@agent-native/core 0.85.7 → 0.86.0

package/dist/db/migrations.js.map

@@ -1 +1 @@
-{"version":3,"file":"migrations.js","sourceRoot":"","sources":["../../src/db/migrations.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,SAAS,EACT,YAAY,EACZ,UAAU,EACV,UAAU,EACV,uBAAuB,EACvB,eAAe,GAEhB,MAAM,aAAa,CAAC;AAErB,8EAA8E;AAC9E,4EAA4E;AAC5E,EAAE;AACF,wEAAwE;AACxE,0EAA0E;AAC1E,oEAAoE;AACpE,uEAAuE;AACvE,mEAAmE;AACnE,2EAA2E;AAC3E,uEAAuE;AACvE,wEAAwE;AACxE,8EAA8E;AAE9E,IAAI,qBAAqB,GAA2B,IAAI,CAAC;AACzD,IAAI,sBAAsB,GAAG,CAAC,CAAC;AAE/B,KAAK,UAAU,oBAAoB;IACjC,IAAI,CAAC,qBAAqB,EAAE,CAAC;QAC3B,qBAAqB,GAAG,YAAY,CAAC,EAAE,GAAG,EAAE,uBAAuB,EAAE,EAAE,CAAC,CAAC;IAC3E,CAAC;IACD,sBAAsB,EAAE,CAAC;IACzB,OAAO,qBAAqB,CAAC;AAC/B,CAAC;AAED,KAAK,UAAU,oBAAoB;IACjC,sBAAsB,EAAE,CAAC;IACzB,IAAI,sBAAsB,GAAG,CAAC;QAAE,OAAO;IACvC,sEAAsE;IACtE,MAAM,WAAW,GAAG,qBAAqB,CAAC;IAC1C,qBAAqB,GAAG,IAAI,CAAC;IAC7B,sBAAsB,GAAG,CAAC,CAAC;IAC3B,IAAI,CAAC,WAAW;QAAE,OAAO;IACzB,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,WAAW,CAAC;QAC/B,MAAM,IAAI,CAAC,KAAK,EAAE,EAAE,CAAC;IACvB,CAAC;IAAC,MAAM,CAAC;QACP,wEAAwE;QACxE,8DAA8D;IAChE,CAAC;AACH,CAAC;AAID;;;GAGG;AACH,SAAS,mBAAmB,CAAC,GAAW;IACtC,OAAO,GAAG;SACP,OAAO,CAAC,8BAA8B,EAAE,mBAAmB,CAAC;SAC5D,OAAO,CAAC,qBAAqB,EAAE,EAAE,CAAC;SAClC,OAAO,CAAC,eAAe,EAAE,QAAQ,CAAC,CAAC;AACxC,CAAC;AAED,MAAM,2BAA2B,GAAG,mCAAmC,CAAC;AAExE;;;;;;;;GAQG;AACH,SAAS,iBAAiB,CAAC,GAAW;IACpC,OAAO,GAAG,CAAC,OAAO,CAAC,oCAAoC,EAAE,YAAY,CAAC,CAAC;AACzE,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,sBAAsB,CAAC,GAAY;IACjD,MAAM,GAAG,GAAI,GAAyB,EAAE,OAAO,IAAI,EAAE,CAAC;IACtD,OAAO,CACL,wBAAwB,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,2BAA2B,CAAC,IAAI,CAAC,GAAG,CAAC,CAC5E,CAAC;AACJ,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,iBAAiB,CAAC,GAAY;IAC5C,MAAM,CAAC,GAAG,GAAsD,CAAC;IACjE,IAAI,CAAC,EAAE,IAAI,KAAK,OAAO;QAAE,OAAO,IAAI,CAAC;IACrC,MAAM,GAAG,GAAG,CAAC,EAAE,OAAO,IAAI,EAAE,CAAC;IAC7B,OAAO,CACL,mBAAmB,CAAC,IAAI,CAAC,GAAG,CAAC;QAC7B,oBAAoB,CAAC,IAAI,CAAC,GAAG,CAAC;QAC9B,yBAAyB,CAAC,IAAI,CAAC,GAAG,CAAC,CACpC,CAAC;AACJ,CAAC;AAED;;;;;;;;;GASG;AACH,SAAS,kBAAkB,CAAC,GAAW;IACrC,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,IAAI,GAAG,GAAG,EAAE,CAAC;IACb,IAAI,CAAC,GAAG,CAAC,CAAC;IACV,IAAI,QAAQ,GAAG,KAAK,CAAC;IACrB,OAAO,CAAC,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC;QACtB,MAAM,EAAE,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC;QAClB,MAAM,IAAI,GAAG,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QACxB,IAAI,CAAC,QAAQ,IAAI,EAAE,KAAK,GAAG,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;YAC5C,sBAAsB;YACtB,OAAO,CAAC,GAAG,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,IAAI;gBAAE,CAAC,EAAE,CAAC;YAC9C,SAAS;QACX,CAAC;QACD,IAAI,EAAE,KAAK,GAAG,EAAE,CAAC;YACf,GAAG,IAAI,EAAE,CAAC;YACV,IAAI,QAAQ,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;gBAC7B,GAAG,IAAI,IAAI,CAAC;gBACZ,CAAC,IAAI,CAAC,CAAC;gBACP,SAAS;YACX,CAAC;YACD,QAAQ,GAAG,CAAC,QAAQ,CAAC;YACrB,CAAC,EAAE,CAAC;YACJ,SAAS;QACX,CAAC;QACD,IAAI,EAAE,KAAK,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC;YAC5B,MAAM,OAAO,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;YAC3B,IAAI,OAAO;gBAAE,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YAC/B,GAAG,GAAG,EAAE,CAAC;YACT,CAAC,EAAE,CAAC;YACJ,SAAS;QACX,CAAC;QACD,GAAG,IAAI,EAAE,CAAC;QACV,CAAC,EAAE,CAAC;IACN,CAAC;IACD,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;IACxB,IAAI,IAAI;QAAE,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACzB,OAAO,GAAG,CAAC;AACb,CAAC;AAoCD,SAAS,mBAAmB,CAAC,GAAiB,EAAE,EAAW;IACzD,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,OAAO,GAAG,CAAC;IACxC,MAAM,GAAG,GAAG,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC;IAC3C,OAAO,GAAG,IAAI,IAAI,CAAC;AACrB,CAAC;AAED,MAAM,UAAU,aAAa,CAC3B,UAAiC,EACjC,OAA6B;IAE7B,MAAM,KAAK,GAAG,OAAO,EAAE,KAAK,CAAC;IAC7B,IACE,CAAC,KAAK;QACN,OAAO,KAAK,KAAK,QAAQ;QACzB,CAAC,0BAA0B,CAAC,IAAI,CAAC,KAAK,CAAC,EACvC,CAAC;QACD,MAAM,IAAI,KAAK,CACb,+EAA+E;YAC7E,kFAAkF;YAClF,6DAA6D,CAChE,CAAC;IACJ,CAAC;IACD,OAAO,KAAK,IAAI,EAAE;QAChB,IAAI,CAAC;YACH,iEAAiE;YACjE,MAAM,EAAE,GAAG,UAAU,EAAE,KAAK,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;YAClE,IAAI,EAAE,EAAE,CAAC;gBACP,MAAM,EAAE;qBACL,OAAO,CACN,8BAA8B,KAAK,gCAAgC,CACpE;qBACA,GAAG,EAAE,CAAC;gBACT,MAAM,QAAQ,GAAG,MAAM,EAAE;qBACtB,OAAO,CAAC,iCAAiC,KAAK,EAAE,CAAC;qBACjD,KAAK,EAAkB,CAAC;gBAC3B,MAAM,OAAO,GAAI,QAAQ,EAAE,CAAY,IAAI,CAAC,CAAC;gBAE7C,KAAK,MAAM,CAAC,IAAI,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,GAAG,OAAO,CAAC,EAAE,CAAC;oBAC9D,IAAI,CAAC;wBACH,0BAA0B;wBAC1B,MAAM,GAAG,GAAG,mBAAmB,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;wBAC9C,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;4BAChB,MAAM,EAAE;iCACL,OAAO,CAAC,yBAAyB,KAAK,aAAa,CAAC;iCACpD,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC;iCACf,GAAG,EAAE,CAAC;4BACT,SAAS;wBACX,CAAC;wBACD,MAAM,kBAAkB,GAAG,kBAAkB,CAAC,GAAG,CAAC,CAAC;wBACnD,MAAM,UAAU,GAAG,kBAAkB,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;4BACnD,GAAG,EAAE,iBAAiB,CAAC,IAAI,CAAC;4BAC5B,cAAc,EAAE,2BAA2B,CAAC,IAAI,CAAC,IAAI,CAAC;yBACvD,CAAC,CAAC,CAAC;wBACJ,MAAM,cAAc,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC;wBAChE,IAAI,cAAc,EAAE,CAAC;4BACnB,4DAA4D;4BAC5D,gDAAgD;4BAChD,6DAA6D;4BAC7D,0DAA0D;4BAC1D,oDAAoD;4BACpD,KAAK,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,UAAU,EAAE,CAAC;gCACvD,IAAI,CAAC;oCACH,MAAM,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,CAAC;gCAC/B,CAAC;gCAAC,OAAO,GAAG,EAAE,CAAC;oCACb,IAAI,cAAc,IAAI,sBAAsB,CAAC,GAAG,CAAC;wCAAE,SAAS;oCAC5D,MAAM,GAAG,CAAC;gCACZ,CAAC;4BACH,CAAC;4BACD,MAAM,EAAE;iCACL,OAAO,CAAC,yBAAyB,KAAK,aAAa,CAAC;iCACpD,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC;iCACf,GAAG,EAAE,CAAC;wBACX,CAAC;6BAAM,CAAC;4BACN,4DAA4D;4BAC5D,4DAA4D;4BAC5D,6DAA6D;4BAC7D,MAAM,EAAE,CAAC,KAAK,CAAC;gCACb,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;gCAC3C,EAAE;qCACC,OAAO,CAAC,yBAAyB,KAAK,aAAa,CAAC;qCACpD,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC;6BACnB,CAAC,CAAC;wBACL,CAAC;wBACD,OAAO,CAAC,GAAG,CACT,2BAA2B,CAAC,CAAC,OAAO,KAAK,UAAU,CAAC,MAAM,aAAa,UAAU,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,GAAG,CAC7G,CAAC;oBACJ,CAAC;oBAAC,OAAO,GAAG,EAAE,CAAC;wBACb,OAAO,CAAC,KAAK,CACX,mBAAmB,CAAC,CAAC,OAAO,UAAU,EACrC,GAAa,CAAC,OAAO,EACtB,QAAQ,EACR,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,CACtB,CAAC;wBACF,MAAM,GAAG,CAAC;oBACZ,CAAC;gBACH,CAAC;gBACD,OAAO;YACT,CAAC;YAED,+CAA+C;YAC/C,MAAM,EAAE,GAAG,UAAU,EAAE,CAAC;YAExB,8EAA8E;YAC9E,8EAA8E;YAC9E,0CAA0C;YAC1C,EAAE;YACF,8EAA8E;YAC9E,sEAAsE;YACtE,0EAA0E;YAC1E,4EAA4E;YAC5E,6DAA6D;YAC7D,EAAE;YACF,2EAA2E;YAC3E,yEAAyE;YACzE,6EAA6E;YAC7E,4EAA4E;YAC5E,2EAA2E;YAC3E,0EAA0E;YAC1E,qCAAqC;YACrC,8EAA8E;YAE9E,IAAI,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC,mDAAmD;YAErE,IAAI,EAAE,EAAE,CAAC;gBACP,IAAI,CAAC;oBACH,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,SAAS,EAAE,CAAC,OAAO,CACxC,iCAAiC,KAAK,EAAE,CACzC,CAAC;oBACF,OAAO,GAAI,IAAI,CAAC,CAAC,CAAC,EAAE,CAAY,IAAI,CAAC,CAAC;gBACxC,CAAC;gBAAC,MAAM,CAAC;oBACP,wEAAwE;gBAC1E,CAAC;YACH,CAAC;YAED,8EAA8E;YAC9E,+EAA+E;YAC/E,MAAM,WAAW,GAAG,EAAE;gBACpB,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,GAAG,OAAO,CAAC;gBAC/C,CAAC,CAAC,IAAI,CAAC,CAAC,6CAA6C;YAEvD,oFAAoF;YACpF,IAAI,EAAE,IAAI,WAAW,KAAK,IAAI,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAC3D,OAAO;YACT,CAAC;YAED,gDAAgD;YAChD,+EAA+E;YAC/E,oEAAoE;YACpE,MAAM,IAAI,GAAG,EAAE,CAAC,CAAC,CAAC,MAAM,oBAAoB,EAAE,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC;YAE7D,IAAI,CAAC;gBACH,uEAAuE;gBACvE,+EAA+E;gBAC/E,MAAM,eAAe,CACnB,GAAG,EAAE,CACH,IAAI,CAAC,OAAO,CACV,8BAA8B,KAAK,gCAAgC,CACpE,EACH,EAAE,WAAW,EAAE,CAAC,EAAE,WAAW,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,CACrD,CAAC;gBAEF,uEAAuE;gBACvE,gFAAgF;gBAChF,IAAI,CAAC,EAAE,EAAE,CAAC;oBACR,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,CAAC,OAAO,CACjC,iCAAiC,KAAK,EAAE,CACzC,CAAC;oBACF,OAAO,GAAI,IAAI,CAAC,CAAC,CAAC,EAAE,CAAY,IAAI,CAAC,CAAC;gBACxC,CAAC;qBAAM,IAAI,OAAO,KAAK,CAAC,CAAC,EAAE,CAAC;oBAC1B,0EAA0E;oBAC1E,yEAAyE;oBACzE,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,CAAC,OAAO,CACjC,iCAAiC,KAAK,EAAE,CACzC,CAAC;oBACF,OAAO,GAAI,IAAI,CAAC,CAAC,CAAC,EAAE,CAAY,IAAI,CAAC,CAAC;gBACxC,CAAC;gBAED,MAAM,SAAS,GAAG,EAAE;oBAClB,CAAC,CAAC,eAAe,KAAK,oCAAoC;oBAC1D,CAAC,CAAC,yBAAyB,KAAK,aAAa,CAAC;gBAEhD,MAAM,OAAO,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,GAAG,OAAO,CAAC,CAAC;gBAC9D,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBACvB,OAAO,CAAC,GAAG,CACT,iBAAiB,OAAO,CAAC,MAAM,oBAAoB,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,eAAe,GAAG,CACxF,CAAC;gBACJ,CAAC;gBAED,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;oBACxB,MAAM,GAAG,GAAG,mBAAmB,CAAC,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;oBAC3C,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;wBAChB,mEAAmE;wBACnE,wCAAwC;wBACxC,MAAM,IAAI,CAAC,OAAO,CAAC,EAAE,GAAG,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;wBAC1D,SAAS;oBACX,CAAC;oBACD,qEAAqE;oBACrE,sEAAsE;oBACtE,iEAAiE;oBACjE,oCAAoC;oBACpC,MAAM,kBAAkB,GAAG,kBAAkB,CAAC,GAAG,CAAC,CAAC;oBACnD,MAAM,UAAU,GAAG,kBAAkB,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;wBACnD,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC,mBAAmB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,iBAAiB,CAAC,IAAI,CAAC;wBAC7D,cAAc,EAAE,2BAA2B,CAAC,IAAI,CAAC,IAAI,CAAC;qBACvD,CAAC,CAAC,CAAC;oBACJ,IAAI,WAAW,GAAG,EAAE,CAAC;oBACrB,IAAI,CAAC;wBACH,KAAK,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,UAAU,EAAE,CAAC;4BACvD,WAAW,GAAG,IAAI,CAAC;4BACnB,IAAI,CAAC;gCACH,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;4BAC3B,CAAC;4BAAC,OAAO,GAAG,EAAE,CAAC;gCACb,IAAI,CAAC,EAAE,IAAI,cAAc,IAAI,sBAAsB,CAAC,GAAG,CAAC,EAAE,CAAC;oCACzD,wDAAwD;oCACxD,SAAS;gCACX,CAAC;gCACD,MAAM,GAAG,CAAC;4BACZ,CAAC;wBACH,CAAC;wBACD,MAAM,IAAI,CAAC,OAAO,CAAC,EAAE,GAAG,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;wBAC1D,OAAO,CAAC,GAAG,CACT,2BAA2B,CAAC,CAAC,OAAO,KAAK,UAAU,CAAC,MAAM,aAAa,UAAU,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,GAAG,CAC7G,CAAC;oBACJ,CAAC;oBAAC,OAAO,GAAG,EAAE,CAAC;wBACb,IAAI,EAAE,IAAI,iBAAiB,CAAC,GAAG,CAAC,EAAE,CAAC;4BACjC,gEAAgE;4BAChE,mEAAmE;4BACnE,kEAAkE;4BAClE,qEAAqE;4BACrE,sEAAsE;4BACtE,oEAAoE;4BACpE,mEAAmE;4BACnE,+DAA+D;4BAC/D,OAAO,CAAC,IAAI,CACV,mBAAmB,CAAC,CAAC,OAAO,sCAAuC,GAAa,CAAC,OAAO,IAAI;gCAC1F,+CAA+C;gCAC/C,yDAAyD;gCACzD,mHAAmH,EACrH,cAAc,EACd,WAAW,CACZ,CAAC;4BACF,MAAM;wBACR,CAAC;wBACD,OAAO,CAAC,KAAK,CACX,mBAAmB,CAAC,CAAC,OAAO,UAAU,EACrC,GAAa,CAAC,OAAO,EACtB,cAAc,EACd,WAAW,CACZ,CAAC;wBACF,MAAM,GAAG,CAAC;oBACZ,CAAC;gBACH,CAAC;YACH,CAAC;oBAAS,CAAC;gBACT,2EAA2E;gBAC3E,6EAA6E;gBAC7E,+EAA+E;gBAC/E,IAAI,EAAE;oBAAE,MAAM,oBAAoB,EAAE,CAAC;YACvC,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,KAAK,CAAC,wBAAwB,EAAG,GAAa,CAAC,OAAO,CAAC,CAAC;YAChE,uEAAuE;YACvE,oEAAoE;YACpE,oEAAoE;YACpE,sEAAsE;YACtE,kEAAkE;YAClE,qDAAqD;YACrD,MAAM,YAAY,GAChB,CAAC,CAAC,UAAU,CAAC,OAAO,EAAE,GAAG,EAAE,OAAO;gBAClC,CAAC,CAAC,UAAU,CAAC,OAAO,EAAE,GAAG,EAAE,wBAAwB;gBACnD,CAAC,CAAC,UAAU,CAAC,OAAO,EAAE,GAAG,EAAE,MAAM;gBACjC,UAAU,IAAI,UAAU,CAAC;YAC3B,IAAI,OAAO,UAAU,CAAC,OAAO,EAAE,IAAI,KAAK,UAAU,IAAI,CAAC,YAAY,EAAE,CAAC;gBACpE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAClB,CAAC;QACH,CAAC;IACH,CAAC,CAAC;AACJ,CAAC","sourcesContent":["import {\n  getDbExec,\n  createDbExec,\n  isPostgres,\n  getDialect,\n  getMigrationDatabaseUrl,\n  retrySqliteBusy,\n  type DbExec,\n} from \"./client.js\";\n\n// ---------------------------------------------------------------------------\n// Shared direct-endpoint exec across concurrent migration runners per boot.\n//\n// On each serverless cold start THREE plugins call runMigrations (core,\n// org, context-xray). Without coordination each would open an independent\n// direct-endpoint Neon connection AND leave it idle for ~10 s after\n// migrations finish. We avoid that by sharing a single direct exec for\n// the duration of the migration window: the first caller opens it,\n// subsequent callers reuse the same promise, and the last caller closes it\n// via reference-counting. The exec is nulled out after the window so a\n// second cold start (e.g. after a Lambda thaw) gets a fresh connection.\n// ---------------------------------------------------------------------------\n\nlet _migrationExecPromise: Promise<DbExec> | null = null;\nlet _migrationExecRefCount = 0;\n\nasync function acquireMigrationExec(): Promise<DbExec> {\n  if (!_migrationExecPromise) {\n    _migrationExecPromise = createDbExec({ url: getMigrationDatabaseUrl() });\n  }\n  _migrationExecRefCount++;\n  return _migrationExecPromise;\n}\n\nasync function releaseMigrationExec(): Promise<void> {\n  _migrationExecRefCount--;\n  if (_migrationExecRefCount > 0) return;\n  // Last caller — close and reset so next boot gets a fresh connection.\n  const execPromise = _migrationExecPromise;\n  _migrationExecPromise = null;\n  _migrationExecRefCount = 0;\n  if (!execPromise) return;\n  try {\n    const exec = await execPromise;\n    await exec.close?.();\n  } catch {\n    // Swallow close errors — the migrations themselves already succeeded or\n    // failed; a cleanup error should not surface as a boot crash.\n  }\n}\n\ntype NitroPluginDef = (nitroApp: any) => void | Promise<void>;\n\n/**\n * Rewrite SQLite-specific SQL to Postgres-compatible equivalents.\n * Handles: datetime('now') → CURRENT_TIMESTAMP, AUTOINCREMENT → GENERATED, etc.\n */\nfunction adaptSqlForPostgres(sql: string): string {\n  return sql\n    .replace(/datetime\\s*\\(\\s*'now'\\s*\\)/gi, \"CURRENT_TIMESTAMP\")\n    .replace(/\\bAUTOINCREMENT\\b/gi, \"\")\n    .replace(/\\bINTEGER\\b/gi, \"BIGINT\");\n}\n\nconst IF_NOT_EXISTS_ADD_COLUMN_RE = /ADD\\s+COLUMN\\s+IF\\s+NOT\\s+EXISTS/i;\n\n/**\n * Strip Postgres-only syntax that SQLite doesn't support.\n * Handles: ALTER TABLE ... ADD COLUMN IF NOT EXISTS → ADD COLUMN\n *\n * Note: SQLite does not have a native equivalent, so the idempotent\n * semantic is emulated at the executor level by swallowing the\n * \"duplicate column name\" error for statements that originally carried\n * the clause. See `hadIfNotExists` tracking in the run loop.\n */\nfunction adaptSqlForSqlite(sql: string): string {\n  return sql.replace(/ADD\\s+COLUMN\\s+IF\\s+NOT\\s+EXISTS/gi, \"ADD COLUMN\");\n}\n\n/**\n * True when an error from `ALTER TABLE ... ADD COLUMN` indicates the\n * column already existed. Recognizes both SQLite (\"duplicate column\n * name\") and Postgres (\"column ... already exists\" — exact text varies\n * by error code 42701, but the substring is stable). Exported so other\n * idempotent column-upgrade loops in the codebase don't reinvent this\n * regex with subtly different shapes.\n */\nexport function isDuplicateColumnError(err: unknown): boolean {\n  const msg = (err as Error | undefined)?.message ?? \"\";\n  return (\n    /duplicate column name/i.test(msg) || /column .* already exists/i.test(msg)\n  );\n}\n\n/**\n * True when a migration statement failed because the connected DB ROLE lacks\n * privilege — e.g. a permission-limited dev/replica role that doesn't own the\n * table. Postgres raises SQLSTATE 42501 (\"insufficient_privilege\", routine\n * aclcheck_error, message \"must be owner of table …\"). We treat these as\n * NON-FATAL so a perms-limited database can't crash-loop the whole server: the\n * migration is skipped (left unrecorded) and a properly-privileged role applies\n * it later. Production, where the role owns its tables, never hits this path.\n */\nexport function isPermissionError(err: unknown): boolean {\n  const e = err as { code?: string; message?: string } | undefined;\n  if (e?.code === \"42501\") return true;\n  const msg = e?.message ?? \"\";\n  return (\n    /must be owner of/i.test(msg) ||\n    /permission denied/i.test(msg) ||\n    /insufficient privilege/i.test(msg)\n  );\n}\n\n/**\n * Split a multi-statement SQL blob into individual statements.\n *\n * libsql's `execute(sql)` only runs the first statement in a multi-statement\n * string. This splitter is intentionally simple: it respects single-quoted\n * string literals (with `''` escaping) and `--` line comments, and splits on\n * top-level `;`. It does NOT attempt to parse `$$`-quoted Postgres function\n * bodies — migrations that define functions/triggers with `;` inside bodies\n * should pass a single-statement migration per entry instead.\n */\nfunction splitSqlStatements(sql: string): string[] {\n  const out: string[] = [];\n  let buf = \"\";\n  let i = 0;\n  let inSingle = false;\n  while (i < sql.length) {\n    const ch = sql[i];\n    const next = sql[i + 1];\n    if (!inSingle && ch === \"-\" && next === \"-\") {\n      // Skip to end of line\n      while (i < sql.length && sql[i] !== \"\\n\") i++;\n      continue;\n    }\n    if (ch === \"'\") {\n      buf += ch;\n      if (inSingle && next === \"'\") {\n        buf += next;\n        i += 2;\n        continue;\n      }\n      inSingle = !inSingle;\n      i++;\n      continue;\n    }\n    if (ch === \";\" && !inSingle) {\n      const trimmed = buf.trim();\n      if (trimmed) out.push(trimmed);\n      buf = \"\";\n      i++;\n      continue;\n    }\n    buf += ch;\n    i++;\n  }\n  const tail = buf.trim();\n  if (tail) out.push(tail);\n  return out;\n}\n\nexport interface RunMigrationsOptions {\n  /**\n   * Name of the migrations bookkeeping table. REQUIRED — there is intentionally\n   * no default. Two templates that share a database (e.g. via the same Neon URL)\n   * each have their own version space starting at v1, and a single shared\n   * `_migrations` table will silently skip the second template's migrations if\n   * the first has already advanced past those version numbers. This caused the\n   * design template's migrations to be skipped entirely on a Neon DB that\n   * slides had already populated up to v15 (PR #320 era).\n   *\n   * Use one bookkeeping table per template, e.g. `slides_migrations`. Core\n   * feature plugins (e.g. the org module) follow the same convention with\n   * their own prefix, e.g. `_org_migrations`.\n   */\n  table: string;\n}\n\n/**\n * A single migration entry.\n *\n * `sql` can be a string (runs on every dialect) or an object with dialect\n * keys for dialect-gated SQL. Useful when Postgres needs an ALTER that\n * SQLite can't parse.\n *\n *   { version: 14, sql: { postgres: \"ALTER TABLE …\" } }  // no-op on sqlite\n *   { version: 15, sql: { sqlite: \"…\", postgres: \"…\" } } // both dialects\n */\nexport type MigrationSql = string | { postgres?: string; sqlite?: string };\n\nexport interface MigrationEntry {\n  version: number;\n  sql: MigrationSql;\n}\n\nfunction resolveMigrationSql(sql: MigrationSql, pg: boolean): string | null {\n  if (typeof sql === \"string\") return sql;\n  const raw = pg ? sql.postgres : sql.sqlite;\n  return raw ?? null;\n}\n\nexport function runMigrations(\n  migrations: Array<MigrationEntry>,\n  options: RunMigrationsOptions,\n): NitroPluginDef {\n  const table = options?.table;\n  if (\n    !table ||\n    typeof table !== \"string\" ||\n    !/^[A-Za-z_][A-Za-z0-9_]*$/.test(table)\n  ) {\n    throw new Error(\n      \"runMigrations: `table` option is required and must be a valid SQL identifier \" +\n        '(e.g. `{ table: \"slides_migrations\" }`). See packages/core/src/db/migrations.ts ' +\n        \"for why this is required (shared-DB version-collision bug).\",\n    );\n  }\n  return async () => {\n    try {\n      // Check for Cloudflare D1 binding (only if DATABASE_URL not set)\n      const d1 = getDialect() === \"d1\" ? globalThis.__cf_env?.DB : null;\n      if (d1) {\n        await d1\n          .prepare(\n            `CREATE TABLE IF NOT EXISTS ${table} (version INTEGER PRIMARY KEY)`,\n          )\n          .run();\n        const firstRow = await d1\n          .prepare(`SELECT MAX(version) as v FROM ${table}`)\n          .first<{ v?: number }>();\n        const current = (firstRow?.v as number) ?? 0;\n\n        for (const m of migrations.filter((m) => m.version > current)) {\n          try {\n            // D1 is SQLite-compatible\n            const raw = resolveMigrationSql(m.sql, false);\n            if (raw == null) {\n              await d1\n                .prepare(`INSERT OR IGNORE INTO ${table} VALUES (?)`)\n                .bind(m.version)\n                .run();\n              continue;\n            }\n            const originalStatements = splitSqlStatements(raw);\n            const statements = originalStatements.map((orig) => ({\n              sql: adaptSqlForSqlite(orig),\n              hadIfNotExists: IF_NOT_EXISTS_ADD_COLUMN_RE.test(orig),\n            }));\n            const hasIfNotExists = statements.some((s) => s.hadIfNotExists);\n            if (hasIfNotExists) {\n              // Per-statement path: we need to swallow \"duplicate column\"\n              // errors for statements that originally carried\n              // `ADD COLUMN IF NOT EXISTS`, which a batch() can't express.\n              // Loses atomicity, but the idempotent-ADD-COLUMN semantic\n              // means a partial re-run resolves cleanly on retry.\n              for (const { sql: stmt, hadIfNotExists } of statements) {\n                try {\n                  await d1.prepare(stmt).run();\n                } catch (err) {\n                  if (hadIfNotExists && isDuplicateColumnError(err)) continue;\n                  throw err;\n                }\n              }\n              await d1\n                .prepare(`INSERT OR IGNORE INTO ${table} VALUES (?)`)\n                .bind(m.version)\n                .run();\n            } else {\n              // Atomic batch: all statements + version-row insert land in\n              // the same transaction. A failing statement rolls the whole\n              // migration back, so we never record a half-applied version.\n              await d1.batch([\n                ...statements.map((s) => d1.prepare(s.sql)),\n                d1\n                  .prepare(`INSERT OR IGNORE INTO ${table} VALUES (?)`)\n                  .bind(m.version),\n              ]);\n            }\n            console.log(\n              `[db] Applied migration v${m.version} (${statements.length} statement${statements.length === 1 ? \"\" : \"s\"})`,\n            );\n          } catch (err) {\n            console.error(\n              `[db] Migration v${m.version} FAILED:`,\n              (err as Error).message,\n              \"\\nSQL:\",\n              JSON.stringify(m.sql),\n            );\n            throw err;\n          }\n        }\n        return;\n      }\n\n      // Generic path — works for libsql and Postgres\n      const pg = isPostgres();\n\n      // ---------------------------------------------------------------------------\n      // Fast-path: read migration state through the regular pooled singleton before\n      // opening the direct-endpoint connection.\n      //\n      // On Postgres every cold start previously opened a fresh direct-endpoint Neon\n      // connection (bypassing PgBouncer, which is needed only for DDL), ran\n      // CREATE TABLE IF NOT EXISTS + SELECT MAX(version) even with zero pending\n      // migrations, and never closed the pool — it idled for ~10 s. Three runners\n      // (core, org, context-xray) did this independently per boot.\n      //\n      // Now: use the pooled singleton (getDbExec) for the bookkeeping SELECT. If\n      // the migrations table does not yet exist we treat it as \"all migrations\n      // pending\" (current = -1). Only when there are pending migrations do we open\n      // the direct-endpoint exec (DDL is the only thing Neon's PgBouncer blocks —\n      // documented at getMigrationDatabaseUrl). The direct exec is shared across\n      // concurrent runners via acquireMigrationExec() and closed after the last\n      // caller via releaseMigrationExec().\n      // ---------------------------------------------------------------------------\n\n      let current = -1; // sentinel: \"table missing\" → treat all as pending\n\n      if (pg) {\n        try {\n          const { rows } = await getDbExec().execute(\n            `SELECT MAX(version) as v FROM ${table}`,\n          );\n          current = (rows[0]?.v as number) ?? 0;\n        } catch {\n          // Table doesn't exist yet — leave current = -1 so all migrations apply.\n        }\n      }\n\n      // For SQLite we still use getDbExec() as exec throughout (no pooler concern).\n      // For Postgres we only open the direct exec when there are pending migrations.\n      const pendingFast = pg\n        ? migrations.filter((m) => m.version > current)\n        : null; // SQLite: compute after table creation below\n\n      // Short-circuit: Postgres with nothing to do — skip the direct connection entirely.\n      if (pg && pendingFast !== null && pendingFast.length === 0) {\n        return;\n      }\n\n      // Acquire the exec appropriate for the dialect.\n      // For Postgres: the shared direct-endpoint exec (DDL-safe, closed on release).\n      // For SQLite/libsql: the singleton pooled exec (no pooler concern).\n      const exec = pg ? await acquireMigrationExec() : getDbExec();\n\n      try {\n        // Retry initial table creation — SQLITE_BUSY_RECOVERY can occur on HMR\n        // restarts when WAL files from the previous process haven't been released yet.\n        await retrySqliteBusy(\n          () =>\n            exec.execute(\n              `CREATE TABLE IF NOT EXISTS ${table} (version INTEGER PRIMARY KEY)`,\n            ),\n          { maxAttempts: 6, baseDelayMs: 1000, rethrow: true },\n        );\n\n        // For Postgres, current was already set by the fast-path SELECT above.\n        // For SQLite we run the SELECT now (via the same exec, which is the singleton).\n        if (!pg) {\n          const { rows } = await exec.execute(\n            `SELECT MAX(version) as v FROM ${table}`,\n          );\n          current = (rows[0]?.v as number) ?? 0;\n        } else if (current === -1) {\n          // Fast-path read failed (table was absent on the pooler): re-read via the\n          // direct exec now that CREATE TABLE IF NOT EXISTS has ensured it exists.\n          const { rows } = await exec.execute(\n            `SELECT MAX(version) as v FROM ${table}`,\n          );\n          current = (rows[0]?.v as number) ?? 0;\n        }\n\n        const insertSql = pg\n          ? `INSERT INTO ${table} VALUES (?) ON CONFLICT DO NOTHING`\n          : `INSERT OR IGNORE INTO ${table} VALUES (?)`;\n\n        const pending = migrations.filter((m) => m.version > current);\n        if (pending.length > 0) {\n          console.log(\n            `[db] Applying ${pending.length} migration(s) on ${pg ? \"Postgres\" : \"SQLite/libsql\"}…`,\n          );\n        }\n\n        for (const m of pending) {\n          const raw = resolveMigrationSql(m.sql, pg);\n          if (raw == null) {\n            // Dialect-gated migration with no SQL for this dialect; still mark\n            // as applied so we don't retry forever.\n            await exec.execute({ sql: insertSql, args: [m.version] });\n            continue;\n          }\n          // Split BEFORE adapting so we can remember which original statements\n          // carried `ADD COLUMN IF NOT EXISTS` — SQLite drops the clause, so we\n          // emulate the idempotent semantic by swallowing duplicate-column\n          // errors only for those statements.\n          const originalStatements = splitSqlStatements(raw);\n          const statements = originalStatements.map((orig) => ({\n            sql: pg ? adaptSqlForPostgres(orig) : adaptSqlForSqlite(orig),\n            hadIfNotExists: IF_NOT_EXISTS_ADD_COLUMN_RE.test(orig),\n          }));\n          let currentStmt = \"\";\n          try {\n            for (const { sql: stmt, hadIfNotExists } of statements) {\n              currentStmt = stmt;\n              try {\n                await exec.execute(stmt);\n              } catch (err) {\n                if (!pg && hadIfNotExists && isDuplicateColumnError(err)) {\n                  // IF NOT EXISTS semantic: column already present, skip.\n                  continue;\n                }\n                throw err;\n              }\n            }\n            await exec.execute({ sql: insertSql, args: [m.version] });\n            console.log(\n              `[db] Applied migration v${m.version} (${statements.length} statement${statements.length === 1 ? \"\" : \"s\"})`,\n            );\n          } catch (err) {\n            if (pg && isPermissionError(err)) {\n              // The connected role lacks privilege for this migration (e.g. a\n              // permission-limited dev/replica role that doesn't own the table).\n              // Don't crash-loop the whole server over it — warn and STOP here.\n              // We must NOT continue to later migrations: pending work is computed\n              // as `version > MAX(recorded version)`, so applying a later migration\n              // would advance MAX past this unrecorded one and orphan it forever.\n              // Stopping leaves MAX at the last recorded version, so a properly-\n              // privileged role resumes from this exact migration, in order.\n              console.warn(\n                `[db] Migration v${m.version} skipped — insufficient privilege: ${(err as Error).message}. ` +\n                  `Apply it with a DB role that owns the table. ` +\n                  `Halting further migrations so this one isn't orphaned. ` +\n                  `Set <APP_NAME>_DATABASE_URL (e.g. PLAN_DATABASE_URL) to a database this app owns — a file: URL uses local SQLite.`,\n                \"\\nStatement:\",\n                currentStmt,\n              );\n              break;\n            }\n            console.error(\n              `[db] Migration v${m.version} FAILED:`,\n              (err as Error).message,\n              \"\\nStatement:\",\n              currentStmt,\n            );\n            throw err;\n          }\n        }\n      } finally {\n        // Release the direct-endpoint exec (Postgres only). For SQLite getDbExec()\n        // returns the process-lifetime singleton, so releaseMigrationExec is a no-op\n        // (refCount never incremented for SQLite path, guard in releaseMigrationExec).\n        if (pg) await releaseMigrationExec();\n      }\n    } catch (err) {\n      console.error(\"[db] Migration failed:\", (err as Error).message);\n      // In local dev, hard-fail so the developer catches errors immediately.\n      // On serverless runtimes (Netlify Functions, Vercel, CF Workers) we\n      // keep the process alive — the app will return 500s for routes that\n      // depend on the missing tables, but at least other routes still work.\n      // Note: Node.js 21+ defines globalThis.navigator, so we check for\n      // serverless env vars instead of navigator presence.\n      const isServerless =\n        !!globalThis.process?.env?.NETLIFY ||\n        !!globalThis.process?.env?.AWS_LAMBDA_FUNCTION_NAME ||\n        !!globalThis.process?.env?.VERCEL ||\n        \"__cf_env\" in globalThis;\n      if (typeof globalThis.process?.exit === \"function\" && !isServerless) {\n        process.exit(1);\n      }\n    }\n  };\n}\n"]}
+{"version":3,"file":"migrations.js","sourceRoot":"","sources":["../../src/db/migrations.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,SAAS,EACT,YAAY,EACZ,UAAU,EACV,UAAU,EACV,uBAAuB,EACvB,eAAe,GAEhB,MAAM,aAAa,CAAC;AAErB,8EAA8E;AAC9E,4EAA4E;AAC5E,EAAE;AACF,wEAAwE;AACxE,0EAA0E;AAC1E,oEAAoE;AACpE,uEAAuE;AACvE,mEAAmE;AACnE,2EAA2E;AAC3E,uEAAuE;AACvE,wEAAwE;AACxE,8EAA8E;AAE9E,IAAI,qBAAqB,GAA2B,IAAI,CAAC;AACzD,IAAI,sBAAsB,GAAG,CAAC,CAAC;AAE/B,KAAK,UAAU,oBAAoB;IACjC,IAAI,CAAC,qBAAqB,EAAE,CAAC;QAC3B,MAAM,MAAM,GAAG,YAAY,CAAC,EAAE,GAAG,EAAE,uBAAuB,EAAE,EAAE,CAAC,CAAC;QAChE,qBAAqB,GAAG,MAAM,CAAC;QAC/B,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE;YAChB,oEAAoE;YACpE,kEAAkE;YAClE,sEAAsE;YACtE,2DAA2D;YAC3D,IAAI,qBAAqB,KAAK,MAAM,EAAE,CAAC;gBACrC,qBAAqB,GAAG,IAAI,CAAC;gBAC7B,sBAAsB,GAAG,CAAC,CAAC;YAC7B,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC;IACD,sBAAsB,EAAE,CAAC;IACzB,OAAO,qBAAqB,CAAC;AAC/B,CAAC;AAED,KAAK,UAAU,oBAAoB;IACjC,sBAAsB,EAAE,CAAC;IACzB,IAAI,sBAAsB,GAAG,CAAC;QAAE,OAAO;IACvC,sEAAsE;IACtE,MAAM,WAAW,GAAG,qBAAqB,CAAC;IAC1C,qBAAqB,GAAG,IAAI,CAAC;IAC7B,sBAAsB,GAAG,CAAC,CAAC;IAC3B,IAAI,CAAC,WAAW;QAAE,OAAO;IACzB,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,WAAW,CAAC;QAC/B,MAAM,IAAI,CAAC,KAAK,EAAE,EAAE,CAAC;IACvB,CAAC;IAAC,MAAM,CAAC;QACP,wEAAwE;QACxE,8DAA8D;IAChE,CAAC;AACH,CAAC;AAID;;;GAGG;AACH,SAAS,mBAAmB,CAAC,GAAW;IACtC,OAAO,GAAG;SACP,OAAO,CAAC,8BAA8B,EAAE,mBAAmB,CAAC;SAC5D,OAAO,CAAC,qBAAqB,EAAE,EAAE,CAAC;SAClC,OAAO,CAAC,eAAe,EAAE,QAAQ,CAAC,CAAC;AACxC,CAAC;AAED,MAAM,2BAA2B,GAAG,mCAAmC,CAAC;AAExE;;;;;;;;GAQG;AACH,SAAS,iBAAiB,CAAC,GAAW;IACpC,OAAO,GAAG,CAAC,OAAO,CAAC,oCAAoC,EAAE,YAAY,CAAC,CAAC;AACzE,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,sBAAsB,CAAC,GAAY;IACjD,MAAM,GAAG,GAAI,GAAyB,EAAE,OAAO,IAAI,EAAE,CAAC;IACtD,OAAO,CACL,wBAAwB,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,2BAA2B,CAAC,IAAI,CAAC,GAAG,CAAC,CAC5E,CAAC;AACJ,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,iBAAiB,CAAC,GAAY;IAC5C,MAAM,CAAC,GAAG,GAAsD,CAAC;IACjE,IAAI,CAAC,EAAE,IAAI,KAAK,OAAO;QAAE,OAAO,IAAI,CAAC;IACrC,MAAM,GAAG,GAAG,CAAC,EAAE,OAAO,IAAI,EAAE,CAAC;IAC7B,OAAO,CACL,mBAAmB,CAAC,IAAI,CAAC,GAAG,CAAC;QAC7B,oBAAoB,CAAC,IAAI,CAAC,GAAG,CAAC;QAC9B,yBAAyB,CAAC,IAAI,CAAC,GAAG,CAAC,CACpC,CAAC;AACJ,CAAC;AAED;;;;;;;;;GASG;AACH,SAAS,kBAAkB,CAAC,GAAW;IACrC,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,IAAI,GAAG,GAAG,EAAE,CAAC;IACb,IAAI,CAAC,GAAG,CAAC,CAAC;IACV,IAAI,QAAQ,GAAG,KAAK,CAAC;IACrB,OAAO,CAAC,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC;QACtB,MAAM,EAAE,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC;QAClB,MAAM,IAAI,GAAG,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QACxB,IAAI,CAAC,QAAQ,IAAI,EAAE,KAAK,GAAG,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;YAC5C,sBAAsB;YACtB,OAAO,CAAC,GAAG,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,IAAI;gBAAE,CAAC,EAAE,CAAC;YAC9C,SAAS;QACX,CAAC;QACD,IAAI,EAAE,KAAK,GAAG,EAAE,CAAC;YACf,GAAG,IAAI,EAAE,CAAC;YACV,IAAI,QAAQ,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;gBAC7B,GAAG,IAAI,IAAI,CAAC;gBACZ,CAAC,IAAI,CAAC,CAAC;gBACP,SAAS;YACX,CAAC;YACD,QAAQ,GAAG,CAAC,QAAQ,CAAC;YACrB,CAAC,EAAE,CAAC;YACJ,SAAS;QACX,CAAC;QACD,IAAI,EAAE,KAAK,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC;YAC5B,MAAM,OAAO,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;YAC3B,IAAI,OAAO;gBAAE,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YAC/B,GAAG,GAAG,EAAE,CAAC;YACT,CAAC,EAAE,CAAC;YACJ,SAAS;QACX,CAAC;QACD,GAAG,IAAI,EAAE,CAAC;QACV,CAAC,EAAE,CAAC;IACN,CAAC;IACD,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;IACxB,IAAI,IAAI;QAAE,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACzB,OAAO,GAAG,CAAC;AACb,CAAC;AAiDD,SAAS,mBAAmB,CAAC,GAAiB,EAAE,EAAW;IACzD,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,OAAO,GAAG,CAAC;IACxC,MAAM,GAAG,GAAG,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC;IAC3C,OAAO,GAAG,IAAI,IAAI,CAAC;AACrB,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAwDG;AACH,MAAM,UAAU,aAAa,CAC3B,UAAiC,EACjC,OAA6B;IAE7B,MAAM,KAAK,GAAG,OAAO,EAAE,KAAK,CAAC;IAC7B,IACE,CAAC,KAAK;QACN,OAAO,KAAK,KAAK,QAAQ;QACzB,CAAC,0BAA0B,CAAC,IAAI,CAAC,KAAK,CAAC,EACvC,CAAC;QACD,MAAM,IAAI,KAAK,CACb,+EAA+E;YAC7E,kFAAkF;YAClF,6DAA6D,CAChE,CAAC;IACJ,CAAC;IAED,2EAA2E;IAC3E,8DAA8D;IAC9D,CAAC;QACC,MAAM,SAAS,GAAG,IAAI,GAAG,EAAU,CAAC;QACpC,KAAK,MAAM,CAAC,IAAI,UAAU,EAAE,CAAC;YAC3B,IAAI,CAAC,CAAC,CAAC,IAAI;gBAAE,SAAS;YACtB,IAAI,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC1B,MAAM,IAAI,KAAK,CACb,4CAA4C,CAAC,CAAC,IAAI,sCAAsC,KAAK,KAAK;oBAChG,gEAAgE,CACnE,CAAC;YACJ,CAAC;YACD,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QACxB,CAAC;IACH,CAAC;IAED,MAAM,UAAU,GAAG,GAAG,KAAK,QAAQ,CAAC;IAEpC,OAAO,KAAK,IAAI,EAAE;QAChB,IAAI,CAAC;YACH,iEAAiE;YACjE,MAAM,EAAE,GAAG,UAAU,EAAE,KAAK,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;YAClE,IAAI,EAAE,EAAE,CAAC;gBACP,MAAM,EAAE;qBACL,OAAO,CACN,8BAA8B,KAAK,gCAAgC,CACpE;qBACA,GAAG,EAAE,CAAC;gBACT,MAAM,EAAE;qBACL,OAAO,CACN,8BAA8B,UAAU,+FAA+F,CACxI;qBACA,GAAG,EAAE,CAAC;gBACT,MAAM,QAAQ,GAAG,MAAM,EAAE;qBACtB,OAAO,CAAC,iCAAiC,KAAK,EAAE,CAAC;qBACjD,KAAK,EAAkB,CAAC;gBAC3B,MAAM,OAAO,GAAI,QAAQ,EAAE,CAAY,IAAI,CAAC,CAAC;gBAE7C,MAAM,gBAAgB,GAAG,MAAM,EAAE;qBAC9B,OAAO,CAAC,oBAAoB,UAAU,EAAE,CAAC;qBACzC,GAAG,EAAE,CAAC;gBACT,MAAM,YAAY,GAAG,IAAI,GAAG,CAC1B,CAAC,gBAAgB,EAAE,OAAO,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAC7D,CAAC;gBAEF,MAAM,OAAO,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CACtC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,GAAG,OAAO,CACzD,CAAC;gBAEF,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;oBACxB,IAAI,CAAC;wBACH,0BAA0B;wBAC1B,MAAM,GAAG,GAAG,mBAAmB,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;wBAC9C,MAAM,gBAAgB,GAAG;4BACvB,CAAC,CAAC,IAAI;gCACJ,CAAC,CAAC,EAAE;qCACC,OAAO,CACN,yBAAyB,UAAU,gCAAgC,CACpE;qCACA,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC;gCAC5B,CAAC,CAAC,IAAI;4BACR,CAAC,CAAC,OAAO,GAAG,OAAO;gCACjB,CAAC,CAAC,EAAE;qCACC,OAAO,CAAC,yBAAyB,KAAK,aAAa,CAAC;qCACpD,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC;gCACpB,CAAC,CAAC,IAAI;yBACT,CAAC,MAAM,CAAC,CAAC,CAAC,EAA8B,EAAE,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC;wBAEvD,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;4BAChB,8DAA8D;4BAC9D,uCAAuC;4BACvC,KAAK,MAAM,IAAI,IAAI,gBAAgB;gCAAE,MAAM,IAAI,CAAC,GAAG,EAAE,CAAC;4BACtD,SAAS;wBACX,CAAC;wBACD,MAAM,kBAAkB,GAAG,kBAAkB,CAAC,GAAG,CAAC,CAAC;wBACnD,MAAM,UAAU,GAAG,kBAAkB,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;4BACnD,GAAG,EAAE,iBAAiB,CAAC,IAAI,CAAC;4BAC5B,cAAc,EAAE,2BAA2B,CAAC,IAAI,CAAC,IAAI,CAAC;yBACvD,CAAC,CAAC,CAAC;wBACJ,MAAM,cAAc,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC;wBAChE,IAAI,cAAc,EAAE,CAAC;4BACnB,4DAA4D;4BAC5D,gDAAgD;4BAChD,6DAA6D;4BAC7D,0DAA0D;4BAC1D,oDAAoD;4BACpD,KAAK,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,UAAU,EAAE,CAAC;gCACvD,IAAI,CAAC;oCACH,MAAM,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,CAAC;gCAC/B,CAAC;gCAAC,OAAO,GAAG,EAAE,CAAC;oCACb,IAAI,cAAc,IAAI,sBAAsB,CAAC,GAAG,CAAC;wCAAE,SAAS;oCAC5D,MAAM,GAAG,CAAC;gCACZ,CAAC;4BACH,CAAC;4BACD,KAAK,MAAM,IAAI,IAAI,gBAAgB;gCAAE,MAAM,IAAI,CAAC,GAAG,EAAE,CAAC;wBACxD,CAAC;6BAAM,CAAC;4BACN,6DAA6D;4BAC7D,4DAA4D;4BAC5D,+DAA+D;4BAC/D,MAAM,EAAE,CAAC,KAAK,CAAC;gCACb,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;gCAC3C,GAAG,gBAAgB;6BACpB,CAAC,CAAC;wBACL,CAAC;wBACD,OAAO,CAAC,GAAG,CACT,0BAA0B,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,OAAO,KAAK,UAAU,CAAC,MAAM,aAAa,UAAU,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,GAAG,CAC5I,CAAC;oBACJ,CAAC;oBAAC,OAAO,GAAG,EAAE,CAAC;wBACb,OAAO,CAAC,KAAK,CACX,kBAAkB,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,OAAO,UAAU,EACpE,GAAa,CAAC,OAAO,EACtB,QAAQ,EACR,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,CACtB,CAAC;wBACF,MAAM,GAAG,CAAC;oBACZ,CAAC;gBACH,CAAC;gBACD,OAAO;YACT,CAAC;YAED,+CAA+C;YAC/C,MAAM,EAAE,GAAG,UAAU,EAAE,CAAC;YAExB,8EAA8E;YAC9E,8EAA8E;YAC9E,0CAA0C;YAC1C,EAAE;YACF,8EAA8E;YAC9E,sEAAsE;YACtE,0EAA0E;YAC1E,4EAA4E;YAC5E,6DAA6D;YAC7D,EAAE;YACF,2EAA2E;YAC3E,yEAAyE;YACzE,6EAA6E;YAC7E,4EAA4E;YAC5E,2EAA2E;YAC3E,0EAA0E;YAC1E,qCAAqC;YACrC,8EAA8E;YAE9E,IAAI,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC,mDAAmD;YACrE,IAAI,gBAAgB,GAAG,KAAK,CAAC,CAAC,yDAAyD;YAEvF,uEAAuE;YACvE,uEAAuE;YACvE,MAAM,kBAAkB,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;YAC1D,IAAI,YAAY,GAAG,IAAI,GAAG,EAAU,CAAC;YAErC,IAAI,EAAE,EAAE,CAAC;gBACP,IAAI,CAAC;oBACH,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,SAAS,EAAE,CAAC,OAAO,CACxC,iCAAiC,KAAK,EAAE,CACzC,CAAC;oBACF,OAAO,GAAI,IAAI,CAAC,CAAC,CAAC,EAAE,CAAY,IAAI,CAAC,CAAC;gBACxC,CAAC;gBAAC,MAAM,CAAC;oBACP,wEAAwE;gBAC1E,CAAC;gBACD,IAAI,kBAAkB,EAAE,CAAC;oBACvB,IAAI,CAAC;wBACH,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,SAAS,EAAE,CAAC,OAAO,CACxC,oBAAoB,UAAU,EAAE,CACjC,CAAC;wBACF,YAAY,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;oBAC1D,CAAC;oBAAC,MAAM,CAAC;wBACP,kEAAkE;wBAClE,0BAA0B;wBAC1B,gBAAgB,GAAG,IAAI,CAAC;oBAC1B,CAAC;gBACH,CAAC;YACH,CAAC;YAED,8EAA8E;YAC9E,+EAA+E;YAC/E,MAAM,WAAW,GAAG,EAAE;gBACpB,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CACtB,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,GAAG,OAAO,CACzD;gBACH,CAAC,CAAC,IAAI,CAAC,CAAC,6CAA6C;YAEvD,oFAAoF;YACpF,IAAI,EAAE,IAAI,WAAW,KAAK,IAAI,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAC3D,OAAO;YACT,CAAC;YAED,gDAAgD;YAChD,+EAA+E;YAC/E,oEAAoE;YACpE,MAAM,IAAI,GAAG,EAAE,CAAC,CAAC,CAAC,MAAM,oBAAoB,EAAE,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC;YAE7D,IAAI,CAAC;gBACH,uEAAuE;gBACvE,+EAA+E;gBAC/E,MAAM,eAAe,CACnB,GAAG,EAAE,CACH,IAAI,CAAC,OAAO,CACV,8BAA8B,KAAK,gCAAgC,CACpE,EACH,EAAE,WAAW,EAAE,CAAC,EAAE,WAAW,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,CACrD,CAAC;gBACF,qEAAqE;gBACrE,wEAAwE;gBACxE,sEAAsE;gBACtE,MAAM,eAAe,CACnB,GAAG,EAAE,CACH,IAAI,CAAC,OAAO,CACV,8BAA8B,UAAU,wDAAwD,EAAE,CAAC,CAAC,CAAC,kCAAkC,CAAC,CAAC,CAAC,yCAAyC,GAAG,CACvL,EACH,EAAE,WAAW,EAAE,CAAC,EAAE,WAAW,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,CACrD,CAAC;gBAEF,uEAAuE;gBACvE,gFAAgF;gBAChF,IAAI,CAAC,EAAE,EAAE,CAAC;oBACR,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,CAAC,OAAO,CACjC,iCAAiC,KAAK,EAAE,CACzC,CAAC;oBACF,OAAO,GAAI,IAAI,CAAC,CAAC,CAAC,EAAE,CAAY,IAAI,CAAC,CAAC;oBACtC,IAAI,kBAAkB,EAAE,CAAC;wBACvB,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,MAAM,IAAI,CAAC,OAAO,CAC3C,oBAAoB,UAAU,EAAE,CACjC,CAAC;wBACF,YAAY,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;oBAC9D,CAAC;gBACH,CAAC;qBAAM,IAAI,OAAO,KAAK,CAAC,CAAC,IAAI,CAAC,kBAAkB,IAAI,gBAAgB,CAAC,EAAE,CAAC;oBACtE,0EAA0E;oBAC1E,yEAAyE;oBACzE,IAAI,OAAO,KAAK,CAAC,CAAC,EAAE,CAAC;wBACnB,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,CAAC,OAAO,CACjC,iCAAiC,KAAK,EAAE,CACzC,CAAC;wBACF,OAAO,GAAI,IAAI,CAAC,CAAC,CAAC,EAAE,CAAY,IAAI,CAAC,CAAC;oBACxC,CAAC;oBACD,IAAI,kBAAkB,IAAI,gBAAgB,EAAE,CAAC;wBAC3C,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,MAAM,IAAI,CAAC,OAAO,CAC3C,oBAAoB,UAAU,EAAE,CACjC,CAAC;wBACF,YAAY,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;oBAC9D,CAAC;gBACH,CAAC;gBAED,MAAM,gBAAgB,GAAG,EAAE;oBACzB,CAAC,CAAC,eAAe,KAAK,oCAAoC;oBAC1D,CAAC,CAAC,yBAAyB,KAAK,aAAa,CAAC;gBAChD,MAAM,cAAc,GAAG,EAAE;oBACvB,CAAC,CAAC,eAAe,UAAU,uDAAuD;oBAClF,CAAC,CAAC,yBAAyB,UAAU,gCAAgC,CAAC;gBAExE,MAAM,OAAO,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CACtC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,GAAG,OAAO,CACzD,CAAC;gBACF,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBACvB,OAAO,CAAC,GAAG,CACT,iBAAiB,OAAO,CAAC,MAAM,oBAAoB,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,eAAe,GAAG,CACxF,CAAC;gBACJ,CAAC;gBAED,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;oBACxB,MAAM,GAAG,GAAG,mBAAmB,CAAC,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;oBAC3C,MAAM,KAAK,GAAG,CAAC,CAAC,IAAI;wBAClB,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,OAAO,CAAC,CAAC,OAAO,GAAG;wBAC/B,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,CAAC;oBAEpB,gEAAgE;oBAChE,mEAAmE;oBACnE,mEAAmE;oBACnE,kEAAkE;oBAClE,4DAA4D;oBAC5D,MAAM,SAAS,GAA4C,EAAE,CAAC;oBAC9D,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC;wBACX,SAAS,CAAC,IAAI,CAAC;4BACb,GAAG,EAAE,cAAc;4BACnB,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC;yBAC1B,CAAC,CAAC;oBACL,CAAC;oBACD,IAAI,CAAC,CAAC,OAAO,GAAG,OAAO,EAAE,CAAC;wBACxB,SAAS,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,gBAAgB,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;oBAC/D,CAAC;oBAED,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;wBAChB,mEAAmE;wBACnE,wCAAwC;wBACxC,KAAK,MAAM,IAAI,IAAI,SAAS;4BAAE,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;wBACvD,IAAI,CAAC,CAAC,OAAO,GAAG,OAAO;4BAAE,OAAO,GAAG,CAAC,CAAC,OAAO,CAAC;wBAC7C,IAAI,CAAC,CAAC,IAAI;4BAAE,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;wBACrC,SAAS;oBACX,CAAC;oBACD,qEAAqE;oBACrE,sEAAsE;oBACtE,iEAAiE;oBACjE,oCAAoC;oBACpC,MAAM,kBAAkB,GAAG,kBAAkB,CAAC,GAAG,CAAC,CAAC;oBACnD,MAAM,UAAU,GAAG,kBAAkB,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;wBACnD,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC,mBAAmB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,iBAAiB,CAAC,IAAI,CAAC;wBAC7D,cAAc,EAAE,2BAA2B,CAAC,IAAI,CAAC,IAAI,CAAC;qBACvD,CAAC,CAAC,CAAC;oBACJ,IAAI,WAAW,GAAG,EAAE,CAAC;oBACrB,IAAI,CAAC;wBACH,KAAK,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,UAAU,EAAE,CAAC;4BACvD,WAAW,GAAG,IAAI,CAAC;4BACnB,IAAI,CAAC;gCACH,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;4BAC3B,CAAC;4BAAC,OAAO,GAAG,EAAE,CAAC;gCACb,IAAI,CAAC,EAAE,IAAI,cAAc,IAAI,sBAAsB,CAAC,GAAG,CAAC,EAAE,CAAC;oCACzD,wDAAwD;oCACxD,SAAS;gCACX,CAAC;gCACD,MAAM,GAAG,CAAC;4BACZ,CAAC;wBACH,CAAC;wBACD,KAAK,MAAM,IAAI,IAAI,SAAS;4BAAE,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;wBACvD,IAAI,CAAC,CAAC,OAAO,GAAG,OAAO;4BAAE,OAAO,GAAG,CAAC,CAAC,OAAO,CAAC;wBAC7C,IAAI,CAAC,CAAC,IAAI;4BAAE,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;wBACrC,OAAO,CAAC,GAAG,CACT,0BAA0B,KAAK,KAAK,UAAU,CAAC,MAAM,aAAa,UAAU,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,GAAG,CACxG,CAAC;oBACJ,CAAC;oBAAC,OAAO,GAAG,EAAE,CAAC;wBACb,IAAI,EAAE,IAAI,iBAAiB,CAAC,GAAG,CAAC,EAAE,CAAC;4BACjC,gEAAgE;4BAChE,mEAAmE;4BACnE,kEAAkE;4BAClE,oEAAoE;4BACpE,qEAAqE;4BACrE,mEAAmE;4BACnE,8DAA8D;4BAC9D,iEAAiE;4BACjE,8DAA8D;4BAC9D,mEAAmE;4BACnE,iEAAiE;4BACjE,OAAO,CAAC,IAAI,CACV,kBAAkB,KAAK,sCAAuC,GAAa,CAAC,OAAO,IAAI;gCACrF,+CAA+C;gCAC/C,yDAAyD;gCACzD,mHAAmH,EACrH,cAAc,EACd,WAAW,CACZ,CAAC;4BACF,MAAM;wBACR,CAAC;wBACD,OAAO,CAAC,KAAK,CACX,kBAAkB,KAAK,UAAU,EAChC,GAAa,CAAC,OAAO,EACtB,cAAc,EACd,WAAW,CACZ,CAAC;wBACF,MAAM,GAAG,CAAC;oBACZ,CAAC;gBACH,CAAC;YACH,CAAC;oBAAS,CAAC;gBACT,2EAA2E;gBAC3E,6EAA6E;gBAC7E,+EAA+E;gBAC/E,IAAI,EAAE;oBAAE,MAAM,oBAAoB,EAAE,CAAC;YACvC,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,KAAK,CAAC,wBAAwB,EAAG,GAAa,CAAC,OAAO,CAAC,CAAC;YAChE,uEAAuE;YACvE,oEAAoE;YACpE,oEAAoE;YACpE,sEAAsE;YACtE,kEAAkE;YAClE,qDAAqD;YACrD,MAAM,YAAY,GAChB,CAAC,CAAC,UAAU,CAAC,OAAO,EAAE,GAAG,EAAE,OAAO;gBAClC,CAAC,CAAC,UAAU,CAAC,OAAO,EAAE,GAAG,EAAE,wBAAwB;gBACnD,CAAC,CAAC,UAAU,CAAC,OAAO,EAAE,GAAG,EAAE,MAAM;gBACjC,UAAU,IAAI,UAAU,CAAC;YAC3B,IAAI,OAAO,UAAU,CAAC,OAAO,EAAE,IAAI,KAAK,UAAU,IAAI,CAAC,YAAY,EAAE,CAAC;gBACpE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAClB,CAAC;QACH,CAAC;IACH,CAAC,CAAC;AACJ,CAAC","sourcesContent":["import {\n  getDbExec,\n  createDbExec,\n  isPostgres,\n  getDialect,\n  getMigrationDatabaseUrl,\n  retrySqliteBusy,\n  type DbExec,\n} from \"./client.js\";\n\n// ---------------------------------------------------------------------------\n// Shared direct-endpoint exec across concurrent migration runners per boot.\n//\n// On each serverless cold start THREE plugins call runMigrations (core,\n// org, context-xray). Without coordination each would open an independent\n// direct-endpoint Neon connection AND leave it idle for ~10 s after\n// migrations finish. We avoid that by sharing a single direct exec for\n// the duration of the migration window: the first caller opens it,\n// subsequent callers reuse the same promise, and the last caller closes it\n// via reference-counting. The exec is nulled out after the window so a\n// second cold start (e.g. after a Lambda thaw) gets a fresh connection.\n// ---------------------------------------------------------------------------\n\nlet _migrationExecPromise: Promise<DbExec> | null = null;\nlet _migrationExecRefCount = 0;\n\nasync function acquireMigrationExec(): Promise<DbExec> {\n  if (!_migrationExecPromise) {\n    const opened = createDbExec({ url: getMigrationDatabaseUrl() });\n    _migrationExecPromise = opened;\n    opened.catch(() => {\n      // Opening the connection failed. Reset the shared state so the next\n      // caller retries with a fresh connection instead of awaiting this\n      // permanently rejected promise — and zero the ref count, because none\n      // of the awaiters that failed here will ever call release.\n      if (_migrationExecPromise === opened) {\n        _migrationExecPromise = null;\n        _migrationExecRefCount = 0;\n      }\n    });\n  }\n  _migrationExecRefCount++;\n  return _migrationExecPromise;\n}\n\nasync function releaseMigrationExec(): Promise<void> {\n  _migrationExecRefCount--;\n  if (_migrationExecRefCount > 0) return;\n  // Last caller — close and reset so next boot gets a fresh connection.\n  const execPromise = _migrationExecPromise;\n  _migrationExecPromise = null;\n  _migrationExecRefCount = 0;\n  if (!execPromise) return;\n  try {\n    const exec = await execPromise;\n    await exec.close?.();\n  } catch {\n    // Swallow close errors — the migrations themselves already succeeded or\n    // failed; a cleanup error should not surface as a boot crash.\n  }\n}\n\ntype NitroPluginDef = (nitroApp: any) => void | Promise<void>;\n\n/**\n * Rewrite SQLite-specific SQL to Postgres-compatible equivalents.\n * Handles: datetime('now') → CURRENT_TIMESTAMP, AUTOINCREMENT → GENERATED, etc.\n */\nfunction adaptSqlForPostgres(sql: string): string {\n  return sql\n    .replace(/datetime\\s*\\(\\s*'now'\\s*\\)/gi, \"CURRENT_TIMESTAMP\")\n    .replace(/\\bAUTOINCREMENT\\b/gi, \"\")\n    .replace(/\\bINTEGER\\b/gi, \"BIGINT\");\n}\n\nconst IF_NOT_EXISTS_ADD_COLUMN_RE = /ADD\\s+COLUMN\\s+IF\\s+NOT\\s+EXISTS/i;\n\n/**\n * Strip Postgres-only syntax that SQLite doesn't support.\n * Handles: ALTER TABLE ... ADD COLUMN IF NOT EXISTS → ADD COLUMN\n *\n * Note: SQLite does not have a native equivalent, so the idempotent\n * semantic is emulated at the executor level by swallowing the\n * \"duplicate column name\" error for statements that originally carried\n * the clause. See `hadIfNotExists` tracking in the run loop.\n */\nfunction adaptSqlForSqlite(sql: string): string {\n  return sql.replace(/ADD\\s+COLUMN\\s+IF\\s+NOT\\s+EXISTS/gi, \"ADD COLUMN\");\n}\n\n/**\n * True when an error from `ALTER TABLE ... ADD COLUMN` indicates the\n * column already existed. Recognizes both SQLite (\"duplicate column\n * name\") and Postgres (\"column ... already exists\" — exact text varies\n * by error code 42701, but the substring is stable). Exported so other\n * idempotent column-upgrade loops in the codebase don't reinvent this\n * regex with subtly different shapes.\n */\nexport function isDuplicateColumnError(err: unknown): boolean {\n  const msg = (err as Error | undefined)?.message ?? \"\";\n  return (\n    /duplicate column name/i.test(msg) || /column .* already exists/i.test(msg)\n  );\n}\n\n/**\n * True when a migration statement failed because the connected DB ROLE lacks\n * privilege — e.g. a permission-limited dev/replica role that doesn't own the\n * table. Postgres raises SQLSTATE 42501 (\"insufficient_privilege\", routine\n * aclcheck_error, message \"must be owner of table …\"). We treat these as\n * NON-FATAL so a perms-limited database can't crash-loop the whole server: the\n * migration is skipped (left unrecorded) and a properly-privileged role applies\n * it later. Production, where the role owns its tables, never hits this path.\n */\nexport function isPermissionError(err: unknown): boolean {\n  const e = err as { code?: string; message?: string } | undefined;\n  if (e?.code === \"42501\") return true;\n  const msg = e?.message ?? \"\";\n  return (\n    /must be owner of/i.test(msg) ||\n    /permission denied/i.test(msg) ||\n    /insufficient privilege/i.test(msg)\n  );\n}\n\n/**\n * Split a multi-statement SQL blob into individual statements.\n *\n * libsql's `execute(sql)` only runs the first statement in a multi-statement\n * string. This splitter is intentionally simple: it respects single-quoted\n * string literals (with `''` escaping) and `--` line comments, and splits on\n * top-level `;`. It does NOT attempt to parse `$$`-quoted Postgres function\n * bodies — migrations that define functions/triggers with `;` inside bodies\n * should pass a single-statement migration per entry instead.\n */\nfunction splitSqlStatements(sql: string): string[] {\n  const out: string[] = [];\n  let buf = \"\";\n  let i = 0;\n  let inSingle = false;\n  while (i < sql.length) {\n    const ch = sql[i];\n    const next = sql[i + 1];\n    if (!inSingle && ch === \"-\" && next === \"-\") {\n      // Skip to end of line\n      while (i < sql.length && sql[i] !== \"\\n\") i++;\n      continue;\n    }\n    if (ch === \"'\") {\n      buf += ch;\n      if (inSingle && next === \"'\") {\n        buf += next;\n        i += 2;\n        continue;\n      }\n      inSingle = !inSingle;\n      i++;\n      continue;\n    }\n    if (ch === \";\" && !inSingle) {\n      const trimmed = buf.trim();\n      if (trimmed) out.push(trimmed);\n      buf = \"\";\n      i++;\n      continue;\n    }\n    buf += ch;\n    i++;\n  }\n  const tail = buf.trim();\n  if (tail) out.push(tail);\n  return out;\n}\n\nexport interface RunMigrationsOptions {\n  /**\n   * Name of the migrations bookkeeping table. REQUIRED — there is intentionally\n   * no default. Two templates that share a database (e.g. via the same Neon URL)\n   * each have their own version space starting at v1, and a single shared\n   * `_migrations` table will silently skip the second template's migrations if\n   * the first has already advanced past those version numbers. This caused the\n   * design template's migrations to be skipped entirely on a Neon DB that\n   * slides had already populated up to v15 (PR #320 era).\n   *\n   * Use one bookkeeping table per template, e.g. `slides_migrations`. Core\n   * feature plugins (e.g. the org module) follow the same convention with\n   * their own prefix, e.g. `_org_migrations`.\n   */\n  table: string;\n}\n\n/**\n * A single migration entry.\n *\n * `sql` can be a string (runs on every dialect) or an object with dialect\n * keys for dialect-gated SQL. Useful when Postgres needs an ALTER that\n * SQLite can't parse.\n *\n *   { version: 14, sql: { postgres: \"ALTER TABLE …\" } }  // no-op on sqlite\n *   { version: 15, sql: { sqlite: \"…\", postgres: \"…\" } } // both dialects\n *\n * `name` is an optional stable, unique slug that opts a migration into\n * **name-based tracking** instead of the legacy version-number gate. See the\n * \"Name-based tracking\" section on `runMigrations` for why this exists and\n * exactly how the two gating strategies interact.\n */\nexport type MigrationSql = string | { postgres?: string; sqlite?: string };\n\nexport interface MigrationEntry {\n  version: number;\n  sql: MigrationSql;\n  /**\n   * Stable, unique slug for this migration (e.g. `\"analytics-alert-rules-table\"`).\n   * When present, this migration is tracked by NAME instead of by version\n   * number — see the `runMigrations` doc comment for the full rationale and\n   * gating rules. Must be unique across the migration list; a duplicate name\n   * throws at startup (programmer error, not a runtime data problem).\n   */\n  name?: string;\n}\n\nfunction resolveMigrationSql(sql: MigrationSql, pg: boolean): string | null {\n  if (typeof sql === \"string\") return sql;\n  const raw = pg ? sql.postgres : sql.sqlite;\n  return raw ?? null;\n}\n\n/**\n * Runs a list of migrations against the configured database, gated by a\n * per-table bookkeeping row (`options.table`) so repeated boots only apply\n * new migrations.\n *\n * ## Name-based tracking (why it exists)\n *\n * The legacy gate is purely numeric: `SELECT MAX(version)` from the\n * bookkeeping table, then apply every entry whose `version` is greater. That\n * scheme silently breaks down when **two independent branches each extend the\n * same migration list with different DDL under the same version numbers** —\n * exactly what happened to the analytics template's v75-v83 range. Branch A\n * shipped alert-rule tables as v75-v78; branch B shipped unrelated DDL as its\n * own v75-v83. Whichever branch deployed first recorded \"v75..v83 applied\"\n * in the bookkeeping table. When the other branch merged and deployed, its\n * migrations at those same version numbers were never applied — `MAX(version)`\n * was already ≥ their version, so the gate treated them as done even though\n * their actual DDL had never run. The result: `analytics_migrations` showed\n * rows for 1..83 with no gaps, yet `analytics_alert_rules`,\n * `analytics_alert_incidents`, and `session_recordings.network_error_count`\n * did not exist in production. Version numbers are not a stable identity —\n * they're just sequence position, and sequence position collides across\n * branches.\n *\n * Name-based tracking fixes this by keying application on a stable, unique\n * **string slug** instead of a position in a shared integer sequence:\n *\n * - Entries with a `name` are recorded in a companion table,\n *   `${table}_named` (`name TEXT PRIMARY KEY`), and APPLY IFF their name is\n *   absent from that table — completely independent of version numbers or\n *   the legacy `MAX(version)` gate. Two branches can both ship a migration\n *   named `\"analytics-alert-rules-table\"` at version 75, or one at version 75\n *   and the other at version 90 after a rebase — either way it applies\n *   exactly once per database, keyed on the name.\n * - Entries WITHOUT a `name` keep the exact legacy behavior\n *   (`version > MAX(recorded version)`), so nothing changes for existing\n *   unnamed migrations.\n * - Named migrations still execute in list order, interleaved with unnamed\n *   ones exactly as written.\n * - When a named migration's DDL runs, we record BOTH the named row (always)\n *   and — if its `version` is greater than the current legacy max — the\n *   legacy version row too, in the SAME atomic batch/transaction as the DDL.\n *   This keeps the legacy `MAX(version)` gate monotonically advancing for\n *   any unnamed migrations that come after it in the list, while ensuring a\n *   named migration is never \"double recorded\" in a way that would let it\n *   re-apply.\n * - A duplicate `name` across the migration list throws at startup — that's\n *   a programmer error (copy-paste or merge mistake), not a runtime data\n *   problem, and failing loud beats silently tracking the wrong row.\n *\n * New migrations should always set a `name`. Legacy unnamed migrations don't\n * need to be renamed retroactively — the two gating strategies coexist in the\n * same list — but if a table is EVER at risk of being shared across parallel\n * branches (any template's own migrations qualify, since branches routinely\n * extend the same list concurrently), giving new entries a name is what makes\n * them immune to the collision class described above.\n */\nexport function runMigrations(\n  migrations: Array<MigrationEntry>,\n  options: RunMigrationsOptions,\n): NitroPluginDef {\n  const table = options?.table;\n  if (\n    !table ||\n    typeof table !== \"string\" ||\n    !/^[A-Za-z_][A-Za-z0-9_]*$/.test(table)\n  ) {\n    throw new Error(\n      \"runMigrations: `table` option is required and must be a valid SQL identifier \" +\n        '(e.g. `{ table: \"slides_migrations\" }`). See packages/core/src/db/migrations.ts ' +\n        \"for why this is required (shared-DB version-collision bug).\",\n    );\n  }\n\n  // Duplicate-name detection — programmer error, fail loud at startup rather\n  // than silently tracking the wrong migration's applied state.\n  {\n    const seenNames = new Set<string>();\n    for (const m of migrations) {\n      if (!m.name) continue;\n      if (seenNames.has(m.name)) {\n        throw new Error(\n          `runMigrations: duplicate migration name \"${m.name}\" in the migration list for table \"${table}\". ` +\n            \"Migration names must be unique — pick a different stable slug.\",\n        );\n      }\n      seenNames.add(m.name);\n    }\n  }\n\n  const namedTable = `${table}_named`;\n\n  return async () => {\n    try {\n      // Check for Cloudflare D1 binding (only if DATABASE_URL not set)\n      const d1 = getDialect() === \"d1\" ? globalThis.__cf_env?.DB : null;\n      if (d1) {\n        await d1\n          .prepare(\n            `CREATE TABLE IF NOT EXISTS ${table} (version INTEGER PRIMARY KEY)`,\n          )\n          .run();\n        await d1\n          .prepare(\n            `CREATE TABLE IF NOT EXISTS ${namedTable} (name TEXT PRIMARY KEY, version INTEGER, applied_at TEXT NOT NULL DEFAULT (datetime('now')))`,\n          )\n          .run();\n        const firstRow = await d1\n          .prepare(`SELECT MAX(version) as v FROM ${table}`)\n          .first<{ v?: number }>();\n        const current = (firstRow?.v as number) ?? 0;\n\n        const appliedNamesRows = await d1\n          .prepare(`SELECT name FROM ${namedTable}`)\n          .all();\n        const appliedNames = new Set(\n          (appliedNamesRows?.results ?? []).map((r) => String(r.name)),\n        );\n\n        const pending = migrations.filter((m) =>\n          m.name ? !appliedNames.has(m.name) : m.version > current,\n        );\n\n        for (const m of pending) {\n          try {\n            // D1 is SQLite-compatible\n            const raw = resolveMigrationSql(m.sql, false);\n            const recordStatements = [\n              m.name\n                ? d1\n                    .prepare(\n                      `INSERT OR IGNORE INTO ${namedTable} (name, version) VALUES (?, ?)`,\n                    )\n                    .bind(m.name, m.version)\n                : null,\n              m.version > current\n                ? d1\n                    .prepare(`INSERT OR IGNORE INTO ${table} VALUES (?)`)\n                    .bind(m.version)\n                : null,\n            ].filter((s): s is NonNullable<typeof s> => s != null);\n\n            if (raw == null) {\n              // Dialect-gated migration with no SQL for this dialect; still\n              // record it so we don't retry forever.\n              for (const stmt of recordStatements) await stmt.run();\n              continue;\n            }\n            const originalStatements = splitSqlStatements(raw);\n            const statements = originalStatements.map((orig) => ({\n              sql: adaptSqlForSqlite(orig),\n              hadIfNotExists: IF_NOT_EXISTS_ADD_COLUMN_RE.test(orig),\n            }));\n            const hasIfNotExists = statements.some((s) => s.hadIfNotExists);\n            if (hasIfNotExists) {\n              // Per-statement path: we need to swallow \"duplicate column\"\n              // errors for statements that originally carried\n              // `ADD COLUMN IF NOT EXISTS`, which a batch() can't express.\n              // Loses atomicity, but the idempotent-ADD-COLUMN semantic\n              // means a partial re-run resolves cleanly on retry.\n              for (const { sql: stmt, hadIfNotExists } of statements) {\n                try {\n                  await d1.prepare(stmt).run();\n                } catch (err) {\n                  if (hadIfNotExists && isDuplicateColumnError(err)) continue;\n                  throw err;\n                }\n              }\n              for (const stmt of recordStatements) await stmt.run();\n            } else {\n              // Atomic batch: all statements + bookkeeping inserts land in\n              // the same transaction. A failing statement rolls the whole\n              // migration back, so we never record a half-applied migration.\n              await d1.batch([\n                ...statements.map((s) => d1.prepare(s.sql)),\n                ...recordStatements,\n              ]);\n            }\n            console.log(\n              `[db] Applied migration ${m.name ? `\"${m.name}\" ` : \"\"}v${m.version} (${statements.length} statement${statements.length === 1 ? \"\" : \"s\"})`,\n            );\n          } catch (err) {\n            console.error(\n              `[db] Migration ${m.name ? `\"${m.name}\" ` : \"\"}v${m.version} FAILED:`,\n              (err as Error).message,\n              \"\\nSQL:\",\n              JSON.stringify(m.sql),\n            );\n            throw err;\n          }\n        }\n        return;\n      }\n\n      // Generic path — works for libsql and Postgres\n      const pg = isPostgres();\n\n      // ---------------------------------------------------------------------------\n      // Fast-path: read migration state through the regular pooled singleton before\n      // opening the direct-endpoint connection.\n      //\n      // On Postgres every cold start previously opened a fresh direct-endpoint Neon\n      // connection (bypassing PgBouncer, which is needed only for DDL), ran\n      // CREATE TABLE IF NOT EXISTS + SELECT MAX(version) even with zero pending\n      // migrations, and never closed the pool — it idled for ~10 s. Three runners\n      // (core, org, context-xray) did this independently per boot.\n      //\n      // Now: use the pooled singleton (getDbExec) for the bookkeeping SELECT. If\n      // the migrations table does not yet exist we treat it as \"all migrations\n      // pending\" (current = -1). Only when there are pending migrations do we open\n      // the direct-endpoint exec (DDL is the only thing Neon's PgBouncer blocks —\n      // documented at getMigrationDatabaseUrl). The direct exec is shared across\n      // concurrent runners via acquireMigrationExec() and closed after the last\n      // caller via releaseMigrationExec().\n      // ---------------------------------------------------------------------------\n\n      let current = -1; // sentinel: \"table missing\" → treat all as pending\n      let namedRowsMissing = false; // sentinel: \"named table missing\" → no names applied yet\n\n      // Any migration with a `name` is a candidate regardless of version, so\n      // the fast-path \"anything pending?\" check must also account for names.\n      const hasNamedMigrations = migrations.some((m) => m.name);\n      let appliedNames = new Set<string>();\n\n      if (pg) {\n        try {\n          const { rows } = await getDbExec().execute(\n            `SELECT MAX(version) as v FROM ${table}`,\n          );\n          current = (rows[0]?.v as number) ?? 0;\n        } catch {\n          // Table doesn't exist yet — leave current = -1 so all migrations apply.\n        }\n        if (hasNamedMigrations) {\n          try {\n            const { rows } = await getDbExec().execute(\n              `SELECT name FROM ${namedTable}`,\n            );\n            appliedNames = new Set(rows.map((r) => String(r.name)));\n          } catch {\n            // Named table doesn't exist yet — leave appliedNames empty so all\n            // named migrations apply.\n            namedRowsMissing = true;\n          }\n        }\n      }\n\n      // For SQLite we still use getDbExec() as exec throughout (no pooler concern).\n      // For Postgres we only open the direct exec when there are pending migrations.\n      const pendingFast = pg\n        ? migrations.filter((m) =>\n            m.name ? !appliedNames.has(m.name) : m.version > current,\n          )\n        : null; // SQLite: compute after table creation below\n\n      // Short-circuit: Postgres with nothing to do — skip the direct connection entirely.\n      if (pg && pendingFast !== null && pendingFast.length === 0) {\n        return;\n      }\n\n      // Acquire the exec appropriate for the dialect.\n      // For Postgres: the shared direct-endpoint exec (DDL-safe, closed on release).\n      // For SQLite/libsql: the singleton pooled exec (no pooler concern).\n      const exec = pg ? await acquireMigrationExec() : getDbExec();\n\n      try {\n        // Retry initial table creation — SQLITE_BUSY_RECOVERY can occur on HMR\n        // restarts when WAL files from the previous process haven't been released yet.\n        await retrySqliteBusy(\n          () =>\n            exec.execute(\n              `CREATE TABLE IF NOT EXISTS ${table} (version INTEGER PRIMARY KEY)`,\n            ),\n          { maxAttempts: 6, baseDelayMs: 1000, rethrow: true },\n        );\n        // Companion name-keyed bookkeeping table — never alters the existing\n        // `${table}`'s PRIMARY KEY, so legacy version rows keep working exactly\n        // as before. See the `runMigrations` doc comment for why this exists.\n        await retrySqliteBusy(\n          () =>\n            exec.execute(\n              `CREATE TABLE IF NOT EXISTS ${namedTable} (name TEXT PRIMARY KEY, version INTEGER, applied_at ${pg ? \"TIMESTAMP NOT NULL DEFAULT now()\" : \"TEXT NOT NULL DEFAULT (datetime('now'))\"})`,\n            ),\n          { maxAttempts: 6, baseDelayMs: 1000, rethrow: true },\n        );\n\n        // For Postgres, current was already set by the fast-path SELECT above.\n        // For SQLite we run the SELECT now (via the same exec, which is the singleton).\n        if (!pg) {\n          const { rows } = await exec.execute(\n            `SELECT MAX(version) as v FROM ${table}`,\n          );\n          current = (rows[0]?.v as number) ?? 0;\n          if (hasNamedMigrations) {\n            const { rows: nameRows } = await exec.execute(\n              `SELECT name FROM ${namedTable}`,\n            );\n            appliedNames = new Set(nameRows.map((r) => String(r.name)));\n          }\n        } else if (current === -1 || (hasNamedMigrations && namedRowsMissing)) {\n          // Fast-path read failed (table was absent on the pooler): re-read via the\n          // direct exec now that CREATE TABLE IF NOT EXISTS has ensured it exists.\n          if (current === -1) {\n            const { rows } = await exec.execute(\n              `SELECT MAX(version) as v FROM ${table}`,\n            );\n            current = (rows[0]?.v as number) ?? 0;\n          }\n          if (hasNamedMigrations && namedRowsMissing) {\n            const { rows: nameRows } = await exec.execute(\n              `SELECT name FROM ${namedTable}`,\n            );\n            appliedNames = new Set(nameRows.map((r) => String(r.name)));\n          }\n        }\n\n        const insertVersionSql = pg\n          ? `INSERT INTO ${table} VALUES (?) ON CONFLICT DO NOTHING`\n          : `INSERT OR IGNORE INTO ${table} VALUES (?)`;\n        const insertNamedSql = pg\n          ? `INSERT INTO ${namedTable} (name, version) VALUES (?, ?) ON CONFLICT DO NOTHING`\n          : `INSERT OR IGNORE INTO ${namedTable} (name, version) VALUES (?, ?)`;\n\n        const pending = migrations.filter((m) =>\n          m.name ? !appliedNames.has(m.name) : m.version > current,\n        );\n        if (pending.length > 0) {\n          console.log(\n            `[db] Applying ${pending.length} migration(s) on ${pg ? \"Postgres\" : \"SQLite/libsql\"}…`,\n          );\n        }\n\n        for (const m of pending) {\n          const raw = resolveMigrationSql(m.sql, pg);\n          const label = m.name\n            ? `\"${m.name}\" (v${m.version})`\n            : `v${m.version}`;\n\n          // Record BOTH the named row (always, when named) and the legacy\n          // version row (only if this migration actually advances the legacy\n          // MAX) — atomically with the DDL below. This keeps the legacy gate\n          // monotonic for any unnamed migrations later in the list, while a\n          // named migration is tracked by name regardless of version.\n          const recordSql: Array<{ sql: string; args: unknown[] }> = [];\n          if (m.name) {\n            recordSql.push({\n              sql: insertNamedSql,\n              args: [m.name, m.version],\n            });\n          }\n          if (m.version > current) {\n            recordSql.push({ sql: insertVersionSql, args: [m.version] });\n          }\n\n          if (raw == null) {\n            // Dialect-gated migration with no SQL for this dialect; still mark\n            // as applied so we don't retry forever.\n            for (const stmt of recordSql) await exec.execute(stmt);\n            if (m.version > current) current = m.version;\n            if (m.name) appliedNames.add(m.name);\n            continue;\n          }\n          // Split BEFORE adapting so we can remember which original statements\n          // carried `ADD COLUMN IF NOT EXISTS` — SQLite drops the clause, so we\n          // emulate the idempotent semantic by swallowing duplicate-column\n          // errors only for those statements.\n          const originalStatements = splitSqlStatements(raw);\n          const statements = originalStatements.map((orig) => ({\n            sql: pg ? adaptSqlForPostgres(orig) : adaptSqlForSqlite(orig),\n            hadIfNotExists: IF_NOT_EXISTS_ADD_COLUMN_RE.test(orig),\n          }));\n          let currentStmt = \"\";\n          try {\n            for (const { sql: stmt, hadIfNotExists } of statements) {\n              currentStmt = stmt;\n              try {\n                await exec.execute(stmt);\n              } catch (err) {\n                if (!pg && hadIfNotExists && isDuplicateColumnError(err)) {\n                  // IF NOT EXISTS semantic: column already present, skip.\n                  continue;\n                }\n                throw err;\n              }\n            }\n            for (const stmt of recordSql) await exec.execute(stmt);\n            if (m.version > current) current = m.version;\n            if (m.name) appliedNames.add(m.name);\n            console.log(\n              `[db] Applied migration ${label} (${statements.length} statement${statements.length === 1 ? \"\" : \"s\"})`,\n            );\n          } catch (err) {\n            if (pg && isPermissionError(err)) {\n              // The connected role lacks privilege for this migration (e.g. a\n              // permission-limited dev/replica role that doesn't own the table).\n              // Don't crash-loop the whole server over it — warn and STOP here.\n              // We must NOT continue to later migrations: unnamed pending work is\n              // computed as `version > MAX(recorded version)`, so applying a later\n              // unnamed migration would advance MAX past this unrecorded one and\n              // orphan it forever. Stopping leaves MAX at the last recorded\n              // version, so a properly-privileged role resumes from this exact\n              // migration, in order. (A named migration skipped here simply\n              // isn't recorded by name either, so it's retried next boot same as\n              // the legacy gate — no orphaning risk from name-based tracking.)\n              console.warn(\n                `[db] Migration ${label} skipped — insufficient privilege: ${(err as Error).message}. ` +\n                  `Apply it with a DB role that owns the table. ` +\n                  `Halting further migrations so this one isn't orphaned. ` +\n                  `Set <APP_NAME>_DATABASE_URL (e.g. PLAN_DATABASE_URL) to a database this app owns — a file: URL uses local SQLite.`,\n                \"\\nStatement:\",\n                currentStmt,\n              );\n              break;\n            }\n            console.error(\n              `[db] Migration ${label} FAILED:`,\n              (err as Error).message,\n              \"\\nStatement:\",\n              currentStmt,\n            );\n            throw err;\n          }\n        }\n      } finally {\n        // Release the direct-endpoint exec (Postgres only). For SQLite getDbExec()\n        // returns the process-lifetime singleton, so releaseMigrationExec is a no-op\n        // (refCount never incremented for SQLite path, guard in releaseMigrationExec).\n        if (pg) await releaseMigrationExec();\n      }\n    } catch (err) {\n      console.error(\"[db] Migration failed:\", (err as Error).message);\n      // In local dev, hard-fail so the developer catches errors immediately.\n      // On serverless runtimes (Netlify Functions, Vercel, CF Workers) we\n      // keep the process alive — the app will return 500s for routes that\n      // depend on the missing tables, but at least other routes still work.\n      // Note: Node.js 21+ defines globalThis.navigator, so we check for\n      // serverless env vars instead of navigator presence.\n      const isServerless =\n        !!globalThis.process?.env?.NETLIFY ||\n        !!globalThis.process?.env?.AWS_LAMBDA_FUNCTION_NAME ||\n        !!globalThis.process?.env?.VERCEL ||\n        \"__cf_env\" in globalThis;\n      if (typeof globalThis.process?.exit === \"function\" && !isServerless) {\n        process.exit(1);\n      }\n    }\n  };\n}\n"]}

package/dist/jobs/scheduler.js

@@ -353,13 +353,12 @@ async function executeJob(resource, meta, body, deps, now) {
             const softTimeoutMs = resolveRunSoftTimeoutMs(undefined, {
                 useHostedDefault: true,
             });
-            // Hard-abort backstop: 5 minutes. On hosted runtimes the soft-timeout
-            // will fire first; locally this is the only guard.
-            const hardAbortTimer = setTimeout(() => {
-                // startRun's abort controller handles this below, but we still need
-                // the handle to clear it in the finally block.
-            }, 5 * 60 * 1000);
             let jobError = null;
+            // Hard-abort backstop: 5 minutes. On hosted runtimes the soft-timeout
+            // will fire first; locally this is the only guard. Cleared when the
+            // run completes so finished jobs don't leave a live timer keeping the
+            // process/event loop alive for the remainder of the window.
+            let hardAbortTimer = null;
             await new Promise((resolve, reject) => {
                 const activeRun = startRun(runId, thread.id, async (send, signal) => {
                     try {
@@ -381,6 +380,10 @@ async function executeJob(resource, meta, body, deps, now) {
                 }, 
                 // onComplete: run finished (completed or aborted)
                 async (run) => {
+                    if (hardAbortTimer) {
+                        clearTimeout(hardAbortTimer);
+                        hardAbortTimer = null;
+                    }
                     if (run.status === "completed") {
                         resolve();
                     }
@@ -391,10 +394,10 @@ async function executeJob(resource, meta, body, deps, now) {
                     softTimeoutMs,
                     // turnId defaults to runId — fine for single-turn jobs
                 });
-                // Hard-abort backstop: abort the run-manager's own controller after
-                // 5 minutes if it hasn't finished naturally.
-                clearTimeout(hardAbortTimer);
-                setTimeout(() => {
+                // Abort the run-manager's own controller after 5 minutes if the
+                // run hasn't finished naturally.
+                hardAbortTimer = setTimeout(() => {
+                    hardAbortTimer = null;
                     if (activeRun.status === "running") {
                         activeRun.abort.abort("job_hard_timeout");
                         reject(new Error("Job timed out after 5 minutes"));
@@ -403,6 +406,10 @@ async function executeJob(resource, meta, body, deps, now) {
             }).catch((err) => {
                 jobError = err;
             });
+            if (hardAbortTimer) {
+                clearTimeout(hardAbortTimer);
+                hardAbortTimer = null;
+            }
             if (jobError)
                 throw jobError;
             // Success — update status. Compute the next run from completion time,

package/dist/jobs/scheduler.js.map

@@ -1 +1 @@
-{"version":3,"file":"scheduler.js","sourceRoot":"","sources":["../../src/jobs/scheduler.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,uBAAuB,EACvB,uBAAuB,EACvB,aAAa,GACd,MAAM,0BAA0B,CAAC;AAElC,OAAO,EACL,YAAY,EACZ,oBAAoB,EACpB,oBAAoB,GAErB,MAAM,8BAA8B,CAAC;AACtC,OAAO,EAAE,QAAQ,EAAE,uBAAuB,EAAE,MAAM,yBAAyB,CAAC;AAC5E,OAAO,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAC;AACxD,OAAO,EACL,qBAAqB,EACrB,WAAW,GAEZ,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,qBAAqB,EAAE,MAAM,8BAA8B,CAAC;AACrE,OAAO,EAAE,cAAc,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,WAAW,CAAC;AAgBtE,MAAM,cAAc,GAAG,oCAAoC,CAAC;AAE5D,MAAM,UAAU,mBAAmB,CAAC,OAAe;IAIjD,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;IAC5C,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO;YACL,IAAI,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE;YACtC,IAAI,EAAE,OAAO;SACd,CAAC;IACJ,CAAC;IAED,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;IAC3B,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAE7B,MAAM,IAAI,GAAmB,EAAE,QAAQ,EAAE,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAE7D,KAAK,MAAM,IAAI,IAAI,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QACzC,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACnC,IAAI,QAAQ,KAAK,CAAC,CAAC;YAAE,SAAS;QAC9B,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,IAAI,EAAE,CAAC;QAC3C,IAAI,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAE5C,eAAe;QACf,IACE,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;YAC9C,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,EAC9C,CAAC;YACD,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QAC7B,CAAC;QAED,QAAQ,GAAG,EAAE,CAAC;YACZ,KAAK,UAAU;gBACb,IAAI,CAAC,QAAQ,GAAG,KAAK,CAAC;gBACtB,MAAM;YACR,KAAK,SAAS;gBACZ,IAAI,CAAC,OAAO,GAAG,KAAK,KAAK,OAAO,CAAC;gBACjC,MAAM;YACR,KAAK,WAAW;gBACd,IAAI,CAAC,SAAS,GAAG,KAAK,CAAC;gBACvB,MAAM;YACR,KAAK,OAAO;gBACV,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;gBACnB,MAAM;YACR,KAAK,OAAO;gBACV,IAAI,CAAC,KAAK;oBACR,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;gBAChE,MAAM;YACR,KAAK,SAAS;gBACZ,IAAI,CAAC,OAAO,GAAG,KAAK,CAAC;gBACrB,MAAM;YACR,KAAK,YAAY;gBACf,IAAI,CAAC,UAAU,GAAG,KAAqC,CAAC;gBACxD,MAAM;YACR,KAAK,WAAW;gBACd,mDAAmD;gBACnD,IAAI,CAAC,SAAS,GAAG,KAAK;qBACnB,OAAO,CAAC,MAAM,EAAE,IAAI,CAAC;qBACrB,OAAO,CAAC,MAAM,EAAE,IAAI,CAAC;qBACrB,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC;qBACpB,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;gBAC1B,MAAM;YACR,KAAK,SAAS;gBACZ,IAAI,CAAC,OAAO,GAAG,KAAK,CAAC;gBACrB,MAAM;QACV,CAAC;IACH,CAAC;IAED,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;AACxB,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,IAAoB,EAAE,IAAY;IAChE,MAAM,KAAK,GAAG,CAAC,KAAK,CAAC,CAAC;IACtB,KAAK,CAAC,IAAI,CAAC,cAAc,IAAI,CAAC,QAAQ,GAAG,CAAC,CAAC;IAC3C,KAAK,CAAC,IAAI,CAAC,YAAY,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;IACvC,IAAI,IAAI,CAAC,SAAS;QAAE,KAAK,CAAC,IAAI,CAAC,cAAc,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC;IAC/D,IAAI,IAAI,CAAC,KAAK;QAAE,KAAK,CAAC,IAAI,CAAC,UAAU,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;IACnD,IAAI,IAAI,CAAC,KAAK;QAAE,KAAK,CAAC,IAAI,CAAC,UAAU,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;IACnD,IAAI,IAAI,CAAC,OAAO;QAAE,KAAK,CAAC,IAAI,CAAC,YAAY,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;IACzD,IAAI,IAAI,CAAC,UAAU;QAAE,KAAK,CAAC,IAAI,CAAC,eAAe,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC;IAClE,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;QACnB,wEAAwE;QACxE,0EAA0E;QAC1E,sEAAsE;QACtE,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS;aAC3B,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC;aACtB,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC;aACpB,OAAO,CAAC,KAAK,EAAE,KAAK,CAAC;aACrB,OAAO,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;QACzB,KAAK,CAAC,IAAI,CAAC,eAAe,OAAO,GAAG,CAAC,CAAC;IACxC,CAAC;IACD,IAAI,IAAI,CAAC,OAAO;QAAE,KAAK,CAAC,IAAI,CAAC,YAAY,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;IACzD,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAClB,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACjB,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAeD,IAAI,UAAU,GAAG,KAAK,CAAC;AAEvB,0EAA0E;AAC1E,4EAA4E;AAC5E,qEAAqE;AACrE,IAAI,aAAkC,CAAC;AACvC,IAAI,cAAc,GAAG,CAAC,CAAC;AACvB,MAAM,sBAAsB,GAAG,CAAC,GAAG,MAAM,CAAC;AAC1C,IAAI,kBAAkB,GAAG,KAAK,CAAC;AAE/B,SAAS,6BAA6B;IACpC,IAAI,kBAAkB;QAAE,OAAO;IAC/B,kBAAkB,GAAG,IAAI,CAAC;IAC1B,oDAAoD;IACpD,MAAM,CAAC,yBAAyB,CAAC;SAC9B,IAAI,CAAC,CAAC,EAAE,mBAAmB,EAAE,EAAE,EAAE;QAChC,mBAAmB,EAAE,CAAC,EAAE,CAAC,WAAW,EAAE,CAAC,KAAU,EAAE,EAAE;YACnD,IAAI,OAAO,KAAK,EAAE,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;gBACtE,aAAa,GAAG,SAAS,CAAC;YAC5B,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC,CAAC;SACD,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;QACb,OAAO,CAAC,IAAI,CACV,4CAA4C,EAC5C,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CACzC,CAAC;IACJ,CAAC,CAAC,CAAC;AACP,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,IAAmB;IAC5D,0BAA0B;IAC1B,IAAI,UAAU;QAAE,OAAO;IAEvB,6BAA6B,EAAE,CAAC;IAEhC,mEAAmE;IACnE,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACzB,IACE,aAAa,KAAK,KAAK;QACvB,KAAK,GAAG,cAAc,GAAG,sBAAsB,EAC/C,CAAC;QACD,OAAO;IACT,CAAC;IAED,UAAU,GAAG,IAAI,CAAC;IAElB,IAAI,CAAC;QACH,MAAM,YAAY,GAAG,MAAM,qBAAqB,CAAC,OAAO,CAAC,CAAC;QAC1D,aAAa,GAAG,YAAY,CAAC,IAAI,CAC/B,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAC3D,CAAC;QACF,cAAc,GAAG,KAAK,CAAC;QACvB,IAAI,CAAC,aAAa;YAAE,OAAO;QAC3B,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;QAEvB,KAAK,MAAM,QAAQ,IAAI,YAAY,EAAE,CAAC;YACpC,mCAAmC;YACnC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;gBAAE,SAAS;YAC7C,IAAI,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC;gBAAE,SAAS;YAE9C,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,mBAAmB,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;YAE7D,oCAAoC;YACpC,IAAI,CAAC,IAAI,CAAC,OAAO,IAAI,CAAC,IAAI,CAAC,QAAQ;gBAAE,SAAS;YAC9C,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,QAAQ,CAAC;gBAAE,SAAS;YAE1C,+EAA+E;YAC/E,8EAA8E;YAC9E,IAAI,IAAI,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;gBAClC,MAAM,WAAW,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;gBACnC,IACE,IAAI,CAAC,OAAO;oBACZ,GAAG,CAAC,OAAO,EAAE,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,GAAG,WAAW,EAC9D,CAAC;oBACD,SAAS;gBACX,CAAC;gBACD,gDAAgD;gBAChD,IAAI,CAAC,UAAU,GAAG,OAAO,CAAC;gBAC1B,IAAI,CAAC,SAAS,GAAG,yCAAyC,CAAC;gBAC3D,MAAM,IAAI,GAAG,cAAc,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;gBAChD,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;gBAClC,MAAM,cAAc,CAAC,QAAQ,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;gBAC3C,SAAS;YACX,CAAC;YAED,eAAe;YACf,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;gBACjB,MAAM,WAAW,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;gBAC3C,IAAI,WAAW,GAAG,GAAG;oBAAE,SAAS;YAClC,CAAC;iBAAM,CAAC;gBACN,wEAAwE;gBACxE,sEAAsE;gBACtE,6DAA6D;gBAC7D,yDAAyD;gBACzD,MAAM,IAAI,GAAG,cAAc,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;gBAChD,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;gBAClC,MAAM,cAAc,CAAC,QAAQ,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;gBAC3C,SAAS;YACX,CAAC;YAED,wBAAwB;YACxB,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE;gBAAE,SAAS;YAE3B,kBAAkB;YAClB,MAAM,UAAU,CAAC,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;QACpD,CAAC;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,yEAAyE;QACzE,yEAAyE;QACzE,wCAAwC;QACxC,MAAM,EAAE,iBAAiB,EAAE,GAAG,MAAM,MAAM,CAAC,iBAAiB,CAAC,CAAC;QAC9D,IAAI,iBAAiB,CAAC,GAAG,CAAC,EAAE,CAAC;YAC3B,aAAa,GAAG,SAAS,CAAC,CAAC,yCAAyC;YACpE,cAAc,GAAG,CAAC,CAAC;YACnB,OAAO;QACT,CAAC;QACD,gGAAgG;QAChG,MAAM,MAAM,GACV,GAAG,YAAY,KAAK;YAClB,CAAC,CAAC,GAAG;YACL,CAAC,CAAC,CAAE,GAAW,EAAE,KAAK,IAAK,GAAW,EAAE,OAAO,IAAI,GAAG,CAAC,CAAC;QAC5D,OAAO,CAAC,KAAK,CAAC,yCAAyC,EAAE,MAAM,CAAC,CAAC;IACnE,CAAC;YAAS,CAAC;QACT,UAAU,GAAG,KAAK,CAAC;IACrB,CAAC;AACH,CAAC;AAED;;;;;;;;;;;GAWG;AACH,KAAK,UAAU,oBAAoB,CACjC,YAAoB,EACpB,QAA4B;IAE5B,mEAAmE;IACnE,uBAAuB;IACvB,IAAI,YAAY,KAAK,YAAY;QAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;IACvD,IAAI,CAAC;QACH,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,MAAM,CAAC,iBAAiB,CAAC,CAAC;QACtD,MAAM,EAAE,GAAG,SAAS,EAAE,CAAC;QACvB,oEAAoE;QACpE,iDAAiD;QACjD,MAAM,UAAU,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC;YAClC,GAAG,EAAE,8CAA8C;YACnD,IAAI,EAAE,CAAC,YAAY,CAAC;SACrB,CAAC,CAAC;QACH,IAAI,CAAC,UAAU,CAAC,IAAI,IAAI,UAAU,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACrD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,YAAY,oBAAoB,EAAE,CAAC;QAC1E,CAAC;QACD,IAAI,QAAQ,EAAE,CAAC;YACb,MAAM,YAAY,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC;gBACpC,GAAG,EAAE,gFAAgF;gBACrF,IAAI,EAAE,CAAC,QAAQ,EAAE,YAAY,CAAC;aAC/B,CAAC,CAAC;YACH,IAAI,CAAC,YAAY,CAAC,IAAI,IAAI,YAAY,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACzD,OAAO;oBACL,EAAE,EAAE,KAAK;oBACT,MAAM,EAAE,SAAS,YAAY,mCAAmC,QAAQ,GAAG;iBAC5E,CAAC;YACJ,CAAC;QACH,CAAC;QACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;IACtB,CAAC;IAAC,OAAO,GAAQ,EAAE,CAAC;QAClB,oEAAoE;QACpE,qEAAqE;QACrE,8CAA8C;QAC9C,MAAM,GAAG,GAAG,GAAG,EAAE,OAAO,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC;QAC9C,IACE,GAAG,CAAC,QAAQ,CAAC,gBAAgB,CAAC;YAC9B,GAAG,CAAC,QAAQ,CAAC,eAAe,CAAC;YAC7B,GAAG,CAAC,QAAQ,CAAC,iBAAiB,CAAC,EAC/B,CAAC;YACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;QACtB,CAAC;QACD,sEAAsE;QACtE,oEAAoE;QACpE,kCAAkC;QAClC,OAAO,CAAC,IAAI,CACV,2DAA2D,YAAY,IAAI,EAC3E,GAAG,EAAE,OAAO,CACb,CAAC;QACF,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;IACtB,CAAC;AACH,CAAC;AAED,KAAK,UAAU,UAAU,CACvB,QAAkB,EAClB,IAAoB,EACpB,IAAY,EACZ,IAAmB,EACnB,GAAS;IAET,MAAM,OAAO,GAAG,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;IAE1E,0EAA0E;IAC1E,qCAAqC;IACrC,MAAM,cAAc,GAAG,IAAI,CAAC,KAAK,IAAI,SAAS,CAAC;IAC/C,MAAM,YAAY,GAChB,cAAc,KAAK,SAAS;QAC1B,CAAC,CAAC,IAAI,CAAC,SAAS,IAAI,QAAQ,CAAC,KAAK;QAClC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC;IACrB,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,IAAI,SAAS,CAAC;IAEzC,qEAAqE;IACrE,wEAAwE;IACxE,gEAAgE;IAChE,kEAAkE;IAClE,iBAAiB;IACjB,MAAM,QAAQ,GAAG,MAAM,oBAAoB,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAC;IACpE,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,OAAO,CAAC,IAAI,CACV,kCAAkC,OAAO,MAAM,QAAQ,CAAC,MAAM,IAAI;YAChE,wEAAwE,CAC3E,CAAC;QACF,qEAAqE;QACrE,IAAI,CAAC,OAAO,GAAG,GAAG,CAAC,WAAW,EAAE,CAAC;QACjC,IAAI,CAAC,UAAU,GAAG,SAAS,CAAC;QAC5B,IAAI,CAAC,SAAS,GAAG,QAAQ,CAAC,MAAM,CAAC;QACjC,MAAM,cAAc,CAAC,QAAQ,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;QAC3C,OAAO;IACT,CAAC;IAED,kBAAkB;IAClB,IAAI,CAAC,OAAO,GAAG,GAAG,CAAC,WAAW,EAAE,CAAC;IACjC,IAAI,CAAC,UAAU,GAAG,SAAS,CAAC;IAC5B,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;IAC3B,MAAM,cAAc,CAAC,QAAQ,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;IAE3C,MAAM,qBAAqB,CACzB,EAAE,SAAS,EAAE,YAAY,EAAE,KAAK,EAAE,QAAQ,EAAE,EAC5C,KAAK,IAAI,EAAE;QACT,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,EAAE,CAAC;YAClC,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,YAAY,CAAC,CAAC;YAC9D,MAAM,KAAK,GAAG,oBAAoB,CAAC,OAAO,CAAC,CAAC;YAE5C,gEAAgE;YAChE,8DAA8D;YAC9D,iEAAiE;YACjE,MAAM,UAAU,GAAG,MAAM,oBAAoB,CAAC,YAAY,CAAC,CAAC;YAC5D,MAAM,MAAM,GACV,IAAI,CAAC,MAAM;gBACX,CAAC,MAAM,aAAa,CAAC;oBACnB,MAAM,EAAE,UAAU,IAAI,IAAI,CAAC,MAAM;oBACjC,KAAK,EAAE,IAAI,CAAC,KAAK;iBAClB,CAAC,CAAC,CAAC;YACN,MAAM,cAAc,GAClB,IAAI,CAAC,KAAK;gBACV,CAAC,MAAM,uBAAuB,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;gBAC9D,MAAM,CAAC,YAAY,CAAC;YACtB,MAAM,KAAK,GAAG,uBAAuB,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;YAE9D,oCAAoC;YACpC,MAAM,WAAW,GAAG,QAAQ,OAAO,MAAM,GAAG,CAAC,kBAAkB,EAAE,EAAE,CAAC;YACpE,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,YAAY,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC;YAExE,MAAM,OAAO,GAAG,mBAAmB,OAAO,gBAAgB,YAAY,CAAC,IAAI,CAAC,QAAQ,CAAC,kDAAkD,IAAI,EAAE,CAAC;YAC9I,MAAM,QAAQ,GAAG;gBACf;oBACE,IAAI,EAAE,MAAe;oBACrB,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;iBACpD;aACF,CAAC;YAEF,+DAA+D;YAC/D,oCAAoC;YACpC,sEAAsE;YACtE,sEAAsE;YACtE,uEAAuE;YACvE,sEAAsE;YACtE,sEAAsE;YACtE,iEAAiE;YACjE,sEAAsE;YACtE,wEAAwE;YACxE,MAAM,KAAK,GAAG,OAAO,OAAO,CAAC,OAAO,CAAC,kBAAkB,EAAE,GAAG,CAAC,IAAI,IAAI,CAAC,GAAG,EAAE,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;YAExH,iEAAiE;YACjE,mEAAmE;YACnE,gEAAgE;YAChE,iEAAiE;YACjE,MAAM,aAAa,GAAG,uBAAuB,CAAC,SAAS,EAAE;gBACvD,gBAAgB,EAAE,IAAI;aACvB,CAAC,CAAC;YAEH,sEAAsE;YACtE,mDAAmD;YACnD,MAAM,cAAc,GAAG,UAAU,CAC/B,GAAG,EAAE;gBACH,oEAAoE;gBACpE,+CAA+C;YACjD,CAAC,EACD,CAAC,GAAG,EAAE,GAAG,IAAI,CACd,CAAC;YAEF,IAAI,QAAQ,GAAiB,IAAI,CAAC;YAClC,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;gBAC1C,MAAM,SAAS,GAAG,QAAQ,CACxB,KAAK,EACL,MAAM,CAAC,EAAE,EACT,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE;oBACrB,IAAI,CAAC;wBACH,MAAM,YAAY,CAAC;4BACjB,MAAM;4BACN,KAAK;4BACL,YAAY;4BACZ,KAAK;4BACL,QAAQ;4BACR,OAAO;4BACP,IAAI;4BACJ,MAAM;4BACN,QAAQ,EAAE,MAAM,CAAC,EAAE;yBACpB,CAAC,CAAC;oBACL,CAAC;oBAAC,OAAO,GAAG,EAAE,CAAC;wBACb,MAAM,GAAG,CAAC;oBACZ,CAAC;gBACH,CAAC;gBACD,kDAAkD;gBAClD,KAAK,EAAE,GAAG,EAAE,EAAE;oBACZ,IAAI,GAAG,CAAC,MAAM,KAAK,WAAW,EAAE,CAAC;wBAC/B,OAAO,EAAE,CAAC;oBACZ,CAAC;yBAAM,CAAC;wBACN,MAAM,CAAC,IAAI,KAAK,CAAC,8BAA8B,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;oBAChE,CAAC;gBACH,CAAC,EACD;oBACE,aAAa;oBACb,uDAAuD;iBACxD,CACF,CAAC;gBAEF,oEAAoE;gBACpE,6CAA6C;gBAC7C,YAAY,CAAC,cAAc,CAAC,CAAC;gBAC7B,UAAU,CACR,GAAG,EAAE;oBACH,IAAI,SAAS,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;wBACnC,SAAS,CAAC,KAAK,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC;wBAC1C,MAAM,CAAC,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC,CAAC;oBACrD,CAAC;gBACH,CAAC,EACD,CAAC,GAAG,EAAE,GAAG,IAAI,CACd,CAAC;YACJ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,GAAQ,EAAE,EAAE;gBACpB,QAAQ,GAAG,GAAG,CAAC;YACjB,CAAC,CAAC,CAAC;YAEH,IAAI,QAAQ;gBAAE,MAAM,QAAQ,CAAC;YAE7B,sEAAsE;YACtE,wEAAwE;YACxE,wEAAwE;YACxE,MAAM,IAAI,GAAG,cAAc,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC;YACvD,IAAI,CAAC,UAAU,GAAG,SAAS,CAAC;YAC5B,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;YAClC,MAAM,cAAc,CAAC,QAAQ,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;YAE3C,OAAO,CAAC,GAAG,CACT,yBAAyB,OAAO,0BAA0B,IAAI,CAAC,OAAO,EAAE,CACzE,CAAC;QACJ,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAClB,iEAAiE;YACjE,MAAM,IAAI,GAAG,cAAc,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC;YACvD,IAAI,CAAC,UAAU,GAAG,OAAO,CAAC;YAC1B,IAAI,CAAC,SAAS,GAAG,GAAG,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,IAAI,eAAe,CAAC;YAChE,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;YAClC,MAAM,cAAc,CAAC,QAAQ,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;YAE3C,OAAO,CAAC,KAAK,CACX,yBAAyB,OAAO,WAAW,EAC3C,GAAG,EAAE,OAAO,CACb,CAAC;QACJ,CAAC;IACH,CAAC,CACF,CAAC,CAAC,4BAA4B;AACjC,CAAC;AAED,KAAK,UAAU,cAAc,CAC3B,QAAkB,EAClB,IAAoB,EACpB,IAAY;IAEZ,MAAM,OAAO,GAAG,eAAe,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IAC5C,MAAM,WAAW,CAAC,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;AAC5D,CAAC","sourcesContent":["import {\n  getStoredModelForEngine,\n  normalizeModelForEngine,\n  resolveEngine,\n} from \"../agent/engine/index.js\";\nimport type { AgentEngine } from \"../agent/engine/types.js\";\nimport {\n  runAgentLoop,\n  actionsToEngineTools,\n  getOwnerActiveApiKey,\n  type ActionEntry,\n} from \"../agent/production-agent.js\";\nimport { startRun, resolveRunSoftTimeoutMs } from \"../agent/run-manager.js\";\nimport { createThread } from \"../chat-threads/store.js\";\nimport {\n  resourceListAllOwners,\n  resourcePut,\n  type Resource,\n} from \"../resources/store.js\";\nimport { runWithRequestContext } from \"../server/request-context.js\";\nimport { nextOccurrence, isValidCron, describeCron } from \"./cron.js\";\n\n// ─── Frontmatter parsing ────────────────────────────────────────────────────\n\nexport interface JobFrontmatter {\n  schedule: string;\n  enabled: boolean;\n  createdBy?: string;\n  orgId?: string;\n  runAs?: \"creator\" | \"shared\";\n  lastRun?: string;\n  lastStatus?: \"success\" | \"error\" | \"running\" | \"skipped\";\n  lastError?: string;\n  nextRun?: string;\n}\n\nconst FRONTMATTER_RE = /^---\\n([\\s\\S]*?)\\n---\\n?([\\s\\S]*)$/;\n\nexport function parseJobFrontmatter(content: string): {\n  meta: JobFrontmatter;\n  body: string;\n} {\n  const match = content.match(FRONTMATTER_RE);\n  if (!match) {\n    return {\n      meta: { schedule: \"\", enabled: false },\n      body: content,\n    };\n  }\n\n  const yamlBlock = match[1];\n  const body = match[2].trim();\n\n  const meta: JobFrontmatter = { schedule: \"\", enabled: true };\n\n  for (const line of yamlBlock.split(\"\\n\")) {\n    const colonIdx = line.indexOf(\":\");\n    if (colonIdx === -1) continue;\n    const key = line.slice(0, colonIdx).trim();\n    let value = line.slice(colonIdx + 1).trim();\n\n    // Strip quotes\n    if (\n      (value.startsWith('\"') && value.endsWith('\"')) ||\n      (value.startsWith(\"'\") && value.endsWith(\"'\"))\n    ) {\n      value = value.slice(1, -1);\n    }\n\n    switch (key) {\n      case \"schedule\":\n        meta.schedule = value;\n        break;\n      case \"enabled\":\n        meta.enabled = value !== \"false\";\n        break;\n      case \"createdBy\":\n        meta.createdBy = value;\n        break;\n      case \"orgId\":\n        meta.orgId = value;\n        break;\n      case \"runAs\":\n        meta.runAs =\n          value === \"shared\" || value === \"creator\" ? value : undefined;\n        break;\n      case \"lastRun\":\n        meta.lastRun = value;\n        break;\n      case \"lastStatus\":\n        meta.lastStatus = value as JobFrontmatter[\"lastStatus\"];\n        break;\n      case \"lastError\":\n        // Reverse the escaping applied in buildJobContent.\n        meta.lastError = value\n          .replace(/\\\\n/g, \"\\n\")\n          .replace(/\\\\r/g, \"\\r\")\n          .replace(/\\\\\"/g, '\"')\n          .replace(/\\\\\\\\/g, \"\\\\\");\n        break;\n      case \"nextRun\":\n        meta.nextRun = value;\n        break;\n    }\n  }\n\n  return { meta, body };\n}\n\nexport function buildJobContent(meta: JobFrontmatter, body: string): string {\n  const lines = [`---`];\n  lines.push(`schedule: \"${meta.schedule}\"`);\n  lines.push(`enabled: ${meta.enabled}`);\n  if (meta.createdBy) lines.push(`createdBy: ${meta.createdBy}`);\n  if (meta.orgId) lines.push(`orgId: ${meta.orgId}`);\n  if (meta.runAs) lines.push(`runAs: ${meta.runAs}`);\n  if (meta.lastRun) lines.push(`lastRun: ${meta.lastRun}`);\n  if (meta.lastStatus) lines.push(`lastStatus: ${meta.lastStatus}`);\n  if (meta.lastError) {\n    // Escape backslash, quote, then CR/LF. The frontmatter parser splits on\n    // \"\\n\", so an un-escaped newline (common in stack traces) would otherwise\n    // split the value across lines and corrupt/truncate the stored error.\n    const escaped = meta.lastError\n      .replace(/\\\\/g, \"\\\\\\\\\")\n      .replace(/\"/g, '\\\\\"')\n      .replace(/\\r/g, \"\\\\r\")\n      .replace(/\\n/g, \"\\\\n\");\n    lines.push(`lastError: \"${escaped}\"`);\n  }\n  if (meta.nextRun) lines.push(`nextRun: ${meta.nextRun}`);\n  lines.push(`---`);\n  lines.push(\"\");\n  lines.push(body);\n  return lines.join(\"\\n\");\n}\n\n// ─── Job execution ──────────────────────────────────────────────────────────\n\nexport interface SchedulerDeps {\n  getActions: () => Record<string, ActionEntry>;\n  getSystemPrompt: (owner: string) => Promise<string>;\n  /** Optional engine override. Defaults to the resolved request engine. */\n  engine?: AgentEngine;\n  apiKey?: string;\n  model?: string;\n  /** App/template id used for org-scoped per-app model defaults. */\n  appId?: string;\n}\n\nlet _isRunning = false;\n\n// Skip the DB query on every tick if we recently confirmed no jobs exist.\n// `_hasJobsCache` is invalidated whenever a `jobs/*` resource is written or\n// deleted (subscribed below), and refreshed at most every 5 minutes.\nlet _hasJobsCache: boolean | undefined;\nlet _lastJobsCheck = 0;\nconst JOBS_CHECK_INTERVAL_MS = 5 * 60_000;\nlet _emitterSubscribed = false;\n\nfunction subscribeToJobsResourceEvents(): void {\n  if (_emitterSubscribed) return;\n  _emitterSubscribed = true;\n  // Lazy import to avoid circular deps at module load\n  import(\"../resources/emitter.js\")\n    .then(({ getResourcesEmitter }) => {\n      getResourcesEmitter().on(\"resources\", (event: any) => {\n        if (typeof event?.path === \"string\" && event.path.startsWith(\"jobs/\")) {\n          _hasJobsCache = undefined;\n        }\n      });\n    })\n    .catch((err) => {\n      console.warn(\n        \"[jobs] resource-event subscription failed:\",\n        err instanceof Error ? err.message : err,\n      );\n    });\n}\n\n/**\n * Process all due recurring jobs. Called every 60 seconds.\n * Sequential execution with 5-minute timeout per job.\n */\nexport async function processRecurringJobs(deps: SchedulerDeps): Promise<void> {\n  // Prevent concurrent runs\n  if (_isRunning) return;\n\n  subscribeToJobsResourceEvents();\n\n  // Skip if we recently confirmed there are no job resources to run.\n  const nowMs = Date.now();\n  if (\n    _hasJobsCache === false &&\n    nowMs - _lastJobsCheck < JOBS_CHECK_INTERVAL_MS\n  ) {\n    return;\n  }\n\n  _isRunning = true;\n\n  try {\n    const jobResources = await resourceListAllOwners(\"jobs/\");\n    _hasJobsCache = jobResources.some(\n      (r) => r.path.endsWith(\".md\") && !r.path.endsWith(\".keep\"),\n    );\n    _lastJobsCheck = nowMs;\n    if (!_hasJobsCache) return;\n    const now = new Date();\n\n    for (const resource of jobResources) {\n      // Skip non-markdown or .keep files\n      if (!resource.path.endsWith(\".md\")) continue;\n      if (resource.path.endsWith(\".keep\")) continue;\n\n      const { meta, body } = parseJobFrontmatter(resource.content);\n\n      // Skip disabled or missing schedule\n      if (!meta.enabled || !meta.schedule) continue;\n      if (!isValidCron(meta.schedule)) continue;\n\n      // Skip if currently running, unless it has been stuck for more than 10 minutes\n      // (server crash mid-job leaves lastStatus=running forever without this guard)\n      if (meta.lastStatus === \"running\") {\n        const stuckCutoff = 10 * 60 * 1000;\n        if (\n          meta.lastRun &&\n          now.getTime() - new Date(meta.lastRun).getTime() < stuckCutoff\n        ) {\n          continue;\n        }\n        // Stuck — reset so the next check can re-run it\n        meta.lastStatus = \"error\";\n        meta.lastError = \"Job timed out or server crashed mid-run\";\n        const next = nextOccurrence(meta.schedule, now);\n        meta.nextRun = next.toISOString();\n        await updateResource(resource, meta, body);\n        continue;\n      }\n\n      // Check if due\n      if (meta.nextRun) {\n        const nextRunDate = new Date(meta.nextRun);\n        if (nextRunDate > now) continue;\n      } else {\n        // No nextRun computed yet — seed it from `now` so the job waits for its\n        // real next occurrence. Computing from new Date(0) (the epoch) always\n        // returns a 1970 date, which is < now, so the job would fire\n        // immediately on first sight regardless of its schedule.\n        const next = nextOccurrence(meta.schedule, now);\n        meta.nextRun = next.toISOString();\n        await updateResource(resource, meta, body);\n        continue;\n      }\n\n      // Skip if body is empty\n      if (!body.trim()) continue;\n\n      // Execute the job\n      await executeJob(resource, meta, body, deps, now);\n    }\n  } catch (err) {\n    // Transient WS / connection drops (Neon serverless): silently retry next\n    // tick instead of spamming stderr — `retryOnConnectionError` already did\n    // its retry budget at the driver level.\n    const { isConnectionError } = await import(\"../db/client.js\");\n    if (isConnectionError(err)) {\n      _hasJobsCache = undefined; // force re-check on next successful tick\n      _lastJobsCheck = 0;\n      return;\n    }\n    // Unwrap ErrorEvent (Neon WS driver emits these on network failure) so logs show the real cause\n    const detail =\n      err instanceof Error\n        ? err\n        : ((err as any)?.error ?? (err as any)?.message ?? err);\n    console.error(\"[recurring-jobs] Error processing jobs:\", detail);\n  } finally {\n    _isRunning = false;\n  }\n}\n\n/**\n * Validate that the run-as user still exists and (if scoped to an org) is\n * still a member of that org. Skips the check for the dev-mode bypass\n * identity and the shared-owner sentinel, neither of which map to a real\n * user row.\n *\n * SECURITY: without this check the scheduler keeps running jobs as\n * `meta.createdBy` indefinitely — even after the user has been deleted,\n * removed from the org, or had their account disabled. The cron entry\n * itself is left intact so an admin can purge it manually after the\n * underlying user-state issue is investigated. See audit 12 #10.\n */\nasync function isJobRunAsStillValid(\n  jobUserEmail: string,\n  jobOrgId: string | undefined,\n): Promise<{ ok: boolean; reason?: string }> {\n  // Shared-owner sentinel isn't a real user (used by jobs run as the\n  // workspace identity).\n  if (jobUserEmail === \"__shared__\") return { ok: true };\n  try {\n    const { getDbExec } = await import(\"../db/client.js\");\n    const db = getDbExec();\n    // Better Auth's user table is named \"user\" (singular). The reserved\n    // word is quoted to avoid ambiguity in Postgres.\n    const userResult = await db.execute({\n      sql: `SELECT 1 FROM \"user\" WHERE email = ? LIMIT 1`,\n      args: [jobUserEmail],\n    });\n    if (!userResult.rows || userResult.rows.length === 0) {\n      return { ok: false, reason: `user \"${jobUserEmail}\" no longer exists` };\n    }\n    if (jobOrgId) {\n      const memberResult = await db.execute({\n        sql: `SELECT 1 FROM org_members WHERE org_id = ? AND LOWER(email) = LOWER(?) LIMIT 1`,\n        args: [jobOrgId, jobUserEmail],\n      });\n      if (!memberResult.rows || memberResult.rows.length === 0) {\n        return {\n          ok: false,\n          reason: `user \"${jobUserEmail}\" is no longer a member of org \"${jobOrgId}\"`,\n        };\n      }\n    }\n    return { ok: true };\n  } catch (err: any) {\n    // Tables may not exist on a brand-new install (no auth tables yet).\n    // Treat that as \"valid\" rather than blocking every job. The check is\n    // only meaningful once the auth tables exist.\n    const msg = err?.message?.toLowerCase() ?? \"\";\n    if (\n      msg.includes(\"does not exist\") ||\n      msg.includes(\"no such table\") ||\n      msg.includes(\"undefined table\")\n    ) {\n      return { ok: true };\n    }\n    // Any other DB error: be conservative and let the job run rather than\n    // blocking on an unexpected failure mode (e.g. transient connection\n    // issue). We log so it's visible.\n    console.warn(\n      `[recurring-jobs] User/membership validation failed for \"${jobUserEmail}\":`,\n      err?.message,\n    );\n    return { ok: true };\n  }\n}\n\nasync function executeJob(\n  resource: Resource,\n  meta: JobFrontmatter,\n  body: string,\n  deps: SchedulerDeps,\n  now: Date,\n): Promise<void> {\n  const jobName = resource.path.replace(/^jobs\\//, \"\").replace(/\\.md$/, \"\");\n\n  // Set owner context so all scoped operations (app-state, resources, etc.)\n  // operate on the correct user's data\n  const effectiveRunAs = meta.runAs ?? \"creator\";\n  const jobUserEmail =\n    effectiveRunAs === \"creator\"\n      ? meta.createdBy || resource.owner\n      : resource.owner;\n  const jobOrgId = meta.orgId ?? undefined;\n\n  // SECURITY (audit 12 #10): re-validate the run-as user/membership on\n  // every tick. Sharing revocation, user deletion, and org-member removal\n  // must take effect for already-scheduled jobs. Skip the tick on\n  // failure; leave the cron entry alone so an admin can purge after\n  // investigation.\n  const validity = await isJobRunAsStillValid(jobUserEmail, jobOrgId);\n  if (!validity.ok) {\n    console.warn(\n      `[recurring-jobs] Skipping job \"${jobName}\": ${validity.reason}. ` +\n        `User/membership no longer valid — leaving cron entry for admin review.`,\n    );\n    // Mark as skipped without resetting nextRun so an admin can find it.\n    meta.lastRun = now.toISOString();\n    meta.lastStatus = \"skipped\";\n    meta.lastError = validity.reason;\n    await updateResource(resource, meta, body);\n    return;\n  }\n\n  // Mark as running\n  meta.lastRun = now.toISOString();\n  meta.lastStatus = \"running\";\n  meta.lastError = undefined;\n  await updateResource(resource, meta, body);\n\n  await runWithRequestContext(\n    { userEmail: jobUserEmail, orgId: jobOrgId },\n    async () => {\n      try {\n        const actions = deps.getActions();\n        const systemPrompt = await deps.getSystemPrompt(jobUserEmail);\n        const tools = actionsToEngineTools(actions);\n\n        // Prefer the job runner's saved Anthropic key so recurring jobs\n        // don't silently bill the shared platform key once a user has\n        // brought their own. Falls back to the platform key when absent.\n        const userApiKey = await getOwnerActiveApiKey(jobUserEmail);\n        const engine =\n          deps.engine ??\n          (await resolveEngine({\n            apiKey: userApiKey ?? deps.apiKey,\n            appId: deps.appId,\n          }));\n        const modelCandidate =\n          deps.model ??\n          (await getStoredModelForEngine(engine, { appId: deps.appId })) ??\n          engine.defaultModel;\n        const model = normalizeModelForEngine(engine, modelCandidate);\n\n        // Create a chat thread for this run\n        const threadTitle = `Job: ${jobName} — ${now.toLocaleDateString()}`;\n        const thread = await createThread(jobUserEmail, { title: threadTitle });\n\n        const jobText = `[Recurring Job: ${jobName}]\\nSchedule: ${describeCron(meta.schedule)}\\n\\nExecute the following job instructions:\\n\\n${body}`;\n        const messages = [\n          {\n            role: \"user\" as const,\n            content: [{ type: \"text\" as const, text: jobText }],\n          },\n        ];\n\n        // Route through startRun (from run-manager) instead of calling\n        // runAgentLoop directly. This adds:\n        //   1. A heartbeat row in agent_runs so a serverless kill is detected\n        //      by reapAllStaleRuns on the next startup and the row is flipped\n        //      to 'errored' — no more stranded lastStatus:\"running\" in the job\n        //      frontmatter after the next tick resets it via the stuck-guard.\n        //   2. The soft-timeout infrastructure so the job checkpoints cleanly\n        //      before serverless hard-kill rather than dying mid-flight.\n        //   3. SQL abort checks so a displaced/reaped run self-aborts instead\n        //      of completing invisibly and potentially overwriting newer state.\n        const runId = `job-${jobName.replace(/[^a-zA-Z0-9._-]/g, \"-\")}-${Date.now()}-${Math.random().toString(36).slice(2, 6)}`;\n\n        // Use the same soft-timeout logic as interactive runs. On hosted\n        // runtimes this clamps to 40s (under the gateway wall); locally it\n        // defaults to 0 (no framework timeout). The 5-minute hard-abort\n        // below is still provided as a backstop via the startRun signal.\n        const softTimeoutMs = resolveRunSoftTimeoutMs(undefined, {\n          useHostedDefault: true,\n        });\n\n        // Hard-abort backstop: 5 minutes. On hosted runtimes the soft-timeout\n        // will fire first; locally this is the only guard.\n        const hardAbortTimer = setTimeout(\n          () => {\n            // startRun's abort controller handles this below, but we still need\n            // the handle to clear it in the finally block.\n          },\n          5 * 60 * 1000,\n        );\n\n        let jobError: Error | null = null;\n        await new Promise<void>((resolve, reject) => {\n          const activeRun = startRun(\n            runId,\n            thread.id,\n            async (send, signal) => {\n              try {\n                await runAgentLoop({\n                  engine,\n                  model,\n                  systemPrompt,\n                  tools,\n                  messages,\n                  actions,\n                  send,\n                  signal,\n                  threadId: thread.id,\n                });\n              } catch (err) {\n                throw err;\n              }\n            },\n            // onComplete: run finished (completed or aborted)\n            async (run) => {\n              if (run.status === \"completed\") {\n                resolve();\n              } else {\n                reject(new Error(`Job run ended with status: ${run.status}`));\n              }\n            },\n            {\n              softTimeoutMs,\n              // turnId defaults to runId — fine for single-turn jobs\n            },\n          );\n\n          // Hard-abort backstop: abort the run-manager's own controller after\n          // 5 minutes if it hasn't finished naturally.\n          clearTimeout(hardAbortTimer);\n          setTimeout(\n            () => {\n              if (activeRun.status === \"running\") {\n                activeRun.abort.abort(\"job_hard_timeout\");\n                reject(new Error(\"Job timed out after 5 minutes\"));\n              }\n            },\n            5 * 60 * 1000,\n          );\n        }).catch((err: any) => {\n          jobError = err;\n        });\n\n        if (jobError) throw jobError;\n\n        // Success — update status. Compute the next run from completion time,\n        // not the job's start time `now`: a long run could otherwise schedule a\n        // nextRun that's already in the past and re-fire immediately next tick.\n        const next = nextOccurrence(meta.schedule, new Date());\n        meta.lastStatus = \"success\";\n        meta.nextRun = next.toISOString();\n        await updateResource(resource, meta, body);\n\n        console.log(\n          `[recurring-jobs] Job \"${jobName}\" completed. Next run: ${meta.nextRun}`,\n        );\n      } catch (err: any) {\n        // Error — update status. Use completion time (see success path).\n        const next = nextOccurrence(meta.schedule, new Date());\n        meta.lastStatus = \"error\";\n        meta.lastError = err?.message?.slice(0, 200) || \"Unknown error\";\n        meta.nextRun = next.toISOString();\n        await updateResource(resource, meta, body);\n\n        console.error(\n          `[recurring-jobs] Job \"${jobName}\" failed:`,\n          err?.message,\n        );\n      }\n    },\n  ); // end runWithRequestContext\n}\n\nasync function updateResource(\n  resource: Resource,\n  meta: JobFrontmatter,\n  body: string,\n): Promise<void> {\n  const content = buildJobContent(meta, body);\n  await resourcePut(resource.owner, resource.path, content);\n}\n"]}
+{"version":3,"file":"scheduler.js","sourceRoot":"","sources":["../../src/jobs/scheduler.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,uBAAuB,EACvB,uBAAuB,EACvB,aAAa,GACd,MAAM,0BAA0B,CAAC;AAElC,OAAO,EACL,YAAY,EACZ,oBAAoB,EACpB,oBAAoB,GAErB,MAAM,8BAA8B,CAAC;AACtC,OAAO,EAAE,QAAQ,EAAE,uBAAuB,EAAE,MAAM,yBAAyB,CAAC;AAC5E,OAAO,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAC;AACxD,OAAO,EACL,qBAAqB,EACrB,WAAW,GAEZ,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,qBAAqB,EAAE,MAAM,8BAA8B,CAAC;AACrE,OAAO,EAAE,cAAc,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,WAAW,CAAC;AAgBtE,MAAM,cAAc,GAAG,oCAAoC,CAAC;AAE5D,MAAM,UAAU,mBAAmB,CAAC,OAAe;IAIjD,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;IAC5C,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO;YACL,IAAI,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE;YACtC,IAAI,EAAE,OAAO;SACd,CAAC;IACJ,CAAC;IAED,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;IAC3B,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAE7B,MAAM,IAAI,GAAmB,EAAE,QAAQ,EAAE,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAE7D,KAAK,MAAM,IAAI,IAAI,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QACzC,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACnC,IAAI,QAAQ,KAAK,CAAC,CAAC;YAAE,SAAS;QAC9B,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,IAAI,EAAE,CAAC;QAC3C,IAAI,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAE5C,eAAe;QACf,IACE,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;YAC9C,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,EAC9C,CAAC;YACD,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QAC7B,CAAC;QAED,QAAQ,GAAG,EAAE,CAAC;YACZ,KAAK,UAAU;gBACb,IAAI,CAAC,QAAQ,GAAG,KAAK,CAAC;gBACtB,MAAM;YACR,KAAK,SAAS;gBACZ,IAAI,CAAC,OAAO,GAAG,KAAK,KAAK,OAAO,CAAC;gBACjC,MAAM;YACR,KAAK,WAAW;gBACd,IAAI,CAAC,SAAS,GAAG,KAAK,CAAC;gBACvB,MAAM;YACR,KAAK,OAAO;gBACV,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;gBACnB,MAAM;YACR,KAAK,OAAO;gBACV,IAAI,CAAC,KAAK;oBACR,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;gBAChE,MAAM;YACR,KAAK,SAAS;gBACZ,IAAI,CAAC,OAAO,GAAG,KAAK,CAAC;gBACrB,MAAM;YACR,KAAK,YAAY;gBACf,IAAI,CAAC,UAAU,GAAG,KAAqC,CAAC;gBACxD,MAAM;YACR,KAAK,WAAW;gBACd,mDAAmD;gBACnD,IAAI,CAAC,SAAS,GAAG,KAAK;qBACnB,OAAO,CAAC,MAAM,EAAE,IAAI,CAAC;qBACrB,OAAO,CAAC,MAAM,EAAE,IAAI,CAAC;qBACrB,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC;qBACpB,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;gBAC1B,MAAM;YACR,KAAK,SAAS;gBACZ,IAAI,CAAC,OAAO,GAAG,KAAK,CAAC;gBACrB,MAAM;QACV,CAAC;IACH,CAAC;IAED,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;AACxB,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,IAAoB,EAAE,IAAY;IAChE,MAAM,KAAK,GAAG,CAAC,KAAK,CAAC,CAAC;IACtB,KAAK,CAAC,IAAI,CAAC,cAAc,IAAI,CAAC,QAAQ,GAAG,CAAC,CAAC;IAC3C,KAAK,CAAC,IAAI,CAAC,YAAY,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;IACvC,IAAI,IAAI,CAAC,SAAS;QAAE,KAAK,CAAC,IAAI,CAAC,cAAc,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC;IAC/D,IAAI,IAAI,CAAC,KAAK;QAAE,KAAK,CAAC,IAAI,CAAC,UAAU,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;IACnD,IAAI,IAAI,CAAC,KAAK;QAAE,KAAK,CAAC,IAAI,CAAC,UAAU,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;IACnD,IAAI,IAAI,CAAC,OAAO;QAAE,KAAK,CAAC,IAAI,CAAC,YAAY,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;IACzD,IAAI,IAAI,CAAC,UAAU;QAAE,KAAK,CAAC,IAAI,CAAC,eAAe,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC;IAClE,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;QACnB,wEAAwE;QACxE,0EAA0E;QAC1E,sEAAsE;QACtE,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS;aAC3B,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC;aACtB,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC;aACpB,OAAO,CAAC,KAAK,EAAE,KAAK,CAAC;aACrB,OAAO,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;QACzB,KAAK,CAAC,IAAI,CAAC,eAAe,OAAO,GAAG,CAAC,CAAC;IACxC,CAAC;IACD,IAAI,IAAI,CAAC,OAAO;QAAE,KAAK,CAAC,IAAI,CAAC,YAAY,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;IACzD,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAClB,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACjB,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAeD,IAAI,UAAU,GAAG,KAAK,CAAC;AAEvB,0EAA0E;AAC1E,4EAA4E;AAC5E,qEAAqE;AACrE,IAAI,aAAkC,CAAC;AACvC,IAAI,cAAc,GAAG,CAAC,CAAC;AACvB,MAAM,sBAAsB,GAAG,CAAC,GAAG,MAAM,CAAC;AAC1C,IAAI,kBAAkB,GAAG,KAAK,CAAC;AAE/B,SAAS,6BAA6B;IACpC,IAAI,kBAAkB;QAAE,OAAO;IAC/B,kBAAkB,GAAG,IAAI,CAAC;IAC1B,oDAAoD;IACpD,MAAM,CAAC,yBAAyB,CAAC;SAC9B,IAAI,CAAC,CAAC,EAAE,mBAAmB,EAAE,EAAE,EAAE;QAChC,mBAAmB,EAAE,CAAC,EAAE,CAAC,WAAW,EAAE,CAAC,KAAU,EAAE,EAAE;YACnD,IAAI,OAAO,KAAK,EAAE,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;gBACtE,aAAa,GAAG,SAAS,CAAC;YAC5B,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC,CAAC;SACD,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;QACb,OAAO,CAAC,IAAI,CACV,4CAA4C,EAC5C,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CACzC,CAAC;IACJ,CAAC,CAAC,CAAC;AACP,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,IAAmB;IAC5D,0BAA0B;IAC1B,IAAI,UAAU;QAAE,OAAO;IAEvB,6BAA6B,EAAE,CAAC;IAEhC,mEAAmE;IACnE,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACzB,IACE,aAAa,KAAK,KAAK;QACvB,KAAK,GAAG,cAAc,GAAG,sBAAsB,EAC/C,CAAC;QACD,OAAO;IACT,CAAC;IAED,UAAU,GAAG,IAAI,CAAC;IAElB,IAAI,CAAC;QACH,MAAM,YAAY,GAAG,MAAM,qBAAqB,CAAC,OAAO,CAAC,CAAC;QAC1D,aAAa,GAAG,YAAY,CAAC,IAAI,CAC/B,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAC3D,CAAC;QACF,cAAc,GAAG,KAAK,CAAC;QACvB,IAAI,CAAC,aAAa;YAAE,OAAO;QAC3B,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;QAEvB,KAAK,MAAM,QAAQ,IAAI,YAAY,EAAE,CAAC;YACpC,mCAAmC;YACnC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;gBAAE,SAAS;YAC7C,IAAI,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC;gBAAE,SAAS;YAE9C,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,mBAAmB,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;YAE7D,oCAAoC;YACpC,IAAI,CAAC,IAAI,CAAC,OAAO,IAAI,CAAC,IAAI,CAAC,QAAQ;gBAAE,SAAS;YAC9C,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,QAAQ,CAAC;gBAAE,SAAS;YAE1C,+EAA+E;YAC/E,8EAA8E;YAC9E,IAAI,IAAI,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;gBAClC,MAAM,WAAW,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;gBACnC,IACE,IAAI,CAAC,OAAO;oBACZ,GAAG,CAAC,OAAO,EAAE,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,GAAG,WAAW,EAC9D,CAAC;oBACD,SAAS;gBACX,CAAC;gBACD,gDAAgD;gBAChD,IAAI,CAAC,UAAU,GAAG,OAAO,CAAC;gBAC1B,IAAI,CAAC,SAAS,GAAG,yCAAyC,CAAC;gBAC3D,MAAM,IAAI,GAAG,cAAc,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;gBAChD,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;gBAClC,MAAM,cAAc,CAAC,QAAQ,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;gBAC3C,SAAS;YACX,CAAC;YAED,eAAe;YACf,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;gBACjB,MAAM,WAAW,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;gBAC3C,IAAI,WAAW,GAAG,GAAG;oBAAE,SAAS;YAClC,CAAC;iBAAM,CAAC;gBACN,wEAAwE;gBACxE,sEAAsE;gBACtE,6DAA6D;gBAC7D,yDAAyD;gBACzD,MAAM,IAAI,GAAG,cAAc,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;gBAChD,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;gBAClC,MAAM,cAAc,CAAC,QAAQ,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;gBAC3C,SAAS;YACX,CAAC;YAED,wBAAwB;YACxB,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE;gBAAE,SAAS;YAE3B,kBAAkB;YAClB,MAAM,UAAU,CAAC,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;QACpD,CAAC;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,yEAAyE;QACzE,yEAAyE;QACzE,wCAAwC;QACxC,MAAM,EAAE,iBAAiB,EAAE,GAAG,MAAM,MAAM,CAAC,iBAAiB,CAAC,CAAC;QAC9D,IAAI,iBAAiB,CAAC,GAAG,CAAC,EAAE,CAAC;YAC3B,aAAa,GAAG,SAAS,CAAC,CAAC,yCAAyC;YACpE,cAAc,GAAG,CAAC,CAAC;YACnB,OAAO;QACT,CAAC;QACD,gGAAgG;QAChG,MAAM,MAAM,GACV,GAAG,YAAY,KAAK;YAClB,CAAC,CAAC,GAAG;YACL,CAAC,CAAC,CAAE,GAAW,EAAE,KAAK,IAAK,GAAW,EAAE,OAAO,IAAI,GAAG,CAAC,CAAC;QAC5D,OAAO,CAAC,KAAK,CAAC,yCAAyC,EAAE,MAAM,CAAC,CAAC;IACnE,CAAC;YAAS,CAAC;QACT,UAAU,GAAG,KAAK,CAAC;IACrB,CAAC;AACH,CAAC;AAED;;;;;;;;;;;GAWG;AACH,KAAK,UAAU,oBAAoB,CACjC,YAAoB,EACpB,QAA4B;IAE5B,mEAAmE;IACnE,uBAAuB;IACvB,IAAI,YAAY,KAAK,YAAY;QAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;IACvD,IAAI,CAAC;QACH,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,MAAM,CAAC,iBAAiB,CAAC,CAAC;QACtD,MAAM,EAAE,GAAG,SAAS,EAAE,CAAC;QACvB,oEAAoE;QACpE,iDAAiD;QACjD,MAAM,UAAU,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC;YAClC,GAAG,EAAE,8CAA8C;YACnD,IAAI,EAAE,CAAC,YAAY,CAAC;SACrB,CAAC,CAAC;QACH,IAAI,CAAC,UAAU,CAAC,IAAI,IAAI,UAAU,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACrD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,YAAY,oBAAoB,EAAE,CAAC;QAC1E,CAAC;QACD,IAAI,QAAQ,EAAE,CAAC;YACb,MAAM,YAAY,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC;gBACpC,GAAG,EAAE,gFAAgF;gBACrF,IAAI,EAAE,CAAC,QAAQ,EAAE,YAAY,CAAC;aAC/B,CAAC,CAAC;YACH,IAAI,CAAC,YAAY,CAAC,IAAI,IAAI,YAAY,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACzD,OAAO;oBACL,EAAE,EAAE,KAAK;oBACT,MAAM,EAAE,SAAS,YAAY,mCAAmC,QAAQ,GAAG;iBAC5E,CAAC;YACJ,CAAC;QACH,CAAC;QACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;IACtB,CAAC;IAAC,OAAO,GAAQ,EAAE,CAAC;QAClB,oEAAoE;QACpE,qEAAqE;QACrE,8CAA8C;QAC9C,MAAM,GAAG,GAAG,GAAG,EAAE,OAAO,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC;QAC9C,IACE,GAAG,CAAC,QAAQ,CAAC,gBAAgB,CAAC;YAC9B,GAAG,CAAC,QAAQ,CAAC,eAAe,CAAC;YAC7B,GAAG,CAAC,QAAQ,CAAC,iBAAiB,CAAC,EAC/B,CAAC;YACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;QACtB,CAAC;QACD,sEAAsE;QACtE,oEAAoE;QACpE,kCAAkC;QAClC,OAAO,CAAC,IAAI,CACV,2DAA2D,YAAY,IAAI,EAC3E,GAAG,EAAE,OAAO,CACb,CAAC;QACF,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;IACtB,CAAC;AACH,CAAC;AAED,KAAK,UAAU,UAAU,CACvB,QAAkB,EAClB,IAAoB,EACpB,IAAY,EACZ,IAAmB,EACnB,GAAS;IAET,MAAM,OAAO,GAAG,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;IAE1E,0EAA0E;IAC1E,qCAAqC;IACrC,MAAM,cAAc,GAAG,IAAI,CAAC,KAAK,IAAI,SAAS,CAAC;IAC/C,MAAM,YAAY,GAChB,cAAc,KAAK,SAAS;QAC1B,CAAC,CAAC,IAAI,CAAC,SAAS,IAAI,QAAQ,CAAC,KAAK;QAClC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC;IACrB,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,IAAI,SAAS,CAAC;IAEzC,qEAAqE;IACrE,wEAAwE;IACxE,gEAAgE;IAChE,kEAAkE;IAClE,iBAAiB;IACjB,MAAM,QAAQ,GAAG,MAAM,oBAAoB,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAC;IACpE,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,OAAO,CAAC,IAAI,CACV,kCAAkC,OAAO,MAAM,QAAQ,CAAC,MAAM,IAAI;YAChE,wEAAwE,CAC3E,CAAC;QACF,qEAAqE;QACrE,IAAI,CAAC,OAAO,GAAG,GAAG,CAAC,WAAW,EAAE,CAAC;QACjC,IAAI,CAAC,UAAU,GAAG,SAAS,CAAC;QAC5B,IAAI,CAAC,SAAS,GAAG,QAAQ,CAAC,MAAM,CAAC;QACjC,MAAM,cAAc,CAAC,QAAQ,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;QAC3C,OAAO;IACT,CAAC;IAED,kBAAkB;IAClB,IAAI,CAAC,OAAO,GAAG,GAAG,CAAC,WAAW,EAAE,CAAC;IACjC,IAAI,CAAC,UAAU,GAAG,SAAS,CAAC;IAC5B,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;IAC3B,MAAM,cAAc,CAAC,QAAQ,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;IAE3C,MAAM,qBAAqB,CACzB,EAAE,SAAS,EAAE,YAAY,EAAE,KAAK,EAAE,QAAQ,EAAE,EAC5C,KAAK,IAAI,EAAE;QACT,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,EAAE,CAAC;YAClC,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,YAAY,CAAC,CAAC;YAC9D,MAAM,KAAK,GAAG,oBAAoB,CAAC,OAAO,CAAC,CAAC;YAE5C,gEAAgE;YAChE,8DAA8D;YAC9D,iEAAiE;YACjE,MAAM,UAAU,GAAG,MAAM,oBAAoB,CAAC,YAAY,CAAC,CAAC;YAC5D,MAAM,MAAM,GACV,IAAI,CAAC,MAAM;gBACX,CAAC,MAAM,aAAa,CAAC;oBACnB,MAAM,EAAE,UAAU,IAAI,IAAI,CAAC,MAAM;oBACjC,KAAK,EAAE,IAAI,CAAC,KAAK;iBAClB,CAAC,CAAC,CAAC;YACN,MAAM,cAAc,GAClB,IAAI,CAAC,KAAK;gBACV,CAAC,MAAM,uBAAuB,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;gBAC9D,MAAM,CAAC,YAAY,CAAC;YACtB,MAAM,KAAK,GAAG,uBAAuB,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;YAE9D,oCAAoC;YACpC,MAAM,WAAW,GAAG,QAAQ,OAAO,MAAM,GAAG,CAAC,kBAAkB,EAAE,EAAE,CAAC;YACpE,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,YAAY,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC;YAExE,MAAM,OAAO,GAAG,mBAAmB,OAAO,gBAAgB,YAAY,CAAC,IAAI,CAAC,QAAQ,CAAC,kDAAkD,IAAI,EAAE,CAAC;YAC9I,MAAM,QAAQ,GAAG;gBACf;oBACE,IAAI,EAAE,MAAe;oBACrB,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;iBACpD;aACF,CAAC;YAEF,+DAA+D;YAC/D,oCAAoC;YACpC,sEAAsE;YACtE,sEAAsE;YACtE,uEAAuE;YACvE,sEAAsE;YACtE,sEAAsE;YACtE,iEAAiE;YACjE,sEAAsE;YACtE,wEAAwE;YACxE,MAAM,KAAK,GAAG,OAAO,OAAO,CAAC,OAAO,CAAC,kBAAkB,EAAE,GAAG,CAAC,IAAI,IAAI,CAAC,GAAG,EAAE,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;YAExH,iEAAiE;YACjE,mEAAmE;YACnE,gEAAgE;YAChE,iEAAiE;YACjE,MAAM,aAAa,GAAG,uBAAuB,CAAC,SAAS,EAAE;gBACvD,gBAAgB,EAAE,IAAI;aACvB,CAAC,CAAC;YAEH,IAAI,QAAQ,GAAiB,IAAI,CAAC;YAClC,sEAAsE;YACtE,oEAAoE;YACpE,sEAAsE;YACtE,4DAA4D;YAC5D,IAAI,cAAc,GAAyC,IAAI,CAAC;YAChE,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;gBAC1C,MAAM,SAAS,GAAG,QAAQ,CACxB,KAAK,EACL,MAAM,CAAC,EAAE,EACT,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE;oBACrB,IAAI,CAAC;wBACH,MAAM,YAAY,CAAC;4BACjB,MAAM;4BACN,KAAK;4BACL,YAAY;4BACZ,KAAK;4BACL,QAAQ;4BACR,OAAO;4BACP,IAAI;4BACJ,MAAM;4BACN,QAAQ,EAAE,MAAM,CAAC,EAAE;yBACpB,CAAC,CAAC;oBACL,CAAC;oBAAC,OAAO,GAAG,EAAE,CAAC;wBACb,MAAM,GAAG,CAAC;oBACZ,CAAC;gBACH,CAAC;gBACD,kDAAkD;gBAClD,KAAK,EAAE,GAAG,EAAE,EAAE;oBACZ,IAAI,cAAc,EAAE,CAAC;wBACnB,YAAY,CAAC,cAAc,CAAC,CAAC;wBAC7B,cAAc,GAAG,IAAI,CAAC;oBACxB,CAAC;oBACD,IAAI,GAAG,CAAC,MAAM,KAAK,WAAW,EAAE,CAAC;wBAC/B,OAAO,EAAE,CAAC;oBACZ,CAAC;yBAAM,CAAC;wBACN,MAAM,CAAC,IAAI,KAAK,CAAC,8BAA8B,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;oBAChE,CAAC;gBACH,CAAC,EACD;oBACE,aAAa;oBACb,uDAAuD;iBACxD,CACF,CAAC;gBAEF,gEAAgE;gBAChE,iCAAiC;gBACjC,cAAc,GAAG,UAAU,CACzB,GAAG,EAAE;oBACH,cAAc,GAAG,IAAI,CAAC;oBACtB,IAAI,SAAS,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;wBACnC,SAAS,CAAC,KAAK,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC;wBAC1C,MAAM,CAAC,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC,CAAC;oBACrD,CAAC;gBACH,CAAC,EACD,CAAC,GAAG,EAAE,GAAG,IAAI,CACd,CAAC;YACJ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,GAAQ,EAAE,EAAE;gBACpB,QAAQ,GAAG,GAAG,CAAC;YACjB,CAAC,CAAC,CAAC;YACH,IAAI,cAAc,EAAE,CAAC;gBACnB,YAAY,CAAC,cAAc,CAAC,CAAC;gBAC7B,cAAc,GAAG,IAAI,CAAC;YACxB,CAAC;YAED,IAAI,QAAQ;gBAAE,MAAM,QAAQ,CAAC;YAE7B,sEAAsE;YACtE,wEAAwE;YACxE,wEAAwE;YACxE,MAAM,IAAI,GAAG,cAAc,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC;YACvD,IAAI,CAAC,UAAU,GAAG,SAAS,CAAC;YAC5B,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;YAClC,MAAM,cAAc,CAAC,QAAQ,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;YAE3C,OAAO,CAAC,GAAG,CACT,yBAAyB,OAAO,0BAA0B,IAAI,CAAC,OAAO,EAAE,CACzE,CAAC;QACJ,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAClB,iEAAiE;YACjE,MAAM,IAAI,GAAG,cAAc,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC;YACvD,IAAI,CAAC,UAAU,GAAG,OAAO,CAAC;YAC1B,IAAI,CAAC,SAAS,GAAG,GAAG,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,IAAI,eAAe,CAAC;YAChE,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;YAClC,MAAM,cAAc,CAAC,QAAQ,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;YAE3C,OAAO,CAAC,KAAK,CACX,yBAAyB,OAAO,WAAW,EAC3C,GAAG,EAAE,OAAO,CACb,CAAC;QACJ,CAAC;IACH,CAAC,CACF,CAAC,CAAC,4BAA4B;AACjC,CAAC;AAED,KAAK,UAAU,cAAc,CAC3B,QAAkB,EAClB,IAAoB,EACpB,IAAY;IAEZ,MAAM,OAAO,GAAG,eAAe,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IAC5C,MAAM,WAAW,CAAC,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;AAC5D,CAAC","sourcesContent":["import {\n  getStoredModelForEngine,\n  normalizeModelForEngine,\n  resolveEngine,\n} from \"../agent/engine/index.js\";\nimport type { AgentEngine } from \"../agent/engine/types.js\";\nimport {\n  runAgentLoop,\n  actionsToEngineTools,\n  getOwnerActiveApiKey,\n  type ActionEntry,\n} from \"../agent/production-agent.js\";\nimport { startRun, resolveRunSoftTimeoutMs } from \"../agent/run-manager.js\";\nimport { createThread } from \"../chat-threads/store.js\";\nimport {\n  resourceListAllOwners,\n  resourcePut,\n  type Resource,\n} from \"../resources/store.js\";\nimport { runWithRequestContext } from \"../server/request-context.js\";\nimport { nextOccurrence, isValidCron, describeCron } from \"./cron.js\";\n\n// ─── Frontmatter parsing ────────────────────────────────────────────────────\n\nexport interface JobFrontmatter {\n  schedule: string;\n  enabled: boolean;\n  createdBy?: string;\n  orgId?: string;\n  runAs?: \"creator\" | \"shared\";\n  lastRun?: string;\n  lastStatus?: \"success\" | \"error\" | \"running\" | \"skipped\";\n  lastError?: string;\n  nextRun?: string;\n}\n\nconst FRONTMATTER_RE = /^---\\n([\\s\\S]*?)\\n---\\n?([\\s\\S]*)$/;\n\nexport function parseJobFrontmatter(content: string): {\n  meta: JobFrontmatter;\n  body: string;\n} {\n  const match = content.match(FRONTMATTER_RE);\n  if (!match) {\n    return {\n      meta: { schedule: \"\", enabled: false },\n      body: content,\n    };\n  }\n\n  const yamlBlock = match[1];\n  const body = match[2].trim();\n\n  const meta: JobFrontmatter = { schedule: \"\", enabled: true };\n\n  for (const line of yamlBlock.split(\"\\n\")) {\n    const colonIdx = line.indexOf(\":\");\n    if (colonIdx === -1) continue;\n    const key = line.slice(0, colonIdx).trim();\n    let value = line.slice(colonIdx + 1).trim();\n\n    // Strip quotes\n    if (\n      (value.startsWith('\"') && value.endsWith('\"')) ||\n      (value.startsWith(\"'\") && value.endsWith(\"'\"))\n    ) {\n      value = value.slice(1, -1);\n    }\n\n    switch (key) {\n      case \"schedule\":\n        meta.schedule = value;\n        break;\n      case \"enabled\":\n        meta.enabled = value !== \"false\";\n        break;\n      case \"createdBy\":\n        meta.createdBy = value;\n        break;\n      case \"orgId\":\n        meta.orgId = value;\n        break;\n      case \"runAs\":\n        meta.runAs =\n          value === \"shared\" || value === \"creator\" ? value : undefined;\n        break;\n      case \"lastRun\":\n        meta.lastRun = value;\n        break;\n      case \"lastStatus\":\n        meta.lastStatus = value as JobFrontmatter[\"lastStatus\"];\n        break;\n      case \"lastError\":\n        // Reverse the escaping applied in buildJobContent.\n        meta.lastError = value\n          .replace(/\\\\n/g, \"\\n\")\n          .replace(/\\\\r/g, \"\\r\")\n          .replace(/\\\\\"/g, '\"')\n          .replace(/\\\\\\\\/g, \"\\\\\");\n        break;\n      case \"nextRun\":\n        meta.nextRun = value;\n        break;\n    }\n  }\n\n  return { meta, body };\n}\n\nexport function buildJobContent(meta: JobFrontmatter, body: string): string {\n  const lines = [`---`];\n  lines.push(`schedule: \"${meta.schedule}\"`);\n  lines.push(`enabled: ${meta.enabled}`);\n  if (meta.createdBy) lines.push(`createdBy: ${meta.createdBy}`);\n  if (meta.orgId) lines.push(`orgId: ${meta.orgId}`);\n  if (meta.runAs) lines.push(`runAs: ${meta.runAs}`);\n  if (meta.lastRun) lines.push(`lastRun: ${meta.lastRun}`);\n  if (meta.lastStatus) lines.push(`lastStatus: ${meta.lastStatus}`);\n  if (meta.lastError) {\n    // Escape backslash, quote, then CR/LF. The frontmatter parser splits on\n    // \"\\n\", so an un-escaped newline (common in stack traces) would otherwise\n    // split the value across lines and corrupt/truncate the stored error.\n    const escaped = meta.lastError\n      .replace(/\\\\/g, \"\\\\\\\\\")\n      .replace(/\"/g, '\\\\\"')\n      .replace(/\\r/g, \"\\\\r\")\n      .replace(/\\n/g, \"\\\\n\");\n    lines.push(`lastError: \"${escaped}\"`);\n  }\n  if (meta.nextRun) lines.push(`nextRun: ${meta.nextRun}`);\n  lines.push(`---`);\n  lines.push(\"\");\n  lines.push(body);\n  return lines.join(\"\\n\");\n}\n\n// ─── Job execution ──────────────────────────────────────────────────────────\n\nexport interface SchedulerDeps {\n  getActions: () => Record<string, ActionEntry>;\n  getSystemPrompt: (owner: string) => Promise<string>;\n  /** Optional engine override. Defaults to the resolved request engine. */\n  engine?: AgentEngine;\n  apiKey?: string;\n  model?: string;\n  /** App/template id used for org-scoped per-app model defaults. */\n  appId?: string;\n}\n\nlet _isRunning = false;\n\n// Skip the DB query on every tick if we recently confirmed no jobs exist.\n// `_hasJobsCache` is invalidated whenever a `jobs/*` resource is written or\n// deleted (subscribed below), and refreshed at most every 5 minutes.\nlet _hasJobsCache: boolean | undefined;\nlet _lastJobsCheck = 0;\nconst JOBS_CHECK_INTERVAL_MS = 5 * 60_000;\nlet _emitterSubscribed = false;\n\nfunction subscribeToJobsResourceEvents(): void {\n  if (_emitterSubscribed) return;\n  _emitterSubscribed = true;\n  // Lazy import to avoid circular deps at module load\n  import(\"../resources/emitter.js\")\n    .then(({ getResourcesEmitter }) => {\n      getResourcesEmitter().on(\"resources\", (event: any) => {\n        if (typeof event?.path === \"string\" && event.path.startsWith(\"jobs/\")) {\n          _hasJobsCache = undefined;\n        }\n      });\n    })\n    .catch((err) => {\n      console.warn(\n        \"[jobs] resource-event subscription failed:\",\n        err instanceof Error ? err.message : err,\n      );\n    });\n}\n\n/**\n * Process all due recurring jobs. Called every 60 seconds.\n * Sequential execution with 5-minute timeout per job.\n */\nexport async function processRecurringJobs(deps: SchedulerDeps): Promise<void> {\n  // Prevent concurrent runs\n  if (_isRunning) return;\n\n  subscribeToJobsResourceEvents();\n\n  // Skip if we recently confirmed there are no job resources to run.\n  const nowMs = Date.now();\n  if (\n    _hasJobsCache === false &&\n    nowMs - _lastJobsCheck < JOBS_CHECK_INTERVAL_MS\n  ) {\n    return;\n  }\n\n  _isRunning = true;\n\n  try {\n    const jobResources = await resourceListAllOwners(\"jobs/\");\n    _hasJobsCache = jobResources.some(\n      (r) => r.path.endsWith(\".md\") && !r.path.endsWith(\".keep\"),\n    );\n    _lastJobsCheck = nowMs;\n    if (!_hasJobsCache) return;\n    const now = new Date();\n\n    for (const resource of jobResources) {\n      // Skip non-markdown or .keep files\n      if (!resource.path.endsWith(\".md\")) continue;\n      if (resource.path.endsWith(\".keep\")) continue;\n\n      const { meta, body } = parseJobFrontmatter(resource.content);\n\n      // Skip disabled or missing schedule\n      if (!meta.enabled || !meta.schedule) continue;\n      if (!isValidCron(meta.schedule)) continue;\n\n      // Skip if currently running, unless it has been stuck for more than 10 minutes\n      // (server crash mid-job leaves lastStatus=running forever without this guard)\n      if (meta.lastStatus === \"running\") {\n        const stuckCutoff = 10 * 60 * 1000;\n        if (\n          meta.lastRun &&\n          now.getTime() - new Date(meta.lastRun).getTime() < stuckCutoff\n        ) {\n          continue;\n        }\n        // Stuck — reset so the next check can re-run it\n        meta.lastStatus = \"error\";\n        meta.lastError = \"Job timed out or server crashed mid-run\";\n        const next = nextOccurrence(meta.schedule, now);\n        meta.nextRun = next.toISOString();\n        await updateResource(resource, meta, body);\n        continue;\n      }\n\n      // Check if due\n      if (meta.nextRun) {\n        const nextRunDate = new Date(meta.nextRun);\n        if (nextRunDate > now) continue;\n      } else {\n        // No nextRun computed yet — seed it from `now` so the job waits for its\n        // real next occurrence. Computing from new Date(0) (the epoch) always\n        // returns a 1970 date, which is < now, so the job would fire\n        // immediately on first sight regardless of its schedule.\n        const next = nextOccurrence(meta.schedule, now);\n        meta.nextRun = next.toISOString();\n        await updateResource(resource, meta, body);\n        continue;\n      }\n\n      // Skip if body is empty\n      if (!body.trim()) continue;\n\n      // Execute the job\n      await executeJob(resource, meta, body, deps, now);\n    }\n  } catch (err) {\n    // Transient WS / connection drops (Neon serverless): silently retry next\n    // tick instead of spamming stderr — `retryOnConnectionError` already did\n    // its retry budget at the driver level.\n    const { isConnectionError } = await import(\"../db/client.js\");\n    if (isConnectionError(err)) {\n      _hasJobsCache = undefined; // force re-check on next successful tick\n      _lastJobsCheck = 0;\n      return;\n    }\n    // Unwrap ErrorEvent (Neon WS driver emits these on network failure) so logs show the real cause\n    const detail =\n      err instanceof Error\n        ? err\n        : ((err as any)?.error ?? (err as any)?.message ?? err);\n    console.error(\"[recurring-jobs] Error processing jobs:\", detail);\n  } finally {\n    _isRunning = false;\n  }\n}\n\n/**\n * Validate that the run-as user still exists and (if scoped to an org) is\n * still a member of that org. Skips the check for the dev-mode bypass\n * identity and the shared-owner sentinel, neither of which map to a real\n * user row.\n *\n * SECURITY: without this check the scheduler keeps running jobs as\n * `meta.createdBy` indefinitely — even after the user has been deleted,\n * removed from the org, or had their account disabled. The cron entry\n * itself is left intact so an admin can purge it manually after the\n * underlying user-state issue is investigated. See audit 12 #10.\n */\nasync function isJobRunAsStillValid(\n  jobUserEmail: string,\n  jobOrgId: string | undefined,\n): Promise<{ ok: boolean; reason?: string }> {\n  // Shared-owner sentinel isn't a real user (used by jobs run as the\n  // workspace identity).\n  if (jobUserEmail === \"__shared__\") return { ok: true };\n  try {\n    const { getDbExec } = await import(\"../db/client.js\");\n    const db = getDbExec();\n    // Better Auth's user table is named \"user\" (singular). The reserved\n    // word is quoted to avoid ambiguity in Postgres.\n    const userResult = await db.execute({\n      sql: `SELECT 1 FROM \"user\" WHERE email = ? LIMIT 1`,\n      args: [jobUserEmail],\n    });\n    if (!userResult.rows || userResult.rows.length === 0) {\n      return { ok: false, reason: `user \"${jobUserEmail}\" no longer exists` };\n    }\n    if (jobOrgId) {\n      const memberResult = await db.execute({\n        sql: `SELECT 1 FROM org_members WHERE org_id = ? AND LOWER(email) = LOWER(?) LIMIT 1`,\n        args: [jobOrgId, jobUserEmail],\n      });\n      if (!memberResult.rows || memberResult.rows.length === 0) {\n        return {\n          ok: false,\n          reason: `user \"${jobUserEmail}\" is no longer a member of org \"${jobOrgId}\"`,\n        };\n      }\n    }\n    return { ok: true };\n  } catch (err: any) {\n    // Tables may not exist on a brand-new install (no auth tables yet).\n    // Treat that as \"valid\" rather than blocking every job. The check is\n    // only meaningful once the auth tables exist.\n    const msg = err?.message?.toLowerCase() ?? \"\";\n    if (\n      msg.includes(\"does not exist\") ||\n      msg.includes(\"no such table\") ||\n      msg.includes(\"undefined table\")\n    ) {\n      return { ok: true };\n    }\n    // Any other DB error: be conservative and let the job run rather than\n    // blocking on an unexpected failure mode (e.g. transient connection\n    // issue). We log so it's visible.\n    console.warn(\n      `[recurring-jobs] User/membership validation failed for \"${jobUserEmail}\":`,\n      err?.message,\n    );\n    return { ok: true };\n  }\n}\n\nasync function executeJob(\n  resource: Resource,\n  meta: JobFrontmatter,\n  body: string,\n  deps: SchedulerDeps,\n  now: Date,\n): Promise<void> {\n  const jobName = resource.path.replace(/^jobs\\//, \"\").replace(/\\.md$/, \"\");\n\n  // Set owner context so all scoped operations (app-state, resources, etc.)\n  // operate on the correct user's data\n  const effectiveRunAs = meta.runAs ?? \"creator\";\n  const jobUserEmail =\n    effectiveRunAs === \"creator\"\n      ? meta.createdBy || resource.owner\n      : resource.owner;\n  const jobOrgId = meta.orgId ?? undefined;\n\n  // SECURITY (audit 12 #10): re-validate the run-as user/membership on\n  // every tick. Sharing revocation, user deletion, and org-member removal\n  // must take effect for already-scheduled jobs. Skip the tick on\n  // failure; leave the cron entry alone so an admin can purge after\n  // investigation.\n  const validity = await isJobRunAsStillValid(jobUserEmail, jobOrgId);\n  if (!validity.ok) {\n    console.warn(\n      `[recurring-jobs] Skipping job \"${jobName}\": ${validity.reason}. ` +\n        `User/membership no longer valid — leaving cron entry for admin review.`,\n    );\n    // Mark as skipped without resetting nextRun so an admin can find it.\n    meta.lastRun = now.toISOString();\n    meta.lastStatus = \"skipped\";\n    meta.lastError = validity.reason;\n    await updateResource(resource, meta, body);\n    return;\n  }\n\n  // Mark as running\n  meta.lastRun = now.toISOString();\n  meta.lastStatus = \"running\";\n  meta.lastError = undefined;\n  await updateResource(resource, meta, body);\n\n  await runWithRequestContext(\n    { userEmail: jobUserEmail, orgId: jobOrgId },\n    async () => {\n      try {\n        const actions = deps.getActions();\n        const systemPrompt = await deps.getSystemPrompt(jobUserEmail);\n        const tools = actionsToEngineTools(actions);\n\n        // Prefer the job runner's saved Anthropic key so recurring jobs\n        // don't silently bill the shared platform key once a user has\n        // brought their own. Falls back to the platform key when absent.\n        const userApiKey = await getOwnerActiveApiKey(jobUserEmail);\n        const engine =\n          deps.engine ??\n          (await resolveEngine({\n            apiKey: userApiKey ?? deps.apiKey,\n            appId: deps.appId,\n          }));\n        const modelCandidate =\n          deps.model ??\n          (await getStoredModelForEngine(engine, { appId: deps.appId })) ??\n          engine.defaultModel;\n        const model = normalizeModelForEngine(engine, modelCandidate);\n\n        // Create a chat thread for this run\n        const threadTitle = `Job: ${jobName} — ${now.toLocaleDateString()}`;\n        const thread = await createThread(jobUserEmail, { title: threadTitle });\n\n        const jobText = `[Recurring Job: ${jobName}]\\nSchedule: ${describeCron(meta.schedule)}\\n\\nExecute the following job instructions:\\n\\n${body}`;\n        const messages = [\n          {\n            role: \"user\" as const,\n            content: [{ type: \"text\" as const, text: jobText }],\n          },\n        ];\n\n        // Route through startRun (from run-manager) instead of calling\n        // runAgentLoop directly. This adds:\n        //   1. A heartbeat row in agent_runs so a serverless kill is detected\n        //      by reapAllStaleRuns on the next startup and the row is flipped\n        //      to 'errored' — no more stranded lastStatus:\"running\" in the job\n        //      frontmatter after the next tick resets it via the stuck-guard.\n        //   2. The soft-timeout infrastructure so the job checkpoints cleanly\n        //      before serverless hard-kill rather than dying mid-flight.\n        //   3. SQL abort checks so a displaced/reaped run self-aborts instead\n        //      of completing invisibly and potentially overwriting newer state.\n        const runId = `job-${jobName.replace(/[^a-zA-Z0-9._-]/g, \"-\")}-${Date.now()}-${Math.random().toString(36).slice(2, 6)}`;\n\n        // Use the same soft-timeout logic as interactive runs. On hosted\n        // runtimes this clamps to 40s (under the gateway wall); locally it\n        // defaults to 0 (no framework timeout). The 5-minute hard-abort\n        // below is still provided as a backstop via the startRun signal.\n        const softTimeoutMs = resolveRunSoftTimeoutMs(undefined, {\n          useHostedDefault: true,\n        });\n\n        let jobError: Error | null = null;\n        // Hard-abort backstop: 5 minutes. On hosted runtimes the soft-timeout\n        // will fire first; locally this is the only guard. Cleared when the\n        // run completes so finished jobs don't leave a live timer keeping the\n        // process/event loop alive for the remainder of the window.\n        let hardAbortTimer: ReturnType<typeof setTimeout> | null = null;\n        await new Promise<void>((resolve, reject) => {\n          const activeRun = startRun(\n            runId,\n            thread.id,\n            async (send, signal) => {\n              try {\n                await runAgentLoop({\n                  engine,\n                  model,\n                  systemPrompt,\n                  tools,\n                  messages,\n                  actions,\n                  send,\n                  signal,\n                  threadId: thread.id,\n                });\n              } catch (err) {\n                throw err;\n              }\n            },\n            // onComplete: run finished (completed or aborted)\n            async (run) => {\n              if (hardAbortTimer) {\n                clearTimeout(hardAbortTimer);\n                hardAbortTimer = null;\n              }\n              if (run.status === \"completed\") {\n                resolve();\n              } else {\n                reject(new Error(`Job run ended with status: ${run.status}`));\n              }\n            },\n            {\n              softTimeoutMs,\n              // turnId defaults to runId — fine for single-turn jobs\n            },\n          );\n\n          // Abort the run-manager's own controller after 5 minutes if the\n          // run hasn't finished naturally.\n          hardAbortTimer = setTimeout(\n            () => {\n              hardAbortTimer = null;\n              if (activeRun.status === \"running\") {\n                activeRun.abort.abort(\"job_hard_timeout\");\n                reject(new Error(\"Job timed out after 5 minutes\"));\n              }\n            },\n            5 * 60 * 1000,\n          );\n        }).catch((err: any) => {\n          jobError = err;\n        });\n        if (hardAbortTimer) {\n          clearTimeout(hardAbortTimer);\n          hardAbortTimer = null;\n        }\n\n        if (jobError) throw jobError;\n\n        // Success — update status. Compute the next run from completion time,\n        // not the job's start time `now`: a long run could otherwise schedule a\n        // nextRun that's already in the past and re-fire immediately next tick.\n        const next = nextOccurrence(meta.schedule, new Date());\n        meta.lastStatus = \"success\";\n        meta.nextRun = next.toISOString();\n        await updateResource(resource, meta, body);\n\n        console.log(\n          `[recurring-jobs] Job \"${jobName}\" completed. Next run: ${meta.nextRun}`,\n        );\n      } catch (err: any) {\n        // Error — update status. Use completion time (see success path).\n        const next = nextOccurrence(meta.schedule, new Date());\n        meta.lastStatus = \"error\";\n        meta.lastError = err?.message?.slice(0, 200) || \"Unknown error\";\n        meta.nextRun = next.toISOString();\n        await updateResource(resource, meta, body);\n\n        console.error(\n          `[recurring-jobs] Job \"${jobName}\" failed:`,\n          err?.message,\n        );\n      }\n    },\n  ); // end runWithRequestContext\n}\n\nasync function updateResource(\n  resource: Resource,\n  meta: JobFrontmatter,\n  body: string,\n): Promise<void> {\n  const content = buildJobContent(meta, body);\n  await resourcePut(resource.owner, resource.path, content);\n}\n"]}

package/dist/notifications/routes.d.ts

@@ -13,13 +13,13 @@
 export declare function createNotificationsHandler(): import("h3").EventHandlerWithFetch<import("h3").EventHandlerRequest, Promise<"" | import("./types.js").Notification[] | {
     count: number;
     updated?: undefined;
-    ok?: undefined;
     error?: undefined;
+    ok?: undefined;
 } | {
     count?: undefined;
     updated: number;
-    ok?: undefined;
     error?: undefined;
+    ok?: undefined;
 } | {
     count?: undefined;
     updated?: undefined;
@@ -28,7 +28,7 @@ export declare function createNotificationsHandler(): import("h3").EventHandlerW
 } | {
     count?: undefined;
     updated?: undefined;
-    ok: boolean;
     error?: undefined;
+    ok: boolean;
 }>>;
 //# sourceMappingURL=routes.d.ts.map

package/dist/observability/routes.d.ts

@@ -56,13 +56,13 @@ export declare function createObservabilityHandler(): import("h3").EventHandlerW
     ok?: undefined;
     summary?: undefined;
     spans?: undefined;
-    error: any;
     id?: undefined;
+    error: any;
 } | {
     error?: undefined;
     summary?: undefined;
     spans?: undefined;
-    ok: boolean;
     id?: undefined;
+    ok: boolean;
 }>>;
 //# sourceMappingURL=routes.d.ts.map

package/dist/observability/traces.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"traces.d.ts","sourceRoot":"","sources":["../../src/observability/traces.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAC;AACnE,OAAO,KAAK,EAAE,cAAc,EAAkB,MAAM,mBAAmB,CAAC;AAExE,OAAO,KAAK,EAA2B,mBAAmB,EAAE,MAAM,YAAY,CAAC;AAiB/E;;;wEAGwE;AACxE,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAE7D;AAoBD,wBAAsB,sBAAsB,IAAI,OAAO,CAAC,mBAAmB,CAAC,CAY3E;AAED,wBAAsB,mBAAmB,CAAC,IAAI,EAAE;IAC9C,YAAY,EAAE,CAAC,QAAQ,EAAE;QACvB,MAAM,EAAE,GAAG,CAAC;QACZ,KAAK,EAAE,MAAM,CAAC;QACd,YAAY,EAAE,MAAM,CAAC;QACrB,KAAK,EAAE,GAAG,EAAE,CAAC;QACb,QAAQ,EAAE,GAAG,EAAE,CAAC;QAChB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;QAC7B,IAAI,EAAE,CAAC,KAAK,EAAE,cAAc,KAAK,IAAI,CAAC;QACtC,MAAM,EAAE,WAAW,CAAC;QACpB,eAAe,CAAC,EAAE,GAAG,CAAC;KACvB,KAAK,OAAO,CAAC,cAAc,CAAC,CAAC;IAC9B,QAAQ,EAAE;QACR,MAAM,EAAE,GAAG,CAAC;QACZ,KAAK,EAAE,MAAM,CAAC;QACd,YAAY,EAAE,MAAM,CAAC;QACrB,KAAK,EAAE,GAAG,EAAE,CAAC;QACb,QAAQ,EAAE,GAAG,EAAE,CAAC;QAChB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;QAC7B,IAAI,EAAE,CAAC,KAAK,EAAE,cAAc,KAAK,IAAI,CAAC;QACtC,MAAM,EAAE,WAAW,CAAC;QACpB,eAAe,CAAC,EAAE,GAAG,CAAC;KACvB,CAAC;IACF,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB;;;iBAGa;IACb,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,MAAM,EAAE,mBAAmB,CAAC;IAC5B,aAAa,CAAC,EAAE,CAAC,KAAK,EAAE,OAAO,KAC3B;QACE,MAAM,CAAC,EAAE,SAAS,GAAG,OAAO,CAAC;QAC7B,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QAC7B,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;KAC3C,GACD,IAAI,GACJ,SAAS,CAAC;CACf,GAAG,OAAO,CAAC,cAAc,CAAC,CAuT1B"}
+{"version":3,"file":"traces.d.ts","sourceRoot":"","sources":["../../src/observability/traces.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAC;AACnE,OAAO,KAAK,EAAE,cAAc,EAAkB,MAAM,mBAAmB,CAAC;AAExE,OAAO,KAAK,EAA2B,mBAAmB,EAAE,MAAM,YAAY,CAAC;AA6K/E;;;wEAGwE;AACxE,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAE7D;AAoBD,wBAAsB,sBAAsB,IAAI,OAAO,CAAC,mBAAmB,CAAC,CAY3E;AAED,wBAAsB,mBAAmB,CAAC,IAAI,EAAE;IAC9C,YAAY,EAAE,CAAC,QAAQ,EAAE;QACvB,MAAM,EAAE,GAAG,CAAC;QACZ,KAAK,EAAE,MAAM,CAAC;QACd,YAAY,EAAE,MAAM,CAAC;QACrB,KAAK,EAAE,GAAG,EAAE,CAAC;QACb,QAAQ,EAAE,GAAG,EAAE,CAAC;QAChB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;QAC7B,IAAI,EAAE,CAAC,KAAK,EAAE,cAAc,KAAK,IAAI,CAAC;QACtC,MAAM,EAAE,WAAW,CAAC;QACpB,eAAe,CAAC,EAAE,GAAG,CAAC;KACvB,KAAK,OAAO,CAAC,cAAc,CAAC,CAAC;IAC9B,QAAQ,EAAE;QACR,MAAM,EAAE,GAAG,CAAC;QACZ,KAAK,EAAE,MAAM,CAAC;QACd,YAAY,EAAE,MAAM,CAAC;QACrB,KAAK,EAAE,GAAG,EAAE,CAAC;QACb,QAAQ,EAAE,GAAG,EAAE,CAAC;QAChB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;QAC7B,IAAI,EAAE,CAAC,KAAK,EAAE,cAAc,KAAK,IAAI,CAAC;QACtC,MAAM,EAAE,WAAW,CAAC;QACpB,eAAe,CAAC,EAAE,GAAG,CAAC;KACvB,CAAC;IACF,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB;;;iBAGa;IACb,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,MAAM,EAAE,mBAAmB,CAAC;IAC5B,aAAa,CAAC,EAAE,CAAC,KAAK,EAAE,OAAO,KAC3B;QACE,MAAM,CAAC,EAAE,SAAS,GAAG,OAAO,CAAC;QAC7B,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QAC7B,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;KAC3C,GACD,IAAI,GACJ,SAAS,CAAC;CACf,GAAG,OAAO,CAAC,cAAc,CAAC,CAgV1B"}