@sixb/core 0.1.7 → 0.1.8

package/dist/chunk-dqn23610.js

@@ -1,72 +0,0 @@
-// @bun
-import {
-  isRecord,
-  validateSchemaValue
-} from "./chunk-d63tybny.js";
-import {
-  OntologyValidationError
-} from "./chunk-dktq02ne.js";
-
-// src/ontology/refs.ts
-function ref(objectType) {
-  return {
-    type: "objectRef",
-    objectTypeId: objectType.id
-  };
-}
-function isObjectRefSchema(schema) {
-  return typeof schema === "object" && schema !== null && schema.type === "objectRef";
-}
-function validateSchemaOrRefValue(schema, value, path, valueTypesById) {
-  if (isObjectRefSchema(schema)) {
-    validateObjectRefValue(schema, value, path);
-    return;
-  }
-  validateSchemaValue(schema, value, path, valueTypesById);
-}
-function validateObjectRefValue(schema, value, path) {
-  if (!isRecord(value)) {
-    throw new OntologyValidationError(`[Sixb] Property ${path} must be an objectRef`);
-  }
-  const allowedFields = new Set(["objectTypeId", "primaryId"]);
-  for (const fieldId of Object.keys(value)) {
-    if (!allowedFields.has(fieldId)) {
-      throw new OntologyValidationError(`[Sixb] Unknown field '${path}.${fieldId}'`);
-    }
-  }
-  if (value.objectTypeId !== schema.objectTypeId) {
-    throw new OntologyValidationError(`[Sixb] Property ${path}.objectTypeId must be "${schema.objectTypeId}"`);
-  }
-  if (typeof value.primaryId !== "string") {
-    throw new OntologyValidationError(`[Sixb] Property ${path}.primaryId must be a string`);
-  }
-}
-
-// src/ontology/tokens.ts
-function createPropertyTokenMap(objectType) {
-  const tokenEntries = objectType.properties.map((property) => {
-    const token = {
-      objectTypeId: objectType.id,
-      id: property.id,
-      property
-    };
-    return [property.id, token];
-  });
-  return Object.fromEntries(tokenEntries);
-}
-function createLinkTokenMap(objectType) {
-  const tokenEntries = objectType.links.map((link) => {
-    const token = {
-      objectTypeId: objectType.id,
-      id: link.id,
-      targetObjectTypeId: link.targetObjectTypeId,
-      link
-    };
-    return [link.id, token];
-  });
-  return Object.fromEntries(tokenEntries);
-}
-
-export { ref, isObjectRefSchema, validateSchemaOrRefValue, createPropertyTokenMap, createLinkTokenMap };
-
-//# debugId=912178D6A694401B64756E2164756E21

package/dist/chunk-dqn23610.js.map

@@ -1,11 +0,0 @@
-{
-  "version": 3,
-  "sources": ["../src/ontology/refs.ts", "../src/ontology/tokens.ts"],
-  "sourcesContent": [
-    "import { OntologyValidationError } from \"./errors\"\nimport type { InferSchema } from \"./inference\"\nimport type { ObjectType, Schema, ValueType } from \"./types\"\nimport { isRecord, validateSchemaValue } from \"./validation\"\n\nexport type ObjectRef<TObjectTypeId extends string = string> = {\n  objectTypeId: TObjectTypeId\n  primaryId: string\n}\n\nexport interface ObjectRefSchema<TObjectTypeId extends string = string> {\n  readonly type: \"objectRef\"\n  readonly objectTypeId: TObjectTypeId\n}\n\nexport type SchemaOrRef = Schema | ObjectRefSchema\n\nexport type InferSchemaOrRef<\n  TSchema extends SchemaOrRef,\n  TValueTypes extends readonly ValueType[] = [],\n> =\n  TSchema extends ObjectRefSchema<infer TObjectTypeId>\n    ? ObjectRef<TObjectTypeId>\n    : TSchema extends Schema\n      ? InferSchema<TSchema, TValueTypes>\n      : never\n\nexport function ref<const TObjectType extends ObjectType>(\n  objectType: TObjectType\n): ObjectRefSchema<TObjectType[\"id\"]> {\n  return {\n    type: \"objectRef\",\n    objectTypeId: objectType.id,\n  }\n}\n\nexport function isObjectRefSchema(schema: SchemaOrRef): schema is ObjectRefSchema {\n  return (\n    typeof schema === \"object\" &&\n    schema !== null &&\n    (schema as { type?: unknown }).type === \"objectRef\"\n  )\n}\n\nexport function validateSchemaOrRefValue(\n  schema: SchemaOrRef,\n  value: unknown,\n  path: string,\n  valueTypesById: ReadonlyMap<string, ValueType>\n): void {\n  if (isObjectRefSchema(schema)) {\n    validateObjectRefValue(schema, value, path)\n    return\n  }\n\n  validateSchemaValue(schema, value, path, valueTypesById)\n}\n\nfunction validateObjectRefValue(schema: ObjectRefSchema, value: unknown, path: string): void {\n  if (!isRecord(value)) {\n    throw new OntologyValidationError(`[Sixb] Property ${path} must be an objectRef`)\n  }\n\n  const allowedFields = new Set([\"objectTypeId\", \"primaryId\"])\n  for (const fieldId of Object.keys(value)) {\n    if (!allowedFields.has(fieldId)) {\n      throw new OntologyValidationError(`[Sixb] Unknown field '${path}.${fieldId}'`)\n    }\n  }\n\n  if (value.objectTypeId !== schema.objectTypeId) {\n    throw new OntologyValidationError(\n      `[Sixb] Property ${path}.objectTypeId must be \"${schema.objectTypeId}\"`\n    )\n  }\n\n  if (typeof value.primaryId !== \"string\") {\n    throw new OntologyValidationError(`[Sixb] Property ${path}.primaryId must be a string`)\n  }\n}\n",
-    "import type { ObjectLink, ObjectType, Property } from \"./types\"\n\ndeclare const propertyTokenBrand: unique symbol\ndeclare const linkTokenBrand: unique symbol\n\n/**\n * Strongly-typed handle to a property on a specific object type.\n *\n * Tokens let runtime APIs accept object properties without using string ids.\n */\nexport type PropertyToken<\n  TObjectTypeId extends string = string,\n  TPropertyId extends string = string,\n  TProperty extends Property = Property,\n> = {\n  readonly [propertyTokenBrand]?: never\n  readonly objectTypeId: TObjectTypeId\n  readonly id: TPropertyId\n  readonly property: TProperty\n}\n\nexport type PropertyTokenMap<TObjectType extends ObjectType> = {\n  readonly [P in TObjectType[\"properties\"][number] as P[\"id\"]]: PropertyToken<\n    TObjectType[\"id\"],\n    P[\"id\"],\n    P\n  >\n}\n\nexport type LinkToken<\n  TObjectTypeId extends string = string,\n  TLinkId extends string = string,\n  TTargetObjectTypeId extends string | readonly string[] = string | readonly string[],\n  TLink extends ObjectLink = ObjectLink,\n> = {\n  readonly [linkTokenBrand]?: never\n  readonly objectTypeId: TObjectTypeId\n  readonly id: TLinkId\n  readonly targetObjectTypeId: TTargetObjectTypeId\n  readonly link: TLink\n}\n\nexport type LinkTokenMap<TObjectType extends ObjectType> = {\n  readonly [L in TObjectType[\"links\"][number] as L[\"id\"]]: LinkToken<\n    TObjectType[\"id\"],\n    L[\"id\"],\n    L[\"targetObjectTypeId\"],\n    L\n  >\n}\n\n/**\n * Object type with property tokens (`p.*`).\n *\n * The original ontology shape is preserved; this only adds typed handles.\n */\nexport type ObjectTypeWithPropertyTokens<TObjectType extends ObjectType = ObjectType> =\n  TObjectType & {\n    readonly p: PropertyTokenMap<TObjectType>\n  }\n\n/**\n * Object type with property tokens (`p.*`) and link tokens (`l.*`).\n *\n * `links` is a plain array for iteration.\n * `l` provides keyed token access (`Room.l.hasThermostat`).\n */\nexport type ObjectTypeWithTokens<TObjectType extends ObjectType = ObjectType> =\n  ObjectTypeWithPropertyTokens<TObjectType> & {\n    readonly l: LinkTokenMap<TObjectType>\n  }\n\n/**\n * Build the `objectType.p.*` token map once when the object type is defined.\n */\nexport function createPropertyTokenMap<TObjectType extends ObjectType>(\n  objectType: TObjectType\n): PropertyTokenMap<TObjectType> {\n  const tokenEntries = objectType.properties.map((property) => {\n    const token: PropertyToken<TObjectType[\"id\"], typeof property.id, typeof property> = {\n      objectTypeId: objectType.id,\n      id: property.id,\n      property,\n    }\n    return [property.id, token] as const\n  })\n\n  return Object.fromEntries(tokenEntries) as PropertyTokenMap<TObjectType>\n}\n\n/**\n * Build the `objectType.l.*` link token map once when the object type is defined.\n */\nexport function createLinkTokenMap<TObjectType extends ObjectType>(\n  objectType: TObjectType\n): LinkTokenMap<TObjectType> {\n  const tokenEntries = objectType.links.map((link) => {\n    const token: LinkToken<\n      TObjectType[\"id\"],\n      typeof link.id,\n      typeof link.targetObjectTypeId,\n      typeof link\n    > = {\n      objectTypeId: objectType.id,\n      id: link.id,\n      targetObjectTypeId: link.targetObjectTypeId,\n      link,\n    }\n    return [link.id, token] as const\n  })\n\n  return Object.fromEntries(tokenEntries) as LinkTokenMap<TObjectType>\n}\n"
-  ],
-  "mappings": ";;;;;;;;;;AA2BO,SAAS,GAAyC,CACvD,YACoC;AAAA,EACpC,OAAO;AAAA,IACL,MAAM;AAAA,IACN,cAAc,WAAW;AAAA,EAC3B;AAAA;AAGK,SAAS,iBAAiB,CAAC,QAAgD;AAAA,EAChF,OACE,OAAO,WAAW,YAClB,WAAW,QACV,OAA8B,SAAS;AAAA;AAIrC,SAAS,wBAAwB,CACtC,QACA,OACA,MACA,gBACM;AAAA,EACN,IAAI,kBAAkB,MAAM,GAAG;AAAA,IAC7B,uBAAuB,QAAQ,OAAO,IAAI;AAAA,IAC1C;AAAA,EACF;AAAA,EAEA,oBAAoB,QAAQ,OAAO,MAAM,cAAc;AAAA;AAGzD,SAAS,sBAAsB,CAAC,QAAyB,OAAgB,MAAoB;AAAA,EAC3F,IAAI,CAAC,SAAS,KAAK,GAAG;AAAA,IACpB,MAAM,IAAI,wBAAwB,mBAAmB,2BAA2B;AAAA,EAClF;AAAA,EAEA,MAAM,gBAAgB,IAAI,IAAI,CAAC,gBAAgB,WAAW,CAAC;AAAA,EAC3D,WAAW,WAAW,OAAO,KAAK,KAAK,GAAG;AAAA,IACxC,IAAI,CAAC,cAAc,IAAI,OAAO,GAAG;AAAA,MAC/B,MAAM,IAAI,wBAAwB,yBAAyB,QAAQ,UAAU;AAAA,IAC/E;AAAA,EACF;AAAA,EAEA,IAAI,MAAM,iBAAiB,OAAO,cAAc;AAAA,IAC9C,MAAM,IAAI,wBACR,mBAAmB,8BAA8B,OAAO,eAC1D;AAAA,EACF;AAAA,EAEA,IAAI,OAAO,MAAM,cAAc,UAAU;AAAA,IACvC,MAAM,IAAI,wBAAwB,mBAAmB,iCAAiC;AAAA,EACxF;AAAA;;;ACHK,SAAS,sBAAsD,CACpE,YAC+B;AAAA,EAC/B,MAAM,eAAe,WAAW,WAAW,IAAI,CAAC,aAAa;AAAA,IAC3D,MAAM,QAA+E;AAAA,MACnF,cAAc,WAAW;AAAA,MACzB,IAAI,SAAS;AAAA,MACb;AAAA,IACF;AAAA,IACA,OAAO,CAAC,SAAS,IAAI,KAAK;AAAA,GAC3B;AAAA,EAED,OAAO,OAAO,YAAY,YAAY;AAAA;AAMjC,SAAS,kBAAkD,CAChE,YAC2B;AAAA,EAC3B,MAAM,eAAe,WAAW,MAAM,IAAI,CAAC,SAAS;AAAA,IAClD,MAAM,QAKF;AAAA,MACF,cAAc,WAAW;AAAA,MACzB,IAAI,KAAK;AAAA,MACT,oBAAoB,KAAK;AAAA,MACzB;AAAA,IACF;AAAA,IACA,OAAO,CAAC,KAAK,IAAI,KAAK;AAAA,GACvB;AAAA,EAED,OAAO,OAAO,YAAY,YAAY;AAAA;",
-  "debugId": "912178D6A694401B64756E2164756E21",
-  "names": []
-}

package/dist/chunk-e4rvtvpw.js.map

@@ -1,34 +0,0 @@
-{
-  "version": 3,
-  "sources": ["../src/objects/action/request.ts", "../src/objects/errors.ts", "../src/objects/materializer-adapter.ts", "../src/objects/link/authorization.ts", "../src/objects/link/remove.ts", "../src/objects/link/endpoints.ts", "../src/objects/link/upsert.ts", "../src/objects/runtime-batch.ts", "../src/objects/link/upsert-batch.ts", "../src/objects/object/delete.ts", "../src/objects/object/upsert.ts", "../src/objects/object/upsert-batch.ts", "../src/objects/telemetry/write-batch.ts", "../src/objects/telemetry/append-batch.ts", "../src/objects/telemetry/history.ts", "../src/objects/context/resolve.ts", "../src/objects/sdk/telemetry-channel.ts", "../src/objects/sdk/object-handle.ts", "../src/objects/sdk/runtime-query-executor.ts", "../src/objects/sdk/object-set.ts", "../src/objects/service/action-service.ts", "../src/objects/service/link-service.ts", "../src/objects/service/list-service.ts", "../src/objects/service/object-service.ts", "../src/objects/service/telemetry-service.ts"],
-  "sourcesContent": [
-    "/**\n * Compatibility leaf operation: request an action on an object.\n *\n * The canonical action request path lives in `actions/request.ts`; object-bound\n * helpers delegate here by supplying an object subject.\n */\nimport {\n  type RequestActionAndWaitOptions,\n  type RequestActionOptions,\n  type RequestActionResult,\n  requestAction as requestRuntimeAction,\n  requestActionAndWait as requestRuntimeActionAndWait,\n} from \"../../actions/request\"\nimport type { ActionRunRecord } from \"../../storage\"\nimport type { ExecutionObjectContext } from \"../context\"\n\nexport type { RequestActionAndWaitOptions, RequestActionOptions }\n\nexport async function requestAction(\n  ctx: ExecutionObjectContext,\n  params: {\n    primaryId: string\n    actionId: string\n    params?: Record<string, unknown>\n    options?: RequestActionOptions\n  }\n): Promise<RequestActionResult> {\n  return requestRuntimeAction(ctx, ctx.execution, {\n    actionId: params.actionId,\n    subject: {\n      kind: \"object\",\n      objectTypeId: ctx.objectType.id,\n      primaryId: params.primaryId,\n    },\n    params: params.params,\n    runId: params.options?.runId,\n    signal: params.options?.signal,\n  })\n}\n\nexport async function requestActionAndWait(\n  ctx: ExecutionObjectContext,\n  params: {\n    primaryId: string\n    actionId: string\n    params?: Record<string, unknown>\n    options?: RequestActionAndWaitOptions\n  }\n): Promise<ActionRunRecord> {\n  return requestRuntimeActionAndWait(ctx, ctx.execution, {\n    actionId: params.actionId,\n    subject: {\n      kind: \"object\",\n      objectTypeId: ctx.objectType.id,\n      primaryId: params.primaryId,\n    },\n    params: params.params,\n    runId: params.options?.runId,\n    timeoutMs: params.options?.timeoutMs,\n    signal: params.options?.signal,\n    onRequested: params.options?.onRequested,\n  })\n}\n",
-    "/**\n * Error for runtime invariants and failures specific to the objects module\n * (e.g., unexpected event results after appending an object/link event).\n */\nexport class ObjectError extends Error {\n  readonly name = \"ObjectError\"\n}\n",
-    "/**\n * Runtime translation onto the ontology Materializer.\n *\n * Every typed and dynamic object/link mutation lowers to canonical Materializer operations here and\n * every Materializer result is mapped back to the public runtime shapes. The adapter owns no\n * ontology semantics: authority classification, effective resolution, validation, and event\n * construction all happen inside the Materializer's single commit.\n */\n\nimport { randomUUID } from \"node:crypto\"\nimport type { JsonValue } from \"../json\"\nimport type {\n  EditCommitResult,\n  EffectiveObjectSnapshot,\n  MaterializationItemError,\n  OntologyEditOperation,\n  OntologyLinkRef,\n  OntologyObjectRef,\n  OntologyOperationOutcome,\n} from \"../materialization/model\"\nimport { normalizeJsonProperties } from \"../materializer\"\nimport type { ObjectLink, ValueType } from \"../ontology\"\nimport { OntologyValidationError } from \"../ontology/errors\"\nimport type { ObjectTypeWithPropertyTokens } from \"../ontology/tokens\"\nimport {\n  assertKnownProperties,\n  assertLinkTargetType,\n  normalizeLinkProperties,\n  normalizeObjectProperties,\n  validateLinkProperties,\n  validateObjectProperties,\n} from \"../ontology/validation\"\nimport { getOntologyMutationRuntime } from \"../runtime/ontology-mutations\"\nimport type { SixbRuntimeContext } from \"../runtime/types\"\nimport type { ObjectRow } from \"../storage\"\nimport { ObjectError } from \"./errors\"\n\n/** The runtime pieces one commit needs. */\nexport type RuntimeMaterializerContext = Pick<SixbRuntimeContext, \"projectId\" | \"storage\">\n\n/** One caller-supplied batch item, lowered to the operations it contributes. */\nexport interface RuntimeBatchGroup {\n  /** Position in the caller's input array; item errors are reported against it. */\n  readonly index: number\n  readonly operations: readonly OntologyEditOperation[]\n}\n\nexport interface RuntimeBatchCommit {\n  readonly commit: EditCommitResult | null\n  /** Outcomes per input position, in the order the item's operations were submitted. */\n  readonly outcomes: ReadonlyMap<number, readonly OntologyOperationOutcome[]>\n}\n\n/**\n * Commits ordered operations as one atomic runtime commit.\n *\n * A fresh request id per call keeps each runtime mutation its own commit; the Materializer's\n * idempotency replay then only collapses a retry of the very same request.\n */\nexport async function commitRuntimeOperations(\n  ctx: RuntimeMaterializerContext,\n  operations: readonly OntologyEditOperation[]\n): Promise<EditCommitResult> {\n  const mutations = getOntologyMutationRuntime(ctx)\n  const commit = await mutations.commitEdits({\n    mode: \"atomic\",\n    source: { kind: \"runtime\", requestId: randomUUID() },\n    operations,\n    expectedObjects: [],\n    expectedLinks: [],\n    expectedLinkScopes: [],\n  })\n  return commit\n}\n\n/**\n * Commits grouped batch operations as one ordered continue-mode transaction.\n *\n * Successful items apply against one evolving authority state while semantic failures are recorded\n * per item. Provider, serialization, and CAS failures still roll the whole transaction back.\n *\n * An item that lowers to several operations is declared as one operation group so the Materializer\n * rolls the whole item back rather than committing the operations that ran before the failure.\n */\nexport async function commitRuntimeBatch(\n  ctx: RuntimeMaterializerContext,\n  groups: readonly RuntimeBatchGroup[]\n): Promise<RuntimeBatchCommit> {\n  const operations = groups.flatMap((group) => group.operations)\n  if (operations.length === 0) {\n    return { commit: null, outcomes: new Map() }\n  }\n\n  const operationGroups = groups\n    .filter((group) => group.operations.length > 1)\n    .map((group) => group.operations.map((operation) => operation.id))\n\n  const mutations = getOntologyMutationRuntime(ctx)\n  const commit = await mutations.commitEdits({\n    mode: \"continue\",\n    source: { kind: \"runtime\", requestId: randomUUID() },\n    operations,\n    ...(operationGroups.length > 0 ? { operationGroups } : {}),\n  })\n\n  const byId = new Map(commit.outcomes.map((outcome) => [outcome.id, outcome]))\n  const outcomes = new Map<number, readonly OntologyOperationOutcome[]>()\n  for (const group of groups) {\n    outcomes.set(\n      group.index,\n      group.operations.map((operation) => requireOutcome(byId, operation.id))\n    )\n  }\n  return { commit, outcomes }\n}\n\n/**\n * Assigns the canonical operation id for one batch item.\n *\n * Ids derive from the caller's original ordinal so outcomes map back to input positions even when\n * earlier items failed local validation and never reached the Materializer.\n */\nexport function runtimeOperationId(index: number, subOrdinal = 0): string {\n  return subOrdinal === 0 ? `op:${index}` : `op:${index}.${subOrdinal}`\n}\n\nexport interface NormalizedRuntimeObject {\n  readonly primaryId: string\n  /** Managed authority values; identity lives in the object ref, never in the properties. */\n  readonly properties: Readonly<Record<string, JsonValue>>\n}\n\n/**\n * Validates and normalizes one runtime object input at the SDK/service boundary.\n *\n * Shape and value-type errors surface here so a batch can report them against the caller's original\n * position. Authority classification, required-property enforcement, and cardinality stay in the\n * Materializer, which validates the resolved effective object instead of the request.\n */\nexport function normalizeRuntimeObject(input: {\n  readonly objectType: ObjectTypeWithPropertyTokens\n  readonly primaryPropertyId: string\n  readonly properties: Record<string, unknown>\n  readonly valueTypesById: ReadonlyMap<string, ValueType>\n}): NormalizedRuntimeObject {\n  const { objectType, primaryPropertyId, properties, valueTypesById } = input\n  assertKnownProperties(objectType, properties)\n  validateObjectProperties(objectType, properties, valueTypesById)\n\n  const primaryValue = properties[primaryPropertyId]\n  if (primaryValue === undefined || primaryValue === null) {\n    throw new OntologyValidationError(\n      `[Sixb] Missing primary property '${primaryPropertyId}' in upsert for '${objectType.id}'`\n    )\n  }\n\n  const normalized = normalizeObjectProperties(\n    objectType.properties,\n    properties,\n    valueTypesById,\n    objectType.id\n  )\n  const { [primaryPropertyId]: _identity, ...managed } = normalized\n  return {\n    primaryId: String(primaryValue),\n    properties: normalizeJsonProperties(managed, `${objectType.id} properties`),\n  }\n}\n\n/**\n * Validates and normalizes one runtime link input.\n *\n * Managed link authority carries the complete property set, so required link properties must be\n * present in the request rather than inherited from the stored edge.\n */\nexport function normalizeRuntimeLink(input: {\n  readonly objectType: ObjectTypeWithPropertyTokens\n  readonly linkDefinition: ObjectLink\n  readonly linkId: string\n  readonly targetTypeId: string\n  readonly properties?: Record<string, unknown>\n  readonly valueTypesById: ReadonlyMap<string, ValueType>\n  readonly isValidLinkTarget: (expected: string | string[], actual: string) => boolean\n}): Readonly<Record<string, JsonValue>> | undefined {\n  const { objectType, linkDefinition, linkId, targetTypeId, properties, valueTypesById } = input\n  assertLinkTargetType(objectType.id, linkId, linkDefinition, targetTypeId, input.isValidLinkTarget)\n  validateLinkProperties(objectType, linkDefinition, properties, undefined, valueTypesById)\n  const normalized = normalizeLinkProperties(objectType, linkDefinition, properties, valueTypesById)\n  if (normalized === undefined) return undefined\n  return normalizeJsonProperties(normalized, `${objectType.id}.${linkId} properties`)\n}\n\nexport function objectUpsertOperation(input: {\n  readonly id: string\n  readonly ref: OntologyObjectRef\n  readonly properties: Readonly<Record<string, JsonValue>>\n}): OntologyEditOperation {\n  return { id: input.id, kind: \"object.upsert\", ref: input.ref, properties: input.properties }\n}\n\nexport function objectDeleteOperation(input: {\n  readonly id: string\n  readonly ref: OntologyObjectRef\n}): OntologyEditOperation {\n  return { id: input.id, kind: \"object.delete\", ref: input.ref }\n}\n\nexport function objectRestoreOperation(input: {\n  readonly id: string\n  readonly ref: OntologyObjectRef\n}): OntologyEditOperation {\n  return { id: input.id, kind: \"object.restore\", ref: input.ref }\n}\n\nexport function linkUpsertOperation(input: {\n  readonly id: string\n  readonly ref: OntologyLinkRef\n  readonly properties?: Readonly<Record<string, JsonValue>>\n}): OntologyEditOperation {\n  return {\n    id: input.id,\n    kind: \"link.upsert\",\n    ref: input.ref,\n    ...(input.properties !== undefined ? { properties: input.properties } : {}),\n  }\n}\n\nexport function linkDeleteOperation(input: {\n  readonly id: string\n  readonly ref: OntologyLinkRef\n}): OntologyEditOperation {\n  return { id: input.id, kind: \"link.delete\", ref: input.ref }\n}\n\n/** Reads the outcomes one batch item produced; the commit returns one per submitted operation. */\nexport function requireItemOutcomes(\n  commit: RuntimeBatchCommit,\n  index: number\n): readonly OntologyOperationOutcome[] {\n  const outcomes = commit.outcomes.get(index)\n  if (!outcomes || outcomes.length === 0) {\n    throw new ObjectError(`[Sixb] Materializer returned no outcome for batch item ${index}.`)\n  }\n  return outcomes\n}\n\n/** Reads the effective object an ok outcome produced; runtime object writes always resolve one. */\nexport function requireEffectiveObject(outcome: OntologyOperationOutcome): EffectiveObjectSnapshot {\n  if (!outcome.ok || !outcome.object) {\n    throw new ObjectError(`[Sixb] Materializer returned no effective object for '${outcome.id}'.`)\n  }\n  return outcome.object\n}\n\nexport function toObjectRow(projectId: string, snapshot: EffectiveObjectSnapshot): ObjectRow {\n  return {\n    projectId,\n    objectTypeId: snapshot.ref.objectTypeId,\n    primaryId: snapshot.ref.primaryId,\n    properties: structuredClone(snapshot.properties) as Record<string, unknown>,\n    createdAt: new Date(snapshot.createdAt),\n    updatedAt: new Date(snapshot.updatedAt),\n    version: snapshot.version,\n    lastCommitId: snapshot.lastCommitId,\n  }\n}\n\n/** Rehydrates a persisted item error into the public runtime error type. */\nexport function toItemError(error: MaterializationItemError): Error {\n  switch (error.code) {\n    case \"validation\":\n      return new OntologyValidationError(error.message)\n  }\n}\n\nfunction requireOutcome(\n  outcomes: ReadonlyMap<string, OntologyOperationOutcome>,\n  id: string\n): OntologyOperationOutcome {\n  const outcome = outcomes.get(id)\n  if (!outcome) {\n    throw new ObjectError(`[Sixb] Materializer returned no outcome for '${id}'.`)\n  }\n  return outcome\n}\n",
-    "/**\n * The authorization rule for writing a link, in one place because all three link leaves need it.\n */\nimport { type AuthorizationContext, assertAuthorized, assertCanEdit } from \"../../authorization\"\n\n/**\n * Assert a principal may create or remove a link.\n *\n * `edit` on the **source** type, `view` on the **target**: a link is declared on the source type\n * (`objectType.links`), and writing one changes the source's edges, not the target's properties.\n * Requiring `edit` on the target too would mean a clerk needs write access to every customer before\n * attaching an invoice to one.\n *\n * `view` on the target is still required, and for two reasons: it matches how links are *read* —\n * `canViewLink` already demands `view` on both endpoints — and without it the endpoint-existence\n * check that follows would answer whether a target the principal cannot see exists.\n *\n * Call this *before* any endpoint lookup, for that second reason.\n */\nexport function assertCanWriteLink(\n  ctx: { readonly authorization?: AuthorizationContext },\n  endpoints: { readonly sourceTypeId: string; readonly targetTypeId: string }\n): void {\n  assertCanEdit(ctx, endpoints.sourceTypeId)\n  assertAuthorized(ctx, { kind: \"object.view\", objectTypeId: endpoints.targetTypeId })\n}\n",
-    "/**\n * Leaf operation: remove a single link through the ontology Materializer.\n */\nimport { assertLinkTargetType } from \"../../ontology/validation\"\nimport type { ResolvedLinkContext } from \"../context\"\nimport {\n  commitRuntimeOperations,\n  linkDeleteOperation,\n  runtimeOperationId,\n} from \"../materializer-adapter\"\nimport { assertCanWriteLink } from \"./authorization\"\n\nexport async function removeLink(\n  ctx: ResolvedLinkContext,\n  params: {\n    sourceId: string\n    linkId: string\n    targetTypeId: string\n    targetId: string\n  }\n): Promise<void> {\n  const { objectType, linkDefinition, ontology } = ctx\n  const { sourceId, linkId, targetTypeId, targetId } = params\n  assertCanWriteLink(ctx, { sourceTypeId: objectType.id, targetTypeId })\n\n  assertLinkTargetType(objectType.id, linkId, linkDefinition, targetTypeId, (expected, actual) =>\n    ontology.isValidLinkTarget(expected, actual)\n  )\n\n  // A missing link is a no-op: the delete records managed authority only when an effective edge\n  // exists, so the commit reports `unchanged` instead of failing.\n  await commitRuntimeOperations(ctx, [\n    linkDeleteOperation({\n      id: runtimeOperationId(0),\n      ref: {\n        source: { objectTypeId: objectType.id, primaryId: sourceId },\n        linkId,\n        target: { objectTypeId: targetTypeId, primaryId: targetId },\n      },\n    }),\n  ])\n}\n",
-    "/**\n * Shared endpoint existence reads for runtime link batches.\n *\n * The Materializer independently refuses a link whose endpoints are not effective. These reads exist\n * only so batch callers keep receiving the public {@link ObjectNotFoundError} for a missing endpoint\n * instead of a generic per-item validation error.\n */\n\nimport type { SixbRuntimeContext } from \"../../runtime/types\"\nimport { objectBatchKey } from \"../../storage\"\nimport { ObjectNotFoundError } from \"../../storage/errors\"\n\nexport interface LinkEndpointItem {\n  readonly objectType: { readonly id: string }\n  readonly sourceId: string\n  readonly targetTypeId: string\n  readonly targetId: string\n}\n\nexport type EndpointExistence = ReadonlySet<string>\n\nexport function collectEndpointLookups(\n  items: readonly LinkEndpointItem[]\n): { objectTypeId: string; primaryId: string }[] {\n  const lookups: { objectTypeId: string; primaryId: string }[] = []\n  const seen = new Set<string>()\n\n  for (const item of items) {\n    for (const endpoint of [\n      { objectTypeId: item.objectType.id, primaryId: item.sourceId },\n      { objectTypeId: item.targetTypeId, primaryId: item.targetId },\n    ]) {\n      const key = endpointKey(endpoint.objectTypeId, endpoint.primaryId)\n      if (seen.has(key)) continue\n      seen.add(key)\n      lookups.push(endpoint)\n    }\n  }\n\n  return lookups\n}\n\nexport async function loadEndpointExistence(\n  ctx: Pick<SixbRuntimeContext, \"projectId\" | \"storage\">,\n  lookups: readonly { objectTypeId: string; primaryId: string }[]\n): Promise<EndpointExistence> {\n  if (lookups.length === 0) return new Set()\n  const rows = await ctx.storage.objects.getByPrimaryIdBatch({\n    projectId: ctx.projectId,\n    items: lookups,\n  })\n  return new Set(rows.keys())\n}\n\n/** Throws {@link ObjectNotFoundError} for the first endpoint the read did not find. */\nexport function requireEndpoints(item: LinkEndpointItem, existing: EndpointExistence): void {\n  if (!existing.has(endpointKey(item.objectType.id, item.sourceId))) {\n    throw new ObjectNotFoundError(item.objectType.id, item.sourceId, \"Source object not found\")\n  }\n  if (!existing.has(endpointKey(item.targetTypeId, item.targetId))) {\n    throw new ObjectNotFoundError(item.targetTypeId, item.targetId, \"Target object not found\")\n  }\n}\n\nfunction endpointKey(objectTypeId: string, primaryId: string): string {\n  return objectBatchKey(objectTypeId, primaryId)\n}\n",
-    "/**\n * Leaf operation: upsert a single link through the ontology Materializer.\n */\nimport type { ResolvedLinkContext } from \"../context\"\nimport {\n  commitRuntimeOperations,\n  linkUpsertOperation,\n  normalizeRuntimeLink,\n  runtimeOperationId,\n} from \"../materializer-adapter\"\nimport { assertCanWriteLink } from \"./authorization\"\nimport { collectEndpointLookups, loadEndpointExistence, requireEndpoints } from \"./endpoints\"\n\nexport async function upsertLink(\n  ctx: ResolvedLinkContext,\n  params: {\n    sourceId: string\n    linkId: string\n    targetTypeId: string\n    targetId: string\n    properties?: Record<string, unknown>\n  }\n): Promise<void> {\n  const { objectType, linkDefinition, ontology } = ctx\n  const { sourceId, linkId, targetTypeId, targetId, properties } = params\n  assertCanWriteLink(ctx, { sourceTypeId: objectType.id, targetTypeId })\n  const endpoints = { objectType, sourceId, targetTypeId, targetId }\n\n  // Endpoint reads keep the public `ObjectNotFoundError` contract; the Materializer independently\n  // refuses a link whose endpoints are not effective when it commits. This runs before property\n  // normalization so the same input reports the same error class here and through the batch APIs,\n  // which check endpoints first inside `plan`.\n  requireEndpoints(endpoints, await loadEndpointExistence(ctx, collectEndpointLookups([endpoints])))\n\n  const normalizedProperties = normalizeRuntimeLink({\n    objectType,\n    linkDefinition,\n    linkId,\n    targetTypeId,\n    properties,\n    valueTypesById: ontology.getValueTypesById(),\n    isValidLinkTarget: (expected, actual) => ontology.isValidLinkTarget(expected, actual),\n  })\n\n  await commitRuntimeOperations(ctx, [\n    linkUpsertOperation({\n      id: runtimeOperationId(0),\n      ref: {\n        source: { objectTypeId: objectType.id, primaryId: sourceId },\n        linkId,\n        target: { objectTypeId: targetTypeId, primaryId: targetId },\n      },\n      ...(normalizedProperties !== undefined ? { properties: normalizedProperties } : {}),\n    }),\n  ])\n}\n",
-    "/**\n * Per-item mechanics shared by every runtime batch.\n *\n * One place owns the rules the public batch APIs promise: a local failure stays at its own input\n * position, an identical repeat collapses onto the first item and shares its result, a conflicting\n * repeat is rejected, and each item's Materializer outcomes map back to the position they came from.\n */\n\nimport type { OntologyEditOperation, OntologyOperationOutcome } from \"../materialization/model\"\nimport { OntologyValidationError } from \"../ontology/errors\"\nimport type { BatchItemResult } from \"../runtime/types\"\nimport {\n  commitRuntimeBatch,\n  type RuntimeMaterializerContext,\n  requireItemOutcomes,\n  toItemError,\n} from \"./materializer-adapter\"\n\nexport interface RuntimeBatchItemPlan {\n  /** Identity this item claims. A later item claiming it must be identical. */\n  readonly key: string\n  /** How that identity reads in an error message, e.g. `object 'room:r1'`. */\n  readonly label: string\n  /** Canonical content, so an identical repeat is recognized as one. */\n  readonly fingerprint: string\n  readonly operations: readonly OntologyEditOperation[]\n}\n\nexport interface RuntimeItemBatch<TItem, TValue> {\n  readonly ctx: RuntimeMaterializerContext\n  readonly items: readonly TItem[]\n  /** Lowers one item, throwing to record a local failure at that item's position. */\n  plan(item: TItem, index: number): RuntimeBatchItemPlan\n  /** Maps the outcomes of a fully successful item to its public value. */\n  value(outcomes: readonly OntologyOperationOutcome[]): TValue\n}\n\ninterface PlannedItem {\n  readonly index: number\n  readonly operations: readonly OntologyEditOperation[]\n}\n\ninterface ClaimedIdentity {\n  readonly index: number\n  readonly fingerprint: string\n}\n\nexport async function runRuntimeItemBatch<TItem, TValue>(\n  batch: RuntimeItemBatch<TItem, TValue>\n): Promise<readonly BatchItemResult<TValue>[]> {\n  const { items } = batch\n  if (items.length === 0) return []\n\n  const results: BatchItemResult<TValue>[] = new Array(items.length)\n  const planned: PlannedItem[] = []\n  const claims = new Map<string, ClaimedIdentity>()\n  /** Positions that repeat an earlier identical item and share its result. */\n  const aliases = new Map<number, number>()\n\n  for (const [index, item] of items.entries()) {\n    let plan: RuntimeBatchItemPlan\n    try {\n      plan = batch.plan(item, index)\n    } catch (error) {\n      results[index] = {\n        ok: false,\n        error: error instanceof Error ? error : new Error(String(error)),\n      }\n      continue\n    }\n\n    const claimed = claims.get(plan.key)\n    if (claimed) {\n      if (claimed.fingerprint !== plan.fingerprint) {\n        results[index] = {\n          ok: false,\n          error: new OntologyValidationError(\n            `[Sixb] Conflicting duplicate ${plan.label} at batch positions ${claimed.index} and ${index}`\n          ),\n        }\n        continue\n      }\n      aliases.set(index, claimed.index)\n      continue\n    }\n\n    claims.set(plan.key, { index, fingerprint: plan.fingerprint })\n    planned.push({ index, operations: plan.operations })\n  }\n\n  const commit = await commitRuntimeBatch(batch.ctx, planned)\n\n  for (const { index } of planned) {\n    const outcomes = requireItemOutcomes(commit, index)\n    const failed = outcomes.find((outcome) => !outcome.ok)\n    results[index] =\n      failed?.ok === false\n        ? { ok: false, error: toItemError(failed.error) }\n        : { ok: true, value: batch.value(outcomes) }\n  }\n  for (const [index, source] of aliases) {\n    results[index] = results[source]\n  }\n  return results\n}\n",
-    "/**\n * Leaf operation: batch upsert links through the ontology Materializer.\n *\n * Takes SixbRuntimeContext (shared infra) + per-item pre-resolved data, because each item can target\n * a different objectType + linkDefinition. Everything valid is submitted as one ordered\n * continue-mode commit.\n */\n\nimport { stableJsonStringify } from \"../../json\"\nimport { linkRefKey } from \"../../materialization/refs\"\nimport type { BatchItemResult, SixbRuntimeContext } from \"../../runtime/types\"\nimport type { ResolvedLinkBatchItem } from \"../context\"\nimport {\n  linkUpsertOperation,\n  normalizeRuntimeLink,\n  runtimeOperationId,\n} from \"../materializer-adapter\"\nimport { runRuntimeItemBatch } from \"../runtime-batch\"\nimport { assertCanWriteLink } from \"./authorization\"\nimport { collectEndpointLookups, loadEndpointExistence, requireEndpoints } from \"./endpoints\"\n\nexport async function upsertLinkBatch(\n  ctx: SixbRuntimeContext,\n  items: readonly ResolvedLinkBatchItem[]\n): Promise<readonly BatchItemResult<void>[]> {\n  const { ontology } = ctx\n  if (items.length === 0) return []\n\n  // Every item, up front, and before the endpoint lookup below. Authorization is a precondition, not\n  // a per-item validation: a refused item must not become one failed `BatchItemResult` while the\n  // rest of the batch commits. Asserting inside `plan` would do exactly that, and would also let the\n  // existence lookup answer for targets the principal cannot see.\n  for (const item of items) {\n    assertCanWriteLink(ctx, {\n      sourceTypeId: item.objectType.id,\n      targetTypeId: item.targetTypeId,\n    })\n  }\n\n  const existing = await loadEndpointExistence(ctx, collectEndpointLookups(items))\n  const valueTypesById = ontology.getValueTypesById()\n\n  return runRuntimeItemBatch({\n    ctx,\n    items,\n    plan(item, index) {\n      requireEndpoints(item, existing)\n      const properties = normalizeRuntimeLink({\n        objectType: item.objectType,\n        linkDefinition: item.linkDefinition,\n        linkId: item.linkId,\n        targetTypeId: item.targetTypeId,\n        properties: item.properties,\n        valueTypesById,\n        isValidLinkTarget: (expected, actual) => ontology.isValidLinkTarget(expected, actual),\n      })\n      const ref = {\n        source: { objectTypeId: item.objectType.id, primaryId: item.sourceId },\n        linkId: item.linkId,\n        target: { objectTypeId: item.targetTypeId, primaryId: item.targetId },\n      }\n      const edge = linkRefKey(ref)\n      return {\n        key: edge,\n        // The key is a JSON array, which is unreadable in the error an operator sees on a failed\n        // link projection. Name the edge the way the object path names an object.\n        label: `link '${item.objectType.id}:${item.sourceId}.${item.linkId} -> ${item.targetTypeId}:${item.targetId}'`,\n        fingerprint: stableJsonStringify(properties ?? null),\n        operations: [\n          linkUpsertOperation({\n            id: runtimeOperationId(index),\n            ref,\n            ...(properties !== undefined ? { properties } : {}),\n          }),\n        ],\n      }\n    },\n    value: () => undefined,\n  })\n}\n",
-    "/**\n * Leaf operations: delete and restore a single object through the ontology Materializer.\n *\n * Both are thin wrappers over one materializer operation, exactly like `removeLink` — the cascade\n * over links and the effective-state bookkeeping happen inside the commit.\n */\nimport { assertCanEdit } from \"../../authorization\"\nimport type { ResolvedObjectContext } from \"../context\"\nimport {\n  commitRuntimeOperations,\n  objectDeleteOperation,\n  objectRestoreOperation,\n  runtimeOperationId,\n} from \"../materializer-adapter\"\n\n/**\n * Delete the object with this primary id.\n *\n * A missing object is a no-op: the delete records managed authority only where effective state\n * exists, so the commit reports `unchanged` rather than failing. An object a projection also writes\n * stays hidden even while the projection keeps asserting it — `restore()` is what reveals it again.\n */\nexport async function deleteObject(ctx: ResolvedObjectContext, primaryId: string): Promise<void> {\n  assertCanEdit(ctx, ctx.objectType.id)\n  await commitRuntimeOperations(ctx, [\n    objectDeleteOperation({\n      id: runtimeOperationId(0),\n      ref: { objectTypeId: ctx.objectType.id, primaryId },\n    }),\n  ])\n}\n\n/**\n * Withdraw a previous delete.\n *\n * For an object written only from code this is a no-op — there is nothing left to reveal, so write it\n * again instead. For an object a projection also writes, it makes the projected state visible again.\n */\nexport async function restoreObject(ctx: ResolvedObjectContext, primaryId: string): Promise<void> {\n  assertCanEdit(ctx, ctx.objectType.id)\n  await commitRuntimeOperations(ctx, [\n    objectRestoreOperation({\n      id: runtimeOperationId(0),\n      ref: { objectTypeId: ctx.objectType.id, primaryId },\n    }),\n  ])\n}\n",
-    "/**\n * Leaf operation: upsert a single object through the ontology Materializer.\n */\n\nimport { assertCanEdit } from \"../../authorization\"\nimport type { ObjectRow } from \"../../storage\"\nimport type { ResolvedObjectContext } from \"../context\"\nimport {\n  commitRuntimeOperations,\n  normalizeRuntimeObject,\n  objectUpsertOperation,\n  requireEffectiveObject,\n  runtimeOperationId,\n  toObjectRow,\n} from \"../materializer-adapter\"\n\nexport async function upsertObject(\n  ctx: ResolvedObjectContext,\n  properties: Record<string, unknown>\n): Promise<ObjectRow> {\n  assertCanEdit(ctx, ctx.objectType.id)\n  const { objectType, primaryPropertyId, ontology } = ctx\n\n  const normalized = normalizeRuntimeObject({\n    objectType,\n    primaryPropertyId,\n    properties,\n    valueTypesById: ontology.getValueTypesById(),\n  })\n  const ref = { objectTypeId: objectType.id, primaryId: normalized.primaryId }\n\n  // The Materializer classifies this as an independent create, a patch over source authority, or a\n  // restore plus patch inside its own transaction.\n  const commit = await commitRuntimeOperations(ctx, [\n    objectUpsertOperation({ id: runtimeOperationId(0), ref, properties: normalized.properties }),\n  ])\n  return toObjectRow(ctx.projectId, requireEffectiveObject(commit.outcomes[0]))\n}\n",
-    "/**\n * Leaf operation: batch upsert objects of a single type through the ontology Materializer.\n *\n * Everything that survives local normalization is submitted as one ordered continue-mode commit, so\n * later items observe earlier ones and a provider failure rolls the whole batch back.\n */\nimport { assertCanEdit } from \"../../authorization\"\nimport { stableJsonStringify } from \"../../json\"\nimport type { BatchItemResult } from \"../../runtime/types\"\nimport type { ObjectRow } from \"../../storage\"\nimport type { ResolvedObjectContext } from \"../context\"\nimport {\n  normalizeRuntimeObject,\n  objectUpsertOperation,\n  requireEffectiveObject,\n  runtimeOperationId,\n  toObjectRow,\n} from \"../materializer-adapter\"\nimport { runRuntimeItemBatch } from \"../runtime-batch\"\n\nexport async function upsertObjectBatch(\n  ctx: ResolvedObjectContext,\n  items: readonly { properties: Record<string, unknown> }[]\n): Promise<readonly BatchItemResult<ObjectRow>[]> {\n  assertCanEdit(ctx, ctx.objectType.id)\n  const { objectType, primaryPropertyId, ontology } = ctx\n  const valueTypesById = ontology.getValueTypesById()\n\n  return runRuntimeItemBatch({\n    ctx,\n    items,\n    plan(item, index) {\n      const normalized = normalizeRuntimeObject({\n        objectType,\n        primaryPropertyId,\n        properties: item.properties,\n        valueTypesById,\n      })\n      const ref = { objectTypeId: objectType.id, primaryId: normalized.primaryId }\n      return {\n        // One commit resolves one authority state per object, so two items for the same identity are\n        // unambiguous only when they ask for the same thing.\n        key: `${ref.objectTypeId}:${ref.primaryId}`,\n        label: `object '${ref.objectTypeId}:${ref.primaryId}'`,\n        fingerprint: stableJsonStringify(normalized.properties),\n        operations: [\n          objectUpsertOperation({\n            id: runtimeOperationId(index),\n            ref,\n            properties: normalized.properties,\n          }),\n        ],\n      }\n    },\n    value: ([outcome]) => toObjectRow(ctx.projectId, requireEffectiveObject(outcome)),\n  })\n}\n",
-    "/**\n * Low-level write: append normalized telemetry points through the ontology Materializer.\n *\n * Shared by the batch operation and the per-property appenders in ObjectByIdHandle. The Materializer\n * persists immutable point history, derives latest telemetry state, and writes the commit's outbox\n * facts in one transaction, so this leaf never appends events or writes providers itself.\n */\nimport { randomUUID } from \"node:crypto\"\nimport type { AuthorizationContext } from \"../../authorization\"\nimport { assertCanAppendTelemetry } from \"../../authorization\"\nimport { MaterializationObjectNotFoundError } from \"../../materialization/errors\"\nimport type { TelemetryCommitResult, TelemetryPointWrite } from \"../../materialization/model\"\nimport { getOntologyMutationRuntime } from \"../../runtime/ontology-mutations\"\nimport { ObjectNotFoundError } from \"../../storage/errors\"\nimport type { RuntimeMaterializerContext } from \"../materializer-adapter\"\n\nexport type TelemetryWriteContext = RuntimeMaterializerContext & {\n  readonly authorization?: AuthorizationContext\n}\n\nexport async function writeTelemetryBatch(\n  ctx: TelemetryWriteContext,\n  points: readonly TelemetryPointWrite[]\n): Promise<TelemetryCommitResult | null> {\n  // Asserted from the points rather than a resolved context: this leaf is the low-level choke point\n  // for both `appendTelemetryBatch` and the per-property `TelemetryChannel`, and only the points know\n  // which object types the call actually touches.\n  for (const objectTypeId of new Set(points.map((point) => point.series.object.objectTypeId))) {\n    assertCanAppendTelemetry(ctx, objectTypeId)\n  }\n  if (points.length === 0) return null\n\n  let commit: TelemetryCommitResult\n  try {\n    commit = await getOntologyMutationRuntime(ctx).appendTelemetry({\n      source: { kind: \"runtime\", requestId: randomUUID() },\n      points,\n    })\n  } catch (error) {\n    if (error instanceof MaterializationObjectNotFoundError) {\n      throw new ObjectNotFoundError(\n        error.objectTypeId,\n        error.primaryId,\n        \"Object not found for telemetry append\"\n      )\n    }\n    throw error\n  }\n  return commit\n}\n",
-    "/**\n * Leaf operation: batch telemetry append for multiple objects of a single type.\n */\nimport { assertCanAppendTelemetry } from \"../../authorization\"\nimport type { TelemetryPointWrite } from \"../../materialization/model\"\nimport { telemetryPointKey } from \"../../materialization/refs\"\nimport { OntologyValidationError } from \"../../ontology/errors\"\nimport { assertTelemetryProperty } from \"../../ontology/validation\"\nimport type { ResolvedObjectContext } from \"../context\"\nimport { writeTelemetryBatch } from \"./write-batch\"\n\n/**\n * Type guard for telemetry values that carry an explicit unit.\n *\n * Matches only the exact `{ value, unit }` wrapper (a string `unit` and no other\n * keys) so a legitimate JSON/object telemetry value is not silently\n * reinterpreted as value+unit. A fully explicit batch contract (passing units\n * out-of-band like the single-property appender) is tracked as a follow-up;\n * this narrows the heuristic without changing the public batch API.\n */\nfunction isUnitBearingValue(raw: unknown): raw is { value: unknown; unit: string } {\n  if (raw === null || typeof raw !== \"object\") {\n    return false\n  }\n  const record = raw as Record<string, unknown>\n  return \"value\" in record && typeof record.unit === \"string\" && Object.keys(record).length === 2\n}\n\nexport async function appendTelemetryBatch(\n  ctx: ResolvedObjectContext,\n  items: readonly {\n    id: string\n    properties: Record<string, unknown | { value: unknown; unit: string }>\n    at?: Date\n  }[]\n): Promise<void> {\n  // `writeTelemetryBatch` asserts again from the points it receives. Asserting here as well is not\n  // redundant: it reports the type by name before any property is resolved, and it still refuses an\n  // empty batch, which produces no points to assert over.\n  assertCanAppendTelemetry(ctx, ctx.objectType.id)\n  const { objectType } = ctx\n  // Telemetry identity is `(series, at)`, so a repeated instant inside one call is an upsert: the\n  // last value wins rather than failing the whole batch.\n  const points = new Map<string, TelemetryPointWrite>()\n\n  for (const item of items) {\n    const at = (item.at ?? new Date()).toISOString()\n\n    for (const [propertyId, rawValue] of Object.entries(item.properties)) {\n      const propertyToken = objectType.p[propertyId]\n      if (!propertyToken) {\n        throw new OntologyValidationError(`Unknown property '${objectType.id}.${propertyId}'`)\n      }\n\n      assertTelemetryProperty(propertyToken.property)\n\n      // Value and unit validation, plus schema normalization, happen inside the Materializer.\n      const series = {\n        object: { objectTypeId: objectType.id, primaryId: item.id },\n        propertyId: propertyToken.id,\n      }\n      points.set(telemetryPointKey(series, at), {\n        series,\n        value: isUnitBearingValue(rawValue)\n          ? (rawValue.value as TelemetryPointWrite[\"value\"])\n          : (rawValue as TelemetryPointWrite[\"value\"]),\n        ...(isUnitBearingValue(rawValue) ? { unit: rawValue.unit } : {}),\n        at,\n      })\n    }\n  }\n\n  await writeTelemetryBatch(ctx, [...points.values()])\n}\n",
-    "import { type AuthorizationContext, assertAuthorized } from \"../../authorization\"\nimport type { RuntimeAuthorization } from \"../../execution\"\nimport type {\n  TimeseriesHistoryBatchInput,\n  TimeseriesHistoryBatchResult,\n  TimeseriesHistorySeriesInput,\n  TimeseriesStorage,\n} from \"../../storage\"\n\nexport interface TelemetryHistoryOptions {\n  readonly storage: TimeseriesStorage\n  readonly runtimeAuthorization?: RuntimeAuthorization\n  readonly authorization?: AuthorizationContext | null\n}\n\nexport async function getTelemetryHistoryBatch(\n  input: TimeseriesHistoryBatchInput,\n  options: TelemetryHistoryOptions\n): Promise<readonly TimeseriesHistoryBatchResult[]> {\n  assertTelemetrySeriesViewable(input.series, options)\n  return options.storage.getHistoryBatch(input)\n}\n\nfunction assertTelemetrySeriesViewable(\n  series: readonly TimeseriesHistorySeriesInput[],\n  authorization: Pick<TelemetryHistoryOptions, \"authorization\" | \"runtimeAuthorization\">\n): void {\n  for (const objectTypeId of new Set(series.map((entry) => entry.objectTypeId))) {\n    assertAuthorized(\n      {\n        runtimeAuthorization: authorization.runtimeAuthorization,\n        authorization: authorization.authorization ?? undefined,\n      },\n      { kind: \"object.view\", objectTypeId }\n    )\n  }\n}\n",
-    "/**\n * Context resolution factories.\n *\n * Resolve ontology identifiers into concrete type data so leaf functions\n * receive all structural information pre-resolved.\n */\n\nimport type { ObjectLink } from \"../../ontology\"\nimport { OntologyNotFoundError } from \"../../ontology/errors\"\nimport type { ObjectTypeWithPropertyTokens } from \"../../ontology/tokens\"\nimport type { SixbRuntimeContext } from \"../../runtime/types\"\nimport type { ResolvedLinkContext, ResolvedObjectContext } from \"./types\"\n\n/** Look up a link definition on an object type, throwing if not found. */\nexport function requireLinkDefinition(\n  objectType: ObjectTypeWithPropertyTokens,\n  linkId: string\n): ObjectLink {\n  const def = objectType.links.find((l) => l.id === linkId)\n  if (!def) throw new OntologyNotFoundError(`Unknown link '${objectType.id}.${linkId}'`)\n  return def\n}\n\n/**\n * Resolve an object type id to a full ResolvedObjectContext.\n *\n * Uses ontology.resolveObjectType() and getPrimaryPropertyId() — these\n * are structural resolution calls that belong in factories, not leaf functions.\n */\nexport function resolveObjectContext(\n  runtime: SixbRuntimeContext,\n  objectTypeId: string\n): ResolvedObjectContext {\n  const objectType = runtime.ontology.resolveObjectType(objectTypeId)\n  const primaryPropertyId = runtime.ontology.getPrimaryPropertyId(objectTypeId)\n  return { ...runtime, objectType, primaryPropertyId }\n}\n\n/**\n * Resolve a link id to a full ResolvedLinkContext.\n *\n * Uses requireLinkDefinition to look up the link definition on the\n * already-resolved object type.\n */\nexport function resolveLinkContext(\n  objCtx: ResolvedObjectContext,\n  linkId: string\n): ResolvedLinkContext {\n  const linkDefinition = requireLinkDefinition(objCtx.objectType, linkId)\n  return { ...objCtx, linkDefinition }\n}\n",
-    "/**\n * Telemetry channel factory for ObjectByIdHandle.\n *\n * Creates a per-property channel that writes through the low-level `writeTelemetryBatch` leaf and\n * reads the same series back through `getTelemetryHistoryBatch`, both keyed by the property token.\n */\nimport type { TelemetryPointWrite } from \"../../materialization/model\"\nimport type { ValueType } from \"../../ontology\"\nimport type { ObjectTypeWithPropertyTokens } from \"../../ontology/tokens\"\nimport {\n  assertPropertyTokenBelongsToObjectType,\n  assertTelemetryProperty,\n} from \"../../ontology/validation\"\nimport { RuntimeError } from \"../../runtime/errors\"\nimport type {\n  TelemetryChannel,\n  TelemetryHistoryInput,\n  TelemetryPropertyToken,\n} from \"../../runtime/types\"\nimport type { ResolvedObjectContext } from \"../context\"\nimport { getTelemetryHistoryBatch, writeTelemetryBatch } from \"../telemetry\"\n\nexport function createTelemetryChannel<\n  TObjectType extends ObjectTypeWithPropertyTokens,\n  TValueTypes extends readonly ValueType[],\n>(ctx: ResolvedObjectContext, primaryId: string) {\n  return <TToken extends TelemetryPropertyToken<TObjectType>>(\n    property: TToken\n  ): TelemetryChannel<TToken, TValueTypes> => {\n    const { objectType } = ctx\n    assertPropertyTokenBelongsToObjectType(objectType, property)\n    assertTelemetryProperty(property.property)\n\n    const series = { objectTypeId: objectType.id, objectId: primaryId, propertyId: property.id }\n\n    const channel = {\n      append: async (input: { value: unknown; unit?: string; at: Date }) => {\n        // Value and unit validation, plus schema normalization, happen inside the Materializer.\n        await writeTelemetryBatch(ctx, [\n          {\n            series: {\n              object: { objectTypeId: objectType.id, primaryId },\n              propertyId: property.id,\n            },\n            value: input.value as TelemetryPointWrite[\"value\"],\n            ...(input.unit !== undefined ? { unit: input.unit } : {}),\n            at: input.at.toISOString(),\n          },\n        ])\n      },\n\n      history: async (input: TelemetryHistoryInput = {}) => {\n        const timeseries = ctx.storage.timeseries\n        if (!timeseries) {\n          throw new RuntimeError(\"[Sixb] Reading telemetry requires storage.timeseries support.\")\n        }\n\n        const [result] = await getTelemetryHistoryBatch(\n          {\n            projectId: ctx.projectId,\n            series: [series],\n            ...(input.from !== undefined ? { from: input.from } : {}),\n            ...(input.to !== undefined ? { to: input.to } : {}),\n            ...(input.limit !== undefined ? { limitPerSeries: input.limit } : {}),\n            ...(input.order !== undefined ? { order: input.order } : {}),\n          },\n          {\n            storage: timeseries,\n            runtimeAuthorization: ctx.runtimeAuthorization,\n            authorization: ctx.authorization,\n          }\n        )\n\n        return (result?.points ?? []).map((point) => ({\n          value: point.value,\n          at: point.at,\n          ...(point.unit !== undefined ? { unit: point.unit } : {}),\n        }))\n      },\n    }\n\n    // Cast needed: generic token inference boundary — TToken is narrower than what `channel` sees\n    return channel as unknown as TelemetryChannel<TToken, TValueTypes>\n  }\n}\n",
-    "/**\n * ObjectByIdHandle binds operations to a specific object id within an ObjectSet.\n * Created via `sixb.objects(MyType).byId(\"id-1\")`, it provides link/unlink and\n * per-property telemetry appenders with compile-time unit and value type safety.\n */\nimport type { ActionDefinition } from \"../../actions\"\nimport { assertAuthorized, assertPrivileged } from \"../../authorization\"\nimport type { ObjectLink, ObjectRef, ValueType } from \"../../ontology\"\nimport { OntologyValidationError } from \"../../ontology/errors\"\nimport type { LinkToken, ObjectTypeWithPropertyTokens } from \"../../ontology/tokens\"\nimport { assertLinkTokenBelongsToObjectType } from \"../../ontology/validation\"\nimport type { ObjectByIdHandle, TwinObject } from \"../../runtime/types\"\nimport {\n  requestActionAndWait as requestActionAndWaitLeaf,\n  requestAction as requestActionLeaf,\n} from \"../action\"\nimport type { ExecutionObjectContext, ResolvedLinkContext } from \"../context\"\nimport { removeLink as removeLinkLeaf, upsertLink as upsertLinkLeaf } from \"../link\"\nimport { deleteObject, restoreObject } from \"../object\"\nimport { createTelemetryChannel } from \"./telemetry-channel\"\n\ntype ObjectRefInput = ObjectRef\ntype AnyLinkToken = LinkToken<string, string, string | readonly string[], ObjectLink>\n\nexport function createObjectByIdHandle<\n  TObjectType extends ObjectTypeWithPropertyTokens,\n  TValueTypes extends readonly ValueType[],\n>(ctx: ExecutionObjectContext, primaryId: string): ObjectByIdHandle<TObjectType, TValueTypes> {\n  const objectHandle = {\n    get: async () => {\n      assertAuthorized(ctx, { kind: \"object.view\", objectTypeId: ctx.objectType.id })\n      const row = await ctx.storage.objects.getByPrimaryId({\n        projectId: ctx.projectId,\n        objectTypeId: ctx.objectType.id,\n        primaryId,\n      })\n      return row ? (row as unknown as TwinObject<TObjectType, TValueTypes>) : null\n    },\n\n    listLinks: async (linkToken?: AnyLinkToken) => {\n      // Link rows reveal target types; no link grant semantics exist yet.\n      assertPrivileged(ctx, \"listLinks\")\n      if (linkToken) {\n        assertLinkTokenBelongsToObjectType(ctx.objectType, linkToken)\n      }\n      return ctx.storage.objects.listLinks({\n        projectId: ctx.projectId,\n        objectTypeId: ctx.objectType.id,\n        objectId: primaryId,\n        linkId: linkToken?.id,\n      })\n    },\n\n    link: async (\n      linkToken: AnyLinkToken,\n      target: ObjectRefInput,\n      options?: { properties?: Record<string, unknown> }\n    ) => {\n      assertLinkTokenBelongsToObjectType(ctx.objectType, linkToken)\n\n      const linkCtx: ResolvedLinkContext = { ...ctx, linkDefinition: linkToken.link }\n      await upsertLinkLeaf(linkCtx, {\n        sourceId: primaryId,\n        linkId: linkToken.id,\n        targetTypeId: target.objectTypeId,\n        targetId: target.primaryId,\n        properties: options?.properties,\n      })\n    },\n\n    unlink: async (linkToken: AnyLinkToken, target: ObjectRefInput) => {\n      assertLinkTokenBelongsToObjectType(ctx.objectType, linkToken)\n\n      const linkCtx: ResolvedLinkContext = { ...ctx, linkDefinition: linkToken.link }\n      await removeLinkLeaf(linkCtx, {\n        sourceId: primaryId,\n        linkId: linkToken.id,\n        targetTypeId: target.objectTypeId,\n        targetId: target.primaryId,\n      })\n    },\n\n    delete: async () => {\n      await deleteObject(ctx, primaryId)\n    },\n\n    restore: async () => {\n      await restoreObject(ctx, primaryId)\n    },\n\n    requestAction: async (input: {\n      action?: ActionDefinition\n      actionId?: string\n      params?: Record<string, unknown>\n      runId?: string\n    }) => {\n      const actionId = input.action?.id ?? input.actionId\n      if (!actionId) {\n        throw new OntologyValidationError(\n          \"[Sixb] requestAction requires either 'action' or 'actionId'\"\n        )\n      }\n      return requestActionLeaf(ctx, {\n        primaryId,\n        actionId,\n        params: input.params,\n        options: { runId: input.runId },\n      })\n    },\n\n    requestActionAndWait: async (input: {\n      action?: ActionDefinition\n      actionId?: string\n      params?: Record<string, unknown>\n      timeoutMs?: number\n      signal?: AbortSignal\n    }) => {\n      const actionId = input.action?.id ?? input.actionId\n      if (!actionId) {\n        throw new OntologyValidationError(\n          \"[Sixb] requestActionAndWait requires either 'action' or 'actionId'\"\n        )\n      }\n      return requestActionAndWaitLeaf(ctx, {\n        primaryId,\n        actionId,\n        params: input.params,\n        options: {\n          timeoutMs: input.timeoutMs,\n          signal: input.signal,\n        },\n      })\n    },\n\n    telemetry: createTelemetryChannel<TObjectType, TValueTypes>(ctx, primaryId),\n  }\n\n  return objectHandle as unknown as ObjectByIdHandle<TObjectType, TValueTypes>\n}\n",
-    "/**\n * Server-side ObjectQueryExecutor backed by the shared query executor and storage.\n * Validation, planning, fallback, and execution all run in-process here; the\n * HTTP executor in `@sixb/client` is the remote counterpart.\n */\n\nimport type { AuthorizationContext } from \"../../authorization\"\nimport type { RuntimeAuthorization } from \"../../execution/types\"\nimport type { OntologyRegistry } from \"../../ontology\"\nimport type { Storage } from \"../../storage\"\nimport {\n  countObjects,\n  executeObjectQuery,\n  existsObjects,\n  facetObjects,\n  ObjectQueryPlanningError,\n} from \"../query\"\nimport { explainObjectQuery } from \"../query/explain\"\nimport type { ObjectQuery } from \"../query/ir\"\nimport { validateObjectQuery } from \"../query/validate\"\nimport type { ObjectQueryExecutor, ObjectQueryExecutorFacetRequest } from \"./query-executor\"\n\nexport function createRuntimeQueryExecutor(params: {\n  projectId: string\n  ontology: OntologyRegistry\n  storage: Storage\n  runtimeAuthorization?: RuntimeAuthorization\n  authorization?: AuthorizationContext\n}): ObjectQueryExecutor {\n  const { projectId, ontology, storage, runtimeAuthorization, authorization } = params\n  const executorOptions = {\n    ontology,\n    storage: storage.objects,\n    runtimeAuthorization,\n    authorization,\n  }\n\n  return {\n    async list(query: ObjectQuery, options?: { includeTotal?: boolean }) {\n      try {\n        return await executeObjectQuery(\n          { projectId, query, includeTotal: options?.includeTotal },\n          executorOptions\n        )\n      } catch (error) {\n        if (error instanceof ObjectQueryPlanningError) {\n          throw addSdkPlanningHints(error)\n        }\n        throw error\n      }\n    },\n\n    async count(query: ObjectQuery) {\n      const result = await countObjects({ projectId, query }, executorOptions)\n      return result.count\n    },\n\n    async exists(query: ObjectQuery) {\n      const result = await existsObjects({ projectId, query }, executorOptions)\n      return result.exists\n    },\n\n    async facets(query: ObjectQuery, facets: readonly ObjectQueryExecutorFacetRequest[]) {\n      const result = await facetObjects({ projectId, query, facets }, executorOptions)\n      return result.facets.map((facet) => ({\n        propertyId: facet.propertyId,\n        buckets: [...facet.buckets],\n      }))\n    },\n\n    validate(query: ObjectQuery) {\n      return validateObjectQuery(query, { ontology, normalize: false })\n    },\n\n    explain(query: ObjectQuery) {\n      return explainObjectQuery(query, { ontology, normalize: false })\n    },\n  }\n}\n\nfunction addSdkPlanningHints(error: ObjectQueryPlanningError): ObjectQueryPlanningError {\n  if (!error.issues.some((issue) => issue.code === \"fallback_requires_bound\")) return error\n\n  return new ObjectQueryPlanningError(\n    error.issues.map((issue) =>\n      issue.code === \"fallback_requires_bound\"\n        ? {\n            ...issue,\n            message:\n              \"Object query fallback requires an explicit result bound. Add .limit(n) or .page({ pageSize: n }) before .list().\",\n          }\n        : issue\n    )\n  )\n}\n",
-    "/**\n * ObjectSet provides a type-safe collection API for objects of a given type.\n * Created via `sixb.objects(MyType)`, it exposes upsert, query, and telemetry batch operations\n * while preserving compile-time property types inferred from the ontology definition.\n */\n\nimport type { ActionDefinition } from \"../../actions\"\nimport type { AuthorizationContext } from \"../../authorization\"\nimport { assertAuthorized } from \"../../authorization\"\nimport { shareSixbErrorReporter } from \"../../error-reporting/capability\"\nimport type { ExecutionContext } from \"../../execution\"\nimport type { ValueType } from \"../../ontology\"\nimport { OntologyValidationError } from \"../../ontology/errors\"\nimport type { ObjectTypeWithPropertyTokens } from \"../../ontology/tokens\"\nimport { shareOntologyMutationRuntime } from \"../../runtime/ontology-mutations\"\nimport type {\n  ObjectSet,\n  ObjectSetListInput,\n  SixbRuntimeContext,\n  TwinObject,\n} from \"../../runtime/types\"\nimport {\n  requestActionAndWait as requestActionAndWaitLeaf,\n  requestAction as requestActionLeaf,\n} from \"../action\"\nimport type { ExecutionObjectContext, ResolvedLinkContext } from \"../context\"\nimport { requireLinkDefinition } from \"../context\"\nimport { removeLink as removeLinkLeaf, upsertLink as upsertLinkLeaf } from \"../link\"\nimport { upsertObject as upsertObjectLeaf } from \"../object\"\nimport { appendTelemetryBatch as appendTelemetryBatchLeaf } from \"../telemetry\"\nimport { createObjectByIdHandle } from \"./object-handle\"\nimport { createObjectQueryBuilder } from \"./query-builder\"\nimport { createRuntimeQueryExecutor } from \"./runtime-query-executor\"\n\nexport function createObjectSet<\n  TObjectType extends ObjectTypeWithPropertyTokens,\n  TRegisteredObjectTypes extends ObjectTypeWithPropertyTokens,\n  TValueTypes extends readonly ValueType[],\n>(\n  params: SixbRuntimeContext & {\n    readonly execution: ExecutionContext\n    readonly objectType: TObjectType\n    readonly authorization?: AuthorizationContext\n  }\n): ObjectSet<TObjectType, TValueTypes, TRegisteredObjectTypes> {\n  const { objectType } = params\n  const primaryProp = objectType.properties.find((p) => p.primary)\n  if (!primaryProp) {\n    throw new OntologyValidationError(`Object type '${objectType.id}' has no primary property`)\n  }\n  const primaryPropertyId = primaryProp.id\n\n  const {\n    projectId,\n    broker,\n    ontology,\n    actionRegistry,\n    events,\n    storage,\n    queues,\n    runtimeAuthorization,\n    authorization,\n    execution,\n  } = params\n  const queryExecutor = createRuntimeQueryExecutor({\n    projectId,\n    ontology,\n    storage,\n    runtimeAuthorization,\n    authorization,\n  })\n\n  const resolvedCtx: ExecutionObjectContext = {\n    projectId,\n    broker,\n    ontology,\n    actionRegistry,\n    events,\n    storage,\n    queues,\n    runtimeAuthorization,\n    authorization,\n    execution,\n    objectType,\n    primaryPropertyId,\n  }\n  shareOntologyMutationRuntime(params, resolvedCtx)\n  shareSixbErrorReporter(params, resolvedCtx)\n\n  const objectSet = {\n    get: async (id: string) => {\n      assertAuthorized(resolvedCtx, { kind: \"object.view\", objectTypeId: objectType.id })\n      const row = await storage.objects.getByPrimaryId({\n        projectId,\n        objectTypeId: objectType.id,\n        primaryId: id,\n      })\n      return row ? (row as unknown as TwinObject<TObjectType, TValueTypes>) : null\n    },\n\n    upsert: async (input: { properties: Record<string, unknown> }) => {\n      const row = await upsertObjectLeaf(resolvedCtx, input.properties)\n      return row as unknown as TwinObject<TObjectType, TValueTypes>\n    },\n\n    query: () =>\n      createObjectQueryBuilder<TObjectType, TRegisteredObjectTypes, TValueTypes>({\n        query: { kind: \"start\", objectTypeId: objectType.id },\n        executor: queryExecutor,\n      }),\n\n    byId: (id: string) => createObjectByIdHandle<TObjectType, TValueTypes>(resolvedCtx, id),\n\n    list: async (input?: ObjectSetListInput) => {\n      assertAuthorized(resolvedCtx, { kind: \"object.view\", objectTypeId: objectType.id })\n      const result = await storage.objects.list({\n        projectId,\n        objectTypeId: objectType.id,\n        primaryIdPrefix: input?.idPrefix,\n        primaryIdSuffix: input?.idSuffix,\n        updatedAfter: input?.updatedAfter,\n        updatedBefore: input?.updatedBefore,\n        createdAfter: input?.createdAfter,\n        createdBefore: input?.createdBefore,\n        limit: input?.limit,\n        offset: input?.offset,\n        orderBy: input?.orderBy,\n        order: input?.order,\n      })\n\n      return {\n        objects: result.objects.map(\n          (row) => row as unknown as TwinObject<TObjectType, TValueTypes>\n        ),\n        hasMore: result.hasMore,\n        total: result.total ?? result.objects.length,\n      }\n    },\n\n    appendTelemetryBatch: async (\n      items: readonly {\n        id: string\n        properties: Record<string, unknown | { value: unknown; unit: string }>\n        at?: Date\n      }[]\n    ) => {\n      await appendTelemetryBatchLeaf(resolvedCtx, items)\n    },\n\n    requestAction: async (input: {\n      id: string\n      action?: ActionDefinition\n      actionId?: string\n      params?: Record<string, unknown>\n      runId?: string\n    }) => {\n      const actionId = input.action?.id ?? input.actionId\n      if (!actionId) {\n        throw new OntologyValidationError(\n          \"[Sixb] requestAction requires either 'action' or 'actionId'\"\n        )\n      }\n      return requestActionLeaf(resolvedCtx, {\n        primaryId: input.id,\n        actionId,\n        params: input.params,\n        options: { runId: input.runId },\n      })\n    },\n\n    requestActionAndWait: async (input: {\n      id: string\n      action?: ActionDefinition\n      actionId?: string\n      params?: Record<string, unknown>\n      timeoutMs?: number\n      signal?: AbortSignal\n    }) => {\n      const actionId = input.action?.id ?? input.actionId\n      if (!actionId) {\n        throw new OntologyValidationError(\n          \"[Sixb] requestActionAndWait requires either 'action' or 'actionId'\"\n        )\n      }\n      return requestActionAndWaitLeaf(resolvedCtx, {\n        primaryId: input.id,\n        actionId,\n        params: input.params,\n        options: {\n          timeoutMs: input.timeoutMs,\n          signal: input.signal,\n        },\n      })\n    },\n\n    upsertLink: async (input: {\n      sourceId: string\n      linkId: string\n      targetTypeId: string\n      targetId: string\n      properties?: Record<string, unknown>\n    }) => {\n      const linkDefinition = requireLinkDefinition(objectType, input.linkId)\n      const linkCtx: ResolvedLinkContext = { ...resolvedCtx, linkDefinition }\n\n      await upsertLinkLeaf(linkCtx, {\n        sourceId: input.sourceId,\n        linkId: input.linkId,\n        targetTypeId: input.targetTypeId,\n        targetId: input.targetId,\n        properties: input.properties,\n      })\n    },\n\n    removeLink: async (input: {\n      sourceId: string\n      linkId: string\n      targetTypeId: string\n      targetId: string\n    }) => {\n      const linkDefinition = requireLinkDefinition(objectType, input.linkId)\n      const linkCtx: ResolvedLinkContext = { ...resolvedCtx, linkDefinition }\n\n      await removeLinkLeaf(linkCtx, {\n        sourceId: input.sourceId,\n        linkId: input.linkId,\n        targetTypeId: input.targetTypeId,\n        targetId: input.targetId,\n      })\n    },\n  }\n\n  return objectSet as unknown as ObjectSet<TObjectType, TValueTypes, TRegisteredObjectTypes>\n}\n",
-    "/**\n * Service layer for action operations.\n *\n * Resolves objectTypeId to a typed context and delegates to the leaf function.\n */\n\nimport type { RequestActionResult } from \"../../actions/request\"\nimport type { ExecutionContext } from \"../../execution\"\nimport type { SixbRuntimeContext } from \"../../runtime/types\"\nimport type { ActionRunRecord } from \"../../storage\"\nimport {\n  type RequestActionAndWaitOptions,\n  type RequestActionOptions,\n  requestActionAndWait as requestActionAndWaitLeaf,\n  requestAction as requestActionLeaf,\n} from \"../action\"\nimport { resolveObjectContext } from \"../context\"\n\nexport async function requestAction(\n  runtime: SixbRuntimeContext,\n  execution: ExecutionContext,\n  objectTypeId: string,\n  primaryId: string,\n  actionId: string,\n  params?: Record<string, unknown>,\n  options?: RequestActionOptions\n): Promise<RequestActionResult> {\n  const ctx = { ...resolveObjectContext(runtime, objectTypeId), execution }\n  return requestActionLeaf(ctx, { primaryId, actionId, params, options })\n}\n\nexport async function requestActionAndWait(\n  runtime: SixbRuntimeContext,\n  execution: ExecutionContext,\n  objectTypeId: string,\n  primaryId: string,\n  actionId: string,\n  params?: Record<string, unknown>,\n  options?: RequestActionAndWaitOptions\n): Promise<ActionRunRecord> {\n  const ctx = { ...resolveObjectContext(runtime, objectTypeId), execution }\n  return requestActionAndWaitLeaf(ctx, { primaryId, actionId, params, options })\n}\n",
-    "/**\n * Service layer for link operations.\n *\n * Resolves objectTypeId to a typed context and delegates to leaf functions.\n */\nimport type { BatchItemResult, SixbRuntimeContext } from \"../../runtime/types\"\nimport type { ResolvedLinkBatchItem } from \"../context\"\nimport { requireLinkDefinition, resolveLinkContext, resolveObjectContext } from \"../context\"\nimport {\n  removeLink as removeLinkLeaf,\n  upsertLinkBatch as upsertLinkBatchLeaf,\n  upsertLink as upsertLinkLeaf,\n} from \"../link\"\n\nexport async function upsertLink(\n  runtime: SixbRuntimeContext,\n  objectTypeId: string,\n  sourceId: string,\n  linkId: string,\n  target: { targetTypeId: string; targetId: string; properties?: Record<string, unknown> }\n): Promise<void> {\n  const ctx = resolveObjectContext(runtime, objectTypeId)\n  const linkCtx = resolveLinkContext(ctx, linkId)\n  await upsertLinkLeaf(linkCtx, {\n    sourceId,\n    linkId,\n    targetTypeId: target.targetTypeId,\n    targetId: target.targetId,\n    properties: target.properties,\n  })\n}\n\nexport async function upsertLinkBatch(\n  runtime: SixbRuntimeContext,\n  items: readonly {\n    objectTypeId: string\n    sourceId: string\n    linkId: string\n    target: { targetTypeId: string; targetId: string; properties?: Record<string, unknown> }\n  }[]\n): Promise<readonly BatchItemResult<void>[]> {\n  const resolvedItems: ResolvedLinkBatchItem[] = items.map((item) => {\n    const objectType = runtime.ontology.resolveObjectType(item.objectTypeId)\n    const linkDefinition = requireLinkDefinition(objectType, item.linkId)\n    return {\n      objectType,\n      linkDefinition,\n      sourceId: item.sourceId,\n      linkId: item.linkId,\n      targetTypeId: item.target.targetTypeId,\n      targetId: item.target.targetId,\n      properties: item.target.properties,\n    }\n  })\n\n  return upsertLinkBatchLeaf(runtime, resolvedItems)\n}\n\nexport async function removeLink(\n  runtime: SixbRuntimeContext,\n  objectTypeId: string,\n  sourceId: string,\n  linkId: string,\n  target: { targetTypeId: string; targetId: string }\n): Promise<void> {\n  const ctx = resolveObjectContext(runtime, objectTypeId)\n  const linkCtx = resolveLinkContext(ctx, linkId)\n  await removeLinkLeaf(linkCtx, {\n    sourceId,\n    linkId,\n    targetTypeId: target.targetTypeId,\n    targetId: target.targetId,\n  })\n}\n",
-    "/**\n * Cross-type object listing for dashboards and search.\n *\n * On principal-bound runtimes the type filter is authorized before the storage call:\n * explicitly requested types must all be viewable, and unfiltered listings\n * narrow to the principal's viewable types instead of post-filtering rows.\n */\n\nimport { assertAuthorized } from \"../../authorization\"\nimport type { ListResult, SixbRuntimeContext } from \"../../runtime/types\"\nimport type { ObjectRow } from \"../../storage\"\n\nexport interface ListObjectsParams {\n  objectTypeIds?: readonly string[]\n  idPrefix?: string\n  idSuffix?: string\n  updatedAfter?: Date\n  updatedBefore?: Date\n  createdAfter?: Date\n  createdBefore?: Date\n  limit?: number\n  offset?: number\n  orderBy?: \"createdAt\" | \"updatedAt\" | \"primaryId\"\n  order?: \"asc\" | \"desc\"\n}\n\nexport async function listObjects(\n  runtime: SixbRuntimeContext,\n  params: ListObjectsParams\n): Promise<ListResult<ObjectRow>> {\n  const objectTypeIds = resolveAuthorizedTypeFilter(runtime, params.objectTypeIds)\n\n  if (runtime.authorization && objectTypeIds !== undefined && objectTypeIds.length === 0) {\n    return { objects: [], hasMore: false, total: 0 }\n  }\n\n  const result = await runtime.storage.objects.list({\n    projectId: runtime.projectId,\n    objectTypeId: objectTypeIds?.length === 1 ? objectTypeIds[0] : objectTypeIds,\n    primaryIdPrefix: params.idPrefix,\n    primaryIdSuffix: params.idSuffix,\n    updatedAfter: params.updatedAfter,\n    updatedBefore: params.updatedBefore,\n    createdAfter: params.createdAfter,\n    createdBefore: params.createdBefore,\n    limit: params.limit,\n    offset: params.offset,\n    orderBy: params.orderBy,\n    order: params.order,\n  })\n\n  return {\n    objects: [...result.objects],\n    hasMore: result.hasMore,\n    total: result.total,\n  }\n}\n\nfunction resolveAuthorizedTypeFilter(\n  runtime: SixbRuntimeContext,\n  requested: readonly string[] | undefined\n): readonly string[] | undefined {\n  if (requested) {\n    for (const objectTypeId of requested) {\n      runtime.ontology.resolveObjectType(objectTypeId)\n    }\n  }\n\n  const expanded = requested\n    ? [...new Set(requested.flatMap((id) => [id, ...runtime.ontology.listSubTypes(id)]))]\n    : undefined\n\n  if (!runtime.authorization) {\n    return expanded\n  }\n\n  if (!expanded) {\n    // Broad listings narrow to the visible universe rather than failing. The\n    // set already contains every registered type when \"all\" was granted.\n    return [...runtime.authorization.grants[\"view:object\"]]\n  }\n\n  // Explicitly requested types must all be viewable.\n  for (const objectTypeId of expanded) {\n    assertAuthorized(runtime, { kind: \"object.view\", objectTypeId })\n  }\n\n  return expanded\n}\n",
-    "/**\n * Service layer for object upsert operations.\n *\n * Resolves objectTypeId to a typed context and delegates to leaf functions.\n */\nimport type { BatchItemResult, SixbRuntimeContext } from \"../../runtime/types\"\nimport type { ObjectRow } from \"../../storage\"\nimport { resolveObjectContext } from \"../context\"\nimport {\n  upsertObjectBatch as upsertObjectBatchLeaf,\n  upsertObject as upsertObjectLeaf,\n} from \"../object\"\n\nexport async function upsertObject(\n  runtime: SixbRuntimeContext,\n  objectTypeId: string,\n  properties: Record<string, unknown>\n): Promise<ObjectRow> {\n  return upsertObjectLeaf(resolveObjectContext(runtime, objectTypeId), properties)\n}\n\nexport async function upsertObjectBatch(\n  runtime: SixbRuntimeContext,\n  objectTypeId: string,\n  items: readonly { properties: Record<string, unknown> }[]\n): Promise<readonly BatchItemResult<ObjectRow>[]> {\n  return upsertObjectBatchLeaf(resolveObjectContext(runtime, objectTypeId), items)\n}\n",
-    "/**\n * Service layer for telemetry operations.\n *\n * Resolves objectTypeId to a typed context and delegates to the leaf function.\n */\nimport type { SixbRuntimeContext } from \"../../runtime/types\"\nimport { resolveObjectContext } from \"../context\"\nimport { appendTelemetryBatch as appendTelemetryBatchLeaf } from \"../telemetry\"\n\nexport async function appendTelemetry(\n  runtime: SixbRuntimeContext,\n  objectTypeId: string,\n  items: readonly { id: string; properties: Record<string, unknown>; at?: Date }[]\n): Promise<void> {\n  const ctx = resolveObjectContext(runtime, objectTypeId)\n  await appendTelemetryBatchLeaf(ctx, items)\n}\n"
-  ],
-  "mappings": ";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAkBA,eAAsB,cAAa,CACjC,KACA,QAM8B;AAAA,EAC9B,OAAO,cAAqB,KAAK,IAAI,WAAW;AAAA,IAC9C,UAAU,OAAO;AAAA,IACjB,SAAS;AAAA,MACP,MAAM;AAAA,MACN,cAAc,IAAI,WAAW;AAAA,MAC7B,WAAW,OAAO;AAAA,IACpB;AAAA,IACA,QAAQ,OAAO;AAAA,IACf,OAAO,OAAO,SAAS;AAAA,IACvB,QAAQ,OAAO,SAAS;AAAA,EAC1B,CAAC;AAAA;AAGH,eAAsB,qBAAoB,CACxC,KACA,QAM0B;AAAA,EAC1B,OAAO,qBAA4B,KAAK,IAAI,WAAW;AAAA,IACrD,UAAU,OAAO;AAAA,IACjB,SAAS;AAAA,MACP,MAAM;AAAA,MACN,cAAc,IAAI,WAAW;AAAA,MAC7B,WAAW,OAAO;AAAA,IACpB;AAAA,IACA,QAAQ,OAAO;AAAA,IACf,OAAO,OAAO,SAAS;AAAA,IACvB,WAAW,OAAO,SAAS;AAAA,IAC3B,QAAQ,OAAO,SAAS;AAAA,IACxB,aAAa,OAAO,SAAS;AAAA,EAC/B,CAAC;AAAA;;ACzDI,MAAM,oBAAoB,MAAM;AAAA,EAC5B,OAAO;AAClB;;;ACGA;AAkDA,eAAsB,uBAAuB,CAC3C,KACA,YAC2B;AAAA,EAC3B,MAAM,YAAY,2BAA2B,GAAG;AAAA,EAChD,MAAM,SAAS,MAAM,UAAU,YAAY;AAAA,IACzC,MAAM;AAAA,IACN,QAAQ,EAAE,MAAM,WAAW,WAAW,WAAW,EAAE;AAAA,IACnD;AAAA,IACA,iBAAiB,CAAC;AAAA,IAClB,eAAe,CAAC;AAAA,IAChB,oBAAoB,CAAC;AAAA,EACvB,CAAC;AAAA,EACD,OAAO;AAAA;AAYT,eAAsB,kBAAkB,CACtC,KACA,QAC6B;AAAA,EAC7B,MAAM,aAAa,OAAO,QAAQ,CAAC,UAAU,MAAM,UAAU;AAAA,EAC7D,IAAI,WAAW,WAAW,GAAG;AAAA,IAC3B,OAAO,EAAE,QAAQ,MAAM,UAAU,IAAI,IAAM;AAAA,EAC7C;AAAA,EAEA,MAAM,kBAAkB,OACrB,OAAO,CAAC,UAAU,MAAM,WAAW,SAAS,CAAC,EAC7C,IAAI,CAAC,UAAU,MAAM,WAAW,IAAI,CAAC,cAAc,UAAU,EAAE,CAAC;AAAA,EAEnE,MAAM,YAAY,2BAA2B,GAAG;AAAA,EAChD,MAAM,SAAS,MAAM,UAAU,YAAY;AAAA,IACzC,MAAM;AAAA,IACN,QAAQ,EAAE,MAAM,WAAW,WAAW,WAAW,EAAE;AAAA,IACnD;AAAA,OACI,gBAAgB,SAAS,IAAI,EAAE,gBAAgB,IAAI,CAAC;AAAA,EAC1D,CAAC;AAAA,EAED,MAAM,OAAO,IAAI,IAAI,OAAO,SAAS,IAAI,CAAC,YAAY,CAAC,QAAQ,IAAI,OAAO,CAAC,CAAC;AAAA,EAC5E,MAAM,WAAW,IAAI;AAAA,EACrB,WAAW,SAAS,QAAQ;AAAA,IAC1B,SAAS,IACP,MAAM,OACN,MAAM,WAAW,IAAI,CAAC,cAAc,eAAe,MAAM,UAAU,EAAE,CAAC,CACxE;AAAA,EACF;AAAA,EACA,OAAO,EAAE,QAAQ,SAAS;AAAA;AASrB,SAAS,kBAAkB,CAAC,OAAe,aAAa,GAAW;AAAA,EACxE,OAAO,eAAe,IAAI,MAAM,UAAU,MAAM,SAAS;AAAA;AAgBpD,SAAS,sBAAsB,CAAC,OAKX;AAAA,EAC1B,QAAQ,YAAY,mBAAmB,YAAY,mBAAmB;AAAA,EACtE,sBAAsB,YAAY,UAAU;AAAA,EAC5C,yBAAyB,YAAY,YAAY,cAAc;AAAA,EAE/D,MAAM,eAAe,WAAW;AAAA,EAChC,IAAI,iBAAiB,aAAa,iBAAiB,MAAM;AAAA,IACvD,MAAM,IAAI,wBACR,oCAAoC,qCAAqC,WAAW,KACtF;AAAA,EACF;AAAA,EAEA,MAAM,aAAa,0BACjB,WAAW,YACX,YACA,gBACA,WAAW,EACb;AAAA,EACA,SAAS,oBAAoB,cAAc,YAAY;AAAA,EACvD,OAAO;AAAA,IACL,WAAW,OAAO,YAAY;AAAA,IAC9B,YAAY,wBAAwB,SAAS,GAAG,WAAW,eAAe;AAAA,EAC5E;AAAA;AASK,SAAS,oBAAoB,CAAC,OAQe;AAAA,EAClD,QAAQ,YAAY,gBAAgB,QAAQ,cAAc,YAAY,mBAAmB;AAAA,EACzF,qBAAqB,WAAW,IAAI,QAAQ,gBAAgB,cAAc,MAAM,iBAAiB;AAAA,EACjG,uBAAuB,YAAY,gBAAgB,YAAY,WAAW,cAAc;AAAA,EACxF,MAAM,aAAa,wBAAwB,YAAY,gBAAgB,YAAY,cAAc;AAAA,EACjG,IAAI,eAAe;AAAA,IAAW;AAAA,EAC9B,OAAO,wBAAwB,YAAY,GAAG,WAAW,MAAM,mBAAmB;AAAA;AAG7E,SAAS,qBAAqB,CAAC,OAIZ;AAAA,EACxB,OAAO,EAAE,IAAI,MAAM,IAAI,MAAM,iBAAiB,KAAK,MAAM,KAAK,YAAY,MAAM,WAAW;AAAA;AAGtF,SAAS,qBAAqB,CAAC,OAGZ;AAAA,EACxB,OAAO,EAAE,IAAI,MAAM,IAAI,MAAM,iBAAiB,KAAK,MAAM,IAAI;AAAA;AAGxD,SAAS,sBAAsB,CAAC,OAGb;AAAA,EACxB,OAAO,EAAE,IAAI,MAAM,IAAI,MAAM,kBAAkB,KAAK,MAAM,IAAI;AAAA;AAGzD,SAAS,mBAAmB,CAAC,OAIV;AAAA,EACxB,OAAO;AAAA,IACL,IAAI,MAAM;AAAA,IACV,MAAM;AAAA,IACN,KAAK,MAAM;AAAA,OACP,MAAM,eAAe,YAAY,EAAE,YAAY,MAAM,WAAW,IAAI,CAAC;AAAA,EAC3E;AAAA;AAGK,SAAS,mBAAmB,CAAC,OAGV;AAAA,EACxB,OAAO,EAAE,IAAI,MAAM,IAAI,MAAM,eAAe,KAAK,MAAM,IAAI;AAAA;AAItD,SAAS,mBAAmB,CACjC,QACA,OACqC;AAAA,EACrC,MAAM,WAAW,OAAO,SAAS,IAAI,KAAK;AAAA,EAC1C,IAAI,CAAC,YAAY,SAAS,WAAW,GAAG;AAAA,IACtC,MAAM,IAAI,YAAY,0DAA0D,QAAQ;AAAA,EAC1F;AAAA,EACA,OAAO;AAAA;AAIF,SAAS,sBAAsB,CAAC,SAA4D;AAAA,EACjG,IAAI,CAAC,QAAQ,MAAM,CAAC,QAAQ,QAAQ;AAAA,IAClC,MAAM,IAAI,YAAY,yDAAyD,QAAQ,MAAM;AAAA,EAC/F;AAAA,EACA,OAAO,QAAQ;AAAA;AAGV,SAAS,WAAW,CAAC,WAAmB,UAA8C;AAAA,EAC3F,OAAO;AAAA,IACL;AAAA,IACA,cAAc,SAAS,IAAI;AAAA,IAC3B,WAAW,SAAS,IAAI;AAAA,IACxB,YAAY,gBAAgB,SAAS,UAAU;AAAA,IAC/C,WAAW,IAAI,KAAK,SAAS,SAAS;AAAA,IACtC,WAAW,IAAI,KAAK,SAAS,SAAS;AAAA,IACtC,SAAS,SAAS;AAAA,IAClB,cAAc,SAAS;AAAA,EACzB;AAAA;AAIK,SAAS,WAAW,CAAC,OAAwC;AAAA,EAClE,QAAQ,MAAM;AAAA,SACP;AAAA,MACH,OAAO,IAAI,wBAAwB,MAAM,OAAO;AAAA;AAAA;AAItD,SAAS,cAAc,CACrB,UACA,IAC0B;AAAA,EAC1B,MAAM,UAAU,SAAS,IAAI,EAAE;AAAA,EAC/B,IAAI,CAAC,SAAS;AAAA,IACZ,MAAM,IAAI,YAAY,gDAAgD,MAAM;AAAA,EAC9E;AAAA,EACA,OAAO;AAAA;;;ACxQF,SAAS,kBAAkB,CAChC,KACA,WACM;AAAA,EACN,cAAc,KAAK,UAAU,YAAY;AAAA,EACzC,iBAAiB,KAAK,EAAE,MAAM,eAAe,cAAc,UAAU,aAAa,CAAC;AAAA;;;ACZrF,eAAsB,UAAU,CAC9B,KACA,QAMe;AAAA,EACf,QAAQ,YAAY,gBAAgB,aAAa;AAAA,EACjD,QAAQ,UAAU,QAAQ,cAAc,aAAa;AAAA,EACrD,mBAAmB,KAAK,EAAE,cAAc,WAAW,IAAI,aAAa,CAAC;AAAA,EAErE,qBAAqB,WAAW,IAAI,QAAQ,gBAAgB,cAAc,CAAC,UAAU,WACnF,SAAS,kBAAkB,UAAU,MAAM,CAC7C;AAAA,EAIA,MAAM,wBAAwB,KAAK;AAAA,IACjC,oBAAoB;AAAA,MAClB,IAAI,mBAAmB,CAAC;AAAA,MACxB,KAAK;AAAA,QACH,QAAQ,EAAE,cAAc,WAAW,IAAI,WAAW,SAAS;AAAA,QAC3D;AAAA,QACA,QAAQ,EAAE,cAAc,cAAc,WAAW,SAAS;AAAA,MAC5D;AAAA,IACF,CAAC;AAAA,EACH,CAAC;AAAA;;;ACnBI,SAAS,sBAAsB,CACpC,OAC+C;AAAA,EAC/C,MAAM,UAAyD,CAAC;AAAA,EAChE,MAAM,OAAO,IAAI;AAAA,EAEjB,WAAW,QAAQ,OAAO;AAAA,IACxB,WAAW,YAAY;AAAA,MACrB,EAAE,cAAc,KAAK,WAAW,IAAI,WAAW,KAAK,SAAS;AAAA,MAC7D,EAAE,cAAc,KAAK,cAAc,WAAW,KAAK,SAAS;AAAA,IAC9D,GAAG;AAAA,MACD,MAAM,MAAM,YAAY,SAAS,cAAc,SAAS,SAAS;AAAA,MACjE,IAAI,KAAK,IAAI,GAAG;AAAA,QAAG;AAAA,MACnB,KAAK,IAAI,GAAG;AAAA,MACZ,QAAQ,KAAK,QAAQ;AAAA,IACvB;AAAA,EACF;AAAA,EAEA,OAAO;AAAA;AAGT,eAAsB,qBAAqB,CACzC,KACA,SAC4B;AAAA,EAC5B,IAAI,QAAQ,WAAW;AAAA,IAAG,OAAO,IAAI;AAAA,EACrC,MAAM,OAAO,MAAM,IAAI,QAAQ,QAAQ,oBAAoB;AAAA,IACzD,WAAW,IAAI;AAAA,IACf,OAAO;AAAA,EACT,CAAC;AAAA,EACD,OAAO,IAAI,IAAI,KAAK,KAAK,CAAC;AAAA;AAIrB,SAAS,gBAAgB,CAAC,MAAwB,UAAmC;AAAA,EAC1F,IAAI,CAAC,SAAS,IAAI,YAAY,KAAK,WAAW,IAAI,KAAK,QAAQ,CAAC,GAAG;AAAA,IACjE,MAAM,IAAI,oBAAoB,KAAK,WAAW,IAAI,KAAK,UAAU,yBAAyB;AAAA,EAC5F;AAAA,EACA,IAAI,CAAC,SAAS,IAAI,YAAY,KAAK,cAAc,KAAK,QAAQ,CAAC,GAAG;AAAA,IAChE,MAAM,IAAI,oBAAoB,KAAK,cAAc,KAAK,UAAU,yBAAyB;AAAA,EAC3F;AAAA;AAGF,SAAS,WAAW,CAAC,cAAsB,WAA2B;AAAA,EACpE,OAAO,eAAe,cAAc,SAAS;AAAA;;;ACpD/C,eAAsB,UAAU,CAC9B,KACA,QAOe;AAAA,EACf,QAAQ,YAAY,gBAAgB,aAAa;AAAA,EACjD,QAAQ,UAAU,QAAQ,cAAc,UAAU,eAAe;AAAA,EACjE,mBAAmB,KAAK,EAAE,cAAc,WAAW,IAAI,aAAa,CAAC;AAAA,EACrE,MAAM,YAAY,EAAE,YAAY,UAAU,cAAc,SAAS;AAAA,EAMjE,iBAAiB,WAAW,MAAM,sBAAsB,KAAK,uBAAuB,CAAC,SAAS,CAAC,CAAC,CAAC;AAAA,EAEjG,MAAM,uBAAuB,qBAAqB;AAAA,IAChD;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA,gBAAgB,SAAS,kBAAkB;AAAA,IAC3C,mBAAmB,CAAC,UAAU,WAAW,SAAS,kBAAkB,UAAU,MAAM;AAAA,EACtF,CAAC;AAAA,EAED,MAAM,wBAAwB,KAAK;AAAA,IACjC,oBAAoB;AAAA,MAClB,IAAI,mBAAmB,CAAC;AAAA,MACxB,KAAK;AAAA,QACH,QAAQ,EAAE,cAAc,WAAW,IAAI,WAAW,SAAS;AAAA,QAC3D;AAAA,QACA,QAAQ,EAAE,cAAc,cAAc,WAAW,SAAS;AAAA,MAC5D;AAAA,SACI,yBAAyB,YAAY,EAAE,YAAY,qBAAqB,IAAI,CAAC;AAAA,IACnF,CAAC;AAAA,EACH,CAAC;AAAA;;;ACPH,eAAsB,mBAAkC,CACtD,OAC6C;AAAA,EAC7C,QAAQ,UAAU;AAAA,EAClB,IAAI,MAAM,WAAW;AAAA,IAAG,OAAO,CAAC;AAAA,EAEhC,MAAM,UAAqC,IAAI,MAAM,MAAM,MAAM;AAAA,EACjE,MAAM,UAAyB,CAAC;AAAA,EAChC,MAAM,SAAS,IAAI;AAAA,EAEnB,MAAM,UAAU,IAAI;AAAA,EAEpB,YAAY,OAAO,SAAS,MAAM,QAAQ,GAAG;AAAA,IAC3C,IAAI;AAAA,IACJ,IAAI;AAAA,MACF,OAAO,MAAM,KAAK,MAAM,KAAK;AAAA,MAC7B,OAAO,OAAO;AAAA,MACd,QAAQ,SAAS;AAAA,QACf,IAAI;AAAA,QACJ,OAAO,iBAAiB,QAAQ,QAAQ,IAAI,MAAM,OAAO,KAAK,CAAC;AAAA,MACjE;AAAA,MACA;AAAA;AAAA,IAGF,MAAM,UAAU,OAAO,IAAI,KAAK,GAAG;AAAA,IACnC,IAAI,SAAS;AAAA,MACX,IAAI,QAAQ,gBAAgB,KAAK,aAAa;AAAA,QAC5C,QAAQ,SAAS;AAAA,UACf,IAAI;AAAA,UACJ,OAAO,IAAI,wBACT,gCAAgC,KAAK,4BAA4B,QAAQ,aAAa,OACxF;AAAA,QACF;AAAA,QACA;AAAA,MACF;AAAA,MACA,QAAQ,IAAI,OAAO,QAAQ,KAAK;AAAA,MAChC;AAAA,IACF;AAAA,IAEA,OAAO,IAAI,KAAK,KAAK,EAAE,OAAO,aAAa,KAAK,YAAY,CAAC;AAAA,IAC7D,QAAQ,KAAK,EAAE,OAAO,YAAY,KAAK,WAAW,CAAC;AAAA,EACrD;AAAA,EAEA,MAAM,SAAS,MAAM,mBAAmB,MAAM,KAAK,OAAO;AAAA,EAE1D,aAAa,WAAW,SAAS;AAAA,IAC/B,MAAM,WAAW,oBAAoB,QAAQ,KAAK;AAAA,IAClD,MAAM,SAAS,SAAS,KAAK,CAAC,YAAY,CAAC,QAAQ,EAAE;AAAA,IACrD,QAAQ,SACN,QAAQ,OAAO,QACX,EAAE,IAAI,OAAO,OAAO,YAAY,OAAO,KAAK,EAAE,IAC9C,EAAE,IAAI,MAAM,OAAO,MAAM,MAAM,QAAQ,EAAE;AAAA,EACjD;AAAA,EACA,YAAY,OAAO,WAAW,SAAS;AAAA,IACrC,QAAQ,SAAS,QAAQ;AAAA,EAC3B;AAAA,EACA,OAAO;AAAA;;;AClFT,eAAsB,eAAe,CACnC,KACA,OAC2C;AAAA,EAC3C,QAAQ,aAAa;AAAA,EACrB,IAAI,MAAM,WAAW;AAAA,IAAG,OAAO,CAAC;AAAA,EAMhC,WAAW,QAAQ,OAAO;AAAA,IACxB,mBAAmB,KAAK;AAAA,MACtB,cAAc,KAAK,WAAW;AAAA,MAC9B,cAAc,KAAK;AAAA,IACrB,CAAC;AAAA,EACH;AAAA,EAEA,MAAM,WAAW,MAAM,sBAAsB,KAAK,uBAAuB,KAAK,CAAC;AAAA,EAC/E,MAAM,iBAAiB,SAAS,kBAAkB;AAAA,EAElD,OAAO,oBAAoB;AAAA,IACzB;AAAA,IACA;AAAA,IACA,IAAI,CAAC,MAAM,OAAO;AAAA,MAChB,iBAAiB,MAAM,QAAQ;AAAA,MAC/B,MAAM,aAAa,qBAAqB;AAAA,QACtC,YAAY,KAAK;AAAA,QACjB,gBAAgB,KAAK;AAAA,QACrB,QAAQ,KAAK;AAAA,QACb,cAAc,KAAK;AAAA,QACnB,YAAY,KAAK;AAAA,QACjB;AAAA,QACA,mBAAmB,CAAC,UAAU,WAAW,SAAS,kBAAkB,UAAU,MAAM;AAAA,MACtF,CAAC;AAAA,MACD,MAAM,MAAM;AAAA,QACV,QAAQ,EAAE,cAAc,KAAK,WAAW,IAAI,WAAW,KAAK,SAAS;AAAA,QACrE,QAAQ,KAAK;AAAA,QACb,QAAQ,EAAE,cAAc,KAAK,cAAc,WAAW,KAAK,SAAS;AAAA,MACtE;AAAA,MACA,MAAM,OAAO,WAAW,GAAG;AAAA,MAC3B,OAAO;AAAA,QACL,KAAK;AAAA,QAGL,OAAO,SAAS,KAAK,WAAW,MAAM,KAAK,YAAY,KAAK,aAAa,KAAK,gBAAgB,KAAK;AAAA,QACnG,aAAa,oBAAoB,cAAc,IAAI;AAAA,QACnD,YAAY;AAAA,UACV,oBAAoB;AAAA,YAClB,IAAI,mBAAmB,KAAK;AAAA,YAC5B;AAAA,eACI,eAAe,YAAY,EAAE,WAAW,IAAI,CAAC;AAAA,UACnD,CAAC;AAAA,QACH;AAAA,MACF;AAAA;AAAA,IAEF,OAAO,MAAG;AAAA,MAAG;AAAA;AAAA,EACf,CAAC;AAAA;;ACxDH,eAAsB,YAAY,CAAC,KAA4B,WAAkC;AAAA,EAC/F,cAAc,KAAK,IAAI,WAAW,EAAE;AAAA,EACpC,MAAM,wBAAwB,KAAK;AAAA,IACjC,sBAAsB;AAAA,MACpB,IAAI,mBAAmB,CAAC;AAAA,MACxB,KAAK,EAAE,cAAc,IAAI,WAAW,IAAI,UAAU;AAAA,IACpD,CAAC;AAAA,EACH,CAAC;AAAA;AASH,eAAsB,aAAa,CAAC,KAA4B,WAAkC;AAAA,EAChG,cAAc,KAAK,IAAI,WAAW,EAAE;AAAA,EACpC,MAAM,wBAAwB,KAAK;AAAA,IACjC,uBAAuB;AAAA,MACrB,IAAI,mBAAmB,CAAC;AAAA,MACxB,KAAK,EAAE,cAAc,IAAI,WAAW,IAAI,UAAU;AAAA,IACpD,CAAC;AAAA,EACH,CAAC;AAAA;;;AC7BH,eAAsB,YAAY,CAChC,KACA,YACoB;AAAA,EACpB,cAAc,KAAK,IAAI,WAAW,EAAE;AAAA,EACpC,QAAQ,YAAY,mBAAmB,aAAa;AAAA,EAEpD,MAAM,aAAa,uBAAuB;AAAA,IACxC;AAAA,IACA;AAAA,IACA;AAAA,IACA,gBAAgB,SAAS,kBAAkB;AAAA,EAC7C,CAAC;AAAA,EACD,MAAM,MAAM,EAAE,cAAc,WAAW,IAAI,WAAW,WAAW,UAAU;AAAA,EAI3E,MAAM,SAAS,MAAM,wBAAwB,KAAK;AAAA,IAChD,sBAAsB,EAAE,IAAI,mBAAmB,CAAC,GAAG,KAAK,YAAY,WAAW,WAAW,CAAC;AAAA,EAC7F,CAAC;AAAA,EACD,OAAO,YAAY,IAAI,WAAW,uBAAuB,OAAO,SAAS,EAAE,CAAC;AAAA;;;AChB9E,eAAsB,iBAAiB,CACrC,KACA,OACgD;AAAA,EAChD,cAAc,KAAK,IAAI,WAAW,EAAE;AAAA,EACpC,QAAQ,YAAY,mBAAmB,aAAa;AAAA,EACpD,MAAM,iBAAiB,SAAS,kBAAkB;AAAA,EAElD,OAAO,oBAAoB;AAAA,IACzB;AAAA,IACA;AAAA,IACA,IAAI,CAAC,MAAM,OAAO;AAAA,MAChB,MAAM,aAAa,uBAAuB;AAAA,QACxC;AAAA,QACA;AAAA,QACA,YAAY,KAAK;AAAA,QACjB;AAAA,MACF,CAAC;AAAA,MACD,MAAM,MAAM,EAAE,cAAc,WAAW,IAAI,WAAW,WAAW,UAAU;AAAA,MAC3E,OAAO;AAAA,QAGL,KAAK,GAAG,IAAI,gBAAgB,IAAI;AAAA,QAChC,OAAO,WAAW,IAAI,gBAAgB,IAAI;AAAA,QAC1C,aAAa,oBAAoB,WAAW,UAAU;AAAA,QACtD,YAAY;AAAA,UACV,sBAAsB;AAAA,YACpB,IAAI,mBAAmB,KAAK;AAAA,YAC5B;AAAA,YACA,YAAY,WAAW;AAAA,UACzB,CAAC;AAAA,QACH;AAAA,MACF;AAAA;AAAA,IAEF,OAAO,EAAE,aAAa,YAAY,IAAI,WAAW,uBAAuB,OAAO,CAAC;AAAA,EAClF,CAAC;AAAA;;AChDH,uBAAS;AAaT,eAAsB,mBAAmB,CACvC,KACA,QACuC;AAAA,EAIvC,WAAW,gBAAgB,IAAI,IAAI,OAAO,IAAI,CAAC,UAAU,MAAM,OAAO,OAAO,YAAY,CAAC,GAAG;AAAA,IAC3F,yBAAyB,KAAK,YAAY;AAAA,EAC5C;AAAA,EACA,IAAI,OAAO,WAAW;AAAA,IAAG,OAAO;AAAA,EAEhC,IAAI;AAAA,EACJ,IAAI;AAAA,IACF,SAAS,MAAM,2BAA2B,GAAG,EAAE,gBAAgB;AAAA,MAC7D,QAAQ,EAAE,MAAM,WAAW,WAAW,YAAW,EAAE;AAAA,MACnD;AAAA,IACF,CAAC;AAAA,IACD,OAAO,OAAO;AAAA,IACd,IAAI,iBAAiB,oCAAoC;AAAA,MACvD,MAAM,IAAI,oBACR,MAAM,cACN,MAAM,WACN,uCACF;AAAA,IACF;AAAA,IACA,MAAM;AAAA;AAAA,EAER,OAAO;AAAA;;;AC5BT,SAAS,kBAAkB,CAAC,KAAuD;AAAA,EACjF,IAAI,QAAQ,QAAQ,OAAO,QAAQ,UAAU;AAAA,IAC3C,OAAO;AAAA,EACT;AAAA,EACA,MAAM,SAAS;AAAA,EACf,OAAO,WAAW,UAAU,OAAO,OAAO,SAAS,YAAY,OAAO,KAAK,MAAM,EAAE,WAAW;AAAA;AAGhG,eAAsB,oBAAoB,CACxC,KACA,OAKe;AAAA,EAIf,yBAAyB,KAAK,IAAI,WAAW,EAAE;AAAA,EAC/C,QAAQ,eAAe;AAAA,EAGvB,MAAM,SAAS,IAAI;AAAA,EAEnB,WAAW,QAAQ,OAAO;AAAA,IACxB,MAAM,MAAM,KAAK,MAAM,IAAI,MAAQ,YAAY;AAAA,IAE/C,YAAY,YAAY,aAAa,OAAO,QAAQ,KAAK,UAAU,GAAG;AAAA,MACpE,MAAM,gBAAgB,WAAW,EAAE;AAAA,MACnC,IAAI,CAAC,eAAe;AAAA,QAClB,MAAM,IAAI,wBAAwB,qBAAqB,WAAW,MAAM,aAAa;AAAA,MACvF;AAAA,MAEA,wBAAwB,cAAc,QAAQ;AAAA,MAG9C,MAAM,SAAS;AAAA,QACb,QAAQ,EAAE,cAAc,WAAW,IAAI,WAAW,KAAK,GAAG;AAAA,QAC1D,YAAY,cAAc;AAAA,MAC5B;AAAA,MACA,OAAO,IAAI,kBAAkB,QAAQ,EAAE,GAAG;AAAA,QACxC;AAAA,QACA,OAAO,mBAAmB,QAAQ,IAC7B,SAAS,QACT;AAAA,WACD,mBAAmB,QAAQ,IAAI,EAAE,MAAM,SAAS,KAAK,IAAI,CAAC;AAAA,QAC9D;AAAA,MACF,CAAC;AAAA,IACH;AAAA,EACF;AAAA,EAEA,MAAM,oBAAoB,KAAK,CAAC,GAAG,OAAO,OAAO,CAAC,CAAC;AAAA;;;ACzDrD,eAAsB,wBAAwB,CAC5C,OACA,SACkD;AAAA,EAClD,8BAA8B,MAAM,QAAQ,OAAO;AAAA,EACnD,OAAO,QAAQ,QAAQ,gBAAgB,KAAK;AAAA;AAG9C,SAAS,6BAA6B,CACpC,QACA,eACM;AAAA,EACN,WAAW,gBAAgB,IAAI,IAAI,OAAO,IAAI,CAAC,UAAU,MAAM,YAAY,CAAC,GAAG;AAAA,IAC7E,iBACE;AAAA,MACE,sBAAsB,cAAc;AAAA,MACpC,eAAe,cAAc,iBAAiB;AAAA,IAChD,GACA,EAAE,MAAM,eAAe,aAAa,CACtC;AAAA,EACF;AAAA;;ACrBK,SAAS,qBAAqB,CACnC,YACA,QACY;AAAA,EACZ,MAAM,MAAM,WAAW,MAAM,KAAK,CAAC,MAAM,EAAE,OAAO,MAAM;AAAA,EACxD,IAAI,CAAC;AAAA,IAAK,MAAM,IAAI,sBAAsB,iBAAiB,WAAW,MAAM,SAAS;AAAA,EACrF,OAAO;AAAA;AASF,SAAS,oBAAoB,CAClC,SACA,cACuB;AAAA,EACvB,MAAM,aAAa,QAAQ,SAAS,kBAAkB,YAAY;AAAA,EAClE,MAAM,oBAAoB,QAAQ,SAAS,qBAAqB,YAAY;AAAA,EAC5E,OAAO,KAAK,SAAS,YAAY,kBAAkB;AAAA;AAS9C,SAAS,kBAAkB,CAChC,QACA,QACqB;AAAA,EACrB,MAAM,iBAAiB,sBAAsB,OAAO,YAAY,MAAM;AAAA,EACtE,OAAO,KAAK,QAAQ,eAAe;AAAA;;AC3B9B,SAAS,sBAGf,CAAC,KAA4B,WAAmB;AAAA,EAC/C,OAAO,CACL,aAC0C;AAAA,IAC1C,QAAQ,eAAe;AAAA,IACvB,uCAAuC,YAAY,QAAQ;AAAA,IAC3D,wBAAwB,SAAS,QAAQ;AAAA,IAEzC,MAAM,SAAS,EAAE,cAAc,WAAW,IAAI,UAAU,WAAW,YAAY,SAAS,GAAG;AAAA,IAE3F,MAAM,UAAU;AAAA,MACd,QAAQ,OAAO,UAAuD;AAAA,QAEpE,MAAM,oBAAoB,KAAK;AAAA,UAC7B;AAAA,YACE,QAAQ;AAAA,cACN,QAAQ,EAAE,cAAc,WAAW,IAAI,UAAU;AAAA,cACjD,YAAY,SAAS;AAAA,YACvB;AAAA,YACA,OAAO,MAAM;AAAA,eACT,MAAM,SAAS,YAAY,EAAE,MAAM,MAAM,KAAK,IAAI,CAAC;AAAA,YACvD,IAAI,MAAM,GAAG,YAAY;AAAA,UAC3B;AAAA,QACF,CAAC;AAAA;AAAA,MAGH,SAAS,OAAO,QAA+B,CAAC,MAAM;AAAA,QACpD,MAAM,aAAa,IAAI,QAAQ;AAAA,QAC/B,IAAI,CAAC,YAAY;AAAA,UACf,MAAM,IAAI,aAAa,+DAA+D;AAAA,QACxF;AAAA,QAEA,OAAO,UAAU,MAAM,yBACrB;AAAA,UACE,WAAW,IAAI;AAAA,UACf,QAAQ,CAAC,MAAM;AAAA,aACX,MAAM,SAAS,YAAY,EAAE,MAAM,MAAM,KAAK,IAAI,CAAC;AAAA,aACnD,MAAM,OAAO,YAAY,EAAE,IAAI,MAAM,GAAG,IAAI,CAAC;AAAA,aAC7C,MAAM,UAAU,YAAY,EAAE,gBAAgB,MAAM,MAAM,IAAI,CAAC;AAAA,aAC/D,MAAM,UAAU,YAAY,EAAE,OAAO,MAAM,MAAM,IAAI,CAAC;AAAA,QAC5D,GACA;AAAA,UACE,SAAS;AAAA,UACT,sBAAsB,IAAI;AAAA,UAC1B,eAAe,IAAI;AAAA,QACrB,CACF;AAAA,QAEA,QAAQ,QAAQ,UAAU,CAAC,GAAG,IAAI,CAAC,WAAW;AAAA,UAC5C,OAAO,MAAM;AAAA,UACb,IAAI,MAAM;AAAA,aACN,MAAM,SAAS,YAAY,EAAE,MAAM,MAAM,KAAK,IAAI,CAAC;AAAA,QACzD,EAAE;AAAA;AAAA,IAEN;AAAA,IAGA,OAAO;AAAA;AAAA;;;AC1DJ,SAAS,sBAGf,CAAC,KAA6B,WAA+D;AAAA,EAC5F,MAAM,eAAe;AAAA,IACnB,KAAK,YAAY;AAAA,MACf,iBAAiB,KAAK,EAAE,MAAM,eAAe,cAAc,IAAI,WAAW,GAAG,CAAC;AAAA,MAC9E,MAAM,MAAM,MAAM,IAAI,QAAQ,QAAQ,eAAe;AAAA,QACnD,WAAW,IAAI;AAAA,QACf,cAAc,IAAI,WAAW;AAAA,QAC7B;AAAA,MACF,CAAC;AAAA,MACD,OAAO,MAAO,MAA0D;AAAA;AAAA,IAG1E,WAAW,OAAO,cAA6B;AAAA,MAE7C,iBAAiB,KAAK,WAAW;AAAA,MACjC,IAAI,WAAW;AAAA,QACb,mCAAmC,IAAI,YAAY,SAAS;AAAA,MAC9D;AAAA,MACA,OAAO,IAAI,QAAQ,QAAQ,UAAU;AAAA,QACnC,WAAW,IAAI;AAAA,QACf,cAAc,IAAI,WAAW;AAAA,QAC7B,UAAU;AAAA,QACV,QAAQ,WAAW;AAAA,MACrB,CAAC;AAAA;AAAA,IAGH,MAAM,OACJ,WACA,QACA,YACG;AAAA,MACH,mCAAmC,IAAI,YAAY,SAAS;AAAA,MAE5D,MAAM,UAA+B,KAAK,KAAK,gBAAgB,UAAU,KAAK;AAAA,MAC9E,MAAM,WAAe,SAAS;AAAA,QAC5B,UAAU;AAAA,QACV,QAAQ,UAAU;AAAA,QAClB,cAAc,OAAO;AAAA,QACrB,UAAU,OAAO;AAAA,QACjB,YAAY,SAAS;AAAA,MACvB,CAAC;AAAA;AAAA,IAGH,QAAQ,OAAO,WAAyB,WAA2B;AAAA,MACjE,mCAAmC,IAAI,YAAY,SAAS;AAAA,MAE5D,MAAM,UAA+B,KAAK,KAAK,gBAAgB,UAAU,KAAK;AAAA,MAC9E,MAAM,WAAe,SAAS;AAAA,QAC5B,UAAU;AAAA,QACV,QAAQ,UAAU;AAAA,QAClB,cAAc,OAAO;AAAA,QACrB,UAAU,OAAO;AAAA,MACnB,CAAC;AAAA;AAAA,IAGH,QAAQ,YAAY;AAAA,MAClB,MAAM,aAAa,KAAK,SAAS;AAAA;AAAA,IAGnC,SAAS,YAAY;AAAA,MACnB,MAAM,cAAc,KAAK,SAAS;AAAA;AAAA,IAGpC,eAAe,OAAO,UAKhB;AAAA,MACJ,MAAM,WAAW,MAAM,QAAQ,MAAM,MAAM;AAAA,MAC3C,IAAI,CAAC,UAAU;AAAA,QACb,MAAM,IAAI,wBACR,6DACF;AAAA,MACF;AAAA,MACA,OAAO,eAAkB,KAAK;AAAA,QAC5B;AAAA,QACA;AAAA,QACA,QAAQ,MAAM;AAAA,QACd,SAAS,EAAE,OAAO,MAAM,MAAM;AAAA,MAChC,CAAC;AAAA;AAAA,IAGH,sBAAsB,OAAO,UAMvB;AAAA,MACJ,MAAM,WAAW,MAAM,QAAQ,MAAM,MAAM;AAAA,MAC3C,IAAI,CAAC,UAAU;AAAA,QACb,MAAM,IAAI,wBACR,oEACF;AAAA,MACF;AAAA,MACA,OAAO,sBAAyB,KAAK;AAAA,QACnC;AAAA,QACA;AAAA,QACA,QAAQ,MAAM;AAAA,QACd,SAAS;AAAA,UACP,WAAW,MAAM;AAAA,UACjB,QAAQ,MAAM;AAAA,QAChB;AAAA,MACF,CAAC;AAAA;AAAA,IAGH,WAAW,uBAAiD,KAAK,SAAS;AAAA,EAC5E;AAAA,EAEA,OAAO;AAAA;;;ACnHF,SAAS,0BAA0B,CAAC,QAMnB;AAAA,EACtB,QAAQ,WAAW,UAAU,SAAS,sBAAsB,kBAAkB;AAAA,EAC9E,MAAM,kBAAkB;AAAA,IACtB;AAAA,IACA,SAAS,QAAQ;AAAA,IACjB;AAAA,IACA;AAAA,EACF;AAAA,EAEA,OAAO;AAAA,SACC,KAAI,CAAC,OAAoB,SAAsC;AAAA,MACnE,IAAI;AAAA,QACF,OAAO,MAAM,mBACX,EAAE,WAAW,OAAO,cAAc,SAAS,aAAa,GACxD,eACF;AAAA,QACA,OAAO,OAAO;AAAA,QACd,IAAI,iBAAiB,0BAA0B;AAAA,UAC7C,MAAM,oBAAoB,KAAK;AAAA,QACjC;AAAA,QACA,MAAM;AAAA;AAAA;AAAA,SAIJ,MAAK,CAAC,OAAoB;AAAA,MAC9B,MAAM,SAAS,MAAM,aAAa,EAAE,WAAW,MAAM,GAAG,eAAe;AAAA,MACvE,OAAO,OAAO;AAAA;AAAA,SAGV,OAAM,CAAC,OAAoB;AAAA,MAC/B,MAAM,SAAS,MAAM,cAAc,EAAE,WAAW,MAAM,GAAG,eAAe;AAAA,MACxE,OAAO,OAAO;AAAA;AAAA,SAGV,OAAM,CAAC,OAAoB,QAAoD;AAAA,MACnF,MAAM,SAAS,MAAM,aAAa,EAAE,WAAW,OAAO,OAAO,GAAG,eAAe;AAAA,MAC/E,OAAO,OAAO,OAAO,IAAI,CAAC,WAAW;AAAA,QACnC,YAAY,MAAM;AAAA,QAClB,SAAS,CAAC,GAAG,MAAM,OAAO;AAAA,MAC5B,EAAE;AAAA;AAAA,IAGJ,QAAQ,CAAC,OAAoB;AAAA,MAC3B,OAAO,oBAAoB,OAAO,EAAE,UAAU,WAAW,MAAM,CAAC;AAAA;AAAA,IAGlE,OAAO,CAAC,OAAoB;AAAA,MAC1B,OAAO,mBAAmB,OAAO,EAAE,UAAU,WAAW,MAAM,CAAC;AAAA;AAAA,EAEnE;AAAA;AAGF,SAAS,mBAAmB,CAAC,OAA2D;AAAA,EACtF,IAAI,CAAC,MAAM,OAAO,KAAK,CAAC,UAAU,MAAM,SAAS,yBAAyB;AAAA,IAAG,OAAO;AAAA,EAEpF,OAAO,IAAI,yBACT,MAAM,OAAO,IAAI,CAAC,UAChB,MAAM,SAAS,4BACX;AAAA,OACK;AAAA,IACH,SACE;AAAA,EACJ,IACA,KACN,CACF;AAAA;;;AC3DK,SAAS,eAIf,CACC,QAK6D;AAAA,EAC7D,QAAQ,eAAe;AAAA,EACvB,MAAM,cAAc,WAAW,WAAW,KAAK,CAAC,MAAM,EAAE,OAAO;AAAA,EAC/D,IAAI,CAAC,aAAa;AAAA,IAChB,MAAM,IAAI,wBAAwB,gBAAgB,WAAW,6BAA6B;AAAA,EAC5F;AAAA,EACA,MAAM,oBAAoB,YAAY;AAAA,EAEtC;AAAA,IACE;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,MACE;AAAA,EACJ,MAAM,gBAAgB,2BAA2B;AAAA,IAC/C;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF,CAAC;AAAA,EAED,MAAM,cAAsC;AAAA,IAC1C;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF;AAAA,EACA,6BAA6B,QAAQ,WAAW;AAAA,EAChD,uBAAuB,QAAQ,WAAW;AAAA,EAE1C,MAAM,YAAY;AAAA,IAChB,KAAK,OAAO,OAAe;AAAA,MACzB,iBAAiB,aAAa,EAAE,MAAM,eAAe,cAAc,WAAW,GAAG,CAAC;AAAA,MAClF,MAAM,MAAM,MAAM,QAAQ,QAAQ,eAAe;AAAA,QAC/C;AAAA,QACA,cAAc,WAAW;AAAA,QACzB,WAAW;AAAA,MACb,CAAC;AAAA,MACD,OAAO,MAAO,MAA0D;AAAA;AAAA,IAG1E,QAAQ,OAAO,UAAmD;AAAA,MAChE,MAAM,MAAM,MAAM,aAAiB,aAAa,MAAM,UAAU;AAAA,MAChE,OAAO;AAAA;AAAA,IAGT,OAAO,MACL,yBAA2E;AAAA,MACzE,OAAO,EAAE,MAAM,SAAS,cAAc,WAAW,GAAG;AAAA,MACpD,UAAU;AAAA,IACZ,CAAC;AAAA,IAEH,MAAM,CAAC,OAAe,uBAAiD,aAAa,EAAE;AAAA,IAEtF,MAAM,OAAO,UAA+B;AAAA,MAC1C,iBAAiB,aAAa,EAAE,MAAM,eAAe,cAAc,WAAW,GAAG,CAAC;AAAA,MAClF,MAAM,SAAS,MAAM,QAAQ,QAAQ,KAAK;AAAA,QACxC;AAAA,QACA,cAAc,WAAW;AAAA,QACzB,iBAAiB,OAAO;AAAA,QACxB,iBAAiB,OAAO;AAAA,QACxB,cAAc,OAAO;AAAA,QACrB,eAAe,OAAO;AAAA,QACtB,cAAc,OAAO;AAAA,QACrB,eAAe,OAAO;AAAA,QACtB,OAAO,OAAO;AAAA,QACd,QAAQ,OAAO;AAAA,QACf,SAAS,OAAO;AAAA,QAChB,OAAO,OAAO;AAAA,MAChB,CAAC;AAAA,MAED,OAAO;AAAA,QACL,SAAS,OAAO,QAAQ,IACtB,CAAC,QAAQ,GACX;AAAA,QACA,SAAS,OAAO;AAAA,QAChB,OAAO,OAAO,SAAS,OAAO,QAAQ;AAAA,MACxC;AAAA;AAAA,IAGF,sBAAsB,OACpB,UAKG;AAAA,MACH,MAAM,qBAAyB,aAAa,KAAK;AAAA;AAAA,IAGnD,eAAe,OAAO,UAMhB;AAAA,MACJ,MAAM,WAAW,MAAM,QAAQ,MAAM,MAAM;AAAA,MAC3C,IAAI,CAAC,UAAU;AAAA,QACb,MAAM,IAAI,wBACR,6DACF;AAAA,MACF;AAAA,MACA,OAAO,eAAkB,aAAa;AAAA,QACpC,WAAW,MAAM;AAAA,QACjB;AAAA,QACA,QAAQ,MAAM;AAAA,QACd,SAAS,EAAE,OAAO,MAAM,MAAM;AAAA,MAChC,CAAC;AAAA;AAAA,IAGH,sBAAsB,OAAO,UAOvB;AAAA,MACJ,MAAM,WAAW,MAAM,QAAQ,MAAM,MAAM;AAAA,MAC3C,IAAI,CAAC,UAAU;AAAA,QACb,MAAM,IAAI,wBACR,oEACF;AAAA,MACF;AAAA,MACA,OAAO,sBAAyB,aAAa;AAAA,QAC3C,WAAW,MAAM;AAAA,QACjB;AAAA,QACA,QAAQ,MAAM;AAAA,QACd,SAAS;AAAA,UACP,WAAW,MAAM;AAAA,UACjB,QAAQ,MAAM;AAAA,QAChB;AAAA,MACF,CAAC;AAAA;AAAA,IAGH,YAAY,OAAO,UAMb;AAAA,MACJ,MAAM,iBAAiB,sBAAsB,YAAY,MAAM,MAAM;AAAA,MACrE,MAAM,UAA+B,KAAK,aAAa,eAAe;AAAA,MAEtE,MAAM,WAAe,SAAS;AAAA,QAC5B,UAAU,MAAM;AAAA,QAChB,QAAQ,MAAM;AAAA,QACd,cAAc,MAAM;AAAA,QACpB,UAAU,MAAM;AAAA,QAChB,YAAY,MAAM;AAAA,MACpB,CAAC;AAAA;AAAA,IAGH,YAAY,OAAO,UAKb;AAAA,MACJ,MAAM,iBAAiB,sBAAsB,YAAY,MAAM,MAAM;AAAA,MACrE,MAAM,UAA+B,KAAK,aAAa,eAAe;AAAA,MAEtE,MAAM,WAAe,SAAS;AAAA,QAC5B,UAAU,MAAM;AAAA,QAChB,QAAQ,MAAM;AAAA,QACd,cAAc,MAAM;AAAA,QACpB,UAAU,MAAM;AAAA,MAClB,CAAC;AAAA;AAAA,EAEL;AAAA,EAEA,OAAO;AAAA;;;;;;;;;;;;;;;;ACtNT,eAAsB,cAAa,CACjC,SACA,WACA,cACA,WACA,UACA,QACA,SAC8B;AAAA,EAC9B,MAAM,MAAM,KAAK,qBAAqB,SAAS,YAAY,GAAG,UAAU;AAAA,EACxE,OAAO,eAAkB,KAAK,EAAE,WAAW,UAAU,QAAQ,QAAQ,CAAC;AAAA;AAGxE,eAAsB,qBAAoB,CACxC,SACA,WACA,cACA,WACA,UACA,QACA,SAC0B;AAAA,EAC1B,MAAM,MAAM,KAAK,qBAAqB,SAAS,YAAY,GAAG,UAAU;AAAA,EACxE,OAAO,sBAAyB,KAAK,EAAE,WAAW,UAAU,QAAQ,QAAQ,CAAC;AAAA;;AC3B/E,eAAsB,WAAU,CAC9B,SACA,cACA,UACA,QACA,QACe;AAAA,EACf,MAAM,MAAM,qBAAqB,SAAS,YAAY;AAAA,EACtD,MAAM,UAAU,mBAAmB,KAAK,MAAM;AAAA,EAC9C,MAAM,WAAe,SAAS;AAAA,IAC5B;AAAA,IACA;AAAA,IACA,cAAc,OAAO;AAAA,IACrB,UAAU,OAAO;AAAA,IACjB,YAAY,OAAO;AAAA,EACrB,CAAC;AAAA;AAGH,eAAsB,gBAAe,CACnC,SACA,OAM2C;AAAA,EAC3C,MAAM,gBAAyC,MAAM,IAAI,CAAC,SAAS;AAAA,IACjE,MAAM,aAAa,QAAQ,SAAS,kBAAkB,KAAK,YAAY;AAAA,IACvE,MAAM,iBAAiB,sBAAsB,YAAY,KAAK,MAAM;AAAA,IACpE,OAAO;AAAA,MACL;AAAA,MACA;AAAA,MACA,UAAU,KAAK;AAAA,MACf,QAAQ,KAAK;AAAA,MACb,cAAc,KAAK,OAAO;AAAA,MAC1B,UAAU,KAAK,OAAO;AAAA,MACtB,YAAY,KAAK,OAAO;AAAA,IAC1B;AAAA,GACD;AAAA,EAED,OAAO,gBAAoB,SAAS,aAAa;AAAA;AAGnD,eAAsB,WAAU,CAC9B,SACA,cACA,UACA,QACA,QACe;AAAA,EACf,MAAM,MAAM,qBAAqB,SAAS,YAAY;AAAA,EACtD,MAAM,UAAU,mBAAmB,KAAK,MAAM;AAAA,EAC9C,MAAM,WAAe,SAAS;AAAA,IAC5B;AAAA,IACA;AAAA,IACA,cAAc,OAAO;AAAA,IACrB,UAAU,OAAO;AAAA,EACnB,CAAC;AAAA;;AC9CH,eAAsB,WAAW,CAC/B,SACA,QACgC;AAAA,EAChC,MAAM,gBAAgB,4BAA4B,SAAS,OAAO,aAAa;AAAA,EAE/E,IAAI,QAAQ,iBAAiB,kBAAkB,aAAa,cAAc,WAAW,GAAG;AAAA,IACtF,OAAO,EAAE,SAAS,CAAC,GAAG,SAAS,OAAO,OAAO,EAAE;AAAA,EACjD;AAAA,EAEA,MAAM,SAAS,MAAM,QAAQ,QAAQ,QAAQ,KAAK;AAAA,IAChD,WAAW,QAAQ;AAAA,IACnB,cAAc,eAAe,WAAW,IAAI,cAAc,KAAK;AAAA,IAC/D,iBAAiB,OAAO;AAAA,IACxB,iBAAiB,OAAO;AAAA,IACxB,cAAc,OAAO;AAAA,IACrB,eAAe,OAAO;AAAA,IACtB,cAAc,OAAO;AAAA,IACrB,eAAe,OAAO;AAAA,IACtB,OAAO,OAAO;AAAA,IACd,QAAQ,OAAO;AAAA,IACf,SAAS,OAAO;AAAA,IAChB,OAAO,OAAO;AAAA,EAChB,CAAC;AAAA,EAED,OAAO;AAAA,IACL,SAAS,CAAC,GAAG,OAAO,OAAO;AAAA,IAC3B,SAAS,OAAO;AAAA,IAChB,OAAO,OAAO;AAAA,EAChB;AAAA;AAGF,SAAS,2BAA2B,CAClC,SACA,WAC+B;AAAA,EAC/B,IAAI,WAAW;AAAA,IACb,WAAW,gBAAgB,WAAW;AAAA,MACpC,QAAQ,SAAS,kBAAkB,YAAY;AAAA,IACjD;AAAA,EACF;AAAA,EAEA,MAAM,WAAW,YACb,CAAC,GAAG,IAAI,IAAI,UAAU,QAAQ,CAAC,OAAO,CAAC,IAAI,GAAG,QAAQ,SAAS,aAAa,EAAE,CAAC,CAAC,CAAC,CAAC,IAClF;AAAA,EAEJ,IAAI,CAAC,QAAQ,eAAe;AAAA,IAC1B,OAAO;AAAA,EACT;AAAA,EAEA,IAAI,CAAC,UAAU;AAAA,IAGb,OAAO,CAAC,GAAG,QAAQ,cAAc,OAAO,cAAc;AAAA,EACxD;AAAA,EAGA,WAAW,gBAAgB,UAAU;AAAA,IACnC,iBAAiB,SAAS,EAAE,MAAM,eAAe,aAAa,CAAC;AAAA,EACjE;AAAA,EAEA,OAAO;AAAA;;AC1ET,eAAsB,aAAY,CAChC,SACA,cACA,YACoB;AAAA,EACpB,OAAO,aAAiB,qBAAqB,SAAS,YAAY,GAAG,UAAU;AAAA;AAGjF,eAAsB,kBAAiB,CACrC,SACA,cACA,OACgD;AAAA,EAChD,OAAO,kBAAsB,qBAAqB,SAAS,YAAY,GAAG,KAAK;AAAA;;ACjBjF,eAAsB,eAAe,CACnC,SACA,cACA,OACe;AAAA,EACf,MAAM,MAAM,qBAAqB,SAAS,YAAY;AAAA,EACtD,MAAM,qBAAyB,KAAK,KAAK;AAAA;",
-  "debugId": "907DECCEF177EB6A64756E2164756E21",
-  "names": []
-}

package/dist/chunk-gbrpsx4m.js.map

@@ -1,11 +0,0 @@
-{
-  "version": 3,
-  "sources": ["../src/storage/executions/errors.ts", "../src/storage/executions/validation.ts"],
-  "sourcesContent": [
-    "export type ExecutionStorageErrorCode =\n  | \"duplicate_execution\"\n  | \"invalid_credential\"\n  | \"invalid_input\"\n  | \"invalid_parent_execution\"\n  | \"missing_credential\"\n  | \"missing_parent_execution\"\n  | \"missing_principal\"\n\n/** Stable error raised when an execution record would violate ledger invariants. */\nexport class ExecutionStorageError extends Error {\n  readonly name = \"ExecutionStorageError\"\n\n  constructor(\n    readonly code: ExecutionStorageErrorCode,\n    message: string,\n    options: ErrorOptions = {}\n  ) {\n    super(message, options)\n  }\n}\n",
-    "import { isDeepStrictEqual } from \"node:util\"\nimport type {\n  AuthorizablePrincipal,\n  AuthorizationRef,\n  KernelOperation,\n} from \"../../execution/types\"\nimport type { AuthStorage } from \"../auth\"\nimport { ExecutionStorageError } from \"./errors\"\nimport type {\n  CreateExecutionInput,\n  DurableExecutionExecutor,\n  DurableExecutionSource,\n  ExecutionRecord,\n} from \"./types\"\n\nexport interface ExecutionValidationLookup {\n  readonly auth: AuthStorage\n  getExecution(params: {\n    readonly projectId: string\n    readonly id: string\n  }): Promise<ExecutionRecord | null>\n}\n\nexport function normalizeExecutionRecord(\n  input: CreateExecutionInput,\n  createdAt: Date = new Date()\n): ExecutionRecord {\n  const record: ExecutionRecord = {\n    id: input.id,\n    projectId: input.projectId,\n    ...(input.requestedBy === undefined ? {} : { requestedBy: structuredClone(input.requestedBy) }),\n    executor: structuredClone(input.executor),\n    source: structuredClone(input.source),\n    correlationId: input.correlationId,\n    authorizationRef: structuredClone(input.authorizationRef),\n    createdAt: new Date(createdAt),\n  }\n\n  assertRecordShape(record)\n  assertExecutorAuthority(record)\n  return record\n}\n\nexport async function validateExecutionRecordReferences(\n  record: ExecutionRecord,\n  lookup: ExecutionValidationLookup\n): Promise<void> {\n  await validatePrincipal(record.requestedBy, record.projectId, \"Requested-by principal\", lookup)\n\n  if (record.authorizationRef.type === \"principal\") {\n    await validatePrincipal(\n      record.authorizationRef.principal,\n      record.projectId,\n      \"Authority principal\",\n      lookup\n    )\n    await validateCredential(record, lookup)\n  }\n\n  await validateParent(record, lookup)\n}\n\nexport function cloneExecutionRecord(record: ExecutionRecord): ExecutionRecord {\n  return structuredClone(record)\n}\n\nfunction assertRecordShape(record: ExecutionRecord): void {\n  assertNonBlank(record.id, \"Execution id\")\n  assertNonBlank(record.projectId, \"Execution project id\")\n  assertNonBlank(record.correlationId, \"Execution correlation id\")\n  assertValidDate(record.createdAt, \"Execution createdAt\")\n\n  if (record.requestedBy) {\n    assertPrincipal(record.requestedBy, \"Requested-by principal\")\n  }\n\n  assertExecutor(record.executor)\n  assertSource(record.source)\n  assertAuthorizationRef(record.authorizationRef)\n}\n\nfunction assertExecutor(executor: DurableExecutionExecutor): void {\n  switch (executor.type) {\n    case \"request\":\n      assertNonBlank(executor.requestId, \"Executor request id\")\n      return\n    case \"primitive\":\n      assertTrustedPrimitiveKind(executor.kind, \"Executor primitive kind\")\n      assertNonBlank(executor.runId, \"Executor primitive run id\")\n      return\n    case \"agent\":\n      assertNonBlank(executor.runId, \"Executor agent run id\")\n      return\n    case \"kernel\":\n      assertKernelOperation(executor.operation, \"Executor kernel operation\")\n      return\n    default:\n      invalid(`Unknown execution executor type '${String((executor as { type?: unknown }).type)}'.`)\n  }\n}\n\nfunction assertSource(source: DurableExecutionSource): void {\n  switch (source.type) {\n    case \"http\":\n      assertNonBlank(source.requestId, \"Execution source request id\")\n      return\n    case \"webhook\":\n      assertNonBlank(source.deliveryId, \"Execution source delivery id\")\n      return\n    case \"schedule\":\n    case \"event\":\n      assertNonBlank(source.eventId, \"Execution source event id\")\n      return\n    case \"datasetVersion\":\n      assertNonBlank(source.datasetId, \"Execution source dataset id\")\n      assertNonBlank(source.versionId, \"Execution source dataset version id\")\n      return\n    case \"execution\":\n      assertNonBlank(source.executionId, \"Execution source execution id\")\n      return\n    default:\n      invalid(\n        `Execution source type '${String((source as { type?: unknown }).type)}' is not durable.`\n      )\n  }\n}\n\nfunction assertAuthorizationRef(ref: AuthorizationRef): void {\n  switch (ref.type) {\n    case \"principal\":\n      assertPrincipal(ref.principal, \"Authority principal\")\n      if (ref.credential) {\n        if (ref.credential.type !== \"session\" && ref.credential.type !== \"accessToken\") {\n          invalid(\n            `Unknown authority credential type '${String(\n              (ref.credential as { type?: unknown }).type\n            )}'.`\n          )\n        }\n        assertNonBlank(ref.credential.id, \"Authority credential id\")\n      }\n      return\n    case \"trustedPrimitive\":\n      assertTrustedPrimitiveKind(ref.primitive.kind, \"Authority primitive kind\")\n      assertNonBlank(ref.primitive.id, \"Authority primitive id\")\n      assertNonBlank(ref.primitive.runId, \"Authority primitive run id\")\n      return\n    case \"kernel\":\n      assertKernelOperation(ref.operation, \"Authority kernel operation\")\n      return\n    case \"disabled\":\n      return\n    default:\n      invalid(`Unknown authorization reference type '${String((ref as { type?: unknown }).type)}'.`)\n  }\n}\n\nfunction assertExecutorAuthority(record: ExecutionRecord): void {\n  const { executor, authorizationRef, requestedBy, source } = record\n\n  switch (executor.type) {\n    case \"request\": {\n      if (source.type !== \"http\" || source.requestId !== executor.requestId) {\n        invalid(\"Request executions require a matching HTTP source request id.\")\n      }\n      if (authorizationRef.type === \"principal\") {\n        if (!principalsEqual(requestedBy, authorizationRef.principal)) {\n          invalid(\"Request authority must match its requested-by principal.\")\n        }\n        return\n      }\n      if (authorizationRef.type === \"disabled\") {\n        if (requestedBy !== undefined) {\n          invalid(\"Auth-disabled request executions cannot have a requested-by principal.\")\n        }\n        return\n      }\n      invalid(\"Request executions require principal or explicitly disabled authority.\")\n      break\n    }\n    case \"primitive\": {\n      if (authorizationRef.type !== \"trustedPrimitive\") {\n        invalid(\"Primitive executions require trusted primitive authority.\")\n      }\n      if (\n        authorizationRef.primitive.kind !== executor.kind ||\n        authorizationRef.primitive.runId !== executor.runId\n      ) {\n        invalid(\"Trusted primitive authority must match the executor kind and run id.\")\n      }\n      return\n    }\n    case \"agent\": {\n      if (source.type !== \"execution\") {\n        invalid(\"Agent executions require a parent execution source.\")\n      }\n      if (\n        authorizationRef.type === \"principal\" &&\n        authorizationRef.principal.type === \"serviceAccount\" &&\n        authorizationRef.credential === undefined\n      ) {\n        return\n      }\n      if (\n        authorizationRef.type === \"principal\" &&\n        authorizationRef.principal.type === \"user\" &&\n        authorizationRef.credential !== undefined\n      ) {\n        return\n      }\n      if (authorizationRef.type === \"disabled\") return\n      invalid(\n        \"Agent executions require managed service-account, credentialed user, or explicitly disabled authority.\"\n      )\n      break\n    }\n    case \"kernel\": {\n      if (\n        authorizationRef.type !== \"kernel\" ||\n        !kernelOperationsEqual(authorizationRef.operation, executor.operation)\n      ) {\n        invalid(\"Kernel authority must match the executor operation.\")\n      }\n      if (requestedBy !== undefined) {\n        invalid(\"Kernel executions cannot have a requested-by principal.\")\n      }\n      return\n    }\n  }\n}\n\nasync function validatePrincipal(\n  principal: AuthorizablePrincipal | undefined,\n  projectId: string,\n  label: string,\n  lookup: ExecutionValidationLookup\n): Promise<void> {\n  if (!principal) return\n\n  const record =\n    principal.type === \"user\"\n      ? await lookup.auth.users.getById({ projectId, id: principal.id })\n      : await lookup.auth.serviceAccounts.getById({ projectId, id: principal.id })\n  if (!record) {\n    throw new ExecutionStorageError(\n      \"missing_principal\",\n      `[Sixb] ${label} '${principal.id}' does not exist in project '${projectId}'.`\n    )\n  }\n}\n\nasync function validateCredential(\n  record: ExecutionRecord,\n  lookup: ExecutionValidationLookup\n): Promise<void> {\n  if (record.authorizationRef.type !== \"principal\" || !record.authorizationRef.credential) return\n\n  const { principal, credential } = record.authorizationRef\n  if (credential.type === \"session\") {\n    const session = await lookup.auth.sessions.getById({\n      projectId: record.projectId,\n      id: credential.id,\n    })\n    if (!session) {\n      throw new ExecutionStorageError(\n        \"missing_credential\",\n        `[Sixb] Authority session '${credential.id}' does not exist in project '${record.projectId}'.`\n      )\n    }\n    if (principal.type !== \"user\" || session.userId !== principal.id) {\n      throw new ExecutionStorageError(\n        \"invalid_credential\",\n        `[Sixb] Authority session '${credential.id}' does not belong to principal '${principal.id}'.`\n      )\n    }\n    return\n  }\n\n  const token = await lookup.auth.accessTokens.getById({\n    projectId: record.projectId,\n    id: credential.id,\n  })\n  if (!token) {\n    throw new ExecutionStorageError(\n      \"missing_credential\",\n      `[Sixb] Authority access token '${credential.id}' does not exist in project '${record.projectId}'.`\n    )\n  }\n  if (token.subjectType !== principal.type || token.subjectId !== principal.id) {\n    throw new ExecutionStorageError(\n      \"invalid_credential\",\n      `[Sixb] Authority access token '${credential.id}' does not belong to principal '${principal.id}'.`\n    )\n  }\n}\n\nasync function validateParent(\n  record: ExecutionRecord,\n  lookup: ExecutionValidationLookup\n): Promise<void> {\n  if (record.source.type !== \"execution\") return\n  const parentExecutionId = record.source.executionId\n\n  const parent = await lookup.getExecution({\n    projectId: record.projectId,\n    id: parentExecutionId,\n  })\n  if (!parent) {\n    throw new ExecutionStorageError(\n      \"missing_parent_execution\",\n      `[Sixb] Parent execution '${parentExecutionId}' does not exist in project '${record.projectId}'.`\n    )\n  }\n  if (parent.correlationId !== record.correlationId) {\n    throw new ExecutionStorageError(\n      \"invalid_parent_execution\",\n      `[Sixb] Child execution '${record.id}' must preserve its parent correlation id.`\n    )\n  }\n  if (!principalsEqual(parent.requestedBy, record.requestedBy)) {\n    throw new ExecutionStorageError(\n      \"invalid_parent_execution\",\n      `[Sixb] Child execution '${record.id}' must preserve its parent requested-by principal.`\n    )\n  }\n  if (\n    record.executor.type === \"agent\" &&\n    isInheritedAgentAuthority(record.authorizationRef) &&\n    !isDeepStrictEqual(parent.authorizationRef, record.authorizationRef)\n  ) {\n    throw new ExecutionStorageError(\n      \"invalid_parent_execution\",\n      `[Sixb] Child Agent execution '${record.id}' must inherit its parent's authorization reference.`\n    )\n  }\n}\n\nfunction isInheritedAgentAuthority(ref: AuthorizationRef): boolean {\n  return (\n    ref.type === \"disabled\" ||\n    (ref.type === \"principal\" && ref.principal.type === \"user\" && ref.credential !== undefined)\n  )\n}\n\nfunction assertPrincipal(principal: AuthorizablePrincipal, label: string): void {\n  if (principal.type !== \"user\" && principal.type !== \"serviceAccount\") {\n    invalid(`${label} has unsupported type '${String((principal as { type?: unknown }).type)}'.`)\n  }\n  assertNonBlank(principal.id, `${label} id`)\n}\n\nfunction assertKernelOperation(operation: KernelOperation, label: string): void {\n  if (operation.type !== \"ontology.recover\") {\n    invalid(`${label} has unsupported type '${String((operation as { type?: unknown }).type)}'.`)\n  }\n  assertNonBlank(operation.recoveryId, `${label} recovery id`)\n}\n\nfunction assertTrustedPrimitiveKind(value: string, label: string): void {\n  if (!TRUSTED_PRIMITIVE_KINDS.has(value)) {\n    invalid(`${label} '${value}' is not supported.`)\n  }\n}\n\nfunction assertNonBlank(value: string, label: string): void {\n  if (typeof value !== \"string\" || !value.trim()) {\n    invalid(`${label} must be a non-empty string.`)\n  }\n}\n\nfunction assertValidDate(value: Date, label: string): void {\n  if (!(value instanceof Date) || !Number.isFinite(value.getTime())) {\n    invalid(`${label} must be a valid date.`)\n  }\n}\n\nfunction principalsEqual(\n  left: AuthorizablePrincipal | undefined,\n  right: AuthorizablePrincipal | undefined\n): boolean {\n  return left?.type === right?.type && left?.id === right?.id\n}\n\nfunction kernelOperationsEqual(left: KernelOperation, right: KernelOperation): boolean {\n  return left.type === right.type && left.recoveryId === right.recoveryId\n}\n\nfunction invalid(message: string): never {\n  throw new ExecutionStorageError(\"invalid_input\", `[Sixb] ${message}`)\n}\n\nconst TRUSTED_PRIMITIVE_KINDS = new Set([\n  \"action\",\n  \"pipeline\",\n  \"projection\",\n  \"rule\",\n  \"sync\",\n  \"webhook\",\n  \"workflow\",\n])\n"
-  ],
-  "mappings": ";;AAUO,MAAM,8BAA8B,MAAM;AAAA,EAIpC;AAAA,EAHF,OAAO;AAAA,EAEhB,WAAW,CACA,MACT,SACA,UAAwB,CAAC,GACzB;AAAA,IACA,MAAM,SAAS,OAAO;AAAA,IAJb;AAAA;AAMb;;;ACpBA;AAuBO,SAAS,wBAAwB,CACtC,OACA,YAAkB,IAAI,MACL;AAAA,EACjB,MAAM,SAA0B;AAAA,IAC9B,IAAI,MAAM;AAAA,IACV,WAAW,MAAM;AAAA,OACb,MAAM,gBAAgB,YAAY,CAAC,IAAI,EAAE,aAAa,gBAAgB,MAAM,WAAW,EAAE;AAAA,IAC7F,UAAU,gBAAgB,MAAM,QAAQ;AAAA,IACxC,QAAQ,gBAAgB,MAAM,MAAM;AAAA,IACpC,eAAe,MAAM;AAAA,IACrB,kBAAkB,gBAAgB,MAAM,gBAAgB;AAAA,IACxD,WAAW,IAAI,KAAK,SAAS;AAAA,EAC/B;AAAA,EAEA,kBAAkB,MAAM;AAAA,EACxB,wBAAwB,MAAM;AAAA,EAC9B,OAAO;AAAA;AAGT,eAAsB,iCAAiC,CACrD,QACA,QACe;AAAA,EACf,MAAM,kBAAkB,OAAO,aAAa,OAAO,WAAW,0BAA0B,MAAM;AAAA,EAE9F,IAAI,OAAO,iBAAiB,SAAS,aAAa;AAAA,IAChD,MAAM,kBACJ,OAAO,iBAAiB,WACxB,OAAO,WACP,uBACA,MACF;AAAA,IACA,MAAM,mBAAmB,QAAQ,MAAM;AAAA,EACzC;AAAA,EAEA,MAAM,eAAe,QAAQ,MAAM;AAAA;AAG9B,SAAS,oBAAoB,CAAC,QAA0C;AAAA,EAC7E,OAAO,gBAAgB,MAAM;AAAA;AAG/B,SAAS,iBAAiB,CAAC,QAA+B;AAAA,EACxD,eAAe,OAAO,IAAI,cAAc;AAAA,EACxC,eAAe,OAAO,WAAW,sBAAsB;AAAA,EACvD,eAAe,OAAO,eAAe,0BAA0B;AAAA,EAC/D,gBAAgB,OAAO,WAAW,qBAAqB;AAAA,EAEvD,IAAI,OAAO,aAAa;AAAA,IACtB,gBAAgB,OAAO,aAAa,wBAAwB;AAAA,EAC9D;AAAA,EAEA,eAAe,OAAO,QAAQ;AAAA,EAC9B,aAAa,OAAO,MAAM;AAAA,EAC1B,uBAAuB,OAAO,gBAAgB;AAAA;AAGhD,SAAS,cAAc,CAAC,UAA0C;AAAA,EAChE,QAAQ,SAAS;AAAA,SACV;AAAA,MACH,eAAe,SAAS,WAAW,qBAAqB;AAAA,MACxD;AAAA,SACG;AAAA,MACH,2BAA2B,SAAS,MAAM,yBAAyB;AAAA,MACnE,eAAe,SAAS,OAAO,2BAA2B;AAAA,MAC1D;AAAA,SACG;AAAA,MACH,eAAe,SAAS,OAAO,uBAAuB;AAAA,MACtD;AAAA,SACG;AAAA,MACH,sBAAsB,SAAS,WAAW,2BAA2B;AAAA,MACrE;AAAA;AAAA,MAEA,QAAQ,oCAAoC,OAAQ,SAAgC,IAAI,KAAK;AAAA;AAAA;AAInG,SAAS,YAAY,CAAC,QAAsC;AAAA,EAC1D,QAAQ,OAAO;AAAA,SACR;AAAA,MACH,eAAe,OAAO,WAAW,6BAA6B;AAAA,MAC9D;AAAA,SACG;AAAA,MACH,eAAe,OAAO,YAAY,8BAA8B;AAAA,MAChE;AAAA,SACG;AAAA,SACA;AAAA,MACH,eAAe,OAAO,SAAS,2BAA2B;AAAA,MAC1D;AAAA,SACG;AAAA,MACH,eAAe,OAAO,WAAW,6BAA6B;AAAA,MAC9D,eAAe,OAAO,WAAW,qCAAqC;AAAA,MACtE;AAAA,SACG;AAAA,MACH,eAAe,OAAO,aAAa,+BAA+B;AAAA,MAClE;AAAA;AAAA,MAEA,QACE,0BAA0B,OAAQ,OAA8B,IAAI,oBACtE;AAAA;AAAA;AAIN,SAAS,sBAAsB,CAAC,KAA6B;AAAA,EAC3D,QAAQ,IAAI;AAAA,SACL;AAAA,MACH,gBAAgB,IAAI,WAAW,qBAAqB;AAAA,MACpD,IAAI,IAAI,YAAY;AAAA,QAClB,IAAI,IAAI,WAAW,SAAS,aAAa,IAAI,WAAW,SAAS,eAAe;AAAA,UAC9E,QACE,sCAAsC,OACnC,IAAI,WAAkC,IACzC,KACF;AAAA,QACF;AAAA,QACA,eAAe,IAAI,WAAW,IAAI,yBAAyB;AAAA,MAC7D;AAAA,MACA;AAAA,SACG;AAAA,MACH,2BAA2B,IAAI,UAAU,MAAM,0BAA0B;AAAA,MACzE,eAAe,IAAI,UAAU,IAAI,wBAAwB;AAAA,MACzD,eAAe,IAAI,UAAU,OAAO,4BAA4B;AAAA,MAChE;AAAA,SACG;AAAA,MACH,sBAAsB,IAAI,WAAW,4BAA4B;AAAA,MACjE;AAAA,SACG;AAAA,MACH;AAAA;AAAA,MAEA,QAAQ,yCAAyC,OAAQ,IAA2B,IAAI,KAAK;AAAA;AAAA;AAInG,SAAS,uBAAuB,CAAC,QAA+B;AAAA,EAC9D,QAAQ,UAAU,kBAAkB,aAAa,WAAW;AAAA,EAE5D,QAAQ,SAAS;AAAA,SACV,WAAW;AAAA,MACd,IAAI,OAAO,SAAS,UAAU,OAAO,cAAc,SAAS,WAAW;AAAA,QACrE,QAAQ,+DAA+D;AAAA,MACzE;AAAA,MACA,IAAI,iBAAiB,SAAS,aAAa;AAAA,QACzC,IAAI,CAAC,gBAAgB,aAAa,iBAAiB,SAAS,GAAG;AAAA,UAC7D,QAAQ,0DAA0D;AAAA,QACpE;AAAA,QACA;AAAA,MACF;AAAA,MACA,IAAI,iBAAiB,SAAS,YAAY;AAAA,QACxC,IAAI,gBAAgB,WAAW;AAAA,UAC7B,QAAQ,wEAAwE;AAAA,QAClF;AAAA,QACA;AAAA,MACF;AAAA,MACA,QAAQ,wEAAwE;AAAA,MAChF;AAAA,IACF;AAAA,SACK,aAAa;AAAA,MAChB,IAAI,iBAAiB,SAAS,oBAAoB;AAAA,QAChD,QAAQ,2DAA2D;AAAA,MACrE;AAAA,MACA,IACE,iBAAiB,UAAU,SAAS,SAAS,QAC7C,iBAAiB,UAAU,UAAU,SAAS,OAC9C;AAAA,QACA,QAAQ,sEAAsE;AAAA,MAChF;AAAA,MACA;AAAA,IACF;AAAA,SACK,SAAS;AAAA,MACZ,IAAI,OAAO,SAAS,aAAa;AAAA,QAC/B,QAAQ,qDAAqD;AAAA,MAC/D;AAAA,MACA,IACE,iBAAiB,SAAS,eAC1B,iBAAiB,UAAU,SAAS,oBACpC,iBAAiB,eAAe,WAChC;AAAA,QACA;AAAA,MACF;AAAA,MACA,IACE,iBAAiB,SAAS,eAC1B,iBAAiB,UAAU,SAAS,UACpC,iBAAiB,eAAe,WAChC;AAAA,QACA;AAAA,MACF;AAAA,MACA,IAAI,iBAAiB,SAAS;AAAA,QAAY;AAAA,MAC1C,QACE,wGACF;AAAA,MACA;AAAA,IACF;AAAA,SACK,UAAU;AAAA,MACb,IACE,iBAAiB,SAAS,YAC1B,CAAC,sBAAsB,iBAAiB,WAAW,SAAS,SAAS,GACrE;AAAA,QACA,QAAQ,qDAAqD;AAAA,MAC/D;AAAA,MACA,IAAI,gBAAgB,WAAW;AAAA,QAC7B,QAAQ,yDAAyD;AAAA,MACnE;AAAA,MACA;AAAA,IACF;AAAA;AAAA;AAIJ,eAAe,iBAAiB,CAC9B,WACA,WACA,OACA,QACe;AAAA,EACf,IAAI,CAAC;AAAA,IAAW;AAAA,EAEhB,MAAM,SACJ,UAAU,SAAS,SACf,MAAM,OAAO,KAAK,MAAM,QAAQ,EAAE,WAAW,IAAI,UAAU,GAAG,CAAC,IAC/D,MAAM,OAAO,KAAK,gBAAgB,QAAQ,EAAE,WAAW,IAAI,UAAU,GAAG,CAAC;AAAA,EAC/E,IAAI,CAAC,QAAQ;AAAA,IACX,MAAM,IAAI,sBACR,qBACA,UAAU,UAAU,UAAU,kCAAkC,aAClE;AAAA,EACF;AAAA;AAGF,eAAe,kBAAkB,CAC/B,QACA,QACe;AAAA,EACf,IAAI,OAAO,iBAAiB,SAAS,eAAe,CAAC,OAAO,iBAAiB;AAAA,IAAY;AAAA,EAEzF,QAAQ,WAAW,eAAe,OAAO;AAAA,EACzC,IAAI,WAAW,SAAS,WAAW;AAAA,IACjC,MAAM,UAAU,MAAM,OAAO,KAAK,SAAS,QAAQ;AAAA,MACjD,WAAW,OAAO;AAAA,MAClB,IAAI,WAAW;AAAA,IACjB,CAAC;AAAA,IACD,IAAI,CAAC,SAAS;AAAA,MACZ,MAAM,IAAI,sBACR,sBACA,6BAA6B,WAAW,kCAAkC,OAAO,aACnF;AAAA,IACF;AAAA,IACA,IAAI,UAAU,SAAS,UAAU,QAAQ,WAAW,UAAU,IAAI;AAAA,MAChE,MAAM,IAAI,sBACR,sBACA,6BAA6B,WAAW,qCAAqC,UAAU,MACzF;AAAA,IACF;AAAA,IACA;AAAA,EACF;AAAA,EAEA,MAAM,QAAQ,MAAM,OAAO,KAAK,aAAa,QAAQ;AAAA,IACnD,WAAW,OAAO;AAAA,IAClB,IAAI,WAAW;AAAA,EACjB,CAAC;AAAA,EACD,IAAI,CAAC,OAAO;AAAA,IACV,MAAM,IAAI,sBACR,sBACA,kCAAkC,WAAW,kCAAkC,OAAO,aACxF;AAAA,EACF;AAAA,EACA,IAAI,MAAM,gBAAgB,UAAU,QAAQ,MAAM,cAAc,UAAU,IAAI;AAAA,IAC5E,MAAM,IAAI,sBACR,sBACA,kCAAkC,WAAW,qCAAqC,UAAU,MAC9F;AAAA,EACF;AAAA;AAGF,eAAe,cAAc,CAC3B,QACA,QACe;AAAA,EACf,IAAI,OAAO,OAAO,SAAS;AAAA,IAAa;AAAA,EACxC,MAAM,oBAAoB,OAAO,OAAO;AAAA,EAExC,MAAM,SAAS,MAAM,OAAO,aAAa;AAAA,IACvC,WAAW,OAAO;AAAA,IAClB,IAAI;AAAA,EACN,CAAC;AAAA,EACD,IAAI,CAAC,QAAQ;AAAA,IACX,MAAM,IAAI,sBACR,4BACA,4BAA4B,iDAAiD,OAAO,aACtF;AAAA,EACF;AAAA,EACA,IAAI,OAAO,kBAAkB,OAAO,eAAe;AAAA,IACjD,MAAM,IAAI,sBACR,4BACA,2BAA2B,OAAO,8CACpC;AAAA,EACF;AAAA,EACA,IAAI,CAAC,gBAAgB,OAAO,aAAa,OAAO,WAAW,GAAG;AAAA,IAC5D,MAAM,IAAI,sBACR,4BACA,2BAA2B,OAAO,sDACpC;AAAA,EACF;AAAA,EACA,IACE,OAAO,SAAS,SAAS,WACzB,0BAA0B,OAAO,gBAAgB,KACjD,CAAC,kBAAkB,OAAO,kBAAkB,OAAO,gBAAgB,GACnE;AAAA,IACA,MAAM,IAAI,sBACR,4BACA,iCAAiC,OAAO,wDAC1C;AAAA,EACF;AAAA;AAGF,SAAS,yBAAyB,CAAC,KAAgC;AAAA,EACjE,OACE,IAAI,SAAS,cACZ,IAAI,SAAS,eAAe,IAAI,UAAU,SAAS,UAAU,IAAI,eAAe;AAAA;AAIrF,SAAS,eAAe,CAAC,WAAkC,OAAqB;AAAA,EAC9E,IAAI,UAAU,SAAS,UAAU,UAAU,SAAS,kBAAkB;AAAA,IACpE,QAAQ,GAAG,+BAA+B,OAAQ,UAAiC,IAAI,KAAK;AAAA,EAC9F;AAAA,EACA,eAAe,UAAU,IAAI,GAAG,UAAU;AAAA;AAG5C,SAAS,qBAAqB,CAAC,WAA4B,OAAqB;AAAA,EAC9E,IAAI,UAAU,SAAS,oBAAoB;AAAA,IACzC,QAAQ,GAAG,+BAA+B,OAAQ,UAAiC,IAAI,KAAK;AAAA,EAC9F;AAAA,EACA,eAAe,UAAU,YAAY,GAAG,mBAAmB;AAAA;AAG7D,SAAS,0BAA0B,CAAC,OAAe,OAAqB;AAAA,EACtE,IAAI,CAAC,wBAAwB,IAAI,KAAK,GAAG;AAAA,IACvC,QAAQ,GAAG,UAAU,0BAA0B;AAAA,EACjD;AAAA;AAGF,SAAS,cAAc,CAAC,OAAe,OAAqB;AAAA,EAC1D,IAAI,OAAO,UAAU,YAAY,CAAC,MAAM,KAAK,GAAG;AAAA,IAC9C,QAAQ,GAAG,mCAAmC;AAAA,EAChD;AAAA;AAGF,SAAS,eAAe,CAAC,OAAa,OAAqB;AAAA,EACzD,IAAI,EAAE,iBAAiB,SAAS,CAAC,OAAO,SAAS,MAAM,QAAQ,CAAC,GAAG;AAAA,IACjE,QAAQ,GAAG,6BAA6B;AAAA,EAC1C;AAAA;AAGF,SAAS,eAAe,CACtB,MACA,OACS;AAAA,EACT,OAAO,MAAM,SAAS,OAAO,QAAQ,MAAM,OAAO,OAAO;AAAA;AAG3D,SAAS,qBAAqB,CAAC,MAAuB,OAAiC;AAAA,EACrF,OAAO,KAAK,SAAS,MAAM,QAAQ,KAAK,eAAe,MAAM;AAAA;AAG/D,SAAS,OAAO,CAAC,SAAwB;AAAA,EACvC,MAAM,IAAI,sBAAsB,iBAAiB,UAAU,SAAS;AAAA;AAGtE,IAAM,0BAA0B,IAAI,IAAI;AAAA,EACtC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,CAAC;",
-  "debugId": "73F354CEB3563F0964756E2164756E21",
-  "names": []
-}