@agent-native/core 0.134.1 → 0.135.1

package/corpus/templates/tasks/app/components/layout/Sidebar.tsx

@@ -263,6 +263,8 @@ export function Sidebar({
         >
           <OrgSwitcher
             reserveSpace
+            // Tasks does not mount /agent, so the default link would 404.
+            agentPath={null}
             className={
               collapsed
                 ? "h-8 justify-center px-0 [&>span]:sr-only [&>svg:last-child]:hidden"

package/corpus/templates/tasks/app/routes/settings.tsx

@@ -1,18 +1,12 @@
 import { LanguagePicker, useT } from "@agent-native/core/client/i18n";
 import {
+  SettingsGroup,
+  SettingsRow,
   SettingsTabsPage,
   useAgentSettingsTabs,
 } from "@agent-native/core/client/settings";
 import { useSetPageTitle } from "@agent-native/toolkit/app-shell";
 
-import {
-  Card,
-  CardContent,
-  CardDescription,
-  CardHeader,
-  CardTitle,
-} from "@/components/ui/card";
-import { Label } from "@/components/ui/label";
 import { APP_TITLE } from "@/lib/app-config";
 
 export function meta() {
@@ -33,20 +27,18 @@ export default function SettingsRoute() {
             {t("header.pageSettings")}
           </p>
 
-          <Card id="language" className="scroll-mt-16">
-            <CardHeader>
-              <CardTitle className="text-base">
-                {t("settings.languageTitle")}
-              </CardTitle>
-              <CardDescription>
-                {t("settings.languageDescription")}
-              </CardDescription>
-            </CardHeader>
-            <CardContent className="max-w-xs space-y-1.5">
-              <Label>{t("settings.languageLabel")}</Label>
-              <LanguagePicker label={t("settings.languageLabel")} />
-            </CardContent>
-          </Card>
+          <SettingsGroup>
+            <SettingsRow
+              id="language"
+              label={t("settings.languageTitle")}
+              description={t("settings.languageDescription")}
+              control={
+                <div className="w-56">
+                  <LanguagePicker label={t("settings.languageLabel")} />
+                </div>
+              }
+            />
+          </SettingsGroup>
         </div>
       }
     />

package/corpus/templates/tasks/vitest.config.ts

@@ -1,17 +1,21 @@
 import path from "node:path";
 
-import { defineConfig } from "vitest/config";
+import baseConfig from "@agent-native/core/vitest-config";
+import { defineConfig, mergeConfig } from "vitest/config";
 
-export default defineConfig({
-  resolve: {
-    alias: {
-      "@": path.resolve(__dirname, "./app"),
-      "@shared": path.resolve(__dirname, "./shared"),
+export default mergeConfig(
+  baseConfig,
+  defineConfig({
+    resolve: {
+      alias: {
+        "@": path.resolve(__dirname, "./app"),
+        "@shared": path.resolve(__dirname, "./shared"),
+      },
     },
-  },
-  test: {
-    include: ["**/*.{test,spec}.?(c|m)[jt]s?(x)"],
-    exclude: ["**/node_modules/**", "**/.git/**", "**/dist/**", "**/e2e/**"],
-    environment: "node",
-  },
-});
+    test: {
+      include: ["**/*.{test,spec}.?(c|m)[jt]s?(x)"],
+      exclude: ["**/node_modules/**", "**/.git/**", "**/dist/**", "**/e2e/**"],
+      environment: "node",
+    },
+  }),
+);

package/corpus/toolkit/CHANGELOG.md

@@ -1,5 +1,14 @@
 # @agent-native/toolkit
 
+## 0.12.2
+
+### Patch Changes
+
+- f499dff: Add `@agent-native/core/vitest-config`, a base vitest config that caps a suite's
+  worker pool so concurrent test runs no longer oversubscribe the CPU. Defaults to
+  25% of cores; override with `VITEST_CONCURRENCY`. Every template and package
+  config merges it in.
+
 ## 0.12.1
 
 ### Patch Changes

package/corpus/toolkit/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agent-native/toolkit",
-  "version": "0.12.1",
+  "version": "0.12.2",
   "description": "Reusable app-building UI and helpers for Agent-Native apps.",
   "homepage": "https://github.com/BuilderIO/agent-native#readme",
   "bugs": {

package/corpus/toolkit/vitest.config.ts

@@ -0,0 +1,3 @@
+import baseConfig from "../../vitest.shared";
+
+export default baseConfig;

package/dist/automations/service.d.ts

@@ -29,6 +29,7 @@ export interface DefineAutomationInput {
     triggerType: "schedule" | "event";
     body: string;
     schedule?: string;
+    timezone?: string;
     event?: string;
     condition?: string;
     domain?: string;
@@ -46,6 +47,7 @@ export interface UpdateAutomationInput {
     condition?: string | null;
     delegatedPolicyId?: string | null;
     schedule?: string;
+    timezone?: string;
     model?: string | null;
     mcpTools?: unknown;
 }

package/dist/automations/service.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"service.d.ts","sourceRoot":"","sources":["../../src/automations/service.ts"],"names":[],"mappings":"AAEA,OAAO,EAIL,KAAK,cAAc,EACpB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAOL,KAAK,QAAQ,EACd,MAAM,uBAAuB,CAAC;AAE/B,MAAM,MAAM,eAAe,GAAG,UAAU,GAAG,cAAc,CAAC;AAE1D,MAAM,WAAW,eAAe;IAC9B,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACvB;AAED,MAAM,WAAW,oBAAoB;IACnC,QAAQ,EAAE,QAAQ,CAAC;IACnB,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,eAAe,CAAC;IACvB,IAAI,EAAE,cAAc,GAAG;QACrB,WAAW,EAAE,UAAU,GAAG,OAAO,CAAC;QAClC,IAAI,EAAE,SAAS,GAAG,eAAe,CAAC;KACnC,CAAC;IACF,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,OAAO,CAAC;CACpB;AAED,MAAM,WAAW,kBAAkB;IACjC,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,qBAAqB;IACpC,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,eAAe,CAAC;IACvB,WAAW,EAAE,UAAU,GAAG,OAAO,CAAC;IAClC,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,QAAQ,CAAC,EAAE,kBAAkB,CAAC;CAC/B;AAED,MAAM,MAAM,iBAAiB,GAAG,IAAI,CAAC,oBAAoB,EAAE,UAAU,CAAC,CAAC;AAEvE,MAAM,WAAW,qBAAqB;IACpC,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,eAAe,CAAC;IACvB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,iBAAiB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAClC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB;AAsGD;;;;;GAKG;AACH,wBAAsB,2BAA2B,CAC/C,UAAU,EAAE,eAAe,EAC3B,QAAQ,EAAE,QAAQ,GACjB,OAAO,CAAC,OAAO,CAAC,CAGlB;AA8CD,wBAAsB,yBAAyB,CAC7C,UAAU,EAAE,eAAe,EAC3B,KAAK,EAAE,eAAe,GACrB,OAAO,CAAC,oBAAoB,EAAE,CAAC,CAyCjC;AAED,wBAAsB,gBAAgB,CACpC,UAAU,EAAE,eAAe,EAC3B,KAAK,EAAE,qBAAqB,GAC3B,OAAO,CAAC,iBAAiB,CAAC,CAgE5B;AAED,wBAAsB,gBAAgB,CACpC,UAAU,EAAE,eAAe,EAC3B,KAAK,EAAE,qBAAqB,GAC3B,OAAO,CAAC,oBAAoB,CAAC,CAsD/B;AAED,wBAAsB,gBAAgB,CACpC,UAAU,EAAE,eAAe,EAC3B,KAAK,EAAE,eAAe,EACtB,IAAI,EAAE,MAAM,GACX,OAAO,CAAC,IAAI,CAAC,CASf;AAED,MAAM,WAAW,2BAA2B;IAC1C,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,MAAM,iCAAiC,GACzC;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,QAAQ,EAAE,2BAA2B,CAAA;CAAE,GACnD;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAElC;;;;;;;GAOG;AACH,wBAAsB,kCAAkC,CACtD,aAAa,EAAE,MAAM,EACrB,IAAI,EAAE,cAAc,GACnB,OAAO,CAAC,iCAAiC,CAAC,CAqD5C;AAED,wBAAgB,2BAA2B,CACzC,QAAQ,EAAE,2BAA2B,EACrC,UAAU,EAAE,MAAM,GAAG,SAAS,GAC7B,OAAO,CAKT"}
+{"version":3,"file":"service.d.ts","sourceRoot":"","sources":["../../src/automations/service.ts"],"names":[],"mappings":"AAEA,OAAO,EAIL,KAAK,cAAc,EACpB,MAAM,wBAAwB,CAAC;AAGhC,OAAO,EAOL,KAAK,QAAQ,EACd,MAAM,uBAAuB,CAAC;AAE/B,MAAM,MAAM,eAAe,GAAG,UAAU,GAAG,cAAc,CAAC;AAE1D,MAAM,WAAW,eAAe;IAC9B,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACvB;AAED,MAAM,WAAW,oBAAoB;IACnC,QAAQ,EAAE,QAAQ,CAAC;IACnB,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,eAAe,CAAC;IACvB,IAAI,EAAE,cAAc,GAAG;QACrB,WAAW,EAAE,UAAU,GAAG,OAAO,CAAC;QAClC,IAAI,EAAE,SAAS,GAAG,eAAe,CAAC;KACnC,CAAC;IACF,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,OAAO,CAAC;CACpB;AAED,MAAM,WAAW,kBAAkB;IACjC,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,qBAAqB;IACpC,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,eAAe,CAAC;IACvB,WAAW,EAAE,UAAU,GAAG,OAAO,CAAC;IAClC,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,QAAQ,CAAC,EAAE,kBAAkB,CAAC;CAC/B;AAED,MAAM,MAAM,iBAAiB,GAAG,IAAI,CAAC,oBAAoB,EAAE,UAAU,CAAC,CAAC;AAEvE,MAAM,WAAW,qBAAqB;IACpC,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,eAAe,CAAC;IACvB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,iBAAiB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAClC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB;AAsGD;;;;;GAKG;AACH,wBAAsB,2BAA2B,CAC/C,UAAU,EAAE,eAAe,EAC3B,QAAQ,EAAE,QAAQ,GACjB,OAAO,CAAC,OAAO,CAAC,CAGlB;AA8CD,wBAAsB,yBAAyB,CAC7C,UAAU,EAAE,eAAe,EAC3B,KAAK,EAAE,eAAe,GACrB,OAAO,CAAC,oBAAoB,EAAE,CAAC,CAyCjC;AAED,wBAAsB,gBAAgB,CACpC,UAAU,EAAE,eAAe,EAC3B,KAAK,EAAE,qBAAqB,GAC3B,OAAO,CAAC,iBAAiB,CAAC,CA2E5B;AAED,wBAAsB,gBAAgB,CACpC,UAAU,EAAE,eAAe,EAC3B,KAAK,EAAE,qBAAqB,GAC3B,OAAO,CAAC,oBAAoB,CAAC,CAyE/B;AAED,wBAAsB,gBAAgB,CACpC,UAAU,EAAE,eAAe,EAC3B,KAAK,EAAE,eAAe,EACtB,IAAI,EAAE,MAAM,GACX,OAAO,CAAC,IAAI,CAAC,CAYf;AAED,MAAM,WAAW,2BAA2B;IAC1C,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,MAAM,iCAAiC,GACzC;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,QAAQ,EAAE,2BAA2B,CAAA;CAAE,GACnD;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAElC;;;;;;;GAOG;AACH,wBAAsB,kCAAkC,CACtD,aAAa,EAAE,MAAM,EACrB,IAAI,EAAE,cAAc,GACnB,OAAO,CAAC,iCAAiC,CAAC,CAqD5C;AAED,wBAAgB,2BAA2B,CACzC,QAAQ,EAAE,2BAA2B,EACrC,UAAU,EAAE,MAAM,GAAG,SAAS,GAC7B,OAAO,CAKT"}

package/dist/automations/service.js

@@ -1,6 +1,8 @@
 import { getDbExec } from "../db/client.js";
-import { isValidCron, nextOccurrence } from "../jobs/cron.js";
+import { isValidCron, isValidTimezone, nextOccurrence } from "../jobs/cron.js";
 import { buildJobResourceContent, normalizeJobMcpTools, parseJobResource, } from "../jobs/frontmatter.js";
+import { deleteAutomationRuns } from "../jobs/run-history.js";
+import { resolveUserSchedulingTimezone } from "../localization/user-timezone.js";
 import { organizationIdFromResourceOwner, organizationResourceOwner, resourceDelete, resourceGetByPath, resourceList, resourcePut, } from "../resources/store.js";
 function httpError(message, statusCode) {
     return Object.assign(new Error(message), { statusCode });
@@ -177,9 +179,18 @@ export async function defineAutomation(actorInput, input) {
     if (input.triggerType === "event" && !event) {
         throw httpError("event is required for event-triggered automations.", 400);
     }
+    if (input.timezone && !isValidTimezone(input.timezone)) {
+        throw httpError(`Unknown timezone "${input.timezone}".`, 400);
+    }
+    // Resolve now and persist it: a schedule whose zone is implicit means
+    // something different the moment it is read on a differently-zoned host.
+    const timezone = input.triggerType === "schedule"
+        ? input.timezone || (await resolveUserSchedulingTimezone(actor.userEmail))
+        : undefined;
     const mcpTools = normalizeJobMcpTools(input.mcpTools);
     const meta = {
         schedule: input.triggerType === "schedule" ? schedule : "",
+        timezone,
         enabled: true,
         triggerType: input.triggerType,
         event: input.triggerType === "event" ? event : undefined,
@@ -191,7 +202,7 @@ export async function defineAutomation(actorInput, input) {
         orgId: input.scope === "organization" ? actor.orgId : undefined,
         runAs: "creator",
         nextRun: input.triggerType === "schedule"
-            ? nextOccurrence(schedule).toISOString()
+            ? nextOccurrence(schedule, undefined, timezone).toISOString()
             : undefined,
         model: input.model?.trim() || undefined,
         mcpTools: mcpTools?.length ? mcpTools : undefined,
@@ -225,14 +236,25 @@ export async function updateAutomation(actorInput, input) {
             throw httpError(`Invalid cron expression "${input.schedule}".`, 400);
         }
         meta.schedule = input.schedule;
-        meta.nextRun = nextOccurrence(input.schedule).toISOString();
+    }
+    if (input.timezone !== undefined) {
+        if (!isValidTimezone(input.timezone)) {
+            throw httpError(`Unknown timezone "${input.timezone}".`, 400);
+        }
+        if (meta.triggerType !== "schedule") {
+            throw httpError("Event automations do not have a timezone.", 400);
+        }
+        meta.timezone = input.timezone;
+    }
+    if (input.schedule !== undefined || input.timezone !== undefined) {
+        meta.nextRun = nextOccurrence(meta.schedule, undefined, meta.timezone).toISOString();
     }
     if (input.enabled !== undefined) {
         meta.enabled = input.enabled;
         if (input.enabled &&
             meta.triggerType === "schedule" &&
             isValidCron(meta.schedule)) {
-            meta.nextRun = nextOccurrence(meta.schedule).toISOString();
+            meta.nextRun = nextOccurrence(meta.schedule, undefined, meta.timezone).toISOString();
         }
     }
     if (input.condition !== undefined) {
@@ -264,6 +286,9 @@ export async function deleteAutomation(actorInput, scope, name) {
         throw httpError("Only the automation's creator or an organization admin can delete it.", 403);
     }
     await resourceDelete(definition.resource.id);
+    // Names are reusable, so leaving history behind would attach these runs to
+    // whatever automation is created under the same name next.
+    await deleteAutomationRuns(definition.resource.owner, name);
 }
 /**
  * Resolve the identity used by an explicit automation run.

package/dist/automations/service.js.map

@@ -1 +1 @@
-{"version":3,"file":"service.js","sourceRoot":"","sources":["../../src/automations/service.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAC5C,OAAO,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AAC9D,OAAO,EACL,uBAAuB,EACvB,oBAAoB,EACpB,gBAAgB,GAEjB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EACL,+BAA+B,EAC/B,yBAAyB,EACzB,cAAc,EACd,iBAAiB,EACjB,YAAY,EACZ,WAAW,GAEZ,MAAM,uBAAuB,CAAC;AA8D/B,SAAS,SAAS,CAAC,OAAe,EAAE,UAAkB;IACpD,OAAO,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,EAAE,EAAE,UAAU,EAAE,CAAC,CAAC;AAC3D,CAAC;AAED,SAAS,cAAc,CAAC,KAAsB;IAC5C,MAAM,SAAS,GAAG,KAAK,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACvD,IAAI,CAAC,SAAS;QAAE,MAAM,SAAS,CAAC,oBAAoB,EAAE,GAAG,CAAC,CAAC;IAC3D,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,IAAI,EAAE,IAAI,IAAI,EAAE,CAAC;AAC3D,CAAC;AAED,SAAS,cAAc,CAAC,IAAY;IAClC,OAAO,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;AAC1D,CAAC;AAED,SAAS,cAAc,CAAC,IAAY;IAClC,MAAM,UAAU,GAAG,IAAI;SACpB,IAAI,EAAE;SACN,WAAW,EAAE;SACb,OAAO,CAAC,aAAa,EAAE,GAAG,CAAC,CAAC;IAC/B,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,MAAM,SAAS,CAAC,mDAAmD,EAAE,GAAG,CAAC,CAAC;IAC5E,CAAC;IACD,OAAO,QAAQ,UAAU,KAAK,CAAC;AACjC,CAAC;AAED,SAAS,aAAa,CAAC,KAAsB,EAAE,KAAsB;IACnE,IAAI,KAAK,KAAK,UAAU;QAAE,OAAO,KAAK,CAAC,SAAS,CAAC;IACjD,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;QACjB,MAAM,SAAS,CACb,2DAA2D,EAC3D,GAAG,CACJ,CAAC;IACJ,CAAC;IACD,OAAO,yBAAyB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;AAChD,CAAC;AAED,KAAK,UAAU,0BAA0B,CACvC,KAAa,EACb,KAAa;IAEb,MAAM,MAAM,GAAG,MAAM,SAAS,EAAE,CAAC,OAAO,CAAC;QACvC,GAAG,EAAE,4EAA4E;QACjF,IAAI,EAAE,CAAC,KAAK,EAAE,KAAK,CAAC,WAAW,EAAE,CAAC;KACnC,CAAC,CAAC;IACH,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IACrC,OAAO,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC;AACpE,CAAC;AAED,KAAK,UAAU,6BAA6B,CAC1C,KAAsB;IAEtB,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;QACjB,MAAM,SAAS,CACb,2DAA2D,EAC3D,GAAG,CACJ,CAAC;IACJ,CAAC;IACD,MAAM,UAAU,GAAG,MAAM,0BAA0B,CACjD,KAAK,CAAC,KAAK,EACX,KAAK,CAAC,SAAS,CAChB,CAAC;IACF,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,MAAM,SAAS,CAAC,kDAAkD,EAAE,GAAG,CAAC,CAAC;IAC3E,CAAC;IACD,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,SAAS,mBAAmB,CAAC,UAAkC;IAC7D,OAAO,UAAU,CAAC,IAAI,KAAK,OAAO,IAAI,UAAU,CAAC,IAAI,KAAK,OAAO,CAAC;AACpE,CAAC;AAED,KAAK,UAAU,cAAc,CAC3B,UAA2B,EAC3B,QAAkB,EAClB,IAAoB;IAEpB,MAAM,KAAK,GAAG,cAAc,CAAC,UAAU,CAAC,CAAC;IACzC,MAAM,aAAa,GAAG,+BAA+B,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IACtE,IAAI,CAAC,aAAa,EAAE,CAAC;QACnB,OAAO;YACL,KAAK;YACL,SAAS,EAAE,QAAQ,CAAC,KAAK,CAAC,WAAW,EAAE,KAAK,KAAK,CAAC,SAAS;SAC5D,CAAC;IACJ,CAAC;IACD,IAAI,KAAK,CAAC,KAAK,KAAK,aAAa,EAAE,CAAC;QAClC,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;IACrC,CAAC;IACD,MAAM,UAAU,GAAG,MAAM,6BAA6B,CAAC,KAAK,CAAC,CAAC;IAC9D,MAAM,SAAS,GACb,IAAI,CAAC,SAAS,EAAE,IAAI,EAAE,CAAC,WAAW,EAAE,KAAK,KAAK,CAAC,SAAS,CAAC,WAAW,EAAE,CAAC;IACzE,OAAO;QACL,KAAK;QACL,SAAS,EAAE,SAAS,IAAI,mBAAmB,CAAC,UAAU,CAAC;KACxD,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAC/C,UAA2B,EAC3B,QAAkB;IAElB,MAAM,EAAE,IAAI,EAAE,GAAG,gBAAgB,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;IACpD,OAAO,CAAC,MAAM,cAAc,CAAC,UAAU,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;AACtE,CAAC;AAED,SAAS,wBAAwB,CAC/B,QAAkB;IAElB,MAAM,MAAM,GAAG,gBAAgB,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;IAClD,IAAI,MAAM,CAAC,cAAc,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;QAChD,MAAM,SAAS,CACb,IAAI,cAAc,CAAC,QAAQ,CAAC,IAAI,CAAC,iEAAiE,EAClG,GAAG,CACJ,CAAC;IACJ,CAAC;IACD,OAAO;QACL,QAAQ;QACR,IAAI,EAAE;YACJ,GAAG,MAAM,CAAC,IAAI;YACd,WAAW,EAAE,MAAM,CAAC,cAAc,CAAC,WAAW;YAC9C,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,IAAI,SAAS;SACpC;QACD,IAAI,EAAE,MAAM,CAAC,IAAI;KAClB,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,cAAc,CAC3B,UAA2B,EAC3B,KAAsB,EACtB,IAAY;IAEZ,MAAM,KAAK,GAAG,cAAc,CAAC,UAAU,CAAC,CAAC;IACzC,IAAI,KAAK,KAAK,cAAc;QAAE,MAAM,6BAA6B,CAAC,KAAK,CAAC,CAAC;IACzE,MAAM,KAAK,GAAG,aAAa,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IAC1C,MAAM,IAAI,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC;IAClC,MAAM,QAAQ,GAAG,MAAM,iBAAiB,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;IACtD,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,MAAM,SAAS,CAAC,eAAe,cAAc,CAAC,IAAI,CAAC,cAAc,EAAE,GAAG,CAAC,CAAC;IAC1E,CAAC;IACD,MAAM,UAAU,GAAG,wBAAwB,CAAC,QAAQ,CAAC,CAAC;IACtD,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,KAAK,EAAE,QAAQ,EAAE,UAAU,CAAC,IAAI,CAAC,CAAC;IACtE,OAAO;QACL,GAAG,UAAU;QACb,IAAI,EAAE,cAAc,CAAC,QAAQ,CAAC,IAAI,CAAC;QACnC,KAAK;QACL,SAAS,EAAE,MAAM,CAAC,SAAS;KAC5B,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC7C,UAA2B,EAC3B,KAAsB;IAEtB,MAAM,KAAK,GAAG,cAAc,CAAC,UAAU,CAAC,CAAC;IACzC,MAAM,UAAU,GACd,KAAK,KAAK,cAAc;QACtB,CAAC,CAAC,MAAM,6BAA6B,CAAC,KAAK,CAAC;QAC5C,CAAC,CAAC,SAAS,CAAC;IAChB,MAAM,KAAK,GAAG,aAAa,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IAC1C,MAAM,SAAS,GAAG,MAAM,YAAY,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IACrD,MAAM,WAAW,GAA2B,EAAE,CAAC;IAE/C,KAAK,MAAM,YAAY,IAAI,SAAS,EAAE,CAAC;QACrC,IACE,CAAC,YAAY,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;YAClC,YAAY,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,EACnC,CAAC;YACD,SAAS;QACX,CAAC;QACD,MAAM,QAAQ,GAAG,MAAM,iBAAiB,CAAC,KAAK,EAAE,YAAY,CAAC,IAAI,CAAC,CAAC;QACnE,IAAI,CAAC,QAAQ;YAAE,SAAS;QACxB,MAAM,MAAM,GAAG,gBAAgB,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QAClD,IAAI,MAAM,CAAC,cAAc,CAAC,IAAI,KAAK,YAAY;YAAE,SAAS;QAC1D,MAAM,SAAS,GACb,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,EAAE,CAAC,WAAW,EAAE,KAAK,KAAK,CAAC,SAAS,CAAC;QAClE,WAAW,CAAC,IAAI,CAAC;YACf,QAAQ;YACR,IAAI,EAAE,cAAc,CAAC,QAAQ,CAAC,IAAI,CAAC;YACnC,KAAK;YACL,IAAI,EAAE;gBACJ,GAAG,MAAM,CAAC,IAAI;gBACd,WAAW,EAAE,MAAM,CAAC,cAAc,CAAC,WAAW;gBAC9C,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,IAAI,SAAS;aACpC;YACD,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,SAAS,EACP,KAAK,KAAK,UAAU;gBACpB,SAAS;gBACT,CAAC,UAAU,CAAC,CAAC,CAAC,mBAAmB,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;SACzD,CAAC,CAAC;IACL,CAAC;IAED,OAAO,WAAW,CAAC;AACrB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,UAA2B,EAC3B,KAA4B;IAE5B,MAAM,KAAK,GAAG,cAAc,CAAC,UAAU,CAAC,CAAC;IACzC,IAAI,KAAK,CAAC,KAAK,KAAK,cAAc,EAAE,CAAC;QACnC,MAAM,6BAA6B,CAAC,KAAK,CAAC,CAAC;IAC7C,CAAC;IACD,MAAM,KAAK,GAAG,aAAa,CAAC,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;IAChD,MAAM,IAAI,GAAG,cAAc,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACxC,IAAI,MAAM,iBAAiB,CAAC,KAAK,EAAE,IAAI,CAAC,EAAE,CAAC;QACzC,MAAM,SAAS,CACb,wBAAwB,cAAc,CAAC,IAAI,CAAC,mBAAmB,EAC/D,GAAG,CACJ,CAAC;IACJ,CAAC;IACD,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;IAC/B,IAAI,CAAC,IAAI;QAAE,MAAM,SAAS,CAAC,mBAAmB,EAAE,GAAG,CAAC,CAAC;IAErD,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IAC9C,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IACxC,IAAI,KAAK,CAAC,WAAW,KAAK,UAAU,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC/D,MAAM,SAAS,CACb,QAAQ;YACN,CAAC,CAAC,4BAA4B,QAAQ,IAAI;YAC1C,CAAC,CAAC,iDAAiD,EACrD,GAAG,CACJ,CAAC;IACJ,CAAC;IACD,IAAI,KAAK,CAAC,WAAW,KAAK,OAAO,IAAI,CAAC,KAAK,EAAE,CAAC;QAC5C,MAAM,SAAS,CAAC,oDAAoD,EAAE,GAAG,CAAC,CAAC;IAC7E,CAAC;IAED,MAAM,QAAQ,GAAG,oBAAoB,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IACtD,MAAM,IAAI,GAAmB;QAC3B,QAAQ,EAAE,KAAK,CAAC,WAAW,KAAK,UAAU,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE;QAC1D,OAAO,EAAE,IAAI;QACb,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,KAAK,EAAE,KAAK,CAAC,WAAW,KAAK,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS;QACxD,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,IAAI,EAAE,IAAI,SAAS;QAC/C,IAAI,EAAE,SAAS;QACf,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,SAAS;QACzC,iBAAiB,EAAE,KAAK,CAAC,iBAAiB,EAAE,IAAI,EAAE,IAAI,SAAS;QAC/D,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,KAAK,EAAE,KAAK,CAAC,KAAK,KAAK,cAAc,CAAC,CAAC,CAAC,KAAK,CAAC,KAAM,CAAC,CAAC,CAAC,SAAS;QAChE,KAAK,EAAE,SAAS;QAChB,OAAO,EACL,KAAK,CAAC,WAAW,KAAK,UAAU;YAC9B,CAAC,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC,WAAW,EAAE;YACxC,CAAC,CAAC,SAAS;QACf,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,IAAI,EAAE,IAAI,SAAS;QACvC,QAAQ,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS;QACjD,aAAa,EAAE,KAAK,CAAC,QAAQ,EAAE,aAAa;QAC5C,gBAAgB,EAAE,KAAK,CAAC,QAAQ,EAAE,QAAQ;QAC1C,mBAAmB,EAAE,KAAK,CAAC,QAAQ,EAAE,WAAW;QAChD,iBAAiB,EAAE,KAAK,CAAC,QAAQ,EAAE,SAAS;QAC5C,gBAAgB,EAAE,KAAK,CAAC,QAAQ,EAAE,QAAQ;KAC3C,CAAC;IACF,MAAM,OAAO,GAAG,uBAAuB,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IACpD,MAAM,WAAW,CAAC,KAAK,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;IACxC,OAAO;QACL,IAAI,EAAE,cAAc,CAAC,IAAI,CAAC;QAC1B,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,IAAI,EAAE,EAAE,GAAG,IAAI,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,IAAI,EAAE,SAAS,EAAE;QAClE,IAAI;QACJ,SAAS,EAAE,IAAI;KAChB,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,UAA2B,EAC3B,KAA4B;IAE5B,MAAM,UAAU,GAAG,MAAM,cAAc,CAAC,UAAU,EAAE,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;IAC7E,IAAI,CAAC,UAAU,CAAC,SAAS,EAAE,CAAC;QAC1B,MAAM,SAAS,CACb,uEAAuE,EACvE,GAAG,CACJ,CAAC;IACJ,CAAC;IACD,MAAM,EAAE,IAAI,EAAE,GAAG,UAAU,CAAC;IAC5B,IAAI,KAAK,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;QACjC,IAAI,IAAI,CAAC,WAAW,KAAK,UAAU,EAAE,CAAC;YACpC,MAAM,SAAS,CAAC,gDAAgD,EAAE,GAAG,CAAC,CAAC;QACzE,CAAC;QACD,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC;YACjC,MAAM,SAAS,CAAC,4BAA4B,KAAK,CAAC,QAAQ,IAAI,EAAE,GAAG,CAAC,CAAC;QACvE,CAAC;QACD,IAAI,CAAC,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC;QAC/B,IAAI,CAAC,OAAO,GAAG,cAAc,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,WAAW,EAAE,CAAC;IAC9D,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;QAChC,IAAI,CAAC,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC;QAC7B,IACE,KAAK,CAAC,OAAO;YACb,IAAI,CAAC,WAAW,KAAK,UAAU;YAC/B,WAAW,CAAC,IAAI,CAAC,QAAQ,CAAC,EAC1B,CAAC;YACD,IAAI,CAAC,OAAO,GAAG,cAAc,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,WAAW,EAAE,CAAC;QAC7D,CAAC;IACH,CAAC;IACD,IAAI,KAAK,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;QAClC,IAAI,CAAC,SAAS,GAAG,KAAK,CAAC,SAAS,EAAE,IAAI,EAAE,IAAI,SAAS,CAAC;IACxD,CAAC;IACD,IAAI,KAAK,CAAC,iBAAiB,KAAK,SAAS,EAAE,CAAC;QAC1C,IAAI,CAAC,iBAAiB,GAAG,KAAK,CAAC,iBAAiB,EAAE,IAAI,EAAE,IAAI,SAAS,CAAC;IACxE,CAAC;IACD,IAAI,KAAK,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;QAC9B,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC,KAAK,EAAE,IAAI,EAAE,IAAI,SAAS,CAAC;IAChD,CAAC;IACD,IAAI,KAAK,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;QACjC,MAAM,QAAQ,GAAG,oBAAoB,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QACtD,IAAI,CAAC,QAAQ,GAAG,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;IAC1D,CAAC;IACD,IAAI,KAAK,CAAC,KAAK,KAAK,cAAc,EAAE,CAAC;QACnC,IAAI,CAAC,KAAK,GAAG,+BAA+B,CAAC,UAAU,CAAC,QAAQ,CAAC,KAAK,CAAE,CAAC;QACzE,IAAI,CAAC,KAAK,GAAG,SAAS,CAAC;IACzB,CAAC;IACD,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;IAC5E,IAAI,CAAC,IAAI;QAAE,MAAM,SAAS,CAAC,8BAA8B,EAAE,GAAG,CAAC,CAAC;IAChE,MAAM,WAAW,CACf,UAAU,CAAC,QAAQ,CAAC,KAAK,EACzB,UAAU,CAAC,QAAQ,CAAC,IAAI,EACxB,uBAAuB,CAAC,IAAI,EAAE,IAAI,CAAC,CACpC,CAAC;IACF,OAAO,EAAE,GAAG,UAAU,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;AACvC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,UAA2B,EAC3B,KAAsB,EACtB,IAAY;IAEZ,MAAM,UAAU,GAAG,MAAM,cAAc,CAAC,UAAU,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;IACjE,IAAI,CAAC,UAAU,CAAC,SAAS,EAAE,CAAC;QAC1B,MAAM,SAAS,CACb,uEAAuE,EACvE,GAAG,CACJ,CAAC;IACJ,CAAC;IACD,MAAM,cAAc,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;AAC/C,CAAC;AAYD;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,kCAAkC,CACtD,aAAqB,EACrB,IAAoB;IAEpB,MAAM,KAAK,GAAG,+BAA+B,CAAC,aAAa,CAAC,CAAC;IAC7D,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,SAAS,GAAG,CAAC,IAAI,CAAC,SAAS,IAAI,aAAa,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QACzE,IAAI,CAAC,SAAS,IAAI,SAAS,KAAK,aAAa,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC;YACnE,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,MAAM,EAAE,uDAAuD;aAChE,CAAC;QACJ,CAAC;QACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,SAAS,EAAE,UAAU,EAAE,SAAS,EAAE,EAAE,CAAC;IACtE,CAAC;IAED,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,EAAE,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACvD,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,OAAO;YACL,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,kDAAkD;SAC3D,CAAC;IACJ,CAAC;IACD,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;QAC7B,OAAO;YACL,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,qDAAqD;SAC9D,CAAC;IACJ,CAAC;IACD,IAAI,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,KAAK,KAAK,EAAE,CAAC;QACvC,OAAO;YACL,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,4DAA4D;SACrE,CAAC;IACJ,CAAC;IAED,MAAM,IAAI,GAAG,MAAM,SAAS,EAAE,CAAC,OAAO,CAAC;QACrC,GAAG,EAAE,qDAAqD;QAC1D,IAAI,EAAE,CAAC,SAAS,CAAC;KAClB,CAAC,CAAC;IACH,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;QACtB,OAAO;YACL,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,uBAAuB,SAAS,qBAAqB;SAC9D,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,CAAC,MAAM,0BAA0B,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC,EAAE,CAAC;QAC1D,OAAO;YACL,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,uBAAuB,SAAS,4CAA4C,KAAK,IAAI;SAC9F,CAAC;IACJ,CAAC;IACD,OAAO;QACL,EAAE,EAAE,IAAI;QACR,QAAQ,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,UAAU,EAAE,SAAS,EAAE;KACtD,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,2BAA2B,CACzC,QAAqC,EACrC,UAA8B;IAE9B,OAAO,CACL,OAAO,UAAU,KAAK,QAAQ;QAC9B,UAAU,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,KAAK,QAAQ,CAAC,UAAU,CACxD,CAAC;AACJ,CAAC","sourcesContent":["import { getDbExec } from \"../db/client.js\";\nimport { isValidCron, nextOccurrence } from \"../jobs/cron.js\";\nimport {\n  buildJobResourceContent,\n  normalizeJobMcpTools,\n  parseJobResource,\n  type JobFrontmatter,\n} from \"../jobs/frontmatter.js\";\nimport {\n  organizationIdFromResourceOwner,\n  organizationResourceOwner,\n  resourceDelete,\n  resourceGetByPath,\n  resourceList,\n  resourcePut,\n  type Resource,\n} from \"../resources/store.js\";\n\nexport type AutomationScope = \"personal\" | \"organization\";\n\nexport interface AutomationActor {\n  userEmail: string;\n  orgId?: string | null;\n}\n\nexport interface AutomationDefinition {\n  resource: Resource;\n  name: string;\n  scope: AutomationScope;\n  meta: JobFrontmatter & {\n    triggerType: \"schedule\" | \"event\";\n    mode: \"agentic\" | \"deterministic\";\n  };\n  body: string;\n  canUpdate: boolean;\n}\n\nexport interface AutomationDelivery {\n  originScopeId?: string;\n  platform?: string;\n  destination?: string;\n  threadRef?: string;\n  tenantId?: string;\n}\n\nexport interface DefineAutomationInput {\n  name: string;\n  scope: AutomationScope;\n  triggerType: \"schedule\" | \"event\";\n  body: string;\n  schedule?: string;\n  event?: string;\n  condition?: string;\n  domain?: string;\n  delegatedPolicyId?: string;\n  model?: string;\n  mcpTools?: unknown;\n  delivery?: AutomationDelivery;\n}\n\nexport type DefinedAutomation = Omit<AutomationDefinition, \"resource\">;\n\nexport interface UpdateAutomationInput {\n  name: string;\n  scope: AutomationScope;\n  enabled?: boolean;\n  body?: string;\n  condition?: string | null;\n  delegatedPolicyId?: string | null;\n  schedule?: string;\n  model?: string | null;\n  mcpTools?: unknown;\n}\n\ninterface OrganizationMembership {\n  role: string;\n}\n\nfunction httpError(message: string, statusCode: number): Error {\n  return Object.assign(new Error(message), { statusCode });\n}\n\nfunction normalizeActor(actor: AutomationActor): AutomationActor {\n  const userEmail = actor.userEmail.trim().toLowerCase();\n  if (!userEmail) throw httpError(\"Not authenticated.\", 401);\n  return { userEmail, orgId: actor.orgId?.trim() || null };\n}\n\nfunction automationName(path: string): string {\n  return path.replace(/^jobs\\//, \"\").replace(/\\.md$/, \"\");\n}\n\nfunction automationPath(name: string): string {\n  const normalized = name\n    .trim()\n    .toLowerCase()\n    .replace(/[^a-z0-9-]/g, \"-\");\n  if (!normalized) {\n    throw httpError(\"Automation name is required (lowercase, hyphens).\", 400);\n  }\n  return `jobs/${normalized}.md`;\n}\n\nfunction ownerForScope(actor: AutomationActor, scope: AutomationScope): string {\n  if (scope === \"personal\") return actor.userEmail;\n  if (!actor.orgId) {\n    throw httpError(\n      \"An organization is required for organization automations.\",\n      400,\n    );\n  }\n  return organizationResourceOwner(actor.orgId);\n}\n\nasync function readOrganizationMembership(\n  orgId: string,\n  email: string,\n): Promise<OrganizationMembership | null> {\n  const result = await getDbExec().execute({\n    sql: \"SELECT role FROM org_members WHERE org_id = ? AND LOWER(email) = ? LIMIT 1\",\n    args: [orgId, email.toLowerCase()],\n  });\n  if (!result.rows.length) return null;\n  return { role: String(result.rows[0]?.role ?? \"\").toLowerCase() };\n}\n\nasync function requireOrganizationMembership(\n  actor: AutomationActor,\n): Promise<OrganizationMembership> {\n  if (!actor.orgId) {\n    throw httpError(\n      \"An organization is required for organization automations.\",\n      400,\n    );\n  }\n  const membership = await readOrganizationMembership(\n    actor.orgId,\n    actor.userEmail,\n  );\n  if (!membership) {\n    throw httpError(\"You are no longer a member of this organization.\", 403);\n  }\n  return membership;\n}\n\nfunction isOrganizationAdmin(membership: OrganizationMembership): boolean {\n  return membership.role === \"owner\" || membership.role === \"admin\";\n}\n\nasync function mutationAccess(\n  actorInput: AutomationActor,\n  resource: Resource,\n  meta: JobFrontmatter,\n): Promise<{ actor: AutomationActor; canUpdate: boolean }> {\n  const actor = normalizeActor(actorInput);\n  const resourceOrgId = organizationIdFromResourceOwner(resource.owner);\n  if (!resourceOrgId) {\n    return {\n      actor,\n      canUpdate: resource.owner.toLowerCase() === actor.userEmail,\n    };\n  }\n  if (actor.orgId !== resourceOrgId) {\n    return { actor, canUpdate: false };\n  }\n  const membership = await requireOrganizationMembership(actor);\n  const isCreator =\n    meta.createdBy?.trim().toLowerCase() === actor.userEmail.toLowerCase();\n  return {\n    actor,\n    canUpdate: isCreator || isOrganizationAdmin(membership),\n  };\n}\n\n/**\n * Compatibility adapters may expose both explicit automations and legacy\n * scheduled jobs. Keep their mutation authorization on the same boundary as\n * the canonical service without forcing legacy resources through the explicit\n * automation classifier.\n */\nexport async function canUpdateAutomationResource(\n  actorInput: AutomationActor,\n  resource: Resource,\n): Promise<boolean> {\n  const { meta } = parseJobResource(resource.content);\n  return (await mutationAccess(actorInput, resource, meta)).canUpdate;\n}\n\nfunction assertExplicitAutomation(\n  resource: Resource,\n): Omit<AutomationDefinition, \"name\" | \"scope\" | \"canUpdate\"> {\n  const parsed = parseJobResource(resource.content);\n  if (parsed.classification.kind !== \"automation\") {\n    throw httpError(\n      `\"${automationName(resource.path)}\" is a legacy scheduled job. Use manage-jobs for compatibility.`,\n      400,\n    );\n  }\n  return {\n    resource,\n    meta: {\n      ...parsed.meta,\n      triggerType: parsed.classification.triggerType,\n      mode: parsed.meta.mode ?? \"agentic\",\n    },\n    body: parsed.body,\n  };\n}\n\nasync function readDefinition(\n  actorInput: AutomationActor,\n  scope: AutomationScope,\n  name: string,\n): Promise<AutomationDefinition> {\n  const actor = normalizeActor(actorInput);\n  if (scope === \"organization\") await requireOrganizationMembership(actor);\n  const owner = ownerForScope(actor, scope);\n  const path = automationPath(name);\n  const resource = await resourceGetByPath(owner, path);\n  if (!resource) {\n    throw httpError(`Automation \"${automationName(path)}\" not found.`, 404);\n  }\n  const definition = assertExplicitAutomation(resource);\n  const access = await mutationAccess(actor, resource, definition.meta);\n  return {\n    ...definition,\n    name: automationName(resource.path),\n    scope,\n    canUpdate: access.canUpdate,\n  };\n}\n\nexport async function listAutomationDefinitions(\n  actorInput: AutomationActor,\n  scope: AutomationScope,\n): Promise<AutomationDefinition[]> {\n  const actor = normalizeActor(actorInput);\n  const membership =\n    scope === \"organization\"\n      ? await requireOrganizationMembership(actor)\n      : undefined;\n  const owner = ownerForScope(actor, scope);\n  const resources = await resourceList(owner, \"jobs/\");\n  const automations: AutomationDefinition[] = [];\n\n  for (const resourceMeta of resources) {\n    if (\n      !resourceMeta.path.endsWith(\".md\") ||\n      resourceMeta.path.endsWith(\".keep\")\n    ) {\n      continue;\n    }\n    const resource = await resourceGetByPath(owner, resourceMeta.path);\n    if (!resource) continue;\n    const parsed = parseJobResource(resource.content);\n    if (parsed.classification.kind !== \"automation\") continue;\n    const isCreator =\n      parsed.meta.createdBy?.trim().toLowerCase() === actor.userEmail;\n    automations.push({\n      resource,\n      name: automationName(resource.path),\n      scope,\n      meta: {\n        ...parsed.meta,\n        triggerType: parsed.classification.triggerType,\n        mode: parsed.meta.mode ?? \"agentic\",\n      },\n      body: parsed.body,\n      canUpdate:\n        scope === \"personal\" ||\n        isCreator ||\n        (membership ? isOrganizationAdmin(membership) : false),\n    });\n  }\n\n  return automations;\n}\n\nexport async function defineAutomation(\n  actorInput: AutomationActor,\n  input: DefineAutomationInput,\n): Promise<DefinedAutomation> {\n  const actor = normalizeActor(actorInput);\n  if (input.scope === \"organization\") {\n    await requireOrganizationMembership(actor);\n  }\n  const owner = ownerForScope(actor, input.scope);\n  const path = automationPath(input.name);\n  if (await resourceGetByPath(owner, path)) {\n    throw httpError(\n      `An automation named \"${automationName(path)}\" already exists.`,\n      409,\n    );\n  }\n  const body = input.body.trim();\n  if (!body) throw httpError(\"body is required.\", 400);\n\n  const schedule = input.schedule?.trim() ?? \"\";\n  const event = input.event?.trim() ?? \"\";\n  if (input.triggerType === \"schedule\" && !isValidCron(schedule)) {\n    throw httpError(\n      schedule\n        ? `invalid cron expression \"${schedule}\".`\n        : \"schedule is required for scheduled automations.\",\n      400,\n    );\n  }\n  if (input.triggerType === \"event\" && !event) {\n    throw httpError(\"event is required for event-triggered automations.\", 400);\n  }\n\n  const mcpTools = normalizeJobMcpTools(input.mcpTools);\n  const meta: JobFrontmatter = {\n    schedule: input.triggerType === \"schedule\" ? schedule : \"\",\n    enabled: true,\n    triggerType: input.triggerType,\n    event: input.triggerType === \"event\" ? event : undefined,\n    condition: input.condition?.trim() || undefined,\n    mode: \"agentic\",\n    domain: input.domain?.trim() || undefined,\n    delegatedPolicyId: input.delegatedPolicyId?.trim() || undefined,\n    createdBy: actor.userEmail,\n    orgId: input.scope === \"organization\" ? actor.orgId! : undefined,\n    runAs: \"creator\",\n    nextRun:\n      input.triggerType === \"schedule\"\n        ? nextOccurrence(schedule).toISOString()\n        : undefined,\n    model: input.model?.trim() || undefined,\n    mcpTools: mcpTools?.length ? mcpTools : undefined,\n    originScopeId: input.delivery?.originScopeId,\n    deliveryPlatform: input.delivery?.platform,\n    deliveryDestination: input.delivery?.destination,\n    deliveryThreadRef: input.delivery?.threadRef,\n    deliveryTenantId: input.delivery?.tenantId,\n  };\n  const content = buildJobResourceContent(meta, body);\n  await resourcePut(owner, path, content);\n  return {\n    name: automationName(path),\n    scope: input.scope,\n    meta: { ...meta, triggerType: input.triggerType, mode: \"agentic\" },\n    body,\n    canUpdate: true,\n  };\n}\n\nexport async function updateAutomation(\n  actorInput: AutomationActor,\n  input: UpdateAutomationInput,\n): Promise<AutomationDefinition> {\n  const definition = await readDefinition(actorInput, input.scope, input.name);\n  if (!definition.canUpdate) {\n    throw httpError(\n      \"Only the automation's creator or an organization admin can update it.\",\n      403,\n    );\n  }\n  const { meta } = definition;\n  if (input.schedule !== undefined) {\n    if (meta.triggerType !== \"schedule\") {\n      throw httpError(\"Event automations do not have a cron schedule.\", 400);\n    }\n    if (!isValidCron(input.schedule)) {\n      throw httpError(`Invalid cron expression \"${input.schedule}\".`, 400);\n    }\n    meta.schedule = input.schedule;\n    meta.nextRun = nextOccurrence(input.schedule).toISOString();\n  }\n  if (input.enabled !== undefined) {\n    meta.enabled = input.enabled;\n    if (\n      input.enabled &&\n      meta.triggerType === \"schedule\" &&\n      isValidCron(meta.schedule)\n    ) {\n      meta.nextRun = nextOccurrence(meta.schedule).toISOString();\n    }\n  }\n  if (input.condition !== undefined) {\n    meta.condition = input.condition?.trim() || undefined;\n  }\n  if (input.delegatedPolicyId !== undefined) {\n    meta.delegatedPolicyId = input.delegatedPolicyId?.trim() || undefined;\n  }\n  if (input.model !== undefined) {\n    meta.model = input.model?.trim() || undefined;\n  }\n  if (input.mcpTools !== undefined) {\n    const mcpTools = normalizeJobMcpTools(input.mcpTools);\n    meta.mcpTools = mcpTools?.length ? mcpTools : undefined;\n  }\n  if (input.scope === \"organization\") {\n    meta.orgId = organizationIdFromResourceOwner(definition.resource.owner)!;\n    meta.runAs = \"creator\";\n  }\n  const body = input.body === undefined ? definition.body : input.body.trim();\n  if (!body) throw httpError(\"Automation body is required.\", 400);\n  await resourcePut(\n    definition.resource.owner,\n    definition.resource.path,\n    buildJobResourceContent(meta, body),\n  );\n  return { ...definition, meta, body };\n}\n\nexport async function deleteAutomation(\n  actorInput: AutomationActor,\n  scope: AutomationScope,\n  name: string,\n): Promise<void> {\n  const definition = await readDefinition(actorInput, scope, name);\n  if (!definition.canUpdate) {\n    throw httpError(\n      \"Only the automation's creator or an organization admin can delete it.\",\n      403,\n    );\n  }\n  await resourceDelete(definition.resource.id);\n}\n\nexport interface AutomationExecutionIdentity {\n  userEmail: string;\n  orgId?: string;\n  eventOwner: string;\n}\n\nexport type AutomationExecutionIdentityResult =\n  | { ok: true; identity: AutomationExecutionIdentity }\n  | { ok: false; reason: string };\n\n/**\n * Resolve the identity used by an explicit automation run.\n *\n * Organization automations are visible through their organization owner, but\n * always execute as their immutable creator. Event dispatchers must also\n * require EventMeta.owner to equal `eventOwner`; organization visibility does\n * not make an event organization-wide.\n */\nexport async function resolveAutomationExecutionIdentity(\n  resourceOwner: string,\n  meta: JobFrontmatter,\n): Promise<AutomationExecutionIdentityResult> {\n  const orgId = organizationIdFromResourceOwner(resourceOwner);\n  if (!orgId) {\n    const userEmail = (meta.createdBy || resourceOwner).trim().toLowerCase();\n    if (!userEmail || userEmail !== resourceOwner.trim().toLowerCase()) {\n      return {\n        ok: false,\n        reason: \"Personal automation creator does not match its owner.\",\n      };\n    }\n    return { ok: true, identity: { userEmail, eventOwner: userEmail } };\n  }\n\n  const userEmail = meta.createdBy?.trim().toLowerCase();\n  if (!userEmail) {\n    return {\n      ok: false,\n      reason: \"Organization automation has no creator identity.\",\n    };\n  }\n  if (meta.runAs !== \"creator\") {\n    return {\n      ok: false,\n      reason: \"Organization automations must run as their creator.\",\n    };\n  }\n  if (meta.orgId && meta.orgId !== orgId) {\n    return {\n      ok: false,\n      reason: \"Organization automation metadata does not match its owner.\",\n    };\n  }\n\n  const user = await getDbExec().execute({\n    sql: `SELECT 1 FROM \"user\" WHERE LOWER(email) = ? LIMIT 1`,\n    args: [userEmail],\n  });\n  if (!user.rows.length) {\n    return {\n      ok: false,\n      reason: `Automation creator \"${userEmail}\" no longer exists.`,\n    };\n  }\n  if (!(await readOrganizationMembership(orgId, userEmail))) {\n    return {\n      ok: false,\n      reason: `Automation creator \"${userEmail}\" is no longer a member of organization \"${orgId}\".`,\n    };\n  }\n  return {\n    ok: true,\n    identity: { userEmail, orgId, eventOwner: userEmail },\n  };\n}\n\nexport function automationMatchesEventOwner(\n  identity: AutomationExecutionIdentity,\n  eventOwner: string | undefined,\n): boolean {\n  return (\n    typeof eventOwner === \"string\" &&\n    eventOwner.trim().toLowerCase() === identity.eventOwner\n  );\n}\n"]}
+{"version":3,"file":"service.js","sourceRoot":"","sources":["../../src/automations/service.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAC5C,OAAO,EAAE,WAAW,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AAC/E,OAAO,EACL,uBAAuB,EACvB,oBAAoB,EACpB,gBAAgB,GAEjB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,oBAAoB,EAAE,MAAM,wBAAwB,CAAC;AAC9D,OAAO,EAAE,6BAA6B,EAAE,MAAM,kCAAkC,CAAC;AACjF,OAAO,EACL,+BAA+B,EAC/B,yBAAyB,EACzB,cAAc,EACd,iBAAiB,EACjB,YAAY,EACZ,WAAW,GAEZ,MAAM,uBAAuB,CAAC;AAgE/B,SAAS,SAAS,CAAC,OAAe,EAAE,UAAkB;IACpD,OAAO,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,EAAE,EAAE,UAAU,EAAE,CAAC,CAAC;AAC3D,CAAC;AAED,SAAS,cAAc,CAAC,KAAsB;IAC5C,MAAM,SAAS,GAAG,KAAK,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACvD,IAAI,CAAC,SAAS;QAAE,MAAM,SAAS,CAAC,oBAAoB,EAAE,GAAG,CAAC,CAAC;IAC3D,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,IAAI,EAAE,IAAI,IAAI,EAAE,CAAC;AAC3D,CAAC;AAED,SAAS,cAAc,CAAC,IAAY;IAClC,OAAO,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;AAC1D,CAAC;AAED,SAAS,cAAc,CAAC,IAAY;IAClC,MAAM,UAAU,GAAG,IAAI;SACpB,IAAI,EAAE;SACN,WAAW,EAAE;SACb,OAAO,CAAC,aAAa,EAAE,GAAG,CAAC,CAAC;IAC/B,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,MAAM,SAAS,CAAC,mDAAmD,EAAE,GAAG,CAAC,CAAC;IAC5E,CAAC;IACD,OAAO,QAAQ,UAAU,KAAK,CAAC;AACjC,CAAC;AAED,SAAS,aAAa,CAAC,KAAsB,EAAE,KAAsB;IACnE,IAAI,KAAK,KAAK,UAAU;QAAE,OAAO,KAAK,CAAC,SAAS,CAAC;IACjD,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;QACjB,MAAM,SAAS,CACb,2DAA2D,EAC3D,GAAG,CACJ,CAAC;IACJ,CAAC;IACD,OAAO,yBAAyB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;AAChD,CAAC;AAED,KAAK,UAAU,0BAA0B,CACvC,KAAa,EACb,KAAa;IAEb,MAAM,MAAM,GAAG,MAAM,SAAS,EAAE,CAAC,OAAO,CAAC;QACvC,GAAG,EAAE,4EAA4E;QACjF,IAAI,EAAE,CAAC,KAAK,EAAE,KAAK,CAAC,WAAW,EAAE,CAAC;KACnC,CAAC,CAAC;IACH,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IACrC,OAAO,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC;AACpE,CAAC;AAED,KAAK,UAAU,6BAA6B,CAC1C,KAAsB;IAEtB,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;QACjB,MAAM,SAAS,CACb,2DAA2D,EAC3D,GAAG,CACJ,CAAC;IACJ,CAAC;IACD,MAAM,UAAU,GAAG,MAAM,0BAA0B,CACjD,KAAK,CAAC,KAAK,EACX,KAAK,CAAC,SAAS,CAChB,CAAC;IACF,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,MAAM,SAAS,CAAC,kDAAkD,EAAE,GAAG,CAAC,CAAC;IAC3E,CAAC;IACD,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,SAAS,mBAAmB,CAAC,UAAkC;IAC7D,OAAO,UAAU,CAAC,IAAI,KAAK,OAAO,IAAI,UAAU,CAAC,IAAI,KAAK,OAAO,CAAC;AACpE,CAAC;AAED,KAAK,UAAU,cAAc,CAC3B,UAA2B,EAC3B,QAAkB,EAClB,IAAoB;IAEpB,MAAM,KAAK,GAAG,cAAc,CAAC,UAAU,CAAC,CAAC;IACzC,MAAM,aAAa,GAAG,+BAA+B,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IACtE,IAAI,CAAC,aAAa,EAAE,CAAC;QACnB,OAAO;YACL,KAAK;YACL,SAAS,EAAE,QAAQ,CAAC,KAAK,CAAC,WAAW,EAAE,KAAK,KAAK,CAAC,SAAS;SAC5D,CAAC;IACJ,CAAC;IACD,IAAI,KAAK,CAAC,KAAK,KAAK,aAAa,EAAE,CAAC;QAClC,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;IACrC,CAAC;IACD,MAAM,UAAU,GAAG,MAAM,6BAA6B,CAAC,KAAK,CAAC,CAAC;IAC9D,MAAM,SAAS,GACb,IAAI,CAAC,SAAS,EAAE,IAAI,EAAE,CAAC,WAAW,EAAE,KAAK,KAAK,CAAC,SAAS,CAAC,WAAW,EAAE,CAAC;IACzE,OAAO;QACL,KAAK;QACL,SAAS,EAAE,SAAS,IAAI,mBAAmB,CAAC,UAAU,CAAC;KACxD,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAC/C,UAA2B,EAC3B,QAAkB;IAElB,MAAM,EAAE,IAAI,EAAE,GAAG,gBAAgB,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;IACpD,OAAO,CAAC,MAAM,cAAc,CAAC,UAAU,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;AACtE,CAAC;AAED,SAAS,wBAAwB,CAC/B,QAAkB;IAElB,MAAM,MAAM,GAAG,gBAAgB,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;IAClD,IAAI,MAAM,CAAC,cAAc,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;QAChD,MAAM,SAAS,CACb,IAAI,cAAc,CAAC,QAAQ,CAAC,IAAI,CAAC,iEAAiE,EAClG,GAAG,CACJ,CAAC;IACJ,CAAC;IACD,OAAO;QACL,QAAQ;QACR,IAAI,EAAE;YACJ,GAAG,MAAM,CAAC,IAAI;YACd,WAAW,EAAE,MAAM,CAAC,cAAc,CAAC,WAAW;YAC9C,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,IAAI,SAAS;SACpC;QACD,IAAI,EAAE,MAAM,CAAC,IAAI;KAClB,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,cAAc,CAC3B,UAA2B,EAC3B,KAAsB,EACtB,IAAY;IAEZ,MAAM,KAAK,GAAG,cAAc,CAAC,UAAU,CAAC,CAAC;IACzC,IAAI,KAAK,KAAK,cAAc;QAAE,MAAM,6BAA6B,CAAC,KAAK,CAAC,CAAC;IACzE,MAAM,KAAK,GAAG,aAAa,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IAC1C,MAAM,IAAI,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC;IAClC,MAAM,QAAQ,GAAG,MAAM,iBAAiB,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;IACtD,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,MAAM,SAAS,CAAC,eAAe,cAAc,CAAC,IAAI,CAAC,cAAc,EAAE,GAAG,CAAC,CAAC;IAC1E,CAAC;IACD,MAAM,UAAU,GAAG,wBAAwB,CAAC,QAAQ,CAAC,CAAC;IACtD,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,KAAK,EAAE,QAAQ,EAAE,UAAU,CAAC,IAAI,CAAC,CAAC;IACtE,OAAO;QACL,GAAG,UAAU;QACb,IAAI,EAAE,cAAc,CAAC,QAAQ,CAAC,IAAI,CAAC;QACnC,KAAK;QACL,SAAS,EAAE,MAAM,CAAC,SAAS;KAC5B,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC7C,UAA2B,EAC3B,KAAsB;IAEtB,MAAM,KAAK,GAAG,cAAc,CAAC,UAAU,CAAC,CAAC;IACzC,MAAM,UAAU,GACd,KAAK,KAAK,cAAc;QACtB,CAAC,CAAC,MAAM,6BAA6B,CAAC,KAAK,CAAC;QAC5C,CAAC,CAAC,SAAS,CAAC;IAChB,MAAM,KAAK,GAAG,aAAa,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IAC1C,MAAM,SAAS,GAAG,MAAM,YAAY,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IACrD,MAAM,WAAW,GAA2B,EAAE,CAAC;IAE/C,KAAK,MAAM,YAAY,IAAI,SAAS,EAAE,CAAC;QACrC,IACE,CAAC,YAAY,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;YAClC,YAAY,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,EACnC,CAAC;YACD,SAAS;QACX,CAAC;QACD,MAAM,QAAQ,GAAG,MAAM,iBAAiB,CAAC,KAAK,EAAE,YAAY,CAAC,IAAI,CAAC,CAAC;QACnE,IAAI,CAAC,QAAQ;YAAE,SAAS;QACxB,MAAM,MAAM,GAAG,gBAAgB,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QAClD,IAAI,MAAM,CAAC,cAAc,CAAC,IAAI,KAAK,YAAY;YAAE,SAAS;QAC1D,MAAM,SAAS,GACb,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,EAAE,CAAC,WAAW,EAAE,KAAK,KAAK,CAAC,SAAS,CAAC;QAClE,WAAW,CAAC,IAAI,CAAC;YACf,QAAQ;YACR,IAAI,EAAE,cAAc,CAAC,QAAQ,CAAC,IAAI,CAAC;YACnC,KAAK;YACL,IAAI,EAAE;gBACJ,GAAG,MAAM,CAAC,IAAI;gBACd,WAAW,EAAE,MAAM,CAAC,cAAc,CAAC,WAAW;gBAC9C,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,IAAI,SAAS;aACpC;YACD,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,SAAS,EACP,KAAK,KAAK,UAAU;gBACpB,SAAS;gBACT,CAAC,UAAU,CAAC,CAAC,CAAC,mBAAmB,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;SACzD,CAAC,CAAC;IACL,CAAC;IAED,OAAO,WAAW,CAAC;AACrB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,UAA2B,EAC3B,KAA4B;IAE5B,MAAM,KAAK,GAAG,cAAc,CAAC,UAAU,CAAC,CAAC;IACzC,IAAI,KAAK,CAAC,KAAK,KAAK,cAAc,EAAE,CAAC;QACnC,MAAM,6BAA6B,CAAC,KAAK,CAAC,CAAC;IAC7C,CAAC;IACD,MAAM,KAAK,GAAG,aAAa,CAAC,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;IAChD,MAAM,IAAI,GAAG,cAAc,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACxC,IAAI,MAAM,iBAAiB,CAAC,KAAK,EAAE,IAAI,CAAC,EAAE,CAAC;QACzC,MAAM,SAAS,CACb,wBAAwB,cAAc,CAAC,IAAI,CAAC,mBAAmB,EAC/D,GAAG,CACJ,CAAC;IACJ,CAAC;IACD,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;IAC/B,IAAI,CAAC,IAAI;QAAE,MAAM,SAAS,CAAC,mBAAmB,EAAE,GAAG,CAAC,CAAC;IAErD,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IAC9C,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IACxC,IAAI,KAAK,CAAC,WAAW,KAAK,UAAU,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC/D,MAAM,SAAS,CACb,QAAQ;YACN,CAAC,CAAC,4BAA4B,QAAQ,IAAI;YAC1C,CAAC,CAAC,iDAAiD,EACrD,GAAG,CACJ,CAAC;IACJ,CAAC;IACD,IAAI,KAAK,CAAC,WAAW,KAAK,OAAO,IAAI,CAAC,KAAK,EAAE,CAAC;QAC5C,MAAM,SAAS,CAAC,oDAAoD,EAAE,GAAG,CAAC,CAAC;IAC7E,CAAC;IAED,IAAI,KAAK,CAAC,QAAQ,IAAI,CAAC,eAAe,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC;QACvD,MAAM,SAAS,CAAC,qBAAqB,KAAK,CAAC,QAAQ,IAAI,EAAE,GAAG,CAAC,CAAC;IAChE,CAAC;IACD,sEAAsE;IACtE,yEAAyE;IACzE,MAAM,QAAQ,GACZ,KAAK,CAAC,WAAW,KAAK,UAAU;QAC9B,CAAC,CAAC,KAAK,CAAC,QAAQ,IAAI,CAAC,MAAM,6BAA6B,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QAC1E,CAAC,CAAC,SAAS,CAAC;IAEhB,MAAM,QAAQ,GAAG,oBAAoB,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IACtD,MAAM,IAAI,GAAmB;QAC3B,QAAQ,EAAE,KAAK,CAAC,WAAW,KAAK,UAAU,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE;QAC1D,QAAQ;QACR,OAAO,EAAE,IAAI;QACb,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,KAAK,EAAE,KAAK,CAAC,WAAW,KAAK,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS;QACxD,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,IAAI,EAAE,IAAI,SAAS;QAC/C,IAAI,EAAE,SAAS;QACf,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,SAAS;QACzC,iBAAiB,EAAE,KAAK,CAAC,iBAAiB,EAAE,IAAI,EAAE,IAAI,SAAS;QAC/D,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,KAAK,EAAE,KAAK,CAAC,KAAK,KAAK,cAAc,CAAC,CAAC,CAAC,KAAK,CAAC,KAAM,CAAC,CAAC,CAAC,SAAS;QAChE,KAAK,EAAE,SAAS;QAChB,OAAO,EACL,KAAK,CAAC,WAAW,KAAK,UAAU;YAC9B,CAAC,CAAC,cAAc,CAAC,QAAQ,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC,WAAW,EAAE;YAC7D,CAAC,CAAC,SAAS;QACf,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,IAAI,EAAE,IAAI,SAAS;QACvC,QAAQ,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS;QACjD,aAAa,EAAE,KAAK,CAAC,QAAQ,EAAE,aAAa;QAC5C,gBAAgB,EAAE,KAAK,CAAC,QAAQ,EAAE,QAAQ;QAC1C,mBAAmB,EAAE,KAAK,CAAC,QAAQ,EAAE,WAAW;QAChD,iBAAiB,EAAE,KAAK,CAAC,QAAQ,EAAE,SAAS;QAC5C,gBAAgB,EAAE,KAAK,CAAC,QAAQ,EAAE,QAAQ;KAC3C,CAAC;IACF,MAAM,OAAO,GAAG,uBAAuB,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IACpD,MAAM,WAAW,CAAC,KAAK,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;IACxC,OAAO;QACL,IAAI,EAAE,cAAc,CAAC,IAAI,CAAC;QAC1B,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,IAAI,EAAE,EAAE,GAAG,IAAI,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,IAAI,EAAE,SAAS,EAAE;QAClE,IAAI;QACJ,SAAS,EAAE,IAAI;KAChB,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,UAA2B,EAC3B,KAA4B;IAE5B,MAAM,UAAU,GAAG,MAAM,cAAc,CAAC,UAAU,EAAE,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;IAC7E,IAAI,CAAC,UAAU,CAAC,SAAS,EAAE,CAAC;QAC1B,MAAM,SAAS,CACb,uEAAuE,EACvE,GAAG,CACJ,CAAC;IACJ,CAAC;IACD,MAAM,EAAE,IAAI,EAAE,GAAG,UAAU,CAAC;IAC5B,IAAI,KAAK,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;QACjC,IAAI,IAAI,CAAC,WAAW,KAAK,UAAU,EAAE,CAAC;YACpC,MAAM,SAAS,CAAC,gDAAgD,EAAE,GAAG,CAAC,CAAC;QACzE,CAAC;QACD,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC;YACjC,MAAM,SAAS,CAAC,4BAA4B,KAAK,CAAC,QAAQ,IAAI,EAAE,GAAG,CAAC,CAAC;QACvE,CAAC;QACD,IAAI,CAAC,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC;IACjC,CAAC;IACD,IAAI,KAAK,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;QACjC,IAAI,CAAC,eAAe,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC;YACrC,MAAM,SAAS,CAAC,qBAAqB,KAAK,CAAC,QAAQ,IAAI,EAAE,GAAG,CAAC,CAAC;QAChE,CAAC;QACD,IAAI,IAAI,CAAC,WAAW,KAAK,UAAU,EAAE,CAAC;YACpC,MAAM,SAAS,CAAC,2CAA2C,EAAE,GAAG,CAAC,CAAC;QACpE,CAAC;QACD,IAAI,CAAC,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC;IACjC,CAAC;IACD,IAAI,KAAK,CAAC,QAAQ,KAAK,SAAS,IAAI,KAAK,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;QACjE,IAAI,CAAC,OAAO,GAAG,cAAc,CAC3B,IAAI,CAAC,QAAQ,EACb,SAAS,EACT,IAAI,CAAC,QAAQ,CACd,CAAC,WAAW,EAAE,CAAC;IAClB,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;QAChC,IAAI,CAAC,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC;QAC7B,IACE,KAAK,CAAC,OAAO;YACb,IAAI,CAAC,WAAW,KAAK,UAAU;YAC/B,WAAW,CAAC,IAAI,CAAC,QAAQ,CAAC,EAC1B,CAAC;YACD,IAAI,CAAC,OAAO,GAAG,cAAc,CAC3B,IAAI,CAAC,QAAQ,EACb,SAAS,EACT,IAAI,CAAC,QAAQ,CACd,CAAC,WAAW,EAAE,CAAC;QAClB,CAAC;IACH,CAAC;IACD,IAAI,KAAK,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;QAClC,IAAI,CAAC,SAAS,GAAG,KAAK,CAAC,SAAS,EAAE,IAAI,EAAE,IAAI,SAAS,CAAC;IACxD,CAAC;IACD,IAAI,KAAK,CAAC,iBAAiB,KAAK,SAAS,EAAE,CAAC;QAC1C,IAAI,CAAC,iBAAiB,GAAG,KAAK,CAAC,iBAAiB,EAAE,IAAI,EAAE,IAAI,SAAS,CAAC;IACxE,CAAC;IACD,IAAI,KAAK,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;QAC9B,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC,KAAK,EAAE,IAAI,EAAE,IAAI,SAAS,CAAC;IAChD,CAAC;IACD,IAAI,KAAK,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;QACjC,MAAM,QAAQ,GAAG,oBAAoB,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QACtD,IAAI,CAAC,QAAQ,GAAG,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;IAC1D,CAAC;IACD,IAAI,KAAK,CAAC,KAAK,KAAK,cAAc,EAAE,CAAC;QACnC,IAAI,CAAC,KAAK,GAAG,+BAA+B,CAAC,UAAU,CAAC,QAAQ,CAAC,KAAK,CAAE,CAAC;QACzE,IAAI,CAAC,KAAK,GAAG,SAAS,CAAC;IACzB,CAAC;IACD,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;IAC5E,IAAI,CAAC,IAAI;QAAE,MAAM,SAAS,CAAC,8BAA8B,EAAE,GAAG,CAAC,CAAC;IAChE,MAAM,WAAW,CACf,UAAU,CAAC,QAAQ,CAAC,KAAK,EACzB,UAAU,CAAC,QAAQ,CAAC,IAAI,EACxB,uBAAuB,CAAC,IAAI,EAAE,IAAI,CAAC,CACpC,CAAC;IACF,OAAO,EAAE,GAAG,UAAU,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;AACvC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,UAA2B,EAC3B,KAAsB,EACtB,IAAY;IAEZ,MAAM,UAAU,GAAG,MAAM,cAAc,CAAC,UAAU,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;IACjE,IAAI,CAAC,UAAU,CAAC,SAAS,EAAE,CAAC;QAC1B,MAAM,SAAS,CACb,uEAAuE,EACvE,GAAG,CACJ,CAAC;IACJ,CAAC;IACD,MAAM,cAAc,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;IAC7C,2EAA2E;IAC3E,2DAA2D;IAC3D,MAAM,oBAAoB,CAAC,UAAU,CAAC,QAAQ,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;AAC9D,CAAC;AAYD;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,kCAAkC,CACtD,aAAqB,EACrB,IAAoB;IAEpB,MAAM,KAAK,GAAG,+BAA+B,CAAC,aAAa,CAAC,CAAC;IAC7D,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,SAAS,GAAG,CAAC,IAAI,CAAC,SAAS,IAAI,aAAa,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QACzE,IAAI,CAAC,SAAS,IAAI,SAAS,KAAK,aAAa,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC;YACnE,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,MAAM,EAAE,uDAAuD;aAChE,CAAC;QACJ,CAAC;QACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,SAAS,EAAE,UAAU,EAAE,SAAS,EAAE,EAAE,CAAC;IACtE,CAAC;IAED,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,EAAE,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACvD,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,OAAO;YACL,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,kDAAkD;SAC3D,CAAC;IACJ,CAAC;IACD,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;QAC7B,OAAO;YACL,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,qDAAqD;SAC9D,CAAC;IACJ,CAAC;IACD,IAAI,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,KAAK,KAAK,EAAE,CAAC;QACvC,OAAO;YACL,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,4DAA4D;SACrE,CAAC;IACJ,CAAC;IAED,MAAM,IAAI,GAAG,MAAM,SAAS,EAAE,CAAC,OAAO,CAAC;QACrC,GAAG,EAAE,qDAAqD;QAC1D,IAAI,EAAE,CAAC,SAAS,CAAC;KAClB,CAAC,CAAC;IACH,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;QACtB,OAAO;YACL,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,uBAAuB,SAAS,qBAAqB;SAC9D,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,CAAC,MAAM,0BAA0B,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC,EAAE,CAAC;QAC1D,OAAO;YACL,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,uBAAuB,SAAS,4CAA4C,KAAK,IAAI;SAC9F,CAAC;IACJ,CAAC;IACD,OAAO;QACL,EAAE,EAAE,IAAI;QACR,QAAQ,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,UAAU,EAAE,SAAS,EAAE;KACtD,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,2BAA2B,CACzC,QAAqC,EACrC,UAA8B;IAE9B,OAAO,CACL,OAAO,UAAU,KAAK,QAAQ;QAC9B,UAAU,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,KAAK,QAAQ,CAAC,UAAU,CACxD,CAAC;AACJ,CAAC","sourcesContent":["import { getDbExec } from \"../db/client.js\";\nimport { isValidCron, isValidTimezone, nextOccurrence } from \"../jobs/cron.js\";\nimport {\n  buildJobResourceContent,\n  normalizeJobMcpTools,\n  parseJobResource,\n  type JobFrontmatter,\n} from \"../jobs/frontmatter.js\";\nimport { deleteAutomationRuns } from \"../jobs/run-history.js\";\nimport { resolveUserSchedulingTimezone } from \"../localization/user-timezone.js\";\nimport {\n  organizationIdFromResourceOwner,\n  organizationResourceOwner,\n  resourceDelete,\n  resourceGetByPath,\n  resourceList,\n  resourcePut,\n  type Resource,\n} from \"../resources/store.js\";\n\nexport type AutomationScope = \"personal\" | \"organization\";\n\nexport interface AutomationActor {\n  userEmail: string;\n  orgId?: string | null;\n}\n\nexport interface AutomationDefinition {\n  resource: Resource;\n  name: string;\n  scope: AutomationScope;\n  meta: JobFrontmatter & {\n    triggerType: \"schedule\" | \"event\";\n    mode: \"agentic\" | \"deterministic\";\n  };\n  body: string;\n  canUpdate: boolean;\n}\n\nexport interface AutomationDelivery {\n  originScopeId?: string;\n  platform?: string;\n  destination?: string;\n  threadRef?: string;\n  tenantId?: string;\n}\n\nexport interface DefineAutomationInput {\n  name: string;\n  scope: AutomationScope;\n  triggerType: \"schedule\" | \"event\";\n  body: string;\n  schedule?: string;\n  timezone?: string;\n  event?: string;\n  condition?: string;\n  domain?: string;\n  delegatedPolicyId?: string;\n  model?: string;\n  mcpTools?: unknown;\n  delivery?: AutomationDelivery;\n}\n\nexport type DefinedAutomation = Omit<AutomationDefinition, \"resource\">;\n\nexport interface UpdateAutomationInput {\n  name: string;\n  scope: AutomationScope;\n  enabled?: boolean;\n  body?: string;\n  condition?: string | null;\n  delegatedPolicyId?: string | null;\n  schedule?: string;\n  timezone?: string;\n  model?: string | null;\n  mcpTools?: unknown;\n}\n\ninterface OrganizationMembership {\n  role: string;\n}\n\nfunction httpError(message: string, statusCode: number): Error {\n  return Object.assign(new Error(message), { statusCode });\n}\n\nfunction normalizeActor(actor: AutomationActor): AutomationActor {\n  const userEmail = actor.userEmail.trim().toLowerCase();\n  if (!userEmail) throw httpError(\"Not authenticated.\", 401);\n  return { userEmail, orgId: actor.orgId?.trim() || null };\n}\n\nfunction automationName(path: string): string {\n  return path.replace(/^jobs\\//, \"\").replace(/\\.md$/, \"\");\n}\n\nfunction automationPath(name: string): string {\n  const normalized = name\n    .trim()\n    .toLowerCase()\n    .replace(/[^a-z0-9-]/g, \"-\");\n  if (!normalized) {\n    throw httpError(\"Automation name is required (lowercase, hyphens).\", 400);\n  }\n  return `jobs/${normalized}.md`;\n}\n\nfunction ownerForScope(actor: AutomationActor, scope: AutomationScope): string {\n  if (scope === \"personal\") return actor.userEmail;\n  if (!actor.orgId) {\n    throw httpError(\n      \"An organization is required for organization automations.\",\n      400,\n    );\n  }\n  return organizationResourceOwner(actor.orgId);\n}\n\nasync function readOrganizationMembership(\n  orgId: string,\n  email: string,\n): Promise<OrganizationMembership | null> {\n  const result = await getDbExec().execute({\n    sql: \"SELECT role FROM org_members WHERE org_id = ? AND LOWER(email) = ? LIMIT 1\",\n    args: [orgId, email.toLowerCase()],\n  });\n  if (!result.rows.length) return null;\n  return { role: String(result.rows[0]?.role ?? \"\").toLowerCase() };\n}\n\nasync function requireOrganizationMembership(\n  actor: AutomationActor,\n): Promise<OrganizationMembership> {\n  if (!actor.orgId) {\n    throw httpError(\n      \"An organization is required for organization automations.\",\n      400,\n    );\n  }\n  const membership = await readOrganizationMembership(\n    actor.orgId,\n    actor.userEmail,\n  );\n  if (!membership) {\n    throw httpError(\"You are no longer a member of this organization.\", 403);\n  }\n  return membership;\n}\n\nfunction isOrganizationAdmin(membership: OrganizationMembership): boolean {\n  return membership.role === \"owner\" || membership.role === \"admin\";\n}\n\nasync function mutationAccess(\n  actorInput: AutomationActor,\n  resource: Resource,\n  meta: JobFrontmatter,\n): Promise<{ actor: AutomationActor; canUpdate: boolean }> {\n  const actor = normalizeActor(actorInput);\n  const resourceOrgId = organizationIdFromResourceOwner(resource.owner);\n  if (!resourceOrgId) {\n    return {\n      actor,\n      canUpdate: resource.owner.toLowerCase() === actor.userEmail,\n    };\n  }\n  if (actor.orgId !== resourceOrgId) {\n    return { actor, canUpdate: false };\n  }\n  const membership = await requireOrganizationMembership(actor);\n  const isCreator =\n    meta.createdBy?.trim().toLowerCase() === actor.userEmail.toLowerCase();\n  return {\n    actor,\n    canUpdate: isCreator || isOrganizationAdmin(membership),\n  };\n}\n\n/**\n * Compatibility adapters may expose both explicit automations and legacy\n * scheduled jobs. Keep their mutation authorization on the same boundary as\n * the canonical service without forcing legacy resources through the explicit\n * automation classifier.\n */\nexport async function canUpdateAutomationResource(\n  actorInput: AutomationActor,\n  resource: Resource,\n): Promise<boolean> {\n  const { meta } = parseJobResource(resource.content);\n  return (await mutationAccess(actorInput, resource, meta)).canUpdate;\n}\n\nfunction assertExplicitAutomation(\n  resource: Resource,\n): Omit<AutomationDefinition, \"name\" | \"scope\" | \"canUpdate\"> {\n  const parsed = parseJobResource(resource.content);\n  if (parsed.classification.kind !== \"automation\") {\n    throw httpError(\n      `\"${automationName(resource.path)}\" is a legacy scheduled job. Use manage-jobs for compatibility.`,\n      400,\n    );\n  }\n  return {\n    resource,\n    meta: {\n      ...parsed.meta,\n      triggerType: parsed.classification.triggerType,\n      mode: parsed.meta.mode ?? \"agentic\",\n    },\n    body: parsed.body,\n  };\n}\n\nasync function readDefinition(\n  actorInput: AutomationActor,\n  scope: AutomationScope,\n  name: string,\n): Promise<AutomationDefinition> {\n  const actor = normalizeActor(actorInput);\n  if (scope === \"organization\") await requireOrganizationMembership(actor);\n  const owner = ownerForScope(actor, scope);\n  const path = automationPath(name);\n  const resource = await resourceGetByPath(owner, path);\n  if (!resource) {\n    throw httpError(`Automation \"${automationName(path)}\" not found.`, 404);\n  }\n  const definition = assertExplicitAutomation(resource);\n  const access = await mutationAccess(actor, resource, definition.meta);\n  return {\n    ...definition,\n    name: automationName(resource.path),\n    scope,\n    canUpdate: access.canUpdate,\n  };\n}\n\nexport async function listAutomationDefinitions(\n  actorInput: AutomationActor,\n  scope: AutomationScope,\n): Promise<AutomationDefinition[]> {\n  const actor = normalizeActor(actorInput);\n  const membership =\n    scope === \"organization\"\n      ? await requireOrganizationMembership(actor)\n      : undefined;\n  const owner = ownerForScope(actor, scope);\n  const resources = await resourceList(owner, \"jobs/\");\n  const automations: AutomationDefinition[] = [];\n\n  for (const resourceMeta of resources) {\n    if (\n      !resourceMeta.path.endsWith(\".md\") ||\n      resourceMeta.path.endsWith(\".keep\")\n    ) {\n      continue;\n    }\n    const resource = await resourceGetByPath(owner, resourceMeta.path);\n    if (!resource) continue;\n    const parsed = parseJobResource(resource.content);\n    if (parsed.classification.kind !== \"automation\") continue;\n    const isCreator =\n      parsed.meta.createdBy?.trim().toLowerCase() === actor.userEmail;\n    automations.push({\n      resource,\n      name: automationName(resource.path),\n      scope,\n      meta: {\n        ...parsed.meta,\n        triggerType: parsed.classification.triggerType,\n        mode: parsed.meta.mode ?? \"agentic\",\n      },\n      body: parsed.body,\n      canUpdate:\n        scope === \"personal\" ||\n        isCreator ||\n        (membership ? isOrganizationAdmin(membership) : false),\n    });\n  }\n\n  return automations;\n}\n\nexport async function defineAutomation(\n  actorInput: AutomationActor,\n  input: DefineAutomationInput,\n): Promise<DefinedAutomation> {\n  const actor = normalizeActor(actorInput);\n  if (input.scope === \"organization\") {\n    await requireOrganizationMembership(actor);\n  }\n  const owner = ownerForScope(actor, input.scope);\n  const path = automationPath(input.name);\n  if (await resourceGetByPath(owner, path)) {\n    throw httpError(\n      `An automation named \"${automationName(path)}\" already exists.`,\n      409,\n    );\n  }\n  const body = input.body.trim();\n  if (!body) throw httpError(\"body is required.\", 400);\n\n  const schedule = input.schedule?.trim() ?? \"\";\n  const event = input.event?.trim() ?? \"\";\n  if (input.triggerType === \"schedule\" && !isValidCron(schedule)) {\n    throw httpError(\n      schedule\n        ? `invalid cron expression \"${schedule}\".`\n        : \"schedule is required for scheduled automations.\",\n      400,\n    );\n  }\n  if (input.triggerType === \"event\" && !event) {\n    throw httpError(\"event is required for event-triggered automations.\", 400);\n  }\n\n  if (input.timezone && !isValidTimezone(input.timezone)) {\n    throw httpError(`Unknown timezone \"${input.timezone}\".`, 400);\n  }\n  // Resolve now and persist it: a schedule whose zone is implicit means\n  // something different the moment it is read on a differently-zoned host.\n  const timezone =\n    input.triggerType === \"schedule\"\n      ? input.timezone || (await resolveUserSchedulingTimezone(actor.userEmail))\n      : undefined;\n\n  const mcpTools = normalizeJobMcpTools(input.mcpTools);\n  const meta: JobFrontmatter = {\n    schedule: input.triggerType === \"schedule\" ? schedule : \"\",\n    timezone,\n    enabled: true,\n    triggerType: input.triggerType,\n    event: input.triggerType === \"event\" ? event : undefined,\n    condition: input.condition?.trim() || undefined,\n    mode: \"agentic\",\n    domain: input.domain?.trim() || undefined,\n    delegatedPolicyId: input.delegatedPolicyId?.trim() || undefined,\n    createdBy: actor.userEmail,\n    orgId: input.scope === \"organization\" ? actor.orgId! : undefined,\n    runAs: \"creator\",\n    nextRun:\n      input.triggerType === \"schedule\"\n        ? nextOccurrence(schedule, undefined, timezone).toISOString()\n        : undefined,\n    model: input.model?.trim() || undefined,\n    mcpTools: mcpTools?.length ? mcpTools : undefined,\n    originScopeId: input.delivery?.originScopeId,\n    deliveryPlatform: input.delivery?.platform,\n    deliveryDestination: input.delivery?.destination,\n    deliveryThreadRef: input.delivery?.threadRef,\n    deliveryTenantId: input.delivery?.tenantId,\n  };\n  const content = buildJobResourceContent(meta, body);\n  await resourcePut(owner, path, content);\n  return {\n    name: automationName(path),\n    scope: input.scope,\n    meta: { ...meta, triggerType: input.triggerType, mode: \"agentic\" },\n    body,\n    canUpdate: true,\n  };\n}\n\nexport async function updateAutomation(\n  actorInput: AutomationActor,\n  input: UpdateAutomationInput,\n): Promise<AutomationDefinition> {\n  const definition = await readDefinition(actorInput, input.scope, input.name);\n  if (!definition.canUpdate) {\n    throw httpError(\n      \"Only the automation's creator or an organization admin can update it.\",\n      403,\n    );\n  }\n  const { meta } = definition;\n  if (input.schedule !== undefined) {\n    if (meta.triggerType !== \"schedule\") {\n      throw httpError(\"Event automations do not have a cron schedule.\", 400);\n    }\n    if (!isValidCron(input.schedule)) {\n      throw httpError(`Invalid cron expression \"${input.schedule}\".`, 400);\n    }\n    meta.schedule = input.schedule;\n  }\n  if (input.timezone !== undefined) {\n    if (!isValidTimezone(input.timezone)) {\n      throw httpError(`Unknown timezone \"${input.timezone}\".`, 400);\n    }\n    if (meta.triggerType !== \"schedule\") {\n      throw httpError(\"Event automations do not have a timezone.\", 400);\n    }\n    meta.timezone = input.timezone;\n  }\n  if (input.schedule !== undefined || input.timezone !== undefined) {\n    meta.nextRun = nextOccurrence(\n      meta.schedule,\n      undefined,\n      meta.timezone,\n    ).toISOString();\n  }\n  if (input.enabled !== undefined) {\n    meta.enabled = input.enabled;\n    if (\n      input.enabled &&\n      meta.triggerType === \"schedule\" &&\n      isValidCron(meta.schedule)\n    ) {\n      meta.nextRun = nextOccurrence(\n        meta.schedule,\n        undefined,\n        meta.timezone,\n      ).toISOString();\n    }\n  }\n  if (input.condition !== undefined) {\n    meta.condition = input.condition?.trim() || undefined;\n  }\n  if (input.delegatedPolicyId !== undefined) {\n    meta.delegatedPolicyId = input.delegatedPolicyId?.trim() || undefined;\n  }\n  if (input.model !== undefined) {\n    meta.model = input.model?.trim() || undefined;\n  }\n  if (input.mcpTools !== undefined) {\n    const mcpTools = normalizeJobMcpTools(input.mcpTools);\n    meta.mcpTools = mcpTools?.length ? mcpTools : undefined;\n  }\n  if (input.scope === \"organization\") {\n    meta.orgId = organizationIdFromResourceOwner(definition.resource.owner)!;\n    meta.runAs = \"creator\";\n  }\n  const body = input.body === undefined ? definition.body : input.body.trim();\n  if (!body) throw httpError(\"Automation body is required.\", 400);\n  await resourcePut(\n    definition.resource.owner,\n    definition.resource.path,\n    buildJobResourceContent(meta, body),\n  );\n  return { ...definition, meta, body };\n}\n\nexport async function deleteAutomation(\n  actorInput: AutomationActor,\n  scope: AutomationScope,\n  name: string,\n): Promise<void> {\n  const definition = await readDefinition(actorInput, scope, name);\n  if (!definition.canUpdate) {\n    throw httpError(\n      \"Only the automation's creator or an organization admin can delete it.\",\n      403,\n    );\n  }\n  await resourceDelete(definition.resource.id);\n  // Names are reusable, so leaving history behind would attach these runs to\n  // whatever automation is created under the same name next.\n  await deleteAutomationRuns(definition.resource.owner, name);\n}\n\nexport interface AutomationExecutionIdentity {\n  userEmail: string;\n  orgId?: string;\n  eventOwner: string;\n}\n\nexport type AutomationExecutionIdentityResult =\n  | { ok: true; identity: AutomationExecutionIdentity }\n  | { ok: false; reason: string };\n\n/**\n * Resolve the identity used by an explicit automation run.\n *\n * Organization automations are visible through their organization owner, but\n * always execute as their immutable creator. Event dispatchers must also\n * require EventMeta.owner to equal `eventOwner`; organization visibility does\n * not make an event organization-wide.\n */\nexport async function resolveAutomationExecutionIdentity(\n  resourceOwner: string,\n  meta: JobFrontmatter,\n): Promise<AutomationExecutionIdentityResult> {\n  const orgId = organizationIdFromResourceOwner(resourceOwner);\n  if (!orgId) {\n    const userEmail = (meta.createdBy || resourceOwner).trim().toLowerCase();\n    if (!userEmail || userEmail !== resourceOwner.trim().toLowerCase()) {\n      return {\n        ok: false,\n        reason: \"Personal automation creator does not match its owner.\",\n      };\n    }\n    return { ok: true, identity: { userEmail, eventOwner: userEmail } };\n  }\n\n  const userEmail = meta.createdBy?.trim().toLowerCase();\n  if (!userEmail) {\n    return {\n      ok: false,\n      reason: \"Organization automation has no creator identity.\",\n    };\n  }\n  if (meta.runAs !== \"creator\") {\n    return {\n      ok: false,\n      reason: \"Organization automations must run as their creator.\",\n    };\n  }\n  if (meta.orgId && meta.orgId !== orgId) {\n    return {\n      ok: false,\n      reason: \"Organization automation metadata does not match its owner.\",\n    };\n  }\n\n  const user = await getDbExec().execute({\n    sql: `SELECT 1 FROM \"user\" WHERE LOWER(email) = ? LIMIT 1`,\n    args: [userEmail],\n  });\n  if (!user.rows.length) {\n    return {\n      ok: false,\n      reason: `Automation creator \"${userEmail}\" no longer exists.`,\n    };\n  }\n  if (!(await readOrganizationMembership(orgId, userEmail))) {\n    return {\n      ok: false,\n      reason: `Automation creator \"${userEmail}\" is no longer a member of organization \"${orgId}\".`,\n    };\n  }\n  return {\n    ok: true,\n    identity: { userEmail, orgId, eventOwner: userEmail },\n  };\n}\n\nexport function automationMatchesEventOwner(\n  identity: AutomationExecutionIdentity,\n  eventOwner: string | undefined,\n): boolean {\n  return (\n    typeof eventOwner === \"string\" &&\n    eventOwner.trim().toLowerCase() === identity.eventOwner\n  );\n}\n"]}

package/dist/cli/mcp-config-writers.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"mcp-config-writers.d.ts","sourceRoot":"","sources":["../../src/cli/mcp-config-writers.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AASH,MAAM,MAAM,QAAQ,GAChB,aAAa,GACb,iBAAiB,GACjB,OAAO,GACP,QAAQ,GACR,QAAQ,GACR,UAAU,GACV,gBAAgB,CAAC;AAErB,eAAO,MAAM,OAAO,EAAE,QAAQ,EAQ7B,CAAC;AAEF,mEAAmE;AACnE,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,EAAE,MAAM,CAAC;IACZ,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAClC;AAED,uEAAuE;AACvE,wBAAgB,iBAAiB,CAC/B,MAAM,EAAE,MAAM,EACd,KAAK,CAAC,EAAE,MAAM,EACd,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAC/B,YAAY,CAUd;AAYD,wBAAgB,0BAA0B,CACxC,MAAM,EAAE,QAAQ,EAChB,MAAM,EAAE,MAAM,EACd,KAAK,CAAC,EAAE,MAAM,EACd,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAC/B,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CA6BzB;AAED,wBAAgB,2BAA2B,CACzC,MAAM,EAAE,QAAQ,EAChB,IAAI,EAAE,MAAM,EAAE,EACd,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAC5B,OAAO,SAAiB,GACvB,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAuBzB;AAMD;;;GAGG;AACH,wBAAgB,gBAAgB,IAAI,MAAM,CAEzC;AAED,wBAAgB,uBAAuB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAE/D;AAED,wBAAgB,oBAAoB,IAAI,MAAM,CAE7C;AAED,wBAAgB,eAAe,IAAI,MAAM,CAIxC;AAED,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAE3D;AAED,wBAAgB,gBAAgB,IAAI,MAAM,CAEzC;AAED,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAE7D;AAED,wBAAgB,kBAAkB,IAAI,MAAM,CAI3C;AAED,wBAAgB,0BAA0B,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAElE;AAED,wBAAgB,uBAAuB,IAAI,MAAM,CAmBhD;AAED;;;;;;GAMG;AACH,wBAAgB,aAAa,CAC3B,MAAM,EAAE,QAAQ,EAChB,OAAO,EAAE,MAAM,EACf,KAAK,EAAE,MAAM,GAAG,SAAS,GACxB,MAAM,CAwBR;AAmCD;;;;;;;;GAQG;AACH,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,IAAI,CAuBhE;AAED;;;;GAIG;AACH,wBAAgB,yBAAyB,CAAC,MAAM,EAAE,QAAQ,GAAG,MAAM,CAIlE;AAqBD,wBAAgB,iBAAiB,CAC/B,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,MAAM,EACZ,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,GACpC,IAAI,CAEN;AAED,wBAAgB,0BAA0B,CACxC,MAAM,EAAE,QAAQ,EAChB,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,MAAM,EACZ,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,GACpC,IAAI,CAEN;AAED,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAGnE;AAED,wBAAgB,wBAAwB,CACtC,MAAM,EAAE,QAAQ,EAChB,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,MAAM,GACX,OAAO,CAIT;AAsID,wEAAwE;AACxE,wBAAgB,mBAAmB,CACjC,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,MAAM,EACd,KAAK,CAAC,EAAE,MAAM,EACd,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAC/B,MAAM,CAgBR;AAED,wBAAgB,oBAAoB,CAClC,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,MAAM,EAAE,EACd,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAC5B,OAAO,SAAiB,GACvB,MAAM,CAYR;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,eAAe,CAC7B,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,MAAM,EACZ,KAAK,EAAE,MAAM,GAAG,IAAI,GACnB,IAAI,CAsCN;AAED,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CASjE;AAMD;;;;GAIG;AACH,wBAAgB,uBAAuB,CACrC,MAAM,EAAE,QAAQ,EAChB,UAAU,EAAE,MAAM,EAClB,MAAM,EAAE,MAAM,EACd,KAAK,EAAE,MAAM,GAAG,SAAS,EACzB,OAAO,EAAE,MAAM,EACf,KAAK,EAAE,MAAM,GAAG,SAAS,EACzB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAC/B,MAAM,CAiBR;AAMD;;;GAGG;AACH,wBAAgB,YAAY,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,GAAG,SAAS,CAiB1E;AAiDD,wBAAgB,2BAA2B,CACzC,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,MAAM,EACd,QAAQ,EAAE,MAAM,GACf,MAAM,EAAE,CAEV;AAED;;;;;;;GAOG;AACH,wBAAgB,4BAA4B,CAC1C,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,MAAM,EACd,QAAQ,EAAE,MAAM,GACf,MAAM,EAAE,CA4EV;AAED;;;;GAIG;AACH,wBAAgB,gCAAgC,CAC9C,MAAM,EAAE,QAAQ,EAChB,UAAU,EAAE,MAAM,EAClB,MAAM,EAAE,MAAM,EACd,OAAO,EAAE,MAAM,EACf,KAAK,EAAE,MAAM,GAAG,SAAS,GACxB,MAAM,EAAE,CAWV"}
+{"version":3,"file":"mcp-config-writers.d.ts","sourceRoot":"","sources":["../../src/cli/mcp-config-writers.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AASH,MAAM,MAAM,QAAQ,GAChB,aAAa,GACb,iBAAiB,GACjB,OAAO,GACP,QAAQ,GACR,QAAQ,GACR,UAAU,GACV,gBAAgB,CAAC;AAErB,eAAO,MAAM,OAAO,EAAE,QAAQ,EAQ7B,CAAC;AAEF,mEAAmE;AACnE,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,EAAE,MAAM,CAAC;IACZ,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAClC;AAED,uEAAuE;AACvE,wBAAgB,iBAAiB,CAC/B,MAAM,EAAE,MAAM,EACd,KAAK,CAAC,EAAE,MAAM,EACd,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAC/B,YAAY,CAUd;AAYD,wBAAgB,0BAA0B,CACxC,MAAM,EAAE,QAAQ,EAChB,MAAM,EAAE,MAAM,EACd,KAAK,CAAC,EAAE,MAAM,EACd,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAC/B,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CA6BzB;AAED,wBAAgB,2BAA2B,CACzC,MAAM,EAAE,QAAQ,EAChB,IAAI,EAAE,MAAM,EAAE,EACd,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAC5B,OAAO,SAAiB,GACvB,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAuBzB;AAMD;;;GAGG;AACH,wBAAgB,gBAAgB,IAAI,MAAM,CAEzC;AAED,wBAAgB,uBAAuB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAE/D;AAED,wBAAgB,oBAAoB,IAAI,MAAM,CAE7C;AAED,wBAAgB,eAAe,IAAI,MAAM,CAIxC;AAED,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAE3D;AAED,wBAAgB,gBAAgB,IAAI,MAAM,CAEzC;AAED,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAE7D;AAED,wBAAgB,kBAAkB,IAAI,MAAM,CAI3C;AAED,wBAAgB,0BAA0B,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAElE;AAED,wBAAgB,uBAAuB,IAAI,MAAM,CAmBhD;AAED;;;;;;GAMG;AACH,wBAAgB,aAAa,CAC3B,MAAM,EAAE,QAAQ,EAChB,OAAO,EAAE,MAAM,EACf,KAAK,EAAE,MAAM,GAAG,SAAS,GACxB,MAAM,CAwBR;AAgDD;;;;;;;;GAQG;AACH,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,IAAI,CAuBhE;AAED;;;;GAIG;AACH,wBAAgB,yBAAyB,CAAC,MAAM,EAAE,QAAQ,GAAG,MAAM,CAIlE;AAqBD,wBAAgB,iBAAiB,CAC/B,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,MAAM,EACZ,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,GACpC,IAAI,CAEN;AAED,wBAAgB,0BAA0B,CACxC,MAAM,EAAE,QAAQ,EAChB,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,MAAM,EACZ,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,GACpC,IAAI,CAEN;AAED,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAGnE;AAED,wBAAgB,wBAAwB,CACtC,MAAM,EAAE,QAAQ,EAChB,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,MAAM,GACX,OAAO,CAIT;AAsID,wEAAwE;AACxE,wBAAgB,mBAAmB,CACjC,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,MAAM,EACd,KAAK,CAAC,EAAE,MAAM,EACd,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAC/B,MAAM,CAgBR;AAED,wBAAgB,oBAAoB,CAClC,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,MAAM,EAAE,EACd,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAC5B,OAAO,SAAiB,GACvB,MAAM,CAYR;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,eAAe,CAC7B,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,MAAM,EACZ,KAAK,EAAE,MAAM,GAAG,IAAI,GACnB,IAAI,CAiCN;AAED,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAOjE;AAMD;;;;GAIG;AACH,wBAAgB,uBAAuB,CACrC,MAAM,EAAE,QAAQ,EAChB,UAAU,EAAE,MAAM,EAClB,MAAM,EAAE,MAAM,EACd,KAAK,EAAE,MAAM,GAAG,SAAS,EACzB,OAAO,EAAE,MAAM,EACf,KAAK,EAAE,MAAM,GAAG,SAAS,EACzB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAC/B,MAAM,CAiBR;AAMD;;;GAGG;AACH,wBAAgB,YAAY,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,GAAG,SAAS,CAiB1E;AAiDD,wBAAgB,2BAA2B,CACzC,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,MAAM,EACd,QAAQ,EAAE,MAAM,GACf,MAAM,EAAE,CAEV;AAED;;;;;;;GAOG;AACH,wBAAgB,4BAA4B,CAC1C,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,MAAM,EACd,QAAQ,EAAE,MAAM,GACf,MAAM,EAAE,CA4EV;AAED;;;;GAIG;AACH,wBAAgB,gCAAgC,CAC9C,MAAM,EAAE,QAAQ,EAChB,UAAU,EAAE,MAAM,EAClB,MAAM,EAAE,MAAM,EACd,OAAO,EAAE,MAAM,EACf,KAAK,EAAE,MAAM,GAAG,SAAS,GACxB,MAAM,EAAE,CAWV"}

package/dist/cli/mcp-config-writers.js

@@ -191,6 +191,23 @@ export function configPathFor(client, baseDir, scope) {
 // ---------------------------------------------------------------------------
 // JSON client configs (Claude Code, Claude Code CLI, Cowork)
 // ---------------------------------------------------------------------------
+/**
+ * Read an existing MCP config without conflating missing and unreadable files.
+ * Only ENOENT means the config is absent; any other read failure must abort
+ * before a caller can overwrite existing user configuration.
+ */
+function readExistingConfigFile(file) {
+    try {
+        return fs.readFileSync(file, "utf-8");
+    }
+    catch (error) {
+        if (error.code === "ENOENT")
+            return undefined;
+        const detail = error instanceof Error ? ` (${error.message})` : "";
+        throw new Error(`Cannot read MCP config file: ${file}\n` +
+            `Check that the file is readable and re-run. The file has not been modified.${detail}`);
+    }
+}
 /**
  * Read and parse a JSON config file.
  *
@@ -201,14 +218,9 @@ export function configPathFor(client, baseDir, scope) {
  *   file with only the new MCP entry (data-loss hazard).
  */
 function readJsonFile(file) {
-    let raw;
-    try {
-        raw = fs.readFileSync(file, "utf-8");
-    }
-    catch {
-        // Missing (ENOENT) or unreadable file — treat as empty.
+    const raw = readExistingConfigFile(file);
+    if (raw === undefined)
         return {};
-    }
     if (!raw.trim())
         return {};
     try {
@@ -480,13 +492,7 @@ export function buildCodexLocalBlock(name, args, env, command = "agent-native")
  * Identical algorithm to `mcp.ts`'s `writeCodexBlock` so the two never diverge.
  */
 export function writeCodexBlock(file, name, block) {
-    let content = "";
-    try {
-        content = fs.readFileSync(file, "utf-8");
-    }
-    catch {
-        content = "";
-    }
+    const content = readExistingConfigFile(file) ?? "";
     const lines = content.split(/\r?\n/);
     const out = [];
     let i = 0;
@@ -520,15 +526,10 @@ export function writeCodexBlock(file, name, block) {
     writeFileAtomic(file, next);
 }
 export function codexHasBlock(file, name) {
-    try {
-        const content = fs.readFileSync(file, "utf-8");
-        return content
-            .split(/\r?\n/)
-            .some((line) => codexServerNameOfHeader(line) === name);
-    }
-    catch {
-        return false;
-    }
+    const content = readExistingConfigFile(file);
+    return (content
+        ?.split(/\r?\n/)
+        .some((line) => codexServerNameOfHeader(line) === name) ?? false);
 }
 // ---------------------------------------------------------------------------
 // Unified write helper