@agent-native/core 0.44.4 → 0.45.0

package/dist/extensions/html-shell.js

@@ -532,7 +532,7 @@ export function buildExtensionHtml(content, themeVars, isDark, extensionId, bind
 
 	    document.addEventListener('keydown', function(e) {
 	      if ((e.metaKey || e.ctrlKey) && !e.altKey) {
-	        var key = e.key.toLowerCase();
+	        var key = (e.key || '').toLowerCase();
 	        if (key === 'c' || key === 'v' || key === 'x' || key === 'a' || key === 'z' || key === 'y') return;
 	        e.preventDefault();
 	        e.stopPropagation();

package/dist/extensions/html-shell.js.map

@@ -1 +1 @@
-{"version":3,"file":"html-shell.js","sourceRoot":"","sources":["../../src/extensions/html-shell.ts"],"names":[],"mappings":"AAAA,MAAM,yBAAyB,GAC7B,mXAAmX,CAAC;AAEtX,MAAM,CAAC,MAAM,yBAAyB,GAAG;IACvC,QAAQ;IACR,0BAA0B;IAC1B,4BAA4B;IAC5B,oBAAoB;IACpB,oBAAoB;IACpB,gCAAgC;IAChC,0CAA0C;CAC3C,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAEZ,MAAM,CAAC,MAAM,oBAAoB,GAAG,GAAG,yBAAyB,oBAAoB,yBAAyB,GAAG,CAAC;AAEjH,MAAM,CAAC,MAAM,yBAAyB,GAAG,yBAAyB,CAAC;AAwDnE,MAAM,UAAU,kBAAkB,CAChC,OAAe,EACf,SAAiB,EACjB,MAAe,EACf,WAAoB,EACpB,OAAgC;IAEhC,MAAM,eAAe,GAAG,IAAI,CAAC,SAAS,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC;IAC1D,MAAM,eAAe,GAAG,mBAAmB,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC;IAC/D,MAAM,WAAW,GAAG,IAAI,CAAC,SAAS,CAChC,OAAO,IAAI;QACT,WAAW,EAAE,EAAE;QACf,WAAW,EAAE,EAAE;QACf,QAAQ,EAAE,IAAI;QACd,IAAI,EAAE,OAAO;KACd,CACF,CAAC;IAEF,OAAO;iBACQ,MAAM,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,EAAE;;;;wDAIU,yBAAyB;IAC7E,OAAO,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,uDAAuD,mBAAmB,CAAC,OAAO,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;WA8ElI,SAAS;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;yBA+PK,eAAe;8BACV,WAAW;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;QA0NjC,WAAW,CAAC,CAAC,CAAC,uBAAuB,eAAe,mBAAmB,eAAe,GAAG,CAAC,CAAC,CAAC,EAAE;GACnG,OAAO;;;;;;;;;;SAUD,CAAC;AACV,CAAC;AAED,SAAS,mBAAmB,CAAC,KAAa;IACxC,OAAO,KAAK;SACT,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC;SACtB,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC;SACvB,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC;SACrB,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;AAC3B,CAAC","sourcesContent":["const EXTENSION_IFRAME_CSP_BASE =\n  \"default-src 'none'; script-src 'self' https://cdn.jsdelivr.net 'unsafe-eval' 'unsafe-inline'; style-src 'self' 'unsafe-inline' https://cdn.jsdelivr.net https://fonts.googleapis.com; font-src https://fonts.gstatic.com; connect-src 'self'; img-src 'self' data: blob:; media-src 'self' data: blob:; frame-src 'none'; object-src 'none'; base-uri 'none'; form-action 'none';\";\n\nexport const EXTENSION_FRAME_ANCESTORS = [\n  \"'self'\",\n  \"https://agent-native.com\",\n  \"https://*.agent-native.com\",\n  \"http://localhost:*\",\n  \"http://127.0.0.1:*\",\n  \"https://*.claudemcpcontent.com\",\n  \"https://*.web-sandbox.oaiusercontent.com\",\n].join(\" \");\n\nexport const EXTENSION_IFRAME_CSP = `${EXTENSION_IFRAME_CSP_BASE} frame-ancestors ${EXTENSION_FRAME_ANCESTORS};`;\n\nexport const EXTENSION_IFRAME_META_CSP = EXTENSION_IFRAME_CSP_BASE;\n\n/**\n * SECURITY — EXTENSION CONTENT IS UNTRUSTED.\n *\n * `${content}` (line ~Body) interpolates raw HTML/JS authored by a user. This\n * file is the boundary between framework-controlled HTML and user-controlled\n * HTML. Two non-negotiable invariants for every change here:\n *\n *   1. The iframe MUST be rendered with a `sandbox` attribute that does NOT\n *      include `allow-same-origin`. The viewer (`ExtensionViewer.tsx`,\n *      `EmbeddedExtension.tsx`) sets `sandbox=\"allow-scripts allow-forms\"` —\n *      and that is the only acceptable shape. Adding `allow-same-origin`\n *      would give the extension full DOM access to the parent window via\n *      cross-frame script.\n *\n *   2. Every reachable parent action must treat the postMessage payload as\n *      hostile. The bridge in `iframe-bridge.ts` enforces a path allowlist,\n *      header sanitization, and method allowlist; do not relax those gates\n *      for \"convenience\" in this file or any caller.\n *\n * For the trust model rationale, see audit 05-tools-sandbox.md (C1) and the\n * `extensions` skill. When in doubt, fail closed.\n *\n * BACKWARDS COMPAT — the iframe injects helpers under both their canonical\n * `extension*` names (`extensionFetch`, `extensionData`, `extensionId`,\n * `extensionBinding`) AND legacy `tool*` aliases (`toolFetch`, `toolData`,\n * `toolId`, `toolBinding`) so existing user-authored extension bodies that\n * pre-date the rename keep working. Same for layout opt-ins:\n * `data-extension-layout=\"full-bleed\"` / `data-extension-padding=\"none\"` /\n * class `agent-native-extension-bleed` / CSS var\n * `--agent-native-extension-padding` are canonical; the `data-tool-*`,\n * `agent-native-tool-bleed`, and `--agent-native-tool-padding` variants are\n * accepted as aliases.\n */\n\nexport interface ExtensionRenderBinding {\n  /** Email of the user who authored / owns the extension. */\n  authorEmail: string;\n  /** Email of the user currently viewing/running the extension. */\n  viewerEmail: string;\n  /** True when viewer === author. */\n  isAuthor: boolean;\n  /**\n   * Resolved role for the viewer (\"owner\" | \"admin\" | \"editor\" | \"viewer\").\n   *\n   * TODO(security, audit H4): the host-side bridge does not yet gate any\n   * helper based on this value — every viewer gets the same powers as the\n   * author. The role is plumbed through so a follow-up PR can constrain\n   * `appAction` / `dbExec` / `extensionFetch` for non-author viewers (and\n   * eventually require an explicit consent step before running a shared\n   * extension, audit C1). For now this is metadata only.\n   */\n  role: \"owner\" | \"admin\" | \"editor\" | \"viewer\";\n}\n\nexport function buildExtensionHtml(\n  content: string,\n  themeVars: string,\n  isDark: boolean,\n  extensionId?: string,\n  binding?: ExtensionRenderBinding,\n): string {\n  const extensionIdJson = JSON.stringify(extensionId ?? \"\");\n  const extensionIdAttr = escapeHtmlAttribute(extensionId ?? \"\");\n  const bindingJson = JSON.stringify(\n    binding ?? {\n      authorEmail: \"\",\n      viewerEmail: \"\",\n      isAuthor: true,\n      role: \"owner\",\n    },\n  );\n\n  return `<!DOCTYPE html>\n<html lang=\"en\"${isDark ? ' class=\"dark\"' : \"\"}>\n<head>\n  <meta charset=\"utf-8\" />\n  <meta name=\"viewport\" content=\"width=device-width, initial-scale=1\" />\n  <meta http-equiv=\"Content-Security-Policy\" content=\"${EXTENSION_IFRAME_META_CSP}\" />\n  ${binding && !binding.isAuthor ? `<meta name=\"agent-native-extension-author\" content=\"${escapeHtmlAttribute(binding.authorEmail)}\" />` : \"\"}\n  <link rel=\"preconnect\" href=\"https://fonts.googleapis.com\" />\n  <link rel=\"preconnect\" href=\"https://fonts.gstatic.com\" crossorigin />\n  <link href=\"https://fonts.googleapis.com/css2?family=Inter:wght@300..700&display=swap\" rel=\"stylesheet\" />\n  <script>\n    var _extensionErrors = [];\n    var _extensionErrorDetails = [];\n    var _consoleLogs = [];\n    var _networkLogs = [];\n\n    var _origConsole = { log: console.log, warn: console.warn, error: console.error, info: console.info };\n    function _wrapConsole(level, orig) {\n      return function() {\n        var args = Array.prototype.slice.call(arguments);\n        var msg = args.map(function(a) {\n          try { return typeof a === 'object' ? JSON.stringify(a) : String(a); }\n          catch(e) { return String(a); }\n        }).join(' ');\n        if (_consoleLogs.length >= 50) _consoleLogs.shift();\n        _consoleLogs.push({ level: level, message: msg });\n        orig.apply(console, arguments);\n      };\n    }\n    console.log = _wrapConsole('log', _origConsole.log);\n    console.warn = _wrapConsole('warn', _origConsole.warn);\n    console.error = _wrapConsole('error', _origConsole.error);\n    console.info = _wrapConsole('info', _origConsole.info);\n\n    function _collectError(message, stack) {\n      if (!message) return;\n      if (message === 'Script error.' || message === 'Script error') message = 'Runtime error';\n      if (_extensionErrors.indexOf(message) !== -1) return;\n      _extensionErrors.push(message);\n      _extensionErrorDetails.push({ message: message, stack: stack || '' });\n      var toast = document.getElementById('__extension-error-toast');\n      if (!toast) return;\n      var msg = document.getElementById('__extension-error-msg');\n      if (_extensionErrors.length === 1) {\n        msg.textContent = _extensionErrors[0];\n      } else {\n        msg.textContent = _extensionErrors.length + ' errors — ' + _extensionErrors[_extensionErrors.length - 1];\n      }\n      toast.style.display = 'block';\n    }\n\n    window.addEventListener('error', function(event) {\n      var msg = event.message || '';\n      if (msg.indexOf('Alpine Expression Error') === 0) return;\n      var stack = event.error && event.error.stack ? event.error.stack : '';\n      _collectError(msg, stack);\n    });\n\n    window.addEventListener('unhandledrejection', function(event) {\n      var msg = event.reason && event.reason.message ? event.reason.message : String(event.reason);\n      var stack = event.reason && event.reason.stack ? event.reason.stack : '';\n      _collectError(msg, stack);\n    });\n  </script>\n  <!--\n    SECURITY: pinned to exact patch versions + SRI integrity hashes. A\n    malicious republish of @tailwindcss/browser@4.x or alpinejs@3.x would\n    otherwise inject code into every extension. To bump these versions:\n      1. npm view @tailwindcss/browser version  (or alpinejs)\n      2. curl -sL https://cdn.jsdelivr.net/npm/@tailwindcss/browser@<v> \\\\\n         | openssl dgst -sha384 -binary | openssl base64 -A\n      3. Update the URL + integrity hash below in lockstep.\n  -->\n  <script\n    src=\"https://cdn.jsdelivr.net/npm/@tailwindcss/browser@4.2.4\"\n    integrity=\"sha384-yNSZBFvuOWcmww494a9+1zNuvgUGEXoWkein7cxP8wHUTi3iXCU4vJ7hr3tzBCml\"\n    crossorigin=\"anonymous\"\n  ></script>\n  <script\n    defer\n    src=\"https://cdn.jsdelivr.net/npm/alpinejs@3.15.11/dist/cdn.min.js\"\n    integrity=\"sha384-WPtu0YHhJ3arcykfnv1JgUffWDSKRnqnDeTpJUbOc2os2moEmLkIdaeR0trPN4be\"\n    crossorigin=\"anonymous\"\n  ></script>\n  <style>${themeVars}</style>\n  <style type=\"text/tailwindcss\">\n    @custom-variant dark (&:where(.dark, .dark *));\n    @theme {\n      --color-border: hsl(var(--border));\n      --color-input: hsl(var(--input));\n      --color-ring: hsl(var(--ring));\n      --color-background: hsl(var(--background));\n      --color-foreground: hsl(var(--foreground));\n      --color-primary: hsl(var(--primary));\n      --color-primary-foreground: hsl(var(--primary-foreground));\n      --color-secondary: hsl(var(--secondary));\n      --color-secondary-foreground: hsl(var(--secondary-foreground));\n      --color-destructive: hsl(var(--destructive));\n      --color-destructive-foreground: hsl(var(--destructive-foreground));\n      --color-muted: hsl(var(--muted));\n      --color-muted-foreground: hsl(var(--muted-foreground));\n      --color-accent: hsl(var(--accent));\n      --color-accent-foreground: hsl(var(--accent-foreground));\n      --color-popover: hsl(var(--popover));\n      --color-popover-foreground: hsl(var(--popover-foreground));\n      --color-card: hsl(var(--card));\n      --color-card-foreground: hsl(var(--card-foreground));\n      --color-sidebar: hsl(var(--sidebar-background));\n      --color-sidebar-foreground: hsl(var(--sidebar-foreground));\n      --color-sidebar-primary: hsl(var(--sidebar-primary));\n      --color-sidebar-primary-foreground: hsl(var(--sidebar-primary-foreground));\n      --color-sidebar-accent: hsl(var(--sidebar-accent));\n      --color-sidebar-accent-foreground: hsl(var(--sidebar-accent-foreground));\n      --color-sidebar-border: hsl(var(--sidebar-border));\n      --color-sidebar-ring: hsl(var(--sidebar-ring));\n      --radius-lg: var(--radius);\n      --radius-md: calc(var(--radius) - 2px);\n      --radius-sm: calc(var(--radius) - 4px);\n    }\n  </style>\n\t  <style>\n\t    *, *::before, *::after { border-color: hsl(var(--border)); }\n\t    body {\n\t      --agent-native-extension-padding: clamp(16px, 2vw, 24px);\n\t      /* Legacy alias for pre-rename extension content (do not remove). */\n\t      --agent-native-tool-padding: var(--agent-native-extension-padding);\n\t      box-sizing: border-box;\n\t      font-family: 'Inter', sans-serif;\n\t      margin: 0;\n\t      min-height: 100vh;\n\t      padding: var(--agent-native-extension-padding);\n\t    }\n\t    body:has(> [data-extension-layout=\"full-bleed\"]),\n\t    body:has(> [data-extension-padding=\"none\"]),\n\t    body:has(> .agent-native-extension-bleed),\n\t    /* Legacy aliases (do not remove). */\n\t    body:has(> [data-tool-layout=\"full-bleed\"]),\n\t    body:has(> [data-tool-padding=\"none\"]),\n\t    body:has(> .agent-native-tool-bleed) {\n\t      padding: 0;\n\t    }\n\t  </style>\n\t  <script>\n\t    var _extensionRequestSeq = 0;\n\t    var _extensionPendingRequests = {};\n\n\t    window.addEventListener('message', function(event) {\n\t      if (event.source !== window.parent) return;\n\t      var message = event.data || {};\n\t      if (\n\t        message.type !== 'agent-native-extension-response' &&\n\t        message.type !== 'agent-native-tool-response'\n\t      ) return;\n\t      var pending = _extensionPendingRequests[message.requestId];\n\t      if (!pending) return;\n\t      delete _extensionPendingRequests[message.requestId];\n\t      if (message.error) {\n\t        pending.reject(new Error(message.error));\n\t      } else {\n\t        pending.resolve(message.response);\n\t      }\n\t    });\n\n\t    function hostRequest(path, options) {\n\t      options = options || {};\n\t      return new Promise(function(resolve, reject) {\n\t        var requestId = 'extension-req-' + (++_extensionRequestSeq);\n\t        _extensionPendingRequests[requestId] = { resolve: resolve, reject: reject };\n\t        window.parent.postMessage({\n\t          type: 'agent-native-extension-request',\n\t          requestId: requestId,\n\t          path: path,\n\t          options: {\n\t            method: options.method || 'GET',\n\t            headers: options.headers || {},\n\t            body: options.body,\n\t          },\n\t        }, '*');\n\t        setTimeout(function() {\n\t          var pending = _extensionPendingRequests[requestId];\n\t          if (!pending) return;\n\t          delete _extensionPendingRequests[requestId];\n\t          pending.reject(new Error('Extension host request timed out'));\n\t        }, 30000);\n\t      });\n\t    }\n\n\t    var _origHostRequest = hostRequest;\n\t    hostRequest = function(path, options) {\n\t      var entry = { path: path, method: (options && options.method) || 'GET' };\n\t      return _origHostRequest(path, options).then(function(res) {\n\t        entry.ok = res.ok;\n\t        entry.status = res.status;\n\t        if (!res.ok && res.body) {\n\t          try { entry.error = typeof res.body === 'string' ? res.body.slice(0, 200) : JSON.stringify(res.body).slice(0, 200); } catch(e) {}\n\t        }\n\t        if (_networkLogs.length >= 20) _networkLogs.shift();\n\t        _networkLogs.push(entry);\n\t        return res;\n\t      }, function(err) {\n\t        entry.ok = false;\n\t        entry.error = err.message;\n\t        if (_networkLogs.length >= 20) _networkLogs.shift();\n\t        _networkLogs.push(entry);\n\t        throw err;\n\t      });\n\t    };\n\n\t    function extensionFetch(url, options) {\n\t      var opts = options || {};\n\t      return hostRequest('/_agent-native/extensions/proxy', {\n\t        method: 'POST',\n\t        headers: { 'Content-Type': 'application/json' },\n\t        body: JSON.stringify({\n\t          url: url,\n          method: opts.method || 'GET',\n          headers: opts.headers,\n          body: opts.body,\n        }),\n\t      }).then(function(res) {\n\t        var data = res.body;\n\t          if (data.error && data.status === undefined) {\n\t            throw new Error(data.error);\n\t          }\n          return {\n            ok: data.status >= 200 && data.status < 300,\n            status: data.status,\n\t            json: function() { return Promise.resolve(data.body); },\n\t            text: function() { return Promise.resolve(typeof data.body === 'string' ? data.body : JSON.stringify(data.body)); },\n\t          };\n\t      });\n\t    }\n\n\t    function _appendActionQuery(path, params) {\n\t      var search = new URLSearchParams();\n\t      params = params || {};\n\t      Object.keys(params).forEach(function(key) {\n\t        var value = params[key];\n\t        if (value === undefined || value === null) return;\n\t        if (Array.isArray(value)) {\n\t          value.forEach(function(item) {\n\t            if (item !== undefined && item !== null) {\n\t              search.append(key, String(item));\n\t            }\n\t          });\n\t          return;\n\t        }\n\t        search.set(key, String(value));\n\t      });\n\t      var qs = search.toString();\n\t      return qs ? path + '?' + qs : path;\n\t    }\n\n\t    function _methodHintFromActionResponse(res) {\n\t      if (!res || res.status !== 405) return null;\n\t      var body = res.body || {};\n\t      var message = typeof body === 'string' ? body : body.error;\n\t      if (!message) return null;\n\t      var match = String(message).match(/Use (GET|POST|PUT|PATCH|DELETE|HEAD)\\\\.?/i);\n\t      return match ? match[1].toUpperCase() : null;\n\t    }\n\n\t    async function appAction(name, params) {\n\t      params = params || {};\n\t      if (name === 'navigate') {\n\t        var navRes = await hostRequest('/_agent-native/application-state/navigate', {\n\t          method: 'PUT',\n\t          headers: { 'Content-Type': 'application/json' },\n\t          body: JSON.stringify(params),\n\t        });\n\t        if (!navRes.ok) {\n\t          var navErr = navRes.body || { error: navRes.statusText };\n\t          throw new Error(navErr.error || 'Navigation failed: ' + navRes.status);\n\t        }\n\t        return navRes.body;\n\t      }\n\t      var path = '/_agent-native/actions/' + encodeURIComponent(name);\n\t      var res = await hostRequest(path, {\n\t        method: 'POST',\n\t        headers: { 'Content-Type': 'application/json' },\n\t        body: JSON.stringify(params),\n\t      });\n\n\t      var retryMethod = _methodHintFromActionResponse(res);\n\t      if (!res.ok && retryMethod && retryMethod !== 'POST') {\n\t        var retryPath = path;\n\t        var retryOptions = {\n\t          method: retryMethod,\n\t          headers: { 'Content-Type': 'application/json' },\n\t        };\n\t        if (retryMethod === 'GET' || retryMethod === 'HEAD') {\n\t          retryPath = _appendActionQuery(path, params);\n\t        } else {\n\t          retryOptions.body = JSON.stringify(params);\n\t        }\n\t        res = await hostRequest(retryPath, retryOptions);\n\t      }\n\n\t      if (!res.ok) {\n\t        var err = res.body || { error: res.statusText };\n\t        throw new Error(err.error || 'Action failed: ' + res.status);\n\t      }\n\t      return res.body;\n\t    }\n\n\t    async function appFetch(path, options) {\n\t      options = options || {};\n\t      var res = await hostRequest(path, {\n\t        ...options,\n\t        headers: {\n\t          'Content-Type': 'application/json',\n\t          ...(options.headers || {}),\n\t        },\n\t      });\n\t      if (!res.ok) {\n\t        var err = typeof res.body === 'object' && res.body ? res.body : { error: res.statusText };\n\t        throw new Error(err.error || 'Request failed: ' + res.status);\n\t      }\n\t      return res.body;\n\t    }\n\n    async function dbQuery(sql, args) {\n      var body = { sql: sql };\n      if (args) body.args = args;\n      return appFetch('/_agent-native/extensions/sql/query', {\n        method: 'POST',\n        body: JSON.stringify(body),\n      });\n    }\n\n    async function dbExec(sql, args) {\n      var body = { sql: sql };\n      if (args) body.args = args;\n      return appFetch('/_agent-native/extensions/sql/exec', {\n        method: 'POST',\n        body: JSON.stringify(body),\n      });\n    }\n\n    var _extensionId = ${extensionIdJson};\n    var _extensionBinding = ${bindingJson};\n    window.extensionBinding = _extensionBinding;\n    // Legacy alias for extension bodies authored before the rename.\n    window.toolBinding = _extensionBinding;\n    // SECURITY (audit H4): announce the resolved binding to the parent so the\n    // host bridge can gate dangerous helpers based on viewer role. Sent\n    // BEFORE the user-authored content has a chance to run, so a malicious\n    // extension body cannot suppress or rewrite the announcement. The parent\n    // ignores subsequent announcements for the same iframe; see\n    // ExtensionViewer.tsx / EmbeddedExtension.tsx.\n    try {\n      window.parent.postMessage(\n        {\n          type: 'agent-native-extension-binding',\n          extensionId: _extensionId,\n          binding: _extensionBinding,\n        },\n        '*',\n      );\n    } catch (_) {}\n    // SECURITY: when the viewer is not the author of this extension, emit a\n    // clear console warning. The bridge currently runs every helper with the\n    // viewer's session — a malicious shared extension can call any action,\n    // read any owned table row in scope, and resolve any user-scope secret.\n    // A full consent step is tracked as TODO C1 in audit 05-tools-sandbox.md.\n    if (_extensionBinding && !_extensionBinding.isAuthor) {\n      try {\n        console.warn(\n          '[agent-native] Shared extension — running with viewer\\\\'s session. ' +\n            'Author: ' + (_extensionBinding.authorEmail || '<unknown>') + '. ' +\n            'Bridge calls (appAction, dbExec, extensionFetch) execute under ' +\n            'your account; they are gated by your permissions, not the ' +\n            'author\\\\'s. Do not run untrusted shared extensions.',\n        );\n      } catch (_) {}\n    }\n\n    var extensionData = {\n\t      async list(collection, opts) {\n\t        var limit = (opts && opts.limit) || 100;\n\t        var scope = (opts && opts.scope) || 'user';\n\t        var res = await hostRequest('/_agent-native/extensions/data/' + _extensionId + '/' + encodeURIComponent(collection) + '?limit=' + limit + '&scope=' + scope);\n\t        if (!res.ok) throw new Error('Failed to list extension data');\n\t        return res.body;\n\t      },\n      async get(collection, id, opts) {\n        var scope = (opts && opts.scope) || 'user';\n        var items = await this.list(collection, { scope: scope });\n        return (items || []).find(function(item) { return item.id === id; }) || null;\n      },\n      async set(collection, id, data, opts) {\n\t        var scope = (opts && opts.scope) || 'user';\n\t        var res = await hostRequest('/_agent-native/extensions/data/' + _extensionId + '/' + encodeURIComponent(collection), {\n\t          method: 'POST',\n\t          headers: { 'Content-Type': 'application/json' },\n\t          body: JSON.stringify({ id: id, data: data, scope: scope }),\n\t        });\n\t        if (!res.ok) throw new Error('Failed to save extension data');\n\t        return res.body;\n\t      },\n\t      async remove(collection, id, opts) {\n\t        var scope = (opts && opts.scope) || 'user';\n\t        var res = await hostRequest('/_agent-native/extensions/data/' + _extensionId + '/' + encodeURIComponent(collection) + '/' + encodeURIComponent(id) + '?scope=' + scope, {\n\t          method: 'DELETE',\n\t        });\n\t        if (!res.ok) throw new Error('Failed to delete extension data');\n\t        return res.body;\n\t      },\n\t    };\n\n\t    // Legacy aliases — extension bodies authored before the rename use\n\t    // toolFetch, toolData, toolId. Keep these working forever.\n\t    var toolFetch = extensionFetch;\n\t    var toolData = extensionData;\n\t    var _toolId = _extensionId;\n\t  </script>\n\t  <style>\n\t    #__extension-error-toast {\n\t      display: none;\n\t      position: fixed;\n\t      bottom: 16px;\n\t      right: 16px;\n\t      max-width: 420px;\n\t      background: hsl(var(--destructive));\n\t      color: hsl(var(--destructive-foreground));\n\t      border: 1px solid hsl(var(--destructive) / .6);\n\t      border-radius: calc(var(--radius, .5rem) + 2px);\n\t      padding: 12px 16px;\n\t      font-size: 13px;\n\t      line-height: 1.4;\n\t      font-family: 'Inter', sans-serif;\n\t      z-index: 9999;\n\t      box-shadow: 0 4px 12px rgba(0,0,0,.15), 0 1px 3px rgba(0,0,0,.1);\n\t      animation: __toast-in 0.2s ease-out;\n\t    }\n\t    @keyframes __toast-in {\n\t      from { opacity: 0; transform: translateY(8px); }\n\t      to { opacity: 1; transform: translateY(0); }\n\t    }\n\t  </style>\n\t  <script>\n\t    // Extension-point slot context: when an extension is rendered embedded\n\t    // inside an ExtensionSlot, the host pushes a context object via\n\t    // postMessage. Extensions read it synchronously via window.slotContext\n\t    // or subscribe to changes via window.onSlotContext(fn). When rendered\n\t    // full-page (no ?slot= param), slotContext stays null and extensions\n\t    // branch on that.\n\t    window.slotContext = null;\n\t    var _slotContextSubscribers = [];\n\t    window.onSlotContext = function(fn) {\n\t      _slotContextSubscribers.push(fn);\n\t      if (window.slotContext !== null) {\n\t        try { fn(window.slotContext); } catch(_) {}\n\t      }\n\t      return function() {\n\t        _slotContextSubscribers = _slotContextSubscribers.filter(function(f) { return f !== fn; });\n\t      };\n\t    };\n\t    window.addEventListener('message', function(event) {\n\t      if (event.source !== window.parent) return;\n\t      var msg = event.data;\n\t      if (!msg || msg.type !== 'agent-native-slot-context') return;\n\t      window.slotContext = msg.context || {};\n\t      _slotContextSubscribers.forEach(function(fn) {\n\t        try { fn(window.slotContext); } catch(_) {}\n\t      });\n\t    });\n\n\t    // Auto-resize the iframe to its content when running in slot mode. The\n\t    // host listens for agent-native-extension-resize and adjusts the iframe height.\n\t    if (new URLSearchParams(location.search).get('slot')) {\n\t      var _lastH = 0;\n\t      var _reportHeight = function() {\n\t        var h = Math.max(\n\t          document.documentElement.scrollHeight,\n\t          document.body ? document.body.scrollHeight : 0,\n\t        );\n\t        if (h !== _lastH) {\n\t          _lastH = h;\n\t          window.parent.postMessage({ type: 'agent-native-extension-resize', height: h }, '*');\n\t        }\n\t      };\n\t      if (typeof ResizeObserver !== 'undefined') {\n\t        var _ro = new ResizeObserver(_reportHeight);\n\t        document.addEventListener('DOMContentLoaded', function() {\n\t          _ro.observe(document.documentElement);\n\t          if (document.body) _ro.observe(document.body);\n\t        });\n\t      }\n\t      // Initial reports — Alpine takes a tick to render after DOMContentLoaded.\n\t      setTimeout(_reportHeight, 50);\n\t      setTimeout(_reportHeight, 250);\n\t    }\n\n\t    window.addEventListener('message', function(event) {\n\t      if (event.source !== window.parent) return;\n\t      var msg = event.data;\n\t      if (!msg || msg.type !== 'agent-native-theme-update') return;\n\t      var root = document.documentElement;\n\t      if (msg.isDark !== undefined) {\n\t        if (msg.isDark) root.classList.add('dark');\n\t        else root.classList.remove('dark');\n\t      }\n\t      var vars = msg.vars || {};\n\t      for (var key in vars) {\n\t        if (vars.hasOwnProperty(key)) {\n\t          root.style.setProperty(key, vars[key]);\n\t        }\n\t      }\n\t    });\n\n\t    document.addEventListener('keydown', function(e) {\n\t      if ((e.metaKey || e.ctrlKey) && !e.altKey) {\n\t        var key = e.key.toLowerCase();\n\t        if (key === 'c' || key === 'v' || key === 'x' || key === 'a' || key === 'z' || key === 'y') return;\n\t        e.preventDefault();\n\t        e.stopPropagation();\n\t        window.parent.postMessage({\n\t          type: 'agent-native-extension-keydown',\n\t          key: e.key, code: e.code,\n\t          metaKey: e.metaKey, ctrlKey: e.ctrlKey,\n\t          shiftKey: e.shiftKey, altKey: e.altKey,\n\t        }, '*');\n\t        return;\n\t      }\n\t      if (e.key === 'Escape') {\n\t        window.parent.postMessage({\n\t          type: 'agent-native-extension-keydown',\n\t          key: e.key, code: e.code,\n\t          metaKey: false, ctrlKey: false,\n\t          shiftKey: false, altKey: false,\n\t        }, '*');\n\t      }\n\t    });\n\n\t    document.addEventListener('DOMContentLoaded', function() {\n\t      var fixBtn = document.getElementById('__extension-error-fix');\n\t      if (fixBtn) {\n\t        fixBtn.addEventListener('click', function() {\n\t          window.parent.postMessage({\n\t            type: 'agent-native-extension-error-fix',\n\t            errors: _extensionErrors,\n\t            errorDetails: _extensionErrorDetails,\n\t            consoleLogs: _consoleLogs.slice(-30),\n\t            networkLogs: _networkLogs.slice(-15)\n\t          }, '*');\n\t          document.getElementById('__extension-error-toast').style.display = 'none';\n\t        });\n\t      }\n\t      var dismissBtn = document.getElementById('__extension-error-dismiss');\n\t      if (dismissBtn) {\n\t        dismissBtn.addEventListener('click', function() {\n\t          document.getElementById('__extension-error-toast').style.display = 'none';\n\t        });\n\t      }\n\t    });\n\t  </script>\n\t</head>\n\t<body${extensionId ? ` data-extension-id=\"${extensionIdAttr}\" data-tool-id=\"${extensionIdAttr}\"` : \"\"} class=\"bg-background text-foreground\">\n\t${content}\n\t<div id=\"__extension-error-toast\">\n\t  <div style=\"display:flex;align-items:flex-start;gap:8px;\">\n\t    <svg xmlns=\"http://www.w3.org/2000/svg\" width=\"16\" height=\"16\" viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"2\" stroke-linecap=\"round\" stroke-linejoin=\"round\" style=\"flex-shrink:0;margin-top:1px;\"><circle cx=\"12\" cy=\"12\" r=\"10\"/><line x1=\"12\" y1=\"8\" x2=\"12\" y2=\"12\"/><line x1=\"12\" y1=\"16\" x2=\"12.01\" y2=\"16\"/></svg>\n\t    <span id=\"__extension-error-msg\" style=\"flex:1;overflow:hidden;display:-webkit-box;-webkit-line-clamp:3;-webkit-box-orient:vertical;\"></span>\n\t    <button id=\"__extension-error-fix\" style=\"cursor:pointer;border:none;background:rgba(255,255,255,.9);color:hsl(0 84.2% 40%);font-size:12px;font-weight:500;padding:4px 12px;border-radius:4px;flex-shrink:0;\">Fix</button>\n\t    <button id=\"__extension-error-dismiss\" style=\"cursor:pointer;border:none;background:transparent;color:inherit;font-size:16px;padding:2px 6px;opacity:0.7;flex-shrink:0;\">&#215;</button>\n\t  </div>\n\t</div>\n\t</body>\n\t</html>`;\n}\n\nfunction escapeHtmlAttribute(value: string): string {\n  return value\n    .replace(/&/g, \"&amp;\")\n    .replace(/\"/g, \"&quot;\")\n    .replace(/</g, \"&lt;\")\n    .replace(/>/g, \"&gt;\");\n}\n"]}
+{"version":3,"file":"html-shell.js","sourceRoot":"","sources":["../../src/extensions/html-shell.ts"],"names":[],"mappings":"AAAA,MAAM,yBAAyB,GAC7B,mXAAmX,CAAC;AAEtX,MAAM,CAAC,MAAM,yBAAyB,GAAG;IACvC,QAAQ;IACR,0BAA0B;IAC1B,4BAA4B;IAC5B,oBAAoB;IACpB,oBAAoB;IACpB,gCAAgC;IAChC,0CAA0C;CAC3C,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAEZ,MAAM,CAAC,MAAM,oBAAoB,GAAG,GAAG,yBAAyB,oBAAoB,yBAAyB,GAAG,CAAC;AAEjH,MAAM,CAAC,MAAM,yBAAyB,GAAG,yBAAyB,CAAC;AAwDnE,MAAM,UAAU,kBAAkB,CAChC,OAAe,EACf,SAAiB,EACjB,MAAe,EACf,WAAoB,EACpB,OAAgC;IAEhC,MAAM,eAAe,GAAG,IAAI,CAAC,SAAS,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC;IAC1D,MAAM,eAAe,GAAG,mBAAmB,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC;IAC/D,MAAM,WAAW,GAAG,IAAI,CAAC,SAAS,CAChC,OAAO,IAAI;QACT,WAAW,EAAE,EAAE;QACf,WAAW,EAAE,EAAE;QACf,QAAQ,EAAE,IAAI;QACd,IAAI,EAAE,OAAO;KACd,CACF,CAAC;IAEF,OAAO;iBACQ,MAAM,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,EAAE;;;;wDAIU,yBAAyB;IAC7E,OAAO,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,uDAAuD,mBAAmB,CAAC,OAAO,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;WA8ElI,SAAS;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;yBA+PK,eAAe;8BACV,WAAW;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;QA0NjC,WAAW,CAAC,CAAC,CAAC,uBAAuB,eAAe,mBAAmB,eAAe,GAAG,CAAC,CAAC,CAAC,EAAE;GACnG,OAAO;;;;;;;;;;SAUD,CAAC;AACV,CAAC;AAED,SAAS,mBAAmB,CAAC,KAAa;IACxC,OAAO,KAAK;SACT,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC;SACtB,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC;SACvB,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC;SACrB,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;AAC3B,CAAC","sourcesContent":["const EXTENSION_IFRAME_CSP_BASE =\n  \"default-src 'none'; script-src 'self' https://cdn.jsdelivr.net 'unsafe-eval' 'unsafe-inline'; style-src 'self' 'unsafe-inline' https://cdn.jsdelivr.net https://fonts.googleapis.com; font-src https://fonts.gstatic.com; connect-src 'self'; img-src 'self' data: blob:; media-src 'self' data: blob:; frame-src 'none'; object-src 'none'; base-uri 'none'; form-action 'none';\";\n\nexport const EXTENSION_FRAME_ANCESTORS = [\n  \"'self'\",\n  \"https://agent-native.com\",\n  \"https://*.agent-native.com\",\n  \"http://localhost:*\",\n  \"http://127.0.0.1:*\",\n  \"https://*.claudemcpcontent.com\",\n  \"https://*.web-sandbox.oaiusercontent.com\",\n].join(\" \");\n\nexport const EXTENSION_IFRAME_CSP = `${EXTENSION_IFRAME_CSP_BASE} frame-ancestors ${EXTENSION_FRAME_ANCESTORS};`;\n\nexport const EXTENSION_IFRAME_META_CSP = EXTENSION_IFRAME_CSP_BASE;\n\n/**\n * SECURITY — EXTENSION CONTENT IS UNTRUSTED.\n *\n * `${content}` (line ~Body) interpolates raw HTML/JS authored by a user. This\n * file is the boundary between framework-controlled HTML and user-controlled\n * HTML. Two non-negotiable invariants for every change here:\n *\n *   1. The iframe MUST be rendered with a `sandbox` attribute that does NOT\n *      include `allow-same-origin`. The viewer (`ExtensionViewer.tsx`,\n *      `EmbeddedExtension.tsx`) sets `sandbox=\"allow-scripts allow-forms\"` —\n *      and that is the only acceptable shape. Adding `allow-same-origin`\n *      would give the extension full DOM access to the parent window via\n *      cross-frame script.\n *\n *   2. Every reachable parent action must treat the postMessage payload as\n *      hostile. The bridge in `iframe-bridge.ts` enforces a path allowlist,\n *      header sanitization, and method allowlist; do not relax those gates\n *      for \"convenience\" in this file or any caller.\n *\n * For the trust model rationale, see audit 05-tools-sandbox.md (C1) and the\n * `extensions` skill. When in doubt, fail closed.\n *\n * BACKWARDS COMPAT — the iframe injects helpers under both their canonical\n * `extension*` names (`extensionFetch`, `extensionData`, `extensionId`,\n * `extensionBinding`) AND legacy `tool*` aliases (`toolFetch`, `toolData`,\n * `toolId`, `toolBinding`) so existing user-authored extension bodies that\n * pre-date the rename keep working. Same for layout opt-ins:\n * `data-extension-layout=\"full-bleed\"` / `data-extension-padding=\"none\"` /\n * class `agent-native-extension-bleed` / CSS var\n * `--agent-native-extension-padding` are canonical; the `data-tool-*`,\n * `agent-native-tool-bleed`, and `--agent-native-tool-padding` variants are\n * accepted as aliases.\n */\n\nexport interface ExtensionRenderBinding {\n  /** Email of the user who authored / owns the extension. */\n  authorEmail: string;\n  /** Email of the user currently viewing/running the extension. */\n  viewerEmail: string;\n  /** True when viewer === author. */\n  isAuthor: boolean;\n  /**\n   * Resolved role for the viewer (\"owner\" | \"admin\" | \"editor\" | \"viewer\").\n   *\n   * TODO(security, audit H4): the host-side bridge does not yet gate any\n   * helper based on this value — every viewer gets the same powers as the\n   * author. The role is plumbed through so a follow-up PR can constrain\n   * `appAction` / `dbExec` / `extensionFetch` for non-author viewers (and\n   * eventually require an explicit consent step before running a shared\n   * extension, audit C1). For now this is metadata only.\n   */\n  role: \"owner\" | \"admin\" | \"editor\" | \"viewer\";\n}\n\nexport function buildExtensionHtml(\n  content: string,\n  themeVars: string,\n  isDark: boolean,\n  extensionId?: string,\n  binding?: ExtensionRenderBinding,\n): string {\n  const extensionIdJson = JSON.stringify(extensionId ?? \"\");\n  const extensionIdAttr = escapeHtmlAttribute(extensionId ?? \"\");\n  const bindingJson = JSON.stringify(\n    binding ?? {\n      authorEmail: \"\",\n      viewerEmail: \"\",\n      isAuthor: true,\n      role: \"owner\",\n    },\n  );\n\n  return `<!DOCTYPE html>\n<html lang=\"en\"${isDark ? ' class=\"dark\"' : \"\"}>\n<head>\n  <meta charset=\"utf-8\" />\n  <meta name=\"viewport\" content=\"width=device-width, initial-scale=1\" />\n  <meta http-equiv=\"Content-Security-Policy\" content=\"${EXTENSION_IFRAME_META_CSP}\" />\n  ${binding && !binding.isAuthor ? `<meta name=\"agent-native-extension-author\" content=\"${escapeHtmlAttribute(binding.authorEmail)}\" />` : \"\"}\n  <link rel=\"preconnect\" href=\"https://fonts.googleapis.com\" />\n  <link rel=\"preconnect\" href=\"https://fonts.gstatic.com\" crossorigin />\n  <link href=\"https://fonts.googleapis.com/css2?family=Inter:wght@300..700&display=swap\" rel=\"stylesheet\" />\n  <script>\n    var _extensionErrors = [];\n    var _extensionErrorDetails = [];\n    var _consoleLogs = [];\n    var _networkLogs = [];\n\n    var _origConsole = { log: console.log, warn: console.warn, error: console.error, info: console.info };\n    function _wrapConsole(level, orig) {\n      return function() {\n        var args = Array.prototype.slice.call(arguments);\n        var msg = args.map(function(a) {\n          try { return typeof a === 'object' ? JSON.stringify(a) : String(a); }\n          catch(e) { return String(a); }\n        }).join(' ');\n        if (_consoleLogs.length >= 50) _consoleLogs.shift();\n        _consoleLogs.push({ level: level, message: msg });\n        orig.apply(console, arguments);\n      };\n    }\n    console.log = _wrapConsole('log', _origConsole.log);\n    console.warn = _wrapConsole('warn', _origConsole.warn);\n    console.error = _wrapConsole('error', _origConsole.error);\n    console.info = _wrapConsole('info', _origConsole.info);\n\n    function _collectError(message, stack) {\n      if (!message) return;\n      if (message === 'Script error.' || message === 'Script error') message = 'Runtime error';\n      if (_extensionErrors.indexOf(message) !== -1) return;\n      _extensionErrors.push(message);\n      _extensionErrorDetails.push({ message: message, stack: stack || '' });\n      var toast = document.getElementById('__extension-error-toast');\n      if (!toast) return;\n      var msg = document.getElementById('__extension-error-msg');\n      if (_extensionErrors.length === 1) {\n        msg.textContent = _extensionErrors[0];\n      } else {\n        msg.textContent = _extensionErrors.length + ' errors — ' + _extensionErrors[_extensionErrors.length - 1];\n      }\n      toast.style.display = 'block';\n    }\n\n    window.addEventListener('error', function(event) {\n      var msg = event.message || '';\n      if (msg.indexOf('Alpine Expression Error') === 0) return;\n      var stack = event.error && event.error.stack ? event.error.stack : '';\n      _collectError(msg, stack);\n    });\n\n    window.addEventListener('unhandledrejection', function(event) {\n      var msg = event.reason && event.reason.message ? event.reason.message : String(event.reason);\n      var stack = event.reason && event.reason.stack ? event.reason.stack : '';\n      _collectError(msg, stack);\n    });\n  </script>\n  <!--\n    SECURITY: pinned to exact patch versions + SRI integrity hashes. A\n    malicious republish of @tailwindcss/browser@4.x or alpinejs@3.x would\n    otherwise inject code into every extension. To bump these versions:\n      1. npm view @tailwindcss/browser version  (or alpinejs)\n      2. curl -sL https://cdn.jsdelivr.net/npm/@tailwindcss/browser@<v> \\\\\n         | openssl dgst -sha384 -binary | openssl base64 -A\n      3. Update the URL + integrity hash below in lockstep.\n  -->\n  <script\n    src=\"https://cdn.jsdelivr.net/npm/@tailwindcss/browser@4.2.4\"\n    integrity=\"sha384-yNSZBFvuOWcmww494a9+1zNuvgUGEXoWkein7cxP8wHUTi3iXCU4vJ7hr3tzBCml\"\n    crossorigin=\"anonymous\"\n  ></script>\n  <script\n    defer\n    src=\"https://cdn.jsdelivr.net/npm/alpinejs@3.15.11/dist/cdn.min.js\"\n    integrity=\"sha384-WPtu0YHhJ3arcykfnv1JgUffWDSKRnqnDeTpJUbOc2os2moEmLkIdaeR0trPN4be\"\n    crossorigin=\"anonymous\"\n  ></script>\n  <style>${themeVars}</style>\n  <style type=\"text/tailwindcss\">\n    @custom-variant dark (&:where(.dark, .dark *));\n    @theme {\n      --color-border: hsl(var(--border));\n      --color-input: hsl(var(--input));\n      --color-ring: hsl(var(--ring));\n      --color-background: hsl(var(--background));\n      --color-foreground: hsl(var(--foreground));\n      --color-primary: hsl(var(--primary));\n      --color-primary-foreground: hsl(var(--primary-foreground));\n      --color-secondary: hsl(var(--secondary));\n      --color-secondary-foreground: hsl(var(--secondary-foreground));\n      --color-destructive: hsl(var(--destructive));\n      --color-destructive-foreground: hsl(var(--destructive-foreground));\n      --color-muted: hsl(var(--muted));\n      --color-muted-foreground: hsl(var(--muted-foreground));\n      --color-accent: hsl(var(--accent));\n      --color-accent-foreground: hsl(var(--accent-foreground));\n      --color-popover: hsl(var(--popover));\n      --color-popover-foreground: hsl(var(--popover-foreground));\n      --color-card: hsl(var(--card));\n      --color-card-foreground: hsl(var(--card-foreground));\n      --color-sidebar: hsl(var(--sidebar-background));\n      --color-sidebar-foreground: hsl(var(--sidebar-foreground));\n      --color-sidebar-primary: hsl(var(--sidebar-primary));\n      --color-sidebar-primary-foreground: hsl(var(--sidebar-primary-foreground));\n      --color-sidebar-accent: hsl(var(--sidebar-accent));\n      --color-sidebar-accent-foreground: hsl(var(--sidebar-accent-foreground));\n      --color-sidebar-border: hsl(var(--sidebar-border));\n      --color-sidebar-ring: hsl(var(--sidebar-ring));\n      --radius-lg: var(--radius);\n      --radius-md: calc(var(--radius) - 2px);\n      --radius-sm: calc(var(--radius) - 4px);\n    }\n  </style>\n\t  <style>\n\t    *, *::before, *::after { border-color: hsl(var(--border)); }\n\t    body {\n\t      --agent-native-extension-padding: clamp(16px, 2vw, 24px);\n\t      /* Legacy alias for pre-rename extension content (do not remove). */\n\t      --agent-native-tool-padding: var(--agent-native-extension-padding);\n\t      box-sizing: border-box;\n\t      font-family: 'Inter', sans-serif;\n\t      margin: 0;\n\t      min-height: 100vh;\n\t      padding: var(--agent-native-extension-padding);\n\t    }\n\t    body:has(> [data-extension-layout=\"full-bleed\"]),\n\t    body:has(> [data-extension-padding=\"none\"]),\n\t    body:has(> .agent-native-extension-bleed),\n\t    /* Legacy aliases (do not remove). */\n\t    body:has(> [data-tool-layout=\"full-bleed\"]),\n\t    body:has(> [data-tool-padding=\"none\"]),\n\t    body:has(> .agent-native-tool-bleed) {\n\t      padding: 0;\n\t    }\n\t  </style>\n\t  <script>\n\t    var _extensionRequestSeq = 0;\n\t    var _extensionPendingRequests = {};\n\n\t    window.addEventListener('message', function(event) {\n\t      if (event.source !== window.parent) return;\n\t      var message = event.data || {};\n\t      if (\n\t        message.type !== 'agent-native-extension-response' &&\n\t        message.type !== 'agent-native-tool-response'\n\t      ) return;\n\t      var pending = _extensionPendingRequests[message.requestId];\n\t      if (!pending) return;\n\t      delete _extensionPendingRequests[message.requestId];\n\t      if (message.error) {\n\t        pending.reject(new Error(message.error));\n\t      } else {\n\t        pending.resolve(message.response);\n\t      }\n\t    });\n\n\t    function hostRequest(path, options) {\n\t      options = options || {};\n\t      return new Promise(function(resolve, reject) {\n\t        var requestId = 'extension-req-' + (++_extensionRequestSeq);\n\t        _extensionPendingRequests[requestId] = { resolve: resolve, reject: reject };\n\t        window.parent.postMessage({\n\t          type: 'agent-native-extension-request',\n\t          requestId: requestId,\n\t          path: path,\n\t          options: {\n\t            method: options.method || 'GET',\n\t            headers: options.headers || {},\n\t            body: options.body,\n\t          },\n\t        }, '*');\n\t        setTimeout(function() {\n\t          var pending = _extensionPendingRequests[requestId];\n\t          if (!pending) return;\n\t          delete _extensionPendingRequests[requestId];\n\t          pending.reject(new Error('Extension host request timed out'));\n\t        }, 30000);\n\t      });\n\t    }\n\n\t    var _origHostRequest = hostRequest;\n\t    hostRequest = function(path, options) {\n\t      var entry = { path: path, method: (options && options.method) || 'GET' };\n\t      return _origHostRequest(path, options).then(function(res) {\n\t        entry.ok = res.ok;\n\t        entry.status = res.status;\n\t        if (!res.ok && res.body) {\n\t          try { entry.error = typeof res.body === 'string' ? res.body.slice(0, 200) : JSON.stringify(res.body).slice(0, 200); } catch(e) {}\n\t        }\n\t        if (_networkLogs.length >= 20) _networkLogs.shift();\n\t        _networkLogs.push(entry);\n\t        return res;\n\t      }, function(err) {\n\t        entry.ok = false;\n\t        entry.error = err.message;\n\t        if (_networkLogs.length >= 20) _networkLogs.shift();\n\t        _networkLogs.push(entry);\n\t        throw err;\n\t      });\n\t    };\n\n\t    function extensionFetch(url, options) {\n\t      var opts = options || {};\n\t      return hostRequest('/_agent-native/extensions/proxy', {\n\t        method: 'POST',\n\t        headers: { 'Content-Type': 'application/json' },\n\t        body: JSON.stringify({\n\t          url: url,\n          method: opts.method || 'GET',\n          headers: opts.headers,\n          body: opts.body,\n        }),\n\t      }).then(function(res) {\n\t        var data = res.body;\n\t          if (data.error && data.status === undefined) {\n\t            throw new Error(data.error);\n\t          }\n          return {\n            ok: data.status >= 200 && data.status < 300,\n            status: data.status,\n\t            json: function() { return Promise.resolve(data.body); },\n\t            text: function() { return Promise.resolve(typeof data.body === 'string' ? data.body : JSON.stringify(data.body)); },\n\t          };\n\t      });\n\t    }\n\n\t    function _appendActionQuery(path, params) {\n\t      var search = new URLSearchParams();\n\t      params = params || {};\n\t      Object.keys(params).forEach(function(key) {\n\t        var value = params[key];\n\t        if (value === undefined || value === null) return;\n\t        if (Array.isArray(value)) {\n\t          value.forEach(function(item) {\n\t            if (item !== undefined && item !== null) {\n\t              search.append(key, String(item));\n\t            }\n\t          });\n\t          return;\n\t        }\n\t        search.set(key, String(value));\n\t      });\n\t      var qs = search.toString();\n\t      return qs ? path + '?' + qs : path;\n\t    }\n\n\t    function _methodHintFromActionResponse(res) {\n\t      if (!res || res.status !== 405) return null;\n\t      var body = res.body || {};\n\t      var message = typeof body === 'string' ? body : body.error;\n\t      if (!message) return null;\n\t      var match = String(message).match(/Use (GET|POST|PUT|PATCH|DELETE|HEAD)\\\\.?/i);\n\t      return match ? match[1].toUpperCase() : null;\n\t    }\n\n\t    async function appAction(name, params) {\n\t      params = params || {};\n\t      if (name === 'navigate') {\n\t        var navRes = await hostRequest('/_agent-native/application-state/navigate', {\n\t          method: 'PUT',\n\t          headers: { 'Content-Type': 'application/json' },\n\t          body: JSON.stringify(params),\n\t        });\n\t        if (!navRes.ok) {\n\t          var navErr = navRes.body || { error: navRes.statusText };\n\t          throw new Error(navErr.error || 'Navigation failed: ' + navRes.status);\n\t        }\n\t        return navRes.body;\n\t      }\n\t      var path = '/_agent-native/actions/' + encodeURIComponent(name);\n\t      var res = await hostRequest(path, {\n\t        method: 'POST',\n\t        headers: { 'Content-Type': 'application/json' },\n\t        body: JSON.stringify(params),\n\t      });\n\n\t      var retryMethod = _methodHintFromActionResponse(res);\n\t      if (!res.ok && retryMethod && retryMethod !== 'POST') {\n\t        var retryPath = path;\n\t        var retryOptions = {\n\t          method: retryMethod,\n\t          headers: { 'Content-Type': 'application/json' },\n\t        };\n\t        if (retryMethod === 'GET' || retryMethod === 'HEAD') {\n\t          retryPath = _appendActionQuery(path, params);\n\t        } else {\n\t          retryOptions.body = JSON.stringify(params);\n\t        }\n\t        res = await hostRequest(retryPath, retryOptions);\n\t      }\n\n\t      if (!res.ok) {\n\t        var err = res.body || { error: res.statusText };\n\t        throw new Error(err.error || 'Action failed: ' + res.status);\n\t      }\n\t      return res.body;\n\t    }\n\n\t    async function appFetch(path, options) {\n\t      options = options || {};\n\t      var res = await hostRequest(path, {\n\t        ...options,\n\t        headers: {\n\t          'Content-Type': 'application/json',\n\t          ...(options.headers || {}),\n\t        },\n\t      });\n\t      if (!res.ok) {\n\t        var err = typeof res.body === 'object' && res.body ? res.body : { error: res.statusText };\n\t        throw new Error(err.error || 'Request failed: ' + res.status);\n\t      }\n\t      return res.body;\n\t    }\n\n    async function dbQuery(sql, args) {\n      var body = { sql: sql };\n      if (args) body.args = args;\n      return appFetch('/_agent-native/extensions/sql/query', {\n        method: 'POST',\n        body: JSON.stringify(body),\n      });\n    }\n\n    async function dbExec(sql, args) {\n      var body = { sql: sql };\n      if (args) body.args = args;\n      return appFetch('/_agent-native/extensions/sql/exec', {\n        method: 'POST',\n        body: JSON.stringify(body),\n      });\n    }\n\n    var _extensionId = ${extensionIdJson};\n    var _extensionBinding = ${bindingJson};\n    window.extensionBinding = _extensionBinding;\n    // Legacy alias for extension bodies authored before the rename.\n    window.toolBinding = _extensionBinding;\n    // SECURITY (audit H4): announce the resolved binding to the parent so the\n    // host bridge can gate dangerous helpers based on viewer role. Sent\n    // BEFORE the user-authored content has a chance to run, so a malicious\n    // extension body cannot suppress or rewrite the announcement. The parent\n    // ignores subsequent announcements for the same iframe; see\n    // ExtensionViewer.tsx / EmbeddedExtension.tsx.\n    try {\n      window.parent.postMessage(\n        {\n          type: 'agent-native-extension-binding',\n          extensionId: _extensionId,\n          binding: _extensionBinding,\n        },\n        '*',\n      );\n    } catch (_) {}\n    // SECURITY: when the viewer is not the author of this extension, emit a\n    // clear console warning. The bridge currently runs every helper with the\n    // viewer's session — a malicious shared extension can call any action,\n    // read any owned table row in scope, and resolve any user-scope secret.\n    // A full consent step is tracked as TODO C1 in audit 05-tools-sandbox.md.\n    if (_extensionBinding && !_extensionBinding.isAuthor) {\n      try {\n        console.warn(\n          '[agent-native] Shared extension — running with viewer\\\\'s session. ' +\n            'Author: ' + (_extensionBinding.authorEmail || '<unknown>') + '. ' +\n            'Bridge calls (appAction, dbExec, extensionFetch) execute under ' +\n            'your account; they are gated by your permissions, not the ' +\n            'author\\\\'s. Do not run untrusted shared extensions.',\n        );\n      } catch (_) {}\n    }\n\n    var extensionData = {\n\t      async list(collection, opts) {\n\t        var limit = (opts && opts.limit) || 100;\n\t        var scope = (opts && opts.scope) || 'user';\n\t        var res = await hostRequest('/_agent-native/extensions/data/' + _extensionId + '/' + encodeURIComponent(collection) + '?limit=' + limit + '&scope=' + scope);\n\t        if (!res.ok) throw new Error('Failed to list extension data');\n\t        return res.body;\n\t      },\n      async get(collection, id, opts) {\n        var scope = (opts && opts.scope) || 'user';\n        var items = await this.list(collection, { scope: scope });\n        return (items || []).find(function(item) { return item.id === id; }) || null;\n      },\n      async set(collection, id, data, opts) {\n\t        var scope = (opts && opts.scope) || 'user';\n\t        var res = await hostRequest('/_agent-native/extensions/data/' + _extensionId + '/' + encodeURIComponent(collection), {\n\t          method: 'POST',\n\t          headers: { 'Content-Type': 'application/json' },\n\t          body: JSON.stringify({ id: id, data: data, scope: scope }),\n\t        });\n\t        if (!res.ok) throw new Error('Failed to save extension data');\n\t        return res.body;\n\t      },\n\t      async remove(collection, id, opts) {\n\t        var scope = (opts && opts.scope) || 'user';\n\t        var res = await hostRequest('/_agent-native/extensions/data/' + _extensionId + '/' + encodeURIComponent(collection) + '/' + encodeURIComponent(id) + '?scope=' + scope, {\n\t          method: 'DELETE',\n\t        });\n\t        if (!res.ok) throw new Error('Failed to delete extension data');\n\t        return res.body;\n\t      },\n\t    };\n\n\t    // Legacy aliases — extension bodies authored before the rename use\n\t    // toolFetch, toolData, toolId. Keep these working forever.\n\t    var toolFetch = extensionFetch;\n\t    var toolData = extensionData;\n\t    var _toolId = _extensionId;\n\t  </script>\n\t  <style>\n\t    #__extension-error-toast {\n\t      display: none;\n\t      position: fixed;\n\t      bottom: 16px;\n\t      right: 16px;\n\t      max-width: 420px;\n\t      background: hsl(var(--destructive));\n\t      color: hsl(var(--destructive-foreground));\n\t      border: 1px solid hsl(var(--destructive) / .6);\n\t      border-radius: calc(var(--radius, .5rem) + 2px);\n\t      padding: 12px 16px;\n\t      font-size: 13px;\n\t      line-height: 1.4;\n\t      font-family: 'Inter', sans-serif;\n\t      z-index: 9999;\n\t      box-shadow: 0 4px 12px rgba(0,0,0,.15), 0 1px 3px rgba(0,0,0,.1);\n\t      animation: __toast-in 0.2s ease-out;\n\t    }\n\t    @keyframes __toast-in {\n\t      from { opacity: 0; transform: translateY(8px); }\n\t      to { opacity: 1; transform: translateY(0); }\n\t    }\n\t  </style>\n\t  <script>\n\t    // Extension-point slot context: when an extension is rendered embedded\n\t    // inside an ExtensionSlot, the host pushes a context object via\n\t    // postMessage. Extensions read it synchronously via window.slotContext\n\t    // or subscribe to changes via window.onSlotContext(fn). When rendered\n\t    // full-page (no ?slot= param), slotContext stays null and extensions\n\t    // branch on that.\n\t    window.slotContext = null;\n\t    var _slotContextSubscribers = [];\n\t    window.onSlotContext = function(fn) {\n\t      _slotContextSubscribers.push(fn);\n\t      if (window.slotContext !== null) {\n\t        try { fn(window.slotContext); } catch(_) {}\n\t      }\n\t      return function() {\n\t        _slotContextSubscribers = _slotContextSubscribers.filter(function(f) { return f !== fn; });\n\t      };\n\t    };\n\t    window.addEventListener('message', function(event) {\n\t      if (event.source !== window.parent) return;\n\t      var msg = event.data;\n\t      if (!msg || msg.type !== 'agent-native-slot-context') return;\n\t      window.slotContext = msg.context || {};\n\t      _slotContextSubscribers.forEach(function(fn) {\n\t        try { fn(window.slotContext); } catch(_) {}\n\t      });\n\t    });\n\n\t    // Auto-resize the iframe to its content when running in slot mode. The\n\t    // host listens for agent-native-extension-resize and adjusts the iframe height.\n\t    if (new URLSearchParams(location.search).get('slot')) {\n\t      var _lastH = 0;\n\t      var _reportHeight = function() {\n\t        var h = Math.max(\n\t          document.documentElement.scrollHeight,\n\t          document.body ? document.body.scrollHeight : 0,\n\t        );\n\t        if (h !== _lastH) {\n\t          _lastH = h;\n\t          window.parent.postMessage({ type: 'agent-native-extension-resize', height: h }, '*');\n\t        }\n\t      };\n\t      if (typeof ResizeObserver !== 'undefined') {\n\t        var _ro = new ResizeObserver(_reportHeight);\n\t        document.addEventListener('DOMContentLoaded', function() {\n\t          _ro.observe(document.documentElement);\n\t          if (document.body) _ro.observe(document.body);\n\t        });\n\t      }\n\t      // Initial reports — Alpine takes a tick to render after DOMContentLoaded.\n\t      setTimeout(_reportHeight, 50);\n\t      setTimeout(_reportHeight, 250);\n\t    }\n\n\t    window.addEventListener('message', function(event) {\n\t      if (event.source !== window.parent) return;\n\t      var msg = event.data;\n\t      if (!msg || msg.type !== 'agent-native-theme-update') return;\n\t      var root = document.documentElement;\n\t      if (msg.isDark !== undefined) {\n\t        if (msg.isDark) root.classList.add('dark');\n\t        else root.classList.remove('dark');\n\t      }\n\t      var vars = msg.vars || {};\n\t      for (var key in vars) {\n\t        if (vars.hasOwnProperty(key)) {\n\t          root.style.setProperty(key, vars[key]);\n\t        }\n\t      }\n\t    });\n\n\t    document.addEventListener('keydown', function(e) {\n\t      if ((e.metaKey || e.ctrlKey) && !e.altKey) {\n\t        var key = (e.key || '').toLowerCase();\n\t        if (key === 'c' || key === 'v' || key === 'x' || key === 'a' || key === 'z' || key === 'y') return;\n\t        e.preventDefault();\n\t        e.stopPropagation();\n\t        window.parent.postMessage({\n\t          type: 'agent-native-extension-keydown',\n\t          key: e.key, code: e.code,\n\t          metaKey: e.metaKey, ctrlKey: e.ctrlKey,\n\t          shiftKey: e.shiftKey, altKey: e.altKey,\n\t        }, '*');\n\t        return;\n\t      }\n\t      if (e.key === 'Escape') {\n\t        window.parent.postMessage({\n\t          type: 'agent-native-extension-keydown',\n\t          key: e.key, code: e.code,\n\t          metaKey: false, ctrlKey: false,\n\t          shiftKey: false, altKey: false,\n\t        }, '*');\n\t      }\n\t    });\n\n\t    document.addEventListener('DOMContentLoaded', function() {\n\t      var fixBtn = document.getElementById('__extension-error-fix');\n\t      if (fixBtn) {\n\t        fixBtn.addEventListener('click', function() {\n\t          window.parent.postMessage({\n\t            type: 'agent-native-extension-error-fix',\n\t            errors: _extensionErrors,\n\t            errorDetails: _extensionErrorDetails,\n\t            consoleLogs: _consoleLogs.slice(-30),\n\t            networkLogs: _networkLogs.slice(-15)\n\t          }, '*');\n\t          document.getElementById('__extension-error-toast').style.display = 'none';\n\t        });\n\t      }\n\t      var dismissBtn = document.getElementById('__extension-error-dismiss');\n\t      if (dismissBtn) {\n\t        dismissBtn.addEventListener('click', function() {\n\t          document.getElementById('__extension-error-toast').style.display = 'none';\n\t        });\n\t      }\n\t    });\n\t  </script>\n\t</head>\n\t<body${extensionId ? ` data-extension-id=\"${extensionIdAttr}\" data-tool-id=\"${extensionIdAttr}\"` : \"\"} class=\"bg-background text-foreground\">\n\t${content}\n\t<div id=\"__extension-error-toast\">\n\t  <div style=\"display:flex;align-items:flex-start;gap:8px;\">\n\t    <svg xmlns=\"http://www.w3.org/2000/svg\" width=\"16\" height=\"16\" viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"2\" stroke-linecap=\"round\" stroke-linejoin=\"round\" style=\"flex-shrink:0;margin-top:1px;\"><circle cx=\"12\" cy=\"12\" r=\"10\"/><line x1=\"12\" y1=\"8\" x2=\"12\" y2=\"12\"/><line x1=\"12\" y1=\"16\" x2=\"12.01\" y2=\"16\"/></svg>\n\t    <span id=\"__extension-error-msg\" style=\"flex:1;overflow:hidden;display:-webkit-box;-webkit-line-clamp:3;-webkit-box-orient:vertical;\"></span>\n\t    <button id=\"__extension-error-fix\" style=\"cursor:pointer;border:none;background:rgba(255,255,255,.9);color:hsl(0 84.2% 40%);font-size:12px;font-weight:500;padding:4px 12px;border-radius:4px;flex-shrink:0;\">Fix</button>\n\t    <button id=\"__extension-error-dismiss\" style=\"cursor:pointer;border:none;background:transparent;color:inherit;font-size:16px;padding:2px 6px;opacity:0.7;flex-shrink:0;\">&#215;</button>\n\t  </div>\n\t</div>\n\t</body>\n\t</html>`;\n}\n\nfunction escapeHtmlAttribute(value: string): string {\n  return value\n    .replace(/&/g, \"&amp;\")\n    .replace(/\"/g, \"&quot;\")\n    .replace(/</g, \"&lt;\")\n    .replace(/>/g, \"&gt;\");\n}\n"]}

package/dist/jobs/scheduler.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"scheduler.d.ts","sourceRoot":"","sources":["../../src/jobs/scheduler.ts"],"names":[],"mappings":"AAOA,OAAO,EAIL,KAAK,WAAW,EACjB,MAAM,8BAA8B,CAAC;AAKtC,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AAM5D,MAAM,WAAW,cAAc;IAC7B,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,OAAO,CAAC;IACjB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,SAAS,GAAG,QAAQ,CAAC;IAC7B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE,SAAS,GAAG,OAAO,GAAG,SAAS,GAAG,SAAS,CAAC;IACzD,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAID,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,MAAM,GAAG;IACpD,IAAI,EAAE,cAAc,CAAC;IACrB,IAAI,EAAE,MAAM,CAAC;CACd,CAkEA;AAED,wBAAgB,eAAe,CAAC,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CAyB1E;AAID,MAAM,WAAW,aAAa;IAC5B,UAAU,EAAE,MAAM,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;IAC9C,eAAe,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;IACpD,yEAAyE;IACzE,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,kEAAkE;IAClE,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAyBD;;;GAGG;AACH,wBAAsB,oBAAoB,CAAC,IAAI,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC,CAgG7E"}
+{"version":3,"file":"scheduler.d.ts","sourceRoot":"","sources":["../../src/jobs/scheduler.ts"],"names":[],"mappings":"AAOA,OAAO,EAIL,KAAK,WAAW,EACjB,MAAM,8BAA8B,CAAC;AAKtC,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AAM5D,MAAM,WAAW,cAAc;IAC7B,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,OAAO,CAAC;IACjB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,SAAS,GAAG,QAAQ,CAAC;IAC7B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE,SAAS,GAAG,OAAO,GAAG,SAAS,GAAG,SAAS,CAAC;IACzD,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAID,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,MAAM,GAAG;IACpD,IAAI,EAAE,cAAc,CAAC;IACrB,IAAI,EAAE,MAAM,CAAC;CACd,CAkEA;AAED,wBAAgB,eAAe,CAAC,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CAyB1E;AAID,MAAM,WAAW,aAAa;IAC5B,UAAU,EAAE,MAAM,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;IAC9C,eAAe,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;IACpD,yEAAyE;IACzE,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,kEAAkE;IAClE,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAgCD;;;GAGG;AACH,wBAAsB,oBAAoB,CAAC,IAAI,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC,CAgG7E"}

package/dist/jobs/scheduler.js

@@ -110,12 +110,16 @@ function subscribeToJobsResourceEvents() {
         return;
     _emitterSubscribed = true;
     // Lazy import to avoid circular deps at module load
-    void import("../resources/emitter.js").then(({ getResourcesEmitter }) => {
+    import("../resources/emitter.js")
+        .then(({ getResourcesEmitter }) => {
         getResourcesEmitter().on("resources", (event) => {
             if (typeof event?.path === "string" && event.path.startsWith("jobs/")) {
                 _hasJobsCache = undefined;
             }
         });
+    })
+        .catch((err) => {
+        console.warn("[jobs] resource-event subscription failed:", err instanceof Error ? err.message : err);
     });
 }
 /**

package/dist/jobs/scheduler.js.map

@@ -1 +1 @@
-{"version":3,"file":"scheduler.js","sourceRoot":"","sources":["../../src/jobs/scheduler.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,qBAAqB,EAAE,MAAM,8BAA8B,CAAC;AACrE,OAAO,EAAE,cAAc,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,WAAW,CAAC;AACtE,OAAO,EACL,qBAAqB,EACrB,WAAW,GAEZ,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,YAAY,EACZ,oBAAoB,EACpB,oBAAoB,GAErB,MAAM,8BAA8B,CAAC;AACtC,OAAO,EACL,uBAAuB,EACvB,aAAa,GACd,MAAM,0BAA0B,CAAC;AAElC,OAAO,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAC;AAiBxD,MAAM,cAAc,GAAG,oCAAoC,CAAC;AAE5D,MAAM,UAAU,mBAAmB,CAAC,OAAe;IAIjD,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;IAC5C,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO;YACL,IAAI,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE;YACtC,IAAI,EAAE,OAAO;SACd,CAAC;IACJ,CAAC;IAED,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;IAC3B,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAE7B,MAAM,IAAI,GAAmB,EAAE,QAAQ,EAAE,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAE7D,KAAK,MAAM,IAAI,IAAI,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QACzC,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACnC,IAAI,QAAQ,KAAK,CAAC,CAAC;YAAE,SAAS;QAC9B,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,IAAI,EAAE,CAAC;QAC3C,IAAI,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAE5C,eAAe;QACf,IACE,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;YAC9C,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,EAC9C,CAAC;YACD,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QAC7B,CAAC;QAED,QAAQ,GAAG,EAAE,CAAC;YACZ,KAAK,UAAU;gBACb,IAAI,CAAC,QAAQ,GAAG,KAAK,CAAC;gBACtB,MAAM;YACR,KAAK,SAAS;gBACZ,IAAI,CAAC,OAAO,GAAG,KAAK,KAAK,OAAO,CAAC;gBACjC,MAAM;YACR,KAAK,WAAW;gBACd,IAAI,CAAC,SAAS,GAAG,KAAK,CAAC;gBACvB,MAAM;YACR,KAAK,OAAO;gBACV,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;gBACnB,MAAM;YACR,KAAK,OAAO;gBACV,IAAI,CAAC,KAAK;oBACR,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;gBAChE,MAAM;YACR,KAAK,SAAS;gBACZ,IAAI,CAAC,OAAO,GAAG,KAAK,CAAC;gBACrB,MAAM;YACR,KAAK,YAAY;gBACf,IAAI,CAAC,UAAU,GAAG,KAAqC,CAAC;gBACxD,MAAM;YACR,KAAK,WAAW;gBACd,mDAAmD;gBACnD,IAAI,CAAC,SAAS,GAAG,KAAK;qBACnB,OAAO,CAAC,MAAM,EAAE,IAAI,CAAC;qBACrB,OAAO,CAAC,MAAM,EAAE,IAAI,CAAC;qBACrB,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC;qBACpB,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;gBAC1B,MAAM;YACR,KAAK,SAAS;gBACZ,IAAI,CAAC,OAAO,GAAG,KAAK,CAAC;gBACrB,MAAM;QACV,CAAC;IACH,CAAC;IAED,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;AACxB,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,IAAoB,EAAE,IAAY;IAChE,MAAM,KAAK,GAAG,CAAC,KAAK,CAAC,CAAC;IACtB,KAAK,CAAC,IAAI,CAAC,cAAc,IAAI,CAAC,QAAQ,GAAG,CAAC,CAAC;IAC3C,KAAK,CAAC,IAAI,CAAC,YAAY,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;IACvC,IAAI,IAAI,CAAC,SAAS;QAAE,KAAK,CAAC,IAAI,CAAC,cAAc,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC;IAC/D,IAAI,IAAI,CAAC,KAAK;QAAE,KAAK,CAAC,IAAI,CAAC,UAAU,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;IACnD,IAAI,IAAI,CAAC,KAAK;QAAE,KAAK,CAAC,IAAI,CAAC,UAAU,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;IACnD,IAAI,IAAI,CAAC,OAAO;QAAE,KAAK,CAAC,IAAI,CAAC,YAAY,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;IACzD,IAAI,IAAI,CAAC,UAAU;QAAE,KAAK,CAAC,IAAI,CAAC,eAAe,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC;IAClE,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;QACnB,wEAAwE;QACxE,0EAA0E;QAC1E,sEAAsE;QACtE,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS;aAC3B,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC;aACtB,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC;aACpB,OAAO,CAAC,KAAK,EAAE,KAAK,CAAC;aACrB,OAAO,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;QACzB,KAAK,CAAC,IAAI,CAAC,eAAe,OAAO,GAAG,CAAC,CAAC;IACxC,CAAC;IACD,IAAI,IAAI,CAAC,OAAO;QAAE,KAAK,CAAC,IAAI,CAAC,YAAY,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;IACzD,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAClB,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACjB,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAeD,IAAI,UAAU,GAAG,KAAK,CAAC;AAEvB,0EAA0E;AAC1E,4EAA4E;AAC5E,qEAAqE;AACrE,IAAI,aAAkC,CAAC;AACvC,IAAI,cAAc,GAAG,CAAC,CAAC;AACvB,MAAM,sBAAsB,GAAG,CAAC,GAAG,MAAM,CAAC;AAC1C,IAAI,kBAAkB,GAAG,KAAK,CAAC;AAE/B,SAAS,6BAA6B;IACpC,IAAI,kBAAkB;QAAE,OAAO;IAC/B,kBAAkB,GAAG,IAAI,CAAC;IAC1B,oDAAoD;IACpD,KAAK,MAAM,CAAC,yBAAyB,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,mBAAmB,EAAE,EAAE,EAAE;QACtE,mBAAmB,EAAE,CAAC,EAAE,CAAC,WAAW,EAAE,CAAC,KAAU,EAAE,EAAE;YACnD,IAAI,OAAO,KAAK,EAAE,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;gBACtE,aAAa,GAAG,SAAS,CAAC;YAC5B,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,IAAmB;IAC5D,0BAA0B;IAC1B,IAAI,UAAU;QAAE,OAAO;IAEvB,6BAA6B,EAAE,CAAC;IAEhC,mEAAmE;IACnE,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACzB,IACE,aAAa,KAAK,KAAK;QACvB,KAAK,GAAG,cAAc,GAAG,sBAAsB,EAC/C,CAAC;QACD,OAAO;IACT,CAAC;IAED,UAAU,GAAG,IAAI,CAAC;IAElB,IAAI,CAAC;QACH,MAAM,YAAY,GAAG,MAAM,qBAAqB,CAAC,OAAO,CAAC,CAAC;QAC1D,aAAa,GAAG,YAAY,CAAC,IAAI,CAC/B,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAC3D,CAAC;QACF,cAAc,GAAG,KAAK,CAAC;QACvB,IAAI,CAAC,aAAa;YAAE,OAAO;QAC3B,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;QAEvB,KAAK,MAAM,QAAQ,IAAI,YAAY,EAAE,CAAC;YACpC,mCAAmC;YACnC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;gBAAE,SAAS;YAC7C,IAAI,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC;gBAAE,SAAS;YAE9C,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,mBAAmB,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;YAE7D,oCAAoC;YACpC,IAAI,CAAC,IAAI,CAAC,OAAO,IAAI,CAAC,IAAI,CAAC,QAAQ;gBAAE,SAAS;YAC9C,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,QAAQ,CAAC;gBAAE,SAAS;YAE1C,+EAA+E;YAC/E,8EAA8E;YAC9E,IAAI,IAAI,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;gBAClC,MAAM,WAAW,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;gBACnC,IACE,IAAI,CAAC,OAAO;oBACZ,GAAG,CAAC,OAAO,EAAE,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,GAAG,WAAW,EAC9D,CAAC;oBACD,SAAS;gBACX,CAAC;gBACD,gDAAgD;gBAChD,IAAI,CAAC,UAAU,GAAG,OAAO,CAAC;gBAC1B,IAAI,CAAC,SAAS,GAAG,yCAAyC,CAAC;gBAC3D,MAAM,IAAI,GAAG,cAAc,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;gBAChD,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;gBAClC,MAAM,cAAc,CAAC,QAAQ,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;gBAC3C,SAAS;YACX,CAAC;YAED,eAAe;YACf,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;gBACjB,MAAM,WAAW,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;gBAC3C,IAAI,WAAW,GAAG,GAAG;oBAAE,SAAS;YAClC,CAAC;iBAAM,CAAC;gBACN,wEAAwE;gBACxE,sEAAsE;gBACtE,6DAA6D;gBAC7D,yDAAyD;gBACzD,MAAM,IAAI,GAAG,cAAc,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;gBAChD,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;gBAClC,MAAM,cAAc,CAAC,QAAQ,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;gBAC3C,SAAS;YACX,CAAC;YAED,wBAAwB;YACxB,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE;gBAAE,SAAS;YAE3B,kBAAkB;YAClB,MAAM,UAAU,CAAC,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;QACpD,CAAC;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,yEAAyE;QACzE,yEAAyE;QACzE,wCAAwC;QACxC,MAAM,EAAE,iBAAiB,EAAE,GAAG,MAAM,MAAM,CAAC,iBAAiB,CAAC,CAAC;QAC9D,IAAI,iBAAiB,CAAC,GAAG,CAAC,EAAE,CAAC;YAC3B,aAAa,GAAG,SAAS,CAAC,CAAC,yCAAyC;YACpE,cAAc,GAAG,CAAC,CAAC;YACnB,OAAO;QACT,CAAC;QACD,gGAAgG;QAChG,MAAM,MAAM,GACV,GAAG,YAAY,KAAK;YAClB,CAAC,CAAC,GAAG;YACL,CAAC,CAAC,CAAE,GAAW,EAAE,KAAK,IAAK,GAAW,EAAE,OAAO,IAAI,GAAG,CAAC,CAAC;QAC5D,OAAO,CAAC,KAAK,CAAC,yCAAyC,EAAE,MAAM,CAAC,CAAC;IACnE,CAAC;YAAS,CAAC;QACT,UAAU,GAAG,KAAK,CAAC;IACrB,CAAC;AACH,CAAC;AAED;;;;;;;;;;;GAWG;AACH,KAAK,UAAU,oBAAoB,CACjC,YAAoB,EACpB,QAA4B;IAE5B,mEAAmE;IACnE,uBAAuB;IACvB,IAAI,YAAY,KAAK,YAAY;QAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;IACvD,IAAI,CAAC;QACH,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,MAAM,CAAC,iBAAiB,CAAC,CAAC;QACtD,MAAM,EAAE,GAAG,SAAS,EAAE,CAAC;QACvB,oEAAoE;QACpE,iDAAiD;QACjD,MAAM,UAAU,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC;YAClC,GAAG,EAAE,8CAA8C;YACnD,IAAI,EAAE,CAAC,YAAY,CAAC;SACrB,CAAC,CAAC;QACH,IAAI,CAAC,UAAU,CAAC,IAAI,IAAI,UAAU,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACrD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,YAAY,oBAAoB,EAAE,CAAC;QAC1E,CAAC;QACD,IAAI,QAAQ,EAAE,CAAC;YACb,MAAM,YAAY,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC;gBACpC,GAAG,EAAE,gFAAgF;gBACrF,IAAI,EAAE,CAAC,QAAQ,EAAE,YAAY,CAAC;aAC/B,CAAC,CAAC;YACH,IAAI,CAAC,YAAY,CAAC,IAAI,IAAI,YAAY,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACzD,OAAO;oBACL,EAAE,EAAE,KAAK;oBACT,MAAM,EAAE,SAAS,YAAY,mCAAmC,QAAQ,GAAG;iBAC5E,CAAC;YACJ,CAAC;QACH,CAAC;QACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;IACtB,CAAC;IAAC,OAAO,GAAQ,EAAE,CAAC;QAClB,oEAAoE;QACpE,qEAAqE;QACrE,8CAA8C;QAC9C,MAAM,GAAG,GAAG,GAAG,EAAE,OAAO,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC;QAC9C,IACE,GAAG,CAAC,QAAQ,CAAC,gBAAgB,CAAC;YAC9B,GAAG,CAAC,QAAQ,CAAC,eAAe,CAAC;YAC7B,GAAG,CAAC,QAAQ,CAAC,iBAAiB,CAAC,EAC/B,CAAC;YACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;QACtB,CAAC;QACD,sEAAsE;QACtE,oEAAoE;QACpE,kCAAkC;QAClC,OAAO,CAAC,IAAI,CACV,2DAA2D,YAAY,IAAI,EAC3E,GAAG,EAAE,OAAO,CACb,CAAC;QACF,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;IACtB,CAAC;AACH,CAAC;AAED,KAAK,UAAU,UAAU,CACvB,QAAkB,EAClB,IAAoB,EACpB,IAAY,EACZ,IAAmB,EACnB,GAAS;IAET,MAAM,OAAO,GAAG,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;IAE1E,0EAA0E;IAC1E,qCAAqC;IACrC,MAAM,cAAc,GAAG,IAAI,CAAC,KAAK,IAAI,SAAS,CAAC;IAC/C,MAAM,YAAY,GAChB,cAAc,KAAK,SAAS;QAC1B,CAAC,CAAC,IAAI,CAAC,SAAS,IAAI,QAAQ,CAAC,KAAK;QAClC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC;IACrB,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,IAAI,SAAS,CAAC;IAEzC,qEAAqE;IACrE,wEAAwE;IACxE,gEAAgE;IAChE,kEAAkE;IAClE,iBAAiB;IACjB,MAAM,QAAQ,GAAG,MAAM,oBAAoB,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAC;IACpE,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,OAAO,CAAC,IAAI,CACV,kCAAkC,OAAO,MAAM,QAAQ,CAAC,MAAM,IAAI;YAChE,wEAAwE,CAC3E,CAAC;QACF,qEAAqE;QACrE,IAAI,CAAC,OAAO,GAAG,GAAG,CAAC,WAAW,EAAE,CAAC;QACjC,IAAI,CAAC,UAAU,GAAG,SAAS,CAAC;QAC5B,IAAI,CAAC,SAAS,GAAG,QAAQ,CAAC,MAAM,CAAC;QACjC,MAAM,cAAc,CAAC,QAAQ,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;QAC3C,OAAO;IACT,CAAC;IAED,kBAAkB;IAClB,IAAI,CAAC,OAAO,GAAG,GAAG,CAAC,WAAW,EAAE,CAAC;IACjC,IAAI,CAAC,UAAU,GAAG,SAAS,CAAC;IAC5B,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;IAC3B,MAAM,cAAc,CAAC,QAAQ,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;IAE3C,MAAM,qBAAqB,CACzB,EAAE,SAAS,EAAE,YAAY,EAAE,KAAK,EAAE,QAAQ,EAAE,EAC5C,KAAK,IAAI,EAAE;QACT,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,EAAE,CAAC;YAClC,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,YAAY,CAAC,CAAC;YAC9D,MAAM,KAAK,GAAG,oBAAoB,CAAC,OAAO,CAAC,CAAC;YAE5C,gEAAgE;YAChE,8DAA8D;YAC9D,iEAAiE;YACjE,MAAM,UAAU,GAAG,MAAM,oBAAoB,CAAC,YAAY,CAAC,CAAC;YAC5D,MAAM,MAAM,GACV,IAAI,CAAC,MAAM;gBACX,CAAC,MAAM,aAAa,CAAC;oBACnB,MAAM,EAAE,UAAU,IAAI,IAAI,CAAC,MAAM;oBACjC,KAAK,EAAE,IAAI,CAAC,KAAK;iBAClB,CAAC,CAAC,CAAC;YACN,MAAM,KAAK,GACT,IAAI,CAAC,KAAK;gBACV,CAAC,MAAM,uBAAuB,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;gBAC9D,MAAM,CAAC,YAAY,CAAC;YAEtB,oCAAoC;YACpC,MAAM,WAAW,GAAG,QAAQ,OAAO,MAAM,GAAG,CAAC,kBAAkB,EAAE,EAAE,CAAC;YACpE,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,YAAY,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC;YAExE,MAAM,OAAO,GAAG,mBAAmB,OAAO,gBAAgB,YAAY,CAAC,IAAI,CAAC,QAAQ,CAAC,kDAAkD,IAAI,EAAE,CAAC;YAC9I,MAAM,QAAQ,GAAG;gBACf;oBACE,IAAI,EAAE,MAAe;oBACrB,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;iBACpD;aACF,CAAC;YAEF,mBAAmB;YACnB,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;YACzC,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;YAEpE,MAAM,MAAM,GAAqB,EAAE,CAAC;YACpC,MAAM,IAAI,GAAG,CAAC,KAAqB,EAAE,EAAE;gBACrC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACrB,CAAC,CAAC;YAEF,IAAI,CAAC;gBACH,MAAM,YAAY,CAAC;oBACjB,MAAM;oBACN,KAAK;oBACL,YAAY;oBACZ,KAAK;oBACL,QAAQ;oBACR,OAAO;oBACP,IAAI;oBACJ,MAAM,EAAE,UAAU,CAAC,MAAM;iBAC1B,CAAC,CAAC;YACL,CAAC;oBAAS,CAAC;gBACT,YAAY,CAAC,OAAO,CAAC,CAAC;YACxB,CAAC;YAED,sEAAsE;YACtE,wEAAwE;YACxE,wEAAwE;YACxE,MAAM,IAAI,GAAG,cAAc,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC;YACvD,IAAI,CAAC,UAAU,GAAG,SAAS,CAAC;YAC5B,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;YAClC,MAAM,cAAc,CAAC,QAAQ,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;YAE3C,OAAO,CAAC,GAAG,CACT,yBAAyB,OAAO,0BAA0B,IAAI,CAAC,OAAO,EAAE,CACzE,CAAC;QACJ,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAClB,iEAAiE;YACjE,MAAM,IAAI,GAAG,cAAc,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC;YACvD,IAAI,CAAC,UAAU,GAAG,OAAO,CAAC;YAC1B,IAAI,CAAC,SAAS,GAAG,GAAG,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,IAAI,eAAe,CAAC;YAChE,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;YAClC,MAAM,cAAc,CAAC,QAAQ,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;YAE3C,OAAO,CAAC,KAAK,CACX,yBAAyB,OAAO,WAAW,EAC3C,GAAG,EAAE,OAAO,CACb,CAAC;QACJ,CAAC;IACH,CAAC,CACF,CAAC,CAAC,4BAA4B;AACjC,CAAC;AAED,KAAK,UAAU,cAAc,CAC3B,QAAkB,EAClB,IAAoB,EACpB,IAAY;IAEZ,MAAM,OAAO,GAAG,eAAe,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IAC5C,MAAM,WAAW,CAAC,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;AAC5D,CAAC","sourcesContent":["import { runWithRequestContext } from \"../server/request-context.js\";\nimport { nextOccurrence, isValidCron, describeCron } from \"./cron.js\";\nimport {\n  resourceListAllOwners,\n  resourcePut,\n  type Resource,\n} from \"../resources/store.js\";\nimport {\n  runAgentLoop,\n  actionsToEngineTools,\n  getOwnerActiveApiKey,\n  type ActionEntry,\n} from \"../agent/production-agent.js\";\nimport {\n  getStoredModelForEngine,\n  resolveEngine,\n} from \"../agent/engine/index.js\";\nimport type { AgentEngine } from \"../agent/engine/types.js\";\nimport { createThread } from \"../chat-threads/store.js\";\nimport type { AgentChatEvent } from \"../agent/types.js\";\n\n// ─── Frontmatter parsing ────────────────────────────────────────────────────\n\nexport interface JobFrontmatter {\n  schedule: string;\n  enabled: boolean;\n  createdBy?: string;\n  orgId?: string;\n  runAs?: \"creator\" | \"shared\";\n  lastRun?: string;\n  lastStatus?: \"success\" | \"error\" | \"running\" | \"skipped\";\n  lastError?: string;\n  nextRun?: string;\n}\n\nconst FRONTMATTER_RE = /^---\\n([\\s\\S]*?)\\n---\\n?([\\s\\S]*)$/;\n\nexport function parseJobFrontmatter(content: string): {\n  meta: JobFrontmatter;\n  body: string;\n} {\n  const match = content.match(FRONTMATTER_RE);\n  if (!match) {\n    return {\n      meta: { schedule: \"\", enabled: false },\n      body: content,\n    };\n  }\n\n  const yamlBlock = match[1];\n  const body = match[2].trim();\n\n  const meta: JobFrontmatter = { schedule: \"\", enabled: true };\n\n  for (const line of yamlBlock.split(\"\\n\")) {\n    const colonIdx = line.indexOf(\":\");\n    if (colonIdx === -1) continue;\n    const key = line.slice(0, colonIdx).trim();\n    let value = line.slice(colonIdx + 1).trim();\n\n    // Strip quotes\n    if (\n      (value.startsWith('\"') && value.endsWith('\"')) ||\n      (value.startsWith(\"'\") && value.endsWith(\"'\"))\n    ) {\n      value = value.slice(1, -1);\n    }\n\n    switch (key) {\n      case \"schedule\":\n        meta.schedule = value;\n        break;\n      case \"enabled\":\n        meta.enabled = value !== \"false\";\n        break;\n      case \"createdBy\":\n        meta.createdBy = value;\n        break;\n      case \"orgId\":\n        meta.orgId = value;\n        break;\n      case \"runAs\":\n        meta.runAs =\n          value === \"shared\" || value === \"creator\" ? value : undefined;\n        break;\n      case \"lastRun\":\n        meta.lastRun = value;\n        break;\n      case \"lastStatus\":\n        meta.lastStatus = value as JobFrontmatter[\"lastStatus\"];\n        break;\n      case \"lastError\":\n        // Reverse the escaping applied in buildJobContent.\n        meta.lastError = value\n          .replace(/\\\\n/g, \"\\n\")\n          .replace(/\\\\r/g, \"\\r\")\n          .replace(/\\\\\"/g, '\"')\n          .replace(/\\\\\\\\/g, \"\\\\\");\n        break;\n      case \"nextRun\":\n        meta.nextRun = value;\n        break;\n    }\n  }\n\n  return { meta, body };\n}\n\nexport function buildJobContent(meta: JobFrontmatter, body: string): string {\n  const lines = [`---`];\n  lines.push(`schedule: \"${meta.schedule}\"`);\n  lines.push(`enabled: ${meta.enabled}`);\n  if (meta.createdBy) lines.push(`createdBy: ${meta.createdBy}`);\n  if (meta.orgId) lines.push(`orgId: ${meta.orgId}`);\n  if (meta.runAs) lines.push(`runAs: ${meta.runAs}`);\n  if (meta.lastRun) lines.push(`lastRun: ${meta.lastRun}`);\n  if (meta.lastStatus) lines.push(`lastStatus: ${meta.lastStatus}`);\n  if (meta.lastError) {\n    // Escape backslash, quote, then CR/LF. The frontmatter parser splits on\n    // \"\\n\", so an un-escaped newline (common in stack traces) would otherwise\n    // split the value across lines and corrupt/truncate the stored error.\n    const escaped = meta.lastError\n      .replace(/\\\\/g, \"\\\\\\\\\")\n      .replace(/\"/g, '\\\\\"')\n      .replace(/\\r/g, \"\\\\r\")\n      .replace(/\\n/g, \"\\\\n\");\n    lines.push(`lastError: \"${escaped}\"`);\n  }\n  if (meta.nextRun) lines.push(`nextRun: ${meta.nextRun}`);\n  lines.push(`---`);\n  lines.push(\"\");\n  lines.push(body);\n  return lines.join(\"\\n\");\n}\n\n// ─── Job execution ──────────────────────────────────────────────────────────\n\nexport interface SchedulerDeps {\n  getActions: () => Record<string, ActionEntry>;\n  getSystemPrompt: (owner: string) => Promise<string>;\n  /** Optional engine override. Defaults to the resolved request engine. */\n  engine?: AgentEngine;\n  apiKey?: string;\n  model?: string;\n  /** App/template id used for org-scoped per-app model defaults. */\n  appId?: string;\n}\n\nlet _isRunning = false;\n\n// Skip the DB query on every tick if we recently confirmed no jobs exist.\n// `_hasJobsCache` is invalidated whenever a `jobs/*` resource is written or\n// deleted (subscribed below), and refreshed at most every 5 minutes.\nlet _hasJobsCache: boolean | undefined;\nlet _lastJobsCheck = 0;\nconst JOBS_CHECK_INTERVAL_MS = 5 * 60_000;\nlet _emitterSubscribed = false;\n\nfunction subscribeToJobsResourceEvents(): void {\n  if (_emitterSubscribed) return;\n  _emitterSubscribed = true;\n  // Lazy import to avoid circular deps at module load\n  void import(\"../resources/emitter.js\").then(({ getResourcesEmitter }) => {\n    getResourcesEmitter().on(\"resources\", (event: any) => {\n      if (typeof event?.path === \"string\" && event.path.startsWith(\"jobs/\")) {\n        _hasJobsCache = undefined;\n      }\n    });\n  });\n}\n\n/**\n * Process all due recurring jobs. Called every 60 seconds.\n * Sequential execution with 5-minute timeout per job.\n */\nexport async function processRecurringJobs(deps: SchedulerDeps): Promise<void> {\n  // Prevent concurrent runs\n  if (_isRunning) return;\n\n  subscribeToJobsResourceEvents();\n\n  // Skip if we recently confirmed there are no job resources to run.\n  const nowMs = Date.now();\n  if (\n    _hasJobsCache === false &&\n    nowMs - _lastJobsCheck < JOBS_CHECK_INTERVAL_MS\n  ) {\n    return;\n  }\n\n  _isRunning = true;\n\n  try {\n    const jobResources = await resourceListAllOwners(\"jobs/\");\n    _hasJobsCache = jobResources.some(\n      (r) => r.path.endsWith(\".md\") && !r.path.endsWith(\".keep\"),\n    );\n    _lastJobsCheck = nowMs;\n    if (!_hasJobsCache) return;\n    const now = new Date();\n\n    for (const resource of jobResources) {\n      // Skip non-markdown or .keep files\n      if (!resource.path.endsWith(\".md\")) continue;\n      if (resource.path.endsWith(\".keep\")) continue;\n\n      const { meta, body } = parseJobFrontmatter(resource.content);\n\n      // Skip disabled or missing schedule\n      if (!meta.enabled || !meta.schedule) continue;\n      if (!isValidCron(meta.schedule)) continue;\n\n      // Skip if currently running, unless it has been stuck for more than 10 minutes\n      // (server crash mid-job leaves lastStatus=running forever without this guard)\n      if (meta.lastStatus === \"running\") {\n        const stuckCutoff = 10 * 60 * 1000;\n        if (\n          meta.lastRun &&\n          now.getTime() - new Date(meta.lastRun).getTime() < stuckCutoff\n        ) {\n          continue;\n        }\n        // Stuck — reset so the next check can re-run it\n        meta.lastStatus = \"error\";\n        meta.lastError = \"Job timed out or server crashed mid-run\";\n        const next = nextOccurrence(meta.schedule, now);\n        meta.nextRun = next.toISOString();\n        await updateResource(resource, meta, body);\n        continue;\n      }\n\n      // Check if due\n      if (meta.nextRun) {\n        const nextRunDate = new Date(meta.nextRun);\n        if (nextRunDate > now) continue;\n      } else {\n        // No nextRun computed yet — seed it from `now` so the job waits for its\n        // real next occurrence. Computing from new Date(0) (the epoch) always\n        // returns a 1970 date, which is < now, so the job would fire\n        // immediately on first sight regardless of its schedule.\n        const next = nextOccurrence(meta.schedule, now);\n        meta.nextRun = next.toISOString();\n        await updateResource(resource, meta, body);\n        continue;\n      }\n\n      // Skip if body is empty\n      if (!body.trim()) continue;\n\n      // Execute the job\n      await executeJob(resource, meta, body, deps, now);\n    }\n  } catch (err) {\n    // Transient WS / connection drops (Neon serverless): silently retry next\n    // tick instead of spamming stderr — `retryOnConnectionError` already did\n    // its retry budget at the driver level.\n    const { isConnectionError } = await import(\"../db/client.js\");\n    if (isConnectionError(err)) {\n      _hasJobsCache = undefined; // force re-check on next successful tick\n      _lastJobsCheck = 0;\n      return;\n    }\n    // Unwrap ErrorEvent (Neon WS driver emits these on network failure) so logs show the real cause\n    const detail =\n      err instanceof Error\n        ? err\n        : ((err as any)?.error ?? (err as any)?.message ?? err);\n    console.error(\"[recurring-jobs] Error processing jobs:\", detail);\n  } finally {\n    _isRunning = false;\n  }\n}\n\n/**\n * Validate that the run-as user still exists and (if scoped to an org) is\n * still a member of that org. Skips the check for the dev-mode bypass\n * identity and the shared-owner sentinel, neither of which map to a real\n * user row.\n *\n * SECURITY: without this check the scheduler keeps running jobs as\n * `meta.createdBy` indefinitely — even after the user has been deleted,\n * removed from the org, or had their account disabled. The cron entry\n * itself is left intact so an admin can purge it manually after the\n * underlying user-state issue is investigated. See audit 12 #10.\n */\nasync function isJobRunAsStillValid(\n  jobUserEmail: string,\n  jobOrgId: string | undefined,\n): Promise<{ ok: boolean; reason?: string }> {\n  // Shared-owner sentinel isn't a real user (used by jobs run as the\n  // workspace identity).\n  if (jobUserEmail === \"__shared__\") return { ok: true };\n  try {\n    const { getDbExec } = await import(\"../db/client.js\");\n    const db = getDbExec();\n    // Better Auth's user table is named \"user\" (singular). The reserved\n    // word is quoted to avoid ambiguity in Postgres.\n    const userResult = await db.execute({\n      sql: `SELECT 1 FROM \"user\" WHERE email = ? LIMIT 1`,\n      args: [jobUserEmail],\n    });\n    if (!userResult.rows || userResult.rows.length === 0) {\n      return { ok: false, reason: `user \"${jobUserEmail}\" no longer exists` };\n    }\n    if (jobOrgId) {\n      const memberResult = await db.execute({\n        sql: `SELECT 1 FROM org_members WHERE org_id = ? AND LOWER(email) = LOWER(?) LIMIT 1`,\n        args: [jobOrgId, jobUserEmail],\n      });\n      if (!memberResult.rows || memberResult.rows.length === 0) {\n        return {\n          ok: false,\n          reason: `user \"${jobUserEmail}\" is no longer a member of org \"${jobOrgId}\"`,\n        };\n      }\n    }\n    return { ok: true };\n  } catch (err: any) {\n    // Tables may not exist on a brand-new install (no auth tables yet).\n    // Treat that as \"valid\" rather than blocking every job. The check is\n    // only meaningful once the auth tables exist.\n    const msg = err?.message?.toLowerCase() ?? \"\";\n    if (\n      msg.includes(\"does not exist\") ||\n      msg.includes(\"no such table\") ||\n      msg.includes(\"undefined table\")\n    ) {\n      return { ok: true };\n    }\n    // Any other DB error: be conservative and let the job run rather than\n    // blocking on an unexpected failure mode (e.g. transient connection\n    // issue). We log so it's visible.\n    console.warn(\n      `[recurring-jobs] User/membership validation failed for \"${jobUserEmail}\":`,\n      err?.message,\n    );\n    return { ok: true };\n  }\n}\n\nasync function executeJob(\n  resource: Resource,\n  meta: JobFrontmatter,\n  body: string,\n  deps: SchedulerDeps,\n  now: Date,\n): Promise<void> {\n  const jobName = resource.path.replace(/^jobs\\//, \"\").replace(/\\.md$/, \"\");\n\n  // Set owner context so all scoped operations (app-state, resources, etc.)\n  // operate on the correct user's data\n  const effectiveRunAs = meta.runAs ?? \"creator\";\n  const jobUserEmail =\n    effectiveRunAs === \"creator\"\n      ? meta.createdBy || resource.owner\n      : resource.owner;\n  const jobOrgId = meta.orgId ?? undefined;\n\n  // SECURITY (audit 12 #10): re-validate the run-as user/membership on\n  // every tick. Sharing revocation, user deletion, and org-member removal\n  // must take effect for already-scheduled jobs. Skip the tick on\n  // failure; leave the cron entry alone so an admin can purge after\n  // investigation.\n  const validity = await isJobRunAsStillValid(jobUserEmail, jobOrgId);\n  if (!validity.ok) {\n    console.warn(\n      `[recurring-jobs] Skipping job \"${jobName}\": ${validity.reason}. ` +\n        `User/membership no longer valid — leaving cron entry for admin review.`,\n    );\n    // Mark as skipped without resetting nextRun so an admin can find it.\n    meta.lastRun = now.toISOString();\n    meta.lastStatus = \"skipped\";\n    meta.lastError = validity.reason;\n    await updateResource(resource, meta, body);\n    return;\n  }\n\n  // Mark as running\n  meta.lastRun = now.toISOString();\n  meta.lastStatus = \"running\";\n  meta.lastError = undefined;\n  await updateResource(resource, meta, body);\n\n  await runWithRequestContext(\n    { userEmail: jobUserEmail, orgId: jobOrgId },\n    async () => {\n      try {\n        const actions = deps.getActions();\n        const systemPrompt = await deps.getSystemPrompt(jobUserEmail);\n        const tools = actionsToEngineTools(actions);\n\n        // Prefer the job runner's saved Anthropic key so recurring jobs\n        // don't silently bill the shared platform key once a user has\n        // brought their own. Falls back to the platform key when absent.\n        const userApiKey = await getOwnerActiveApiKey(jobUserEmail);\n        const engine =\n          deps.engine ??\n          (await resolveEngine({\n            apiKey: userApiKey ?? deps.apiKey,\n            appId: deps.appId,\n          }));\n        const model =\n          deps.model ??\n          (await getStoredModelForEngine(engine, { appId: deps.appId })) ??\n          engine.defaultModel;\n\n        // Create a chat thread for this run\n        const threadTitle = `Job: ${jobName} — ${now.toLocaleDateString()}`;\n        const thread = await createThread(jobUserEmail, { title: threadTitle });\n\n        const jobText = `[Recurring Job: ${jobName}]\\nSchedule: ${describeCron(meta.schedule)}\\n\\nExecute the following job instructions:\\n\\n${body}`;\n        const messages = [\n          {\n            role: \"user\" as const,\n            content: [{ type: \"text\" as const, text: jobText }],\n          },\n        ];\n\n        // 5-minute timeout\n        const controller = new AbortController();\n        const timeout = setTimeout(() => controller.abort(), 5 * 60 * 1000);\n\n        const events: AgentChatEvent[] = [];\n        const send = (event: AgentChatEvent) => {\n          events.push(event);\n        };\n\n        try {\n          await runAgentLoop({\n            engine,\n            model,\n            systemPrompt,\n            tools,\n            messages,\n            actions,\n            send,\n            signal: controller.signal,\n          });\n        } finally {\n          clearTimeout(timeout);\n        }\n\n        // Success — update status. Compute the next run from completion time,\n        // not the job's start time `now`: a long run could otherwise schedule a\n        // nextRun that's already in the past and re-fire immediately next tick.\n        const next = nextOccurrence(meta.schedule, new Date());\n        meta.lastStatus = \"success\";\n        meta.nextRun = next.toISOString();\n        await updateResource(resource, meta, body);\n\n        console.log(\n          `[recurring-jobs] Job \"${jobName}\" completed. Next run: ${meta.nextRun}`,\n        );\n      } catch (err: any) {\n        // Error — update status. Use completion time (see success path).\n        const next = nextOccurrence(meta.schedule, new Date());\n        meta.lastStatus = \"error\";\n        meta.lastError = err?.message?.slice(0, 200) || \"Unknown error\";\n        meta.nextRun = next.toISOString();\n        await updateResource(resource, meta, body);\n\n        console.error(\n          `[recurring-jobs] Job \"${jobName}\" failed:`,\n          err?.message,\n        );\n      }\n    },\n  ); // end runWithRequestContext\n}\n\nasync function updateResource(\n  resource: Resource,\n  meta: JobFrontmatter,\n  body: string,\n): Promise<void> {\n  const content = buildJobContent(meta, body);\n  await resourcePut(resource.owner, resource.path, content);\n}\n"]}
+{"version":3,"file":"scheduler.js","sourceRoot":"","sources":["../../src/jobs/scheduler.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,qBAAqB,EAAE,MAAM,8BAA8B,CAAC;AACrE,OAAO,EAAE,cAAc,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,WAAW,CAAC;AACtE,OAAO,EACL,qBAAqB,EACrB,WAAW,GAEZ,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,YAAY,EACZ,oBAAoB,EACpB,oBAAoB,GAErB,MAAM,8BAA8B,CAAC;AACtC,OAAO,EACL,uBAAuB,EACvB,aAAa,GACd,MAAM,0BAA0B,CAAC;AAElC,OAAO,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAC;AAiBxD,MAAM,cAAc,GAAG,oCAAoC,CAAC;AAE5D,MAAM,UAAU,mBAAmB,CAAC,OAAe;IAIjD,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;IAC5C,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO;YACL,IAAI,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE;YACtC,IAAI,EAAE,OAAO;SACd,CAAC;IACJ,CAAC;IAED,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;IAC3B,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAE7B,MAAM,IAAI,GAAmB,EAAE,QAAQ,EAAE,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAE7D,KAAK,MAAM,IAAI,IAAI,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QACzC,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACnC,IAAI,QAAQ,KAAK,CAAC,CAAC;YAAE,SAAS;QAC9B,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,IAAI,EAAE,CAAC;QAC3C,IAAI,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAE5C,eAAe;QACf,IACE,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;YAC9C,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,EAC9C,CAAC;YACD,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QAC7B,CAAC;QAED,QAAQ,GAAG,EAAE,CAAC;YACZ,KAAK,UAAU;gBACb,IAAI,CAAC,QAAQ,GAAG,KAAK,CAAC;gBACtB,MAAM;YACR,KAAK,SAAS;gBACZ,IAAI,CAAC,OAAO,GAAG,KAAK,KAAK,OAAO,CAAC;gBACjC,MAAM;YACR,KAAK,WAAW;gBACd,IAAI,CAAC,SAAS,GAAG,KAAK,CAAC;gBACvB,MAAM;YACR,KAAK,OAAO;gBACV,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;gBACnB,MAAM;YACR,KAAK,OAAO;gBACV,IAAI,CAAC,KAAK;oBACR,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;gBAChE,MAAM;YACR,KAAK,SAAS;gBACZ,IAAI,CAAC,OAAO,GAAG,KAAK,CAAC;gBACrB,MAAM;YACR,KAAK,YAAY;gBACf,IAAI,CAAC,UAAU,GAAG,KAAqC,CAAC;gBACxD,MAAM;YACR,KAAK,WAAW;gBACd,mDAAmD;gBACnD,IAAI,CAAC,SAAS,GAAG,KAAK;qBACnB,OAAO,CAAC,MAAM,EAAE,IAAI,CAAC;qBACrB,OAAO,CAAC,MAAM,EAAE,IAAI,CAAC;qBACrB,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC;qBACpB,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;gBAC1B,MAAM;YACR,KAAK,SAAS;gBACZ,IAAI,CAAC,OAAO,GAAG,KAAK,CAAC;gBACrB,MAAM;QACV,CAAC;IACH,CAAC;IAED,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;AACxB,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,IAAoB,EAAE,IAAY;IAChE,MAAM,KAAK,GAAG,CAAC,KAAK,CAAC,CAAC;IACtB,KAAK,CAAC,IAAI,CAAC,cAAc,IAAI,CAAC,QAAQ,GAAG,CAAC,CAAC;IAC3C,KAAK,CAAC,IAAI,CAAC,YAAY,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;IACvC,IAAI,IAAI,CAAC,SAAS;QAAE,KAAK,CAAC,IAAI,CAAC,cAAc,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC;IAC/D,IAAI,IAAI,CAAC,KAAK;QAAE,KAAK,CAAC,IAAI,CAAC,UAAU,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;IACnD,IAAI,IAAI,CAAC,KAAK;QAAE,KAAK,CAAC,IAAI,CAAC,UAAU,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;IACnD,IAAI,IAAI,CAAC,OAAO;QAAE,KAAK,CAAC,IAAI,CAAC,YAAY,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;IACzD,IAAI,IAAI,CAAC,UAAU;QAAE,KAAK,CAAC,IAAI,CAAC,eAAe,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC;IAClE,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;QACnB,wEAAwE;QACxE,0EAA0E;QAC1E,sEAAsE;QACtE,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS;aAC3B,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC;aACtB,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC;aACpB,OAAO,CAAC,KAAK,EAAE,KAAK,CAAC;aACrB,OAAO,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;QACzB,KAAK,CAAC,IAAI,CAAC,eAAe,OAAO,GAAG,CAAC,CAAC;IACxC,CAAC;IACD,IAAI,IAAI,CAAC,OAAO;QAAE,KAAK,CAAC,IAAI,CAAC,YAAY,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;IACzD,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAClB,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACjB,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAeD,IAAI,UAAU,GAAG,KAAK,CAAC;AAEvB,0EAA0E;AAC1E,4EAA4E;AAC5E,qEAAqE;AACrE,IAAI,aAAkC,CAAC;AACvC,IAAI,cAAc,GAAG,CAAC,CAAC;AACvB,MAAM,sBAAsB,GAAG,CAAC,GAAG,MAAM,CAAC;AAC1C,IAAI,kBAAkB,GAAG,KAAK,CAAC;AAE/B,SAAS,6BAA6B;IACpC,IAAI,kBAAkB;QAAE,OAAO;IAC/B,kBAAkB,GAAG,IAAI,CAAC;IAC1B,oDAAoD;IACpD,MAAM,CAAC,yBAAyB,CAAC;SAC9B,IAAI,CAAC,CAAC,EAAE,mBAAmB,EAAE,EAAE,EAAE;QAChC,mBAAmB,EAAE,CAAC,EAAE,CAAC,WAAW,EAAE,CAAC,KAAU,EAAE,EAAE;YACnD,IAAI,OAAO,KAAK,EAAE,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;gBACtE,aAAa,GAAG,SAAS,CAAC;YAC5B,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC,CAAC;SACD,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;QACb,OAAO,CAAC,IAAI,CACV,4CAA4C,EAC5C,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CACzC,CAAC;IACJ,CAAC,CAAC,CAAC;AACP,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,IAAmB;IAC5D,0BAA0B;IAC1B,IAAI,UAAU;QAAE,OAAO;IAEvB,6BAA6B,EAAE,CAAC;IAEhC,mEAAmE;IACnE,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACzB,IACE,aAAa,KAAK,KAAK;QACvB,KAAK,GAAG,cAAc,GAAG,sBAAsB,EAC/C,CAAC;QACD,OAAO;IACT,CAAC;IAED,UAAU,GAAG,IAAI,CAAC;IAElB,IAAI,CAAC;QACH,MAAM,YAAY,GAAG,MAAM,qBAAqB,CAAC,OAAO,CAAC,CAAC;QAC1D,aAAa,GAAG,YAAY,CAAC,IAAI,CAC/B,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAC3D,CAAC;QACF,cAAc,GAAG,KAAK,CAAC;QACvB,IAAI,CAAC,aAAa;YAAE,OAAO;QAC3B,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;QAEvB,KAAK,MAAM,QAAQ,IAAI,YAAY,EAAE,CAAC;YACpC,mCAAmC;YACnC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;gBAAE,SAAS;YAC7C,IAAI,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC;gBAAE,SAAS;YAE9C,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,mBAAmB,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;YAE7D,oCAAoC;YACpC,IAAI,CAAC,IAAI,CAAC,OAAO,IAAI,CAAC,IAAI,CAAC,QAAQ;gBAAE,SAAS;YAC9C,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,QAAQ,CAAC;gBAAE,SAAS;YAE1C,+EAA+E;YAC/E,8EAA8E;YAC9E,IAAI,IAAI,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;gBAClC,MAAM,WAAW,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;gBACnC,IACE,IAAI,CAAC,OAAO;oBACZ,GAAG,CAAC,OAAO,EAAE,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,GAAG,WAAW,EAC9D,CAAC;oBACD,SAAS;gBACX,CAAC;gBACD,gDAAgD;gBAChD,IAAI,CAAC,UAAU,GAAG,OAAO,CAAC;gBAC1B,IAAI,CAAC,SAAS,GAAG,yCAAyC,CAAC;gBAC3D,MAAM,IAAI,GAAG,cAAc,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;gBAChD,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;gBAClC,MAAM,cAAc,CAAC,QAAQ,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;gBAC3C,SAAS;YACX,CAAC;YAED,eAAe;YACf,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;gBACjB,MAAM,WAAW,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;gBAC3C,IAAI,WAAW,GAAG,GAAG;oBAAE,SAAS;YAClC,CAAC;iBAAM,CAAC;gBACN,wEAAwE;gBACxE,sEAAsE;gBACtE,6DAA6D;gBAC7D,yDAAyD;gBACzD,MAAM,IAAI,GAAG,cAAc,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;gBAChD,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;gBAClC,MAAM,cAAc,CAAC,QAAQ,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;gBAC3C,SAAS;YACX,CAAC;YAED,wBAAwB;YACxB,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE;gBAAE,SAAS;YAE3B,kBAAkB;YAClB,MAAM,UAAU,CAAC,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;QACpD,CAAC;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,yEAAyE;QACzE,yEAAyE;QACzE,wCAAwC;QACxC,MAAM,EAAE,iBAAiB,EAAE,GAAG,MAAM,MAAM,CAAC,iBAAiB,CAAC,CAAC;QAC9D,IAAI,iBAAiB,CAAC,GAAG,CAAC,EAAE,CAAC;YAC3B,aAAa,GAAG,SAAS,CAAC,CAAC,yCAAyC;YACpE,cAAc,GAAG,CAAC,CAAC;YACnB,OAAO;QACT,CAAC;QACD,gGAAgG;QAChG,MAAM,MAAM,GACV,GAAG,YAAY,KAAK;YAClB,CAAC,CAAC,GAAG;YACL,CAAC,CAAC,CAAE,GAAW,EAAE,KAAK,IAAK,GAAW,EAAE,OAAO,IAAI,GAAG,CAAC,CAAC;QAC5D,OAAO,CAAC,KAAK,CAAC,yCAAyC,EAAE,MAAM,CAAC,CAAC;IACnE,CAAC;YAAS,CAAC;QACT,UAAU,GAAG,KAAK,CAAC;IACrB,CAAC;AACH,CAAC;AAED;;;;;;;;;;;GAWG;AACH,KAAK,UAAU,oBAAoB,CACjC,YAAoB,EACpB,QAA4B;IAE5B,mEAAmE;IACnE,uBAAuB;IACvB,IAAI,YAAY,KAAK,YAAY;QAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;IACvD,IAAI,CAAC;QACH,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,MAAM,CAAC,iBAAiB,CAAC,CAAC;QACtD,MAAM,EAAE,GAAG,SAAS,EAAE,CAAC;QACvB,oEAAoE;QACpE,iDAAiD;QACjD,MAAM,UAAU,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC;YAClC,GAAG,EAAE,8CAA8C;YACnD,IAAI,EAAE,CAAC,YAAY,CAAC;SACrB,CAAC,CAAC;QACH,IAAI,CAAC,UAAU,CAAC,IAAI,IAAI,UAAU,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACrD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,YAAY,oBAAoB,EAAE,CAAC;QAC1E,CAAC;QACD,IAAI,QAAQ,EAAE,CAAC;YACb,MAAM,YAAY,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC;gBACpC,GAAG,EAAE,gFAAgF;gBACrF,IAAI,EAAE,CAAC,QAAQ,EAAE,YAAY,CAAC;aAC/B,CAAC,CAAC;YACH,IAAI,CAAC,YAAY,CAAC,IAAI,IAAI,YAAY,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACzD,OAAO;oBACL,EAAE,EAAE,KAAK;oBACT,MAAM,EAAE,SAAS,YAAY,mCAAmC,QAAQ,GAAG;iBAC5E,CAAC;YACJ,CAAC;QACH,CAAC;QACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;IACtB,CAAC;IAAC,OAAO,GAAQ,EAAE,CAAC;QAClB,oEAAoE;QACpE,qEAAqE;QACrE,8CAA8C;QAC9C,MAAM,GAAG,GAAG,GAAG,EAAE,OAAO,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC;QAC9C,IACE,GAAG,CAAC,QAAQ,CAAC,gBAAgB,CAAC;YAC9B,GAAG,CAAC,QAAQ,CAAC,eAAe,CAAC;YAC7B,GAAG,CAAC,QAAQ,CAAC,iBAAiB,CAAC,EAC/B,CAAC;YACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;QACtB,CAAC;QACD,sEAAsE;QACtE,oEAAoE;QACpE,kCAAkC;QAClC,OAAO,CAAC,IAAI,CACV,2DAA2D,YAAY,IAAI,EAC3E,GAAG,EAAE,OAAO,CACb,CAAC;QACF,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;IACtB,CAAC;AACH,CAAC;AAED,KAAK,UAAU,UAAU,CACvB,QAAkB,EAClB,IAAoB,EACpB,IAAY,EACZ,IAAmB,EACnB,GAAS;IAET,MAAM,OAAO,GAAG,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;IAE1E,0EAA0E;IAC1E,qCAAqC;IACrC,MAAM,cAAc,GAAG,IAAI,CAAC,KAAK,IAAI,SAAS,CAAC;IAC/C,MAAM,YAAY,GAChB,cAAc,KAAK,SAAS;QAC1B,CAAC,CAAC,IAAI,CAAC,SAAS,IAAI,QAAQ,CAAC,KAAK;QAClC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC;IACrB,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,IAAI,SAAS,CAAC;IAEzC,qEAAqE;IACrE,wEAAwE;IACxE,gEAAgE;IAChE,kEAAkE;IAClE,iBAAiB;IACjB,MAAM,QAAQ,GAAG,MAAM,oBAAoB,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAC;IACpE,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,OAAO,CAAC,IAAI,CACV,kCAAkC,OAAO,MAAM,QAAQ,CAAC,MAAM,IAAI;YAChE,wEAAwE,CAC3E,CAAC;QACF,qEAAqE;QACrE,IAAI,CAAC,OAAO,GAAG,GAAG,CAAC,WAAW,EAAE,CAAC;QACjC,IAAI,CAAC,UAAU,GAAG,SAAS,CAAC;QAC5B,IAAI,CAAC,SAAS,GAAG,QAAQ,CAAC,MAAM,CAAC;QACjC,MAAM,cAAc,CAAC,QAAQ,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;QAC3C,OAAO;IACT,CAAC;IAED,kBAAkB;IAClB,IAAI,CAAC,OAAO,GAAG,GAAG,CAAC,WAAW,EAAE,CAAC;IACjC,IAAI,CAAC,UAAU,GAAG,SAAS,CAAC;IAC5B,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;IAC3B,MAAM,cAAc,CAAC,QAAQ,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;IAE3C,MAAM,qBAAqB,CACzB,EAAE,SAAS,EAAE,YAAY,EAAE,KAAK,EAAE,QAAQ,EAAE,EAC5C,KAAK,IAAI,EAAE;QACT,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,EAAE,CAAC;YAClC,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,YAAY,CAAC,CAAC;YAC9D,MAAM,KAAK,GAAG,oBAAoB,CAAC,OAAO,CAAC,CAAC;YAE5C,gEAAgE;YAChE,8DAA8D;YAC9D,iEAAiE;YACjE,MAAM,UAAU,GAAG,MAAM,oBAAoB,CAAC,YAAY,CAAC,CAAC;YAC5D,MAAM,MAAM,GACV,IAAI,CAAC,MAAM;gBACX,CAAC,MAAM,aAAa,CAAC;oBACnB,MAAM,EAAE,UAAU,IAAI,IAAI,CAAC,MAAM;oBACjC,KAAK,EAAE,IAAI,CAAC,KAAK;iBAClB,CAAC,CAAC,CAAC;YACN,MAAM,KAAK,GACT,IAAI,CAAC,KAAK;gBACV,CAAC,MAAM,uBAAuB,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;gBAC9D,MAAM,CAAC,YAAY,CAAC;YAEtB,oCAAoC;YACpC,MAAM,WAAW,GAAG,QAAQ,OAAO,MAAM,GAAG,CAAC,kBAAkB,EAAE,EAAE,CAAC;YACpE,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,YAAY,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC;YAExE,MAAM,OAAO,GAAG,mBAAmB,OAAO,gBAAgB,YAAY,CAAC,IAAI,CAAC,QAAQ,CAAC,kDAAkD,IAAI,EAAE,CAAC;YAC9I,MAAM,QAAQ,GAAG;gBACf;oBACE,IAAI,EAAE,MAAe;oBACrB,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;iBACpD;aACF,CAAC;YAEF,mBAAmB;YACnB,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;YACzC,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;YAEpE,MAAM,MAAM,GAAqB,EAAE,CAAC;YACpC,MAAM,IAAI,GAAG,CAAC,KAAqB,EAAE,EAAE;gBACrC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACrB,CAAC,CAAC;YAEF,IAAI,CAAC;gBACH,MAAM,YAAY,CAAC;oBACjB,MAAM;oBACN,KAAK;oBACL,YAAY;oBACZ,KAAK;oBACL,QAAQ;oBACR,OAAO;oBACP,IAAI;oBACJ,MAAM,EAAE,UAAU,CAAC,MAAM;iBAC1B,CAAC,CAAC;YACL,CAAC;oBAAS,CAAC;gBACT,YAAY,CAAC,OAAO,CAAC,CAAC;YACxB,CAAC;YAED,sEAAsE;YACtE,wEAAwE;YACxE,wEAAwE;YACxE,MAAM,IAAI,GAAG,cAAc,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC;YACvD,IAAI,CAAC,UAAU,GAAG,SAAS,CAAC;YAC5B,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;YAClC,MAAM,cAAc,CAAC,QAAQ,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;YAE3C,OAAO,CAAC,GAAG,CACT,yBAAyB,OAAO,0BAA0B,IAAI,CAAC,OAAO,EAAE,CACzE,CAAC;QACJ,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAClB,iEAAiE;YACjE,MAAM,IAAI,GAAG,cAAc,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC;YACvD,IAAI,CAAC,UAAU,GAAG,OAAO,CAAC;YAC1B,IAAI,CAAC,SAAS,GAAG,GAAG,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,IAAI,eAAe,CAAC;YAChE,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;YAClC,MAAM,cAAc,CAAC,QAAQ,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;YAE3C,OAAO,CAAC,KAAK,CACX,yBAAyB,OAAO,WAAW,EAC3C,GAAG,EAAE,OAAO,CACb,CAAC;QACJ,CAAC;IACH,CAAC,CACF,CAAC,CAAC,4BAA4B;AACjC,CAAC;AAED,KAAK,UAAU,cAAc,CAC3B,QAAkB,EAClB,IAAoB,EACpB,IAAY;IAEZ,MAAM,OAAO,GAAG,eAAe,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IAC5C,MAAM,WAAW,CAAC,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;AAC5D,CAAC","sourcesContent":["import { runWithRequestContext } from \"../server/request-context.js\";\nimport { nextOccurrence, isValidCron, describeCron } from \"./cron.js\";\nimport {\n  resourceListAllOwners,\n  resourcePut,\n  type Resource,\n} from \"../resources/store.js\";\nimport {\n  runAgentLoop,\n  actionsToEngineTools,\n  getOwnerActiveApiKey,\n  type ActionEntry,\n} from \"../agent/production-agent.js\";\nimport {\n  getStoredModelForEngine,\n  resolveEngine,\n} from \"../agent/engine/index.js\";\nimport type { AgentEngine } from \"../agent/engine/types.js\";\nimport { createThread } from \"../chat-threads/store.js\";\nimport type { AgentChatEvent } from \"../agent/types.js\";\n\n// ─── Frontmatter parsing ────────────────────────────────────────────────────\n\nexport interface JobFrontmatter {\n  schedule: string;\n  enabled: boolean;\n  createdBy?: string;\n  orgId?: string;\n  runAs?: \"creator\" | \"shared\";\n  lastRun?: string;\n  lastStatus?: \"success\" | \"error\" | \"running\" | \"skipped\";\n  lastError?: string;\n  nextRun?: string;\n}\n\nconst FRONTMATTER_RE = /^---\\n([\\s\\S]*?)\\n---\\n?([\\s\\S]*)$/;\n\nexport function parseJobFrontmatter(content: string): {\n  meta: JobFrontmatter;\n  body: string;\n} {\n  const match = content.match(FRONTMATTER_RE);\n  if (!match) {\n    return {\n      meta: { schedule: \"\", enabled: false },\n      body: content,\n    };\n  }\n\n  const yamlBlock = match[1];\n  const body = match[2].trim();\n\n  const meta: JobFrontmatter = { schedule: \"\", enabled: true };\n\n  for (const line of yamlBlock.split(\"\\n\")) {\n    const colonIdx = line.indexOf(\":\");\n    if (colonIdx === -1) continue;\n    const key = line.slice(0, colonIdx).trim();\n    let value = line.slice(colonIdx + 1).trim();\n\n    // Strip quotes\n    if (\n      (value.startsWith('\"') && value.endsWith('\"')) ||\n      (value.startsWith(\"'\") && value.endsWith(\"'\"))\n    ) {\n      value = value.slice(1, -1);\n    }\n\n    switch (key) {\n      case \"schedule\":\n        meta.schedule = value;\n        break;\n      case \"enabled\":\n        meta.enabled = value !== \"false\";\n        break;\n      case \"createdBy\":\n        meta.createdBy = value;\n        break;\n      case \"orgId\":\n        meta.orgId = value;\n        break;\n      case \"runAs\":\n        meta.runAs =\n          value === \"shared\" || value === \"creator\" ? value : undefined;\n        break;\n      case \"lastRun\":\n        meta.lastRun = value;\n        break;\n      case \"lastStatus\":\n        meta.lastStatus = value as JobFrontmatter[\"lastStatus\"];\n        break;\n      case \"lastError\":\n        // Reverse the escaping applied in buildJobContent.\n        meta.lastError = value\n          .replace(/\\\\n/g, \"\\n\")\n          .replace(/\\\\r/g, \"\\r\")\n          .replace(/\\\\\"/g, '\"')\n          .replace(/\\\\\\\\/g, \"\\\\\");\n        break;\n      case \"nextRun\":\n        meta.nextRun = value;\n        break;\n    }\n  }\n\n  return { meta, body };\n}\n\nexport function buildJobContent(meta: JobFrontmatter, body: string): string {\n  const lines = [`---`];\n  lines.push(`schedule: \"${meta.schedule}\"`);\n  lines.push(`enabled: ${meta.enabled}`);\n  if (meta.createdBy) lines.push(`createdBy: ${meta.createdBy}`);\n  if (meta.orgId) lines.push(`orgId: ${meta.orgId}`);\n  if (meta.runAs) lines.push(`runAs: ${meta.runAs}`);\n  if (meta.lastRun) lines.push(`lastRun: ${meta.lastRun}`);\n  if (meta.lastStatus) lines.push(`lastStatus: ${meta.lastStatus}`);\n  if (meta.lastError) {\n    // Escape backslash, quote, then CR/LF. The frontmatter parser splits on\n    // \"\\n\", so an un-escaped newline (common in stack traces) would otherwise\n    // split the value across lines and corrupt/truncate the stored error.\n    const escaped = meta.lastError\n      .replace(/\\\\/g, \"\\\\\\\\\")\n      .replace(/\"/g, '\\\\\"')\n      .replace(/\\r/g, \"\\\\r\")\n      .replace(/\\n/g, \"\\\\n\");\n    lines.push(`lastError: \"${escaped}\"`);\n  }\n  if (meta.nextRun) lines.push(`nextRun: ${meta.nextRun}`);\n  lines.push(`---`);\n  lines.push(\"\");\n  lines.push(body);\n  return lines.join(\"\\n\");\n}\n\n// ─── Job execution ──────────────────────────────────────────────────────────\n\nexport interface SchedulerDeps {\n  getActions: () => Record<string, ActionEntry>;\n  getSystemPrompt: (owner: string) => Promise<string>;\n  /** Optional engine override. Defaults to the resolved request engine. */\n  engine?: AgentEngine;\n  apiKey?: string;\n  model?: string;\n  /** App/template id used for org-scoped per-app model defaults. */\n  appId?: string;\n}\n\nlet _isRunning = false;\n\n// Skip the DB query on every tick if we recently confirmed no jobs exist.\n// `_hasJobsCache` is invalidated whenever a `jobs/*` resource is written or\n// deleted (subscribed below), and refreshed at most every 5 minutes.\nlet _hasJobsCache: boolean | undefined;\nlet _lastJobsCheck = 0;\nconst JOBS_CHECK_INTERVAL_MS = 5 * 60_000;\nlet _emitterSubscribed = false;\n\nfunction subscribeToJobsResourceEvents(): void {\n  if (_emitterSubscribed) return;\n  _emitterSubscribed = true;\n  // Lazy import to avoid circular deps at module load\n  import(\"../resources/emitter.js\")\n    .then(({ getResourcesEmitter }) => {\n      getResourcesEmitter().on(\"resources\", (event: any) => {\n        if (typeof event?.path === \"string\" && event.path.startsWith(\"jobs/\")) {\n          _hasJobsCache = undefined;\n        }\n      });\n    })\n    .catch((err) => {\n      console.warn(\n        \"[jobs] resource-event subscription failed:\",\n        err instanceof Error ? err.message : err,\n      );\n    });\n}\n\n/**\n * Process all due recurring jobs. Called every 60 seconds.\n * Sequential execution with 5-minute timeout per job.\n */\nexport async function processRecurringJobs(deps: SchedulerDeps): Promise<void> {\n  // Prevent concurrent runs\n  if (_isRunning) return;\n\n  subscribeToJobsResourceEvents();\n\n  // Skip if we recently confirmed there are no job resources to run.\n  const nowMs = Date.now();\n  if (\n    _hasJobsCache === false &&\n    nowMs - _lastJobsCheck < JOBS_CHECK_INTERVAL_MS\n  ) {\n    return;\n  }\n\n  _isRunning = true;\n\n  try {\n    const jobResources = await resourceListAllOwners(\"jobs/\");\n    _hasJobsCache = jobResources.some(\n      (r) => r.path.endsWith(\".md\") && !r.path.endsWith(\".keep\"),\n    );\n    _lastJobsCheck = nowMs;\n    if (!_hasJobsCache) return;\n    const now = new Date();\n\n    for (const resource of jobResources) {\n      // Skip non-markdown or .keep files\n      if (!resource.path.endsWith(\".md\")) continue;\n      if (resource.path.endsWith(\".keep\")) continue;\n\n      const { meta, body } = parseJobFrontmatter(resource.content);\n\n      // Skip disabled or missing schedule\n      if (!meta.enabled || !meta.schedule) continue;\n      if (!isValidCron(meta.schedule)) continue;\n\n      // Skip if currently running, unless it has been stuck for more than 10 minutes\n      // (server crash mid-job leaves lastStatus=running forever without this guard)\n      if (meta.lastStatus === \"running\") {\n        const stuckCutoff = 10 * 60 * 1000;\n        if (\n          meta.lastRun &&\n          now.getTime() - new Date(meta.lastRun).getTime() < stuckCutoff\n        ) {\n          continue;\n        }\n        // Stuck — reset so the next check can re-run it\n        meta.lastStatus = \"error\";\n        meta.lastError = \"Job timed out or server crashed mid-run\";\n        const next = nextOccurrence(meta.schedule, now);\n        meta.nextRun = next.toISOString();\n        await updateResource(resource, meta, body);\n        continue;\n      }\n\n      // Check if due\n      if (meta.nextRun) {\n        const nextRunDate = new Date(meta.nextRun);\n        if (nextRunDate > now) continue;\n      } else {\n        // No nextRun computed yet — seed it from `now` so the job waits for its\n        // real next occurrence. Computing from new Date(0) (the epoch) always\n        // returns a 1970 date, which is < now, so the job would fire\n        // immediately on first sight regardless of its schedule.\n        const next = nextOccurrence(meta.schedule, now);\n        meta.nextRun = next.toISOString();\n        await updateResource(resource, meta, body);\n        continue;\n      }\n\n      // Skip if body is empty\n      if (!body.trim()) continue;\n\n      // Execute the job\n      await executeJob(resource, meta, body, deps, now);\n    }\n  } catch (err) {\n    // Transient WS / connection drops (Neon serverless): silently retry next\n    // tick instead of spamming stderr — `retryOnConnectionError` already did\n    // its retry budget at the driver level.\n    const { isConnectionError } = await import(\"../db/client.js\");\n    if (isConnectionError(err)) {\n      _hasJobsCache = undefined; // force re-check on next successful tick\n      _lastJobsCheck = 0;\n      return;\n    }\n    // Unwrap ErrorEvent (Neon WS driver emits these on network failure) so logs show the real cause\n    const detail =\n      err instanceof Error\n        ? err\n        : ((err as any)?.error ?? (err as any)?.message ?? err);\n    console.error(\"[recurring-jobs] Error processing jobs:\", detail);\n  } finally {\n    _isRunning = false;\n  }\n}\n\n/**\n * Validate that the run-as user still exists and (if scoped to an org) is\n * still a member of that org. Skips the check for the dev-mode bypass\n * identity and the shared-owner sentinel, neither of which map to a real\n * user row.\n *\n * SECURITY: without this check the scheduler keeps running jobs as\n * `meta.createdBy` indefinitely — even after the user has been deleted,\n * removed from the org, or had their account disabled. The cron entry\n * itself is left intact so an admin can purge it manually after the\n * underlying user-state issue is investigated. See audit 12 #10.\n */\nasync function isJobRunAsStillValid(\n  jobUserEmail: string,\n  jobOrgId: string | undefined,\n): Promise<{ ok: boolean; reason?: string }> {\n  // Shared-owner sentinel isn't a real user (used by jobs run as the\n  // workspace identity).\n  if (jobUserEmail === \"__shared__\") return { ok: true };\n  try {\n    const { getDbExec } = await import(\"../db/client.js\");\n    const db = getDbExec();\n    // Better Auth's user table is named \"user\" (singular). The reserved\n    // word is quoted to avoid ambiguity in Postgres.\n    const userResult = await db.execute({\n      sql: `SELECT 1 FROM \"user\" WHERE email = ? LIMIT 1`,\n      args: [jobUserEmail],\n    });\n    if (!userResult.rows || userResult.rows.length === 0) {\n      return { ok: false, reason: `user \"${jobUserEmail}\" no longer exists` };\n    }\n    if (jobOrgId) {\n      const memberResult = await db.execute({\n        sql: `SELECT 1 FROM org_members WHERE org_id = ? AND LOWER(email) = LOWER(?) LIMIT 1`,\n        args: [jobOrgId, jobUserEmail],\n      });\n      if (!memberResult.rows || memberResult.rows.length === 0) {\n        return {\n          ok: false,\n          reason: `user \"${jobUserEmail}\" is no longer a member of org \"${jobOrgId}\"`,\n        };\n      }\n    }\n    return { ok: true };\n  } catch (err: any) {\n    // Tables may not exist on a brand-new install (no auth tables yet).\n    // Treat that as \"valid\" rather than blocking every job. The check is\n    // only meaningful once the auth tables exist.\n    const msg = err?.message?.toLowerCase() ?? \"\";\n    if (\n      msg.includes(\"does not exist\") ||\n      msg.includes(\"no such table\") ||\n      msg.includes(\"undefined table\")\n    ) {\n      return { ok: true };\n    }\n    // Any other DB error: be conservative and let the job run rather than\n    // blocking on an unexpected failure mode (e.g. transient connection\n    // issue). We log so it's visible.\n    console.warn(\n      `[recurring-jobs] User/membership validation failed for \"${jobUserEmail}\":`,\n      err?.message,\n    );\n    return { ok: true };\n  }\n}\n\nasync function executeJob(\n  resource: Resource,\n  meta: JobFrontmatter,\n  body: string,\n  deps: SchedulerDeps,\n  now: Date,\n): Promise<void> {\n  const jobName = resource.path.replace(/^jobs\\//, \"\").replace(/\\.md$/, \"\");\n\n  // Set owner context so all scoped operations (app-state, resources, etc.)\n  // operate on the correct user's data\n  const effectiveRunAs = meta.runAs ?? \"creator\";\n  const jobUserEmail =\n    effectiveRunAs === \"creator\"\n      ? meta.createdBy || resource.owner\n      : resource.owner;\n  const jobOrgId = meta.orgId ?? undefined;\n\n  // SECURITY (audit 12 #10): re-validate the run-as user/membership on\n  // every tick. Sharing revocation, user deletion, and org-member removal\n  // must take effect for already-scheduled jobs. Skip the tick on\n  // failure; leave the cron entry alone so an admin can purge after\n  // investigation.\n  const validity = await isJobRunAsStillValid(jobUserEmail, jobOrgId);\n  if (!validity.ok) {\n    console.warn(\n      `[recurring-jobs] Skipping job \"${jobName}\": ${validity.reason}. ` +\n        `User/membership no longer valid — leaving cron entry for admin review.`,\n    );\n    // Mark as skipped without resetting nextRun so an admin can find it.\n    meta.lastRun = now.toISOString();\n    meta.lastStatus = \"skipped\";\n    meta.lastError = validity.reason;\n    await updateResource(resource, meta, body);\n    return;\n  }\n\n  // Mark as running\n  meta.lastRun = now.toISOString();\n  meta.lastStatus = \"running\";\n  meta.lastError = undefined;\n  await updateResource(resource, meta, body);\n\n  await runWithRequestContext(\n    { userEmail: jobUserEmail, orgId: jobOrgId },\n    async () => {\n      try {\n        const actions = deps.getActions();\n        const systemPrompt = await deps.getSystemPrompt(jobUserEmail);\n        const tools = actionsToEngineTools(actions);\n\n        // Prefer the job runner's saved Anthropic key so recurring jobs\n        // don't silently bill the shared platform key once a user has\n        // brought their own. Falls back to the platform key when absent.\n        const userApiKey = await getOwnerActiveApiKey(jobUserEmail);\n        const engine =\n          deps.engine ??\n          (await resolveEngine({\n            apiKey: userApiKey ?? deps.apiKey,\n            appId: deps.appId,\n          }));\n        const model =\n          deps.model ??\n          (await getStoredModelForEngine(engine, { appId: deps.appId })) ??\n          engine.defaultModel;\n\n        // Create a chat thread for this run\n        const threadTitle = `Job: ${jobName} — ${now.toLocaleDateString()}`;\n        const thread = await createThread(jobUserEmail, { title: threadTitle });\n\n        const jobText = `[Recurring Job: ${jobName}]\\nSchedule: ${describeCron(meta.schedule)}\\n\\nExecute the following job instructions:\\n\\n${body}`;\n        const messages = [\n          {\n            role: \"user\" as const,\n            content: [{ type: \"text\" as const, text: jobText }],\n          },\n        ];\n\n        // 5-minute timeout\n        const controller = new AbortController();\n        const timeout = setTimeout(() => controller.abort(), 5 * 60 * 1000);\n\n        const events: AgentChatEvent[] = [];\n        const send = (event: AgentChatEvent) => {\n          events.push(event);\n        };\n\n        try {\n          await runAgentLoop({\n            engine,\n            model,\n            systemPrompt,\n            tools,\n            messages,\n            actions,\n            send,\n            signal: controller.signal,\n          });\n        } finally {\n          clearTimeout(timeout);\n        }\n\n        // Success — update status. Compute the next run from completion time,\n        // not the job's start time `now`: a long run could otherwise schedule a\n        // nextRun that's already in the past and re-fire immediately next tick.\n        const next = nextOccurrence(meta.schedule, new Date());\n        meta.lastStatus = \"success\";\n        meta.nextRun = next.toISOString();\n        await updateResource(resource, meta, body);\n\n        console.log(\n          `[recurring-jobs] Job \"${jobName}\" completed. Next run: ${meta.nextRun}`,\n        );\n      } catch (err: any) {\n        // Error — update status. Use completion time (see success path).\n        const next = nextOccurrence(meta.schedule, new Date());\n        meta.lastStatus = \"error\";\n        meta.lastError = err?.message?.slice(0, 200) || \"Unknown error\";\n        meta.nextRun = next.toISOString();\n        await updateResource(resource, meta, body);\n\n        console.error(\n          `[recurring-jobs] Job \"${jobName}\" failed:`,\n          err?.message,\n        );\n      }\n    },\n  ); // end runWithRequestContext\n}\n\nasync function updateResource(\n  resource: Resource,\n  meta: JobFrontmatter,\n  body: string,\n): Promise<void> {\n  const content = buildJobContent(meta, body);\n  await resourcePut(resource.owner, resource.path, content);\n}\n"]}

package/dist/mcp/build-server.d.ts

@@ -174,6 +174,7 @@ export declare function createMCPServerForRequest(config: MCPConfig, identity: M
     };
 }>>;
 export declare function getAccessTokens(): string[];
+export declare function getBearerToken(authHeader: string | undefined): string | undefined;
 /**
  * Verify the inbound auth header. Returns:
  *   - { authed: true, identity } when verified — `identity` is derived from

package/dist/mcp/build-server.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"build-server.d.ts","sourceRoot":"","sources":["../../src/mcp/build-server.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAsChE,MAAM,WAAW,SAAS;IACxB,wCAAwC;IACxC,IAAI,EAAE,MAAM,CAAC;IACb,8EAA8E;IAC9E,KAAK,CAAC,EAAE,MAAM,CAAC;IACf;;;;;;;OAOG;IACH,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,sBAAsB;IACtB,WAAW,EAAE,MAAM,CAAC;IACpB,6EAA6E;IAC7E,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,oEAAoE;IACpE,KAAK,CAAC,EAAE,KAAK,CAAC;QACZ,GAAG,EAAE,MAAM,CAAC;QACZ,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;QACjB,KAAK,CAAC,EAAE,OAAO,GAAG,MAAM,CAAC;KAC1B,CAAC,CAAC;IACH,uCAAuC;IACvC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,mDAAmD;IACnD,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;IACrC;;;;;;;;;;;OAWG;IACH,iBAAiB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;IAChD,qEAAqE;IACrE,QAAQ,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;IAChD;;;;;;OAMG;IACH,oBAAoB,CAAC,EAAE,OAAO,CAAC;CAChC;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,iBAAiB;IAChC,SAAS,EAAE,MAAM,GAAG,SAAS,CAAC;IAC9B,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC3B,SAAS,EAAE,MAAM,GAAG,SAAS,CAAC;IAC9B,gEAAgE;IAChE,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;IACvB,gEAAgE;IAChE,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED;;;kEAGkE;AAClE,MAAM,WAAW,cAAc;IAC7B,+DAA+D;IAC/D,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,iEAAiE;IACjE,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,yEAAyE;IACzE,MAAM,CAAC,EAAE,SAAS,GAAG,SAAS,GAAG,UAAU,CAAC;IAC5C;;;;OAIG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,uEAAuE;IACvE,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,6EAA6E;IAC7E,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB;;;;;;;OAOG;IACH,WAAW,CAAC,EAAE,OAAO,CAAC;CACvB;AA2aD;;;;GAIG;AACH,wBAAgB,kBAAkB,CAChC,KAAK,EAAE,WAAW,EAClB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,EACzB,MAAM,EAAE,GAAG,EACX,IAAI,EAAE,cAAc,GAAG,SAAS,GAC/B;IACD,KAAK,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;IACvC,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACjC,CAyBA;AAyeD;;;;;;;GAOG;AACH,wBAAsB,yBAAyB,CAC7C,MAAM,EAAE,SAAS,EACjB,QAAQ,EAAE,iBAAiB,GAAG,SAAS,EACvC,WAAW,CAAC,EAAE,cAAc;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;IAyb7B;AAOD,wBAAgB,eAAe,IAAI,MAAM,EAAE,CAc1C;AA+GD;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAsB,UAAU,CAC9B,UAAU,EAAE,MAAM,GAAG,SAAS,EAC9B,gBAAgB,CAAC,EAAE,MAAM,GAAG,SAAS,EACrC,OAAO,GAAE;IAAE,YAAY,CAAC,EAAE,OAAO,CAAC;IAAC,WAAW,CAAC,EAAE,MAAM,CAAA;CAAO,GAC7D,OAAO,CAAC;IACT,MAAM,EAAE,OAAO,CAAC;IAChB,QAAQ,CAAC,EAAE,iBAAiB,CAAC;IAC7B;;;;;;OAMG;IACH,WAAW,CAAC,EAAE,OAAO,CAAC;CACvB,CAAC,CA6HD;AAED,wBAAsB,sBAAsB,CAC1C,SAAS,EAAE,MAAM,GAAG,SAAS,GAC5B,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAS7B"}
+{"version":3,"file":"build-server.d.ts","sourceRoot":"","sources":["../../src/mcp/build-server.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAsChE,MAAM,WAAW,SAAS;IACxB,wCAAwC;IACxC,IAAI,EAAE,MAAM,CAAC;IACb,8EAA8E;IAC9E,KAAK,CAAC,EAAE,MAAM,CAAC;IACf;;;;;;;OAOG;IACH,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,sBAAsB;IACtB,WAAW,EAAE,MAAM,CAAC;IACpB,6EAA6E;IAC7E,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,oEAAoE;IACpE,KAAK,CAAC,EAAE,KAAK,CAAC;QACZ,GAAG,EAAE,MAAM,CAAC;QACZ,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;QACjB,KAAK,CAAC,EAAE,OAAO,GAAG,MAAM,CAAC;KAC1B,CAAC,CAAC;IACH,uCAAuC;IACvC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,mDAAmD;IACnD,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;IACrC;;;;;;;;;;;OAWG;IACH,iBAAiB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;IAChD,qEAAqE;IACrE,QAAQ,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;IAChD;;;;;;OAMG;IACH,oBAAoB,CAAC,EAAE,OAAO,CAAC;CAChC;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,iBAAiB;IAChC,SAAS,EAAE,MAAM,GAAG,SAAS,CAAC;IAC9B,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC3B,SAAS,EAAE,MAAM,GAAG,SAAS,CAAC;IAC9B,gEAAgE;IAChE,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;IACvB,gEAAgE;IAChE,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED;;;kEAGkE;AAClE,MAAM,WAAW,cAAc;IAC7B,+DAA+D;IAC/D,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,iEAAiE;IACjE,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,yEAAyE;IACzE,MAAM,CAAC,EAAE,SAAS,GAAG,SAAS,GAAG,UAAU,CAAC;IAC5C;;;;OAIG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,uEAAuE;IACvE,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,6EAA6E;IAC7E,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB;;;;;;;OAOG;IACH,WAAW,CAAC,EAAE,OAAO,CAAC;CACvB;AA2aD;;;;GAIG;AACH,wBAAgB,kBAAkB,CAChC,KAAK,EAAE,WAAW,EAClB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,EACzB,MAAM,EAAE,GAAG,EACX,IAAI,EAAE,cAAc,GAAG,SAAS,GAC/B;IACD,KAAK,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;IACvC,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACjC,CAyBA;AAyeD;;;;;;;GAOG;AACH,wBAAsB,yBAAyB,CAC7C,MAAM,EAAE,SAAS,EACjB,QAAQ,EAAE,iBAAiB,GAAG,SAAS,EACvC,WAAW,CAAC,EAAE,cAAc;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;IAyb7B;AAOD,wBAAgB,eAAe,IAAI,MAAM,EAAE,CAc1C;AAyCD,wBAAgB,cAAc,CAC5B,UAAU,EAAE,MAAM,GAAG,SAAS,GAC7B,MAAM,GAAG,SAAS,CAIpB;AAwED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAsB,UAAU,CAC9B,UAAU,EAAE,MAAM,GAAG,SAAS,EAC9B,gBAAgB,CAAC,EAAE,MAAM,GAAG,SAAS,EACrC,OAAO,GAAE;IAAE,YAAY,CAAC,EAAE,OAAO,CAAC;IAAC,WAAW,CAAC,EAAE,MAAM,CAAA;CAAO,GAC7D,OAAO,CAAC;IACT,MAAM,EAAE,OAAO,CAAC;IAChB,QAAQ,CAAC,EAAE,iBAAiB,CAAC;IAC7B;;;;;;OAMG;IACH,WAAW,CAAC,EAAE,OAAO,CAAC;CACvB,CAAC,CA2HD;AAED,wBAAsB,sBAAsB,CAC1C,SAAS,EAAE,MAAM,GAAG,SAAS,GAC5B,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAS7B"}

package/dist/mcp/build-server.js

@@ -1206,6 +1206,12 @@ function deriveStaticTokenIdentity(ownerEmailHeader) {
         return undefined;
     return { userEmail: owner, orgDomain: undefined };
 }
+export function getBearerToken(authHeader) {
+    if (!authHeader)
+        return undefined;
+    const match = /^Bearer\s+(.+)$/i.exec(authHeader.trim());
+    return match?.[1]?.trim() || undefined;
+}
 function addSecretCandidate(candidates, secret) {
     const trimmed = secret?.trim();
     if (!trimmed || candidates.includes(trimmed))
@@ -1288,9 +1294,7 @@ export async function verifyAuth(authHeader, ownerEmailHeader, options = {}) {
     // owner hint there so the local install/connect flow stays tenant-scoped.
     const accessTokens = getAccessTokens();
     const hasA2ASecret = !!process.env.A2A_SECRET?.trim();
-    const token = authHeader?.startsWith("Bearer ")
-        ? authHeader.slice(7)
-        : undefined;
+    const token = getBearerToken(authHeader);
     if (token) {
         const oauthIdentity = await verifyMcpOAuthAccessToken(token, options.resourceUrl);
         if (oauthIdentity) {