/dist/storage/agents/errors.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../../../src/storage/agents/errors.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,qBAAqB,GAC7B,kBAAkB,GAClB,mBAAmB,GACnB,eAAe,GACf,eAAe,GACf,eAAe,GACf,gBAAgB,GAChB,cAAc,CAAA;AAElB;;;GAGG;AACH,qBAAa,iBAAkB,SAAQ,KAAK;IAIxC,QAAQ,CAAC,IAAI,EAAE,qBAAqB;IAHtC,QAAQ,CAAC,IAAI,uBAAsB;gBAGxB,IAAI,EAAE,qBAAqB,EACpC,OAAO,EAAE,MAAM;CAIlB"}
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../../../src/storage/agents/errors.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,qBAAqB,GAC7B,kBAAkB,GAClB,mBAAmB,GACnB,oBAAoB,GACpB,eAAe,GACf,eAAe,GACf,eAAe,GACf,gBAAgB,GAChB,cAAc,CAAA;AAElB;;;GAGG;AACH,qBAAa,iBAAkB,SAAQ,KAAK;IAIxC,QAAQ,CAAC,IAAI,EAAE,qBAAqB;IAHtC,QAAQ,CAAC,IAAI,uBAAsB;gBAGxB,IAAI,EAAE,qBAAqB,EACpC,OAAO,EAAE,MAAM;CAIlB"}

package/dist/storage/agents/in-memory.d.ts

@@ -1,5 +1,5 @@
 import type { ExecutionStorage } from "../executions";
-import type { AgentContextCheckpointRecord, AgentContextCheckpointStore, AgentMessageRecord, AgentMessageStore, AgentRunRecord, AgentRunStore, AgentStorage, AgentThreadRecord, AgentThreadStore, AppendAgentMessageInput, ConfirmAgentRunExecutionOwnershipInput, CreateAgentContextCheckpointInput, CreateAgentRunInput, CreateAgentThreadInput, DeleteAgentMessagesByRunInput, FinishAgentRunInput, FinishQueuedAgentRunInput, ListAgentMessagesInput, ListAgentMessagesResult, ListAgentRunsInput, ListAgentRunsResult, ListAgentThreadsInput, ListAgentThreadsResult, ReclaimAgentRunInput, StartAgentRunInput } from "./types";
+import type { AgentContextCheckpointRecord, AgentContextCheckpointStore, AgentMessageRecord, AgentMessageStore, AgentRunRecord, AgentRunStore, AgentStorage, AgentThreadRecord, AgentThreadStore, AppendAgentMessageInput, ConfirmAgentRunExecutionOwnershipInput, ConversationAgentRunRecord, CreateAgentContextCheckpointInput, CreateAgentRunInput, CreateAgentThreadInput, CreateSubagentRunInput, DeleteAgentMessagesByRunInput, FinishAgentRunInput, FinishQueuedAgentRunInput, ListAgentMessagesInput, ListAgentMessagesResult, ListAgentRunsInput, ListAgentRunsResult, ListAgentThreadsInput, ListAgentThreadsResult, ReclaimAgentRunInput, StartAgentRunInput, SubagentRunRecord } from "./types";
 /**
  * Shared in-memory state behind the four sub-stores. They are tiered for ergonomics
  * (`storage.runs.create(...)`), but several operations span tables — creating/finishing a run
@@ -32,7 +32,8 @@ declare class InMemoryAgentRunStore implements AgentRunStore {
     private readonly state;
     private readonly executions;
     constructor(state: AgentStoreState, executions: ExecutionStorage);
-    create(input: CreateAgentRunInput): Promise<AgentRunRecord>;
+    create(input: CreateAgentRunInput): Promise<ConversationAgentRunRecord>;
+    createSubagent(input: CreateSubagentRunInput): Promise<SubagentRunRecord>;
     start(input: StartAgentRunInput): Promise<AgentRunRecord>;
     finishQueued(input: FinishQueuedAgentRunInput): Promise<AgentRunRecord>;
     reclaim(input: ReclaimAgentRunInput): Promise<AgentRunRecord>;

package/dist/storage/agents/in-memory.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"in-memory.d.ts","sourceRoot":"","sources":["../../../src/storage/agents/in-memory.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAA;AAUrD,OAAO,KAAK,EACV,4BAA4B,EAC5B,2BAA2B,EAC3B,kBAAkB,EAClB,iBAAiB,EAEjB,cAAc,EACd,aAAa,EACb,YAAY,EACZ,iBAAiB,EACjB,gBAAgB,EAChB,uBAAuB,EACvB,sCAAsC,EACtC,iCAAiC,EACjC,mBAAmB,EACnB,sBAAsB,EACtB,6BAA6B,EAC7B,mBAAmB,EACnB,yBAAyB,EACzB,sBAAsB,EACtB,uBAAuB,EACvB,kBAAkB,EAClB,mBAAmB,EACnB,qBAAqB,EACrB,sBAAsB,EACtB,oBAAoB,EACpB,kBAAkB,EACnB,MAAM,SAAS,CAAA;AA+ChB;;;;;GAKG;AACH,UAAU,eAAe;IACvB,QAAQ,CAAC,OAAO,EAAE,GAAG,CAAC,MAAM,EAAE,iBAAiB,CAAC,CAAA;IAChD,QAAQ,CAAC,IAAI,EAAE,GAAG,CAAC,MAAM,EAAE,cAAc,CAAC,CAAA;IAC1C,QAAQ,CAAC,QAAQ,EAAE,GAAG,CAAC,MAAM,EAAE,kBAAkB,CAAC,CAAA;IAClD,QAAQ,CAAC,WAAW,EAAE,GAAG,CAAC,MAAM,EAAE,4BAA4B,CAAC,CAAA;CAChE;AAED,MAAM,WAAW,4BAA4B;IAC3C,QAAQ,CAAC,OAAO,EAAE,GAAG,CAAC,MAAM,EAAE,iBAAiB,CAAC,CAAA;IAChD,QAAQ,CAAC,IAAI,EAAE,GAAG,CAAC,MAAM,EAAE,cAAc,CAAC,CAAA;IAC1C,QAAQ,CAAC,QAAQ,EAAE,GAAG,CAAC,MAAM,EAAE,kBAAkB,CAAC,CAAA;IAClD,QAAQ,CAAC,WAAW,EAAE,GAAG,CAAC,MAAM,EAAE,4BAA4B,CAAC,CAAA;CAChE;AAID,cAAM,wBAAyB,YAAW,gBAAgB;IAC5C,OAAO,CAAC,QAAQ,CAAC,KAAK;gBAAL,KAAK,EAAE,eAAe;IAE7C,MAAM,CAAC,KAAK,EAAE,sBAAsB,GAAG,OAAO,CAAC,iBAAiB,CAAC;IA2BjE,OAAO,CAAC,MAAM,EAAE;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,EAAE,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,iBAAiB,GAAG,IAAI,CAAC;IAKrF,IAAI,CAAC,KAAK,EAAE,qBAAqB,GAAG,OAAO,CAAC,sBAAsB,CAAC;CA0B1E;AAID,cAAM,qBAAsB,YAAW,aAAa;IAEhD,OAAO,CAAC,QAAQ,CAAC,KAAK;IACtB,OAAO,CAAC,QAAQ,CAAC,UAAU;gBADV,KAAK,EAAE,eAAe,EACtB,UAAU,EAAE,gBAAgB;IAGzC,MAAM,CAAC,KAAK,EAAE,mBAAmB,GAAG,OAAO,CAAC,cAAc,CAAC;IAoE3D,KAAK,CAAC,KAAK,EAAE,kBAAkB,GAAG,OAAO,CAAC,cAAc,CAAC;IAezD,YAAY,CAAC,KAAK,EAAE,yBAAyB,GAAG,OAAO,CAAC,cAAc,CAAC;IAcvE,OAAO,CAAC,KAAK,EAAE,oBAAoB,GAAG,OAAO,CAAC,cAAc,CAAC;IAW7D,yBAAyB,CAC7B,KAAK,EAAE,sCAAsC,GAC5C,OAAO,CAAC,cAAc,CAAC;IAsBpB,MAAM,CAAC,KAAK,EAAE,mBAAmB,GAAG,OAAO,CAAC,cAAc,CAAC;IA6B3D,OAAO,CAAC,MAAM,EAAE;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,EAAE,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,cAAc,GAAG,IAAI,CAAC;IAKlF,QAAQ,CAAC,MAAM,EAAE;QACrB,SAAS,EAAE,MAAM,CAAA;QACjB,GAAG,EAAE,SAAS,MAAM,EAAE,CAAA;KACvB,GAAG,OAAO,CAAC,SAAS,cAAc,EAAE,CAAC;IAOhC,IAAI,CAAC,KAAK,EAAE,kBAAkB,GAAG,OAAO,CAAC,mBAAmB,CAAC;IAuBnE,OAAO,CAAC,cAAc;IAItB,OAAO,CAAC,aAAa;IAqBrB,OAAO,CAAC,aAAa;CAUtB;AAID,cAAM,yBAA0B,YAAW,iBAAiB;IAC9C,OAAO,CAAC,QAAQ,CAAC,KAAK;gBAAL,KAAK,EAAE,eAAe;IAE7C,MAAM,CAAC,KAAK,EAAE,uBAAuB,GAAG,OAAO,CAAC,kBAAkB,CAAC;IA0DnE,aAAa,CAAC,KAAK,EAAE,6BAA6B,GAAG,OAAO,CAAC,MAAM,CAAC;IA4CpE,OAAO,CAAC,MAAM,EAAE;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,EAAE,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,kBAAkB,GAAG,IAAI,CAAC;IAKtF,IAAI,CAAC,KAAK,EAAE,sBAAsB,GAAG,OAAO,CAAC,uBAAuB,CAAC;IAe3E,OAAO,CAAC,OAAO;CAShB;AAID,cAAM,mCAAoC,YAAW,2BAA2B;IAClE,OAAO,CAAC,QAAQ,CAAC,KAAK;gBAAL,KAAK,EAAE,eAAe;IAE7C,MAAM,CAAC,KAAK,EAAE,iCAAiC,GAAG,OAAO,CAAC,4BAA4B,CAAC;IA2EvF,SAAS,CAAC,KAAK,EAAE;QACrB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;QAC1B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;KAC1B,GAAG,OAAO,CAAC,4BAA4B,GAAG,IAAI,CAAC;IAK1C,WAAW,CAAC,KAAK,EAAE;QACvB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;QAC1B,QAAQ,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,CAAA;KACnC,GAAG,OAAO,CAAC,SAAS,4BAA4B,EAAE,CAAC;IAYpD,OAAO,CAAC,UAAU;CAcnB;AAED,qBAAa,oBAAqB,YAAW,YAAY;IACvD,OAAO,CAAC,QAAQ,CAAC,KAAK,CAKrB;IAED,QAAQ,CAAC,OAAO,EAAE,wBAAwB,CAAA;IAC1C,QAAQ,CAAC,IAAI,EAAE,qBAAqB,CAAA;IACpC,QAAQ,CAAC,QAAQ,EAAE,yBAAyB,CAAA;IAC5C,QAAQ,CAAC,WAAW,EAAE,mCAAmC,CAAA;gBAE7C,UAAU,EAAE,gBAAgB;IAOxC,QAAQ,IAAI,4BAA4B;IASxC,OAAO,CAAC,QAAQ,EAAE,4BAA4B,GAAG,IAAI;CAMtD"}
+{"version":3,"file":"in-memory.d.ts","sourceRoot":"","sources":["../../../src/storage/agents/in-memory.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAA;AAcrD,OAAO,KAAK,EACV,4BAA4B,EAC5B,2BAA2B,EAC3B,kBAAkB,EAClB,iBAAiB,EAEjB,cAAc,EACd,aAAa,EACb,YAAY,EACZ,iBAAiB,EACjB,gBAAgB,EAChB,uBAAuB,EACvB,sCAAsC,EACtC,0BAA0B,EAC1B,iCAAiC,EACjC,mBAAmB,EACnB,sBAAsB,EACtB,sBAAsB,EACtB,6BAA6B,EAC7B,mBAAmB,EACnB,yBAAyB,EACzB,sBAAsB,EACtB,uBAAuB,EACvB,kBAAkB,EAClB,mBAAmB,EACnB,qBAAqB,EACrB,sBAAsB,EACtB,oBAAoB,EACpB,kBAAkB,EAClB,iBAAiB,EAClB,MAAM,SAAS,CAAA;AA+ChB;;;;;GAKG;AACH,UAAU,eAAe;IACvB,QAAQ,CAAC,OAAO,EAAE,GAAG,CAAC,MAAM,EAAE,iBAAiB,CAAC,CAAA;IAChD,QAAQ,CAAC,IAAI,EAAE,GAAG,CAAC,MAAM,EAAE,cAAc,CAAC,CAAA;IAC1C,QAAQ,CAAC,QAAQ,EAAE,GAAG,CAAC,MAAM,EAAE,kBAAkB,CAAC,CAAA;IAClD,QAAQ,CAAC,WAAW,EAAE,GAAG,CAAC,MAAM,EAAE,4BAA4B,CAAC,CAAA;CAChE;AAED,MAAM,WAAW,4BAA4B;IAC3C,QAAQ,CAAC,OAAO,EAAE,GAAG,CAAC,MAAM,EAAE,iBAAiB,CAAC,CAAA;IAChD,QAAQ,CAAC,IAAI,EAAE,GAAG,CAAC,MAAM,EAAE,cAAc,CAAC,CAAA;IAC1C,QAAQ,CAAC,QAAQ,EAAE,GAAG,CAAC,MAAM,EAAE,kBAAkB,CAAC,CAAA;IAClD,QAAQ,CAAC,WAAW,EAAE,GAAG,CAAC,MAAM,EAAE,4BAA4B,CAAC,CAAA;CAChE;AAID,cAAM,wBAAyB,YAAW,gBAAgB;IAC5C,OAAO,CAAC,QAAQ,CAAC,KAAK;gBAAL,KAAK,EAAE,eAAe;IAE7C,MAAM,CAAC,KAAK,EAAE,sBAAsB,GAAG,OAAO,CAAC,iBAAiB,CAAC;IA0BjE,OAAO,CAAC,MAAM,EAAE;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,EAAE,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,iBAAiB,GAAG,IAAI,CAAC;IAKrF,IAAI,CAAC,KAAK,EAAE,qBAAqB,GAAG,OAAO,CAAC,sBAAsB,CAAC;CAsB1E;AAID,cAAM,qBAAsB,YAAW,aAAa;IAEhD,OAAO,CAAC,QAAQ,CAAC,KAAK;IACtB,OAAO,CAAC,QAAQ,CAAC,UAAU;gBADV,KAAK,EAAE,eAAe,EACtB,UAAU,EAAE,gBAAgB;IAGzC,MAAM,CAAC,KAAK,EAAE,mBAAmB,GAAG,OAAO,CAAC,0BAA0B,CAAC;IAqEvE,cAAc,CAAC,KAAK,EAAE,sBAAsB,GAAG,OAAO,CAAC,iBAAiB,CAAC;IAwFzE,KAAK,CAAC,KAAK,EAAE,kBAAkB,GAAG,OAAO,CAAC,cAAc,CAAC;IAezD,YAAY,CAAC,KAAK,EAAE,yBAAyB,GAAG,OAAO,CAAC,cAAc,CAAC;IAcvE,OAAO,CAAC,KAAK,EAAE,oBAAoB,GAAG,OAAO,CAAC,cAAc,CAAC;IAW7D,yBAAyB,CAC7B,KAAK,EAAE,sCAAsC,GAC5C,OAAO,CAAC,cAAc,CAAC;IAsBpB,MAAM,CAAC,KAAK,EAAE,mBAAmB,GAAG,OAAO,CAAC,cAAc,CAAC;IAyC3D,OAAO,CAAC,MAAM,EAAE;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,EAAE,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,cAAc,GAAG,IAAI,CAAC;IAKlF,QAAQ,CAAC,MAAM,EAAE;QACrB,SAAS,EAAE,MAAM,CAAA;QACjB,GAAG,EAAE,SAAS,MAAM,EAAE,CAAA;KACvB,GAAG,OAAO,CAAC,SAAS,cAAc,EAAE,CAAC;IAOhC,IAAI,CAAC,KAAK,EAAE,kBAAkB,GAAG,OAAO,CAAC,mBAAmB,CAAC;IA6BnE,OAAO,CAAC,cAAc;IAItB,OAAO,CAAC,aAAa;IAqBrB,OAAO,CAAC,aAAa;CAWtB;AAID,cAAM,yBAA0B,YAAW,iBAAiB;IAC9C,OAAO,CAAC,QAAQ,CAAC,KAAK;gBAAL,KAAK,EAAE,eAAe;IAE7C,MAAM,CAAC,KAAK,EAAE,uBAAuB,GAAG,OAAO,CAAC,kBAAkB,CAAC;IA0DnE,aAAa,CAAC,KAAK,EAAE,6BAA6B,GAAG,OAAO,CAAC,MAAM,CAAC;IA4CpE,OAAO,CAAC,MAAM,EAAE;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,EAAE,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,kBAAkB,GAAG,IAAI,CAAC;IAKtF,IAAI,CAAC,KAAK,EAAE,sBAAsB,GAAG,OAAO,CAAC,uBAAuB,CAAC;IAe3E,OAAO,CAAC,OAAO;CAShB;AAID,cAAM,mCAAoC,YAAW,2BAA2B;IAClE,OAAO,CAAC,QAAQ,CAAC,KAAK;gBAAL,KAAK,EAAE,eAAe;IAE7C,MAAM,CAAC,KAAK,EAAE,iCAAiC,GAAG,OAAO,CAAC,4BAA4B,CAAC;IA2EvF,SAAS,CAAC,KAAK,EAAE;QACrB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;QAC1B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;KAC1B,GAAG,OAAO,CAAC,4BAA4B,GAAG,IAAI,CAAC;IAK1C,WAAW,CAAC,KAAK,EAAE;QACvB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;QAC1B,QAAQ,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,CAAA;KACnC,GAAG,OAAO,CAAC,SAAS,4BAA4B,EAAE,CAAC;IAYpD,OAAO,CAAC,UAAU;CAcnB;AAED,qBAAa,oBAAqB,YAAW,YAAY;IACvD,OAAO,CAAC,QAAQ,CAAC,KAAK,CAKrB;IAED,QAAQ,CAAC,OAAO,EAAE,wBAAwB,CAAA;IAC1C,QAAQ,CAAC,IAAI,EAAE,qBAAqB,CAAA;IACpC,QAAQ,CAAC,QAAQ,EAAE,yBAAyB,CAAA;IAC5C,QAAQ,CAAC,WAAW,EAAE,mCAAmC,CAAA;gBAE7C,UAAU,EAAE,gBAAgB;IAOxC,QAAQ,IAAI,4BAA4B;IASxC,OAAO,CAAC,QAAQ,EAAE,4BAA4B,GAAG,IAAI;CAMtD"}

package/dist/storage/agents/index.d.ts

@@ -2,6 +2,6 @@ export type { AgentStorageErrorCode } from "./errors";
 export { AgentStorageError } from "./errors";
 export type { InMemoryAgentStorageSnapshot } from "./in-memory";
 export { InMemoryAgentStorage } from "./in-memory";
-export type { AgentContextCheckpointReason, AgentContextCheckpointRecord, AgentContextCheckpointStore, AgentExecutionStatus, AgentMessageRecord, AgentMessageRole, AgentMessageStore, AgentRunDiagnostic, AgentRunDiagnosticCode, AgentRunDiagnosticSeverity, AgentRunExecution, AgentRunFailureCode, AgentRunFinishReason, AgentRunRecord, AgentRunStatus, AgentRunStore, AgentStorage, AgentThreadRecord, AgentThreadStatus, AgentThreadStore, AppendAgentMessageInput, ConfirmAgentRunExecutionOwnershipInput, CreateAgentContextCheckpointInput, CreateAgentRunInput, CreateAgentThreadInput, DeleteAgentMessagesByRunInput, FinishAgentRunInput, FinishQueuedAgentRunInput, ListAgentMessagesInput, ListAgentMessagesResult, ListAgentRunsInput, ListAgentRunsResult, ListAgentThreadsInput, ListAgentThreadsResult, ReclaimAgentRunInput, StartAgentRunInput, } from "./types";
+export type { AgentContextCheckpointReason, AgentContextCheckpointRecord, AgentContextCheckpointStore, AgentExecutionStatus, AgentMessageRecord, AgentMessageRole, AgentMessageStore, AgentRunDiagnostic, AgentRunDiagnosticCode, AgentRunDiagnosticSeverity, AgentRunExecution, AgentRunFailureCode, AgentRunFinishReason, AgentRunKind, AgentRunRecord, AgentRunStatus, AgentRunStore, AgentStorage, AgentThreadRecord, AgentThreadStatus, AgentThreadStore, AppendAgentMessageInput, ConfirmAgentRunExecutionOwnershipInput, ConversationAgentRunRecord, ConversationAgentRunSpec, CreateAgentContextCheckpointInput, CreateAgentRunInput, CreateAgentThreadInput, CreateSubagentRunInput, DeleteAgentMessagesByRunInput, FinishAgentRunInput, FinishQueuedAgentRunInput, ListAgentMessagesInput, ListAgentMessagesResult, ListAgentRunsInput, ListAgentRunsResult, ListAgentThreadsInput, ListAgentThreadsResult, ReclaimAgentRunInput, StartAgentRunInput, SubagentRunRecord, SubagentRunResult, SubagentRunSpec, } from "./types";
 export { AGENT_RUN_DIAGNOSTIC_CODES, AGENT_RUN_FAILURE_CODES, AGENT_RUN_FINISH_REASONS, coerceAgentRunFinishReason, } from "./types";
 //# sourceMappingURL=index.d.ts.map

package/dist/storage/agents/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/storage/agents/index.ts"],"names":[],"mappings":"AAAA,YAAY,EAAE,qBAAqB,EAAE,MAAM,UAAU,CAAA;AACrD,OAAO,EAAE,iBAAiB,EAAE,MAAM,UAAU,CAAA;AAC5C,YAAY,EAAE,4BAA4B,EAAE,MAAM,aAAa,CAAA;AAC/D,OAAO,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAA;AAClD,YAAY,EACV,4BAA4B,EAC5B,4BAA4B,EAC5B,2BAA2B,EAC3B,oBAAoB,EACpB,kBAAkB,EAClB,gBAAgB,EAChB,iBAAiB,EACjB,kBAAkB,EAClB,sBAAsB,EACtB,0BAA0B,EAC1B,iBAAiB,EACjB,mBAAmB,EACnB,oBAAoB,EACpB,cAAc,EACd,cAAc,EACd,aAAa,EACb,YAAY,EACZ,iBAAiB,EACjB,iBAAiB,EACjB,gBAAgB,EAChB,uBAAuB,EACvB,sCAAsC,EACtC,iCAAiC,EACjC,mBAAmB,EACnB,sBAAsB,EACtB,6BAA6B,EAC7B,mBAAmB,EACnB,yBAAyB,EACzB,sBAAsB,EACtB,uBAAuB,EACvB,kBAAkB,EAClB,mBAAmB,EACnB,qBAAqB,EACrB,sBAAsB,EACtB,oBAAoB,EACpB,kBAAkB,GACnB,MAAM,SAAS,CAAA;AAChB,OAAO,EACL,0BAA0B,EAC1B,uBAAuB,EACvB,wBAAwB,EACxB,0BAA0B,GAC3B,MAAM,SAAS,CAAA"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/storage/agents/index.ts"],"names":[],"mappings":"AAAA,YAAY,EAAE,qBAAqB,EAAE,MAAM,UAAU,CAAA;AACrD,OAAO,EAAE,iBAAiB,EAAE,MAAM,UAAU,CAAA;AAC5C,YAAY,EAAE,4BAA4B,EAAE,MAAM,aAAa,CAAA;AAC/D,OAAO,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAA;AAClD,YAAY,EACV,4BAA4B,EAC5B,4BAA4B,EAC5B,2BAA2B,EAC3B,oBAAoB,EACpB,kBAAkB,EAClB,gBAAgB,EAChB,iBAAiB,EACjB,kBAAkB,EAClB,sBAAsB,EACtB,0BAA0B,EAC1B,iBAAiB,EACjB,mBAAmB,EACnB,oBAAoB,EACpB,YAAY,EACZ,cAAc,EACd,cAAc,EACd,aAAa,EACb,YAAY,EACZ,iBAAiB,EACjB,iBAAiB,EACjB,gBAAgB,EAChB,uBAAuB,EACvB,sCAAsC,EACtC,0BAA0B,EAC1B,wBAAwB,EACxB,iCAAiC,EACjC,mBAAmB,EACnB,sBAAsB,EACtB,sBAAsB,EACtB,6BAA6B,EAC7B,mBAAmB,EACnB,yBAAyB,EACzB,sBAAsB,EACtB,uBAAuB,EACvB,kBAAkB,EAClB,mBAAmB,EACnB,qBAAqB,EACrB,sBAAsB,EACtB,oBAAoB,EACpB,kBAAkB,EAClB,iBAAiB,EACjB,iBAAiB,EACjB,eAAe,GAChB,MAAM,SAAS,CAAA;AAChB,OAAO,EACL,0BAA0B,EAC1B,uBAAuB,EACvB,wBAAwB,EACxB,0BAA0B,GAC3B,MAAM,SAAS,CAAA"}

package/dist/storage/agents/provider.d.ts

@@ -1,13 +1,20 @@
-import type { ExecutionStorage } from "../executions";
-import type { AgentContextCheckpointRecord, AgentMessageRecord, AgentRunRecord, AgentThreadRecord, CreateAgentContextCheckpointInput } from "./types";
+import type { ExecutionRecord, ExecutionStorage } from "../executions";
+import type { AgentContextCheckpointRecord, AgentMessageRecord, AgentRunRecord, AgentThreadRecord, ConversationAgentRunSpec, CreateAgentContextCheckpointInput, CreateSubagentRunInput, SubagentRunRecord, SubagentRunResult } from "./types";
+/** Validate the provider-neutral model selection captured for a conversational turn. */
+export declare function assertConversationAgentRunSpec(spec: ConversationAgentRunSpec, prefix?: string): void;
 /** Validate the semantic link between a conversational Agent run and its immutable execution. */
 export declare function assertAgentRunExecution(input: {
     readonly executions: ExecutionStorage;
     readonly projectId: string;
     readonly executionId: string;
     readonly runId: string;
-    readonly agentId: string;
-}): Promise<void>;
+}): Promise<ExecutionRecord>;
+/** Validate the provider-neutral payload of an idempotent child admission. */
+export declare function assertCreateSubagentRunInput(input: CreateSubagentRunInput, prefix?: string): void;
+/** Exact semantic match required when a durable spawn key is replayed. */
+export declare function subagentRunMatchesCreateInput(run: AgentRunRecord, input: CreateSubagentRunInput): run is SubagentRunRecord;
+/** Validate the small durable result returned by a successful child. */
+export declare function assertSubagentRunResult(result: SubagentRunResult | undefined, runId: string, prefix?: string): asserts result is SubagentRunResult;
 /** Validate provider-independent checkpoint fields before entering a storage critical section. */
 export declare function assertCreateAgentContextCheckpointInput(input: CreateAgentContextCheckpointInput, prefix?: string): void;
 /** Assert that the current delivery still owns the active conversational run. */

package/dist/storage/agents/provider.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"provider.d.ts","sourceRoot":"","sources":["../../../src/storage/agents/provider.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAA;AAGrD,OAAO,KAAK,EACV,4BAA4B,EAC5B,kBAAkB,EAClB,cAAc,EACd,iBAAiB,EACjB,iCAAiC,EAClC,MAAM,SAAS,CAAA;AAEhB,iGAAiG;AACjG,wBAAsB,uBAAuB,CAAC,KAAK,EAAE;IACnD,QAAQ,CAAC,UAAU,EAAE,gBAAgB,CAAA;IACrC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAA;IAC5B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;CACzB,GAAG,OAAO,CAAC,IAAI,CAAC,CAchB;AAED,kGAAkG;AAClG,wBAAgB,uCAAuC,CACrD,KAAK,EAAE,iCAAiC,EACxC,MAAM,SAAS,GACd,IAAI,CAyEN;AAED,iFAAiF;AACjF,wBAAgB,qCAAqC,CAAC,KAAK,EAAE;IAC3D,QAAQ,CAAC,MAAM,EAAE,iCAAiC,CAAA;IAClD,QAAQ,CAAC,GAAG,EAAE,cAAc,GAAG,IAAI,CAAA;IACnC,QAAQ,CAAC,MAAM,EAAE,iBAAiB,GAAG,IAAI,CAAA;IACzC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CACzB,GAAG,OAAO,CAAC,KAAK,IAAI,OAAO,KAAK,GAAG;IAClC,QAAQ,CAAC,GAAG,EAAE,cAAc,CAAA;IAC5B,QAAQ,CAAC,MAAM,EAAE,iBAAiB,CAAA;CACnC,CAuCA;AAED,2EAA2E;AAC3E,wBAAgB,mCAAmC,CAAC,KAAK,EAAE;IACzD,QAAQ,CAAC,MAAM,EAAE,iCAAiC,CAAA;IAClD,QAAQ,CAAC,MAAM,EAAE,4BAA4B,GAAG,IAAI,CAAA;IACpD,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;IACxB,QAAQ,CAAC,aAAa,EAAE,kBAAkB,GAAG,IAAI,CAAA;IACjD,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CACzB,GAAG,IAAI,CAmCP;AAED,8FAA8F;AAC9F,wBAAgB,uCAAuC,CAAC,KAAK,EAAE;IAC7D,QAAQ,CAAC,MAAM,EAAE,iCAAiC,CAAA;IAClD,QAAQ,CAAC,QAAQ,EAAE,4BAA4B,CAAA;IAC/C,QAAQ,CAAC,MAAM,EAAE,4BAA4B,GAAG,IAAI,CAAA;IACpD,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;IACxB,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CACzB,GAAG,IAAI,CAcP;AAED,oGAAoG;AACpG,wBAAgB,wCAAwC,CACtD,MAAM,EAAE,4BAA4B,EACpC,KAAK,EAAE,iCAAiC,GACvC,OAAO,CAgBT"}
+{"version":3,"file":"provider.d.ts","sourceRoot":"","sources":["../../../src/storage/agents/provider.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,eAAe,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAA;AAGtE,OAAO,KAAK,EACV,4BAA4B,EAC5B,kBAAkB,EAClB,cAAc,EACd,iBAAiB,EACjB,wBAAwB,EACxB,iCAAiC,EACjC,sBAAsB,EACtB,iBAAiB,EACjB,iBAAiB,EAClB,MAAM,SAAS,CAAA;AAEhB,wFAAwF;AACxF,wBAAgB,8BAA8B,CAC5C,IAAI,EAAE,wBAAwB,EAC9B,MAAM,SAAS,GACd,IAAI,CAwBN;AAMD,iGAAiG;AACjG,wBAAsB,uBAAuB,CAAC,KAAK,EAAE;IACnD,QAAQ,CAAC,UAAU,EAAE,gBAAgB,CAAA;IACrC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAA;IAC5B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;CACvB,GAAG,OAAO,CAAC,eAAe,CAAC,CAe3B;AAED,8EAA8E;AAC9E,wBAAgB,4BAA4B,CAAC,KAAK,EAAE,sBAAsB,EAAE,MAAM,SAAS,GAAG,IAAI,CA4DjG;AAED,0EAA0E;AAC1E,wBAAgB,6BAA6B,CAC3C,GAAG,EAAE,cAAc,EACnB,KAAK,EAAE,sBAAsB,GAC5B,GAAG,IAAI,iBAAiB,CAU1B;AAED,wEAAwE;AACxE,wBAAgB,uBAAuB,CACrC,MAAM,EAAE,iBAAiB,GAAG,SAAS,EACrC,KAAK,EAAE,MAAM,EACb,MAAM,SAAS,GACd,OAAO,CAAC,MAAM,IAAI,iBAAiB,CAiBrC;AAED,kGAAkG;AAClG,wBAAgB,uCAAuC,CACrD,KAAK,EAAE,iCAAiC,EACxC,MAAM,SAAS,GACd,IAAI,CAyEN;AAED,iFAAiF;AACjF,wBAAgB,qCAAqC,CAAC,KAAK,EAAE;IAC3D,QAAQ,CAAC,MAAM,EAAE,iCAAiC,CAAA;IAClD,QAAQ,CAAC,GAAG,EAAE,cAAc,GAAG,IAAI,CAAA;IACnC,QAAQ,CAAC,MAAM,EAAE,iBAAiB,GAAG,IAAI,CAAA;IACzC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CACzB,GAAG,OAAO,CAAC,KAAK,IAAI,OAAO,KAAK,GAAG;IAClC,QAAQ,CAAC,GAAG,EAAE,cAAc,CAAA;IAC5B,QAAQ,CAAC,MAAM,EAAE,iBAAiB,CAAA;CACnC,CAuCA;AAED,2EAA2E;AAC3E,wBAAgB,mCAAmC,CAAC,KAAK,EAAE;IACzD,QAAQ,CAAC,MAAM,EAAE,iCAAiC,CAAA;IAClD,QAAQ,CAAC,MAAM,EAAE,4BAA4B,GAAG,IAAI,CAAA;IACpD,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;IACxB,QAAQ,CAAC,aAAa,EAAE,kBAAkB,GAAG,IAAI,CAAA;IACjD,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CACzB,GAAG,IAAI,CAmCP;AAED,8FAA8F;AAC9F,wBAAgB,uCAAuC,CAAC,KAAK,EAAE;IAC7D,QAAQ,CAAC,MAAM,EAAE,iCAAiC,CAAA;IAClD,QAAQ,CAAC,QAAQ,EAAE,4BAA4B,CAAA;IAC/C,QAAQ,CAAC,MAAM,EAAE,4BAA4B,GAAG,IAAI,CAAA;IACpD,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;IACxB,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CACzB,GAAG,IAAI,CAcP;AAED,oGAAoG;AACpG,wBAAgB,wCAAwC,CACtD,MAAM,EAAE,4BAA4B,EACpC,KAAK,EAAE,iCAAiC,GACvC,OAAO,CAgBT"}

package/dist/storage/agents/provider.js

@@ -5,23 +5,26 @@ import {
   assertAgentContextCheckpointAuthority,
   assertAgentContextCheckpointReplayState,
   assertAgentRunExecution,
-  assertCreateAgentContextCheckpointInput
-} from "../../chunk-1g8negke.js";
-import"../../chunk-hceck7dq.js";
-import"../../chunk-t9xghkva.js";
-import"../../chunk-1e8m6yn3.js";
-import"../../chunk-rhrbz7d4.js";
-import"../../chunk-xwnf87e1.js";
-import"../../chunk-f83ka50g.js";
-import"../../chunk-rnshztfq.js";
-import"../../chunk-04b07a9q.js";
-import"../../chunk-dktq02ne.js";
-import"../../chunk-zqysyfjt.js";
-import"../../chunk-0172wgm9.js";
-import"../../chunk-t8t39h7v.js";
+  assertConversationAgentRunSpec,
+  assertCreateAgentContextCheckpointInput,
+  assertCreateSubagentRunInput,
+  assertSubagentRunResult,
+  subagentRunMatchesCreateInput
+} from "../../chunk-p1rzczbt.js";
+import"../../chunk-j1sbhm7p.js";
+import"../../chunk-p2vqaxkc.js";
+import"../../chunk-trxxmgnf.js";
+import"../../chunk-w3e09qqk.js";
+import"../../chunk-51fjndv0.js";
+import"../../chunk-08m3b6w8.js";
+import"../../chunk-n6jxh8sw.js";
 import"../../chunk-y64skrwp.js";
 export {
+  subagentRunMatchesCreateInput,
+  assertSubagentRunResult,
+  assertCreateSubagentRunInput,
   assertCreateAgentContextCheckpointInput,
+  assertConversationAgentRunSpec,
   assertAgentRunExecution,
   assertAgentContextCheckpointReplayState,
   assertAgentContextCheckpointAuthority,
@@ -29,4 +32,4 @@ export {
   agentContextCheckpointMatchesCreateInput
 };
 
-//# debugId=212A299F97FA40D264756E2164756E21
+//# debugId=5A9C68E31495669B64756E2164756E21

package/dist/storage/agents/provider.js.map

@@ -4,6 +4,6 @@
   "sourcesContent": [
   ],
   "mappings": "",
-  "debugId": "212A299F97FA40D264756E2164756E21",
+  "debugId": "5A9C68E31495669B64756E2164756E21",
   "names": []
 }