@agent-native/core 0.93.0 → 0.94.0

package/dist/integrations/remote-commands-store.d.ts

@@ -1,4 +1,4 @@
-import type { RemoteCommand, RemoteCommandKind } from "./remote-types.js";
+import type { ComputerCommandEnvelope, ComputerOperationClass, RemoteCommand, RemoteCommandKind } from "./remote-types.js";
 export declare function isRemoteCommandKind(value: unknown): value is RemoteCommandKind;
 export declare function enqueueRemoteCommand(input: {
     deviceId: string;
@@ -10,6 +10,13 @@ export declare function enqueueRemoteCommand(input: {
     externalThreadId?: string | null;
     nextCheckAt?: number;
 }): Promise<RemoteCommand>;
+export declare function enqueueComputerCommand(input: {
+    deviceId: string;
+    ownerEmail: string;
+    orgId?: string | null;
+    envelope: ComputerCommandEnvelope;
+    platform?: string | null;
+}): Promise<RemoteCommand>;
 export declare function getRemoteCommand(id: string): Promise<RemoteCommand | null>;
 export declare function listRemoteCommandsForOwner(input: {
     ownerEmail: string;
@@ -17,6 +24,13 @@ export declare function listRemoteCommandsForOwner(input: {
     limit?: number;
 }): Promise<RemoteCommand[]>;
 export declare function claimNextRemoteCommand(deviceId: string): Promise<RemoteCommand | null>;
+export declare function claimNextComputerCommand(input: {
+    deviceId: string;
+    ownerEmail: string;
+    orgId?: string | null;
+    operationClasses?: ComputerOperationClass[];
+    now?: number;
+}): Promise<RemoteCommand | null>;
 export declare function updateRemoteCommandResult(input: {
     deviceId: string;
     commandId: string;

package/dist/integrations/remote-commands-store.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"remote-commands-store.d.ts","sourceRoot":"","sources":["../../src/integrations/remote-commands-store.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EACV,aAAa,EACb,iBAAiB,EAElB,MAAM,mBAAmB,CAAC;AAmG3B,wBAAgB,mBAAmB,CACjC,KAAK,EAAE,OAAO,GACb,KAAK,IAAI,iBAAiB,CAK5B;AAED,wBAAsB,oBAAoB,CAAC,KAAK,EAAE;IAChD,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,IAAI,EAAE,iBAAiB,CAAC;IACxB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,gBAAgB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB,GAAG,OAAO,CAAC,aAAa,CAAC,CAgCzB;AAED,wBAAsB,gBAAgB,CACpC,EAAE,EAAE,MAAM,GACT,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC,CAO/B;AAED,wBAAsB,0BAA0B,CAAC,KAAK,EAAE;IACtD,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB,GAAG,OAAO,CAAC,aAAa,EAAE,CAAC,CAsB3B;AAED,wBAAsB,sBAAsB,CAC1C,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC,CAqC/B;AAED,wBAAsB,yBAAyB,CAAC,KAAK,EAAE;IACrD,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,SAAS,GAAG,WAAW,GAAG,QAAQ,CAAC;IAC3C,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC9B,GAAG,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC,CA8BhC;AAED,wBAAsB,wBAAwB,CAAC,OAAO,CAAC,EAAE;IACvD,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB,GAAG,OAAO,CAAC;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC,CAwD/C"}
+{"version":3,"file":"remote-commands-store.d.ts","sourceRoot":"","sources":["../../src/integrations/remote-commands-store.ts"],"names":[],"mappings":"AA2BA,OAAO,KAAK,EACV,uBAAuB,EACvB,sBAAsB,EACtB,aAAa,EACb,iBAAiB,EAElB,MAAM,mBAAmB,CAAC;AA8J3B,wBAAgB,mBAAmB,CACjC,KAAK,EAAE,OAAO,GACb,KAAK,IAAI,iBAAiB,CAK5B;AAED,wBAAsB,oBAAoB,CAAC,KAAK,EAAE;IAChD,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,IAAI,EAAE,iBAAiB,CAAC;IACxB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,gBAAgB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB,GAAG,OAAO,CAAC,aAAa,CAAC,CAsCzB;AAED,wBAAsB,sBAAsB,CAAC,KAAK,EAAE;IAClD,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,QAAQ,EAAE,uBAAuB,CAAC;IAClC,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC1B,GAAG,OAAO,CAAC,aAAa,CAAC,CAkFzB;AAED,wBAAsB,gBAAgB,CACpC,EAAE,EAAE,MAAM,GACT,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC,CAO/B;AAED,wBAAsB,0BAA0B,CAAC,KAAK,EAAE;IACtD,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB,GAAG,OAAO,CAAC,aAAa,EAAE,CAAC,CAsB3B;AAED,wBAAsB,sBAAsB,CAC1C,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC,CAsC/B;AAED,wBAAsB,wBAAwB,CAAC,KAAK,EAAE;IACpD,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,gBAAgB,CAAC,EAAE,sBAAsB,EAAE,CAAC;IAC5C,GAAG,CAAC,EAAE,MAAM,CAAC;CACd,GAAG,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC,CAsGhC;AAED,wBAAsB,yBAAyB,CAAC,KAAK,EAAE;IACrD,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,SAAS,GAAG,WAAW,GAAG,QAAQ,CAAC;IAC3C,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC9B,GAAG,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC,CAsChC;AAED,wBAAsB,wBAAwB,CAAC,OAAO,CAAC,EAAE;IACvD,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB,GAAG,OAAO,CAAC;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC,CAwD/C"}

package/dist/integrations/remote-commands-store.js

@@ -1,5 +1,9 @@
 import { getDbExec, intType, isPostgres, retryOnDdlRace, } from "../db/client.js";
-import { ensureTableExists, ensureIndexExists } from "../db/ddl-guard.js";
+import { ensureColumnExists, ensureTableExists, ensureIndexExists, } from "../db/ddl-guard.js";
+import { authorizeComputerOperation, ensureComputerApprovalStore, } from "./computer-supervision-store.js";
+import { assertValidComputerCommandEnvelope, ComputerSupervisionError, } from "./computer-supervision.js";
+import { getRemoteComputerCapabilities, getRemoteDeviceForOwner, } from "./remote-devices-store.js";
+import { assertNoBinaryPayload, serializeBoundedRemoteJson, } from "./remote-json-safety.js";
 let _initPromise;
 const REMOTE_COMMAND_KINDS = [
     "create-run",
@@ -27,6 +31,14 @@ async function ensureTable() {
   result_json TEXT,
   platform TEXT,
   external_thread_id TEXT,
+  computer_task_id TEXT,
+  computer_run_id TEXT,
+  computer_sequence ${intType()},
+  idempotency_key TEXT,
+  operation_class TEXT,
+  approval_scope TEXT,
+  action_hash TEXT,
+  lease_expires_at ${intType()},
   attempts ${intType()} NOT NULL DEFAULT 0,
   next_check_at ${intType()} NOT NULL,
   claimed_at ${intType()},
@@ -38,13 +50,17 @@ async function ensureTable() {
             if (isPostgres()) {
                 // PG guard: probe via information_schema, only issue DDL if missing, bounded lock_timeout
                 await ensureTableExists("integration_remote_commands", createSql);
+                await ensureComputerCommandColumns();
                 await ensureIndexExists("idx_remote_commands_device_status_next", `CREATE INDEX IF NOT EXISTS idx_remote_commands_device_status_next ON integration_remote_commands(device_id, status, next_check_at)`);
                 await ensureIndexExists("idx_remote_commands_owner", `CREATE INDEX IF NOT EXISTS idx_remote_commands_owner ON integration_remote_commands(owner_email, org_id)`);
+                await ensureComputerCommandIndexes();
                 return;
             }
             // SQLite: keep existing behavior
             await retryOnDdlRace(() => client.execute(createSql));
+            await ensureComputerCommandColumns();
             await retryOnDdlRace(() => client.execute(`CREATE INDEX IF NOT EXISTS idx_remote_commands_device_status_next ON integration_remote_commands(device_id, status, next_check_at)`));
+            await ensureComputerCommandIndexes();
             await retryOnDdlRace(() => client.execute(`CREATE INDEX IF NOT EXISTS idx_remote_commands_owner ON integration_remote_commands(owner_email, org_id)`));
         })().catch((err) => {
             // Retry init on the next call after a failed startup.
@@ -55,17 +71,21 @@ async function ensureTable() {
     return _initPromise;
 }
 function rowToCommand(row) {
+    const params = parseJson(row.params_json, {});
     return {
         id: row.id,
         deviceId: row.device_id,
         ownerEmail: row.owner_email,
         orgId: row.org_id ?? null,
         kind: row.kind,
-        params: parseJson(row.params_json, {}),
+        params,
         status: row.status,
         result: parseJson(row.result_json, null),
         platform: row.platform ?? null,
         externalThreadId: row.external_thread_id ?? null,
+        computerOperation: row.kind === "computer-operation"
+            ? (params?.envelope ?? null)
+            : null,
         attempts: Number(row.attempts ?? 0),
         nextCheckAt: Number(row.next_check_at ?? 0),
         claimedAt: row.claimed_at == null ? null : Number(row.claimed_at),
@@ -75,11 +95,58 @@ function rowToCommand(row) {
         updatedAt: Number(row.updated_at ?? 0),
     };
 }
+async function ensureComputerCommandColumns() {
+    const columns = [
+        ["computer_task_id", "TEXT"],
+        ["computer_run_id", "TEXT"],
+        ["computer_sequence", intType()],
+        ["idempotency_key", "TEXT"],
+        ["operation_class", "TEXT"],
+        ["approval_scope", "TEXT"],
+        ["action_hash", "TEXT"],
+        ["lease_expires_at", intType()],
+    ];
+    for (const [name, definition] of columns) {
+        const sql = `ALTER TABLE integration_remote_commands ADD COLUMN${isPostgres() ? " IF NOT EXISTS" : ""} ${name} ${definition}`;
+        if (isPostgres()) {
+            await ensureColumnExists("integration_remote_commands", name, sql);
+            continue;
+        }
+        try {
+            await retryOnDdlRace(() => getDbExec().execute(sql));
+        }
+        catch (error) {
+            if (!isDuplicateColumnError(error))
+                throw error;
+        }
+    }
+}
+async function ensureComputerCommandIndexes() {
+    const indexes = [
+        [
+            "idx_remote_commands_computer_sequence",
+            `CREATE UNIQUE INDEX IF NOT EXISTS idx_remote_commands_computer_sequence ON integration_remote_commands(device_id, computer_task_id, computer_run_id, computer_sequence)`,
+        ],
+        [
+            "idx_remote_commands_idempotency",
+            `CREATE UNIQUE INDEX IF NOT EXISTS idx_remote_commands_idempotency ON integration_remote_commands(device_id, idempotency_key)`,
+        ],
+    ];
+    for (const [name, sql] of indexes) {
+        if (isPostgres())
+            await ensureIndexExists(name, sql);
+        else
+            await retryOnDdlRace(() => getDbExec().execute(sql));
+    }
+}
 export function isRemoteCommandKind(value) {
     return (typeof value === "string" &&
         REMOTE_COMMAND_KINDS.includes(value));
 }
 export async function enqueueRemoteCommand(input) {
+    if (input.kind === "computer-operation") {
+        throw new ComputerSupervisionError("invalid-envelope", "Computer operations must use enqueueComputerCommand");
+    }
     await ensureTable();
     const client = getDbExec();
     const now = Date.now();
@@ -111,6 +178,79 @@ export async function enqueueRemoteCommand(input) {
         throw new Error("remote command insert failed");
     return command;
 }
+export async function enqueueComputerCommand(input) {
+    const envelope = await assertValidComputerCommandEnvelope(input.envelope);
+    const device = await getRemoteDeviceForOwner({
+        id: input.deviceId,
+        ownerEmail: input.ownerEmail,
+        orgId: input.orgId,
+    });
+    if (!device || device.status !== "active") {
+        throw new ComputerSupervisionError("approval-mismatch", "Computer device does not belong to this owner and organization");
+    }
+    const capabilities = getRemoteComputerCapabilities(device);
+    const [surface, mode] = envelope.operationClass.split(".");
+    if (capabilities?.[surface]?.[mode] !== true) {
+        throw new ComputerSupervisionError("approval-denied", `Remote device did not advertise ${envelope.operationClass}`);
+    }
+    await ensureTable();
+    await ensureComputerApprovalStore();
+    const client = getDbExec();
+    const insert = async (tx) => {
+        await authorizeComputerOperation({ ...input, envelope }, tx);
+        const now = Date.now();
+        const id = `remote-command-${now}-${randomHex(8)}`;
+        try {
+            await tx.execute({
+                sql: `INSERT INTO integration_remote_commands
+          (id, device_id, owner_email, org_id, kind, params_json, status,
+           result_json, platform, external_thread_id, computer_task_id,
+           computer_run_id, computer_sequence, idempotency_key, operation_class,
+           approval_scope, action_hash, lease_expires_at, attempts, next_check_at,
+           created_at, updated_at)
+          VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)`,
+                args: [
+                    id,
+                    input.deviceId,
+                    input.ownerEmail,
+                    input.orgId ?? null,
+                    "computer-operation",
+                    JSON.stringify({ envelope }),
+                    "pending",
+                    null,
+                    input.platform ?? null,
+                    null,
+                    envelope.taskId,
+                    envelope.runId,
+                    envelope.sequence,
+                    envelope.idempotencyKey,
+                    envelope.operationClass,
+                    envelope.approval.scope,
+                    envelope.approval.actionHash,
+                    envelope.leaseExpiresAt,
+                    0,
+                    now,
+                    now,
+                    now,
+                ],
+            });
+        }
+        catch (error) {
+            if (isUniqueConstraintError(error)) {
+                throw new ComputerSupervisionError("replay", "Computer operation sequence or idempotency key was already used");
+            }
+            throw error;
+        }
+        return id;
+    };
+    const id = client.transaction
+        ? await client.transaction((tx) => insert(tx))
+        : await insert(client);
+    const command = await getRemoteCommand(id);
+    if (!command)
+        throw new Error("computer command insert failed");
+    return command;
+}
 export async function getRemoteCommand(id) {
     await ensureTable();
     const { rows } = await getDbExec().execute({
@@ -150,6 +290,7 @@ export async function claimNextRemoteCommand(deviceId) {
         sql: `SELECT id FROM integration_remote_commands
           WHERE device_id = ?
             AND status = 'pending'
+            AND kind <> 'computer-operation'
             AND next_check_at <= ?
           ORDER BY created_at ASC
           LIMIT 1`,
@@ -181,12 +322,118 @@ export async function claimNextRemoteCommand(deviceId) {
         return null;
     return command;
 }
+export async function claimNextComputerCommand(input) {
+    await ensureTable();
+    if (input.operationClasses?.length === 0)
+        return null;
+    const client = getDbExec();
+    const now = input.now ?? Date.now();
+    const operationClassClause = input.operationClasses?.length
+        ? ` AND operation_class IN (${input.operationClasses.map(() => "?").join(", ")})`
+        : "";
+    const { rows } = await client.execute({
+        sql: `SELECT * FROM integration_remote_commands
+          WHERE device_id = ? AND owner_email = ?
+            AND ((org_id IS NULL AND ? IS NULL) OR org_id = ?)
+            AND kind = 'computer-operation' AND status = 'pending'
+            AND next_check_at <= ?${operationClassClause}
+          ORDER BY computer_sequence ASC, created_at ASC
+          LIMIT 1`,
+        args: [
+            input.deviceId,
+            input.ownerEmail,
+            input.orgId ?? null,
+            input.orgId ?? null,
+            now,
+            ...(input.operationClasses ?? []),
+        ],
+    });
+    if (!rows[0])
+        return null;
+    const candidate = rowToCommand(rows[0]);
+    try {
+        const envelope = await assertValidComputerCommandEnvelope(candidate.computerOperation, { now });
+        const row = rows[0];
+        if (envelope.taskId !== row.computer_task_id ||
+            envelope.runId !== row.computer_run_id ||
+            envelope.sequence !== Number(row.computer_sequence) ||
+            envelope.idempotencyKey !== row.idempotency_key ||
+            envelope.operationClass !== row.operation_class ||
+            envelope.approval.scope !== row.approval_scope ||
+            envelope.approval.actionHash !== row.action_hash ||
+            envelope.leaseExpiresAt !== Number(row.lease_expires_at)) {
+            throw new ComputerSupervisionError("action-hash-mismatch", "Stored computer command binding does not match its envelope");
+        }
+    }
+    catch (error) {
+        await client.execute({
+            sql: `UPDATE integration_remote_commands
+            SET status = 'failed', error_message = ?, completed_at = ?, updated_at = ?
+            WHERE id = ? AND device_id = ? AND owner_email = ?
+              AND ((org_id IS NULL AND ? IS NULL) OR org_id = ?)
+              AND status = 'pending'`,
+            args: [
+                error instanceof Error
+                    ? error.message.slice(0, 2000)
+                    : "Invalid computer operation",
+                now,
+                now,
+                candidate.id,
+                input.deviceId,
+                input.ownerEmail,
+                input.orgId ?? null,
+                input.orgId ?? null,
+            ],
+        });
+        return null;
+    }
+    const result = await client.execute({
+        sql: isPostgres()
+            ? `UPDATE integration_remote_commands
+          SET status = 'claimed', attempts = attempts + 1, claimed_at = ?, updated_at = ?
+          WHERE id = ? AND device_id = ? AND owner_email = ?
+            AND ((org_id IS NULL AND ? IS NULL) OR org_id = ?)
+            AND status = 'pending' AND lease_expires_at > ?
+          RETURNING *`
+            : `UPDATE integration_remote_commands
+          SET status = 'claimed', attempts = attempts + 1, claimed_at = ?, updated_at = ?
+          WHERE id = ? AND device_id = ? AND owner_email = ?
+            AND ((org_id IS NULL AND ? IS NULL) OR org_id = ?)
+            AND status = 'pending' AND lease_expires_at > ?`,
+        args: [
+            now,
+            now,
+            candidate.id,
+            input.deviceId,
+            input.ownerEmail,
+            input.orgId ?? null,
+            input.orgId ?? null,
+            now,
+        ],
+    });
+    if (isPostgres()) {
+        const row = result.rows?.[0];
+        return row ? rowToCommand(row) : null;
+    }
+    if (affectedRows(result) === 0)
+        return null;
+    const command = await getRemoteCommand(candidate.id);
+    return command?.status === "claimed" ? command : null;
+}
 export async function updateRemoteCommandResult(input) {
     await ensureTable();
     const client = getDbExec();
     const now = Date.now();
     const completedAt = TERMINAL_STATUSES.has(input.status) ? now : null;
-    const resultJson = input.result === undefined ? undefined : JSON.stringify(input.result);
+    const resultJson = input.result === undefined
+        ? undefined
+        : serializeBoundedRemoteJson(input.result, {
+            label: "Remote command result",
+            maxBytes: 256_000,
+        });
+    if (input.errorMessage) {
+        assertNoBinaryPayload(input.errorMessage, "Remote command error");
+    }
     await client.execute({
         sql: `UPDATE integration_remote_commands
           SET status = ?,
@@ -282,4 +529,27 @@ function randomHex(byteLength) {
         .map((byte) => byte.toString(16).padStart(2, "0"))
         .join("");
 }
+function affectedRows(result) {
+    return (result.rowsAffected ??
+        Number(result.rowCount ?? 0));
+}
+function isDuplicateColumnError(error) {
+    const code = String(error?.code ?? "");
+    const message = String(error?.message ?? error)
+        .toLowerCase()
+        .trim();
+    return (code === "42701" ||
+        message.includes("duplicate column") ||
+        message.includes("already exists"));
+}
+function isUniqueConstraintError(error) {
+    const code = String(error?.code ?? "");
+    const message = String(error?.message ?? error)
+        .toLowerCase()
+        .trim();
+    return (code === "23505" ||
+        code === "2067" ||
+        message.includes("unique constraint") ||
+        message.includes("duplicate key"));
+}
 //# sourceMappingURL=remote-commands-store.js.map

package/dist/integrations/remote-commands-store.js.map

@@ -1 +1 @@
-{"version":3,"file":"remote-commands-store.js","sourceRoot":"","sources":["../../src/integrations/remote-commands-store.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,SAAS,EACT,OAAO,EACP,UAAU,EACV,cAAc,GACf,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AAO1E,IAAI,YAAuC,CAAC;AAE5C,MAAM,oBAAoB,GAAwB;IAChD,YAAY;IACZ,WAAW;IACX,SAAS;IACT,iBAAiB;IACjB,SAAS;IACT,MAAM;IACN,MAAM;IACN,QAAQ;CACT,CAAC;AAEF,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAAsB,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC,CAAC;AAEhF,KAAK,UAAU,WAAW;IACxB,IAAI,CAAC,YAAY,EAAE,CAAC;QAClB,YAAY,GAAG,CAAC,KAAK,IAAI,EAAE;YACzB,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;YAC3B,MAAM,SAAS,GAAG;;;;;;;;;;;aAWX,OAAO,EAAE;kBACJ,OAAO,EAAE;eACZ,OAAO,EAAE;iBACP,OAAO,EAAE;;eAEX,OAAO,EAAE;eACT,OAAO,EAAE;EACtB,CAAC;YAEG,IAAI,UAAU,EAAE,EAAE,CAAC;gBACjB,0FAA0F;gBAC1F,MAAM,iBAAiB,CAAC,6BAA6B,EAAE,SAAS,CAAC,CAAC;gBAClE,MAAM,iBAAiB,CACrB,wCAAwC,EACxC,oIAAoI,CACrI,CAAC;gBACF,MAAM,iBAAiB,CACrB,2BAA2B,EAC3B,0GAA0G,CAC3G,CAAC;gBACF,OAAO;YACT,CAAC;YAED,iCAAiC;YACjC,MAAM,cAAc,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC;YACtD,MAAM,cAAc,CAAC,GAAG,EAAE,CACxB,MAAM,CAAC,OAAO,CACZ,oIAAoI,CACrI,CACF,CAAC;YACF,MAAM,cAAc,CAAC,GAAG,EAAE,CACxB,MAAM,CAAC,OAAO,CACZ,0GAA0G,CAC3G,CACF,CAAC;QACJ,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;YACjB,sDAAsD;YACtD,YAAY,GAAG,SAAS,CAAC;YACzB,MAAM,GAAG,CAAC;QACZ,CAAC,CAAC,CAAC;IACL,CAAC;IACD,OAAO,YAAY,CAAC;AACtB,CAAC;AAED,SAAS,YAAY,CAAC,GAA4B;IAChD,OAAO;QACL,EAAE,EAAE,GAAG,CAAC,EAAY;QACpB,QAAQ,EAAE,GAAG,CAAC,SAAmB;QACjC,UAAU,EAAE,GAAG,CAAC,WAAqB;QACrC,KAAK,EAAG,GAAG,CAAC,MAAwB,IAAI,IAAI;QAC5C,IAAI,EAAE,GAAG,CAAC,IAAyB;QACnC,MAAM,EAAE,SAAS,CAAC,GAAG,CAAC,WAAW,EAAE,EAAE,CAAC;QACtC,MAAM,EAAE,GAAG,CAAC,MAA6B;QACzC,MAAM,EAAE,SAAS,CAAC,GAAG,CAAC,WAAW,EAAE,IAAI,CAAC;QACxC,QAAQ,EAAG,GAAG,CAAC,QAA0B,IAAI,IAAI;QACjD,gBAAgB,EAAG,GAAG,CAAC,kBAAoC,IAAI,IAAI;QACnE,QAAQ,EAAE,MAAM,CAAC,GAAG,CAAC,QAAQ,IAAI,CAAC,CAAC;QACnC,WAAW,EAAE,MAAM,CAAC,GAAG,CAAC,aAAa,IAAI,CAAC,CAAC;QAC3C,SAAS,EAAE,GAAG,CAAC,UAAU,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,UAAoB,CAAC;QAC3E,WAAW,EACT,GAAG,CAAC,YAAY,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,YAAsB,CAAC;QACtE,YAAY,EAAG,GAAG,CAAC,aAA+B,IAAI,IAAI;QAC1D,SAAS,EAAE,MAAM,CAAC,GAAG,CAAC,UAAU,IAAI,CAAC,CAAC;QACtC,SAAS,EAAE,MAAM,CAAC,GAAG,CAAC,UAAU,IAAI,CAAC,CAAC;KACvC,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,mBAAmB,CACjC,KAAc;IAEd,OAAO,CACL,OAAO,KAAK,KAAK,QAAQ;QACzB,oBAAoB,CAAC,QAAQ,CAAC,KAA0B,CAAC,CAC1D,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,KAS1C;IACC,MAAM,WAAW,EAAE,CAAC;IACpB,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;IAC3B,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,MAAM,EAAE,GAAG,kBAAkB,GAAG,IAAI,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC;IAEnD,MAAM,MAAM,CAAC,OAAO,CAAC;QACnB,GAAG,EAAE;;;wDAG+C;QACpD,IAAI,EAAE;YACJ,EAAE;YACF,KAAK,CAAC,QAAQ;YACd,KAAK,CAAC,UAAU;YAChB,KAAK,CAAC,KAAK,IAAI,IAAI;YACnB,KAAK,CAAC,IAAI;YACV,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,MAAM,IAAI,EAAE,CAAC;YAClC,SAAS;YACT,IAAI;YACJ,KAAK,CAAC,QAAQ,IAAI,IAAI;YACtB,KAAK,CAAC,gBAAgB,IAAI,IAAI;YAC9B,CAAC;YACD,KAAK,CAAC,WAAW,IAAI,GAAG;YACxB,GAAG;YACH,GAAG;SACJ;KACF,CAAC,CAAC;IAEH,MAAM,OAAO,GAAG,MAAM,gBAAgB,CAAC,EAAE,CAAC,CAAC;IAC3C,IAAI,CAAC,OAAO;QAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;IAC9D,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,EAAU;IAEV,MAAM,WAAW,EAAE,CAAC;IACpB,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,SAAS,EAAE,CAAC,OAAO,CAAC;QACzC,GAAG,EAAE,gEAAgE;QACrE,IAAI,EAAE,CAAC,EAAE,CAAC;KACX,CAAC,CAAC;IACH,OAAO,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAA4B,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AAC3E,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAAC,KAIhD;IACC,MAAM,WAAW,EAAE,CAAC;IACpB,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,IAAI,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC;IAC7D,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,KAAK,EAAE,OAAO,CAAC,EAAE,CAAC;QAC1D,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,SAAS,EAAE,CAAC,OAAO,CAAC;YACzC,GAAG,EAAE;;;oBAGS;YACd,IAAI,EAAE,CAAC,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC;SAChC,CAAC,CAAC;QACH,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,YAAY,CAAC,GAA8B,CAAC,CAAC,CAAC;IACzE,CAAC;IACD,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,SAAS,EAAE,CAAC,OAAO,CAAC;QACzC,GAAG,EAAE;;;;kBAIS;QACd,IAAI,EAAE,CAAC,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,KAAK,IAAI,IAAI,EAAE,KAAK,CAAC,KAAK,IAAI,IAAI,EAAE,KAAK,CAAC;KAC1E,CAAC,CAAC;IACH,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,YAAY,CAAC,GAA8B,CAAC,CAAC,CAAC;AACzE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,QAAgB;IAEhB,MAAM,WAAW,EAAE,CAAC;IACpB,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;IAC3B,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC;QACpC,GAAG,EAAE;;;;;kBAKS;QACd,IAAI,EAAE,CAAC,QAAQ,EAAE,GAAG,CAAC;KACtB,CAAC,CAAC;IACH,MAAM,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC,EAAE,EAAwB,CAAC;IAC7C,IAAI,CAAC,EAAE;QAAE,OAAO,IAAI,CAAC;IAErB,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC;QAClC,GAAG,EAAE,UAAU,EAAE;YACf,CAAC,CAAC;;;sBAGc;YAChB,CAAC,CAAC;;gEAEwD;QAC5D,IAAI,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,QAAQ,CAAC;KAC1C,CAAC,CAAC;IACH,IAAI,UAAU,EAAE,EAAE,CAAC;QACjB,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QAC7B,OAAO,GAAG,CAAC,CAAC,CAAC,YAAY,CAAC,GAA8B,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACnE,CAAC;IACD,MAAM,QAAQ,GAAG,MAAM,CAAC,YAAY,IAAK,MAAc,CAAC,QAAQ,CAAC;IACjE,IAAI,QAAQ,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAEhC,MAAM,OAAO,GAAG,MAAM,gBAAgB,CAAC,EAAE,CAAC,CAAC;IAC3C,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IAC1D,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAAC,KAM/C;IACC,MAAM,WAAW,EAAE,CAAC;IACpB,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;IAC3B,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,MAAM,WAAW,GAAG,iBAAiB,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;IACrE,MAAM,UAAU,GACd,KAAK,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAExE,MAAM,MAAM,CAAC,OAAO,CAAC;QACnB,GAAG,EAAE;;;;;;yCAMgC;QACrC,IAAI,EAAE;YACJ,KAAK,CAAC,MAAM;YACZ,UAAU,IAAI,IAAI;YAClB,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI;YAC7D,WAAW;YACX,GAAG;YACH,KAAK,CAAC,SAAS;YACf,KAAK,CAAC,QAAQ;SACf;KACF,CAAC,CAAC;IAEH,MAAM,OAAO,GAAG,MAAM,gBAAgB,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IACxD,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,QAAQ,KAAK,KAAK,CAAC,QAAQ;QAAE,OAAO,IAAI,CAAC;IACjE,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAAC,OAK9C;IACC,MAAM,WAAW,EAAE,CAAC;IACpB,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;IAC3B,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,MAAM,aAAa,GAAG,GAAG,GAAG,CAAC,OAAO,EAAE,mBAAmB,IAAI,MAAM,CAAC,CAAC;IACrE,MAAM,aAAa,GAAG,GAAG,GAAG,CAAC,OAAO,EAAE,mBAAmB,IAAI,CAAC,GAAG,MAAM,CAAC,CAAC;IACzE,MAAM,WAAW,GAAG,OAAO,EAAE,WAAW,IAAI,CAAC,CAAC;IAC9C,MAAM,KAAK,GAAG,OAAO,EAAE,KAAK,IAAI,EAAE,CAAC;IAEnC,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC;QACpC,GAAG,EAAE;;;;kBAIS;QACd,IAAI,EAAE,CAAC,aAAa,EAAE,aAAa,EAAE,KAAK,CAAC;KAC5C,CAAC,CAAC;IAEH,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,MAAM,EAAE,GAAG,GAAG,CAAC,EAAY,CAAC;QAC5B,MAAM,MAAM,GAAG,GAAG,CAAC,MAA6B,CAAC;QACjD,MAAM,QAAQ,GAAG,MAAM,CAAC,GAAG,CAAC,QAAQ,IAAI,CAAC,CAAC,CAAC;QAC3C,IAAI,QAAQ,IAAI,WAAW,EAAE,CAAC;YAC5B,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC;gBAClC,GAAG,EAAE;;;;;0CAK6B;gBAClC,IAAI,EAAE;oBACJ,uBAAuB,WAAW,WAAW;oBAC7C,GAAG;oBACH,GAAG;oBACH,EAAE;oBACF,MAAM;iBACP;aACF,CAAC,CAAC;YACH,IAAI,CAAC,MAAM,CAAC,YAAY,IAAK,MAAc,CAAC,QAAQ,CAAC,GAAG,CAAC;gBAAE,MAAM,EAAE,CAAC;YACpE,SAAS;QACX,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC;YAClC,GAAG,EAAE;;;;wCAI6B;YAClC,IAAI,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,MAAM,CAAC;SAC7B,CAAC,CAAC;QACH,IAAI,CAAC,MAAM,CAAC,YAAY,IAAK,MAAc,CAAC,QAAQ,CAAC,GAAG,CAAC;YAAE,OAAO,EAAE,CAAC;IACvE,CAAC;IAED,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC;AAC7B,CAAC;AAED,SAAS,SAAS,CAAC,KAAc,EAAE,QAAiB;IAClD,IAAI,KAAK,IAAI,IAAI;QAAE,OAAO,QAAQ,CAAC;IACnC,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;IACnC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,QAAQ,CAAC;IAClB,CAAC;AACH,CAAC;AAED,SAAS,SAAS,CAAC,UAAkB;IACnC,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,UAAU,CAAC,CAAC;IACzC,UAAU,CAAC,MAAM,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC;IACzC,OAAO,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC;SACrB,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;SACjD,IAAI,CAAC,EAAE,CAAC,CAAC;AACd,CAAC","sourcesContent":["import {\n  getDbExec,\n  intType,\n  isPostgres,\n  retryOnDdlRace,\n} from \"../db/client.js\";\nimport { ensureTableExists, ensureIndexExists } from \"../db/ddl-guard.js\";\nimport type {\n  RemoteCommand,\n  RemoteCommandKind,\n  RemoteCommandStatus,\n} from \"./remote-types.js\";\n\nlet _initPromise: Promise<void> | undefined;\n\nconst REMOTE_COMMAND_KINDS: RemoteCommandKind[] = [\n  \"create-run\",\n  \"list-runs\",\n  \"get-run\",\n  \"append-followup\",\n  \"approve\",\n  \"deny\",\n  \"stop\",\n  \"status\",\n];\n\nconst TERMINAL_STATUSES = new Set<RemoteCommandStatus>([\"completed\", \"failed\"]);\n\nasync function ensureTable(): Promise<void> {\n  if (!_initPromise) {\n    _initPromise = (async () => {\n      const client = getDbExec();\n      const createSql = `CREATE TABLE IF NOT EXISTS integration_remote_commands (\n  id TEXT PRIMARY KEY,\n  device_id TEXT NOT NULL,\n  owner_email TEXT NOT NULL,\n  org_id TEXT,\n  kind TEXT NOT NULL,\n  params_json TEXT NOT NULL,\n  status TEXT NOT NULL,\n  result_json TEXT,\n  platform TEXT,\n  external_thread_id TEXT,\n  attempts ${intType()} NOT NULL DEFAULT 0,\n  next_check_at ${intType()} NOT NULL,\n  claimed_at ${intType()},\n  completed_at ${intType()},\n  error_message TEXT,\n  created_at ${intType()} NOT NULL,\n  updated_at ${intType()} NOT NULL\n)`;\n\n      if (isPostgres()) {\n        // PG guard: probe via information_schema, only issue DDL if missing, bounded lock_timeout\n        await ensureTableExists(\"integration_remote_commands\", createSql);\n        await ensureIndexExists(\n          \"idx_remote_commands_device_status_next\",\n          `CREATE INDEX IF NOT EXISTS idx_remote_commands_device_status_next ON integration_remote_commands(device_id, status, next_check_at)`,\n        );\n        await ensureIndexExists(\n          \"idx_remote_commands_owner\",\n          `CREATE INDEX IF NOT EXISTS idx_remote_commands_owner ON integration_remote_commands(owner_email, org_id)`,\n        );\n        return;\n      }\n\n      // SQLite: keep existing behavior\n      await retryOnDdlRace(() => client.execute(createSql));\n      await retryOnDdlRace(() =>\n        client.execute(\n          `CREATE INDEX IF NOT EXISTS idx_remote_commands_device_status_next ON integration_remote_commands(device_id, status, next_check_at)`,\n        ),\n      );\n      await retryOnDdlRace(() =>\n        client.execute(\n          `CREATE INDEX IF NOT EXISTS idx_remote_commands_owner ON integration_remote_commands(owner_email, org_id)`,\n        ),\n      );\n    })().catch((err) => {\n      // Retry init on the next call after a failed startup.\n      _initPromise = undefined;\n      throw err;\n    });\n  }\n  return _initPromise;\n}\n\nfunction rowToCommand(row: Record<string, unknown>): RemoteCommand {\n  return {\n    id: row.id as string,\n    deviceId: row.device_id as string,\n    ownerEmail: row.owner_email as string,\n    orgId: (row.org_id as string | null) ?? null,\n    kind: row.kind as RemoteCommandKind,\n    params: parseJson(row.params_json, {}),\n    status: row.status as RemoteCommandStatus,\n    result: parseJson(row.result_json, null),\n    platform: (row.platform as string | null) ?? null,\n    externalThreadId: (row.external_thread_id as string | null) ?? null,\n    attempts: Number(row.attempts ?? 0),\n    nextCheckAt: Number(row.next_check_at ?? 0),\n    claimedAt: row.claimed_at == null ? null : Number(row.claimed_at as number),\n    completedAt:\n      row.completed_at == null ? null : Number(row.completed_at as number),\n    errorMessage: (row.error_message as string | null) ?? null,\n    createdAt: Number(row.created_at ?? 0),\n    updatedAt: Number(row.updated_at ?? 0),\n  };\n}\n\nexport function isRemoteCommandKind(\n  value: unknown,\n): value is RemoteCommandKind {\n  return (\n    typeof value === \"string\" &&\n    REMOTE_COMMAND_KINDS.includes(value as RemoteCommandKind)\n  );\n}\n\nexport async function enqueueRemoteCommand(input: {\n  deviceId: string;\n  ownerEmail: string;\n  orgId?: string | null;\n  kind: RemoteCommandKind;\n  params?: unknown;\n  platform?: string | null;\n  externalThreadId?: string | null;\n  nextCheckAt?: number;\n}): Promise<RemoteCommand> {\n  await ensureTable();\n  const client = getDbExec();\n  const now = Date.now();\n  const id = `remote-command-${now}-${randomHex(8)}`;\n\n  await client.execute({\n    sql: `INSERT INTO integration_remote_commands\n      (id, device_id, owner_email, org_id, kind, params_json, status, result_json,\n       platform, external_thread_id, attempts, next_check_at, created_at, updated_at)\n      VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)`,\n    args: [\n      id,\n      input.deviceId,\n      input.ownerEmail,\n      input.orgId ?? null,\n      input.kind,\n      JSON.stringify(input.params ?? {}),\n      \"pending\",\n      null,\n      input.platform ?? null,\n      input.externalThreadId ?? null,\n      0,\n      input.nextCheckAt ?? now,\n      now,\n      now,\n    ],\n  });\n\n  const command = await getRemoteCommand(id);\n  if (!command) throw new Error(\"remote command insert failed\");\n  return command;\n}\n\nexport async function getRemoteCommand(\n  id: string,\n): Promise<RemoteCommand | null> {\n  await ensureTable();\n  const { rows } = await getDbExec().execute({\n    sql: `SELECT * FROM integration_remote_commands WHERE id = ? LIMIT 1`,\n    args: [id],\n  });\n  return rows[0] ? rowToCommand(rows[0] as Record<string, unknown>) : null;\n}\n\nexport async function listRemoteCommandsForOwner(input: {\n  ownerEmail: string;\n  orgId?: string | null;\n  limit?: number;\n}): Promise<RemoteCommand[]> {\n  await ensureTable();\n  const limit = Math.max(1, Math.min(input.limit ?? 100, 250));\n  if (!Object.prototype.hasOwnProperty.call(input, \"orgId\")) {\n    const { rows } = await getDbExec().execute({\n      sql: `SELECT * FROM integration_remote_commands\n            WHERE owner_email = ?\n            ORDER BY updated_at DESC\n            LIMIT ?`,\n      args: [input.ownerEmail, limit],\n    });\n    return rows.map((row) => rowToCommand(row as Record<string, unknown>));\n  }\n  const { rows } = await getDbExec().execute({\n    sql: `SELECT * FROM integration_remote_commands\n          WHERE owner_email = ?\n            AND ((org_id IS NULL AND ? IS NULL) OR org_id = ?)\n          ORDER BY updated_at DESC\n          LIMIT ?`,\n    args: [input.ownerEmail, input.orgId ?? null, input.orgId ?? null, limit],\n  });\n  return rows.map((row) => rowToCommand(row as Record<string, unknown>));\n}\n\nexport async function claimNextRemoteCommand(\n  deviceId: string,\n): Promise<RemoteCommand | null> {\n  await ensureTable();\n  const client = getDbExec();\n  const now = Date.now();\n  const { rows } = await client.execute({\n    sql: `SELECT id FROM integration_remote_commands\n          WHERE device_id = ?\n            AND status = 'pending'\n            AND next_check_at <= ?\n          ORDER BY created_at ASC\n          LIMIT 1`,\n    args: [deviceId, now],\n  });\n  const id = rows[0]?.id as string | undefined;\n  if (!id) return null;\n\n  const result = await client.execute({\n    sql: isPostgres()\n      ? `UPDATE integration_remote_commands\n          SET status = ?, attempts = attempts + 1, claimed_at = ?, updated_at = ?\n          WHERE id = ? AND device_id = ? AND status = 'pending'\n          RETURNING *`\n      : `UPDATE integration_remote_commands\n          SET status = ?, attempts = attempts + 1, claimed_at = ?, updated_at = ?\n          WHERE id = ? AND device_id = ? AND status = 'pending'`,\n    args: [\"claimed\", now, now, id, deviceId],\n  });\n  if (isPostgres()) {\n    const row = result.rows?.[0];\n    return row ? rowToCommand(row as Record<string, unknown>) : null;\n  }\n  const affected = result.rowsAffected ?? (result as any).rowCount;\n  if (affected === 0) return null;\n\n  const command = await getRemoteCommand(id);\n  if (!command || command.status !== \"claimed\") return null;\n  return command;\n}\n\nexport async function updateRemoteCommandResult(input: {\n  deviceId: string;\n  commandId: string;\n  status: \"running\" | \"completed\" | \"failed\";\n  result?: unknown;\n  errorMessage?: string | null;\n}): Promise<RemoteCommand | null> {\n  await ensureTable();\n  const client = getDbExec();\n  const now = Date.now();\n  const completedAt = TERMINAL_STATUSES.has(input.status) ? now : null;\n  const resultJson =\n    input.result === undefined ? undefined : JSON.stringify(input.result);\n\n  await client.execute({\n    sql: `UPDATE integration_remote_commands\n          SET status = ?,\n              result_json = COALESCE(?, result_json),\n              error_message = ?,\n              completed_at = COALESCE(?, completed_at),\n              updated_at = ?\n          WHERE id = ? AND device_id = ?`,\n    args: [\n      input.status,\n      resultJson ?? null,\n      input.errorMessage ? input.errorMessage.slice(0, 2000) : null,\n      completedAt,\n      now,\n      input.commandId,\n      input.deviceId,\n    ],\n  });\n\n  const command = await getRemoteCommand(input.commandId);\n  if (!command || command.deviceId !== input.deviceId) return null;\n  return command;\n}\n\nexport async function retryStaleRemoteCommands(options?: {\n  claimedStaleAfterMs?: number;\n  runningStaleAfterMs?: number;\n  maxAttempts?: number;\n  limit?: number;\n}): Promise<{ retried: number; failed: number }> {\n  await ensureTable();\n  const client = getDbExec();\n  const now = Date.now();\n  const claimedCutoff = now - (options?.claimedStaleAfterMs ?? 75_000);\n  const runningCutoff = now - (options?.runningStaleAfterMs ?? 5 * 60_000);\n  const maxAttempts = options?.maxAttempts ?? 3;\n  const limit = options?.limit ?? 50;\n\n  const { rows } = await client.execute({\n    sql: `SELECT id, status, attempts FROM integration_remote_commands\n          WHERE (status = 'claimed' AND updated_at <= ?)\n             OR (status = 'running' AND updated_at <= ?)\n          ORDER BY updated_at ASC\n          LIMIT ?`,\n    args: [claimedCutoff, runningCutoff, limit],\n  });\n\n  let retried = 0;\n  let failed = 0;\n  for (const row of rows) {\n    const id = row.id as string;\n    const status = row.status as RemoteCommandStatus;\n    const attempts = Number(row.attempts ?? 0);\n    if (attempts >= maxAttempts) {\n      const result = await client.execute({\n        sql: `UPDATE integration_remote_commands\n              SET status = 'failed',\n                  error_message = COALESCE(error_message, ?),\n                  completed_at = ?,\n                  updated_at = ?\n              WHERE id = ? AND status = ?`,\n        args: [\n          `Retry job: exceeded ${maxAttempts} attempts`,\n          now,\n          now,\n          id,\n          status,\n        ],\n      });\n      if ((result.rowsAffected ?? (result as any).rowCount) > 0) failed++;\n      continue;\n    }\n\n    const result = await client.execute({\n      sql: `UPDATE integration_remote_commands\n            SET status = 'pending',\n                next_check_at = ?,\n                updated_at = ?\n            WHERE id = ? AND status = ?`,\n      args: [now, now, id, status],\n    });\n    if ((result.rowsAffected ?? (result as any).rowCount) > 0) retried++;\n  }\n\n  return { retried, failed };\n}\n\nfunction parseJson(value: unknown, fallback: unknown): unknown {\n  if (value == null) return fallback;\n  try {\n    return JSON.parse(String(value));\n  } catch {\n    return fallback;\n  }\n}\n\nfunction randomHex(byteLength: number): string {\n  const bytes = new Uint8Array(byteLength);\n  globalThis.crypto.getRandomValues(bytes);\n  return Array.from(bytes)\n    .map((byte) => byte.toString(16).padStart(2, \"0\"))\n    .join(\"\");\n}\n"]}
+{"version":3,"file":"remote-commands-store.js","sourceRoot":"","sources":["../../src/integrations/remote-commands-store.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,SAAS,EACT,OAAO,EACP,UAAU,EACV,cAAc,GACf,MAAM,iBAAiB,CAAC;AACzB,OAAO,EACL,kBAAkB,EAClB,iBAAiB,EACjB,iBAAiB,GAClB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACL,0BAA0B,EAC1B,2BAA2B,GAC5B,MAAM,iCAAiC,CAAC;AACzC,OAAO,EACL,kCAAkC,EAClC,wBAAwB,GACzB,MAAM,2BAA2B,CAAC;AACnC,OAAO,EACL,6BAA6B,EAC7B,uBAAuB,GACxB,MAAM,2BAA2B,CAAC;AACnC,OAAO,EACL,qBAAqB,EACrB,0BAA0B,GAC3B,MAAM,yBAAyB,CAAC;AASjC,IAAI,YAAuC,CAAC;AAE5C,MAAM,oBAAoB,GAAwB;IAChD,YAAY;IACZ,WAAW;IACX,SAAS;IACT,iBAAiB;IACjB,SAAS;IACT,MAAM;IACN,MAAM;IACN,QAAQ;CACT,CAAC;AAEF,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAAsB,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC,CAAC;AAEhF,KAAK,UAAU,WAAW;IACxB,IAAI,CAAC,YAAY,EAAE,CAAC;QAClB,YAAY,GAAG,CAAC,KAAK,IAAI,EAAE;YACzB,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;YAC3B,MAAM,SAAS,GAAG;;;;;;;;;;;;;sBAaF,OAAO,EAAE;;;;;qBAKV,OAAO,EAAE;aACjB,OAAO,EAAE;kBACJ,OAAO,EAAE;eACZ,OAAO,EAAE;iBACP,OAAO,EAAE;;eAEX,OAAO,EAAE;eACT,OAAO,EAAE;EACtB,CAAC;YAEG,IAAI,UAAU,EAAE,EAAE,CAAC;gBACjB,0FAA0F;gBAC1F,MAAM,iBAAiB,CAAC,6BAA6B,EAAE,SAAS,CAAC,CAAC;gBAClE,MAAM,4BAA4B,EAAE,CAAC;gBACrC,MAAM,iBAAiB,CACrB,wCAAwC,EACxC,oIAAoI,CACrI,CAAC;gBACF,MAAM,iBAAiB,CACrB,2BAA2B,EAC3B,0GAA0G,CAC3G,CAAC;gBACF,MAAM,4BAA4B,EAAE,CAAC;gBACrC,OAAO;YACT,CAAC;YAED,iCAAiC;YACjC,MAAM,cAAc,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC;YACtD,MAAM,4BAA4B,EAAE,CAAC;YACrC,MAAM,cAAc,CAAC,GAAG,EAAE,CACxB,MAAM,CAAC,OAAO,CACZ,oIAAoI,CACrI,CACF,CAAC;YACF,MAAM,4BAA4B,EAAE,CAAC;YACrC,MAAM,cAAc,CAAC,GAAG,EAAE,CACxB,MAAM,CAAC,OAAO,CACZ,0GAA0G,CAC3G,CACF,CAAC;QACJ,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;YACjB,sDAAsD;YACtD,YAAY,GAAG,SAAS,CAAC;YACzB,MAAM,GAAG,CAAC;QACZ,CAAC,CAAC,CAAC;IACL,CAAC;IACD,OAAO,YAAY,CAAC;AACtB,CAAC;AAED,SAAS,YAAY,CAAC,GAA4B;IAChD,MAAM,MAAM,GAAG,SAAS,CAAC,GAAG,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;IAC9C,OAAO;QACL,EAAE,EAAE,GAAG,CAAC,EAAY;QACpB,QAAQ,EAAE,GAAG,CAAC,SAAmB;QACjC,UAAU,EAAE,GAAG,CAAC,WAAqB;QACrC,KAAK,EAAG,GAAG,CAAC,MAAwB,IAAI,IAAI;QAC5C,IAAI,EAAE,GAAG,CAAC,IAAyB;QACnC,MAAM;QACN,MAAM,EAAE,GAAG,CAAC,MAA6B;QACzC,MAAM,EAAE,SAAS,CAAC,GAAG,CAAC,WAAW,EAAE,IAAI,CAAC;QACxC,QAAQ,EAAG,GAAG,CAAC,QAA0B,IAAI,IAAI;QACjD,gBAAgB,EAAG,GAAG,CAAC,kBAAoC,IAAI,IAAI;QACnE,iBAAiB,EACf,GAAG,CAAC,IAAI,KAAK,oBAAoB;YAC/B,CAAC,CAAC,CAAE,MAAiD,EAAE,QAAQ,IAAI,IAAI,CAAC;YACxE,CAAC,CAAC,IAAI;QACV,QAAQ,EAAE,MAAM,CAAC,GAAG,CAAC,QAAQ,IAAI,CAAC,CAAC;QACnC,WAAW,EAAE,MAAM,CAAC,GAAG,CAAC,aAAa,IAAI,CAAC,CAAC;QAC3C,SAAS,EAAE,GAAG,CAAC,UAAU,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,UAAoB,CAAC;QAC3E,WAAW,EACT,GAAG,CAAC,YAAY,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,YAAsB,CAAC;QACtE,YAAY,EAAG,GAAG,CAAC,aAA+B,IAAI,IAAI;QAC1D,SAAS,EAAE,MAAM,CAAC,GAAG,CAAC,UAAU,IAAI,CAAC,CAAC;QACtC,SAAS,EAAE,MAAM,CAAC,GAAG,CAAC,UAAU,IAAI,CAAC,CAAC;KACvC,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,4BAA4B;IACzC,MAAM,OAAO,GAA4B;QACvC,CAAC,kBAAkB,EAAE,MAAM,CAAC;QAC5B,CAAC,iBAAiB,EAAE,MAAM,CAAC;QAC3B,CAAC,mBAAmB,EAAE,OAAO,EAAE,CAAC;QAChC,CAAC,iBAAiB,EAAE,MAAM,CAAC;QAC3B,CAAC,iBAAiB,EAAE,MAAM,CAAC;QAC3B,CAAC,gBAAgB,EAAE,MAAM,CAAC;QAC1B,CAAC,aAAa,EAAE,MAAM,CAAC;QACvB,CAAC,kBAAkB,EAAE,OAAO,EAAE,CAAC;KAChC,CAAC;IACF,KAAK,MAAM,CAAC,IAAI,EAAE,UAAU,CAAC,IAAI,OAAO,EAAE,CAAC;QACzC,MAAM,GAAG,GAAG,qDAAqD,UAAU,EAAE,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,EAAE,IAAI,IAAI,IAAI,UAAU,EAAE,CAAC;QAC9H,IAAI,UAAU,EAAE,EAAE,CAAC;YACjB,MAAM,kBAAkB,CAAC,6BAA6B,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;YACnE,SAAS;QACX,CAAC;QACD,IAAI,CAAC;YACH,MAAM,cAAc,CAAC,GAAG,EAAE,CAAC,SAAS,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC;QACvD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,sBAAsB,CAAC,KAAK,CAAC;gBAAE,MAAM,KAAK,CAAC;QAClD,CAAC;IACH,CAAC;AACH,CAAC;AAED,KAAK,UAAU,4BAA4B;IACzC,MAAM,OAAO,GAAG;QACd;YACE,uCAAuC;YACvC,yKAAyK;SAC1K;QACD;YACE,iCAAiC;YACjC,8HAA8H;SAC/H;KACO,CAAC;IACX,KAAK,MAAM,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,OAAO,EAAE,CAAC;QAClC,IAAI,UAAU,EAAE;YAAE,MAAM,iBAAiB,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;;YAChD,MAAM,cAAc,CAAC,GAAG,EAAE,CAAC,SAAS,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC;IAC5D,CAAC;AACH,CAAC;AAED,MAAM,UAAU,mBAAmB,CACjC,KAAc;IAEd,OAAO,CACL,OAAO,KAAK,KAAK,QAAQ;QACzB,oBAAoB,CAAC,QAAQ,CAAC,KAA0B,CAAC,CAC1D,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,KAS1C;IACC,IAAI,KAAK,CAAC,IAAI,KAAK,oBAAoB,EAAE,CAAC;QACxC,MAAM,IAAI,wBAAwB,CAChC,kBAAkB,EAClB,qDAAqD,CACtD,CAAC;IACJ,CAAC;IACD,MAAM,WAAW,EAAE,CAAC;IACpB,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;IAC3B,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,MAAM,EAAE,GAAG,kBAAkB,GAAG,IAAI,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC;IAEnD,MAAM,MAAM,CAAC,OAAO,CAAC;QACnB,GAAG,EAAE;;;wDAG+C;QACpD,IAAI,EAAE;YACJ,EAAE;YACF,KAAK,CAAC,QAAQ;YACd,KAAK,CAAC,UAAU;YAChB,KAAK,CAAC,KAAK,IAAI,IAAI;YACnB,KAAK,CAAC,IAAI;YACV,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,MAAM,IAAI,EAAE,CAAC;YAClC,SAAS;YACT,IAAI;YACJ,KAAK,CAAC,QAAQ,IAAI,IAAI;YACtB,KAAK,CAAC,gBAAgB,IAAI,IAAI;YAC9B,CAAC;YACD,KAAK,CAAC,WAAW,IAAI,GAAG;YACxB,GAAG;YACH,GAAG;SACJ;KACF,CAAC,CAAC;IAEH,MAAM,OAAO,GAAG,MAAM,gBAAgB,CAAC,EAAE,CAAC,CAAC;IAC3C,IAAI,CAAC,OAAO;QAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;IAC9D,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAAC,KAM5C;IACC,MAAM,QAAQ,GAAG,MAAM,kCAAkC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IAC1E,MAAM,MAAM,GAAG,MAAM,uBAAuB,CAAC;QAC3C,EAAE,EAAE,KAAK,CAAC,QAAQ;QAClB,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,KAAK,EAAE,KAAK,CAAC,KAAK;KACnB,CAAC,CAAC;IACH,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;QAC1C,MAAM,IAAI,wBAAwB,CAChC,mBAAmB,EACnB,gEAAgE,CACjE,CAAC;IACJ,CAAC;IACD,MAAM,YAAY,GAAG,6BAA6B,CAAC,MAAM,CAAC,CAAC;IAC3D,MAAM,CAAC,OAAO,EAAE,IAAI,CAAC,GAAG,QAAQ,CAAC,cAAc,CAAC,KAAK,CAAC,GAAG,CAGxD,CAAC;IACF,IAAI,YAAY,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC;QAC7C,MAAM,IAAI,wBAAwB,CAChC,iBAAiB,EACjB,mCAAmC,QAAQ,CAAC,cAAc,EAAE,CAC7D,CAAC;IACJ,CAAC;IACD,MAAM,WAAW,EAAE,CAAC;IACpB,MAAM,2BAA2B,EAAE,CAAC;IACpC,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;IAC3B,MAAM,MAAM,GAAG,KAAK,EAAE,EAAiB,EAAmB,EAAE;QAC1D,MAAM,0BAA0B,CAAC,EAAE,GAAG,KAAK,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,CAAC;QAC7D,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,EAAE,GAAG,kBAAkB,GAAG,IAAI,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC;QACnD,IAAI,CAAC;YACH,MAAM,EAAE,CAAC,OAAO,CAAC;gBACf,GAAG,EAAE;;;;;;oFAMuE;gBAC5E,IAAI,EAAE;oBACJ,EAAE;oBACF,KAAK,CAAC,QAAQ;oBACd,KAAK,CAAC,UAAU;oBAChB,KAAK,CAAC,KAAK,IAAI,IAAI;oBACnB,oBAAoB;oBACpB,IAAI,CAAC,SAAS,CAAC,EAAE,QAAQ,EAAE,CAAC;oBAC5B,SAAS;oBACT,IAAI;oBACJ,KAAK,CAAC,QAAQ,IAAI,IAAI;oBACtB,IAAI;oBACJ,QAAQ,CAAC,MAAM;oBACf,QAAQ,CAAC,KAAK;oBACd,QAAQ,CAAC,QAAQ;oBACjB,QAAQ,CAAC,cAAc;oBACvB,QAAQ,CAAC,cAAc;oBACvB,QAAQ,CAAC,QAAQ,CAAC,KAAK;oBACvB,QAAQ,CAAC,QAAQ,CAAC,UAAU;oBAC5B,QAAQ,CAAC,cAAc;oBACvB,CAAC;oBACD,GAAG;oBACH,GAAG;oBACH,GAAG;iBACJ;aACF,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,uBAAuB,CAAC,KAAK,CAAC,EAAE,CAAC;gBACnC,MAAM,IAAI,wBAAwB,CAChC,QAAQ,EACR,iEAAiE,CAClE,CAAC;YACJ,CAAC;YACD,MAAM,KAAK,CAAC;QACd,CAAC;QACD,OAAO,EAAE,CAAC;IACZ,CAAC,CAAC;IACF,MAAM,EAAE,GAAG,MAAM,CAAC,WAAW;QAC3B,CAAC,CAAC,MAAM,MAAM,CAAC,WAAW,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAC9C,CAAC,CAAC,MAAM,MAAM,CAAC,MAAM,CAAC,CAAC;IACzB,MAAM,OAAO,GAAG,MAAM,gBAAgB,CAAC,EAAE,CAAC,CAAC;IAC3C,IAAI,CAAC,OAAO;QAAE,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;IAChE,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,EAAU;IAEV,MAAM,WAAW,EAAE,CAAC;IACpB,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,SAAS,EAAE,CAAC,OAAO,CAAC;QACzC,GAAG,EAAE,gEAAgE;QACrE,IAAI,EAAE,CAAC,EAAE,CAAC;KACX,CAAC,CAAC;IACH,OAAO,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAA4B,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AAC3E,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAAC,KAIhD;IACC,MAAM,WAAW,EAAE,CAAC;IACpB,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,IAAI,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC;IAC7D,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,KAAK,EAAE,OAAO,CAAC,EAAE,CAAC;QAC1D,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,SAAS,EAAE,CAAC,OAAO,CAAC;YACzC,GAAG,EAAE;;;oBAGS;YACd,IAAI,EAAE,CAAC,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC;SAChC,CAAC,CAAC;QACH,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,YAAY,CAAC,GAA8B,CAAC,CAAC,CAAC;IACzE,CAAC;IACD,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,SAAS,EAAE,CAAC,OAAO,CAAC;QACzC,GAAG,EAAE;;;;kBAIS;QACd,IAAI,EAAE,CAAC,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,KAAK,IAAI,IAAI,EAAE,KAAK,CAAC,KAAK,IAAI,IAAI,EAAE,KAAK,CAAC;KAC1E,CAAC,CAAC;IACH,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,YAAY,CAAC,GAA8B,CAAC,CAAC,CAAC;AACzE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,QAAgB;IAEhB,MAAM,WAAW,EAAE,CAAC;IACpB,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;IAC3B,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC;QACpC,GAAG,EAAE;;;;;;kBAMS;QACd,IAAI,EAAE,CAAC,QAAQ,EAAE,GAAG,CAAC;KACtB,CAAC,CAAC;IACH,MAAM,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC,EAAE,EAAwB,CAAC;IAC7C,IAAI,CAAC,EAAE;QAAE,OAAO,IAAI,CAAC;IAErB,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC;QAClC,GAAG,EAAE,UAAU,EAAE;YACf,CAAC,CAAC;;;sBAGc;YAChB,CAAC,CAAC;;gEAEwD;QAC5D,IAAI,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,QAAQ,CAAC;KAC1C,CAAC,CAAC;IACH,IAAI,UAAU,EAAE,EAAE,CAAC;QACjB,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QAC7B,OAAO,GAAG,CAAC,CAAC,CAAC,YAAY,CAAC,GAA8B,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACnE,CAAC;IACD,MAAM,QAAQ,GAAG,MAAM,CAAC,YAAY,IAAK,MAAc,CAAC,QAAQ,CAAC;IACjE,IAAI,QAAQ,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAEhC,MAAM,OAAO,GAAG,MAAM,gBAAgB,CAAC,EAAE,CAAC,CAAC;IAC3C,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IAC1D,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAAC,KAM9C;IACC,MAAM,WAAW,EAAE,CAAC;IACpB,IAAI,KAAK,CAAC,gBAAgB,EAAE,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACtD,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;IAC3B,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;IACpC,MAAM,oBAAoB,GAAG,KAAK,CAAC,gBAAgB,EAAE,MAAM;QACzD,CAAC,CAAC,4BAA4B,KAAK,CAAC,gBAAgB,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG;QACjF,CAAC,CAAC,EAAE,CAAC;IACP,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC;QACpC,GAAG,EAAE;;;;oCAI2B,oBAAoB;;kBAEtC;QACd,IAAI,EAAE;YACJ,KAAK,CAAC,QAAQ;YACd,KAAK,CAAC,UAAU;YAChB,KAAK,CAAC,KAAK,IAAI,IAAI;YACnB,KAAK,CAAC,KAAK,IAAI,IAAI;YACnB,GAAG;YACH,GAAG,CAAC,KAAK,CAAC,gBAAgB,IAAI,EAAE,CAAC;SAClC;KACF,CAAC,CAAC;IACH,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IAC1B,MAAM,SAAS,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC,CAA4B,CAAC,CAAC;IACnE,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,kCAAkC,CACvD,SAAS,CAAC,iBAAiB,EAC3B,EAAE,GAAG,EAAE,CACR,CAAC;QACF,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAA4B,CAAC;QAC/C,IACE,QAAQ,CAAC,MAAM,KAAK,GAAG,CAAC,gBAAgB;YACxC,QAAQ,CAAC,KAAK,KAAK,GAAG,CAAC,eAAe;YACtC,QAAQ,CAAC,QAAQ,KAAK,MAAM,CAAC,GAAG,CAAC,iBAAiB,CAAC;YACnD,QAAQ,CAAC,cAAc,KAAK,GAAG,CAAC,eAAe;YAC/C,QAAQ,CAAC,cAAc,KAAK,GAAG,CAAC,eAAe;YAC/C,QAAQ,CAAC,QAAQ,CAAC,KAAK,KAAK,GAAG,CAAC,cAAc;YAC9C,QAAQ,CAAC,QAAQ,CAAC,UAAU,KAAK,GAAG,CAAC,WAAW;YAChD,QAAQ,CAAC,cAAc,KAAK,MAAM,CAAC,GAAG,CAAC,gBAAgB,CAAC,EACxD,CAAC;YACD,MAAM,IAAI,wBAAwB,CAChC,sBAAsB,EACtB,6DAA6D,CAC9D,CAAC;QACJ,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,MAAM,CAAC,OAAO,CAAC;YACnB,GAAG,EAAE;;;;qCAI0B;YAC/B,IAAI,EAAE;gBACJ,KAAK,YAAY,KAAK;oBACpB,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC;oBAC9B,CAAC,CAAC,4BAA4B;gBAChC,GAAG;gBACH,GAAG;gBACH,SAAS,CAAC,EAAE;gBACZ,KAAK,CAAC,QAAQ;gBACd,KAAK,CAAC,UAAU;gBAChB,KAAK,CAAC,KAAK,IAAI,IAAI;gBACnB,KAAK,CAAC,KAAK,IAAI,IAAI;aACpB;SACF,CAAC,CAAC;QACH,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC;QAClC,GAAG,EAAE,UAAU,EAAE;YACf,CAAC,CAAC;;;;;sBAKc;YAChB,CAAC,CAAC;;;;4DAIoD;QACxD,IAAI,EAAE;YACJ,GAAG;YACH,GAAG;YACH,SAAS,CAAC,EAAE;YACZ,KAAK,CAAC,QAAQ;YACd,KAAK,CAAC,UAAU;YAChB,KAAK,CAAC,KAAK,IAAI,IAAI;YACnB,KAAK,CAAC,KAAK,IAAI,IAAI;YACnB,GAAG;SACJ;KACF,CAAC,CAAC;IACH,IAAI,UAAU,EAAE,EAAE,CAAC;QACjB,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QAC7B,OAAO,GAAG,CAAC,CAAC,CAAC,YAAY,CAAC,GAA8B,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACnE,CAAC;IACD,IAAI,YAAY,CAAC,MAAM,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAC5C,MAAM,OAAO,GAAG,MAAM,gBAAgB,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;IACrD,OAAO,OAAO,EAAE,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC;AACxD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAAC,KAM/C;IACC,MAAM,WAAW,EAAE,CAAC;IACpB,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;IAC3B,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,MAAM,WAAW,GAAG,iBAAiB,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;IACrE,MAAM,UAAU,GACd,KAAK,CAAC,MAAM,KAAK,SAAS;QACxB,CAAC,CAAC,SAAS;QACX,CAAC,CAAC,0BAA0B,CAAC,KAAK,CAAC,MAAM,EAAE;YACvC,KAAK,EAAE,uBAAuB;YAC9B,QAAQ,EAAE,OAAO;SAClB,CAAC,CAAC;IACT,IAAI,KAAK,CAAC,YAAY,EAAE,CAAC;QACvB,qBAAqB,CAAC,KAAK,CAAC,YAAY,EAAE,sBAAsB,CAAC,CAAC;IACpE,CAAC;IAED,MAAM,MAAM,CAAC,OAAO,CAAC;QACnB,GAAG,EAAE;;;;;;yCAMgC;QACrC,IAAI,EAAE;YACJ,KAAK,CAAC,MAAM;YACZ,UAAU,IAAI,IAAI;YAClB,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI;YAC7D,WAAW;YACX,GAAG;YACH,KAAK,CAAC,SAAS;YACf,KAAK,CAAC,QAAQ;SACf;KACF,CAAC,CAAC;IAEH,MAAM,OAAO,GAAG,MAAM,gBAAgB,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IACxD,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,QAAQ,KAAK,KAAK,CAAC,QAAQ;QAAE,OAAO,IAAI,CAAC;IACjE,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAAC,OAK9C;IACC,MAAM,WAAW,EAAE,CAAC;IACpB,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;IAC3B,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,MAAM,aAAa,GAAG,GAAG,GAAG,CAAC,OAAO,EAAE,mBAAmB,IAAI,MAAM,CAAC,CAAC;IACrE,MAAM,aAAa,GAAG,GAAG,GAAG,CAAC,OAAO,EAAE,mBAAmB,IAAI,CAAC,GAAG,MAAM,CAAC,CAAC;IACzE,MAAM,WAAW,GAAG,OAAO,EAAE,WAAW,IAAI,CAAC,CAAC;IAC9C,MAAM,KAAK,GAAG,OAAO,EAAE,KAAK,IAAI,EAAE,CAAC;IAEnC,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC;QACpC,GAAG,EAAE;;;;kBAIS;QACd,IAAI,EAAE,CAAC,aAAa,EAAE,aAAa,EAAE,KAAK,CAAC;KAC5C,CAAC,CAAC;IAEH,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,MAAM,EAAE,GAAG,GAAG,CAAC,EAAY,CAAC;QAC5B,MAAM,MAAM,GAAG,GAAG,CAAC,MAA6B,CAAC;QACjD,MAAM,QAAQ,GAAG,MAAM,CAAC,GAAG,CAAC,QAAQ,IAAI,CAAC,CAAC,CAAC;QAC3C,IAAI,QAAQ,IAAI,WAAW,EAAE,CAAC;YAC5B,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC;gBAClC,GAAG,EAAE;;;;;0CAK6B;gBAClC,IAAI,EAAE;oBACJ,uBAAuB,WAAW,WAAW;oBAC7C,GAAG;oBACH,GAAG;oBACH,EAAE;oBACF,MAAM;iBACP;aACF,CAAC,CAAC;YACH,IAAI,CAAC,MAAM,CAAC,YAAY,IAAK,MAAc,CAAC,QAAQ,CAAC,GAAG,CAAC;gBAAE,MAAM,EAAE,CAAC;YACpE,SAAS;QACX,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC;YAClC,GAAG,EAAE;;;;wCAI6B;YAClC,IAAI,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,MAAM,CAAC;SAC7B,CAAC,CAAC;QACH,IAAI,CAAC,MAAM,CAAC,YAAY,IAAK,MAAc,CAAC,QAAQ,CAAC,GAAG,CAAC;YAAE,OAAO,EAAE,CAAC;IACvE,CAAC;IAED,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC;AAC7B,CAAC;AAED,SAAS,SAAS,CAAC,KAAc,EAAE,QAAiB;IAClD,IAAI,KAAK,IAAI,IAAI;QAAE,OAAO,QAAQ,CAAC;IACnC,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;IACnC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,QAAQ,CAAC;IAClB,CAAC;AACH,CAAC;AAED,SAAS,SAAS,CAAC,UAAkB;IACnC,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,UAAU,CAAC,CAAC;IACzC,UAAU,CAAC,MAAM,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC;IACzC,OAAO,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC;SACrB,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;SACjD,IAAI,CAAC,EAAE,CAAC,CAAC;AACd,CAAC;AAED,SAAS,YAAY,CAAC,MAGrB;IACC,OAAO,CACL,MAAM,CAAC,YAAY;QACnB,MAAM,CAAE,MAAiC,CAAC,QAAQ,IAAI,CAAC,CAAC,CACzD,CAAC;AACJ,CAAC;AAED,SAAS,sBAAsB,CAAC,KAAc;IAC5C,MAAM,IAAI,GAAG,MAAM,CAAE,KAA4B,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC;IAC/D,MAAM,OAAO,GAAG,MAAM,CAAE,KAA+B,EAAE,OAAO,IAAI,KAAK,CAAC;SACvE,WAAW,EAAE;SACb,IAAI,EAAE,CAAC;IACV,OAAO,CACL,IAAI,KAAK,OAAO;QAChB,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAAC;QACpC,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAC,CACnC,CAAC;AACJ,CAAC;AAED,SAAS,uBAAuB,CAAC,KAAc;IAC7C,MAAM,IAAI,GAAG,MAAM,CAAE,KAA4B,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC;IAC/D,MAAM,OAAO,GAAG,MAAM,CAAE,KAA+B,EAAE,OAAO,IAAI,KAAK,CAAC;SACvE,WAAW,EAAE;SACb,IAAI,EAAE,CAAC;IACV,OAAO,CACL,IAAI,KAAK,OAAO;QAChB,IAAI,KAAK,MAAM;QACf,OAAO,CAAC,QAAQ,CAAC,mBAAmB,CAAC;QACrC,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAC,CAClC,CAAC;AACJ,CAAC","sourcesContent":["import {\n  getDbExec,\n  intType,\n  isPostgres,\n  retryOnDdlRace,\n} from \"../db/client.js\";\nimport {\n  ensureColumnExists,\n  ensureTableExists,\n  ensureIndexExists,\n} from \"../db/ddl-guard.js\";\nimport {\n  authorizeComputerOperation,\n  ensureComputerApprovalStore,\n} from \"./computer-supervision-store.js\";\nimport {\n  assertValidComputerCommandEnvelope,\n  ComputerSupervisionError,\n} from \"./computer-supervision.js\";\nimport {\n  getRemoteComputerCapabilities,\n  getRemoteDeviceForOwner,\n} from \"./remote-devices-store.js\";\nimport {\n  assertNoBinaryPayload,\n  serializeBoundedRemoteJson,\n} from \"./remote-json-safety.js\";\nimport type {\n  ComputerCommandEnvelope,\n  ComputerOperationClass,\n  RemoteCommand,\n  RemoteCommandKind,\n  RemoteCommandStatus,\n} from \"./remote-types.js\";\n\nlet _initPromise: Promise<void> | undefined;\n\nconst REMOTE_COMMAND_KINDS: RemoteCommandKind[] = [\n  \"create-run\",\n  \"list-runs\",\n  \"get-run\",\n  \"append-followup\",\n  \"approve\",\n  \"deny\",\n  \"stop\",\n  \"status\",\n];\n\nconst TERMINAL_STATUSES = new Set<RemoteCommandStatus>([\"completed\", \"failed\"]);\n\nasync function ensureTable(): Promise<void> {\n  if (!_initPromise) {\n    _initPromise = (async () => {\n      const client = getDbExec();\n      const createSql = `CREATE TABLE IF NOT EXISTS integration_remote_commands (\n  id TEXT PRIMARY KEY,\n  device_id TEXT NOT NULL,\n  owner_email TEXT NOT NULL,\n  org_id TEXT,\n  kind TEXT NOT NULL,\n  params_json TEXT NOT NULL,\n  status TEXT NOT NULL,\n  result_json TEXT,\n  platform TEXT,\n  external_thread_id TEXT,\n  computer_task_id TEXT,\n  computer_run_id TEXT,\n  computer_sequence ${intType()},\n  idempotency_key TEXT,\n  operation_class TEXT,\n  approval_scope TEXT,\n  action_hash TEXT,\n  lease_expires_at ${intType()},\n  attempts ${intType()} NOT NULL DEFAULT 0,\n  next_check_at ${intType()} NOT NULL,\n  claimed_at ${intType()},\n  completed_at ${intType()},\n  error_message TEXT,\n  created_at ${intType()} NOT NULL,\n  updated_at ${intType()} NOT NULL\n)`;\n\n      if (isPostgres()) {\n        // PG guard: probe via information_schema, only issue DDL if missing, bounded lock_timeout\n        await ensureTableExists(\"integration_remote_commands\", createSql);\n        await ensureComputerCommandColumns();\n        await ensureIndexExists(\n          \"idx_remote_commands_device_status_next\",\n          `CREATE INDEX IF NOT EXISTS idx_remote_commands_device_status_next ON integration_remote_commands(device_id, status, next_check_at)`,\n        );\n        await ensureIndexExists(\n          \"idx_remote_commands_owner\",\n          `CREATE INDEX IF NOT EXISTS idx_remote_commands_owner ON integration_remote_commands(owner_email, org_id)`,\n        );\n        await ensureComputerCommandIndexes();\n        return;\n      }\n\n      // SQLite: keep existing behavior\n      await retryOnDdlRace(() => client.execute(createSql));\n      await ensureComputerCommandColumns();\n      await retryOnDdlRace(() =>\n        client.execute(\n          `CREATE INDEX IF NOT EXISTS idx_remote_commands_device_status_next ON integration_remote_commands(device_id, status, next_check_at)`,\n        ),\n      );\n      await ensureComputerCommandIndexes();\n      await retryOnDdlRace(() =>\n        client.execute(\n          `CREATE INDEX IF NOT EXISTS idx_remote_commands_owner ON integration_remote_commands(owner_email, org_id)`,\n        ),\n      );\n    })().catch((err) => {\n      // Retry init on the next call after a failed startup.\n      _initPromise = undefined;\n      throw err;\n    });\n  }\n  return _initPromise;\n}\n\nfunction rowToCommand(row: Record<string, unknown>): RemoteCommand {\n  const params = parseJson(row.params_json, {});\n  return {\n    id: row.id as string,\n    deviceId: row.device_id as string,\n    ownerEmail: row.owner_email as string,\n    orgId: (row.org_id as string | null) ?? null,\n    kind: row.kind as RemoteCommandKind,\n    params,\n    status: row.status as RemoteCommandStatus,\n    result: parseJson(row.result_json, null),\n    platform: (row.platform as string | null) ?? null,\n    externalThreadId: (row.external_thread_id as string | null) ?? null,\n    computerOperation:\n      row.kind === \"computer-operation\"\n        ? ((params as { envelope?: ComputerCommandEnvelope })?.envelope ?? null)\n        : null,\n    attempts: Number(row.attempts ?? 0),\n    nextCheckAt: Number(row.next_check_at ?? 0),\n    claimedAt: row.claimed_at == null ? null : Number(row.claimed_at as number),\n    completedAt:\n      row.completed_at == null ? null : Number(row.completed_at as number),\n    errorMessage: (row.error_message as string | null) ?? null,\n    createdAt: Number(row.created_at ?? 0),\n    updatedAt: Number(row.updated_at ?? 0),\n  };\n}\n\nasync function ensureComputerCommandColumns(): Promise<void> {\n  const columns: Array<[string, string]> = [\n    [\"computer_task_id\", \"TEXT\"],\n    [\"computer_run_id\", \"TEXT\"],\n    [\"computer_sequence\", intType()],\n    [\"idempotency_key\", \"TEXT\"],\n    [\"operation_class\", \"TEXT\"],\n    [\"approval_scope\", \"TEXT\"],\n    [\"action_hash\", \"TEXT\"],\n    [\"lease_expires_at\", intType()],\n  ];\n  for (const [name, definition] of columns) {\n    const sql = `ALTER TABLE integration_remote_commands ADD COLUMN${isPostgres() ? \" IF NOT EXISTS\" : \"\"} ${name} ${definition}`;\n    if (isPostgres()) {\n      await ensureColumnExists(\"integration_remote_commands\", name, sql);\n      continue;\n    }\n    try {\n      await retryOnDdlRace(() => getDbExec().execute(sql));\n    } catch (error) {\n      if (!isDuplicateColumnError(error)) throw error;\n    }\n  }\n}\n\nasync function ensureComputerCommandIndexes(): Promise<void> {\n  const indexes = [\n    [\n      \"idx_remote_commands_computer_sequence\",\n      `CREATE UNIQUE INDEX IF NOT EXISTS idx_remote_commands_computer_sequence ON integration_remote_commands(device_id, computer_task_id, computer_run_id, computer_sequence)`,\n    ],\n    [\n      \"idx_remote_commands_idempotency\",\n      `CREATE UNIQUE INDEX IF NOT EXISTS idx_remote_commands_idempotency ON integration_remote_commands(device_id, idempotency_key)`,\n    ],\n  ] as const;\n  for (const [name, sql] of indexes) {\n    if (isPostgres()) await ensureIndexExists(name, sql);\n    else await retryOnDdlRace(() => getDbExec().execute(sql));\n  }\n}\n\nexport function isRemoteCommandKind(\n  value: unknown,\n): value is RemoteCommandKind {\n  return (\n    typeof value === \"string\" &&\n    REMOTE_COMMAND_KINDS.includes(value as RemoteCommandKind)\n  );\n}\n\nexport async function enqueueRemoteCommand(input: {\n  deviceId: string;\n  ownerEmail: string;\n  orgId?: string | null;\n  kind: RemoteCommandKind;\n  params?: unknown;\n  platform?: string | null;\n  externalThreadId?: string | null;\n  nextCheckAt?: number;\n}): Promise<RemoteCommand> {\n  if (input.kind === \"computer-operation\") {\n    throw new ComputerSupervisionError(\n      \"invalid-envelope\",\n      \"Computer operations must use enqueueComputerCommand\",\n    );\n  }\n  await ensureTable();\n  const client = getDbExec();\n  const now = Date.now();\n  const id = `remote-command-${now}-${randomHex(8)}`;\n\n  await client.execute({\n    sql: `INSERT INTO integration_remote_commands\n      (id, device_id, owner_email, org_id, kind, params_json, status, result_json,\n       platform, external_thread_id, attempts, next_check_at, created_at, updated_at)\n      VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)`,\n    args: [\n      id,\n      input.deviceId,\n      input.ownerEmail,\n      input.orgId ?? null,\n      input.kind,\n      JSON.stringify(input.params ?? {}),\n      \"pending\",\n      null,\n      input.platform ?? null,\n      input.externalThreadId ?? null,\n      0,\n      input.nextCheckAt ?? now,\n      now,\n      now,\n    ],\n  });\n\n  const command = await getRemoteCommand(id);\n  if (!command) throw new Error(\"remote command insert failed\");\n  return command;\n}\n\nexport async function enqueueComputerCommand(input: {\n  deviceId: string;\n  ownerEmail: string;\n  orgId?: string | null;\n  envelope: ComputerCommandEnvelope;\n  platform?: string | null;\n}): Promise<RemoteCommand> {\n  const envelope = await assertValidComputerCommandEnvelope(input.envelope);\n  const device = await getRemoteDeviceForOwner({\n    id: input.deviceId,\n    ownerEmail: input.ownerEmail,\n    orgId: input.orgId,\n  });\n  if (!device || device.status !== \"active\") {\n    throw new ComputerSupervisionError(\n      \"approval-mismatch\",\n      \"Computer device does not belong to this owner and organization\",\n    );\n  }\n  const capabilities = getRemoteComputerCapabilities(device);\n  const [surface, mode] = envelope.operationClass.split(\".\") as [\n    \"browser\" | \"desktop\",\n    \"observe\" | \"control\",\n  ];\n  if (capabilities?.[surface]?.[mode] !== true) {\n    throw new ComputerSupervisionError(\n      \"approval-denied\",\n      `Remote device did not advertise ${envelope.operationClass}`,\n    );\n  }\n  await ensureTable();\n  await ensureComputerApprovalStore();\n  const client = getDbExec();\n  const insert = async (tx: typeof client): Promise<string> => {\n    await authorizeComputerOperation({ ...input, envelope }, tx);\n    const now = Date.now();\n    const id = `remote-command-${now}-${randomHex(8)}`;\n    try {\n      await tx.execute({\n        sql: `INSERT INTO integration_remote_commands\n          (id, device_id, owner_email, org_id, kind, params_json, status,\n           result_json, platform, external_thread_id, computer_task_id,\n           computer_run_id, computer_sequence, idempotency_key, operation_class,\n           approval_scope, action_hash, lease_expires_at, attempts, next_check_at,\n           created_at, updated_at)\n          VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)`,\n        args: [\n          id,\n          input.deviceId,\n          input.ownerEmail,\n          input.orgId ?? null,\n          \"computer-operation\",\n          JSON.stringify({ envelope }),\n          \"pending\",\n          null,\n          input.platform ?? null,\n          null,\n          envelope.taskId,\n          envelope.runId,\n          envelope.sequence,\n          envelope.idempotencyKey,\n          envelope.operationClass,\n          envelope.approval.scope,\n          envelope.approval.actionHash,\n          envelope.leaseExpiresAt,\n          0,\n          now,\n          now,\n          now,\n        ],\n      });\n    } catch (error) {\n      if (isUniqueConstraintError(error)) {\n        throw new ComputerSupervisionError(\n          \"replay\",\n          \"Computer operation sequence or idempotency key was already used\",\n        );\n      }\n      throw error;\n    }\n    return id;\n  };\n  const id = client.transaction\n    ? await client.transaction((tx) => insert(tx))\n    : await insert(client);\n  const command = await getRemoteCommand(id);\n  if (!command) throw new Error(\"computer command insert failed\");\n  return command;\n}\n\nexport async function getRemoteCommand(\n  id: string,\n): Promise<RemoteCommand | null> {\n  await ensureTable();\n  const { rows } = await getDbExec().execute({\n    sql: `SELECT * FROM integration_remote_commands WHERE id = ? LIMIT 1`,\n    args: [id],\n  });\n  return rows[0] ? rowToCommand(rows[0] as Record<string, unknown>) : null;\n}\n\nexport async function listRemoteCommandsForOwner(input: {\n  ownerEmail: string;\n  orgId?: string | null;\n  limit?: number;\n}): Promise<RemoteCommand[]> {\n  await ensureTable();\n  const limit = Math.max(1, Math.min(input.limit ?? 100, 250));\n  if (!Object.prototype.hasOwnProperty.call(input, \"orgId\")) {\n    const { rows } = await getDbExec().execute({\n      sql: `SELECT * FROM integration_remote_commands\n            WHERE owner_email = ?\n            ORDER BY updated_at DESC\n            LIMIT ?`,\n      args: [input.ownerEmail, limit],\n    });\n    return rows.map((row) => rowToCommand(row as Record<string, unknown>));\n  }\n  const { rows } = await getDbExec().execute({\n    sql: `SELECT * FROM integration_remote_commands\n          WHERE owner_email = ?\n            AND ((org_id IS NULL AND ? IS NULL) OR org_id = ?)\n          ORDER BY updated_at DESC\n          LIMIT ?`,\n    args: [input.ownerEmail, input.orgId ?? null, input.orgId ?? null, limit],\n  });\n  return rows.map((row) => rowToCommand(row as Record<string, unknown>));\n}\n\nexport async function claimNextRemoteCommand(\n  deviceId: string,\n): Promise<RemoteCommand | null> {\n  await ensureTable();\n  const client = getDbExec();\n  const now = Date.now();\n  const { rows } = await client.execute({\n    sql: `SELECT id FROM integration_remote_commands\n          WHERE device_id = ?\n            AND status = 'pending'\n            AND kind <> 'computer-operation'\n            AND next_check_at <= ?\n          ORDER BY created_at ASC\n          LIMIT 1`,\n    args: [deviceId, now],\n  });\n  const id = rows[0]?.id as string | undefined;\n  if (!id) return null;\n\n  const result = await client.execute({\n    sql: isPostgres()\n      ? `UPDATE integration_remote_commands\n          SET status = ?, attempts = attempts + 1, claimed_at = ?, updated_at = ?\n          WHERE id = ? AND device_id = ? AND status = 'pending'\n          RETURNING *`\n      : `UPDATE integration_remote_commands\n          SET status = ?, attempts = attempts + 1, claimed_at = ?, updated_at = ?\n          WHERE id = ? AND device_id = ? AND status = 'pending'`,\n    args: [\"claimed\", now, now, id, deviceId],\n  });\n  if (isPostgres()) {\n    const row = result.rows?.[0];\n    return row ? rowToCommand(row as Record<string, unknown>) : null;\n  }\n  const affected = result.rowsAffected ?? (result as any).rowCount;\n  if (affected === 0) return null;\n\n  const command = await getRemoteCommand(id);\n  if (!command || command.status !== \"claimed\") return null;\n  return command;\n}\n\nexport async function claimNextComputerCommand(input: {\n  deviceId: string;\n  ownerEmail: string;\n  orgId?: string | null;\n  operationClasses?: ComputerOperationClass[];\n  now?: number;\n}): Promise<RemoteCommand | null> {\n  await ensureTable();\n  if (input.operationClasses?.length === 0) return null;\n  const client = getDbExec();\n  const now = input.now ?? Date.now();\n  const operationClassClause = input.operationClasses?.length\n    ? ` AND operation_class IN (${input.operationClasses.map(() => \"?\").join(\", \")})`\n    : \"\";\n  const { rows } = await client.execute({\n    sql: `SELECT * FROM integration_remote_commands\n          WHERE device_id = ? AND owner_email = ?\n            AND ((org_id IS NULL AND ? IS NULL) OR org_id = ?)\n            AND kind = 'computer-operation' AND status = 'pending'\n            AND next_check_at <= ?${operationClassClause}\n          ORDER BY computer_sequence ASC, created_at ASC\n          LIMIT 1`,\n    args: [\n      input.deviceId,\n      input.ownerEmail,\n      input.orgId ?? null,\n      input.orgId ?? null,\n      now,\n      ...(input.operationClasses ?? []),\n    ],\n  });\n  if (!rows[0]) return null;\n  const candidate = rowToCommand(rows[0] as Record<string, unknown>);\n  try {\n    const envelope = await assertValidComputerCommandEnvelope(\n      candidate.computerOperation,\n      { now },\n    );\n    const row = rows[0] as Record<string, unknown>;\n    if (\n      envelope.taskId !== row.computer_task_id ||\n      envelope.runId !== row.computer_run_id ||\n      envelope.sequence !== Number(row.computer_sequence) ||\n      envelope.idempotencyKey !== row.idempotency_key ||\n      envelope.operationClass !== row.operation_class ||\n      envelope.approval.scope !== row.approval_scope ||\n      envelope.approval.actionHash !== row.action_hash ||\n      envelope.leaseExpiresAt !== Number(row.lease_expires_at)\n    ) {\n      throw new ComputerSupervisionError(\n        \"action-hash-mismatch\",\n        \"Stored computer command binding does not match its envelope\",\n      );\n    }\n  } catch (error) {\n    await client.execute({\n      sql: `UPDATE integration_remote_commands\n            SET status = 'failed', error_message = ?, completed_at = ?, updated_at = ?\n            WHERE id = ? AND device_id = ? AND owner_email = ?\n              AND ((org_id IS NULL AND ? IS NULL) OR org_id = ?)\n              AND status = 'pending'`,\n      args: [\n        error instanceof Error\n          ? error.message.slice(0, 2000)\n          : \"Invalid computer operation\",\n        now,\n        now,\n        candidate.id,\n        input.deviceId,\n        input.ownerEmail,\n        input.orgId ?? null,\n        input.orgId ?? null,\n      ],\n    });\n    return null;\n  }\n\n  const result = await client.execute({\n    sql: isPostgres()\n      ? `UPDATE integration_remote_commands\n          SET status = 'claimed', attempts = attempts + 1, claimed_at = ?, updated_at = ?\n          WHERE id = ? AND device_id = ? AND owner_email = ?\n            AND ((org_id IS NULL AND ? IS NULL) OR org_id = ?)\n            AND status = 'pending' AND lease_expires_at > ?\n          RETURNING *`\n      : `UPDATE integration_remote_commands\n          SET status = 'claimed', attempts = attempts + 1, claimed_at = ?, updated_at = ?\n          WHERE id = ? AND device_id = ? AND owner_email = ?\n            AND ((org_id IS NULL AND ? IS NULL) OR org_id = ?)\n            AND status = 'pending' AND lease_expires_at > ?`,\n    args: [\n      now,\n      now,\n      candidate.id,\n      input.deviceId,\n      input.ownerEmail,\n      input.orgId ?? null,\n      input.orgId ?? null,\n      now,\n    ],\n  });\n  if (isPostgres()) {\n    const row = result.rows?.[0];\n    return row ? rowToCommand(row as Record<string, unknown>) : null;\n  }\n  if (affectedRows(result) === 0) return null;\n  const command = await getRemoteCommand(candidate.id);\n  return command?.status === \"claimed\" ? command : null;\n}\n\nexport async function updateRemoteCommandResult(input: {\n  deviceId: string;\n  commandId: string;\n  status: \"running\" | \"completed\" | \"failed\";\n  result?: unknown;\n  errorMessage?: string | null;\n}): Promise<RemoteCommand | null> {\n  await ensureTable();\n  const client = getDbExec();\n  const now = Date.now();\n  const completedAt = TERMINAL_STATUSES.has(input.status) ? now : null;\n  const resultJson =\n    input.result === undefined\n      ? undefined\n      : serializeBoundedRemoteJson(input.result, {\n          label: \"Remote command result\",\n          maxBytes: 256_000,\n        });\n  if (input.errorMessage) {\n    assertNoBinaryPayload(input.errorMessage, \"Remote command error\");\n  }\n\n  await client.execute({\n    sql: `UPDATE integration_remote_commands\n          SET status = ?,\n              result_json = COALESCE(?, result_json),\n              error_message = ?,\n              completed_at = COALESCE(?, completed_at),\n              updated_at = ?\n          WHERE id = ? AND device_id = ?`,\n    args: [\n      input.status,\n      resultJson ?? null,\n      input.errorMessage ? input.errorMessage.slice(0, 2000) : null,\n      completedAt,\n      now,\n      input.commandId,\n      input.deviceId,\n    ],\n  });\n\n  const command = await getRemoteCommand(input.commandId);\n  if (!command || command.deviceId !== input.deviceId) return null;\n  return command;\n}\n\nexport async function retryStaleRemoteCommands(options?: {\n  claimedStaleAfterMs?: number;\n  runningStaleAfterMs?: number;\n  maxAttempts?: number;\n  limit?: number;\n}): Promise<{ retried: number; failed: number }> {\n  await ensureTable();\n  const client = getDbExec();\n  const now = Date.now();\n  const claimedCutoff = now - (options?.claimedStaleAfterMs ?? 75_000);\n  const runningCutoff = now - (options?.runningStaleAfterMs ?? 5 * 60_000);\n  const maxAttempts = options?.maxAttempts ?? 3;\n  const limit = options?.limit ?? 50;\n\n  const { rows } = await client.execute({\n    sql: `SELECT id, status, attempts FROM integration_remote_commands\n          WHERE (status = 'claimed' AND updated_at <= ?)\n             OR (status = 'running' AND updated_at <= ?)\n          ORDER BY updated_at ASC\n          LIMIT ?`,\n    args: [claimedCutoff, runningCutoff, limit],\n  });\n\n  let retried = 0;\n  let failed = 0;\n  for (const row of rows) {\n    const id = row.id as string;\n    const status = row.status as RemoteCommandStatus;\n    const attempts = Number(row.attempts ?? 0);\n    if (attempts >= maxAttempts) {\n      const result = await client.execute({\n        sql: `UPDATE integration_remote_commands\n              SET status = 'failed',\n                  error_message = COALESCE(error_message, ?),\n                  completed_at = ?,\n                  updated_at = ?\n              WHERE id = ? AND status = ?`,\n        args: [\n          `Retry job: exceeded ${maxAttempts} attempts`,\n          now,\n          now,\n          id,\n          status,\n        ],\n      });\n      if ((result.rowsAffected ?? (result as any).rowCount) > 0) failed++;\n      continue;\n    }\n\n    const result = await client.execute({\n      sql: `UPDATE integration_remote_commands\n            SET status = 'pending',\n                next_check_at = ?,\n                updated_at = ?\n            WHERE id = ? AND status = ?`,\n      args: [now, now, id, status],\n    });\n    if ((result.rowsAffected ?? (result as any).rowCount) > 0) retried++;\n  }\n\n  return { retried, failed };\n}\n\nfunction parseJson(value: unknown, fallback: unknown): unknown {\n  if (value == null) return fallback;\n  try {\n    return JSON.parse(String(value));\n  } catch {\n    return fallback;\n  }\n}\n\nfunction randomHex(byteLength: number): string {\n  const bytes = new Uint8Array(byteLength);\n  globalThis.crypto.getRandomValues(bytes);\n  return Array.from(bytes)\n    .map((byte) => byte.toString(16).padStart(2, \"0\"))\n    .join(\"\");\n}\n\nfunction affectedRows(result: {\n  rowsAffected?: number;\n  rows?: unknown[];\n}): number {\n  return (\n    result.rowsAffected ??\n    Number((result as { rowCount?: unknown }).rowCount ?? 0)\n  );\n}\n\nfunction isDuplicateColumnError(error: unknown): boolean {\n  const code = String((error as { code?: unknown })?.code ?? \"\");\n  const message = String((error as { message?: unknown })?.message ?? error)\n    .toLowerCase()\n    .trim();\n  return (\n    code === \"42701\" ||\n    message.includes(\"duplicate column\") ||\n    message.includes(\"already exists\")\n  );\n}\n\nfunction isUniqueConstraintError(error: unknown): boolean {\n  const code = String((error as { code?: unknown })?.code ?? \"\");\n  const message = String((error as { message?: unknown })?.message ?? error)\n    .toLowerCase()\n    .trim();\n  return (\n    code === \"23505\" ||\n    code === \"2067\" ||\n    message.includes(\"unique constraint\") ||\n    message.includes(\"duplicate key\")\n  );\n}\n"]}

package/dist/integrations/remote-devices-store.d.ts

@@ -1,5 +1,6 @@
-import type { PublicRemoteDevice, RemoteDevice } from "./remote-types.js";
+import type { PublicRemoteDevice, RemoteComputerCapabilities, RemoteDevice, RemoteDeviceMetadata } from "./remote-types.js";
 export declare function toPublicRemoteDevice(device: RemoteDevice): PublicRemoteDevice;
+export declare function getRemoteComputerCapabilities(device: Pick<RemoteDevice, "metadata">): RemoteComputerCapabilities | null;
 export declare function createRemoteDevice(input: {
     ownerEmail: string;
     orgId?: string | null;
@@ -7,7 +8,7 @@ export declare function createRemoteDevice(input: {
     platform?: string | null;
     appVersion?: string | null;
     hostName?: string | null;
-    metadata?: Record<string, unknown> | null;
+    metadata?: RemoteDeviceMetadata | null;
 }): Promise<{
     device: RemoteDevice;
     token: string;
@@ -31,7 +32,7 @@ export declare function updateRemoteDeviceDetails(input: {
     platform?: string | null;
     appVersion?: string | null;
     hostName?: string | null;
-    metadata?: Record<string, unknown> | null;
+    metadata?: RemoteDeviceMetadata | null;
 }): Promise<RemoteDevice | null>;
 export declare function revokeRemoteDeviceForOwner(input: {
     id: string;

package/dist/integrations/remote-devices-store.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"remote-devices-store.d.ts","sourceRoot":"","sources":["../../src/integrations/remote-devices-store.ts"],"names":[],"mappings":"AAWA,OAAO,KAAK,EAAE,kBAAkB,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AA6I1E,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,YAAY,GAAG,kBAAkB,CAgB7E;AAED,wBAAsB,kBAAkB,CAAC,KAAK,EAAE;IAC9C,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;CAC3C,GAAG,OAAO,CAAC;IAAE,MAAM,EAAE,YAAY,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC,CAkCnD;AAED,wBAAsB,eAAe,CACnC,EAAE,EAAE,MAAM,GACT,OAAO,CAAC,YAAY,GAAG,IAAI,CAAC,CAO9B;AAED,wBAAsB,uBAAuB,CAAC,KAAK,EAAE;IACnD,EAAE,EAAE,MAAM,CAAC;IACX,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACvB,GAAG,OAAO,CAAC,YAAY,GAAG,IAAI,CAAC,CAgB/B;AAED,wBAAsB,yBAAyB,CAAC,KAAK,EAAE;IACrD,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,MAAM,CAAC,EAAE,YAAY,CAAC,QAAQ,CAAC,CAAC;IAChC,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC,CAiC1B;AAED,wBAAsB,6BAA6B,CACjD,QAAQ,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAClC,OAAO,CAAC,YAAY,GAAG,IAAI,CAAC,CAqB9B;AAED,wBAAsB,yBAAyB,CAAC,KAAK,EAAE;IACrD,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;CAC3C,GAAG,OAAO,CAAC,YAAY,GAAG,IAAI,CAAC,CAoC/B;AAED,wBAAsB,0BAA0B,CAAC,KAAK,EAAE;IACtD,EAAE,EAAE,MAAM,CAAC;IACX,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACvB,GAAG,OAAO,CAAC,YAAY,GAAG,IAAI,CAAC,CAqB/B;AAED,wBAAsB,sBAAsB,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAYzE;AAED,wBAAsB,qBAAqB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAI1E"}
+{"version":3,"file":"remote-devices-store.d.ts","sourceRoot":"","sources":["../../src/integrations/remote-devices-store.ts"],"names":[],"mappings":"AAWA,OAAO,KAAK,EACV,kBAAkB,EAClB,0BAA0B,EAC1B,YAAY,EACZ,oBAAoB,EACrB,MAAM,mBAAmB,CAAC;AA0I3B,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,YAAY,GAAG,kBAAkB,CAgB7E;AAED,wBAAgB,6BAA6B,CAC3C,MAAM,EAAE,IAAI,CAAC,YAAY,EAAE,UAAU,CAAC,GACrC,0BAA0B,GAAG,IAAI,CAInC;AAED,wBAAsB,kBAAkB,CAAC,KAAK,EAAE;IAC9C,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,QAAQ,CAAC,EAAE,oBAAoB,GAAG,IAAI,CAAC;CACxC,GAAG,OAAO,CAAC;IAAE,MAAM,EAAE,YAAY,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC,CAkCnD;AAED,wBAAsB,eAAe,CACnC,EAAE,EAAE,MAAM,GACT,OAAO,CAAC,YAAY,GAAG,IAAI,CAAC,CAO9B;AAED,wBAAsB,uBAAuB,CAAC,KAAK,EAAE;IACnD,EAAE,EAAE,MAAM,CAAC;IACX,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACvB,GAAG,OAAO,CAAC,YAAY,GAAG,IAAI,CAAC,CAgB/B;AAED,wBAAsB,yBAAyB,CAAC,KAAK,EAAE;IACrD,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,MAAM,CAAC,EAAE,YAAY,CAAC,QAAQ,CAAC,CAAC;IAChC,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC,CAiC1B;AAED,wBAAsB,6BAA6B,CACjD,QAAQ,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAClC,OAAO,CAAC,YAAY,GAAG,IAAI,CAAC,CAqB9B;AAED,wBAAsB,yBAAyB,CAAC,KAAK,EAAE;IACrD,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,QAAQ,CAAC,EAAE,oBAAoB,GAAG,IAAI,CAAC;CACxC,GAAG,OAAO,CAAC,YAAY,GAAG,IAAI,CAAC,CAoC/B;AAED,wBAAsB,0BAA0B,CAAC,KAAK,EAAE;IACtD,EAAE,EAAE,MAAM,CAAC;IACX,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACvB,GAAG,OAAO,CAAC,YAAY,GAAG,IAAI,CAAC,CAqB/B;AAED,wBAAsB,sBAAsB,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAYzE;AAED,wBAAsB,qBAAqB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAI1E"}