@agent-native/core 0.99.3 → 0.100.0

package/dist/jobs/actions/manage-recurring-job.d.ts

@@ -0,0 +1,18 @@
+declare const _default: import("../../action.js").ActionDefinition<{
+    operation: "delete" | "update";
+    name: string;
+    scope?: "organization" | "personal";
+    enabled?: boolean;
+}, {
+    deleted: boolean;
+    name: string;
+    enabled?: undefined;
+    nextRun?: undefined;
+} | {
+    deleted?: undefined;
+    name: string;
+    enabled: boolean;
+    nextRun: string;
+}>;
+export default _default;
+//# sourceMappingURL=manage-recurring-job.d.ts.map

package/dist/jobs/actions/manage-recurring-job.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"manage-recurring-job.d.ts","sourceRoot":"","sources":["../../../src/jobs/actions/manage-recurring-job.ts"],"names":[],"mappings":""}

package/dist/jobs/actions/manage-recurring-job.js

@@ -0,0 +1,68 @@
+import { z } from "zod";
+import { defineAction } from "../../action.js";
+import { organizationResourceOwner, resourceDelete, resourceGetByPath, resourcePut, } from "../../resources/store.js";
+import { isValidCron, nextOccurrence } from "../cron.js";
+import { buildJobContent, parseJobFrontmatter } from "../scheduler.js";
+import { authorizeJobMutation } from "../tools.js";
+const scopeSchema = z.enum(["personal", "organization"]);
+function hasTriggerFrontmatter(content) {
+    const header = content.match(/^---\n([\s\S]*?)\n---/m)?.[1] ?? "";
+    return /^triggerType\s*:/m.test(header);
+}
+export default defineAction({
+    description: "Enable, pause, or delete one recurring cron job from the Agent Jobs page.",
+    agentTool: false,
+    schema: z.object({
+        operation: z.enum(["update", "delete"]),
+        name: z.string().min(1),
+        scope: scopeSchema.default("personal"),
+        enabled: z.boolean().optional(),
+    }),
+    run: async ({ operation, name, scope, enabled }, ctx) => {
+        const userEmail = ctx?.userEmail;
+        if (!userEmail)
+            throw new Error("Not authenticated.");
+        if (scope === "organization" && !ctx?.orgId) {
+            throw new Error("An organization is required for organization jobs.");
+        }
+        const owner = scope === "organization"
+            ? organizationResourceOwner(ctx.orgId)
+            : userEmail;
+        const path = `jobs/${name}.md`;
+        const resource = await resourceGetByPath(owner, path);
+        if (!resource) {
+            throw Object.assign(new Error(`Job "${name}" not found.`), {
+                statusCode: 404,
+            });
+        }
+        const { meta, body } = parseJobFrontmatter(resource.content);
+        if (hasTriggerFrontmatter(resource.content)) {
+            throw Object.assign(new Error(`Job "${name}" is an automation.`), {
+                statusCode: 400,
+            });
+        }
+        const denied = await authorizeJobMutation(resource.owner, meta);
+        if (denied)
+            throw Object.assign(new Error(denied), { statusCode: 403 });
+        if (operation === "delete") {
+            await resourceDelete(resource.id);
+            return { deleted: true, name };
+        }
+        if (enabled === undefined) {
+            throw Object.assign(new Error("enabled is required for update."), {
+                statusCode: 400,
+            });
+        }
+        meta.enabled = enabled;
+        if (enabled && meta.schedule && isValidCron(meta.schedule)) {
+            meta.nextRun = nextOccurrence(meta.schedule).toISOString();
+        }
+        await resourcePut(resource.owner, resource.path, buildJobContent(meta, body));
+        return {
+            name,
+            enabled: meta.enabled,
+            nextRun: meta.nextRun ?? null,
+        };
+    },
+});
+//# sourceMappingURL=manage-recurring-job.js.map

package/dist/jobs/actions/manage-recurring-job.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"manage-recurring-job.js","sourceRoot":"","sources":["../../../src/jobs/actions/manage-recurring-job.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAC/C,OAAO,EACL,yBAAyB,EACzB,cAAc,EACd,iBAAiB,EACjB,WAAW,GACZ,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AACzD,OAAO,EAAE,eAAe,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAC;AACvE,OAAO,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAC;AAEnD,MAAM,WAAW,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,cAAc,CAAC,CAAC,CAAC;AAEzD,SAAS,qBAAqB,CAAC,OAAe;IAC5C,MAAM,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC,wBAAwB,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAClE,OAAO,mBAAmB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;AAC1C,CAAC;AAED,eAAe,YAAY,CAAC;IAC1B,WAAW,EACT,2EAA2E;IAC7E,SAAS,EAAE,KAAK;IAChB,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC;QACf,SAAS,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;QACvC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QACvB,KAAK,EAAE,WAAW,CAAC,OAAO,CAAC,UAAU,CAAC;QACtC,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;KAChC,CAAC;IACF,GAAG,EAAE,KAAK,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,GAAG,EAAE,EAAE;QACtD,MAAM,SAAS,GAAG,GAAG,EAAE,SAAS,CAAC;QACjC,IAAI,CAAC,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAC;QACtD,IAAI,KAAK,KAAK,cAAc,IAAI,CAAC,GAAG,EAAE,KAAK,EAAE,CAAC;YAC5C,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;QACxE,CAAC;QAED,MAAM,KAAK,GACT,KAAK,KAAK,cAAc;YACtB,CAAC,CAAC,yBAAyB,CAAC,GAAG,CAAC,KAAe,CAAC;YAChD,CAAC,CAAC,SAAS,CAAC;QAChB,MAAM,IAAI,GAAG,QAAQ,IAAI,KAAK,CAAC;QAC/B,MAAM,QAAQ,GAAG,MAAM,iBAAiB,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;QACtD,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,QAAQ,IAAI,cAAc,CAAC,EAAE;gBACzD,UAAU,EAAE,GAAG;aAChB,CAAC,CAAC;QACL,CAAC;QAED,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,mBAAmB,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QAC7D,IAAI,qBAAqB,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;YAC5C,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,QAAQ,IAAI,qBAAqB,CAAC,EAAE;gBAChE,UAAU,EAAE,GAAG;aAChB,CAAC,CAAC;QACL,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,oBAAoB,CAAC,QAAQ,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;QAChE,IAAI,MAAM;YAAE,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,EAAE,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC,CAAC;QAExE,IAAI,SAAS,KAAK,QAAQ,EAAE,CAAC;YAC3B,MAAM,cAAc,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;YAClC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;QACjC,CAAC;QAED,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;YAC1B,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,iCAAiC,CAAC,EAAE;gBAChE,UAAU,EAAE,GAAG;aAChB,CAAC,CAAC;QACL,CAAC;QACD,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACvB,IAAI,OAAO,IAAI,IAAI,CAAC,QAAQ,IAAI,WAAW,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC3D,IAAI,CAAC,OAAO,GAAG,cAAc,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,WAAW,EAAE,CAAC;QAC7D,CAAC;QACD,MAAM,WAAW,CACf,QAAQ,CAAC,KAAK,EACd,QAAQ,CAAC,IAAI,EACb,eAAe,CAAC,IAAI,EAAE,IAAI,CAAC,CAC5B,CAAC;QAEF,OAAO;YACL,IAAI;YACJ,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,OAAO,EAAE,IAAI,CAAC,OAAO,IAAI,IAAI;SAC9B,CAAC;IACJ,CAAC;CACF,CAAC,CAAC","sourcesContent":["import { z } from \"zod\";\n\nimport { defineAction } from \"../../action.js\";\nimport {\n  organizationResourceOwner,\n  resourceDelete,\n  resourceGetByPath,\n  resourcePut,\n} from \"../../resources/store.js\";\nimport { isValidCron, nextOccurrence } from \"../cron.js\";\nimport { buildJobContent, parseJobFrontmatter } from \"../scheduler.js\";\nimport { authorizeJobMutation } from \"../tools.js\";\n\nconst scopeSchema = z.enum([\"personal\", \"organization\"]);\n\nfunction hasTriggerFrontmatter(content: string): boolean {\n  const header = content.match(/^---\\n([\\s\\S]*?)\\n---/m)?.[1] ?? \"\";\n  return /^triggerType\\s*:/m.test(header);\n}\n\nexport default defineAction({\n  description:\n    \"Enable, pause, or delete one recurring cron job from the Agent Jobs page.\",\n  agentTool: false,\n  schema: z.object({\n    operation: z.enum([\"update\", \"delete\"]),\n    name: z.string().min(1),\n    scope: scopeSchema.default(\"personal\"),\n    enabled: z.boolean().optional(),\n  }),\n  run: async ({ operation, name, scope, enabled }, ctx) => {\n    const userEmail = ctx?.userEmail;\n    if (!userEmail) throw new Error(\"Not authenticated.\");\n    if (scope === \"organization\" && !ctx?.orgId) {\n      throw new Error(\"An organization is required for organization jobs.\");\n    }\n\n    const owner =\n      scope === \"organization\"\n        ? organizationResourceOwner(ctx.orgId as string)\n        : userEmail;\n    const path = `jobs/${name}.md`;\n    const resource = await resourceGetByPath(owner, path);\n    if (!resource) {\n      throw Object.assign(new Error(`Job \"${name}\" not found.`), {\n        statusCode: 404,\n      });\n    }\n\n    const { meta, body } = parseJobFrontmatter(resource.content);\n    if (hasTriggerFrontmatter(resource.content)) {\n      throw Object.assign(new Error(`Job \"${name}\" is an automation.`), {\n        statusCode: 400,\n      });\n    }\n    const denied = await authorizeJobMutation(resource.owner, meta);\n    if (denied) throw Object.assign(new Error(denied), { statusCode: 403 });\n\n    if (operation === \"delete\") {\n      await resourceDelete(resource.id);\n      return { deleted: true, name };\n    }\n\n    if (enabled === undefined) {\n      throw Object.assign(new Error(\"enabled is required for update.\"), {\n        statusCode: 400,\n      });\n    }\n    meta.enabled = enabled;\n    if (enabled && meta.schedule && isValidCron(meta.schedule)) {\n      meta.nextRun = nextOccurrence(meta.schedule).toISOString();\n    }\n    await resourcePut(\n      resource.owner,\n      resource.path,\n      buildJobContent(meta, body),\n    );\n\n    return {\n      name,\n      enabled: meta.enabled,\n      nextRun: meta.nextRun ?? null,\n    };\n  },\n});\n"]}

package/dist/jobs/tools.d.ts

@@ -1,3 +1,16 @@
 import type { ActionEntry } from "../agent/production-agent.js";
+import { type JobFrontmatter } from "./scheduler.js";
+/**
+ * Authorise a mutation (update / delete) against a job resource. When the
+ * job is in the SHARED scope the caller must either be the original
+ * `createdBy` user or an org owner/admin — otherwise any user could rewrite
+ * another user's shared job and have it run as that user on the next cron
+ * tick (the privilege-escalation chain documented in audit
+ * `/tmp/security-audit/12-mcp-a2a-agent.md`, finding #3).
+ *
+ * Returns null when the mutation is allowed, or an error string suitable
+ * for returning to the caller when not.
+ */
+export declare function authorizeJobMutation(resourceOwner: string, meta: JobFrontmatter): Promise<string | null>;
 export declare function createJobTools(): Record<string, ActionEntry>;
 //# sourceMappingURL=tools.d.ts.map

package/dist/jobs/tools.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"tools.d.ts","sourceRoot":"","sources":["../../src/jobs/tools.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AA6RhE,wBAAgB,cAAc,IAAI,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,CAiF5D"}
+{"version":3,"file":"tools.d.ts","sourceRoot":"","sources":["../../src/jobs/tools.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAiBhE,OAAO,EAGL,KAAK,cAAc,EACpB,MAAM,gBAAgB,CAAC;AAsCxB;;;;;;;;;;GAUG;AACH,wBAAsB,oBAAoB,CACxC,aAAa,EAAE,MAAM,EACrB,IAAI,EAAE,cAAc,GACnB,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAkBxB;AAkMD,wBAAgB,cAAc,IAAI,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,CAiF5D"}

package/dist/jobs/tools.js

@@ -50,7 +50,7 @@ async function isCurrentUserOrgAdmin(orgId) {
  * Returns null when the mutation is allowed, or an error string suitable
  * for returning to the caller when not.
  */
-async function authorizeJobMutation(resourceOwner, meta) {
+export async function authorizeJobMutation(resourceOwner, meta) {
     const resourceOrgId = organizationIdFromResourceOwner(resourceOwner);
     if (resourceOwner !== SHARED_OWNER && !resourceOrgId) {
         // Personal-scope job — owner is the request's user. resourceGetByPath is

package/dist/jobs/tools.js.map

@@ -1 +1 @@
-{"version":3,"file":"tools.js","sourceRoot":"","sources":["../../src/jobs/tools.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAC5C,OAAO,EACL,WAAW,EACX,iBAAiB,EACjB,YAAY,EACZ,cAAc,EACd,+BAA+B,EAC/B,mBAAmB,EACnB,YAAY,GACb,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,mBAAmB,EACnB,eAAe,EACf,4BAA4B,GAC7B,MAAM,8BAA8B,CAAC;AACtC,OAAO,EAAE,WAAW,EAAE,cAAc,EAAE,YAAY,EAAE,MAAM,WAAW,CAAC;AACtE,OAAO,EACL,mBAAmB,EACnB,eAAe,GAEhB,MAAM,gBAAgB,CAAC;AAExB,SAAS,QAAQ;IACf,MAAM,KAAK,GAAG,mBAAmB,EAAE,CAAC;IACpC,IAAI,CAAC,KAAK;QAAE,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;IACrD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,cAAc;IACrB,OAAO,mBAAmB,CAAC,eAAe,EAAE,CAAC,CAAC;AAChD,CAAC;AAED;;;;;GAKG;AACH,KAAK,UAAU,qBAAqB,CAClC,KAAyB;IAEzB,IAAI,CAAC,KAAK;QAAE,OAAO,KAAK,CAAC;IACzB,MAAM,KAAK,GAAG,mBAAmB,EAAE,CAAC;IACpC,IAAI,CAAC,KAAK;QAAE,OAAO,KAAK,CAAC;IACzB,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;QAC3B,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC;YACpC,GAAG,EAAE,4EAA4E;YACjF,IAAI,EAAE,CAAC,KAAK,EAAE,KAAK,CAAC,WAAW,EAAE,CAAC;SACnC,CAAC,CAAC;QACH,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,KAAK,CAAC;QACpC,MAAM,IAAI,GAAG,MAAM,CAAE,IAAI,CAAC,CAAC,CAAS,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;QAC/D,OAAO,IAAI,KAAK,OAAO,IAAI,IAAI,KAAK,OAAO,CAAC;IAC9C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;;;;;;;;;GAUG;AACH,KAAK,UAAU,oBAAoB,CACjC,aAAqB,EACrB,IAAoB;IAEpB,MAAM,aAAa,GAAG,+BAA+B,CAAC,aAAa,CAAC,CAAC;IACrE,IAAI,aAAa,KAAK,YAAY,IAAI,CAAC,aAAa,EAAE,CAAC;QACrD,yEAAyE;QACzE,sEAAsE;QACtE,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,MAAM,GAAG,QAAQ,EAAE,CAAC;IAC1B,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,EAAE,WAAW,EAAE,CAAC;IAChD,IAAI,SAAS,IAAI,SAAS,KAAK,MAAM,CAAC,WAAW,EAAE;QAAE,OAAO,IAAI,CAAC;IAEjE,0EAA0E;IAC1E,MAAM,OAAO,GAAG,MAAM,qBAAqB,CACzC,aAAa,IAAI,IAAI,CAAC,KAAK,IAAI,eAAe,EAAE,IAAI,SAAS,CAC9D,CAAC;IACF,IAAI,OAAO;QAAE,OAAO,IAAI,CAAC;IAEzB,OAAO,mEAAmE,CAAC;AAC7E,CAAC;AAED,KAAK,UAAU,SAAS,CAAC,IAAyB;IAChD,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,YAAY,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,IAAI,CAAC;IAEnE,IAAI,CAAC,IAAI,IAAI,CAAC,QAAQ,IAAI,CAAC,YAAY,EAAE,CAAC;QACxC,OAAO,IAAI,CAAC,SAAS,CAAC;YACpB,KAAK,EAAE,+CAA+C;SACvD,CAAC,CAAC;IACL,CAAC;IAED,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC3B,OAAO,IAAI,CAAC,SAAS,CAAC;YACpB,KAAK,EAAE,6BAA6B,QAAQ,8DAA8D;SAC3G,CAAC,CAAC;IACL,CAAC;IAED,MAAM,KAAK,GAAG,KAAK,KAAK,UAAU,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,cAAc,EAAE,CAAC;IACnE,MAAM,IAAI,GAAG,QAAQ,IAAI,KAAK,CAAC;IAC/B,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;IACvB,MAAM,IAAI,GAAG,cAAc,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;IAC3C,MAAM,WAAW,GAAG,4BAA4B,EAAE,CAAC;IACnD,MAAM,SAAS,GAAG,WAAW,EAAE,QAAQ,CAAC,eAAe,CAAC,SAAS,CAAC;IAClE,MAAM,SAAS,GAAG,WAAW,EAAE,QAAQ,CAAC,SAAS,CAAC;IAElD,MAAM,IAAI,GAAmB;QAC3B,QAAQ;QACR,OAAO,EAAE,IAAI;QACb,SAAS,EAAE,QAAQ,EAAE;QACrB,KAAK,EAAE,eAAe,EAAE,IAAI,SAAS;QACrC,KAAK,EAAE,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS;QAChD,OAAO,EAAE,IAAI,CAAC,WAAW,EAAE;QAC3B,GAAG,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,WAAW,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACvE,GAAG,CAAC,WAAW,EAAE,QAAQ,CAAC,QAAQ;YAChC,CAAC,CAAC,EAAE,gBAAgB,EAAE,WAAW,CAAC,QAAQ,CAAC,QAAQ,EAAE;YACrD,CAAC,CAAC,EAAE,CAAC;QACP,GAAG,CAAC,OAAO,SAAS,KAAK,QAAQ;YAC/B,CAAC,CAAC,EAAE,mBAAmB,EAAE,SAAS,EAAE;YACpC,CAAC,CAAC,EAAE,CAAC;QACP,GAAG,CAAC,OAAO,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,iBAAiB,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC1E,GAAG,CAAC,WAAW,EAAE,QAAQ,CAAC,QAAQ;YAChC,CAAC,CAAC,EAAE,gBAAgB,EAAE,WAAW,CAAC,QAAQ,CAAC,QAAQ,EAAE;YACrD,CAAC,CAAC,EAAE,CAAC;QACP,GAAG,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE;YAC3C,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,IAAI,EAAE,EAAE;YACzB,CAAC,CAAC,EAAE,CAAC;KACR,CAAC;IAEF,MAAM,OAAO,GAAG,eAAe,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;IACpD,MAAM,WAAW,CAAC,KAAK,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;IAExC,OAAO,IAAI,CAAC,SAAS,CAAC;QACpB,OAAO,EAAE,IAAI;QACb,IAAI;QACJ,IAAI;QACJ,QAAQ;QACR,mBAAmB,EAAE,YAAY,CAAC,QAAQ,CAAC;QAC3C,OAAO,EAAE,IAAI,CAAC,WAAW,EAAE;QAC3B,KAAK,EAAE,KAAK,IAAI,QAAQ;KACzB,CAAC,CAAC;AACL,CAAC;AAED,KAAK,UAAU,OAAO,CAAC,IAAyB;IAC9C,MAAM,KAAK,GAAG,QAAQ,EAAE,CAAC;IACzB,MAAM,WAAW,GAAG,cAAc,EAAE,CAAC;IACrC,+DAA+D;IAC/D,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QAC3C,YAAY,CAAC,KAAK,EAAE,OAAO,CAAC;QAC5B,YAAY,CAAC,WAAW,EAAE,OAAO,CAAC;KACnC,CAAC,CAAC;IACH,IAAI,SAAS,GAAG,CAAC,GAAG,QAAQ,EAAE,GAAG,MAAM,CAAC,CAAC;IACzC,IAAI,IAAI,CAAC,KAAK,KAAK,UAAU;QAAE,SAAS,GAAG,QAAQ,CAAC;SAC/C,IAAI,IAAI,CAAC,KAAK,KAAK,QAAQ;QAAE,SAAS,GAAG,MAAM,CAAC;IACrD,MAAM,KAAK,GAAG,SAAS,CAAC,MAAM,CAC5B,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAC3D,CAAC;IACF,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,GAAG,CAC5B,KAAK,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,EAAE,EAAE;QACpB,MAAM,IAAI,GAAG,MAAM,iBAAiB,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;QACtD,MAAM,EAAE,IAAI,EAAE,GAAG,mBAAmB,CAAC,IAAI,EAAE,OAAO,IAAI,EAAE,CAAC,CAAC;QAC1D,OAAO;YACL,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC;YACxD,IAAI,EAAE,CAAC,CAAC,IAAI;YACZ,KAAK,EAAE,CAAC,CAAC,KAAK,KAAK,WAAW,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,UAAU;YACtD,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,mBAAmB,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE;YACrE,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,OAAO,EAAE,IAAI,CAAC,OAAO,IAAI,IAAI;YAC7B,UAAU,EAAE,IAAI,CAAC,UAAU,IAAI,IAAI;YACnC,SAAS,EAAE,IAAI,CAAC,SAAS,IAAI,IAAI;YACjC,OAAO,EAAE,IAAI,CAAC,OAAO,IAAI,IAAI;YAC7B,aAAa,EAAE,IAAI,CAAC,aAAa,IAAI,IAAI;YACzC,gBAAgB,EAAE,IAAI,CAAC,gBAAgB,IAAI,IAAI;YAC/C,mBAAmB,EAAE,IAAI,CAAC,mBAAmB,IAAI,IAAI;YACrD,KAAK,EAAE,IAAI,CAAC,KAAK,IAAI,IAAI;SAC1B,CAAC;IACJ,CAAC,CAAC,CACH,CAAC;IAEF,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtB,OAAO,mFAAmF,CAAC;IAC7F,CAAC;IAED,OAAO,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;AACvC,CAAC;AAED,KAAK,UAAU,SAAS,CAAC,IAAyB;IAChD,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,YAAY,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,IAAI,CAAC;IAC5E,MAAM,IAAI,GAAG,QAAQ,IAAI,KAAK,CAAC;IAE/B,2BAA2B;IAC3B,IAAI,QAAQ,GAAG,MAAM,iBAAiB,CAAC,cAAc,EAAE,EAAE,IAAI,CAAC,CAAC;IAC/D,IAAI,CAAC,QAAQ,IAAI,KAAK,KAAK,QAAQ,EAAE,CAAC;QACpC,QAAQ,GAAG,MAAM,iBAAiB,CAAC,QAAQ,EAAE,EAAE,IAAI,CAAC,CAAC;IACvD,CAAC;IAED,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,OAAO,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,QAAQ,IAAI,aAAa,EAAE,CAAC,CAAC;IAC9D,CAAC;IAED,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,mBAAmB,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;IAE7D,qEAAqE;IACrE,uEAAuE;IACvE,+DAA+D;IAC/D,+DAA+D;IAC/D,mCAAmC;IACnC,MAAM,MAAM,GAAG,MAAM,oBAAoB,CAAC,QAAQ,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;IAChE,IAAI,MAAM,EAAE,CAAC;QACX,OAAO,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;IAC3C,CAAC;IAED,IAAI,QAAQ,EAAE,CAAC;QACb,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC3B,OAAO,IAAI,CAAC,SAAS,CAAC;gBACpB,KAAK,EAAE,6BAA6B,QAAQ,GAAG;aAChD,CAAC,CAAC;QACL,CAAC;QACD,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;QACzB,IAAI,CAAC,OAAO,GAAG,cAAc,CAAC,QAAQ,CAAC,CAAC,WAAW,EAAE,CAAC;IACxD,CAAC;IAED,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;QAC1B,2EAA2E;QAC3E,2EAA2E;QAC3E,oEAAoE;QACpE,IAAI,CAAC,OAAO,GAAG,OAAO,KAAK,IAAI,IAAI,OAAO,KAAK,MAAM,CAAC;IACxD,CAAC;IAED,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9C,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;IACrB,CAAC;IACD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE;QAAE,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IAEzE,MAAM,OAAO,GAAG,YAAY,IAAI,IAAI,CAAC;IACrC,MAAM,OAAO,GAAG,eAAe,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IAC/C,MAAM,WAAW,CAAC,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IAE1D,OAAO,IAAI,CAAC,SAAS,CAAC;QACpB,OAAO,EAAE,IAAI;QACb,IAAI;QACJ,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,mBAAmB,EAAE,YAAY,CAAC,IAAI,CAAC,QAAQ,CAAC;QAChD,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,OAAO,EAAE,IAAI,CAAC,OAAO;KACtB,CAAC,CAAC;AACL,CAAC;AAED,KAAK,UAAU,SAAS,CAAC,IAAyB;IAChD,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,IAAI,CAAC;IAC7B,MAAM,IAAI,GAAG,QAAQ,IAAI,KAAK,CAAC;IAE/B,IAAI,QAAQ,GAAG,MAAM,iBAAiB,CAAC,cAAc,EAAE,EAAE,IAAI,CAAC,CAAC;IAC/D,IAAI,CAAC,QAAQ,IAAI,KAAK,KAAK,QAAQ,EAAE,CAAC;QACpC,QAAQ,GAAG,MAAM,iBAAiB,CAAC,QAAQ,EAAE,EAAE,IAAI,CAAC,CAAC;IACvD,CAAC;IAED,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,OAAO,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,QAAQ,IAAI,aAAa,EAAE,CAAC,CAAC;IAC9D,CAAC;IAED,wEAAwE;IACxE,uEAAuE;IACvE,sBAAsB;IACtB,MAAM,EAAE,IAAI,EAAE,GAAG,mBAAmB,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;IACvD,MAAM,MAAM,GAAG,MAAM,oBAAoB,CAAC,QAAQ,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;IAChE,IAAI,MAAM,EAAE,CAAC;QACX,OAAO,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;IAC3C,CAAC;IAED,MAAM,cAAc,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;IAClC,OAAO,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;AACjD,CAAC;AAED,MAAM,UAAU,cAAc;IAC5B,OAAO;QACL,aAAa,EAAE;YACb,IAAI,EAAE;gBACJ,WAAW,EAAE;;;;;;;;iOAQ4M;gBACzN,UAAU,EAAE;oBACV,IAAI,EAAE,QAAQ;oBACd,UAAU,EAAE;wBACV,MAAM,EAAE;4BACN,IAAI,EAAE,QAAQ;4BACd,WAAW,EAAE,wBAAwB;4BACrC,IAAI,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,CAAC;yBAC7C;wBACD,IAAI,EAAE;4BACJ,IAAI,EAAE,QAAQ;4BACd,WAAW,EACT,uFAAuF;yBAC1F;wBACD,QAAQ,EAAE;4BACR,IAAI,EAAE,QAAQ;4BACd,WAAW,EACT,mHAAmH;yBACtH;wBACD,YAAY,EAAE;4BACZ,IAAI,EAAE,QAAQ;4BACd,WAAW,EACT,qKAAqK;yBACxK;wBACD,OAAO,EAAE;4BACP,IAAI,EAAE,QAAQ;4BACd,WAAW,EACT,oEAAoE;4BACtE,IAAI,EAAE,CAAC,MAAM,EAAE,OAAO,CAAC;yBACxB;wBACD,KAAK,EAAE;4BACL,IAAI,EAAE,QAAQ;4BACd,WAAW,EACT,wJAAwJ;4BAC1J,IAAI,EAAE,CAAC,UAAU,EAAE,QAAQ,EAAE,KAAK,CAAC;yBACpC;wBACD,KAAK,EAAE;4BACL,IAAI,EAAE,QAAQ;4BACd,WAAW,EACT,+FAA+F;4BACjG,IAAI,EAAE,CAAC,SAAS,EAAE,QAAQ,CAAC;yBAC5B;wBACD,KAAK,EAAE;4BACL,IAAI,EAAE,QAAQ;4BACd,WAAW,EACT,0FAA0F;yBAC7F;qBACF;oBACD,QAAQ,EAAE,CAAC,QAAQ,CAAC;iBACrB;aACF;YACD,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;gBAClB,QAAQ,IAAI,CAAC,MAAM,EAAE,CAAC;oBACpB,KAAK,QAAQ;wBACX,OAAO,SAAS,CAAC,IAAI,CAAC,CAAC;oBACzB,KAAK,MAAM;wBACT,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC;oBACvB,KAAK,QAAQ;wBACX,OAAO,SAAS,CAAC,IAAI,CAAC,CAAC;oBACzB,KAAK,QAAQ;wBACX,OAAO,SAAS,CAAC,IAAI,CAAC,CAAC;oBACzB;wBACE,OAAO,IAAI,CAAC,SAAS,CAAC;4BACpB,KAAK,EAAE,mBAAmB,IAAI,CAAC,MAAM,uCAAuC;yBAC7E,CAAC,CAAC;gBACP,CAAC;YACH,CAAC;SACF;KACF,CAAC;AACJ,CAAC","sourcesContent":["import type { ActionEntry } from \"../agent/production-agent.js\";\nimport { getDbExec } from \"../db/client.js\";\nimport {\n  resourcePut,\n  resourceGetByPath,\n  resourceList,\n  resourceDelete,\n  organizationIdFromResourceOwner,\n  sharedResourceOwner,\n  SHARED_OWNER,\n} from \"../resources/store.js\";\nimport {\n  getRequestUserEmail,\n  getRequestOrgId,\n  getIntegrationRequestContext,\n} from \"../server/request-context.js\";\nimport { isValidCron, nextOccurrence, describeCron } from \"./cron.js\";\nimport {\n  parseJobFrontmatter,\n  buildJobContent,\n  type JobFrontmatter,\n} from \"./scheduler.js\";\n\nfunction getOwner(): string {\n  const email = getRequestUserEmail();\n  if (!email) throw new Error(\"no authenticated user\");\n  return email;\n}\n\nfunction getSharedOwner(): string {\n  return sharedResourceOwner(getRequestOrgId());\n}\n\n/**\n * Determine if the current request's user is an org owner/admin in the\n * given org. Used to allow privileged users to update or delete shared\n * jobs created by other org members. Returns false when there is no org,\n * no user, no membership, or any error querying — fail closed.\n */\nasync function isCurrentUserOrgAdmin(\n  orgId: string | undefined,\n): Promise<boolean> {\n  if (!orgId) return false;\n  const email = getRequestUserEmail();\n  if (!email) return false;\n  try {\n    const client = getDbExec();\n    const { rows } = await client.execute({\n      sql: `SELECT role FROM org_members WHERE org_id = ? AND LOWER(email) = ? LIMIT 1`,\n      args: [orgId, email.toLowerCase()],\n    });\n    if (rows.length === 0) return false;\n    const role = String((rows[0] as any).role ?? \"\").toLowerCase();\n    return role === \"owner\" || role === \"admin\";\n  } catch {\n    return false;\n  }\n}\n\n/**\n * Authorise a mutation (update / delete) against a job resource. When the\n * job is in the SHARED scope the caller must either be the original\n * `createdBy` user or an org owner/admin — otherwise any user could rewrite\n * another user's shared job and have it run as that user on the next cron\n * tick (the privilege-escalation chain documented in audit\n * `/tmp/security-audit/12-mcp-a2a-agent.md`, finding #3).\n *\n * Returns null when the mutation is allowed, or an error string suitable\n * for returning to the caller when not.\n */\nasync function authorizeJobMutation(\n  resourceOwner: string,\n  meta: JobFrontmatter,\n): Promise<string | null> {\n  const resourceOrgId = organizationIdFromResourceOwner(resourceOwner);\n  if (resourceOwner !== SHARED_OWNER && !resourceOrgId) {\n    // Personal-scope job — owner is the request's user. resourceGetByPath is\n    // already scoped to the caller, so we know meta.createdBy must match.\n    return null;\n  }\n  const caller = getOwner();\n  const createdBy = meta.createdBy?.toLowerCase();\n  if (createdBy && createdBy === caller.toLowerCase()) return null;\n\n  // Allow org owners/admins to manage shared jobs created by other members.\n  const isAdmin = await isCurrentUserOrgAdmin(\n    resourceOrgId ?? meta.orgId ?? getRequestOrgId() ?? undefined,\n  );\n  if (isAdmin) return null;\n\n  return \"Only the job's creator (or an org admin) can update or delete it.\";\n}\n\nasync function runCreate(args: Record<string, any>): Promise<string> {\n  const { name, schedule, instructions, scope, runAs, model } = args;\n\n  if (!name || !schedule || !instructions) {\n    return JSON.stringify({\n      error: \"name, schedule, and instructions are required\",\n    });\n  }\n\n  if (!isValidCron(schedule)) {\n    return JSON.stringify({\n      error: `Invalid cron expression: \"${schedule}\". Use 5 fields: minute hour day-of-month month day-of-week.`,\n    });\n  }\n\n  const owner = scope === \"personal\" ? getOwner() : getSharedOwner();\n  const path = `jobs/${name}.md`;\n  const now = new Date();\n  const next = nextOccurrence(schedule, now);\n  const integration = getIntegrationRequestContext();\n  const channelId = integration?.incoming.platformContext.channelId;\n  const threadRef = integration?.incoming.threadRef;\n\n  const meta: JobFrontmatter = {\n    schedule,\n    enabled: true,\n    createdBy: getOwner(),\n    orgId: getRequestOrgId() || undefined,\n    runAs: runAs === \"shared\" ? \"shared\" : \"creator\",\n    nextRun: next.toISOString(),\n    ...(integration?.scopeId ? { originScopeId: integration.scopeId } : {}),\n    ...(integration?.incoming.platform\n      ? { deliveryPlatform: integration.incoming.platform }\n      : {}),\n    ...(typeof channelId === \"string\"\n      ? { deliveryDestination: channelId }\n      : {}),\n    ...(typeof threadRef === \"string\" ? { deliveryThreadRef: threadRef } : {}),\n    ...(integration?.incoming.tenantId\n      ? { deliveryTenantId: integration.incoming.tenantId }\n      : {}),\n    ...(typeof model === \"string\" && model.trim()\n      ? { model: model.trim() }\n      : {}),\n  };\n\n  const content = buildJobContent(meta, instructions);\n  await resourcePut(owner, path, content);\n\n  return JSON.stringify({\n    created: true,\n    name,\n    path,\n    schedule,\n    scheduleDescription: describeCron(schedule),\n    nextRun: next.toISOString(),\n    scope: scope || \"shared\",\n  });\n}\n\nasync function runList(args: Record<string, any>): Promise<string> {\n  const owner = getOwner();\n  const sharedOwner = getSharedOwner();\n  // Fetch only current user's and shared jobs (not other users')\n  const [personal, shared] = await Promise.all([\n    resourceList(owner, \"jobs/\"),\n    resourceList(sharedOwner, \"jobs/\"),\n  ]);\n  let resources = [...personal, ...shared];\n  if (args.scope === \"personal\") resources = personal;\n  else if (args.scope === \"shared\") resources = shared;\n  const metas = resources.filter(\n    (r) => r.path.endsWith(\".md\") && !r.path.endsWith(\".keep\"),\n  );\n  const jobs = await Promise.all(\n    metas.map(async (r) => {\n      const full = await resourceGetByPath(r.owner, r.path);\n      const { meta } = parseJobFrontmatter(full?.content || \"\");\n      return {\n        name: r.path.replace(/^jobs\\//, \"\").replace(/\\.md$/, \"\"),\n        path: r.path,\n        scope: r.owner === sharedOwner ? \"shared\" : \"personal\",\n        schedule: meta.schedule,\n        scheduleDescription: meta.schedule ? describeCron(meta.schedule) : \"\",\n        enabled: meta.enabled,\n        lastRun: meta.lastRun || null,\n        lastStatus: meta.lastStatus || null,\n        lastError: meta.lastError || null,\n        nextRun: meta.nextRun || null,\n        originScopeId: meta.originScopeId || null,\n        deliveryPlatform: meta.deliveryPlatform || null,\n        deliveryDestination: meta.deliveryDestination || null,\n        model: meta.model || null,\n      };\n    }),\n  );\n\n  if (jobs.length === 0) {\n    return \"No recurring jobs configured. Use manage-jobs with action 'create' to create one.\";\n  }\n\n  return JSON.stringify(jobs, null, 2);\n}\n\nasync function runUpdate(args: Record<string, any>): Promise<string> {\n  const { name, schedule, instructions, enabled, scope, runAs, model } = args;\n  const path = `jobs/${name}.md`;\n\n  // Try to find the resource\n  let resource = await resourceGetByPath(getSharedOwner(), path);\n  if (!resource && scope !== \"shared\") {\n    resource = await resourceGetByPath(getOwner(), path);\n  }\n\n  if (!resource) {\n    return JSON.stringify({ error: `Job \"${name}\" not found` });\n  }\n\n  const { meta, body } = parseJobFrontmatter(resource.content);\n\n  // Reject when the caller doesn't own the shared job and isn't an org\n  // admin. Without this check, any user could rewrite a shared job whose\n  // `createdBy` is alice@…, and the next cron tick would run the\n  // attacker's instructions as alice (creator-runAs schedules in\n  // jobs/scheduler.ts line 273-278).\n  const denied = await authorizeJobMutation(resource.owner, meta);\n  if (denied) {\n    return JSON.stringify({ error: denied });\n  }\n\n  if (schedule) {\n    if (!isValidCron(schedule)) {\n      return JSON.stringify({\n        error: `Invalid cron expression: \"${schedule}\"`,\n      });\n    }\n    meta.schedule = schedule;\n    meta.nextRun = nextOccurrence(schedule).toISOString();\n  }\n\n  if (enabled !== undefined) {\n    // Accept both the schema's string enum (\"true\"/\"false\") and a real boolean\n    // from non-LLM callers. `enabled === \"true\"` alone treats a boolean `true`\n    // as false — silently *disabling* a job the caller meant to enable.\n    meta.enabled = enabled === true || enabled === \"true\";\n  }\n\n  if (runAs === \"creator\" || runAs === \"shared\") {\n    meta.runAs = runAs;\n  }\n  if (typeof model === \"string\" && model.trim()) meta.model = model.trim();\n\n  const newBody = instructions || body;\n  const content = buildJobContent(meta, newBody);\n  await resourcePut(resource.owner, resource.path, content);\n\n  return JSON.stringify({\n    updated: true,\n    name,\n    schedule: meta.schedule,\n    scheduleDescription: describeCron(meta.schedule),\n    enabled: meta.enabled,\n    nextRun: meta.nextRun,\n  });\n}\n\nasync function runDelete(args: Record<string, any>): Promise<string> {\n  const { name, scope } = args;\n  const path = `jobs/${name}.md`;\n\n  let resource = await resourceGetByPath(getSharedOwner(), path);\n  if (!resource && scope !== \"shared\") {\n    resource = await resourceGetByPath(getOwner(), path);\n  }\n\n  if (!resource) {\n    return JSON.stringify({ error: `Job \"${name}\" not found` });\n  }\n\n  // Same access check as runUpdate — only the creator or an org admin can\n  // remove a shared job. Otherwise any user could break another tenant's\n  // recurring schedule.\n  const { meta } = parseJobFrontmatter(resource.content);\n  const denied = await authorizeJobMutation(resource.owner, meta);\n  if (denied) {\n    return JSON.stringify({ error: denied });\n  }\n\n  await resourceDelete(resource.id);\n  return JSON.stringify({ deleted: true, name });\n}\n\nexport function createJobTools(): Record<string, ActionEntry> {\n  return {\n    \"manage-jobs\": {\n      tool: {\n        description: `Manage recurring jobs that run on a cron schedule.\n\nActions:\n- \"create\": Create a new recurring job. Requires name, schedule, and instructions.\n- \"list\": List all recurring jobs and their status (schedule, enabled, last run, next run).\n- \"update\": Update a job's schedule, instructions, or enabled state. Requires name.\n- \"delete\": Delete a recurring job. Requires name. Always confirm with the user first.\n\nCron format is 5 fields: minute hour day-of-month month day-of-week. Common patterns: '0 9 * * *' (daily 9am), '0 9 * * 1-5' (weekdays 9am), '0 * * * *' (every hour), '0 9 * * 1' (Mondays 9am), '*/30 * * * *' (every 30 min).`,\n        parameters: {\n          type: \"object\",\n          properties: {\n            action: {\n              type: \"string\",\n              description: \"The action to perform.\",\n              enum: [\"create\", \"list\", \"update\", \"delete\"],\n            },\n            name: {\n              type: \"string\",\n              description:\n                \"Job name (hyphen-case, e.g. 'daily-scorecard-check'). Required for create and update.\",\n            },\n            schedule: {\n              type: \"string\",\n              description:\n                \"Cron expression (5 fields: minute hour day-of-month month day-of-week). Required for create, optional for update.\",\n            },\n            instructions: {\n              type: \"string\",\n              description:\n                \"What the agent should do when this job runs. Be specific — include which actions to call and what to do with the results. Required for create, optional for update.\",\n            },\n            enabled: {\n              type: \"string\",\n              description:\n                \"Enable or disable a job: 'true' or 'false'. Only used with update.\",\n              enum: [\"true\", \"false\"],\n            },\n            scope: {\n              type: \"string\",\n              description:\n                \"For create: personal or shared (default: shared). For list: personal, shared, or all (default: all). For update: which scope to search (default: all).\",\n              enum: [\"personal\", \"shared\", \"all\"],\n            },\n            runAs: {\n              type: \"string\",\n              description:\n                \"Who shared jobs execute as: creator or shared. Default: creator. Used with create and update.\",\n              enum: [\"creator\", \"shared\"],\n            },\n            model: {\n              type: \"string\",\n              description:\n                \"Optional model id for this routine. The channel/app/engine default is used when omitted.\",\n            },\n          },\n          required: [\"action\"],\n        },\n      },\n      run: async (args) => {\n        switch (args.action) {\n          case \"create\":\n            return runCreate(args);\n          case \"list\":\n            return runList(args);\n          case \"update\":\n            return runUpdate(args);\n          case \"delete\":\n            return runDelete(args);\n          default:\n            return JSON.stringify({\n              error: `Unknown action \"${args.action}\". Use \"create\", \"list\", or \"update\".`,\n            });\n        }\n      },\n    },\n  };\n}\n"]}
+{"version":3,"file":"tools.js","sourceRoot":"","sources":["../../src/jobs/tools.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAC5C,OAAO,EACL,WAAW,EACX,iBAAiB,EACjB,YAAY,EACZ,cAAc,EACd,+BAA+B,EAC/B,mBAAmB,EACnB,YAAY,GACb,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,mBAAmB,EACnB,eAAe,EACf,4BAA4B,GAC7B,MAAM,8BAA8B,CAAC;AACtC,OAAO,EAAE,WAAW,EAAE,cAAc,EAAE,YAAY,EAAE,MAAM,WAAW,CAAC;AACtE,OAAO,EACL,mBAAmB,EACnB,eAAe,GAEhB,MAAM,gBAAgB,CAAC;AAExB,SAAS,QAAQ;IACf,MAAM,KAAK,GAAG,mBAAmB,EAAE,CAAC;IACpC,IAAI,CAAC,KAAK;QAAE,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;IACrD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,cAAc;IACrB,OAAO,mBAAmB,CAAC,eAAe,EAAE,CAAC,CAAC;AAChD,CAAC;AAED;;;;;GAKG;AACH,KAAK,UAAU,qBAAqB,CAClC,KAAyB;IAEzB,IAAI,CAAC,KAAK;QAAE,OAAO,KAAK,CAAC;IACzB,MAAM,KAAK,GAAG,mBAAmB,EAAE,CAAC;IACpC,IAAI,CAAC,KAAK;QAAE,OAAO,KAAK,CAAC;IACzB,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;QAC3B,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC;YACpC,GAAG,EAAE,4EAA4E;YACjF,IAAI,EAAE,CAAC,KAAK,EAAE,KAAK,CAAC,WAAW,EAAE,CAAC;SACnC,CAAC,CAAC;QACH,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,KAAK,CAAC;QACpC,MAAM,IAAI,GAAG,MAAM,CAAE,IAAI,CAAC,CAAC,CAAS,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;QAC/D,OAAO,IAAI,KAAK,OAAO,IAAI,IAAI,KAAK,OAAO,CAAC;IAC9C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,aAAqB,EACrB,IAAoB;IAEpB,MAAM,aAAa,GAAG,+BAA+B,CAAC,aAAa,CAAC,CAAC;IACrE,IAAI,aAAa,KAAK,YAAY,IAAI,CAAC,aAAa,EAAE,CAAC;QACrD,yEAAyE;QACzE,sEAAsE;QACtE,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,MAAM,GAAG,QAAQ,EAAE,CAAC;IAC1B,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,EAAE,WAAW,EAAE,CAAC;IAChD,IAAI,SAAS,IAAI,SAAS,KAAK,MAAM,CAAC,WAAW,EAAE;QAAE,OAAO,IAAI,CAAC;IAEjE,0EAA0E;IAC1E,MAAM,OAAO,GAAG,MAAM,qBAAqB,CACzC,aAAa,IAAI,IAAI,CAAC,KAAK,IAAI,eAAe,EAAE,IAAI,SAAS,CAC9D,CAAC;IACF,IAAI,OAAO;QAAE,OAAO,IAAI,CAAC;IAEzB,OAAO,mEAAmE,CAAC;AAC7E,CAAC;AAED,KAAK,UAAU,SAAS,CAAC,IAAyB;IAChD,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,YAAY,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,IAAI,CAAC;IAEnE,IAAI,CAAC,IAAI,IAAI,CAAC,QAAQ,IAAI,CAAC,YAAY,EAAE,CAAC;QACxC,OAAO,IAAI,CAAC,SAAS,CAAC;YACpB,KAAK,EAAE,+CAA+C;SACvD,CAAC,CAAC;IACL,CAAC;IAED,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC3B,OAAO,IAAI,CAAC,SAAS,CAAC;YACpB,KAAK,EAAE,6BAA6B,QAAQ,8DAA8D;SAC3G,CAAC,CAAC;IACL,CAAC;IAED,MAAM,KAAK,GAAG,KAAK,KAAK,UAAU,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,cAAc,EAAE,CAAC;IACnE,MAAM,IAAI,GAAG,QAAQ,IAAI,KAAK,CAAC;IAC/B,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;IACvB,MAAM,IAAI,GAAG,cAAc,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;IAC3C,MAAM,WAAW,GAAG,4BAA4B,EAAE,CAAC;IACnD,MAAM,SAAS,GAAG,WAAW,EAAE,QAAQ,CAAC,eAAe,CAAC,SAAS,CAAC;IAClE,MAAM,SAAS,GAAG,WAAW,EAAE,QAAQ,CAAC,SAAS,CAAC;IAElD,MAAM,IAAI,GAAmB;QAC3B,QAAQ;QACR,OAAO,EAAE,IAAI;QACb,SAAS,EAAE,QAAQ,EAAE;QACrB,KAAK,EAAE,eAAe,EAAE,IAAI,SAAS;QACrC,KAAK,EAAE,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS;QAChD,OAAO,EAAE,IAAI,CAAC,WAAW,EAAE;QAC3B,GAAG,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,WAAW,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACvE,GAAG,CAAC,WAAW,EAAE,QAAQ,CAAC,QAAQ;YAChC,CAAC,CAAC,EAAE,gBAAgB,EAAE,WAAW,CAAC,QAAQ,CAAC,QAAQ,EAAE;YACrD,CAAC,CAAC,EAAE,CAAC;QACP,GAAG,CAAC,OAAO,SAAS,KAAK,QAAQ;YAC/B,CAAC,CAAC,EAAE,mBAAmB,EAAE,SAAS,EAAE;YACpC,CAAC,CAAC,EAAE,CAAC;QACP,GAAG,CAAC,OAAO,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,iBAAiB,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC1E,GAAG,CAAC,WAAW,EAAE,QAAQ,CAAC,QAAQ;YAChC,CAAC,CAAC,EAAE,gBAAgB,EAAE,WAAW,CAAC,QAAQ,CAAC,QAAQ,EAAE;YACrD,CAAC,CAAC,EAAE,CAAC;QACP,GAAG,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE;YAC3C,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,IAAI,EAAE,EAAE;YACzB,CAAC,CAAC,EAAE,CAAC;KACR,CAAC;IAEF,MAAM,OAAO,GAAG,eAAe,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;IACpD,MAAM,WAAW,CAAC,KAAK,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;IAExC,OAAO,IAAI,CAAC,SAAS,CAAC;QACpB,OAAO,EAAE,IAAI;QACb,IAAI;QACJ,IAAI;QACJ,QAAQ;QACR,mBAAmB,EAAE,YAAY,CAAC,QAAQ,CAAC;QAC3C,OAAO,EAAE,IAAI,CAAC,WAAW,EAAE;QAC3B,KAAK,EAAE,KAAK,IAAI,QAAQ;KACzB,CAAC,CAAC;AACL,CAAC;AAED,KAAK,UAAU,OAAO,CAAC,IAAyB;IAC9C,MAAM,KAAK,GAAG,QAAQ,EAAE,CAAC;IACzB,MAAM,WAAW,GAAG,cAAc,EAAE,CAAC;IACrC,+DAA+D;IAC/D,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QAC3C,YAAY,CAAC,KAAK,EAAE,OAAO,CAAC;QAC5B,YAAY,CAAC,WAAW,EAAE,OAAO,CAAC;KACnC,CAAC,CAAC;IACH,IAAI,SAAS,GAAG,CAAC,GAAG,QAAQ,EAAE,GAAG,MAAM,CAAC,CAAC;IACzC,IAAI,IAAI,CAAC,KAAK,KAAK,UAAU;QAAE,SAAS,GAAG,QAAQ,CAAC;SAC/C,IAAI,IAAI,CAAC,KAAK,KAAK,QAAQ;QAAE,SAAS,GAAG,MAAM,CAAC;IACrD,MAAM,KAAK,GAAG,SAAS,CAAC,MAAM,CAC5B,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAC3D,CAAC;IACF,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,GAAG,CAC5B,KAAK,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,EAAE,EAAE;QACpB,MAAM,IAAI,GAAG,MAAM,iBAAiB,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;QACtD,MAAM,EAAE,IAAI,EAAE,GAAG,mBAAmB,CAAC,IAAI,EAAE,OAAO,IAAI,EAAE,CAAC,CAAC;QAC1D,OAAO;YACL,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC;YACxD,IAAI,EAAE,CAAC,CAAC,IAAI;YACZ,KAAK,EAAE,CAAC,CAAC,KAAK,KAAK,WAAW,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,UAAU;YACtD,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,mBAAmB,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE;YACrE,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,OAAO,EAAE,IAAI,CAAC,OAAO,IAAI,IAAI;YAC7B,UAAU,EAAE,IAAI,CAAC,UAAU,IAAI,IAAI;YACnC,SAAS,EAAE,IAAI,CAAC,SAAS,IAAI,IAAI;YACjC,OAAO,EAAE,IAAI,CAAC,OAAO,IAAI,IAAI;YAC7B,aAAa,EAAE,IAAI,CAAC,aAAa,IAAI,IAAI;YACzC,gBAAgB,EAAE,IAAI,CAAC,gBAAgB,IAAI,IAAI;YAC/C,mBAAmB,EAAE,IAAI,CAAC,mBAAmB,IAAI,IAAI;YACrD,KAAK,EAAE,IAAI,CAAC,KAAK,IAAI,IAAI;SAC1B,CAAC;IACJ,CAAC,CAAC,CACH,CAAC;IAEF,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtB,OAAO,mFAAmF,CAAC;IAC7F,CAAC;IAED,OAAO,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;AACvC,CAAC;AAED,KAAK,UAAU,SAAS,CAAC,IAAyB;IAChD,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,YAAY,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,IAAI,CAAC;IAC5E,MAAM,IAAI,GAAG,QAAQ,IAAI,KAAK,CAAC;IAE/B,2BAA2B;IAC3B,IAAI,QAAQ,GAAG,MAAM,iBAAiB,CAAC,cAAc,EAAE,EAAE,IAAI,CAAC,CAAC;IAC/D,IAAI,CAAC,QAAQ,IAAI,KAAK,KAAK,QAAQ,EAAE,CAAC;QACpC,QAAQ,GAAG,MAAM,iBAAiB,CAAC,QAAQ,EAAE,EAAE,IAAI,CAAC,CAAC;IACvD,CAAC;IAED,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,OAAO,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,QAAQ,IAAI,aAAa,EAAE,CAAC,CAAC;IAC9D,CAAC;IAED,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,mBAAmB,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;IAE7D,qEAAqE;IACrE,uEAAuE;IACvE,+DAA+D;IAC/D,+DAA+D;IAC/D,mCAAmC;IACnC,MAAM,MAAM,GAAG,MAAM,oBAAoB,CAAC,QAAQ,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;IAChE,IAAI,MAAM,EAAE,CAAC;QACX,OAAO,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;IAC3C,CAAC;IAED,IAAI,QAAQ,EAAE,CAAC;QACb,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC3B,OAAO,IAAI,CAAC,SAAS,CAAC;gBACpB,KAAK,EAAE,6BAA6B,QAAQ,GAAG;aAChD,CAAC,CAAC;QACL,CAAC;QACD,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;QACzB,IAAI,CAAC,OAAO,GAAG,cAAc,CAAC,QAAQ,CAAC,CAAC,WAAW,EAAE,CAAC;IACxD,CAAC;IAED,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;QAC1B,2EAA2E;QAC3E,2EAA2E;QAC3E,oEAAoE;QACpE,IAAI,CAAC,OAAO,GAAG,OAAO,KAAK,IAAI,IAAI,OAAO,KAAK,MAAM,CAAC;IACxD,CAAC;IAED,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9C,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;IACrB,CAAC;IACD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE;QAAE,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IAEzE,MAAM,OAAO,GAAG,YAAY,IAAI,IAAI,CAAC;IACrC,MAAM,OAAO,GAAG,eAAe,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IAC/C,MAAM,WAAW,CAAC,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IAE1D,OAAO,IAAI,CAAC,SAAS,CAAC;QACpB,OAAO,EAAE,IAAI;QACb,IAAI;QACJ,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,mBAAmB,EAAE,YAAY,CAAC,IAAI,CAAC,QAAQ,CAAC;QAChD,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,OAAO,EAAE,IAAI,CAAC,OAAO;KACtB,CAAC,CAAC;AACL,CAAC;AAED,KAAK,UAAU,SAAS,CAAC,IAAyB;IAChD,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,IAAI,CAAC;IAC7B,MAAM,IAAI,GAAG,QAAQ,IAAI,KAAK,CAAC;IAE/B,IAAI,QAAQ,GAAG,MAAM,iBAAiB,CAAC,cAAc,EAAE,EAAE,IAAI,CAAC,CAAC;IAC/D,IAAI,CAAC,QAAQ,IAAI,KAAK,KAAK,QAAQ,EAAE,CAAC;QACpC,QAAQ,GAAG,MAAM,iBAAiB,CAAC,QAAQ,EAAE,EAAE,IAAI,CAAC,CAAC;IACvD,CAAC;IAED,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,OAAO,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,QAAQ,IAAI,aAAa,EAAE,CAAC,CAAC;IAC9D,CAAC;IAED,wEAAwE;IACxE,uEAAuE;IACvE,sBAAsB;IACtB,MAAM,EAAE,IAAI,EAAE,GAAG,mBAAmB,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;IACvD,MAAM,MAAM,GAAG,MAAM,oBAAoB,CAAC,QAAQ,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;IAChE,IAAI,MAAM,EAAE,CAAC;QACX,OAAO,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;IAC3C,CAAC;IAED,MAAM,cAAc,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;IAClC,OAAO,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;AACjD,CAAC;AAED,MAAM,UAAU,cAAc;IAC5B,OAAO;QACL,aAAa,EAAE;YACb,IAAI,EAAE;gBACJ,WAAW,EAAE;;;;;;;;iOAQ4M;gBACzN,UAAU,EAAE;oBACV,IAAI,EAAE,QAAQ;oBACd,UAAU,EAAE;wBACV,MAAM,EAAE;4BACN,IAAI,EAAE,QAAQ;4BACd,WAAW,EAAE,wBAAwB;4BACrC,IAAI,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,CAAC;yBAC7C;wBACD,IAAI,EAAE;4BACJ,IAAI,EAAE,QAAQ;4BACd,WAAW,EACT,uFAAuF;yBAC1F;wBACD,QAAQ,EAAE;4BACR,IAAI,EAAE,QAAQ;4BACd,WAAW,EACT,mHAAmH;yBACtH;wBACD,YAAY,EAAE;4BACZ,IAAI,EAAE,QAAQ;4BACd,WAAW,EACT,qKAAqK;yBACxK;wBACD,OAAO,EAAE;4BACP,IAAI,EAAE,QAAQ;4BACd,WAAW,EACT,oEAAoE;4BACtE,IAAI,EAAE,CAAC,MAAM,EAAE,OAAO,CAAC;yBACxB;wBACD,KAAK,EAAE;4BACL,IAAI,EAAE,QAAQ;4BACd,WAAW,EACT,wJAAwJ;4BAC1J,IAAI,EAAE,CAAC,UAAU,EAAE,QAAQ,EAAE,KAAK,CAAC;yBACpC;wBACD,KAAK,EAAE;4BACL,IAAI,EAAE,QAAQ;4BACd,WAAW,EACT,+FAA+F;4BACjG,IAAI,EAAE,CAAC,SAAS,EAAE,QAAQ,CAAC;yBAC5B;wBACD,KAAK,EAAE;4BACL,IAAI,EAAE,QAAQ;4BACd,WAAW,EACT,0FAA0F;yBAC7F;qBACF;oBACD,QAAQ,EAAE,CAAC,QAAQ,CAAC;iBACrB;aACF;YACD,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;gBAClB,QAAQ,IAAI,CAAC,MAAM,EAAE,CAAC;oBACpB,KAAK,QAAQ;wBACX,OAAO,SAAS,CAAC,IAAI,CAAC,CAAC;oBACzB,KAAK,MAAM;wBACT,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC;oBACvB,KAAK,QAAQ;wBACX,OAAO,SAAS,CAAC,IAAI,CAAC,CAAC;oBACzB,KAAK,QAAQ;wBACX,OAAO,SAAS,CAAC,IAAI,CAAC,CAAC;oBACzB;wBACE,OAAO,IAAI,CAAC,SAAS,CAAC;4BACpB,KAAK,EAAE,mBAAmB,IAAI,CAAC,MAAM,uCAAuC;yBAC7E,CAAC,CAAC;gBACP,CAAC;YACH,CAAC;SACF;KACF,CAAC;AACJ,CAAC","sourcesContent":["import type { ActionEntry } from \"../agent/production-agent.js\";\nimport { getDbExec } from \"../db/client.js\";\nimport {\n  resourcePut,\n  resourceGetByPath,\n  resourceList,\n  resourceDelete,\n  organizationIdFromResourceOwner,\n  sharedResourceOwner,\n  SHARED_OWNER,\n} from \"../resources/store.js\";\nimport {\n  getRequestUserEmail,\n  getRequestOrgId,\n  getIntegrationRequestContext,\n} from \"../server/request-context.js\";\nimport { isValidCron, nextOccurrence, describeCron } from \"./cron.js\";\nimport {\n  parseJobFrontmatter,\n  buildJobContent,\n  type JobFrontmatter,\n} from \"./scheduler.js\";\n\nfunction getOwner(): string {\n  const email = getRequestUserEmail();\n  if (!email) throw new Error(\"no authenticated user\");\n  return email;\n}\n\nfunction getSharedOwner(): string {\n  return sharedResourceOwner(getRequestOrgId());\n}\n\n/**\n * Determine if the current request's user is an org owner/admin in the\n * given org. Used to allow privileged users to update or delete shared\n * jobs created by other org members. Returns false when there is no org,\n * no user, no membership, or any error querying — fail closed.\n */\nasync function isCurrentUserOrgAdmin(\n  orgId: string | undefined,\n): Promise<boolean> {\n  if (!orgId) return false;\n  const email = getRequestUserEmail();\n  if (!email) return false;\n  try {\n    const client = getDbExec();\n    const { rows } = await client.execute({\n      sql: `SELECT role FROM org_members WHERE org_id = ? AND LOWER(email) = ? LIMIT 1`,\n      args: [orgId, email.toLowerCase()],\n    });\n    if (rows.length === 0) return false;\n    const role = String((rows[0] as any).role ?? \"\").toLowerCase();\n    return role === \"owner\" || role === \"admin\";\n  } catch {\n    return false;\n  }\n}\n\n/**\n * Authorise a mutation (update / delete) against a job resource. When the\n * job is in the SHARED scope the caller must either be the original\n * `createdBy` user or an org owner/admin — otherwise any user could rewrite\n * another user's shared job and have it run as that user on the next cron\n * tick (the privilege-escalation chain documented in audit\n * `/tmp/security-audit/12-mcp-a2a-agent.md`, finding #3).\n *\n * Returns null when the mutation is allowed, or an error string suitable\n * for returning to the caller when not.\n */\nexport async function authorizeJobMutation(\n  resourceOwner: string,\n  meta: JobFrontmatter,\n): Promise<string | null> {\n  const resourceOrgId = organizationIdFromResourceOwner(resourceOwner);\n  if (resourceOwner !== SHARED_OWNER && !resourceOrgId) {\n    // Personal-scope job — owner is the request's user. resourceGetByPath is\n    // already scoped to the caller, so we know meta.createdBy must match.\n    return null;\n  }\n  const caller = getOwner();\n  const createdBy = meta.createdBy?.toLowerCase();\n  if (createdBy && createdBy === caller.toLowerCase()) return null;\n\n  // Allow org owners/admins to manage shared jobs created by other members.\n  const isAdmin = await isCurrentUserOrgAdmin(\n    resourceOrgId ?? meta.orgId ?? getRequestOrgId() ?? undefined,\n  );\n  if (isAdmin) return null;\n\n  return \"Only the job's creator (or an org admin) can update or delete it.\";\n}\n\nasync function runCreate(args: Record<string, any>): Promise<string> {\n  const { name, schedule, instructions, scope, runAs, model } = args;\n\n  if (!name || !schedule || !instructions) {\n    return JSON.stringify({\n      error: \"name, schedule, and instructions are required\",\n    });\n  }\n\n  if (!isValidCron(schedule)) {\n    return JSON.stringify({\n      error: `Invalid cron expression: \"${schedule}\". Use 5 fields: minute hour day-of-month month day-of-week.`,\n    });\n  }\n\n  const owner = scope === \"personal\" ? getOwner() : getSharedOwner();\n  const path = `jobs/${name}.md`;\n  const now = new Date();\n  const next = nextOccurrence(schedule, now);\n  const integration = getIntegrationRequestContext();\n  const channelId = integration?.incoming.platformContext.channelId;\n  const threadRef = integration?.incoming.threadRef;\n\n  const meta: JobFrontmatter = {\n    schedule,\n    enabled: true,\n    createdBy: getOwner(),\n    orgId: getRequestOrgId() || undefined,\n    runAs: runAs === \"shared\" ? \"shared\" : \"creator\",\n    nextRun: next.toISOString(),\n    ...(integration?.scopeId ? { originScopeId: integration.scopeId } : {}),\n    ...(integration?.incoming.platform\n      ? { deliveryPlatform: integration.incoming.platform }\n      : {}),\n    ...(typeof channelId === \"string\"\n      ? { deliveryDestination: channelId }\n      : {}),\n    ...(typeof threadRef === \"string\" ? { deliveryThreadRef: threadRef } : {}),\n    ...(integration?.incoming.tenantId\n      ? { deliveryTenantId: integration.incoming.tenantId }\n      : {}),\n    ...(typeof model === \"string\" && model.trim()\n      ? { model: model.trim() }\n      : {}),\n  };\n\n  const content = buildJobContent(meta, instructions);\n  await resourcePut(owner, path, content);\n\n  return JSON.stringify({\n    created: true,\n    name,\n    path,\n    schedule,\n    scheduleDescription: describeCron(schedule),\n    nextRun: next.toISOString(),\n    scope: scope || \"shared\",\n  });\n}\n\nasync function runList(args: Record<string, any>): Promise<string> {\n  const owner = getOwner();\n  const sharedOwner = getSharedOwner();\n  // Fetch only current user's and shared jobs (not other users')\n  const [personal, shared] = await Promise.all([\n    resourceList(owner, \"jobs/\"),\n    resourceList(sharedOwner, \"jobs/\"),\n  ]);\n  let resources = [...personal, ...shared];\n  if (args.scope === \"personal\") resources = personal;\n  else if (args.scope === \"shared\") resources = shared;\n  const metas = resources.filter(\n    (r) => r.path.endsWith(\".md\") && !r.path.endsWith(\".keep\"),\n  );\n  const jobs = await Promise.all(\n    metas.map(async (r) => {\n      const full = await resourceGetByPath(r.owner, r.path);\n      const { meta } = parseJobFrontmatter(full?.content || \"\");\n      return {\n        name: r.path.replace(/^jobs\\//, \"\").replace(/\\.md$/, \"\"),\n        path: r.path,\n        scope: r.owner === sharedOwner ? \"shared\" : \"personal\",\n        schedule: meta.schedule,\n        scheduleDescription: meta.schedule ? describeCron(meta.schedule) : \"\",\n        enabled: meta.enabled,\n        lastRun: meta.lastRun || null,\n        lastStatus: meta.lastStatus || null,\n        lastError: meta.lastError || null,\n        nextRun: meta.nextRun || null,\n        originScopeId: meta.originScopeId || null,\n        deliveryPlatform: meta.deliveryPlatform || null,\n        deliveryDestination: meta.deliveryDestination || null,\n        model: meta.model || null,\n      };\n    }),\n  );\n\n  if (jobs.length === 0) {\n    return \"No recurring jobs configured. Use manage-jobs with action 'create' to create one.\";\n  }\n\n  return JSON.stringify(jobs, null, 2);\n}\n\nasync function runUpdate(args: Record<string, any>): Promise<string> {\n  const { name, schedule, instructions, enabled, scope, runAs, model } = args;\n  const path = `jobs/${name}.md`;\n\n  // Try to find the resource\n  let resource = await resourceGetByPath(getSharedOwner(), path);\n  if (!resource && scope !== \"shared\") {\n    resource = await resourceGetByPath(getOwner(), path);\n  }\n\n  if (!resource) {\n    return JSON.stringify({ error: `Job \"${name}\" not found` });\n  }\n\n  const { meta, body } = parseJobFrontmatter(resource.content);\n\n  // Reject when the caller doesn't own the shared job and isn't an org\n  // admin. Without this check, any user could rewrite a shared job whose\n  // `createdBy` is alice@…, and the next cron tick would run the\n  // attacker's instructions as alice (creator-runAs schedules in\n  // jobs/scheduler.ts line 273-278).\n  const denied = await authorizeJobMutation(resource.owner, meta);\n  if (denied) {\n    return JSON.stringify({ error: denied });\n  }\n\n  if (schedule) {\n    if (!isValidCron(schedule)) {\n      return JSON.stringify({\n        error: `Invalid cron expression: \"${schedule}\"`,\n      });\n    }\n    meta.schedule = schedule;\n    meta.nextRun = nextOccurrence(schedule).toISOString();\n  }\n\n  if (enabled !== undefined) {\n    // Accept both the schema's string enum (\"true\"/\"false\") and a real boolean\n    // from non-LLM callers. `enabled === \"true\"` alone treats a boolean `true`\n    // as false — silently *disabling* a job the caller meant to enable.\n    meta.enabled = enabled === true || enabled === \"true\";\n  }\n\n  if (runAs === \"creator\" || runAs === \"shared\") {\n    meta.runAs = runAs;\n  }\n  if (typeof model === \"string\" && model.trim()) meta.model = model.trim();\n\n  const newBody = instructions || body;\n  const content = buildJobContent(meta, newBody);\n  await resourcePut(resource.owner, resource.path, content);\n\n  return JSON.stringify({\n    updated: true,\n    name,\n    schedule: meta.schedule,\n    scheduleDescription: describeCron(meta.schedule),\n    enabled: meta.enabled,\n    nextRun: meta.nextRun,\n  });\n}\n\nasync function runDelete(args: Record<string, any>): Promise<string> {\n  const { name, scope } = args;\n  const path = `jobs/${name}.md`;\n\n  let resource = await resourceGetByPath(getSharedOwner(), path);\n  if (!resource && scope !== \"shared\") {\n    resource = await resourceGetByPath(getOwner(), path);\n  }\n\n  if (!resource) {\n    return JSON.stringify({ error: `Job \"${name}\" not found` });\n  }\n\n  // Same access check as runUpdate — only the creator or an org admin can\n  // remove a shared job. Otherwise any user could break another tenant's\n  // recurring schedule.\n  const { meta } = parseJobFrontmatter(resource.content);\n  const denied = await authorizeJobMutation(resource.owner, meta);\n  if (denied) {\n    return JSON.stringify({ error: denied });\n  }\n\n  await resourceDelete(resource.id);\n  return JSON.stringify({ deleted: true, name });\n}\n\nexport function createJobTools(): Record<string, ActionEntry> {\n  return {\n    \"manage-jobs\": {\n      tool: {\n        description: `Manage recurring jobs that run on a cron schedule.\n\nActions:\n- \"create\": Create a new recurring job. Requires name, schedule, and instructions.\n- \"list\": List all recurring jobs and their status (schedule, enabled, last run, next run).\n- \"update\": Update a job's schedule, instructions, or enabled state. Requires name.\n- \"delete\": Delete a recurring job. Requires name. Always confirm with the user first.\n\nCron format is 5 fields: minute hour day-of-month month day-of-week. Common patterns: '0 9 * * *' (daily 9am), '0 9 * * 1-5' (weekdays 9am), '0 * * * *' (every hour), '0 9 * * 1' (Mondays 9am), '*/30 * * * *' (every 30 min).`,\n        parameters: {\n          type: \"object\",\n          properties: {\n            action: {\n              type: \"string\",\n              description: \"The action to perform.\",\n              enum: [\"create\", \"list\", \"update\", \"delete\"],\n            },\n            name: {\n              type: \"string\",\n              description:\n                \"Job name (hyphen-case, e.g. 'daily-scorecard-check'). Required for create and update.\",\n            },\n            schedule: {\n              type: \"string\",\n              description:\n                \"Cron expression (5 fields: minute hour day-of-month month day-of-week). Required for create, optional for update.\",\n            },\n            instructions: {\n              type: \"string\",\n              description:\n                \"What the agent should do when this job runs. Be specific — include which actions to call and what to do with the results. Required for create, optional for update.\",\n            },\n            enabled: {\n              type: \"string\",\n              description:\n                \"Enable or disable a job: 'true' or 'false'. Only used with update.\",\n              enum: [\"true\", \"false\"],\n            },\n            scope: {\n              type: \"string\",\n              description:\n                \"For create: personal or shared (default: shared). For list: personal, shared, or all (default: all). For update: which scope to search (default: all).\",\n              enum: [\"personal\", \"shared\", \"all\"],\n            },\n            runAs: {\n              type: \"string\",\n              description:\n                \"Who shared jobs execute as: creator or shared. Default: creator. Used with create and update.\",\n              enum: [\"creator\", \"shared\"],\n            },\n            model: {\n              type: \"string\",\n              description:\n                \"Optional model id for this routine. The channel/app/engine default is used when omitted.\",\n            },\n          },\n          required: [\"action\"],\n        },\n      },\n      run: async (args) => {\n        switch (args.action) {\n          case \"create\":\n            return runCreate(args);\n          case \"list\":\n            return runList(args);\n          case \"update\":\n            return runUpdate(args);\n          case \"delete\":\n            return runDelete(args);\n          default:\n            return JSON.stringify({\n              error: `Unknown action \"${args.action}\". Use \"create\", \"list\", or \"update\".`,\n            });\n        }\n      },\n    },\n  };\n}\n"]}

package/dist/localization/default-messages.d.ts

@@ -185,6 +185,7 @@ declare const messages: {
         cliRequiresDevMode: string;
         cliRequiresDevModeDescription: string;
         toggleAgent: string;
+        openFullView: string;
         checkingAiConnection: string;
         voiceMode: {
             entryButtonLabel: string;
@@ -258,6 +259,101 @@ declare const messages: {
             };
         };
     };
+    contextXray: {
+        provenance: {
+            frameworkCore: string;
+            actionsPrompt: string;
+            template: string;
+            enterpriseWorkspaceCore: string;
+            sqlWorkspace: string;
+            legacyAppDefault: string;
+            organization: string;
+            personal: string;
+            memory: string;
+            dbSchema: string;
+            tools: string;
+            modelOverlay: string;
+            runtimeContext: string;
+        };
+        governance: {
+            required: string;
+            inherited: string;
+            user: string;
+        };
+        system: string;
+        conversation: string;
+        free: string;
+        noSystemContext: string;
+        pageTitle: string;
+        agent: string;
+        headerDescription: string;
+        whatAgentKnows: string;
+        orderedSystemDescription: string;
+        list: string;
+        treemap: string;
+        loadingPreview: string;
+        previewUnavailable: string;
+        noPreview: string;
+        liveThread: string;
+        liveThreadDescription: string;
+        latestThread: string;
+        noLiveThread: string;
+        orderedTokensTitle: string;
+        orderedTokensDescription: string;
+        systemOrdered: string;
+    };
+    jobs: {
+        agent: string;
+        pageTitle: string;
+        pageDescription: string;
+        recurringTitle: string;
+        organizationRecurringDescription: string;
+        recurringDescription: string;
+        organizationMemberNote: string;
+        loading: string;
+        recurringLoadError: string;
+        organizationEmpty: string;
+        recurringEmpty: string;
+        enabled: string;
+        paused: string;
+        disabled: string;
+        nextRun: string;
+        lastRun: string;
+        details: string;
+        pause: string;
+        resume: string;
+        delete: string;
+        recurringUpdateError: string;
+        automationUpdateError: string;
+        automationsTitle: string;
+        organizationAutomationsDescription: string;
+        automationsDescription: string;
+        automationsPersonalOnly: string;
+        deleteRecurringTitle: string;
+        deleteRecurringDescription: string;
+        cancel: string;
+        recurringDetails: string;
+        instructions: string;
+        automationsLoadError: string;
+        automationsEmpty: string;
+        automationEventTrigger: string;
+        automationScheduleTrigger: string;
+        deleteAutomationTitle: string;
+        deleteAutomationDescription: string;
+        automationDetails: string;
+        automationEventDetails: string;
+        condition: string;
+        firingTestEvent: string;
+        fireEventError: string;
+        eventFired: string;
+        fireEventErrorGeneric: string;
+        newAutomation: string;
+        automationPlaceholder: string;
+        personal: string;
+        organization: string;
+        fireTestEvent: string;
+        automationsEmptySettings: string;
+    };
     share: {
         titleWithResource: string;
         titleWithType: string;

package/dist/localization/default-messages.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"default-messages.d.ts","sourceRoot":"","sources":["../../src/localization/default-messages.ts"],"names":[],"mappings":"AAKA,QAAA,MAAM,QAAQ;IACZ,IAAI;QACF,aAAa;QACb,mBAAmB;QACnB,KAAK;QACL,KAAK;QACL,eAAe;QACf,aAAa;QACb,SAAS;QACT,eAAe;QACf,UAAU;QACV,gBAAgB;;IAElB,QAAQ;QACN,KAAK;QACL,WAAW;QACX,aAAa;QACb,mBAAmB;QAEnB,aAAa;QACb,UAAU;QACV,gBAAgB;QAEhB,iBAAiB;QACjB,cAAc;QACd,oBAAoB;QACpB,gBAAgB;QAChB,oBAAoB;QACpB,QAAQ;;IAEV,QAAQ;QACN,GAAG;YACD,IAAI;YACJ,QAAQ;YACR,IAAI;YACJ,OAAO;YACP,KAAK;YACL,YAAY;YACZ,MAAM;YACN,SAAS;YACT,SAAS;YACT,YAAY;YACZ,UAAU;YACV,SAAS;YACT,WAAW;YACX,QAAQ;YACR,KAAK;YACL,MAAM;YACN,WAAW;YACX,QAAQ;YACR,IAAI;YACJ,UAAU;YACV,UAAU;YACV,qBAAqB;;QAEvB,OAAO;YACL,qBAAqB;YACrB,qBAAqB;YACrB,uBAAuB;YACvB,KAAK;YACL,OAAO;YACP,eAAe;YACf,UAAU;YACV,YAAY;YACZ,WAAW;YACX,SAAS;YACT,cAAc;YAEd,kBAAkB;YAClB,oBAAoB;YACpB,kBAAkB;;QAEpB,KAAK;YACH,eAAe;YAEf,4BAA4B;YAE5B,eAAe;YACf,aAAa;YACb,WAAW;YACX,WAAW;YACX,SAAS;YACT,SAAS;YACT,iBAAiB;YACjB,kBAAkB;YAClB,IAAI;YACJ,IAAI;YACJ,UAAU;YACV,cAAc;YACd,oBAAoB;YACpB,uBAAuB;YAEvB,YAAY;YACZ,uBAAuB;YAEvB,UAAU;YACV,MAAM;YACN,iBAAiB;YAEjB,uBAAuB;YAEvB,iBAAiB;YACjB,cAAc;YACd,gBAAgB;YAChB,IAAI;YACJ,MAAM;YACN,MAAM;YACN,WAAW;YACX,mBAAmB;YACnB,gBAAgB;YAChB,kBAAkB;YAClB,sBAAsB;YACtB,4BAA4B;YAE5B,cAAc;YAEd,kBAAkB;YAClB,uBAAuB;YACvB,gBAAgB;YAChB,eAAe;YACf,eAAe;YACf,0BAA0B;YAE1B,WAAW;YACX,QAAQ;YACR,iBAAiB;YACjB,iBAAiB;YAEjB,MAAM;YACN,iBAAiB;YACjB,UAAU;YACV,aAAa;YACb,OAAO;YACP,yBAAyB;YAEzB,iBAAiB;YAEjB,gBAAgB;YAChB,eAAe;YACf,YAAY;YACZ,gBAAgB;YAChB,iBAAiB;YACjB,4BAA4B;YAE5B,OAAO;YACP,YAAY;YACZ,OAAO;YACP,YAAY;YACZ,gBAAgB;YAChB,OAAO;YACP,kBAAkB;YAClB,iBAAiB;YACjB,yBAAyB;YAEzB,qBAAqB;YAErB,QAAQ;YACR,WAAW;YACX,iBAAiB;YACjB,WAAW;YACX,IAAI;YACJ,sBAAsB;YACtB,aAAa;YACb,cAAc;YACd,eAAe;YACf,MAAM;YACN,MAAM;YACN,MAAM;YACN,QAAQ;YACR,YAAY;YACZ,YAAY;YACZ,gBAAgB;YAEhB,eAAe;YACf,aAAa;YACb,cAAc;;;IAGlB,UAAU;QACR,UAAU;QACV,qBAAqB;QACrB,0BAA0B;QAE1B,eAAe;QACf,QAAQ;QACR,IAAI;QACJ,eAAe;QACf,GAAG;QACH,aAAa;QACb,SAAS;QACT,OAAO;QACP,WAAW;QACX,YAAY;QACZ,eAAe;QACf,SAAS;QACT,QAAQ;QACR,QAAQ;QACR,QAAQ;QACR,cAAc;QACd,UAAU;QACV,QAAQ;QACR,cAAc;QACd,YAAY;QACZ,SAAS;QACT,kBAAkB;QAClB,6BAA6B;QAE7B,WAAW;QACX,oBAAoB;QACpB,SAAS;YACP,gBAAgB;YAChB,WAAW;YACX,iBAAiB;YAEjB,UAAU;YACV,gBAAgB;YAEhB,cAAc;YACd,YAAY;YACZ,kBAAkB;YAClB,KAAK;YACL,aAAa;YACb,QAAQ;YACR,QAAQ;YACR,GAAG;YACH,aAAa;YACb,QAAQ;gBACN,UAAU;gBACV,iBAAiB;gBACjB,sBAAsB;gBAEtB,QAAQ;gBACR,YAAY;gBACZ,SAAS;oBACP,EAAE;oBACF,EAAE;oBACF,EAAE;oBACF,EAAE;oBACF,EAAE;oBACF,EAAE;oBACF,EAAE;oBACF,EAAE;oBACF,EAAE;;gBAEJ,YAAY;gBACZ,kBAAkB;oBAChB,OAAO;oBACP,QAAQ;oBACR,IAAI;;gBAEN,UAAU;gBACV,kBAAkB;gBAElB,iBAAiB;oBACf,KAAK;oBACL,KAAK;oBACL,KAAK;oBACL,IAAI;oBACJ,KAAK;oBACL,KAAK;oBACL,GAAG;oBACH,MAAM;oBACN,IAAI;oBACJ,OAAO;;;YAGX,MAAM;gBACJ,UAAU;gBACV,SAAS;gBACT,QAAQ;gBACR,OAAO;gBACP,KAAK;gBACL,MAAM;;YAER,MAAM;gBACJ,WAAW;gBAEX,cAAc;gBACd,aAAa;gBACb,mBAAmB;gBACnB,kBAAkB;gBAElB,gBAAgB;gBAChB,WAAW;;;;IAIjB,KAAK;QACH,iBAAiB;QACjB,aAAa;QACb,KAAK;QACL,KAAK;QACL,YAAY;QACZ,IAAI;QACJ,MAAM;QACN,KAAK;QACL,IAAI;QACJ,aAAa;QACb,SAAS;QACT,gBAAgB;QAChB,YAAY;QACZ,gBAAgB;QAChB,SAAS;QACT,MAAM;QACN,QAAQ;QACR,QAAQ;QACR,SAAS;QACT,IAAI;QACJ,IAAI;QACJ,OAAO;QACP,kBAAkB;QAClB,YAAY;QACZ,uBAAuB;QACvB,MAAM;QACN,iBAAiB;QACjB,MAAM;QACN,iBAAiB;QACjB,MAAM;QACN,iBAAiB;QACjB,KAAK;QACL,gBAAgB;;IAElB,QAAQ;QACN,IAAI;QACJ,SAAS;QACT,aAAa;QACb,eAAe;QACf,aAAa;QACb,eAAe;QACf,UAAU;QACV,YAAY;QACZ,aAAa;QACb,cAAc;QACd,oBAAoB;QACpB,iBAAiB;QACjB,mBAAmB;QACnB,gBAAgB;QAChB,gBAAgB;QAEhB,IAAI;QACJ,OAAO;QACP,OAAO;QACP,aAAa;QACb,UAAU;QACV,YAAY;QACZ,aAAa;QACb,cAAc;QACd,eAAe;QACf,cAAc;QACd,eAAe;QACf,YAAY;QACZ,aAAa;QACb,WAAW;QACX,YAAY;;IAEd,YAAY;QACV,cAAc;QAEd,cAAc;QACd,WAAW;QACX,KAAK;QACL,mBAAmB;QAEnB,QAAQ;QAER,YAAY;QACZ,kBAAkB;QAElB,iBAAiB;QACjB,uBAAuB;QAEvB,eAAe;QACf,eAAe;QACf,mBAAmB;QACnB,yBAAyB;QAEzB,aAAa;QACb,aAAa;QACb,KAAK;;IAEP,UAAU;QACR,YAAY;QACZ,kBAAkB;QAElB,cAAc;QACd,iBAAiB;QACjB,KAAK;QACL,WAAW;QACX,UAAU;QACV,YAAY;QACZ,iBAAiB;QACjB,gBAAgB;QAChB,eAAe;QACf,sBAAsB;QACtB,kBAAkB;QAClB,UAAU;QACV,gBAAgB;QAChB,kBAAkB;QAClB,SAAS;QACT,UAAU;QACV,cAAc;QACd,YAAY;QACZ,oBAAoB;QAEpB,cAAc;QACd,cAAc;QACd,qBAAqB;QAErB,2BAA2B;QAC3B,MAAM;QACN,MAAM;QACN,QAAQ;QACR,MAAM;QACN,QAAQ;QACR,YAAY;QACZ,oBAAoB;QACpB,uBAAuB;QACvB,wBAAwB;QACxB,yBAAyB;QACzB,4BAA4B;QAE5B,SAAS;QACT,OAAO;QACP,kBAAkB;QAClB,cAAc;QACd,oBAAoB;QACpB,yBAAyB;QAEzB,iBAAiB;QACjB,sBAAsB;QAEtB,aAAa;QACb,IAAI;QACJ,aAAa;QACb,MAAM;QACN,IAAI;QACJ,MAAM;QACN,WAAW;QACX,SAAS;QACT,aAAa;QAEb,mBAAmB;QACnB,qBAAqB;QAErB,SAAS;QACT,gBAAgB;QAChB,YAAY;QACZ,YAAY;QACZ,YAAY;QACZ,SAAS;QACT,gBAAgB;QAChB,oBAAoB;QACpB,gBAAgB;QAChB,gBAAgB;QAChB,KAAK;;IAEP,GAAG;QACD,WAAW;QACX,iBAAiB;QAEjB,cAAc;QACd,iBAAiB;QACjB,QAAQ;QACR,YAAY;QACZ,mBAAmB;QAEnB,eAAe;QACf,gBAAgB;QAChB,YAAY;QACZ,kBAAkB;QAClB,OAAO;QACP,kBAAkB;QAClB,SAAS;QACT,MAAM;QACN,cAAc;QACd,gBAAgB;QAChB,uBAAuB;QACvB,kBAAkB;QAClB,MAAM;QACN,QAAQ;QACR,IAAI;QACJ,kBAAkB;QAClB,wBAAwB;QAExB,aAAa;QAEb,cAAc;QAEd,IAAI;QACJ,cAAc;QACd,GAAG;QACH,KAAK;QACL,KAAK;QACL,MAAM;QACN,OAAO;QACP,aAAa;QACb,OAAO;QACP,IAAI;QACJ,MAAM;QACN,OAAO;QACP,SAAS;QACT,eAAe;QACf,iBAAiB;QACjB,UAAU;QACV,UAAU;QACV,YAAY;QACZ,MAAM;QACN,MAAM;QACN,IAAI;QACJ,OAAO;;IAET,YAAY;QACV,UAAU;QACV,cAAc;QACd,aAAa;QAEb,MAAM;QACN,OAAO;QACP,QAAQ;QACR,YAAY;QACZ,IAAI;QACJ,mBAAmB;QACnB,sBAAsB;QAEtB,OAAO;QACP,KAAK;QACL,kBAAkB;QAClB,uBAAuB;QACvB,eAAe;QACf,OAAO;QACP,IAAI;QACJ,aAAa;QACb,eAAe;QAEf,kBAAkB;QAClB,gBAAgB;QAChB,2BAA2B;QAC3B,cAAc;QACd,kBAAkB;QAElB,eAAe;;IAGjB,eAAe;QACb,SAAS;QACT,eAAe;QACf,KAAK;QACL,WAAW;QACX,iBAAiB;QACjB,UAAU;QACV,SAAS;QACT,SAAS;QACT,SAAS;QACT,OAAO;QACP,kBAAkB;QAClB,WAAW;QACX,cAAc;QACd,uBAAuB;QAEvB,qBAAqB;QAErB,iBAAiB;QAEjB,WAAW;QAEX,QAAQ;QACR,YAAY;QACZ,QAAQ;QACR,YAAY;QACZ,UAAU;QACV,GAAG;QACH,gBAAgB;QAChB,OAAO;QACP,qBAAqB;QACrB,cAAc;QACd,sBAAsB;QACtB,kBAAkB;QAClB,aAAa;QACb,IAAI;QACJ,kBAAkB;QAClB,oBAAoB;QACpB,MAAM;QACN,SAAS;QACT,OAAO;YACL,QAAQ;gBACN,WAAW;gBACX,OAAO;;YAGT,MAAM;gBACJ,WAAW;gBACX,OAAO;;YAET,MAAM;gBACJ,WAAW;gBACX,OAAO;;YAET,OAAO;gBACL,WAAW;gBACX,OAAO;;YAET,MAAM;gBACJ,WAAW;gBACX,OAAO;;YAET,QAAQ;gBACN,WAAW;gBACX,OAAO;;YAET,IAAI;gBACF,WAAW;gBACX,OAAO;;YAET,MAAM;gBACJ,WAAW;gBACX,OAAO;;YAET,SAAS;gBACP,WAAW;gBACX,OAAO;gBAEP,SAAS;;;QAIb,IAAI;YACF,IAAI;YACJ,OAAO;YACP,KAAK;;;IAGT,aAAa;QACX,MAAM;QACN,eAAe;QACf,OAAO;QACP,aAAa;QACb,SAAS;QACT,SAAS;QACT,UAAU;QACV,WAAW;QACX,QAAQ;QACR,YAAY;QACZ,GAAG;QACH,KAAK;QACL,QAAQ;QACR,IAAI;QACJ,KAAK;QACL,IAAI;QACJ,WAAW;QACX,UAAU;QACV,KAAK;QACL,IAAI;QACJ,IAAI;QACJ,MAAM;QACN,MAAM;QACN,UAAU;QACV,QAAQ;QACR,gBAAgB;QAChB,QAAQ;QACR,aAAa;QACb,KAAK;QACL,WAAW;QACX,QAAQ;QACR,QAAQ;QACR,OAAO;QACP,iBAAiB;QACjB,OAAO;QACP,KAAK;QACL,OAAO;QACP,OAAO;QACP,MAAM;QACN,KAAK;QACL,aAAa;QACb,UAAU;QACV,WAAW;QACX,YAAY;QACZ,UAAU;;IAEZ,KAAK;QACH,YAAY;QACZ,cAAc;QACd,aAAa;QACb,eAAe;QAEf,WAAW;QACX,MAAM;;CAET,CAAC;eAEa,QAAQ"}
+{"version":3,"file":"default-messages.d.ts","sourceRoot":"","sources":["../../src/localization/default-messages.ts"],"names":[],"mappings":"AAKA,QAAA,MAAM,QAAQ;IACZ,IAAI;QACF,aAAa;QACb,mBAAmB;QACnB,KAAK;QACL,KAAK;QACL,eAAe;QACf,aAAa;QACb,SAAS;QACT,eAAe;QACf,UAAU;QACV,gBAAgB;;IAElB,QAAQ;QACN,KAAK;QACL,WAAW;QACX,aAAa;QACb,mBAAmB;QAEnB,aAAa;QACb,UAAU;QACV,gBAAgB;QAEhB,iBAAiB;QACjB,cAAc;QACd,oBAAoB;QACpB,gBAAgB;QAChB,oBAAoB;QACpB,QAAQ;;IAEV,QAAQ;QACN,GAAG;YACD,IAAI;YACJ,QAAQ;YACR,IAAI;YACJ,OAAO;YACP,KAAK;YACL,YAAY;YACZ,MAAM;YACN,SAAS;YACT,SAAS;YACT,YAAY;YACZ,UAAU;YACV,SAAS;YACT,WAAW;YACX,QAAQ;YACR,KAAK;YACL,MAAM;YACN,WAAW;YACX,QAAQ;YACR,IAAI;YACJ,UAAU;YACV,UAAU;YACV,qBAAqB;;QAEvB,OAAO;YACL,qBAAqB;YACrB,qBAAqB;YACrB,uBAAuB;YACvB,KAAK;YACL,OAAO;YACP,eAAe;YACf,UAAU;YACV,YAAY;YACZ,WAAW;YACX,SAAS;YACT,cAAc;YAEd,kBAAkB;YAClB,oBAAoB;YACpB,kBAAkB;;QAEpB,KAAK;YACH,eAAe;YAEf,4BAA4B;YAE5B,eAAe;YACf,aAAa;YACb,WAAW;YACX,WAAW;YACX,SAAS;YACT,SAAS;YACT,iBAAiB;YACjB,kBAAkB;YAClB,IAAI;YACJ,IAAI;YACJ,UAAU;YACV,cAAc;YACd,oBAAoB;YACpB,uBAAuB;YAEvB,YAAY;YACZ,uBAAuB;YAEvB,UAAU;YACV,MAAM;YACN,iBAAiB;YAEjB,uBAAuB;YAEvB,iBAAiB;YACjB,cAAc;YACd,gBAAgB;YAChB,IAAI;YACJ,MAAM;YACN,MAAM;YACN,WAAW;YACX,mBAAmB;YACnB,gBAAgB;YAChB,kBAAkB;YAClB,sBAAsB;YACtB,4BAA4B;YAE5B,cAAc;YAEd,kBAAkB;YAClB,uBAAuB;YACvB,gBAAgB;YAChB,eAAe;YACf,eAAe;YACf,0BAA0B;YAE1B,WAAW;YACX,QAAQ;YACR,iBAAiB;YACjB,iBAAiB;YAEjB,MAAM;YACN,iBAAiB;YACjB,UAAU;YACV,aAAa;YACb,OAAO;YACP,yBAAyB;YAEzB,iBAAiB;YAEjB,gBAAgB;YAChB,eAAe;YACf,YAAY;YACZ,gBAAgB;YAChB,iBAAiB;YACjB,4BAA4B;YAE5B,OAAO;YACP,YAAY;YACZ,OAAO;YACP,YAAY;YACZ,gBAAgB;YAChB,OAAO;YACP,kBAAkB;YAClB,iBAAiB;YACjB,yBAAyB;YAEzB,qBAAqB;YAErB,QAAQ;YACR,WAAW;YACX,iBAAiB;YACjB,WAAW;YACX,IAAI;YACJ,sBAAsB;YACtB,aAAa;YACb,cAAc;YACd,eAAe;YACf,MAAM;YACN,MAAM;YACN,MAAM;YACN,QAAQ;YACR,YAAY;YACZ,YAAY;YACZ,gBAAgB;YAEhB,eAAe;YACf,aAAa;YACb,cAAc;;;IAGlB,UAAU;QACR,UAAU;QACV,qBAAqB;QACrB,0BAA0B;QAE1B,eAAe;QACf,QAAQ;QACR,IAAI;QACJ,eAAe;QACf,GAAG;QACH,aAAa;QACb,SAAS;QACT,OAAO;QACP,WAAW;QACX,YAAY;QACZ,eAAe;QACf,SAAS;QACT,QAAQ;QACR,QAAQ;QACR,QAAQ;QACR,cAAc;QACd,UAAU;QACV,QAAQ;QACR,cAAc;QACd,YAAY;QACZ,SAAS;QACT,kBAAkB;QAClB,6BAA6B;QAE7B,WAAW;QACX,YAAY;QACZ,oBAAoB;QACpB,SAAS;YACP,gBAAgB;YAChB,WAAW;YACX,iBAAiB;YAEjB,UAAU;YACV,gBAAgB;YAEhB,cAAc;YACd,YAAY;YACZ,kBAAkB;YAClB,KAAK;YACL,aAAa;YACb,QAAQ;YACR,QAAQ;YACR,GAAG;YACH,aAAa;YACb,QAAQ;gBACN,UAAU;gBACV,iBAAiB;gBACjB,sBAAsB;gBAEtB,QAAQ;gBACR,YAAY;gBACZ,SAAS;oBACP,EAAE;oBACF,EAAE;oBACF,EAAE;oBACF,EAAE;oBACF,EAAE;oBACF,EAAE;oBACF,EAAE;oBACF,EAAE;oBACF,EAAE;;gBAEJ,YAAY;gBACZ,kBAAkB;oBAChB,OAAO;oBACP,QAAQ;oBACR,IAAI;;gBAEN,UAAU;gBACV,kBAAkB;gBAElB,iBAAiB;oBACf,KAAK;oBACL,KAAK;oBACL,KAAK;oBACL,IAAI;oBACJ,KAAK;oBACL,KAAK;oBACL,GAAG;oBACH,MAAM;oBACN,IAAI;oBACJ,OAAO;;;YAGX,MAAM;gBACJ,UAAU;gBACV,SAAS;gBACT,QAAQ;gBACR,OAAO;gBACP,KAAK;gBACL,MAAM;;YAER,MAAM;gBACJ,WAAW;gBAEX,cAAc;gBACd,aAAa;gBACb,mBAAmB;gBACnB,kBAAkB;gBAElB,gBAAgB;gBAChB,WAAW;;;;IAIjB,WAAW;QACT,UAAU;YACR,aAAa;YACb,aAAa;YACb,QAAQ;YACR,uBAAuB;YACvB,YAAY;YACZ,gBAAgB;YAChB,YAAY;YACZ,QAAQ;YACR,MAAM;YACN,QAAQ;YACR,KAAK;YACL,YAAY;YACZ,cAAc;;QAEhB,UAAU;YACR,QAAQ;YACR,SAAS;YACT,IAAI;;QAEN,MAAM;QACN,YAAY;QACZ,IAAI;QACJ,eAAe;QACf,SAAS;QACT,KAAK;QACL,iBAAiB;QAEjB,cAAc;QACd,wBAAwB;QAExB,IAAI;QACJ,OAAO;QACP,cAAc;QACd,kBAAkB;QAClB,SAAS;QACT,UAAU;QACV,qBAAqB;QAErB,YAAY;QACZ,YAAY;QACZ,kBAAkB;QAClB,wBAAwB;QAExB,aAAa;;IAEf,IAAI;QACF,KAAK;QACL,SAAS;QACT,eAAe;QAEf,cAAc;QACd,gCAAgC;QAEhC,oBAAoB;QAEpB,sBAAsB;QACtB,OAAO;QACP,kBAAkB;QAClB,iBAAiB;QACjB,cAAc;QAEd,OAAO;QACP,MAAM;QACN,QAAQ;QACR,OAAO;QACP,OAAO;QACP,OAAO;QACP,KAAK;QACL,MAAM;QACN,MAAM;QACN,oBAAoB;QACpB,qBAAqB;QACrB,gBAAgB;QAChB,kCAAkC;QAElC,sBAAsB;QAEtB,uBAAuB;QACvB,oBAAoB;QACpB,0BAA0B;QAE1B,MAAM;QACN,gBAAgB;QAChB,YAAY;QACZ,oBAAoB;QACpB,gBAAgB;QAEhB,sBAAsB;QACtB,yBAAyB;QACzB,qBAAqB;QACrB,2BAA2B;QAE3B,iBAAiB;QACjB,sBAAsB;QACtB,SAAS;QACT,eAAe;QACf,cAAc;QACd,UAAU;QACV,qBAAqB;QACrB,aAAa;QACb,qBAAqB;QACrB,QAAQ;QACR,YAAY;QACZ,aAAa;QACb,wBAAwB;;IAG1B,KAAK;QACH,iBAAiB;QACjB,aAAa;QACb,KAAK;QACL,KAAK;QACL,YAAY;QACZ,IAAI;QACJ,MAAM;QACN,KAAK;QACL,IAAI;QACJ,aAAa;QACb,SAAS;QACT,gBAAgB;QAChB,YAAY;QACZ,gBAAgB;QAChB,SAAS;QACT,MAAM;QACN,QAAQ;QACR,QAAQ;QACR,SAAS;QACT,IAAI;QACJ,IAAI;QACJ,OAAO;QACP,kBAAkB;QAClB,YAAY;QACZ,uBAAuB;QACvB,MAAM;QACN,iBAAiB;QACjB,MAAM;QACN,iBAAiB;QACjB,MAAM;QACN,iBAAiB;QACjB,KAAK;QACL,gBAAgB;;IAElB,QAAQ;QACN,IAAI;QACJ,SAAS;QACT,aAAa;QACb,eAAe;QACf,aAAa;QACb,eAAe;QACf,UAAU;QACV,YAAY;QACZ,aAAa;QACb,cAAc;QACd,oBAAoB;QACpB,iBAAiB;QACjB,mBAAmB;QACnB,gBAAgB;QAChB,gBAAgB;QAEhB,IAAI;QACJ,OAAO;QACP,OAAO;QACP,aAAa;QACb,UAAU;QACV,YAAY;QACZ,aAAa;QACb,cAAc;QACd,eAAe;QACf,cAAc;QACd,eAAe;QACf,YAAY;QACZ,aAAa;QACb,WAAW;QACX,YAAY;;IAEd,YAAY;QACV,cAAc;QAEd,cAAc;QACd,WAAW;QACX,KAAK;QACL,mBAAmB;QAEnB,QAAQ;QAER,YAAY;QACZ,kBAAkB;QAElB,iBAAiB;QACjB,uBAAuB;QAEvB,eAAe;QACf,eAAe;QACf,mBAAmB;QACnB,yBAAyB;QAEzB,aAAa;QACb,aAAa;QACb,KAAK;;IAEP,UAAU;QACR,YAAY;QACZ,kBAAkB;QAElB,cAAc;QACd,iBAAiB;QACjB,KAAK;QACL,WAAW;QACX,UAAU;QACV,YAAY;QACZ,iBAAiB;QACjB,gBAAgB;QAChB,eAAe;QACf,sBAAsB;QACtB,kBAAkB;QAClB,UAAU;QACV,gBAAgB;QAChB,kBAAkB;QAClB,SAAS;QACT,UAAU;QACV,cAAc;QACd,YAAY;QACZ,oBAAoB;QAEpB,cAAc;QACd,cAAc;QACd,qBAAqB;QAErB,2BAA2B;QAC3B,MAAM;QACN,MAAM;QACN,QAAQ;QACR,MAAM;QACN,QAAQ;QACR,YAAY;QACZ,oBAAoB;QACpB,uBAAuB;QACvB,wBAAwB;QACxB,yBAAyB;QACzB,4BAA4B;QAE5B,SAAS;QACT,OAAO;QACP,kBAAkB;QAClB,cAAc;QACd,oBAAoB;QACpB,yBAAyB;QAEzB,iBAAiB;QACjB,sBAAsB;QAEtB,aAAa;QACb,IAAI;QACJ,aAAa;QACb,MAAM;QACN,IAAI;QACJ,MAAM;QACN,WAAW;QACX,SAAS;QACT,aAAa;QAEb,mBAAmB;QACnB,qBAAqB;QAErB,SAAS;QACT,gBAAgB;QAChB,YAAY;QACZ,YAAY;QACZ,YAAY;QACZ,SAAS;QACT,gBAAgB;QAChB,oBAAoB;QACpB,gBAAgB;QAChB,gBAAgB;QAChB,KAAK;;IAEP,GAAG;QACD,WAAW;QACX,iBAAiB;QAEjB,cAAc;QACd,iBAAiB;QACjB,QAAQ;QACR,YAAY;QACZ,mBAAmB;QAEnB,eAAe;QACf,gBAAgB;QAChB,YAAY;QACZ,kBAAkB;QAClB,OAAO;QACP,kBAAkB;QAClB,SAAS;QACT,MAAM;QACN,cAAc;QACd,gBAAgB;QAChB,uBAAuB;QACvB,kBAAkB;QAClB,MAAM;QACN,QAAQ;QACR,IAAI;QACJ,kBAAkB;QAClB,wBAAwB;QAExB,aAAa;QAEb,cAAc;QAEd,IAAI;QACJ,cAAc;QACd,GAAG;QACH,KAAK;QACL,KAAK;QACL,MAAM;QACN,OAAO;QACP,aAAa;QACb,OAAO;QACP,IAAI;QACJ,MAAM;QACN,OAAO;QACP,SAAS;QACT,eAAe;QACf,iBAAiB;QACjB,UAAU;QACV,UAAU;QACV,YAAY;QACZ,MAAM;QACN,MAAM;QACN,IAAI;QACJ,OAAO;;IAET,YAAY;QACV,UAAU;QACV,cAAc;QACd,aAAa;QAEb,MAAM;QACN,OAAO;QACP,QAAQ;QACR,YAAY;QACZ,IAAI;QACJ,mBAAmB;QACnB,sBAAsB;QAEtB,OAAO;QACP,KAAK;QACL,kBAAkB;QAClB,uBAAuB;QACvB,eAAe;QACf,OAAO;QACP,IAAI;QACJ,aAAa;QACb,eAAe;QAEf,kBAAkB;QAClB,gBAAgB;QAChB,2BAA2B;QAC3B,cAAc;QACd,kBAAkB;QAElB,eAAe;;IAGjB,eAAe;QACb,SAAS;QACT,eAAe;QACf,KAAK;QACL,WAAW;QACX,iBAAiB;QACjB,UAAU;QACV,SAAS;QACT,SAAS;QACT,SAAS;QACT,OAAO;QACP,kBAAkB;QAClB,WAAW;QACX,cAAc;QACd,uBAAuB;QAEvB,qBAAqB;QAErB,iBAAiB;QAEjB,WAAW;QAEX,QAAQ;QACR,YAAY;QACZ,QAAQ;QACR,YAAY;QACZ,UAAU;QACV,GAAG;QACH,gBAAgB;QAChB,OAAO;QACP,qBAAqB;QACrB,cAAc;QACd,sBAAsB;QACtB,kBAAkB;QAClB,aAAa;QACb,IAAI;QACJ,kBAAkB;QAClB,oBAAoB;QACpB,MAAM;QACN,SAAS;QACT,OAAO;YACL,QAAQ;gBACN,WAAW;gBACX,OAAO;;YAGT,MAAM;gBACJ,WAAW;gBACX,OAAO;;YAET,MAAM;gBACJ,WAAW;gBACX,OAAO;;YAET,OAAO;gBACL,WAAW;gBACX,OAAO;;YAET,MAAM;gBACJ,WAAW;gBACX,OAAO;;YAET,QAAQ;gBACN,WAAW;gBACX,OAAO;;YAET,IAAI;gBACF,WAAW;gBACX,OAAO;;YAET,MAAM;gBACJ,WAAW;gBACX,OAAO;;YAET,SAAS;gBACP,WAAW;gBACX,OAAO;gBAEP,SAAS;;;QAIb,IAAI;YACF,IAAI;YACJ,OAAO;YACP,KAAK;;;IAGT,aAAa;QACX,MAAM;QACN,eAAe;QACf,OAAO;QACP,aAAa;QACb,SAAS;QACT,SAAS;QACT,UAAU;QACV,WAAW;QACX,QAAQ;QACR,YAAY;QACZ,GAAG;QACH,KAAK;QACL,QAAQ;QACR,IAAI;QACJ,KAAK;QACL,IAAI;QACJ,WAAW;QACX,UAAU;QACV,KAAK;QACL,IAAI;QACJ,IAAI;QACJ,MAAM;QACN,MAAM;QACN,UAAU;QACV,QAAQ;QACR,gBAAgB;QAChB,QAAQ;QACR,aAAa;QACb,KAAK;QACL,WAAW;QACX,QAAQ;QACR,QAAQ;QACR,OAAO;QACP,iBAAiB;QACjB,OAAO;QACP,KAAK;QACL,OAAO;QACP,OAAO;QACP,MAAM;QACN,KAAK;QACL,aAAa;QACb,UAAU;QACV,WAAW;QACX,YAAY;QACZ,UAAU;;IAEZ,KAAK;QACH,YAAY;QACZ,cAAc;QACd,aAAa;QACb,eAAe;QAEf,WAAW;QACX,MAAM;;CAET,CAAC;eAEa,QAAQ"}

package/dist/localization/default-messages.js

@@ -190,6 +190,7 @@ const messages = {
         cliRequiresDevMode: "CLI requires dev mode",
         cliRequiresDevModeDescription: "Run this app locally with pnpm dev or use Builder.io to access the CLI terminal.",
         toggleAgent: "Toggle agent",
+        openFullView: "Open full view",
         checkingAiConnection: "Checking AI connection...",
         voiceMode: {
             entryButtonLabel: "Use microphone",
@@ -263,6 +264,101 @@ const messages = {
             },
         },
     },
+    contextXray: {
+        provenance: {
+            frameworkCore: "Framework",
+            actionsPrompt: "Actions",
+            template: "Template",
+            enterpriseWorkspaceCore: "Enterprise workspace core",
+            sqlWorkspace: "Workspace",
+            legacyAppDefault: "App defaults",
+            organization: "Organization",
+            personal: "Personal",
+            memory: "Memory",
+            dbSchema: "SQL schema",
+            tools: "Tools",
+            modelOverlay: "Model overlay",
+            runtimeContext: "Runtime context",
+        },
+        governance: {
+            required: "Required",
+            inherited: "Inherited",
+            user: "Your context",
+        },
+        system: "System",
+        conversation: "Conversation",
+        free: "free",
+        noSystemContext: "No system context is available for this scope yet.",
+        pageTitle: "Context",
+        agent: "Agent",
+        headerDescription: "See the system instructions and conversation tokens that shape the agent.",
+        whatAgentKnows: "What the agent knows",
+        orderedSystemDescription: "Ordered system context is grouped by where it comes from. System sections are visible here but cannot be evicted from a thread.",
+        list: "List",
+        treemap: "Treemap",
+        loadingPreview: "Loading context preview…",
+        previewUnavailable: "Context preview is not available yet.",
+        noPreview: "No context preview is available for this scope yet.",
+        liveThread: "Live thread",
+        liveThreadDescription: "The latest thread snapshot, when one exists. This is a single current snapshot, not an append-only history.",
+        latestThread: "Latest thread",
+        noLiveThread: "No live thread snapshot is available yet.",
+        orderedTokensTitle: "Context is ordered tokens, not weighted tokens.",
+        orderedTokensDescription: "Required framework and enterprise policy come first, followed by inherited template, workspace, and organization instructions. Personal instructions and memory arrive later and can narrow or override earlier guidance where the prompt permits. These system sections are not evictable; only run-local conversation segments support pin, evict, and restore.",
+        systemOrdered: "System · ordered, not evictable",
+    },
+    jobs: {
+        agent: "Agent",
+        pageTitle: "Jobs",
+        pageDescription: "See recurring jobs and automations that run work for you.",
+        recurringTitle: "Recurring jobs",
+        organizationRecurringDescription: "Cron jobs shared with this organization. Members can view them; creators and admins can manage them.",
+        recurringDescription: "Scheduled prompts that ask the agent to do work automatically.",
+        organizationMemberNote: "You can manage jobs you created.",
+        loading: "Loading…",
+        recurringLoadError: "Could not load recurring jobs.",
+        organizationEmpty: "No organization jobs yet.",
+        recurringEmpty: "No recurring jobs yet. Ask the agent: “every morning, summarize my inbox”.",
+        enabled: "Enabled",
+        paused: "Paused",
+        disabled: "Disabled",
+        nextRun: "Next run",
+        lastRun: "Last run",
+        details: "Details",
+        pause: "Pause",
+        resume: "Resume",
+        delete: "Delete",
+        recurringUpdateError: "Could not update recurring job.",
+        automationUpdateError: "Could not update automation.",
+        automationsTitle: "Automations",
+        organizationAutomationsDescription: "Automations are personal today, so none are shown in the organization view.",
+        automationsDescription: "Event-triggered and scheduled agent tasks managed from one place.",
+        automationsPersonalOnly: "Automations are personal today.",
+        deleteRecurringTitle: "Delete recurring job?",
+        deleteRecurringDescription: "This permanently removes the job and cannot be undone.",
+        cancel: "Cancel",
+        recurringDetails: "Recurring job details",
+        instructions: "Instructions",
+        automationsLoadError: "Could not load automations.",
+        automationsEmpty: "No automations yet. Ask the agent to set up an event-triggered or scheduled task.",
+        automationEventTrigger: "On {{event}}",
+        automationScheduleTrigger: "Scheduled task",
+        deleteAutomationTitle: "Delete automation?",
+        deleteAutomationDescription: "This permanently removes the automation and cannot be undone.",
+        automationDetails: "Automation details",
+        automationEventDetails: "Runs when {{event}}.",
+        condition: "Condition",
+        firingTestEvent: "Firing test event…",
+        fireEventError: "Failed to fire event ({{status}})",
+        eventFired: "Event fired",
+        fireEventErrorGeneric: "Failed to fire event.",
+        newAutomation: "New automation",
+        automationPlaceholder: "Describe what you want to automate…",
+        personal: "Personal",
+        organization: "Organization",
+        fireTestEvent: "Fire test event",
+        automationsEmptySettings: 'No automations yet. Click "New automation" or ask the agent to set one up.',
+    },
     share: {
         titleWithResource: 'Share "{{title}}"',
         titleWithType: "Share {{type}}",