@sixb/core 0.1.7 → 0.1.9

package/dist/{chunk-hdz94br2.js → chunk-17kfctj6.js}

@@ -1,16 +1,21 @@
 // @bun
-import {
-  ExecutionStorageError
-} from "./chunk-gbrpsx4m.js";
 import {
   createTrustedPrimitiveRuntimeAuthorization,
-  getAuthorizationRef
-} from "./chunk-37wk412q.js";
+  getAuthorizationRef,
+  resolveExecutionScopeAuthorization
+} from "./chunk-dz5h08xv.js";
+import {
+  ExecutionStorageError2
+} from "./chunk-93csa55g.js";
 
 // src/execution/durable.ts
 import { isDeepStrictEqual } from "util";
 function executionRecordInputFromRuntime(input) {
   const execution = input.execution;
+  resolveExecutionScopeAuthorization(execution.projectId, {
+    execution,
+    authorization: input.runtimeAuthorization
+  });
   return {
     id: execution.id,
     projectId: execution.projectId,
@@ -21,7 +26,7 @@ function executionRecordInputFromRuntime(input) {
     authorizationRef: getAuthorizationRef(input.runtimeAuthorization)
   };
 }
-async function ensureExecutionRecord(storage, input) {
+async function ensureExecutionRecord2(storage, input) {
   const existing = await storage.getById({ projectId: input.projectId, id: input.id });
   if (existing) {
     assertExecutionRecordMatches(existing, input);
@@ -30,7 +35,7 @@ async function ensureExecutionRecord(storage, input) {
   try {
     return await storage.create(input);
   } catch (error) {
-    if (!(error instanceof ExecutionStorageError) || error.code !== "duplicate_execution") {
+    if (!(error instanceof ExecutionStorageError2) || error.code !== "duplicate_execution") {
       throw error;
     }
     const raced = await storage.getById({ projectId: input.projectId, id: input.id });
@@ -43,11 +48,13 @@ async function ensureExecutionRecord(storage, input) {
 function createPrimitiveExecutionRecord(input) {
   const provenance = input.origin.type === "execution" ? {
     projectId: input.origin.parent.projectId,
+    requesterGroupIds: [...input.origin.parent.requesterGroupIds],
     ...input.origin.parent.requestedBy === undefined ? {} : { requestedBy: structuredClone(input.origin.parent.requestedBy) },
     source: { type: "execution", executionId: input.origin.parent.id },
     correlationId: input.origin.parent.correlationId
   } : {
     projectId: input.origin.projectId,
+    ...input.origin.requesterGroupIds === undefined ? {} : { requesterGroupIds: [...input.origin.requesterGroupIds] },
     ...input.origin.requestedBy === undefined ? {} : { requestedBy: structuredClone(input.origin.requestedBy) },
     source: structuredClone(input.origin.source),
     correlationId: input.origin.correlationId
@@ -79,7 +86,7 @@ function restoreTrustedPrimitiveExecutionScope(input) {
   return Object.freeze({
     execution: context,
     authorization: createTrustedPrimitiveRuntimeAuthorization({
-      projectId: input.execution.projectId,
+      execution: context,
       primitive: input.primitive
     })
   });
@@ -102,17 +109,20 @@ function durableExecutor(execution) {
 }
 function assertExecutionRecordMatches(existing, input) {
   const { createdAt: _createdAt, ...stored } = existing;
-  if (!isDeepStrictEqual(stored, input)) {
-    throw new ExecutionStorageError("duplicate_execution", `[Sixb] Execution '${input.id}' already exists with different immutable provenance.`);
+  if (!isDeepStrictEqual(stored, {
+    ...input,
+    requesterGroupIds: input.requesterGroupIds ?? stored.requesterGroupIds
+  })) {
+    throw new ExecutionStorageError2("duplicate_execution", `[Sixb] Execution '${input.id}' already exists with different immutable provenance.`);
   }
 }
 function assertPrimitiveExecution(execution, primitive) {
   const authority = execution.authorizationRef;
   if (execution.executor.type !== "primitive" || execution.executor.kind !== primitive.kind || execution.executor.runId !== primitive.runId || authority.type !== "trustedPrimitive" || authority.primitive.kind !== primitive.kind || authority.primitive.id !== primitive.id || authority.primitive.runId !== primitive.runId) {
-    throw new ExecutionStorageError("invalid_input", `[Sixb] Execution '${execution.id}' does not authorize ${primitive.kind} run '${primitive.runId}'.`);
+    throw new ExecutionStorageError2("invalid_input", `[Sixb] Execution '${execution.id}' does not authorize ${primitive.kind} run '${primitive.runId}'.`);
   }
 }
 
-export { executionRecordInputFromRuntime, ensureExecutionRecord, createPrimitiveExecutionRecord, restoreTrustedPrimitiveExecutionScope };
+export { executionRecordInputFromRuntime, ensureExecutionRecord2, createPrimitiveExecutionRecord, restoreTrustedPrimitiveExecutionScope };
 
-//# debugId=FD635CE58B49306C64756E2164756E21
+//# debugId=100DAA50343550BA64756E2164756E21

package/dist/chunk-17kfctj6.js.map

@@ -0,0 +1,10 @@
+{
+  "version": 3,
+  "sources": ["../src/execution/durable.ts"],
+  "sourcesContent": [
+    "import { isDeepStrictEqual } from \"node:util\"\nimport {\n  type CreateExecutionInput,\n  type ExecutionRecord,\n  type ExecutionStorage,\n  ExecutionStorageError,\n} from \"../storage/executions\"\nimport {\n  createTrustedPrimitiveRuntimeAuthorization,\n  getAuthorizationRef,\n  resolveExecutionScopeAuthorization,\n} from \"./authorization\"\nimport type {\n  ExecutionContext,\n  ExecutionScope,\n  RuntimeAuthorization,\n  TrustedPrimitiveRef,\n} from \"./types\"\n\n/** Convert one currently bound execution to the immutable provider representation. */\nexport function executionRecordInputFromRuntime(input: {\n  readonly execution: ExecutionContext\n  readonly runtimeAuthorization: RuntimeAuthorization\n}): CreateExecutionInput {\n  const execution = input.execution\n  resolveExecutionScopeAuthorization(execution.projectId, {\n    execution,\n    authorization: input.runtimeAuthorization,\n  })\n  return {\n    id: execution.id,\n    projectId: execution.projectId,\n    ...(execution.requestedBy === undefined\n      ? {}\n      : { requestedBy: structuredClone(execution.requestedBy) }),\n    executor: durableExecutor(execution),\n    source: structuredClone(execution.source),\n    correlationId: execution.correlationId,\n    authorizationRef: getAuthorizationRef(input.runtimeAuthorization),\n  }\n}\n\n/**\n * Store a caller execution once. Repeated boundaries may observe the same immutable execution;\n * only an exact match is idempotent.\n */\nexport async function ensureExecutionRecord(\n  storage: ExecutionStorage,\n  input: CreateExecutionInput\n): Promise<ExecutionRecord> {\n  const existing = await storage.getById({ projectId: input.projectId, id: input.id })\n  if (existing) {\n    assertExecutionRecordMatches(existing, input)\n    return existing\n  }\n\n  try {\n    return await storage.create(input)\n  } catch (error) {\n    if (!(error instanceof ExecutionStorageError) || error.code !== \"duplicate_execution\") {\n      throw error\n    }\n\n    const raced = await storage.getById({ projectId: input.projectId, id: input.id })\n    if (!raced) throw error\n    assertExecutionRecordMatches(raced, input)\n    return raced\n  }\n}\n\ntype PrimitiveExecutionOrigin =\n  | {\n      readonly type: \"execution\"\n      readonly parent: ExecutionRecord\n    }\n  | {\n      readonly type: \"automatic\"\n      readonly projectId: string\n      readonly source: Extract<\n        CreateExecutionInput[\"source\"],\n        { readonly type: \"schedule\" | \"event\" | \"datasetVersion\" | \"webhook\" }\n      >\n      readonly correlationId: string\n      readonly requestedBy?: CreateExecutionInput[\"requestedBy\"]\n      readonly requesterGroupIds?: readonly string[]\n    }\n\n/** Build an immutable primitive execution from its parent execution or automatic trigger. */\nexport function createPrimitiveExecutionRecord(input: {\n  readonly id: string\n  readonly primitive: TrustedPrimitiveRef\n  readonly origin: PrimitiveExecutionOrigin\n}): CreateExecutionInput {\n  const provenance =\n    input.origin.type === \"execution\"\n      ? {\n          projectId: input.origin.parent.projectId,\n          requesterGroupIds: [...input.origin.parent.requesterGroupIds],\n          ...(input.origin.parent.requestedBy === undefined\n            ? {}\n            : { requestedBy: structuredClone(input.origin.parent.requestedBy) }),\n          source: { type: \"execution\" as const, executionId: input.origin.parent.id },\n          correlationId: input.origin.parent.correlationId,\n        }\n      : {\n          projectId: input.origin.projectId,\n          ...(input.origin.requesterGroupIds === undefined\n            ? {}\n            : { requesterGroupIds: [...input.origin.requesterGroupIds] }),\n          ...(input.origin.requestedBy === undefined\n            ? {}\n            : { requestedBy: structuredClone(input.origin.requestedBy) }),\n          source: structuredClone(input.origin.source),\n          correlationId: input.origin.correlationId,\n        }\n\n  return {\n    id: input.id,\n    ...provenance,\n    executor: {\n      type: \"primitive\",\n      kind: input.primitive.kind,\n      runId: input.primitive.runId,\n    },\n    authorizationRef: {\n      type: \"trustedPrimitive\",\n      primitive: structuredClone(input.primitive),\n    },\n  }\n}\n\n/** Restore the trusted scope of a provider-validated primitive execution record. */\nexport function restoreTrustedPrimitiveExecutionScope(input: {\n  readonly execution: ExecutionRecord\n  readonly primitive: TrustedPrimitiveRef\n}): ExecutionScope {\n  assertPrimitiveExecution(input.execution, input.primitive)\n  const context: ExecutionContext = Object.freeze({\n    id: input.execution.id,\n    projectId: input.execution.projectId,\n    ...(input.execution.requestedBy === undefined\n      ? {}\n      : { requestedBy: Object.freeze(structuredClone(input.execution.requestedBy)) }),\n    executor: Object.freeze({ type: \"primitive\", ...structuredClone(input.primitive) }),\n    source: Object.freeze(structuredClone(input.execution.source)),\n    correlationId: input.execution.correlationId,\n  })\n  return Object.freeze({\n    execution: context,\n    authorization: createTrustedPrimitiveRuntimeAuthorization({\n      execution: context,\n      primitive: input.primitive,\n    }),\n  })\n}\n\nfunction durableExecutor(execution: ExecutionContext): CreateExecutionInput[\"executor\"] {\n  switch (execution.executor.type) {\n    case \"request\":\n      return { type: \"request\", requestId: execution.executor.requestId }\n    case \"primitive\":\n      return {\n        type: \"primitive\",\n        kind: execution.executor.kind,\n        runId: execution.executor.runId,\n      }\n    case \"agent\":\n      return { type: \"agent\", runId: execution.executor.runId }\n    case \"kernel\":\n      return { type: \"kernel\", operation: structuredClone(execution.executor.operation) }\n  }\n}\n\nfunction assertExecutionRecordMatches(\n  existing: ExecutionRecord,\n  input: CreateExecutionInput\n): void {\n  const { createdAt: _createdAt, ...stored } = existing\n  if (\n    !isDeepStrictEqual(stored, {\n      ...input,\n      requesterGroupIds: input.requesterGroupIds ?? stored.requesterGroupIds,\n    })\n  ) {\n    throw new ExecutionStorageError(\n      \"duplicate_execution\",\n      `[Sixb] Execution '${input.id}' already exists with different immutable provenance.`\n    )\n  }\n}\n\nfunction assertPrimitiveExecution(\n  execution: ExecutionRecord,\n  primitive: TrustedPrimitiveRef\n): void {\n  const authority = execution.authorizationRef\n  if (\n    execution.executor.type !== \"primitive\" ||\n    execution.executor.kind !== primitive.kind ||\n    execution.executor.runId !== primitive.runId ||\n    authority.type !== \"trustedPrimitive\" ||\n    authority.primitive.kind !== primitive.kind ||\n    authority.primitive.id !== primitive.id ||\n    authority.primitive.runId !== primitive.runId\n  ) {\n    throw new ExecutionStorageError(\n      \"invalid_input\",\n      `[Sixb] Execution '${execution.id}' does not authorize ${primitive.kind} run '${primitive.runId}'.`\n    )\n  }\n}\n"
+  ],
+  "mappings": ";;;;;;;;;;;AAAA;AAoBO,SAAS,+BAA+B,CAAC,OAGvB;AAAA,EACvB,MAAM,YAAY,MAAM;AAAA,EACxB,mCAAmC,UAAU,WAAW;AAAA,IACtD;AAAA,IACA,eAAe,MAAM;AAAA,EACvB,CAAC;AAAA,EACD,OAAO;AAAA,IACL,IAAI,UAAU;AAAA,IACd,WAAW,UAAU;AAAA,OACjB,UAAU,gBAAgB,YAC1B,CAAC,IACD,EAAE,aAAa,gBAAgB,UAAU,WAAW,EAAE;AAAA,IAC1D,UAAU,gBAAgB,SAAS;AAAA,IACnC,QAAQ,gBAAgB,UAAU,MAAM;AAAA,IACxC,eAAe,UAAU;AAAA,IACzB,kBAAkB,oBAAoB,MAAM,oBAAoB;AAAA,EAClE;AAAA;AAOF,eAAsB,sBAAqB,CACzC,SACA,OAC0B;AAAA,EAC1B,MAAM,WAAW,MAAM,QAAQ,QAAQ,EAAE,WAAW,MAAM,WAAW,IAAI,MAAM,GAAG,CAAC;AAAA,EACnF,IAAI,UAAU;AAAA,IACZ,6BAA6B,UAAU,KAAK;AAAA,IAC5C,OAAO;AAAA,EACT;AAAA,EAEA,IAAI;AAAA,IACF,OAAO,MAAM,QAAQ,OAAO,KAAK;AAAA,IACjC,OAAO,OAAO;AAAA,IACd,IAAI,EAAE,iBAAiB,2BAA0B,MAAM,SAAS,uBAAuB;AAAA,MACrF,MAAM;AAAA,IACR;AAAA,IAEA,MAAM,QAAQ,MAAM,QAAQ,QAAQ,EAAE,WAAW,MAAM,WAAW,IAAI,MAAM,GAAG,CAAC;AAAA,IAChF,IAAI,CAAC;AAAA,MAAO,MAAM;AAAA,IAClB,6BAA6B,OAAO,KAAK;AAAA,IACzC,OAAO;AAAA;AAAA;AAsBJ,SAAS,8BAA8B,CAAC,OAItB;AAAA,EACvB,MAAM,aACJ,MAAM,OAAO,SAAS,cAClB;AAAA,IACE,WAAW,MAAM,OAAO,OAAO;AAAA,IAC/B,mBAAmB,CAAC,GAAG,MAAM,OAAO,OAAO,iBAAiB;AAAA,OACxD,MAAM,OAAO,OAAO,gBAAgB,YACpC,CAAC,IACD,EAAE,aAAa,gBAAgB,MAAM,OAAO,OAAO,WAAW,EAAE;AAAA,IACpE,QAAQ,EAAE,MAAM,aAAsB,aAAa,MAAM,OAAO,OAAO,GAAG;AAAA,IAC1E,eAAe,MAAM,OAAO,OAAO;AAAA,EACrC,IACA;AAAA,IACE,WAAW,MAAM,OAAO;AAAA,OACpB,MAAM,OAAO,sBAAsB,YACnC,CAAC,IACD,EAAE,mBAAmB,CAAC,GAAG,MAAM,OAAO,iBAAiB,EAAE;AAAA,OACzD,MAAM,OAAO,gBAAgB,YAC7B,CAAC,IACD,EAAE,aAAa,gBAAgB,MAAM,OAAO,WAAW,EAAE;AAAA,IAC7D,QAAQ,gBAAgB,MAAM,OAAO,MAAM;AAAA,IAC3C,eAAe,MAAM,OAAO;AAAA,EAC9B;AAAA,EAEN,OAAO;AAAA,IACL,IAAI,MAAM;AAAA,OACP;AAAA,IACH,UAAU;AAAA,MACR,MAAM;AAAA,MACN,MAAM,MAAM,UAAU;AAAA,MACtB,OAAO,MAAM,UAAU;AAAA,IACzB;AAAA,IACA,kBAAkB;AAAA,MAChB,MAAM;AAAA,MACN,WAAW,gBAAgB,MAAM,SAAS;AAAA,IAC5C;AAAA,EACF;AAAA;AAIK,SAAS,qCAAqC,CAAC,OAGnC;AAAA,EACjB,yBAAyB,MAAM,WAAW,MAAM,SAAS;AAAA,EACzD,MAAM,UAA4B,OAAO,OAAO;AAAA,IAC9C,IAAI,MAAM,UAAU;AAAA,IACpB,WAAW,MAAM,UAAU;AAAA,OACvB,MAAM,UAAU,gBAAgB,YAChC,CAAC,IACD,EAAE,aAAa,OAAO,OAAO,gBAAgB,MAAM,UAAU,WAAW,CAAC,EAAE;AAAA,IAC/E,UAAU,OAAO,OAAO,EAAE,MAAM,gBAAgB,gBAAgB,MAAM,SAAS,EAAE,CAAC;AAAA,IAClF,QAAQ,OAAO,OAAO,gBAAgB,MAAM,UAAU,MAAM,CAAC;AAAA,IAC7D,eAAe,MAAM,UAAU;AAAA,EACjC,CAAC;AAAA,EACD,OAAO,OAAO,OAAO;AAAA,IACnB,WAAW;AAAA,IACX,eAAe,2CAA2C;AAAA,MACxD,WAAW;AAAA,MACX,WAAW,MAAM;AAAA,IACnB,CAAC;AAAA,EACH,CAAC;AAAA;AAGH,SAAS,eAAe,CAAC,WAA+D;AAAA,EACtF,QAAQ,UAAU,SAAS;AAAA,SACpB;AAAA,MACH,OAAO,EAAE,MAAM,WAAW,WAAW,UAAU,SAAS,UAAU;AAAA,SAC/D;AAAA,MACH,OAAO;AAAA,QACL,MAAM;AAAA,QACN,MAAM,UAAU,SAAS;AAAA,QACzB,OAAO,UAAU,SAAS;AAAA,MAC5B;AAAA,SACG;AAAA,MACH,OAAO,EAAE,MAAM,SAAS,OAAO,UAAU,SAAS,MAAM;AAAA,SACrD;AAAA,MACH,OAAO,EAAE,MAAM,UAAU,WAAW,gBAAgB,UAAU,SAAS,SAAS,EAAE;AAAA;AAAA;AAIxF,SAAS,4BAA4B,CACnC,UACA,OACM;AAAA,EACN,QAAQ,WAAW,eAAe,WAAW;AAAA,EAC7C,IACE,CAAC,kBAAkB,QAAQ;AAAA,OACtB;AAAA,IACH,mBAAmB,MAAM,qBAAqB,OAAO;AAAA,EACvD,CAAC,GACD;AAAA,IACA,MAAM,IAAI,uBACR,uBACA,qBAAqB,MAAM,yDAC7B;AAAA,EACF;AAAA;AAGF,SAAS,wBAAwB,CAC/B,WACA,WACM;AAAA,EACN,MAAM,YAAY,UAAU;AAAA,EAC5B,IACE,UAAU,SAAS,SAAS,eAC5B,UAAU,SAAS,SAAS,UAAU,QACtC,UAAU,SAAS,UAAU,UAAU,SACvC,UAAU,SAAS,sBACnB,UAAU,UAAU,SAAS,UAAU,QACvC,UAAU,UAAU,OAAO,UAAU,MACrC,UAAU,UAAU,UAAU,UAAU,OACxC;AAAA,IACA,MAAM,IAAI,uBACR,iBACA,qBAAqB,UAAU,0BAA0B,UAAU,aAAa,UAAU,SAC5F;AAAA,EACF;AAAA;",
+  "debugId": "100DAA50343550BA64756E2164756E21",
+  "names": []
+}