@sixb/core 0.1.7 → 0.1.8

package/dist/{chunk-qv38twt8.js → chunk-mwsxn98e.js}

@@ -4,7 +4,7 @@ import {
 } from "./chunk-9t8f5xfx.js";
 import {
   registerProjectionRegistry
-} from "./chunk-64sr682n.js";
+} from "./chunk-ajnan18g.js";
 import {
   LoggingService
 } from "./chunk-s5y30bc9.js";
@@ -15,23 +15,21 @@ import {
 import {
   discoverOntologySources,
   discoverProjectDefinitions,
-  validateRulesAtStartup
-} from "./chunk-2b5qtban.js";
+  validateRulesAtStartup,
+  validateSharesAtStartup
+} from "./chunk-3xep5cjx.js";
 import {
   validateSchedulesAtStartup
 } from "./chunk-5sz8ta9r.js";
-import {
-  assertDatasetDefinition
-} from "./chunk-tn7xcs2n.js";
 import {
   toolsFromProjectConfig
-} from "./chunk-n2arzn6e.js";
+} from "./chunk-4qfkag59.js";
 import {
   assertNoAgentDefinitions,
   createBoundSixb,
   validateWorkflowAgentStepGroupReferences,
   validateWorkflowsAtStartup
-} from "./chunk-h0knpbz5.js";
+} from "./chunk-xajtptbw.js";
 import {
   ConnectorError,
   ConnectorNotFoundError,
@@ -44,7 +42,7 @@ import {
   providerFailureCode,
   recoverConnectorFailure,
   storageBoundaryError
-} from "./chunk-ha58tjtt.js";
+} from "./chunk-wtf06et8.js";
 import {
   createOntologyMutationRuntime,
   registerOntologyMutationRuntime
@@ -56,27 +54,30 @@ import {
 import {
   registerConnectorConnectionCallbackProcess
 } from "./chunk-nf4r78r4.js";
+import {
+  assertDatasetDefinition
+} from "./chunk-pc7ys28c.js";
 import {
   ActionRegistry
-} from "./chunk-d2ndstdf.js";
+} from "./chunk-v1xppd0y.js";
+import {
+  createAuthorizedObjectReader
+} from "./chunk-h5vqbfmd.js";
 import {
   ProjectionRegistry,
   createOntologyMaterializer
-} from "./chunk-9aehf39w.js";
+} from "./chunk-f26bck4t.js";
 import {
   ensureExecutionRecord
-} from "./chunk-hdz94br2.js";
+} from "./chunk-k522z7v6.js";
 import {
   checkStorageSchema,
   isMigrationCapableStorage
-} from "./chunk-6ed5bwnd.js";
+} from "./chunk-sbzzr4kx.js";
 import {
   CONNECTOR_CONNECTION_RUN_FAILURE_CODES,
   ConnectorConnectionStorageError
 } from "./chunk-5gd7tpv6.js";
-import {
-  OntologyRegistry
-} from "./chunk-x0qhkqje.js";
 import {
   RuntimeError,
   createModelCatalog
@@ -91,7 +92,10 @@ import {
 import {
   AuthRuntime,
   SecurityRegistry
-} from "./chunk-rre42skh.js";
+} from "./chunk-4sm0aznx.js";
+import {
+  OntologyRegistry
+} from "./chunk-2dw777qw.js";
 import {
   AuthRuntimeError,
   isMagicLinkAuthStrategy,
@@ -99,8 +103,9 @@ import {
 } from "./chunk-xwnf87e1.js";
 import {
   AuthorizationError,
+  captureExecutionScope,
   resolveExecutionScopeAuthorization
-} from "./chunk-37wk412q.js";
+} from "./chunk-p1x242ad.js";
 import {
   captureSixbFailure,
   isSixbError
@@ -2874,6 +2879,11 @@ function resolveDefinitions(options) {
   const ontology = new OntologyRegistry({ sources: options.ontology });
   const actionRegistry = new ActionRegistry({ actions: options.actions ?? [], ontology });
   const registeredActionIds = new Set(actionRegistry.list().map((action) => action.id));
+  const sharesById = validateSharesAtStartup({
+    shares: options.shares ?? [],
+    ontology,
+    actions: actionRegistry
+  });
   const models = options.models === undefined ? undefined : createModelCatalog(options.models);
   const tools = createAgentToolCatalog(options.tools);
   const connectorsById = indexUniqueDefinitions("connector", options.connectors ?? []);
@@ -2938,6 +2948,7 @@ function resolveDefinitions(options) {
     pipelineIds: new Set(pipelinesById.keys()),
     agentAvailable: models !== undefined,
     connectorIds: new Set(connectorsById.keys()),
+    shareIds: new Set(sharesById.keys()),
     getSubTypes: (objectTypeId) => ontology.listSubTypes(objectTypeId)
   });
   validateWorkflowAgentStepGroupReferences(workflows, security);
@@ -2962,6 +2973,7 @@ function resolveDefinitions(options) {
     rules: createDefinitionCatalog(rulesById),
     schedules: createDefinitionCatalog(schedulesById),
     security,
+    shares: createDefinitionCatalog(sharesById),
     syncs: createDefinitionCatalog(syncsById),
     workflows: createDefinitionCatalog(workflowsById)
   });
@@ -3176,20 +3188,27 @@ class SixbHost {
     });
   }
   withScope(scope) {
-    const authorization = resolveExecutionScopeAuthorization(this.projectId, scope);
-    if (authorization.ref.type === "kernel") {
+    const capturedScope = captureExecutionScope(scope);
+    const authorization = resolveExecutionScopeAuthorization(this.projectId, capturedScope);
+    if (authorization.type === "unrestricted" && authorization.ref.type === "kernel") {
       throw new Error("[Sixb] Kernel authority cannot be bound to the domain SDK.");
     }
+    const objectReader = createAuthorizedObjectReader({
+      scope: capturedScope,
+      ontology: this.hostContext.ontology,
+      objectStorage: this.storage.objects
+    });
     const runtime = {
       ...this.hostContext,
-      runtimeAuthorization: scope.authorization,
+      runtimeAuthorization: capturedScope.authorization,
+      objectReader,
       ...authorization.type === "principal" ? { authorization: authorization.context } : {}
     };
     registerOntologyMutationRuntime(runtime, createOntologyMutationRuntime({
-      materializer: this.materializer.withScope(scope),
+      materializer: this.materializer.withScope(capturedScope),
       notifyCommittedFacts: () => this.committedFacts.notify()
     }));
-    return createBoundSixb(runtime, this.sixbDependencies(), scope.execution);
+    return createBoundSixb(runtime, this.sixbDependencies(), capturedScope.execution);
   }
   get id() {
     return this.projectId;
@@ -3230,7 +3249,8 @@ class SixbHost {
       logging: this.logging,
       connectorService: this.connectorService,
       ...this.connectorService.connectionProcess === undefined ? {} : { connectorConnections: this.connectorService.connectionProcess },
-      blobStorage: this.blobStorage
+      blobStorage: this.blobStorage,
+      lakeStorage: this.lakeStorage
     };
   }
 }
@@ -3304,9 +3324,10 @@ async function createSixb(options) {
     membershipPolicies: [...options.membershipPolicies ?? [], ...definitions.membershipPolicies],
     models: options.models,
     tools: options.tools,
+    shares: [...options.shares ?? [], ...definitions.shares],
     auth: options.auth
   });
 }
 export { WebhookValidationError, defineWebhook, webhookConnector, UnverifiedWebhookError, resolveWebhookVerification, warnUnverifiedWebhook, SixbHost, createSixb };
 
-//# debugId=CC06BD4B1FBA1D7664756E2164756E21
+//# debugId=34CB5AA96E2012A064756E2164756E21