@sixb/core 0.1.7 → 0.1.9

package/dist/chunk-1enhpacz.js.map

@@ -0,0 +1,34 @@
+{
+  "version": 3,
+  "sources": ["../src/objects/action/request.ts", "../src/objects/errors.ts", "../src/objects/materializer-adapter.ts", "../src/objects/link/authorization.ts", "../src/objects/link/remove.ts", "../src/objects/link/endpoints.ts", "../src/objects/link/upsert.ts", "../src/objects/runtime-batch.ts", "../src/objects/link/upsert-batch.ts", "../src/objects/object/delete.ts", "../src/objects/object/upsert.ts", "../src/objects/object/upsert-batch.ts", "../src/objects/telemetry/write-batch.ts", "../src/objects/telemetry/append-batch.ts", "../src/objects/telemetry/history.ts", "../src/objects/context/resolve.ts", "../src/objects/sdk/telemetry-channel.ts", "../src/objects/sdk/object-handle.ts", "../src/objects/sdk/runtime-query-executor.ts", "../src/objects/sdk/object-set.ts", "../src/objects/service/action-service.ts", "../src/objects/service/link-service.ts", "../src/objects/service/list-service.ts", "../src/objects/service/object-service.ts", "../src/objects/service/telemetry-service.ts"],
+  "sourcesContent": [
+    "/**\n * Compatibility leaf operation: request an action on an object.\n *\n * The canonical action request path lives in `actions/request.ts`; object-bound\n * helpers delegate here by supplying an object subject.\n */\nimport {\n  type RequestActionAndWaitOptions,\n  type RequestActionOptions,\n  type RequestActionResult,\n  requestAction as requestRuntimeAction,\n  requestActionAndWait as requestRuntimeActionAndWait,\n} from \"../../actions/request\"\nimport type { ActionRunRecord } from \"../../storage\"\nimport type { ExecutionObjectContext } from \"../context\"\n\nexport type { RequestActionAndWaitOptions, RequestActionOptions }\n\nexport async function requestAction(\n  ctx: ExecutionObjectContext,\n  params: {\n    primaryId: string\n    actionId: string\n    params?: Record<string, unknown>\n    options?: RequestActionOptions\n  }\n): Promise<RequestActionResult> {\n  return requestRuntimeAction(ctx, ctx.execution, {\n    actionId: params.actionId,\n    subject: {\n      kind: \"object\",\n      objectTypeId: ctx.objectType.id,\n      primaryId: params.primaryId,\n    },\n    params: params.params,\n    runId: params.options?.runId,\n    signal: params.options?.signal,\n  })\n}\n\nexport async function requestActionAndWait(\n  ctx: ExecutionObjectContext,\n  params: {\n    primaryId: string\n    actionId: string\n    params?: Record<string, unknown>\n    options?: RequestActionAndWaitOptions\n  }\n): Promise<ActionRunRecord> {\n  return requestRuntimeActionAndWait(ctx, ctx.execution, {\n    actionId: params.actionId,\n    subject: {\n      kind: \"object\",\n      objectTypeId: ctx.objectType.id,\n      primaryId: params.primaryId,\n    },\n    params: params.params,\n    runId: params.options?.runId,\n    timeoutMs: params.options?.timeoutMs,\n    signal: params.options?.signal,\n    onRequested: params.options?.onRequested,\n  })\n}\n",
+    "/**\n * Error for runtime invariants and failures specific to the objects module\n * (e.g., unexpected event results after appending an object/link event).\n */\nexport class ObjectError extends Error {\n  readonly name = \"ObjectError\"\n}\n",
+    "/**\n * Runtime translation onto the ontology Materializer.\n *\n * Every typed and dynamic object/link mutation lowers to canonical Materializer operations here and\n * every Materializer result is mapped back to the public runtime shapes. The adapter owns no\n * ontology semantics: authority classification, effective resolution, validation, and event\n * construction all happen inside the Materializer's single commit.\n */\n\nimport { randomUUID } from \"node:crypto\"\nimport type { JsonValue } from \"../json\"\nimport type {\n  EditCommitResult,\n  EffectiveObjectSnapshot,\n  MaterializationItemError,\n  OntologyEditOperation,\n  OntologyLinkRef,\n  OntologyObjectRef,\n  OntologyOperationOutcome,\n} from \"../materialization/model\"\nimport { normalizeJsonProperties } from \"../materializer\"\nimport type { ObjectLink, ValueType } from \"../ontology\"\nimport { OntologyValidationError } from \"../ontology/errors\"\nimport type { ObjectTypeWithPropertyTokens } from \"../ontology/tokens\"\nimport {\n  assertKnownProperties,\n  assertLinkTargetType,\n  normalizeLinkProperties,\n  normalizeObjectProperties,\n  validateLinkProperties,\n  validateObjectProperties,\n} from \"../ontology/validation\"\nimport { getOntologyMutationRuntime } from \"../runtime/ontology-mutations\"\nimport type { SixbRuntimeContext } from \"../runtime/types\"\nimport type { ObjectRow } from \"../storage\"\nimport { ObjectError } from \"./errors\"\n\n/** The runtime pieces one commit needs. */\nexport type RuntimeMaterializerContext = Pick<SixbRuntimeContext, \"projectId\" | \"storage\">\n\n/** One caller-supplied batch item, lowered to the operations it contributes. */\nexport interface RuntimeBatchGroup {\n  /** Position in the caller's input array; item errors are reported against it. */\n  readonly index: number\n  readonly operations: readonly OntologyEditOperation[]\n}\n\nexport interface RuntimeBatchCommit {\n  readonly commit: EditCommitResult | null\n  /** Outcomes per input position, in the order the item's operations were submitted. */\n  readonly outcomes: ReadonlyMap<number, readonly OntologyOperationOutcome[]>\n}\n\n/**\n * Commits ordered operations as one atomic runtime commit.\n *\n * A fresh request id per call keeps each runtime mutation its own commit; the Materializer's\n * idempotency replay then only collapses a retry of the very same request.\n */\nexport async function commitRuntimeOperations(\n  ctx: RuntimeMaterializerContext,\n  operations: readonly OntologyEditOperation[]\n): Promise<EditCommitResult> {\n  const mutations = getOntologyMutationRuntime(ctx)\n  const commit = await mutations.commitEdits({\n    mode: \"atomic\",\n    source: { kind: \"runtime\", requestId: randomUUID() },\n    operations,\n    expectedObjects: [],\n    expectedLinks: [],\n    expectedLinkScopes: [],\n  })\n  return commit\n}\n\n/**\n * Commits grouped batch operations as one ordered continue-mode transaction.\n *\n * Successful items apply against one evolving authority state while semantic failures are recorded\n * per item. Provider, serialization, and CAS failures still roll the whole transaction back.\n *\n * An item that lowers to several operations is declared as one operation group so the Materializer\n * rolls the whole item back rather than committing the operations that ran before the failure.\n */\nexport async function commitRuntimeBatch(\n  ctx: RuntimeMaterializerContext,\n  groups: readonly RuntimeBatchGroup[]\n): Promise<RuntimeBatchCommit> {\n  const operations = groups.flatMap((group) => group.operations)\n  if (operations.length === 0) {\n    return { commit: null, outcomes: new Map() }\n  }\n\n  const operationGroups = groups\n    .filter((group) => group.operations.length > 1)\n    .map((group) => group.operations.map((operation) => operation.id))\n\n  const mutations = getOntologyMutationRuntime(ctx)\n  const commit = await mutations.commitEdits({\n    mode: \"continue\",\n    source: { kind: \"runtime\", requestId: randomUUID() },\n    operations,\n    ...(operationGroups.length > 0 ? { operationGroups } : {}),\n  })\n\n  const byId = new Map(commit.outcomes.map((outcome) => [outcome.id, outcome]))\n  const outcomes = new Map<number, readonly OntologyOperationOutcome[]>()\n  for (const group of groups) {\n    outcomes.set(\n      group.index,\n      group.operations.map((operation) => requireOutcome(byId, operation.id))\n    )\n  }\n  return { commit, outcomes }\n}\n\n/**\n * Assigns the canonical operation id for one batch item.\n *\n * Ids derive from the caller's original ordinal so outcomes map back to input positions even when\n * earlier items failed local validation and never reached the Materializer.\n */\nexport function runtimeOperationId(index: number, subOrdinal = 0): string {\n  return subOrdinal === 0 ? `op:${index}` : `op:${index}.${subOrdinal}`\n}\n\nexport interface NormalizedRuntimeObject {\n  readonly primaryId: string\n  /** Managed authority values; identity lives in the object ref, never in the properties. */\n  readonly properties: Readonly<Record<string, JsonValue>>\n}\n\n/**\n * Validates and normalizes one runtime object input at the SDK/service boundary.\n *\n * Shape and value-type errors surface here so a batch can report them against the caller's original\n * position. Authority classification, required-property enforcement, and cardinality stay in the\n * Materializer, which validates the resolved effective object instead of the request.\n */\nexport function normalizeRuntimeObject(input: {\n  readonly objectType: ObjectTypeWithPropertyTokens\n  readonly primaryPropertyId: string\n  readonly properties: Record<string, unknown>\n  readonly valueTypesById: ReadonlyMap<string, ValueType>\n}): NormalizedRuntimeObject {\n  const { objectType, primaryPropertyId, properties, valueTypesById } = input\n  assertKnownProperties(objectType, properties)\n  validateObjectProperties(objectType, properties, valueTypesById)\n\n  const primaryValue = properties[primaryPropertyId]\n  if (primaryValue === undefined || primaryValue === null) {\n    throw new OntologyValidationError(\n      `[Sixb] Missing primary property '${primaryPropertyId}' in upsert for '${objectType.id}'`\n    )\n  }\n\n  const normalized = normalizeObjectProperties(\n    objectType.properties,\n    properties,\n    valueTypesById,\n    objectType.id\n  )\n  const { [primaryPropertyId]: _identity, ...managed } = normalized\n  return {\n    primaryId: String(primaryValue),\n    properties: normalizeJsonProperties(managed, `${objectType.id} properties`),\n  }\n}\n\n/**\n * Validates and normalizes one runtime link input.\n *\n * Managed link authority carries the complete property set, so required link properties must be\n * present in the request rather than inherited from the stored edge.\n */\nexport function normalizeRuntimeLink(input: {\n  readonly objectType: ObjectTypeWithPropertyTokens\n  readonly linkDefinition: ObjectLink\n  readonly linkId: string\n  readonly targetTypeId: string\n  readonly properties?: Record<string, unknown>\n  readonly valueTypesById: ReadonlyMap<string, ValueType>\n  readonly isValidLinkTarget: (expected: string | string[], actual: string) => boolean\n}): Readonly<Record<string, JsonValue>> | undefined {\n  const { objectType, linkDefinition, linkId, targetTypeId, properties, valueTypesById } = input\n  assertLinkTargetType(objectType.id, linkId, linkDefinition, targetTypeId, input.isValidLinkTarget)\n  validateLinkProperties(objectType, linkDefinition, properties, undefined, valueTypesById)\n  const normalized = normalizeLinkProperties(objectType, linkDefinition, properties, valueTypesById)\n  if (normalized === undefined) return undefined\n  return normalizeJsonProperties(normalized, `${objectType.id}.${linkId} properties`)\n}\n\nexport function objectUpsertOperation(input: {\n  readonly id: string\n  readonly ref: OntologyObjectRef\n  readonly properties: Readonly<Record<string, JsonValue>>\n}): OntologyEditOperation {\n  return { id: input.id, kind: \"object.upsert\", ref: input.ref, properties: input.properties }\n}\n\nexport function objectDeleteOperation(input: {\n  readonly id: string\n  readonly ref: OntologyObjectRef\n}): OntologyEditOperation {\n  return { id: input.id, kind: \"object.delete\", ref: input.ref }\n}\n\nexport function objectRestoreOperation(input: {\n  readonly id: string\n  readonly ref: OntologyObjectRef\n}): OntologyEditOperation {\n  return { id: input.id, kind: \"object.restore\", ref: input.ref }\n}\n\nexport function linkUpsertOperation(input: {\n  readonly id: string\n  readonly ref: OntologyLinkRef\n  readonly properties?: Readonly<Record<string, JsonValue>>\n}): OntologyEditOperation {\n  return {\n    id: input.id,\n    kind: \"link.upsert\",\n    ref: input.ref,\n    ...(input.properties !== undefined ? { properties: input.properties } : {}),\n  }\n}\n\nexport function linkDeleteOperation(input: {\n  readonly id: string\n  readonly ref: OntologyLinkRef\n}): OntologyEditOperation {\n  return { id: input.id, kind: \"link.delete\", ref: input.ref }\n}\n\n/** Reads the outcomes one batch item produced; the commit returns one per submitted operation. */\nexport function requireItemOutcomes(\n  commit: RuntimeBatchCommit,\n  index: number\n): readonly OntologyOperationOutcome[] {\n  const outcomes = commit.outcomes.get(index)\n  if (!outcomes || outcomes.length === 0) {\n    throw new ObjectError(`[Sixb] Materializer returned no outcome for batch item ${index}.`)\n  }\n  return outcomes\n}\n\n/** Reads the effective object an ok outcome produced; runtime object writes always resolve one. */\nexport function requireEffectiveObject(outcome: OntologyOperationOutcome): EffectiveObjectSnapshot {\n  if (!outcome.ok || !outcome.object) {\n    throw new ObjectError(`[Sixb] Materializer returned no effective object for '${outcome.id}'.`)\n  }\n  return outcome.object\n}\n\nexport function toObjectRow(projectId: string, snapshot: EffectiveObjectSnapshot): ObjectRow {\n  return {\n    projectId,\n    objectTypeId: snapshot.ref.objectTypeId,\n    primaryId: snapshot.ref.primaryId,\n    properties: structuredClone(snapshot.properties) as Record<string, unknown>,\n    createdAt: new Date(snapshot.createdAt),\n    updatedAt: new Date(snapshot.updatedAt),\n    version: snapshot.version,\n    lastCommitId: snapshot.lastCommitId,\n  }\n}\n\n/** Rehydrates a persisted item error into the public runtime error type. */\nexport function toItemError(error: MaterializationItemError): Error {\n  switch (error.code) {\n    case \"validation\":\n      return new OntologyValidationError(error.message)\n  }\n}\n\nfunction requireOutcome(\n  outcomes: ReadonlyMap<string, OntologyOperationOutcome>,\n  id: string\n): OntologyOperationOutcome {\n  const outcome = outcomes.get(id)\n  if (!outcome) {\n    throw new ObjectError(`[Sixb] Materializer returned no outcome for '${id}'.`)\n  }\n  return outcome\n}\n",
+    "/**\n * The authorization rule for writing a link, in one place because all three link leaves need it.\n */\nimport { assertAuthorized, assertCanEdit } from \"../../authorization\"\nimport type { SixbRuntimeContext } from \"../../runtime/types\"\n\n/**\n * Assert a principal may create or remove a link.\n *\n * `edit` on the **source** type, `view` on the **target**: a link is declared on the source type\n * (`objectType.links`), and writing one changes the source's edges, not the target's properties.\n * Requiring `edit` on the target too would mean a clerk needs write access to every customer before\n * attaching an invoice to one.\n *\n * `view` on the target is still required, and for two reasons: it matches how links are *read* —\n * `canViewLink` already demands `view` on both endpoints — and without it the endpoint-existence\n * check that follows would answer whether a target the principal cannot see exists.\n *\n * Call this *before* any endpoint lookup, for that second reason.\n */\nexport function assertCanWriteLink(\n  ctx: Pick<SixbRuntimeContext, \"projectId\" | \"runtimeAuthorization\" | \"authorization\">,\n  endpoints: { readonly sourceTypeId: string; readonly targetTypeId: string }\n): void {\n  assertCanEdit(ctx, endpoints.sourceTypeId)\n  assertAuthorized(ctx, { kind: \"object.view\", objectTypeId: endpoints.targetTypeId })\n}\n",
+    "/**\n * Leaf operation: remove a single link through the ontology Materializer.\n */\nimport { assertLinkTargetType } from \"../../ontology/validation\"\nimport type { ResolvedLinkContext } from \"../context\"\nimport {\n  commitRuntimeOperations,\n  linkDeleteOperation,\n  runtimeOperationId,\n} from \"../materializer-adapter\"\nimport { assertCanWriteLink } from \"./authorization\"\n\nexport async function removeLink(\n  ctx: ResolvedLinkContext,\n  params: {\n    sourceId: string\n    linkId: string\n    targetTypeId: string\n    targetId: string\n  }\n): Promise<void> {\n  const { objectType, linkDefinition, ontology } = ctx\n  const { sourceId, linkId, targetTypeId, targetId } = params\n  assertCanWriteLink(ctx, { sourceTypeId: objectType.id, targetTypeId })\n\n  assertLinkTargetType(objectType.id, linkId, linkDefinition, targetTypeId, (expected, actual) =>\n    ontology.isValidLinkTarget(expected, actual)\n  )\n\n  // A missing link is a no-op: the delete records managed authority only when an effective edge\n  // exists, so the commit reports `unchanged` instead of failing.\n  await commitRuntimeOperations(ctx, [\n    linkDeleteOperation({\n      id: runtimeOperationId(0),\n      ref: {\n        source: { objectTypeId: objectType.id, primaryId: sourceId },\n        linkId,\n        target: { objectTypeId: targetTypeId, primaryId: targetId },\n      },\n    }),\n  ])\n}\n",
+    "/**\n * Shared endpoint existence reads for runtime link batches.\n *\n * The Materializer independently refuses a link whose endpoints are not effective. These reads exist\n * only so batch callers keep receiving the public {@link ObjectNotFoundError} for a missing endpoint\n * instead of a generic per-item validation error.\n */\n\nimport type { SixbRuntimeContext } from \"../../runtime/types\"\nimport { objectBatchKey } from \"../../storage\"\nimport { ObjectNotFoundError } from \"../../storage/errors\"\n\nexport interface LinkEndpointItem {\n  readonly objectType: { readonly id: string }\n  readonly sourceId: string\n  readonly targetTypeId: string\n  readonly targetId: string\n}\n\nexport type EndpointExistence = ReadonlySet<string>\n\nexport function collectEndpointLookups(\n  items: readonly LinkEndpointItem[]\n): { objectTypeId: string; primaryId: string }[] {\n  const lookups: { objectTypeId: string; primaryId: string }[] = []\n  const seen = new Set<string>()\n\n  for (const item of items) {\n    for (const endpoint of [\n      { objectTypeId: item.objectType.id, primaryId: item.sourceId },\n      { objectTypeId: item.targetTypeId, primaryId: item.targetId },\n    ]) {\n      const key = endpointKey(endpoint.objectTypeId, endpoint.primaryId)\n      if (seen.has(key)) continue\n      seen.add(key)\n      lookups.push(endpoint)\n    }\n  }\n\n  return lookups\n}\n\nexport async function loadEndpointExistence(\n  ctx: Pick<SixbRuntimeContext, \"projectId\" | \"storage\">,\n  lookups: readonly { objectTypeId: string; primaryId: string }[]\n): Promise<EndpointExistence> {\n  if (lookups.length === 0) return new Set()\n  const rows = await ctx.storage.objects.getByPrimaryIdBatch({\n    projectId: ctx.projectId,\n    items: lookups,\n  })\n  return new Set(rows.keys())\n}\n\n/** Throws {@link ObjectNotFoundError} for the first endpoint the read did not find. */\nexport function requireEndpoints(item: LinkEndpointItem, existing: EndpointExistence): void {\n  if (!existing.has(endpointKey(item.objectType.id, item.sourceId))) {\n    throw new ObjectNotFoundError(item.objectType.id, item.sourceId, \"Source object not found\")\n  }\n  if (!existing.has(endpointKey(item.targetTypeId, item.targetId))) {\n    throw new ObjectNotFoundError(item.targetTypeId, item.targetId, \"Target object not found\")\n  }\n}\n\nfunction endpointKey(objectTypeId: string, primaryId: string): string {\n  return objectBatchKey(objectTypeId, primaryId)\n}\n",
+    "/**\n * Leaf operation: upsert a single link through the ontology Materializer.\n */\nimport type { ResolvedLinkContext } from \"../context\"\nimport {\n  commitRuntimeOperations,\n  linkUpsertOperation,\n  normalizeRuntimeLink,\n  runtimeOperationId,\n} from \"../materializer-adapter\"\nimport { assertCanWriteLink } from \"./authorization\"\nimport { collectEndpointLookups, loadEndpointExistence, requireEndpoints } from \"./endpoints\"\n\nexport async function upsertLink(\n  ctx: ResolvedLinkContext,\n  params: {\n    sourceId: string\n    linkId: string\n    targetTypeId: string\n    targetId: string\n    properties?: Record<string, unknown>\n  }\n): Promise<void> {\n  const { objectType, linkDefinition, ontology } = ctx\n  const { sourceId, linkId, targetTypeId, targetId, properties } = params\n  assertCanWriteLink(ctx, { sourceTypeId: objectType.id, targetTypeId })\n  const endpoints = { objectType, sourceId, targetTypeId, targetId }\n\n  // Endpoint reads keep the public `ObjectNotFoundError` contract; the Materializer independently\n  // refuses a link whose endpoints are not effective when it commits. This runs before property\n  // normalization so the same input reports the same error class here and through the batch APIs,\n  // which check endpoints first inside `plan`.\n  requireEndpoints(endpoints, await loadEndpointExistence(ctx, collectEndpointLookups([endpoints])))\n\n  const normalizedProperties = normalizeRuntimeLink({\n    objectType,\n    linkDefinition,\n    linkId,\n    targetTypeId,\n    properties,\n    valueTypesById: ontology.getValueTypesById(),\n    isValidLinkTarget: (expected, actual) => ontology.isValidLinkTarget(expected, actual),\n  })\n\n  await commitRuntimeOperations(ctx, [\n    linkUpsertOperation({\n      id: runtimeOperationId(0),\n      ref: {\n        source: { objectTypeId: objectType.id, primaryId: sourceId },\n        linkId,\n        target: { objectTypeId: targetTypeId, primaryId: targetId },\n      },\n      ...(normalizedProperties !== undefined ? { properties: normalizedProperties } : {}),\n    }),\n  ])\n}\n",
+    "/**\n * Per-item mechanics shared by every runtime batch.\n *\n * One place owns the rules the public batch APIs promise: a local failure stays at its own input\n * position, an identical repeat collapses onto the first item and shares its result, a conflicting\n * repeat is rejected, and each item's Materializer outcomes map back to the position they came from.\n */\n\nimport type { OntologyEditOperation, OntologyOperationOutcome } from \"../materialization/model\"\nimport { OntologyValidationError } from \"../ontology/errors\"\nimport type { BatchItemResult } from \"../runtime/types\"\nimport {\n  commitRuntimeBatch,\n  type RuntimeMaterializerContext,\n  requireItemOutcomes,\n  toItemError,\n} from \"./materializer-adapter\"\n\nexport interface RuntimeBatchItemPlan {\n  /** Identity this item claims. A later item claiming it must be identical. */\n  readonly key: string\n  /** How that identity reads in an error message, e.g. `object 'room:r1'`. */\n  readonly label: string\n  /** Canonical content, so an identical repeat is recognized as one. */\n  readonly fingerprint: string\n  readonly operations: readonly OntologyEditOperation[]\n}\n\nexport interface RuntimeItemBatch<TItem, TValue> {\n  readonly ctx: RuntimeMaterializerContext\n  readonly items: readonly TItem[]\n  /** Lowers one item, throwing to record a local failure at that item's position. */\n  plan(item: TItem, index: number): RuntimeBatchItemPlan\n  /** Maps the outcomes of a fully successful item to its public value. */\n  value(outcomes: readonly OntologyOperationOutcome[]): TValue\n}\n\ninterface PlannedItem {\n  readonly index: number\n  readonly operations: readonly OntologyEditOperation[]\n}\n\ninterface ClaimedIdentity {\n  readonly index: number\n  readonly fingerprint: string\n}\n\nexport async function runRuntimeItemBatch<TItem, TValue>(\n  batch: RuntimeItemBatch<TItem, TValue>\n): Promise<readonly BatchItemResult<TValue>[]> {\n  const { items } = batch\n  if (items.length === 0) return []\n\n  const results: BatchItemResult<TValue>[] = new Array(items.length)\n  const planned: PlannedItem[] = []\n  const claims = new Map<string, ClaimedIdentity>()\n  /** Positions that repeat an earlier identical item and share its result. */\n  const aliases = new Map<number, number>()\n\n  for (const [index, item] of items.entries()) {\n    let plan: RuntimeBatchItemPlan\n    try {\n      plan = batch.plan(item, index)\n    } catch (error) {\n      results[index] = {\n        ok: false,\n        error: error instanceof Error ? error : new Error(String(error)),\n      }\n      continue\n    }\n\n    const claimed = claims.get(plan.key)\n    if (claimed) {\n      if (claimed.fingerprint !== plan.fingerprint) {\n        results[index] = {\n          ok: false,\n          error: new OntologyValidationError(\n            `[Sixb] Conflicting duplicate ${plan.label} at batch positions ${claimed.index} and ${index}`\n          ),\n        }\n        continue\n      }\n      aliases.set(index, claimed.index)\n      continue\n    }\n\n    claims.set(plan.key, { index, fingerprint: plan.fingerprint })\n    planned.push({ index, operations: plan.operations })\n  }\n\n  const commit = await commitRuntimeBatch(batch.ctx, planned)\n\n  for (const { index } of planned) {\n    const outcomes = requireItemOutcomes(commit, index)\n    const failed = outcomes.find((outcome) => !outcome.ok)\n    results[index] =\n      failed?.ok === false\n        ? { ok: false, error: toItemError(failed.error) }\n        : { ok: true, value: batch.value(outcomes) }\n  }\n  for (const [index, source] of aliases) {\n    results[index] = results[source]\n  }\n  return results\n}\n",
+    "/**\n * Leaf operation: batch upsert links through the ontology Materializer.\n *\n * Takes SixbRuntimeContext (shared infra) + per-item pre-resolved data, because each item can target\n * a different objectType + linkDefinition. Everything valid is submitted as one ordered\n * continue-mode commit.\n */\n\nimport { stableJsonStringify } from \"../../json\"\nimport { linkRefKey } from \"../../materialization/refs\"\nimport type { BatchItemResult, SixbRuntimeContext } from \"../../runtime/types\"\nimport type { ResolvedLinkBatchItem } from \"../context\"\nimport {\n  linkUpsertOperation,\n  normalizeRuntimeLink,\n  runtimeOperationId,\n} from \"../materializer-adapter\"\nimport { runRuntimeItemBatch } from \"../runtime-batch\"\nimport { assertCanWriteLink } from \"./authorization\"\nimport { collectEndpointLookups, loadEndpointExistence, requireEndpoints } from \"./endpoints\"\n\nexport async function upsertLinkBatch(\n  ctx: SixbRuntimeContext,\n  items: readonly ResolvedLinkBatchItem[]\n): Promise<readonly BatchItemResult<void>[]> {\n  const { ontology } = ctx\n  if (items.length === 0) return []\n\n  // Every item, up front, and before the endpoint lookup below. Authorization is a precondition, not\n  // a per-item validation: a refused item must not become one failed `BatchItemResult` while the\n  // rest of the batch commits. Asserting inside `plan` would do exactly that, and would also let the\n  // existence lookup answer for targets the principal cannot see.\n  for (const item of items) {\n    assertCanWriteLink(ctx, {\n      sourceTypeId: item.objectType.id,\n      targetTypeId: item.targetTypeId,\n    })\n  }\n\n  const existing = await loadEndpointExistence(ctx, collectEndpointLookups(items))\n  const valueTypesById = ontology.getValueTypesById()\n\n  return runRuntimeItemBatch({\n    ctx,\n    items,\n    plan(item, index) {\n      requireEndpoints(item, existing)\n      const properties = normalizeRuntimeLink({\n        objectType: item.objectType,\n        linkDefinition: item.linkDefinition,\n        linkId: item.linkId,\n        targetTypeId: item.targetTypeId,\n        properties: item.properties,\n        valueTypesById,\n        isValidLinkTarget: (expected, actual) => ontology.isValidLinkTarget(expected, actual),\n      })\n      const ref = {\n        source: { objectTypeId: item.objectType.id, primaryId: item.sourceId },\n        linkId: item.linkId,\n        target: { objectTypeId: item.targetTypeId, primaryId: item.targetId },\n      }\n      const edge = linkRefKey(ref)\n      return {\n        key: edge,\n        // The key is a JSON array, which is unreadable in the error an operator sees on a failed\n        // link projection. Name the edge the way the object path names an object.\n        label: `link '${item.objectType.id}:${item.sourceId}.${item.linkId} -> ${item.targetTypeId}:${item.targetId}'`,\n        fingerprint: stableJsonStringify(properties ?? null),\n        operations: [\n          linkUpsertOperation({\n            id: runtimeOperationId(index),\n            ref,\n            ...(properties !== undefined ? { properties } : {}),\n          }),\n        ],\n      }\n    },\n    value: () => undefined,\n  })\n}\n",
+    "/**\n * Leaf operations: delete and restore a single object through the ontology Materializer.\n *\n * Both are thin wrappers over one materializer operation, exactly like `removeLink` — the cascade\n * over links and the effective-state bookkeeping happen inside the commit.\n */\nimport { assertCanEdit } from \"../../authorization\"\nimport type { ResolvedObjectContext } from \"../context\"\nimport {\n  commitRuntimeOperations,\n  objectDeleteOperation,\n  objectRestoreOperation,\n  runtimeOperationId,\n} from \"../materializer-adapter\"\n\n/**\n * Delete the object with this primary id.\n *\n * A missing object is a no-op: the delete records managed authority only where effective state\n * exists, so the commit reports `unchanged` rather than failing. An object a projection also writes\n * stays hidden even while the projection keeps asserting it — `restore()` is what reveals it again.\n */\nexport async function deleteObject(ctx: ResolvedObjectContext, primaryId: string): Promise<void> {\n  assertCanEdit(ctx, ctx.objectType.id)\n  await commitRuntimeOperations(ctx, [\n    objectDeleteOperation({\n      id: runtimeOperationId(0),\n      ref: { objectTypeId: ctx.objectType.id, primaryId },\n    }),\n  ])\n}\n\n/**\n * Withdraw a previous delete.\n *\n * For an object written only from code this is a no-op — there is nothing left to reveal, so write it\n * again instead. For an object a projection also writes, it makes the projected state visible again.\n */\nexport async function restoreObject(ctx: ResolvedObjectContext, primaryId: string): Promise<void> {\n  assertCanEdit(ctx, ctx.objectType.id)\n  await commitRuntimeOperations(ctx, [\n    objectRestoreOperation({\n      id: runtimeOperationId(0),\n      ref: { objectTypeId: ctx.objectType.id, primaryId },\n    }),\n  ])\n}\n",
+    "/**\n * Leaf operation: upsert a single object through the ontology Materializer.\n */\n\nimport { assertCanEdit } from \"../../authorization\"\nimport type { ObjectRow } from \"../../storage\"\nimport type { ResolvedObjectContext } from \"../context\"\nimport {\n  commitRuntimeOperations,\n  normalizeRuntimeObject,\n  objectUpsertOperation,\n  requireEffectiveObject,\n  runtimeOperationId,\n  toObjectRow,\n} from \"../materializer-adapter\"\n\nexport async function upsertObject(\n  ctx: ResolvedObjectContext,\n  properties: Record<string, unknown>\n): Promise<ObjectRow> {\n  assertCanEdit(ctx, ctx.objectType.id)\n  const { objectType, primaryPropertyId, ontology } = ctx\n\n  const normalized = normalizeRuntimeObject({\n    objectType,\n    primaryPropertyId,\n    properties,\n    valueTypesById: ontology.getValueTypesById(),\n  })\n  const ref = { objectTypeId: objectType.id, primaryId: normalized.primaryId }\n\n  // The Materializer classifies this as an independent create, a patch over source authority, or a\n  // restore plus patch inside its own transaction.\n  const commit = await commitRuntimeOperations(ctx, [\n    objectUpsertOperation({ id: runtimeOperationId(0), ref, properties: normalized.properties }),\n  ])\n  return toObjectRow(ctx.projectId, requireEffectiveObject(commit.outcomes[0]))\n}\n",
+    "/**\n * Leaf operation: batch upsert objects of a single type through the ontology Materializer.\n *\n * Everything that survives local normalization is submitted as one ordered continue-mode commit, so\n * later items observe earlier ones and a provider failure rolls the whole batch back.\n */\nimport { assertCanEdit } from \"../../authorization\"\nimport { stableJsonStringify } from \"../../json\"\nimport type { BatchItemResult } from \"../../runtime/types\"\nimport type { ObjectRow } from \"../../storage\"\nimport type { ResolvedObjectContext } from \"../context\"\nimport {\n  normalizeRuntimeObject,\n  objectUpsertOperation,\n  requireEffectiveObject,\n  runtimeOperationId,\n  toObjectRow,\n} from \"../materializer-adapter\"\nimport { runRuntimeItemBatch } from \"../runtime-batch\"\n\nexport async function upsertObjectBatch(\n  ctx: ResolvedObjectContext,\n  items: readonly { properties: Record<string, unknown> }[]\n): Promise<readonly BatchItemResult<ObjectRow>[]> {\n  assertCanEdit(ctx, ctx.objectType.id)\n  const { objectType, primaryPropertyId, ontology } = ctx\n  const valueTypesById = ontology.getValueTypesById()\n\n  return runRuntimeItemBatch({\n    ctx,\n    items,\n    plan(item, index) {\n      const normalized = normalizeRuntimeObject({\n        objectType,\n        primaryPropertyId,\n        properties: item.properties,\n        valueTypesById,\n      })\n      const ref = { objectTypeId: objectType.id, primaryId: normalized.primaryId }\n      return {\n        // One commit resolves one authority state per object, so two items for the same identity are\n        // unambiguous only when they ask for the same thing.\n        key: `${ref.objectTypeId}:${ref.primaryId}`,\n        label: `object '${ref.objectTypeId}:${ref.primaryId}'`,\n        fingerprint: stableJsonStringify(normalized.properties),\n        operations: [\n          objectUpsertOperation({\n            id: runtimeOperationId(index),\n            ref,\n            properties: normalized.properties,\n          }),\n        ],\n      }\n    },\n    value: ([outcome]) => toObjectRow(ctx.projectId, requireEffectiveObject(outcome)),\n  })\n}\n",
+    "/**\n * Low-level write: append normalized telemetry points through the ontology Materializer.\n *\n * Shared by the batch operation and the per-property appenders in ObjectByIdHandle. The Materializer\n * persists immutable point history, derives latest telemetry state, and writes the commit's outbox\n * facts in one transaction, so this leaf never appends events or writes providers itself.\n */\nimport { randomUUID } from \"node:crypto\"\nimport type { AuthorizationContext } from \"../../authorization\"\nimport { assertCanAppendTelemetry } from \"../../authorization\"\nimport { MaterializationObjectNotFoundError } from \"../../materialization/errors\"\nimport type { TelemetryCommitResult, TelemetryPointWrite } from \"../../materialization/model\"\nimport { getOntologyMutationRuntime } from \"../../runtime/ontology-mutations\"\nimport { ObjectNotFoundError } from \"../../storage/errors\"\nimport type { RuntimeMaterializerContext } from \"../materializer-adapter\"\n\nexport type TelemetryWriteContext = RuntimeMaterializerContext & {\n  readonly authorization?: AuthorizationContext\n}\n\nexport async function writeTelemetryBatch(\n  ctx: TelemetryWriteContext,\n  points: readonly TelemetryPointWrite[]\n): Promise<TelemetryCommitResult | null> {\n  // Asserted from the points rather than a resolved context: this leaf is the low-level choke point\n  // for both `appendTelemetryBatch` and the per-property `TelemetryChannel`, and only the points know\n  // which object types the call actually touches.\n  for (const objectTypeId of new Set(points.map((point) => point.series.object.objectTypeId))) {\n    assertCanAppendTelemetry(ctx, objectTypeId)\n  }\n  if (points.length === 0) return null\n\n  let commit: TelemetryCommitResult\n  try {\n    commit = await getOntologyMutationRuntime(ctx).appendTelemetry({\n      source: { kind: \"runtime\", requestId: randomUUID() },\n      points,\n    })\n  } catch (error) {\n    if (error instanceof MaterializationObjectNotFoundError) {\n      throw new ObjectNotFoundError(\n        error.objectTypeId,\n        error.primaryId,\n        \"Object not found for telemetry append\"\n      )\n    }\n    throw error\n  }\n  return commit\n}\n",
+    "/**\n * Leaf operation: batch telemetry append for multiple objects of a single type.\n */\nimport { assertCanAppendTelemetry } from \"../../authorization\"\nimport type { TelemetryPointWrite } from \"../../materialization/model\"\nimport { telemetryPointKey } from \"../../materialization/refs\"\nimport { OntologyValidationError } from \"../../ontology/errors\"\nimport { assertTelemetryProperty } from \"../../ontology/validation\"\nimport type { ResolvedObjectContext } from \"../context\"\nimport { writeTelemetryBatch } from \"./write-batch\"\n\n/**\n * Type guard for telemetry values that carry an explicit unit.\n *\n * Matches only the exact `{ value, unit }` wrapper (a string `unit` and no other\n * keys) so a legitimate JSON/object telemetry value is not silently\n * reinterpreted as value+unit. A fully explicit batch contract (passing units\n * out-of-band like the single-property appender) is tracked as a follow-up;\n * this narrows the heuristic without changing the public batch API.\n */\nfunction isUnitBearingValue(raw: unknown): raw is { value: unknown; unit: string } {\n  if (raw === null || typeof raw !== \"object\") {\n    return false\n  }\n  const record = raw as Record<string, unknown>\n  return \"value\" in record && typeof record.unit === \"string\" && Object.keys(record).length === 2\n}\n\nexport async function appendTelemetryBatch(\n  ctx: ResolvedObjectContext,\n  items: readonly {\n    id: string\n    properties: Record<string, unknown | { value: unknown; unit: string }>\n    at?: Date\n  }[]\n): Promise<void> {\n  // `writeTelemetryBatch` asserts again from the points it receives. Asserting here as well is not\n  // redundant: it reports the type by name before any property is resolved, and it still refuses an\n  // empty batch, which produces no points to assert over.\n  assertCanAppendTelemetry(ctx, ctx.objectType.id)\n  const { objectType } = ctx\n  // Telemetry identity is `(series, at)`, so a repeated instant inside one call is an upsert: the\n  // last value wins rather than failing the whole batch.\n  const points = new Map<string, TelemetryPointWrite>()\n\n  for (const item of items) {\n    const at = (item.at ?? new Date()).toISOString()\n\n    for (const [propertyId, rawValue] of Object.entries(item.properties)) {\n      const propertyToken = objectType.p[propertyId]\n      if (!propertyToken) {\n        throw new OntologyValidationError(`Unknown property '${objectType.id}.${propertyId}'`)\n      }\n\n      assertTelemetryProperty(propertyToken.property)\n\n      // Value and unit validation, plus schema normalization, happen inside the Materializer.\n      const series = {\n        object: { objectTypeId: objectType.id, primaryId: item.id },\n        propertyId: propertyToken.id,\n      }\n      points.set(telemetryPointKey(series, at), {\n        series,\n        value: isUnitBearingValue(rawValue)\n          ? (rawValue.value as TelemetryPointWrite[\"value\"])\n          : (rawValue as TelemetryPointWrite[\"value\"]),\n        ...(isUnitBearingValue(rawValue) ? { unit: rawValue.unit } : {}),\n        at,\n      })\n    }\n  }\n\n  await writeTelemetryBatch(ctx, [...points.values()])\n}\n",
+    "import { createSixbError } from \"../../errors/internal\"\nimport type { AuthorizedObjectReader } from \"../../execution/authorized-object-reader\"\nimport type {\n  TimeseriesHistoryBatchInput,\n  TimeseriesHistoryBatchResult,\n  TimeseriesHistorySeriesInput,\n  TimeseriesPoint,\n  TimeseriesStorage,\n} from \"../../storage\"\n\nexport interface TelemetryHistoryOptions {\n  readonly storage: TimeseriesStorage\n  readonly objectReader: AuthorizedObjectReader\n}\n\nexport type TelemetryHistoryBatchInput = Omit<TimeseriesHistoryBatchInput, \"projectId\">\n\ninterface SnapshotTelemetryHistoryRequest extends TelemetryHistoryBatchInput {\n  readonly maxPointOccurrences?: number\n}\n\n/** Read only series selected for the exact object occurrence carried by the nominal reader. */\nexport async function getTelemetryHistoryBatch(\n  input: TelemetryHistoryBatchInput,\n  options: TelemetryHistoryOptions\n): Promise<readonly TimeseriesHistoryBatchResult[]> {\n  // Capture both provider capabilities before reading caller-owned request fields.\n  const objectReader = options.objectReader\n  const storage = options.storage\n  const projectId = objectReader.projectId\n  const request = snapshotTelemetryHistoryInput(input, objectReader)\n\n  const uniqueSeries = deduplicateSeries(request.series)\n  const readableSeries = await selectReadableSeries(uniqueSeries, objectReader)\n  const resultsBySeries = await readAndValidateHistory({\n    storage,\n    projectId,\n    request,\n    series: readableSeries,\n  })\n\n  // Objects and telemetry do not share a portable read snapshot. Recheck live selection after\n  // all provider-owned values have been detached, before deciding which points to return.\n  const releasableSeries =\n    readableSeries.length === 0 ? [] : await selectReadableSeries(readableSeries, objectReader)\n  const result = assembleHistoryResults({ request, resultsBySeries, releasableSeries })\n  objectReader.assertVisibleOutputWithinLimit(result)\n  return result\n}\n\n/** Read the latest point only while its exact object property remains selected. */\nexport async function getLatestTelemetryPoint(\n  input: TimeseriesHistorySeriesInput,\n  options: TelemetryHistoryOptions\n): Promise<TimeseriesPoint | null> {\n  const objectReader = options.objectReader\n  const storage = options.storage\n  const projectId = objectReader.projectId\n  const series = snapshotTelemetrySeries(input)\n  const readable = await objectReader.canReadObjectProperty(objectPropertySelection(series))\n  if (!readable) return visibleLatestResult(null, objectReader)\n\n  const rawResult = await storage.getLatest({ projectId, ...series })\n  const result = rawResult === null ? null : snapshotProviderPoint(rawResult)\n  if (result) assertTimeseriesPointMatchesSeries(projectId, series, result)\n\n  // See the batch release check above. Revocation during the timeseries read hides the result.\n  const releaseReadable = await objectReader.canReadObjectProperty(objectPropertySelection(series))\n  if (!releaseReadable) return visibleLatestResult(null, objectReader)\n\n  return visibleLatestResult(result, objectReader)\n}\n\nfunction deduplicateSeries(\n  series: readonly TimeseriesHistorySeriesInput[]\n): TimeseriesHistorySeriesInput[] {\n  const uniqueSeries = new Map<string, TimeseriesHistorySeriesInput>()\n  for (const item of series) {\n    const key = seriesKey(item)\n    if (!uniqueSeries.has(key)) uniqueSeries.set(key, item)\n  }\n  return [...uniqueSeries.values()]\n}\n\nasync function selectReadableSeries(\n  series: readonly TimeseriesHistorySeriesInput[],\n  objectReader: AuthorizedObjectReader\n): Promise<readonly TimeseriesHistorySeriesInput[]> {\n  const readable = await objectReader.canReadObjectPropertiesBatch({\n    items: series.map(objectPropertySelection),\n  })\n  return series.filter((_, index) => readable[index] === true)\n}\n\nasync function readAndValidateHistory(input: {\n  readonly storage: TimeseriesStorage\n  readonly projectId: string\n  readonly request: SnapshotTelemetryHistoryRequest\n  readonly series: readonly TimeseriesHistorySeriesInput[]\n}): Promise<ReadonlyMap<string, TimeseriesHistoryBatchResult>> {\n  const { storage, projectId, request, series } = input\n\n  // The provider receives its own detached request. It must never retain or mutate the canonical\n  // series snapshot that admission and the final release check rely on.\n  const providerRequest = structuredClone({\n    projectId,\n    series,\n    ...(request.from === undefined ? {} : { from: request.from }),\n    ...(request.to === undefined ? {} : { to: request.to }),\n    ...(request.limitPerSeries === undefined ? {} : { limitPerSeries: request.limitPerSeries }),\n    ...(request.order === undefined ? {} : { order: request.order }),\n  })\n  const stored = series.length === 0 ? [] : await storage.getHistoryBatch(providerRequest)\n\n  // Fully detach and validate provider-owned data before the final live check. A provider result\n  // may contain accessors or a custom iterator; none of that code may run after release admission.\n  if (!Array.isArray(stored)) throw invalidTimeseriesProviderResult()\n  const storedCount = stored.length\n  if (!Number.isSafeInteger(storedCount) || storedCount > series.length) {\n    throw invalidTimeseriesProviderResult()\n  }\n  const seriesKeys = new Set(series.map(seriesKey))\n  const providerResultBySeries = new Map<string, TimeseriesHistoryBatchResult>()\n  for (let index = 0; index < storedCount; index += 1) {\n    const providerResult = snapshotProviderResult(stored[index]!, request.limitPerSeries)\n    const key = seriesKey(providerResult)\n    if (providerResultBySeries.has(key) || !seriesKeys.has(key)) {\n      throw invalidTimeseriesProviderResult()\n    }\n    for (const point of providerResult.points) {\n      assertTimeseriesPointMatchesSeries(projectId, providerResult, point)\n    }\n    providerResultBySeries.set(key, providerResult)\n  }\n\n  return providerResultBySeries\n}\n\n/** Restore request order and duplicates, with independent point copies for every occurrence. */\nfunction assembleHistoryResults(input: {\n  readonly request: SnapshotTelemetryHistoryRequest\n  readonly resultsBySeries: ReadonlyMap<string, TimeseriesHistoryBatchResult>\n  readonly releasableSeries: readonly TimeseriesHistorySeriesInput[]\n}): readonly TimeseriesHistoryBatchResult[] {\n  const { request, resultsBySeries, releasableSeries } = input\n  const releasableSeriesKeys = new Set(releasableSeries.map(seriesKey))\n  const releasedPoints = request.series.map((series) =>\n    releasableSeriesKeys.has(seriesKey(series))\n      ? (resultsBySeries.get(seriesKey(series))?.points ?? [])\n      : []\n  )\n  const pointOccurrences = releasedPoints.reduce((total, points) => total + points.length, 0)\n  if (request.maxPointOccurrences !== undefined && pointOccurrences > request.maxPointOccurrences) {\n    throw invalidTimeseriesProviderResult()\n  }\n  return request.series.map((series, index) => ({\n    ...series,\n    points: releasedPoints[index]!.map((point) => structuredClone(point)),\n  }))\n}\n\nfunction snapshotTelemetrySeries(\n  series: TimeseriesHistorySeriesInput\n): TimeseriesHistorySeriesInput {\n  if (typeof series !== \"object\" || series === null || Array.isArray(series)) {\n    throw new Error(\"[Sixb] Telemetry history series must be an object.\")\n  }\n  const objectTypeId = telemetryIdentifier(series.objectTypeId, \"objectTypeId\")\n  const objectId = telemetryIdentifier(series.objectId, \"objectId\")\n  const propertyId = telemetryIdentifier(series.propertyId, \"propertyId\")\n  return structuredClone({ objectTypeId, objectId, propertyId })\n}\n\nfunction assertTimeseriesPointMatchesSeries(\n  projectId: string,\n  series: TimeseriesHistorySeriesInput,\n  point: TimeseriesPoint\n): void {\n  if (\n    typeof point !== \"object\" ||\n    point === null ||\n    point.projectId !== projectId ||\n    point.objectTypeId !== series.objectTypeId ||\n    point.objectId !== series.objectId ||\n    point.propertyId !== series.propertyId\n  ) {\n    throw invalidTimeseriesProviderResult()\n  }\n}\n\nfunction snapshotTelemetryHistoryInput(\n  input: TelemetryHistoryBatchInput,\n  objectReader: AuthorizedObjectReader\n): SnapshotTelemetryHistoryRequest {\n  const authoredSeries = input.series\n  const from = input.from\n  const to = input.to\n  const limitPerSeries = input.limitPerSeries\n  const order = input.order\n  if (!Array.isArray(authoredSeries)) {\n    throw new Error(\"[Sixb] Telemetry history series must be an array.\")\n  }\n  if (order !== undefined && order !== \"asc\" && order !== \"desc\") {\n    throw new Error(\"[Sixb] Telemetry history order must be 'asc' or 'desc'.\")\n  }\n\n  // Capture length once and walk by index so proxies cannot change the iteration shape halfway.\n  const seriesCount = authoredSeries.length\n  const admission = objectReader.admitTelemetryHistoryRead({\n    seriesCount,\n    ...(limitPerSeries === undefined ? {} : { limitPerSeries }),\n  })\n  const series: TimeseriesHistorySeriesInput[] = []\n  for (let index = 0; index < seriesCount; index += 1) {\n    series.push(snapshotTelemetrySeries(authoredSeries[index]!))\n  }\n  return structuredClone({\n    series,\n    ...(from === undefined ? {} : { from }),\n    ...(to === undefined ? {} : { to }),\n    ...(admission.limitPerSeries === undefined ? {} : { limitPerSeries: admission.limitPerSeries }),\n    ...(order === undefined ? {} : { order }),\n    ...(admission.maxPointOccurrences === undefined\n      ? {}\n      : { maxPointOccurrences: admission.maxPointOccurrences }),\n  })\n}\n\nfunction objectPropertySelection(series: TimeseriesHistorySeriesInput): {\n  readonly objectTypeId: string\n  readonly primaryId: string\n  readonly propertyId: string\n} {\n  return {\n    objectTypeId: series.objectTypeId,\n    primaryId: series.objectId,\n    propertyId: series.propertyId,\n  }\n}\n\nfunction visibleLatestResult<T extends TimeseriesPoint | null>(\n  result: T,\n  objectReader: AuthorizedObjectReader\n): T {\n  objectReader.assertVisibleOutputWithinLimit(result)\n  return result\n}\n\nfunction snapshotProviderResult(\n  result: TimeseriesHistoryBatchResult,\n  maxPointsPerSeries: number | undefined\n): TimeseriesHistoryBatchResult {\n  try {\n    if (typeof result !== \"object\" || result === null || Array.isArray(result)) {\n      throw invalidTimeseriesProviderResult()\n    }\n    const series = snapshotTelemetrySeries(result)\n    const authoredPoints = result.points\n    if (!Array.isArray(authoredPoints)) throw invalidTimeseriesProviderResult()\n    const pointCount = authoredPoints.length\n    if (\n      !Number.isSafeInteger(pointCount) ||\n      (maxPointsPerSeries !== undefined && pointCount > maxPointsPerSeries)\n    ) {\n      throw invalidTimeseriesProviderResult()\n    }\n    const points: TimeseriesPoint[] = []\n    for (let index = 0; index < pointCount; index += 1) {\n      points.push(snapshotProviderPoint(authoredPoints[index]!))\n    }\n    return { ...series, points }\n  } catch (error) {\n    if (isInvalidTimeseriesProviderResult(error)) throw error\n    throw invalidTimeseriesProviderResult(error)\n  }\n}\n\nfunction snapshotProviderPoint(point: TimeseriesPoint): TimeseriesPoint {\n  try {\n    const snapshot = structuredClone(point)\n    if (!snapshot || typeof snapshot !== \"object\") throw invalidTimeseriesProviderResult()\n    return snapshot\n  } catch (error) {\n    if (isInvalidTimeseriesProviderResult(error)) throw error\n    throw invalidTimeseriesProviderResult(error)\n  }\n}\n\nfunction invalidTimeseriesProviderResult(cause?: unknown): Error {\n  return createSixbError(\n    \"internal.unexpected\",\n    \"[Sixb] Timeseries storage returned data outside the requested series.\",\n    cause === undefined ? {} : { cause }\n  )\n}\n\nfunction isInvalidTimeseriesProviderResult(\n  error: unknown\n): error is Error & { readonly code: \"internal.unexpected\" } {\n  return (\n    error instanceof Error &&\n    \"code\" in error &&\n    error.code === \"internal.unexpected\" &&\n    error.message === \"[Sixb] Timeseries storage returned data outside the requested series.\"\n  )\n}\n\nfunction telemetryIdentifier(value: unknown, field: string): string {\n  if (typeof value !== \"string\" || !value.trim()) {\n    throw new Error(`[Sixb] Telemetry history ${field} must be a non-empty string.`)\n  }\n  return value\n}\n\nfunction seriesKey(series: TimeseriesHistorySeriesInput): string {\n  return JSON.stringify([series.objectTypeId, series.objectId, series.propertyId])\n}\n",
+    "/**\n * Context resolution factories.\n *\n * Resolve ontology identifiers into concrete type data so leaf functions\n * receive all structural information pre-resolved.\n */\n\nimport type { ObjectLink } from \"../../ontology\"\nimport { OntologyNotFoundError } from \"../../ontology/errors\"\nimport type { ObjectTypeWithPropertyTokens } from \"../../ontology/tokens\"\nimport type { SixbRuntimeContext } from \"../../runtime/types\"\nimport type { ResolvedLinkContext, ResolvedObjectContext } from \"./types\"\n\n/** Look up a link definition on an object type, throwing if not found. */\nexport function requireLinkDefinition(\n  objectType: ObjectTypeWithPropertyTokens,\n  linkId: string\n): ObjectLink {\n  const def = objectType.links.find((l) => l.id === linkId)\n  if (!def) throw new OntologyNotFoundError(`Unknown link '${objectType.id}.${linkId}'`)\n  return def\n}\n\n/**\n * Resolve an object type id to a full ResolvedObjectContext.\n *\n * Uses ontology.resolveObjectType() and getPrimaryPropertyId() — these\n * are structural resolution calls that belong in factories, not leaf functions.\n */\nexport function resolveObjectContext(\n  runtime: SixbRuntimeContext,\n  objectTypeId: string\n): ResolvedObjectContext {\n  const objectType = runtime.ontology.resolveObjectType(objectTypeId)\n  const primaryPropertyId = runtime.ontology.getPrimaryPropertyId(objectTypeId)\n  return { ...runtime, objectType, primaryPropertyId }\n}\n\n/**\n * Resolve a link id to a full ResolvedLinkContext.\n *\n * Uses requireLinkDefinition to look up the link definition on the\n * already-resolved object type.\n */\nexport function resolveLinkContext(\n  objCtx: ResolvedObjectContext,\n  linkId: string\n): ResolvedLinkContext {\n  const linkDefinition = requireLinkDefinition(objCtx.objectType, linkId)\n  return { ...objCtx, linkDefinition }\n}\n",
+    "/**\n * Telemetry channel factory for ObjectByIdHandle.\n *\n * Creates a per-property channel that writes through the low-level `writeTelemetryBatch` leaf and\n * reads the same series back through `getTelemetryHistoryBatch`, both keyed by the property token.\n */\nimport type { TelemetryPointWrite } from \"../../materialization/model\"\nimport type { ValueType } from \"../../ontology\"\nimport type { ObjectTypeWithPropertyTokens } from \"../../ontology/tokens\"\nimport {\n  assertPropertyTokenBelongsToObjectType,\n  assertTelemetryProperty,\n} from \"../../ontology/validation\"\nimport { RuntimeError } from \"../../runtime/errors\"\nimport type {\n  TelemetryChannel,\n  TelemetryHistoryInput,\n  TelemetryPropertyToken,\n} from \"../../runtime/types\"\nimport type { ResolvedObjectContext } from \"../context\"\nimport { getTelemetryHistoryBatch, writeTelemetryBatch } from \"../telemetry\"\n\nexport function createTelemetryChannel<\n  TObjectType extends ObjectTypeWithPropertyTokens,\n  TValueTypes extends readonly ValueType[],\n>(ctx: ResolvedObjectContext, primaryId: string) {\n  return <TToken extends TelemetryPropertyToken<TObjectType>>(\n    property: TToken\n  ): TelemetryChannel<TToken, TValueTypes> => {\n    const { objectType } = ctx\n    assertPropertyTokenBelongsToObjectType(objectType, property)\n    assertTelemetryProperty(property.property)\n\n    const series = { objectTypeId: objectType.id, objectId: primaryId, propertyId: property.id }\n\n    const channel = {\n      append: async (input: { value: unknown; unit?: string; at: Date }) => {\n        // Value and unit validation, plus schema normalization, happen inside the Materializer.\n        await writeTelemetryBatch(ctx, [\n          {\n            series: {\n              object: { objectTypeId: objectType.id, primaryId },\n              propertyId: property.id,\n            },\n            value: input.value as TelemetryPointWrite[\"value\"],\n            ...(input.unit !== undefined ? { unit: input.unit } : {}),\n            at: input.at.toISOString(),\n          },\n        ])\n      },\n\n      history: async (input: TelemetryHistoryInput = {}) => {\n        const timeseries = ctx.storage.timeseries\n        const objectReader = ctx.objectReader\n        if (!timeseries) {\n          throw new RuntimeError(\"[Sixb] Reading telemetry requires storage.timeseries support.\")\n        }\n\n        const from = input.from\n        const to = input.to\n        const limit = input.limit\n        const order = input.order\n\n        const [result] = await getTelemetryHistoryBatch(\n          {\n            series: [series],\n            ...(from !== undefined ? { from } : {}),\n            ...(to !== undefined ? { to } : {}),\n            ...(limit !== undefined ? { limitPerSeries: limit } : {}),\n            ...(order !== undefined ? { order } : {}),\n          },\n          {\n            storage: timeseries,\n            objectReader,\n          }\n        )\n\n        return (result?.points ?? []).map((point) => ({\n          value: point.value,\n          at: point.at,\n          ...(point.unit !== undefined ? { unit: point.unit } : {}),\n        }))\n      },\n    }\n\n    // Cast needed: generic token inference boundary — TToken is narrower than what `channel` sees\n    return channel as unknown as TelemetryChannel<TToken, TValueTypes>\n  }\n}\n",
+    "/**\n * ObjectByIdHandle binds operations to a specific object id within an ObjectSet.\n * Created via `sixb.objects(MyType).byId(\"id-1\")`, it provides link/unlink and\n * per-property telemetry appenders with compile-time unit and value type safety.\n */\nimport type { ActionDefinition } from \"../../actions\"\nimport type { ObjectLink, ObjectRef, ValueType } from \"../../ontology\"\nimport { OntologyValidationError } from \"../../ontology/errors\"\nimport type { LinkToken, ObjectTypeWithPropertyTokens } from \"../../ontology/tokens\"\nimport { assertLinkTokenBelongsToObjectType } from \"../../ontology/validation\"\nimport type { ObjectByIdHandle, TwinObject } from \"../../runtime/types\"\nimport {\n  requestActionAndWait as requestActionAndWaitLeaf,\n  requestAction as requestActionLeaf,\n} from \"../action\"\nimport type { ExecutionObjectContext, ResolvedLinkContext } from \"../context\"\nimport { removeLink as removeLinkLeaf, upsertLink as upsertLinkLeaf } from \"../link\"\nimport { deleteObject, restoreObject } from \"../object\"\nimport { createTelemetryChannel } from \"./telemetry-channel\"\n\ntype ObjectRefInput = ObjectRef\ntype AnyLinkToken = LinkToken<string, string, string | readonly string[], ObjectLink>\n\nexport function createObjectByIdHandle<\n  TObjectType extends ObjectTypeWithPropertyTokens,\n  TValueTypes extends readonly ValueType[],\n>(ctx: ExecutionObjectContext, primaryId: string): ObjectByIdHandle<TObjectType, TValueTypes> {\n  const objectHandle = {\n    get: async () => {\n      const row = await ctx.objectReader.getByPrimaryId({\n        objectTypeId: ctx.objectType.id,\n        primaryId,\n      })\n      return row ? (row as unknown as TwinObject<TObjectType, TValueTypes>) : null\n    },\n\n    listLinks: async (linkToken?: AnyLinkToken) => {\n      if (linkToken) {\n        assertLinkTokenBelongsToObjectType(ctx.objectType, linkToken)\n      }\n      return ctx.objectReader.listLinks({\n        objectTypeId: ctx.objectType.id,\n        objectId: primaryId,\n        linkId: linkToken?.id,\n      })\n    },\n\n    link: async (\n      linkToken: AnyLinkToken,\n      target: ObjectRefInput,\n      options?: { properties?: Record<string, unknown> }\n    ) => {\n      assertLinkTokenBelongsToObjectType(ctx.objectType, linkToken)\n\n      const linkCtx: ResolvedLinkContext = { ...ctx, linkDefinition: linkToken.link }\n      await upsertLinkLeaf(linkCtx, {\n        sourceId: primaryId,\n        linkId: linkToken.id,\n        targetTypeId: target.objectTypeId,\n        targetId: target.primaryId,\n        properties: options?.properties,\n      })\n    },\n\n    unlink: async (linkToken: AnyLinkToken, target: ObjectRefInput) => {\n      assertLinkTokenBelongsToObjectType(ctx.objectType, linkToken)\n\n      const linkCtx: ResolvedLinkContext = { ...ctx, linkDefinition: linkToken.link }\n      await removeLinkLeaf(linkCtx, {\n        sourceId: primaryId,\n        linkId: linkToken.id,\n        targetTypeId: target.objectTypeId,\n        targetId: target.primaryId,\n      })\n    },\n\n    delete: async () => {\n      await deleteObject(ctx, primaryId)\n    },\n\n    restore: async () => {\n      await restoreObject(ctx, primaryId)\n    },\n\n    requestAction: async (input: {\n      action?: ActionDefinition\n      actionId?: string\n      params?: Record<string, unknown>\n      runId?: string\n    }) => {\n      const actionId = input.action?.id ?? input.actionId\n      if (!actionId) {\n        throw new OntologyValidationError(\n          \"[Sixb] requestAction requires either 'action' or 'actionId'\"\n        )\n      }\n      return requestActionLeaf(ctx, {\n        primaryId,\n        actionId,\n        params: input.params,\n        options: { runId: input.runId },\n      })\n    },\n\n    requestActionAndWait: async (input: {\n      action?: ActionDefinition\n      actionId?: string\n      params?: Record<string, unknown>\n      timeoutMs?: number\n      signal?: AbortSignal\n    }) => {\n      const actionId = input.action?.id ?? input.actionId\n      if (!actionId) {\n        throw new OntologyValidationError(\n          \"[Sixb] requestActionAndWait requires either 'action' or 'actionId'\"\n        )\n      }\n      return requestActionAndWaitLeaf(ctx, {\n        primaryId,\n        actionId,\n        params: input.params,\n        options: {\n          timeoutMs: input.timeoutMs,\n          signal: input.signal,\n        },\n      })\n    },\n\n    telemetry: createTelemetryChannel<TObjectType, TValueTypes>(ctx, primaryId),\n  }\n\n  return objectHandle as unknown as ObjectByIdHandle<TObjectType, TValueTypes>\n}\n",
+    "/**\n * Server-side ObjectQueryExecutor backed by the shared query executor and storage.\n * Validation, planning, fallback, and execution all run in-process here; the\n * HTTP executor in `@sixb/client` is the remote counterpart.\n */\n\nimport type { AuthorizedObjectReader } from \"../../execution/authorized-object-reader\"\nimport type { OntologyRegistry } from \"../../ontology\"\nimport { ObjectQueryPlanningError } from \"../query\"\nimport { explainObjectQuery } from \"../query/explain\"\nimport type { ObjectQuery } from \"../query/ir\"\nimport { validateObjectQuery } from \"../query/validate\"\nimport type { ObjectQueryExecutor, ObjectQueryExecutorFacetRequest } from \"./query-executor\"\n\nexport function createRuntimeQueryExecutor(params: {\n  ontology: OntologyRegistry\n  objectReader: AuthorizedObjectReader\n}): ObjectQueryExecutor {\n  const { ontology, objectReader } = params\n\n  return {\n    async list(query: ObjectQuery, options?: { includeTotal?: boolean }) {\n      try {\n        return await objectReader.executeQuery({ query, includeTotal: options?.includeTotal })\n      } catch (error) {\n        if (error instanceof ObjectQueryPlanningError) {\n          throw addSdkPlanningHints(error)\n        }\n        throw error\n      }\n    },\n\n    async count(query: ObjectQuery) {\n      const result = await objectReader.count({ query })\n      return result.count\n    },\n\n    async exists(query: ObjectQuery) {\n      const result = await objectReader.exists({ query })\n      return result.exists\n    },\n\n    async facets(query: ObjectQuery, facets: readonly ObjectQueryExecutorFacetRequest[]) {\n      const result = await objectReader.facet({ query, facets })\n      return result.facets.map((facet) => ({\n        propertyId: facet.propertyId,\n        buckets: [...facet.buckets],\n      }))\n    },\n\n    validate(query: ObjectQuery) {\n      return validateObjectQuery(query, { ontology, normalize: false })\n    },\n\n    explain(query: ObjectQuery) {\n      return explainObjectQuery(query, { ontology, normalize: false })\n    },\n  }\n}\n\nfunction addSdkPlanningHints(error: ObjectQueryPlanningError): ObjectQueryPlanningError {\n  if (!error.issues.some((issue) => issue.code === \"fallback_requires_bound\")) return error\n\n  return new ObjectQueryPlanningError(\n    error.issues.map((issue) =>\n      issue.code === \"fallback_requires_bound\"\n        ? {\n            ...issue,\n            message:\n              \"Object query fallback requires an explicit result bound. Add .limit(n) or .page({ pageSize: n }) before .list().\",\n          }\n        : issue\n    )\n  )\n}\n",
+    "/**\n * ObjectSet provides a type-safe collection API for objects of a given type.\n * Created via `sixb.objects(MyType)`, it exposes upsert, query, and telemetry batch operations\n * while preserving compile-time property types inferred from the ontology definition.\n */\n\nimport type { ActionDefinition } from \"../../actions\"\nimport type { AuthorizationContext } from \"../../authorization\"\nimport { shareSixbErrorReporter } from \"../../error-reporting/capability\"\nimport type { ExecutionContext } from \"../../execution\"\nimport { assertAuthorizedObjectReaderBinding } from \"../../execution/authorized-object-reader\"\nimport type { ValueType } from \"../../ontology\"\nimport { OntologyValidationError } from \"../../ontology/errors\"\nimport type { ObjectTypeWithPropertyTokens } from \"../../ontology/tokens\"\nimport { shareOntologyMutationRuntime } from \"../../runtime/ontology-mutations\"\nimport type {\n  ObjectSet,\n  ObjectSetListInput,\n  SixbRuntimeContext,\n  TwinObject,\n} from \"../../runtime/types\"\nimport {\n  requestActionAndWait as requestActionAndWaitLeaf,\n  requestAction as requestActionLeaf,\n} from \"../action\"\nimport type { ExecutionObjectContext, ResolvedLinkContext } from \"../context\"\nimport { requireLinkDefinition } from \"../context\"\nimport { removeLink as removeLinkLeaf, upsertLink as upsertLinkLeaf } from \"../link\"\nimport { upsertObject as upsertObjectLeaf } from \"../object\"\nimport { appendTelemetryBatch as appendTelemetryBatchLeaf } from \"../telemetry\"\nimport { createObjectByIdHandle } from \"./object-handle\"\nimport { createObjectQueryBuilder } from \"./query-builder\"\nimport { createRuntimeQueryExecutor } from \"./runtime-query-executor\"\n\nexport function createObjectSet<\n  TObjectType extends ObjectTypeWithPropertyTokens,\n  TRegisteredObjectTypes extends ObjectTypeWithPropertyTokens,\n  TValueTypes extends readonly ValueType[],\n>(\n  params: SixbRuntimeContext & {\n    readonly execution: ExecutionContext\n    readonly objectType: TObjectType\n    readonly authorization?: AuthorizationContext\n  }\n): ObjectSet<TObjectType, TValueTypes, TRegisteredObjectTypes> {\n  assertAuthorizedObjectReaderBinding({\n    reader: params.objectReader,\n    scope: { execution: params.execution, authorization: params.runtimeAuthorization },\n  })\n  const { objectType } = params\n  const primaryProp = objectType.properties.find((p) => p.primary)\n  if (!primaryProp) {\n    throw new OntologyValidationError(`Object type '${objectType.id}' has no primary property`)\n  }\n  const primaryPropertyId = primaryProp.id\n\n  const {\n    projectId,\n    broker,\n    ontology,\n    actionRegistry,\n    events,\n    storage,\n    queues,\n    objectReader,\n    runtimeAuthorization,\n    authorization,\n    execution,\n  } = params\n  const queryExecutor = createRuntimeQueryExecutor({\n    ontology,\n    objectReader,\n  })\n\n  const resolvedCtx: ExecutionObjectContext = {\n    projectId,\n    broker,\n    ontology,\n    actionRegistry,\n    events,\n    storage,\n    queues,\n    objectReader,\n    runtimeAuthorization,\n    authorization,\n    execution,\n    objectType,\n    primaryPropertyId,\n  }\n  shareOntologyMutationRuntime(params, resolvedCtx)\n  shareSixbErrorReporter(params, resolvedCtx)\n\n  const objectSet = {\n    get: async (id: string) => {\n      const row = await objectReader.getByPrimaryId({\n        objectTypeId: objectType.id,\n        primaryId: id,\n      })\n      return row ? (row as unknown as TwinObject<TObjectType, TValueTypes>) : null\n    },\n\n    upsert: async (input: { properties: Record<string, unknown> }) => {\n      const row = await upsertObjectLeaf(resolvedCtx, input.properties)\n      return row as unknown as TwinObject<TObjectType, TValueTypes>\n    },\n\n    query: () =>\n      createObjectQueryBuilder<TObjectType, TRegisteredObjectTypes, TValueTypes>({\n        query: { kind: \"start\", objectTypeId: objectType.id },\n        executor: queryExecutor,\n      }),\n\n    byId: (id: string) => createObjectByIdHandle<TObjectType, TValueTypes>(resolvedCtx, id),\n\n    list: async (input?: ObjectSetListInput) => {\n      const result = await objectReader.list({\n        objectTypeId: objectType.id,\n        primaryIdPrefix: input?.idPrefix,\n        primaryIdSuffix: input?.idSuffix,\n        updatedAfter: input?.updatedAfter,\n        updatedBefore: input?.updatedBefore,\n        createdAfter: input?.createdAfter,\n        createdBefore: input?.createdBefore,\n        limit: input?.limit,\n        offset: input?.offset,\n        orderBy: input?.orderBy,\n        order: input?.order,\n      })\n\n      return {\n        objects: result.objects.map(\n          (row) => row as unknown as TwinObject<TObjectType, TValueTypes>\n        ),\n        hasMore: result.hasMore,\n        total: result.total ?? result.objects.length,\n      }\n    },\n\n    appendTelemetryBatch: async (\n      items: readonly {\n        id: string\n        properties: Record<string, unknown | { value: unknown; unit: string }>\n        at?: Date\n      }[]\n    ) => {\n      await appendTelemetryBatchLeaf(resolvedCtx, items)\n    },\n\n    requestAction: async (input: {\n      id: string\n      action?: ActionDefinition\n      actionId?: string\n      params?: Record<string, unknown>\n      runId?: string\n    }) => {\n      const actionId = input.action?.id ?? input.actionId\n      if (!actionId) {\n        throw new OntologyValidationError(\n          \"[Sixb] requestAction requires either 'action' or 'actionId'\"\n        )\n      }\n      return requestActionLeaf(resolvedCtx, {\n        primaryId: input.id,\n        actionId,\n        params: input.params,\n        options: { runId: input.runId },\n      })\n    },\n\n    requestActionAndWait: async (input: {\n      id: string\n      action?: ActionDefinition\n      actionId?: string\n      params?: Record<string, unknown>\n      timeoutMs?: number\n      signal?: AbortSignal\n    }) => {\n      const actionId = input.action?.id ?? input.actionId\n      if (!actionId) {\n        throw new OntologyValidationError(\n          \"[Sixb] requestActionAndWait requires either 'action' or 'actionId'\"\n        )\n      }\n      return requestActionAndWaitLeaf(resolvedCtx, {\n        primaryId: input.id,\n        actionId,\n        params: input.params,\n        options: {\n          timeoutMs: input.timeoutMs,\n          signal: input.signal,\n        },\n      })\n    },\n\n    upsertLink: async (input: {\n      sourceId: string\n      linkId: string\n      targetTypeId: string\n      targetId: string\n      properties?: Record<string, unknown>\n    }) => {\n      const linkDefinition = requireLinkDefinition(objectType, input.linkId)\n      const linkCtx: ResolvedLinkContext = { ...resolvedCtx, linkDefinition }\n\n      await upsertLinkLeaf(linkCtx, {\n        sourceId: input.sourceId,\n        linkId: input.linkId,\n        targetTypeId: input.targetTypeId,\n        targetId: input.targetId,\n        properties: input.properties,\n      })\n    },\n\n    removeLink: async (input: {\n      sourceId: string\n      linkId: string\n      targetTypeId: string\n      targetId: string\n    }) => {\n      const linkDefinition = requireLinkDefinition(objectType, input.linkId)\n      const linkCtx: ResolvedLinkContext = { ...resolvedCtx, linkDefinition }\n\n      await removeLinkLeaf(linkCtx, {\n        sourceId: input.sourceId,\n        linkId: input.linkId,\n        targetTypeId: input.targetTypeId,\n        targetId: input.targetId,\n      })\n    },\n  }\n\n  return objectSet as unknown as ObjectSet<TObjectType, TValueTypes, TRegisteredObjectTypes>\n}\n",
+    "/**\n * Service layer for action operations.\n *\n * Resolves objectTypeId to a typed context and delegates to the leaf function.\n */\n\nimport type { RequestActionResult } from \"../../actions/request\"\nimport type { ExecutionContext } from \"../../execution\"\nimport type { SixbRuntimeContext } from \"../../runtime/types\"\nimport type { ActionRunRecord } from \"../../storage\"\nimport {\n  type RequestActionAndWaitOptions,\n  type RequestActionOptions,\n  requestActionAndWait as requestActionAndWaitLeaf,\n  requestAction as requestActionLeaf,\n} from \"../action\"\nimport { resolveObjectContext } from \"../context\"\n\nexport async function requestAction(\n  runtime: SixbRuntimeContext,\n  execution: ExecutionContext,\n  objectTypeId: string,\n  primaryId: string,\n  actionId: string,\n  params?: Record<string, unknown>,\n  options?: RequestActionOptions\n): Promise<RequestActionResult> {\n  const ctx = { ...resolveObjectContext(runtime, objectTypeId), execution }\n  return requestActionLeaf(ctx, { primaryId, actionId, params, options })\n}\n\nexport async function requestActionAndWait(\n  runtime: SixbRuntimeContext,\n  execution: ExecutionContext,\n  objectTypeId: string,\n  primaryId: string,\n  actionId: string,\n  params?: Record<string, unknown>,\n  options?: RequestActionAndWaitOptions\n): Promise<ActionRunRecord> {\n  const ctx = { ...resolveObjectContext(runtime, objectTypeId), execution }\n  return requestActionAndWaitLeaf(ctx, { primaryId, actionId, params, options })\n}\n",
+    "/**\n * Service layer for link operations.\n *\n * Resolves objectTypeId to a typed context and delegates to leaf functions.\n */\nimport type { BatchItemResult, SixbRuntimeContext } from \"../../runtime/types\"\nimport type { ResolvedLinkBatchItem } from \"../context\"\nimport { requireLinkDefinition, resolveLinkContext, resolveObjectContext } from \"../context\"\nimport {\n  removeLink as removeLinkLeaf,\n  upsertLinkBatch as upsertLinkBatchLeaf,\n  upsertLink as upsertLinkLeaf,\n} from \"../link\"\n\nexport async function upsertLink(\n  runtime: SixbRuntimeContext,\n  objectTypeId: string,\n  sourceId: string,\n  linkId: string,\n  target: { targetTypeId: string; targetId: string; properties?: Record<string, unknown> }\n): Promise<void> {\n  const ctx = resolveObjectContext(runtime, objectTypeId)\n  const linkCtx = resolveLinkContext(ctx, linkId)\n  await upsertLinkLeaf(linkCtx, {\n    sourceId,\n    linkId,\n    targetTypeId: target.targetTypeId,\n    targetId: target.targetId,\n    properties: target.properties,\n  })\n}\n\nexport async function upsertLinkBatch(\n  runtime: SixbRuntimeContext,\n  items: readonly {\n    objectTypeId: string\n    sourceId: string\n    linkId: string\n    target: { targetTypeId: string; targetId: string; properties?: Record<string, unknown> }\n  }[]\n): Promise<readonly BatchItemResult<void>[]> {\n  const resolvedItems: ResolvedLinkBatchItem[] = items.map((item) => {\n    const objectType = runtime.ontology.resolveObjectType(item.objectTypeId)\n    const linkDefinition = requireLinkDefinition(objectType, item.linkId)\n    return {\n      objectType,\n      linkDefinition,\n      sourceId: item.sourceId,\n      linkId: item.linkId,\n      targetTypeId: item.target.targetTypeId,\n      targetId: item.target.targetId,\n      properties: item.target.properties,\n    }\n  })\n\n  return upsertLinkBatchLeaf(runtime, resolvedItems)\n}\n\nexport async function removeLink(\n  runtime: SixbRuntimeContext,\n  objectTypeId: string,\n  sourceId: string,\n  linkId: string,\n  target: { targetTypeId: string; targetId: string }\n): Promise<void> {\n  const ctx = resolveObjectContext(runtime, objectTypeId)\n  const linkCtx = resolveLinkContext(ctx, linkId)\n  await removeLinkLeaf(linkCtx, {\n    sourceId,\n    linkId,\n    targetTypeId: target.targetTypeId,\n    targetId: target.targetId,\n  })\n}\n",
+    "/**\n * Cross-type object listing for dashboards and search.\n *\n * Type hierarchies are expanded before the request reaches the canonical object\n * reader, which owns authorization and provider-scope enforcement.\n */\n\nimport { resolveRuntimeAuthorizationForProject } from \"../../execution/authorization\"\nimport { getAuthorizedOntologyView } from \"../../execution/authorized-object-reader\"\nimport type { ListResult, SixbRuntimeContext } from \"../../runtime/types\"\nimport type { ObjectRow } from \"../../storage\"\n\nexport interface ListObjectsParams {\n  objectTypeIds?: readonly string[]\n  idPrefix?: string\n  idSuffix?: string\n  updatedAfter?: Date\n  updatedBefore?: Date\n  createdAfter?: Date\n  createdBefore?: Date\n  limit?: number\n  offset?: number\n  orderBy?: \"createdAt\" | \"updatedAt\" | \"primaryId\"\n  order?: \"asc\" | \"desc\"\n}\n\nexport async function listObjects(\n  runtime: SixbRuntimeContext,\n  params: ListObjectsParams\n): Promise<ListResult<ObjectRow>> {\n  const objectTypeIds = resolveTypeFilter(runtime, params.objectTypeIds)\n\n  if (objectTypeIds !== undefined && objectTypeIds.length === 0) {\n    return { objects: [], hasMore: false, total: 0 }\n  }\n\n  const result = await runtime.objectReader.list({\n    objectTypeId: objectTypeIds?.length === 1 ? objectTypeIds[0] : objectTypeIds,\n    primaryIdPrefix: params.idPrefix,\n    primaryIdSuffix: params.idSuffix,\n    updatedAfter: params.updatedAfter,\n    updatedBefore: params.updatedBefore,\n    createdAfter: params.createdAfter,\n    createdBefore: params.createdBefore,\n    limit: params.limit,\n    offset: params.offset,\n    orderBy: params.orderBy,\n    order: params.order,\n  })\n\n  return {\n    objects: [...result.objects],\n    hasMore: result.hasMore,\n    total: result.total,\n  }\n}\n\nfunction resolveTypeFilter(\n  runtime: SixbRuntimeContext,\n  requested: readonly string[] | undefined\n): readonly string[] | undefined {\n  const ontology =\n    resolveRuntimeAuthorizationForProject(runtime).type === \"delegated\"\n      ? getAuthorizedOntologyView(runtime.objectReader)\n      : runtime.ontology\n  if (requested) {\n    for (const objectTypeId of requested) {\n      ontology.resolveObjectType(objectTypeId)\n    }\n  }\n\n  return requested\n    ? [...new Set(requested.flatMap((id) => [id, ...ontology.listSubTypes(id)]))]\n    : undefined\n}\n",
+    "/**\n * Service layer for object upsert operations.\n *\n * Resolves objectTypeId to a typed context and delegates to leaf functions.\n */\nimport type { BatchItemResult, SixbRuntimeContext } from \"../../runtime/types\"\nimport type { ObjectRow } from \"../../storage\"\nimport { resolveObjectContext } from \"../context\"\nimport {\n  upsertObjectBatch as upsertObjectBatchLeaf,\n  upsertObject as upsertObjectLeaf,\n} from \"../object\"\n\nexport async function upsertObject(\n  runtime: SixbRuntimeContext,\n  objectTypeId: string,\n  properties: Record<string, unknown>\n): Promise<ObjectRow> {\n  return upsertObjectLeaf(resolveObjectContext(runtime, objectTypeId), properties)\n}\n\nexport async function upsertObjectBatch(\n  runtime: SixbRuntimeContext,\n  objectTypeId: string,\n  items: readonly { properties: Record<string, unknown> }[]\n): Promise<readonly BatchItemResult<ObjectRow>[]> {\n  return upsertObjectBatchLeaf(resolveObjectContext(runtime, objectTypeId), items)\n}\n",
+    "/**\n * Service layer for telemetry operations.\n *\n * Resolves objectTypeId to a typed context and delegates to the leaf function.\n */\nimport type { SixbRuntimeContext } from \"../../runtime/types\"\nimport { resolveObjectContext } from \"../context\"\nimport { appendTelemetryBatch as appendTelemetryBatchLeaf } from \"../telemetry\"\n\nexport async function appendTelemetry(\n  runtime: SixbRuntimeContext,\n  objectTypeId: string,\n  items: readonly { id: string; properties: Record<string, unknown>; at?: Date }[]\n): Promise<void> {\n  const ctx = resolveObjectContext(runtime, objectTypeId)\n  await appendTelemetryBatchLeaf(ctx, items)\n}\n"
+  ],
+  "mappings": ";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAkBA,eAAsB,cAAa,CACjC,KACA,QAM8B;AAAA,EAC9B,OAAO,eAAqB,KAAK,IAAI,WAAW;AAAA,IAC9C,UAAU,OAAO;AAAA,IACjB,SAAS;AAAA,MACP,MAAM;AAAA,MACN,cAAc,IAAI,WAAW;AAAA,MAC7B,WAAW,OAAO;AAAA,IACpB;AAAA,IACA,QAAQ,OAAO;AAAA,IACf,OAAO,OAAO,SAAS;AAAA,IACvB,QAAQ,OAAO,SAAS;AAAA,EAC1B,CAAC;AAAA;AAGH,eAAsB,oBAAoB,CACxC,KACA,QAM0B;AAAA,EAC1B,OAAO,sBAA4B,KAAK,IAAI,WAAW;AAAA,IACrD,UAAU,OAAO;AAAA,IACjB,SAAS;AAAA,MACP,MAAM;AAAA,MACN,cAAc,IAAI,WAAW;AAAA,MAC7B,WAAW,OAAO;AAAA,IACpB;AAAA,IACA,QAAQ,OAAO;AAAA,IACf,OAAO,OAAO,SAAS;AAAA,IACvB,WAAW,OAAO,SAAS;AAAA,IAC3B,QAAQ,OAAO,SAAS;AAAA,IACxB,aAAa,OAAO,SAAS;AAAA,EAC/B,CAAC;AAAA;;ACzDI,MAAM,qBAAoB,MAAM;AAAA,EAC5B,OAAO;AAClB;;;ACGA;AAkDA,eAAsB,uBAAuB,CAC3C,KACA,YAC2B;AAAA,EAC3B,MAAM,YAAY,4BAA2B,GAAG;AAAA,EAChD,MAAM,SAAS,MAAM,UAAU,YAAY;AAAA,IACzC,MAAM;AAAA,IACN,QAAQ,EAAE,MAAM,WAAW,WAAW,WAAW,EAAE;AAAA,IACnD;AAAA,IACA,iBAAiB,CAAC;AAAA,IAClB,eAAe,CAAC;AAAA,IAChB,oBAAoB,CAAC;AAAA,EACvB,CAAC;AAAA,EACD,OAAO;AAAA;AAYT,eAAsB,kBAAkB,CACtC,KACA,QAC6B;AAAA,EAC7B,MAAM,aAAa,OAAO,QAAQ,CAAC,UAAU,MAAM,UAAU;AAAA,EAC7D,IAAI,WAAW,WAAW,GAAG;AAAA,IAC3B,OAAO,EAAE,QAAQ,MAAM,UAAU,IAAI,IAAM;AAAA,EAC7C;AAAA,EAEA,MAAM,kBAAkB,OACrB,OAAO,CAAC,UAAU,MAAM,WAAW,SAAS,CAAC,EAC7C,IAAI,CAAC,UAAU,MAAM,WAAW,IAAI,CAAC,cAAc,UAAU,EAAE,CAAC;AAAA,EAEnE,MAAM,YAAY,4BAA2B,GAAG;AAAA,EAChD,MAAM,SAAS,MAAM,UAAU,YAAY;AAAA,IACzC,MAAM;AAAA,IACN,QAAQ,EAAE,MAAM,WAAW,WAAW,WAAW,EAAE;AAAA,IACnD;AAAA,OACI,gBAAgB,SAAS,IAAI,EAAE,gBAAgB,IAAI,CAAC;AAAA,EAC1D,CAAC;AAAA,EAED,MAAM,OAAO,IAAI,IAAI,OAAO,SAAS,IAAI,CAAC,YAAY,CAAC,QAAQ,IAAI,OAAO,CAAC,CAAC;AAAA,EAC5E,MAAM,WAAW,IAAI;AAAA,EACrB,WAAW,SAAS,QAAQ;AAAA,IAC1B,SAAS,IACP,MAAM,OACN,MAAM,WAAW,IAAI,CAAC,cAAc,eAAe,MAAM,UAAU,EAAE,CAAC,CACxE;AAAA,EACF;AAAA,EACA,OAAO,EAAE,QAAQ,SAAS;AAAA;AASrB,SAAS,kBAAkB,CAAC,OAAe,aAAa,GAAW;AAAA,EACxE,OAAO,eAAe,IAAI,MAAM,UAAU,MAAM,SAAS;AAAA;AAgBpD,SAAS,sBAAsB,CAAC,OAKX;AAAA,EAC1B,QAAQ,YAAY,mBAAmB,YAAY,mBAAmB;AAAA,EACtE,uBAAsB,YAAY,UAAU;AAAA,EAC5C,0BAAyB,YAAY,YAAY,cAAc;AAAA,EAE/D,MAAM,eAAe,WAAW;AAAA,EAChC,IAAI,iBAAiB,aAAa,iBAAiB,MAAM;AAAA,IACvD,MAAM,IAAI,yBACR,oCAAoC,qCAAqC,WAAW,KACtF;AAAA,EACF;AAAA,EAEA,MAAM,aAAa,2BACjB,WAAW,YACX,YACA,gBACA,WAAW,EACb;AAAA,EACA,SAAS,oBAAoB,cAAc,YAAY;AAAA,EACvD,OAAO;AAAA,IACL,WAAW,OAAO,YAAY;AAAA,IAC9B,YAAY,yBAAwB,SAAS,GAAG,WAAW,eAAe;AAAA,EAC5E;AAAA;AASK,SAAS,oBAAoB,CAAC,OAQe;AAAA,EAClD,QAAQ,YAAY,gBAAgB,QAAQ,cAAc,YAAY,mBAAmB;AAAA,EACzF,sBAAqB,WAAW,IAAI,QAAQ,gBAAgB,cAAc,MAAM,iBAAiB;AAAA,EACjG,wBAAuB,YAAY,gBAAgB,YAAY,WAAW,cAAc;AAAA,EACxF,MAAM,aAAa,yBAAwB,YAAY,gBAAgB,YAAY,cAAc;AAAA,EACjG,IAAI,eAAe;AAAA,IAAW;AAAA,EAC9B,OAAO,yBAAwB,YAAY,GAAG,WAAW,MAAM,mBAAmB;AAAA;AAG7E,SAAS,qBAAqB,CAAC,OAIZ;AAAA,EACxB,OAAO,EAAE,IAAI,MAAM,IAAI,MAAM,iBAAiB,KAAK,MAAM,KAAK,YAAY,MAAM,WAAW;AAAA;AAGtF,SAAS,qBAAqB,CAAC,OAGZ;AAAA,EACxB,OAAO,EAAE,IAAI,MAAM,IAAI,MAAM,iBAAiB,KAAK,MAAM,IAAI;AAAA;AAGxD,SAAS,sBAAsB,CAAC,OAGb;AAAA,EACxB,OAAO,EAAE,IAAI,MAAM,IAAI,MAAM,kBAAkB,KAAK,MAAM,IAAI;AAAA;AAGzD,SAAS,mBAAmB,CAAC,OAIV;AAAA,EACxB,OAAO;AAAA,IACL,IAAI,MAAM;AAAA,IACV,MAAM;AAAA,IACN,KAAK,MAAM;AAAA,OACP,MAAM,eAAe,YAAY,EAAE,YAAY,MAAM,WAAW,IAAI,CAAC;AAAA,EAC3E;AAAA;AAGK,SAAS,mBAAmB,CAAC,OAGV;AAAA,EACxB,OAAO,EAAE,IAAI,MAAM,IAAI,MAAM,eAAe,KAAK,MAAM,IAAI;AAAA;AAItD,SAAS,mBAAmB,CACjC,QACA,OACqC;AAAA,EACrC,MAAM,WAAW,OAAO,SAAS,IAAI,KAAK;AAAA,EAC1C,IAAI,CAAC,YAAY,SAAS,WAAW,GAAG;AAAA,IACtC,MAAM,IAAI,aAAY,0DAA0D,QAAQ;AAAA,EAC1F;AAAA,EACA,OAAO;AAAA;AAIF,SAAS,sBAAsB,CAAC,SAA4D;AAAA,EACjG,IAAI,CAAC,QAAQ,MAAM,CAAC,QAAQ,QAAQ;AAAA,IAClC,MAAM,IAAI,aAAY,yDAAyD,QAAQ,MAAM;AAAA,EAC/F;AAAA,EACA,OAAO,QAAQ;AAAA;AAGV,SAAS,WAAW,CAAC,WAAmB,UAA8C;AAAA,EAC3F,OAAO;AAAA,IACL;AAAA,IACA,cAAc,SAAS,IAAI;AAAA,IAC3B,WAAW,SAAS,IAAI;AAAA,IACxB,YAAY,gBAAgB,SAAS,UAAU;AAAA,IAC/C,WAAW,IAAI,KAAK,SAAS,SAAS;AAAA,IACtC,WAAW,IAAI,KAAK,SAAS,SAAS;AAAA,IACtC,SAAS,SAAS;AAAA,IAClB,cAAc,SAAS;AAAA,EACzB;AAAA;AAIK,SAAS,WAAW,CAAC,OAAwC;AAAA,EAClE,QAAQ,MAAM;AAAA,SACP;AAAA,MACH,OAAO,IAAI,yBAAwB,MAAM,OAAO;AAAA;AAAA;AAItD,SAAS,cAAc,CACrB,UACA,IAC0B;AAAA,EAC1B,MAAM,UAAU,SAAS,IAAI,EAAE;AAAA,EAC/B,IAAI,CAAC,SAAS;AAAA,IACZ,MAAM,IAAI,aAAY,gDAAgD,MAAM;AAAA,EAC9E;AAAA,EACA,OAAO;AAAA;;;ACvQF,SAAS,kBAAkB,CAChC,KACA,WACM;AAAA,EACN,eAAc,KAAK,UAAU,YAAY;AAAA,EACzC,kBAAiB,KAAK,EAAE,MAAM,eAAe,cAAc,UAAU,aAAa,CAAC;AAAA;;;ACbrF,eAAsB,WAAU,CAC9B,KACA,QAMe;AAAA,EACf,QAAQ,YAAY,gBAAgB,aAAa;AAAA,EACjD,QAAQ,UAAU,QAAQ,cAAc,aAAa;AAAA,EACrD,mBAAmB,KAAK,EAAE,cAAc,WAAW,IAAI,aAAa,CAAC;AAAA,EAErE,sBAAqB,WAAW,IAAI,QAAQ,gBAAgB,cAAc,CAAC,UAAU,WACnF,SAAS,kBAAkB,UAAU,MAAM,CAC7C;AAAA,EAIA,MAAM,wBAAwB,KAAK;AAAA,IACjC,oBAAoB;AAAA,MAClB,IAAI,mBAAmB,CAAC;AAAA,MACxB,KAAK;AAAA,QACH,QAAQ,EAAE,cAAc,WAAW,IAAI,WAAW,SAAS;AAAA,QAC3D;AAAA,QACA,QAAQ,EAAE,cAAc,cAAc,WAAW,SAAS;AAAA,MAC5D;AAAA,IACF,CAAC;AAAA,EACH,CAAC;AAAA;;;ACnBI,SAAS,sBAAsB,CACpC,OAC+C;AAAA,EAC/C,MAAM,UAAyD,CAAC;AAAA,EAChE,MAAM,OAAO,IAAI;AAAA,EAEjB,WAAW,QAAQ,OAAO;AAAA,IACxB,WAAW,YAAY;AAAA,MACrB,EAAE,cAAc,KAAK,WAAW,IAAI,WAAW,KAAK,SAAS;AAAA,MAC7D,EAAE,cAAc,KAAK,cAAc,WAAW,KAAK,SAAS;AAAA,IAC9D,GAAG;AAAA,MACD,MAAM,MAAM,YAAY,SAAS,cAAc,SAAS,SAAS;AAAA,MACjE,IAAI,KAAK,IAAI,GAAG;AAAA,QAAG;AAAA,MACnB,KAAK,IAAI,GAAG;AAAA,MACZ,QAAQ,KAAK,QAAQ;AAAA,IACvB;AAAA,EACF;AAAA,EAEA,OAAO;AAAA;AAGT,eAAsB,qBAAqB,CACzC,KACA,SAC4B;AAAA,EAC5B,IAAI,QAAQ,WAAW;AAAA,IAAG,OAAO,IAAI;AAAA,EACrC,MAAM,OAAO,MAAM,IAAI,QAAQ,QAAQ,oBAAoB;AAAA,IACzD,WAAW,IAAI;AAAA,IACf,OAAO;AAAA,EACT,CAAC;AAAA,EACD,OAAO,IAAI,IAAI,KAAK,KAAK,CAAC;AAAA;AAIrB,SAAS,gBAAgB,CAAC,MAAwB,UAAmC;AAAA,EAC1F,IAAI,CAAC,SAAS,IAAI,YAAY,KAAK,WAAW,IAAI,KAAK,QAAQ,CAAC,GAAG;AAAA,IACjE,MAAM,IAAI,qBAAoB,KAAK,WAAW,IAAI,KAAK,UAAU,yBAAyB;AAAA,EAC5F;AAAA,EACA,IAAI,CAAC,SAAS,IAAI,YAAY,KAAK,cAAc,KAAK,QAAQ,CAAC,GAAG;AAAA,IAChE,MAAM,IAAI,qBAAoB,KAAK,cAAc,KAAK,UAAU,yBAAyB;AAAA,EAC3F;AAAA;AAGF,SAAS,WAAW,CAAC,cAAsB,WAA2B;AAAA,EACpE,OAAO,gBAAe,cAAc,SAAS;AAAA;;;ACpD/C,eAAsB,WAAU,CAC9B,KACA,QAOe;AAAA,EACf,QAAQ,YAAY,gBAAgB,aAAa;AAAA,EACjD,QAAQ,UAAU,QAAQ,cAAc,UAAU,eAAe;AAAA,EACjE,mBAAmB,KAAK,EAAE,cAAc,WAAW,IAAI,aAAa,CAAC;AAAA,EACrE,MAAM,YAAY,EAAE,YAAY,UAAU,cAAc,SAAS;AAAA,EAMjE,iBAAiB,WAAW,MAAM,sBAAsB,KAAK,uBAAuB,CAAC,SAAS,CAAC,CAAC,CAAC;AAAA,EAEjG,MAAM,uBAAuB,qBAAqB;AAAA,IAChD;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA,gBAAgB,SAAS,kBAAkB;AAAA,IAC3C,mBAAmB,CAAC,UAAU,WAAW,SAAS,kBAAkB,UAAU,MAAM;AAAA,EACtF,CAAC;AAAA,EAED,MAAM,wBAAwB,KAAK;AAAA,IACjC,oBAAoB;AAAA,MAClB,IAAI,mBAAmB,CAAC;AAAA,MACxB,KAAK;AAAA,QACH,QAAQ,EAAE,cAAc,WAAW,IAAI,WAAW,SAAS;AAAA,QAC3D;AAAA,QACA,QAAQ,EAAE,cAAc,cAAc,WAAW,SAAS;AAAA,MAC5D;AAAA,SACI,yBAAyB,YAAY,EAAE,YAAY,qBAAqB,IAAI,CAAC;AAAA,IACnF,CAAC;AAAA,EACH,CAAC;AAAA;;;ACPH,eAAsB,mBAAkC,CACtD,OAC6C;AAAA,EAC7C,QAAQ,UAAU;AAAA,EAClB,IAAI,MAAM,WAAW;AAAA,IAAG,OAAO,CAAC;AAAA,EAEhC,MAAM,UAAqC,IAAI,MAAM,MAAM,MAAM;AAAA,EACjE,MAAM,UAAyB,CAAC;AAAA,EAChC,MAAM,SAAS,IAAI;AAAA,EAEnB,MAAM,UAAU,IAAI;AAAA,EAEpB,YAAY,OAAO,SAAS,MAAM,QAAQ,GAAG;AAAA,IAC3C,IAAI;AAAA,IACJ,IAAI;AAAA,MACF,OAAO,MAAM,KAAK,MAAM,KAAK;AAAA,MAC7B,OAAO,OAAO;AAAA,MACd,QAAQ,SAAS;AAAA,QACf,IAAI;AAAA,QACJ,OAAO,iBAAiB,QAAQ,QAAQ,IAAI,MAAM,OAAO,KAAK,CAAC;AAAA,MACjE;AAAA,MACA;AAAA;AAAA,IAGF,MAAM,UAAU,OAAO,IAAI,KAAK,GAAG;AAAA,IACnC,IAAI,SAAS;AAAA,MACX,IAAI,QAAQ,gBAAgB,KAAK,aAAa;AAAA,QAC5C,QAAQ,SAAS;AAAA,UACf,IAAI;AAAA,UACJ,OAAO,IAAI,yBACT,gCAAgC,KAAK,4BAA4B,QAAQ,aAAa,OACxF;AAAA,QACF;AAAA,QACA;AAAA,MACF;AAAA,MACA,QAAQ,IAAI,OAAO,QAAQ,KAAK;AAAA,MAChC;AAAA,IACF;AAAA,IAEA,OAAO,IAAI,KAAK,KAAK,EAAE,OAAO,aAAa,KAAK,YAAY,CAAC;AAAA,IAC7D,QAAQ,KAAK,EAAE,OAAO,YAAY,KAAK,WAAW,CAAC;AAAA,EACrD;AAAA,EAEA,MAAM,SAAS,MAAM,mBAAmB,MAAM,KAAK,OAAO;AAAA,EAE1D,aAAa,WAAW,SAAS;AAAA,IAC/B,MAAM,WAAW,oBAAoB,QAAQ,KAAK;AAAA,IAClD,MAAM,SAAS,SAAS,KAAK,CAAC,YAAY,CAAC,QAAQ,EAAE;AAAA,IACrD,QAAQ,SACN,QAAQ,OAAO,QACX,EAAE,IAAI,OAAO,OAAO,YAAY,OAAO,KAAK,EAAE,IAC9C,EAAE,IAAI,MAAM,OAAO,MAAM,MAAM,QAAQ,EAAE;AAAA,EACjD;AAAA,EACA,YAAY,OAAO,WAAW,SAAS;AAAA,IACrC,QAAQ,SAAS,QAAQ;AAAA,EAC3B;AAAA,EACA,OAAO;AAAA;;;AClFT,eAAsB,gBAAe,CACnC,KACA,OAC2C;AAAA,EAC3C,QAAQ,aAAa;AAAA,EACrB,IAAI,MAAM,WAAW;AAAA,IAAG,OAAO,CAAC;AAAA,EAMhC,WAAW,QAAQ,OAAO;AAAA,IACxB,mBAAmB,KAAK;AAAA,MACtB,cAAc,KAAK,WAAW;AAAA,MAC9B,cAAc,KAAK;AAAA,IACrB,CAAC;AAAA,EACH;AAAA,EAEA,MAAM,WAAW,MAAM,sBAAsB,KAAK,uBAAuB,KAAK,CAAC;AAAA,EAC/E,MAAM,iBAAiB,SAAS,kBAAkB;AAAA,EAElD,OAAO,oBAAoB;AAAA,IACzB;AAAA,IACA;AAAA,IACA,IAAI,CAAC,MAAM,OAAO;AAAA,MAChB,iBAAiB,MAAM,QAAQ;AAAA,MAC/B,MAAM,aAAa,qBAAqB;AAAA,QACtC,YAAY,KAAK;AAAA,QACjB,gBAAgB,KAAK;AAAA,QACrB,QAAQ,KAAK;AAAA,QACb,cAAc,KAAK;AAAA,QACnB,YAAY,KAAK;AAAA,QACjB;AAAA,QACA,mBAAmB,CAAC,UAAU,WAAW,SAAS,kBAAkB,UAAU,MAAM;AAAA,MACtF,CAAC;AAAA,MACD,MAAM,MAAM;AAAA,QACV,QAAQ,EAAE,cAAc,KAAK,WAAW,IAAI,WAAW,KAAK,SAAS;AAAA,QACrE,QAAQ,KAAK;AAAA,QACb,QAAQ,EAAE,cAAc,KAAK,cAAc,WAAW,KAAK,SAAS;AAAA,MACtE;AAAA,MACA,MAAM,OAAO,YAAW,GAAG;AAAA,MAC3B,OAAO;AAAA,QACL,KAAK;AAAA,QAGL,OAAO,SAAS,KAAK,WAAW,MAAM,KAAK,YAAY,KAAK,aAAa,KAAK,gBAAgB,KAAK;AAAA,QACnG,aAAa,qBAAoB,cAAc,IAAI;AAAA,QACnD,YAAY;AAAA,UACV,oBAAoB;AAAA,YAClB,IAAI,mBAAmB,KAAK;AAAA,YAC5B;AAAA,eACI,eAAe,YAAY,EAAE,WAAW,IAAI,CAAC;AAAA,UACnD,CAAC;AAAA,QACH;AAAA,MACF;AAAA;AAAA,IAEF,OAAO,MAAG;AAAA,MAAG;AAAA;AAAA,EACf,CAAC;AAAA;;ACxDH,eAAsB,aAAY,CAAC,KAA4B,WAAkC;AAAA,EAC/F,eAAc,KAAK,IAAI,WAAW,EAAE;AAAA,EACpC,MAAM,wBAAwB,KAAK;AAAA,IACjC,sBAAsB;AAAA,MACpB,IAAI,mBAAmB,CAAC;AAAA,MACxB,KAAK,EAAE,cAAc,IAAI,WAAW,IAAI,UAAU;AAAA,IACpD,CAAC;AAAA,EACH,CAAC;AAAA;AASH,eAAsB,cAAa,CAAC,KAA4B,WAAkC;AAAA,EAChG,eAAc,KAAK,IAAI,WAAW,EAAE;AAAA,EACpC,MAAM,wBAAwB,KAAK;AAAA,IACjC,uBAAuB;AAAA,MACrB,IAAI,mBAAmB,CAAC;AAAA,MACxB,KAAK,EAAE,cAAc,IAAI,WAAW,IAAI,UAAU;AAAA,IACpD,CAAC;AAAA,EACH,CAAC;AAAA;;;AC7BH,eAAsB,aAAY,CAChC,KACA,YACoB;AAAA,EACpB,eAAc,KAAK,IAAI,WAAW,EAAE;AAAA,EACpC,QAAQ,YAAY,mBAAmB,aAAa;AAAA,EAEpD,MAAM,aAAa,uBAAuB;AAAA,IACxC;AAAA,IACA;AAAA,IACA;AAAA,IACA,gBAAgB,SAAS,kBAAkB;AAAA,EAC7C,CAAC;AAAA,EACD,MAAM,MAAM,EAAE,cAAc,WAAW,IAAI,WAAW,WAAW,UAAU;AAAA,EAI3E,MAAM,SAAS,MAAM,wBAAwB,KAAK;AAAA,IAChD,sBAAsB,EAAE,IAAI,mBAAmB,CAAC,GAAG,KAAK,YAAY,WAAW,WAAW,CAAC;AAAA,EAC7F,CAAC;AAAA,EACD,OAAO,YAAY,IAAI,WAAW,uBAAuB,OAAO,SAAS,EAAE,CAAC;AAAA;;;AChB9E,eAAsB,kBAAiB,CACrC,KACA,OACgD;AAAA,EAChD,eAAc,KAAK,IAAI,WAAW,EAAE;AAAA,EACpC,QAAQ,YAAY,mBAAmB,aAAa;AAAA,EACpD,MAAM,iBAAiB,SAAS,kBAAkB;AAAA,EAElD,OAAO,oBAAoB;AAAA,IACzB;AAAA,IACA;AAAA,IACA,IAAI,CAAC,MAAM,OAAO;AAAA,MAChB,MAAM,aAAa,uBAAuB;AAAA,QACxC;AAAA,QACA;AAAA,QACA,YAAY,KAAK;AAAA,QACjB;AAAA,MACF,CAAC;AAAA,MACD,MAAM,MAAM,EAAE,cAAc,WAAW,IAAI,WAAW,WAAW,UAAU;AAAA,MAC3E,OAAO;AAAA,QAGL,KAAK,GAAG,IAAI,gBAAgB,IAAI;AAAA,QAChC,OAAO,WAAW,IAAI,gBAAgB,IAAI;AAAA,QAC1C,aAAa,qBAAoB,WAAW,UAAU;AAAA,QACtD,YAAY;AAAA,UACV,sBAAsB;AAAA,YACpB,IAAI,mBAAmB,KAAK;AAAA,YAC5B;AAAA,YACA,YAAY,WAAW;AAAA,UACzB,CAAC;AAAA,QACH;AAAA,MACF;AAAA;AAAA,IAEF,OAAO,EAAE,aAAa,YAAY,IAAI,WAAW,uBAAuB,OAAO,CAAC;AAAA,EAClF,CAAC;AAAA;;AChDH,uBAAS;AAaT,eAAsB,oBAAmB,CACvC,KACA,QACuC;AAAA,EAIvC,WAAW,gBAAgB,IAAI,IAAI,OAAO,IAAI,CAAC,UAAU,MAAM,OAAO,OAAO,YAAY,CAAC,GAAG;AAAA,IAC3F,0BAAyB,KAAK,YAAY;AAAA,EAC5C;AAAA,EACA,IAAI,OAAO,WAAW;AAAA,IAAG,OAAO;AAAA,EAEhC,IAAI;AAAA,EACJ,IAAI;AAAA,IACF,SAAS,MAAM,4BAA2B,GAAG,EAAE,gBAAgB;AAAA,MAC7D,QAAQ,EAAE,MAAM,WAAW,WAAW,YAAW,EAAE;AAAA,MACnD;AAAA,IACF,CAAC;AAAA,IACD,OAAO,OAAO;AAAA,IACd,IAAI,iBAAiB,qCAAoC;AAAA,MACvD,MAAM,IAAI,qBACR,MAAM,cACN,MAAM,WACN,uCACF;AAAA,IACF;AAAA,IACA,MAAM;AAAA;AAAA,EAER,OAAO;AAAA;;;AC5BT,SAAS,kBAAkB,CAAC,KAAuD;AAAA,EACjF,IAAI,QAAQ,QAAQ,OAAO,QAAQ,UAAU;AAAA,IAC3C,OAAO;AAAA,EACT;AAAA,EACA,MAAM,SAAS;AAAA,EACf,OAAO,WAAW,UAAU,OAAO,OAAO,SAAS,YAAY,OAAO,KAAK,MAAM,EAAE,WAAW;AAAA;AAGhG,eAAsB,qBAAoB,CACxC,KACA,OAKe;AAAA,EAIf,0BAAyB,KAAK,IAAI,WAAW,EAAE;AAAA,EAC/C,QAAQ,eAAe;AAAA,EAGvB,MAAM,SAAS,IAAI;AAAA,EAEnB,WAAW,QAAQ,OAAO;AAAA,IACxB,MAAM,MAAM,KAAK,MAAM,IAAI,MAAQ,YAAY;AAAA,IAE/C,YAAY,YAAY,aAAa,OAAO,QAAQ,KAAK,UAAU,GAAG;AAAA,MACpE,MAAM,gBAAgB,WAAW,EAAE;AAAA,MACnC,IAAI,CAAC,eAAe;AAAA,QAClB,MAAM,IAAI,yBAAwB,qBAAqB,WAAW,MAAM,aAAa;AAAA,MACvF;AAAA,MAEA,yBAAwB,cAAc,QAAQ;AAAA,MAG9C,MAAM,SAAS;AAAA,QACb,QAAQ,EAAE,cAAc,WAAW,IAAI,WAAW,KAAK,GAAG;AAAA,QAC1D,YAAY,cAAc;AAAA,MAC5B;AAAA,MACA,OAAO,IAAI,mBAAkB,QAAQ,EAAE,GAAG;AAAA,QACxC;AAAA,QACA,OAAO,mBAAmB,QAAQ,IAC7B,SAAS,QACT;AAAA,WACD,mBAAmB,QAAQ,IAAI,EAAE,MAAM,SAAS,KAAK,IAAI,CAAC;AAAA,QAC9D;AAAA,MACF,CAAC;AAAA,IACH;AAAA,EACF;AAAA,EAEA,MAAM,qBAAoB,KAAK,CAAC,GAAG,OAAO,OAAO,CAAC,CAAC;AAAA;;;AClDrD,eAAsB,yBAAwB,CAC5C,OACA,SACkD;AAAA,EAElD,MAAM,eAAe,QAAQ;AAAA,EAC7B,MAAM,UAAU,QAAQ;AAAA,EACxB,MAAM,YAAY,aAAa;AAAA,EAC/B,MAAM,UAAU,8BAA8B,OAAO,YAAY;AAAA,EAEjE,MAAM,eAAe,kBAAkB,QAAQ,MAAM;AAAA,EACrD,MAAM,iBAAiB,MAAM,qBAAqB,cAAc,YAAY;AAAA,EAC5E,MAAM,kBAAkB,MAAM,uBAAuB;AAAA,IACnD;AAAA,IACA;AAAA,IACA;AAAA,IACA,QAAQ;AAAA,EACV,CAAC;AAAA,EAID,MAAM,mBACJ,eAAe,WAAW,IAAI,CAAC,IAAI,MAAM,qBAAqB,gBAAgB,YAAY;AAAA,EAC5F,MAAM,SAAS,uBAAuB,EAAE,SAAS,iBAAiB,iBAAiB,CAAC;AAAA,EACpF,aAAa,+BAA+B,MAAM;AAAA,EAClD,OAAO;AAAA;AAIT,eAAsB,uBAAuB,CAC3C,OACA,SACiC;AAAA,EACjC,MAAM,eAAe,QAAQ;AAAA,EAC7B,MAAM,UAAU,QAAQ;AAAA,EACxB,MAAM,YAAY,aAAa;AAAA,EAC/B,MAAM,SAAS,wBAAwB,KAAK;AAAA,EAC5C,MAAM,WAAW,MAAM,aAAa,sBAAsB,wBAAwB,MAAM,CAAC;AAAA,EACzF,IAAI,CAAC;AAAA,IAAU,OAAO,oBAAoB,MAAM,YAAY;AAAA,EAE5D,MAAM,YAAY,MAAM,QAAQ,UAAU,EAAE,cAAc,OAAO,CAAC;AAAA,EAClE,MAAM,SAAS,cAAc,OAAO,OAAO,sBAAsB,SAAS;AAAA,EAC1E,IAAI;AAAA,IAAQ,mCAAmC,WAAW,QAAQ,MAAM;AAAA,EAGxE,MAAM,kBAAkB,MAAM,aAAa,sBAAsB,wBAAwB,MAAM,CAAC;AAAA,EAChG,IAAI,CAAC;AAAA,IAAiB,OAAO,oBAAoB,MAAM,YAAY;AAAA,EAEnE,OAAO,oBAAoB,QAAQ,YAAY;AAAA;AAGjD,SAAS,iBAAiB,CACxB,QACgC;AAAA,EAChC,MAAM,eAAe,IAAI;AAAA,EACzB,WAAW,QAAQ,QAAQ;AAAA,IACzB,MAAM,MAAM,UAAU,IAAI;AAAA,IAC1B,IAAI,CAAC,aAAa,IAAI,GAAG;AAAA,MAAG,aAAa,IAAI,KAAK,IAAI;AAAA,EACxD;AAAA,EACA,OAAO,CAAC,GAAG,aAAa,OAAO,CAAC;AAAA;AAGlC,eAAe,oBAAoB,CACjC,QACA,cACkD;AAAA,EAClD,MAAM,WAAW,MAAM,aAAa,6BAA6B;AAAA,IAC/D,OAAO,OAAO,IAAI,uBAAuB;AAAA,EAC3C,CAAC;AAAA,EACD,OAAO,OAAO,OAAO,CAAC,GAAG,UAAU,SAAS,WAAW,IAAI;AAAA;AAG7D,eAAe,sBAAsB,CAAC,OAKyB;AAAA,EAC7D,QAAQ,SAAS,WAAW,SAAS,WAAW;AAAA,EAIhD,MAAM,kBAAkB,gBAAgB;AAAA,IACtC;AAAA,IACA;AAAA,OACI,QAAQ,SAAS,YAAY,CAAC,IAAI,EAAE,MAAM,QAAQ,KAAK;AAAA,OACvD,QAAQ,OAAO,YAAY,CAAC,IAAI,EAAE,IAAI,QAAQ,GAAG;AAAA,OACjD,QAAQ,mBAAmB,YAAY,CAAC,IAAI,EAAE,gBAAgB,QAAQ,eAAe;AAAA,OACrF,QAAQ,UAAU,YAAY,CAAC,IAAI,EAAE,OAAO,QAAQ,MAAM;AAAA,EAChE,CAAC;AAAA,EACD,MAAM,SAAS,OAAO,WAAW,IAAI,CAAC,IAAI,MAAM,QAAQ,gBAAgB,eAAe;AAAA,EAIvF,IAAI,CAAC,MAAM,QAAQ,MAAM;AAAA,IAAG,MAAM,gCAAgC;AAAA,EAClE,MAAM,cAAc,OAAO;AAAA,EAC3B,IAAI,CAAC,OAAO,cAAc,WAAW,KAAK,cAAc,OAAO,QAAQ;AAAA,IACrE,MAAM,gCAAgC;AAAA,EACxC;AAAA,EACA,MAAM,aAAa,IAAI,IAAI,OAAO,IAAI,SAAS,CAAC;AAAA,EAChD,MAAM,yBAAyB,IAAI;AAAA,EACnC,SAAS,QAAQ,EAAG,QAAQ,aAAa,SAAS,GAAG;AAAA,IACnD,MAAM,iBAAiB,uBAAuB,OAAO,QAAS,QAAQ,cAAc;AAAA,IACpF,MAAM,MAAM,UAAU,cAAc;AAAA,IACpC,IAAI,uBAAuB,IAAI,GAAG,KAAK,CAAC,WAAW,IAAI,GAAG,GAAG;AAAA,MAC3D,MAAM,gCAAgC;AAAA,IACxC;AAAA,IACA,WAAW,SAAS,eAAe,QAAQ;AAAA,MACzC,mCAAmC,WAAW,gBAAgB,KAAK;AAAA,IACrE;AAAA,IACA,uBAAuB,IAAI,KAAK,cAAc;AAAA,EAChD;AAAA,EAEA,OAAO;AAAA;AAIT,SAAS,sBAAsB,CAAC,OAIY;AAAA,EAC1C,QAAQ,SAAS,iBAAiB,qBAAqB;AAAA,EACvD,MAAM,uBAAuB,IAAI,IAAI,iBAAiB,IAAI,SAAS,CAAC;AAAA,EACpE,MAAM,iBAAiB,QAAQ,OAAO,IAAI,CAAC,WACzC,qBAAqB,IAAI,UAAU,MAAM,CAAC,IACrC,gBAAgB,IAAI,UAAU,MAAM,CAAC,GAAG,UAAU,CAAC,IACpD,CAAC,CACP;AAAA,EACA,MAAM,mBAAmB,eAAe,OAAO,CAAC,OAAO,WAAW,QAAQ,OAAO,QAAQ,CAAC;AAAA,EAC1F,IAAI,QAAQ,wBAAwB,aAAa,mBAAmB,QAAQ,qBAAqB;AAAA,IAC/F,MAAM,gCAAgC;AAAA,EACxC;AAAA,EACA,OAAO,QAAQ,OAAO,IAAI,CAAC,QAAQ,WAAW;AAAA,OACzC;AAAA,IACH,QAAQ,eAAe,OAAQ,IAAI,CAAC,UAAU,gBAAgB,KAAK,CAAC;AAAA,EACtE,EAAE;AAAA;AAGJ,SAAS,uBAAuB,CAC9B,QAC8B;AAAA,EAC9B,IAAI,OAAO,WAAW,YAAY,WAAW,QAAQ,MAAM,QAAQ,MAAM,GAAG;AAAA,IAC1E,MAAM,IAAI,MAAM,oDAAoD;AAAA,EACtE;AAAA,EACA,MAAM,eAAe,oBAAoB,OAAO,cAAc,cAAc;AAAA,EAC5E,MAAM,WAAW,oBAAoB,OAAO,UAAU,UAAU;AAAA,EAChE,MAAM,aAAa,oBAAoB,OAAO,YAAY,YAAY;AAAA,EACtE,OAAO,gBAAgB,EAAE,cAAc,UAAU,WAAW,CAAC;AAAA;AAG/D,SAAS,kCAAkC,CACzC,WACA,QACA,OACM;AAAA,EACN,IACE,OAAO,UAAU,YACjB,UAAU,QACV,MAAM,cAAc,aACpB,MAAM,iBAAiB,OAAO,gBAC9B,MAAM,aAAa,OAAO,YAC1B,MAAM,eAAe,OAAO,YAC5B;AAAA,IACA,MAAM,gCAAgC;AAAA,EACxC;AAAA;AAGF,SAAS,6BAA6B,CACpC,OACA,cACiC;AAAA,EACjC,MAAM,iBAAiB,MAAM;AAAA,EAC7B,MAAM,OAAO,MAAM;AAAA,EACnB,MAAM,KAAK,MAAM;AAAA,EACjB,MAAM,iBAAiB,MAAM;AAAA,EAC7B,MAAM,QAAQ,MAAM;AAAA,EACpB,IAAI,CAAC,MAAM,QAAQ,cAAc,GAAG;AAAA,IAClC,MAAM,IAAI,MAAM,mDAAmD;AAAA,EACrE;AAAA,EACA,IAAI,UAAU,aAAa,UAAU,SAAS,UAAU,QAAQ;AAAA,IAC9D,MAAM,IAAI,MAAM,yDAAyD;AAAA,EAC3E;AAAA,EAGA,MAAM,cAAc,eAAe;AAAA,EACnC,MAAM,YAAY,aAAa,0BAA0B;AAAA,IACvD;AAAA,OACI,mBAAmB,YAAY,CAAC,IAAI,EAAE,eAAe;AAAA,EAC3D,CAAC;AAAA,EACD,MAAM,SAAyC,CAAC;AAAA,EAChD,SAAS,QAAQ,EAAG,QAAQ,aAAa,SAAS,GAAG;AAAA,IACnD,OAAO,KAAK,wBAAwB,eAAe,MAAO,CAAC;AAAA,EAC7D;AAAA,EACA,OAAO,gBAAgB;AAAA,IACrB;AAAA,OACI,SAAS,YAAY,CAAC,IAAI,EAAE,KAAK;AAAA,OACjC,OAAO,YAAY,CAAC,IAAI,EAAE,GAAG;AAAA,OAC7B,UAAU,mBAAmB,YAAY,CAAC,IAAI,EAAE,gBAAgB,UAAU,eAAe;AAAA,OACzF,UAAU,YAAY,CAAC,IAAI,EAAE,MAAM;AAAA,OACnC,UAAU,wBAAwB,YAClC,CAAC,IACD,EAAE,qBAAqB,UAAU,oBAAoB;AAAA,EAC3D,CAAC;AAAA;AAGH,SAAS,uBAAuB,CAAC,QAI/B;AAAA,EACA,OAAO;AAAA,IACL,cAAc,OAAO;AAAA,IACrB,WAAW,OAAO;AAAA,IAClB,YAAY,OAAO;AAAA,EACrB;AAAA;AAGF,SAAS,mBAAqD,CAC5D,QACA,cACG;AAAA,EACH,aAAa,+BAA+B,MAAM;AAAA,EAClD,OAAO;AAAA;AAGT,SAAS,sBAAsB,CAC7B,QACA,oBAC8B;AAAA,EAC9B,IAAI;AAAA,IACF,IAAI,OAAO,WAAW,YAAY,WAAW,QAAQ,MAAM,QAAQ,MAAM,GAAG;AAAA,MAC1E,MAAM,gCAAgC;AAAA,IACxC;AAAA,IACA,MAAM,SAAS,wBAAwB,MAAM;AAAA,IAC7C,MAAM,iBAAiB,OAAO;AAAA,IAC9B,IAAI,CAAC,MAAM,QAAQ,cAAc;AAAA,MAAG,MAAM,gCAAgC;AAAA,IAC1E,MAAM,aAAa,eAAe;AAAA,IAClC,IACE,CAAC,OAAO,cAAc,UAAU,KAC/B,uBAAuB,aAAa,aAAa,oBAClD;AAAA,MACA,MAAM,gCAAgC;AAAA,IACxC;AAAA,IACA,MAAM,SAA4B,CAAC;AAAA,IACnC,SAAS,QAAQ,EAAG,QAAQ,YAAY,SAAS,GAAG;AAAA,MAClD,OAAO,KAAK,sBAAsB,eAAe,MAAO,CAAC;AAAA,IAC3D;AAAA,IACA,OAAO,KAAK,QAAQ,OAAO;AAAA,IAC3B,OAAO,OAAO;AAAA,IACd,IAAI,kCAAkC,KAAK;AAAA,MAAG,MAAM;AAAA,IACpD,MAAM,gCAAgC,KAAK;AAAA;AAAA;AAI/C,SAAS,qBAAqB,CAAC,OAAyC;AAAA,EACtE,IAAI;AAAA,IACF,MAAM,WAAW,gBAAgB,KAAK;AAAA,IACtC,IAAI,CAAC,YAAY,OAAO,aAAa;AAAA,MAAU,MAAM,gCAAgC;AAAA,IACrF,OAAO;AAAA,IACP,OAAO,OAAO;AAAA,IACd,IAAI,kCAAkC,KAAK;AAAA,MAAG,MAAM;AAAA,IACpD,MAAM,gCAAgC,KAAK;AAAA;AAAA;AAI/C,SAAS,+BAA+B,CAAC,OAAwB;AAAA,EAC/D,OAAO,iBACL,uBACA,yEACA,UAAU,YAAY,CAAC,IAAI,EAAE,MAAM,CACrC;AAAA;AAGF,SAAS,iCAAiC,CACxC,OAC2D;AAAA,EAC3D,OACE,iBAAiB,SACjB,UAAU,SACV,MAAM,SAAS,yBACf,MAAM,YAAY;AAAA;AAItB,SAAS,mBAAmB,CAAC,OAAgB,OAAuB;AAAA,EAClE,IAAI,OAAO,UAAU,YAAY,CAAC,MAAM,KAAK,GAAG;AAAA,IAC9C,MAAM,IAAI,MAAM,4BAA4B,mCAAmC;AAAA,EACjF;AAAA,EACA,OAAO;AAAA;AAGT,SAAS,SAAS,CAAC,QAA8C;AAAA,EAC/D,OAAO,KAAK,UAAU,CAAC,OAAO,cAAc,OAAO,UAAU,OAAO,UAAU,CAAC;AAAA;;AC7S1E,SAAS,sBAAqB,CACnC,YACA,QACY;AAAA,EACZ,MAAM,MAAM,WAAW,MAAM,KAAK,CAAC,MAAM,EAAE,OAAO,MAAM;AAAA,EACxD,IAAI,CAAC;AAAA,IAAK,MAAM,IAAI,uBAAsB,iBAAiB,WAAW,MAAM,SAAS;AAAA,EACrF,OAAO;AAAA;AASF,SAAS,qBAAoB,CAClC,SACA,cACuB;AAAA,EACvB,MAAM,aAAa,QAAQ,SAAS,kBAAkB,YAAY;AAAA,EAClE,MAAM,oBAAoB,QAAQ,SAAS,qBAAqB,YAAY;AAAA,EAC5E,OAAO,KAAK,SAAS,YAAY,kBAAkB;AAAA;AAS9C,SAAS,mBAAkB,CAChC,QACA,QACqB;AAAA,EACrB,MAAM,iBAAiB,uBAAsB,OAAO,YAAY,MAAM;AAAA,EACtE,OAAO,KAAK,QAAQ,eAAe;AAAA;;AC3B9B,SAAS,sBAGf,CAAC,KAA4B,WAAmB;AAAA,EAC/C,OAAO,CACL,aAC0C;AAAA,IAC1C,QAAQ,eAAe;AAAA,IACvB,wCAAuC,YAAY,QAAQ;AAAA,IAC3D,yBAAwB,SAAS,QAAQ;AAAA,IAEzC,MAAM,SAAS,EAAE,cAAc,WAAW,IAAI,UAAU,WAAW,YAAY,SAAS,GAAG;AAAA,IAE3F,MAAM,UAAU;AAAA,MACd,QAAQ,OAAO,UAAuD;AAAA,QAEpE,MAAM,qBAAoB,KAAK;AAAA,UAC7B;AAAA,YACE,QAAQ;AAAA,cACN,QAAQ,EAAE,cAAc,WAAW,IAAI,UAAU;AAAA,cACjD,YAAY,SAAS;AAAA,YACvB;AAAA,YACA,OAAO,MAAM;AAAA,eACT,MAAM,SAAS,YAAY,EAAE,MAAM,MAAM,KAAK,IAAI,CAAC;AAAA,YACvD,IAAI,MAAM,GAAG,YAAY;AAAA,UAC3B;AAAA,QACF,CAAC;AAAA;AAAA,MAGH,SAAS,OAAO,QAA+B,CAAC,MAAM;AAAA,QACpD,MAAM,aAAa,IAAI,QAAQ;AAAA,QAC/B,MAAM,eAAe,IAAI;AAAA,QACzB,IAAI,CAAC,YAAY;AAAA,UACf,MAAM,IAAI,cAAa,+DAA+D;AAAA,QACxF;AAAA,QAEA,MAAM,OAAO,MAAM;AAAA,QACnB,MAAM,KAAK,MAAM;AAAA,QACjB,MAAM,QAAQ,MAAM;AAAA,QACpB,MAAM,QAAQ,MAAM;AAAA,QAEpB,OAAO,UAAU,MAAM,0BACrB;AAAA,UACE,QAAQ,CAAC,MAAM;AAAA,aACX,SAAS,YAAY,EAAE,KAAK,IAAI,CAAC;AAAA,aACjC,OAAO,YAAY,EAAE,GAAG,IAAI,CAAC;AAAA,aAC7B,UAAU,YAAY,EAAE,gBAAgB,MAAM,IAAI,CAAC;AAAA,aACnD,UAAU,YAAY,EAAE,MAAM,IAAI,CAAC;AAAA,QACzC,GACA;AAAA,UACE,SAAS;AAAA,UACT;AAAA,QACF,CACF;AAAA,QAEA,QAAQ,QAAQ,UAAU,CAAC,GAAG,IAAI,CAAC,WAAW;AAAA,UAC5C,OAAO,MAAM;AAAA,UACb,IAAI,MAAM;AAAA,aACN,MAAM,SAAS,YAAY,EAAE,MAAM,MAAM,KAAK,IAAI,CAAC;AAAA,QACzD,EAAE;AAAA;AAAA,IAEN;AAAA,IAGA,OAAO;AAAA;AAAA;;;AC/DJ,SAAS,sBAGf,CAAC,KAA6B,WAA+D;AAAA,EAC5F,MAAM,eAAe;AAAA,IACnB,KAAK,YAAY;AAAA,MACf,MAAM,MAAM,MAAM,IAAI,aAAa,eAAe;AAAA,QAChD,cAAc,IAAI,WAAW;AAAA,QAC7B;AAAA,MACF,CAAC;AAAA,MACD,OAAO,MAAO,MAA0D;AAAA;AAAA,IAG1E,WAAW,OAAO,cAA6B;AAAA,MAC7C,IAAI,WAAW;AAAA,QACb,oCAAmC,IAAI,YAAY,SAAS;AAAA,MAC9D;AAAA,MACA,OAAO,IAAI,aAAa,UAAU;AAAA,QAChC,cAAc,IAAI,WAAW;AAAA,QAC7B,UAAU;AAAA,QACV,QAAQ,WAAW;AAAA,MACrB,CAAC;AAAA;AAAA,IAGH,MAAM,OACJ,WACA,QACA,YACG;AAAA,MACH,oCAAmC,IAAI,YAAY,SAAS;AAAA,MAE5D,MAAM,UAA+B,KAAK,KAAK,gBAAgB,UAAU,KAAK;AAAA,MAC9E,MAAM,YAAe,SAAS;AAAA,QAC5B,UAAU;AAAA,QACV,QAAQ,UAAU;AAAA,QAClB,cAAc,OAAO;AAAA,QACrB,UAAU,OAAO;AAAA,QACjB,YAAY,SAAS;AAAA,MACvB,CAAC;AAAA;AAAA,IAGH,QAAQ,OAAO,WAAyB,WAA2B;AAAA,MACjE,oCAAmC,IAAI,YAAY,SAAS;AAAA,MAE5D,MAAM,UAA+B,KAAK,KAAK,gBAAgB,UAAU,KAAK;AAAA,MAC9E,MAAM,YAAe,SAAS;AAAA,QAC5B,UAAU;AAAA,QACV,QAAQ,UAAU;AAAA,QAClB,cAAc,OAAO;AAAA,QACrB,UAAU,OAAO;AAAA,MACnB,CAAC;AAAA;AAAA,IAGH,QAAQ,YAAY;AAAA,MAClB,MAAM,cAAa,KAAK,SAAS;AAAA;AAAA,IAGnC,SAAS,YAAY;AAAA,MACnB,MAAM,eAAc,KAAK,SAAS;AAAA;AAAA,IAGpC,eAAe,OAAO,UAKhB;AAAA,MACJ,MAAM,WAAW,MAAM,QAAQ,MAAM,MAAM;AAAA,MAC3C,IAAI,CAAC,UAAU;AAAA,QACb,MAAM,IAAI,yBACR,6DACF;AAAA,MACF;AAAA,MACA,OAAO,eAAkB,KAAK;AAAA,QAC5B;AAAA,QACA;AAAA,QACA,QAAQ,MAAM;AAAA,QACd,SAAS,EAAE,OAAO,MAAM,MAAM;AAAA,MAChC,CAAC;AAAA;AAAA,IAGH,sBAAsB,OAAO,UAMvB;AAAA,MACJ,MAAM,WAAW,MAAM,QAAQ,MAAM,MAAM;AAAA,MAC3C,IAAI,CAAC,UAAU;AAAA,QACb,MAAM,IAAI,yBACR,oEACF;AAAA,MACF;AAAA,MACA,OAAO,qBAAyB,KAAK;AAAA,QACnC;AAAA,QACA;AAAA,QACA,QAAQ,MAAM;AAAA,QACd,SAAS;AAAA,UACP,WAAW,MAAM;AAAA,UACjB,QAAQ,MAAM;AAAA,QAChB;AAAA,MACF,CAAC;AAAA;AAAA,IAGH,WAAW,uBAAiD,KAAK,SAAS;AAAA,EAC5E;AAAA,EAEA,OAAO;AAAA;;;ACrHF,SAAS,0BAA0B,CAAC,QAGnB;AAAA,EACtB,QAAQ,UAAU,iBAAiB;AAAA,EAEnC,OAAO;AAAA,SACC,KAAI,CAAC,OAAoB,SAAsC;AAAA,MACnE,IAAI;AAAA,QACF,OAAO,MAAM,aAAa,aAAa,EAAE,OAAO,cAAc,SAAS,aAAa,CAAC;AAAA,QACrF,OAAO,OAAO;AAAA,QACd,IAAI,iBAAiB,2BAA0B;AAAA,UAC7C,MAAM,oBAAoB,KAAK;AAAA,QACjC;AAAA,QACA,MAAM;AAAA;AAAA;AAAA,SAIJ,MAAK,CAAC,OAAoB;AAAA,MAC9B,MAAM,SAAS,MAAM,aAAa,MAAM,EAAE,MAAM,CAAC;AAAA,MACjD,OAAO,OAAO;AAAA;AAAA,SAGV,OAAM,CAAC,OAAoB;AAAA,MAC/B,MAAM,SAAS,MAAM,aAAa,OAAO,EAAE,MAAM,CAAC;AAAA,MAClD,OAAO,OAAO;AAAA;AAAA,SAGV,OAAM,CAAC,OAAoB,QAAoD;AAAA,MACnF,MAAM,SAAS,MAAM,aAAa,MAAM,EAAE,OAAO,OAAO,CAAC;AAAA,MACzD,OAAO,OAAO,OAAO,IAAI,CAAC,WAAW;AAAA,QACnC,YAAY,MAAM;AAAA,QAClB,SAAS,CAAC,GAAG,MAAM,OAAO;AAAA,MAC5B,EAAE;AAAA;AAAA,IAGJ,QAAQ,CAAC,OAAoB;AAAA,MAC3B,OAAO,qBAAoB,OAAO,EAAE,UAAU,WAAW,MAAM,CAAC;AAAA;AAAA,IAGlE,OAAO,CAAC,OAAoB;AAAA,MAC1B,OAAO,oBAAmB,OAAO,EAAE,UAAU,WAAW,MAAM,CAAC;AAAA;AAAA,EAEnE;AAAA;AAGF,SAAS,mBAAmB,CAAC,OAA2D;AAAA,EACtF,IAAI,CAAC,MAAM,OAAO,KAAK,CAAC,UAAU,MAAM,SAAS,yBAAyB;AAAA,IAAG,OAAO;AAAA,EAEpF,OAAO,IAAI,0BACT,MAAM,OAAO,IAAI,CAAC,UAChB,MAAM,SAAS,4BACX;AAAA,OACK;AAAA,IACH,SACE;AAAA,EACJ,IACA,KACN,CACF;AAAA;;;ACvCK,SAAS,gBAIf,CACC,QAK6D;AAAA,EAC7D,oCAAoC;AAAA,IAClC,QAAQ,OAAO;AAAA,IACf,OAAO,EAAE,WAAW,OAAO,WAAW,eAAe,OAAO,qBAAqB;AAAA,EACnF,CAAC;AAAA,EACD,QAAQ,eAAe;AAAA,EACvB,MAAM,cAAc,WAAW,WAAW,KAAK,CAAC,MAAM,EAAE,OAAO;AAAA,EAC/D,IAAI,CAAC,aAAa;AAAA,IAChB,MAAM,IAAI,yBAAwB,gBAAgB,WAAW,6BAA6B;AAAA,EAC5F;AAAA,EACA,MAAM,oBAAoB,YAAY;AAAA,EAEtC;AAAA,IACE;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,MACE;AAAA,EACJ,MAAM,gBAAgB,2BAA2B;AAAA,IAC/C;AAAA,IACA;AAAA,EACF,CAAC;AAAA,EAED,MAAM,cAAsC;AAAA,IAC1C;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF;AAAA,EACA,8BAA6B,QAAQ,WAAW;AAAA,EAChD,wBAAuB,QAAQ,WAAW;AAAA,EAE1C,MAAM,YAAY;AAAA,IAChB,KAAK,OAAO,OAAe;AAAA,MACzB,MAAM,MAAM,MAAM,aAAa,eAAe;AAAA,QAC5C,cAAc,WAAW;AAAA,QACzB,WAAW;AAAA,MACb,CAAC;AAAA,MACD,OAAO,MAAO,MAA0D;AAAA;AAAA,IAG1E,QAAQ,OAAO,UAAmD;AAAA,MAChE,MAAM,MAAM,MAAM,cAAiB,aAAa,MAAM,UAAU;AAAA,MAChE,OAAO;AAAA;AAAA,IAGT,OAAO,MACL,0BAA2E;AAAA,MACzE,OAAO,EAAE,MAAM,SAAS,cAAc,WAAW,GAAG;AAAA,MACpD,UAAU;AAAA,IACZ,CAAC;AAAA,IAEH,MAAM,CAAC,OAAe,uBAAiD,aAAa,EAAE;AAAA,IAEtF,MAAM,OAAO,UAA+B;AAAA,MAC1C,MAAM,SAAS,MAAM,aAAa,KAAK;AAAA,QACrC,cAAc,WAAW;AAAA,QACzB,iBAAiB,OAAO;AAAA,QACxB,iBAAiB,OAAO;AAAA,QACxB,cAAc,OAAO;AAAA,QACrB,eAAe,OAAO;AAAA,QACtB,cAAc,OAAO;AAAA,QACrB,eAAe,OAAO;AAAA,QACtB,OAAO,OAAO;AAAA,QACd,QAAQ,OAAO;AAAA,QACf,SAAS,OAAO;AAAA,QAChB,OAAO,OAAO;AAAA,MAChB,CAAC;AAAA,MAED,OAAO;AAAA,QACL,SAAS,OAAO,QAAQ,IACtB,CAAC,QAAQ,GACX;AAAA,QACA,SAAS,OAAO;AAAA,QAChB,OAAO,OAAO,SAAS,OAAO,QAAQ;AAAA,MACxC;AAAA;AAAA,IAGF,sBAAsB,OACpB,UAKG;AAAA,MACH,MAAM,sBAAyB,aAAa,KAAK;AAAA;AAAA,IAGnD,eAAe,OAAO,UAMhB;AAAA,MACJ,MAAM,WAAW,MAAM,QAAQ,MAAM,MAAM;AAAA,MAC3C,IAAI,CAAC,UAAU;AAAA,QACb,MAAM,IAAI,yBACR,6DACF;AAAA,MACF;AAAA,MACA,OAAO,eAAkB,aAAa;AAAA,QACpC,WAAW,MAAM;AAAA,QACjB;AAAA,QACA,QAAQ,MAAM;AAAA,QACd,SAAS,EAAE,OAAO,MAAM,MAAM;AAAA,MAChC,CAAC;AAAA;AAAA,IAGH,sBAAsB,OAAO,UAOvB;AAAA,MACJ,MAAM,WAAW,MAAM,QAAQ,MAAM,MAAM;AAAA,MAC3C,IAAI,CAAC,UAAU;AAAA,QACb,MAAM,IAAI,yBACR,oEACF;AAAA,MACF;AAAA,MACA,OAAO,qBAAyB,aAAa;AAAA,QAC3C,WAAW,MAAM;AAAA,QACjB;AAAA,QACA,QAAQ,MAAM;AAAA,QACd,SAAS;AAAA,UACP,WAAW,MAAM;AAAA,UACjB,QAAQ,MAAM;AAAA,QAChB;AAAA,MACF,CAAC;AAAA;AAAA,IAGH,YAAY,OAAO,UAMb;AAAA,MACJ,MAAM,iBAAiB,uBAAsB,YAAY,MAAM,MAAM;AAAA,MACrE,MAAM,UAA+B,KAAK,aAAa,eAAe;AAAA,MAEtE,MAAM,YAAe,SAAS;AAAA,QAC5B,UAAU,MAAM;AAAA,QAChB,QAAQ,MAAM;AAAA,QACd,cAAc,MAAM;AAAA,QACpB,UAAU,MAAM;AAAA,QAChB,YAAY,MAAM;AAAA,MACpB,CAAC;AAAA;AAAA,IAGH,YAAY,OAAO,UAKb;AAAA,MACJ,MAAM,iBAAiB,uBAAsB,YAAY,MAAM,MAAM;AAAA,MACrE,MAAM,UAA+B,KAAK,aAAa,eAAe;AAAA,MAEtE,MAAM,YAAe,SAAS;AAAA,QAC5B,UAAU,MAAM;AAAA,QAChB,QAAQ,MAAM;AAAA,QACd,cAAc,MAAM;AAAA,QACpB,UAAU,MAAM;AAAA,MAClB,CAAC;AAAA;AAAA,EAEL;AAAA,EAEA,OAAO;AAAA;;;;;;;;;;;;;;;;ACrNT,eAAsB,aAAa,CACjC,SACA,WACA,cACA,WACA,UACA,QACA,SAC8B;AAAA,EAC9B,MAAM,MAAM,KAAK,sBAAqB,SAAS,YAAY,GAAG,UAAU;AAAA,EACxE,OAAO,eAAkB,KAAK,EAAE,WAAW,UAAU,QAAQ,QAAQ,CAAC;AAAA;AAGxE,eAAsB,qBAAoB,CACxC,SACA,WACA,cACA,WACA,UACA,QACA,SAC0B;AAAA,EAC1B,MAAM,MAAM,KAAK,sBAAqB,SAAS,YAAY,GAAG,UAAU;AAAA,EACxE,OAAO,qBAAyB,KAAK,EAAE,WAAW,UAAU,QAAQ,QAAQ,CAAC;AAAA;;AC3B/E,eAAsB,WAAU,CAC9B,SACA,cACA,UACA,QACA,QACe;AAAA,EACf,MAAM,MAAM,sBAAqB,SAAS,YAAY;AAAA,EACtD,MAAM,UAAU,oBAAmB,KAAK,MAAM;AAAA,EAC9C,MAAM,YAAe,SAAS;AAAA,IAC5B;AAAA,IACA;AAAA,IACA,cAAc,OAAO;AAAA,IACrB,UAAU,OAAO;AAAA,IACjB,YAAY,OAAO;AAAA,EACrB,CAAC;AAAA;AAGH,eAAsB,gBAAe,CACnC,SACA,OAM2C;AAAA,EAC3C,MAAM,gBAAyC,MAAM,IAAI,CAAC,SAAS;AAAA,IACjE,MAAM,aAAa,QAAQ,SAAS,kBAAkB,KAAK,YAAY;AAAA,IACvE,MAAM,iBAAiB,uBAAsB,YAAY,KAAK,MAAM;AAAA,IACpE,OAAO;AAAA,MACL;AAAA,MACA;AAAA,MACA,UAAU,KAAK;AAAA,MACf,QAAQ,KAAK;AAAA,MACb,cAAc,KAAK,OAAO;AAAA,MAC1B,UAAU,KAAK,OAAO;AAAA,MACtB,YAAY,KAAK,OAAO;AAAA,IAC1B;AAAA,GACD;AAAA,EAED,OAAO,iBAAoB,SAAS,aAAa;AAAA;AAGnD,eAAsB,WAAU,CAC9B,SACA,cACA,UACA,QACA,QACe;AAAA,EACf,MAAM,MAAM,sBAAqB,SAAS,YAAY;AAAA,EACtD,MAAM,UAAU,oBAAmB,KAAK,MAAM;AAAA,EAC9C,MAAM,YAAe,SAAS;AAAA,IAC5B;AAAA,IACA;AAAA,IACA,cAAc,OAAO;AAAA,IACrB,UAAU,OAAO;AAAA,EACnB,CAAC;AAAA;;AC9CH,eAAsB,WAAW,CAC/B,SACA,QACgC;AAAA,EAChC,MAAM,gBAAgB,kBAAkB,SAAS,OAAO,aAAa;AAAA,EAErE,IAAI,kBAAkB,aAAa,cAAc,WAAW,GAAG;AAAA,IAC7D,OAAO,EAAE,SAAS,CAAC,GAAG,SAAS,OAAO,OAAO,EAAE;AAAA,EACjD;AAAA,EAEA,MAAM,SAAS,MAAM,QAAQ,aAAa,KAAK;AAAA,IAC7C,cAAc,eAAe,WAAW,IAAI,cAAc,KAAK;AAAA,IAC/D,iBAAiB,OAAO;AAAA,IACxB,iBAAiB,OAAO;AAAA,IACxB,cAAc,OAAO;AAAA,IACrB,eAAe,OAAO;AAAA,IACtB,cAAc,OAAO;AAAA,IACrB,eAAe,OAAO;AAAA,IACtB,OAAO,OAAO;AAAA,IACd,QAAQ,OAAO;AAAA,IACf,SAAS,OAAO;AAAA,IAChB,OAAO,OAAO;AAAA,EAChB,CAAC;AAAA,EAED,OAAO;AAAA,IACL,SAAS,CAAC,GAAG,OAAO,OAAO;AAAA,IAC3B,SAAS,OAAO;AAAA,IAChB,OAAO,OAAO;AAAA,EAChB;AAAA;AAGF,SAAS,iBAAiB,CACxB,SACA,WAC+B;AAAA,EAC/B,MAAM,WACJ,sCAAsC,OAAO,EAAE,SAAS,cACpD,0BAA0B,QAAQ,YAAY,IAC9C,QAAQ;AAAA,EACd,IAAI,WAAW;AAAA,IACb,WAAW,gBAAgB,WAAW;AAAA,MACpC,SAAS,kBAAkB,YAAY;AAAA,IACzC;AAAA,EACF;AAAA,EAEA,OAAO,YACH,CAAC,GAAG,IAAI,IAAI,UAAU,QAAQ,CAAC,OAAO,CAAC,IAAI,GAAG,SAAS,aAAa,EAAE,CAAC,CAAC,CAAC,CAAC,IAC1E;AAAA;;AC5DN,eAAsB,aAAY,CAChC,SACA,cACA,YACoB;AAAA,EACpB,OAAO,cAAiB,sBAAqB,SAAS,YAAY,GAAG,UAAU;AAAA;AAGjF,eAAsB,kBAAiB,CACrC,SACA,cACA,OACgD;AAAA,EAChD,OAAO,mBAAsB,sBAAqB,SAAS,YAAY,GAAG,KAAK;AAAA;;ACjBjF,eAAsB,eAAe,CACnC,SACA,cACA,OACe;AAAA,EACf,MAAM,MAAM,sBAAqB,SAAS,YAAY;AAAA,EACtD,MAAM,sBAAyB,KAAK,KAAK;AAAA;",
+  "debugId": "0ED9DE016D18A46464756E2164756E21",
+  "names": []
+}

package/dist/{chunk-5gd7tpv6.js → chunk-2c4j899j.js}

@@ -1,6 +1,6 @@
 // @bun
 // src/storage/connector-connections/errors.ts
-class ConnectorConnectionStorageError extends Error {
+class ConnectorConnectionStorageError2 extends Error {
   code;
   constructor(code, message) {
     super(message);
@@ -10,7 +10,7 @@ class ConnectorConnectionStorageError extends Error {
 }
 
 // src/storage/connector-connections/types.ts
-var CONNECTOR_CONNECTION_RUN_FAILURE_CODES = [
+var CONNECTOR_CONNECTION_RUN_FAILURE_CODES2 = [
   "internal.unexpected",
   "connector.adapter_invalid",
   "connector.authorization_invalid",
@@ -23,6 +23,6 @@ var CONNECTOR_CONNECTION_RUN_FAILURE_CODES = [
   "connector.provider_unavailable"
 ];
 
-export { ConnectorConnectionStorageError, CONNECTOR_CONNECTION_RUN_FAILURE_CODES };
+export { ConnectorConnectionStorageError2, CONNECTOR_CONNECTION_RUN_FAILURE_CODES2 };
 
-//# debugId=26D0DA75AEECB3FB64756E2164756E21
+//# debugId=B4781D37D7AB95BB64756E2164756E21

package/dist/{chunk-5gd7tpv6.js.map → chunk-2c4j899j.js.map}

@@ -5,7 +5,7 @@
     "export type ConnectorConnectionStorageErrorCode =\n  | \"attempt_conflict\"\n  | \"attempt_invalid\"\n  | \"run_conflict\"\n  | \"run_invalid\"\n  | \"authorization_conflict\"\n  | \"connection_conflict\"\n  | \"invalid_input\"\n\n/**\n * Storage-provider control signal for atomic conflicts and invalid calls.\n *\n * These codes belong to the provider contract, not `SixbErrorCode`; Core translates errors that\n * cross the connector lifecycle boundary into documented `connector.*` failures.\n */\nexport class ConnectorConnectionStorageError extends Error {\n  readonly code: ConnectorConnectionStorageErrorCode\n\n  constructor(code: ConnectorConnectionStorageErrorCode, message: string) {\n    super(message)\n    this.name = \"ConnectorConnectionStorageError\"\n    this.code = code\n  }\n}\n",
     "import type { ConnectorAccountCandidate, ConnectorConnectionSelector } from \"../../connectors\"\nimport type { SealedConnectorCredential } from \"../../connectors/credentials\"\nimport type { SixbErrorCode, SixbFailure } from \"../../errors/types\"\nimport type { AuthorizablePrincipal } from \"../../execution\"\n\nexport type {\n  ConnectorConnectionOwner,\n  ConnectorConnectionSelector,\n  ProjectConnectorConnectionOwner,\n} from \"../../connectors\"\n\nexport const CONNECTOR_CONNECTION_RUN_FAILURE_CODES = [\n  \"internal.unexpected\",\n  \"connector.adapter_invalid\",\n  \"connector.authorization_invalid\",\n  \"connector.authorization_required\",\n  \"connector.credentials_unavailable\",\n  \"connector.not_found\",\n  \"connector.operation_conflict\",\n  \"connector.operation_in_progress\",\n  \"connector.provider_failed\",\n  \"connector.provider_unavailable\",\n] as const satisfies readonly [SixbErrorCode, ...SixbErrorCode[]]\n\nexport type ConnectorConnectionRunFailureCode =\n  (typeof CONNECTOR_CONNECTION_RUN_FAILURE_CODES)[number]\nexport type ConnectorConnectionRunFailure = SixbFailure<ConnectorConnectionRunFailureCode>\nexport type ConnectorConnectionRunKind = \"connect\" | \"reauthorize\"\n\ninterface ConnectorConnectionRunBase extends ConnectorConnectionSelector {\n  readonly id: string\n  readonly projectId: string\n  readonly connectorId: string\n  readonly kind: ConnectorConnectionRunKind\n  /** Durable request execution that initiated and is allowed to manage this run. */\n  readonly initiatedByExecutionId: string\n  readonly createdAt: Date\n  readonly updatedAt: Date\n}\n\nexport interface ConnectorConnectionRunAwaitingProviderRecord extends ConnectorConnectionRunBase {\n  readonly status: \"waiting\"\n  readonly waitingFor: \"provider_authorization\"\n  readonly expiresAt: Date\n}\n\nexport interface ConnectorConnectionRunProcessingRecord extends ConnectorConnectionRunBase {\n  readonly status: \"running\"\n  /** Fences every callback-side write after the one-shot OAuth attempt was consumed. */\n  readonly processingId: string\n  readonly callbackStartedAt: Date\n  readonly expiresAt: Date\n  /** Internal grant handle, attached as soon as a new authorization is durably persisted. */\n  readonly authorizationId?: string\n}\n\nexport interface ConnectorConnectionRunAwaitingSelectionRecord extends ConnectorConnectionRunBase {\n  readonly status: \"waiting\"\n  readonly waitingFor: \"account_selection\"\n  readonly authorizationId: string\n  readonly expiresAt: Date\n}\n\nexport interface ConnectorConnectionRunSucceededRecord extends ConnectorConnectionRunBase {\n  readonly status: \"succeeded\"\n  readonly authorizationId: string\n  /** Internal handle for a replaced grant whose provider cleanup is still retryable. */\n  readonly cleanupAuthorizationId?: string\n  readonly connections: readonly ConnectorConnectionRecord[]\n  readonly finishedAt: Date\n}\n\nexport interface ConnectorConnectionRunFailedRecord extends ConnectorConnectionRunBase {\n  readonly status: \"failed\"\n  readonly error: ConnectorConnectionRunFailure\n  /** Internal cleanup handle; never serialized by the Headless API. */\n  readonly authorizationId?: string\n  readonly finishedAt: Date\n}\n\nexport interface ConnectorConnectionRunCancelledRecord extends ConnectorConnectionRunBase {\n  readonly status: \"cancelled\"\n  readonly authorizationId?: string\n  readonly finishedAt: Date\n}\n\nexport interface ConnectorConnectionRunExpiredRecord extends ConnectorConnectionRunBase {\n  readonly status: \"expired\"\n  readonly authorizationId?: string\n  readonly finishedAt: Date\n}\n\nexport type ConnectorConnectionRunRecord =\n  | ConnectorConnectionRunAwaitingProviderRecord\n  | ConnectorConnectionRunProcessingRecord\n  | ConnectorConnectionRunAwaitingSelectionRecord\n  | ConnectorConnectionRunSucceededRecord\n  | ConnectorConnectionRunFailedRecord\n  | ConnectorConnectionRunCancelledRecord\n  | ConnectorConnectionRunExpiredRecord\n\nexport interface CreateConnectorConnectionRunInput extends ConnectorConnectionSelector {\n  readonly id: string\n  readonly projectId: string\n  readonly connectorId: string\n  readonly kind: ConnectorConnectionRunKind\n  readonly initiatedByExecutionId: string\n  readonly ttlMs: number\n}\n\nexport interface CreateConnectorConnectionSelectionRunInput extends ConnectorConnectionSelector {\n  readonly id: string\n  readonly projectId: string\n  readonly connectorId: string\n  readonly initiatedByExecutionId: string\n  readonly authorizationId: string\n  readonly ttlMs: number\n}\n\nexport interface ClaimConnectorConnectionRunCallbackInput {\n  readonly projectId: string\n  readonly attemptId: string\n  readonly stateHash: string\n  readonly callbackBindingHash: string\n  readonly redirectUri: string\n  readonly processingId: string\n  readonly processingTtlMs: number\n}\n\nexport type ClaimConnectorConnectionRunCallbackResult =\n  | {\n      readonly type: \"claimed\"\n      readonly run: ConnectorConnectionRunProcessingRecord\n      readonly attempt: ConnectorAuthorizationAttemptRecord\n      readonly returnTo: string\n    }\n  | {\n      readonly type: \"expired\"\n      readonly run: ConnectorConnectionRunExpiredRecord\n      readonly returnTo: string\n    }\n\nexport interface WaitForConnectorConnectionRunSelectionInput {\n  readonly projectId: string\n  readonly connectorId: string\n  readonly runId: string\n  readonly processingId: string\n  readonly authorizationId: string\n  readonly expiresAt: Date\n}\n\nexport interface AttachConnectorConnectionRunAuthorizationInput {\n  readonly projectId: string\n  readonly connectorId: string\n  readonly runId: string\n  readonly processingId: string\n  readonly authorizationId: string\n}\n\nexport type FinishConnectorConnectionRunInput =\n  | {\n      readonly projectId: string\n      readonly connectorId: string\n      readonly runId: string\n      readonly processingId: string\n      readonly status: \"succeeded\"\n      readonly authorizationId: string\n      readonly cleanupAuthorizationId?: string\n      readonly connections: readonly ConnectorConnectionRecord[]\n    }\n  | {\n      readonly projectId: string\n      readonly connectorId: string\n      readonly runId: string\n      readonly processingId: string\n      readonly status: \"failed\"\n      readonly error: ConnectorConnectionRunFailure\n      readonly authorizationId?: string\n    }\n  | {\n      readonly projectId: string\n      readonly connectorId: string\n      readonly runId: string\n      readonly processingId: string\n      readonly status: \"cancelled\"\n    }\n\nexport interface GetConnectorConnectionRunInput {\n  readonly projectId: string\n  readonly connectorId: string\n  readonly runId: string\n}\n\nexport interface ConnectorAuthorizationAttemptRecord extends ConnectorConnectionSelector {\n  readonly id: string\n  readonly projectId: string\n  readonly connectorId: string\n  /** Durable execution that initiated and authorizes completion of this OAuth attempt. */\n  readonly initiatedByExecutionId: string\n  readonly stateHash: string\n  readonly codeVerifier: SealedConnectorCredential\n  readonly redirectUri: string\n  /** Present only for attempts created by the headless connection-run API. */\n  readonly connectionRunId?: string\n  /** Fixed, allowlisted continuation consumed with a headless callback. */\n  readonly returnTo?: string\n  /** Hash of the one-shot browser callback binding secret. */\n  readonly callbackBindingHash?: string\n  readonly reauthorizationId?: string\n  readonly reauthorizationRevision?: number\n  readonly reauthorizationConnectionIds?: readonly string[]\n  readonly createdAt: Date\n  readonly expiresAt: Date\n}\n\nexport interface CreateConnectorAuthorizationAttemptInput extends ConnectorConnectionSelector {\n  readonly id: string\n  readonly projectId: string\n  readonly connectorId: string\n  readonly initiatedByExecutionId: string\n  readonly stateHash: string\n  readonly codeVerifier: SealedConnectorCredential\n  readonly redirectUri: string\n  readonly connectionRunId?: string\n  readonly returnTo?: string\n  readonly callbackBindingHash?: string\n  readonly reauthorizationId?: string\n  readonly reauthorizationRevision?: number\n  readonly reauthorizationConnectionIds?: readonly string[]\n  readonly ttlMs: number\n}\n\n/** Callback proof. The orchestration layer authorizes the returned initiating execution. */\nexport interface ConsumeConnectorAuthorizationAttemptInput {\n  readonly id: string\n  readonly projectId: string\n  readonly connectorId: string\n  readonly stateHash: string\n  readonly redirectUri: string\n}\n\nexport type ConnectorAuthorizationStatus =\n  | \"pending_selection\"\n  | \"active\"\n  | \"needs_reauthorization\"\n  | \"revocation_pending\"\n  | \"revoked\"\n\nexport type ConnectorCredentialMutationKind = \"refresh\" | \"reauthorization\" | \"revocation\"\nexport type ConnectorCredentialMutationPhase = \"prepared\" | \"executing\" | \"result_staged\"\n\nexport interface ConnectorStagedCredentials {\n  readonly credentials: SealedConnectorCredential\n  readonly credentialExpiresAt?: Date\n  readonly scopes: readonly string[]\n}\n\n/** Durable fencing record for one provider-side OAuth credential mutation. */\nexport interface ConnectorCredentialMutation {\n  readonly id: string\n  readonly kind: ConnectorCredentialMutationKind\n  readonly phase: ConnectorCredentialMutationPhase\n  readonly holderId: string\n  readonly expiresAt: Date\n  readonly deadlineAt: Date\n  readonly expectedConnectionIds?: readonly string[]\n  readonly stagedCredentials?: ConnectorStagedCredentials\n}\n\nexport interface ConnectorAuthorizationRecord {\n  readonly id: string\n  readonly projectId: string\n  readonly connectorId: string\n  readonly authorizedBy: AuthorizablePrincipal\n  /** Removed after provider revocation is confirmed. */\n  readonly credentials?: SealedConnectorCredential\n  readonly credentialExpiresAt?: Date\n  readonly scopes: readonly string[]\n  readonly accounts: readonly ConnectorAccountCandidate[]\n  readonly status: ConnectorAuthorizationStatus\n  /** Storage-authoritative deadline for the first account selection. */\n  readonly selectionExpiresAt?: Date\n  readonly revision: number\n  readonly credentialMutation?: ConnectorCredentialMutation\n  readonly createdAt: Date\n  readonly updatedAt: Date\n}\n\nexport interface CreateConnectorAuthorizationInput {\n  readonly id: string\n  readonly projectId: string\n  readonly connectorId: string\n  readonly authorizedBy: AuthorizablePrincipal\n  readonly credentials: SealedConnectorCredential\n  readonly credentialExpiresAt?: Date\n  readonly scopes: readonly string[]\n  readonly accounts: readonly ConnectorAccountCandidate[]\n  readonly selectionTtlMs: number\n}\n\nexport interface InitializeConnectorAuthorizationAccountsInput {\n  readonly projectId: string\n  readonly connectorId: string\n  readonly authorizationId: string\n  readonly expectedRevision: number\n  readonly accounts: readonly ConnectorAccountCandidate[]\n}\n\nexport interface ClaimConnectorCredentialMutationInput {\n  readonly projectId: string\n  readonly connectorId: string\n  readonly authorizationId: string\n  readonly expectedRevision: number\n  readonly mutation: {\n    readonly id: string\n    readonly kind: ConnectorCredentialMutationKind\n    readonly holderId: string\n  }\n  readonly expectedConnectionIds?: readonly string[]\n  readonly leaseDurationMs: number\n  readonly operationTimeoutMs: number\n}\n\nexport interface ClaimConnectorCredentialMutationResult {\n  readonly authorization: ConnectorAuthorizationRecord\n  readonly disconnected: readonly ConnectorConnectionRecord[]\n}\n\nexport interface ConnectorCredentialMutationFence {\n  readonly projectId: string\n  readonly connectorId: string\n  readonly authorizationId: string\n  readonly expectedRevision: number\n  readonly mutationId: string\n}\n\nexport interface MarkConnectorCredentialMutationExecutingInput\n  extends ConnectorCredentialMutationFence {\n  readonly holderId: string\n}\n\nexport interface RenewConnectorCredentialMutationInput extends ConnectorCredentialMutationFence {\n  readonly holderId: string\n  readonly leaseDurationMs: number\n}\n\nexport interface StageConnectorCredentialMutationCredentialsInput\n  extends ConnectorCredentialMutationFence {\n  readonly holderId: string\n  readonly credentials: SealedConnectorCredential\n  readonly credentialExpiresAt?: Date\n  readonly scopes: readonly string[]\n}\n\nexport interface StageConnectorCredentialMutationRevocationInput\n  extends ConnectorCredentialMutationFence {\n  readonly holderId: string\n}\n\nexport interface ReleaseConnectorCredentialMutationInput extends ConnectorCredentialMutationFence {\n  readonly holderId: string\n}\n\nexport interface RecoverExpiredConnectorCredentialMutationInput {\n  readonly projectId: string\n  readonly connectorId: string\n  readonly authorizationId: string\n}\n\nexport interface MarkConnectorAuthorizationNeedsReauthorizationInput\n  extends ConnectorCredentialMutationFence {}\n\nexport interface FinalizeConnectorReauthorizationInput extends ConnectorCredentialMutationFence {\n  readonly accounts: readonly ConnectorAccountCandidate[]\n}\n\nexport type ConnectorConnectionStatus = \"connected\" | \"disconnected\"\n\nexport interface ConnectorConnectionRecord extends ConnectorConnectionSelector {\n  readonly id: string\n  readonly projectId: string\n  readonly connectorId: string\n  readonly authorizationId: string\n  readonly account: ConnectorAccountCandidate\n  readonly status: ConnectorConnectionStatus\n  readonly disconnectedAt?: Date\n  readonly createdAt: Date\n  readonly updatedAt: Date\n}\n\nexport interface PutConnectorConnectionInput extends ConnectorConnectionSelector {\n  readonly id: string\n  readonly projectId: string\n  readonly connectorId: string\n  readonly authorizationId: string\n  readonly account: ConnectorAccountCandidate\n  readonly replace: boolean\n}\n\nexport interface PutConnectorConnectionResult {\n  readonly connection: ConnectorConnectionRecord\n  readonly authorization: ConnectorAuthorizationRecord\n  readonly revocationPendingAuthorizationId?: string\n  readonly created: boolean\n  readonly replaced: boolean\n}\n\nexport interface DisconnectConnectorConnectionResult {\n  readonly connection: ConnectorConnectionRecord\n  readonly authorization: ConnectorAuthorizationRecord\n  readonly revocationPendingAuthorizationId?: string\n}\n\nexport interface PutConnectorConnectionFromRunInput {\n  readonly id: string\n  readonly projectId: string\n  readonly connectorId: string\n  readonly runId: string\n  readonly account: ConnectorAccountCandidate\n  readonly replace: boolean\n}\n\nexport interface PutConnectorConnectionFromRunResult extends PutConnectorConnectionResult {\n  readonly run: ConnectorConnectionRunSucceededRecord\n}\n\nexport interface GetConnectorConnectionInput extends ConnectorConnectionSelector {\n  readonly projectId: string\n  readonly connectorId: string\n}\n\nexport interface ListConnectorConnectionsInput {\n  readonly projectId: string\n  readonly connectorId: string\n}\n\n/** Tenant-scoped identity for one connector authorization. */\nexport interface ConnectorAuthorizationKey {\n  readonly projectId: string\n  readonly connectorId: string\n  readonly authorizationId: string\n}\n\n/** Tenant-scoped identity for one selected connector connection. */\nexport interface ConnectorConnectionKey {\n  readonly projectId: string\n  readonly connectorId: string\n  readonly connectionId: string\n}\n\n/** Persistent contract. Implementations must make every individual mutation atomic. */\nexport interface ConnectorConnectionStorage {\n  readonly durability: \"ephemeral\" | \"durable\"\n\n  createAuthorizationAttempt(\n    input: CreateConnectorAuthorizationAttemptInput\n  ): Promise<ConnectorAuthorizationAttemptRecord>\n  consumeAuthorizationAttempt(\n    input: ConsumeConnectorAuthorizationAttemptInput\n  ): Promise<ConnectorAuthorizationAttemptRecord>\n\n  createConnectionRun(\n    input: CreateConnectorConnectionRunInput\n  ): Promise<ConnectorConnectionRunRecord>\n  createConnectionSelectionRun(\n    input: CreateConnectorConnectionSelectionRunInput\n  ): Promise<ConnectorConnectionRunAwaitingSelectionRecord>\n  claimConnectionRunCallback(\n    input: ClaimConnectorConnectionRunCallbackInput\n  ): Promise<ClaimConnectorConnectionRunCallbackResult | null>\n  attachConnectionRunAuthorization(\n    input: AttachConnectorConnectionRunAuthorizationInput\n  ): Promise<ConnectorConnectionRunProcessingRecord | null>\n  waitForConnectionRunSelection(\n    input: WaitForConnectorConnectionRunSelectionInput\n  ): Promise<ConnectorConnectionRunAwaitingSelectionRecord | null>\n  finishConnectionRun(\n    input: FinishConnectorConnectionRunInput\n  ): Promise<ConnectorConnectionRunRecord | null>\n  getConnectionRun(\n    input: GetConnectorConnectionRunInput\n  ): Promise<ConnectorConnectionRunRecord | null>\n\n  createAuthorization(\n    input: CreateConnectorAuthorizationInput\n  ): Promise<ConnectorAuthorizationRecord>\n  initializeAuthorizationAccounts(\n    input: InitializeConnectorAuthorizationAccountsInput\n  ): Promise<ConnectorAuthorizationRecord | null>\n  getAuthorization(input: ConnectorAuthorizationKey): Promise<ConnectorAuthorizationRecord | null>\n  getAuthorizationByConnectionId(\n    input: ConnectorConnectionKey\n  ): Promise<ConnectorAuthorizationRecord | null>\n  claimCredentialMutation(\n    input: ClaimConnectorCredentialMutationInput\n  ): Promise<ClaimConnectorCredentialMutationResult | null>\n  markCredentialMutationExecuting(\n    input: MarkConnectorCredentialMutationExecutingInput\n  ): Promise<ConnectorAuthorizationRecord | null>\n  renewCredentialMutation(\n    input: RenewConnectorCredentialMutationInput\n  ): Promise<ConnectorAuthorizationRecord | null>\n  stageCredentialMutationCredentials(\n    input: StageConnectorCredentialMutationCredentialsInput\n  ): Promise<ConnectorAuthorizationRecord | null>\n  stageCredentialMutationRevocation(\n    input: StageConnectorCredentialMutationRevocationInput\n  ): Promise<ConnectorAuthorizationRecord | null>\n  releaseCredentialMutation(input: ReleaseConnectorCredentialMutationInput): Promise<boolean>\n  /**\n   * Recovers an expired mutation without replaying an unknown provider effect. Prepared work is\n   * released, executing refresh/reauthorization fails closed, revocation stays retryable, and a\n   * staged result remains available for finalization.\n   */\n  recoverExpiredCredentialMutation(\n    input: RecoverExpiredConnectorCredentialMutationInput\n  ): Promise<ConnectorAuthorizationRecord | null>\n  markNeedsReauthorization(\n    input: MarkConnectorAuthorizationNeedsReauthorizationInput\n  ): Promise<ConnectorAuthorizationRecord | null>\n  finalizeRefresh(\n    input: ConnectorCredentialMutationFence\n  ): Promise<ConnectorAuthorizationRecord | null>\n  finalizeReauthorization(\n    input: FinalizeConnectorReauthorizationInput\n  ): Promise<ConnectorAuthorizationRecord | null>\n  finalizeRevocation(\n    input: ConnectorCredentialMutationFence\n  ): Promise<ConnectorAuthorizationRecord | null>\n\n  putConnection(input: PutConnectorConnectionInput): Promise<PutConnectorConnectionResult>\n  putConnectionFromRun(\n    input: PutConnectorConnectionFromRunInput\n  ): Promise<PutConnectorConnectionFromRunResult>\n  getConnection(input: GetConnectorConnectionInput): Promise<ConnectorConnectionRecord | null>\n  getConnectionById(input: ConnectorConnectionKey): Promise<ConnectorConnectionRecord | null>\n  listConnections(\n    input: ListConnectorConnectionsInput\n  ): Promise<readonly ConnectorConnectionRecord[]>\n  listConnectionsByAuthorization(\n    input: ConnectorAuthorizationKey\n  ): Promise<readonly ConnectorConnectionRecord[]>\n  disconnectConnection(\n    input: ConnectorConnectionKey\n  ): Promise<DisconnectConnectorConnectionResult | null>\n}\n"
   ],
-  "mappings": ";;AAeO,MAAM,wCAAwC,MAAM;AAAA,EAChD;AAAA,EAET,WAAW,CAAC,MAA2C,SAAiB;AAAA,IACtE,MAAM,OAAO;AAAA,IACb,KAAK,OAAO;AAAA,IACZ,KAAK,OAAO;AAAA;AAEhB;;;ACZO,IAAM,yCAAyC;AAAA,EACpD;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;",
-  "debugId": "26D0DA75AEECB3FB64756E2164756E21",
+  "mappings": ";;AAeO,MAAM,yCAAwC,MAAM;AAAA,EAChD;AAAA,EAET,WAAW,CAAC,MAA2C,SAAiB;AAAA,IACtE,MAAM,OAAO;AAAA,IACb,KAAK,OAAO;AAAA,IACZ,KAAK,OAAO;AAAA;AAEhB;;;ACZO,IAAM,0CAAyC;AAAA,EACpD;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;",
+  "debugId": "B4781D37D7AB95BB64756E2164756E21",
   "names": []
 }

package/dist/{chunk-7ds9620f.js → chunk-38zv5rkr.js}

@@ -1,8 +1,9 @@
 // @bun
 import {
+  createPrincipalRuntimeAuthorization,
   createDisabledRuntimeAuthorization,
-  createPrincipalRuntimeAuthorization
-} from "./chunk-37wk412q.js";
+  createDelegatedRuntimeAuthorization
+} from "./chunk-dz5h08xv.js";
 
 // src/execution/scopes.ts
 import { randomUUID } from "crypto";
@@ -16,16 +17,31 @@ function createPrincipalRequestScope(input) {
   return Object.freeze({
     execution,
     authorization: createPrincipalRuntimeAuthorization({
-      projectId: input.projectId,
+      execution,
       context: input.context,
       ...input.credential === undefined ? {} : { credential: input.credential }
     })
   });
 }
 function createDisabledRequestScope(input) {
+  const execution = createRequestExecution(input);
   return Object.freeze({
-    execution: createRequestExecution(input),
-    authorization: createDisabledRuntimeAuthorization(input.projectId)
+    execution,
+    authorization: createDisabledRuntimeAuthorization(execution)
+  });
+}
+function createDelegatedRequestScope(input) {
+  const execution = createRequestExecution(input);
+  const actionApply = input.actionApply;
+  const delegation = input.delegation;
+  return Object.freeze({
+    execution,
+    authorization: createDelegatedRuntimeAuthorization({
+      execution,
+      objectRead: input.objectRead,
+      ...actionApply === undefined ? {} : { actionApply },
+      ...delegation === undefined ? {} : { delegation }
+    })
   });
 }
 function createTestingScope(input) {
@@ -40,7 +56,7 @@ function createTestingScope(input) {
   });
   return Object.freeze({
     execution,
-    authorization: context ? createPrincipalRuntimeAuthorization({ projectId: input.projectId, context }) : createDisabledRuntimeAuthorization(input.projectId)
+    authorization: context ? createPrincipalRuntimeAuthorization({ execution, context }) : createDisabledRuntimeAuthorization(execution)
   });
 }
 function withoutSession(context) {
@@ -85,6 +101,6 @@ function assertNonEmpty(value, label) {
   }
 }
 
-export { createPrincipalRequestScope, createDisabledRequestScope, createTestingScope };
+export { createPrincipalRequestScope, createDisabledRequestScope, createDelegatedRequestScope, createTestingScope };
 
-//# debugId=921D959D4D3E5CA264756E2164756E21
+//# debugId=D67EDA8B3AA3264264756E2164756E21

package/dist/chunk-38zv5rkr.js.map

@@ -0,0 +1,10 @@
+{
+  "version": 3,
+  "sources": ["../src/execution/scopes.ts"],
+  "sourcesContent": [
+    "import { randomUUID } from \"node:crypto\"\nimport type { AuthorizationContext } from \"../authorization\"\nimport type { ObjectReadExecutionLimits, SelectedObjectReadScope } from \"../storage\"\nimport {\n  createDelegatedRuntimeAuthorization,\n  createDisabledRuntimeAuthorization,\n  createKernelRuntimeAuthorization,\n  createPrincipalRuntimeAuthorization,\n  type DelegatedActionApplyTarget,\n} from \"./authorization\"\nimport type {\n  AuthorizablePrincipal,\n  AuthorizationRef,\n  ExecutionContext,\n  ExecutionScope,\n  ExecutionSource,\n  KernelOperation,\n} from \"./types\"\n\nexport function createPrincipalRequestScope(input: {\n  readonly projectId: string\n  readonly requestId: string\n  readonly correlationId: string\n  readonly context: AuthorizationContext\n  readonly credential?: Extract<AuthorizationRef, { readonly type: \"principal\" }>[\"credential\"]\n}): ExecutionScope {\n  const execution = createRequestExecution({\n    projectId: input.projectId,\n    requestId: input.requestId,\n    correlationId: input.correlationId,\n    requestedBy: asAuthorizablePrincipal(input.context.principal),\n  })\n\n  return Object.freeze({\n    execution,\n    authorization: createPrincipalRuntimeAuthorization({\n      execution,\n      context: input.context,\n      ...(input.credential === undefined ? {} : { credential: input.credential }),\n    }),\n  })\n}\n\nexport function createDisabledRequestScope(input: {\n  readonly projectId: string\n  readonly requestId: string\n  readonly correlationId: string\n}): ExecutionScope {\n  const execution = createRequestExecution(input)\n  return Object.freeze({\n    execution,\n    authorization: createDisabledRuntimeAuthorization(execution),\n  })\n}\n\n/** Internal request scope carrying only a finite object-read selection. */\nexport function createDelegatedRequestScope(input: {\n  readonly projectId: string\n  readonly requestId: string\n  readonly correlationId: string\n  readonly objectRead: {\n    readonly selection: SelectedObjectReadScope\n    readonly limits: ObjectReadExecutionLimits\n  }\n  readonly actionApply?: readonly DelegatedActionApplyTarget[]\n  readonly delegation?: Extract<AuthorizationRef, { readonly type: \"delegated\" }>[\"delegation\"]\n}): ExecutionScope {\n  const execution = createRequestExecution(input)\n  const actionApply = input.actionApply\n  const delegation = input.delegation\n  return Object.freeze({\n    execution,\n    authorization: createDelegatedRuntimeAuthorization({\n      execution,\n      objectRead: input.objectRead,\n      ...(actionApply === undefined ? {} : { actionApply }),\n      ...(delegation === undefined ? {} : { delegation }),\n    }),\n  })\n}\n\nexport function createKernelScope(input: {\n  readonly projectId: string\n  readonly operation: KernelOperation\n  readonly source: ExecutionSource\n  readonly correlationId?: string\n}): ExecutionScope {\n  const operation = Object.freeze({ ...input.operation })\n  const execution = createKernelExecution({\n    projectId: input.projectId,\n    operation,\n    source: input.source,\n    correlationId: input.correlationId,\n  })\n  return Object.freeze({\n    execution,\n    authorization: createKernelRuntimeAuthorization({ execution, operation }),\n  })\n}\n\nfunction createKernelExecution(input: {\n  readonly projectId: string\n  readonly operation: KernelOperation\n  readonly source: ExecutionSource\n  readonly correlationId?: string\n}): ExecutionContext {\n  const source = snapshotExecutionSource(input.source)\n  assertNestedProvenance(source, input.correlationId)\n  return freezeExecution({\n    id: `exec_${randomUUID()}`,\n    projectId: input.projectId,\n    executor: Object.freeze({ type: \"kernel\", operation: input.operation }),\n    source,\n    correlationId: input.correlationId ?? `corr_${randomUUID()}`,\n  })\n}\n\nfunction assertNestedProvenance(source: ExecutionSource, correlationId: string | undefined): void {\n  if (source.type === \"execution\" && correlationId === undefined) {\n    throw new Error(\"[Sixb] Nested execution must preserve its parent correlation id.\")\n  }\n}\n\nexport function createTestingScope(input: {\n  readonly projectId: string\n  readonly context?: AuthorizationContext\n  readonly executionId?: string\n  readonly requestId?: string\n  readonly correlationId?: string\n}): ExecutionScope {\n  const context = input.context ? withoutSession(input.context) : undefined\n  const requestId = input.requestId ?? `test_request_${randomUUID()}`\n  const execution = createRequestExecution({\n    projectId: input.projectId,\n    requestId,\n    correlationId: input.correlationId ?? `test_correlation_${randomUUID()}`,\n    ...(context === undefined ? {} : { requestedBy: asAuthorizablePrincipal(context.principal) }),\n    executionId: input.executionId,\n  })\n  return Object.freeze({\n    execution,\n    authorization: context\n      ? createPrincipalRuntimeAuthorization({ execution, context })\n      : createDisabledRuntimeAuthorization(execution),\n  })\n}\n\nfunction withoutSession(context: AuthorizationContext): AuthorizationContext {\n  return {\n    principal: context.principal,\n    groupIds: context.groupIds,\n    roleIds: context.roleIds,\n    grants: context.grants,\n  }\n}\n\nfunction createRequestExecution(input: {\n  readonly projectId: string\n  readonly requestId: string\n  readonly correlationId: string\n  readonly requestedBy?: AuthorizablePrincipal\n  readonly executionId?: string\n}): ExecutionContext {\n  assertNonEmpty(input.projectId, \"Execution project id\")\n  assertNonEmpty(input.requestId, \"Execution request id\")\n  assertNonEmpty(input.correlationId, \"Execution correlation id\")\n  const id = input.executionId ?? `exec_${randomUUID()}`\n  assertNonEmpty(id, \"Execution id\")\n  return freezeExecution({\n    id,\n    projectId: input.projectId,\n    ...(input.requestedBy === undefined ? {} : { requestedBy: input.requestedBy }),\n    executor: Object.freeze({ type: \"request\", requestId: input.requestId }),\n    source: Object.freeze({ type: \"http\", requestId: input.requestId }),\n    correlationId: input.correlationId,\n  })\n}\n\nfunction freezeExecution(execution: ExecutionContext): ExecutionContext {\n  assertNonEmpty(execution.id, \"Execution id\")\n  assertNonEmpty(execution.projectId, \"Execution project id\")\n  assertNonEmpty(execution.correlationId, \"Execution correlation id\")\n  return Object.freeze(execution)\n}\n\nfunction snapshotExecutionSource(source: ExecutionSource): ExecutionSource {\n  const field = sourceIdentifier(source)\n  assertNonEmpty(field.value, field.label)\n  if (source.type === \"datasetVersion\") {\n    assertNonEmpty(source.datasetId, \"Execution source dataset id\")\n  }\n  return Object.freeze({ ...source })\n}\n\nfunction sourceIdentifier(source: ExecutionSource): {\n  readonly label: string\n  readonly value: string\n} {\n  switch (source.type) {\n    case \"http\":\n      return { label: \"Execution source request id\", value: source.requestId }\n    case \"webhook\":\n      return { label: \"Execution source delivery id\", value: source.deliveryId }\n    case \"schedule\":\n    case \"event\":\n      return { label: \"Execution source event id\", value: source.eventId }\n    case \"datasetVersion\":\n      return { label: \"Execution source dataset version id\", value: source.versionId }\n    case \"execution\":\n      return { label: \"Execution source execution id\", value: source.executionId }\n  }\n}\n\nfunction asAuthorizablePrincipal(\n  principal: AuthorizationContext[\"principal\"]\n): AuthorizablePrincipal {\n  if (principal.type !== \"user\" && principal.type !== \"serviceAccount\") {\n    throw new Error(`[Sixb] Principal type '${principal.type}' cannot hold runtime authorization.`)\n  }\n  assertNonEmpty(principal.id, \"Execution principal id\")\n  return Object.freeze({ type: principal.type, id: principal.id })\n}\n\nfunction assertNonEmpty(value: string, label: string): void {\n  if (!value.trim()) {\n    throw new Error(`[Sixb] ${label} must not be empty.`)\n  }\n}\n"
+  ],
+  "mappings": ";;;;;;;;AAAA;AAmBO,SAAS,2BAA2B,CAAC,OAMzB;AAAA,EACjB,MAAM,YAAY,uBAAuB;AAAA,IACvC,WAAW,MAAM;AAAA,IACjB,WAAW,MAAM;AAAA,IACjB,eAAe,MAAM;AAAA,IACrB,aAAa,wBAAwB,MAAM,QAAQ,SAAS;AAAA,EAC9D,CAAC;AAAA,EAED,OAAO,OAAO,OAAO;AAAA,IACnB;AAAA,IACA,eAAe,oCAAoC;AAAA,MACjD;AAAA,MACA,SAAS,MAAM;AAAA,SACX,MAAM,eAAe,YAAY,CAAC,IAAI,EAAE,YAAY,MAAM,WAAW;AAAA,IAC3E,CAAC;AAAA,EACH,CAAC;AAAA;AAGI,SAAS,0BAA0B,CAAC,OAIxB;AAAA,EACjB,MAAM,YAAY,uBAAuB,KAAK;AAAA,EAC9C,OAAO,OAAO,OAAO;AAAA,IACnB;AAAA,IACA,eAAe,mCAAmC,SAAS;AAAA,EAC7D,CAAC;AAAA;AAII,SAAS,2BAA2B,CAAC,OAUzB;AAAA,EACjB,MAAM,YAAY,uBAAuB,KAAK;AAAA,EAC9C,MAAM,cAAc,MAAM;AAAA,EAC1B,MAAM,aAAa,MAAM;AAAA,EACzB,OAAO,OAAO,OAAO;AAAA,IACnB;AAAA,IACA,eAAe,oCAAoC;AAAA,MACjD;AAAA,MACA,YAAY,MAAM;AAAA,SACd,gBAAgB,YAAY,CAAC,IAAI,EAAE,YAAY;AAAA,SAC/C,eAAe,YAAY,CAAC,IAAI,EAAE,WAAW;AAAA,IACnD,CAAC;AAAA,EACH,CAAC;AAAA;AA6CI,SAAS,kBAAkB,CAAC,OAMhB;AAAA,EACjB,MAAM,UAAU,MAAM,UAAU,eAAe,MAAM,OAAO,IAAI;AAAA,EAChE,MAAM,YAAY,MAAM,aAAa,gBAAgB,WAAW;AAAA,EAChE,MAAM,YAAY,uBAAuB;AAAA,IACvC,WAAW,MAAM;AAAA,IACjB;AAAA,IACA,eAAe,MAAM,iBAAiB,oBAAoB,WAAW;AAAA,OACjE,YAAY,YAAY,CAAC,IAAI,EAAE,aAAa,wBAAwB,QAAQ,SAAS,EAAE;AAAA,IAC3F,aAAa,MAAM;AAAA,EACrB,CAAC;AAAA,EACD,OAAO,OAAO,OAAO;AAAA,IACnB;AAAA,IACA,eAAe,UACX,oCAAoC,EAAE,WAAW,QAAQ,CAAC,IAC1D,mCAAmC,SAAS;AAAA,EAClD,CAAC;AAAA;AAGH,SAAS,cAAc,CAAC,SAAqD;AAAA,EAC3E,OAAO;AAAA,IACL,WAAW,QAAQ;AAAA,IACnB,UAAU,QAAQ;AAAA,IAClB,SAAS,QAAQ;AAAA,IACjB,QAAQ,QAAQ;AAAA,EAClB;AAAA;AAGF,SAAS,sBAAsB,CAAC,OAMX;AAAA,EACnB,eAAe,MAAM,WAAW,sBAAsB;AAAA,EACtD,eAAe,MAAM,WAAW,sBAAsB;AAAA,EACtD,eAAe,MAAM,eAAe,0BAA0B;AAAA,EAC9D,MAAM,KAAK,MAAM,eAAe,QAAQ,WAAW;AAAA,EACnD,eAAe,IAAI,cAAc;AAAA,EACjC,OAAO,gBAAgB;AAAA,IACrB;AAAA,IACA,WAAW,MAAM;AAAA,OACb,MAAM,gBAAgB,YAAY,CAAC,IAAI,EAAE,aAAa,MAAM,YAAY;AAAA,IAC5E,UAAU,OAAO,OAAO,EAAE,MAAM,WAAW,WAAW,MAAM,UAAU,CAAC;AAAA,IACvE,QAAQ,OAAO,OAAO,EAAE,MAAM,QAAQ,WAAW,MAAM,UAAU,CAAC;AAAA,IAClE,eAAe,MAAM;AAAA,EACvB,CAAC;AAAA;AAGH,SAAS,eAAe,CAAC,WAA+C;AAAA,EACtE,eAAe,UAAU,IAAI,cAAc;AAAA,EAC3C,eAAe,UAAU,WAAW,sBAAsB;AAAA,EAC1D,eAAe,UAAU,eAAe,0BAA0B;AAAA,EAClE,OAAO,OAAO,OAAO,SAAS;AAAA;AA+BhC,SAAS,uBAAuB,CAC9B,WACuB;AAAA,EACvB,IAAI,UAAU,SAAS,UAAU,UAAU,SAAS,kBAAkB;AAAA,IACpE,MAAM,IAAI,MAAM,0BAA0B,UAAU,0CAA0C;AAAA,EAChG;AAAA,EACA,eAAe,UAAU,IAAI,wBAAwB;AAAA,EACrD,OAAO,OAAO,OAAO,EAAE,MAAM,UAAU,MAAM,IAAI,UAAU,GAAG,CAAC;AAAA;AAGjE,SAAS,cAAc,CAAC,OAAe,OAAqB;AAAA,EAC1D,IAAI,CAAC,MAAM,KAAK,GAAG;AAAA,IACjB,MAAM,IAAI,MAAM,UAAU,0BAA0B;AAAA,EACtD;AAAA;",
+  "debugId": "D67EDA8B3AA3264264756E2164756E21",
+  "names": []
+}

package/dist/{chunk-w3e09qqk.js → chunk-39tqv9hz.js}

@@ -1,14 +1,14 @@
 // @bun
 import {
-  blobIdFromDigest
-} from "./chunk-08m3b6w8.js";
+  blobIdFromDigest2
+} from "./chunk-h3v76ams.js";
 // src/blob-storage/errors.ts
-class BlobStorageError extends Error {
+class BlobStorageError2 extends Error {
   name = "BlobStorageError";
 }
 // src/blob-storage/utils.ts
 import { createHash } from "crypto";
-function streamBlobBody(input) {
+function streamBlobBody2(input) {
   if (input instanceof ReadableStream) {
     return input;
   }
@@ -22,7 +22,7 @@ function streamBlobBody(input) {
   bytes.set(input);
   return new Blob([bytes]).stream();
 }
-async function readBlobBody(input, signal) {
+async function readBlobBody2(input, signal) {
   signal?.throwIfAborted();
   if (input instanceof Uint8Array) {
     return new Uint8Array(input);
@@ -31,9 +31,9 @@ async function readBlobBody(input, signal) {
     return new Uint8Array(input.slice(0));
   }
   if (input instanceof Blob) {
-    const bytes2 = new Uint8Array(await input.arrayBuffer());
+    const bytes = new Uint8Array(await input.arrayBuffer());
     signal?.throwIfAborted();
-    return bytes2;
+    return bytes;
   }
   const reader = input.getReader();
   const chunks = [];
@@ -65,28 +65,28 @@ async function readBlobBody(input, signal) {
   }
   return bytes;
 }
-function assertExpectedBlobSize(expectedSizeBytes, actualSizeBytes, provider = "BlobStorage") {
-  assertValidExpectedBlobSize(expectedSizeBytes, provider);
+function assertExpectedBlobSize2(expectedSizeBytes, actualSizeBytes, provider = "BlobStorage") {
+  assertValidExpectedBlobSize2(expectedSizeBytes, provider);
   if (expectedSizeBytes === undefined) {
     return;
   }
   if (actualSizeBytes !== expectedSizeBytes) {
-    throw new BlobStorageError(`[${provider}] Blob size mismatch: expected ${expectedSizeBytes} bytes, received ${actualSizeBytes}.`);
+    throw new BlobStorageError2(`[${provider}] Blob size mismatch: expected ${expectedSizeBytes} bytes, received ${actualSizeBytes}.`);
   }
 }
-function assertValidExpectedBlobSize(expectedSizeBytes, provider = "BlobStorage") {
+function assertValidExpectedBlobSize2(expectedSizeBytes, provider = "BlobStorage") {
   if (expectedSizeBytes === undefined) {
     return;
   }
   if (!Number.isSafeInteger(expectedSizeBytes) || expectedSizeBytes < 0) {
-    throw new BlobStorageError(`[${provider}] expectedSizeBytes must be a non-negative safe integer.`);
+    throw new BlobStorageError2(`[${provider}] expectedSizeBytes must be a non-negative safe integer.`);
   }
 }
-function computeBlobDigest(bytes) {
+function computeBlobDigest2(bytes) {
   const hash = createHash("sha256").update(bytes).digest("hex");
   return `sha256:${hash}`;
 }
-function createFileRef(input, info) {
+function createFileRef2(input, info) {
   return {
     blobId: info.blobId,
     digest: info.digest,
@@ -98,14 +98,14 @@ function createFileRef(input, info) {
 }
 
 // src/blob-storage/in-memory.ts
-class InMemoryBlobStorage {
+class InMemoryBlobStorage2 {
   blobsById = new Map;
   async put(input) {
-    assertValidExpectedBlobSize(input.expectedSizeBytes);
-    const bytes = await readBlobBody(input.body, input.signal);
-    assertExpectedBlobSize(input.expectedSizeBytes, bytes.byteLength, "BlobStorage");
-    const digest = computeBlobDigest(bytes);
-    const blobId = blobIdFromDigest(digest);
+    assertValidExpectedBlobSize2(input.expectedSizeBytes);
+    const bytes = await readBlobBody2(input.body, input.signal);
+    assertExpectedBlobSize2(input.expectedSizeBytes, bytes.byteLength, "BlobStorage");
+    const digest = computeBlobDigest2(bytes);
+    const blobId = blobIdFromDigest2(digest);
     let stored = this.blobsById.get(blobId);
     if (!stored) {
       stored = {
@@ -118,7 +118,7 @@ class InMemoryBlobStorage {
       };
       this.blobsById.set(blobId, stored);
     }
-    return createFileRef(input, stored.info);
+    return createFileRef2(input, stored.info);
   }
   async open(blobId) {
     const stored = this.requireStoredBlob(blobId);
@@ -136,11 +136,11 @@ class InMemoryBlobStorage {
   requireStoredBlob(blobId) {
     const stored = this.blobsById.get(blobId);
     if (!stored) {
-      throw new BlobStorageError(`[BlobStorage] Unknown blob '${blobId}'`);
+      throw new BlobStorageError2(`[BlobStorage] Unknown blob '${blobId}'`);
     }
     return stored;
   }
 }
-export { BlobStorageError, streamBlobBody, readBlobBody, assertExpectedBlobSize, assertValidExpectedBlobSize, computeBlobDigest, createFileRef, InMemoryBlobStorage };
+export { BlobStorageError2, streamBlobBody2, readBlobBody2, assertExpectedBlobSize2, assertValidExpectedBlobSize2, computeBlobDigest2, createFileRef2, InMemoryBlobStorage2 };
 
-//# debugId=C4BF3346CA1C391164756E2164756E21
+//# debugId=F80C5F78371EE3C664756E2164756E21