@aitne/daemon 0.1.0

package/dist/core/today-write-lock.d.ts

@@ -0,0 +1,89 @@
+export interface TodayWriteLockManager {
+    acquire(): {
+        ok: true;
+        lockId: string;
+    } | {
+        ok: false;
+        holder: string;
+    };
+    release(lockId: string): boolean;
+    isHeldBy(lockId?: string | null): boolean;
+    getHolder(): string | null;
+}
+export declare class InMemoryTodayWriteLockManager implements TodayWriteLockManager {
+    private readonly timeoutMs;
+    private holder;
+    private timer;
+    constructor(timeoutMs: number);
+    acquire(): {
+        ok: true;
+        lockId: string;
+    } | {
+        ok: false;
+        holder: string;
+    };
+    release(lockId: string): boolean;
+    isHeldBy(lockId?: string | null): boolean;
+    getHolder(): string | null;
+}
+export declare function getTodayWriteLockTimeoutMs(executeTimeoutMinutes: number): number;
+/**
+ * Exclusive cross-request lock — the migration endpoint holds this for the
+ * duration of a `/api/setup/migrate-context` run so a second concurrent
+ * migration returns 409 immediately instead of interleaving with the
+ * first. Same acquire/release/holder shape as `TodayWriteLockManager` but
+ * uses a long default timeout because migrations may legitimately take
+ * minutes on large cross-fs copies.
+ */
+export declare class MigrationLock {
+    private readonly timeoutMs;
+    private holder;
+    private timer;
+    constructor(timeoutMs: number);
+    acquire(): {
+        ok: true;
+        lockId: string;
+    } | {
+        ok: false;
+        holder: string;
+    };
+    release(lockId: string): boolean;
+    isHeld(): boolean;
+    getHolder(): string | null;
+}
+/**
+ * Global context-write gate — engaged by the migration endpoint while the
+ * primary store is mid-move so every `/api/context/*` write handler (plus
+ * internal writers that opt into the check) refuses with 503. Unlike
+ * `TodayWriteLockManager` / `MigrationLock`, there is no caller identity:
+ * this is a pure on/off flag. In-memory is sufficient because a daemon
+ * restart itself clears the gate, and the migration endpoint guarantees
+ * it disengages the gate in its resume/rollback paths.
+ *
+ * The 503 surface matches degraded mode's `primary_vault_unreachable`
+ * shape so clients can reuse the same retry logic, but the `reason`
+ * differentiates the two ("migration_in_progress" vs
+ * "primary_vault_unreachable").
+ *
+ * Plan §6.2 step 4 cron-tick suppressor integration point — any cron
+ * handler that performs direct filesystem I/O against the primary
+ * context dir without going through ObserverManager (stopped via
+ * pauseAll) or EventBus (paused via pauseDispatch) SHOULD read
+ * `isEngaged()` at fire time and yield when true. Today all known
+ * handlers go through one of the two pause layers, so the flag is
+ * reserved for future handlers that don't.
+ */
+export declare class ContextWriteGate {
+    private engaged;
+    private reason;
+    private since;
+    engage(reason: string): void;
+    disengage(): void;
+    isEngaged(): boolean;
+    getState(): {
+        engaged: boolean;
+        reason: string | null;
+        since: string | null;
+    };
+}
+//# sourceMappingURL=today-write-lock.d.ts.map

package/dist/core/today-write-lock.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"today-write-lock.d.ts","sourceRoot":"","sources":["../../src/core/today-write-lock.ts"],"names":[],"mappings":"AAKA,MAAM,WAAW,qBAAqB;IACpC,OAAO,IAAI;QAAE,EAAE,EAAE,IAAI,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,GAAG;QAAE,EAAE,EAAE,KAAK,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC;IACxE,OAAO,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC;IACjC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC;IAC1C,SAAS,IAAI,MAAM,GAAG,IAAI,CAAC;CAC5B;AAED,qBAAa,6BAA8B,YAAW,qBAAqB;IAI7D,OAAO,CAAC,QAAQ,CAAC,SAAS;IAHtC,OAAO,CAAC,MAAM,CAAuB;IACrC,OAAO,CAAC,KAAK,CAA8C;gBAE9B,SAAS,EAAE,MAAM;IAE9C,OAAO,IAAI;QAAE,EAAE,EAAE,IAAI,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,GAAG;QAAE,EAAE,EAAE,KAAK,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE;IAkBvE,OAAO,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO;IAchC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO;IAOzC,SAAS,IAAI,MAAM,GAAG,IAAI;CAG3B;AAED,wBAAgB,0BAA0B,CAAC,qBAAqB,EAAE,MAAM,GAAG,MAAM,CAMhF;AAED;;;;;;;GAOG;AACH,qBAAa,aAAa;IAIZ,OAAO,CAAC,QAAQ,CAAC,SAAS;IAHtC,OAAO,CAAC,MAAM,CAAuB;IACrC,OAAO,CAAC,KAAK,CAA8C;gBAE9B,SAAS,EAAE,MAAM;IAE9C,OAAO,IAAI;QAAE,EAAE,EAAE,IAAI,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,GAAG;QAAE,EAAE,EAAE,KAAK,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE;IAgBvE,OAAO,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO;IAahC,MAAM,IAAI,OAAO;IAIjB,SAAS,IAAI,MAAM,GAAG,IAAI;CAG3B;AAED;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,qBAAa,gBAAgB;IAC3B,OAAO,CAAC,OAAO,CAAS;IACxB,OAAO,CAAC,MAAM,CAAuB;IACrC,OAAO,CAAC,KAAK,CAAuB;IAEpC,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI;IAW5B,SAAS,IAAI,IAAI;IAQjB,SAAS,IAAI,OAAO;IAIpB,QAAQ,IAAI;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE;CAG9E"}

package/dist/core/today-write-lock.js

@@ -0,0 +1,154 @@
+import { randomUUID } from "node:crypto";
+import { createLogger } from "../logging.js";
+const logger = createLogger("today-write-lock");
+export class InMemoryTodayWriteLockManager {
+    timeoutMs;
+    holder = null;
+    timer = null;
+    constructor(timeoutMs) {
+        this.timeoutMs = timeoutMs;
+    }
+    acquire() {
+        if (this.holder) {
+            logger.debug({ existingHolder: this.holder }, "Lock acquire rejected — already held");
+            return { ok: false, holder: this.holder };
+        }
+        const lockId = randomUUID();
+        this.holder = lockId;
+        this.timer = setTimeout(() => {
+            logger.warn({ lockId: this.holder }, "Today write lock expired by timeout");
+            this.holder = null;
+            this.timer = null;
+        }, this.timeoutMs);
+        logger.debug({ lockId }, "Today write lock acquired");
+        return { ok: true, lockId };
+    }
+    release(lockId) {
+        if (!this.holder || this.holder !== lockId) {
+            return false;
+        }
+        this.holder = null;
+        if (this.timer) {
+            clearTimeout(this.timer);
+            this.timer = null;
+        }
+        logger.debug({ lockId }, "Today write lock released");
+        return true;
+    }
+    isHeldBy(lockId) {
+        if (!this.holder) {
+            return false;
+        }
+        return this.holder === lockId;
+    }
+    getHolder() {
+        return this.holder;
+    }
+}
+export function getTodayWriteLockTimeoutMs(executeTimeoutMinutes) {
+    const normalizedMinutes = Number.isFinite(executeTimeoutMinutes) && executeTimeoutMinutes >= 0
+        ? executeTimeoutMinutes
+        : 60;
+    return (normalizedMinutes * 2 + 10) * 60 * 1000;
+}
+/**
+ * Exclusive cross-request lock — the migration endpoint holds this for the
+ * duration of a `/api/setup/migrate-context` run so a second concurrent
+ * migration returns 409 immediately instead of interleaving with the
+ * first. Same acquire/release/holder shape as `TodayWriteLockManager` but
+ * uses a long default timeout because migrations may legitimately take
+ * minutes on large cross-fs copies.
+ */
+export class MigrationLock {
+    timeoutMs;
+    holder = null;
+    timer = null;
+    constructor(timeoutMs) {
+        this.timeoutMs = timeoutMs;
+    }
+    acquire() {
+        if (this.holder) {
+            logger.debug({ existingHolder: this.holder }, "Migration lock rejected — already held");
+            return { ok: false, holder: this.holder };
+        }
+        const lockId = randomUUID();
+        this.holder = lockId;
+        this.timer = setTimeout(() => {
+            logger.warn({ lockId: this.holder }, "Migration lock expired by timeout");
+            this.holder = null;
+            this.timer = null;
+        }, this.timeoutMs);
+        logger.debug({ lockId }, "Migration lock acquired");
+        return { ok: true, lockId };
+    }
+    release(lockId) {
+        if (!this.holder || this.holder !== lockId) {
+            return false;
+        }
+        this.holder = null;
+        if (this.timer) {
+            clearTimeout(this.timer);
+            this.timer = null;
+        }
+        logger.debug({ lockId }, "Migration lock released");
+        return true;
+    }
+    isHeld() {
+        return this.holder !== null;
+    }
+    getHolder() {
+        return this.holder;
+    }
+}
+/**
+ * Global context-write gate — engaged by the migration endpoint while the
+ * primary store is mid-move so every `/api/context/*` write handler (plus
+ * internal writers that opt into the check) refuses with 503. Unlike
+ * `TodayWriteLockManager` / `MigrationLock`, there is no caller identity:
+ * this is a pure on/off flag. In-memory is sufficient because a daemon
+ * restart itself clears the gate, and the migration endpoint guarantees
+ * it disengages the gate in its resume/rollback paths.
+ *
+ * The 503 surface matches degraded mode's `primary_vault_unreachable`
+ * shape so clients can reuse the same retry logic, but the `reason`
+ * differentiates the two ("migration_in_progress" vs
+ * "primary_vault_unreachable").
+ *
+ * Plan §6.2 step 4 cron-tick suppressor integration point — any cron
+ * handler that performs direct filesystem I/O against the primary
+ * context dir without going through ObserverManager (stopped via
+ * pauseAll) or EventBus (paused via pauseDispatch) SHOULD read
+ * `isEngaged()` at fire time and yield when true. Today all known
+ * handlers go through one of the two pause layers, so the flag is
+ * reserved for future handlers that don't.
+ */
+export class ContextWriteGate {
+    engaged = false;
+    reason = null;
+    since = null;
+    engage(reason) {
+        if (this.engaged) {
+            logger.warn({ existingReason: this.reason, newReason: reason }, "Context write gate already engaged");
+            return;
+        }
+        this.engaged = true;
+        this.reason = reason;
+        this.since = new Date().toISOString();
+        logger.info({ reason }, "Context write gate engaged");
+    }
+    disengage() {
+        if (!this.engaged)
+            return;
+        logger.info({ previousReason: this.reason }, "Context write gate disengaged");
+        this.engaged = false;
+        this.reason = null;
+        this.since = null;
+    }
+    isEngaged() {
+        return this.engaged;
+    }
+    getState() {
+        return { engaged: this.engaged, reason: this.reason, since: this.since };
+    }
+}
+//# sourceMappingURL=today-write-lock.js.map

package/dist/core/today-write-lock.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"today-write-lock.js","sourceRoot":"","sources":["../../src/core/today-write-lock.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAE7C,MAAM,MAAM,GAAG,YAAY,CAAC,kBAAkB,CAAC,CAAC;AAShD,MAAM,OAAO,6BAA6B;IAIX;IAHrB,MAAM,GAAkB,IAAI,CAAC;IAC7B,KAAK,GAAyC,IAAI,CAAC;IAE3D,YAA6B,SAAiB;QAAjB,cAAS,GAAT,SAAS,CAAQ;IAAG,CAAC;IAElD,OAAO;QACL,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YAChB,MAAM,CAAC,KAAK,CAAC,EAAE,cAAc,EAAE,IAAI,CAAC,MAAM,EAAE,EAAE,sCAAsC,CAAC,CAAC;YACtF,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC;QAC5C,CAAC;QAED,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;QAC5B,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;YAC3B,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,EAAE,qCAAqC,CAAC,CAAC;YAC5E,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;YACnB,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;QACpB,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;QAEnB,MAAM,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,EAAE,2BAA2B,CAAC,CAAC;QACtD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IAC9B,CAAC;IAED,OAAO,CAAC,MAAc;QACpB,IAAI,CAAC,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;YAC3C,OAAO,KAAK,CAAC;QACf,CAAC;QAED,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;QACnB,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YACf,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACzB,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;QACpB,CAAC;QACD,MAAM,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,EAAE,2BAA2B,CAAC,CAAC;QACtD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,QAAQ,CAAC,MAAsB;QAC7B,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;YACjB,OAAO,KAAK,CAAC;QACf,CAAC;QACD,OAAO,IAAI,CAAC,MAAM,KAAK,MAAM,CAAC;IAChC,CAAC;IAED,SAAS;QACP,OAAO,IAAI,CAAC,MAAM,CAAC;IACrB,CAAC;CACF;AAED,MAAM,UAAU,0BAA0B,CAAC,qBAA6B;IACtE,MAAM,iBAAiB,GACrB,MAAM,CAAC,QAAQ,CAAC,qBAAqB,CAAC,IAAI,qBAAqB,IAAI,CAAC;QAClE,CAAC,CAAC,qBAAqB;QACvB,CAAC,CAAC,EAAE,CAAC;IACT,OAAO,CAAC,iBAAiB,GAAG,CAAC,GAAG,EAAE,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;AAClD,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,OAAO,aAAa;IAIK;IAHrB,MAAM,GAAkB,IAAI,CAAC;IAC7B,KAAK,GAAyC,IAAI,CAAC;IAE3D,YAA6B,SAAiB;QAAjB,cAAS,GAAT,SAAS,CAAQ;IAAG,CAAC;IAElD,OAAO;QACL,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YAChB,MAAM,CAAC,KAAK,CAAC,EAAE,cAAc,EAAE,IAAI,CAAC,MAAM,EAAE,EAAE,wCAAwC,CAAC,CAAC;YACxF,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC;QAC5C,CAAC;QACD,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;QAC5B,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;YAC3B,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,EAAE,mCAAmC,CAAC,CAAC;YAC1E,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;YACnB,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;QACpB,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;QACnB,MAAM,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,EAAE,yBAAyB,CAAC,CAAC;QACpD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IAC9B,CAAC;IAED,OAAO,CAAC,MAAc;QACpB,IAAI,CAAC,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;YAC3C,OAAO,KAAK,CAAC;QACf,CAAC;QACD,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;QACnB,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YACf,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACzB,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;QACpB,CAAC;QACD,MAAM,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,EAAE,yBAAyB,CAAC,CAAC;QACpD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM;QACJ,OAAO,IAAI,CAAC,MAAM,KAAK,IAAI,CAAC;IAC9B,CAAC;IAED,SAAS;QACP,OAAO,IAAI,CAAC,MAAM,CAAC;IACrB,CAAC;CACF;AAED;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,MAAM,OAAO,gBAAgB;IACnB,OAAO,GAAG,KAAK,CAAC;IAChB,MAAM,GAAkB,IAAI,CAAC;IAC7B,KAAK,GAAkB,IAAI,CAAC;IAEpC,MAAM,CAAC,MAAc;QACnB,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACjB,MAAM,CAAC,IAAI,CAAC,EAAE,cAAc,EAAE,IAAI,CAAC,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,EAAE,oCAAoC,CAAC,CAAC;YACtG,OAAO;QACT,CAAC;QACD,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;QACpB,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,KAAK,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QACtC,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,EAAE,4BAA4B,CAAC,CAAC;IACxD,CAAC;IAED,SAAS;QACP,IAAI,CAAC,IAAI,CAAC,OAAO;YAAE,OAAO;QAC1B,MAAM,CAAC,IAAI,CAAC,EAAE,cAAc,EAAE,IAAI,CAAC,MAAM,EAAE,EAAE,+BAA+B,CAAC,CAAC;QAC9E,IAAI,CAAC,OAAO,GAAG,KAAK,CAAC;QACrB,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;QACnB,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;IACpB,CAAC;IAED,SAAS;QACP,OAAO,IAAI,CAAC,OAAO,CAAC;IACtB,CAAC;IAED,QAAQ;QACN,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC;IAC3E,CAAC;CACF"}

package/dist/core/trigger-dispatch.d.ts

@@ -0,0 +1,31 @@
+/**
+ * Trigger dispatch glue — see
+ * `docs/design/appendices/unified-repositories.md` §4.4.
+ *
+ * `evaluateTriggers` (`./trigger-evaluator.ts`) decides which triggers
+ * fire for an `(eventType, payload)` pair on a given repository.
+ * This module owns the *dispatch* half: build a `scheduled.task`
+ * event matching the trigger's action and put it on the EventBus,
+ * then bump the trigger's fire counter.
+ *
+ * Triggers run in **parallel** with the existing event-type → task-flow
+ * pipeline (design §4.4); they do not consume or short-circuit it.
+ * Failures in trigger dispatch never bubble out — observers stay
+ * resilient to a single bad trigger.
+ */
+import type Database from "better-sqlite3";
+import type { EventBus } from "./event-bus.js";
+export interface TriggerDispatchDeps {
+    db: Database.Database;
+    eventBus: EventBus;
+}
+/**
+ * Look up enabled triggers for `(repositoryId, eventType)`, filter by
+ * `evaluateTriggers`, and enqueue a `scheduled.task` per match.
+ *
+ * Returns the number of events enqueued. Never throws — trigger
+ * dispatch must be best-effort so a single misconfigured row cannot
+ * stall the observer poll loop.
+ */
+export declare function dispatchMatchingTriggers(deps: TriggerDispatchDeps, repositoryId: string, eventType: string, payload: Record<string, unknown>): Promise<number>;
+//# sourceMappingURL=trigger-dispatch.d.ts.map

package/dist/core/trigger-dispatch.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"trigger-dispatch.d.ts","sourceRoot":"","sources":["../../src/core/trigger-dispatch.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAOH,OAAO,KAAK,QAAQ,MAAM,gBAAgB,CAAC;AAC3C,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAa/C,MAAM,WAAW,mBAAmB;IAClC,EAAE,EAAE,QAAQ,CAAC,QAAQ,CAAC;IACtB,QAAQ,EAAE,QAAQ,CAAC;CACpB;AAED;;;;;;;GAOG;AACH,wBAAsB,wBAAwB,CAC5C,IAAI,EAAE,mBAAmB,EACzB,YAAY,EAAE,MAAM,EACpB,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC/B,OAAO,CAAC,MAAM,CAAC,CAmDjB"}

package/dist/core/trigger-dispatch.js

@@ -0,0 +1,100 @@
+/**
+ * Trigger dispatch glue — see
+ * `docs/design/appendices/unified-repositories.md` §4.4.
+ *
+ * `evaluateTriggers` (`./trigger-evaluator.ts`) decides which triggers
+ * fire for an `(eventType, payload)` pair on a given repository.
+ * This module owns the *dispatch* half: build a `scheduled.task`
+ * event matching the trigger's action and put it on the EventBus,
+ * then bump the trigger's fire counter.
+ *
+ * Triggers run in **parallel** with the existing event-type → task-flow
+ * pipeline (design §4.4); they do not consume or short-circuit it.
+ * Failures in trigger dispatch never bubble out — observers stay
+ * resilient to a single bad trigger.
+ */
+import { createEvent, EventPriority, } from "@aitne/shared";
+import { evaluateTriggers } from "./trigger-evaluator.js";
+import { getRepository, listEnabledTriggersForEvent, recordTriggerFire, } from "../db/repositories-store.js";
+import { createLogger } from "../logging.js";
+const logger = createLogger("trigger-dispatch");
+/**
+ * Look up enabled triggers for `(repositoryId, eventType)`, filter by
+ * `evaluateTriggers`, and enqueue a `scheduled.task` per match.
+ *
+ * Returns the number of events enqueued. Never throws — trigger
+ * dispatch must be best-effort so a single misconfigured row cannot
+ * stall the observer poll loop.
+ */
+export async function dispatchMatchingTriggers(deps, repositoryId, eventType, payload) {
+    try {
+        const candidates = listEnabledTriggersForEvent(deps.db, repositoryId, eventType);
+        if (candidates.length === 0)
+            return 0;
+        const matched = evaluateTriggers(candidates, eventType, payload);
+        if (matched.length === 0)
+            return 0;
+        const repo = getRepository(deps.db, repositoryId);
+        if (!repo) {
+            logger.warn({ repositoryId, eventType }, "Trigger dispatch skipped — repository row not found");
+            return 0;
+        }
+        let emitted = 0;
+        for (const trigger of matched) {
+            try {
+                const event = buildTriggerEvent(repo, trigger, eventType, payload);
+                await deps.eventBus.put(event);
+                recordTriggerFire(deps.db, trigger.id);
+                emitted += 1;
+                logger.info({
+                    repositoryId,
+                    triggerId: trigger.id,
+                    triggerName: trigger.name,
+                    eventType,
+                    workdirMode: trigger.workdirMode,
+                    backend: trigger.backend,
+                }, "Trigger fired");
+            }
+            catch (err) {
+                logger.warn({ err, repositoryId, triggerId: trigger.id, eventType }, "Trigger dispatch failed for a single trigger — continuing");
+            }
+        }
+        return emitted;
+    }
+    catch (err) {
+        logger.warn({ err, repositoryId, eventType }, "Trigger dispatch loop failed");
+        return 0;
+    }
+}
+function buildTriggerEvent(repo, trigger, eventType, payload) {
+    const base = createEvent({
+        type: "scheduled.task",
+        source: "trigger-dispatch",
+        priority: EventPriority.HIGH,
+    });
+    return {
+        ...base,
+        task: `Trigger '${trigger.name}' on ${repo.slug} (${trigger.workdirMode}).`,
+        taskContext: {
+            triggerSource: "repository_trigger",
+            processKey: "agent.task",
+            repositoryId: repo.id,
+            slug: repo.slug,
+            localPath: repo.localPath,
+            githubRepo: repo.githubOwner && repo.githubRepo
+                ? `${repo.githubOwner}/${repo.githubRepo}`
+                : null,
+            workdirMode: trigger.workdirMode,
+            prompt: trigger.prompt,
+            instructionMd: trigger.instructionMd ?? null,
+            timeoutMinutes: null,
+            triggerId: trigger.id,
+            triggerName: trigger.name,
+            triggerEventType: eventType,
+            triggerEventPayload: payload,
+        },
+        requestedBackendId: trigger.backend,
+        requestedModelId: trigger.model,
+    };
+}
+//# sourceMappingURL=trigger-dispatch.js.map

package/dist/core/trigger-dispatch.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"trigger-dispatch.js","sourceRoot":"","sources":["../../src/core/trigger-dispatch.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EACL,WAAW,EACX,aAAa,GAEd,MAAM,eAAe,CAAC;AAGvB,OAAO,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAC1D,OAAO,EACL,aAAa,EACb,2BAA2B,EAC3B,iBAAiB,GAGlB,MAAM,6BAA6B,CAAC;AACrC,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAE7C,MAAM,MAAM,GAAG,YAAY,CAAC,kBAAkB,CAAC,CAAC;AAOhD;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAC5C,IAAyB,EACzB,YAAoB,EACpB,SAAiB,EACjB,OAAgC;IAEhC,IAAI,CAAC;QACH,MAAM,UAAU,GAAG,2BAA2B,CAC5C,IAAI,CAAC,EAAE,EACP,YAAY,EACZ,SAAS,CACV,CAAC;QACF,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,CAAC,CAAC;QAEtC,MAAM,OAAO,GAAG,gBAAgB,CAAC,UAAU,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;QACjE,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,CAAC,CAAC;QAEnC,MAAM,IAAI,GAAG,aAAa,CAAC,IAAI,CAAC,EAAE,EAAE,YAAY,CAAC,CAAC;QAClD,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,MAAM,CAAC,IAAI,CACT,EAAE,YAAY,EAAE,SAAS,EAAE,EAC3B,qDAAqD,CACtD,CAAC;YACF,OAAO,CAAC,CAAC;QACX,CAAC;QAED,IAAI,OAAO,GAAG,CAAC,CAAC;QAChB,KAAK,MAAM,OAAO,IAAI,OAAO,EAAE,CAAC;YAC9B,IAAI,CAAC;gBACH,MAAM,KAAK,GAAG,iBAAiB,CAAC,IAAI,EAAE,OAAO,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;gBACnE,MAAM,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;gBAC/B,iBAAiB,CAAC,IAAI,CAAC,EAAE,EAAE,OAAO,CAAC,EAAE,CAAC,CAAC;gBACvC,OAAO,IAAI,CAAC,CAAC;gBACb,MAAM,CAAC,IAAI,CACT;oBACE,YAAY;oBACZ,SAAS,EAAE,OAAO,CAAC,EAAE;oBACrB,WAAW,EAAE,OAAO,CAAC,IAAI;oBACzB,SAAS;oBACT,WAAW,EAAE,OAAO,CAAC,WAAW;oBAChC,OAAO,EAAE,OAAO,CAAC,OAAO;iBACzB,EACD,eAAe,CAChB,CAAC;YACJ,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,MAAM,CAAC,IAAI,CACT,EAAE,GAAG,EAAE,YAAY,EAAE,SAAS,EAAE,OAAO,CAAC,EAAE,EAAE,SAAS,EAAE,EACvD,2DAA2D,CAC5D,CAAC;YACJ,CAAC;QACH,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,YAAY,EAAE,SAAS,EAAE,EAAE,8BAA8B,CAAC,CAAC;QAC9E,OAAO,CAAC,CAAC;IACX,CAAC;AACH,CAAC;AAED,SAAS,iBAAiB,CACxB,IAAmB,EACnB,OAA6B,EAC7B,SAAiB,EACjB,OAAgC;IAEhC,MAAM,IAAI,GAAG,WAAW,CAAC;QACvB,IAAI,EAAE,gBAAgB;QACtB,MAAM,EAAE,kBAAkB;QAC1B,QAAQ,EAAE,aAAa,CAAC,IAAI;KAC7B,CAAC,CAAC;IACH,OAAO;QACL,GAAG,IAAI;QACP,IAAI,EAAE,YAAY,OAAO,CAAC,IAAI,QAAQ,IAAI,CAAC,IAAI,KAAK,OAAO,CAAC,WAAW,IAAI;QAC3E,WAAW,EAAE;YACX,aAAa,EAAE,oBAAoB;YACnC,UAAU,EAAE,YAAY;YACxB,YAAY,EAAE,IAAI,CAAC,EAAE;YACrB,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,UAAU,EACR,IAAI,CAAC,WAAW,IAAI,IAAI,CAAC,UAAU;gBACjC,CAAC,CAAC,GAAG,IAAI,CAAC,WAAW,IAAI,IAAI,CAAC,UAAU,EAAE;gBAC1C,CAAC,CAAC,IAAI;YACV,WAAW,EAAE,OAAO,CAAC,WAAW;YAChC,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,aAAa,EAAE,OAAO,CAAC,aAAa,IAAI,IAAI;YAC5C,cAAc,EAAE,IAAI;YACpB,SAAS,EAAE,OAAO,CAAC,EAAE;YACrB,WAAW,EAAE,OAAO,CAAC,IAAI;YACzB,gBAAgB,EAAE,SAAS;YAC3B,mBAAmB,EAAE,OAAO;SAC7B;QACD,kBAAkB,EAAE,OAAO,CAAC,OAAO;QACnC,gBAAgB,EAAE,OAAO,CAAC,KAAK;KAChC,CAAC;AACJ,CAAC"}

package/dist/core/trigger-evaluator.d.ts

@@ -0,0 +1,59 @@
+/**
+ * Trigger evaluator — see `docs/design/appendices/unified-repositories.md` §4.4.
+ *
+ * Pure module. Inputs:
+ *   - a `RepositoryTriggerDTO[]` for a given `(repository_id, event_type)`,
+ *     filtered by the caller via `listEnabledTriggersForEvent`.
+ *   - the polled-event payload as a generic `Record<string, unknown>`.
+ *
+ * Output: the subset of triggers whose `filters_json` matches the payload.
+ *
+ * Filter language (v1):
+ *   - flat key/value equality against scalar event-payload fields
+ *     (`{"branch":"main"}`, `{"action":"opened"}`, …)
+ *   - `path_pattern` — special key whose value is a glob string OR
+ *     `string[]`. The minimatch-subset glob supports `**`, `*`, `?`,
+ *     `[abc]`, `{a,b}`. The matcher walks the path list extracted by an
+ *     event-type-specific extractor (see `EVENT_PATH_EXTRACTORS`).
+ *   - All filter keys AND together. Within `path_pattern[]`, OR.
+ *
+ * The actual dispatch to a backend session lives in the route handler
+ * (POST /api/repositories/:id/run); this module decides which triggers
+ * fire — nothing else.
+ */
+import type { RepositoryTriggerDTO } from "../db/repositories-store.js";
+/**
+ * Compile a single glob pattern into a RegExp. Supports:
+ *   - `**` — any number of path segments (incl. zero)
+ *   - `*`  — any chars except `/`
+ *   - `?`  — single char except `/`
+ *   - `[abc]` / `[!abc]` — character class
+ *   - `{a,b}` — alternation
+ *
+ * Patterns are matched against the full path string (no implicit
+ * prefix); a leading `**` is required to match arbitrary depth from
+ * root.
+ */
+export declare function compileGlob(pattern: string): RegExp;
+export declare function matchGlob(pattern: string, path: string): boolean;
+export declare function matchAnyGlob(patterns: string | string[], paths: readonly string[]): boolean;
+/**
+ * Extracts the file-path list for an event payload. Returns null when
+ * the event type carries no file list (e.g. `github.workflow_run.failed`,
+ * `github.security_alert`); a `path_pattern` filter on that event type
+ * never matches and the trigger does not fire.
+ */
+export type EventPathExtractor = (payload: Record<string, unknown>) => readonly string[] | null;
+export declare const EVENT_PATH_EXTRACTORS: Readonly<Record<string, EventPathExtractor>>;
+/**
+ * Decide whether a single trigger's filters match the given event
+ * payload.
+ */
+export declare function matchesFilters(filters: Record<string, unknown>, eventType: string, payload: Record<string, unknown>): boolean;
+/**
+ * Filter `triggers` to those whose filters match the event. Triggers
+ * are returned in the input order (caller controls the order via
+ * `listEnabledTriggersForEvent`'s `ORDER BY created_at`).
+ */
+export declare function evaluateTriggers(triggers: readonly RepositoryTriggerDTO[], eventType: string, payload: Record<string, unknown>): RepositoryTriggerDTO[];
+//# sourceMappingURL=trigger-evaluator.d.ts.map

package/dist/core/trigger-evaluator.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"trigger-evaluator.d.ts","sourceRoot":"","sources":["../../src/core/trigger-evaluator.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAEH,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,6BAA6B,CAAC;AAIxE;;;;;;;;;;;GAWG;AACH,wBAAgB,WAAW,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAoFnD;AAED,wBAAgB,SAAS,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAEhE;AAED,wBAAgB,YAAY,CAC1B,QAAQ,EAAE,MAAM,GAAG,MAAM,EAAE,EAC3B,KAAK,EAAE,SAAS,MAAM,EAAE,GACvB,OAAO,CAST;AAID;;;;;GAKG;AACH,MAAM,MAAM,kBAAkB,GAAG,CAC/B,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAC7B,SAAS,MAAM,EAAE,GAAG,IAAI,CAAC;AAiD9B,eAAO,MAAM,qBAAqB,EAAE,QAAQ,CAC1C,MAAM,CAAC,MAAM,EAAE,kBAAkB,CAAC,CASnC,CAAC;AAgBF;;;GAGG;AACH,wBAAgB,cAAc,CAC5B,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAChC,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC/B,OAAO,CAgBT;AAED;;;;GAIG;AACH,wBAAgB,gBAAgB,CAC9B,QAAQ,EAAE,SAAS,oBAAoB,EAAE,EACzC,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC/B,oBAAoB,EAAE,CAMxB"}