@agent-native/core 0.15.13 → 0.16.0

package/dist/integrations/remote-commands-store.js

@@ -0,0 +1,273 @@
+import { getDbExec, intType, isPostgres, retryOnDdlRace, } from "../db/client.js";
+let _initPromise;
+const REMOTE_COMMAND_KINDS = [
+    "create-run",
+    "list-runs",
+    "get-run",
+    "append-followup",
+    "approve",
+    "deny",
+    "stop",
+    "status",
+];
+const TERMINAL_STATUSES = new Set(["completed", "failed"]);
+async function ensureTable() {
+    if (!_initPromise) {
+        _initPromise = (async () => {
+            const client = getDbExec();
+            await retryOnDdlRace(() => client.execute(`
+          CREATE TABLE IF NOT EXISTS integration_remote_commands (
+            id TEXT PRIMARY KEY,
+            device_id TEXT NOT NULL,
+            owner_email TEXT NOT NULL,
+            org_id TEXT,
+            kind TEXT NOT NULL,
+            params_json TEXT NOT NULL,
+            status TEXT NOT NULL,
+            result_json TEXT,
+            platform TEXT,
+            external_thread_id TEXT,
+            attempts ${intType()} NOT NULL DEFAULT 0,
+            next_check_at ${intType()} NOT NULL,
+            claimed_at ${intType()},
+            completed_at ${intType()},
+            error_message TEXT,
+            created_at ${intType()} NOT NULL,
+            updated_at ${intType()} NOT NULL
+          )
+        `));
+            await retryOnDdlRace(() => client.execute(`CREATE INDEX IF NOT EXISTS idx_remote_commands_device_status_next ON integration_remote_commands(device_id, status, next_check_at)`));
+            await retryOnDdlRace(() => client.execute(`CREATE INDEX IF NOT EXISTS idx_remote_commands_owner ON integration_remote_commands(owner_email, org_id)`));
+        })();
+    }
+    return _initPromise;
+}
+function rowToCommand(row) {
+    return {
+        id: row.id,
+        deviceId: row.device_id,
+        ownerEmail: row.owner_email,
+        orgId: row.org_id ?? null,
+        kind: row.kind,
+        params: parseJson(row.params_json, {}),
+        status: row.status,
+        result: parseJson(row.result_json, null),
+        platform: row.platform ?? null,
+        externalThreadId: row.external_thread_id ?? null,
+        attempts: Number(row.attempts ?? 0),
+        nextCheckAt: Number(row.next_check_at ?? 0),
+        claimedAt: row.claimed_at == null ? null : Number(row.claimed_at),
+        completedAt: row.completed_at == null ? null : Number(row.completed_at),
+        errorMessage: row.error_message ?? null,
+        createdAt: Number(row.created_at ?? 0),
+        updatedAt: Number(row.updated_at ?? 0),
+    };
+}
+export function isRemoteCommandKind(value) {
+    return (typeof value === "string" &&
+        REMOTE_COMMAND_KINDS.includes(value));
+}
+export async function enqueueRemoteCommand(input) {
+    await ensureTable();
+    const client = getDbExec();
+    const now = Date.now();
+    const id = `remote-command-${now}-${randomHex(8)}`;
+    await client.execute({
+        sql: `INSERT INTO integration_remote_commands
+      (id, device_id, owner_email, org_id, kind, params_json, status, result_json,
+       platform, external_thread_id, attempts, next_check_at, created_at, updated_at)
+      VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)`,
+        args: [
+            id,
+            input.deviceId,
+            input.ownerEmail,
+            input.orgId ?? null,
+            input.kind,
+            JSON.stringify(input.params ?? {}),
+            "pending",
+            null,
+            input.platform ?? null,
+            input.externalThreadId ?? null,
+            0,
+            input.nextCheckAt ?? now,
+            now,
+            now,
+        ],
+    });
+    const command = await getRemoteCommand(id);
+    if (!command)
+        throw new Error("remote command insert failed");
+    return command;
+}
+export async function getRemoteCommand(id) {
+    await ensureTable();
+    const { rows } = await getDbExec().execute({
+        sql: `SELECT * FROM integration_remote_commands WHERE id = ? LIMIT 1`,
+        args: [id],
+    });
+    return rows[0] ? rowToCommand(rows[0]) : null;
+}
+export async function listRemoteCommandsForOwner(input) {
+    await ensureTable();
+    const limit = Math.max(1, Math.min(input.limit ?? 100, 250));
+    if (!Object.prototype.hasOwnProperty.call(input, "orgId")) {
+        const { rows } = await getDbExec().execute({
+            sql: `SELECT * FROM integration_remote_commands
+            WHERE owner_email = ?
+            ORDER BY updated_at DESC
+            LIMIT ?`,
+            args: [input.ownerEmail, limit],
+        });
+        return rows.map((row) => rowToCommand(row));
+    }
+    const { rows } = await getDbExec().execute({
+        sql: `SELECT * FROM integration_remote_commands
+          WHERE owner_email = ?
+            AND ((org_id IS NULL AND ? IS NULL) OR org_id = ?)
+          ORDER BY updated_at DESC
+          LIMIT ?`,
+        args: [input.ownerEmail, input.orgId ?? null, input.orgId ?? null, limit],
+    });
+    return rows.map((row) => rowToCommand(row));
+}
+export async function claimNextRemoteCommand(deviceId) {
+    await ensureTable();
+    const client = getDbExec();
+    const now = Date.now();
+    const { rows } = await client.execute({
+        sql: `SELECT id FROM integration_remote_commands
+          WHERE device_id = ?
+            AND status = 'pending'
+            AND next_check_at <= ?
+          ORDER BY created_at ASC
+          LIMIT 1`,
+        args: [deviceId, now],
+    });
+    const id = rows[0]?.id;
+    if (!id)
+        return null;
+    const result = await client.execute({
+        sql: isPostgres()
+            ? `UPDATE integration_remote_commands
+          SET status = ?, attempts = attempts + 1, claimed_at = ?, updated_at = ?
+          WHERE id = ? AND device_id = ? AND status = 'pending'
+          RETURNING *`
+            : `UPDATE integration_remote_commands
+          SET status = ?, attempts = attempts + 1, claimed_at = ?, updated_at = ?
+          WHERE id = ? AND device_id = ? AND status = 'pending'`,
+        args: ["claimed", now, now, id, deviceId],
+    });
+    if (isPostgres()) {
+        const row = result.rows?.[0];
+        return row ? rowToCommand(row) : null;
+    }
+    const affected = result.rowsAffected ?? result.rowCount;
+    if (affected === 0)
+        return null;
+    const command = await getRemoteCommand(id);
+    if (!command || command.status !== "claimed")
+        return null;
+    return command;
+}
+export async function updateRemoteCommandResult(input) {
+    await ensureTable();
+    const client = getDbExec();
+    const now = Date.now();
+    const completedAt = TERMINAL_STATUSES.has(input.status) ? now : null;
+    const resultJson = input.result === undefined ? undefined : JSON.stringify(input.result);
+    await client.execute({
+        sql: `UPDATE integration_remote_commands
+          SET status = ?,
+              result_json = COALESCE(?, result_json),
+              error_message = ?,
+              completed_at = COALESCE(?, completed_at),
+              updated_at = ?
+          WHERE id = ? AND device_id = ?`,
+        args: [
+            input.status,
+            resultJson ?? null,
+            input.errorMessage ? input.errorMessage.slice(0, 2000) : null,
+            completedAt,
+            now,
+            input.commandId,
+            input.deviceId,
+        ],
+    });
+    const command = await getRemoteCommand(input.commandId);
+    if (!command || command.deviceId !== input.deviceId)
+        return null;
+    return command;
+}
+export async function retryStaleRemoteCommands(options) {
+    await ensureTable();
+    const client = getDbExec();
+    const now = Date.now();
+    const claimedCutoff = now - (options?.claimedStaleAfterMs ?? 75_000);
+    const runningCutoff = now - (options?.runningStaleAfterMs ?? 5 * 60_000);
+    const maxAttempts = options?.maxAttempts ?? 3;
+    const limit = options?.limit ?? 50;
+    const { rows } = await client.execute({
+        sql: `SELECT id, status, attempts FROM integration_remote_commands
+          WHERE (status = 'claimed' AND updated_at <= ?)
+             OR (status = 'running' AND updated_at <= ?)
+          ORDER BY updated_at ASC
+          LIMIT ?`,
+        args: [claimedCutoff, runningCutoff, limit],
+    });
+    let retried = 0;
+    let failed = 0;
+    for (const row of rows) {
+        const id = row.id;
+        const status = row.status;
+        const attempts = Number(row.attempts ?? 0);
+        if (attempts >= maxAttempts) {
+            const result = await client.execute({
+                sql: `UPDATE integration_remote_commands
+              SET status = 'failed',
+                  error_message = COALESCE(error_message, ?),
+                  completed_at = ?,
+                  updated_at = ?
+              WHERE id = ? AND status = ?`,
+                args: [
+                    `Retry job: exceeded ${maxAttempts} attempts`,
+                    now,
+                    now,
+                    id,
+                    status,
+                ],
+            });
+            if ((result.rowsAffected ?? result.rowCount) > 0)
+                failed++;
+            continue;
+        }
+        const result = await client.execute({
+            sql: `UPDATE integration_remote_commands
+            SET status = 'pending',
+                next_check_at = ?,
+                updated_at = ?
+            WHERE id = ? AND status = ?`,
+            args: [now, now, id, status],
+        });
+        if ((result.rowsAffected ?? result.rowCount) > 0)
+            retried++;
+    }
+    return { retried, failed };
+}
+function parseJson(value, fallback) {
+    if (value == null)
+        return fallback;
+    try {
+        return JSON.parse(String(value));
+    }
+    catch {
+        return fallback;
+    }
+}
+function randomHex(byteLength) {
+    const bytes = new Uint8Array(byteLength);
+    globalThis.crypto.getRandomValues(bytes);
+    return Array.from(bytes)
+        .map((byte) => byte.toString(16).padStart(2, "0"))
+        .join("");
+}
+//# sourceMappingURL=remote-commands-store.js.map

package/dist/integrations/remote-commands-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"remote-commands-store.js","sourceRoot":"","sources":["../../src/integrations/remote-commands-store.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,SAAS,EACT,OAAO,EACP,UAAU,EACV,cAAc,GACf,MAAM,iBAAiB,CAAC;AAOzB,IAAI,YAAuC,CAAC;AAE5C,MAAM,oBAAoB,GAAwB;IAChD,YAAY;IACZ,WAAW;IACX,SAAS;IACT,iBAAiB;IACjB,SAAS;IACT,MAAM;IACN,MAAM;IACN,QAAQ;CACT,CAAC;AAEF,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAAsB,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC,CAAC;AAEhF,KAAK,UAAU,WAAW;IACxB,IAAI,CAAC,YAAY,EAAE,CAAC;QAClB,YAAY,GAAG,CAAC,KAAK,IAAI,EAAE;YACzB,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;YAC3B,MAAM,cAAc,CAAC,GAAG,EAAE,CACxB,MAAM,CAAC,OAAO,CAAC;;;;;;;;;;;;uBAYA,OAAO,EAAE;4BACJ,OAAO,EAAE;yBACZ,OAAO,EAAE;2BACP,OAAO,EAAE;;yBAEX,OAAO,EAAE;yBACT,OAAO,EAAE;;SAEzB,CAAC,CACH,CAAC;YACF,MAAM,cAAc,CAAC,GAAG,EAAE,CACxB,MAAM,CAAC,OAAO,CACZ,oIAAoI,CACrI,CACF,CAAC;YACF,MAAM,cAAc,CAAC,GAAG,EAAE,CACxB,MAAM,CAAC,OAAO,CACZ,0GAA0G,CAC3G,CACF,CAAC;QACJ,CAAC,CAAC,EAAE,CAAC;IACP,CAAC;IACD,OAAO,YAAY,CAAC;AACtB,CAAC;AAED,SAAS,YAAY,CAAC,GAA4B;IAChD,OAAO;QACL,EAAE,EAAE,GAAG,CAAC,EAAY;QACpB,QAAQ,EAAE,GAAG,CAAC,SAAmB;QACjC,UAAU,EAAE,GAAG,CAAC,WAAqB;QACrC,KAAK,EAAG,GAAG,CAAC,MAAwB,IAAI,IAAI;QAC5C,IAAI,EAAE,GAAG,CAAC,IAAyB;QACnC,MAAM,EAAE,SAAS,CAAC,GAAG,CAAC,WAAW,EAAE,EAAE,CAAC;QACtC,MAAM,EAAE,GAAG,CAAC,MAA6B;QACzC,MAAM,EAAE,SAAS,CAAC,GAAG,CAAC,WAAW,EAAE,IAAI,CAAC;QACxC,QAAQ,EAAG,GAAG,CAAC,QAA0B,IAAI,IAAI;QACjD,gBAAgB,EAAG,GAAG,CAAC,kBAAoC,IAAI,IAAI;QACnE,QAAQ,EAAE,MAAM,CAAC,GAAG,CAAC,QAAQ,IAAI,CAAC,CAAC;QACnC,WAAW,EAAE,MAAM,CAAC,GAAG,CAAC,aAAa,IAAI,CAAC,CAAC;QAC3C,SAAS,EAAE,GAAG,CAAC,UAAU,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,UAAoB,CAAC;QAC3E,WAAW,EACT,GAAG,CAAC,YAAY,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,YAAsB,CAAC;QACtE,YAAY,EAAG,GAAG,CAAC,aAA+B,IAAI,IAAI;QAC1D,SAAS,EAAE,MAAM,CAAC,GAAG,CAAC,UAAU,IAAI,CAAC,CAAC;QACtC,SAAS,EAAE,MAAM,CAAC,GAAG,CAAC,UAAU,IAAI,CAAC,CAAC;KACvC,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,mBAAmB,CACjC,KAAc;IAEd,OAAO,CACL,OAAO,KAAK,KAAK,QAAQ;QACzB,oBAAoB,CAAC,QAAQ,CAAC,KAA0B,CAAC,CAC1D,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,KAS1C;IACC,MAAM,WAAW,EAAE,CAAC;IACpB,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;IAC3B,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,MAAM,EAAE,GAAG,kBAAkB,GAAG,IAAI,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC;IAEnD,MAAM,MAAM,CAAC,OAAO,CAAC;QACnB,GAAG,EAAE;;;wDAG+C;QACpD,IAAI,EAAE;YACJ,EAAE;YACF,KAAK,CAAC,QAAQ;YACd,KAAK,CAAC,UAAU;YAChB,KAAK,CAAC,KAAK,IAAI,IAAI;YACnB,KAAK,CAAC,IAAI;YACV,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,MAAM,IAAI,EAAE,CAAC;YAClC,SAAS;YACT,IAAI;YACJ,KAAK,CAAC,QAAQ,IAAI,IAAI;YACtB,KAAK,CAAC,gBAAgB,IAAI,IAAI;YAC9B,CAAC;YACD,KAAK,CAAC,WAAW,IAAI,GAAG;YACxB,GAAG;YACH,GAAG;SACJ;KACF,CAAC,CAAC;IAEH,MAAM,OAAO,GAAG,MAAM,gBAAgB,CAAC,EAAE,CAAC,CAAC;IAC3C,IAAI,CAAC,OAAO;QAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;IAC9D,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,EAAU;IAEV,MAAM,WAAW,EAAE,CAAC;IACpB,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,SAAS,EAAE,CAAC,OAAO,CAAC;QACzC,GAAG,EAAE,gEAAgE;QACrE,IAAI,EAAE,CAAC,EAAE,CAAC;KACX,CAAC,CAAC;IACH,OAAO,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAA4B,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AAC3E,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAAC,KAIhD;IACC,MAAM,WAAW,EAAE,CAAC;IACpB,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,IAAI,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC;IAC7D,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,KAAK,EAAE,OAAO,CAAC,EAAE,CAAC;QAC1D,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,SAAS,EAAE,CAAC,OAAO,CAAC;YACzC,GAAG,EAAE;;;oBAGS;YACd,IAAI,EAAE,CAAC,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC;SAChC,CAAC,CAAC;QACH,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,YAAY,CAAC,GAA8B,CAAC,CAAC,CAAC;IACzE,CAAC;IACD,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,SAAS,EAAE,CAAC,OAAO,CAAC;QACzC,GAAG,EAAE;;;;kBAIS;QACd,IAAI,EAAE,CAAC,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,KAAK,IAAI,IAAI,EAAE,KAAK,CAAC,KAAK,IAAI,IAAI,EAAE,KAAK,CAAC;KAC1E,CAAC,CAAC;IACH,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,YAAY,CAAC,GAA8B,CAAC,CAAC,CAAC;AACzE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,QAAgB;IAEhB,MAAM,WAAW,EAAE,CAAC;IACpB,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;IAC3B,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC;QACpC,GAAG,EAAE;;;;;kBAKS;QACd,IAAI,EAAE,CAAC,QAAQ,EAAE,GAAG,CAAC;KACtB,CAAC,CAAC;IACH,MAAM,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC,EAAE,EAAwB,CAAC;IAC7C,IAAI,CAAC,EAAE;QAAE,OAAO,IAAI,CAAC;IAErB,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC;QAClC,GAAG,EAAE,UAAU,EAAE;YACf,CAAC,CAAC;;;sBAGc;YAChB,CAAC,CAAC;;gEAEwD;QAC5D,IAAI,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,QAAQ,CAAC;KAC1C,CAAC,CAAC;IACH,IAAI,UAAU,EAAE,EAAE,CAAC;QACjB,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QAC7B,OAAO,GAAG,CAAC,CAAC,CAAC,YAAY,CAAC,GAA8B,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACnE,CAAC;IACD,MAAM,QAAQ,GAAG,MAAM,CAAC,YAAY,IAAK,MAAc,CAAC,QAAQ,CAAC;IACjE,IAAI,QAAQ,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAEhC,MAAM,OAAO,GAAG,MAAM,gBAAgB,CAAC,EAAE,CAAC,CAAC;IAC3C,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IAC1D,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAAC,KAM/C;IACC,MAAM,WAAW,EAAE,CAAC;IACpB,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;IAC3B,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,MAAM,WAAW,GAAG,iBAAiB,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;IACrE,MAAM,UAAU,GACd,KAAK,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAExE,MAAM,MAAM,CAAC,OAAO,CAAC;QACnB,GAAG,EAAE;;;;;;yCAMgC;QACrC,IAAI,EAAE;YACJ,KAAK,CAAC,MAAM;YACZ,UAAU,IAAI,IAAI;YAClB,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI;YAC7D,WAAW;YACX,GAAG;YACH,KAAK,CAAC,SAAS;YACf,KAAK,CAAC,QAAQ;SACf;KACF,CAAC,CAAC;IAEH,MAAM,OAAO,GAAG,MAAM,gBAAgB,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IACxD,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,QAAQ,KAAK,KAAK,CAAC,QAAQ;QAAE,OAAO,IAAI,CAAC;IACjE,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAAC,OAK9C;IACC,MAAM,WAAW,EAAE,CAAC;IACpB,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;IAC3B,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,MAAM,aAAa,GAAG,GAAG,GAAG,CAAC,OAAO,EAAE,mBAAmB,IAAI,MAAM,CAAC,CAAC;IACrE,MAAM,aAAa,GAAG,GAAG,GAAG,CAAC,OAAO,EAAE,mBAAmB,IAAI,CAAC,GAAG,MAAM,CAAC,CAAC;IACzE,MAAM,WAAW,GAAG,OAAO,EAAE,WAAW,IAAI,CAAC,CAAC;IAC9C,MAAM,KAAK,GAAG,OAAO,EAAE,KAAK,IAAI,EAAE,CAAC;IAEnC,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC;QACpC,GAAG,EAAE;;;;kBAIS;QACd,IAAI,EAAE,CAAC,aAAa,EAAE,aAAa,EAAE,KAAK,CAAC;KAC5C,CAAC,CAAC;IAEH,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,MAAM,EAAE,GAAG,GAAG,CAAC,EAAY,CAAC;QAC5B,MAAM,MAAM,GAAG,GAAG,CAAC,MAA6B,CAAC;QACjD,MAAM,QAAQ,GAAG,MAAM,CAAC,GAAG,CAAC,QAAQ,IAAI,CAAC,CAAC,CAAC;QAC3C,IAAI,QAAQ,IAAI,WAAW,EAAE,CAAC;YAC5B,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC;gBAClC,GAAG,EAAE;;;;;0CAK6B;gBAClC,IAAI,EAAE;oBACJ,uBAAuB,WAAW,WAAW;oBAC7C,GAAG;oBACH,GAAG;oBACH,EAAE;oBACF,MAAM;iBACP;aACF,CAAC,CAAC;YACH,IAAI,CAAC,MAAM,CAAC,YAAY,IAAK,MAAc,CAAC,QAAQ,CAAC,GAAG,CAAC;gBAAE,MAAM,EAAE,CAAC;YACpE,SAAS;QACX,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC;YAClC,GAAG,EAAE;;;;wCAI6B;YAClC,IAAI,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,MAAM,CAAC;SAC7B,CAAC,CAAC;QACH,IAAI,CAAC,MAAM,CAAC,YAAY,IAAK,MAAc,CAAC,QAAQ,CAAC,GAAG,CAAC;YAAE,OAAO,EAAE,CAAC;IACvE,CAAC;IAED,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC;AAC7B,CAAC;AAED,SAAS,SAAS,CAAC,KAAc,EAAE,QAAiB;IAClD,IAAI,KAAK,IAAI,IAAI;QAAE,OAAO,QAAQ,CAAC;IACnC,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;IACnC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,QAAQ,CAAC;IAClB,CAAC;AACH,CAAC;AAED,SAAS,SAAS,CAAC,UAAkB;IACnC,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,UAAU,CAAC,CAAC;IACzC,UAAU,CAAC,MAAM,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC;IACzC,OAAO,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC;SACrB,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;SACjD,IAAI,CAAC,EAAE,CAAC,CAAC;AACd,CAAC","sourcesContent":["import {\n  getDbExec,\n  intType,\n  isPostgres,\n  retryOnDdlRace,\n} from \"../db/client.js\";\nimport type {\n  RemoteCommand,\n  RemoteCommandKind,\n  RemoteCommandStatus,\n} from \"./remote-types.js\";\n\nlet _initPromise: Promise<void> | undefined;\n\nconst REMOTE_COMMAND_KINDS: RemoteCommandKind[] = [\n  \"create-run\",\n  \"list-runs\",\n  \"get-run\",\n  \"append-followup\",\n  \"approve\",\n  \"deny\",\n  \"stop\",\n  \"status\",\n];\n\nconst TERMINAL_STATUSES = new Set<RemoteCommandStatus>([\"completed\", \"failed\"]);\n\nasync function ensureTable(): Promise<void> {\n  if (!_initPromise) {\n    _initPromise = (async () => {\n      const client = getDbExec();\n      await retryOnDdlRace(() =>\n        client.execute(`\n          CREATE TABLE IF NOT EXISTS integration_remote_commands (\n            id TEXT PRIMARY KEY,\n            device_id TEXT NOT NULL,\n            owner_email TEXT NOT NULL,\n            org_id TEXT,\n            kind TEXT NOT NULL,\n            params_json TEXT NOT NULL,\n            status TEXT NOT NULL,\n            result_json TEXT,\n            platform TEXT,\n            external_thread_id TEXT,\n            attempts ${intType()} NOT NULL DEFAULT 0,\n            next_check_at ${intType()} NOT NULL,\n            claimed_at ${intType()},\n            completed_at ${intType()},\n            error_message TEXT,\n            created_at ${intType()} NOT NULL,\n            updated_at ${intType()} NOT NULL\n          )\n        `),\n      );\n      await retryOnDdlRace(() =>\n        client.execute(\n          `CREATE INDEX IF NOT EXISTS idx_remote_commands_device_status_next ON integration_remote_commands(device_id, status, next_check_at)`,\n        ),\n      );\n      await retryOnDdlRace(() =>\n        client.execute(\n          `CREATE INDEX IF NOT EXISTS idx_remote_commands_owner ON integration_remote_commands(owner_email, org_id)`,\n        ),\n      );\n    })();\n  }\n  return _initPromise;\n}\n\nfunction rowToCommand(row: Record<string, unknown>): RemoteCommand {\n  return {\n    id: row.id as string,\n    deviceId: row.device_id as string,\n    ownerEmail: row.owner_email as string,\n    orgId: (row.org_id as string | null) ?? null,\n    kind: row.kind as RemoteCommandKind,\n    params: parseJson(row.params_json, {}),\n    status: row.status as RemoteCommandStatus,\n    result: parseJson(row.result_json, null),\n    platform: (row.platform as string | null) ?? null,\n    externalThreadId: (row.external_thread_id as string | null) ?? null,\n    attempts: Number(row.attempts ?? 0),\n    nextCheckAt: Number(row.next_check_at ?? 0),\n    claimedAt: row.claimed_at == null ? null : Number(row.claimed_at as number),\n    completedAt:\n      row.completed_at == null ? null : Number(row.completed_at as number),\n    errorMessage: (row.error_message as string | null) ?? null,\n    createdAt: Number(row.created_at ?? 0),\n    updatedAt: Number(row.updated_at ?? 0),\n  };\n}\n\nexport function isRemoteCommandKind(\n  value: unknown,\n): value is RemoteCommandKind {\n  return (\n    typeof value === \"string\" &&\n    REMOTE_COMMAND_KINDS.includes(value as RemoteCommandKind)\n  );\n}\n\nexport async function enqueueRemoteCommand(input: {\n  deviceId: string;\n  ownerEmail: string;\n  orgId?: string | null;\n  kind: RemoteCommandKind;\n  params?: unknown;\n  platform?: string | null;\n  externalThreadId?: string | null;\n  nextCheckAt?: number;\n}): Promise<RemoteCommand> {\n  await ensureTable();\n  const client = getDbExec();\n  const now = Date.now();\n  const id = `remote-command-${now}-${randomHex(8)}`;\n\n  await client.execute({\n    sql: `INSERT INTO integration_remote_commands\n      (id, device_id, owner_email, org_id, kind, params_json, status, result_json,\n       platform, external_thread_id, attempts, next_check_at, created_at, updated_at)\n      VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)`,\n    args: [\n      id,\n      input.deviceId,\n      input.ownerEmail,\n      input.orgId ?? null,\n      input.kind,\n      JSON.stringify(input.params ?? {}),\n      \"pending\",\n      null,\n      input.platform ?? null,\n      input.externalThreadId ?? null,\n      0,\n      input.nextCheckAt ?? now,\n      now,\n      now,\n    ],\n  });\n\n  const command = await getRemoteCommand(id);\n  if (!command) throw new Error(\"remote command insert failed\");\n  return command;\n}\n\nexport async function getRemoteCommand(\n  id: string,\n): Promise<RemoteCommand | null> {\n  await ensureTable();\n  const { rows } = await getDbExec().execute({\n    sql: `SELECT * FROM integration_remote_commands WHERE id = ? LIMIT 1`,\n    args: [id],\n  });\n  return rows[0] ? rowToCommand(rows[0] as Record<string, unknown>) : null;\n}\n\nexport async function listRemoteCommandsForOwner(input: {\n  ownerEmail: string;\n  orgId?: string | null;\n  limit?: number;\n}): Promise<RemoteCommand[]> {\n  await ensureTable();\n  const limit = Math.max(1, Math.min(input.limit ?? 100, 250));\n  if (!Object.prototype.hasOwnProperty.call(input, \"orgId\")) {\n    const { rows } = await getDbExec().execute({\n      sql: `SELECT * FROM integration_remote_commands\n            WHERE owner_email = ?\n            ORDER BY updated_at DESC\n            LIMIT ?`,\n      args: [input.ownerEmail, limit],\n    });\n    return rows.map((row) => rowToCommand(row as Record<string, unknown>));\n  }\n  const { rows } = await getDbExec().execute({\n    sql: `SELECT * FROM integration_remote_commands\n          WHERE owner_email = ?\n            AND ((org_id IS NULL AND ? IS NULL) OR org_id = ?)\n          ORDER BY updated_at DESC\n          LIMIT ?`,\n    args: [input.ownerEmail, input.orgId ?? null, input.orgId ?? null, limit],\n  });\n  return rows.map((row) => rowToCommand(row as Record<string, unknown>));\n}\n\nexport async function claimNextRemoteCommand(\n  deviceId: string,\n): Promise<RemoteCommand | null> {\n  await ensureTable();\n  const client = getDbExec();\n  const now = Date.now();\n  const { rows } = await client.execute({\n    sql: `SELECT id FROM integration_remote_commands\n          WHERE device_id = ?\n            AND status = 'pending'\n            AND next_check_at <= ?\n          ORDER BY created_at ASC\n          LIMIT 1`,\n    args: [deviceId, now],\n  });\n  const id = rows[0]?.id as string | undefined;\n  if (!id) return null;\n\n  const result = await client.execute({\n    sql: isPostgres()\n      ? `UPDATE integration_remote_commands\n          SET status = ?, attempts = attempts + 1, claimed_at = ?, updated_at = ?\n          WHERE id = ? AND device_id = ? AND status = 'pending'\n          RETURNING *`\n      : `UPDATE integration_remote_commands\n          SET status = ?, attempts = attempts + 1, claimed_at = ?, updated_at = ?\n          WHERE id = ? AND device_id = ? AND status = 'pending'`,\n    args: [\"claimed\", now, now, id, deviceId],\n  });\n  if (isPostgres()) {\n    const row = result.rows?.[0];\n    return row ? rowToCommand(row as Record<string, unknown>) : null;\n  }\n  const affected = result.rowsAffected ?? (result as any).rowCount;\n  if (affected === 0) return null;\n\n  const command = await getRemoteCommand(id);\n  if (!command || command.status !== \"claimed\") return null;\n  return command;\n}\n\nexport async function updateRemoteCommandResult(input: {\n  deviceId: string;\n  commandId: string;\n  status: \"running\" | \"completed\" | \"failed\";\n  result?: unknown;\n  errorMessage?: string | null;\n}): Promise<RemoteCommand | null> {\n  await ensureTable();\n  const client = getDbExec();\n  const now = Date.now();\n  const completedAt = TERMINAL_STATUSES.has(input.status) ? now : null;\n  const resultJson =\n    input.result === undefined ? undefined : JSON.stringify(input.result);\n\n  await client.execute({\n    sql: `UPDATE integration_remote_commands\n          SET status = ?,\n              result_json = COALESCE(?, result_json),\n              error_message = ?,\n              completed_at = COALESCE(?, completed_at),\n              updated_at = ?\n          WHERE id = ? AND device_id = ?`,\n    args: [\n      input.status,\n      resultJson ?? null,\n      input.errorMessage ? input.errorMessage.slice(0, 2000) : null,\n      completedAt,\n      now,\n      input.commandId,\n      input.deviceId,\n    ],\n  });\n\n  const command = await getRemoteCommand(input.commandId);\n  if (!command || command.deviceId !== input.deviceId) return null;\n  return command;\n}\n\nexport async function retryStaleRemoteCommands(options?: {\n  claimedStaleAfterMs?: number;\n  runningStaleAfterMs?: number;\n  maxAttempts?: number;\n  limit?: number;\n}): Promise<{ retried: number; failed: number }> {\n  await ensureTable();\n  const client = getDbExec();\n  const now = Date.now();\n  const claimedCutoff = now - (options?.claimedStaleAfterMs ?? 75_000);\n  const runningCutoff = now - (options?.runningStaleAfterMs ?? 5 * 60_000);\n  const maxAttempts = options?.maxAttempts ?? 3;\n  const limit = options?.limit ?? 50;\n\n  const { rows } = await client.execute({\n    sql: `SELECT id, status, attempts FROM integration_remote_commands\n          WHERE (status = 'claimed' AND updated_at <= ?)\n             OR (status = 'running' AND updated_at <= ?)\n          ORDER BY updated_at ASC\n          LIMIT ?`,\n    args: [claimedCutoff, runningCutoff, limit],\n  });\n\n  let retried = 0;\n  let failed = 0;\n  for (const row of rows) {\n    const id = row.id as string;\n    const status = row.status as RemoteCommandStatus;\n    const attempts = Number(row.attempts ?? 0);\n    if (attempts >= maxAttempts) {\n      const result = await client.execute({\n        sql: `UPDATE integration_remote_commands\n              SET status = 'failed',\n                  error_message = COALESCE(error_message, ?),\n                  completed_at = ?,\n                  updated_at = ?\n              WHERE id = ? AND status = ?`,\n        args: [\n          `Retry job: exceeded ${maxAttempts} attempts`,\n          now,\n          now,\n          id,\n          status,\n        ],\n      });\n      if ((result.rowsAffected ?? (result as any).rowCount) > 0) failed++;\n      continue;\n    }\n\n    const result = await client.execute({\n      sql: `UPDATE integration_remote_commands\n            SET status = 'pending',\n                next_check_at = ?,\n                updated_at = ?\n            WHERE id = ? AND status = ?`,\n      args: [now, now, id, status],\n    });\n    if ((result.rowsAffected ?? (result as any).rowCount) > 0) retried++;\n  }\n\n  return { retried, failed };\n}\n\nfunction parseJson(value: unknown, fallback: unknown): unknown {\n  if (value == null) return fallback;\n  try {\n    return JSON.parse(String(value));\n  } catch {\n    return fallback;\n  }\n}\n\nfunction randomHex(byteLength: number): string {\n  const bytes = new Uint8Array(byteLength);\n  globalThis.crypto.getRandomValues(bytes);\n  return Array.from(bytes)\n    .map((byte) => byte.toString(16).padStart(2, \"0\"))\n    .join(\"\");\n}\n"]}

package/dist/integrations/remote-devices-store.d.ts

@@ -0,0 +1,43 @@
+import type { PublicRemoteDevice, RemoteDevice } from "./remote-types.js";
+export declare function toPublicRemoteDevice(device: RemoteDevice): PublicRemoteDevice;
+export declare function createRemoteDevice(input: {
+    ownerEmail: string;
+    orgId?: string | null;
+    label: string;
+    platform?: string | null;
+    appVersion?: string | null;
+    hostName?: string | null;
+    metadata?: Record<string, unknown> | null;
+}): Promise<{
+    device: RemoteDevice;
+    token: string;
+}>;
+export declare function getRemoteDevice(id: string): Promise<RemoteDevice | null>;
+export declare function getRemoteDeviceForOwner(input: {
+    id: string;
+    ownerEmail: string;
+    orgId?: string | null;
+}): Promise<RemoteDevice | null>;
+export declare function listRemoteDevicesForOwner(input: {
+    ownerEmail: string;
+    orgId?: string | null;
+    status?: RemoteDevice["status"];
+    limit?: number;
+}): Promise<RemoteDevice[]>;
+export declare function authenticateRemoteDeviceToken(rawToken: string | null | undefined): Promise<RemoteDevice | null>;
+export declare function updateRemoteDeviceDetails(input: {
+    id: string;
+    label?: string | null;
+    platform?: string | null;
+    appVersion?: string | null;
+    hostName?: string | null;
+    metadata?: Record<string, unknown> | null;
+}): Promise<RemoteDevice | null>;
+export declare function revokeRemoteDeviceForOwner(input: {
+    id: string;
+    ownerEmail: string;
+    orgId?: string | null;
+}): Promise<RemoteDevice | null>;
+export declare function unregisterRemoteDevice(id: string): Promise<boolean>;
+export declare function hashRemoteDeviceToken(token: string): Promise<string>;
+//# sourceMappingURL=remote-devices-store.d.ts.map

package/dist/integrations/remote-devices-store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"remote-devices-store.d.ts","sourceRoot":"","sources":["../../src/integrations/remote-devices-store.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,kBAAkB,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAkG1E,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,YAAY,GAAG,kBAAkB,CAgB7E;AAED,wBAAsB,kBAAkB,CAAC,KAAK,EAAE;IAC9C,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;CAC3C,GAAG,OAAO,CAAC;IAAE,MAAM,EAAE,YAAY,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC,CAkCnD;AAED,wBAAsB,eAAe,CACnC,EAAE,EAAE,MAAM,GACT,OAAO,CAAC,YAAY,GAAG,IAAI,CAAC,CAO9B;AAED,wBAAsB,uBAAuB,CAAC,KAAK,EAAE;IACnD,EAAE,EAAE,MAAM,CAAC;IACX,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACvB,GAAG,OAAO,CAAC,YAAY,GAAG,IAAI,CAAC,CAgB/B;AAED,wBAAsB,yBAAyB,CAAC,KAAK,EAAE;IACrD,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,MAAM,CAAC,EAAE,YAAY,CAAC,QAAQ,CAAC,CAAC;IAChC,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC,CAiC1B;AAED,wBAAsB,6BAA6B,CACjD,QAAQ,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAClC,OAAO,CAAC,YAAY,GAAG,IAAI,CAAC,CAqB9B;AAED,wBAAsB,yBAAyB,CAAC,KAAK,EAAE;IACrD,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;CAC3C,GAAG,OAAO,CAAC,YAAY,GAAG,IAAI,CAAC,CAoC/B;AAED,wBAAsB,0BAA0B,CAAC,KAAK,EAAE;IACtD,EAAE,EAAE,MAAM,CAAC;IACX,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACvB,GAAG,OAAO,CAAC,YAAY,GAAG,IAAI,CAAC,CAqB/B;AAED,wBAAsB,sBAAsB,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAYzE;AAED,wBAAsB,qBAAqB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAI1E"}

package/dist/integrations/remote-devices-store.js

@@ -0,0 +1,315 @@
+import { getDbExec, intType, isPostgres, retryOnDdlRace, } from "../db/client.js";
+let _initPromise;
+async function ensureTable() {
+    if (!_initPromise) {
+        _initPromise = (async () => {
+            const client = getDbExec();
+            await retryOnDdlRace(() => client.execute(`
+          CREATE TABLE IF NOT EXISTS integration_remote_devices (
+            id TEXT PRIMARY KEY,
+            owner_email TEXT NOT NULL,
+            org_id TEXT,
+            label TEXT NOT NULL,
+            platform TEXT,
+            app_version TEXT,
+            host_name TEXT,
+            metadata_json TEXT,
+            device_token_hash TEXT NOT NULL,
+            last_seen_at ${intType()},
+            status TEXT NOT NULL,
+            revoked_at ${intType()},
+            created_at ${intType()} NOT NULL,
+            updated_at ${intType()} NOT NULL
+          )
+        `));
+            await addColumnIfMissing("platform", "TEXT");
+            await addColumnIfMissing("app_version", "TEXT");
+            await addColumnIfMissing("host_name", "TEXT");
+            await addColumnIfMissing("metadata_json", "TEXT");
+            await addColumnIfMissing("revoked_at", intType());
+            await retryOnDdlRace(() => client.execute(`CREATE UNIQUE INDEX IF NOT EXISTS idx_remote_devices_token_hash ON integration_remote_devices(device_token_hash)`));
+            await retryOnDdlRace(() => client.execute(`CREATE INDEX IF NOT EXISTS idx_remote_devices_owner ON integration_remote_devices(owner_email, org_id)`));
+        })();
+    }
+    return _initPromise;
+}
+async function addColumnIfMissing(name, definition) {
+    const sql = isPostgres()
+        ? `ALTER TABLE integration_remote_devices ADD COLUMN IF NOT EXISTS ${name} ${definition}`
+        : `ALTER TABLE integration_remote_devices ADD COLUMN ${name} ${definition}`;
+    try {
+        await retryOnDdlRace(() => getDbExec().execute(sql));
+    }
+    catch (err) {
+        if (isDuplicateColumnError(err))
+            return;
+        throw err;
+    }
+}
+function isDuplicateColumnError(err) {
+    const code = String(err?.code ?? "");
+    const message = String(err?.message ?? err)
+        .toLowerCase()
+        .trim();
+    return (code === "42701" ||
+        message.includes("duplicate column") ||
+        message.includes("already exists"));
+}
+function rowToDevice(row) {
+    return {
+        id: row.id,
+        ownerEmail: row.owner_email,
+        orgId: row.org_id ?? null,
+        label: row.label,
+        platform: row.platform ?? null,
+        appVersion: row.app_version ?? null,
+        hostName: row.host_name ?? null,
+        metadata: parseJson(row.metadata_json, null),
+        deviceTokenHash: row.device_token_hash,
+        lastSeenAt: row.last_seen_at == null ? null : Number(row.last_seen_at),
+        status: row.status,
+        revokedAt: row.revoked_at == null ? null : Number(row.revoked_at),
+        createdAt: Number(row.created_at ?? 0),
+        updatedAt: Number(row.updated_at ?? 0),
+    };
+}
+export function toPublicRemoteDevice(device) {
+    return {
+        id: device.id,
+        ownerEmail: device.ownerEmail,
+        orgId: device.orgId,
+        label: device.label,
+        platform: device.platform,
+        appVersion: device.appVersion,
+        hostName: device.hostName,
+        metadata: device.metadata,
+        lastSeenAt: device.lastSeenAt,
+        status: device.status,
+        revokedAt: device.revokedAt,
+        createdAt: device.createdAt,
+        updatedAt: device.updatedAt,
+    };
+}
+export async function createRemoteDevice(input) {
+    await ensureTable();
+    const client = getDbExec();
+    const now = Date.now();
+    const id = `remote-device-${now}-${randomHex(8)}`;
+    const token = `anr_${randomHex(32)}`;
+    const tokenHash = await hashRemoteDeviceToken(token);
+    await client.execute({
+        sql: `INSERT INTO integration_remote_devices
+      (id, owner_email, org_id, label, platform, app_version, host_name, metadata_json,
+       device_token_hash, last_seen_at, status, revoked_at, created_at, updated_at)
+      VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)`,
+        args: [
+            id,
+            input.ownerEmail,
+            input.orgId ?? null,
+            input.label.trim() || "Remote device",
+            sanitizeOptionalString(input.platform, 80),
+            sanitizeOptionalString(input.appVersion, 120),
+            sanitizeOptionalString(input.hostName, 200),
+            input.metadata ? JSON.stringify(input.metadata) : null,
+            tokenHash,
+            now,
+            "active",
+            null,
+            now,
+            now,
+        ],
+    });
+    const device = await getRemoteDevice(id);
+    if (!device)
+        throw new Error("remote device insert failed");
+    return { device, token };
+}
+export async function getRemoteDevice(id) {
+    await ensureTable();
+    const { rows } = await getDbExec().execute({
+        sql: `SELECT * FROM integration_remote_devices WHERE id = ? LIMIT 1`,
+        args: [id],
+    });
+    return rows[0] ? rowToDevice(rows[0]) : null;
+}
+export async function getRemoteDeviceForOwner(input) {
+    await ensureTable();
+    const { rows } = await getDbExec().execute({
+        sql: `SELECT * FROM integration_remote_devices
+          WHERE id = ?
+            AND owner_email = ?
+            AND ((org_id IS NULL AND ? IS NULL) OR org_id = ?)
+          LIMIT 1`,
+        args: [
+            input.id,
+            input.ownerEmail,
+            input.orgId ?? null,
+            input.orgId ?? null,
+        ],
+    });
+    return rows[0] ? rowToDevice(rows[0]) : null;
+}
+export async function listRemoteDevicesForOwner(input) {
+    await ensureTable();
+    const limit = Math.max(1, Math.min(input.limit ?? 50, 100));
+    const statusClause = input.status ? " AND status = ?" : "";
+    if (!Object.prototype.hasOwnProperty.call(input, "orgId")) {
+        const args = [input.ownerEmail];
+        if (input.status)
+            args.push(input.status);
+        args.push(limit);
+        const { rows } = await getDbExec().execute({
+            sql: `SELECT * FROM integration_remote_devices
+            WHERE owner_email = ?${statusClause}
+            ORDER BY COALESCE(last_seen_at, updated_at) DESC
+            LIMIT ?`,
+            args,
+        });
+        return rows.map((row) => rowToDevice(row));
+    }
+    const args = [
+        input.ownerEmail,
+        input.orgId ?? null,
+        input.orgId ?? null,
+    ];
+    if (input.status)
+        args.push(input.status);
+    args.push(limit);
+    const { rows } = await getDbExec().execute({
+        sql: `SELECT * FROM integration_remote_devices
+          WHERE owner_email = ?
+            AND ((org_id IS NULL AND ? IS NULL) OR org_id = ?)${statusClause}
+          ORDER BY COALESCE(last_seen_at, updated_at) DESC
+          LIMIT ?`,
+        args,
+    });
+    return rows.map((row) => rowToDevice(row));
+}
+export async function authenticateRemoteDeviceToken(rawToken) {
+    if (!rawToken)
+        return null;
+    await ensureTable();
+    const tokenHash = await hashRemoteDeviceToken(rawToken);
+    const now = Date.now();
+    const client = getDbExec();
+    const { rows } = await client.execute({
+        sql: `SELECT * FROM integration_remote_devices
+          WHERE device_token_hash = ? AND status = 'active'
+          LIMIT 1`,
+        args: [tokenHash],
+    });
+    if (!rows[0])
+        return null;
+    const device = rowToDevice(rows[0]);
+    await client.execute({
+        sql: `UPDATE integration_remote_devices
+          SET last_seen_at = ?, updated_at = ?
+          WHERE id = ?`,
+        args: [now, now, device.id],
+    });
+    return { ...device, lastSeenAt: now, updatedAt: now };
+}
+export async function updateRemoteDeviceDetails(input) {
+    await ensureTable();
+    const now = Date.now();
+    const updates = [];
+    const args = [];
+    if (input.label !== undefined) {
+        updates.push("label = ?");
+        args.push(sanitizeOptionalString(input.label, 200) ?? "Remote device");
+    }
+    if (input.platform !== undefined) {
+        updates.push("platform = ?");
+        args.push(sanitizeOptionalString(input.platform, 80));
+    }
+    if (input.appVersion !== undefined) {
+        updates.push("app_version = ?");
+        args.push(sanitizeOptionalString(input.appVersion, 120));
+    }
+    if (input.hostName !== undefined) {
+        updates.push("host_name = ?");
+        args.push(sanitizeOptionalString(input.hostName, 200));
+    }
+    if (input.metadata !== undefined) {
+        updates.push("metadata_json = ?");
+        args.push(input.metadata ? JSON.stringify(input.metadata) : null);
+    }
+    if (updates.length === 0)
+        return getRemoteDevice(input.id);
+    updates.push("updated_at = ?");
+    args.push(now, input.id);
+    await getDbExec().execute({
+        sql: `UPDATE integration_remote_devices
+          SET ${updates.join(", ")}
+          WHERE id = ? AND status = 'active'`,
+        args,
+    });
+    return getRemoteDevice(input.id);
+}
+export async function revokeRemoteDeviceForOwner(input) {
+    await ensureTable();
+    const now = Date.now();
+    await getDbExec().execute({
+        sql: `UPDATE integration_remote_devices
+          SET status = 'inactive',
+              revoked_at = COALESCE(revoked_at, ?),
+              updated_at = ?
+          WHERE id = ?
+            AND owner_email = ?
+            AND ((org_id IS NULL AND ? IS NULL) OR org_id = ?)`,
+        args: [
+            now,
+            now,
+            input.id,
+            input.ownerEmail,
+            input.orgId ?? null,
+            input.orgId ?? null,
+        ],
+    });
+    return getRemoteDeviceForOwner(input);
+}
+export async function unregisterRemoteDevice(id) {
+    await ensureTable();
+    const now = Date.now();
+    const result = await getDbExec().execute({
+        sql: `UPDATE integration_remote_devices
+          SET status = 'inactive',
+              revoked_at = COALESCE(revoked_at, ?),
+              updated_at = ?
+          WHERE id = ? AND status = 'active'`,
+        args: [now, now, id],
+    });
+    return (result.rowsAffected ?? result.rowCount ?? 0) > 0;
+}
+export async function hashRemoteDeviceToken(token) {
+    const bytes = new TextEncoder().encode(token);
+    const digest = await globalThis.crypto.subtle.digest("SHA-256", bytes);
+    return bytesToHex(new Uint8Array(digest));
+}
+function sanitizeOptionalString(value, max) {
+    if (typeof value !== "string")
+        return null;
+    const trimmed = value.trim();
+    return trimmed ? trimmed.slice(0, max) : null;
+}
+function parseJson(value, fallback) {
+    if (value == null)
+        return fallback;
+    try {
+        return JSON.parse(String(value));
+    }
+    catch {
+        return fallback;
+    }
+}
+function randomHex(byteLength) {
+    const bytes = new Uint8Array(byteLength);
+    globalThis.crypto.getRandomValues(bytes);
+    return bytesToHex(bytes);
+}
+function bytesToHex(bytes) {
+    return Array.from(bytes)
+        .map((byte) => byte.toString(16).padStart(2, "0"))
+        .join("");
+}
+//# sourceMappingURL=remote-devices-store.js.map