@agent-native/core 0.130.2 → 0.131.3

package/dist/triggers/dispatcher.js

@@ -5,137 +5,26 @@
  * subscribes to their events, and dispatches them (condition eval → agent
  * loop) when matching events fire.
  */
-import { getStoredModelForEngine, normalizeModelForEngine, resolveEngine, } from "../agent/engine/index.js";
-import { actionsToEngineTools, filterInitialEngineTools, getOwnerActiveApiKey, } from "../agent/production-agent.js";
-import { runAgentLoopDirectWithSoftTimeout } from "../agent/run-loop-with-resume.js";
-import { attachToolSearch } from "../agent/tool-search.js";
-import { createThread } from "../chat-threads/store.js";
+import { getOwnerActiveApiKey } from "../agent/production-agent.js";
+import { automationMatchesEventOwner, resolveAutomationExecutionIdentity, } from "../automations/service.js";
 import { subscribe, unsubscribe } from "../event-bus/index.js";
-import { resourceListAllOwners, resourcePut } from "../resources/store.js";
-import { runWithRequestContext } from "../server/request-context.js";
+import { isBackgroundAutomationRunActive, runBackgroundAutomation, } from "../jobs/background-automation-runner.js";
+import { buildJobResourceContent, parseJobResource, } from "../jobs/frontmatter.js";
+import { resourceListAllOwners, resourcePut, } from "../resources/store.js";
 import { evaluateCondition } from "./condition-evaluator.js";
-// Re-use the job frontmatter parser — triggers extend the same format.
-const FRONTMATTER_RE = /^---\n([\s\S]*?)\n---\n?([\s\S]*)$/;
 export function parseTriggerFrontmatter(content) {
-    const match = content.match(FRONTMATTER_RE);
-    if (!match) {
-        return {
-            meta: {
-                schedule: "",
-                enabled: false,
-                triggerType: "schedule",
-                mode: "agentic",
-            },
-            body: content,
-        };
-    }
-    const yamlBlock = match[1];
-    const body = match[2].trim();
-    const meta = {
-        schedule: "",
-        enabled: true,
-        triggerType: "schedule",
-        mode: "agentic",
+    const { meta, body } = parseJobResource(content);
+    return {
+        meta: {
+            ...meta,
+            triggerType: meta.triggerType ?? "schedule",
+            mode: meta.mode ?? "agentic",
+        },
+        body,
     };
-    for (const line of yamlBlock.split("\n")) {
-        const colonIdx = line.indexOf(":");
-        if (colonIdx === -1)
-            continue;
-        const key = line.slice(0, colonIdx).trim();
-        let value = line.slice(colonIdx + 1).trim();
-        if ((value.startsWith('"') && value.endsWith('"')) ||
-            (value.startsWith("'") && value.endsWith("'"))) {
-            value = value.slice(1, -1);
-        }
-        switch (key) {
-            case "schedule":
-                meta.schedule = value;
-                break;
-            case "enabled":
-                meta.enabled = value !== "false";
-                break;
-            case "triggerType":
-                meta.triggerType =
-                    value === "event" || value === "schedule" ? value : "schedule";
-                break;
-            case "event":
-                meta.event = value;
-                break;
-            case "condition":
-                meta.condition = value;
-                break;
-            case "mode":
-                meta.mode =
-                    value === "deterministic" || value === "agentic" ? value : "agentic";
-                break;
-            case "domain":
-                meta.domain = value;
-                break;
-            case "delegatedPolicyId":
-                meta.delegatedPolicyId = value || undefined;
-                break;
-            case "createdBy":
-                meta.createdBy = value;
-                break;
-            case "orgId":
-                meta.orgId = value;
-                break;
-            case "runAs":
-                meta.runAs =
-                    value === "shared" || value === "creator" ? value : undefined;
-                break;
-            case "lastRun":
-                meta.lastRun = value;
-                break;
-            case "lastStatus":
-                meta.lastStatus = value;
-                break;
-            case "lastError":
-                meta.lastError = value;
-                break;
-            case "nextRun":
-                meta.nextRun = value;
-                break;
-        }
-    }
-    return { meta, body };
 }
 export function buildTriggerContent(meta, body) {
-    const lines = ["---"];
-    lines.push(`schedule: "${meta.schedule}"`);
-    lines.push(`enabled: ${meta.enabled}`);
-    lines.push(`triggerType: ${meta.triggerType}`);
-    if (meta.event)
-        lines.push(`event: ${meta.event}`);
-    if (meta.condition)
-        lines.push(`condition: "${meta.condition.replace(/"/g, '\\"')}"`);
-    lines.push(`mode: ${meta.mode}`);
-    if (meta.domain)
-        lines.push(`domain: ${meta.domain}`);
-    if (meta.delegatedPolicyId &&
-        !/^[a-z0-9][a-z0-9._:-]{0,127}$/i.test(meta.delegatedPolicyId)) {
-        throw new Error("Delegated automation policy IDs must be 1-128 letters, numbers, dots, underscores, colons, or hyphens.");
-    }
-    if (meta.delegatedPolicyId)
-        lines.push(`delegatedPolicyId: ${meta.delegatedPolicyId}`);
-    if (meta.createdBy)
-        lines.push(`createdBy: ${meta.createdBy}`);
-    if (meta.orgId)
-        lines.push(`orgId: ${meta.orgId}`);
-    if (meta.runAs)
-        lines.push(`runAs: ${meta.runAs}`);
-    if (meta.lastRun)
-        lines.push(`lastRun: ${meta.lastRun}`);
-    if (meta.lastStatus)
-        lines.push(`lastStatus: ${meta.lastStatus}`);
-    if (meta.lastError)
-        lines.push(`lastError: "${meta.lastError.replace(/"/g, '\\"')}"`);
-    if (meta.nextRun)
-        lines.push(`nextRun: ${meta.nextRun}`);
-    lines.push("---");
-    lines.push("");
-    lines.push(body);
-    return lines.join("\n");
+    return buildJobResourceContent(meta, body);
 }
 // Track active subscriptions (eventName -> subscription id) to avoid
 // double-subscribing AND so subscriptions for events that no longer have any
@@ -201,34 +90,72 @@ async function handleEvent(eventName, payload, eventMeta) {
             if (!r.path.endsWith(".md"))
                 return false;
             const { meta } = parseTriggerFrontmatter(r.content);
-            // Scope: only dispatch triggers owned by the event's owner,
-            // or shared triggers. Prevents cross-tenant trigger execution.
-            if (eventMeta.owner &&
-                r.owner !== eventMeta.owner &&
-                r.owner !== "__shared__") {
-                return false;
-            }
             return (meta.triggerType === "event" &&
                 meta.event === eventName &&
                 meta.enabled &&
-                meta.lastStatus !== "running");
+                !isBackgroundAutomationRunActive(meta));
         });
         for (const resource of matchingTriggers) {
             const { meta, body } = parseTriggerFrontmatter(resource.content);
             if (!body.trim())
                 continue;
+            let identity;
+            if (resource.owner === "__shared__") {
+                // Compatibility for old workspace-wide event resources. New personal
+                // and organization automations always require an event owner.
+                const userEmail = meta.createdBy || resource.owner;
+                identity = {
+                    userEmail,
+                    orgId: meta.orgId,
+                    eventOwner: userEmail.toLowerCase(),
+                };
+            }
+            else {
+                let resolved;
+                try {
+                    resolved = await resolveAutomationExecutionIdentity(resource.owner, meta);
+                }
+                catch {
+                    meta.lastRun = new Date().toISOString();
+                    meta.lastStatus = "skipped";
+                    meta.lastError =
+                        "Could not verify the automation execution identity.";
+                    await resourcePut(resource.owner, resource.path, buildTriggerContent(meta, body));
+                    continue;
+                }
+                if (!resolved.ok) {
+                    meta.lastRun = new Date().toISOString();
+                    meta.lastStatus = "skipped";
+                    meta.lastError = resolved.reason;
+                    await resourcePut(resource.owner, resource.path, buildTriggerContent(meta, body));
+                    continue;
+                }
+                if (!automationMatchesEventOwner(resolved.identity, eventMeta.owner)) {
+                    continue;
+                }
+                identity = resolved.identity;
+            }
             // Resolve API key for condition evaluation
-            const owner = meta.createdBy || resource.owner;
+            const owner = identity.userEmail;
             const userApiKey = await getOwnerActiveApiKey(owner);
             const apiKey = userApiKey || _deps.apiKey;
             if (!apiKey) {
-                console.warn(`[triggers] No API key for trigger "${resource.path}" — skipping`);
+                meta.lastRun = new Date().toISOString();
+                meta.lastStatus = "error";
+                meta.lastError = "No API key is available for this automation";
+                await resourcePut(resource.owner, resource.path, buildTriggerContent(meta, body));
+                console.warn(`[triggers] ${meta.lastError}: "${resource.path}"`);
                 continue;
             }
             // Evaluate condition
             const matches = await evaluateCondition(meta.condition, payload, apiKey);
-            if (!matches)
+            if (!matches) {
+                meta.lastRun = new Date().toISOString();
+                meta.lastStatus = "skipped";
+                meta.lastError = undefined;
+                await resourcePut(resource.owner, resource.path, buildTriggerContent(meta, body));
                 continue;
+            }
             // Dispatch. Guard against concurrent duplicate dispatch of the same
             // trigger (TOCTOU on lastStatus) with an in-process lock keyed on the
             // trigger's identity.
@@ -238,7 +165,7 @@ async function handleEvent(eventName, payload, eventMeta) {
             if (meta.mode === "agentic") {
                 _dispatchingTriggers.add(dispatchKey);
                 try {
-                    await dispatchAgentic(resource, meta, body, payload, eventMeta, apiKey);
+                    await dispatchAgentic(resource, meta, body, payload, eventMeta, identity);
                 }
                 finally {
                     _dispatchingTriggers.delete(dispatchKey);
@@ -253,108 +180,61 @@ async function handleEvent(eventName, payload, eventMeta) {
         console.error(`[triggers] Error handling event "${eventName}":`, err);
     }
 }
-/**
- * Validate that the run-as user still exists and (if scoped to an org) is
- * still a member of that org. Mirrors the recurring-jobs scheduler check
- * (audit 12 #10): event-triggered automations must stop firing when the
- * creator is removed/demoted.
- */
-async function isTriggerRunAsStillValid(jobUserEmail, jobOrgId) {
-    if (jobUserEmail === "__shared__")
-        return { ok: true };
-    try {
-        const { getDbExec } = await import("../db/client.js");
-        const db = getDbExec();
-        const userResult = await db.execute({
-            sql: `SELECT 1 FROM "user" WHERE email = ? LIMIT 1`,
-            args: [jobUserEmail],
-        });
-        if (!userResult.rows || userResult.rows.length === 0) {
-            return { ok: false, reason: `user "${jobUserEmail}" no longer exists` };
-        }
-        if (jobOrgId) {
-            const memberResult = await db.execute({
-                sql: `SELECT 1 FROM org_members WHERE org_id = ? AND LOWER(email) = LOWER(?) LIMIT 1`,
-                args: [jobOrgId, jobUserEmail],
-            });
-            if (!memberResult.rows || memberResult.rows.length === 0) {
-                return {
-                    ok: false,
-                    reason: `user "${jobUserEmail}" is no longer a member of org "${jobOrgId}"`,
-                };
-            }
-        }
-        return { ok: true };
-    }
-    catch (err) {
-        const msg = err?.message?.toLowerCase() ?? "";
-        if (msg.includes("does not exist") ||
-            msg.includes("no such table") ||
-            msg.includes("undefined table")) {
-            return { ok: true };
-        }
-        console.warn(`[triggers] User/membership validation failed for "${jobUserEmail}":`, err?.message);
-        return { ok: true };
-    }
-}
-async function dispatchAgentic(resource, meta, body, payload, eventMeta, apiKey) {
+async function dispatchAgentic(resource, meta, body, payload, eventMeta, identity) {
     if (!_deps)
         return;
     const triggerName = resource.path.replace(/^jobs\//, "").replace(/\.md$/, "");
     const now = new Date();
-    const jobUserEmail = meta.createdBy || resource.owner;
-    const jobOrgId = meta.orgId ?? undefined;
-    // SECURITY (audit 12 #10): re-validate the run-as user/membership on
-    // every dispatch. Sharing revocation, user deletion, and org-member
-    // removal must take effect for already-scheduled triggers. Skip the
-    // dispatch on failure; leave the trigger entry alone for admin review.
-    const validity = await isTriggerRunAsStillValid(jobUserEmail, jobOrgId);
-    if (!validity.ok) {
-        console.warn(`[triggers] Skipping trigger "${triggerName}": ${validity.reason}. ` +
-            `User/membership no longer valid — leaving entry for admin review.`);
-        meta.lastRun = now.toISOString();
-        meta.lastStatus = "skipped";
-        meta.lastError = validity.reason;
-        await resourcePut(resource.owner, resource.path, buildTriggerContent(meta, body));
-        return;
-    }
+    const jobUserEmail = identity.userEmail;
+    const jobOrgId = identity.orgId;
     // Mark as running
     meta.lastRun = now.toISOString();
     meta.lastStatus = "running";
     meta.lastError = undefined;
     await resourcePut(resource.owner, resource.path, buildTriggerContent(meta, body));
-    await runWithRequestContext({ userEmail: jobUserEmail, orgId: jobOrgId }, async () => {
-        try {
-            const baseActions = _deps.getActions();
-            const systemPrompt = await _deps.getSystemPrompt(jobUserEmail);
-            const initialToolNames = _deps.getInitialToolNames?.();
-            // Only attach tool-search (and pay its schema cost) when the caller
-            // actually supplied an initial subset to filter down to — otherwise
-            // this is byte-for-byte the prior unfiltered behavior.
-            const actions = initialToolNames
-                ? attachToolSearch({ ...baseActions })
-                : baseActions;
-            const availableTools = actionsToEngineTools(actions);
-            const tools = filterInitialEngineTools(availableTools, initialToolNames);
-            const engine = await resolveEngine({
-                apiKey,
-                appId: _deps.appId,
-            });
-            const modelCandidate = _deps.model ??
-                (await getStoredModelForEngine(engine, { appId: _deps.appId })) ??
-                engine.defaultModel;
-            const model = normalizeModelForEngine(engine, modelCandidate);
-            const thread = await createThread(jobUserEmail, {
-                title: `Trigger: ${triggerName} — ${now.toLocaleDateString()}`,
-            });
-            let payloadStr;
-            try {
-                payloadStr = JSON.stringify(payload, null, 2);
-            }
-            catch {
-                payloadStr = String(payload);
-            }
-            const triggerText = `[Automation Trigger: ${triggerName}]
+    let payloadStr;
+    try {
+        payloadStr = JSON.stringify(payload, null, 2);
+    }
+    catch {
+        payloadStr = String(payload);
+    }
+    const automation = {
+        name: triggerName,
+        meta,
+        body,
+        resource,
+    };
+    const requestContext = meta.originScopeId && meta.deliveryPlatform && meta.deliveryDestination
+        ? {
+            isIntegrationCaller: true,
+            integration: {
+                taskId: `automation:${triggerName}:${eventMeta.eventId}`,
+                scopeId: meta.originScopeId,
+                principalType: "service",
+                incoming: {
+                    platform: meta.deliveryPlatform,
+                    externalThreadId: `${meta.deliveryTenantId || "unknown"}:${meta.deliveryDestination}:${meta.deliveryThreadRef || "root"}`,
+                    text: "",
+                    tenantId: meta.deliveryTenantId,
+                    integrationScopeId: meta.originScopeId,
+                    platformContext: {
+                        channelId: meta.deliveryDestination,
+                        threadTs: meta.deliveryThreadRef,
+                        teamId: meta.deliveryTenantId,
+                    },
+                    threadRef: meta.deliveryThreadRef,
+                    timestamp: now.getTime(),
+                },
+            },
+        }
+        : undefined;
+    try {
+        await runBackgroundAutomation({
+            automation,
+            ownerEmail: jobUserEmail,
+            orgId: jobOrgId,
+            prompt: `[Automation Trigger: ${triggerName}]
 Event: ${meta.event}
 Event ID: ${eventMeta.eventId}
 Fired at: ${eventMeta.emittedAt}
@@ -364,79 +244,29 @@ ${payloadStr}
 
 Execute the following automation instructions:
 
-${body}`;
-            const messages = [
-                {
-                    role: "user",
-                    content: [{ type: "text", text: triggerText }],
-                },
-            ];
-            const controller = new AbortController();
-            const timeout = setTimeout(() => controller.abort(), 5 * 60 * 1000);
-            const events = [];
-            let triggerUsage = null;
-            try {
-                // Wrapper, not raw `runAgentLoop`: an automation runs with nobody
-                // watching, so a transport-level cut (gateway 45s, socket hang up)
-                // has to be resumed inside this invocation or the trigger silently
-                // does nothing. `undefined` budget + the hosted default keeps the
-                // soft timeout under the serverless wall on hosts that have one and
-                // disabled locally.
-                triggerUsage = await runAgentLoopDirectWithSoftTimeout({
-                    engine,
-                    model,
-                    systemPrompt,
-                    tools,
-                    availableTools,
-                    messages,
-                    actions,
-                    send: (event) => events.push(event),
-                    signal: controller.signal,
-                    threadId: thread.id,
-                    actionCaller: "automation",
-                    automation: {
-                        triggerId: resource.id,
-                        triggerName,
-                        policyId: meta.delegatedPolicyId,
-                    },
-                }, undefined, { useHostedDefault: true });
-            }
-            finally {
-                clearTimeout(timeout);
-            }
-            if (triggerUsage &&
-                (triggerUsage.inputTokens > 0 ||
-                    triggerUsage.outputTokens > 0 ||
-                    triggerUsage.cacheReadTokens > 0 ||
-                    triggerUsage.cacheWriteTokens > 0)) {
-                try {
-                    const { recordUsage } = await import("../usage/store.js");
-                    await recordUsage({
-                        ownerEmail: jobUserEmail,
-                        inputTokens: triggerUsage.inputTokens,
-                        outputTokens: triggerUsage.outputTokens,
-                        cacheReadTokens: triggerUsage.cacheReadTokens,
-                        cacheWriteTokens: triggerUsage.cacheWriteTokens,
-                        model: triggerUsage.model,
-                        label: `automation:${triggerName}`,
-                        app: _deps.appId,
-                        refId: eventMeta.eventId,
-                    });
-                }
-                catch {
-                    // Usage attribution must not break automation dispatch.
-                }
-            }
-            meta.lastStatus = "success";
-            await resourcePut(resource.owner, resource.path, buildTriggerContent(meta, body));
-            console.log(`[triggers] "${triggerName}" completed successfully`);
-        }
-        catch (err) {
-            meta.lastStatus = "error";
-            meta.lastError = err?.message?.slice(0, 200) || "Unknown error";
-            await resourcePut(resource.owner, resource.path, buildTriggerContent(meta, body));
-            console.error(`[triggers] "${triggerName}" failed:`, err?.message);
-        }
-    });
+${body}`,
+            threadTitle: `Trigger: ${triggerName} — ${now.toLocaleDateString()}`,
+            runIdPrefix: `automation-${triggerName}`,
+            usageLabel: `automation:${triggerName}`,
+            usageRefId: eventMeta.eventId,
+            requestContext,
+            actionCaller: "automation",
+            actionAutomation: {
+                triggerId: resource.id,
+                triggerName,
+                policyId: meta.delegatedPolicyId,
+            },
+        }, _deps);
+        meta.lastStatus = "success";
+        await resourcePut(resource.owner, resource.path, buildTriggerContent(meta, body));
+        console.log(`[triggers] "${triggerName}" completed successfully`);
+    }
+    catch (err) {
+        meta.lastStatus = "error";
+        meta.lastError =
+            err instanceof Error ? err.message.slice(0, 200) : "Unknown error";
+        await resourcePut(resource.owner, resource.path, buildTriggerContent(meta, body));
+        console.error(`[triggers] "${triggerName}" failed:`, meta.lastError);
+    }
 }
 //# sourceMappingURL=dispatcher.js.map

package/dist/triggers/dispatcher.js.map

@@ -1 +1 @@
-{"version":3,"file":"dispatcher.js","sourceRoot":"","sources":["../../src/triggers/dispatcher.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EACL,uBAAuB,EACvB,uBAAuB,EACvB,aAAa,GACd,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAEL,oBAAoB,EACpB,wBAAwB,EACxB,oBAAoB,GAErB,MAAM,8BAA8B,CAAC;AACtC,OAAO,EAAE,iCAAiC,EAAE,MAAM,kCAAkC,CAAC;AACrF,OAAO,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAE3D,OAAO,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAC;AACxD,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AAE/D,OAAO,EAAE,qBAAqB,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AAC3E,OAAO,EAAE,qBAAqB,EAAE,MAAM,8BAA8B,CAAC;AACrE,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAG7D,uEAAuE;AACvE,MAAM,cAAc,GAAG,oCAAoC,CAAC;AAE5D,MAAM,UAAU,uBAAuB,CAAC,OAAe;IAIrD,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;IAC5C,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO;YACL,IAAI,EAAE;gBACJ,QAAQ,EAAE,EAAE;gBACZ,OAAO,EAAE,KAAK;gBACd,WAAW,EAAE,UAAU;gBACvB,IAAI,EAAE,SAAS;aAChB;YACD,IAAI,EAAE,OAAO;SACd,CAAC;IACJ,CAAC;IAED,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;IAC3B,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAE7B,MAAM,IAAI,GAAuB;QAC/B,QAAQ,EAAE,EAAE;QACZ,OAAO,EAAE,IAAI;QACb,WAAW,EAAE,UAAU;QACvB,IAAI,EAAE,SAAS;KAChB,CAAC;IAEF,KAAK,MAAM,IAAI,IAAI,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QACzC,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACnC,IAAI,QAAQ,KAAK,CAAC,CAAC;YAAE,SAAS;QAC9B,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,IAAI,EAAE,CAAC;QAC3C,IAAI,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAC5C,IACE,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;YAC9C,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,EAC9C,CAAC;YACD,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QAC7B,CAAC;QAED,QAAQ,GAAG,EAAE,CAAC;YACZ,KAAK,UAAU;gBACb,IAAI,CAAC,QAAQ,GAAG,KAAK,CAAC;gBACtB,MAAM;YACR,KAAK,SAAS;gBACZ,IAAI,CAAC,OAAO,GAAG,KAAK,KAAK,OAAO,CAAC;gBACjC,MAAM;YACR,KAAK,aAAa;gBAChB,IAAI,CAAC,WAAW;oBACd,KAAK,KAAK,OAAO,IAAI,KAAK,KAAK,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,UAAU,CAAC;gBACjE,MAAM;YACR,KAAK,OAAO;gBACV,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;gBACnB,MAAM;YACR,KAAK,WAAW;gBACd,IAAI,CAAC,SAAS,GAAG,KAAK,CAAC;gBACvB,MAAM;YACR,KAAK,MAAM;gBACT,IAAI,CAAC,IAAI;oBACP,KAAK,KAAK,eAAe,IAAI,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;gBACvE,MAAM;YACR,KAAK,QAAQ;gBACX,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC;gBACpB,MAAM;YACR,KAAK,mBAAmB;gBACtB,IAAI,CAAC,iBAAiB,GAAG,KAAK,IAAI,SAAS,CAAC;gBAC5C,MAAM;YACR,KAAK,WAAW;gBACd,IAAI,CAAC,SAAS,GAAG,KAAK,CAAC;gBACvB,MAAM;YACR,KAAK,OAAO;gBACV,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;gBACnB,MAAM;YACR,KAAK,OAAO;gBACV,IAAI,CAAC,KAAK;oBACR,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;gBAChE,MAAM;YACR,KAAK,SAAS;gBACZ,IAAI,CAAC,OAAO,GAAG,KAAK,CAAC;gBACrB,MAAM;YACR,KAAK,YAAY;gBACf,IAAI,CAAC,UAAU,GAAG,KAAyC,CAAC;gBAC5D,MAAM;YACR,KAAK,WAAW;gBACd,IAAI,CAAC,SAAS,GAAG,KAAK,CAAC;gBACvB,MAAM;YACR,KAAK,SAAS;gBACZ,IAAI,CAAC,OAAO,GAAG,KAAK,CAAC;gBACrB,MAAM;QACV,CAAC;IACH,CAAC;IAED,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;AACxB,CAAC;AAED,MAAM,UAAU,mBAAmB,CACjC,IAAwB,EACxB,IAAY;IAEZ,MAAM,KAAK,GAAG,CAAC,KAAK,CAAC,CAAC;IACtB,KAAK,CAAC,IAAI,CAAC,cAAc,IAAI,CAAC,QAAQ,GAAG,CAAC,CAAC;IAC3C,KAAK,CAAC,IAAI,CAAC,YAAY,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;IACvC,KAAK,CAAC,IAAI,CAAC,gBAAgB,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC;IAC/C,IAAI,IAAI,CAAC,KAAK;QAAE,KAAK,CAAC,IAAI,CAAC,UAAU,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;IACnD,IAAI,IAAI,CAAC,SAAS;QAChB,KAAK,CAAC,IAAI,CAAC,eAAe,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC;IACpE,KAAK,CAAC,IAAI,CAAC,SAAS,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;IACjC,IAAI,IAAI,CAAC,MAAM;QAAE,KAAK,CAAC,IAAI,CAAC,WAAW,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;IACtD,IACE,IAAI,CAAC,iBAAiB;QACtB,CAAC,gCAAgC,CAAC,IAAI,CAAC,IAAI,CAAC,iBAAiB,CAAC,EAC9D,CAAC;QACD,MAAM,IAAI,KAAK,CACb,wGAAwG,CACzG,CAAC;IACJ,CAAC;IACD,IAAI,IAAI,CAAC,iBAAiB;QACxB,KAAK,CAAC,IAAI,CAAC,sBAAsB,IAAI,CAAC,iBAAiB,EAAE,CAAC,CAAC;IAC7D,IAAI,IAAI,CAAC,SAAS;QAAE,KAAK,CAAC,IAAI,CAAC,cAAc,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC;IAC/D,IAAI,IAAI,CAAC,KAAK;QAAE,KAAK,CAAC,IAAI,CAAC,UAAU,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;IACnD,IAAI,IAAI,CAAC,KAAK;QAAE,KAAK,CAAC,IAAI,CAAC,UAAU,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;IACnD,IAAI,IAAI,CAAC,OAAO;QAAE,KAAK,CAAC,IAAI,CAAC,YAAY,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;IACzD,IAAI,IAAI,CAAC,UAAU;QAAE,KAAK,CAAC,IAAI,CAAC,eAAe,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC;IAClE,IAAI,IAAI,CAAC,SAAS;QAChB,KAAK,CAAC,IAAI,CAAC,eAAe,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC;IACpE,IAAI,IAAI,CAAC,OAAO;QAAE,KAAK,CAAC,IAAI,CAAC,YAAY,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;IACzD,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAClB,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACjB,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAoBD,qEAAqE;AACrE,6EAA6E;AAC7E,+EAA+E;AAC/E,uDAAuD;AACvD,MAAM,mBAAmB,GAAG,IAAI,GAAG,EAAkB,CAAC;AACtD,+EAA+E;AAC/E,gFAAgF;AAChF,2EAA2E;AAC3E,6EAA6E;AAC7E,2EAA2E;AAC3E,kEAAkE;AAClE,MAAM,oBAAoB,GAAG,IAAI,GAAG,EAAU,CAAC;AAC/C,IAAI,KAAK,GAAiC,IAAI,CAAC;AAE/C;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,IAA2B;IAE3B,KAAK,GAAG,IAAI,CAAC;IACb,MAAM,yBAAyB,EAAE,CAAC;AACpC,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,yBAAyB;IAC7C,IAAI,CAAC;QACH,MAAM,YAAY,GAAG,MAAM,qBAAqB,CAAC,OAAO,CAAC,CAAC;QAC1D,MAAM,UAAU,GAAG,IAAI,GAAG,EAAU,CAAC;QAErC,KAAK,MAAM,QAAQ,IAAI,YAAY,EAAE,CAAC;YACpC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;gBAAE,SAAS;YAC7C,MAAM,EAAE,IAAI,EAAE,GAAG,uBAAuB,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;YAC3D,IAAI,IAAI,CAAC,WAAW,KAAK,OAAO,IAAI,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;gBAC/D,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAC7B,CAAC;QACH,CAAC;QAED,yEAAyE;QACzE,KAAK,MAAM,CAAC,SAAS,EAAE,KAAK,CAAC,IAAI,CAAC,GAAG,mBAAmB,CAAC,EAAE,CAAC;YAC1D,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;gBAC/B,WAAW,CAAC,KAAK,CAAC,CAAC;gBACnB,mBAAmB,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;YACxC,CAAC;QACH,CAAC;QAED,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;YACnC,IAAI,CAAC,mBAAmB,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;gBACxC,MAAM,KAAK,GAAG,SAAS,CAAC,SAAS,EAAE,CAAC,OAAO,EAAE,SAAS,EAAE,EAAE,CACxD,WAAW,CAAC,SAAS,EAAE,OAAO,EAAE,SAAS,CAAC,CAC3C,CAAC;gBACF,mBAAmB,CAAC,GAAG,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;YAC5C,CAAC;QACH,CAAC;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,CAAC,KAAK,CAAC,mDAAmD,EAAE,GAAG,CAAC,CAAC;IAC1E,CAAC;AACH,CAAC;AAED,KAAK,UAAU,WAAW,CACxB,SAAiB,EACjB,OAAgB,EAChB,SAAoB;IAEpB,IAAI,CAAC,KAAK;QAAE,OAAO;IAEnB,IAAI,CAAC;QACH,MAAM,YAAY,GAAG,MAAM,qBAAqB,CAAC,OAAO,CAAC,CAAC;QAC1D,MAAM,gBAAgB,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE;YACjD,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;gBAAE,OAAO,KAAK,CAAC;YAC1C,MAAM,EAAE,IAAI,EAAE,GAAG,uBAAuB,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;YACpD,4DAA4D;YAC5D,+DAA+D;YAC/D,IACE,SAAS,CAAC,KAAK;gBACf,CAAC,CAAC,KAAK,KAAK,SAAS,CAAC,KAAK;gBAC3B,CAAC,CAAC,KAAK,KAAK,YAAY,EACxB,CAAC;gBACD,OAAO,KAAK,CAAC;YACf,CAAC;YACD,OAAO,CACL,IAAI,CAAC,WAAW,KAAK,OAAO;gBAC5B,IAAI,CAAC,KAAK,KAAK,SAAS;gBACxB,IAAI,CAAC,OAAO;gBACZ,IAAI,CAAC,UAAU,KAAK,SAAS,CAC9B,CAAC;QACJ,CAAC,CAAC,CAAC;QAEH,KAAK,MAAM,QAAQ,IAAI,gBAAgB,EAAE,CAAC;YACxC,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,uBAAuB,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;YACjE,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE;gBAAE,SAAS;YAE3B,2CAA2C;YAC3C,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,IAAI,QAAQ,CAAC,KAAK,CAAC;YAC/C,MAAM,UAAU,GAAG,MAAM,oBAAoB,CAAC,KAAK,CAAC,CAAC;YACrD,MAAM,MAAM,GAAG,UAAU,IAAI,KAAK,CAAC,MAAM,CAAC;YAC1C,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,OAAO,CAAC,IAAI,CACV,sCAAsC,QAAQ,CAAC,IAAI,cAAc,CAClE,CAAC;gBACF,SAAS;YACX,CAAC;YAED,qBAAqB;YACrB,MAAM,OAAO,GAAG,MAAM,iBAAiB,CAAC,IAAI,CAAC,SAAS,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;YACzE,IAAI,CAAC,OAAO;gBAAE,SAAS;YAEvB,oEAAoE;YACpE,sEAAsE;YACtE,sBAAsB;YACtB,MAAM,WAAW,GAAG,GAAG,QAAQ,CAAC,KAAK,IAAI,QAAQ,CAAC,IAAI,EAAE,CAAC;YACzD,IAAI,oBAAoB,CAAC,GAAG,CAAC,WAAW,CAAC;gBAAE,SAAS;YACpD,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;gBAC5B,oBAAoB,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;gBACtC,IAAI,CAAC;oBACH,MAAM,eAAe,CACnB,QAAQ,EACR,IAAI,EACJ,IAAI,EACJ,OAAO,EACP,SAAS,EACT,MAAM,CACP,CAAC;gBACJ,CAAC;wBAAS,CAAC;oBACT,oBAAoB,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;gBAC3C,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,OAAO,CAAC,IAAI,CACV,0DAA0D,QAAQ,CAAC,IAAI,cAAc,CACtF,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,CAAC,KAAK,CAAC,oCAAoC,SAAS,IAAI,EAAE,GAAG,CAAC,CAAC;IACxE,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,KAAK,UAAU,wBAAwB,CACrC,YAAoB,EACpB,QAA4B;IAE5B,IAAI,YAAY,KAAK,YAAY;QAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;IACvD,IAAI,CAAC;QACH,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,MAAM,CAAC,iBAAiB,CAAC,CAAC;QACtD,MAAM,EAAE,GAAG,SAAS,EAAE,CAAC;QACvB,MAAM,UAAU,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC;YAClC,GAAG,EAAE,8CAA8C;YACnD,IAAI,EAAE,CAAC,YAAY,CAAC;SACrB,CAAC,CAAC;QACH,IAAI,CAAC,UAAU,CAAC,IAAI,IAAI,UAAU,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACrD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,YAAY,oBAAoB,EAAE,CAAC;QAC1E,CAAC;QACD,IAAI,QAAQ,EAAE,CAAC;YACb,MAAM,YAAY,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC;gBACpC,GAAG,EAAE,gFAAgF;gBACrF,IAAI,EAAE,CAAC,QAAQ,EAAE,YAAY,CAAC;aAC/B,CAAC,CAAC;YACH,IAAI,CAAC,YAAY,CAAC,IAAI,IAAI,YAAY,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACzD,OAAO;oBACL,EAAE,EAAE,KAAK;oBACT,MAAM,EAAE,SAAS,YAAY,mCAAmC,QAAQ,GAAG;iBAC5E,CAAC;YACJ,CAAC;QACH,CAAC;QACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;IACtB,CAAC;IAAC,OAAO,GAAQ,EAAE,CAAC;QAClB,MAAM,GAAG,GAAG,GAAG,EAAE,OAAO,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC;QAC9C,IACE,GAAG,CAAC,QAAQ,CAAC,gBAAgB,CAAC;YAC9B,GAAG,CAAC,QAAQ,CAAC,eAAe,CAAC;YAC7B,GAAG,CAAC,QAAQ,CAAC,iBAAiB,CAAC,EAC/B,CAAC;YACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;QACtB,CAAC;QACD,OAAO,CAAC,IAAI,CACV,qDAAqD,YAAY,IAAI,EACrE,GAAG,EAAE,OAAO,CACb,CAAC;QACF,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;IACtB,CAAC;AACH,CAAC;AAED,KAAK,UAAU,eAAe,CAC5B,QAAsE,EACtE,IAAwB,EACxB,IAAY,EACZ,OAAgB,EAChB,SAAoB,EACpB,MAAc;IAEd,IAAI,CAAC,KAAK;QAAE,OAAO;IAEnB,MAAM,WAAW,GAAG,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;IAC9E,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;IAEvB,MAAM,YAAY,GAAG,IAAI,CAAC,SAAS,IAAI,QAAQ,CAAC,KAAK,CAAC;IACtD,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,IAAI,SAAS,CAAC;IAEzC,qEAAqE;IACrE,oEAAoE;IACpE,oEAAoE;IACpE,uEAAuE;IACvE,MAAM,QAAQ,GAAG,MAAM,wBAAwB,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAC;IACxE,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,OAAO,CAAC,IAAI,CACV,gCAAgC,WAAW,MAAM,QAAQ,CAAC,MAAM,IAAI;YAClE,mEAAmE,CACtE,CAAC;QACF,IAAI,CAAC,OAAO,GAAG,GAAG,CAAC,WAAW,EAAE,CAAC;QACjC,IAAI,CAAC,UAAU,GAAG,SAAS,CAAC;QAC5B,IAAI,CAAC,SAAS,GAAG,QAAQ,CAAC,MAAM,CAAC;QACjC,MAAM,WAAW,CACf,QAAQ,CAAC,KAAK,EACd,QAAQ,CAAC,IAAI,EACb,mBAAmB,CAAC,IAAI,EAAE,IAAI,CAAC,CAChC,CAAC;QACF,OAAO;IACT,CAAC;IAED,kBAAkB;IAClB,IAAI,CAAC,OAAO,GAAG,GAAG,CAAC,WAAW,EAAE,CAAC;IACjC,IAAI,CAAC,UAAU,GAAG,SAAS,CAAC;IAC5B,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;IAC3B,MAAM,WAAW,CACf,QAAQ,CAAC,KAAK,EACd,QAAQ,CAAC,IAAI,EACb,mBAAmB,CAAC,IAAI,EAAE,IAAI,CAAC,CAChC,CAAC;IAEF,MAAM,qBAAqB,CACzB,EAAE,SAAS,EAAE,YAAY,EAAE,KAAK,EAAE,QAAQ,EAAE,EAC5C,KAAK,IAAI,EAAE;QACT,IAAI,CAAC;YACH,MAAM,WAAW,GAAG,KAAM,CAAC,UAAU,EAAE,CAAC;YACxC,MAAM,YAAY,GAAG,MAAM,KAAM,CAAC,eAAe,CAAC,YAAY,CAAC,CAAC;YAChE,MAAM,gBAAgB,GAAG,KAAM,CAAC,mBAAmB,EAAE,EAAE,CAAC;YACxD,oEAAoE;YACpE,oEAAoE;YACpE,uDAAuD;YACvD,MAAM,OAAO,GAAG,gBAAgB;gBAC9B,CAAC,CAAC,gBAAgB,CAAC,EAAE,GAAG,WAAW,EAAE,CAAC;gBACtC,CAAC,CAAC,WAAW,CAAC;YAChB,MAAM,cAAc,GAAG,oBAAoB,CAAC,OAAO,CAAC,CAAC;YACrD,MAAM,KAAK,GAAG,wBAAwB,CACpC,cAAc,EACd,gBAAgB,CACjB,CAAC;YAEF,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC;gBACjC,MAAM;gBACN,KAAK,EAAE,KAAM,CAAC,KAAK;aACpB,CAAC,CAAC;YACH,MAAM,cAAc,GAClB,KAAM,CAAC,KAAK;gBACZ,CAAC,MAAM,uBAAuB,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,KAAM,CAAC,KAAK,EAAE,CAAC,CAAC;gBAChE,MAAM,CAAC,YAAY,CAAC;YACtB,MAAM,KAAK,GAAG,uBAAuB,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;YAC9D,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,YAAY,EAAE;gBAC9C,KAAK,EAAE,YAAY,WAAW,MAAM,GAAG,CAAC,kBAAkB,EAAE,EAAE;aAC/D,CAAC,CAAC;YAEH,IAAI,UAAkB,CAAC;YACvB,IAAI,CAAC;gBACH,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;YAChD,CAAC;YAAC,MAAM,CAAC;gBACP,UAAU,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC;YAC/B,CAAC;YAED,MAAM,WAAW,GAAG,wBAAwB,WAAW;SACtD,IAAI,CAAC,KAAK;YACP,SAAS,CAAC,OAAO;YACjB,SAAS,CAAC,SAAS;;;EAG7B,UAAU;;;;EAIV,IAAI,EAAE,CAAC;YAED,MAAM,QAAQ,GAAG;gBACf;oBACE,IAAI,EAAE,MAAe;oBACrB,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC;iBACxD;aACF,CAAC;YAEF,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;YACzC,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;YAEpE,MAAM,MAAM,GAAqB,EAAE,CAAC;YACpC,IAAI,YAAY,GACd,IAAI,CAAC;YAEP,IAAI,CAAC;gBACH,kEAAkE;gBAClE,mEAAmE;gBACnE,mEAAmE;gBACnE,kEAAkE;gBAClE,oEAAoE;gBACpE,oBAAoB;gBACpB,YAAY,GAAG,MAAM,iCAAiC,CACpD;oBACE,MAAM;oBACN,KAAK;oBACL,YAAY;oBACZ,KAAK;oBACL,cAAc;oBACd,QAAQ;oBACR,OAAO;oBACP,IAAI,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC;oBACnC,MAAM,EAAE,UAAU,CAAC,MAAM;oBACzB,QAAQ,EAAE,MAAM,CAAC,EAAE;oBACnB,YAAY,EAAE,YAAY;oBAC1B,UAAU,EAAE;wBACV,SAAS,EAAE,QAAQ,CAAC,EAAE;wBACtB,WAAW;wBACX,QAAQ,EAAE,IAAI,CAAC,iBAAiB;qBACjC;iBACF,EACD,SAAS,EACT,EAAE,gBAAgB,EAAE,IAAI,EAAE,CAC3B,CAAC;YACJ,CAAC;oBAAS,CAAC;gBACT,YAAY,CAAC,OAAO,CAAC,CAAC;YACxB,CAAC;YAED,IACE,YAAY;gBACZ,CAAC,YAAY,CAAC,WAAW,GAAG,CAAC;oBAC3B,YAAY,CAAC,YAAY,GAAG,CAAC;oBAC7B,YAAY,CAAC,eAAe,GAAG,CAAC;oBAChC,YAAY,CAAC,gBAAgB,GAAG,CAAC,CAAC,EACpC,CAAC;gBACD,IAAI,CAAC;oBACH,MAAM,EAAE,WAAW,EAAE,GAAG,MAAM,MAAM,CAAC,mBAAmB,CAAC,CAAC;oBAC1D,MAAM,WAAW,CAAC;wBAChB,UAAU,EAAE,YAAY;wBACxB,WAAW,EAAE,YAAY,CAAC,WAAW;wBACrC,YAAY,EAAE,YAAY,CAAC,YAAY;wBACvC,eAAe,EAAE,YAAY,CAAC,eAAe;wBAC7C,gBAAgB,EAAE,YAAY,CAAC,gBAAgB;wBAC/C,KAAK,EAAE,YAAY,CAAC,KAAK;wBACzB,KAAK,EAAE,cAAc,WAAW,EAAE;wBAClC,GAAG,EAAE,KAAM,CAAC,KAAK;wBACjB,KAAK,EAAE,SAAS,CAAC,OAAO;qBACzB,CAAC,CAAC;gBACL,CAAC;gBAAC,MAAM,CAAC;oBACP,wDAAwD;gBAC1D,CAAC;YACH,CAAC;YAED,IAAI,CAAC,UAAU,GAAG,SAAS,CAAC;YAC5B,MAAM,WAAW,CACf,QAAQ,CAAC,KAAK,EACd,QAAQ,CAAC,IAAI,EACb,mBAAmB,CAAC,IAAI,EAAE,IAAI,CAAC,CAChC,CAAC;YAEF,OAAO,CAAC,GAAG,CAAC,eAAe,WAAW,0BAA0B,CAAC,CAAC;QACpE,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAClB,IAAI,CAAC,UAAU,GAAG,OAAO,CAAC;YAC1B,IAAI,CAAC,SAAS,GAAG,GAAG,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,IAAI,eAAe,CAAC;YAChE,MAAM,WAAW,CACf,QAAQ,CAAC,KAAK,EACd,QAAQ,CAAC,IAAI,EACb,mBAAmB,CAAC,IAAI,EAAE,IAAI,CAAC,CAChC,CAAC;YACF,OAAO,CAAC,KAAK,CAAC,eAAe,WAAW,WAAW,EAAE,GAAG,EAAE,OAAO,CAAC,CAAC;QACrE,CAAC;IACH,CAAC,CACF,CAAC;AACJ,CAAC","sourcesContent":["/**\n * Trigger dispatcher — bridges the event bus to the automation system.\n *\n * On startup, loads all event-triggered jobs from the resources store,\n * subscribes to their events, and dispatches them (condition eval → agent\n * loop) when matching events fire.\n */\n\nimport {\n  getStoredModelForEngine,\n  normalizeModelForEngine,\n  resolveEngine,\n} from \"../agent/engine/index.js\";\nimport {\n  runAgentLoop,\n  actionsToEngineTools,\n  filterInitialEngineTools,\n  getOwnerActiveApiKey,\n  type ActionEntry,\n} from \"../agent/production-agent.js\";\nimport { runAgentLoopDirectWithSoftTimeout } from \"../agent/run-loop-with-resume.js\";\nimport { attachToolSearch } from \"../agent/tool-search.js\";\nimport type { AgentChatEvent } from \"../agent/types.js\";\nimport { createThread } from \"../chat-threads/store.js\";\nimport { subscribe, unsubscribe } from \"../event-bus/index.js\";\nimport type { EventMeta } from \"../event-bus/types.js\";\nimport { resourceListAllOwners, resourcePut } from \"../resources/store.js\";\nimport { runWithRequestContext } from \"../server/request-context.js\";\nimport { evaluateCondition } from \"./condition-evaluator.js\";\nimport type { TriggerFrontmatter } from \"./types.js\";\n\n// Re-use the job frontmatter parser — triggers extend the same format.\nconst FRONTMATTER_RE = /^---\\n([\\s\\S]*?)\\n---\\n?([\\s\\S]*)$/;\n\nexport function parseTriggerFrontmatter(content: string): {\n  meta: TriggerFrontmatter;\n  body: string;\n} {\n  const match = content.match(FRONTMATTER_RE);\n  if (!match) {\n    return {\n      meta: {\n        schedule: \"\",\n        enabled: false,\n        triggerType: \"schedule\",\n        mode: \"agentic\",\n      },\n      body: content,\n    };\n  }\n\n  const yamlBlock = match[1];\n  const body = match[2].trim();\n\n  const meta: TriggerFrontmatter = {\n    schedule: \"\",\n    enabled: true,\n    triggerType: \"schedule\",\n    mode: \"agentic\",\n  };\n\n  for (const line of yamlBlock.split(\"\\n\")) {\n    const colonIdx = line.indexOf(\":\");\n    if (colonIdx === -1) continue;\n    const key = line.slice(0, colonIdx).trim();\n    let value = line.slice(colonIdx + 1).trim();\n    if (\n      (value.startsWith('\"') && value.endsWith('\"')) ||\n      (value.startsWith(\"'\") && value.endsWith(\"'\"))\n    ) {\n      value = value.slice(1, -1);\n    }\n\n    switch (key) {\n      case \"schedule\":\n        meta.schedule = value;\n        break;\n      case \"enabled\":\n        meta.enabled = value !== \"false\";\n        break;\n      case \"triggerType\":\n        meta.triggerType =\n          value === \"event\" || value === \"schedule\" ? value : \"schedule\";\n        break;\n      case \"event\":\n        meta.event = value;\n        break;\n      case \"condition\":\n        meta.condition = value;\n        break;\n      case \"mode\":\n        meta.mode =\n          value === \"deterministic\" || value === \"agentic\" ? value : \"agentic\";\n        break;\n      case \"domain\":\n        meta.domain = value;\n        break;\n      case \"delegatedPolicyId\":\n        meta.delegatedPolicyId = value || undefined;\n        break;\n      case \"createdBy\":\n        meta.createdBy = value;\n        break;\n      case \"orgId\":\n        meta.orgId = value;\n        break;\n      case \"runAs\":\n        meta.runAs =\n          value === \"shared\" || value === \"creator\" ? value : undefined;\n        break;\n      case \"lastRun\":\n        meta.lastRun = value;\n        break;\n      case \"lastStatus\":\n        meta.lastStatus = value as TriggerFrontmatter[\"lastStatus\"];\n        break;\n      case \"lastError\":\n        meta.lastError = value;\n        break;\n      case \"nextRun\":\n        meta.nextRun = value;\n        break;\n    }\n  }\n\n  return { meta, body };\n}\n\nexport function buildTriggerContent(\n  meta: TriggerFrontmatter,\n  body: string,\n): string {\n  const lines = [\"---\"];\n  lines.push(`schedule: \"${meta.schedule}\"`);\n  lines.push(`enabled: ${meta.enabled}`);\n  lines.push(`triggerType: ${meta.triggerType}`);\n  if (meta.event) lines.push(`event: ${meta.event}`);\n  if (meta.condition)\n    lines.push(`condition: \"${meta.condition.replace(/\"/g, '\\\\\"')}\"`);\n  lines.push(`mode: ${meta.mode}`);\n  if (meta.domain) lines.push(`domain: ${meta.domain}`);\n  if (\n    meta.delegatedPolicyId &&\n    !/^[a-z0-9][a-z0-9._:-]{0,127}$/i.test(meta.delegatedPolicyId)\n  ) {\n    throw new Error(\n      \"Delegated automation policy IDs must be 1-128 letters, numbers, dots, underscores, colons, or hyphens.\",\n    );\n  }\n  if (meta.delegatedPolicyId)\n    lines.push(`delegatedPolicyId: ${meta.delegatedPolicyId}`);\n  if (meta.createdBy) lines.push(`createdBy: ${meta.createdBy}`);\n  if (meta.orgId) lines.push(`orgId: ${meta.orgId}`);\n  if (meta.runAs) lines.push(`runAs: ${meta.runAs}`);\n  if (meta.lastRun) lines.push(`lastRun: ${meta.lastRun}`);\n  if (meta.lastStatus) lines.push(`lastStatus: ${meta.lastStatus}`);\n  if (meta.lastError)\n    lines.push(`lastError: \"${meta.lastError.replace(/\"/g, '\\\\\"')}\"`);\n  if (meta.nextRun) lines.push(`nextRun: ${meta.nextRun}`);\n  lines.push(\"---\");\n  lines.push(\"\");\n  lines.push(body);\n  return lines.join(\"\\n\");\n}\n\n// ─── Dispatcher deps (same pattern as SchedulerDeps) ────────────────────────\n\nexport interface TriggerDispatcherDeps {\n  getActions: () => Record<string, ActionEntry>;\n  getSystemPrompt: (owner: string) => Promise<string>;\n  /**\n   * Tool names to expose on the FIRST engine request for a trigger run. See\n   * `SchedulerDeps.getInitialToolNames` (`jobs/scheduler.ts`) — same\n   * semantics. Omit to keep the full `getActions()` set visible up front\n   * (current behavior).\n   */\n  getInitialToolNames?: () => string[] | undefined;\n  apiKey?: string;\n  model?: string;\n  /** App/template id used for org-scoped per-app model defaults. */\n  appId?: string;\n}\n\n// Track active subscriptions (eventName -> subscription id) to avoid\n// double-subscribing AND so subscriptions for events that no longer have any\n// enabled trigger can be torn down — otherwise deleted/disabled triggers leave\n// phantom bus listeners that fire handleEvent forever.\nconst _eventSubscriptions = new Map<string, string>();\n// In-flight agentic dispatches keyed by `${owner}:${path}`. Guards against the\n// check-then-write TOCTOU window in handleEvent: two near-simultaneous fires of\n// the same event both pass the `lastStatus !== \"running\"` check (which has\n// several awaits before the DB is marked running) and would otherwise launch\n// two concurrent agent runs for one trigger. Sufficient for single-process\n// deployments; multi-instance would need a conditional DB update.\nconst _dispatchingTriggers = new Set<string>();\nlet _deps: TriggerDispatcherDeps | null = null;\n\n/**\n * Initialize the trigger dispatcher. Call once at server startup.\n * Loads all event-triggered jobs and subscribes to their events.\n */\nexport async function initTriggerDispatcher(\n  deps: TriggerDispatcherDeps,\n): Promise<void> {\n  _deps = deps;\n  await refreshEventSubscriptions();\n}\n\n/**\n * Refresh event subscriptions from the resource store.\n * Call after creating/updating triggers.\n */\nexport async function refreshEventSubscriptions(): Promise<void> {\n  try {\n    const jobResources = await resourceListAllOwners(\"jobs/\");\n    const eventNames = new Set<string>();\n\n    for (const resource of jobResources) {\n      if (!resource.path.endsWith(\".md\")) continue;\n      const { meta } = parseTriggerFrontmatter(resource.content);\n      if (meta.triggerType === \"event\" && meta.event && meta.enabled) {\n        eventNames.add(meta.event);\n      }\n    }\n\n    // Tear down subscriptions whose event no longer has any enabled trigger.\n    for (const [eventName, subId] of [..._eventSubscriptions]) {\n      if (!eventNames.has(eventName)) {\n        unsubscribe(subId);\n        _eventSubscriptions.delete(eventName);\n      }\n    }\n\n    for (const eventName of eventNames) {\n      if (!_eventSubscriptions.has(eventName)) {\n        const subId = subscribe(eventName, (payload, eventMeta) =>\n          handleEvent(eventName, payload, eventMeta),\n        );\n        _eventSubscriptions.set(eventName, subId);\n      }\n    }\n  } catch (err) {\n    console.error(\"[triggers] Failed to refresh event subscriptions:\", err);\n  }\n}\n\nasync function handleEvent(\n  eventName: string,\n  payload: unknown,\n  eventMeta: EventMeta,\n): Promise<void> {\n  if (!_deps) return;\n\n  try {\n    const jobResources = await resourceListAllOwners(\"jobs/\");\n    const matchingTriggers = jobResources.filter((r) => {\n      if (!r.path.endsWith(\".md\")) return false;\n      const { meta } = parseTriggerFrontmatter(r.content);\n      // Scope: only dispatch triggers owned by the event's owner,\n      // or shared triggers. Prevents cross-tenant trigger execution.\n      if (\n        eventMeta.owner &&\n        r.owner !== eventMeta.owner &&\n        r.owner !== \"__shared__\"\n      ) {\n        return false;\n      }\n      return (\n        meta.triggerType === \"event\" &&\n        meta.event === eventName &&\n        meta.enabled &&\n        meta.lastStatus !== \"running\"\n      );\n    });\n\n    for (const resource of matchingTriggers) {\n      const { meta, body } = parseTriggerFrontmatter(resource.content);\n      if (!body.trim()) continue;\n\n      // Resolve API key for condition evaluation\n      const owner = meta.createdBy || resource.owner;\n      const userApiKey = await getOwnerActiveApiKey(owner);\n      const apiKey = userApiKey || _deps.apiKey;\n      if (!apiKey) {\n        console.warn(\n          `[triggers] No API key for trigger \"${resource.path}\" — skipping`,\n        );\n        continue;\n      }\n\n      // Evaluate condition\n      const matches = await evaluateCondition(meta.condition, payload, apiKey);\n      if (!matches) continue;\n\n      // Dispatch. Guard against concurrent duplicate dispatch of the same\n      // trigger (TOCTOU on lastStatus) with an in-process lock keyed on the\n      // trigger's identity.\n      const dispatchKey = `${resource.owner}:${resource.path}`;\n      if (_dispatchingTriggers.has(dispatchKey)) continue;\n      if (meta.mode === \"agentic\") {\n        _dispatchingTriggers.add(dispatchKey);\n        try {\n          await dispatchAgentic(\n            resource,\n            meta,\n            body,\n            payload,\n            eventMeta,\n            apiKey,\n          );\n        } finally {\n          _dispatchingTriggers.delete(dispatchKey);\n        }\n      } else {\n        console.warn(\n          `[triggers] Deterministic mode not yet implemented for \"${resource.path}\" — skipping`,\n        );\n      }\n    }\n  } catch (err) {\n    console.error(`[triggers] Error handling event \"${eventName}\":`, err);\n  }\n}\n\n/**\n * Validate that the run-as user still exists and (if scoped to an org) is\n * still a member of that org. Mirrors the recurring-jobs scheduler check\n * (audit 12 #10): event-triggered automations must stop firing when the\n * creator is removed/demoted.\n */\nasync function isTriggerRunAsStillValid(\n  jobUserEmail: string,\n  jobOrgId: string | undefined,\n): Promise<{ ok: boolean; reason?: string }> {\n  if (jobUserEmail === \"__shared__\") return { ok: true };\n  try {\n    const { getDbExec } = await import(\"../db/client.js\");\n    const db = getDbExec();\n    const userResult = await db.execute({\n      sql: `SELECT 1 FROM \"user\" WHERE email = ? LIMIT 1`,\n      args: [jobUserEmail],\n    });\n    if (!userResult.rows || userResult.rows.length === 0) {\n      return { ok: false, reason: `user \"${jobUserEmail}\" no longer exists` };\n    }\n    if (jobOrgId) {\n      const memberResult = await db.execute({\n        sql: `SELECT 1 FROM org_members WHERE org_id = ? AND LOWER(email) = LOWER(?) LIMIT 1`,\n        args: [jobOrgId, jobUserEmail],\n      });\n      if (!memberResult.rows || memberResult.rows.length === 0) {\n        return {\n          ok: false,\n          reason: `user \"${jobUserEmail}\" is no longer a member of org \"${jobOrgId}\"`,\n        };\n      }\n    }\n    return { ok: true };\n  } catch (err: any) {\n    const msg = err?.message?.toLowerCase() ?? \"\";\n    if (\n      msg.includes(\"does not exist\") ||\n      msg.includes(\"no such table\") ||\n      msg.includes(\"undefined table\")\n    ) {\n      return { ok: true };\n    }\n    console.warn(\n      `[triggers] User/membership validation failed for \"${jobUserEmail}\":`,\n      err?.message,\n    );\n    return { ok: true };\n  }\n}\n\nasync function dispatchAgentic(\n  resource: { id: string; path: string; owner: string; content: string },\n  meta: TriggerFrontmatter,\n  body: string,\n  payload: unknown,\n  eventMeta: EventMeta,\n  apiKey: string,\n): Promise<void> {\n  if (!_deps) return;\n\n  const triggerName = resource.path.replace(/^jobs\\//, \"\").replace(/\\.md$/, \"\");\n  const now = new Date();\n\n  const jobUserEmail = meta.createdBy || resource.owner;\n  const jobOrgId = meta.orgId ?? undefined;\n\n  // SECURITY (audit 12 #10): re-validate the run-as user/membership on\n  // every dispatch. Sharing revocation, user deletion, and org-member\n  // removal must take effect for already-scheduled triggers. Skip the\n  // dispatch on failure; leave the trigger entry alone for admin review.\n  const validity = await isTriggerRunAsStillValid(jobUserEmail, jobOrgId);\n  if (!validity.ok) {\n    console.warn(\n      `[triggers] Skipping trigger \"${triggerName}\": ${validity.reason}. ` +\n        `User/membership no longer valid — leaving entry for admin review.`,\n    );\n    meta.lastRun = now.toISOString();\n    meta.lastStatus = \"skipped\";\n    meta.lastError = validity.reason;\n    await resourcePut(\n      resource.owner,\n      resource.path,\n      buildTriggerContent(meta, body),\n    );\n    return;\n  }\n\n  // Mark as running\n  meta.lastRun = now.toISOString();\n  meta.lastStatus = \"running\";\n  meta.lastError = undefined;\n  await resourcePut(\n    resource.owner,\n    resource.path,\n    buildTriggerContent(meta, body),\n  );\n\n  await runWithRequestContext(\n    { userEmail: jobUserEmail, orgId: jobOrgId },\n    async () => {\n      try {\n        const baseActions = _deps!.getActions();\n        const systemPrompt = await _deps!.getSystemPrompt(jobUserEmail);\n        const initialToolNames = _deps!.getInitialToolNames?.();\n        // Only attach tool-search (and pay its schema cost) when the caller\n        // actually supplied an initial subset to filter down to — otherwise\n        // this is byte-for-byte the prior unfiltered behavior.\n        const actions = initialToolNames\n          ? attachToolSearch({ ...baseActions })\n          : baseActions;\n        const availableTools = actionsToEngineTools(actions);\n        const tools = filterInitialEngineTools(\n          availableTools,\n          initialToolNames,\n        );\n\n        const engine = await resolveEngine({\n          apiKey,\n          appId: _deps!.appId,\n        });\n        const modelCandidate =\n          _deps!.model ??\n          (await getStoredModelForEngine(engine, { appId: _deps!.appId })) ??\n          engine.defaultModel;\n        const model = normalizeModelForEngine(engine, modelCandidate);\n        const thread = await createThread(jobUserEmail, {\n          title: `Trigger: ${triggerName} — ${now.toLocaleDateString()}`,\n        });\n\n        let payloadStr: string;\n        try {\n          payloadStr = JSON.stringify(payload, null, 2);\n        } catch {\n          payloadStr = String(payload);\n        }\n\n        const triggerText = `[Automation Trigger: ${triggerName}]\nEvent: ${meta.event}\nEvent ID: ${eventMeta.eventId}\nFired at: ${eventMeta.emittedAt}\n\nEvent payload:\n${payloadStr}\n\nExecute the following automation instructions:\n\n${body}`;\n\n        const messages = [\n          {\n            role: \"user\" as const,\n            content: [{ type: \"text\" as const, text: triggerText }],\n          },\n        ];\n\n        const controller = new AbortController();\n        const timeout = setTimeout(() => controller.abort(), 5 * 60 * 1000);\n\n        const events: AgentChatEvent[] = [];\n        let triggerUsage: Awaited<ReturnType<typeof runAgentLoop>> | null =\n          null;\n\n        try {\n          // Wrapper, not raw `runAgentLoop`: an automation runs with nobody\n          // watching, so a transport-level cut (gateway 45s, socket hang up)\n          // has to be resumed inside this invocation or the trigger silently\n          // does nothing. `undefined` budget + the hosted default keeps the\n          // soft timeout under the serverless wall on hosts that have one and\n          // disabled locally.\n          triggerUsage = await runAgentLoopDirectWithSoftTimeout(\n            {\n              engine,\n              model,\n              systemPrompt,\n              tools,\n              availableTools,\n              messages,\n              actions,\n              send: (event) => events.push(event),\n              signal: controller.signal,\n              threadId: thread.id,\n              actionCaller: \"automation\",\n              automation: {\n                triggerId: resource.id,\n                triggerName,\n                policyId: meta.delegatedPolicyId,\n              },\n            },\n            undefined,\n            { useHostedDefault: true },\n          );\n        } finally {\n          clearTimeout(timeout);\n        }\n\n        if (\n          triggerUsage &&\n          (triggerUsage.inputTokens > 0 ||\n            triggerUsage.outputTokens > 0 ||\n            triggerUsage.cacheReadTokens > 0 ||\n            triggerUsage.cacheWriteTokens > 0)\n        ) {\n          try {\n            const { recordUsage } = await import(\"../usage/store.js\");\n            await recordUsage({\n              ownerEmail: jobUserEmail,\n              inputTokens: triggerUsage.inputTokens,\n              outputTokens: triggerUsage.outputTokens,\n              cacheReadTokens: triggerUsage.cacheReadTokens,\n              cacheWriteTokens: triggerUsage.cacheWriteTokens,\n              model: triggerUsage.model,\n              label: `automation:${triggerName}`,\n              app: _deps!.appId,\n              refId: eventMeta.eventId,\n            });\n          } catch {\n            // Usage attribution must not break automation dispatch.\n          }\n        }\n\n        meta.lastStatus = \"success\";\n        await resourcePut(\n          resource.owner,\n          resource.path,\n          buildTriggerContent(meta, body),\n        );\n\n        console.log(`[triggers] \"${triggerName}\" completed successfully`);\n      } catch (err: any) {\n        meta.lastStatus = \"error\";\n        meta.lastError = err?.message?.slice(0, 200) || \"Unknown error\";\n        await resourcePut(\n          resource.owner,\n          resource.path,\n          buildTriggerContent(meta, body),\n        );\n        console.error(`[triggers] \"${triggerName}\" failed:`, err?.message);\n      }\n    },\n  );\n}\n"]}
+{"version":3,"file":"dispatcher.js","sourceRoot":"","sources":["../../src/triggers/dispatcher.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,oBAAoB,EAAE,MAAM,8BAA8B,CAAC;AACpE,OAAO,EACL,2BAA2B,EAC3B,kCAAkC,GAEnC,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AAE/D,OAAO,EACL,+BAA+B,EAC/B,uBAAuB,GAGxB,MAAM,yCAAyC,CAAC;AACjD,OAAO,EACL,uBAAuB,EACvB,gBAAgB,GACjB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EACL,qBAAqB,EACrB,WAAW,GAEZ,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAG7D,MAAM,UAAU,uBAAuB,CAAC,OAAe;IAIrD,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAC;IACjD,OAAO;QACL,IAAI,EAAE;YACJ,GAAG,IAAI;YACP,WAAW,EAAE,IAAI,CAAC,WAAW,IAAI,UAAU;YAC3C,IAAI,EAAE,IAAI,CAAC,IAAI,IAAI,SAAS;SAC7B;QACD,IAAI;KACL,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,mBAAmB,CACjC,IAAwB,EACxB,IAAY;IAEZ,OAAO,uBAAuB,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;AAC7C,CAAC;AAgBD,qEAAqE;AACrE,6EAA6E;AAC7E,+EAA+E;AAC/E,uDAAuD;AACvD,MAAM,mBAAmB,GAAG,IAAI,GAAG,EAAkB,CAAC;AACtD,+EAA+E;AAC/E,gFAAgF;AAChF,2EAA2E;AAC3E,6EAA6E;AAC7E,2EAA2E;AAC3E,kEAAkE;AAClE,MAAM,oBAAoB,GAAG,IAAI,GAAG,EAAU,CAAC;AAC/C,IAAI,KAAK,GAAiC,IAAI,CAAC;AAE/C;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,IAA2B;IAE3B,KAAK,GAAG,IAAI,CAAC;IACb,MAAM,yBAAyB,EAAE,CAAC;AACpC,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,yBAAyB;IAC7C,IAAI,CAAC;QACH,MAAM,YAAY,GAAG,MAAM,qBAAqB,CAAC,OAAO,CAAC,CAAC;QAC1D,MAAM,UAAU,GAAG,IAAI,GAAG,EAAU,CAAC;QAErC,KAAK,MAAM,QAAQ,IAAI,YAAY,EAAE,CAAC;YACpC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;gBAAE,SAAS;YAC7C,MAAM,EAAE,IAAI,EAAE,GAAG,uBAAuB,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;YAC3D,IAAI,IAAI,CAAC,WAAW,KAAK,OAAO,IAAI,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;gBAC/D,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAC7B,CAAC;QACH,CAAC;QAED,yEAAyE;QACzE,KAAK,MAAM,CAAC,SAAS,EAAE,KAAK,CAAC,IAAI,CAAC,GAAG,mBAAmB,CAAC,EAAE,CAAC;YAC1D,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;gBAC/B,WAAW,CAAC,KAAK,CAAC,CAAC;gBACnB,mBAAmB,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;YACxC,CAAC;QACH,CAAC;QAED,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;YACnC,IAAI,CAAC,mBAAmB,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;gBACxC,MAAM,KAAK,GAAG,SAAS,CAAC,SAAS,EAAE,CAAC,OAAO,EAAE,SAAS,EAAE,EAAE,CACxD,WAAW,CAAC,SAAS,EAAE,OAAO,EAAE,SAAS,CAAC,CAC3C,CAAC;gBACF,mBAAmB,CAAC,GAAG,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;YAC5C,CAAC;QACH,CAAC;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,CAAC,KAAK,CAAC,mDAAmD,EAAE,GAAG,CAAC,CAAC;IAC1E,CAAC;AACH,CAAC;AAED,KAAK,UAAU,WAAW,CACxB,SAAiB,EACjB,OAAgB,EAChB,SAAoB;IAEpB,IAAI,CAAC,KAAK;QAAE,OAAO;IAEnB,IAAI,CAAC;QACH,MAAM,YAAY,GAAG,MAAM,qBAAqB,CAAC,OAAO,CAAC,CAAC;QAC1D,MAAM,gBAAgB,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE;YACjD,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;gBAAE,OAAO,KAAK,CAAC;YAC1C,MAAM,EAAE,IAAI,EAAE,GAAG,uBAAuB,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;YACpD,OAAO,CACL,IAAI,CAAC,WAAW,KAAK,OAAO;gBAC5B,IAAI,CAAC,KAAK,KAAK,SAAS;gBACxB,IAAI,CAAC,OAAO;gBACZ,CAAC,+BAA+B,CAAC,IAAI,CAAC,CACvC,CAAC;QACJ,CAAC,CAAC,CAAC;QAEH,KAAK,MAAM,QAAQ,IAAI,gBAAgB,EAAE,CAAC;YACxC,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,uBAAuB,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;YACjE,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE;gBAAE,SAAS;YAE3B,IAAI,QAAqC,CAAC;YAC1C,IAAI,QAAQ,CAAC,KAAK,KAAK,YAAY,EAAE,CAAC;gBACpC,qEAAqE;gBACrE,8DAA8D;gBAC9D,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,QAAQ,CAAC,KAAK,CAAC;gBACnD,QAAQ,GAAG;oBACT,SAAS;oBACT,KAAK,EAAE,IAAI,CAAC,KAAK;oBACjB,UAAU,EAAE,SAAS,CAAC,WAAW,EAAE;iBACpC,CAAC;YACJ,CAAC;iBAAM,CAAC;gBACN,IAAI,QAAQ,CAAC;gBACb,IAAI,CAAC;oBACH,QAAQ,GAAG,MAAM,kCAAkC,CACjD,QAAQ,CAAC,KAAK,EACd,IAAI,CACL,CAAC;gBACJ,CAAC;gBAAC,MAAM,CAAC;oBACP,IAAI,CAAC,OAAO,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;oBACxC,IAAI,CAAC,UAAU,GAAG,SAAS,CAAC;oBAC5B,IAAI,CAAC,SAAS;wBACZ,qDAAqD,CAAC;oBACxD,MAAM,WAAW,CACf,QAAQ,CAAC,KAAK,EACd,QAAQ,CAAC,IAAI,EACb,mBAAmB,CAAC,IAAI,EAAE,IAAI,CAAC,CAChC,CAAC;oBACF,SAAS;gBACX,CAAC;gBACD,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;oBACjB,IAAI,CAAC,OAAO,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;oBACxC,IAAI,CAAC,UAAU,GAAG,SAAS,CAAC;oBAC5B,IAAI,CAAC,SAAS,GAAG,QAAQ,CAAC,MAAM,CAAC;oBACjC,MAAM,WAAW,CACf,QAAQ,CAAC,KAAK,EACd,QAAQ,CAAC,IAAI,EACb,mBAAmB,CAAC,IAAI,EAAE,IAAI,CAAC,CAChC,CAAC;oBACF,SAAS;gBACX,CAAC;gBACD,IAAI,CAAC,2BAA2B,CAAC,QAAQ,CAAC,QAAQ,EAAE,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC;oBACrE,SAAS;gBACX,CAAC;gBACD,QAAQ,GAAG,QAAQ,CAAC,QAAQ,CAAC;YAC/B,CAAC;YAED,2CAA2C;YAC3C,MAAM,KAAK,GAAG,QAAQ,CAAC,SAAS,CAAC;YACjC,MAAM,UAAU,GAAG,MAAM,oBAAoB,CAAC,KAAK,CAAC,CAAC;YACrD,MAAM,MAAM,GAAG,UAAU,IAAI,KAAK,CAAC,MAAM,CAAC;YAC1C,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,IAAI,CAAC,OAAO,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;gBACxC,IAAI,CAAC,UAAU,GAAG,OAAO,CAAC;gBAC1B,IAAI,CAAC,SAAS,GAAG,6CAA6C,CAAC;gBAC/D,MAAM,WAAW,CACf,QAAQ,CAAC,KAAK,EACd,QAAQ,CAAC,IAAI,EACb,mBAAmB,CAAC,IAAI,EAAE,IAAI,CAAC,CAChC,CAAC;gBACF,OAAO,CAAC,IAAI,CAAC,cAAc,IAAI,CAAC,SAAS,MAAM,QAAQ,CAAC,IAAI,GAAG,CAAC,CAAC;gBACjE,SAAS;YACX,CAAC;YAED,qBAAqB;YACrB,MAAM,OAAO,GAAG,MAAM,iBAAiB,CAAC,IAAI,CAAC,SAAS,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;YACzE,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,IAAI,CAAC,OAAO,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;gBACxC,IAAI,CAAC,UAAU,GAAG,SAAS,CAAC;gBAC5B,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;gBAC3B,MAAM,WAAW,CACf,QAAQ,CAAC,KAAK,EACd,QAAQ,CAAC,IAAI,EACb,mBAAmB,CAAC,IAAI,EAAE,IAAI,CAAC,CAChC,CAAC;gBACF,SAAS;YACX,CAAC;YAED,oEAAoE;YACpE,sEAAsE;YACtE,sBAAsB;YACtB,MAAM,WAAW,GAAG,GAAG,QAAQ,CAAC,KAAK,IAAI,QAAQ,CAAC,IAAI,EAAE,CAAC;YACzD,IAAI,oBAAoB,CAAC,GAAG,CAAC,WAAW,CAAC;gBAAE,SAAS;YACpD,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;gBAC5B,oBAAoB,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;gBACtC,IAAI,CAAC;oBACH,MAAM,eAAe,CACnB,QAAQ,EACR,IAAI,EACJ,IAAI,EACJ,OAAO,EACP,SAAS,EACT,QAAQ,CACT,CAAC;gBACJ,CAAC;wBAAS,CAAC;oBACT,oBAAoB,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;gBAC3C,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,OAAO,CAAC,IAAI,CACV,0DAA0D,QAAQ,CAAC,IAAI,cAAc,CACtF,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,CAAC,KAAK,CAAC,oCAAoC,SAAS,IAAI,EAAE,GAAG,CAAC,CAAC;IACxE,CAAC;AACH,CAAC;AAED,KAAK,UAAU,eAAe,CAC5B,QAAkB,EAClB,IAAwB,EACxB,IAAY,EACZ,OAAgB,EAChB,SAAoB,EACpB,QAAqC;IAErC,IAAI,CAAC,KAAK;QAAE,OAAO;IAEnB,MAAM,WAAW,GAAG,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;IAC9E,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;IAEvB,MAAM,YAAY,GAAG,QAAQ,CAAC,SAAS,CAAC;IACxC,MAAM,QAAQ,GAAG,QAAQ,CAAC,KAAK,CAAC;IAEhC,kBAAkB;IAClB,IAAI,CAAC,OAAO,GAAG,GAAG,CAAC,WAAW,EAAE,CAAC;IACjC,IAAI,CAAC,UAAU,GAAG,SAAS,CAAC;IAC5B,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;IAC3B,MAAM,WAAW,CACf,QAAQ,CAAC,KAAK,EACd,QAAQ,CAAC,IAAI,EACb,mBAAmB,CAAC,IAAI,EAAE,IAAI,CAAC,CAChC,CAAC;IAEF,IAAI,UAAkB,CAAC;IACvB,IAAI,CAAC;QACH,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;IAChD,CAAC;IAAC,MAAM,CAAC;QACP,UAAU,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC;IAC/B,CAAC;IAED,MAAM,UAAU,GAAgC;QAC9C,IAAI,EAAE,WAAW;QACjB,IAAI;QACJ,IAAI;QACJ,QAAQ;KACT,CAAC;IACF,MAAM,cAAc,GAClB,IAAI,CAAC,aAAa,IAAI,IAAI,CAAC,gBAAgB,IAAI,IAAI,CAAC,mBAAmB;QACrE,CAAC,CAAC;YACE,mBAAmB,EAAE,IAAa;YAClC,WAAW,EAAE;gBACX,MAAM,EAAE,cAAc,WAAW,IAAI,SAAS,CAAC,OAAO,EAAE;gBACxD,OAAO,EAAE,IAAI,CAAC,aAAa;gBAC3B,aAAa,EAAE,SAAkB;gBACjC,QAAQ,EAAE;oBACR,QAAQ,EAAE,IAAI,CAAC,gBAAgB;oBAC/B,gBAAgB,EAAE,GAAG,IAAI,CAAC,gBAAgB,IAAI,SAAS,IAAI,IAAI,CAAC,mBAAmB,IAAI,IAAI,CAAC,iBAAiB,IAAI,MAAM,EAAE;oBACzH,IAAI,EAAE,EAAE;oBACR,QAAQ,EAAE,IAAI,CAAC,gBAAgB;oBAC/B,kBAAkB,EAAE,IAAI,CAAC,aAAa;oBACtC,eAAe,EAAE;wBACf,SAAS,EAAE,IAAI,CAAC,mBAAmB;wBACnC,QAAQ,EAAE,IAAI,CAAC,iBAAiB;wBAChC,MAAM,EAAE,IAAI,CAAC,gBAAgB;qBAC9B;oBACD,SAAS,EAAE,IAAI,CAAC,iBAAiB;oBACjC,SAAS,EAAE,GAAG,CAAC,OAAO,EAAE;iBACzB;aACF;SACF;QACH,CAAC,CAAC,SAAS,CAAC;IAEhB,IAAI,CAAC;QACH,MAAM,uBAAuB,CAC3B;YACE,UAAU;YACV,UAAU,EAAE,YAAY;YACxB,KAAK,EAAE,QAAQ;YACf,MAAM,EAAE,wBAAwB,WAAW;SAC1C,IAAI,CAAC,KAAK;YACP,SAAS,CAAC,OAAO;YACjB,SAAS,CAAC,SAAS;;;EAG7B,UAAU;;;;EAIV,IAAI,EAAE;YACA,WAAW,EAAE,YAAY,WAAW,MAAM,GAAG,CAAC,kBAAkB,EAAE,EAAE;YACpE,WAAW,EAAE,cAAc,WAAW,EAAE;YACxC,UAAU,EAAE,cAAc,WAAW,EAAE;YACvC,UAAU,EAAE,SAAS,CAAC,OAAO;YAC7B,cAAc;YACd,YAAY,EAAE,YAAY;YAC1B,gBAAgB,EAAE;gBAChB,SAAS,EAAE,QAAQ,CAAC,EAAE;gBACtB,WAAW;gBACX,QAAQ,EAAE,IAAI,CAAC,iBAAiB;aACjC;SACF,EACD,KAAK,CACN,CAAC;QAEF,IAAI,CAAC,UAAU,GAAG,SAAS,CAAC;QAC5B,MAAM,WAAW,CACf,QAAQ,CAAC,KAAK,EACd,QAAQ,CAAC,IAAI,EACb,mBAAmB,CAAC,IAAI,EAAE,IAAI,CAAC,CAChC,CAAC;QACF,OAAO,CAAC,GAAG,CAAC,eAAe,WAAW,0BAA0B,CAAC,CAAC;IACpE,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,CAAC,UAAU,GAAG,OAAO,CAAC;QAC1B,IAAI,CAAC,SAAS;YACZ,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC;QACrE,MAAM,WAAW,CACf,QAAQ,CAAC,KAAK,EACd,QAAQ,CAAC,IAAI,EACb,mBAAmB,CAAC,IAAI,EAAE,IAAI,CAAC,CAChC,CAAC;QACF,OAAO,CAAC,KAAK,CAAC,eAAe,WAAW,WAAW,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;IACvE,CAAC;AACH,CAAC","sourcesContent":["/**\n * Trigger dispatcher — bridges the event bus to the automation system.\n *\n * On startup, loads all event-triggered jobs from the resources store,\n * subscribes to their events, and dispatches them (condition eval → agent\n * loop) when matching events fire.\n */\n\nimport { getOwnerActiveApiKey } from \"../agent/production-agent.js\";\nimport {\n  automationMatchesEventOwner,\n  resolveAutomationExecutionIdentity,\n  type AutomationExecutionIdentity,\n} from \"../automations/service.js\";\nimport { subscribe, unsubscribe } from \"../event-bus/index.js\";\nimport type { EventMeta } from \"../event-bus/types.js\";\nimport {\n  isBackgroundAutomationRunActive,\n  runBackgroundAutomation,\n  type BackgroundAutomationContext,\n  type BackgroundAutomationDeps,\n} from \"../jobs/background-automation-runner.js\";\nimport {\n  buildJobResourceContent,\n  parseJobResource,\n} from \"../jobs/frontmatter.js\";\nimport {\n  resourceListAllOwners,\n  resourcePut,\n  type Resource,\n} from \"../resources/store.js\";\nimport { evaluateCondition } from \"./condition-evaluator.js\";\nimport type { TriggerFrontmatter } from \"./types.js\";\n\nexport function parseTriggerFrontmatter(content: string): {\n  meta: TriggerFrontmatter;\n  body: string;\n} {\n  const { meta, body } = parseJobResource(content);\n  return {\n    meta: {\n      ...meta,\n      triggerType: meta.triggerType ?? \"schedule\",\n      mode: meta.mode ?? \"agentic\",\n    },\n    body,\n  };\n}\n\nexport function buildTriggerContent(\n  meta: TriggerFrontmatter,\n  body: string,\n): string {\n  return buildJobResourceContent(meta, body);\n}\n\n// ─── Dispatcher deps (same pattern as SchedulerDeps) ────────────────────────\n\nexport interface TriggerDispatcherDeps extends BackgroundAutomationDeps {\n  /**\n   * Tool names to expose on the FIRST engine request for a trigger run. See\n   * `SchedulerDeps.getInitialToolNames` (`jobs/scheduler.ts`) — same\n   * semantics. Omit to keep the full `getActions()` set visible up front\n   * (current behavior).\n   */\n  getInitialToolNames?: (\n    automation?: BackgroundAutomationContext,\n  ) => string[] | undefined;\n}\n\n// Track active subscriptions (eventName -> subscription id) to avoid\n// double-subscribing AND so subscriptions for events that no longer have any\n// enabled trigger can be torn down — otherwise deleted/disabled triggers leave\n// phantom bus listeners that fire handleEvent forever.\nconst _eventSubscriptions = new Map<string, string>();\n// In-flight agentic dispatches keyed by `${owner}:${path}`. Guards against the\n// check-then-write TOCTOU window in handleEvent: two near-simultaneous fires of\n// the same event both pass the `lastStatus !== \"running\"` check (which has\n// several awaits before the DB is marked running) and would otherwise launch\n// two concurrent agent runs for one trigger. Sufficient for single-process\n// deployments; multi-instance would need a conditional DB update.\nconst _dispatchingTriggers = new Set<string>();\nlet _deps: TriggerDispatcherDeps | null = null;\n\n/**\n * Initialize the trigger dispatcher. Call once at server startup.\n * Loads all event-triggered jobs and subscribes to their events.\n */\nexport async function initTriggerDispatcher(\n  deps: TriggerDispatcherDeps,\n): Promise<void> {\n  _deps = deps;\n  await refreshEventSubscriptions();\n}\n\n/**\n * Refresh event subscriptions from the resource store.\n * Call after creating/updating triggers.\n */\nexport async function refreshEventSubscriptions(): Promise<void> {\n  try {\n    const jobResources = await resourceListAllOwners(\"jobs/\");\n    const eventNames = new Set<string>();\n\n    for (const resource of jobResources) {\n      if (!resource.path.endsWith(\".md\")) continue;\n      const { meta } = parseTriggerFrontmatter(resource.content);\n      if (meta.triggerType === \"event\" && meta.event && meta.enabled) {\n        eventNames.add(meta.event);\n      }\n    }\n\n    // Tear down subscriptions whose event no longer has any enabled trigger.\n    for (const [eventName, subId] of [..._eventSubscriptions]) {\n      if (!eventNames.has(eventName)) {\n        unsubscribe(subId);\n        _eventSubscriptions.delete(eventName);\n      }\n    }\n\n    for (const eventName of eventNames) {\n      if (!_eventSubscriptions.has(eventName)) {\n        const subId = subscribe(eventName, (payload, eventMeta) =>\n          handleEvent(eventName, payload, eventMeta),\n        );\n        _eventSubscriptions.set(eventName, subId);\n      }\n    }\n  } catch (err) {\n    console.error(\"[triggers] Failed to refresh event subscriptions:\", err);\n  }\n}\n\nasync function handleEvent(\n  eventName: string,\n  payload: unknown,\n  eventMeta: EventMeta,\n): Promise<void> {\n  if (!_deps) return;\n\n  try {\n    const jobResources = await resourceListAllOwners(\"jobs/\");\n    const matchingTriggers = jobResources.filter((r) => {\n      if (!r.path.endsWith(\".md\")) return false;\n      const { meta } = parseTriggerFrontmatter(r.content);\n      return (\n        meta.triggerType === \"event\" &&\n        meta.event === eventName &&\n        meta.enabled &&\n        !isBackgroundAutomationRunActive(meta)\n      );\n    });\n\n    for (const resource of matchingTriggers) {\n      const { meta, body } = parseTriggerFrontmatter(resource.content);\n      if (!body.trim()) continue;\n\n      let identity: AutomationExecutionIdentity;\n      if (resource.owner === \"__shared__\") {\n        // Compatibility for old workspace-wide event resources. New personal\n        // and organization automations always require an event owner.\n        const userEmail = meta.createdBy || resource.owner;\n        identity = {\n          userEmail,\n          orgId: meta.orgId,\n          eventOwner: userEmail.toLowerCase(),\n        };\n      } else {\n        let resolved;\n        try {\n          resolved = await resolveAutomationExecutionIdentity(\n            resource.owner,\n            meta,\n          );\n        } catch {\n          meta.lastRun = new Date().toISOString();\n          meta.lastStatus = \"skipped\";\n          meta.lastError =\n            \"Could not verify the automation execution identity.\";\n          await resourcePut(\n            resource.owner,\n            resource.path,\n            buildTriggerContent(meta, body),\n          );\n          continue;\n        }\n        if (!resolved.ok) {\n          meta.lastRun = new Date().toISOString();\n          meta.lastStatus = \"skipped\";\n          meta.lastError = resolved.reason;\n          await resourcePut(\n            resource.owner,\n            resource.path,\n            buildTriggerContent(meta, body),\n          );\n          continue;\n        }\n        if (!automationMatchesEventOwner(resolved.identity, eventMeta.owner)) {\n          continue;\n        }\n        identity = resolved.identity;\n      }\n\n      // Resolve API key for condition evaluation\n      const owner = identity.userEmail;\n      const userApiKey = await getOwnerActiveApiKey(owner);\n      const apiKey = userApiKey || _deps.apiKey;\n      if (!apiKey) {\n        meta.lastRun = new Date().toISOString();\n        meta.lastStatus = \"error\";\n        meta.lastError = \"No API key is available for this automation\";\n        await resourcePut(\n          resource.owner,\n          resource.path,\n          buildTriggerContent(meta, body),\n        );\n        console.warn(`[triggers] ${meta.lastError}: \"${resource.path}\"`);\n        continue;\n      }\n\n      // Evaluate condition\n      const matches = await evaluateCondition(meta.condition, payload, apiKey);\n      if (!matches) {\n        meta.lastRun = new Date().toISOString();\n        meta.lastStatus = \"skipped\";\n        meta.lastError = undefined;\n        await resourcePut(\n          resource.owner,\n          resource.path,\n          buildTriggerContent(meta, body),\n        );\n        continue;\n      }\n\n      // Dispatch. Guard against concurrent duplicate dispatch of the same\n      // trigger (TOCTOU on lastStatus) with an in-process lock keyed on the\n      // trigger's identity.\n      const dispatchKey = `${resource.owner}:${resource.path}`;\n      if (_dispatchingTriggers.has(dispatchKey)) continue;\n      if (meta.mode === \"agentic\") {\n        _dispatchingTriggers.add(dispatchKey);\n        try {\n          await dispatchAgentic(\n            resource,\n            meta,\n            body,\n            payload,\n            eventMeta,\n            identity,\n          );\n        } finally {\n          _dispatchingTriggers.delete(dispatchKey);\n        }\n      } else {\n        console.warn(\n          `[triggers] Deterministic mode not yet implemented for \"${resource.path}\" — skipping`,\n        );\n      }\n    }\n  } catch (err) {\n    console.error(`[triggers] Error handling event \"${eventName}\":`, err);\n  }\n}\n\nasync function dispatchAgentic(\n  resource: Resource,\n  meta: TriggerFrontmatter,\n  body: string,\n  payload: unknown,\n  eventMeta: EventMeta,\n  identity: AutomationExecutionIdentity,\n): Promise<void> {\n  if (!_deps) return;\n\n  const triggerName = resource.path.replace(/^jobs\\//, \"\").replace(/\\.md$/, \"\");\n  const now = new Date();\n\n  const jobUserEmail = identity.userEmail;\n  const jobOrgId = identity.orgId;\n\n  // Mark as running\n  meta.lastRun = now.toISOString();\n  meta.lastStatus = \"running\";\n  meta.lastError = undefined;\n  await resourcePut(\n    resource.owner,\n    resource.path,\n    buildTriggerContent(meta, body),\n  );\n\n  let payloadStr: string;\n  try {\n    payloadStr = JSON.stringify(payload, null, 2);\n  } catch {\n    payloadStr = String(payload);\n  }\n\n  const automation: BackgroundAutomationContext = {\n    name: triggerName,\n    meta,\n    body,\n    resource,\n  };\n  const requestContext =\n    meta.originScopeId && meta.deliveryPlatform && meta.deliveryDestination\n      ? {\n          isIntegrationCaller: true as const,\n          integration: {\n            taskId: `automation:${triggerName}:${eventMeta.eventId}`,\n            scopeId: meta.originScopeId,\n            principalType: \"service\" as const,\n            incoming: {\n              platform: meta.deliveryPlatform,\n              externalThreadId: `${meta.deliveryTenantId || \"unknown\"}:${meta.deliveryDestination}:${meta.deliveryThreadRef || \"root\"}`,\n              text: \"\",\n              tenantId: meta.deliveryTenantId,\n              integrationScopeId: meta.originScopeId,\n              platformContext: {\n                channelId: meta.deliveryDestination,\n                threadTs: meta.deliveryThreadRef,\n                teamId: meta.deliveryTenantId,\n              },\n              threadRef: meta.deliveryThreadRef,\n              timestamp: now.getTime(),\n            },\n          },\n        }\n      : undefined;\n\n  try {\n    await runBackgroundAutomation(\n      {\n        automation,\n        ownerEmail: jobUserEmail,\n        orgId: jobOrgId,\n        prompt: `[Automation Trigger: ${triggerName}]\nEvent: ${meta.event}\nEvent ID: ${eventMeta.eventId}\nFired at: ${eventMeta.emittedAt}\n\nEvent payload:\n${payloadStr}\n\nExecute the following automation instructions:\n\n${body}`,\n        threadTitle: `Trigger: ${triggerName} — ${now.toLocaleDateString()}`,\n        runIdPrefix: `automation-${triggerName}`,\n        usageLabel: `automation:${triggerName}`,\n        usageRefId: eventMeta.eventId,\n        requestContext,\n        actionCaller: \"automation\",\n        actionAutomation: {\n          triggerId: resource.id,\n          triggerName,\n          policyId: meta.delegatedPolicyId,\n        },\n      },\n      _deps,\n    );\n\n    meta.lastStatus = \"success\";\n    await resourcePut(\n      resource.owner,\n      resource.path,\n      buildTriggerContent(meta, body),\n    );\n    console.log(`[triggers] \"${triggerName}\" completed successfully`);\n  } catch (err) {\n    meta.lastStatus = \"error\";\n    meta.lastError =\n      err instanceof Error ? err.message.slice(0, 200) : \"Unknown error\";\n    await resourcePut(\n      resource.owner,\n      resource.path,\n      buildTriggerContent(meta, body),\n    );\n    console.error(`[triggers] \"${triggerName}\" failed:`, meta.lastError);\n  }\n}\n"]}

package/dist/triggers/routes.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"routes.d.ts","sourceRoot":"","sources":["../../src/triggers/routes.ts"],"names":[],"mappings":"AAAA,OAAO,EAIL,KAAK,OAAO,EACb,MAAM,IAAI,CAAC;AAmBZ,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AAErD,MAAM,WAAW,mBAAmB;IAClC,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,OAAO,CAAC;IACnB,WAAW,EAAE,kBAAkB,CAAC,aAAa,CAAC,CAAC;IAC/C,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,kBAAkB,CAAC,MAAM,CAAC,CAAC;IACjC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,OAAO,CAAC;IACjB,UAAU,CAAC,EAAE,kBAAkB,CAAC,YAAY,CAAC,CAAC;IAC9C,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,MAAM,CAAC;CACd;AAED,UAAU,yBAAyB;IACjC,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,OAAO,CAAC;CAClB;AA2HD,wBAAsB,uBAAuB,CAC3C,KAAK,EAAE,OAAO,EACd,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,mBAAmB,EAAE,CAAC,CAahC;AAED,wBAAsB,4BAA4B,CAChD,KAAK,EAAE,OAAO,EACd,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE,yBAAyB,GAC/B,OAAO,CAAC,mBAAmB,CAAC,CAkD9B;AAWD,wBAAgB,wBAAwB;;;;IA8DvC"}
+{"version":3,"file":"routes.d.ts","sourceRoot":"","sources":["../../src/triggers/routes.ts"],"names":[],"mappings":"AAAA,OAAO,EAIL,KAAK,OAAO,EACb,MAAM,IAAI,CAAC;AAuBZ,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AAErD,MAAM,WAAW,mBAAmB;IAClC,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,OAAO,CAAC;IACnB,WAAW,EAAE,kBAAkB,CAAC,aAAa,CAAC,CAAC;IAC/C,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,kBAAkB,CAAC,MAAM,CAAC,CAAC;IACjC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,OAAO,CAAC;IACjB,UAAU,CAAC,EAAE,kBAAkB,CAAC,YAAY,CAAC,CAAC;IAC9C,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,MAAM,CAAC;CACd;AAED,UAAU,yBAAyB;IACjC,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,OAAO,CAAC;CAClB;AAyJD,wBAAsB,uBAAuB,CAC3C,KAAK,EAAE,OAAO,EACd,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,mBAAmB,EAAE,CAAC,CA4BhC;AAED,wBAAsB,4BAA4B,CAChD,KAAK,EAAE,OAAO,EACd,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE,yBAAyB,GAC/B,OAAO,CAAC,mBAAmB,CAAC,CA0D9B;AAWD,wBAAgB,wBAAwB;;;;IA8DvC"}