@sixb/core 0.1.8 → 0.1.10

package/dist/chunk-8vj0rjgs.js.map

@@ -0,0 +1,15 @@
+{
+  "version": 3,
+  "sources": ["../src/storage/action-runs/idempotency.ts", "../src/storage/errors.ts", "../src/storage/file-upload-sessions/utils.ts", "../src/storage/pipeline-runs/idempotency.ts", "../src/storage/sync-runs/idempotency.ts", "../src/storage/transaction.ts"],
+  "sourcesContent": [
+    "import type { ActionSubject } from \"../../actions\"\nimport { stableJsonStringify } from \"../../json\"\nimport type {\n  ActionRunEffectsRecord,\n  ActionRunPhase,\n  ActionRunRecord,\n  ActionRunWritebackRecord,\n  FinishActionRunInput,\n  QueueActionRunInput,\n} from \"./types\"\n\nexport function actionSubjectsEqual(left: ActionSubject, right: ActionSubject): boolean {\n  if (left.kind !== right.kind) return false\n  if (left.kind === \"none\") return true\n  if (right.kind === \"none\") return false\n  return left.objectTypeId === right.objectTypeId && left.primaryId === right.primaryId\n}\n\nexport function actionRunParamsEqual(left: unknown, right: unknown): boolean {\n  return stableJsonStringify(left) === stableJsonStringify(right)\n}\n\nexport type ActionRunPhaseRecord = ActionRunWritebackRecord | ActionRunEffectsRecord\n\nexport function actionRunPhaseRecordsEqual(\n  left: ActionRunPhaseRecord,\n  right: ActionRunPhaseRecord\n): boolean {\n  return actionRunParamsEqual(stripPhaseRecordCompletedAt(left), stripPhaseRecordCompletedAt(right))\n}\n\nexport function finishActionRunPhase(\n  input: FinishActionRunInput,\n  current: ActionRunPhase | null | undefined\n): ActionRunPhase {\n  if (input.status === \"succeeded\") {\n    return input.phase ?? current ?? \"validation\"\n  }\n\n  return input.error.details.phase\n}\n\nexport function canRequeueActionRunAfterEnqueueFailure(\n  existing: ActionRunRecord,\n  input: QueueActionRunInput\n): boolean {\n  return (\n    existing.status === \"failed\" &&\n    existing.phase === \"enqueue\" &&\n    existing.executionId === input.executionId &&\n    existing.error?.retryable === true &&\n    existing.actionId === input.actionId &&\n    existing.idempotencyKey === input.idempotencyKey &&\n    actionSubjectsEqual(existing.subject, input.subject) &&\n    actionRunParamsEqual(existing.params, input.params)\n  )\n}\n\nexport function isTerminalActionRun(record: Pick<ActionRunRecord, \"status\">): boolean {\n  return (\n    record.status === \"succeeded\" || record.status === \"failed\" || record.status === \"cancelled\"\n  )\n}\n\nfunction stripPhaseRecordCompletedAt(\n  record: ActionRunPhaseRecord\n): Omit<ActionRunPhaseRecord, \"completedAt\"> {\n  const { completedAt: _completedAt, ...stableRecord } = record\n  return stableRecord\n}\n",
+    "/**\n * Thrown when a storage lookup by primary ID finds no matching object.\n * Carries structured context so callers can discriminate without string parsing.\n */\nexport class ObjectNotFoundError extends Error {\n  readonly name = \"ObjectNotFoundError\"\n\n  constructor(\n    readonly objectTypeId: string,\n    readonly primaryId: string,\n    readonly context: string\n  ) {\n    super(`[Sixb] ${context}: ${objectTypeId}:${primaryId}`)\n  }\n}\n\nexport class ObjectStorageError extends Error {\n  readonly name = \"ObjectStorageError\"\n}\n\nexport type StorageTransactionErrorCode =\n  | \"nested_transaction\"\n  | \"serialization_failure\"\n  | \"transaction_inactive\"\n\nexport interface StorageTransactionErrorOptions {\n  readonly cause?: unknown\n  readonly code?: StorageTransactionErrorCode\n}\n\nexport class StorageTransactionError extends Error {\n  readonly name = \"StorageTransactionError\"\n  readonly code?: StorageTransactionErrorCode\n  override readonly cause?: unknown\n\n  constructor(message: string, options: StorageTransactionErrorOptions = {}) {\n    super(message)\n    this.code = options.code\n    this.cause = options.cause\n  }\n}\n\nexport function isStorageSerializationFailure(error: unknown): boolean {\n  return error instanceof StorageTransactionError && error.code === \"serialization_failure\"\n}\n",
+    "import { randomUUID } from \"node:crypto\"\nimport type { Principal } from \"../../auth\"\nimport type { FileUploadSession } from \"./types\"\n\nexport const DEFAULT_FILE_UPLOAD_SESSION_TTL_MS = 60 * 60 * 1000\nexport const DEFAULT_FILE_UPLOAD_TERMINAL_SESSION_TTL_MS = 15 * 60 * 1000\n\nexport function createUploadExpiresAt(now = Date.now()): Date {\n  return new Date(now + DEFAULT_FILE_UPLOAD_SESSION_TTL_MS)\n}\n\nexport function createFileUploadId(): string {\n  return `upload_${randomUUID().replaceAll(\"-\", \"\")}`\n}\n\nexport function principalKey(principal: Principal): string {\n  return `${principal.type}:${principal.id}`\n}\n\nexport function isFileUploadSessionExpired(\n  session: FileUploadSession,\n  nowMs = Date.now()\n): boolean {\n  return session.status === \"pending\" && session.expiresAt.getTime() <= nowMs\n}\n\nexport function shouldDeleteFileUploadSession(session: FileUploadSession, nowMs: number): boolean {\n  if (isFileUploadSessionExpired(session, nowMs)) {\n    return true\n  }\n\n  return isTerminalFileUploadSessionExpired(session, nowMs)\n}\n\nexport function isTerminalFileUploadSessionExpired(\n  session: FileUploadSession,\n  nowMs: number\n): boolean {\n  if (session.status === \"pending\") {\n    return false\n  }\n\n  const terminalAt = session.completedAt ?? session.abortedAt\n  if (!terminalAt) {\n    return false\n  }\n\n  return terminalAt.getTime() + DEFAULT_FILE_UPLOAD_TERMINAL_SESSION_TTL_MS <= nowMs\n}\n",
+    "import type { PipelineRunRecord, QueuePipelineRunInput } from \"./types\"\n\nexport function canRequeuePipelineRunAfterEnqueueFailure(\n  existing: PipelineRunRecord,\n  input: QueuePipelineRunInput\n): boolean {\n  return (\n    existing.status === \"failed\" &&\n    existing.error?.code === \"queue.enqueue_failed\" &&\n    existing.error.retryable &&\n    existing.executionId === input.executionId &&\n    existing.pipelineId === input.pipelineId\n  )\n}\n",
+    "import type { QueueSyncRunInput, SyncRunRecord } from \"./types\"\n\nexport function canRequeueSyncRunAfterEnqueueFailure(\n  existing: SyncRunRecord,\n  input: QueueSyncRunInput\n): boolean {\n  return (\n    existing.status === \"failed\" &&\n    existing.error?.code === \"queue.enqueue_failed\" &&\n    existing.error.retryable &&\n    existing.executionId === input.executionId &&\n    existing.syncId === input.syncId &&\n    existing.datasetId === input.datasetId &&\n    existing.mode === input.mode &&\n    existing.expectedLatestVersionId === input.expectedLatestVersionId &&\n    existing.commitMessage === input.commitMessage\n  )\n}\n",
+    "import { StorageTransactionError } from \"./errors\"\nimport { createObjectOperationScope } from \"./operation-scope\"\nimport type { Storage } from \"./types\"\n\ntype ObjectLike = Record<PropertyKey, unknown>\n\nexport function createTransactionStorageProxy<T extends Storage>(\n  target: T,\n  isActive: () => boolean\n): T {\n  const proxies = new WeakMap<object, object>()\n  const objectStorage = createObjectOperationScope(target.objects, {\n    assertAvailable: () => assertTransactionActive(isActive),\n    run: async <TResult>(operation: () => Promise<TResult> | TResult): Promise<TResult> => {\n      assertTransactionActive(isActive)\n      return operation()\n    },\n  })\n\n  const wrap = <TValue extends object>(value: TValue): TValue => {\n    const existing = proxies.get(value)\n    if (existing) return existing as TValue\n\n    const proxy = new Proxy(value as ObjectLike, {\n      // The guard runs on property access and on call. Its purpose is to fail fast when a\n      // transaction handle (`tx`) leaks past the transaction's lifetime — using it afterward is a\n      // bug, not a recoverable state. Overhead is bounded: only the storage namespaces reachable\n      // from `tx` are wrapped (a handful), not the row/link data graph, and never per-record.\n      get(current, property, receiver) {\n        assertTransactionActive(isActive)\n        const result =\n          current === target && property === \"objects\"\n            ? objectStorage\n            : Reflect.get(current, property, receiver)\n        if (typeof result === \"function\") {\n          return (...args: unknown[]) => {\n            assertTransactionActive(isActive)\n            return result.apply(current, args)\n          }\n        }\n        if (result && typeof result === \"object\") {\n          return wrap(result)\n        }\n        return result\n      },\n    })\n\n    proxies.set(value, proxy)\n    return proxy as TValue\n  }\n\n  return wrap(target)\n}\n\nexport function assertTransactionActive(isActive: () => boolean): void {\n  if (!isActive()) {\n    throw new StorageTransactionError(\n      \"[Sixb] Transaction storage cannot be used after transaction completion.\",\n      { code: \"transaction_inactive\" }\n    )\n  }\n}\n\nexport function throwNestedStorageTransaction(): never {\n  throw new StorageTransactionError(\"[Sixb] Nested storage transactions are not supported yet.\", {\n    code: \"nested_transaction\",\n  })\n}\n"
+  ],
+  "mappings": ";;;;;;;;;AAWO,SAAS,oBAAmB,CAAC,MAAqB,OAA+B;AAAA,EACtF,IAAI,KAAK,SAAS,MAAM;AAAA,IAAM,OAAO;AAAA,EACrC,IAAI,KAAK,SAAS;AAAA,IAAQ,OAAO;AAAA,EACjC,IAAI,MAAM,SAAS;AAAA,IAAQ,OAAO;AAAA,EAClC,OAAO,KAAK,iBAAiB,MAAM,gBAAgB,KAAK,cAAc,MAAM;AAAA;AAGvE,SAAS,qBAAoB,CAAC,MAAe,OAAyB;AAAA,EAC3E,OAAO,qBAAoB,IAAI,MAAM,qBAAoB,KAAK;AAAA;AAKzD,SAAS,2BAA0B,CACxC,MACA,OACS;AAAA,EACT,OAAO,sBAAqB,4BAA4B,IAAI,GAAG,4BAA4B,KAAK,CAAC;AAAA;AAG5F,SAAS,qBAAoB,CAClC,OACA,SACgB;AAAA,EAChB,IAAI,MAAM,WAAW,aAAa;AAAA,IAChC,OAAO,MAAM,SAAS,WAAW;AAAA,EACnC;AAAA,EAEA,OAAO,MAAM,MAAM,QAAQ;AAAA;AAGtB,SAAS,uCAAsC,CACpD,UACA,OACS;AAAA,EACT,OACE,SAAS,WAAW,YACpB,SAAS,UAAU,aACnB,SAAS,gBAAgB,MAAM,eAC/B,SAAS,OAAO,cAAc,QAC9B,SAAS,aAAa,MAAM,YAC5B,SAAS,mBAAmB,MAAM,kBAClC,qBAAoB,SAAS,SAAS,MAAM,OAAO,KACnD,sBAAqB,SAAS,QAAQ,MAAM,MAAM;AAAA;AAI/C,SAAS,oBAAmB,CAAC,QAAkD;AAAA,EACpF,OACE,OAAO,WAAW,eAAe,OAAO,WAAW,YAAY,OAAO,WAAW;AAAA;AAIrF,SAAS,2BAA2B,CAClC,QAC2C;AAAA,EAC3C,QAAQ,aAAa,iBAAiB,iBAAiB;AAAA,EACvD,OAAO;AAAA;;;AChEF,MAAM,6BAA4B,MAAM;AAAA,EAIlC;AAAA,EACA;AAAA,EACA;AAAA,EALF,OAAO;AAAA,EAEhB,WAAW,CACA,cACA,WACA,SACT;AAAA,IACA,MAAM,UAAU,YAAY,gBAAgB,WAAW;AAAA,IAJ9C;AAAA,IACA;AAAA,IACA;AAAA;AAIb;AAAA;AAEO,MAAM,4BAA2B,MAAM;AAAA,EACnC,OAAO;AAClB;AAAA;AAYO,MAAM,iCAAgC,MAAM;AAAA,EACxC,OAAO;AAAA,EACP;AAAA,EACS;AAAA,EAElB,WAAW,CAAC,SAAiB,UAA0C,CAAC,GAAG;AAAA,IACzE,MAAM,OAAO;AAAA,IACb,KAAK,OAAO,QAAQ;AAAA,IACpB,KAAK,QAAQ,QAAQ;AAAA;AAEzB;AAEO,SAAS,8BAA6B,CAAC,OAAyB;AAAA,EACrE,OAAO,iBAAiB,4BAA2B,MAAM,SAAS;AAAA;;;AC3CpE;AAIO,IAAM,sCAAqC,KAAK,KAAK;AACrD,IAAM,+CAA8C,KAAK,KAAK;AAE9D,SAAS,sBAAqB,CAAC,MAAM,KAAK,IAAI,GAAS;AAAA,EAC5D,OAAO,IAAI,KAAK,MAAM,mCAAkC;AAAA;AAGnD,SAAS,mBAAkB,GAAW;AAAA,EAC3C,OAAO,UAAU,WAAW,EAAE,WAAW,KAAK,EAAE;AAAA;AAG3C,SAAS,YAAY,CAAC,WAA8B;AAAA,EACzD,OAAO,GAAG,UAAU,QAAQ,UAAU;AAAA;AAGjC,SAAS,0BAA0B,CACxC,SACA,QAAQ,KAAK,IAAI,GACR;AAAA,EACT,OAAO,QAAQ,WAAW,aAAa,QAAQ,UAAU,QAAQ,KAAK;AAAA;AAGjE,SAAS,6BAA6B,CAAC,SAA4B,OAAwB;AAAA,EAChG,IAAI,2BAA2B,SAAS,KAAK,GAAG;AAAA,IAC9C,OAAO;AAAA,EACT;AAAA,EAEA,OAAO,mCAAmC,SAAS,KAAK;AAAA;AAGnD,SAAS,kCAAkC,CAChD,SACA,OACS;AAAA,EACT,IAAI,QAAQ,WAAW,WAAW;AAAA,IAChC,OAAO;AAAA,EACT;AAAA,EAEA,MAAM,aAAa,QAAQ,eAAe,QAAQ;AAAA,EAClD,IAAI,CAAC,YAAY;AAAA,IACf,OAAO;AAAA,EACT;AAAA,EAEA,OAAO,WAAW,QAAQ,IAAI,gDAA+C;AAAA;;;AC7CxE,SAAS,yCAAwC,CACtD,UACA,OACS;AAAA,EACT,OACE,SAAS,WAAW,YACpB,SAAS,OAAO,SAAS,0BACzB,SAAS,MAAM,aACf,SAAS,gBAAgB,MAAM,eAC/B,SAAS,eAAe,MAAM;AAAA;;;ACT3B,SAAS,qCAAoC,CAClD,UACA,OACS;AAAA,EACT,OACE,SAAS,WAAW,YACpB,SAAS,OAAO,SAAS,0BACzB,SAAS,MAAM,aACf,SAAS,gBAAgB,MAAM,eAC/B,SAAS,WAAW,MAAM,UAC1B,SAAS,cAAc,MAAM,aAC7B,SAAS,SAAS,MAAM,QACxB,SAAS,4BAA4B,MAAM,2BAC3C,SAAS,kBAAkB,MAAM;AAAA;;;ACT9B,SAAS,8BAAgD,CAC9D,QACA,UACG;AAAA,EACH,MAAM,UAAU,IAAI;AAAA,EACpB,MAAM,gBAAgB,4BAA2B,OAAO,SAAS;AAAA,IAC/D,iBAAiB,MAAM,yBAAwB,QAAQ;AAAA,IACvD,KAAK,OAAgB,cAAkE;AAAA,MACrF,yBAAwB,QAAQ;AAAA,MAChC,OAAO,UAAU;AAAA;AAAA,EAErB,CAAC;AAAA,EAED,MAAM,OAAO,CAAwB,UAA0B;AAAA,IAC7D,MAAM,WAAW,QAAQ,IAAI,KAAK;AAAA,IAClC,IAAI;AAAA,MAAU,OAAO;AAAA,IAErB,MAAM,QAAQ,IAAI,MAAM,OAAqB;AAAA,MAK3C,GAAG,CAAC,SAAS,UAAU,UAAU;AAAA,QAC/B,yBAAwB,QAAQ;AAAA,QAChC,MAAM,SACJ,YAAY,UAAU,aAAa,YAC/B,gBACA,QAAQ,IAAI,SAAS,UAAU,QAAQ;AAAA,QAC7C,IAAI,OAAO,WAAW,YAAY;AAAA,UAChC,OAAO,IAAI,SAAoB;AAAA,YAC7B,yBAAwB,QAAQ;AAAA,YAChC,OAAO,OAAO,MAAM,SAAS,IAAI;AAAA;AAAA,QAErC;AAAA,QACA,IAAI,UAAU,OAAO,WAAW,UAAU;AAAA,UACxC,OAAO,KAAK,MAAM;AAAA,QACpB;AAAA,QACA,OAAO;AAAA;AAAA,IAEX,CAAC;AAAA,IAED,QAAQ,IAAI,OAAO,KAAK;AAAA,IACxB,OAAO;AAAA;AAAA,EAGT,OAAO,KAAK,MAAM;AAAA;AAGb,SAAS,wBAAuB,CAAC,UAA+B;AAAA,EACrE,IAAI,CAAC,SAAS,GAAG;AAAA,IACf,MAAM,IAAI,yBACR,2EACA,EAAE,MAAM,uBAAuB,CACjC;AAAA,EACF;AAAA;AAGK,SAAS,8BAA6B,GAAU;AAAA,EACrD,MAAM,IAAI,yBAAwB,6DAA6D;AAAA,IAC7F,MAAM;AAAA,EACR,CAAC;AAAA;",
+  "debugId": "12590D3F659B1BAC64756E2164756E21",
+  "names": []
+}

package/dist/{chunk-7y0f6rf1.js → chunk-92vk7gta.js}

@@ -1,36 +1,36 @@
 // @bun
 import {
-  AGENT_RUN_FAILURE_CODES
-} from "./chunk-d8qkxt2v.js";
+  parseSixbFailure2
+} from "./chunk-f4w3yp4f.js";
 import {
-  parseSixbFailure
-} from "./chunk-2xns679x.js";
+  AGENT_RUN_FAILURE_CODES2
+} from "./chunk-98cw09sw.js";
 import {
-  isJsonValue,
+  isJsonValue2,
   isPlainRecord
-} from "./chunk-n6jxh8sw.js";
+} from "./chunk-wy0qdqfm.js";
 
-// src/agents/streams.ts
-var AGENT_RUN_STREAM_SCHEMA_VERSION = 1;
-var DEFAULT_AGENT_RUN_STREAM_RETENTION = {
+// src/agents/streams/protocol.ts
+var AGENT_RUN_STREAM_SCHEMA_VERSION2 = 1;
+var DEFAULT_AGENT_RUN_STREAM_RETENTION2 = {
   maxAgeMs: 2 * 60 * 60 * 1000,
   maxRecords: 5000
 };
-var AGENT_ACTIVITY_STREAM_SCHEMA_VERSION = 1;
-var AGENT_ACTIVITY_STREAM_ID = "agents.activity";
-var DEFAULT_AGENT_ACTIVITY_STREAM_RETENTION = {
+var AGENT_ACTIVITY_STREAM_SCHEMA_VERSION2 = 1;
+var AGENT_ACTIVITY_STREAM_ID2 = "agents.activity";
+var DEFAULT_AGENT_ACTIVITY_STREAM_RETENTION2 = {
   maxAgeMs: 24 * 60 * 60 * 1000,
   maxRecords: 1e4
 };
-function agentActivityStreamDefinition() {
+function agentActivityStreamDefinition2() {
   return {
-    id: AGENT_ACTIVITY_STREAM_ID,
-    retention: DEFAULT_AGENT_ACTIVITY_STREAM_RETENTION
+    id: AGENT_ACTIVITY_STREAM_ID2,
+    retention: DEFAULT_AGENT_ACTIVITY_STREAM_RETENTION2
   };
 }
-function agentRunActivityEvent(run, occurredAt = new Date) {
+function agentRunActivityEvent2(run, occurredAt = new Date) {
   return {
-    schemaVersion: AGENT_ACTIVITY_STREAM_SCHEMA_VERSION,
+    schemaVersion: AGENT_ACTIVITY_STREAM_SCHEMA_VERSION2,
     type: "agent.run.activity",
     projectId: run.projectId,
     runId: run.id,
@@ -40,18 +40,18 @@ function agentRunActivityEvent(run, occurredAt = new Date) {
     occurredAt: occurredAt.toISOString()
   };
 }
-function isAgentRunActivityEvent(value) {
-  return isPlainRecord(value) && value.schemaVersion === AGENT_ACTIVITY_STREAM_SCHEMA_VERSION && value.type === "agent.run.activity" && typeof value.projectId === "string" && typeof value.runId === "string" && typeof value.threadId === "string" && isAgentRunStatus(value.status) && typeof value.attempt === "number" && Number.isFinite(value.attempt) && typeof value.occurredAt === "string";
+function isAgentRunActivityEvent2(value) {
+  return isPlainRecord(value) && value.schemaVersion === AGENT_ACTIVITY_STREAM_SCHEMA_VERSION2 && value.type === "agent.run.activity" && typeof value.projectId === "string" && typeof value.runId === "string" && typeof value.threadId === "string" && isAgentRunStatus(value.status) && typeof value.attempt === "number" && Number.isFinite(value.attempt) && typeof value.occurredAt === "string";
 }
-async function publishAgentRunActivity(broker, run) {
-  const event = agentRunActivityEvent(run);
+async function publishAgentRunActivity2(broker, run) {
+  const event = agentRunActivityEvent2(run);
   await broker.ensureStream({
     projectId: run.projectId,
-    stream: agentActivityStreamDefinition()
+    stream: agentActivityStreamDefinition2()
   });
   await broker.append({
     projectId: run.projectId,
-    streamId: AGENT_ACTIVITY_STREAM_ID,
+    streamId: AGENT_ACTIVITY_STREAM_ID2,
     records: [
       {
         name: event.type,
@@ -62,34 +62,34 @@ async function publishAgentRunActivity(broker, run) {
     ]
   });
 }
-function agentRunStreamId(runId) {
+function agentRunStreamId2(runId) {
   return `agents.runs.${runId}`;
 }
-function agentRunStreamDefinition(runId) {
+function agentRunStreamDefinition2(runId) {
   return {
-    id: agentRunStreamId(runId),
-    retention: DEFAULT_AGENT_RUN_STREAM_RETENTION
+    id: agentRunStreamId2(runId),
+    retention: DEFAULT_AGENT_RUN_STREAM_RETENTION2
   };
 }
-function agentRunControlStreamId(runId) {
+function agentRunControlStreamId2(runId) {
   return `agents.runs.${runId}.control`;
 }
-var AGENT_RUN_CANCEL_RECORD = "agent.run.cancel";
+var AGENT_RUN_CANCEL_RECORD2 = "agent.run.cancel";
 var AGENT_RUN_CONTROL_RETENTION = { maxAgeMs: 30 * 60 * 1000, maxRecords: 16 };
-function agentRunControlStreamDefinition(runId) {
-  return { id: agentRunControlStreamId(runId), retention: AGENT_RUN_CONTROL_RETENTION };
+function agentRunControlStreamDefinition2(runId) {
+  return { id: agentRunControlStreamId2(runId), retention: AGENT_RUN_CONTROL_RETENTION };
 }
-async function publishAgentRunCancel(broker, params) {
+async function publishAgentRunCancel2(broker, params) {
   await broker.ensureStream({
     projectId: params.projectId,
-    stream: agentRunControlStreamDefinition(params.runId)
+    stream: agentRunControlStreamDefinition2(params.runId)
   });
   await broker.append({
     projectId: params.projectId,
-    streamId: agentRunControlStreamId(params.runId),
+    streamId: agentRunControlStreamId2(params.runId),
     records: [
       {
-        name: AGENT_RUN_CANCEL_RECORD,
+        name: AGENT_RUN_CANCEL_RECORD2,
         key: params.runId,
         payload: { runId: params.runId },
         idempotencyKey: `${params.runId}:cancel`
@@ -97,38 +97,38 @@ async function publishAgentRunCancel(broker, params) {
     ]
   });
 }
-async function subscribeAgentRunCancel(broker, params, onCancel) {
+async function subscribeAgentRunCancel2(broker, params, onCancel) {
   await broker.ensureStream({
     projectId: params.projectId,
-    stream: agentRunControlStreamDefinition(params.runId)
+    stream: agentRunControlStreamDefinition2(params.runId)
   });
   return broker.subscribe({
     projectId: params.projectId,
-    streamId: agentRunControlStreamId(params.runId),
+    streamId: agentRunControlStreamId2(params.runId),
     from: "earliest",
-    names: [AGENT_RUN_CANCEL_RECORD]
+    names: [AGENT_RUN_CANCEL_RECORD2]
   }, () => onCancel());
 }
-var AGENT_COMPACTION_FAILURE_CODES = [
+var AGENT_COMPACTION_FAILURE_CODES2 = [
   "context_limit_exceeded",
   "summary_failed",
   "checkpoint_failed"
 ];
-function agentRunFinishedEvent(run, occurredAt = new Date) {
+function agentRunFinishedEvent2(run, occurredAt = new Date) {
   if (run.status === "queued" || run.status === "running") {
     throw new Error(`[Sixb] Agent run '${run.id}' is not terminal (status '${run.status}'), so it has no finished event.`);
   }
   return {
-    ...agentRunStreamEventBase(run, occurredAt),
+    ...agentRunStreamEventBase2(run, occurredAt),
     type: "agent.run.finished",
     status: run.status,
     ...run.finishReason === undefined ? {} : { finishReason: run.finishReason },
     ...run.error === undefined ? {} : { error: run.error }
   };
 }
-function agentRunStreamEventBase(run, occurredAt = new Date) {
+function agentRunStreamEventBase2(run, occurredAt = new Date) {
   const common = {
-    schemaVersion: AGENT_RUN_STREAM_SCHEMA_VERSION,
+    schemaVersion: AGENT_RUN_STREAM_SCHEMA_VERSION2,
     projectId: run.projectId,
     runId: run.id,
     attempt: run.attempt,
@@ -136,8 +136,8 @@ function agentRunStreamEventBase(run, occurredAt = new Date) {
   };
   return run.kind === "conversation" ? { ...common, threadId: run.threadId } : { ...common, parentRunId: run.parentRunId };
 }
-function isAgentRunStreamEvent(value) {
-  if (!isPlainRecord(value) || value.schemaVersion !== AGENT_RUN_STREAM_SCHEMA_VERSION || typeof value.projectId !== "string" || typeof value.runId !== "string" || typeof value.attempt !== "number" || !Number.isFinite(value.attempt) || typeof value.occurredAt !== "string" || typeof value.type !== "string") {
+function isAgentRunStreamEvent2(value) {
+  if (!isPlainRecord(value) || value.schemaVersion !== AGENT_RUN_STREAM_SCHEMA_VERSION2 || typeof value.projectId !== "string" || typeof value.runId !== "string" || typeof value.attempt !== "number" || !Number.isFinite(value.attempt) || typeof value.occurredAt !== "string" || typeof value.type !== "string") {
     return false;
   }
   const hasConversationLineage = typeof value.threadId === "string" && value.parentRunId === undefined;
@@ -152,9 +152,9 @@ function isAgentRunStreamEvent(value) {
     case "agent.compaction.completed":
       return isAgentContextCheckpointReason(value.reason) && typeof value.checkpointId === "string" && isTokenEstimate(value.estimatedInputTokensBefore) && isTokenEstimate(value.estimatedInputTokensAfter);
     case "agent.compaction.failed":
-      return isAgentContextCheckpointReason(value.reason) && AGENT_COMPACTION_FAILURE_CODES.includes(value.errorCode);
+      return isAgentContextCheckpointReason(value.reason) && AGENT_COMPACTION_FAILURE_CODES2.includes(value.errorCode);
     case "agent.ui.chunk":
-      return Number.isInteger(value.chunkIndex) && Object.hasOwn(value, "chunk") && isJsonValue(value.chunk);
+      return Number.isInteger(value.chunkIndex) && Object.hasOwn(value, "chunk") && isJsonValue2(value.chunk);
     case "agent.message.finalized":
       return typeof value.messageId === "string";
     case "agent.run.finished":
@@ -179,13 +179,13 @@ function isAgentRunFailure(value) {
   if (!isPlainRecord(value))
     return false;
   try {
-    parseSixbFailure(value, AGENT_RUN_FAILURE_CODES);
+    parseSixbFailure2(value, AGENT_RUN_FAILURE_CODES2);
     return true;
   } catch {
     return false;
   }
 }
-function agentRunStreamIdempotencyKey(event) {
+function agentRunStreamIdempotencyKey2(event) {
   switch (event.type) {
     case "agent.run.started":
       return `${event.runId}:${event.attempt}:started`;
@@ -203,28 +203,28 @@ function agentRunStreamIdempotencyKey(event) {
       return `${event.runId}:${event.attempt}:finished:${event.status}`;
   }
 }
-async function publishAgentRunFinished(broker, run) {
-  const event = agentRunFinishedEvent(run);
+async function publishAgentRunFinished2(broker, run) {
+  const event = agentRunFinishedEvent2(run);
   await broker.ensureStream({
     projectId: run.projectId,
-    stream: agentRunStreamDefinition(run.id)
+    stream: agentRunStreamDefinition2(run.id)
   });
   await broker.append({
     projectId: run.projectId,
-    streamId: agentRunStreamId(run.id),
+    streamId: agentRunStreamId2(run.id),
     records: [
       {
         name: event.type,
         key: event.runId,
         payload: JSON.parse(JSON.stringify(event)),
-        idempotencyKey: agentRunStreamIdempotencyKey(event)
+        idempotencyKey: agentRunStreamIdempotencyKey2(event)
       }
     ]
   });
   if (run.kind === "conversation")
-    await publishAgentRunActivity(broker, run);
+    await publishAgentRunActivity2(broker, run);
 }
 
-export { AGENT_RUN_STREAM_SCHEMA_VERSION, DEFAULT_AGENT_RUN_STREAM_RETENTION, AGENT_ACTIVITY_STREAM_SCHEMA_VERSION, AGENT_ACTIVITY_STREAM_ID, DEFAULT_AGENT_ACTIVITY_STREAM_RETENTION, agentActivityStreamDefinition, agentRunActivityEvent, isAgentRunActivityEvent, publishAgentRunActivity, agentRunStreamId, agentRunStreamDefinition, agentRunControlStreamId, AGENT_RUN_CANCEL_RECORD, agentRunControlStreamDefinition, publishAgentRunCancel, subscribeAgentRunCancel, AGENT_COMPACTION_FAILURE_CODES, agentRunFinishedEvent, agentRunStreamEventBase, isAgentRunStreamEvent, agentRunStreamIdempotencyKey, publishAgentRunFinished };
+export { AGENT_RUN_STREAM_SCHEMA_VERSION2, DEFAULT_AGENT_RUN_STREAM_RETENTION2, AGENT_ACTIVITY_STREAM_SCHEMA_VERSION2, AGENT_ACTIVITY_STREAM_ID2, DEFAULT_AGENT_ACTIVITY_STREAM_RETENTION2, agentActivityStreamDefinition2, agentRunActivityEvent2, isAgentRunActivityEvent2, publishAgentRunActivity2, agentRunStreamId2, agentRunStreamDefinition2, agentRunControlStreamId2, AGENT_RUN_CANCEL_RECORD2, agentRunControlStreamDefinition2, publishAgentRunCancel2, subscribeAgentRunCancel2, AGENT_COMPACTION_FAILURE_CODES2, agentRunFinishedEvent2, agentRunStreamEventBase2, isAgentRunStreamEvent2, agentRunStreamIdempotencyKey2, publishAgentRunFinished2 };
 
-//# debugId=01E889A4551AE38464756E2164756E21
+//# debugId=015FDD68B352A23564756E2164756E21

package/dist/chunk-92vk7gta.js.map

@@ -0,0 +1,10 @@
+{
+  "version": 3,
+  "sources": ["../src/agents/streams/protocol.ts"],
+  "sourcesContent": [
+    "import type { Broker, BrokerStreamDefinition } from \"../../broker\"\nimport { parseSixbFailure } from \"../../errors/internal\"\nimport type { SixbFailure } from \"../../errors/types\"\nimport { isJsonValue, isPlainRecord, type JsonValue } from \"../../json\"\nimport {\n  AGENT_RUN_FAILURE_CODES,\n  type AgentContextCheckpointReason,\n  type AgentRunFailureCode,\n  type AgentRunRecord,\n  type ConversationAgentRunRecord,\n} from \"../../storage/agents/types\"\n\nexport const AGENT_RUN_STREAM_SCHEMA_VERSION = 1 as const\nexport const DEFAULT_AGENT_RUN_STREAM_RETENTION = {\n  maxAgeMs: 2 * 60 * 60 * 1000, // 2 hours\n  maxRecords: 5_000,\n} as const\n\nexport const AGENT_ACTIVITY_STREAM_SCHEMA_VERSION = 1 as const\nexport const AGENT_ACTIVITY_STREAM_ID = \"agents.activity\" as const\nexport const DEFAULT_AGENT_ACTIVITY_STREAM_RETENTION = {\n  maxAgeMs: 24 * 60 * 60 * 1000, // 24 hours\n  maxRecords: 10_000,\n} as const\n\nexport interface AgentRunActivityEvent {\n  readonly schemaVersion: typeof AGENT_ACTIVITY_STREAM_SCHEMA_VERSION\n  readonly type: \"agent.run.activity\"\n  readonly projectId: string\n  readonly runId: string\n  readonly threadId: string\n  readonly status: AgentRunRecord[\"status\"]\n  readonly attempt: number\n  readonly occurredAt: string\n}\n\nexport function agentActivityStreamDefinition(): BrokerStreamDefinition {\n  return {\n    id: AGENT_ACTIVITY_STREAM_ID,\n    retention: DEFAULT_AGENT_ACTIVITY_STREAM_RETENTION,\n  }\n}\n\nexport function agentRunActivityEvent(\n  run: ConversationAgentRunRecord,\n  occurredAt: Date = new Date()\n): AgentRunActivityEvent {\n  return {\n    schemaVersion: AGENT_ACTIVITY_STREAM_SCHEMA_VERSION,\n    type: \"agent.run.activity\",\n    projectId: run.projectId,\n    runId: run.id,\n    threadId: run.threadId,\n    status: run.status,\n    attempt: run.attempt,\n    occurredAt: occurredAt.toISOString(),\n  }\n}\n\nexport function isAgentRunActivityEvent(value: unknown): value is AgentRunActivityEvent {\n  return (\n    isPlainRecord(value) &&\n    value.schemaVersion === AGENT_ACTIVITY_STREAM_SCHEMA_VERSION &&\n    value.type === \"agent.run.activity\" &&\n    typeof value.projectId === \"string\" &&\n    typeof value.runId === \"string\" &&\n    typeof value.threadId === \"string\" &&\n    isAgentRunStatus(value.status) &&\n    typeof value.attempt === \"number\" &&\n    Number.isFinite(value.attempt) &&\n    typeof value.occurredAt === \"string\"\n  )\n}\n\nexport async function publishAgentRunActivity(\n  broker: Broker,\n  run: ConversationAgentRunRecord\n): Promise<void> {\n  const event = agentRunActivityEvent(run)\n  await broker.ensureStream({\n    projectId: run.projectId,\n    stream: agentActivityStreamDefinition(),\n  })\n  await broker.append({\n    projectId: run.projectId,\n    streamId: AGENT_ACTIVITY_STREAM_ID,\n    records: [\n      {\n        name: event.type,\n        key: event.threadId,\n        // The event is composed only of validated JSON primitives.\n        payload: event as unknown as JsonValue,\n        idempotencyKey: `${event.runId}:${event.attempt}:${event.status}`,\n      },\n    ],\n  })\n}\n\nexport type AgentRunStreamId = `agents.runs.${string}`\n\nexport function agentRunStreamId(runId: string): AgentRunStreamId {\n  return `agents.runs.${runId}`\n}\n\nexport function agentRunStreamDefinition(runId: string): BrokerStreamDefinition {\n  return {\n    id: agentRunStreamId(runId),\n    retention: DEFAULT_AGENT_RUN_STREAM_RETENTION,\n  }\n}\n\ntype AgentRunStreamEventBase = {\n  readonly schemaVersion: typeof AGENT_RUN_STREAM_SCHEMA_VERSION\n  readonly projectId: string\n  readonly runId: string\n  readonly attempt: number\n  readonly occurredAt: string\n} & (\n  | {\n      readonly threadId: string\n      readonly parentRunId?: never\n    }\n  | {\n      readonly parentRunId: string\n      readonly threadId?: never\n    }\n)\n\n// ── Control stream (worker-inbound) ─────────────────────────────────────────────────────────────\n//\n// A per-run channel the API layer publishes to and the worker subscribes to — the reverse direction\n// of the event stream above. It carries only a cancel signal, and is addressed by `runId` (not a run\n// record), so a cancel works even before the worker has reserved the run. Kept separate from the\n// event stream so control records never reach the browser client.\n\nexport type AgentRunControlStreamId = `agents.runs.${string}.control`\n\nexport function agentRunControlStreamId(runId: string): AgentRunControlStreamId {\n  return `agents.runs.${runId}.control`\n}\n\n/** The only control record: a request to stop the run. */\nexport const AGENT_RUN_CANCEL_RECORD = \"agent.run.cancel\"\n\n// A cancel only needs to outlive the queue wait plus one turn, so retention is short and tiny.\nconst AGENT_RUN_CONTROL_RETENTION = { maxAgeMs: 30 * 60 * 1000, maxRecords: 16 } as const\n\nexport function agentRunControlStreamDefinition(runId: string): BrokerStreamDefinition {\n  return { id: agentRunControlStreamId(runId), retention: AGENT_RUN_CONTROL_RETENTION }\n}\n\n/**\n * Signal a run to stop. Publishing is addressed by `runId`, so it works whether the run is queued,\n * reserved, or being drained — the worker picks the record up when it subscribes.\n */\nexport async function publishAgentRunCancel(\n  broker: Broker,\n  params: { readonly projectId: string; readonly runId: string }\n): Promise<void> {\n  await broker.ensureStream({\n    projectId: params.projectId,\n    stream: agentRunControlStreamDefinition(params.runId),\n  })\n  await broker.append({\n    projectId: params.projectId,\n    streamId: agentRunControlStreamId(params.runId),\n    records: [\n      {\n        name: AGENT_RUN_CANCEL_RECORD,\n        key: params.runId,\n        payload: { runId: params.runId },\n        idempotencyKey: `${params.runId}:cancel`,\n      },\n    ],\n  })\n}\n\n/**\n * Watch a run's control stream and invoke `onCancel` when a cancel arrives. Reads from `earliest` so\n * a cancel published before the worker subscribed (a run stopped while still queued) is still seen.\n * Returns the unsubscribe handle.\n */\nexport async function subscribeAgentRunCancel(\n  broker: Broker,\n  params: { readonly projectId: string; readonly runId: string },\n  onCancel: () => void\n): Promise<() => void> {\n  await broker.ensureStream({\n    projectId: params.projectId,\n    stream: agentRunControlStreamDefinition(params.runId),\n  })\n  return broker.subscribe(\n    {\n      projectId: params.projectId,\n      streamId: agentRunControlStreamId(params.runId),\n      from: \"earliest\",\n      names: [AGENT_RUN_CANCEL_RECORD],\n    },\n    () => onCancel()\n  )\n}\n\n/** Exact portable failure exposed by a terminal Agent run stream event. */\nexport type AgentRunFailure = SixbFailure<AgentRunFailureCode>\n\nexport const AGENT_COMPACTION_FAILURE_CODES = [\n  \"context_limit_exceeded\",\n  \"summary_failed\",\n  \"checkpoint_failed\",\n] as const\nexport type AgentCompactionFailureCode = (typeof AGENT_COMPACTION_FAILURE_CODES)[number]\n\nexport type AgentRunStreamEvent =\n  | (AgentRunStreamEventBase & {\n      readonly type: \"agent.run.started\"\n      readonly modelId?: string\n    })\n  | (AgentRunStreamEventBase & {\n      readonly type: \"agent.compaction.started\"\n      readonly reason: AgentContextCheckpointReason\n      readonly estimatedInputTokensBefore: number\n    })\n  | (AgentRunStreamEventBase & {\n      readonly type: \"agent.compaction.completed\"\n      readonly reason: AgentContextCheckpointReason\n      readonly checkpointId: string\n      readonly estimatedInputTokensBefore: number\n      readonly estimatedInputTokensAfter: number\n    })\n  | (AgentRunStreamEventBase & {\n      readonly type: \"agent.compaction.failed\"\n      readonly reason: AgentContextCheckpointReason\n      readonly errorCode: AgentCompactionFailureCode\n    })\n  | (AgentRunStreamEventBase & {\n      readonly type: \"agent.ui.chunk\"\n      readonly chunkIndex: number\n      readonly chunk: JsonValue\n    })\n  | (AgentRunStreamEventBase & {\n      readonly type: \"agent.message.finalized\"\n      readonly messageId: string\n    })\n  | (AgentRunStreamEventBase & {\n      readonly type: \"agent.run.finished\"\n      readonly status: \"succeeded\" | \"failed\" | \"cancelled\"\n      readonly finishReason?: string\n      readonly error?: AgentRunFailure\n    })\n\nexport type AgentRunFinishedEvent = Extract<AgentRunStreamEvent, { type: \"agent.run.finished\" }>\n\n// ── Record construction ──────────────────────────────────────────────────────────────────────────\n//\n// The wire format of run stream records — event shape, record name/key, and the idempotency-key\n// vocabulary — is owned here so every producer (the worker's stream sink, the server's queued\n// cancellation) shares one definition and cannot drift.\n\n/** Build the terminal stream event for a finished run. Throws if the run is not terminal. */\nexport function agentRunFinishedEvent(\n  run: AgentRunRecord,\n  occurredAt: Date = new Date()\n): AgentRunFinishedEvent {\n  if (run.status === \"queued\" || run.status === \"running\") {\n    throw new Error(\n      `[Sixb] Agent run '${run.id}' is not terminal (status '${run.status}'), so it has no finished event.`\n    )\n  }\n  return {\n    ...agentRunStreamEventBase(run, occurredAt),\n    type: \"agent.run.finished\",\n    status: run.status,\n    ...(run.finishReason === undefined ? {} : { finishReason: run.finishReason }),\n    ...(run.error === undefined ? {} : { error: run.error }),\n  }\n}\n\n/** Shared lineage for stream records emitted by conversational and headless runs. */\nexport function agentRunStreamEventBase(\n  run: AgentRunRecord,\n  occurredAt: Date = new Date()\n): AgentRunStreamEventBase {\n  const common = {\n    schemaVersion: AGENT_RUN_STREAM_SCHEMA_VERSION,\n    projectId: run.projectId,\n    runId: run.id,\n    attempt: run.attempt,\n    occurredAt: occurredAt.toISOString(),\n  }\n  return run.kind === \"conversation\"\n    ? { ...common, threadId: run.threadId }\n    : { ...common, parentRunId: run.parentRunId }\n}\n\n/** Validate an Agent stream payload using the same contract its producers use. */\nexport function isAgentRunStreamEvent(value: unknown): value is AgentRunStreamEvent {\n  if (\n    !isPlainRecord(value) ||\n    value.schemaVersion !== AGENT_RUN_STREAM_SCHEMA_VERSION ||\n    typeof value.projectId !== \"string\" ||\n    typeof value.runId !== \"string\" ||\n    typeof value.attempt !== \"number\" ||\n    !Number.isFinite(value.attempt) ||\n    typeof value.occurredAt !== \"string\" ||\n    typeof value.type !== \"string\"\n  ) {\n    return false\n  }\n  const hasConversationLineage =\n    typeof value.threadId === \"string\" && value.parentRunId === undefined\n  const hasSubagentLineage = typeof value.parentRunId === \"string\" && value.threadId === undefined\n  if (!hasConversationLineage && !hasSubagentLineage) return false\n\n  switch (value.type) {\n    case \"agent.run.started\":\n      return value.modelId === undefined || typeof value.modelId === \"string\"\n    case \"agent.compaction.started\":\n      return (\n        isAgentContextCheckpointReason(value.reason) &&\n        isTokenEstimate(value.estimatedInputTokensBefore)\n      )\n    case \"agent.compaction.completed\":\n      return (\n        isAgentContextCheckpointReason(value.reason) &&\n        typeof value.checkpointId === \"string\" &&\n        isTokenEstimate(value.estimatedInputTokensBefore) &&\n        isTokenEstimate(value.estimatedInputTokensAfter)\n      )\n    case \"agent.compaction.failed\":\n      return (\n        isAgentContextCheckpointReason(value.reason) &&\n        AGENT_COMPACTION_FAILURE_CODES.includes(value.errorCode as AgentCompactionFailureCode)\n      )\n    case \"agent.ui.chunk\":\n      return (\n        Number.isInteger(value.chunkIndex) &&\n        Object.hasOwn(value, \"chunk\") &&\n        isJsonValue(value.chunk)\n      )\n    case \"agent.message.finalized\":\n      return typeof value.messageId === \"string\"\n    case \"agent.run.finished\":\n      return (\n        isTerminalAgentRunStatus(value.status) &&\n        (value.finishReason === undefined || typeof value.finishReason === \"string\") &&\n        (value.error === undefined || isAgentRunFailure(value.error))\n      )\n    default:\n      return false\n  }\n}\n\nfunction isAgentContextCheckpointReason(value: unknown): value is AgentContextCheckpointReason {\n  return value === \"threshold\" || value === \"overflow\"\n}\n\nfunction isTokenEstimate(value: unknown): value is number {\n  return Number.isSafeInteger(value) && (value as number) >= 0\n}\n\nfunction isTerminalAgentRunStatus(value: unknown): value is \"succeeded\" | \"failed\" | \"cancelled\" {\n  return value === \"succeeded\" || value === \"failed\" || value === \"cancelled\"\n}\n\nfunction isAgentRunStatus(value: unknown): value is AgentRunRecord[\"status\"] {\n  return value === \"queued\" || value === \"running\" || isTerminalAgentRunStatus(value)\n}\n\nfunction isAgentRunFailure(value: unknown): value is AgentRunFailure {\n  if (!isPlainRecord(value)) return false\n  try {\n    parseSixbFailure(value, AGENT_RUN_FAILURE_CODES)\n    return true\n  } catch {\n    return false\n  }\n}\n\n/** Single owner of the idempotency-key vocabulary for agent run stream records. */\nexport function agentRunStreamIdempotencyKey(event: AgentRunStreamEvent): string {\n  switch (event.type) {\n    case \"agent.run.started\":\n      return `${event.runId}:${event.attempt}:started`\n    case \"agent.compaction.started\":\n      return `${event.runId}:${event.attempt}:compaction:${event.reason}:started`\n    case \"agent.compaction.completed\":\n      return `${event.runId}:${event.attempt}:compaction:${event.checkpointId}:completed`\n    case \"agent.compaction.failed\":\n      return `${event.runId}:${event.attempt}:compaction:${event.reason}:failed:${event.errorCode}`\n    case \"agent.ui.chunk\":\n      return `${event.runId}:${event.attempt}:chunk:${event.chunkIndex}`\n    case \"agent.message.finalized\":\n      return `${event.runId}:${event.attempt}:message:${event.messageId}:finalized`\n    case \"agent.run.finished\":\n      return `${event.runId}:${event.attempt}:finished:${event.status}`\n  }\n}\n\n/**\n * Ensure the run's stream and append its terminal record — mirrors {@link publishAgentRunCancel}.\n * Used where a terminal transition happens outside the worker (e.g. cancelling a queued run).\n */\nexport async function publishAgentRunFinished(broker: Broker, run: AgentRunRecord): Promise<void> {\n  const event = agentRunFinishedEvent(run)\n  await broker.ensureStream({\n    projectId: run.projectId,\n    stream: agentRunStreamDefinition(run.id),\n  })\n  await broker.append({\n    projectId: run.projectId,\n    streamId: agentRunStreamId(run.id),\n    records: [\n      {\n        name: event.type,\n        key: event.runId,\n        // The event is built from JSON primitives only, so the round-trip is a safe narrowing.\n        payload: JSON.parse(JSON.stringify(event)) as JsonValue,\n        idempotencyKey: agentRunStreamIdempotencyKey(event),\n      },\n    ],\n  })\n  if (run.kind === \"conversation\") await publishAgentRunActivity(broker, run)\n}\n"
+  ],
+  "mappings": ";;;;;;;;;;;;;AAYO,IAAM,mCAAkC;AACxC,IAAM,sCAAqC;AAAA,EAChD,UAAU,IAAI,KAAK,KAAK;AAAA,EACxB,YAAY;AACd;AAEO,IAAM,wCAAuC;AAC7C,IAAM,4BAA2B;AACjC,IAAM,2CAA0C;AAAA,EACrD,UAAU,KAAK,KAAK,KAAK;AAAA,EACzB,YAAY;AACd;AAaO,SAAS,8BAA6B,GAA2B;AAAA,EACtE,OAAO;AAAA,IACL,IAAI;AAAA,IACJ,WAAW;AAAA,EACb;AAAA;AAGK,SAAS,sBAAqB,CACnC,KACA,aAAmB,IAAI,MACA;AAAA,EACvB,OAAO;AAAA,IACL,eAAe;AAAA,IACf,MAAM;AAAA,IACN,WAAW,IAAI;AAAA,IACf,OAAO,IAAI;AAAA,IACX,UAAU,IAAI;AAAA,IACd,QAAQ,IAAI;AAAA,IACZ,SAAS,IAAI;AAAA,IACb,YAAY,WAAW,YAAY;AAAA,EACrC;AAAA;AAGK,SAAS,wBAAuB,CAAC,OAAgD;AAAA,EACtF,OACE,cAAc,KAAK,KACnB,MAAM,kBAAkB,yCACxB,MAAM,SAAS,wBACf,OAAO,MAAM,cAAc,YAC3B,OAAO,MAAM,UAAU,YACvB,OAAO,MAAM,aAAa,YAC1B,iBAAiB,MAAM,MAAM,KAC7B,OAAO,MAAM,YAAY,YACzB,OAAO,SAAS,MAAM,OAAO,KAC7B,OAAO,MAAM,eAAe;AAAA;AAIhC,eAAsB,wBAAuB,CAC3C,QACA,KACe;AAAA,EACf,MAAM,QAAQ,uBAAsB,GAAG;AAAA,EACvC,MAAM,OAAO,aAAa;AAAA,IACxB,WAAW,IAAI;AAAA,IACf,QAAQ,+BAA8B;AAAA,EACxC,CAAC;AAAA,EACD,MAAM,OAAO,OAAO;AAAA,IAClB,WAAW,IAAI;AAAA,IACf,UAAU;AAAA,IACV,SAAS;AAAA,MACP;AAAA,QACE,MAAM,MAAM;AAAA,QACZ,KAAK,MAAM;AAAA,QAEX,SAAS;AAAA,QACT,gBAAgB,GAAG,MAAM,SAAS,MAAM,WAAW,MAAM;AAAA,MAC3D;AAAA,IACF;AAAA,EACF,CAAC;AAAA;AAKI,SAAS,iBAAgB,CAAC,OAAiC;AAAA,EAChE,OAAO,eAAe;AAAA;AAGjB,SAAS,yBAAwB,CAAC,OAAuC;AAAA,EAC9E,OAAO;AAAA,IACL,IAAI,kBAAiB,KAAK;AAAA,IAC1B,WAAW;AAAA,EACb;AAAA;AA6BK,SAAS,wBAAuB,CAAC,OAAwC;AAAA,EAC9E,OAAO,eAAe;AAAA;AAIjB,IAAM,2BAA0B;AAGvC,IAAM,8BAA8B,EAAE,UAAU,KAAK,KAAK,MAAM,YAAY,GAAG;AAExE,SAAS,gCAA+B,CAAC,OAAuC;AAAA,EACrF,OAAO,EAAE,IAAI,yBAAwB,KAAK,GAAG,WAAW,4BAA4B;AAAA;AAOtF,eAAsB,sBAAqB,CACzC,QACA,QACe;AAAA,EACf,MAAM,OAAO,aAAa;AAAA,IACxB,WAAW,OAAO;AAAA,IAClB,QAAQ,iCAAgC,OAAO,KAAK;AAAA,EACtD,CAAC;AAAA,EACD,MAAM,OAAO,OAAO;AAAA,IAClB,WAAW,OAAO;AAAA,IAClB,UAAU,yBAAwB,OAAO,KAAK;AAAA,IAC9C,SAAS;AAAA,MACP;AAAA,QACE,MAAM;AAAA,QACN,KAAK,OAAO;AAAA,QACZ,SAAS,EAAE,OAAO,OAAO,MAAM;AAAA,QAC/B,gBAAgB,GAAG,OAAO;AAAA,MAC5B;AAAA,IACF;AAAA,EACF,CAAC;AAAA;AAQH,eAAsB,wBAAuB,CAC3C,QACA,QACA,UACqB;AAAA,EACrB,MAAM,OAAO,aAAa;AAAA,IACxB,WAAW,OAAO;AAAA,IAClB,QAAQ,iCAAgC,OAAO,KAAK;AAAA,EACtD,CAAC;AAAA,EACD,OAAO,OAAO,UACZ;AAAA,IACE,WAAW,OAAO;AAAA,IAClB,UAAU,yBAAwB,OAAO,KAAK;AAAA,IAC9C,MAAM;AAAA,IACN,OAAO,CAAC,wBAAuB;AAAA,EACjC,GACA,MAAM,SAAS,CACjB;AAAA;AAMK,IAAM,kCAAiC;AAAA,EAC5C;AAAA,EACA;AAAA,EACA;AACF;AAkDO,SAAS,sBAAqB,CACnC,KACA,aAAmB,IAAI,MACA;AAAA,EACvB,IAAI,IAAI,WAAW,YAAY,IAAI,WAAW,WAAW;AAAA,IACvD,MAAM,IAAI,MACR,qBAAqB,IAAI,gCAAgC,IAAI,wCAC/D;AAAA,EACF;AAAA,EACA,OAAO;AAAA,OACF,yBAAwB,KAAK,UAAU;AAAA,IAC1C,MAAM;AAAA,IACN,QAAQ,IAAI;AAAA,OACR,IAAI,iBAAiB,YAAY,CAAC,IAAI,EAAE,cAAc,IAAI,aAAa;AAAA,OACvE,IAAI,UAAU,YAAY,CAAC,IAAI,EAAE,OAAO,IAAI,MAAM;AAAA,EACxD;AAAA;AAIK,SAAS,wBAAuB,CACrC,KACA,aAAmB,IAAI,MACE;AAAA,EACzB,MAAM,SAAS;AAAA,IACb,eAAe;AAAA,IACf,WAAW,IAAI;AAAA,IACf,OAAO,IAAI;AAAA,IACX,SAAS,IAAI;AAAA,IACb,YAAY,WAAW,YAAY;AAAA,EACrC;AAAA,EACA,OAAO,IAAI,SAAS,iBAChB,KAAK,QAAQ,UAAU,IAAI,SAAS,IACpC,KAAK,QAAQ,aAAa,IAAI,YAAY;AAAA;AAIzC,SAAS,sBAAqB,CAAC,OAA8C;AAAA,EAClF,IACE,CAAC,cAAc,KAAK,KACpB,MAAM,kBAAkB,oCACxB,OAAO,MAAM,cAAc,YAC3B,OAAO,MAAM,UAAU,YACvB,OAAO,MAAM,YAAY,YACzB,CAAC,OAAO,SAAS,MAAM,OAAO,KAC9B,OAAO,MAAM,eAAe,YAC5B,OAAO,MAAM,SAAS,UACtB;AAAA,IACA,OAAO;AAAA,EACT;AAAA,EACA,MAAM,yBACJ,OAAO,MAAM,aAAa,YAAY,MAAM,gBAAgB;AAAA,EAC9D,MAAM,qBAAqB,OAAO,MAAM,gBAAgB,YAAY,MAAM,aAAa;AAAA,EACvF,IAAI,CAAC,0BAA0B,CAAC;AAAA,IAAoB,OAAO;AAAA,EAE3D,QAAQ,MAAM;AAAA,SACP;AAAA,MACH,OAAO,MAAM,YAAY,aAAa,OAAO,MAAM,YAAY;AAAA,SAC5D;AAAA,MACH,OACE,+BAA+B,MAAM,MAAM,KAC3C,gBAAgB,MAAM,0BAA0B;AAAA,SAE/C;AAAA,MACH,OACE,+BAA+B,MAAM,MAAM,KAC3C,OAAO,MAAM,iBAAiB,YAC9B,gBAAgB,MAAM,0BAA0B,KAChD,gBAAgB,MAAM,yBAAyB;AAAA,SAE9C;AAAA,MACH,OACE,+BAA+B,MAAM,MAAM,KAC3C,gCAA+B,SAAS,MAAM,SAAuC;AAAA,SAEpF;AAAA,MACH,OACE,OAAO,UAAU,MAAM,UAAU,KACjC,OAAO,OAAO,OAAO,OAAO,KAC5B,aAAY,MAAM,KAAK;AAAA,SAEtB;AAAA,MACH,OAAO,OAAO,MAAM,cAAc;AAAA,SAC/B;AAAA,MACH,OACE,yBAAyB,MAAM,MAAM,MACpC,MAAM,iBAAiB,aAAa,OAAO,MAAM,iBAAiB,cAClE,MAAM,UAAU,aAAa,kBAAkB,MAAM,KAAK;AAAA;AAAA,MAG7D,OAAO;AAAA;AAAA;AAIb,SAAS,8BAA8B,CAAC,OAAuD;AAAA,EAC7F,OAAO,UAAU,eAAe,UAAU;AAAA;AAG5C,SAAS,eAAe,CAAC,OAAiC;AAAA,EACxD,OAAO,OAAO,cAAc,KAAK,KAAM,SAAoB;AAAA;AAG7D,SAAS,wBAAwB,CAAC,OAA+D;AAAA,EAC/F,OAAO,UAAU,eAAe,UAAU,YAAY,UAAU;AAAA;AAGlE,SAAS,gBAAgB,CAAC,OAAmD;AAAA,EAC3E,OAAO,UAAU,YAAY,UAAU,aAAa,yBAAyB,KAAK;AAAA;AAGpF,SAAS,iBAAiB,CAAC,OAA0C;AAAA,EACnE,IAAI,CAAC,cAAc,KAAK;AAAA,IAAG,OAAO;AAAA,EAClC,IAAI;AAAA,IACF,kBAAiB,OAAO,wBAAuB;AAAA,IAC/C,OAAO;AAAA,IACP,MAAM;AAAA,IACN,OAAO;AAAA;AAAA;AAKJ,SAAS,6BAA4B,CAAC,OAAoC;AAAA,EAC/E,QAAQ,MAAM;AAAA,SACP;AAAA,MACH,OAAO,GAAG,MAAM,SAAS,MAAM;AAAA,SAC5B;AAAA,MACH,OAAO,GAAG,MAAM,SAAS,MAAM,sBAAsB,MAAM;AAAA,SACxD;AAAA,MACH,OAAO,GAAG,MAAM,SAAS,MAAM,sBAAsB,MAAM;AAAA,SACxD;AAAA,MACH,OAAO,GAAG,MAAM,SAAS,MAAM,sBAAsB,MAAM,iBAAiB,MAAM;AAAA,SAC/E;AAAA,MACH,OAAO,GAAG,MAAM,SAAS,MAAM,iBAAiB,MAAM;AAAA,SACnD;AAAA,MACH,OAAO,GAAG,MAAM,SAAS,MAAM,mBAAmB,MAAM;AAAA,SACrD;AAAA,MACH,OAAO,GAAG,MAAM,SAAS,MAAM,oBAAoB,MAAM;AAAA;AAAA;AAQ/D,eAAsB,wBAAuB,CAAC,QAAgB,KAAoC;AAAA,EAChG,MAAM,QAAQ,uBAAsB,GAAG;AAAA,EACvC,MAAM,OAAO,aAAa;AAAA,IACxB,WAAW,IAAI;AAAA,IACf,QAAQ,0BAAyB,IAAI,EAAE;AAAA,EACzC,CAAC;AAAA,EACD,MAAM,OAAO,OAAO;AAAA,IAClB,WAAW,IAAI;AAAA,IACf,UAAU,kBAAiB,IAAI,EAAE;AAAA,IACjC,SAAS;AAAA,MACP;AAAA,QACE,MAAM,MAAM;AAAA,QACZ,KAAK,MAAM;AAAA,QAEX,SAAS,KAAK,MAAM,KAAK,UAAU,KAAK,CAAC;AAAA,QACzC,gBAAgB,8BAA6B,KAAK;AAAA,MACpD;AAAA,IACF;AAAA,EACF,CAAC;AAAA,EACD,IAAI,IAAI,SAAS;AAAA,IAAgB,MAAM,yBAAwB,QAAQ,GAAG;AAAA;",
+  "debugId": "015FDD68B352A23564756E2164756E21",
+  "names": []
+}

package/dist/{chunk-rafagrwr.js → chunk-93csa55g.js}

@@ -1,6 +1,11 @@
 // @bun
+import {
+  snapshotRequesterGroupIds,
+  normalizeRequesterGroupIds
+} from "./chunk-9tc8dxmn.js";
+
 // src/storage/executions/errors.ts
-class ExecutionStorageError extends Error {
+class ExecutionStorageError2 extends Error {
   code;
   name = "ExecutionStorageError";
   constructor(code, message, options = {}) {
@@ -11,10 +16,30 @@ class ExecutionStorageError extends Error {
 
 // src/storage/executions/validation.ts
 import { isDeepStrictEqual } from "util";
-function normalizeExecutionRecord(input, createdAt = new Date) {
+async function prepareExecutionRecord2(input, lookup) {
+  let groups = input.requesterGroupIds;
+  if (groups === undefined && input.source.type === "execution") {
+    const parent = await lookup.getExecution({
+      projectId: input.projectId,
+      id: input.source.executionId
+    });
+    groups = parent?.requesterGroupIds;
+  } else if (groups === undefined && input.requestedBy) {
+    groups = await snapshotRequesterGroupIds({
+      auth: lookup.auth,
+      projectId: input.projectId,
+      principal: input.requestedBy
+    });
+  }
+  const record = normalizeExecutionRecord2({ ...input, requesterGroupIds: groups ?? [] });
+  await validateExecutionRecordReferences2(record, lookup);
+  return record;
+}
+function normalizeExecutionRecord2(input, createdAt = new Date) {
   const record = {
     id: input.id,
     projectId: input.projectId,
+    requesterGroupIds: normalizeRequesterGroupIds(input.requesterGroupIds ?? []),
     ...input.requestedBy === undefined ? {} : { requestedBy: structuredClone(input.requestedBy) },
     executor: structuredClone(input.executor),
     source: structuredClone(input.source),
@@ -26,7 +51,7 @@ function normalizeExecutionRecord(input, createdAt = new Date) {
   assertExecutorAuthority(record);
   return record;
 }
-async function validateExecutionRecordReferences(record, lookup) {
+async function validateExecutionRecordReferences2(record, lookup) {
   await validatePrincipal(record.requestedBy, record.projectId, "Requested-by principal", lookup);
   if (record.authorizationRef.type === "principal") {
     await validatePrincipal(record.authorizationRef.principal, record.projectId, "Authority principal", lookup);
@@ -194,7 +219,7 @@ async function validatePrincipal(principal, projectId, label, lookup) {
     return;
   const record = principal.type === "user" ? await lookup.auth.users.getById({ projectId, id: principal.id }) : await lookup.auth.serviceAccounts.getById({ projectId, id: principal.id });
   if (!record) {
-    throw new ExecutionStorageError("missing_principal", `[Sixb] ${label} '${principal.id}' does not exist in project '${projectId}'.`);
+    throw new ExecutionStorageError2("missing_principal", `[Sixb] ${label} '${principal.id}' does not exist in project '${projectId}'.`);
   }
 }
 async function validateCredential(record, lookup) {
@@ -207,10 +232,10 @@ async function validateCredential(record, lookup) {
       id: credential.id
     });
     if (!session) {
-      throw new ExecutionStorageError("missing_credential", `[Sixb] Authority session '${credential.id}' does not exist in project '${record.projectId}'.`);
+      throw new ExecutionStorageError2("missing_credential", `[Sixb] Authority session '${credential.id}' does not exist in project '${record.projectId}'.`);
     }
     if (principal.type !== "user" || session.userId !== principal.id) {
-      throw new ExecutionStorageError("invalid_credential", `[Sixb] Authority session '${credential.id}' does not belong to principal '${principal.id}'.`);
+      throw new ExecutionStorageError2("invalid_credential", `[Sixb] Authority session '${credential.id}' does not belong to principal '${principal.id}'.`);
     }
     return;
   }
@@ -219,10 +244,10 @@ async function validateCredential(record, lookup) {
     id: credential.id
   });
   if (!token) {
-    throw new ExecutionStorageError("missing_credential", `[Sixb] Authority access token '${credential.id}' does not exist in project '${record.projectId}'.`);
+    throw new ExecutionStorageError2("missing_credential", `[Sixb] Authority access token '${credential.id}' does not exist in project '${record.projectId}'.`);
   }
   if (token.subjectType !== principal.type || token.subjectId !== principal.id) {
-    throw new ExecutionStorageError("invalid_credential", `[Sixb] Authority access token '${credential.id}' does not belong to principal '${principal.id}'.`);
+    throw new ExecutionStorageError2("invalid_credential", `[Sixb] Authority access token '${credential.id}' does not belong to principal '${principal.id}'.`);
   }
 }
 async function validateDelegation(record, lookup) {
@@ -231,10 +256,10 @@ async function validateDelegation(record, lookup) {
   const { grantId, sessionId } = record.authorizationRef.delegation;
   const session = await lookup.getShareSession({ projectId: record.projectId, id: sessionId });
   if (!session) {
-    throw new ExecutionStorageError("missing_credential", `[Sixb] Authority shared session '${sessionId}' does not exist in project '${record.projectId}'.`);
+    throw new ExecutionStorageError2("missing_credential", `[Sixb] Authority shared session '${sessionId}' does not exist in project '${record.projectId}'.`);
   }
   if (session.grantId !== grantId) {
-    throw new ExecutionStorageError("invalid_credential", `[Sixb] Authority shared session '${sessionId}' does not belong to grant '${grantId}'.`);
+    throw new ExecutionStorageError2("invalid_credential", `[Sixb] Authority shared session '${sessionId}' does not belong to grant '${grantId}'.`);
   }
 }
 async function validateParent(record, lookup) {
@@ -246,16 +271,19 @@ async function validateParent(record, lookup) {
     id: parentExecutionId
   });
   if (!parent) {
-    throw new ExecutionStorageError("missing_parent_execution", `[Sixb] Parent execution '${parentExecutionId}' does not exist in project '${record.projectId}'.`);
+    throw new ExecutionStorageError2("missing_parent_execution", `[Sixb] Parent execution '${parentExecutionId}' does not exist in project '${record.projectId}'.`);
   }
   if (parent.correlationId !== record.correlationId) {
-    throw new ExecutionStorageError("invalid_parent_execution", `[Sixb] Child execution '${record.id}' must preserve its parent correlation id.`);
+    throw new ExecutionStorageError2("invalid_parent_execution", `[Sixb] Child execution '${record.id}' must preserve its parent correlation id.`);
   }
   if (!principalsEqual(parent.requestedBy, record.requestedBy)) {
-    throw new ExecutionStorageError("invalid_parent_execution", `[Sixb] Child execution '${record.id}' must preserve its parent requested-by principal.`);
+    throw new ExecutionStorageError2("invalid_parent_execution", `[Sixb] Child execution '${record.id}' must preserve its parent requested-by principal.`);
+  }
+  if (!isDeepStrictEqual(parent.requesterGroupIds, record.requesterGroupIds)) {
+    throw new ExecutionStorageError2("invalid_parent_execution", `[Sixb] Child execution '${record.id}' must preserve its parent requester-group snapshot.`);
   }
   if (record.executor.type === "agent" && isInheritedAgentAuthority(record.authorizationRef) && !isDeepStrictEqual(parent.authorizationRef, record.authorizationRef)) {
-    throw new ExecutionStorageError("invalid_parent_execution", `[Sixb] Child Agent execution '${record.id}' must inherit its parent's authorization reference.`);
+    throw new ExecutionStorageError2("invalid_parent_execution", `[Sixb] Child Agent execution '${record.id}' must inherit its parent's authorization reference.`);
   }
 }
 function isInheritedAgentAuthority(ref) {
@@ -295,7 +323,7 @@ function kernelOperationsEqual(left, right) {
   return left.type === right.type && left.recoveryId === right.recoveryId;
 }
 function invalid(message) {
-  throw new ExecutionStorageError("invalid_input", `[Sixb] ${message}`);
+  throw new ExecutionStorageError2("invalid_input", `[Sixb] ${message}`);
 }
 var TRUSTED_PRIMITIVE_KINDS = new Set([
   "action",
@@ -307,6 +335,6 @@ var TRUSTED_PRIMITIVE_KINDS = new Set([
   "workflow"
 ]);
 
-export { ExecutionStorageError, normalizeExecutionRecord, validateExecutionRecordReferences, cloneExecutionRecord };
+export { ExecutionStorageError2, prepareExecutionRecord2, normalizeExecutionRecord2, validateExecutionRecordReferences2, cloneExecutionRecord };
 
-//# debugId=CD48D807CD286EF564756E2164756E21
+//# debugId=78FF364F2E082FE564756E2164756E21

package/dist/chunk-93csa55g.js.map

@@ -0,0 +1,11 @@
+{
+  "version": 3,
+  "sources": ["../src/storage/executions/errors.ts", "../src/storage/executions/validation.ts"],
+  "sourcesContent": [
+    "export type ExecutionStorageErrorCode =\n  | \"duplicate_execution\"\n  | \"invalid_credential\"\n  | \"invalid_input\"\n  | \"invalid_parent_execution\"\n  | \"missing_credential\"\n  | \"missing_parent_execution\"\n  | \"missing_principal\"\n\n/** Stable error raised when an execution record would violate ledger invariants. */\nexport class ExecutionStorageError extends Error {\n  readonly name = \"ExecutionStorageError\"\n\n  constructor(\n    readonly code: ExecutionStorageErrorCode,\n    message: string,\n    options: ErrorOptions = {}\n  ) {\n    super(message, options)\n  }\n}\n",
+    "import { isDeepStrictEqual } from \"node:util\"\nimport { normalizeRequesterGroupIds, snapshotRequesterGroupIds } from \"../../auth/attribution\"\nimport type {\n  AuthorizablePrincipal,\n  AuthorizationRef,\n  KernelOperation,\n} from \"../../execution/types\"\nimport type { AuthStorage } from \"../auth\"\nimport { ExecutionStorageError } from \"./errors\"\nimport type {\n  CreateExecutionInput,\n  DurableExecutionExecutor,\n  DurableExecutionSource,\n  ExecutionRecord,\n} from \"./types\"\n\nexport interface ExecutionValidationLookup {\n  readonly auth: AuthStorage\n  getExecution(params: {\n    readonly projectId: string\n    readonly id: string\n  }): Promise<ExecutionRecord | null>\n  getShareSession(params: {\n    readonly projectId: string\n    readonly id: string\n  }): Promise<{ readonly grantId: string } | null>\n}\n\n/** Capture accounting attribution at the same storage boundary that admits the execution. */\nexport async function prepareExecutionRecord(\n  input: CreateExecutionInput,\n  lookup: ExecutionValidationLookup\n): Promise<ExecutionRecord> {\n  let groups = input.requesterGroupIds\n  if (groups === undefined && input.source.type === \"execution\") {\n    const parent = await lookup.getExecution({\n      projectId: input.projectId,\n      id: input.source.executionId,\n    })\n    groups = parent?.requesterGroupIds\n  } else if (groups === undefined && input.requestedBy) {\n    groups = await snapshotRequesterGroupIds({\n      auth: lookup.auth,\n      projectId: input.projectId,\n      principal: input.requestedBy,\n    })\n  }\n  const record = normalizeExecutionRecord({ ...input, requesterGroupIds: groups ?? [] })\n  await validateExecutionRecordReferences(record, lookup)\n  return record\n}\n\nexport function normalizeExecutionRecord(\n  input: CreateExecutionInput,\n  createdAt: Date = new Date()\n): ExecutionRecord {\n  const record: ExecutionRecord = {\n    id: input.id,\n    projectId: input.projectId,\n    requesterGroupIds: normalizeRequesterGroupIds(input.requesterGroupIds ?? []),\n    ...(input.requestedBy === undefined ? {} : { requestedBy: structuredClone(input.requestedBy) }),\n    executor: structuredClone(input.executor),\n    source: structuredClone(input.source),\n    correlationId: input.correlationId,\n    authorizationRef: structuredClone(input.authorizationRef),\n    createdAt: new Date(createdAt),\n  }\n\n  assertRecordShape(record)\n  assertExecutorAuthority(record)\n  return record\n}\n\nexport async function validateExecutionRecordReferences(\n  record: ExecutionRecord,\n  lookup: ExecutionValidationLookup\n): Promise<void> {\n  await validatePrincipal(record.requestedBy, record.projectId, \"Requested-by principal\", lookup)\n\n  if (record.authorizationRef.type === \"principal\") {\n    await validatePrincipal(\n      record.authorizationRef.principal,\n      record.projectId,\n      \"Authority principal\",\n      lookup\n    )\n    await validateCredential(record, lookup)\n  }\n  if (record.authorizationRef.type === \"delegated\") {\n    await validateDelegation(record, lookup)\n  }\n\n  await validateParent(record, lookup)\n}\n\nexport function cloneExecutionRecord(record: ExecutionRecord): ExecutionRecord {\n  return structuredClone(record)\n}\n\nfunction assertRecordShape(record: ExecutionRecord): void {\n  assertNonBlank(record.id, \"Execution id\")\n  assertNonBlank(record.projectId, \"Execution project id\")\n  assertNonBlank(record.correlationId, \"Execution correlation id\")\n  assertValidDate(record.createdAt, \"Execution createdAt\")\n\n  if (record.requestedBy) {\n    assertPrincipal(record.requestedBy, \"Requested-by principal\")\n  }\n\n  assertExecutor(record.executor)\n  assertSource(record.source)\n  assertAuthorizationRef(record.authorizationRef)\n}\n\nfunction assertExecutor(executor: DurableExecutionExecutor): void {\n  switch (executor.type) {\n    case \"request\":\n      assertNonBlank(executor.requestId, \"Executor request id\")\n      return\n    case \"primitive\":\n      assertTrustedPrimitiveKind(executor.kind, \"Executor primitive kind\")\n      assertNonBlank(executor.runId, \"Executor primitive run id\")\n      return\n    case \"agent\":\n      assertNonBlank(executor.runId, \"Executor agent run id\")\n      return\n    case \"kernel\":\n      assertKernelOperation(executor.operation, \"Executor kernel operation\")\n      return\n    default:\n      invalid(`Unknown execution executor type '${String((executor as { type?: unknown }).type)}'.`)\n  }\n}\n\nfunction assertSource(source: DurableExecutionSource): void {\n  switch (source.type) {\n    case \"http\":\n      assertNonBlank(source.requestId, \"Execution source request id\")\n      return\n    case \"webhook\":\n      assertNonBlank(source.deliveryId, \"Execution source delivery id\")\n      return\n    case \"schedule\":\n    case \"event\":\n      assertNonBlank(source.eventId, \"Execution source event id\")\n      return\n    case \"datasetVersion\":\n      assertNonBlank(source.datasetId, \"Execution source dataset id\")\n      assertNonBlank(source.versionId, \"Execution source dataset version id\")\n      return\n    case \"execution\":\n      assertNonBlank(source.executionId, \"Execution source execution id\")\n      return\n    default:\n      invalid(\n        `Execution source type '${String((source as { type?: unknown }).type)}' is not durable.`\n      )\n  }\n}\n\nfunction assertAuthorizationRef(ref: AuthorizationRef): void {\n  switch (ref.type) {\n    case \"principal\":\n      assertPrincipal(ref.principal, \"Authority principal\")\n      if (ref.credential) {\n        if (ref.credential.type !== \"session\" && ref.credential.type !== \"accessToken\") {\n          invalid(\n            `Unknown authority credential type '${String(\n              (ref.credential as { type?: unknown }).type\n            )}'.`\n          )\n        }\n        assertNonBlank(ref.credential.id, \"Authority credential id\")\n      }\n      return\n    case \"trustedPrimitive\":\n      assertTrustedPrimitiveKind(ref.primitive.kind, \"Authority primitive kind\")\n      assertNonBlank(ref.primitive.id, \"Authority primitive id\")\n      assertNonBlank(ref.primitive.runId, \"Authority primitive run id\")\n      return\n    case \"delegated\":\n      if (ref.delegation.kind !== \"share\") {\n        invalid(\n          `Unknown authority delegation kind '${String(\n            (ref.delegation as { kind?: unknown }).kind\n          )}'.`\n        )\n      }\n      assertNonBlank(ref.delegation.grantId, \"Authority delegation grant id\")\n      assertNonBlank(ref.delegation.sessionId, \"Authority delegation session id\")\n      return\n    case \"kernel\":\n      assertKernelOperation(ref.operation, \"Authority kernel operation\")\n      return\n    case \"disabled\":\n      return\n    default:\n      invalid(`Unknown authorization reference type '${String((ref as { type?: unknown }).type)}'.`)\n  }\n}\n\nfunction assertExecutorAuthority(record: ExecutionRecord): void {\n  const { executor, authorizationRef, requestedBy, source } = record\n\n  switch (executor.type) {\n    case \"request\": {\n      if (source.type !== \"http\" || source.requestId !== executor.requestId) {\n        invalid(\"Request executions require a matching HTTP source request id.\")\n      }\n      if (authorizationRef.type === \"principal\") {\n        if (!principalsEqual(requestedBy, authorizationRef.principal)) {\n          invalid(\"Request authority must match its requested-by principal.\")\n        }\n        return\n      }\n      if (authorizationRef.type === \"disabled\") {\n        if (requestedBy !== undefined) {\n          invalid(\"Auth-disabled request executions cannot have a requested-by principal.\")\n        }\n        return\n      }\n      if (authorizationRef.type === \"delegated\") {\n        if (requestedBy !== undefined) {\n          invalid(\"Delegated request executions cannot have a requested-by principal.\")\n        }\n        return\n      }\n      invalid(\"Request executions require principal, delegated, or explicitly disabled authority.\")\n      break\n    }\n    case \"primitive\": {\n      if (authorizationRef.type !== \"trustedPrimitive\") {\n        invalid(\"Primitive executions require trusted primitive authority.\")\n      }\n      if (\n        authorizationRef.primitive.kind !== executor.kind ||\n        authorizationRef.primitive.runId !== executor.runId\n      ) {\n        invalid(\"Trusted primitive authority must match the executor kind and run id.\")\n      }\n      return\n    }\n    case \"agent\": {\n      if (source.type !== \"execution\") {\n        invalid(\"Agent executions require a parent execution source.\")\n      }\n      if (\n        authorizationRef.type === \"principal\" &&\n        authorizationRef.principal.type === \"serviceAccount\" &&\n        authorizationRef.credential === undefined\n      ) {\n        return\n      }\n      if (\n        authorizationRef.type === \"principal\" &&\n        authorizationRef.principal.type === \"user\" &&\n        authorizationRef.credential !== undefined\n      ) {\n        return\n      }\n      if (authorizationRef.type === \"disabled\") return\n      invalid(\n        \"Agent executions require managed service-account, credentialed user, or explicitly disabled authority.\"\n      )\n      break\n    }\n    case \"kernel\": {\n      if (\n        authorizationRef.type !== \"kernel\" ||\n        !kernelOperationsEqual(authorizationRef.operation, executor.operation)\n      ) {\n        invalid(\"Kernel authority must match the executor operation.\")\n      }\n      if (requestedBy !== undefined) {\n        invalid(\"Kernel executions cannot have a requested-by principal.\")\n      }\n      return\n    }\n  }\n}\n\nasync function validatePrincipal(\n  principal: AuthorizablePrincipal | undefined,\n  projectId: string,\n  label: string,\n  lookup: ExecutionValidationLookup\n): Promise<void> {\n  if (!principal) return\n\n  const record =\n    principal.type === \"user\"\n      ? await lookup.auth.users.getById({ projectId, id: principal.id })\n      : await lookup.auth.serviceAccounts.getById({ projectId, id: principal.id })\n  if (!record) {\n    throw new ExecutionStorageError(\n      \"missing_principal\",\n      `[Sixb] ${label} '${principal.id}' does not exist in project '${projectId}'.`\n    )\n  }\n}\n\nasync function validateCredential(\n  record: ExecutionRecord,\n  lookup: ExecutionValidationLookup\n): Promise<void> {\n  if (record.authorizationRef.type !== \"principal\" || !record.authorizationRef.credential) return\n\n  const { principal, credential } = record.authorizationRef\n  if (credential.type === \"session\") {\n    const session = await lookup.auth.sessions.getById({\n      projectId: record.projectId,\n      id: credential.id,\n    })\n    if (!session) {\n      throw new ExecutionStorageError(\n        \"missing_credential\",\n        `[Sixb] Authority session '${credential.id}' does not exist in project '${record.projectId}'.`\n      )\n    }\n    if (principal.type !== \"user\" || session.userId !== principal.id) {\n      throw new ExecutionStorageError(\n        \"invalid_credential\",\n        `[Sixb] Authority session '${credential.id}' does not belong to principal '${principal.id}'.`\n      )\n    }\n    return\n  }\n\n  const token = await lookup.auth.accessTokens.getById({\n    projectId: record.projectId,\n    id: credential.id,\n  })\n  if (!token) {\n    throw new ExecutionStorageError(\n      \"missing_credential\",\n      `[Sixb] Authority access token '${credential.id}' does not exist in project '${record.projectId}'.`\n    )\n  }\n  if (token.subjectType !== principal.type || token.subjectId !== principal.id) {\n    throw new ExecutionStorageError(\n      \"invalid_credential\",\n      `[Sixb] Authority access token '${credential.id}' does not belong to principal '${principal.id}'.`\n    )\n  }\n}\n\nasync function validateDelegation(\n  record: ExecutionRecord,\n  lookup: ExecutionValidationLookup\n): Promise<void> {\n  if (record.authorizationRef.type !== \"delegated\") return\n  const { grantId, sessionId } = record.authorizationRef.delegation\n  const session = await lookup.getShareSession({ projectId: record.projectId, id: sessionId })\n  if (!session) {\n    throw new ExecutionStorageError(\n      \"missing_credential\",\n      `[Sixb] Authority shared session '${sessionId}' does not exist in project '${record.projectId}'.`\n    )\n  }\n  if (session.grantId !== grantId) {\n    throw new ExecutionStorageError(\n      \"invalid_credential\",\n      `[Sixb] Authority shared session '${sessionId}' does not belong to grant '${grantId}'.`\n    )\n  }\n}\n\nasync function validateParent(\n  record: ExecutionRecord,\n  lookup: ExecutionValidationLookup\n): Promise<void> {\n  if (record.source.type !== \"execution\") return\n  const parentExecutionId = record.source.executionId\n\n  const parent = await lookup.getExecution({\n    projectId: record.projectId,\n    id: parentExecutionId,\n  })\n  if (!parent) {\n    throw new ExecutionStorageError(\n      \"missing_parent_execution\",\n      `[Sixb] Parent execution '${parentExecutionId}' does not exist in project '${record.projectId}'.`\n    )\n  }\n  if (parent.correlationId !== record.correlationId) {\n    throw new ExecutionStorageError(\n      \"invalid_parent_execution\",\n      `[Sixb] Child execution '${record.id}' must preserve its parent correlation id.`\n    )\n  }\n  if (!principalsEqual(parent.requestedBy, record.requestedBy)) {\n    throw new ExecutionStorageError(\n      \"invalid_parent_execution\",\n      `[Sixb] Child execution '${record.id}' must preserve its parent requested-by principal.`\n    )\n  }\n  if (!isDeepStrictEqual(parent.requesterGroupIds, record.requesterGroupIds)) {\n    throw new ExecutionStorageError(\n      \"invalid_parent_execution\",\n      `[Sixb] Child execution '${record.id}' must preserve its parent requester-group snapshot.`\n    )\n  }\n  if (\n    record.executor.type === \"agent\" &&\n    isInheritedAgentAuthority(record.authorizationRef) &&\n    !isDeepStrictEqual(parent.authorizationRef, record.authorizationRef)\n  ) {\n    throw new ExecutionStorageError(\n      \"invalid_parent_execution\",\n      `[Sixb] Child Agent execution '${record.id}' must inherit its parent's authorization reference.`\n    )\n  }\n}\n\nfunction isInheritedAgentAuthority(ref: AuthorizationRef): boolean {\n  return (\n    ref.type === \"disabled\" ||\n    (ref.type === \"principal\" && ref.principal.type === \"user\" && ref.credential !== undefined)\n  )\n}\n\nfunction assertPrincipal(principal: AuthorizablePrincipal, label: string): void {\n  if (principal.type !== \"user\" && principal.type !== \"serviceAccount\") {\n    invalid(`${label} has unsupported type '${String((principal as { type?: unknown }).type)}'.`)\n  }\n  assertNonBlank(principal.id, `${label} id`)\n}\n\nfunction assertKernelOperation(operation: KernelOperation, label: string): void {\n  if (operation.type !== \"ontology.recover\") {\n    invalid(`${label} has unsupported type '${String((operation as { type?: unknown }).type)}'.`)\n  }\n  assertNonBlank(operation.recoveryId, `${label} recovery id`)\n}\n\nfunction assertTrustedPrimitiveKind(value: string, label: string): void {\n  if (!TRUSTED_PRIMITIVE_KINDS.has(value)) {\n    invalid(`${label} '${value}' is not supported.`)\n  }\n}\n\nfunction assertNonBlank(value: string, label: string): void {\n  if (typeof value !== \"string\" || !value.trim()) {\n    invalid(`${label} must be a non-empty string.`)\n  }\n}\n\nfunction assertValidDate(value: Date, label: string): void {\n  if (!(value instanceof Date) || !Number.isFinite(value.getTime())) {\n    invalid(`${label} must be a valid date.`)\n  }\n}\n\nfunction principalsEqual(\n  left: AuthorizablePrincipal | undefined,\n  right: AuthorizablePrincipal | undefined\n): boolean {\n  return left?.type === right?.type && left?.id === right?.id\n}\n\nfunction kernelOperationsEqual(left: KernelOperation, right: KernelOperation): boolean {\n  return left.type === right.type && left.recoveryId === right.recoveryId\n}\n\nfunction invalid(message: string): never {\n  throw new ExecutionStorageError(\"invalid_input\", `[Sixb] ${message}`)\n}\n\nconst TRUSTED_PRIMITIVE_KINDS = new Set([\n  \"action\",\n  \"pipeline\",\n  \"projection\",\n  \"rule\",\n  \"sync\",\n  \"webhook\",\n  \"workflow\",\n])\n"
+  ],
+  "mappings": ";;;;;;;AAUO,MAAM,+BAA8B,MAAM;AAAA,EAIpC;AAAA,EAHF,OAAO;AAAA,EAEhB,WAAW,CACA,MACT,SACA,UAAwB,CAAC,GACzB;AAAA,IACA,MAAM,SAAS,OAAO;AAAA,IAJb;AAAA;AAMb;;;ACpBA;AA6BA,eAAsB,uBAAsB,CAC1C,OACA,QAC0B;AAAA,EAC1B,IAAI,SAAS,MAAM;AAAA,EACnB,IAAI,WAAW,aAAa,MAAM,OAAO,SAAS,aAAa;AAAA,IAC7D,MAAM,SAAS,MAAM,OAAO,aAAa;AAAA,MACvC,WAAW,MAAM;AAAA,MACjB,IAAI,MAAM,OAAO;AAAA,IACnB,CAAC;AAAA,IACD,SAAS,QAAQ;AAAA,EACnB,EAAO,SAAI,WAAW,aAAa,MAAM,aAAa;AAAA,IACpD,SAAS,MAAM,0BAA0B;AAAA,MACvC,MAAM,OAAO;AAAA,MACb,WAAW,MAAM;AAAA,MACjB,WAAW,MAAM;AAAA,IACnB,CAAC;AAAA,EACH;AAAA,EACA,MAAM,SAAS,0BAAyB,KAAK,OAAO,mBAAmB,UAAU,CAAC,EAAE,CAAC;AAAA,EACrF,MAAM,mCAAkC,QAAQ,MAAM;AAAA,EACtD,OAAO;AAAA;AAGF,SAAS,yBAAwB,CACtC,OACA,YAAkB,IAAI,MACL;AAAA,EACjB,MAAM,SAA0B;AAAA,IAC9B,IAAI,MAAM;AAAA,IACV,WAAW,MAAM;AAAA,IACjB,mBAAmB,2BAA2B,MAAM,qBAAqB,CAAC,CAAC;AAAA,OACvE,MAAM,gBAAgB,YAAY,CAAC,IAAI,EAAE,aAAa,gBAAgB,MAAM,WAAW,EAAE;AAAA,IAC7F,UAAU,gBAAgB,MAAM,QAAQ;AAAA,IACxC,QAAQ,gBAAgB,MAAM,MAAM;AAAA,IACpC,eAAe,MAAM;AAAA,IACrB,kBAAkB,gBAAgB,MAAM,gBAAgB;AAAA,IACxD,WAAW,IAAI,KAAK,SAAS;AAAA,EAC/B;AAAA,EAEA,kBAAkB,MAAM;AAAA,EACxB,wBAAwB,MAAM;AAAA,EAC9B,OAAO;AAAA;AAGT,eAAsB,kCAAiC,CACrD,QACA,QACe;AAAA,EACf,MAAM,kBAAkB,OAAO,aAAa,OAAO,WAAW,0BAA0B,MAAM;AAAA,EAE9F,IAAI,OAAO,iBAAiB,SAAS,aAAa;AAAA,IAChD,MAAM,kBACJ,OAAO,iBAAiB,WACxB,OAAO,WACP,uBACA,MACF;AAAA,IACA,MAAM,mBAAmB,QAAQ,MAAM;AAAA,EACzC;AAAA,EACA,IAAI,OAAO,iBAAiB,SAAS,aAAa;AAAA,IAChD,MAAM,mBAAmB,QAAQ,MAAM;AAAA,EACzC;AAAA,EAEA,MAAM,eAAe,QAAQ,MAAM;AAAA;AAG9B,SAAS,oBAAoB,CAAC,QAA0C;AAAA,EAC7E,OAAO,gBAAgB,MAAM;AAAA;AAG/B,SAAS,iBAAiB,CAAC,QAA+B;AAAA,EACxD,eAAe,OAAO,IAAI,cAAc;AAAA,EACxC,eAAe,OAAO,WAAW,sBAAsB;AAAA,EACvD,eAAe,OAAO,eAAe,0BAA0B;AAAA,EAC/D,gBAAgB,OAAO,WAAW,qBAAqB;AAAA,EAEvD,IAAI,OAAO,aAAa;AAAA,IACtB,gBAAgB,OAAO,aAAa,wBAAwB;AAAA,EAC9D;AAAA,EAEA,eAAe,OAAO,QAAQ;AAAA,EAC9B,aAAa,OAAO,MAAM;AAAA,EAC1B,uBAAuB,OAAO,gBAAgB;AAAA;AAGhD,SAAS,cAAc,CAAC,UAA0C;AAAA,EAChE,QAAQ,SAAS;AAAA,SACV;AAAA,MACH,eAAe,SAAS,WAAW,qBAAqB;AAAA,MACxD;AAAA,SACG;AAAA,MACH,2BAA2B,SAAS,MAAM,yBAAyB;AAAA,MACnE,eAAe,SAAS,OAAO,2BAA2B;AAAA,MAC1D;AAAA,SACG;AAAA,MACH,eAAe,SAAS,OAAO,uBAAuB;AAAA,MACtD;AAAA,SACG;AAAA,MACH,sBAAsB,SAAS,WAAW,2BAA2B;AAAA,MACrE;AAAA;AAAA,MAEA,QAAQ,oCAAoC,OAAQ,SAAgC,IAAI,KAAK;AAAA;AAAA;AAInG,SAAS,YAAY,CAAC,QAAsC;AAAA,EAC1D,QAAQ,OAAO;AAAA,SACR;AAAA,MACH,eAAe,OAAO,WAAW,6BAA6B;AAAA,MAC9D;AAAA,SACG;AAAA,MACH,eAAe,OAAO,YAAY,8BAA8B;AAAA,MAChE;AAAA,SACG;AAAA,SACA;AAAA,MACH,eAAe,OAAO,SAAS,2BAA2B;AAAA,MAC1D;AAAA,SACG;AAAA,MACH,eAAe,OAAO,WAAW,6BAA6B;AAAA,MAC9D,eAAe,OAAO,WAAW,qCAAqC;AAAA,MACtE;AAAA,SACG;AAAA,MACH,eAAe,OAAO,aAAa,+BAA+B;AAAA,MAClE;AAAA;AAAA,MAEA,QACE,0BAA0B,OAAQ,OAA8B,IAAI,oBACtE;AAAA;AAAA;AAIN,SAAS,sBAAsB,CAAC,KAA6B;AAAA,EAC3D,QAAQ,IAAI;AAAA,SACL;AAAA,MACH,gBAAgB,IAAI,WAAW,qBAAqB;AAAA,MACpD,IAAI,IAAI,YAAY;AAAA,QAClB,IAAI,IAAI,WAAW,SAAS,aAAa,IAAI,WAAW,SAAS,eAAe;AAAA,UAC9E,QACE,sCAAsC,OACnC,IAAI,WAAkC,IACzC,KACF;AAAA,QACF;AAAA,QACA,eAAe,IAAI,WAAW,IAAI,yBAAyB;AAAA,MAC7D;AAAA,MACA;AAAA,SACG;AAAA,MACH,2BAA2B,IAAI,UAAU,MAAM,0BAA0B;AAAA,MACzE,eAAe,IAAI,UAAU,IAAI,wBAAwB;AAAA,MACzD,eAAe,IAAI,UAAU,OAAO,4BAA4B;AAAA,MAChE;AAAA,SACG;AAAA,MACH,IAAI,IAAI,WAAW,SAAS,SAAS;AAAA,QACnC,QACE,sCAAsC,OACnC,IAAI,WAAkC,IACzC,KACF;AAAA,MACF;AAAA,MACA,eAAe,IAAI,WAAW,SAAS,+BAA+B;AAAA,MACtE,eAAe,IAAI,WAAW,WAAW,iCAAiC;AAAA,MAC1E;AAAA,SACG;AAAA,MACH,sBAAsB,IAAI,WAAW,4BAA4B;AAAA,MACjE;AAAA,SACG;AAAA,MACH;AAAA;AAAA,MAEA,QAAQ,yCAAyC,OAAQ,IAA2B,IAAI,KAAK;AAAA;AAAA;AAInG,SAAS,uBAAuB,CAAC,QAA+B;AAAA,EAC9D,QAAQ,UAAU,kBAAkB,aAAa,WAAW;AAAA,EAE5D,QAAQ,SAAS;AAAA,SACV,WAAW;AAAA,MACd,IAAI,OAAO,SAAS,UAAU,OAAO,cAAc,SAAS,WAAW;AAAA,QACrE,QAAQ,+DAA+D;AAAA,MACzE;AAAA,MACA,IAAI,iBAAiB,SAAS,aAAa;AAAA,QACzC,IAAI,CAAC,gBAAgB,aAAa,iBAAiB,SAAS,GAAG;AAAA,UAC7D,QAAQ,0DAA0D;AAAA,QACpE;AAAA,QACA;AAAA,MACF;AAAA,MACA,IAAI,iBAAiB,SAAS,YAAY;AAAA,QACxC,IAAI,gBAAgB,WAAW;AAAA,UAC7B,QAAQ,wEAAwE;AAAA,QAClF;AAAA,QACA;AAAA,MACF;AAAA,MACA,IAAI,iBAAiB,SAAS,aAAa;AAAA,QACzC,IAAI,gBAAgB,WAAW;AAAA,UAC7B,QAAQ,oEAAoE;AAAA,QAC9E;AAAA,QACA;AAAA,MACF;AAAA,MACA,QAAQ,oFAAoF;AAAA,MAC5F;AAAA,IACF;AAAA,SACK,aAAa;AAAA,MAChB,IAAI,iBAAiB,SAAS,oBAAoB;AAAA,QAChD,QAAQ,2DAA2D;AAAA,MACrE;AAAA,MACA,IACE,iBAAiB,UAAU,SAAS,SAAS,QAC7C,iBAAiB,UAAU,UAAU,SAAS,OAC9C;AAAA,QACA,QAAQ,sEAAsE;AAAA,MAChF;AAAA,MACA;AAAA,IACF;AAAA,SACK,SAAS;AAAA,MACZ,IAAI,OAAO,SAAS,aAAa;AAAA,QAC/B,QAAQ,qDAAqD;AAAA,MAC/D;AAAA,MACA,IACE,iBAAiB,SAAS,eAC1B,iBAAiB,UAAU,SAAS,oBACpC,iBAAiB,eAAe,WAChC;AAAA,QACA;AAAA,MACF;AAAA,MACA,IACE,iBAAiB,SAAS,eAC1B,iBAAiB,UAAU,SAAS,UACpC,iBAAiB,eAAe,WAChC;AAAA,QACA;AAAA,MACF;AAAA,MACA,IAAI,iBAAiB,SAAS;AAAA,QAAY;AAAA,MAC1C,QACE,wGACF;AAAA,MACA;AAAA,IACF;AAAA,SACK,UAAU;AAAA,MACb,IACE,iBAAiB,SAAS,YAC1B,CAAC,sBAAsB,iBAAiB,WAAW,SAAS,SAAS,GACrE;AAAA,QACA,QAAQ,qDAAqD;AAAA,MAC/D;AAAA,MACA,IAAI,gBAAgB,WAAW;AAAA,QAC7B,QAAQ,yDAAyD;AAAA,MACnE;AAAA,MACA;AAAA,IACF;AAAA;AAAA;AAIJ,eAAe,iBAAiB,CAC9B,WACA,WACA,OACA,QACe;AAAA,EACf,IAAI,CAAC;AAAA,IAAW;AAAA,EAEhB,MAAM,SACJ,UAAU,SAAS,SACf,MAAM,OAAO,KAAK,MAAM,QAAQ,EAAE,WAAW,IAAI,UAAU,GAAG,CAAC,IAC/D,MAAM,OAAO,KAAK,gBAAgB,QAAQ,EAAE,WAAW,IAAI,UAAU,GAAG,CAAC;AAAA,EAC/E,IAAI,CAAC,QAAQ;AAAA,IACX,MAAM,IAAI,uBACR,qBACA,UAAU,UAAU,UAAU,kCAAkC,aAClE;AAAA,EACF;AAAA;AAGF,eAAe,kBAAkB,CAC/B,QACA,QACe;AAAA,EACf,IAAI,OAAO,iBAAiB,SAAS,eAAe,CAAC,OAAO,iBAAiB;AAAA,IAAY;AAAA,EAEzF,QAAQ,WAAW,eAAe,OAAO;AAAA,EACzC,IAAI,WAAW,SAAS,WAAW;AAAA,IACjC,MAAM,UAAU,MAAM,OAAO,KAAK,SAAS,QAAQ;AAAA,MACjD,WAAW,OAAO;AAAA,MAClB,IAAI,WAAW;AAAA,IACjB,CAAC;AAAA,IACD,IAAI,CAAC,SAAS;AAAA,MACZ,MAAM,IAAI,uBACR,sBACA,6BAA6B,WAAW,kCAAkC,OAAO,aACnF;AAAA,IACF;AAAA,IACA,IAAI,UAAU,SAAS,UAAU,QAAQ,WAAW,UAAU,IAAI;AAAA,MAChE,MAAM,IAAI,uBACR,sBACA,6BAA6B,WAAW,qCAAqC,UAAU,MACzF;AAAA,IACF;AAAA,IACA;AAAA,EACF;AAAA,EAEA,MAAM,QAAQ,MAAM,OAAO,KAAK,aAAa,QAAQ;AAAA,IACnD,WAAW,OAAO;AAAA,IAClB,IAAI,WAAW;AAAA,EACjB,CAAC;AAAA,EACD,IAAI,CAAC,OAAO;AAAA,IACV,MAAM,IAAI,uBACR,sBACA,kCAAkC,WAAW,kCAAkC,OAAO,aACxF;AAAA,EACF;AAAA,EACA,IAAI,MAAM,gBAAgB,UAAU,QAAQ,MAAM,cAAc,UAAU,IAAI;AAAA,IAC5E,MAAM,IAAI,uBACR,sBACA,kCAAkC,WAAW,qCAAqC,UAAU,MAC9F;AAAA,EACF;AAAA;AAGF,eAAe,kBAAkB,CAC/B,QACA,QACe;AAAA,EACf,IAAI,OAAO,iBAAiB,SAAS;AAAA,IAAa;AAAA,EAClD,QAAQ,SAAS,cAAc,OAAO,iBAAiB;AAAA,EACvD,MAAM,UAAU,MAAM,OAAO,gBAAgB,EAAE,WAAW,OAAO,WAAW,IAAI,UAAU,CAAC;AAAA,EAC3F,IAAI,CAAC,SAAS;AAAA,IACZ,MAAM,IAAI,uBACR,sBACA,oCAAoC,yCAAyC,OAAO,aACtF;AAAA,EACF;AAAA,EACA,IAAI,QAAQ,YAAY,SAAS;AAAA,IAC/B,MAAM,IAAI,uBACR,sBACA,oCAAoC,wCAAwC,WAC9E;AAAA,EACF;AAAA;AAGF,eAAe,cAAc,CAC3B,QACA,QACe;AAAA,EACf,IAAI,OAAO,OAAO,SAAS;AAAA,IAAa;AAAA,EACxC,MAAM,oBAAoB,OAAO,OAAO;AAAA,EAExC,MAAM,SAAS,MAAM,OAAO,aAAa;AAAA,IACvC,WAAW,OAAO;AAAA,IAClB,IAAI;AAAA,EACN,CAAC;AAAA,EACD,IAAI,CAAC,QAAQ;AAAA,IACX,MAAM,IAAI,uBACR,4BACA,4BAA4B,iDAAiD,OAAO,aACtF;AAAA,EACF;AAAA,EACA,IAAI,OAAO,kBAAkB,OAAO,eAAe;AAAA,IACjD,MAAM,IAAI,uBACR,4BACA,2BAA2B,OAAO,8CACpC;AAAA,EACF;AAAA,EACA,IAAI,CAAC,gBAAgB,OAAO,aAAa,OAAO,WAAW,GAAG;AAAA,IAC5D,MAAM,IAAI,uBACR,4BACA,2BAA2B,OAAO,sDACpC;AAAA,EACF;AAAA,EACA,IAAI,CAAC,kBAAkB,OAAO,mBAAmB,OAAO,iBAAiB,GAAG;AAAA,IAC1E,MAAM,IAAI,uBACR,4BACA,2BAA2B,OAAO,wDACpC;AAAA,EACF;AAAA,EACA,IACE,OAAO,SAAS,SAAS,WACzB,0BAA0B,OAAO,gBAAgB,KACjD,CAAC,kBAAkB,OAAO,kBAAkB,OAAO,gBAAgB,GACnE;AAAA,IACA,MAAM,IAAI,uBACR,4BACA,iCAAiC,OAAO,wDAC1C;AAAA,EACF;AAAA;AAGF,SAAS,yBAAyB,CAAC,KAAgC;AAAA,EACjE,OACE,IAAI,SAAS,cACZ,IAAI,SAAS,eAAe,IAAI,UAAU,SAAS,UAAU,IAAI,eAAe;AAAA;AAIrF,SAAS,eAAe,CAAC,WAAkC,OAAqB;AAAA,EAC9E,IAAI,UAAU,SAAS,UAAU,UAAU,SAAS,kBAAkB;AAAA,IACpE,QAAQ,GAAG,+BAA+B,OAAQ,UAAiC,IAAI,KAAK;AAAA,EAC9F;AAAA,EACA,eAAe,UAAU,IAAI,GAAG,UAAU;AAAA;AAG5C,SAAS,qBAAqB,CAAC,WAA4B,OAAqB;AAAA,EAC9E,IAAI,UAAU,SAAS,oBAAoB;AAAA,IACzC,QAAQ,GAAG,+BAA+B,OAAQ,UAAiC,IAAI,KAAK;AAAA,EAC9F;AAAA,EACA,eAAe,UAAU,YAAY,GAAG,mBAAmB;AAAA;AAG7D,SAAS,0BAA0B,CAAC,OAAe,OAAqB;AAAA,EACtE,IAAI,CAAC,wBAAwB,IAAI,KAAK,GAAG;AAAA,IACvC,QAAQ,GAAG,UAAU,0BAA0B;AAAA,EACjD;AAAA;AAGF,SAAS,cAAc,CAAC,OAAe,OAAqB;AAAA,EAC1D,IAAI,OAAO,UAAU,YAAY,CAAC,MAAM,KAAK,GAAG;AAAA,IAC9C,QAAQ,GAAG,mCAAmC;AAAA,EAChD;AAAA;AAGF,SAAS,eAAe,CAAC,OAAa,OAAqB;AAAA,EACzD,IAAI,EAAE,iBAAiB,SAAS,CAAC,OAAO,SAAS,MAAM,QAAQ,CAAC,GAAG;AAAA,IACjE,QAAQ,GAAG,6BAA6B;AAAA,EAC1C;AAAA;AAGF,SAAS,eAAe,CACtB,MACA,OACS;AAAA,EACT,OAAO,MAAM,SAAS,OAAO,QAAQ,MAAM,OAAO,OAAO;AAAA;AAG3D,SAAS,qBAAqB,CAAC,MAAuB,OAAiC;AAAA,EACrF,OAAO,KAAK,SAAS,MAAM,QAAQ,KAAK,eAAe,MAAM;AAAA;AAG/D,SAAS,OAAO,CAAC,SAAwB;AAAA,EACvC,MAAM,IAAI,uBAAsB,iBAAiB,UAAU,SAAS;AAAA;AAGtE,IAAM,0BAA0B,IAAI,IAAI;AAAA,EACtC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,CAAC;",
+  "debugId": "78FF364F2E082FE564756E2164756E21",
+  "names": []
+}