@sixb/core 0.1.7 → 0.1.9

package/dist/{chunk-7y0f6rf1.js → chunk-92vk7gta.js}

@@ -1,36 +1,36 @@
 // @bun
 import {
-  AGENT_RUN_FAILURE_CODES
-} from "./chunk-d8qkxt2v.js";
+  parseSixbFailure2
+} from "./chunk-f4w3yp4f.js";
 import {
-  parseSixbFailure
-} from "./chunk-2xns679x.js";
+  AGENT_RUN_FAILURE_CODES2
+} from "./chunk-98cw09sw.js";
 import {
-  isJsonValue,
+  isJsonValue2,
   isPlainRecord
-} from "./chunk-n6jxh8sw.js";
+} from "./chunk-wy0qdqfm.js";
 
-// src/agents/streams.ts
-var AGENT_RUN_STREAM_SCHEMA_VERSION = 1;
-var DEFAULT_AGENT_RUN_STREAM_RETENTION = {
+// src/agents/streams/protocol.ts
+var AGENT_RUN_STREAM_SCHEMA_VERSION2 = 1;
+var DEFAULT_AGENT_RUN_STREAM_RETENTION2 = {
   maxAgeMs: 2 * 60 * 60 * 1000,
   maxRecords: 5000
 };
-var AGENT_ACTIVITY_STREAM_SCHEMA_VERSION = 1;
-var AGENT_ACTIVITY_STREAM_ID = "agents.activity";
-var DEFAULT_AGENT_ACTIVITY_STREAM_RETENTION = {
+var AGENT_ACTIVITY_STREAM_SCHEMA_VERSION2 = 1;
+var AGENT_ACTIVITY_STREAM_ID2 = "agents.activity";
+var DEFAULT_AGENT_ACTIVITY_STREAM_RETENTION2 = {
   maxAgeMs: 24 * 60 * 60 * 1000,
   maxRecords: 1e4
 };
-function agentActivityStreamDefinition() {
+function agentActivityStreamDefinition2() {
   return {
-    id: AGENT_ACTIVITY_STREAM_ID,
-    retention: DEFAULT_AGENT_ACTIVITY_STREAM_RETENTION
+    id: AGENT_ACTIVITY_STREAM_ID2,
+    retention: DEFAULT_AGENT_ACTIVITY_STREAM_RETENTION2
   };
 }
-function agentRunActivityEvent(run, occurredAt = new Date) {
+function agentRunActivityEvent2(run, occurredAt = new Date) {
   return {
-    schemaVersion: AGENT_ACTIVITY_STREAM_SCHEMA_VERSION,
+    schemaVersion: AGENT_ACTIVITY_STREAM_SCHEMA_VERSION2,
     type: "agent.run.activity",
     projectId: run.projectId,
     runId: run.id,
@@ -40,18 +40,18 @@ function agentRunActivityEvent(run, occurredAt = new Date) {
     occurredAt: occurredAt.toISOString()
   };
 }
-function isAgentRunActivityEvent(value) {
-  return isPlainRecord(value) && value.schemaVersion === AGENT_ACTIVITY_STREAM_SCHEMA_VERSION && value.type === "agent.run.activity" && typeof value.projectId === "string" && typeof value.runId === "string" && typeof value.threadId === "string" && isAgentRunStatus(value.status) && typeof value.attempt === "number" && Number.isFinite(value.attempt) && typeof value.occurredAt === "string";
+function isAgentRunActivityEvent2(value) {
+  return isPlainRecord(value) && value.schemaVersion === AGENT_ACTIVITY_STREAM_SCHEMA_VERSION2 && value.type === "agent.run.activity" && typeof value.projectId === "string" && typeof value.runId === "string" && typeof value.threadId === "string" && isAgentRunStatus(value.status) && typeof value.attempt === "number" && Number.isFinite(value.attempt) && typeof value.occurredAt === "string";
 }
-async function publishAgentRunActivity(broker, run) {
-  const event = agentRunActivityEvent(run);
+async function publishAgentRunActivity2(broker, run) {
+  const event = agentRunActivityEvent2(run);
   await broker.ensureStream({
     projectId: run.projectId,
-    stream: agentActivityStreamDefinition()
+    stream: agentActivityStreamDefinition2()
   });
   await broker.append({
     projectId: run.projectId,
-    streamId: AGENT_ACTIVITY_STREAM_ID,
+    streamId: AGENT_ACTIVITY_STREAM_ID2,
     records: [
       {
         name: event.type,
@@ -62,34 +62,34 @@ async function publishAgentRunActivity(broker, run) {
     ]
   });
 }
-function agentRunStreamId(runId) {
+function agentRunStreamId2(runId) {
   return `agents.runs.${runId}`;
 }
-function agentRunStreamDefinition(runId) {
+function agentRunStreamDefinition2(runId) {
   return {
-    id: agentRunStreamId(runId),
-    retention: DEFAULT_AGENT_RUN_STREAM_RETENTION
+    id: agentRunStreamId2(runId),
+    retention: DEFAULT_AGENT_RUN_STREAM_RETENTION2
   };
 }
-function agentRunControlStreamId(runId) {
+function agentRunControlStreamId2(runId) {
   return `agents.runs.${runId}.control`;
 }
-var AGENT_RUN_CANCEL_RECORD = "agent.run.cancel";
+var AGENT_RUN_CANCEL_RECORD2 = "agent.run.cancel";
 var AGENT_RUN_CONTROL_RETENTION = { maxAgeMs: 30 * 60 * 1000, maxRecords: 16 };
-function agentRunControlStreamDefinition(runId) {
-  return { id: agentRunControlStreamId(runId), retention: AGENT_RUN_CONTROL_RETENTION };
+function agentRunControlStreamDefinition2(runId) {
+  return { id: agentRunControlStreamId2(runId), retention: AGENT_RUN_CONTROL_RETENTION };
 }
-async function publishAgentRunCancel(broker, params) {
+async function publishAgentRunCancel2(broker, params) {
   await broker.ensureStream({
     projectId: params.projectId,
-    stream: agentRunControlStreamDefinition(params.runId)
+    stream: agentRunControlStreamDefinition2(params.runId)
   });
   await broker.append({
     projectId: params.projectId,
-    streamId: agentRunControlStreamId(params.runId),
+    streamId: agentRunControlStreamId2(params.runId),
     records: [
       {
-        name: AGENT_RUN_CANCEL_RECORD,
+        name: AGENT_RUN_CANCEL_RECORD2,
         key: params.runId,
         payload: { runId: params.runId },
         idempotencyKey: `${params.runId}:cancel`
@@ -97,38 +97,38 @@ async function publishAgentRunCancel(broker, params) {
     ]
   });
 }
-async function subscribeAgentRunCancel(broker, params, onCancel) {
+async function subscribeAgentRunCancel2(broker, params, onCancel) {
   await broker.ensureStream({
     projectId: params.projectId,
-    stream: agentRunControlStreamDefinition(params.runId)
+    stream: agentRunControlStreamDefinition2(params.runId)
   });
   return broker.subscribe({
     projectId: params.projectId,
-    streamId: agentRunControlStreamId(params.runId),
+    streamId: agentRunControlStreamId2(params.runId),
     from: "earliest",
-    names: [AGENT_RUN_CANCEL_RECORD]
+    names: [AGENT_RUN_CANCEL_RECORD2]
   }, () => onCancel());
 }
-var AGENT_COMPACTION_FAILURE_CODES = [
+var AGENT_COMPACTION_FAILURE_CODES2 = [
   "context_limit_exceeded",
   "summary_failed",
   "checkpoint_failed"
 ];
-function agentRunFinishedEvent(run, occurredAt = new Date) {
+function agentRunFinishedEvent2(run, occurredAt = new Date) {
   if (run.status === "queued" || run.status === "running") {
     throw new Error(`[Sixb] Agent run '${run.id}' is not terminal (status '${run.status}'), so it has no finished event.`);
   }
   return {
-    ...agentRunStreamEventBase(run, occurredAt),
+    ...agentRunStreamEventBase2(run, occurredAt),
     type: "agent.run.finished",
     status: run.status,
     ...run.finishReason === undefined ? {} : { finishReason: run.finishReason },
     ...run.error === undefined ? {} : { error: run.error }
   };
 }
-function agentRunStreamEventBase(run, occurredAt = new Date) {
+function agentRunStreamEventBase2(run, occurredAt = new Date) {
   const common = {
-    schemaVersion: AGENT_RUN_STREAM_SCHEMA_VERSION,
+    schemaVersion: AGENT_RUN_STREAM_SCHEMA_VERSION2,
     projectId: run.projectId,
     runId: run.id,
     attempt: run.attempt,
@@ -136,8 +136,8 @@ function agentRunStreamEventBase(run, occurredAt = new Date) {
   };
   return run.kind === "conversation" ? { ...common, threadId: run.threadId } : { ...common, parentRunId: run.parentRunId };
 }
-function isAgentRunStreamEvent(value) {
-  if (!isPlainRecord(value) || value.schemaVersion !== AGENT_RUN_STREAM_SCHEMA_VERSION || typeof value.projectId !== "string" || typeof value.runId !== "string" || typeof value.attempt !== "number" || !Number.isFinite(value.attempt) || typeof value.occurredAt !== "string" || typeof value.type !== "string") {
+function isAgentRunStreamEvent2(value) {
+  if (!isPlainRecord(value) || value.schemaVersion !== AGENT_RUN_STREAM_SCHEMA_VERSION2 || typeof value.projectId !== "string" || typeof value.runId !== "string" || typeof value.attempt !== "number" || !Number.isFinite(value.attempt) || typeof value.occurredAt !== "string" || typeof value.type !== "string") {
     return false;
   }
   const hasConversationLineage = typeof value.threadId === "string" && value.parentRunId === undefined;
@@ -152,9 +152,9 @@ function isAgentRunStreamEvent(value) {
     case "agent.compaction.completed":
       return isAgentContextCheckpointReason(value.reason) && typeof value.checkpointId === "string" && isTokenEstimate(value.estimatedInputTokensBefore) && isTokenEstimate(value.estimatedInputTokensAfter);
     case "agent.compaction.failed":
-      return isAgentContextCheckpointReason(value.reason) && AGENT_COMPACTION_FAILURE_CODES.includes(value.errorCode);
+      return isAgentContextCheckpointReason(value.reason) && AGENT_COMPACTION_FAILURE_CODES2.includes(value.errorCode);
     case "agent.ui.chunk":
-      return Number.isInteger(value.chunkIndex) && Object.hasOwn(value, "chunk") && isJsonValue(value.chunk);
+      return Number.isInteger(value.chunkIndex) && Object.hasOwn(value, "chunk") && isJsonValue2(value.chunk);
     case "agent.message.finalized":
       return typeof value.messageId === "string";
     case "agent.run.finished":
@@ -179,13 +179,13 @@ function isAgentRunFailure(value) {
   if (!isPlainRecord(value))
     return false;
   try {
-    parseSixbFailure(value, AGENT_RUN_FAILURE_CODES);
+    parseSixbFailure2(value, AGENT_RUN_FAILURE_CODES2);
     return true;
   } catch {
     return false;
   }
 }
-function agentRunStreamIdempotencyKey(event) {
+function agentRunStreamIdempotencyKey2(event) {
   switch (event.type) {
     case "agent.run.started":
       return `${event.runId}:${event.attempt}:started`;
@@ -203,28 +203,28 @@ function agentRunStreamIdempotencyKey(event) {
       return `${event.runId}:${event.attempt}:finished:${event.status}`;
   }
 }
-async function publishAgentRunFinished(broker, run) {
-  const event = agentRunFinishedEvent(run);
+async function publishAgentRunFinished2(broker, run) {
+  const event = agentRunFinishedEvent2(run);
   await broker.ensureStream({
     projectId: run.projectId,
-    stream: agentRunStreamDefinition(run.id)
+    stream: agentRunStreamDefinition2(run.id)
   });
   await broker.append({
     projectId: run.projectId,
-    streamId: agentRunStreamId(run.id),
+    streamId: agentRunStreamId2(run.id),
     records: [
       {
         name: event.type,
         key: event.runId,
         payload: JSON.parse(JSON.stringify(event)),
-        idempotencyKey: agentRunStreamIdempotencyKey(event)
+        idempotencyKey: agentRunStreamIdempotencyKey2(event)
       }
     ]
   });
   if (run.kind === "conversation")
-    await publishAgentRunActivity(broker, run);
+    await publishAgentRunActivity2(broker, run);
 }
 
-export { AGENT_RUN_STREAM_SCHEMA_VERSION, DEFAULT_AGENT_RUN_STREAM_RETENTION, AGENT_ACTIVITY_STREAM_SCHEMA_VERSION, AGENT_ACTIVITY_STREAM_ID, DEFAULT_AGENT_ACTIVITY_STREAM_RETENTION, agentActivityStreamDefinition, agentRunActivityEvent, isAgentRunActivityEvent, publishAgentRunActivity, agentRunStreamId, agentRunStreamDefinition, agentRunControlStreamId, AGENT_RUN_CANCEL_RECORD, agentRunControlStreamDefinition, publishAgentRunCancel, subscribeAgentRunCancel, AGENT_COMPACTION_FAILURE_CODES, agentRunFinishedEvent, agentRunStreamEventBase, isAgentRunStreamEvent, agentRunStreamIdempotencyKey, publishAgentRunFinished };
+export { AGENT_RUN_STREAM_SCHEMA_VERSION2, DEFAULT_AGENT_RUN_STREAM_RETENTION2, AGENT_ACTIVITY_STREAM_SCHEMA_VERSION2, AGENT_ACTIVITY_STREAM_ID2, DEFAULT_AGENT_ACTIVITY_STREAM_RETENTION2, agentActivityStreamDefinition2, agentRunActivityEvent2, isAgentRunActivityEvent2, publishAgentRunActivity2, agentRunStreamId2, agentRunStreamDefinition2, agentRunControlStreamId2, AGENT_RUN_CANCEL_RECORD2, agentRunControlStreamDefinition2, publishAgentRunCancel2, subscribeAgentRunCancel2, AGENT_COMPACTION_FAILURE_CODES2, agentRunFinishedEvent2, agentRunStreamEventBase2, isAgentRunStreamEvent2, agentRunStreamIdempotencyKey2, publishAgentRunFinished2 };
 
-//# debugId=01E889A4551AE38464756E2164756E21
+//# debugId=015FDD68B352A23564756E2164756E21

package/dist/chunk-92vk7gta.js.map

@@ -0,0 +1,10 @@
+{
+  "version": 3,
+  "sources": ["../src/agents/streams/protocol.ts"],
+  "sourcesContent": [
+    "import type { Broker, BrokerStreamDefinition } from \"../../broker\"\nimport { parseSixbFailure } from \"../../errors/internal\"\nimport type { SixbFailure } from \"../../errors/types\"\nimport { isJsonValue, isPlainRecord, type JsonValue } from \"../../json\"\nimport {\n  AGENT_RUN_FAILURE_CODES,\n  type AgentContextCheckpointReason,\n  type AgentRunFailureCode,\n  type AgentRunRecord,\n  type ConversationAgentRunRecord,\n} from \"../../storage/agents/types\"\n\nexport const AGENT_RUN_STREAM_SCHEMA_VERSION = 1 as const\nexport const DEFAULT_AGENT_RUN_STREAM_RETENTION = {\n  maxAgeMs: 2 * 60 * 60 * 1000, // 2 hours\n  maxRecords: 5_000,\n} as const\n\nexport const AGENT_ACTIVITY_STREAM_SCHEMA_VERSION = 1 as const\nexport const AGENT_ACTIVITY_STREAM_ID = \"agents.activity\" as const\nexport const DEFAULT_AGENT_ACTIVITY_STREAM_RETENTION = {\n  maxAgeMs: 24 * 60 * 60 * 1000, // 24 hours\n  maxRecords: 10_000,\n} as const\n\nexport interface AgentRunActivityEvent {\n  readonly schemaVersion: typeof AGENT_ACTIVITY_STREAM_SCHEMA_VERSION\n  readonly type: \"agent.run.activity\"\n  readonly projectId: string\n  readonly runId: string\n  readonly threadId: string\n  readonly status: AgentRunRecord[\"status\"]\n  readonly attempt: number\n  readonly occurredAt: string\n}\n\nexport function agentActivityStreamDefinition(): BrokerStreamDefinition {\n  return {\n    id: AGENT_ACTIVITY_STREAM_ID,\n    retention: DEFAULT_AGENT_ACTIVITY_STREAM_RETENTION,\n  }\n}\n\nexport function agentRunActivityEvent(\n  run: ConversationAgentRunRecord,\n  occurredAt: Date = new Date()\n): AgentRunActivityEvent {\n  return {\n    schemaVersion: AGENT_ACTIVITY_STREAM_SCHEMA_VERSION,\n    type: \"agent.run.activity\",\n    projectId: run.projectId,\n    runId: run.id,\n    threadId: run.threadId,\n    status: run.status,\n    attempt: run.attempt,\n    occurredAt: occurredAt.toISOString(),\n  }\n}\n\nexport function isAgentRunActivityEvent(value: unknown): value is AgentRunActivityEvent {\n  return (\n    isPlainRecord(value) &&\n    value.schemaVersion === AGENT_ACTIVITY_STREAM_SCHEMA_VERSION &&\n    value.type === \"agent.run.activity\" &&\n    typeof value.projectId === \"string\" &&\n    typeof value.runId === \"string\" &&\n    typeof value.threadId === \"string\" &&\n    isAgentRunStatus(value.status) &&\n    typeof value.attempt === \"number\" &&\n    Number.isFinite(value.attempt) &&\n    typeof value.occurredAt === \"string\"\n  )\n}\n\nexport async function publishAgentRunActivity(\n  broker: Broker,\n  run: ConversationAgentRunRecord\n): Promise<void> {\n  const event = agentRunActivityEvent(run)\n  await broker.ensureStream({\n    projectId: run.projectId,\n    stream: agentActivityStreamDefinition(),\n  })\n  await broker.append({\n    projectId: run.projectId,\n    streamId: AGENT_ACTIVITY_STREAM_ID,\n    records: [\n      {\n        name: event.type,\n        key: event.threadId,\n        // The event is composed only of validated JSON primitives.\n        payload: event as unknown as JsonValue,\n        idempotencyKey: `${event.runId}:${event.attempt}:${event.status}`,\n      },\n    ],\n  })\n}\n\nexport type AgentRunStreamId = `agents.runs.${string}`\n\nexport function agentRunStreamId(runId: string): AgentRunStreamId {\n  return `agents.runs.${runId}`\n}\n\nexport function agentRunStreamDefinition(runId: string): BrokerStreamDefinition {\n  return {\n    id: agentRunStreamId(runId),\n    retention: DEFAULT_AGENT_RUN_STREAM_RETENTION,\n  }\n}\n\ntype AgentRunStreamEventBase = {\n  readonly schemaVersion: typeof AGENT_RUN_STREAM_SCHEMA_VERSION\n  readonly projectId: string\n  readonly runId: string\n  readonly attempt: number\n  readonly occurredAt: string\n} & (\n  | {\n      readonly threadId: string\n      readonly parentRunId?: never\n    }\n  | {\n      readonly parentRunId: string\n      readonly threadId?: never\n    }\n)\n\n// ── Control stream (worker-inbound) ─────────────────────────────────────────────────────────────\n//\n// A per-run channel the API layer publishes to and the worker subscribes to — the reverse direction\n// of the event stream above. It carries only a cancel signal, and is addressed by `runId` (not a run\n// record), so a cancel works even before the worker has reserved the run. Kept separate from the\n// event stream so control records never reach the browser client.\n\nexport type AgentRunControlStreamId = `agents.runs.${string}.control`\n\nexport function agentRunControlStreamId(runId: string): AgentRunControlStreamId {\n  return `agents.runs.${runId}.control`\n}\n\n/** The only control record: a request to stop the run. */\nexport const AGENT_RUN_CANCEL_RECORD = \"agent.run.cancel\"\n\n// A cancel only needs to outlive the queue wait plus one turn, so retention is short and tiny.\nconst AGENT_RUN_CONTROL_RETENTION = { maxAgeMs: 30 * 60 * 1000, maxRecords: 16 } as const\n\nexport function agentRunControlStreamDefinition(runId: string): BrokerStreamDefinition {\n  return { id: agentRunControlStreamId(runId), retention: AGENT_RUN_CONTROL_RETENTION }\n}\n\n/**\n * Signal a run to stop. Publishing is addressed by `runId`, so it works whether the run is queued,\n * reserved, or being drained — the worker picks the record up when it subscribes.\n */\nexport async function publishAgentRunCancel(\n  broker: Broker,\n  params: { readonly projectId: string; readonly runId: string }\n): Promise<void> {\n  await broker.ensureStream({\n    projectId: params.projectId,\n    stream: agentRunControlStreamDefinition(params.runId),\n  })\n  await broker.append({\n    projectId: params.projectId,\n    streamId: agentRunControlStreamId(params.runId),\n    records: [\n      {\n        name: AGENT_RUN_CANCEL_RECORD,\n        key: params.runId,\n        payload: { runId: params.runId },\n        idempotencyKey: `${params.runId}:cancel`,\n      },\n    ],\n  })\n}\n\n/**\n * Watch a run's control stream and invoke `onCancel` when a cancel arrives. Reads from `earliest` so\n * a cancel published before the worker subscribed (a run stopped while still queued) is still seen.\n * Returns the unsubscribe handle.\n */\nexport async function subscribeAgentRunCancel(\n  broker: Broker,\n  params: { readonly projectId: string; readonly runId: string },\n  onCancel: () => void\n): Promise<() => void> {\n  await broker.ensureStream({\n    projectId: params.projectId,\n    stream: agentRunControlStreamDefinition(params.runId),\n  })\n  return broker.subscribe(\n    {\n      projectId: params.projectId,\n      streamId: agentRunControlStreamId(params.runId),\n      from: \"earliest\",\n      names: [AGENT_RUN_CANCEL_RECORD],\n    },\n    () => onCancel()\n  )\n}\n\n/** Exact portable failure exposed by a terminal Agent run stream event. */\nexport type AgentRunFailure = SixbFailure<AgentRunFailureCode>\n\nexport const AGENT_COMPACTION_FAILURE_CODES = [\n  \"context_limit_exceeded\",\n  \"summary_failed\",\n  \"checkpoint_failed\",\n] as const\nexport type AgentCompactionFailureCode = (typeof AGENT_COMPACTION_FAILURE_CODES)[number]\n\nexport type AgentRunStreamEvent =\n  | (AgentRunStreamEventBase & {\n      readonly type: \"agent.run.started\"\n      readonly modelId?: string\n    })\n  | (AgentRunStreamEventBase & {\n      readonly type: \"agent.compaction.started\"\n      readonly reason: AgentContextCheckpointReason\n      readonly estimatedInputTokensBefore: number\n    })\n  | (AgentRunStreamEventBase & {\n      readonly type: \"agent.compaction.completed\"\n      readonly reason: AgentContextCheckpointReason\n      readonly checkpointId: string\n      readonly estimatedInputTokensBefore: number\n      readonly estimatedInputTokensAfter: number\n    })\n  | (AgentRunStreamEventBase & {\n      readonly type: \"agent.compaction.failed\"\n      readonly reason: AgentContextCheckpointReason\n      readonly errorCode: AgentCompactionFailureCode\n    })\n  | (AgentRunStreamEventBase & {\n      readonly type: \"agent.ui.chunk\"\n      readonly chunkIndex: number\n      readonly chunk: JsonValue\n    })\n  | (AgentRunStreamEventBase & {\n      readonly type: \"agent.message.finalized\"\n      readonly messageId: string\n    })\n  | (AgentRunStreamEventBase & {\n      readonly type: \"agent.run.finished\"\n      readonly status: \"succeeded\" | \"failed\" | \"cancelled\"\n      readonly finishReason?: string\n      readonly error?: AgentRunFailure\n    })\n\nexport type AgentRunFinishedEvent = Extract<AgentRunStreamEvent, { type: \"agent.run.finished\" }>\n\n// ── Record construction ──────────────────────────────────────────────────────────────────────────\n//\n// The wire format of run stream records — event shape, record name/key, and the idempotency-key\n// vocabulary — is owned here so every producer (the worker's stream sink, the server's queued\n// cancellation) shares one definition and cannot drift.\n\n/** Build the terminal stream event for a finished run. Throws if the run is not terminal. */\nexport function agentRunFinishedEvent(\n  run: AgentRunRecord,\n  occurredAt: Date = new Date()\n): AgentRunFinishedEvent {\n  if (run.status === \"queued\" || run.status === \"running\") {\n    throw new Error(\n      `[Sixb] Agent run '${run.id}' is not terminal (status '${run.status}'), so it has no finished event.`\n    )\n  }\n  return {\n    ...agentRunStreamEventBase(run, occurredAt),\n    type: \"agent.run.finished\",\n    status: run.status,\n    ...(run.finishReason === undefined ? {} : { finishReason: run.finishReason }),\n    ...(run.error === undefined ? {} : { error: run.error }),\n  }\n}\n\n/** Shared lineage for stream records emitted by conversational and headless runs. */\nexport function agentRunStreamEventBase(\n  run: AgentRunRecord,\n  occurredAt: Date = new Date()\n): AgentRunStreamEventBase {\n  const common = {\n    schemaVersion: AGENT_RUN_STREAM_SCHEMA_VERSION,\n    projectId: run.projectId,\n    runId: run.id,\n    attempt: run.attempt,\n    occurredAt: occurredAt.toISOString(),\n  }\n  return run.kind === \"conversation\"\n    ? { ...common, threadId: run.threadId }\n    : { ...common, parentRunId: run.parentRunId }\n}\n\n/** Validate an Agent stream payload using the same contract its producers use. */\nexport function isAgentRunStreamEvent(value: unknown): value is AgentRunStreamEvent {\n  if (\n    !isPlainRecord(value) ||\n    value.schemaVersion !== AGENT_RUN_STREAM_SCHEMA_VERSION ||\n    typeof value.projectId !== \"string\" ||\n    typeof value.runId !== \"string\" ||\n    typeof value.attempt !== \"number\" ||\n    !Number.isFinite(value.attempt) ||\n    typeof value.occurredAt !== \"string\" ||\n    typeof value.type !== \"string\"\n  ) {\n    return false\n  }\n  const hasConversationLineage =\n    typeof value.threadId === \"string\" && value.parentRunId === undefined\n  const hasSubagentLineage = typeof value.parentRunId === \"string\" && value.threadId === undefined\n  if (!hasConversationLineage && !hasSubagentLineage) return false\n\n  switch (value.type) {\n    case \"agent.run.started\":\n      return value.modelId === undefined || typeof value.modelId === \"string\"\n    case \"agent.compaction.started\":\n      return (\n        isAgentContextCheckpointReason(value.reason) &&\n        isTokenEstimate(value.estimatedInputTokensBefore)\n      )\n    case \"agent.compaction.completed\":\n      return (\n        isAgentContextCheckpointReason(value.reason) &&\n        typeof value.checkpointId === \"string\" &&\n        isTokenEstimate(value.estimatedInputTokensBefore) &&\n        isTokenEstimate(value.estimatedInputTokensAfter)\n      )\n    case \"agent.compaction.failed\":\n      return (\n        isAgentContextCheckpointReason(value.reason) &&\n        AGENT_COMPACTION_FAILURE_CODES.includes(value.errorCode as AgentCompactionFailureCode)\n      )\n    case \"agent.ui.chunk\":\n      return (\n        Number.isInteger(value.chunkIndex) &&\n        Object.hasOwn(value, \"chunk\") &&\n        isJsonValue(value.chunk)\n      )\n    case \"agent.message.finalized\":\n      return typeof value.messageId === \"string\"\n    case \"agent.run.finished\":\n      return (\n        isTerminalAgentRunStatus(value.status) &&\n        (value.finishReason === undefined || typeof value.finishReason === \"string\") &&\n        (value.error === undefined || isAgentRunFailure(value.error))\n      )\n    default:\n      return false\n  }\n}\n\nfunction isAgentContextCheckpointReason(value: unknown): value is AgentContextCheckpointReason {\n  return value === \"threshold\" || value === \"overflow\"\n}\n\nfunction isTokenEstimate(value: unknown): value is number {\n  return Number.isSafeInteger(value) && (value as number) >= 0\n}\n\nfunction isTerminalAgentRunStatus(value: unknown): value is \"succeeded\" | \"failed\" | \"cancelled\" {\n  return value === \"succeeded\" || value === \"failed\" || value === \"cancelled\"\n}\n\nfunction isAgentRunStatus(value: unknown): value is AgentRunRecord[\"status\"] {\n  return value === \"queued\" || value === \"running\" || isTerminalAgentRunStatus(value)\n}\n\nfunction isAgentRunFailure(value: unknown): value is AgentRunFailure {\n  if (!isPlainRecord(value)) return false\n  try {\n    parseSixbFailure(value, AGENT_RUN_FAILURE_CODES)\n    return true\n  } catch {\n    return false\n  }\n}\n\n/** Single owner of the idempotency-key vocabulary for agent run stream records. */\nexport function agentRunStreamIdempotencyKey(event: AgentRunStreamEvent): string {\n  switch (event.type) {\n    case \"agent.run.started\":\n      return `${event.runId}:${event.attempt}:started`\n    case \"agent.compaction.started\":\n      return `${event.runId}:${event.attempt}:compaction:${event.reason}:started`\n    case \"agent.compaction.completed\":\n      return `${event.runId}:${event.attempt}:compaction:${event.checkpointId}:completed`\n    case \"agent.compaction.failed\":\n      return `${event.runId}:${event.attempt}:compaction:${event.reason}:failed:${event.errorCode}`\n    case \"agent.ui.chunk\":\n      return `${event.runId}:${event.attempt}:chunk:${event.chunkIndex}`\n    case \"agent.message.finalized\":\n      return `${event.runId}:${event.attempt}:message:${event.messageId}:finalized`\n    case \"agent.run.finished\":\n      return `${event.runId}:${event.attempt}:finished:${event.status}`\n  }\n}\n\n/**\n * Ensure the run's stream and append its terminal record — mirrors {@link publishAgentRunCancel}.\n * Used where a terminal transition happens outside the worker (e.g. cancelling a queued run).\n */\nexport async function publishAgentRunFinished(broker: Broker, run: AgentRunRecord): Promise<void> {\n  const event = agentRunFinishedEvent(run)\n  await broker.ensureStream({\n    projectId: run.projectId,\n    stream: agentRunStreamDefinition(run.id),\n  })\n  await broker.append({\n    projectId: run.projectId,\n    streamId: agentRunStreamId(run.id),\n    records: [\n      {\n        name: event.type,\n        key: event.runId,\n        // The event is built from JSON primitives only, so the round-trip is a safe narrowing.\n        payload: JSON.parse(JSON.stringify(event)) as JsonValue,\n        idempotencyKey: agentRunStreamIdempotencyKey(event),\n      },\n    ],\n  })\n  if (run.kind === \"conversation\") await publishAgentRunActivity(broker, run)\n}\n"
+  ],
+  "mappings": ";;;;;;;;;;;;;AAYO,IAAM,mCAAkC;AACxC,IAAM,sCAAqC;AAAA,EAChD,UAAU,IAAI,KAAK,KAAK;AAAA,EACxB,YAAY;AACd;AAEO,IAAM,wCAAuC;AAC7C,IAAM,4BAA2B;AACjC,IAAM,2CAA0C;AAAA,EACrD,UAAU,KAAK,KAAK,KAAK;AAAA,EACzB,YAAY;AACd;AAaO,SAAS,8BAA6B,GAA2B;AAAA,EACtE,OAAO;AAAA,IACL,IAAI;AAAA,IACJ,WAAW;AAAA,EACb;AAAA;AAGK,SAAS,sBAAqB,CACnC,KACA,aAAmB,IAAI,MACA;AAAA,EACvB,OAAO;AAAA,IACL,eAAe;AAAA,IACf,MAAM;AAAA,IACN,WAAW,IAAI;AAAA,IACf,OAAO,IAAI;AAAA,IACX,UAAU,IAAI;AAAA,IACd,QAAQ,IAAI;AAAA,IACZ,SAAS,IAAI;AAAA,IACb,YAAY,WAAW,YAAY;AAAA,EACrC;AAAA;AAGK,SAAS,wBAAuB,CAAC,OAAgD;AAAA,EACtF,OACE,cAAc,KAAK,KACnB,MAAM,kBAAkB,yCACxB,MAAM,SAAS,wBACf,OAAO,MAAM,cAAc,YAC3B,OAAO,MAAM,UAAU,YACvB,OAAO,MAAM,aAAa,YAC1B,iBAAiB,MAAM,MAAM,KAC7B,OAAO,MAAM,YAAY,YACzB,OAAO,SAAS,MAAM,OAAO,KAC7B,OAAO,MAAM,eAAe;AAAA;AAIhC,eAAsB,wBAAuB,CAC3C,QACA,KACe;AAAA,EACf,MAAM,QAAQ,uBAAsB,GAAG;AAAA,EACvC,MAAM,OAAO,aAAa;AAAA,IACxB,WAAW,IAAI;AAAA,IACf,QAAQ,+BAA8B;AAAA,EACxC,CAAC;AAAA,EACD,MAAM,OAAO,OAAO;AAAA,IAClB,WAAW,IAAI;AAAA,IACf,UAAU;AAAA,IACV,SAAS;AAAA,MACP;AAAA,QACE,MAAM,MAAM;AAAA,QACZ,KAAK,MAAM;AAAA,QAEX,SAAS;AAAA,QACT,gBAAgB,GAAG,MAAM,SAAS,MAAM,WAAW,MAAM;AAAA,MAC3D;AAAA,IACF;AAAA,EACF,CAAC;AAAA;AAKI,SAAS,iBAAgB,CAAC,OAAiC;AAAA,EAChE,OAAO,eAAe;AAAA;AAGjB,SAAS,yBAAwB,CAAC,OAAuC;AAAA,EAC9E,OAAO;AAAA,IACL,IAAI,kBAAiB,KAAK;AAAA,IAC1B,WAAW;AAAA,EACb;AAAA;AA6BK,SAAS,wBAAuB,CAAC,OAAwC;AAAA,EAC9E,OAAO,eAAe;AAAA;AAIjB,IAAM,2BAA0B;AAGvC,IAAM,8BAA8B,EAAE,UAAU,KAAK,KAAK,MAAM,YAAY,GAAG;AAExE,SAAS,gCAA+B,CAAC,OAAuC;AAAA,EACrF,OAAO,EAAE,IAAI,yBAAwB,KAAK,GAAG,WAAW,4BAA4B;AAAA;AAOtF,eAAsB,sBAAqB,CACzC,QACA,QACe;AAAA,EACf,MAAM,OAAO,aAAa;AAAA,IACxB,WAAW,OAAO;AAAA,IAClB,QAAQ,iCAAgC,OAAO,KAAK;AAAA,EACtD,CAAC;AAAA,EACD,MAAM,OAAO,OAAO;AAAA,IAClB,WAAW,OAAO;AAAA,IAClB,UAAU,yBAAwB,OAAO,KAAK;AAAA,IAC9C,SAAS;AAAA,MACP;AAAA,QACE,MAAM;AAAA,QACN,KAAK,OAAO;AAAA,QACZ,SAAS,EAAE,OAAO,OAAO,MAAM;AAAA,QAC/B,gBAAgB,GAAG,OAAO;AAAA,MAC5B;AAAA,IACF;AAAA,EACF,CAAC;AAAA;AAQH,eAAsB,wBAAuB,CAC3C,QACA,QACA,UACqB;AAAA,EACrB,MAAM,OAAO,aAAa;AAAA,IACxB,WAAW,OAAO;AAAA,IAClB,QAAQ,iCAAgC,OAAO,KAAK;AAAA,EACtD,CAAC;AAAA,EACD,OAAO,OAAO,UACZ;AAAA,IACE,WAAW,OAAO;AAAA,IAClB,UAAU,yBAAwB,OAAO,KAAK;AAAA,IAC9C,MAAM;AAAA,IACN,OAAO,CAAC,wBAAuB;AAAA,EACjC,GACA,MAAM,SAAS,CACjB;AAAA;AAMK,IAAM,kCAAiC;AAAA,EAC5C;AAAA,EACA;AAAA,EACA;AACF;AAkDO,SAAS,sBAAqB,CACnC,KACA,aAAmB,IAAI,MACA;AAAA,EACvB,IAAI,IAAI,WAAW,YAAY,IAAI,WAAW,WAAW;AAAA,IACvD,MAAM,IAAI,MACR,qBAAqB,IAAI,gCAAgC,IAAI,wCAC/D;AAAA,EACF;AAAA,EACA,OAAO;AAAA,OACF,yBAAwB,KAAK,UAAU;AAAA,IAC1C,MAAM;AAAA,IACN,QAAQ,IAAI;AAAA,OACR,IAAI,iBAAiB,YAAY,CAAC,IAAI,EAAE,cAAc,IAAI,aAAa;AAAA,OACvE,IAAI,UAAU,YAAY,CAAC,IAAI,EAAE,OAAO,IAAI,MAAM;AAAA,EACxD;AAAA;AAIK,SAAS,wBAAuB,CACrC,KACA,aAAmB,IAAI,MACE;AAAA,EACzB,MAAM,SAAS;AAAA,IACb,eAAe;AAAA,IACf,WAAW,IAAI;AAAA,IACf,OAAO,IAAI;AAAA,IACX,SAAS,IAAI;AAAA,IACb,YAAY,WAAW,YAAY;AAAA,EACrC;AAAA,EACA,OAAO,IAAI,SAAS,iBAChB,KAAK,QAAQ,UAAU,IAAI,SAAS,IACpC,KAAK,QAAQ,aAAa,IAAI,YAAY;AAAA;AAIzC,SAAS,sBAAqB,CAAC,OAA8C;AAAA,EAClF,IACE,CAAC,cAAc,KAAK,KACpB,MAAM,kBAAkB,oCACxB,OAAO,MAAM,cAAc,YAC3B,OAAO,MAAM,UAAU,YACvB,OAAO,MAAM,YAAY,YACzB,CAAC,OAAO,SAAS,MAAM,OAAO,KAC9B,OAAO,MAAM,eAAe,YAC5B,OAAO,MAAM,SAAS,UACtB;AAAA,IACA,OAAO;AAAA,EACT;AAAA,EACA,MAAM,yBACJ,OAAO,MAAM,aAAa,YAAY,MAAM,gBAAgB;AAAA,EAC9D,MAAM,qBAAqB,OAAO,MAAM,gBAAgB,YAAY,MAAM,aAAa;AAAA,EACvF,IAAI,CAAC,0BAA0B,CAAC;AAAA,IAAoB,OAAO;AAAA,EAE3D,QAAQ,MAAM;AAAA,SACP;AAAA,MACH,OAAO,MAAM,YAAY,aAAa,OAAO,MAAM,YAAY;AAAA,SAC5D;AAAA,MACH,OACE,+BAA+B,MAAM,MAAM,KAC3C,gBAAgB,MAAM,0BAA0B;AAAA,SAE/C;AAAA,MACH,OACE,+BAA+B,MAAM,MAAM,KAC3C,OAAO,MAAM,iBAAiB,YAC9B,gBAAgB,MAAM,0BAA0B,KAChD,gBAAgB,MAAM,yBAAyB;AAAA,SAE9C;AAAA,MACH,OACE,+BAA+B,MAAM,MAAM,KAC3C,gCAA+B,SAAS,MAAM,SAAuC;AAAA,SAEpF;AAAA,MACH,OACE,OAAO,UAAU,MAAM,UAAU,KACjC,OAAO,OAAO,OAAO,OAAO,KAC5B,aAAY,MAAM,KAAK;AAAA,SAEtB;AAAA,MACH,OAAO,OAAO,MAAM,cAAc;AAAA,SAC/B;AAAA,MACH,OACE,yBAAyB,MAAM,MAAM,MACpC,MAAM,iBAAiB,aAAa,OAAO,MAAM,iBAAiB,cAClE,MAAM,UAAU,aAAa,kBAAkB,MAAM,KAAK;AAAA;AAAA,MAG7D,OAAO;AAAA;AAAA;AAIb,SAAS,8BAA8B,CAAC,OAAuD;AAAA,EAC7F,OAAO,UAAU,eAAe,UAAU;AAAA;AAG5C,SAAS,eAAe,CAAC,OAAiC;AAAA,EACxD,OAAO,OAAO,cAAc,KAAK,KAAM,SAAoB;AAAA;AAG7D,SAAS,wBAAwB,CAAC,OAA+D;AAAA,EAC/F,OAAO,UAAU,eAAe,UAAU,YAAY,UAAU;AAAA;AAGlE,SAAS,gBAAgB,CAAC,OAAmD;AAAA,EAC3E,OAAO,UAAU,YAAY,UAAU,aAAa,yBAAyB,KAAK;AAAA;AAGpF,SAAS,iBAAiB,CAAC,OAA0C;AAAA,EACnE,IAAI,CAAC,cAAc,KAAK;AAAA,IAAG,OAAO;AAAA,EAClC,IAAI;AAAA,IACF,kBAAiB,OAAO,wBAAuB;AAAA,IAC/C,OAAO;AAAA,IACP,MAAM;AAAA,IACN,OAAO;AAAA;AAAA;AAKJ,SAAS,6BAA4B,CAAC,OAAoC;AAAA,EAC/E,QAAQ,MAAM;AAAA,SACP;AAAA,MACH,OAAO,GAAG,MAAM,SAAS,MAAM;AAAA,SAC5B;AAAA,MACH,OAAO,GAAG,MAAM,SAAS,MAAM,sBAAsB,MAAM;AAAA,SACxD;AAAA,MACH,OAAO,GAAG,MAAM,SAAS,MAAM,sBAAsB,MAAM;AAAA,SACxD;AAAA,MACH,OAAO,GAAG,MAAM,SAAS,MAAM,sBAAsB,MAAM,iBAAiB,MAAM;AAAA,SAC/E;AAAA,MACH,OAAO,GAAG,MAAM,SAAS,MAAM,iBAAiB,MAAM;AAAA,SACnD;AAAA,MACH,OAAO,GAAG,MAAM,SAAS,MAAM,mBAAmB,MAAM;AAAA,SACrD;AAAA,MACH,OAAO,GAAG,MAAM,SAAS,MAAM,oBAAoB,MAAM;AAAA;AAAA;AAQ/D,eAAsB,wBAAuB,CAAC,QAAgB,KAAoC;AAAA,EAChG,MAAM,QAAQ,uBAAsB,GAAG;AAAA,EACvC,MAAM,OAAO,aAAa;AAAA,IACxB,WAAW,IAAI;AAAA,IACf,QAAQ,0BAAyB,IAAI,EAAE;AAAA,EACzC,CAAC;AAAA,EACD,MAAM,OAAO,OAAO;AAAA,IAClB,WAAW,IAAI;AAAA,IACf,UAAU,kBAAiB,IAAI,EAAE;AAAA,IACjC,SAAS;AAAA,MACP;AAAA,QACE,MAAM,MAAM;AAAA,QACZ,KAAK,MAAM;AAAA,QAEX,SAAS,KAAK,MAAM,KAAK,UAAU,KAAK,CAAC;AAAA,QACzC,gBAAgB,8BAA6B,KAAK;AAAA,MACpD;AAAA,IACF;AAAA,EACF,CAAC;AAAA,EACD,IAAI,IAAI,SAAS;AAAA,IAAgB,MAAM,yBAAwB,QAAQ,GAAG;AAAA;",
+  "debugId": "015FDD68B352A23564756E2164756E21",
+  "names": []
+}

package/dist/{chunk-gbrpsx4m.js → chunk-93csa55g.js}

@@ -1,6 +1,11 @@
 // @bun
+import {
+  snapshotRequesterGroupIds,
+  normalizeRequesterGroupIds
+} from "./chunk-9tc8dxmn.js";
+
 // src/storage/executions/errors.ts
-class ExecutionStorageError extends Error {
+class ExecutionStorageError2 extends Error {
   code;
   name = "ExecutionStorageError";
   constructor(code, message, options = {}) {
@@ -11,10 +16,30 @@ class ExecutionStorageError extends Error {
 
 // src/storage/executions/validation.ts
 import { isDeepStrictEqual } from "util";
-function normalizeExecutionRecord(input, createdAt = new Date) {
+async function prepareExecutionRecord2(input, lookup) {
+  let groups = input.requesterGroupIds;
+  if (groups === undefined && input.source.type === "execution") {
+    const parent = await lookup.getExecution({
+      projectId: input.projectId,
+      id: input.source.executionId
+    });
+    groups = parent?.requesterGroupIds;
+  } else if (groups === undefined && input.requestedBy) {
+    groups = await snapshotRequesterGroupIds({
+      auth: lookup.auth,
+      projectId: input.projectId,
+      principal: input.requestedBy
+    });
+  }
+  const record = normalizeExecutionRecord2({ ...input, requesterGroupIds: groups ?? [] });
+  await validateExecutionRecordReferences2(record, lookup);
+  return record;
+}
+function normalizeExecutionRecord2(input, createdAt = new Date) {
   const record = {
     id: input.id,
     projectId: input.projectId,
+    requesterGroupIds: normalizeRequesterGroupIds(input.requesterGroupIds ?? []),
     ...input.requestedBy === undefined ? {} : { requestedBy: structuredClone(input.requestedBy) },
     executor: structuredClone(input.executor),
     source: structuredClone(input.source),
@@ -26,12 +51,15 @@ function normalizeExecutionRecord(input, createdAt = new Date) {
   assertExecutorAuthority(record);
   return record;
 }
-async function validateExecutionRecordReferences(record, lookup) {
+async function validateExecutionRecordReferences2(record, lookup) {
   await validatePrincipal(record.requestedBy, record.projectId, "Requested-by principal", lookup);
   if (record.authorizationRef.type === "principal") {
     await validatePrincipal(record.authorizationRef.principal, record.projectId, "Authority principal", lookup);
     await validateCredential(record, lookup);
   }
+  if (record.authorizationRef.type === "delegated") {
+    await validateDelegation(record, lookup);
+  }
   await validateParent(record, lookup);
 }
 function cloneExecutionRecord(record) {
@@ -107,6 +135,13 @@ function assertAuthorizationRef(ref) {
       assertNonBlank(ref.primitive.id, "Authority primitive id");
       assertNonBlank(ref.primitive.runId, "Authority primitive run id");
       return;
+    case "delegated":
+      if (ref.delegation.kind !== "share") {
+        invalid(`Unknown authority delegation kind '${String(ref.delegation.kind)}'.`);
+      }
+      assertNonBlank(ref.delegation.grantId, "Authority delegation grant id");
+      assertNonBlank(ref.delegation.sessionId, "Authority delegation session id");
+      return;
     case "kernel":
       assertKernelOperation(ref.operation, "Authority kernel operation");
       return;
@@ -135,7 +170,13 @@ function assertExecutorAuthority(record) {
         }
         return;
       }
-      invalid("Request executions require principal or explicitly disabled authority.");
+      if (authorizationRef.type === "delegated") {
+        if (requestedBy !== undefined) {
+          invalid("Delegated request executions cannot have a requested-by principal.");
+        }
+        return;
+      }
+      invalid("Request executions require principal, delegated, or explicitly disabled authority.");
       break;
     }
     case "primitive": {
@@ -178,7 +219,7 @@ async function validatePrincipal(principal, projectId, label, lookup) {
     return;
   const record = principal.type === "user" ? await lookup.auth.users.getById({ projectId, id: principal.id }) : await lookup.auth.serviceAccounts.getById({ projectId, id: principal.id });
   if (!record) {
-    throw new ExecutionStorageError("missing_principal", `[Sixb] ${label} '${principal.id}' does not exist in project '${projectId}'.`);
+    throw new ExecutionStorageError2("missing_principal", `[Sixb] ${label} '${principal.id}' does not exist in project '${projectId}'.`);
   }
 }
 async function validateCredential(record, lookup) {
@@ -191,10 +232,10 @@ async function validateCredential(record, lookup) {
       id: credential.id
     });
     if (!session) {
-      throw new ExecutionStorageError("missing_credential", `[Sixb] Authority session '${credential.id}' does not exist in project '${record.projectId}'.`);
+      throw new ExecutionStorageError2("missing_credential", `[Sixb] Authority session '${credential.id}' does not exist in project '${record.projectId}'.`);
     }
     if (principal.type !== "user" || session.userId !== principal.id) {
-      throw new ExecutionStorageError("invalid_credential", `[Sixb] Authority session '${credential.id}' does not belong to principal '${principal.id}'.`);
+      throw new ExecutionStorageError2("invalid_credential", `[Sixb] Authority session '${credential.id}' does not belong to principal '${principal.id}'.`);
     }
     return;
   }
@@ -203,10 +244,22 @@ async function validateCredential(record, lookup) {
     id: credential.id
   });
   if (!token) {
-    throw new ExecutionStorageError("missing_credential", `[Sixb] Authority access token '${credential.id}' does not exist in project '${record.projectId}'.`);
+    throw new ExecutionStorageError2("missing_credential", `[Sixb] Authority access token '${credential.id}' does not exist in project '${record.projectId}'.`);
   }
   if (token.subjectType !== principal.type || token.subjectId !== principal.id) {
-    throw new ExecutionStorageError("invalid_credential", `[Sixb] Authority access token '${credential.id}' does not belong to principal '${principal.id}'.`);
+    throw new ExecutionStorageError2("invalid_credential", `[Sixb] Authority access token '${credential.id}' does not belong to principal '${principal.id}'.`);
+  }
+}
+async function validateDelegation(record, lookup) {
+  if (record.authorizationRef.type !== "delegated")
+    return;
+  const { grantId, sessionId } = record.authorizationRef.delegation;
+  const session = await lookup.getShareSession({ projectId: record.projectId, id: sessionId });
+  if (!session) {
+    throw new ExecutionStorageError2("missing_credential", `[Sixb] Authority shared session '${sessionId}' does not exist in project '${record.projectId}'.`);
+  }
+  if (session.grantId !== grantId) {
+    throw new ExecutionStorageError2("invalid_credential", `[Sixb] Authority shared session '${sessionId}' does not belong to grant '${grantId}'.`);
   }
 }
 async function validateParent(record, lookup) {
@@ -218,16 +271,19 @@ async function validateParent(record, lookup) {
     id: parentExecutionId
   });
   if (!parent) {
-    throw new ExecutionStorageError("missing_parent_execution", `[Sixb] Parent execution '${parentExecutionId}' does not exist in project '${record.projectId}'.`);
+    throw new ExecutionStorageError2("missing_parent_execution", `[Sixb] Parent execution '${parentExecutionId}' does not exist in project '${record.projectId}'.`);
   }
   if (parent.correlationId !== record.correlationId) {
-    throw new ExecutionStorageError("invalid_parent_execution", `[Sixb] Child execution '${record.id}' must preserve its parent correlation id.`);
+    throw new ExecutionStorageError2("invalid_parent_execution", `[Sixb] Child execution '${record.id}' must preserve its parent correlation id.`);
   }
   if (!principalsEqual(parent.requestedBy, record.requestedBy)) {
-    throw new ExecutionStorageError("invalid_parent_execution", `[Sixb] Child execution '${record.id}' must preserve its parent requested-by principal.`);
+    throw new ExecutionStorageError2("invalid_parent_execution", `[Sixb] Child execution '${record.id}' must preserve its parent requested-by principal.`);
+  }
+  if (!isDeepStrictEqual(parent.requesterGroupIds, record.requesterGroupIds)) {
+    throw new ExecutionStorageError2("invalid_parent_execution", `[Sixb] Child execution '${record.id}' must preserve its parent requester-group snapshot.`);
   }
   if (record.executor.type === "agent" && isInheritedAgentAuthority(record.authorizationRef) && !isDeepStrictEqual(parent.authorizationRef, record.authorizationRef)) {
-    throw new ExecutionStorageError("invalid_parent_execution", `[Sixb] Child Agent execution '${record.id}' must inherit its parent's authorization reference.`);
+    throw new ExecutionStorageError2("invalid_parent_execution", `[Sixb] Child Agent execution '${record.id}' must inherit its parent's authorization reference.`);
   }
 }
 function isInheritedAgentAuthority(ref) {
@@ -267,7 +323,7 @@ function kernelOperationsEqual(left, right) {
   return left.type === right.type && left.recoveryId === right.recoveryId;
 }
 function invalid(message) {
-  throw new ExecutionStorageError("invalid_input", `[Sixb] ${message}`);
+  throw new ExecutionStorageError2("invalid_input", `[Sixb] ${message}`);
 }
 var TRUSTED_PRIMITIVE_KINDS = new Set([
   "action",
@@ -279,6 +335,6 @@ var TRUSTED_PRIMITIVE_KINDS = new Set([
   "workflow"
 ]);
 
-export { ExecutionStorageError, normalizeExecutionRecord, validateExecutionRecordReferences, cloneExecutionRecord };
+export { ExecutionStorageError2, prepareExecutionRecord2, normalizeExecutionRecord2, validateExecutionRecordReferences2, cloneExecutionRecord };
 
-//# debugId=73F354CEB3563F0964756E2164756E21
+//# debugId=78FF364F2E082FE564756E2164756E21

package/dist/chunk-93csa55g.js.map

@@ -0,0 +1,11 @@
+{
+  "version": 3,
+  "sources": ["../src/storage/executions/errors.ts", "../src/storage/executions/validation.ts"],
+  "sourcesContent": [
+    "export type ExecutionStorageErrorCode =\n  | \"duplicate_execution\"\n  | \"invalid_credential\"\n  | \"invalid_input\"\n  | \"invalid_parent_execution\"\n  | \"missing_credential\"\n  | \"missing_parent_execution\"\n  | \"missing_principal\"\n\n/** Stable error raised when an execution record would violate ledger invariants. */\nexport class ExecutionStorageError extends Error {\n  readonly name = \"ExecutionStorageError\"\n\n  constructor(\n    readonly code: ExecutionStorageErrorCode,\n    message: string,\n    options: ErrorOptions = {}\n  ) {\n    super(message, options)\n  }\n}\n",
+    "import { isDeepStrictEqual } from \"node:util\"\nimport { normalizeRequesterGroupIds, snapshotRequesterGroupIds } from \"../../auth/attribution\"\nimport type {\n  AuthorizablePrincipal,\n  AuthorizationRef,\n  KernelOperation,\n} from \"../../execution/types\"\nimport type { AuthStorage } from \"../auth\"\nimport { ExecutionStorageError } from \"./errors\"\nimport type {\n  CreateExecutionInput,\n  DurableExecutionExecutor,\n  DurableExecutionSource,\n  ExecutionRecord,\n} from \"./types\"\n\nexport interface ExecutionValidationLookup {\n  readonly auth: AuthStorage\n  getExecution(params: {\n    readonly projectId: string\n    readonly id: string\n  }): Promise<ExecutionRecord | null>\n  getShareSession(params: {\n    readonly projectId: string\n    readonly id: string\n  }): Promise<{ readonly grantId: string } | null>\n}\n\n/** Capture accounting attribution at the same storage boundary that admits the execution. */\nexport async function prepareExecutionRecord(\n  input: CreateExecutionInput,\n  lookup: ExecutionValidationLookup\n): Promise<ExecutionRecord> {\n  let groups = input.requesterGroupIds\n  if (groups === undefined && input.source.type === \"execution\") {\n    const parent = await lookup.getExecution({\n      projectId: input.projectId,\n      id: input.source.executionId,\n    })\n    groups = parent?.requesterGroupIds\n  } else if (groups === undefined && input.requestedBy) {\n    groups = await snapshotRequesterGroupIds({\n      auth: lookup.auth,\n      projectId: input.projectId,\n      principal: input.requestedBy,\n    })\n  }\n  const record = normalizeExecutionRecord({ ...input, requesterGroupIds: groups ?? [] })\n  await validateExecutionRecordReferences(record, lookup)\n  return record\n}\n\nexport function normalizeExecutionRecord(\n  input: CreateExecutionInput,\n  createdAt: Date = new Date()\n): ExecutionRecord {\n  const record: ExecutionRecord = {\n    id: input.id,\n    projectId: input.projectId,\n    requesterGroupIds: normalizeRequesterGroupIds(input.requesterGroupIds ?? []),\n    ...(input.requestedBy === undefined ? {} : { requestedBy: structuredClone(input.requestedBy) }),\n    executor: structuredClone(input.executor),\n    source: structuredClone(input.source),\n    correlationId: input.correlationId,\n    authorizationRef: structuredClone(input.authorizationRef),\n    createdAt: new Date(createdAt),\n  }\n\n  assertRecordShape(record)\n  assertExecutorAuthority(record)\n  return record\n}\n\nexport async function validateExecutionRecordReferences(\n  record: ExecutionRecord,\n  lookup: ExecutionValidationLookup\n): Promise<void> {\n  await validatePrincipal(record.requestedBy, record.projectId, \"Requested-by principal\", lookup)\n\n  if (record.authorizationRef.type === \"principal\") {\n    await validatePrincipal(\n      record.authorizationRef.principal,\n      record.projectId,\n      \"Authority principal\",\n      lookup\n    )\n    await validateCredential(record, lookup)\n  }\n  if (record.authorizationRef.type === \"delegated\") {\n    await validateDelegation(record, lookup)\n  }\n\n  await validateParent(record, lookup)\n}\n\nexport function cloneExecutionRecord(record: ExecutionRecord): ExecutionRecord {\n  return structuredClone(record)\n}\n\nfunction assertRecordShape(record: ExecutionRecord): void {\n  assertNonBlank(record.id, \"Execution id\")\n  assertNonBlank(record.projectId, \"Execution project id\")\n  assertNonBlank(record.correlationId, \"Execution correlation id\")\n  assertValidDate(record.createdAt, \"Execution createdAt\")\n\n  if (record.requestedBy) {\n    assertPrincipal(record.requestedBy, \"Requested-by principal\")\n  }\n\n  assertExecutor(record.executor)\n  assertSource(record.source)\n  assertAuthorizationRef(record.authorizationRef)\n}\n\nfunction assertExecutor(executor: DurableExecutionExecutor): void {\n  switch (executor.type) {\n    case \"request\":\n      assertNonBlank(executor.requestId, \"Executor request id\")\n      return\n    case \"primitive\":\n      assertTrustedPrimitiveKind(executor.kind, \"Executor primitive kind\")\n      assertNonBlank(executor.runId, \"Executor primitive run id\")\n      return\n    case \"agent\":\n      assertNonBlank(executor.runId, \"Executor agent run id\")\n      return\n    case \"kernel\":\n      assertKernelOperation(executor.operation, \"Executor kernel operation\")\n      return\n    default:\n      invalid(`Unknown execution executor type '${String((executor as { type?: unknown }).type)}'.`)\n  }\n}\n\nfunction assertSource(source: DurableExecutionSource): void {\n  switch (source.type) {\n    case \"http\":\n      assertNonBlank(source.requestId, \"Execution source request id\")\n      return\n    case \"webhook\":\n      assertNonBlank(source.deliveryId, \"Execution source delivery id\")\n      return\n    case \"schedule\":\n    case \"event\":\n      assertNonBlank(source.eventId, \"Execution source event id\")\n      return\n    case \"datasetVersion\":\n      assertNonBlank(source.datasetId, \"Execution source dataset id\")\n      assertNonBlank(source.versionId, \"Execution source dataset version id\")\n      return\n    case \"execution\":\n      assertNonBlank(source.executionId, \"Execution source execution id\")\n      return\n    default:\n      invalid(\n        `Execution source type '${String((source as { type?: unknown }).type)}' is not durable.`\n      )\n  }\n}\n\nfunction assertAuthorizationRef(ref: AuthorizationRef): void {\n  switch (ref.type) {\n    case \"principal\":\n      assertPrincipal(ref.principal, \"Authority principal\")\n      if (ref.credential) {\n        if (ref.credential.type !== \"session\" && ref.credential.type !== \"accessToken\") {\n          invalid(\n            `Unknown authority credential type '${String(\n              (ref.credential as { type?: unknown }).type\n            )}'.`\n          )\n        }\n        assertNonBlank(ref.credential.id, \"Authority credential id\")\n      }\n      return\n    case \"trustedPrimitive\":\n      assertTrustedPrimitiveKind(ref.primitive.kind, \"Authority primitive kind\")\n      assertNonBlank(ref.primitive.id, \"Authority primitive id\")\n      assertNonBlank(ref.primitive.runId, \"Authority primitive run id\")\n      return\n    case \"delegated\":\n      if (ref.delegation.kind !== \"share\") {\n        invalid(\n          `Unknown authority delegation kind '${String(\n            (ref.delegation as { kind?: unknown }).kind\n          )}'.`\n        )\n      }\n      assertNonBlank(ref.delegation.grantId, \"Authority delegation grant id\")\n      assertNonBlank(ref.delegation.sessionId, \"Authority delegation session id\")\n      return\n    case \"kernel\":\n      assertKernelOperation(ref.operation, \"Authority kernel operation\")\n      return\n    case \"disabled\":\n      return\n    default:\n      invalid(`Unknown authorization reference type '${String((ref as { type?: unknown }).type)}'.`)\n  }\n}\n\nfunction assertExecutorAuthority(record: ExecutionRecord): void {\n  const { executor, authorizationRef, requestedBy, source } = record\n\n  switch (executor.type) {\n    case \"request\": {\n      if (source.type !== \"http\" || source.requestId !== executor.requestId) {\n        invalid(\"Request executions require a matching HTTP source request id.\")\n      }\n      if (authorizationRef.type === \"principal\") {\n        if (!principalsEqual(requestedBy, authorizationRef.principal)) {\n          invalid(\"Request authority must match its requested-by principal.\")\n        }\n        return\n      }\n      if (authorizationRef.type === \"disabled\") {\n        if (requestedBy !== undefined) {\n          invalid(\"Auth-disabled request executions cannot have a requested-by principal.\")\n        }\n        return\n      }\n      if (authorizationRef.type === \"delegated\") {\n        if (requestedBy !== undefined) {\n          invalid(\"Delegated request executions cannot have a requested-by principal.\")\n        }\n        return\n      }\n      invalid(\"Request executions require principal, delegated, or explicitly disabled authority.\")\n      break\n    }\n    case \"primitive\": {\n      if (authorizationRef.type !== \"trustedPrimitive\") {\n        invalid(\"Primitive executions require trusted primitive authority.\")\n      }\n      if (\n        authorizationRef.primitive.kind !== executor.kind ||\n        authorizationRef.primitive.runId !== executor.runId\n      ) {\n        invalid(\"Trusted primitive authority must match the executor kind and run id.\")\n      }\n      return\n    }\n    case \"agent\": {\n      if (source.type !== \"execution\") {\n        invalid(\"Agent executions require a parent execution source.\")\n      }\n      if (\n        authorizationRef.type === \"principal\" &&\n        authorizationRef.principal.type === \"serviceAccount\" &&\n        authorizationRef.credential === undefined\n      ) {\n        return\n      }\n      if (\n        authorizationRef.type === \"principal\" &&\n        authorizationRef.principal.type === \"user\" &&\n        authorizationRef.credential !== undefined\n      ) {\n        return\n      }\n      if (authorizationRef.type === \"disabled\") return\n      invalid(\n        \"Agent executions require managed service-account, credentialed user, or explicitly disabled authority.\"\n      )\n      break\n    }\n    case \"kernel\": {\n      if (\n        authorizationRef.type !== \"kernel\" ||\n        !kernelOperationsEqual(authorizationRef.operation, executor.operation)\n      ) {\n        invalid(\"Kernel authority must match the executor operation.\")\n      }\n      if (requestedBy !== undefined) {\n        invalid(\"Kernel executions cannot have a requested-by principal.\")\n      }\n      return\n    }\n  }\n}\n\nasync function validatePrincipal(\n  principal: AuthorizablePrincipal | undefined,\n  projectId: string,\n  label: string,\n  lookup: ExecutionValidationLookup\n): Promise<void> {\n  if (!principal) return\n\n  const record =\n    principal.type === \"user\"\n      ? await lookup.auth.users.getById({ projectId, id: principal.id })\n      : await lookup.auth.serviceAccounts.getById({ projectId, id: principal.id })\n  if (!record) {\n    throw new ExecutionStorageError(\n      \"missing_principal\",\n      `[Sixb] ${label} '${principal.id}' does not exist in project '${projectId}'.`\n    )\n  }\n}\n\nasync function validateCredential(\n  record: ExecutionRecord,\n  lookup: ExecutionValidationLookup\n): Promise<void> {\n  if (record.authorizationRef.type !== \"principal\" || !record.authorizationRef.credential) return\n\n  const { principal, credential } = record.authorizationRef\n  if (credential.type === \"session\") {\n    const session = await lookup.auth.sessions.getById({\n      projectId: record.projectId,\n      id: credential.id,\n    })\n    if (!session) {\n      throw new ExecutionStorageError(\n        \"missing_credential\",\n        `[Sixb] Authority session '${credential.id}' does not exist in project '${record.projectId}'.`\n      )\n    }\n    if (principal.type !== \"user\" || session.userId !== principal.id) {\n      throw new ExecutionStorageError(\n        \"invalid_credential\",\n        `[Sixb] Authority session '${credential.id}' does not belong to principal '${principal.id}'.`\n      )\n    }\n    return\n  }\n\n  const token = await lookup.auth.accessTokens.getById({\n    projectId: record.projectId,\n    id: credential.id,\n  })\n  if (!token) {\n    throw new ExecutionStorageError(\n      \"missing_credential\",\n      `[Sixb] Authority access token '${credential.id}' does not exist in project '${record.projectId}'.`\n    )\n  }\n  if (token.subjectType !== principal.type || token.subjectId !== principal.id) {\n    throw new ExecutionStorageError(\n      \"invalid_credential\",\n      `[Sixb] Authority access token '${credential.id}' does not belong to principal '${principal.id}'.`\n    )\n  }\n}\n\nasync function validateDelegation(\n  record: ExecutionRecord,\n  lookup: ExecutionValidationLookup\n): Promise<void> {\n  if (record.authorizationRef.type !== \"delegated\") return\n  const { grantId, sessionId } = record.authorizationRef.delegation\n  const session = await lookup.getShareSession({ projectId: record.projectId, id: sessionId })\n  if (!session) {\n    throw new ExecutionStorageError(\n      \"missing_credential\",\n      `[Sixb] Authority shared session '${sessionId}' does not exist in project '${record.projectId}'.`\n    )\n  }\n  if (session.grantId !== grantId) {\n    throw new ExecutionStorageError(\n      \"invalid_credential\",\n      `[Sixb] Authority shared session '${sessionId}' does not belong to grant '${grantId}'.`\n    )\n  }\n}\n\nasync function validateParent(\n  record: ExecutionRecord,\n  lookup: ExecutionValidationLookup\n): Promise<void> {\n  if (record.source.type !== \"execution\") return\n  const parentExecutionId = record.source.executionId\n\n  const parent = await lookup.getExecution({\n    projectId: record.projectId,\n    id: parentExecutionId,\n  })\n  if (!parent) {\n    throw new ExecutionStorageError(\n      \"missing_parent_execution\",\n      `[Sixb] Parent execution '${parentExecutionId}' does not exist in project '${record.projectId}'.`\n    )\n  }\n  if (parent.correlationId !== record.correlationId) {\n    throw new ExecutionStorageError(\n      \"invalid_parent_execution\",\n      `[Sixb] Child execution '${record.id}' must preserve its parent correlation id.`\n    )\n  }\n  if (!principalsEqual(parent.requestedBy, record.requestedBy)) {\n    throw new ExecutionStorageError(\n      \"invalid_parent_execution\",\n      `[Sixb] Child execution '${record.id}' must preserve its parent requested-by principal.`\n    )\n  }\n  if (!isDeepStrictEqual(parent.requesterGroupIds, record.requesterGroupIds)) {\n    throw new ExecutionStorageError(\n      \"invalid_parent_execution\",\n      `[Sixb] Child execution '${record.id}' must preserve its parent requester-group snapshot.`\n    )\n  }\n  if (\n    record.executor.type === \"agent\" &&\n    isInheritedAgentAuthority(record.authorizationRef) &&\n    !isDeepStrictEqual(parent.authorizationRef, record.authorizationRef)\n  ) {\n    throw new ExecutionStorageError(\n      \"invalid_parent_execution\",\n      `[Sixb] Child Agent execution '${record.id}' must inherit its parent's authorization reference.`\n    )\n  }\n}\n\nfunction isInheritedAgentAuthority(ref: AuthorizationRef): boolean {\n  return (\n    ref.type === \"disabled\" ||\n    (ref.type === \"principal\" && ref.principal.type === \"user\" && ref.credential !== undefined)\n  )\n}\n\nfunction assertPrincipal(principal: AuthorizablePrincipal, label: string): void {\n  if (principal.type !== \"user\" && principal.type !== \"serviceAccount\") {\n    invalid(`${label} has unsupported type '${String((principal as { type?: unknown }).type)}'.`)\n  }\n  assertNonBlank(principal.id, `${label} id`)\n}\n\nfunction assertKernelOperation(operation: KernelOperation, label: string): void {\n  if (operation.type !== \"ontology.recover\") {\n    invalid(`${label} has unsupported type '${String((operation as { type?: unknown }).type)}'.`)\n  }\n  assertNonBlank(operation.recoveryId, `${label} recovery id`)\n}\n\nfunction assertTrustedPrimitiveKind(value: string, label: string): void {\n  if (!TRUSTED_PRIMITIVE_KINDS.has(value)) {\n    invalid(`${label} '${value}' is not supported.`)\n  }\n}\n\nfunction assertNonBlank(value: string, label: string): void {\n  if (typeof value !== \"string\" || !value.trim()) {\n    invalid(`${label} must be a non-empty string.`)\n  }\n}\n\nfunction assertValidDate(value: Date, label: string): void {\n  if (!(value instanceof Date) || !Number.isFinite(value.getTime())) {\n    invalid(`${label} must be a valid date.`)\n  }\n}\n\nfunction principalsEqual(\n  left: AuthorizablePrincipal | undefined,\n  right: AuthorizablePrincipal | undefined\n): boolean {\n  return left?.type === right?.type && left?.id === right?.id\n}\n\nfunction kernelOperationsEqual(left: KernelOperation, right: KernelOperation): boolean {\n  return left.type === right.type && left.recoveryId === right.recoveryId\n}\n\nfunction invalid(message: string): never {\n  throw new ExecutionStorageError(\"invalid_input\", `[Sixb] ${message}`)\n}\n\nconst TRUSTED_PRIMITIVE_KINDS = new Set([\n  \"action\",\n  \"pipeline\",\n  \"projection\",\n  \"rule\",\n  \"sync\",\n  \"webhook\",\n  \"workflow\",\n])\n"
+  ],
+  "mappings": ";;;;;;;AAUO,MAAM,+BAA8B,MAAM;AAAA,EAIpC;AAAA,EAHF,OAAO;AAAA,EAEhB,WAAW,CACA,MACT,SACA,UAAwB,CAAC,GACzB;AAAA,IACA,MAAM,SAAS,OAAO;AAAA,IAJb;AAAA;AAMb;;;ACpBA;AA6BA,eAAsB,uBAAsB,CAC1C,OACA,QAC0B;AAAA,EAC1B,IAAI,SAAS,MAAM;AAAA,EACnB,IAAI,WAAW,aAAa,MAAM,OAAO,SAAS,aAAa;AAAA,IAC7D,MAAM,SAAS,MAAM,OAAO,aAAa;AAAA,MACvC,WAAW,MAAM;AAAA,MACjB,IAAI,MAAM,OAAO;AAAA,IACnB,CAAC;AAAA,IACD,SAAS,QAAQ;AAAA,EACnB,EAAO,SAAI,WAAW,aAAa,MAAM,aAAa;AAAA,IACpD,SAAS,MAAM,0BAA0B;AAAA,MACvC,MAAM,OAAO;AAAA,MACb,WAAW,MAAM;AAAA,MACjB,WAAW,MAAM;AAAA,IACnB,CAAC;AAAA,EACH;AAAA,EACA,MAAM,SAAS,0BAAyB,KAAK,OAAO,mBAAmB,UAAU,CAAC,EAAE,CAAC;AAAA,EACrF,MAAM,mCAAkC,QAAQ,MAAM;AAAA,EACtD,OAAO;AAAA;AAGF,SAAS,yBAAwB,CACtC,OACA,YAAkB,IAAI,MACL;AAAA,EACjB,MAAM,SAA0B;AAAA,IAC9B,IAAI,MAAM;AAAA,IACV,WAAW,MAAM;AAAA,IACjB,mBAAmB,2BAA2B,MAAM,qBAAqB,CAAC,CAAC;AAAA,OACvE,MAAM,gBAAgB,YAAY,CAAC,IAAI,EAAE,aAAa,gBAAgB,MAAM,WAAW,EAAE;AAAA,IAC7F,UAAU,gBAAgB,MAAM,QAAQ;AAAA,IACxC,QAAQ,gBAAgB,MAAM,MAAM;AAAA,IACpC,eAAe,MAAM;AAAA,IACrB,kBAAkB,gBAAgB,MAAM,gBAAgB;AAAA,IACxD,WAAW,IAAI,KAAK,SAAS;AAAA,EAC/B;AAAA,EAEA,kBAAkB,MAAM;AAAA,EACxB,wBAAwB,MAAM;AAAA,EAC9B,OAAO;AAAA;AAGT,eAAsB,kCAAiC,CACrD,QACA,QACe;AAAA,EACf,MAAM,kBAAkB,OAAO,aAAa,OAAO,WAAW,0BAA0B,MAAM;AAAA,EAE9F,IAAI,OAAO,iBAAiB,SAAS,aAAa;AAAA,IAChD,MAAM,kBACJ,OAAO,iBAAiB,WACxB,OAAO,WACP,uBACA,MACF;AAAA,IACA,MAAM,mBAAmB,QAAQ,MAAM;AAAA,EACzC;AAAA,EACA,IAAI,OAAO,iBAAiB,SAAS,aAAa;AAAA,IAChD,MAAM,mBAAmB,QAAQ,MAAM;AAAA,EACzC;AAAA,EAEA,MAAM,eAAe,QAAQ,MAAM;AAAA;AAG9B,SAAS,oBAAoB,CAAC,QAA0C;AAAA,EAC7E,OAAO,gBAAgB,MAAM;AAAA;AAG/B,SAAS,iBAAiB,CAAC,QAA+B;AAAA,EACxD,eAAe,OAAO,IAAI,cAAc;AAAA,EACxC,eAAe,OAAO,WAAW,sBAAsB;AAAA,EACvD,eAAe,OAAO,eAAe,0BAA0B;AAAA,EAC/D,gBAAgB,OAAO,WAAW,qBAAqB;AAAA,EAEvD,IAAI,OAAO,aAAa;AAAA,IACtB,gBAAgB,OAAO,aAAa,wBAAwB;AAAA,EAC9D;AAAA,EAEA,eAAe,OAAO,QAAQ;AAAA,EAC9B,aAAa,OAAO,MAAM;AAAA,EAC1B,uBAAuB,OAAO,gBAAgB;AAAA;AAGhD,SAAS,cAAc,CAAC,UAA0C;AAAA,EAChE,QAAQ,SAAS;AAAA,SACV;AAAA,MACH,eAAe,SAAS,WAAW,qBAAqB;AAAA,MACxD;AAAA,SACG;AAAA,MACH,2BAA2B,SAAS,MAAM,yBAAyB;AAAA,MACnE,eAAe,SAAS,OAAO,2BAA2B;AAAA,MAC1D;AAAA,SACG;AAAA,MACH,eAAe,SAAS,OAAO,uBAAuB;AAAA,MACtD;AAAA,SACG;AAAA,MACH,sBAAsB,SAAS,WAAW,2BAA2B;AAAA,MACrE;AAAA;AAAA,MAEA,QAAQ,oCAAoC,OAAQ,SAAgC,IAAI,KAAK;AAAA;AAAA;AAInG,SAAS,YAAY,CAAC,QAAsC;AAAA,EAC1D,QAAQ,OAAO;AAAA,SACR;AAAA,MACH,eAAe,OAAO,WAAW,6BAA6B;AAAA,MAC9D;AAAA,SACG;AAAA,MACH,eAAe,OAAO,YAAY,8BAA8B;AAAA,MAChE;AAAA,SACG;AAAA,SACA;AAAA,MACH,eAAe,OAAO,SAAS,2BAA2B;AAAA,MAC1D;AAAA,SACG;AAAA,MACH,eAAe,OAAO,WAAW,6BAA6B;AAAA,MAC9D,eAAe,OAAO,WAAW,qCAAqC;AAAA,MACtE;AAAA,SACG;AAAA,MACH,eAAe,OAAO,aAAa,+BAA+B;AAAA,MAClE;AAAA;AAAA,MAEA,QACE,0BAA0B,OAAQ,OAA8B,IAAI,oBACtE;AAAA;AAAA;AAIN,SAAS,sBAAsB,CAAC,KAA6B;AAAA,EAC3D,QAAQ,IAAI;AAAA,SACL;AAAA,MACH,gBAAgB,IAAI,WAAW,qBAAqB;AAAA,MACpD,IAAI,IAAI,YAAY;AAAA,QAClB,IAAI,IAAI,WAAW,SAAS,aAAa,IAAI,WAAW,SAAS,eAAe;AAAA,UAC9E,QACE,sCAAsC,OACnC,IAAI,WAAkC,IACzC,KACF;AAAA,QACF;AAAA,QACA,eAAe,IAAI,WAAW,IAAI,yBAAyB;AAAA,MAC7D;AAAA,MACA;AAAA,SACG;AAAA,MACH,2BAA2B,IAAI,UAAU,MAAM,0BAA0B;AAAA,MACzE,eAAe,IAAI,UAAU,IAAI,wBAAwB;AAAA,MACzD,eAAe,IAAI,UAAU,OAAO,4BAA4B;AAAA,MAChE;AAAA,SACG;AAAA,MACH,IAAI,IAAI,WAAW,SAAS,SAAS;AAAA,QACnC,QACE,sCAAsC,OACnC,IAAI,WAAkC,IACzC,KACF;AAAA,MACF;AAAA,MACA,eAAe,IAAI,WAAW,SAAS,+BAA+B;AAAA,MACtE,eAAe,IAAI,WAAW,WAAW,iCAAiC;AAAA,MAC1E;AAAA,SACG;AAAA,MACH,sBAAsB,IAAI,WAAW,4BAA4B;AAAA,MACjE;AAAA,SACG;AAAA,MACH;AAAA;AAAA,MAEA,QAAQ,yCAAyC,OAAQ,IAA2B,IAAI,KAAK;AAAA;AAAA;AAInG,SAAS,uBAAuB,CAAC,QAA+B;AAAA,EAC9D,QAAQ,UAAU,kBAAkB,aAAa,WAAW;AAAA,EAE5D,QAAQ,SAAS;AAAA,SACV,WAAW;AAAA,MACd,IAAI,OAAO,SAAS,UAAU,OAAO,cAAc,SAAS,WAAW;AAAA,QACrE,QAAQ,+DAA+D;AAAA,MACzE;AAAA,MACA,IAAI,iBAAiB,SAAS,aAAa;AAAA,QACzC,IAAI,CAAC,gBAAgB,aAAa,iBAAiB,SAAS,GAAG;AAAA,UAC7D,QAAQ,0DAA0D;AAAA,QACpE;AAAA,QACA;AAAA,MACF;AAAA,MACA,IAAI,iBAAiB,SAAS,YAAY;AAAA,QACxC,IAAI,gBAAgB,WAAW;AAAA,UAC7B,QAAQ,wEAAwE;AAAA,QAClF;AAAA,QACA;AAAA,MACF;AAAA,MACA,IAAI,iBAAiB,SAAS,aAAa;AAAA,QACzC,IAAI,gBAAgB,WAAW;AAAA,UAC7B,QAAQ,oEAAoE;AAAA,QAC9E;AAAA,QACA;AAAA,MACF;AAAA,MACA,QAAQ,oFAAoF;AAAA,MAC5F;AAAA,IACF;AAAA,SACK,aAAa;AAAA,MAChB,IAAI,iBAAiB,SAAS,oBAAoB;AAAA,QAChD,QAAQ,2DAA2D;AAAA,MACrE;AAAA,MACA,IACE,iBAAiB,UAAU,SAAS,SAAS,QAC7C,iBAAiB,UAAU,UAAU,SAAS,OAC9C;AAAA,QACA,QAAQ,sEAAsE;AAAA,MAChF;AAAA,MACA;AAAA,IACF;AAAA,SACK,SAAS;AAAA,MACZ,IAAI,OAAO,SAAS,aAAa;AAAA,QAC/B,QAAQ,qDAAqD;AAAA,MAC/D;AAAA,MACA,IACE,iBAAiB,SAAS,eAC1B,iBAAiB,UAAU,SAAS,oBACpC,iBAAiB,eAAe,WAChC;AAAA,QACA;AAAA,MACF;AAAA,MACA,IACE,iBAAiB,SAAS,eAC1B,iBAAiB,UAAU,SAAS,UACpC,iBAAiB,eAAe,WAChC;AAAA,QACA;AAAA,MACF;AAAA,MACA,IAAI,iBAAiB,SAAS;AAAA,QAAY;AAAA,MAC1C,QACE,wGACF;AAAA,MACA;AAAA,IACF;AAAA,SACK,UAAU;AAAA,MACb,IACE,iBAAiB,SAAS,YAC1B,CAAC,sBAAsB,iBAAiB,WAAW,SAAS,SAAS,GACrE;AAAA,QACA,QAAQ,qDAAqD;AAAA,MAC/D;AAAA,MACA,IAAI,gBAAgB,WAAW;AAAA,QAC7B,QAAQ,yDAAyD;AAAA,MACnE;AAAA,MACA;AAAA,IACF;AAAA;AAAA;AAIJ,eAAe,iBAAiB,CAC9B,WACA,WACA,OACA,QACe;AAAA,EACf,IAAI,CAAC;AAAA,IAAW;AAAA,EAEhB,MAAM,SACJ,UAAU,SAAS,SACf,MAAM,OAAO,KAAK,MAAM,QAAQ,EAAE,WAAW,IAAI,UAAU,GAAG,CAAC,IAC/D,MAAM,OAAO,KAAK,gBAAgB,QAAQ,EAAE,WAAW,IAAI,UAAU,GAAG,CAAC;AAAA,EAC/E,IAAI,CAAC,QAAQ;AAAA,IACX,MAAM,IAAI,uBACR,qBACA,UAAU,UAAU,UAAU,kCAAkC,aAClE;AAAA,EACF;AAAA;AAGF,eAAe,kBAAkB,CAC/B,QACA,QACe;AAAA,EACf,IAAI,OAAO,iBAAiB,SAAS,eAAe,CAAC,OAAO,iBAAiB;AAAA,IAAY;AAAA,EAEzF,QAAQ,WAAW,eAAe,OAAO;AAAA,EACzC,IAAI,WAAW,SAAS,WAAW;AAAA,IACjC,MAAM,UAAU,MAAM,OAAO,KAAK,SAAS,QAAQ;AAAA,MACjD,WAAW,OAAO;AAAA,MAClB,IAAI,WAAW;AAAA,IACjB,CAAC;AAAA,IACD,IAAI,CAAC,SAAS;AAAA,MACZ,MAAM,IAAI,uBACR,sBACA,6BAA6B,WAAW,kCAAkC,OAAO,aACnF;AAAA,IACF;AAAA,IACA,IAAI,UAAU,SAAS,UAAU,QAAQ,WAAW,UAAU,IAAI;AAAA,MAChE,MAAM,IAAI,uBACR,sBACA,6BAA6B,WAAW,qCAAqC,UAAU,MACzF;AAAA,IACF;AAAA,IACA;AAAA,EACF;AAAA,EAEA,MAAM,QAAQ,MAAM,OAAO,KAAK,aAAa,QAAQ;AAAA,IACnD,WAAW,OAAO;AAAA,IAClB,IAAI,WAAW;AAAA,EACjB,CAAC;AAAA,EACD,IAAI,CAAC,OAAO;AAAA,IACV,MAAM,IAAI,uBACR,sBACA,kCAAkC,WAAW,kCAAkC,OAAO,aACxF;AAAA,EACF;AAAA,EACA,IAAI,MAAM,gBAAgB,UAAU,QAAQ,MAAM,cAAc,UAAU,IAAI;AAAA,IAC5E,MAAM,IAAI,uBACR,sBACA,kCAAkC,WAAW,qCAAqC,UAAU,MAC9F;AAAA,EACF;AAAA;AAGF,eAAe,kBAAkB,CAC/B,QACA,QACe;AAAA,EACf,IAAI,OAAO,iBAAiB,SAAS;AAAA,IAAa;AAAA,EAClD,QAAQ,SAAS,cAAc,OAAO,iBAAiB;AAAA,EACvD,MAAM,UAAU,MAAM,OAAO,gBAAgB,EAAE,WAAW,OAAO,WAAW,IAAI,UAAU,CAAC;AAAA,EAC3F,IAAI,CAAC,SAAS;AAAA,IACZ,MAAM,IAAI,uBACR,sBACA,oCAAoC,yCAAyC,OAAO,aACtF;AAAA,EACF;AAAA,EACA,IAAI,QAAQ,YAAY,SAAS;AAAA,IAC/B,MAAM,IAAI,uBACR,sBACA,oCAAoC,wCAAwC,WAC9E;AAAA,EACF;AAAA;AAGF,eAAe,cAAc,CAC3B,QACA,QACe;AAAA,EACf,IAAI,OAAO,OAAO,SAAS;AAAA,IAAa;AAAA,EACxC,MAAM,oBAAoB,OAAO,OAAO;AAAA,EAExC,MAAM,SAAS,MAAM,OAAO,aAAa;AAAA,IACvC,WAAW,OAAO;AAAA,IAClB,IAAI;AAAA,EACN,CAAC;AAAA,EACD,IAAI,CAAC,QAAQ;AAAA,IACX,MAAM,IAAI,uBACR,4BACA,4BAA4B,iDAAiD,OAAO,aACtF;AAAA,EACF;AAAA,EACA,IAAI,OAAO,kBAAkB,OAAO,eAAe;AAAA,IACjD,MAAM,IAAI,uBACR,4BACA,2BAA2B,OAAO,8CACpC;AAAA,EACF;AAAA,EACA,IAAI,CAAC,gBAAgB,OAAO,aAAa,OAAO,WAAW,GAAG;AAAA,IAC5D,MAAM,IAAI,uBACR,4BACA,2BAA2B,OAAO,sDACpC;AAAA,EACF;AAAA,EACA,IAAI,CAAC,kBAAkB,OAAO,mBAAmB,OAAO,iBAAiB,GAAG;AAAA,IAC1E,MAAM,IAAI,uBACR,4BACA,2BAA2B,OAAO,wDACpC;AAAA,EACF;AAAA,EACA,IACE,OAAO,SAAS,SAAS,WACzB,0BAA0B,OAAO,gBAAgB,KACjD,CAAC,kBAAkB,OAAO,kBAAkB,OAAO,gBAAgB,GACnE;AAAA,IACA,MAAM,IAAI,uBACR,4BACA,iCAAiC,OAAO,wDAC1C;AAAA,EACF;AAAA;AAGF,SAAS,yBAAyB,CAAC,KAAgC;AAAA,EACjE,OACE,IAAI,SAAS,cACZ,IAAI,SAAS,eAAe,IAAI,UAAU,SAAS,UAAU,IAAI,eAAe;AAAA;AAIrF,SAAS,eAAe,CAAC,WAAkC,OAAqB;AAAA,EAC9E,IAAI,UAAU,SAAS,UAAU,UAAU,SAAS,kBAAkB;AAAA,IACpE,QAAQ,GAAG,+BAA+B,OAAQ,UAAiC,IAAI,KAAK;AAAA,EAC9F;AAAA,EACA,eAAe,UAAU,IAAI,GAAG,UAAU;AAAA;AAG5C,SAAS,qBAAqB,CAAC,WAA4B,OAAqB;AAAA,EAC9E,IAAI,UAAU,SAAS,oBAAoB;AAAA,IACzC,QAAQ,GAAG,+BAA+B,OAAQ,UAAiC,IAAI,KAAK;AAAA,EAC9F;AAAA,EACA,eAAe,UAAU,YAAY,GAAG,mBAAmB;AAAA;AAG7D,SAAS,0BAA0B,CAAC,OAAe,OAAqB;AAAA,EACtE,IAAI,CAAC,wBAAwB,IAAI,KAAK,GAAG;AAAA,IACvC,QAAQ,GAAG,UAAU,0BAA0B;AAAA,EACjD;AAAA;AAGF,SAAS,cAAc,CAAC,OAAe,OAAqB;AAAA,EAC1D,IAAI,OAAO,UAAU,YAAY,CAAC,MAAM,KAAK,GAAG;AAAA,IAC9C,QAAQ,GAAG,mCAAmC;AAAA,EAChD;AAAA;AAGF,SAAS,eAAe,CAAC,OAAa,OAAqB;AAAA,EACzD,IAAI,EAAE,iBAAiB,SAAS,CAAC,OAAO,SAAS,MAAM,QAAQ,CAAC,GAAG;AAAA,IACjE,QAAQ,GAAG,6BAA6B;AAAA,EAC1C;AAAA;AAGF,SAAS,eAAe,CACtB,MACA,OACS;AAAA,EACT,OAAO,MAAM,SAAS,OAAO,QAAQ,MAAM,OAAO,OAAO;AAAA;AAG3D,SAAS,qBAAqB,CAAC,MAAuB,OAAiC;AAAA,EACrF,OAAO,KAAK,SAAS,MAAM,QAAQ,KAAK,eAAe,MAAM;AAAA;AAG/D,SAAS,OAAO,CAAC,SAAwB;AAAA,EACvC,MAAM,IAAI,uBAAsB,iBAAiB,UAAU,SAAS;AAAA;AAGtE,IAAM,0BAA0B,IAAI,IAAI;AAAA,EACtC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,CAAC;",
+  "debugId": "78FF364F2E082FE564756E2164756E21",
+  "names": []
+}

package/dist/{chunk-d8qkxt2v.js → chunk-98cw09sw.js}

@@ -1,13 +1,13 @@
 // @bun
 // src/storage/agents/types.ts
-var AGENT_RUN_FAILURE_CODES = [
+var AGENT_RUN_FAILURE_CODES2 = [
   "internal.unexpected",
   "runtime.cancelled",
   "agent.execution_failed",
   "ai.usage_limit_exceeded",
   "ai.usage_limit_unavailable"
 ];
-var AGENT_RUN_FINISH_REASONS = [
+var AGENT_RUN_FINISH_REASONS2 = [
   "stop",
   "length",
   "content-filter",
@@ -17,13 +17,13 @@ var AGENT_RUN_FINISH_REASONS = [
   "other",
   "unknown"
 ];
-function coerceAgentRunFinishReason(value) {
+function coerceAgentRunFinishReason2(value) {
   if (value === null || value === undefined) {
     return;
   }
-  return AGENT_RUN_FINISH_REASONS.includes(value) ? value : "unknown";
+  return AGENT_RUN_FINISH_REASONS2.includes(value) ? value : "unknown";
 }
-var AGENT_RUN_DIAGNOSTIC_CODES = [
+var AGENT_RUN_DIAGNOSTIC_CODES2 = [
   "output_file_limit_exceeded",
   "output_file_too_large",
   "output_budget_exhausted",
@@ -32,6 +32,6 @@ var AGENT_RUN_DIAGNOSTIC_CODES = [
   "output_storage_failed"
 ];
 
-export { AGENT_RUN_FAILURE_CODES, AGENT_RUN_FINISH_REASONS, coerceAgentRunFinishReason, AGENT_RUN_DIAGNOSTIC_CODES };
+export { AGENT_RUN_FAILURE_CODES2, AGENT_RUN_FINISH_REASONS2, coerceAgentRunFinishReason2, AGENT_RUN_DIAGNOSTIC_CODES2 };
 
-//# debugId=4012BA3E8FE1A2E864756E2164756E21
+//# debugId=305DAAAEB1335EE664756E2164756E21