@sixb/core 0.1.6 → 0.1.8

package/dist/chunk-359jm1jw.js

@@ -0,0 +1,147 @@
+// @bun
+import {
+  getDatasetMergeChangeValidationError
+} from "./chunk-n4khvw9n.js";
+import {
+  getDatasetRowValidationError
+} from "./chunk-pc7ys28c.js";
+import {
+  isFileRef
+} from "./chunk-08m3b6w8.js";
+import {
+  isPlainRecord
+} from "./chunk-n6jxh8sw.js";
+
+// src/datasets/write.ts
+async function writeDataset(input) {
+  const { lakeStorage, dataset, signal } = input;
+  let abortWrite;
+  let rowsRead = 0;
+  const onRead = () => {
+    rowsRead += 1;
+    input.onRead?.(rowsRead);
+  };
+  throwIfAborted(signal);
+  await lakeStorage.createDataset(dataset);
+  try {
+    throwIfAborted(signal);
+    const reconcileSnapshot = dataset.sequenceBy !== undefined && input.mode === "snapshot";
+    if (input.mode === "merge" || reconcileSnapshot) {
+      const session2 = await lakeStorage.beginMerge({
+        dataset,
+        expectedLatestVersionId: input.expectedLatestVersionId,
+        producer: input.producer
+      });
+      abortWrite = () => session2.abort();
+      throwIfAborted(signal);
+      const values2 = await input.readValues();
+      throwIfAborted(signal);
+      await session2.writeChanges(validatedValues(input, values2, async (value, itemIndex) => reconcileSnapshot ? { kind: "upsert", row: await validateRow(value, input, itemIndex) } : validateMergeChange(value, input, itemIndex), onRead));
+      throwIfAborted(signal);
+      const result = await session2.commit({
+        commitMessage: input.commitMessage,
+        createInitialVersion: reconcileSnapshot,
+        retryOnConflict: dataset.sequenceBy !== undefined,
+        signal
+      });
+      return { ...result, rowsRead };
+    }
+    const values = await input.readValues();
+    throwIfAborted(signal);
+    const session = await lakeStorage.beginWrite({
+      dataset,
+      mode: input.mode,
+      producer: input.producer
+    });
+    abortWrite = () => session.abort();
+    await session.writeRows(validatedValues(input, values, (value, itemIndex) => validateRow(value, input, itemIndex), onRead));
+    throwIfAborted(signal);
+    if (rowsRead === 0 && input.mode === "append") {
+      const version2 = await lakeStorage.getLatestVersion(dataset.id);
+      await session.abort();
+      return { outcome: "unchanged", version: version2, rowsRead };
+    }
+    const { outcome, ...version } = await session.commit({
+      expectedLatestVersionId: input.expectedLatestVersionId,
+      commitMessage: input.commitMessage
+    });
+    return { outcome, version, rowsRead };
+  } catch (error) {
+    await abortWrite?.().catch(() => {});
+    throw error;
+  }
+}
+async function* validatedValues(input, values, validate, onRead) {
+  let itemIndex = 0;
+  for await (const sourceValue of values) {
+    throwIfAborted(input.signal);
+    itemIndex += 1;
+    let value;
+    try {
+      value = await validate(sourceValue.value, itemIndex);
+    } catch (error) {
+      throw input.mapValidationError ? input.mapValidationError(error, sourceValue, itemIndex) : error;
+    }
+    onRead();
+    yield value;
+  }
+}
+function sourceLabel(input) {
+  return input.sourceLabel ?? `[Sixb] Dataset '${input.dataset.id}' writer`;
+}
+async function validateRow(value, input, itemIndex) {
+  if (!isPlainRecord(value)) {
+    throw new Error(`${sourceLabel(input)} returned an invalid row at item ${itemIndex}. Dataset rows must be plain objects.`);
+  }
+  const validationError = getDatasetRowValidationError(value, input.dataset);
+  if (validationError) {
+    throw new Error(`${sourceLabel(input)} returned an invalid row at item ${itemIndex}. ${validationError}`);
+  }
+  await verifyRowFileRefs(value, input, itemIndex);
+  return value;
+}
+async function validateMergeChange(value, input, itemIndex) {
+  const validationError = getDatasetMergeChangeValidationError(value, input.dataset);
+  if (validationError) {
+    throw new Error(`${sourceLabel(input)} returned an invalid merge change at item ${itemIndex}. ${validationError}`);
+  }
+  const change = value;
+  if (change.kind === "upsert")
+    await verifyRowFileRefs(change.row, input, itemIndex);
+  return change;
+}
+async function verifyRowFileRefs(row, input, itemIndex) {
+  for (const column of input.dataset.schema.columns) {
+    if (column.type !== "fileRef")
+      continue;
+    const value = row[column.name];
+    if (isFileRef(value))
+      await verifyFileRef(value, input, column.name, itemIndex);
+  }
+}
+async function verifyFileRef(fileRef, input, columnName, itemIndex) {
+  const blobInfo = await input.blobStorage.stat(fileRef.blobId);
+  const context = `${sourceLabel(input)} returned row ${itemIndex} with dataset '${input.dataset.id}' column '${columnName}'`;
+  if (!blobInfo) {
+    throw new Error(`${context} referencing unknown blob '${fileRef.blobId}'.`);
+  }
+  if (blobInfo.digest !== fileRef.digest) {
+    throw new Error(`${context} referencing blob '${fileRef.blobId}' with digest '${fileRef.digest}', but blob storage has '${blobInfo.digest}'.`);
+  }
+  if (blobInfo.sizeBytes !== fileRef.sizeBytes) {
+    throw new Error(`${context} referencing blob '${fileRef.blobId}' with size ${fileRef.sizeBytes}, but blob storage has ${blobInfo.sizeBytes}.`);
+  }
+}
+function throwIfAborted(signal) {
+  if (!signal.aborted)
+    return;
+  if (signal.reason instanceof Error)
+    throw signal.reason;
+  const error = new Error(typeof signal.reason === "string" && signal.reason.length > 0 ? signal.reason : "[Sixb] Dataset write was cancelled.");
+  error.name = "AbortError";
+  throw error;
+}
+
+export { writeDataset };
+
+//# debugId=BCC492CF3EDC9BEC64756E2164756E21

package/dist/chunk-359jm1jw.js.map

@@ -0,0 +1,10 @@
+{
+  "version": 3,
+  "sources": ["../src/datasets/write.ts"],
+  "sourcesContent": [
+    "import type { BlobStorage, FileRef } from \"../blob-storage\"\nimport { isFileRef } from \"../blob-storage\"\nimport { isPlainRecord } from \"../json\"\nimport type { DatasetMergeCommitResult } from \"../lake-storage/merge\"\nimport { getDatasetMergeChangeValidationError } from \"../lake-storage/merge-validation\"\nimport type {\n  DatasetProducer,\n  DatasetRow,\n  DatasetWriteMode,\n  LakeStorage,\n} from \"../lake-storage/types\"\nimport type { MergeChange } from \"./changes\"\nimport type { DatasetDefinition } from \"./types\"\nimport { getDatasetRowValidationError } from \"./validation\"\n\nexport interface DatasetWriteValue {\n  readonly value: unknown\n}\n\nexport interface WriteDatasetInput<TValue extends DatasetWriteValue = DatasetWriteValue> {\n  readonly lakeStorage: LakeStorage\n  readonly blobStorage: Pick<BlobStorage, \"stat\">\n  readonly dataset: DatasetDefinition\n  readonly mode: DatasetWriteMode | \"merge\"\n  readonly signal: AbortSignal\n  /** Lazy so a merge's latest-version guard is checked before fetching source data. */\n  readValues(): Promise<Iterable<TValue> | AsyncIterable<TValue>>\n  readonly producer?: DatasetProducer\n  readonly expectedLatestVersionId?: string\n  readonly commitMessage?: string\n  /** Diagnostic label for the caller, including its component prefix. */\n  readonly sourceLabel?: string\n  /** Progress includes validated values even if the operation subsequently fails. */\n  onRead?(rowsRead: number): void\n  /** Attach caller-owned source provenance to a validation failure. */\n  mapValidationError?(error: unknown, value: TValue, itemIndex: number): unknown\n}\n\nexport type WriteDatasetResult = DatasetMergeCommitResult & { readonly rowsRead: number }\n\n/**\n * Validate, stage, and commit one dataset write using existing lake sessions.\n *\n * The caller owns fetching/cancelling its source, execution bookkeeping, and publishing the\n * dataset-update notification for a `created` result. This operation returns immediately after\n * the lake commit; it does not wait for downstream pipelines or projections.\n */\nexport async function writeDataset<TValue extends DatasetWriteValue>(\n  input: WriteDatasetInput<TValue>\n): Promise<WriteDatasetResult> {\n  const { lakeStorage, dataset, signal } = input\n  let abortWrite: (() => Promise<void>) | undefined\n  let rowsRead = 0\n  const onRead = () => {\n    rowsRead += 1\n    input.onRead?.(rowsRead)\n  }\n\n  throwIfAborted(signal)\n  await lakeStorage.createDataset(dataset)\n  try {\n    throwIfAborted(signal)\n    const reconcileSnapshot = dataset.sequenceBy !== undefined && input.mode === \"snapshot\"\n    if (input.mode === \"merge\" || reconcileSnapshot) {\n      const session = await lakeStorage.beginMerge({\n        dataset,\n        expectedLatestVersionId: input.expectedLatestVersionId,\n        producer: input.producer,\n      })\n      abortWrite = () => session.abort()\n      throwIfAborted(signal)\n      const values = await input.readValues()\n      throwIfAborted(signal)\n      await session.writeChanges(\n        validatedValues(\n          input,\n          values,\n          async (value, itemIndex) =>\n            reconcileSnapshot\n              ? { kind: \"upsert\" as const, row: await validateRow(value, input, itemIndex) }\n              : validateMergeChange(value, input, itemIndex),\n          onRead\n        )\n      )\n      throwIfAborted(signal)\n      const result = await session.commit({\n        commitMessage: input.commitMessage,\n        createInitialVersion: reconcileSnapshot,\n        retryOnConflict: dataset.sequenceBy !== undefined,\n        signal,\n      })\n      return { ...result, rowsRead }\n    }\n\n    const values = await input.readValues()\n    throwIfAborted(signal)\n    const session = await lakeStorage.beginWrite({\n      dataset,\n      mode: input.mode,\n      producer: input.producer,\n    })\n    abortWrite = () => session.abort()\n    await session.writeRows(\n      validatedValues(\n        input,\n        values,\n        (value, itemIndex) => validateRow(value, input, itemIndex),\n        onRead\n      )\n    )\n    throwIfAborted(signal)\n\n    // Preserve sync semantics: an empty append must not invent an initial dataset version.\n    if (rowsRead === 0 && input.mode === \"append\") {\n      const version = await lakeStorage.getLatestVersion(dataset.id)\n      await session.abort()\n      return { outcome: \"unchanged\", version, rowsRead }\n    }\n\n    const { outcome, ...version } = await session.commit({\n      expectedLatestVersionId: input.expectedLatestVersionId,\n      commitMessage: input.commitMessage,\n    })\n    return { outcome, version, rowsRead }\n  } catch (error) {\n    // Cleanup must not replace the source, validation, cancellation, or commit failure.\n    await abortWrite?.().catch(() => {})\n    throw error\n  }\n}\n\nasync function* validatedValues<TValue extends DatasetWriteValue, TResult>(\n  input: WriteDatasetInput<TValue>,\n  values: Iterable<TValue> | AsyncIterable<TValue>,\n  validate: (value: unknown, itemIndex: number) => Promise<TResult>,\n  onRead: () => void\n): AsyncIterable<TResult> {\n  let itemIndex = 0\n  for await (const sourceValue of values) {\n    throwIfAborted(input.signal)\n    itemIndex += 1\n    let value: TResult\n    try {\n      value = await validate(sourceValue.value, itemIndex)\n    } catch (error) {\n      throw input.mapValidationError\n        ? input.mapValidationError(error, sourceValue, itemIndex)\n        : error\n    }\n    onRead()\n    yield value\n  }\n}\n\nfunction sourceLabel(input: Pick<WriteDatasetInput, \"dataset\" | \"sourceLabel\">): string {\n  return input.sourceLabel ?? `[Sixb] Dataset '${input.dataset.id}' writer`\n}\n\nasync function validateRow(\n  value: unknown,\n  input: WriteDatasetInput,\n  itemIndex: number\n): Promise<DatasetRow> {\n  if (!isPlainRecord(value)) {\n    throw new Error(\n      `${sourceLabel(input)} returned an invalid row at item ${itemIndex}. Dataset rows must be plain objects.`\n    )\n  }\n  const validationError = getDatasetRowValidationError(value, input.dataset)\n  if (validationError) {\n    throw new Error(\n      `${sourceLabel(input)} returned an invalid row at item ${itemIndex}. ${validationError}`\n    )\n  }\n  await verifyRowFileRefs(value, input, itemIndex)\n  return value\n}\n\nasync function validateMergeChange(\n  value: unknown,\n  input: WriteDatasetInput,\n  itemIndex: number\n): Promise<MergeChange<DatasetRow, DatasetRow>> {\n  const validationError = getDatasetMergeChangeValidationError(value, input.dataset)\n  if (validationError) {\n    throw new Error(\n      `${sourceLabel(input)} returned an invalid merge change at item ${itemIndex}. ${validationError}`\n    )\n  }\n  const change = value as MergeChange<DatasetRow, DatasetRow>\n  if (change.kind === \"upsert\") await verifyRowFileRefs(change.row, input, itemIndex)\n  return change\n}\n\nasync function verifyRowFileRefs(\n  row: DatasetRow,\n  input: WriteDatasetInput,\n  itemIndex: number\n): Promise<void> {\n  for (const column of input.dataset.schema.columns) {\n    if (column.type !== \"fileRef\") continue\n    const value = row[column.name]\n    if (isFileRef(value)) await verifyFileRef(value, input, column.name, itemIndex)\n  }\n}\n\nasync function verifyFileRef(\n  fileRef: FileRef,\n  input: WriteDatasetInput,\n  columnName: string,\n  itemIndex: number\n): Promise<void> {\n  const blobInfo = await input.blobStorage.stat(fileRef.blobId)\n  const context = `${sourceLabel(input)} returned row ${itemIndex} with dataset '${input.dataset.id}' column '${columnName}'`\n  if (!blobInfo) {\n    throw new Error(`${context} referencing unknown blob '${fileRef.blobId}'.`)\n  }\n  if (blobInfo.digest !== fileRef.digest) {\n    throw new Error(\n      `${context} referencing blob '${fileRef.blobId}' with digest '${fileRef.digest}', but blob storage has '${blobInfo.digest}'.`\n    )\n  }\n  if (blobInfo.sizeBytes !== fileRef.sizeBytes) {\n    throw new Error(\n      `${context} referencing blob '${fileRef.blobId}' with size ${fileRef.sizeBytes}, but blob storage has ${blobInfo.sizeBytes}.`\n    )\n  }\n}\n\nfunction throwIfAborted(signal: AbortSignal): void {\n  if (!signal.aborted) return\n  if (signal.reason instanceof Error) throw signal.reason\n  const error = new Error(\n    typeof signal.reason === \"string\" && signal.reason.length > 0\n      ? signal.reason\n      : \"[Sixb] Dataset write was cancelled.\"\n  )\n  error.name = \"AbortError\"\n  throw error\n}\n"
+  ],
+  "mappings": ";;;;;;;;;;;;;;;AA+CA,eAAsB,YAA8C,CAClE,OAC6B;AAAA,EAC7B,QAAQ,aAAa,SAAS,WAAW;AAAA,EACzC,IAAI;AAAA,EACJ,IAAI,WAAW;AAAA,EACf,MAAM,SAAS,MAAM;AAAA,IACnB,YAAY;AAAA,IACZ,MAAM,SAAS,QAAQ;AAAA;AAAA,EAGzB,eAAe,MAAM;AAAA,EACrB,MAAM,YAAY,cAAc,OAAO;AAAA,EACvC,IAAI;AAAA,IACF,eAAe,MAAM;AAAA,IACrB,MAAM,oBAAoB,QAAQ,eAAe,aAAa,MAAM,SAAS;AAAA,IAC7E,IAAI,MAAM,SAAS,WAAW,mBAAmB;AAAA,MAC/C,MAAM,WAAU,MAAM,YAAY,WAAW;AAAA,QAC3C;AAAA,QACA,yBAAyB,MAAM;AAAA,QAC/B,UAAU,MAAM;AAAA,MAClB,CAAC;AAAA,MACD,aAAa,MAAM,SAAQ,MAAM;AAAA,MACjC,eAAe,MAAM;AAAA,MACrB,MAAM,UAAS,MAAM,MAAM,WAAW;AAAA,MACtC,eAAe,MAAM;AAAA,MACrB,MAAM,SAAQ,aACZ,gBACE,OACA,SACA,OAAO,OAAO,cACZ,oBACI,EAAE,MAAM,UAAmB,KAAK,MAAM,YAAY,OAAO,OAAO,SAAS,EAAE,IAC3E,oBAAoB,OAAO,OAAO,SAAS,GACjD,MACF,CACF;AAAA,MACA,eAAe,MAAM;AAAA,MACrB,MAAM,SAAS,MAAM,SAAQ,OAAO;AAAA,QAClC,eAAe,MAAM;AAAA,QACrB,sBAAsB;AAAA,QACtB,iBAAiB,QAAQ,eAAe;AAAA,QACxC;AAAA,MACF,CAAC;AAAA,MACD,OAAO,KAAK,QAAQ,SAAS;AAAA,IAC/B;AAAA,IAEA,MAAM,SAAS,MAAM,MAAM,WAAW;AAAA,IACtC,eAAe,MAAM;AAAA,IACrB,MAAM,UAAU,MAAM,YAAY,WAAW;AAAA,MAC3C;AAAA,MACA,MAAM,MAAM;AAAA,MACZ,UAAU,MAAM;AAAA,IAClB,CAAC;AAAA,IACD,aAAa,MAAM,QAAQ,MAAM;AAAA,IACjC,MAAM,QAAQ,UACZ,gBACE,OACA,QACA,CAAC,OAAO,cAAc,YAAY,OAAO,OAAO,SAAS,GACzD,MACF,CACF;AAAA,IACA,eAAe,MAAM;AAAA,IAGrB,IAAI,aAAa,KAAK,MAAM,SAAS,UAAU;AAAA,MAC7C,MAAM,WAAU,MAAM,YAAY,iBAAiB,QAAQ,EAAE;AAAA,MAC7D,MAAM,QAAQ,MAAM;AAAA,MACpB,OAAO,EAAE,SAAS,aAAa,mBAAS,SAAS;AAAA,IACnD;AAAA,IAEA,QAAQ,YAAY,YAAY,MAAM,QAAQ,OAAO;AAAA,MACnD,yBAAyB,MAAM;AAAA,MAC/B,eAAe,MAAM;AAAA,IACvB,CAAC;AAAA,IACD,OAAO,EAAE,SAAS,SAAS,SAAS;AAAA,IACpC,OAAO,OAAO;AAAA,IAEd,MAAM,aAAa,EAAE,MAAM,MAAM,EAAE;AAAA,IACnC,MAAM;AAAA;AAAA;AAIV,gBAAgB,eAA0D,CACxE,OACA,QACA,UACA,QACwB;AAAA,EACxB,IAAI,YAAY;AAAA,EAChB,iBAAiB,eAAe,QAAQ;AAAA,IACtC,eAAe,MAAM,MAAM;AAAA,IAC3B,aAAa;AAAA,IACb,IAAI;AAAA,IACJ,IAAI;AAAA,MACF,QAAQ,MAAM,SAAS,YAAY,OAAO,SAAS;AAAA,MACnD,OAAO,OAAO;AAAA,MACd,MAAM,MAAM,qBACR,MAAM,mBAAmB,OAAO,aAAa,SAAS,IACtD;AAAA;AAAA,IAEN,OAAO;AAAA,IACP,MAAM;AAAA,EACR;AAAA;AAGF,SAAS,WAAW,CAAC,OAAmE;AAAA,EACtF,OAAO,MAAM,eAAe,mBAAmB,MAAM,QAAQ;AAAA;AAG/D,eAAe,WAAW,CACxB,OACA,OACA,WACqB;AAAA,EACrB,IAAI,CAAC,cAAc,KAAK,GAAG;AAAA,IACzB,MAAM,IAAI,MACR,GAAG,YAAY,KAAK,qCAAqC,gDAC3D;AAAA,EACF;AAAA,EACA,MAAM,kBAAkB,6BAA6B,OAAO,MAAM,OAAO;AAAA,EACzE,IAAI,iBAAiB;AAAA,IACnB,MAAM,IAAI,MACR,GAAG,YAAY,KAAK,qCAAqC,cAAc,iBACzE;AAAA,EACF;AAAA,EACA,MAAM,kBAAkB,OAAO,OAAO,SAAS;AAAA,EAC/C,OAAO;AAAA;AAGT,eAAe,mBAAmB,CAChC,OACA,OACA,WAC8C;AAAA,EAC9C,MAAM,kBAAkB,qCAAqC,OAAO,MAAM,OAAO;AAAA,EACjF,IAAI,iBAAiB;AAAA,IACnB,MAAM,IAAI,MACR,GAAG,YAAY,KAAK,8CAA8C,cAAc,iBAClF;AAAA,EACF;AAAA,EACA,MAAM,SAAS;AAAA,EACf,IAAI,OAAO,SAAS;AAAA,IAAU,MAAM,kBAAkB,OAAO,KAAK,OAAO,SAAS;AAAA,EAClF,OAAO;AAAA;AAGT,eAAe,iBAAiB,CAC9B,KACA,OACA,WACe;AAAA,EACf,WAAW,UAAU,MAAM,QAAQ,OAAO,SAAS;AAAA,IACjD,IAAI,OAAO,SAAS;AAAA,MAAW;AAAA,IAC/B,MAAM,QAAQ,IAAI,OAAO;AAAA,IACzB,IAAI,UAAU,KAAK;AAAA,MAAG,MAAM,cAAc,OAAO,OAAO,OAAO,MAAM,SAAS;AAAA,EAChF;AAAA;AAGF,eAAe,aAAa,CAC1B,SACA,OACA,YACA,WACe;AAAA,EACf,MAAM,WAAW,MAAM,MAAM,YAAY,KAAK,QAAQ,MAAM;AAAA,EAC5D,MAAM,UAAU,GAAG,YAAY,KAAK,kBAAkB,2BAA2B,MAAM,QAAQ,eAAe;AAAA,EAC9G,IAAI,CAAC,UAAU;AAAA,IACb,MAAM,IAAI,MAAM,GAAG,qCAAqC,QAAQ,UAAU;AAAA,EAC5E;AAAA,EACA,IAAI,SAAS,WAAW,QAAQ,QAAQ;AAAA,IACtC,MAAM,IAAI,MACR,GAAG,6BAA6B,QAAQ,wBAAwB,QAAQ,kCAAkC,SAAS,UACrH;AAAA,EACF;AAAA,EACA,IAAI,SAAS,cAAc,QAAQ,WAAW;AAAA,IAC5C,MAAM,IAAI,MACR,GAAG,6BAA6B,QAAQ,qBAAqB,QAAQ,mCAAmC,SAAS,YACnH;AAAA,EACF;AAAA;AAGF,SAAS,cAAc,CAAC,QAA2B;AAAA,EACjD,IAAI,CAAC,OAAO;AAAA,IAAS;AAAA,EACrB,IAAI,OAAO,kBAAkB;AAAA,IAAO,MAAM,OAAO;AAAA,EACjD,MAAM,QAAQ,IAAI,MAChB,OAAO,OAAO,WAAW,YAAY,OAAO,OAAO,SAAS,IACxD,OAAO,SACP,qCACN;AAAA,EACA,MAAM,OAAO;AAAA,EACb,MAAM;AAAA;",
+  "debugId": "BCC492CF3EDC9BEC64756E2164756E21",
+  "names": []
+}

package/dist/{chunk-dy311asx.js → chunk-3xep5cjx.js}

@@ -1,10 +1,10 @@
 // @bun
 import {
   isSyncDefinition
-} from "./chunk-znagycq7.js";
+} from "./chunk-gbejpkex.js";
 import {
   isPipelineDefinition
-} from "./chunk-e42bc6m3.js";
+} from "./chunk-gzasd5b6.js";
 import {
   allPredicates,
   anyPredicates,
@@ -15,27 +15,32 @@ import {
   notPredicate
 } from "./chunk-5sz8ta9r.js";
 import {
-  isDatasetDefinition
-} from "./chunk-a31h57d5.js";
-import {
-  isAgentDefinition,
   isWorkflowDefinition
-} from "./chunk-nva1xkjz.js";
+} from "./chunk-xajtptbw.js";
+import {
+  compileShareAccessPlan
+} from "./chunk-v4en4jc2.js";
 import {
   isConnectorDefinition
 } from "./chunk-8m5ejdpn.js";
 import {
-  RuntimeError,
-  isActionDefinition
-} from "./chunk-a44d5zgd.js";
+  isDatasetDefinition
+} from "./chunk-pc7ys28c.js";
+import {
+  RuntimeError
+} from "./chunk-p2vqaxkc.js";
 import {
+  ShareDefinitionError,
+  isActionDefinition,
   isGroupDefinition,
   isMembershipPolicyDefinition,
-  isRoleDefinition
-} from "./chunk-1e8m6yn3.js";
+  isRoleDefinition,
+  isShareDefinition,
+  snapshotShareDefinition
+} from "./chunk-4sm0aznx.js";
 import {
   isProjectionDefinition
-} from "./chunk-f83ka50g.js";
+} from "./chunk-p1x242ad.js";
 
 // src/bootstrap/discovery.ts
 import { readdir } from "fs/promises";
@@ -188,6 +193,30 @@ function defineRule(id) {
   };
   return builder;
 }
+// src/shares/validation.ts
+function validateSharesAtStartup(input) {
+  const byId = new Map;
+  for (const authoredShare of input.shares) {
+    const share = snapshotShareDefinition(authoredShare);
+    if (byId.has(share.id)) {
+      throw invalid(`Duplicate Share id: ${share.id}`);
+    }
+    compileShareAccessPlan({
+      share,
+      target: {
+        objectTypeId: share.target.objectTypeId,
+        primaryId: "__sixb_share_definition_validation__"
+      },
+      ontology: input.ontology,
+      actions: input.actions
+    });
+    byId.set(share.id, share);
+  }
+  return byId;
+}
+function invalid(message) {
+  return new ShareDefinitionError(`[Sixb] ${message}`);
+}
 // src/bootstrap/discovery.ts
 var moduleExtensions = new Set([".ts", ".tsx", ".js", ".jsx", ".mjs", ".cjs"]);
 async function discoverOntologySources(projectRoot) {
@@ -270,7 +299,7 @@ var definitionDiscoveryRegistry = {
     kind: "membershipPolicy",
     isDefinition: isMembershipPolicyDefinition
   },
-  agents: { directory: ["agents"], kind: "agent", isDefinition: isAgentDefinition }
+  shares: { directory: ["shares"], kind: "share", isDefinition: isShareDefinition }
 };
 async function discoverProjectDefinitions(projectRoot) {
   const entries = await Promise.all(Object.entries(definitionDiscoveryRegistry).map(async ([key, family]) => {
@@ -390,7 +419,7 @@ function isValueType(value) {
   return typeof value.id === "string" && typeof value.name === "string" && "schema" in value && !Array.isArray(value.properties) && !Array.isArray(value.objectTypes);
 }
 // src/bootstrap/ontology-type-manifest.ts
-import { mkdir, readdir as readdir2, readFile, writeFile } from "fs/promises";
+import { access, mkdir, readdir as readdir2, readFile, writeFile } from "fs/promises";
 import { dirname, extname, join as join2, relative as relative2, resolve, sep } from "path";
 import { pathToFileURL as pathToFileURL2 } from "url";
 var moduleExtensions2 = new Set([".ts", ".tsx", ".js", ".jsx", ".mjs", ".cjs"]);
@@ -430,12 +459,18 @@ async function generateOntologyTypeManifest(options) {
   const outFile = resolve(projectRoot, options.outFile ?? join2(".sixb", "types", "ontology.d.ts"));
   const discovery = await discoverOntologyTypeManifest(projectRoot);
   if (discovery.moduleCount === 0) {
-    return {
-      ...discovery,
-      path: outFile,
-      written: false,
-      skipped: true
-    };
+    try {
+      await access(outFile);
+    } catch (error) {
+      if (!isNotFoundError2(error))
+        throw error;
+      return {
+        ...discovery,
+        path: outFile,
+        written: false,
+        skipped: true
+      };
+    }
   }
   const content = renderOntologyTypeManifest(discovery.entries);
   await mkdir(dirname(outFile), { recursive: true });
@@ -600,6 +635,6 @@ function isOntologyDocumentInput2(value) {
   }
   return typeof value.id === "string" && typeof value.version === "string" && Array.isArray(value.objectTypes);
 }
-export { RuleValidationError, isRuleDefinition, validateRulesAtStartup, defineRule, discoverOntologySources, discoverProjectDefinitions, discoverOntologyTypeManifest, generateOntologyTypeManifest };
+export { RuleValidationError, isRuleDefinition, validateRulesAtStartup, defineRule, validateSharesAtStartup, discoverOntologySources, discoverProjectDefinitions, discoverOntologyTypeManifest, generateOntologyTypeManifest };
 
-//# debugId=6FD395FF9ADDD64D64756E2164756E21
+//# debugId=AE5FFEDCD6F31C5E64756E2164756E21

package/dist/chunk-3xep5cjx.js.map

@@ -0,0 +1,15 @@
+{
+  "version": 3,
+  "sources": ["../src/bootstrap/discovery.ts", "../src/rules/errors.ts", "../src/rules/validation.ts", "../src/rules/builders.ts", "../src/shares/validation.ts", "../src/bootstrap/ontology-type-manifest.ts"],
+  "sourcesContent": [
+    "/**\n * Filesystem auto-discovery for convention-based module loading.\n *\n * Scans well-known definition directories (`ontology/`, `actions/`, etc.)\n * relative to a project root and returns typed definition arrays ready\n * for the `Sixb` constructor.\n */\n\nimport { readdir } from \"node:fs/promises\"\nimport { join, relative } from \"node:path\"\nimport { pathToFileURL } from \"node:url\"\nimport { isActionDefinition } from \"../actions\"\nimport { isConnectorDefinition } from \"../connectors\"\nimport { isDatasetDefinition } from \"../datasets\"\nimport type { OntologyDocumentInput, OntologySource } from \"../ontology/registry\"\nimport type { ObjectTypeWithPropertyTokens } from \"../ontology/tokens\"\nimport type { ValueType } from \"../ontology/types\"\nimport { isPipelineDefinition } from \"../pipelines\"\nimport { isProjectionDefinition } from \"../projections/builders\"\nimport { isRuleDefinition } from \"../rules\"\nimport { RuntimeError } from \"../runtime/errors\"\nimport { isScheduleDefinition } from \"../schedules\"\nimport { isGroupDefinition, isMembershipPolicyDefinition, isRoleDefinition } from \"../security\"\nimport { isShareDefinition } from \"../shares\"\nimport { isSyncDefinition } from \"../syncs\"\nimport { isWorkflowDefinition } from \"../workflows\"\n\nconst moduleExtensions = new Set([\".ts\", \".tsx\", \".js\", \".jsx\", \".mjs\", \".cjs\"])\n\nexport async function discoverOntologySources(\n  projectRoot: string\n): Promise<readonly OntologySource[]> {\n  const ontologyDir = join(projectRoot, \"ontology\")\n  const modulePaths = await listModuleFiles(ontologyDir)\n  const exportedCandidates = await loadModuleExports({\n    modulePaths,\n    projectRoot,\n    kind: \"ontology\",\n  })\n\n  const ontologyDocuments: OntologyDocumentInput[] = []\n  const objectTypes: ObjectTypeWithPropertyTokens[] = []\n  const valueTypes: ValueType[] = []\n\n  for (const candidate of exportedCandidates) {\n    if (isOntologyDocumentInput(candidate)) {\n      ontologyDocuments.push(candidate)\n      continue\n    }\n\n    if (isObjectTypeWithPropertyTokens(candidate)) {\n      objectTypes.push(candidate)\n      continue\n    }\n\n    if (isValueType(candidate)) {\n      valueTypes.push(candidate)\n    }\n  }\n\n  const discoveredSources: OntologySource[] = [...ontologyDocuments, ...objectTypes]\n  if (valueTypes.length > 0) {\n    discoveredSources.push({\n      id: \"__sixb.discovered.value-types__\",\n      version: \"0.0.0\",\n      objectTypes: [],\n      valueTypes,\n    })\n  }\n\n  return discoveredSources\n}\n\ntype DiscoveryModuleKind =\n  | \"action\"\n  | \"connector\"\n  | \"dataset\"\n  | \"group\"\n  | \"membershipPolicy\"\n  | \"ontology\"\n  | \"pipeline\"\n  | \"projection\"\n  | \"role\"\n  | \"rule\"\n  | \"schedule\"\n  | \"share\"\n  | \"sync\"\n  | \"workflow\"\n\ninterface DefinitionDiscoveryFamily<TDefinition> {\n  readonly directory: readonly string[]\n  readonly kind: Exclude<DiscoveryModuleKind, \"ontology\">\n  readonly isDefinition: (value: unknown) => value is TDefinition\n}\n\nconst definitionDiscoveryRegistry = {\n  actions: { directory: [\"actions\"], kind: \"action\", isDefinition: isActionDefinition },\n  projections: {\n    directory: [\"projections\"],\n    kind: \"projection\",\n    isDefinition: isProjectionDefinition,\n  },\n  schedules: {\n    directory: [\"schedules\"],\n    kind: \"schedule\",\n    isDefinition: isScheduleDefinition,\n  },\n  syncs: { directory: [\"syncs\"], kind: \"sync\", isDefinition: isSyncDefinition },\n  connectors: {\n    directory: [\"connectors\"],\n    kind: \"connector\",\n    isDefinition: isConnectorDefinition,\n  },\n  pipelines: {\n    directory: [\"pipelines\"],\n    kind: \"pipeline\",\n    isDefinition: isPipelineDefinition,\n  },\n  datasets: { directory: [\"datasets\"], kind: \"dataset\", isDefinition: isDatasetDefinition },\n  rules: { directory: [\"rules\"], kind: \"rule\", isDefinition: isRuleDefinition },\n  workflows: {\n    directory: [\"workflows\"],\n    kind: \"workflow\",\n    isDefinition: isWorkflowDefinition,\n  },\n  groups: {\n    directory: [\"security\", \"groups\"],\n    kind: \"group\",\n    isDefinition: isGroupDefinition,\n  },\n  roles: {\n    directory: [\"security\", \"roles\"],\n    kind: \"role\",\n    isDefinition: isRoleDefinition,\n  },\n  membershipPolicies: {\n    directory: [\"security\", \"policies\"],\n    kind: \"membershipPolicy\",\n    isDefinition: isMembershipPolicyDefinition,\n  },\n  shares: { directory: [\"shares\"], kind: \"share\", isDefinition: isShareDefinition },\n} as const satisfies Record<string, DefinitionDiscoveryFamily<unknown>>\n\ntype DefinitionFromFamily<TFamily> =\n  TFamily extends DefinitionDiscoveryFamily<infer TDefinition> ? TDefinition : never\n\nexport type DiscoveredProjectDefinitions = {\n  readonly [TKey in keyof typeof definitionDiscoveryRegistry]: readonly DefinitionFromFamily<\n    (typeof definitionDiscoveryRegistry)[TKey]\n  >[]\n}\n\nexport async function discoverProjectDefinitions(\n  projectRoot: string\n): Promise<DiscoveredProjectDefinitions> {\n  const entries = await Promise.all(\n    Object.entries(definitionDiscoveryRegistry).map(async ([key, family]) => {\n      const definitions = await discoverDefinitionFamily(projectRoot, family)\n      return [key, definitions] as const\n    })\n  )\n\n  // Object.fromEntries erases literal keys. Every entry above comes from the exact registry and its\n  // definitions have passed that entry's type guard, so restoring the mapped result type is safe.\n  return Object.fromEntries(entries) as DiscoveredProjectDefinitions\n}\n\nasync function discoverDefinitionFamily(\n  projectRoot: string,\n  family: DefinitionDiscoveryFamily<unknown>\n): Promise<readonly unknown[]> {\n  const modulePaths = await listModuleFiles(join(projectRoot, ...family.directory))\n  const exportedCandidates = await loadModuleExports({\n    modulePaths,\n    projectRoot,\n    kind: family.kind,\n  })\n\n  return exportedCandidates.filter(family.isDefinition)\n}\n\n// ── Internal helpers ────────────────────────────────────────\n\nasync function loadModuleExports(options: {\n  modulePaths: readonly string[]\n  projectRoot: string\n  kind: DiscoveryModuleKind\n}): Promise<unknown[]> {\n  const exportedCandidates: unknown[] = []\n  const seen = new Set<unknown>()\n\n  for (const modulePath of options.modulePaths) {\n    let moduleNamespace: Record<string, unknown>\n    try {\n      moduleNamespace = (await import(pathToFileURL(modulePath).href)) as Record<string, unknown>\n    } catch (error) {\n      const relPath = relative(options.projectRoot, modulePath)\n      const reason = error instanceof Error ? error.message : String(error)\n      throw new RuntimeError(`Failed to load ${options.kind} module '${relPath}': ${reason}`)\n    }\n\n    for (const exportedValue of Object.values(moduleNamespace)) {\n      collectExportedCandidates(exportedValue, exportedCandidates, seen)\n    }\n  }\n\n  return exportedCandidates\n}\n\nfunction collectExportedCandidates(value: unknown, target: unknown[], seen: Set<unknown>): void {\n  if (Array.isArray(value)) {\n    for (const item of value) {\n      collectExportedCandidates(item, target, seen)\n    }\n    return\n  }\n\n  if (value === undefined) {\n    return\n  }\n\n  if ((typeof value === \"object\" && value !== null) || typeof value === \"function\") {\n    if (seen.has(value)) {\n      return\n    }\n    seen.add(value)\n  }\n\n  target.push(value)\n}\n\nasync function listModuleFiles(dir: string): Promise<string[]> {\n  let entries: import(\"node:fs\").Dirent[]\n  try {\n    entries = (await readdir(dir, { withFileTypes: true })) as import(\"node:fs\").Dirent[]\n  } catch (error) {\n    if (isNotFoundError(error)) {\n      return []\n    }\n    throw error\n  }\n\n  const files: string[] = []\n  const sortedEntries = [...entries].sort((a, b) => a.name.localeCompare(b.name))\n\n  for (const entry of sortedEntries) {\n    const fullPath = join(dir, entry.name)\n    if (entry.isDirectory()) {\n      files.push(...(await listModuleFiles(fullPath)))\n      continue\n    }\n\n    if (!entry.isFile()) {\n      continue\n    }\n\n    if (!hasSupportedModuleExtension(entry.name)) {\n      continue\n    }\n\n    files.push(fullPath)\n  }\n\n  return files\n}\n\nfunction isNotFoundError(error: unknown): boolean {\n  if (!(error instanceof Error)) {\n    return false\n  }\n\n  const code = (error as NodeJS.ErrnoException).code\n  return code === \"ENOENT\" || code === \"ENOTDIR\"\n}\n\nfunction hasSupportedModuleExtension(fileName: string): boolean {\n  const normalized = fileName.toLowerCase()\n  for (const extension of moduleExtensions) {\n    if (normalized.endsWith(extension)) {\n      return true\n    }\n  }\n  return false\n}\n\nfunction isRecord(value: unknown): value is Record<string, unknown> {\n  return typeof value === \"object\" && value !== null && !Array.isArray(value)\n}\n\nfunction isOntologyDocumentInput(value: unknown): value is OntologyDocumentInput {\n  if (!isRecord(value)) {\n    return false\n  }\n\n  return (\n    typeof value.id === \"string\" &&\n    typeof value.version === \"string\" &&\n    Array.isArray(value.objectTypes)\n  )\n}\n\nfunction isObjectTypeWithPropertyTokens(value: unknown): value is ObjectTypeWithPropertyTokens {\n  if (!isRecord(value)) {\n    return false\n  }\n\n  return (\n    typeof value.id === \"string\" &&\n    Array.isArray(value.properties) &&\n    Array.isArray(value.links) &&\n    isRecord(value.p)\n  )\n}\n\nfunction isValueType(value: unknown): value is ValueType {\n  if (!isRecord(value)) {\n    return false\n  }\n\n  return (\n    typeof value.id === \"string\" &&\n    typeof value.name === \"string\" &&\n    \"schema\" in value &&\n    !Array.isArray(value.properties) &&\n    !Array.isArray(value.objectTypes)\n  )\n}\n",
+    "/**\n * Base error for the rules module. `RuleValidationError` covers invalid rule\n * definitions both at builder time and during runtime startup validation.\n */\nexport class RuleError extends Error {\n  readonly name: string = \"RuleError\"\n}\n\nexport class RuleValidationError extends RuleError {\n  override readonly name = \"RuleValidationError\"\n}\n",
+    "import type { OntologyRegistry } from \"../ontology/registry\"\nimport type { ObjectType } from \"../ontology/types\"\nimport { assertPredicateShape } from \"../predicates\"\nimport { RuleValidationError } from \"./errors\"\nimport type { RuleDefinition, RulePredicate } from \"./types\"\n\nfunction isRecord(value: unknown): value is Record<string, unknown> {\n  return typeof value === \"object\" && value !== null && !Array.isArray(value)\n}\n\nfunction assertNonEmptyString(\n  value: unknown,\n  field: string,\n  createError: (message: string) => Error\n): asserts value is string {\n  if (typeof value !== \"string\" || value.trim().length === 0) {\n    throw createError(`${field} must not be empty.`)\n  }\n}\n\n/**\n * Validate only the portable AST shape.\n *\n * This is used by discovery/type guards and by the builder after `.where(...)`.\n * Ontology-aware checks live in `validateRulesAtStartup`, once the full\n * registry has inherited properties and links resolved.\n */\nexport function assertRulePredicateShape(\n  value: unknown,\n  createError: (message: string) => Error = (message) => new RuleValidationError(message)\n): asserts value is RulePredicate {\n  assertPredicateShape(value, { subject: \"Rule\", createError })\n}\n\n/** Validate the serializable rule envelope without consulting ontology state. */\nexport function assertRuleDefinition(\n  value: unknown,\n  createError: (message: string) => Error = (message) => new RuleValidationError(message)\n): asserts value is RuleDefinition {\n  if (!isRecord(value)) {\n    throw createError(\"Rule definition must be an object.\")\n  }\n\n  if (value.kind !== \"rule\") {\n    throw createError(\"Rule definition kind must be 'rule'.\")\n  }\n\n  assertNonEmptyString(value.id, \"Rule id\", createError)\n\n  if (!isRecord(value.subject) || value.subject.kind !== \"object\") {\n    throw createError(`Rule '${value.id}' subject must be an object subject.`)\n  }\n\n  assertNonEmptyString(\n    value.subject.objectTypeId,\n    `Rule '${value.id}' subject objectTypeId`,\n    createError\n  )\n  assertRulePredicateShape(value.predicate, createError)\n}\n\nexport function isRuleDefinition(value: unknown): value is RuleDefinition {\n  try {\n    assertRuleDefinition(value, (message) => new Error(message))\n    return true\n  } catch {\n    return false\n  }\n}\n\n/**\n * Validate rules after the ontology registry is built.\n *\n * Startup is where we can reject references that cannot be known from the\n * serialized rule alone: duplicate ids, unknown subject types, unknown\n * properties/links, and empty logical groups.\n */\nexport function validateRulesAtStartup(\n  rules: readonly RuleDefinition[],\n  ontology: OntologyRegistry\n): void {\n  const seenRuleIds = new Set<string>()\n\n  for (const rule of rules) {\n    assertRuleDefinition(rule)\n\n    if (seenRuleIds.has(rule.id)) {\n      throw new RuleValidationError(`Duplicate rule id: ${rule.id}`)\n    }\n    seenRuleIds.add(rule.id)\n\n    const objectType = ontology.getObjectTypeById(rule.subject.objectTypeId)\n    if (!objectType) {\n      throw new RuleValidationError(\n        `Rule \"${rule.id}\": unknown object type \"${rule.subject.objectTypeId}\".`\n      )\n    }\n\n    validatePredicateAgainstSubject(rule, objectType, rule.predicate)\n  }\n}\n\n/** Walk every predicate node and check subject-scoped references. */\nfunction validatePredicateAgainstSubject(\n  rule: RuleDefinition,\n  objectType: ObjectType,\n  predicate: RulePredicate\n): void {\n  if (predicate.kind === \"all\" || predicate.kind === \"any\") {\n    if (predicate.predicates.length === 0) {\n      throw new RuleValidationError(\n        `Rule \"${rule.id}\": ${predicate.kind} predicate must contain at least one predicate.`\n      )\n    }\n\n    for (const child of predicate.predicates) {\n      validatePredicateAgainstSubject(rule, objectType, child)\n    }\n    return\n  }\n\n  if (predicate.kind === \"not\") {\n    validatePredicateAgainstSubject(rule, objectType, predicate.predicate)\n    return\n  }\n\n  if (predicate.kind === \"property\") {\n    const propertyIds = new Set(objectType.properties.map((property) => property.id))\n    if (!propertyIds.has(predicate.propertyId)) {\n      throw new RuleValidationError(\n        `Rule \"${rule.id}\": unknown property \"${predicate.propertyId}\" on object type \"${objectType.id}\".`\n      )\n    }\n    return\n  }\n\n  if (predicate.kind === \"field\") {\n    throw new RuleValidationError(\n      `Rule \"${rule.id}\": field predicates are not supported in rule conditions.`\n    )\n  }\n\n  const linkIds = new Set(objectType.links.map((link) => link.id))\n  if (!linkIds.has(predicate.linkId)) {\n    throw new RuleValidationError(\n      `Rule \"${rule.id}\": unknown link \"${predicate.linkId}\" on object type \"${objectType.id}\".`\n    )\n  }\n}\n",
+    "import {\n  allPredicates,\n  anyPredicates,\n  createLinkPredicateBuilder as createSharedLinkPredicateBuilder,\n  createPropertyPredicateBuilder as createSharedPropertyPredicateBuilder,\n  notPredicate,\n  type RuntimePropertyPredicateBuilder,\n} from \"../predicates\"\nimport { RuleValidationError } from \"./errors\"\nimport type {\n  RuleBuilder,\n  RuleDefinition,\n  RuleLinkPredicateBuilder,\n  RuleObjectType,\n  RulePredicate,\n  RulePropertyPredicate,\n} from \"./types\"\nimport { assertRulePredicateShape } from \"./validation\"\n\n/**\n * Runtime builders stay deliberately concrete.\n *\n * The public overload below provides typed property/link keys to callers, while\n * this internal shape keeps the implementation simple and avoids asking\n * TypeScript to instantiate the full ontology mapped type while checking this\n * file.\n */\ntype RuntimeRulePropertyPredicateBuilder = RuntimePropertyPredicateBuilder<RulePropertyPredicate>\n\ntype RuntimeRuleSubjectBuilder = {\n  p: Record<string, RuntimeRulePropertyPredicateBuilder>\n  l: Record<string, RuleLinkPredicateBuilder>\n  all(...predicates: RulePredicate[]): RulePredicate\n  any(...predicates: RulePredicate[]): RulePredicate\n  not(predicate: RulePredicate): RulePredicate\n}\n\nfunction assertNonEmpty(value: string, field: string): void {\n  if (!value.trim()) {\n    throw new RuleValidationError(`Rule ${field} must not be empty.`)\n  }\n}\n\n/** Build the `tx.p.<propertyId>` API for one ontology property. */\nfunction createPropertyPredicateBuilder(propertyId: string): RuntimeRulePropertyPredicateBuilder {\n  return createSharedPropertyPredicateBuilder(propertyId, {\n    subject: \"Rule\",\n    createError: (message) => new RuleValidationError(message),\n  })\n}\n\n/** Build the `tx.l.<linkId>` API for one ontology link. */\nfunction createLinkPredicateBuilder(linkId: string): RuleLinkPredicateBuilder {\n  return createSharedLinkPredicateBuilder(linkId)\n}\n\n/**\n * Build the callback subject from ontology metadata.\n *\n * This object is only used while `.where(...)` executes. The returned\n * RuleDefinition stores the predicate data produced by these methods, not this\n * builder object or the user callback.\n */\nfunction createRuleSubjectBuilder<TObjectType extends RuleObjectType>(\n  objectType: TObjectType\n): RuntimeRuleSubjectBuilder {\n  const properties = Object.fromEntries(\n    objectType.properties.map((property) => [\n      property.id,\n      createPropertyPredicateBuilder(property.id),\n    ])\n  )\n\n  const links = Object.fromEntries(\n    objectType.links.map((link) => [link.id, createLinkPredicateBuilder(link.id)])\n  )\n\n  return {\n    p: properties,\n    l: links,\n    all(...predicates: RulePredicate[]): RulePredicate {\n      return allPredicates(predicates)\n    },\n    any(...predicates: RulePredicate[]): RulePredicate {\n      return anyPredicates(predicates)\n    },\n    not(predicate: RulePredicate): RulePredicate {\n      return notPredicate(predicate)\n    },\n  }\n}\n\n/**\n * Define an inert business rule.\n *\n * The overload preserves literal ids and typed property/link keys for users.\n * The implementation returns a concrete builder and casts at the boundary so\n * runtime code stays small while callers still get the typed DSL.\n */\nexport function defineRule<const TId extends string>(id: TId): RuleBuilder<TId>\nexport function defineRule(id: string): RuleBuilder<string> {\n  assertNonEmpty(id, \"id\")\n\n  const builder = {\n    on(objectType: RuleObjectType) {\n      return {\n        where(callback: (subject: RuntimeRuleSubjectBuilder) => RulePredicate): RuleDefinition {\n          const predicate = callback(createRuleSubjectBuilder(objectType))\n          assertRulePredicateShape(predicate)\n\n          return {\n            kind: \"rule\",\n            id,\n            subject: {\n              kind: \"object\",\n              objectTypeId: objectType.id,\n            },\n            predicate,\n          }\n        },\n      }\n    },\n  }\n\n  return builder as unknown as RuleBuilder<string>\n}\n",
+    "import type { ActionDefinitionCatalog } from \"../actions\"\nimport type { OntologyDefinitionCatalog } from \"../ontology\"\nimport { snapshotShareDefinition } from \"./builders\"\nimport { compileShareAccessPlan } from \"./compiler\"\nimport { ShareDefinitionError } from \"./errors\"\nimport type { ShareDefinition } from \"./types\"\n\n/** Cross-validate discovered Share definitions after ontology and Actions are registered. */\nexport function validateSharesAtStartup(input: {\n  readonly shares: readonly ShareDefinition[]\n  readonly ontology: OntologyDefinitionCatalog\n  readonly actions: ActionDefinitionCatalog\n}): ReadonlyMap<string, ShareDefinition> {\n  const byId = new Map<string, ShareDefinition>()\n  for (const authoredShare of input.shares) {\n    const share = snapshotShareDefinition(authoredShare)\n    if (byId.has(share.id)) {\n      throw invalid(`Duplicate Share id: ${share.id}`)\n    }\n    compileShareAccessPlan({\n      share,\n      target: {\n        objectTypeId: share.target.objectTypeId,\n        primaryId: \"__sixb_share_definition_validation__\",\n      },\n      ontology: input.ontology,\n      actions: input.actions,\n    })\n    byId.set(share.id, share)\n  }\n  return byId\n}\n\nexport function assertShareDefinitionEnvelope(value: unknown): asserts value is ShareDefinition {\n  snapshotShareDefinition(value)\n}\n\nfunction invalid(message: string): ShareDefinitionError {\n  return new ShareDefinitionError(`[Sixb] ${message}`)\n}\n",
+    "import { access, mkdir, readdir, readFile, writeFile } from \"node:fs/promises\"\nimport { dirname, extname, join, relative, resolve, sep } from \"node:path\"\nimport { pathToFileURL } from \"node:url\"\nimport type { OntologyDocumentInput } from \"../ontology/registry\"\nimport type { ObjectTypeWithPropertyTokens } from \"../ontology/tokens\"\nimport { RuntimeError } from \"../runtime/errors\"\n\nconst moduleExtensions = new Set([\".ts\", \".tsx\", \".js\", \".jsx\", \".mjs\", \".cjs\"])\n\nexport interface OntologyTypeManifestEntry {\n  readonly objectTypeId: string\n  readonly modulePath: string\n  readonly exportName: string\n  readonly typeExpression: string\n}\n\nexport interface OntologyTypeManifestDiscovery {\n  readonly entries: readonly OntologyTypeManifestEntry[]\n  readonly moduleCount: number\n}\n\nexport interface GenerateOntologyTypeManifestOptions {\n  readonly projectRoot: string\n  readonly outFile?: string\n}\n\nexport interface GenerateOntologyTypeManifestResult extends OntologyTypeManifestDiscovery {\n  readonly path: string\n  readonly written: boolean\n  readonly skipped: boolean\n}\n\nexport async function discoverOntologyTypeManifest(\n  projectRoot: string\n): Promise<OntologyTypeManifestDiscovery> {\n  const resolvedProjectRoot = resolve(projectRoot)\n  const ontologyDir = join(resolvedProjectRoot, \"ontology\")\n  const modulePaths = await listModuleFiles(ontologyDir)\n  const entries = new Map<string, OntologyTypeManifestEntry>()\n  const seenObjectTypes = new Set<unknown>()\n\n  for (const modulePath of modulePaths) {\n    const moduleSpecifier = toGeneratedModuleSpecifier({\n      fromDir: join(resolvedProjectRoot, \".sixb\", \"types\"),\n      modulePath,\n    })\n    const moduleNamespace = await loadOntologyModule({\n      modulePath,\n      projectRoot: resolvedProjectRoot,\n    })\n\n    for (const [exportName, exportedValue] of Object.entries(moduleNamespace)) {\n      collectManifestEntries({\n        exportedValue,\n        exportName,\n        modulePath,\n        moduleSpecifier,\n        entries,\n        seenObjectTypes,\n      })\n    }\n  }\n\n  return {\n    entries: [...entries.values()].sort((a, b) => a.objectTypeId.localeCompare(b.objectTypeId)),\n    moduleCount: modulePaths.length,\n  }\n}\n\nexport async function generateOntologyTypeManifest(\n  options: GenerateOntologyTypeManifestOptions\n): Promise<GenerateOntologyTypeManifestResult> {\n  const projectRoot = resolve(options.projectRoot)\n  const outFile = resolve(projectRoot, options.outFile ?? join(\".sixb\", \"types\", \"ontology.d.ts\"))\n  const discovery = await discoverOntologyTypeManifest(projectRoot)\n\n  if (discovery.moduleCount === 0) {\n    // Leave projects without ontology untouched, but clear a previously generated map.\n    try {\n      await access(outFile)\n    } catch (error) {\n      if (!isNotFoundError(error)) throw error\n      return {\n        ...discovery,\n        path: outFile,\n        written: false,\n        skipped: true,\n      }\n    }\n  }\n\n  const content = renderOntologyTypeManifest(discovery.entries)\n  await mkdir(dirname(outFile), { recursive: true })\n  const written = await writeFileIfChanged(outFile, content)\n\n  return {\n    ...discovery,\n    path: outFile,\n    written,\n    skipped: false,\n  }\n}\n\nfunction collectManifestEntries(input: {\n  readonly exportedValue: unknown\n  readonly exportName: string\n  readonly modulePath: string\n  readonly moduleSpecifier: string\n  readonly entries: Map<string, OntologyTypeManifestEntry>\n  readonly seenObjectTypes: Set<unknown>\n}): void {\n  if (isObjectTypeWithPropertyTokens(input.exportedValue)) {\n    addManifestEntry({\n      objectType: input.exportedValue,\n      modulePath: input.modulePath,\n      exportName: input.exportName,\n      typeExpression: `typeof import(${JSON.stringify(input.moduleSpecifier)})[${JSON.stringify(\n        input.exportName\n      )}]`,\n      entries: input.entries,\n      seenObjectTypes: input.seenObjectTypes,\n    })\n    return\n  }\n\n  if (isOntologyDocumentInput(input.exportedValue)) {\n    for (const objectType of input.exportedValue.objectTypes) {\n      addManifestEntry({\n        objectType,\n        modulePath: input.modulePath,\n        exportName: input.exportName,\n        typeExpression: `Extract<(typeof import(${JSON.stringify(\n          input.moduleSpecifier\n        )})[${JSON.stringify(input.exportName)}])[\"objectTypes\"][number], { id: ${JSON.stringify(\n          objectType.id\n        )} }>`,\n        entries: input.entries,\n        seenObjectTypes: input.seenObjectTypes,\n      })\n    }\n    return\n  }\n\n  if (Array.isArray(input.exportedValue)) {\n    for (const item of input.exportedValue) {\n      if (!isObjectTypeWithPropertyTokens(item)) continue\n      addManifestEntry({\n        objectType: item,\n        modulePath: input.modulePath,\n        exportName: input.exportName,\n        typeExpression: `Extract<(typeof import(${JSON.stringify(\n          input.moduleSpecifier\n        )})[${JSON.stringify(input.exportName)}])[number], { id: ${JSON.stringify(item.id)} }>`,\n        entries: input.entries,\n        seenObjectTypes: input.seenObjectTypes,\n      })\n    }\n  }\n}\n\nfunction addManifestEntry(input: {\n  readonly objectType: ObjectTypeWithPropertyTokens\n  readonly modulePath: string\n  readonly exportName: string\n  readonly typeExpression: string\n  readonly entries: Map<string, OntologyTypeManifestEntry>\n  readonly seenObjectTypes: Set<unknown>\n}): void {\n  if (input.seenObjectTypes.has(input.objectType)) {\n    return\n  }\n  input.seenObjectTypes.add(input.objectType)\n\n  const existing = input.entries.get(input.objectType.id)\n  const entry: OntologyTypeManifestEntry = {\n    objectTypeId: input.objectType.id,\n    modulePath: input.modulePath,\n    exportName: input.exportName,\n    typeExpression: input.typeExpression,\n  }\n\n  if (!existing) {\n    input.entries.set(input.objectType.id, entry)\n    return\n  }\n\n  throw new RuntimeError(\n    `[Sixb] Duplicate ontology object type id \"${input.objectType.id}\" while generating `.concat(\n      `the type manifest: ${relative(process.cwd(), existing.modulePath)} and `,\n      `${relative(process.cwd(), input.modulePath)}.`\n    )\n  )\n}\n\nfunction renderOntologyTypeManifest(entries: readonly OntologyTypeManifestEntry[]): string {\n  const lines = [\n    \"// This file is auto-generated by Sixb.\",\n    \"// Do not edit this file directly.\",\n    \"\",\n    'declare module \"@sixb/core/ontology\" {',\n    \"  interface SixbObjectTypeMap {\",\n  ]\n\n  for (const entry of entries) {\n    lines.push(`    ${JSON.stringify(entry.objectTypeId)}: ${entry.typeExpression}`)\n  }\n\n  lines.push(\"  }\", \"}\", \"\", \"export {}\", \"\")\n  return lines.join(\"\\n\")\n}\n\nasync function writeFileIfChanged(path: string, content: string): Promise<boolean> {\n  try {\n    const existing = await readFile(path, \"utf-8\")\n    if (existing === content) return false\n  } catch (error) {\n    if (!isNotFoundError(error)) throw error\n  }\n\n  await writeFile(path, content, \"utf-8\")\n  return true\n}\n\nasync function loadOntologyModule(input: {\n  readonly modulePath: string\n  readonly projectRoot: string\n}): Promise<Record<string, unknown>> {\n  try {\n    return (await import(pathToFileURL(input.modulePath).href)) as Record<string, unknown>\n  } catch (error) {\n    const relPath = relative(input.projectRoot, input.modulePath)\n    const reason = error instanceof Error ? error.message : String(error)\n    throw new RuntimeError(`Failed to load ontology module '${relPath}': ${reason}`)\n  }\n}\n\nasync function listModuleFiles(dir: string): Promise<string[]> {\n  let entries: import(\"node:fs\").Dirent[]\n  try {\n    entries = (await readdir(dir, { withFileTypes: true })) as import(\"node:fs\").Dirent[]\n  } catch (error) {\n    if (isNotFoundError(error)) {\n      return []\n    }\n    throw error\n  }\n\n  const files: string[] = []\n  const sortedEntries = [...entries].sort((a, b) => a.name.localeCompare(b.name))\n\n  for (const entry of sortedEntries) {\n    const fullPath = join(dir, entry.name)\n    if (entry.isDirectory()) {\n      files.push(...(await listModuleFiles(fullPath)))\n      continue\n    }\n\n    if (!entry.isFile() || !hasSupportedModuleExtension(entry.name)) {\n      continue\n    }\n\n    files.push(fullPath)\n  }\n\n  return files\n}\n\nfunction toGeneratedModuleSpecifier(input: {\n  readonly fromDir: string\n  readonly modulePath: string\n}): string {\n  const withoutExtension = stripSupportedModuleExtension(input.modulePath)\n  const relativePath = relative(input.fromDir, withoutExtension).split(sep).join(\"/\")\n  return relativePath.startsWith(\".\") ? relativePath : `./${relativePath}`\n}\n\nfunction stripSupportedModuleExtension(path: string): string {\n  const extension = extname(path)\n  return moduleExtensions.has(extension) ? path.slice(0, -extension.length) : path\n}\n\nfunction hasSupportedModuleExtension(fileName: string): boolean {\n  return moduleExtensions.has(extname(fileName).toLowerCase())\n}\n\nfunction isNotFoundError(error: unknown): boolean {\n  if (!(error instanceof Error)) {\n    return false\n  }\n\n  const code = (error as NodeJS.ErrnoException).code\n  return code === \"ENOENT\" || code === \"ENOTDIR\"\n}\n\nfunction isRecord(value: unknown): value is Record<string, unknown> {\n  return typeof value === \"object\" && value !== null && !Array.isArray(value)\n}\n\nfunction isObjectTypeWithPropertyTokens(value: unknown): value is ObjectTypeWithPropertyTokens {\n  if (!isRecord(value)) {\n    return false\n  }\n\n  return (\n    typeof value.id === \"string\" &&\n    Array.isArray(value.properties) &&\n    Array.isArray(value.links) &&\n    isRecord(value.p)\n  )\n}\n\nfunction isOntologyDocumentInput(value: unknown): value is OntologyDocumentInput {\n  if (!isRecord(value)) {\n    return false\n  }\n\n  return (\n    typeof value.id === \"string\" &&\n    typeof value.version === \"string\" &&\n    Array.isArray(value.objectTypes)\n  )\n}\n"
+  ],
+  "mappings": ";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAQA;AACA;AACA;;;ACNO,MAAM,kBAAkB,MAAM;AAAA,EAC1B,OAAe;AAC1B;AAAA;AAEO,MAAM,4BAA4B,UAAU;AAAA,EAC/B,OAAO;AAC3B;;;ACJA,SAAS,QAAQ,CAAC,OAAkD;AAAA,EAClE,OAAO,OAAO,UAAU,YAAY,UAAU,QAAQ,CAAC,MAAM,QAAQ,KAAK;AAAA;AAG5E,SAAS,oBAAoB,CAC3B,OACA,OACA,aACyB;AAAA,EACzB,IAAI,OAAO,UAAU,YAAY,MAAM,KAAK,EAAE,WAAW,GAAG;AAAA,IAC1D,MAAM,YAAY,GAAG,0BAA0B;AAAA,EACjD;AAAA;AAUK,SAAS,wBAAwB,CACtC,OACA,cAA0C,CAAC,YAAY,IAAI,oBAAoB,OAAO,GACtD;AAAA,EAChC,qBAAqB,OAAO,EAAE,SAAS,QAAQ,YAAY,CAAC;AAAA;AAIvD,SAAS,oBAAoB,CAClC,OACA,cAA0C,CAAC,YAAY,IAAI,oBAAoB,OAAO,GACrD;AAAA,EACjC,IAAI,CAAC,SAAS,KAAK,GAAG;AAAA,IACpB,MAAM,YAAY,oCAAoC;AAAA,EACxD;AAAA,EAEA,IAAI,MAAM,SAAS,QAAQ;AAAA,IACzB,MAAM,YAAY,sCAAsC;AAAA,EAC1D;AAAA,EAEA,qBAAqB,MAAM,IAAI,WAAW,WAAW;AAAA,EAErD,IAAI,CAAC,SAAS,MAAM,OAAO,KAAK,MAAM,QAAQ,SAAS,UAAU;AAAA,IAC/D,MAAM,YAAY,SAAS,MAAM,wCAAwC;AAAA,EAC3E;AAAA,EAEA,qBACE,MAAM,QAAQ,cACd,SAAS,MAAM,4BACf,WACF;AAAA,EACA,yBAAyB,MAAM,WAAW,WAAW;AAAA;AAGhD,SAAS,gBAAgB,CAAC,OAAyC;AAAA,EACxE,IAAI;AAAA,IACF,qBAAqB,OAAO,CAAC,YAAY,IAAI,MAAM,OAAO,CAAC;AAAA,IAC3D,OAAO;AAAA,IACP,MAAM;AAAA,IACN,OAAO;AAAA;AAAA;AAWJ,SAAS,sBAAsB,CACpC,OACA,UACM;AAAA,EACN,MAAM,cAAc,IAAI;AAAA,EAExB,WAAW,QAAQ,OAAO;AAAA,IACxB,qBAAqB,IAAI;AAAA,IAEzB,IAAI,YAAY,IAAI,KAAK,EAAE,GAAG;AAAA,MAC5B,MAAM,IAAI,oBAAoB,sBAAsB,KAAK,IAAI;AAAA,IAC/D;AAAA,IACA,YAAY,IAAI,KAAK,EAAE;AAAA,IAEvB,MAAM,aAAa,SAAS,kBAAkB,KAAK,QAAQ,YAAY;AAAA,IACvE,IAAI,CAAC,YAAY;AAAA,MACf,MAAM,IAAI,oBACR,SAAS,KAAK,6BAA6B,KAAK,QAAQ,gBAC1D;AAAA,IACF;AAAA,IAEA,gCAAgC,MAAM,YAAY,KAAK,SAAS;AAAA,EAClE;AAAA;AAIF,SAAS,+BAA+B,CACtC,MACA,YACA,WACM;AAAA,EACN,IAAI,UAAU,SAAS,SAAS,UAAU,SAAS,OAAO;AAAA,IACxD,IAAI,UAAU,WAAW,WAAW,GAAG;AAAA,MACrC,MAAM,IAAI,oBACR,SAAS,KAAK,QAAQ,UAAU,qDAClC;AAAA,IACF;AAAA,IAEA,WAAW,SAAS,UAAU,YAAY;AAAA,MACxC,gCAAgC,MAAM,YAAY,KAAK;AAAA,IACzD;AAAA,IACA;AAAA,EACF;AAAA,EAEA,IAAI,UAAU,SAAS,OAAO;AAAA,IAC5B,gCAAgC,MAAM,YAAY,UAAU,SAAS;AAAA,IACrE;AAAA,EACF;AAAA,EAEA,IAAI,UAAU,SAAS,YAAY;AAAA,IACjC,MAAM,cAAc,IAAI,IAAI,WAAW,WAAW,IAAI,CAAC,aAAa,SAAS,EAAE,CAAC;AAAA,IAChF,IAAI,CAAC,YAAY,IAAI,UAAU,UAAU,GAAG;AAAA,MAC1C,MAAM,IAAI,oBACR,SAAS,KAAK,0BAA0B,UAAU,+BAA+B,WAAW,MAC9F;AAAA,IACF;AAAA,IACA;AAAA,EACF;AAAA,EAEA,IAAI,UAAU,SAAS,SAAS;AAAA,IAC9B,MAAM,IAAI,oBACR,SAAS,KAAK,6DAChB;AAAA,EACF;AAAA,EAEA,MAAM,UAAU,IAAI,IAAI,WAAW,MAAM,IAAI,CAAC,SAAS,KAAK,EAAE,CAAC;AAAA,EAC/D,IAAI,CAAC,QAAQ,IAAI,UAAU,MAAM,GAAG;AAAA,IAClC,MAAM,IAAI,oBACR,SAAS,KAAK,sBAAsB,UAAU,2BAA2B,WAAW,MACtF;AAAA,EACF;AAAA;;;AC9GF,SAAS,cAAc,CAAC,OAAe,OAAqB;AAAA,EAC1D,IAAI,CAAC,MAAM,KAAK,GAAG;AAAA,IACjB,MAAM,IAAI,oBAAoB,QAAQ,0BAA0B;AAAA,EAClE;AAAA;AAIF,SAAS,+BAA8B,CAAC,YAAyD;AAAA,EAC/F,OAAO,+BAAqC,YAAY;AAAA,IACtD,SAAS;AAAA,IACT,aAAa,CAAC,YAAY,IAAI,oBAAoB,OAAO;AAAA,EAC3D,CAAC;AAAA;AAIH,SAAS,2BAA0B,CAAC,QAA0C;AAAA,EAC5E,OAAO,2BAAiC,MAAM;AAAA;AAUhD,SAAS,wBAA4D,CACnE,YAC2B;AAAA,EAC3B,MAAM,aAAa,OAAO,YACxB,WAAW,WAAW,IAAI,CAAC,aAAa;AAAA,IACtC,SAAS;AAAA,IACT,gCAA+B,SAAS,EAAE;AAAA,EAC5C,CAAC,CACH;AAAA,EAEA,MAAM,QAAQ,OAAO,YACnB,WAAW,MAAM,IAAI,CAAC,SAAS,CAAC,KAAK,IAAI,4BAA2B,KAAK,EAAE,CAAC,CAAC,CAC/E;AAAA,EAEA,OAAO;AAAA,IACL,GAAG;AAAA,IACH,GAAG;AAAA,IACH,GAAG,IAAI,YAA4C;AAAA,MACjD,OAAO,cAAc,UAAU;AAAA;AAAA,IAEjC,GAAG,IAAI,YAA4C;AAAA,MACjD,OAAO,cAAc,UAAU;AAAA;AAAA,IAEjC,GAAG,CAAC,WAAyC;AAAA,MAC3C,OAAO,aAAa,SAAS;AAAA;AAAA,EAEjC;AAAA;AAWK,SAAS,UAAU,CAAC,IAAiC;AAAA,EAC1D,eAAe,IAAI,IAAI;AAAA,EAEvB,MAAM,UAAU;AAAA,IACd,EAAE,CAAC,YAA4B;AAAA,MAC7B,OAAO;AAAA,QACL,KAAK,CAAC,UAAiF;AAAA,UACrF,MAAM,YAAY,SAAS,yBAAyB,UAAU,CAAC;AAAA,UAC/D,yBAAyB,SAAS;AAAA,UAElC,OAAO;AAAA,YACL,MAAM;AAAA,YACN;AAAA,YACA,SAAS;AAAA,cACP,MAAM;AAAA,cACN,cAAc,WAAW;AAAA,YAC3B;AAAA,YACA;AAAA,UACF;AAAA;AAAA,MAEJ;AAAA;AAAA,EAEJ;AAAA,EAEA,OAAO;AAAA;;ACpHF,SAAS,uBAAuB,CAAC,OAIC;AAAA,EACvC,MAAM,OAAO,IAAI;AAAA,EACjB,WAAW,iBAAiB,MAAM,QAAQ;AAAA,IACxC,MAAM,QAAQ,wBAAwB,aAAa;AAAA,IACnD,IAAI,KAAK,IAAI,MAAM,EAAE,GAAG;AAAA,MACtB,MAAM,QAAQ,uBAAuB,MAAM,IAAI;AAAA,IACjD;AAAA,IACA,uBAAuB;AAAA,MACrB;AAAA,MACA,QAAQ;AAAA,QACN,cAAc,MAAM,OAAO;AAAA,QAC3B,WAAW;AAAA,MACb;AAAA,MACA,UAAU,MAAM;AAAA,MAChB,SAAS,MAAM;AAAA,IACjB,CAAC;AAAA,IACD,KAAK,IAAI,MAAM,IAAI,KAAK;AAAA,EAC1B;AAAA,EACA,OAAO;AAAA;AAOT,SAAS,OAAO,CAAC,SAAuC;AAAA,EACtD,OAAO,IAAI,qBAAqB,UAAU,SAAS;AAAA;;AJXrD,IAAM,mBAAmB,IAAI,IAAI,CAAC,OAAO,QAAQ,OAAO,QAAQ,QAAQ,MAAM,CAAC;AAE/E,eAAsB,uBAAuB,CAC3C,aACoC;AAAA,EACpC,MAAM,cAAc,KAAK,aAAa,UAAU;AAAA,EAChD,MAAM,cAAc,MAAM,gBAAgB,WAAW;AAAA,EACrD,MAAM,qBAAqB,MAAM,kBAAkB;AAAA,IACjD;AAAA,IACA;AAAA,IACA,MAAM;AAAA,EACR,CAAC;AAAA,EAED,MAAM,oBAA6C,CAAC;AAAA,EACpD,MAAM,cAA8C,CAAC;AAAA,EACrD,MAAM,aAA0B,CAAC;AAAA,EAEjC,WAAW,aAAa,oBAAoB;AAAA,IAC1C,IAAI,wBAAwB,SAAS,GAAG;AAAA,MACtC,kBAAkB,KAAK,SAAS;AAAA,MAChC;AAAA,IACF;AAAA,IAEA,IAAI,+BAA+B,SAAS,GAAG;AAAA,MAC7C,YAAY,KAAK,SAAS;AAAA,MAC1B;AAAA,IACF;AAAA,IAEA,IAAI,YAAY,SAAS,GAAG;AAAA,MAC1B,WAAW,KAAK,SAAS;AAAA,IAC3B;AAAA,EACF;AAAA,EAEA,MAAM,oBAAsC,CAAC,GAAG,mBAAmB,GAAG,WAAW;AAAA,EACjF,IAAI,WAAW,SAAS,GAAG;AAAA,IACzB,kBAAkB,KAAK;AAAA,MACrB,IAAI;AAAA,MACJ,SAAS;AAAA,MACT,aAAa,CAAC;AAAA,MACd;AAAA,IACF,CAAC;AAAA,EACH;AAAA,EAEA,OAAO;AAAA;AAyBT,IAAM,8BAA8B;AAAA,EAClC,SAAS,EAAE,WAAW,CAAC,SAAS,GAAG,MAAM,UAAU,cAAc,mBAAmB;AAAA,EACpF,aAAa;AAAA,IACX,WAAW,CAAC,aAAa;AAAA,IACzB,MAAM;AAAA,IACN,cAAc;AAAA,EAChB;AAAA,EACA,WAAW;AAAA,IACT,WAAW,CAAC,WAAW;AAAA,IACvB,MAAM;AAAA,IACN,cAAc;AAAA,EAChB;AAAA,EACA,OAAO,EAAE,WAAW,CAAC,OAAO,GAAG,MAAM,QAAQ,cAAc,iBAAiB;AAAA,EAC5E,YAAY;AAAA,IACV,WAAW,CAAC,YAAY;AAAA,IACxB,MAAM;AAAA,IACN,cAAc;AAAA,EAChB;AAAA,EACA,WAAW;AAAA,IACT,WAAW,CAAC,WAAW;AAAA,IACvB,MAAM;AAAA,IACN,cAAc;AAAA,EAChB;AAAA,EACA,UAAU,EAAE,WAAW,CAAC,UAAU,GAAG,MAAM,WAAW,cAAc,oBAAoB;AAAA,EACxF,OAAO,EAAE,WAAW,CAAC,OAAO,GAAG,MAAM,QAAQ,cAAc,iBAAiB;AAAA,EAC5E,WAAW;AAAA,IACT,WAAW,CAAC,WAAW;AAAA,IACvB,MAAM;AAAA,IACN,cAAc;AAAA,EAChB;AAAA,EACA,QAAQ;AAAA,IACN,WAAW,CAAC,YAAY,QAAQ;AAAA,IAChC,MAAM;AAAA,IACN,cAAc;AAAA,EAChB;AAAA,EACA,OAAO;AAAA,IACL,WAAW,CAAC,YAAY,OAAO;AAAA,IAC/B,MAAM;AAAA,IACN,cAAc;AAAA,EAChB;AAAA,EACA,oBAAoB;AAAA,IAClB,WAAW,CAAC,YAAY,UAAU;AAAA,IAClC,MAAM;AAAA,IACN,cAAc;AAAA,EAChB;AAAA,EACA,QAAQ,EAAE,WAAW,CAAC,QAAQ,GAAG,MAAM,SAAS,cAAc,kBAAkB;AAClF;AAWA,eAAsB,0BAA0B,CAC9C,aACuC;AAAA,EACvC,MAAM,UAAU,MAAM,QAAQ,IAC5B,OAAO,QAAQ,2BAA2B,EAAE,IAAI,QAAQ,KAAK,YAAY;AAAA,IACvE,MAAM,cAAc,MAAM,yBAAyB,aAAa,MAAM;AAAA,IACtE,OAAO,CAAC,KAAK,WAAW;AAAA,GACzB,CACH;AAAA,EAIA,OAAO,OAAO,YAAY,OAAO;AAAA;AAGnC,eAAe,wBAAwB,CACrC,aACA,QAC6B;AAAA,EAC7B,MAAM,cAAc,MAAM,gBAAgB,KAAK,aAAa,GAAG,OAAO,SAAS,CAAC;AAAA,EAChF,MAAM,qBAAqB,MAAM,kBAAkB;AAAA,IACjD;AAAA,IACA;AAAA,IACA,MAAM,OAAO;AAAA,EACf,CAAC;AAAA,EAED,OAAO,mBAAmB,OAAO,OAAO,YAAY;AAAA;AAKtD,eAAe,iBAAiB,CAAC,SAIV;AAAA,EACrB,MAAM,qBAAgC,CAAC;AAAA,EACvC,MAAM,OAAO,IAAI;AAAA,EAEjB,WAAW,cAAc,QAAQ,aAAa;AAAA,IAC5C,IAAI;AAAA,IACJ,IAAI;AAAA,MACF,kBAAmB,MAAa,qBAAc,UAAU,EAAE;AAAA,MAC1D,OAAO,OAAO;AAAA,MACd,MAAM,UAAU,SAAS,QAAQ,aAAa,UAAU;AAAA,MACxD,MAAM,SAAS,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;AAAA,MACpE,MAAM,IAAI,aAAa,kBAAkB,QAAQ,gBAAgB,aAAa,QAAQ;AAAA;AAAA,IAGxF,WAAW,iBAAiB,OAAO,OAAO,eAAe,GAAG;AAAA,MAC1D,0BAA0B,eAAe,oBAAoB,IAAI;AAAA,IACnE;AAAA,EACF;AAAA,EAEA,OAAO;AAAA;AAGT,SAAS,yBAAyB,CAAC,OAAgB,QAAmB,MAA0B;AAAA,EAC9F,IAAI,MAAM,QAAQ,KAAK,GAAG;AAAA,IACxB,WAAW,QAAQ,OAAO;AAAA,MACxB,0BAA0B,MAAM,QAAQ,IAAI;AAAA,IAC9C;AAAA,IACA;AAAA,EACF;AAAA,EAEA,IAAI,UAAU,WAAW;AAAA,IACvB;AAAA,EACF;AAAA,EAEA,IAAK,OAAO,UAAU,YAAY,UAAU,QAAS,OAAO,UAAU,YAAY;AAAA,IAChF,IAAI,KAAK,IAAI,KAAK,GAAG;AAAA,MACnB;AAAA,IACF;AAAA,IACA,KAAK,IAAI,KAAK;AAAA,EAChB;AAAA,EAEA,OAAO,KAAK,KAAK;AAAA;AAGnB,eAAe,eAAe,CAAC,KAAgC;AAAA,EAC7D,IAAI;AAAA,EACJ,IAAI;AAAA,IACF,UAAW,MAAM,QAAQ,KAAK,EAAE,eAAe,KAAK,CAAC;AAAA,IACrD,OAAO,OAAO;AAAA,IACd,IAAI,gBAAgB,KAAK,GAAG;AAAA,MAC1B,OAAO,CAAC;AAAA,IACV;AAAA,IACA,MAAM;AAAA;AAAA,EAGR,MAAM,QAAkB,CAAC;AAAA,EACzB,MAAM,gBAAgB,CAAC,GAAG,OAAO,EAAE,KAAK,CAAC,GAAG,MAAM,EAAE,KAAK,cAAc,EAAE,IAAI,CAAC;AAAA,EAE9E,WAAW,SAAS,eAAe;AAAA,IACjC,MAAM,WAAW,KAAK,KAAK,MAAM,IAAI;AAAA,IACrC,IAAI,MAAM,YAAY,GAAG;AAAA,MACvB,MAAM,KAAK,GAAI,MAAM,gBAAgB,QAAQ,CAAE;AAAA,MAC/C;AAAA,IACF;AAAA,IAEA,IAAI,CAAC,MAAM,OAAO,GAAG;AAAA,MACnB;AAAA,IACF;AAAA,IAEA,IAAI,CAAC,4BAA4B,MAAM,IAAI,GAAG;AAAA,MAC5C;AAAA,IACF;AAAA,IAEA,MAAM,KAAK,QAAQ;AAAA,EACrB;AAAA,EAEA,OAAO;AAAA;AAGT,SAAS,eAAe,CAAC,OAAyB;AAAA,EAChD,IAAI,EAAE,iBAAiB,QAAQ;AAAA,IAC7B,OAAO;AAAA,EACT;AAAA,EAEA,MAAM,OAAQ,MAAgC;AAAA,EAC9C,OAAO,SAAS,YAAY,SAAS;AAAA;AAGvC,SAAS,2BAA2B,CAAC,UAA2B;AAAA,EAC9D,MAAM,aAAa,SAAS,YAAY;AAAA,EACxC,WAAW,aAAa,kBAAkB;AAAA,IACxC,IAAI,WAAW,SAAS,SAAS,GAAG;AAAA,MAClC,OAAO;AAAA,IACT;AAAA,EACF;AAAA,EACA,OAAO;AAAA;AAGT,SAAS,SAAQ,CAAC,OAAkD;AAAA,EAClE,OAAO,OAAO,UAAU,YAAY,UAAU,QAAQ,CAAC,MAAM,QAAQ,KAAK;AAAA;AAG5E,SAAS,uBAAuB,CAAC,OAAgD;AAAA,EAC/E,IAAI,CAAC,UAAS,KAAK,GAAG;AAAA,IACpB,OAAO;AAAA,EACT;AAAA,EAEA,OACE,OAAO,MAAM,OAAO,YACpB,OAAO,MAAM,YAAY,YACzB,MAAM,QAAQ,MAAM,WAAW;AAAA;AAInC,SAAS,8BAA8B,CAAC,OAAuD;AAAA,EAC7F,IAAI,CAAC,UAAS,KAAK,GAAG;AAAA,IACpB,OAAO;AAAA,EACT;AAAA,EAEA,OACE,OAAO,MAAM,OAAO,YACpB,MAAM,QAAQ,MAAM,UAAU,KAC9B,MAAM,QAAQ,MAAM,KAAK,KACzB,UAAS,MAAM,CAAC;AAAA;AAIpB,SAAS,WAAW,CAAC,OAAoC;AAAA,EACvD,IAAI,CAAC,UAAS,KAAK,GAAG;AAAA,IACpB,OAAO;AAAA,EACT;AAAA,EAEA,OACE,OAAO,MAAM,OAAO,YACpB,OAAO,MAAM,SAAS,YACtB,YAAY,SACZ,CAAC,MAAM,QAAQ,MAAM,UAAU,KAC/B,CAAC,MAAM,QAAQ,MAAM,WAAW;AAAA;;AKpUpC,mCAAwB;AACxB,mCAA2B,mBAAM;AACjC,0BAAS;AAKT,IAAM,oBAAmB,IAAI,IAAI,CAAC,OAAO,QAAQ,OAAO,QAAQ,QAAQ,MAAM,CAAC;AAyB/E,eAAsB,4BAA4B,CAChD,aACwC;AAAA,EACxC,MAAM,sBAAsB,QAAQ,WAAW;AAAA,EAC/C,MAAM,cAAc,MAAK,qBAAqB,UAAU;AAAA,EACxD,MAAM,cAAc,MAAM,iBAAgB,WAAW;AAAA,EACrD,MAAM,UAAU,IAAI;AAAA,EACpB,MAAM,kBAAkB,IAAI;AAAA,EAE5B,WAAW,cAAc,aAAa;AAAA,IACpC,MAAM,kBAAkB,2BAA2B;AAAA,MACjD,SAAS,MAAK,qBAAqB,SAAS,OAAO;AAAA,MACnD;AAAA,IACF,CAAC;AAAA,IACD,MAAM,kBAAkB,MAAM,mBAAmB;AAAA,MAC/C;AAAA,MACA,aAAa;AAAA,IACf,CAAC;AAAA,IAED,YAAY,YAAY,kBAAkB,OAAO,QAAQ,eAAe,GAAG;AAAA,MACzE,uBAAuB;AAAA,QACrB;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,MACF,CAAC;AAAA,IACH;AAAA,EACF;AAAA,EAEA,OAAO;AAAA,IACL,SAAS,CAAC,GAAG,QAAQ,OAAO,CAAC,EAAE,KAAK,CAAC,GAAG,MAAM,EAAE,aAAa,cAAc,EAAE,YAAY,CAAC;AAAA,IAC1F,aAAa,YAAY;AAAA,EAC3B;AAAA;AAGF,eAAsB,4BAA4B,CAChD,SAC6C;AAAA,EAC7C,MAAM,cAAc,QAAQ,QAAQ,WAAW;AAAA,EAC/C,MAAM,UAAU,QAAQ,aAAa,QAAQ,WAAW,MAAK,SAAS,SAAS,eAAe,CAAC;AAAA,EAC/F,MAAM,YAAY,MAAM,6BAA6B,WAAW;AAAA,EAEhE,IAAI,UAAU,gBAAgB,GAAG;AAAA,IAE/B,IAAI;AAAA,MACF,MAAM,OAAO,OAAO;AAAA,MACpB,OAAO,OAAO;AAAA,MACd,IAAI,CAAC,iBAAgB,KAAK;AAAA,QAAG,MAAM;AAAA,MACnC,OAAO;AAAA,WACF;AAAA,QACH,MAAM;AAAA,QACN,SAAS;AAAA,QACT,SAAS;AAAA,MACX;AAAA;AAAA,EAEJ;AAAA,EAEA,MAAM,UAAU,2BAA2B,UAAU,OAAO;AAAA,EAC5D,MAAM,MAAM,QAAQ,OAAO,GAAG,EAAE,WAAW,KAAK,CAAC;AAAA,EACjD,MAAM,UAAU,MAAM,mBAAmB,SAAS,OAAO;AAAA,EAEzD,OAAO;AAAA,OACF;AAAA,IACH,MAAM;AAAA,IACN;AAAA,IACA,SAAS;AAAA,EACX;AAAA;AAGF,SAAS,sBAAsB,CAAC,OAOvB;AAAA,EACP,IAAI,gCAA+B,MAAM,aAAa,GAAG;AAAA,IACvD,iBAAiB;AAAA,MACf,YAAY,MAAM;AAAA,MAClB,YAAY,MAAM;AAAA,MAClB,YAAY,MAAM;AAAA,MAClB,gBAAgB,iBAAiB,KAAK,UAAU,MAAM,eAAe,MAAM,KAAK,UAC9E,MAAM,UACR;AAAA,MACA,SAAS,MAAM;AAAA,MACf,iBAAiB,MAAM;AAAA,IACzB,CAAC;AAAA,IACD;AAAA,EACF;AAAA,EAEA,IAAI,yBAAwB,MAAM,aAAa,GAAG;AAAA,IAChD,WAAW,cAAc,MAAM,cAAc,aAAa;AAAA,MACxD,iBAAiB;AAAA,QACf;AAAA,QACA,YAAY,MAAM;AAAA,QAClB,YAAY,MAAM;AAAA,QAClB,gBAAgB,0BAA0B,KAAK,UAC7C,MAAM,eACR,MAAM,KAAK,UAAU,MAAM,UAAU,qCAAqC,KAAK,UAC7E,WAAW,EACb;AAAA,QACA,SAAS,MAAM;AAAA,QACf,iBAAiB,MAAM;AAAA,MACzB,CAAC;AAAA,IACH;AAAA,IACA;AAAA,EACF;AAAA,EAEA,IAAI,MAAM,QAAQ,MAAM,aAAa,GAAG;AAAA,IACtC,WAAW,QAAQ,MAAM,eAAe;AAAA,MACtC,IAAI,CAAC,gCAA+B,IAAI;AAAA,QAAG;AAAA,MAC3C,iBAAiB;AAAA,QACf,YAAY;AAAA,QACZ,YAAY,MAAM;AAAA,QAClB,YAAY,MAAM;AAAA,QAClB,gBAAgB,0BAA0B,KAAK,UAC7C,MAAM,eACR,MAAM,KAAK,UAAU,MAAM,UAAU,sBAAsB,KAAK,UAAU,KAAK,EAAE;AAAA,QACjF,SAAS,MAAM;AAAA,QACf,iBAAiB,MAAM;AAAA,MACzB,CAAC;AAAA,IACH;AAAA,EACF;AAAA;AAGF,SAAS,gBAAgB,CAAC,OAOjB;AAAA,EACP,IAAI,MAAM,gBAAgB,IAAI,MAAM,UAAU,GAAG;AAAA,IAC/C;AAAA,EACF;AAAA,EACA,MAAM,gBAAgB,IAAI,MAAM,UAAU;AAAA,EAE1C,MAAM,WAAW,MAAM,QAAQ,IAAI,MAAM,WAAW,EAAE;AAAA,EACtD,MAAM,QAAmC;AAAA,IACvC,cAAc,MAAM,WAAW;AAAA,IAC/B,YAAY,MAAM;AAAA,IAClB,YAAY,MAAM;AAAA,IAClB,gBAAgB,MAAM;AAAA,EACxB;AAAA,EAEA,IAAI,CAAC,UAAU;AAAA,IACb,MAAM,QAAQ,IAAI,MAAM,WAAW,IAAI,KAAK;AAAA,IAC5C;AAAA,EACF;AAAA,EAEA,MAAM,IAAI,aACR,6CAA6C,MAAM,WAAW,wBAAwB,OACpF,sBAAsB,UAAS,QAAQ,IAAI,GAAG,SAAS,UAAU,UACjE,GAAG,UAAS,QAAQ,IAAI,GAAG,MAAM,UAAU,IAC7C,CACF;AAAA;AAGF,SAAS,0BAA0B,CAAC,SAAuD;AAAA,EACzF,MAAM,QAAQ;AAAA,IACZ;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF;AAAA,EAEA,WAAW,SAAS,SAAS;AAAA,IAC3B,MAAM,KAAK,OAAO,KAAK,UAAU,MAAM,YAAY,MAAM,MAAM,gBAAgB;AAAA,EACjF;AAAA,EAEA,MAAM,KAAK,OAAO,KAAK,IAAI,aAAa,EAAE;AAAA,EAC1C,OAAO,MAAM,KAAK;AAAA,CAAI;AAAA;AAGxB,eAAe,kBAAkB,CAAC,MAAc,SAAmC;AAAA,EACjF,IAAI;AAAA,IACF,MAAM,WAAW,MAAM,SAAS,MAAM,OAAO;AAAA,IAC7C,IAAI,aAAa;AAAA,MAAS,OAAO;AAAA,IACjC,OAAO,OAAO;AAAA,IACd,IAAI,CAAC,iBAAgB,KAAK;AAAA,MAAG,MAAM;AAAA;AAAA,EAGrC,MAAM,UAAU,MAAM,SAAS,OAAO;AAAA,EACtC,OAAO;AAAA;AAGT,eAAe,kBAAkB,CAAC,OAGG;AAAA,EACnC,IAAI;AAAA,IACF,OAAQ,MAAa,sBAAc,MAAM,UAAU,EAAE;AAAA,IACrD,OAAO,OAAO;AAAA,IACd,MAAM,UAAU,UAAS,MAAM,aAAa,MAAM,UAAU;AAAA,IAC5D,MAAM,SAAS,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;AAAA,IACpE,MAAM,IAAI,aAAa,mCAAmC,aAAa,QAAQ;AAAA;AAAA;AAInF,eAAe,gBAAe,CAAC,KAAgC;AAAA,EAC7D,IAAI;AAAA,EACJ,IAAI;AAAA,IACF,UAAW,MAAM,SAAQ,KAAK,EAAE,eAAe,KAAK,CAAC;AAAA,IACrD,OAAO,OAAO;AAAA,IACd,IAAI,iBAAgB,KAAK,GAAG;AAAA,MAC1B,OAAO,CAAC;AAAA,IACV;AAAA,IACA,MAAM;AAAA;AAAA,EAGR,MAAM,QAAkB,CAAC;AAAA,EACzB,MAAM,gBAAgB,CAAC,GAAG,OAAO,EAAE,KAAK,CAAC,GAAG,MAAM,EAAE,KAAK,cAAc,EAAE,IAAI,CAAC;AAAA,EAE9E,WAAW,SAAS,eAAe;AAAA,IACjC,MAAM,WAAW,MAAK,KAAK,MAAM,IAAI;AAAA,IACrC,IAAI,MAAM,YAAY,GAAG;AAAA,MACvB,MAAM,KAAK,GAAI,MAAM,iBAAgB,QAAQ,CAAE;AAAA,MAC/C;AAAA,IACF;AAAA,IAEA,IAAI,CAAC,MAAM,OAAO,KAAK,CAAC,6BAA4B,MAAM,IAAI,GAAG;AAAA,MAC/D;AAAA,IACF;AAAA,IAEA,MAAM,KAAK,QAAQ;AAAA,EACrB;AAAA,EAEA,OAAO;AAAA;AAGT,SAAS,0BAA0B,CAAC,OAGzB;AAAA,EACT,MAAM,mBAAmB,8BAA8B,MAAM,UAAU;AAAA,EACvE,MAAM,eAAe,UAAS,MAAM,SAAS,gBAAgB,EAAE,MAAM,GAAG,EAAE,KAAK,GAAG;AAAA,EAClF,OAAO,aAAa,WAAW,GAAG,IAAI,eAAe,KAAK;AAAA;AAG5D,SAAS,6BAA6B,CAAC,MAAsB;AAAA,EAC3D,MAAM,YAAY,QAAQ,IAAI;AAAA,EAC9B,OAAO,kBAAiB,IAAI,SAAS,IAAI,KAAK,MAAM,GAAG,CAAC,UAAU,MAAM,IAAI;AAAA;AAG9E,SAAS,4BAA2B,CAAC,UAA2B;AAAA,EAC9D,OAAO,kBAAiB,IAAI,QAAQ,QAAQ,EAAE,YAAY,CAAC;AAAA;AAG7D,SAAS,gBAAe,CAAC,OAAyB;AAAA,EAChD,IAAI,EAAE,iBAAiB,QAAQ;AAAA,IAC7B,OAAO;AAAA,EACT;AAAA,EAEA,MAAM,OAAQ,MAAgC;AAAA,EAC9C,OAAO,SAAS,YAAY,SAAS;AAAA;AAGvC,SAAS,SAAQ,CAAC,OAAkD;AAAA,EAClE,OAAO,OAAO,UAAU,YAAY,UAAU,QAAQ,CAAC,MAAM,QAAQ,KAAK;AAAA;AAG5E,SAAS,+BAA8B,CAAC,OAAuD;AAAA,EAC7F,IAAI,CAAC,UAAS,KAAK,GAAG;AAAA,IACpB,OAAO;AAAA,EACT;AAAA,EAEA,OACE,OAAO,MAAM,OAAO,YACpB,MAAM,QAAQ,MAAM,UAAU,KAC9B,MAAM,QAAQ,MAAM,KAAK,KACzB,UAAS,MAAM,CAAC;AAAA;AAIpB,SAAS,wBAAuB,CAAC,OAAgD;AAAA,EAC/E,IAAI,CAAC,UAAS,KAAK,GAAG;AAAA,IACpB,OAAO;AAAA,EACT;AAAA,EAEA,OACE,OAAO,MAAM,OAAO,YACpB,OAAO,MAAM,YAAY,YACzB,MAAM,QAAQ,MAAM,WAAW;AAAA;",
+  "debugId": "AE5FFEDCD6F31C5E64756E2164756E21",
+  "names": []
+}

package/dist/{chunk-n4spznws.js → chunk-3z1qec12.js}

@@ -2,23 +2,36 @@
 import {
   isScheduleDefinition
 } from "./chunk-5sz8ta9r.js";
+import {
+  isAgentToolDefinition
+} from "./chunk-4qfkag59.js";
 import {
   WorkflowDefinitionError,
   assertNonEmpty,
-  isAgentDefinition,
   isAgentStepDefinition,
   isInterventionDefinition,
   isStepDefinition
-} from "./chunk-nva1xkjz.js";
+} from "./chunk-xajtptbw.js";
+import {
+  AGENT_REASONING_LEVELS
+} from "./chunk-p1rzczbt.js";
+import {
+  isModelReasoning
+} from "./chunk-trxxmgnf.js";
 import {
-  isActionDefinition
-} from "./chunk-a44d5zgd.js";
+  isActionDefinition,
+  isGroupDefinition
+} from "./chunk-4sm0aznx.js";
 import {
   createSixbError,
   isSixbError,
   summarizeErrorMessage
-} from "./chunk-0172wgm9.js";
+} from "./chunk-2xns679x.js";
 
+// src/workflows/agent-step-identity.ts
+function workflowAgentStepActorId(workflowId, stepId) {
+  return `workflow:${encodeURIComponent(workflowId)}:step:${encodeURIComponent(stepId)}`;
+}
 // src/workflows/builders.ts
 function interventionField(schema, options) {
   return {
@@ -49,11 +62,20 @@ function defineWorkflowStep(id) {
     }
   };
 }
-function defineAgentStep(id, agent) {
+function defineAgentStep(id, config) {
   assertNonEmpty(id, "Agent step", "id");
-  if (!isAgentDefinition(agent)) {
-    throw new WorkflowDefinitionError(`Agent step "${id}" references an invalid agent.`);
+  if (!isRecord(config)) {
+    throw new WorkflowDefinitionError(`Agent step "${id}" config must be an object.`);
+  }
+  if (typeof config.instructions !== "string" || !config.instructions.trim()) {
+    throw new WorkflowDefinitionError(`Agent step "${id}" instructions must not be empty.`);
+  }
+  if (config.reasoning !== undefined && !isModelReasoning(config.reasoning)) {
+    throw new WorkflowDefinitionError(`Agent step "${id}" reasoning must be one of: ${AGENT_REASONING_LEVELS.join(", ")}, or a nonnegative budgetTokens object.`);
   }
+  const { model, reasoning, instructions } = config;
+  const groupIds = groupIdsFromAgentStepConfig(id, config);
+  const toolNames = toolNamesFromAgentStepConfig(id, config);
   return {
     input(input) {
       return {
@@ -63,7 +85,18 @@ function defineAgentStep(id, agent) {
               if (typeof prompt !== "function") {
                 throw new WorkflowDefinitionError(`Agent step "${id}" prompt must be a function.`);
               }
-              return { kind: "agentStep", id, agent, input, output, prompt };
+              return {
+                kind: "agentStep",
+                id,
+                ...model === undefined ? {} : { model },
+                ...reasoning === undefined ? {} : { reasoning },
+                instructions,
+                groupIds,
+                toolNames,
+                input,
+                output,
+                prompt
+              };
             }
           };
         }
@@ -71,6 +104,41 @@ function defineAgentStep(id, agent) {
     }
   };
 }
+function groupIdsFromAgentStepConfig(stepId, config) {
+  if (config.groups !== undefined && !Array.isArray(config.groups)) {
+    throw new WorkflowDefinitionError(`Agent step "${stepId}" groups must be an array of group definitions.`);
+  }
+  const groupIds = Array.from(config.groups ?? [], (group) => {
+    if (!isGroupDefinition(group)) {
+      throw new WorkflowDefinitionError(`Agent step "${stepId}" groups must contain only group definitions.`);
+    }
+    return group.id;
+  });
+  assertUniqueAgentStepValues(stepId, "group", groupIds);
+  return Object.freeze(groupIds);
+}
+function toolNamesFromAgentStepConfig(stepId, config) {
+  if (config.tools !== undefined && !Array.isArray(config.tools)) {
+    throw new WorkflowDefinitionError(`Agent step "${stepId}" tools must be an array of agent tool definitions.`);
+  }
+  const toolNames = Array.from(config.tools ?? [], (tool) => {
+    if (!isAgentToolDefinition(tool)) {
+      throw new WorkflowDefinitionError(`Agent step "${stepId}" tools must contain only agent tool definitions.`);
+    }
+    return tool.name;
+  });
+  assertUniqueAgentStepValues(stepId, "tool", toolNames);
+  return Object.freeze(toolNames);
+}
+function assertUniqueAgentStepValues(stepId, kind, values) {
+  const seen = new Set;
+  for (const value of values) {
+    if (seen.has(value)) {
+      throw new WorkflowDefinitionError(`Agent step "${stepId}" ${kind}s contains duplicate ${kind} '${value}'.`);
+    }
+    seen.add(value);
+  }
+}
 function defineIntervention(id, options) {
   assertNonEmpty(id, "Intervention", "id");
   return {
@@ -280,6 +348,9 @@ function isRuntimeWorkflowMapper(value) {
 function isRuntimeWorkflowScheduleMapper(value) {
   return typeof value === "function";
 }
+function isRecord(value) {
+  return typeof value === "object" && value !== null && !Array.isArray(value);
+}
 // src/workflows/failure.ts
 function createWorkflowNodeFailure(error, identity) {
   return createSixbError("workflow.node_failed", summarizeErrorMessage(error, "Workflow node execution failed."), {
@@ -307,11 +378,11 @@ function workflowNodeFailureDetails(identity) {
         ...identity.child.actionRunId ? { actionRunId: identity.child.actionRunId } : {}
       };
     case "agent":
-      return { ...base, agentId: identity.child.agentId };
+      return { ...base, agentStepId: identity.child.agentStepId };
     case "intervention":
       return { ...base, interventionId: identity.child.interventionId };
   }
 }
-export { interventionField, defineWorkflowStep, defineAgentStep, defineIntervention, defineWorkflow, createWorkflowNodeFailure, unwrapWorkflowNodeFailure };
+export { workflowAgentStepActorId, interventionField, defineWorkflowStep, defineAgentStep, defineIntervention, defineWorkflow, createWorkflowNodeFailure, unwrapWorkflowNodeFailure };
 
-//# debugId=5C2B621CC3B063C864756E2164756E21
+//# debugId=B964ED1D659A215064756E2164756E21