@sixb/core 0.1.7 → 0.1.9

package/dist/events/types/datasets.d.ts

@@ -1,3 +1,4 @@
+import type { DatasetProducer } from "../../lake-storage/types";
 import type { EventEnvelope } from "../envelope";
 export interface DatasetVersionCommittedEvent extends EventEnvelope {
     type: "dataset.version.committed";
@@ -8,12 +9,7 @@ export interface DatasetVersionCommittedEvent extends EventEnvelope {
         versionId: string;
         /** Canonical UTC ISO timestamp from the committed immutable dataset version. */
         createdAt: string;
-        producer: {
-            kind: "sync" | "pipeline";
-            id?: string;
-            runId?: string;
-            stepId?: string;
-        };
+        producer: DatasetProducer;
     };
 }
 export type DatasetEvent = DatasetVersionCommittedEvent;

package/dist/events/types/datasets.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"datasets.d.ts","sourceRoot":"","sources":["../../../src/events/types/datasets.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,aAAa,CAAA;AAEhD,MAAM,WAAW,4BAA6B,SAAQ,aAAa;IACjE,IAAI,EAAE,2BAA2B,CAAA;IACjC,KAAK,EAAE,UAAU,CAAA;IACjB,YAAY,EAAE,MAAM,CAAA;IACpB,OAAO,EAAE;QACP,SAAS,EAAE,MAAM,CAAA;QACjB,SAAS,EAAE,MAAM,CAAA;QACjB,gFAAgF;QAChF,SAAS,EAAE,MAAM,CAAA;QACjB,QAAQ,EAAE;YACR,IAAI,EAAE,MAAM,GAAG,UAAU,CAAA;YACzB,EAAE,CAAC,EAAE,MAAM,CAAA;YACX,KAAK,CAAC,EAAE,MAAM,CAAA;YACd,MAAM,CAAC,EAAE,MAAM,CAAA;SAChB,CAAA;KACF,CAAA;CACF;AAED,MAAM,MAAM,YAAY,GAAG,4BAA4B,CAAA"}
+{"version":3,"file":"datasets.d.ts","sourceRoot":"","sources":["../../../src/events/types/datasets.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,0BAA0B,CAAA;AAC/D,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,aAAa,CAAA;AAEhD,MAAM,WAAW,4BAA6B,SAAQ,aAAa;IACjE,IAAI,EAAE,2BAA2B,CAAA;IACjC,KAAK,EAAE,UAAU,CAAA;IACjB,YAAY,EAAE,MAAM,CAAA;IACpB,OAAO,EAAE;QACP,SAAS,EAAE,MAAM,CAAA;QACjB,SAAS,EAAE,MAAM,CAAA;QACjB,gFAAgF;QAChF,SAAS,EAAE,MAAM,CAAA;QACjB,QAAQ,EAAE,eAAe,CAAA;KAC1B,CAAA;CACF;AAED,MAAM,MAAM,YAAY,GAAG,4BAA4B,CAAA"}

package/dist/execution/agent.d.ts

@@ -1,7 +1,7 @@
 import { type AgentExecutionAuthorization } from "../agents/authority";
 import type { OntologySource } from "../ontology";
 import { type Sixb } from "../runtime/sixb";
-import type { CreateExecutionInput, ExecutionRecord } from "../storage/executions";
+import type { ExecutionRecord } from "../storage/executions";
 export { ensureExecutionRecord } from "./durable";
 import type { AuthorizablePrincipal, ExecutionScope, RuntimeAuthorization } from "./types";
 /** Minimal host boundary required by agent workers. */
@@ -20,13 +20,13 @@ export declare function createAgentExecutionRecord(input: {
     readonly principal: Extract<AuthorizablePrincipal, {
         readonly type: "serviceAccount";
     }>;
-}): CreateExecutionInput;
+}): Omit<ExecutionRecord, "createdAt">;
 /** Build an Agent execution that carries its parent's exact durable authority reference. */
 export declare function createInheritedAgentExecutionRecord(input: {
     readonly id: string;
     readonly parent: ExecutionRecord;
     readonly runId: string;
-}): CreateExecutionInput;
+}): Omit<ExecutionRecord, "createdAt">;
 /** Bind a worker to the immutable execution already owned by its durable Agent run. */
 export declare function bindDurableAgentExecution(host: AgentExecutionHost, input: {
     readonly execution: ExecutionRecord;

package/dist/execution/agent.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"agent.d.ts","sourceRoot":"","sources":["../../src/execution/agent.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,2BAA2B,EAAyB,MAAM,qBAAqB,CAAA;AAC7F,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,aAAa,CAAA;AACjD,OAAO,EAAe,KAAK,IAAI,EAAE,MAAM,iBAAiB,CAAA;AACxD,OAAO,KAAK,EAAE,oBAAoB,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAA;AAGlF,OAAO,EAAE,qBAAqB,EAAE,MAAM,WAAW,CAAA;AAGjD,OAAO,KAAK,EACV,qBAAqB,EAErB,cAAc,EACd,oBAAoB,EACrB,MAAM,SAAS,CAAA;AAEhB,uDAAuD;AACvD,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;IACnB,SAAS,CAAC,KAAK,EAAE,cAAc,GAAG,MAAM,CAAA;CACzC;AAED,yGAAyG;AACzG,wBAAgB,mCAAmC,CAAC,aAAa,EAAE,oBAAoB,GAAG,OAAO,CAMhG;AAED,qFAAqF;AACrF,wBAAgB,0BAA0B,CAAC,KAAK,EAAE;IAChD,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;IACnB,QAAQ,CAAC,MAAM,EAAE,eAAe,CAAA;IAChC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;IACxB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC,qBAAqB,EAAE;QAAE,QAAQ,CAAC,IAAI,EAAE,gBAAgB,CAAA;KAAE,CAAC,CAAA;CACxF,GAAG,oBAAoB,CAgBvB;AAED,4FAA4F;AAC5F,wBAAgB,mCAAmC,CAAC,KAAK,EAAE;IACzD,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;IACnB,QAAQ,CAAC,MAAM,EAAE,eAAe,CAAA;IAChC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;CACvB,GAAG,oBAAoB,CA2BvB;AAED,uFAAuF;AACvF,wBAAgB,yBAAyB,CACvC,IAAI,EAAE,kBAAkB,EACxB,KAAK,EAAE;IACL,QAAQ,CAAC,SAAS,EAAE,eAAe,CAAA;IACnC,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,aAAa,EAAE,2BAA2B,CAAA;CACpD,GACA,IAAI,CAAC,SAAS,cAAc,EAAE,CAAC,CAOjC;AAED,yFAAyF;AACzF,wBAAgB,0BAA0B,CAAC,KAAK,EAAE;IAChD,QAAQ,CAAC,SAAS,EAAE,eAAe,CAAA;IACnC,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,aAAa,EAAE,2BAA2B,CAAA;CACpD,GAAG,cAAc,CAoCjB;AAED,oFAAoF;AACpF,wBAAgB,0BAA0B,CAAC,KAAK,EAAE;IAChD,QAAQ,CAAC,SAAS,EAAE,eAAe,CAAA;IACnC,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,aAAa,EAAE,2BAA2B,CAAA;CACpD,GAAG,IAAI,CAgCP"}
+{"version":3,"file":"agent.d.ts","sourceRoot":"","sources":["../../src/execution/agent.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,2BAA2B,EAAyB,MAAM,qBAAqB,CAAA;AAC7F,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,aAAa,CAAA;AACjD,OAAO,EAAe,KAAK,IAAI,EAAE,MAAM,iBAAiB,CAAA;AACxD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAA;AAG5D,OAAO,EAAE,qBAAqB,EAAE,MAAM,WAAW,CAAA;AAGjD,OAAO,KAAK,EACV,qBAAqB,EAErB,cAAc,EACd,oBAAoB,EACrB,MAAM,SAAS,CAAA;AAEhB,uDAAuD;AACvD,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;IACnB,SAAS,CAAC,KAAK,EAAE,cAAc,GAAG,MAAM,CAAA;CACzC;AAED,yGAAyG;AACzG,wBAAgB,mCAAmC,CAAC,aAAa,EAAE,oBAAoB,GAAG,OAAO,CAMhG;AAED,qFAAqF;AACrF,wBAAgB,0BAA0B,CAAC,KAAK,EAAE;IAChD,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;IACnB,QAAQ,CAAC,MAAM,EAAE,eAAe,CAAA;IAChC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;IACxB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC,qBAAqB,EAAE;QAAE,QAAQ,CAAC,IAAI,EAAE,gBAAgB,CAAA;KAAE,CAAC,CAAA;CACxF,GAAG,IAAI,CAAC,eAAe,EAAE,WAAW,CAAC,CAiBrC;AAED,4FAA4F;AAC5F,wBAAgB,mCAAmC,CAAC,KAAK,EAAE;IACzD,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;IACnB,QAAQ,CAAC,MAAM,EAAE,eAAe,CAAA;IAChC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;CACvB,GAAG,IAAI,CAAC,eAAe,EAAE,WAAW,CAAC,CA4BrC;AAED,uFAAuF;AACvF,wBAAgB,yBAAyB,CACvC,IAAI,EAAE,kBAAkB,EACxB,KAAK,EAAE;IACL,QAAQ,CAAC,SAAS,EAAE,eAAe,CAAA;IACnC,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,aAAa,EAAE,2BAA2B,CAAA;CACpD,GACA,IAAI,CAAC,SAAS,cAAc,EAAE,CAAC,CAOjC;AAED,yFAAyF;AACzF,wBAAgB,0BAA0B,CAAC,KAAK,EAAE;IAChD,QAAQ,CAAC,SAAS,EAAE,eAAe,CAAA;IACnC,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,aAAa,EAAE,2BAA2B,CAAA;CACpD,GAAG,cAAc,CAiCjB;AAED,oFAAoF;AACpF,wBAAgB,0BAA0B,CAAC,KAAK,EAAE;IAChD,QAAQ,CAAC,SAAS,EAAE,eAAe,CAAA;IACnC,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,aAAa,EAAE,2BAA2B,CAAA;CACpD,GAAG,IAAI,CAgCP"}

package/dist/execution/agent.js

@@ -1,81 +1,76 @@
 // @bun
 import {
-  assertAgentExecutionRecord,
-  bindDurableAgentExecution,
-  canInheritAgentRequestAuthorization,
-  createAgentExecutionRecord,
-  createInheritedAgentExecutionRecord,
-  restoreAgentExecutionScope
-} from "../chunk-h0knpbz5.js";
-import"../chunk-ha58tjtt.js";
-import"../chunk-c15dr03f.js";
-import"../chunk-rp1mvzb4.js";
-import"../chunk-e4rvtvpw.js";
-import"../chunk-4rh2m6zg.js";
-import"../chunk-xhy826cz.js";
-import"../chunk-3fqt22c4.js";
-import"../chunk-rte5sm3z.js";
-import"../chunk-8m5ejdpn.js";
-import"../chunk-nf4r78r4.js";
-import"../chunk-d2ndstdf.js";
-import"../chunk-y35ma3mj.js";
-import"../chunk-9aehf39w.js";
-import"../chunk-96swp2wd.js";
+  canInheritAgentRequestAuthorization2,
+  createAgentExecutionRecord2,
+  createInheritedAgentExecutionRecord2,
+  bindDurableAgentExecution2,
+  restoreAgentExecutionScope2,
+  assertAgentExecutionRecord2
+} from "../chunk-hpr1r6av.js";
+import"../chunk-emyyk7dx.js";
+import"../chunk-awbhdqyc.js";
+import"../chunk-1enhpacz.js";
+import"../chunk-zcnq6105.js";
+import"../chunk-jjy0fhrn.js";
+import"../chunk-h1gfhhbh.js";
+import"../chunk-g6cke204.js";
+import"../chunk-0y39rgsb.js";
+import"../chunk-5a4a52tq.js";
+import"../chunk-mrp7k0pw.js";
+import"../chunk-9qsh3p5y.js";
+import"../chunk-860dwwy0.js";
+import"../chunk-vf691g1r.js";
+import"../chunk-ypbtykv6.js";
+import"../chunk-0w35wavj.js";
+import"../chunk-an5tt9y0.js";
 import {
-  ensureExecutionRecord
-} from "../chunk-hdz94br2.js";
-import"../chunk-6ed5bwnd.js";
-import"../chunk-4nxeacx7.js";
-import"../chunk-agsvg9ar.js";
-import"../chunk-qjzp9xyb.js";
-import"../chunk-5gd7tpv6.js";
-import"../chunk-gbrpsx4m.js";
-import"../chunk-8tsf6dmc.js";
-import"../chunk-xc7hq65b.js";
-import"../chunk-5jcdmjam.js";
-import"../chunk-xdpwpkha.js";
-import"../chunk-ka3a2ft3.js";
-import"../chunk-1kamz6j0.js";
-import"../chunk-08twe8m6.js";
-import"../chunk-3kv70xwp.js";
-import"../chunk-p03r0h5s.js";
-import"../chunk-jecn6t54.js";
-import"../chunk-x0qhkqje.js";
-import"../chunk-dqn23610.js";
-import"../chunk-9dzba0f2.js";
-import"../chunk-dbc80ad7.js";
-import"../chunk-ry24jbr1.js";
-import"../chunk-p2vqaxkc.js";
-import"../chunk-trxxmgnf.js";
-import"../chunk-zcnhxkvd.js";
-import"../chunk-w3e09qqk.js";
-import"../chunk-51fjndv0.js";
-import"../chunk-1evzqhks.js";
-import"../chunk-jq43kdvk.js";
-import"../chunk-qw9gvjv5.js";
-import"../chunk-yt8wphsx.js";
-import"../chunk-atmkaf60.js";
-import"../chunk-7y0f6rf1.js";
-import"../chunk-d8qkxt2v.js";
-import"../chunk-rre42skh.js";
-import"../chunk-4a849fr1.js";
-import"../chunk-xwnf87e1.js";
-import"../chunk-37wk412q.js";
-import"../chunk-d63tybny.js";
-import"../chunk-04b07a9q.js";
-import"../chunk-dktq02ne.js";
-import"../chunk-08m3b6w8.js";
-import"../chunk-2xns679x.js";
-import"../chunk-n6jxh8sw.js";
-import"../chunk-y64skrwp.js";
+  ensureExecutionRecord2
+} from "../chunk-17kfctj6.js";
+import"../chunk-mjbk2djy.js";
+import"../chunk-qf954wje.js";
+import"../chunk-pr2h4bv4.js";
+import"../chunk-8vj0rjgs.js";
+import"../chunk-x57ycxq0.js";
+import"../chunk-z30bv4ga.js";
+import"../chunk-mmagke4x.js";
+import"../chunk-ppytyr6w.js";
+import"../chunk-3frsnm7x.js";
+import"../chunk-br3k6qbf.js";
+import"../chunk-jmfet9r4.js";
+import"../chunk-vsj3mdfj.js";
+import"../chunk-7bs40fe1.js";
+import"../chunk-g53f0e4j.js";
+import"../chunk-s3csryxe.js";
+import"../chunk-jgwb25gc.js";
+import"../chunk-93csa55g.js";
+import"../chunk-b19g04jk.js";
+import"../chunk-e0d1rzef.js";
+import"../chunk-pqajwytd.js";
+import"../chunk-ap0g1g74.js";
+import"../chunk-653vwrzr.js";
+import"../chunk-c5rkjrgp.js";
+import"../chunk-7apz6hg4.js";
+import"../chunk-72w2pxk7.js";
+import"../chunk-39tqv9hz.js";
+import"../chunk-gfdh9kqa.js";
+import"../chunk-wr8qp979.js";
+import"../chunk-dmn70ztd.js";
+import"../chunk-92vk7gta.js";
+import"../chunk-g00bfdq6.js";
+import"../chunk-f0rwz2vh.js";
+import"../chunk-dz5h08xv.js";
+import"../chunk-v4jbb3rs.js";
+import"../chunk-ms2tmn1k.js";
+import"../chunk-f4w3yp4f.js";
+import"../chunk-q5gz3g2j.js";
 export {
-  restoreAgentExecutionScope,
-  ensureExecutionRecord,
-  createInheritedAgentExecutionRecord,
-  createAgentExecutionRecord,
-  canInheritAgentRequestAuthorization,
-  bindDurableAgentExecution,
-  assertAgentExecutionRecord
+  assertAgentExecutionRecord2 as assertAgentExecutionRecord,
+  bindDurableAgentExecution2 as bindDurableAgentExecution,
+  canInheritAgentRequestAuthorization2 as canInheritAgentRequestAuthorization,
+  createAgentExecutionRecord2 as createAgentExecutionRecord,
+  createInheritedAgentExecutionRecord2 as createInheritedAgentExecutionRecord,
+  ensureExecutionRecord2 as ensureExecutionRecord,
+  restoreAgentExecutionScope2 as restoreAgentExecutionScope
 };
 
-//# debugId=619B96BF0D5C2A1864756E2164756E21
+//# debugId=3414922EF28D4C2764756E2164756E21

package/dist/execution/agent.js.map

@@ -4,6 +4,6 @@
   "sourcesContent": [
   ],
   "mappings": "",
-  "debugId": "619B96BF0D5C2A1864756E2164756E21",
+  "debugId": "3414922EF28D4C2764756E2164756E21",
   "names": []
 }

package/dist/execution/authorization.d.ts

@@ -1,5 +1,8 @@
 import type { AuthorizationContext } from "../authorization/types";
-import { type AuthorizationRef, type ExecutionScope, type KernelOperation, type RuntimeAuthorization, type TrustedPrimitiveRef } from "./types";
+import type { ObjectRef } from "../ontology";
+import { type ObjectReadExecutionLimits } from "../storage/objects/execution-limits";
+import type { CompiledSelectedObjectReadScope, SelectedObjectReadScope } from "../storage/objects/types";
+import { type AuthorizationRef, type ExecutionContext, type ExecutionScope, type KernelOperation, type RuntimeAuthorization, type TrustedPrimitiveRef } from "./types";
 export type ResolvedRuntimeAuthorization = {
     readonly type: "principal";
     readonly projectId: string;
@@ -7,30 +10,38 @@ export type ResolvedRuntimeAuthorization = {
     readonly ref: Extract<AuthorizationRef, {
         readonly type: "principal";
     }>;
-    /** Process-local binding used by provider façades that explicitly support agent runs. */
-    readonly executionBinding?: AgentExecutionBinding;
 } | {
     readonly type: "unrestricted";
     readonly projectId: string;
     readonly ref: Exclude<AuthorizationRef, {
-        readonly type: "principal";
+        readonly type: "principal" | "delegated";
     }>;
-    /** Process-local binding used by provider façades that explicitly support agent runs. */
-    readonly executionBinding?: AgentExecutionBinding;
+} | {
+    readonly type: "delegated";
+    readonly projectId: string;
+    readonly objectRead: DelegatedObjectReadAuthorization;
+    readonly actionApply: readonly DelegatedActionApplyTarget[];
+    readonly delegation?: Extract<AuthorizationRef, {
+        readonly type: "delegated";
+    }>["delegation"];
 } | {
     readonly type: "denied";
 };
+/** Immutable process-local object-read authority. It has no durable representation. */
+export interface DelegatedObjectReadAuthorization {
+    readonly scope: CompiledSelectedObjectReadScope;
+    readonly limits: ObjectReadExecutionLimits;
+}
+/** One exact object-bound Action target carried by process-local delegated authority. */
+export interface DelegatedActionApplyTarget {
+    readonly actionId: string;
+    readonly subject: ObjectRef;
+}
 type RegisteredRuntimeAuthorization = Exclude<ResolvedRuntimeAuthorization, {
     readonly type: "denied";
 }>;
-interface AgentExecutionBinding {
-    readonly type: "agent";
-    readonly executionId: string;
-    readonly actorId?: string;
-    readonly runId: string;
-}
 export declare function createPrincipalRuntimeAuthorization(input: {
-    readonly projectId: string;
+    readonly execution: ExecutionContext;
     readonly context: AuthorizationContext;
     readonly credential?: Extract<AuthorizationRef, {
         readonly type: "principal";
@@ -38,10 +49,7 @@ export declare function createPrincipalRuntimeAuthorization(input: {
 }): RuntimeAuthorization;
 /** Register restored authority bound to one exact agent run. */
 export declare function createAgentRuntimeAuthorization(input: {
-    readonly projectId: string;
-    readonly executionId: string;
-    readonly actorId?: string;
-    readonly runId: string;
+    readonly execution: ExecutionContext;
     readonly authority: {
         readonly type: "principal";
         readonly context: AuthorizationContext;
@@ -52,18 +60,48 @@ export declare function createAgentRuntimeAuthorization(input: {
         readonly type: "disabled";
     };
 }): RuntimeAuthorization;
-export declare function createDisabledRuntimeAuthorization(projectId: string): RuntimeAuthorization;
+export declare function createDisabledRuntimeAuthorization(execution: ExecutionContext): RuntimeAuthorization;
+/** Register exact object-read authority without fabricating a principal identity. */
+export declare function createDelegatedRuntimeAuthorization(input: {
+    readonly execution: ExecutionContext;
+    readonly objectRead: {
+        readonly selection: SelectedObjectReadScope;
+        readonly limits: ObjectReadExecutionLimits;
+    };
+    readonly actionApply?: readonly DelegatedActionApplyTarget[];
+    readonly delegation?: Extract<AuthorizationRef, {
+        readonly type: "delegated";
+    }>["delegation"];
+}): RuntimeAuthorization;
 export declare function createTrustedPrimitiveRuntimeAuthorization(input: {
-    readonly projectId: string;
+    readonly execution: ExecutionContext;
     readonly primitive: TrustedPrimitiveRef;
 }): RuntimeAuthorization;
 export declare function createKernelRuntimeAuthorization(input: {
-    readonly projectId: string;
+    readonly execution: ExecutionContext;
     readonly operation: KernelOperation;
 }): RuntimeAuthorization;
 export declare function resolveRuntimeAuthorization(authorization: unknown): ResolvedRuntimeAuthorization;
+/**
+ * Resolve authority from a runtime already admitted by `SixbHost.withScope`.
+ *
+ * Bound runtime facades carry no second execution value to recombine. Any lower-level boundary
+ * that receives an `ExecutionContext` separately must use `resolveExecutionScopeAuthorization`.
+ */
+export declare function resolveRuntimeAuthorizationForProject(input: {
+    readonly projectId: unknown;
+    readonly runtimeAuthorization?: unknown;
+}): ResolvedRuntimeAuthorization;
 export declare function getAuthorizationRef(authorization: RuntimeAuthorization): AuthorizationRef;
 export declare function assertExecutionScopeProject(projectId: string, scope: ExecutionScope): void;
+/**
+ * Capture the two opaque capabilities carried by a scope exactly once.
+ *
+ * Security-sensitive boundaries must not resolve a caller-owned wrapper and then read it again:
+ * accessor-backed inputs could otherwise substitute a different execution or authority between
+ * those operations.
+ */
+export declare function captureExecutionScope(scope: ExecutionScope): ExecutionScope;
 /** Validate that one registered authority belongs to the exact execution it accompanies. */
 export declare function resolveExecutionScopeAuthorization(projectId: string, scope: ExecutionScope): RegisteredRuntimeAuthorization;
 export {};

package/dist/execution/authorization.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"authorization.d.ts","sourceRoot":"","sources":["../../src/execution/authorization.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,oBAAoB,EAAc,MAAM,wBAAwB,CAAA;AAE9E,OAAO,EAEL,KAAK,gBAAgB,EAErB,KAAK,cAAc,EAEnB,KAAK,eAAe,EACpB,KAAK,oBAAoB,EAEzB,KAAK,mBAAmB,EACzB,MAAM,SAAS,CAAA;AAEhB,MAAM,MAAM,4BAA4B,GACpC;IACE,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAA;IAC1B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,OAAO,EAAE,oBAAoB,CAAA;IACtC,QAAQ,CAAC,GAAG,EAAE,OAAO,CAAC,gBAAgB,EAAE;QAAE,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAA;KAAE,CAAC,CAAA;IACvE,yFAAyF;IACzF,QAAQ,CAAC,gBAAgB,CAAC,EAAE,qBAAqB,CAAA;CAClD,GACD;IACE,QAAQ,CAAC,IAAI,EAAE,cAAc,CAAA;IAC7B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,GAAG,EAAE,OAAO,CAAC,gBAAgB,EAAE;QAAE,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAA;KAAE,CAAC,CAAA;IACvE,yFAAyF;IACzF,QAAQ,CAAC,gBAAgB,CAAC,EAAE,qBAAqB,CAAA;CAClD,GACD;IAAE,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAA;CAAE,CAAA;AAE/B,KAAK,8BAA8B,GAAG,OAAO,CAC3C,4BAA4B,EAC5B;IAAE,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAA;CAAE,CAC5B,CAAA;AAMD,UAAU,qBAAqB;IAC7B,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAA;IACtB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAA;IAC5B,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;CACvB;AAID,wBAAgB,mCAAmC,CAAC,KAAK,EAAE;IACzD,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,OAAO,EAAE,oBAAoB,CAAA;IACtC,QAAQ,CAAC,UAAU,CAAC,EAAE,OAAO,CAAC,gBAAgB,EAAE;QAAE,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAA;KAAE,CAAC,CAAC,YAAY,CAAC,CAAA;CAC9F,GAAG,oBAAoB,CAEvB;AAED,gEAAgE;AAChE,wBAAgB,+BAA+B,CAAC,KAAK,EAAE;IACrD,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAA;IAC5B,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,SAAS,EACd;QACE,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAA;QAC1B,QAAQ,CAAC,OAAO,EAAE,oBAAoB,CAAA;QACtC,QAAQ,CAAC,UAAU,CAAC,EAAE,OAAO,CAC3B,gBAAgB,EAChB;YAAE,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAA;SAAE,CAC/B,CAAC,YAAY,CAAC,CAAA;KAChB,GACD;QAAE,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAA;KAAE,CAAA;CAClC,GAAG,oBAAoB,CA8BvB;AA6BD,wBAAgB,kCAAkC,CAAC,SAAS,EAAE,MAAM,GAAG,oBAAoB,CAE1F;AAED,wBAAgB,0CAA0C,CAAC,KAAK,EAAE;IAChE,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,SAAS,EAAE,mBAAmB,CAAA;CACxC,GAAG,oBAAoB,CAOvB;AAED,wBAAgB,gCAAgC,CAAC,KAAK,EAAE;IACtD,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,SAAS,EAAE,eAAe,CAAA;CACpC,GAAG,oBAAoB,CAOvB;AAED,wBAAgB,2BAA2B,CAAC,aAAa,EAAE,OAAO,GAAG,4BAA4B,CAKhG;AAED,wBAAgB,mBAAmB,CAAC,aAAa,EAAE,oBAAoB,GAAG,gBAAgB,CAMzF;AAED,wBAAgB,2BAA2B,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,cAAc,GAAG,IAAI,CAqC1F;AAED,4FAA4F;AAC5F,wBAAgB,kCAAkC,CAChD,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE,cAAc,GACpB,8BAA8B,CAsFhC"}
+{"version":3,"file":"authorization.d.ts","sourceRoot":"","sources":["../../src/execution/authorization.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,oBAAoB,EAAc,MAAM,wBAAwB,CAAA;AAE9E,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,aAAa,CAAA;AAC5C,OAAO,EACL,KAAK,yBAAyB,EAE/B,MAAM,qCAAqC,CAAA;AAE5C,OAAO,KAAK,EACV,+BAA+B,EAC/B,uBAAuB,EACxB,MAAM,0BAA0B,CAAA;AACjC,OAAO,EAEL,KAAK,gBAAgB,EAErB,KAAK,gBAAgB,EACrB,KAAK,cAAc,EAEnB,KAAK,eAAe,EACpB,KAAK,oBAAoB,EAEzB,KAAK,mBAAmB,EACzB,MAAM,SAAS,CAAA;AAEhB,MAAM,MAAM,4BAA4B,GACpC;IACE,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAA;IAC1B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,OAAO,EAAE,oBAAoB,CAAA;IACtC,QAAQ,CAAC,GAAG,EAAE,OAAO,CAAC,gBAAgB,EAAE;QAAE,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAA;KAAE,CAAC,CAAA;CACxE,GACD;IACE,QAAQ,CAAC,IAAI,EAAE,cAAc,CAAA;IAC7B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,GAAG,EAAE,OAAO,CAAC,gBAAgB,EAAE;QAAE,QAAQ,CAAC,IAAI,EAAE,WAAW,GAAG,WAAW,CAAA;KAAE,CAAC,CAAA;CACtF,GACD;IACE,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAA;IAC1B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,UAAU,EAAE,gCAAgC,CAAA;IACrD,QAAQ,CAAC,WAAW,EAAE,SAAS,0BAA0B,EAAE,CAAA;IAC3D,QAAQ,CAAC,UAAU,CAAC,EAAE,OAAO,CAAC,gBAAgB,EAAE;QAAE,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAA;KAAE,CAAC,CAAC,YAAY,CAAC,CAAA;CAC9F,GACD;IAAE,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAA;CAAE,CAAA;AAE/B,uFAAuF;AACvF,MAAM,WAAW,gCAAgC;IAC/C,QAAQ,CAAC,KAAK,EAAE,+BAA+B,CAAA;IAC/C,QAAQ,CAAC,MAAM,EAAE,yBAAyB,CAAA;CAC3C;AAED,yFAAyF;AACzF,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,OAAO,EAAE,SAAS,CAAA;CAC5B;AAED,KAAK,8BAA8B,GAAG,OAAO,CAC3C,4BAA4B,EAC5B;IAAE,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAA;CAAE,CAC5B,CAAA;AAmBD,wBAAgB,mCAAmC,CAAC,KAAK,EAAE;IACzD,QAAQ,CAAC,SAAS,EAAE,gBAAgB,CAAA;IACpC,QAAQ,CAAC,OAAO,EAAE,oBAAoB,CAAA;IACtC,QAAQ,CAAC,UAAU,CAAC,EAAE,OAAO,CAAC,gBAAgB,EAAE;QAAE,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAA;KAAE,CAAC,CAAC,YAAY,CAAC,CAAA;CAC9F,GAAG,oBAAoB,CAKvB;AAED,gEAAgE;AAChE,wBAAgB,+BAA+B,CAAC,KAAK,EAAE;IACrD,QAAQ,CAAC,SAAS,EAAE,gBAAgB,CAAA;IACpC,QAAQ,CAAC,SAAS,EACd;QACE,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAA;QAC1B,QAAQ,CAAC,OAAO,EAAE,oBAAoB,CAAA;QACtC,QAAQ,CAAC,UAAU,CAAC,EAAE,OAAO,CAC3B,gBAAgB,EAChB;YAAE,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAA;SAAE,CAC/B,CAAC,YAAY,CAAC,CAAA;KAChB,GACD;QAAE,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAA;KAAE,CAAA;CAClC,GAAG,oBAAoB,CAoBvB;AAuBD,wBAAgB,kCAAkC,CAChD,SAAS,EAAE,gBAAgB,GAC1B,oBAAoB,CAMtB;AAED,qFAAqF;AACrF,wBAAgB,mCAAmC,CAAC,KAAK,EAAE;IACzD,QAAQ,CAAC,SAAS,EAAE,gBAAgB,CAAA;IACpC,QAAQ,CAAC,UAAU,EAAE;QACnB,QAAQ,CAAC,SAAS,EAAE,uBAAuB,CAAA;QAC3C,QAAQ,CAAC,MAAM,EAAE,yBAAyB,CAAA;KAC3C,CAAA;IACD,QAAQ,CAAC,WAAW,CAAC,EAAE,SAAS,0BAA0B,EAAE,CAAA;IAC5D,QAAQ,CAAC,UAAU,CAAC,EAAE,OAAO,CAAC,gBAAgB,EAAE;QAAE,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAA;KAAE,CAAC,CAAC,YAAY,CAAC,CAAA;CAC9F,GAAG,oBAAoB,CAwBvB;AAED,wBAAgB,0CAA0C,CAAC,KAAK,EAAE;IAChE,QAAQ,CAAC,SAAS,EAAE,gBAAgB,CAAA;IACpC,QAAQ,CAAC,SAAS,EAAE,mBAAmB,CAAA;CACxC,GAAG,oBAAoB,CAOvB;AAED,wBAAgB,gCAAgC,CAAC,KAAK,EAAE;IACtD,QAAQ,CAAC,SAAS,EAAE,gBAAgB,CAAA;IACpC,QAAQ,CAAC,SAAS,EAAE,eAAe,CAAA;CACpC,GAAG,oBAAoB,CAOvB;AAED,wBAAgB,2BAA2B,CAAC,aAAa,EAAE,OAAO,GAAG,4BAA4B,CAKhG;AAED;;;;;GAKG;AACH,wBAAgB,qCAAqC,CAAC,KAAK,EAAE;IAC3D,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAA;IAC3B,QAAQ,CAAC,oBAAoB,CAAC,EAAE,OAAO,CAAA;CACxC,GAAG,4BAA4B,CAU/B;AAED,wBAAgB,mBAAmB,CAAC,aAAa,EAAE,oBAAoB,GAAG,gBAAgB,CAczF;AAcD,wBAAgB,2BAA2B,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,cAAc,GAAG,IAAI,CAqC1F;AAED;;;;;;GAMG;AACH,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,cAAc,GAAG,cAAc,CAI3E;AAED,4FAA4F;AAC5F,wBAAgB,kCAAkC,CAChD,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE,cAAc,GACpB,8BAA8B,CAsBhC"}

package/dist/execution/authorized-object-reader.d.ts

@@ -0,0 +1,69 @@
+import { type AuthorizedOntologyView } from "../objects/authorized-ontology-view";
+import { type ExecuteObjectCountInput, type ExecuteObjectCountResult, type ExecuteObjectExistsInput, type ExecuteObjectExistsResult, type ExecuteObjectFacetsInput, type ExecuteObjectFacetsResult, type ExecuteObjectQueryInput, type ExecuteObjectQueryLinksInput, type ExecuteObjectQueryLinksResult, type ExecuteObjectQueryResult } from "../objects/query";
+import { type TelemetryHistoryReadAdmission, type TelemetryHistoryReadWorkloadInput } from "../objects/telemetry/workload";
+import type { OntologyRegistry } from "../ontology";
+import type { ObjectReadStorage, ObjectStorage } from "../storage";
+import { resolveExecutionScopeAuthorization } from "./authorization";
+import type { ExecutionScope } from "./types";
+type ResolvedExecutionAuthority = ReturnType<typeof resolveExecutionScopeAuthorization>;
+type GetObjectInput = Omit<Parameters<ObjectReadStorage["getByPrimaryId"]>[0], "projectId">;
+type GetObjectsInput = Omit<Parameters<ObjectReadStorage["getByPrimaryIdBatch"]>[0], "projectId">;
+type SelectObjectPropertiesInput = Parameters<ObjectReadStorage["selectsObjectProperties"]>[0];
+type CanReadObjectPropertyInput = SelectObjectPropertiesInput["items"][number];
+type CanReadObjectPropertiesBatchInput = Omit<SelectObjectPropertiesInput, "projectId">;
+type ListObjectsInput = Omit<Parameters<ObjectReadStorage["list"]>[0], "projectId">;
+type ListLinksInput = Omit<Parameters<ObjectReadStorage["listLinks"]>[0], "projectId">;
+type ListLinksBatchInput = Omit<Parameters<ObjectReadStorage["listLinksBatch"]>[0], "projectId">;
+declare const readerConstructionKey: Readonly<{}>;
+/**
+ * Core-owned object read boundary for one exact execution authority.
+ *
+ * The implementation class is intentionally private to this module. Its private fields make the
+ * exported instance type nominal, while the construction key prevents code that discovers the
+ * JavaScript constructor through an instance from manufacturing another reader.
+ */
+declare class AuthorizedObjectReaderImpl {
+    #private;
+    constructor(key: typeof readerConstructionKey, input: {
+        readonly scope: ExecutionScope;
+        readonly ontology: OntologyRegistry;
+        readonly storage: ObjectReadStorage;
+        readonly authority: ResolvedExecutionAuthority;
+    });
+    static assertBound(reader: AuthorizedObjectReaderImpl, scope: ExecutionScope): void;
+    static ontologyView(reader: AuthorizedObjectReaderImpl): AuthorizedOntologyView;
+    /** Project identity carried by this nominal reader capability. */
+    get projectId(): string;
+    getByPrimaryId(input: GetObjectInput): ReturnType<ObjectReadStorage["getByPrimaryId"]>;
+    getByPrimaryIdBatch(input: GetObjectsInput): ReturnType<ObjectReadStorage["getByPrimaryIdBatch"]>;
+    canReadObjectProperty(input: CanReadObjectPropertyInput): Promise<boolean>;
+    canReadObjectPropertiesBatch(input: CanReadObjectPropertiesBatchInput): Promise<readonly boolean[]>;
+    list(input: ListObjectsInput): ReturnType<ObjectReadStorage["list"]>;
+    listLinks(input: ListLinksInput): ReturnType<ObjectReadStorage["listLinks"]>;
+    listLinksBatch(input: ListLinksBatchInput): ReturnType<ObjectReadStorage["listLinksBatch"]>;
+    executeQuery(input: Omit<ExecuteObjectQueryInput, "projectId">): Promise<ExecuteObjectQueryResult>;
+    queryLinks(input: Omit<ExecuteObjectQueryLinksInput, "projectId">): Promise<ExecuteObjectQueryLinksResult>;
+    count(input: Omit<ExecuteObjectCountInput, "projectId">): Promise<ExecuteObjectCountResult>;
+    exists(input: Omit<ExecuteObjectExistsInput, "projectId">): Promise<ExecuteObjectExistsResult>;
+    facet(input: Omit<ExecuteObjectFacetsInput, "projectId">): Promise<ExecuteObjectFacetsResult>;
+    /** Enforce the delegated response budget without exposing or recombining its limits. */
+    assertVisibleOutputWithinLimit(value: unknown): void;
+    /** Admit adjacent telemetry work without exposing which authority policy was selected. */
+    admitTelemetryHistoryRead(input: TelemetryHistoryReadWorkloadInput): TelemetryHistoryReadAdmission;
+}
+export type AuthorizedObjectReader = AuthorizedObjectReaderImpl;
+/** Build the sole application-facing object reader for one registered execution scope. */
+export declare function createAuthorizedObjectReader(input: {
+    readonly scope: ExecutionScope;
+    readonly ontology: OntologyRegistry;
+    readonly objectStorage: ObjectStorage;
+}): AuthorizedObjectReader;
+/** Reject recombining an authorized reader with any other execution authority. */
+export declare function assertAuthorizedObjectReaderBinding(input: {
+    readonly reader: AuthorizedObjectReader;
+    readonly scope: ExecutionScope;
+}): void;
+/** Return inert metadata projected from the exact authority already owned by the reader. */
+export declare function getAuthorizedOntologyView(reader: AuthorizedObjectReader): AuthorizedOntologyView;
+export {};
+//# sourceMappingURL=authorized-object-reader.d.ts.map

package/dist/execution/authorized-object-reader.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"authorized-object-reader.d.ts","sourceRoot":"","sources":["../../src/execution/authorized-object-reader.ts"],"names":[],"mappings":"AAGA,OAAO,EAEL,KAAK,sBAAsB,EAE5B,MAAM,qCAAqC,CAAA;AAC5C,OAAO,EAEL,KAAK,uBAAuB,EAC5B,KAAK,wBAAwB,EAC7B,KAAK,wBAAwB,EAC7B,KAAK,yBAAyB,EAC9B,KAAK,wBAAwB,EAC7B,KAAK,yBAAyB,EAC9B,KAAK,uBAAuB,EAC5B,KAAK,4BAA4B,EACjC,KAAK,6BAA6B,EAClC,KAAK,wBAAwB,EAK9B,MAAM,kBAAkB,CAAA;AAczB,OAAO,EAEL,KAAK,6BAA6B,EAClC,KAAK,iCAAiC,EACvC,MAAM,+BAA+B,CAAA;AACtC,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAA;AACnD,OAAO,KAAK,EAKV,iBAAiB,EACjB,aAAa,EACd,MAAM,YAAY,CAAA;AAEnB,OAAO,EAAyB,kCAAkC,EAAE,MAAM,iBAAiB,CAAA;AAC3F,OAAO,KAAK,EAAE,cAAc,EAAwB,MAAM,SAAS,CAAA;AAQnE,KAAK,0BAA0B,GAAG,UAAU,CAAC,OAAO,kCAAkC,CAAC,CAAA;AACvF,KAAK,cAAc,GAAG,IAAI,CAAC,UAAU,CAAC,iBAAiB,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,WAAW,CAAC,CAAA;AAC3F,KAAK,eAAe,GAAG,IAAI,CAAC,UAAU,CAAC,iBAAiB,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,WAAW,CAAC,CAAA;AACjG,KAAK,2BAA2B,GAAG,UAAU,CAAC,iBAAiB,CAAC,yBAAyB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;AAC9F,KAAK,0BAA0B,GAAG,2BAA2B,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,CAAA;AAC9E,KAAK,iCAAiC,GAAG,IAAI,CAAC,2BAA2B,EAAE,WAAW,CAAC,CAAA;AACvF,KAAK,gBAAgB,GAAG,IAAI,CAAC,UAAU,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,WAAW,CAAC,CAAA;AACnF,KAAK,cAAc,GAAG,IAAI,CAAC,UAAU,CAAC,iBAAiB,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,WAAW,CAAC,CAAA;AACtF,KAAK,mBAAmB,GAAG,IAAI,CAAC,UAAU,CAAC,iBAAiB,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,WAAW,CAAC,CAAA;AAEhG,QAAA,MAAM,qBAAqB,cAAoB,CAAA;AAE/C;;;;;;GAMG;AACH,cAAM,0BAA0B;;gBAY5B,GAAG,EAAE,OAAO,qBAAqB,EACjC,KAAK,EAAE;QACL,QAAQ,CAAC,KAAK,EAAE,cAAc,CAAA;QAC9B,QAAQ,CAAC,QAAQ,EAAE,gBAAgB,CAAA;QACnC,QAAQ,CAAC,OAAO,EAAE,iBAAiB,CAAA;QACnC,QAAQ,CAAC,SAAS,EAAE,0BAA0B,CAAA;KAC/C;IA6BH,MAAM,CAAC,WAAW,CAAC,MAAM,EAAE,0BAA0B,EAAE,KAAK,EAAE,cAAc,GAAG,IAAI;IAUnF,MAAM,CAAC,YAAY,CAAC,MAAM,EAAE,0BAA0B,GAAG,sBAAsB;IAe/E,kEAAkE;IAClE,IAAI,SAAS,IAAI,MAAM,CAEtB;IAEK,cAAc,CAAC,KAAK,EAAE,cAAc,GAAG,UAAU,CAAC,iBAAiB,CAAC,gBAAgB,CAAC,CAAC;IActF,mBAAmB,CACvB,KAAK,EAAE,eAAe,GACrB,UAAU,CAAC,iBAAiB,CAAC,qBAAqB,CAAC,CAAC;IAgBjD,qBAAqB,CAAC,KAAK,EAAE,0BAA0B,GAAG,OAAO,CAAC,OAAO,CAAC;IAe1E,4BAA4B,CAChC,KAAK,EAAE,iCAAiC,GACvC,OAAO,CAAC,SAAS,OAAO,EAAE,CAAC;IAkBxB,IAAI,CAAC,KAAK,EAAE,gBAAgB,GAAG,UAAU,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAC;IAoCpE,SAAS,CAAC,KAAK,EAAE,cAAc,GAAG,UAAU,CAAC,iBAAiB,CAAC,WAAW,CAAC,CAAC;IAiB5E,cAAc,CAClB,KAAK,EAAE,mBAAmB,GACzB,UAAU,CAAC,iBAAiB,CAAC,gBAAgB,CAAC,CAAC;IA0B5C,YAAY,CAChB,KAAK,EAAE,IAAI,CAAC,uBAAuB,EAAE,WAAW,CAAC,GAChD,OAAO,CAAC,wBAAwB,CAAC;IAgB9B,UAAU,CACd,KAAK,EAAE,IAAI,CAAC,4BAA4B,EAAE,WAAW,CAAC,GACrD,OAAO,CAAC,6BAA6B,CAAC;IAgDnC,KAAK,CACT,KAAK,EAAE,IAAI,CAAC,uBAAuB,EAAE,WAAW,CAAC,GAChD,OAAO,CAAC,wBAAwB,CAAC;IAW9B,MAAM,CACV,KAAK,EAAE,IAAI,CAAC,wBAAwB,EAAE,WAAW,CAAC,GACjD,OAAO,CAAC,yBAAyB,CAAC;IAW/B,KAAK,CACT,KAAK,EAAE,IAAI,CAAC,wBAAwB,EAAE,WAAW,CAAC,GACjD,OAAO,CAAC,yBAAyB,CAAC;IAyCrC,wFAAwF;IACxF,8BAA8B,CAAC,KAAK,EAAE,OAAO,GAAG,IAAI;IAKpD,0FAA0F;IAC1F,yBAAyB,CACvB,KAAK,EAAE,iCAAiC,GACvC,6BAA6B;CAqFjC;AAKD,MAAM,MAAM,sBAAsB,GAAG,0BAA0B,CAAA;AAE/D,0FAA0F;AAC1F,wBAAgB,4BAA4B,CAAC,KAAK,EAAE;IAClD,QAAQ,CAAC,KAAK,EAAE,cAAc,CAAA;IAC9B,QAAQ,CAAC,QAAQ,EAAE,gBAAgB,CAAA;IACnC,QAAQ,CAAC,aAAa,EAAE,aAAa,CAAA;CACtC,GAAG,sBAAsB,CAazB;AAED,kFAAkF;AAClF,wBAAgB,mCAAmC,CAAC,KAAK,EAAE;IACzD,QAAQ,CAAC,MAAM,EAAE,sBAAsB,CAAA;IACvC,QAAQ,CAAC,KAAK,EAAE,cAAc,CAAA;CAC/B,GAAG,IAAI,CAEP;AAED,4FAA4F;AAC5F,wBAAgB,yBAAyB,CAAC,MAAM,EAAE,sBAAsB,GAAG,sBAAsB,CAEhG"}

package/dist/execution/durable.d.ts

@@ -21,6 +21,7 @@ type PrimitiveExecutionOrigin = {
     }>;
     readonly correlationId: string;
     readonly requestedBy?: CreateExecutionInput["requestedBy"];
+    readonly requesterGroupIds?: readonly string[];
 };
 /** Build an immutable primitive execution from its parent execution or automatic trigger. */
 export declare function createPrimitiveExecutionRecord(input: {

package/dist/execution/durable.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"durable.d.ts","sourceRoot":"","sources":["../../src/execution/durable.ts"],"names":[],"mappings":"AACA,OAAO,EACL,KAAK,oBAAoB,EACzB,KAAK,eAAe,EACpB,KAAK,gBAAgB,EAEtB,MAAM,uBAAuB,CAAA;AAE9B,OAAO,KAAK,EACV,gBAAgB,EAChB,cAAc,EACd,oBAAoB,EACpB,mBAAmB,EACpB,MAAM,SAAS,CAAA;AAEhB,sFAAsF;AACtF,wBAAgB,+BAA+B,CAAC,KAAK,EAAE;IACrD,QAAQ,CAAC,SAAS,EAAE,gBAAgB,CAAA;IACpC,QAAQ,CAAC,oBAAoB,EAAE,oBAAoB,CAAA;CACpD,GAAG,oBAAoB,CAavB;AAED;;;GAGG;AACH,wBAAsB,qBAAqB,CACzC,OAAO,EAAE,gBAAgB,EACzB,KAAK,EAAE,oBAAoB,GAC1B,OAAO,CAAC,eAAe,CAAC,CAmB1B;AAED,KAAK,wBAAwB,GACzB;IACE,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAA;IAC1B,QAAQ,CAAC,MAAM,EAAE,eAAe,CAAA;CACjC,GACD;IACE,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAA;IAC1B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,MAAM,EAAE,OAAO,CACtB,oBAAoB,CAAC,QAAQ,CAAC,EAC9B;QAAE,QAAQ,CAAC,IAAI,EAAE,UAAU,GAAG,OAAO,GAAG,gBAAgB,GAAG,SAAS,CAAA;KAAE,CACvE,CAAA;IACD,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAA;IAC9B,QAAQ,CAAC,WAAW,CAAC,EAAE,oBAAoB,CAAC,aAAa,CAAC,CAAA;CAC3D,CAAA;AAEL,6FAA6F;AAC7F,wBAAgB,8BAA8B,CAAC,KAAK,EAAE;IACpD,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;IACnB,QAAQ,CAAC,SAAS,EAAE,mBAAmB,CAAA;IACvC,QAAQ,CAAC,MAAM,EAAE,wBAAwB,CAAA;CAC1C,GAAG,oBAAoB,CAiCvB;AAED,oFAAoF;AACpF,wBAAgB,qCAAqC,CAAC,KAAK,EAAE;IAC3D,QAAQ,CAAC,SAAS,EAAE,eAAe,CAAA;IACnC,QAAQ,CAAC,SAAS,EAAE,mBAAmB,CAAA;CACxC,GAAG,cAAc,CAmBjB"}
+{"version":3,"file":"durable.d.ts","sourceRoot":"","sources":["../../src/execution/durable.ts"],"names":[],"mappings":"AACA,OAAO,EACL,KAAK,oBAAoB,EACzB,KAAK,eAAe,EACpB,KAAK,gBAAgB,EAEtB,MAAM,uBAAuB,CAAA;AAM9B,OAAO,KAAK,EACV,gBAAgB,EAChB,cAAc,EACd,oBAAoB,EACpB,mBAAmB,EACpB,MAAM,SAAS,CAAA;AAEhB,sFAAsF;AACtF,wBAAgB,+BAA+B,CAAC,KAAK,EAAE;IACrD,QAAQ,CAAC,SAAS,EAAE,gBAAgB,CAAA;IACpC,QAAQ,CAAC,oBAAoB,EAAE,oBAAoB,CAAA;CACpD,GAAG,oBAAoB,CAiBvB;AAED;;;GAGG;AACH,wBAAsB,qBAAqB,CACzC,OAAO,EAAE,gBAAgB,EACzB,KAAK,EAAE,oBAAoB,GAC1B,OAAO,CAAC,eAAe,CAAC,CAmB1B;AAED,KAAK,wBAAwB,GACzB;IACE,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAA;IAC1B,QAAQ,CAAC,MAAM,EAAE,eAAe,CAAA;CACjC,GACD;IACE,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAA;IAC1B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,MAAM,EAAE,OAAO,CACtB,oBAAoB,CAAC,QAAQ,CAAC,EAC9B;QAAE,QAAQ,CAAC,IAAI,EAAE,UAAU,GAAG,OAAO,GAAG,gBAAgB,GAAG,SAAS,CAAA;KAAE,CACvE,CAAA;IACD,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAA;IAC9B,QAAQ,CAAC,WAAW,CAAC,EAAE,oBAAoB,CAAC,aAAa,CAAC,CAAA;IAC1D,QAAQ,CAAC,iBAAiB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;CAC/C,CAAA;AAEL,6FAA6F;AAC7F,wBAAgB,8BAA8B,CAAC,KAAK,EAAE;IACpD,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;IACnB,QAAQ,CAAC,SAAS,EAAE,mBAAmB,CAAA;IACvC,QAAQ,CAAC,MAAM,EAAE,wBAAwB,CAAA;CAC1C,GAAG,oBAAoB,CAqCvB;AAED,oFAAoF;AACpF,wBAAgB,qCAAqC,CAAC,KAAK,EAAE;IAC3D,QAAQ,CAAC,SAAS,EAAE,eAAe,CAAA;IACnC,QAAQ,CAAC,SAAS,EAAE,mBAAmB,CAAA;CACxC,GAAG,cAAc,CAmBjB"}

package/dist/execution/index.d.ts

@@ -1,2 +1,2 @@
-export type { AuthorizablePrincipal, AuthorizationRef, ExecutionContext, ExecutionExecutor, ExecutionScope, ExecutionSource, KernelOperation, RuntimeAuthorization, TrustedPrimitiveKind, TrustedPrimitiveRef, } from "./types";
+export type { AuthorizablePrincipal, AuthorizationRef, ExecutionContext, ExecutionExecutor, ExecutionScope, ExecutionSource, KernelOperation, RuntimeAuthorization, SharedAccessDelegationRef, TrustedPrimitiveKind, TrustedPrimitiveRef, } from "./types";
 //# sourceMappingURL=index.d.ts.map

package/dist/execution/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/execution/index.ts"],"names":[],"mappings":"AAAA,YAAY,EACV,qBAAqB,EACrB,gBAAgB,EAChB,gBAAgB,EAChB,iBAAiB,EACjB,cAAc,EACd,eAAe,EACf,eAAe,EACf,oBAAoB,EACpB,oBAAoB,EACpB,mBAAmB,GACpB,MAAM,SAAS,CAAA"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/execution/index.ts"],"names":[],"mappings":"AAAA,YAAY,EACV,qBAAqB,EACrB,gBAAgB,EAChB,gBAAgB,EAChB,iBAAiB,EACjB,cAAc,EACd,eAAe,EACf,eAAe,EACf,oBAAoB,EACpB,yBAAyB,EACzB,oBAAoB,EACpB,mBAAmB,GACpB,MAAM,SAAS,CAAA"}

package/dist/execution/primitive.d.ts

@@ -1,3 +1,4 @@
+import { type ModelExecutionAttempt } from "../models/execution/binding";
 import type { OntologySource } from "../ontology";
 import type { OntologyMutationRuntime } from "../runtime/ontology-mutations";
 import { type Sixb } from "../runtime/sixb";
@@ -17,5 +18,6 @@ export interface BoundPrimitiveExecution {
 export declare function bindDurablePrimitiveExecution(host: PrimitiveExecutionHost, input: {
     readonly execution: ExecutionRecord;
     readonly primitive: TrustedPrimitiveRef;
+    readonly modelExecution?: ModelExecutionAttempt;
 }): BoundPrimitiveExecution;
 //# sourceMappingURL=primitive.d.ts.map

package/dist/execution/primitive.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"primitive.d.ts","sourceRoot":"","sources":["../../src/execution/primitive.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,aAAa,CAAA;AACjD,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,+BAA+B,CAAA;AAE5E,OAAO,EAAe,KAAK,IAAI,EAAE,MAAM,iBAAiB,CAAA;AACxD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAA;AAE5D,OAAO,KAAK,EAAE,cAAc,EAAE,mBAAmB,EAAE,MAAM,SAAS,CAAA;AAElE,mEAAmE;AACnE,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;IACnB,SAAS,CAAC,KAAK,EAAE,cAAc,GAAG,MAAM,CAAA;CACzC;AAED,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,cAAc,EAAE,CAAC,CAAA;IAC9C,8EAA8E;IAC9E,QAAQ,CAAC,iBAAiB,EAAE,uBAAuB,CAAA;CACpD;AAED,2FAA2F;AAC3F,wBAAgB,6BAA6B,CAC3C,IAAI,EAAE,sBAAsB,EAC5B,KAAK,EAAE;IACL,QAAQ,CAAC,SAAS,EAAE,eAAe,CAAA;IACnC,QAAQ,CAAC,SAAS,EAAE,mBAAmB,CAAA;CACxC,GACA,uBAAuB,CAEzB"}
+{"version":3,"file":"primitive.d.ts","sourceRoot":"","sources":["../../src/execution/primitive.ts"],"names":[],"mappings":"AAAA,OAAO,EAA6B,KAAK,qBAAqB,EAAE,MAAM,6BAA6B,CAAA;AACnG,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,aAAa,CAAA;AACjD,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,+BAA+B,CAAA;AAE5E,OAAO,EAAe,KAAK,IAAI,EAAE,MAAM,iBAAiB,CAAA;AACxD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAA;AAE5D,OAAO,KAAK,EAAE,cAAc,EAAE,mBAAmB,EAAE,MAAM,SAAS,CAAA;AAElE,mEAAmE;AACnE,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;IACnB,SAAS,CAAC,KAAK,EAAE,cAAc,GAAG,MAAM,CAAA;CACzC;AAED,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,cAAc,EAAE,CAAC,CAAA;IAC9C,8EAA8E;IAC9E,QAAQ,CAAC,iBAAiB,EAAE,uBAAuB,CAAA;CACpD;AAED,2FAA2F;AAC3F,wBAAgB,6BAA6B,CAC3C,IAAI,EAAE,sBAAsB,EAC5B,KAAK,EAAE;IACL,QAAQ,CAAC,SAAS,EAAE,eAAe,CAAA;IACnC,QAAQ,CAAC,SAAS,EAAE,mBAAmB,CAAA;IACvC,QAAQ,CAAC,cAAc,CAAC,EAAE,qBAAqB,CAAA;CAChD,GACA,uBAAuB,CAIzB"}