@c9up/ream 0.1.3

package/dist/scheduler/index.d.ts

@@ -0,0 +1,14 @@
+export type { LockBackend } from './locks/LockBackend.js';
+export { MemoryLockBackend } from './locks/MemoryLockBackend.js';
+export type { ErrorReporter } from './observability/ErrorReporter.js';
+export type { ScheduleEvent, ScheduleTaskCompletedEvent, ScheduleTaskFailedEvent, ScheduleTaskSkippedEvent, ScheduleTaskStartedEvent, } from './observability/ScheduleEvent.js';
+export type { ScheduleEventSink } from './observability/ScheduleEventSink.js';
+export type { TaskStats } from './observability/StatsTracker.js';
+export { StatsTracker } from './observability/StatsTracker.js';
+export type { ScheduleMetadata } from './Schedule.js';
+export { getScheduleMetadata, SCHEDULE_METADATA_KEY, Schedule } from './Schedule.js';
+export type { ScheduleProviderOptions } from './ScheduleProvider.js';
+export { ScheduleProvider } from './ScheduleProvider.js';
+export type { RunTaskOutcome, ScheduleInvocation, SchedulerOptions, TaskInfo, } from './Scheduler.js';
+export { Scheduler } from './Scheduler.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/scheduler/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/scheduler/index.ts"],"names":[],"mappings":"AAAA,YAAY,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAA;AACzD,OAAO,EAAE,iBAAiB,EAAE,MAAM,8BAA8B,CAAA;AAChE,YAAY,EAAE,aAAa,EAAE,MAAM,kCAAkC,CAAA;AACrE,YAAY,EACV,aAAa,EACb,0BAA0B,EAC1B,uBAAuB,EACvB,wBAAwB,EACxB,wBAAwB,GACzB,MAAM,kCAAkC,CAAA;AACzC,YAAY,EAAE,iBAAiB,EAAE,MAAM,sCAAsC,CAAA;AAC7E,YAAY,EAAE,SAAS,EAAE,MAAM,iCAAiC,CAAA;AAChE,OAAO,EAAE,YAAY,EAAE,MAAM,iCAAiC,CAAA;AAC9D,YAAY,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAA;AACrD,OAAO,EAAE,mBAAmB,EAAE,qBAAqB,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAA;AACpF,YAAY,EAAE,uBAAuB,EAAE,MAAM,uBAAuB,CAAA;AACpE,OAAO,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAA;AACxD,YAAY,EACV,cAAc,EACd,kBAAkB,EAClB,gBAAgB,EAChB,QAAQ,GACT,MAAM,gBAAgB,CAAA;AACvB,OAAO,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAA"}

package/dist/scheduler/index.js

@@ -0,0 +1,6 @@
+export { MemoryLockBackend } from './locks/MemoryLockBackend.js';
+export { StatsTracker } from './observability/StatsTracker.js';
+export { getScheduleMetadata, SCHEDULE_METADATA_KEY, Schedule } from './Schedule.js';
+export { ScheduleProvider } from './ScheduleProvider.js';
+export { Scheduler } from './Scheduler.js';
+//# sourceMappingURL=index.js.map

package/dist/scheduler/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/scheduler/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,iBAAiB,EAAE,MAAM,8BAA8B,CAAA;AAWhE,OAAO,EAAE,YAAY,EAAE,MAAM,iCAAiC,CAAA;AAE9D,OAAO,EAAE,mBAAmB,EAAE,qBAAqB,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAA;AAEpF,OAAO,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAA;AAOxD,OAAO,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAA"}

package/dist/scheduler/locks/LockBackend.d.ts

@@ -0,0 +1,37 @@
+/**
+ * Pluggable distributed-lock interface for the scheduler.
+ *
+ * The scheduler consults a `LockBackend` immediately before firing a
+ * registered task so that in multi-instance deployments only one
+ * instance runs a given task on each tick. Redis, database
+ * advisory-lock, and other backends live in user-land — this module
+ * ships only the interface and a single-process `MemoryLockBackend`.
+ *
+ * @implements Story 28.3
+ */
+export interface LockBackend {
+    /**
+     * Attempt to acquire an exclusive lock on `name` for up to `ttlMs`
+     * wall-clock milliseconds.
+     *
+     * Returns `true` when the caller now owns the lock, `false` when it
+     * is held by someone else. Implementations must treat an entry
+     * whose TTL has elapsed as free — expired locks auto-recover
+     * without manual cleanup, which is essential for crash tolerance.
+     *
+     * Implementations should be safe to call concurrently; the memory
+     * backend serializes access through a synchronous `Map` under the
+     * hood, remote backends typically rely on their server's atomic
+     * compare-and-set primitive.
+     */
+    acquire(name: string, ttlMs: number): Promise<boolean>;
+    /**
+     * Release the lock on `name`. Idempotent — releasing an unknown or
+     * already-released lock must not throw. The scheduler calls this
+     * in a `finally` block immediately after the task completes so the
+     * next tick on any instance can re-acquire without waiting for the
+     * TTL.
+     */
+    release(name: string): Promise<void>;
+}
+//# sourceMappingURL=LockBackend.d.ts.map

package/dist/scheduler/locks/LockBackend.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"LockBackend.d.ts","sourceRoot":"","sources":["../../../src/scheduler/locks/LockBackend.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,MAAM,WAAW,WAAW;IAC1B;;;;;;;;;;;;;OAaG;IACH,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;IAEtD;;;;;;OAMG;IACH,OAAO,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;CACrC"}

package/dist/scheduler/locks/LockBackend.js

@@ -0,0 +1,13 @@
+/**
+ * Pluggable distributed-lock interface for the scheduler.
+ *
+ * The scheduler consults a `LockBackend` immediately before firing a
+ * registered task so that in multi-instance deployments only one
+ * instance runs a given task on each tick. Redis, database
+ * advisory-lock, and other backends live in user-land — this module
+ * ships only the interface and a single-process `MemoryLockBackend`.
+ *
+ * @implements Story 28.3
+ */
+export {};
+//# sourceMappingURL=LockBackend.js.map

package/dist/scheduler/locks/LockBackend.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"LockBackend.js","sourceRoot":"","sources":["../../../src/scheduler/locks/LockBackend.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG"}

package/dist/scheduler/locks/MemoryLockBackend.d.ts

@@ -0,0 +1,39 @@
+/**
+ * Default single-process lock backend backed by a `Map`.
+ *
+ * Correct for apps that run in a single Node.js process. For
+ * horizontally-scaled deployments, implement `LockBackend` against a
+ * shared store (Redis `SET NX PX`, Postgres advisory locks, etc.) —
+ * those drivers live in user-land per the project's "agnostic per
+ * package" rule.
+ *
+ * Expiry is evaluated **lazily** at `acquire` time — no background
+ * timer, no `setInterval`. This preserves Story 28.1's
+ * Rust-ticker-only philosophy: the only timers in the scheduler live
+ * in the Rust Tokio runtime.
+ *
+ * An opportunistic sweep runs at most once per `acquire` call to
+ * cap unbounded growth: when the map exceeds `SWEEP_THRESHOLD`
+ * entries, expired entries are pruned in O(N) without blocking
+ * the normal path.
+ *
+ * @implements Story 28.3
+ */
+import type { LockBackend } from './LockBackend.js';
+export declare class MemoryLockBackend implements LockBackend {
+    #private;
+    acquire(name: string, ttlMs: number): Promise<boolean>;
+    release(name: string): Promise<void>;
+    /**
+     * @internal Test-only helper: force an entry into the map with an
+     * arbitrary expiry. Used to simulate a crashed holder whose lock
+     * has already expired without advancing `Date.now()`. Not part of
+     * the public {@link LockBackend} contract — never call from
+     * production code.
+     */
+    __setExpiryForTesting(name: string, expiryMs: number): void;
+    /** @internal Test-only helper — return the current map size. */
+    __sizeForTesting(): number;
+}
+export default MemoryLockBackend;
+//# sourceMappingURL=MemoryLockBackend.d.ts.map

package/dist/scheduler/locks/MemoryLockBackend.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"MemoryLockBackend.d.ts","sourceRoot":"","sources":["../../../src/scheduler/locks/MemoryLockBackend.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAGH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAA;AAgBnD,qBAAa,iBAAkB,YAAW,WAAW;;IAG7C,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAqBtD,OAAO,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAI1C;;;;;;OAMG;IACH,qBAAqB,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,IAAI;IAI3D,gEAAgE;IAChE,gBAAgB,IAAI,MAAM;CAG3B;AAED,eAAe,iBAAiB,CAAA"}

package/dist/scheduler/locks/MemoryLockBackend.js

@@ -0,0 +1,71 @@
+/**
+ * Default single-process lock backend backed by a `Map`.
+ *
+ * Correct for apps that run in a single Node.js process. For
+ * horizontally-scaled deployments, implement `LockBackend` against a
+ * shared store (Redis `SET NX PX`, Postgres advisory locks, etc.) —
+ * those drivers live in user-land per the project's "agnostic per
+ * package" rule.
+ *
+ * Expiry is evaluated **lazily** at `acquire` time — no background
+ * timer, no `setInterval`. This preserves Story 28.1's
+ * Rust-ticker-only philosophy: the only timers in the scheduler live
+ * in the Rust Tokio runtime.
+ *
+ * An opportunistic sweep runs at most once per `acquire` call to
+ * cap unbounded growth: when the map exceeds `SWEEP_THRESHOLD`
+ * entries, expired entries are pruned in O(N) without blocking
+ * the normal path.
+ *
+ * @implements Story 28.3
+ */
+import { ReamError } from '../../errors/ReamError.js';
+const SWEEP_THRESHOLD = 256;
+function assertValidTtl(ttlMs) {
+    if (!Number.isFinite(ttlMs) || ttlMs <= 0) {
+        throw new ReamError('SCHEDULE_INVALID_LOCK_TTL', `Lock TTL must be a finite positive number, got ${ttlMs}`, {
+            hint: 'Use a millisecond value greater than zero (typical range 1_000 – 600_000).',
+        });
+    }
+}
+export class MemoryLockBackend {
+    #locks = new Map();
+    async acquire(name, ttlMs) {
+        assertValidTtl(ttlMs);
+        const now = Date.now();
+        // Opportunistic sweep: when the map grows past the threshold,
+        // drop expired entries. Bounded by the current map size, runs at
+        // most once per acquire, never schedules async work.
+        if (this.#locks.size >= SWEEP_THRESHOLD) {
+            for (const [key, expiry] of this.#locks) {
+                if (expiry <= now)
+                    this.#locks.delete(key);
+            }
+        }
+        const existing = this.#locks.get(name);
+        if (existing !== undefined && existing > now) {
+            return false;
+        }
+        this.#locks.set(name, now + ttlMs);
+        return true;
+    }
+    async release(name) {
+        this.#locks.delete(name);
+    }
+    /**
+     * @internal Test-only helper: force an entry into the map with an
+     * arbitrary expiry. Used to simulate a crashed holder whose lock
+     * has already expired without advancing `Date.now()`. Not part of
+     * the public {@link LockBackend} contract — never call from
+     * production code.
+     */
+    __setExpiryForTesting(name, expiryMs) {
+        this.#locks.set(name, expiryMs);
+    }
+    /** @internal Test-only helper — return the current map size. */
+    __sizeForTesting() {
+        return this.#locks.size;
+    }
+}
+export default MemoryLockBackend;
+//# sourceMappingURL=MemoryLockBackend.js.map

package/dist/scheduler/locks/MemoryLockBackend.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"MemoryLockBackend.js","sourceRoot":"","sources":["../../../src/scheduler/locks/MemoryLockBackend.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,OAAO,EAAE,SAAS,EAAE,MAAM,2BAA2B,CAAA;AAGrD,MAAM,eAAe,GAAG,GAAG,CAAA;AAE3B,SAAS,cAAc,CAAC,KAAa;IACnC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC,EAAE,CAAC;QAC1C,MAAM,IAAI,SAAS,CACjB,2BAA2B,EAC3B,kDAAkD,KAAK,EAAE,EACzD;YACE,IAAI,EAAE,4EAA4E;SACnF,CACF,CAAA;IACH,CAAC;AACH,CAAC;AAED,MAAM,OAAO,iBAAiB;IAC5B,MAAM,GAAG,IAAI,GAAG,EAAkB,CAAA;IAElC,KAAK,CAAC,OAAO,CAAC,IAAY,EAAE,KAAa;QACvC,cAAc,CAAC,KAAK,CAAC,CAAA;QACrB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;QAEtB,8DAA8D;QAC9D,iEAAiE;QACjE,qDAAqD;QACrD,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,IAAI,eAAe,EAAE,CAAC;YACxC,KAAK,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;gBACxC,IAAI,MAAM,IAAI,GAAG;oBAAE,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAA;YAC5C,CAAC;QACH,CAAC;QAED,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;QACtC,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,GAAG,GAAG,EAAE,CAAC;YAC7C,OAAO,KAAK,CAAA;QACd,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,GAAG,KAAK,CAAC,CAAA;QAClC,OAAO,IAAI,CAAA;IACb,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,IAAY;QACxB,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;IAC1B,CAAC;IAED;;;;;;OAMG;IACH,qBAAqB,CAAC,IAAY,EAAE,QAAgB;QAClD,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAA;IACjC,CAAC;IAED,gEAAgE;IAChE,gBAAgB;QACd,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,CAAA;IACzB,CAAC;CACF;AAED,eAAe,iBAAiB,CAAA"}

package/dist/scheduler/observability/ErrorReporter.d.ts

@@ -0,0 +1,15 @@
+/**
+ * Callback invoked when a scheduled task throws. Typically bridges
+ * to `ErrorBoundary.serviceError` — but the scheduler does not
+ * import `ErrorBoundary` directly; the user wires the adapter
+ * per the "agnostic per package" rule.
+ *
+ * The scheduler wraps the call in its own `try/catch`, so an
+ * `ErrorReporter` that itself throws cannot crash the Rust ticker.
+ *
+ * @implements Story 28.4
+ */
+export type ErrorReporter = (err: unknown, context: {
+    taskName: string;
+}) => void;
+//# sourceMappingURL=ErrorReporter.d.ts.map

package/dist/scheduler/observability/ErrorReporter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ErrorReporter.d.ts","sourceRoot":"","sources":["../../../src/scheduler/observability/ErrorReporter.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,MAAM,MAAM,aAAa,GAAG,CAAC,GAAG,EAAE,OAAO,EAAE,OAAO,EAAE;IAAE,QAAQ,EAAE,MAAM,CAAA;CAAE,KAAK,IAAI,CAAA"}

package/dist/scheduler/observability/ErrorReporter.js

@@ -0,0 +1,13 @@
+/**
+ * Callback invoked when a scheduled task throws. Typically bridges
+ * to `ErrorBoundary.serviceError` — but the scheduler does not
+ * import `ErrorBoundary` directly; the user wires the adapter
+ * per the "agnostic per package" rule.
+ *
+ * The scheduler wraps the call in its own `try/catch`, so an
+ * `ErrorReporter` that itself throws cannot crash the Rust ticker.
+ *
+ * @implements Story 28.4
+ */
+export {};
+//# sourceMappingURL=ErrorReporter.js.map

package/dist/scheduler/observability/ErrorReporter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ErrorReporter.js","sourceRoot":"","sources":["../../../src/scheduler/observability/ErrorReporter.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG"}

package/dist/scheduler/observability/ScheduleEvent.d.ts

@@ -0,0 +1,57 @@
+/**
+ * Discriminated union of events emitted by the scheduler's task
+ * invocation wrapper.
+ *
+ * All payloads are JSON-serializable so downstream sinks (the event bus,
+ * structured logs, metrics backends) can forward them without
+ * touching live `Error` instances.
+ *
+ * @implements Story 28.4
+ */
+export interface ScheduleTaskStartedEvent {
+    type: 'schedule.task.started';
+    taskName: string;
+    /** ms-epoch instant the Rust ticker chose for this fire. */
+    scheduledForMs: number;
+    /** ms-epoch at which the JS wrapper began running the user callback. */
+    startedAtMs: number;
+}
+export interface ScheduleTaskCompletedEvent {
+    type: 'schedule.task.completed';
+    taskName: string;
+    /** Wall-clock milliseconds spent running the callback. */
+    durationMs: number;
+}
+export interface ScheduleTaskFailedEvent {
+    type: 'schedule.task.failed';
+    taskName: string;
+    /** Plain-object projection of the thrown error (no live `Error`). */
+    error: {
+        name: string;
+        message: string;
+        stack?: string;
+    };
+    /** Wall-clock milliseconds until the throw. */
+    durationMs: number;
+}
+export interface ScheduleTaskSkippedEvent {
+    type: 'schedule.task.skipped';
+    taskName: string;
+    /** Reason this tick did not execute the task body.
+     *  - `'locked'` — distributed-lock backend reported the slot as
+     *    already held by another instance.
+     *  - `'acquire-failed'` — the lock backend itself threw/rejected
+     *    (e.g. Redis connection drop); the scheduler treats the tick
+     *    as skipped for observability rather than silently dropping.
+     *  - `'already-running'` — an in-process invocation of the same
+     *    task is already in flight (ticker + concurrent `runTaskNow`,
+     *    or two simultaneous `runTaskNow` calls). The duplicate is
+     *    dropped to prevent double-execution of non-idempotent tasks.
+     *
+     *  Left open for future reasons (e.g. `'paused'`). Consumers that
+     *  branch on `reason` should handle unknown values defensively
+     *  (log + treat as skip) so adding a new variant is non-breaking. */
+    reason: 'locked' | 'acquire-failed' | 'already-running';
+}
+export type ScheduleEvent = ScheduleTaskStartedEvent | ScheduleTaskCompletedEvent | ScheduleTaskFailedEvent | ScheduleTaskSkippedEvent;
+//# sourceMappingURL=ScheduleEvent.d.ts.map

package/dist/scheduler/observability/ScheduleEvent.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ScheduleEvent.d.ts","sourceRoot":"","sources":["../../../src/scheduler/observability/ScheduleEvent.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,MAAM,WAAW,wBAAwB;IACvC,IAAI,EAAE,uBAAuB,CAAA;IAC7B,QAAQ,EAAE,MAAM,CAAA;IAChB,4DAA4D;IAC5D,cAAc,EAAE,MAAM,CAAA;IACtB,wEAAwE;IACxE,WAAW,EAAE,MAAM,CAAA;CACpB;AAED,MAAM,WAAW,0BAA0B;IACzC,IAAI,EAAE,yBAAyB,CAAA;IAC/B,QAAQ,EAAE,MAAM,CAAA;IAChB,0DAA0D;IAC1D,UAAU,EAAE,MAAM,CAAA;CACnB;AAED,MAAM,WAAW,uBAAuB;IACtC,IAAI,EAAE,sBAAsB,CAAA;IAC5B,QAAQ,EAAE,MAAM,CAAA;IAChB,qEAAqE;IACrE,KAAK,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,CAAA;IACxD,+CAA+C;IAC/C,UAAU,EAAE,MAAM,CAAA;CACnB;AAED,MAAM,WAAW,wBAAwB;IACvC,IAAI,EAAE,uBAAuB,CAAA;IAC7B,QAAQ,EAAE,MAAM,CAAA;IAChB;;;;;;;;;;;;;yEAaqE;IACrE,MAAM,EAAE,QAAQ,GAAG,gBAAgB,GAAG,iBAAiB,CAAA;CACxD;AAED,MAAM,MAAM,aAAa,GACrB,wBAAwB,GACxB,0BAA0B,GAC1B,uBAAuB,GACvB,wBAAwB,CAAA"}

package/dist/scheduler/observability/ScheduleEvent.js

@@ -0,0 +1,12 @@
+/**
+ * Discriminated union of events emitted by the scheduler's task
+ * invocation wrapper.
+ *
+ * All payloads are JSON-serializable so downstream sinks (the event bus,
+ * structured logs, metrics backends) can forward them without
+ * touching live `Error` instances.
+ *
+ * @implements Story 28.4
+ */
+export {};
+//# sourceMappingURL=ScheduleEvent.js.map

package/dist/scheduler/observability/ScheduleEvent.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ScheduleEvent.js","sourceRoot":"","sources":["../../../src/scheduler/observability/ScheduleEvent.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG"}

package/dist/scheduler/observability/ScheduleEventSink.d.ts

@@ -0,0 +1,20 @@
+/**
+ * Destination for scheduler task-invocation events.
+ *
+ * This interface is intentionally minimal so users can adapt to any
+ * event bus (the bus, a raw `EventEmitter`, a structured logger). The
+ * scheduler does NOT import the event bus directly — writing the
+ * bridge is the user's responsibility per the project's "agnostic
+ * per package" rule.
+ *
+ * The scheduler treats `emit` as fire-and-forget: it does not await
+ * the return value, and any sync throw is caught at the call site so
+ * a buggy adapter cannot crash the Rust ticker.
+ *
+ * @implements Story 28.4
+ */
+import type { ScheduleEvent } from './ScheduleEvent.js';
+export interface ScheduleEventSink {
+    emit(event: ScheduleEvent): void | Promise<void>;
+}
+//# sourceMappingURL=ScheduleEventSink.d.ts.map

package/dist/scheduler/observability/ScheduleEventSink.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ScheduleEventSink.d.ts","sourceRoot":"","sources":["../../../src/scheduler/observability/ScheduleEventSink.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAA;AAEvD,MAAM,WAAW,iBAAiB;IAChC,IAAI,CAAC,KAAK,EAAE,aAAa,GAAG,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;CACjD"}

package/dist/scheduler/observability/ScheduleEventSink.js

@@ -0,0 +1,17 @@
+/**
+ * Destination for scheduler task-invocation events.
+ *
+ * This interface is intentionally minimal so users can adapt to any
+ * event bus (the bus, a raw `EventEmitter`, a structured logger). The
+ * scheduler does NOT import the event bus directly — writing the
+ * bridge is the user's responsibility per the project's "agnostic
+ * per package" rule.
+ *
+ * The scheduler treats `emit` as fire-and-forget: it does not await
+ * the return value, and any sync throw is caught at the call site so
+ * a buggy adapter cannot crash the Rust ticker.
+ *
+ * @implements Story 28.4
+ */
+export {};
+//# sourceMappingURL=ScheduleEventSink.js.map

package/dist/scheduler/observability/ScheduleEventSink.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ScheduleEventSink.js","sourceRoot":"","sources":["../../../src/scheduler/observability/ScheduleEventSink.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG"}

package/dist/scheduler/observability/StatsTracker.d.ts

@@ -0,0 +1,50 @@
+/**
+ * Per-task run statistics. Populated by the scheduler's invocation
+ * wrapper and surfaced via `Scheduler.getStats(taskName)`.
+ *
+ * `nextRunMs` is NOT tracked here — it is read live from the Rust
+ * NAPI layer every time `Scheduler.getStats` is called. This tracker
+ * only owns counters that accumulate over time.
+ *
+ * @implements Story 28.4
+ */
+export interface TaskStats {
+    /** ms-epoch of the most recent fire that the wrapper STARTED (lock-skipped fires do not update this). `null` if never started. */
+    lastRunMs: number | null;
+    /** ms-epoch of the next scheduled fire as reported by the Rust core. `null` when the task is unknown or the core returns null. */
+    nextRunMs: number | null;
+    /** Total terminal invocations: completed + failed + skipped. */
+    runCount: number;
+    /** Completed (callback resolved without throwing). */
+    successCount: number;
+    /** Failed (callback threw / rejected). */
+    errorCount: number;
+    /** Skipped (lock backend reported the task already held by another instance). */
+    skippedCount: number;
+    /**
+     * Rolling average wall-clock duration over completed + failed
+     * runs (skipped runs have no duration and are excluded). `0`
+     * until at least one duration has been recorded.
+     */
+    avgDurationMs: number;
+}
+/**
+ * O(1) in-memory counter map — one entry per task name seen. Never
+ * grows beyond the number of distinct task names the scheduler has
+ * seen; no per-run history retained.
+ */
+export declare class StatsTracker {
+    #private;
+    recordStarted(name: string, startedAtMs: number): void;
+    recordCompleted(name: string, durationMs: number): void;
+    recordFailed(name: string, durationMs: number): void;
+    recordSkipped(name: string): void;
+    /**
+     * Return a defensive snapshot. Unknown tasks yield a zeroed
+     * snapshot with `null` timestamps. `nextRunMs` is always `null`
+     * here — the caller (`Scheduler.getStats`) overlays the live
+     * value from the NAPI layer.
+     */
+    get(name: string): TaskStats;
+}
+//# sourceMappingURL=StatsTracker.d.ts.map

package/dist/scheduler/observability/StatsTracker.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"StatsTracker.d.ts","sourceRoot":"","sources":["../../../src/scheduler/observability/StatsTracker.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,MAAM,WAAW,SAAS;IACxB,kIAAkI;IAClI,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;IACxB,kIAAkI;IAClI,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;IACxB,gEAAgE;IAChE,QAAQ,EAAE,MAAM,CAAA;IAChB,sDAAsD;IACtD,YAAY,EAAE,MAAM,CAAA;IACpB,0CAA0C;IAC1C,UAAU,EAAE,MAAM,CAAA;IAClB,iFAAiF;IACjF,YAAY,EAAE,MAAM,CAAA;IACpB;;;;OAIG;IACH,aAAa,EAAE,MAAM,CAAA;CACtB;AAwBD;;;;GAIG;AACH,qBAAa,YAAY;;IAYvB,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,IAAI;IAItD,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,IAAI;IAavD,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,IAAI;IAUpD,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI;IAMjC;;;;;OAKG;IACH,GAAG,CAAC,IAAI,EAAE,MAAM,GAAG,SAAS;CAuB7B"}

package/dist/scheduler/observability/StatsTracker.js

@@ -0,0 +1,96 @@
+/**
+ * Per-task run statistics. Populated by the scheduler's invocation
+ * wrapper and surfaced via `Scheduler.getStats(taskName)`.
+ *
+ * `nextRunMs` is NOT tracked here — it is read live from the Rust
+ * NAPI layer every time `Scheduler.getStats` is called. This tracker
+ * only owns counters that accumulate over time.
+ *
+ * @implements Story 28.4
+ */
+function zeroInternal() {
+    return {
+        lastRunMs: null,
+        runCount: 0,
+        successCount: 0,
+        errorCount: 0,
+        skippedCount: 0,
+        totalDurationMs: 0,
+        durationRunCount: 0,
+    };
+}
+/**
+ * O(1) in-memory counter map — one entry per task name seen. Never
+ * grows beyond the number of distinct task names the scheduler has
+ * seen; no per-run history retained.
+ */
+export class StatsTracker {
+    #stats = new Map();
+    #ensure(name) {
+        let s = this.#stats.get(name);
+        if (!s) {
+            s = zeroInternal();
+            this.#stats.set(name, s);
+        }
+        return s;
+    }
+    recordStarted(name, startedAtMs) {
+        this.#ensure(name).lastRunMs = startedAtMs;
+    }
+    recordCompleted(name, durationMs) {
+        const s = this.#ensure(name);
+        s.runCount++;
+        s.successCount++;
+        // Guard against non-finite durations — a caller bug passing NaN or
+        // Infinity would permanently poison the rolling average. Still
+        // count the run; only skip the duration accumulation.
+        if (Number.isFinite(durationMs)) {
+            s.totalDurationMs += durationMs;
+            s.durationRunCount++;
+        }
+    }
+    recordFailed(name, durationMs) {
+        const s = this.#ensure(name);
+        s.runCount++;
+        s.errorCount++;
+        if (Number.isFinite(durationMs)) {
+            s.totalDurationMs += durationMs;
+            s.durationRunCount++;
+        }
+    }
+    recordSkipped(name) {
+        const s = this.#ensure(name);
+        s.runCount++;
+        s.skippedCount++;
+    }
+    /**
+     * Return a defensive snapshot. Unknown tasks yield a zeroed
+     * snapshot with `null` timestamps. `nextRunMs` is always `null`
+     * here — the caller (`Scheduler.getStats`) overlays the live
+     * value from the NAPI layer.
+     */
+    get(name) {
+        const s = this.#stats.get(name);
+        if (!s) {
+            return {
+                lastRunMs: null,
+                nextRunMs: null,
+                runCount: 0,
+                successCount: 0,
+                errorCount: 0,
+                skippedCount: 0,
+                avgDurationMs: 0,
+            };
+        }
+        return {
+            lastRunMs: s.lastRunMs,
+            nextRunMs: null,
+            runCount: s.runCount,
+            successCount: s.successCount,
+            errorCount: s.errorCount,
+            skippedCount: s.skippedCount,
+            avgDurationMs: s.durationRunCount > 0 ? s.totalDurationMs / s.durationRunCount : 0,
+        };
+    }
+}
+//# sourceMappingURL=StatsTracker.js.map

package/dist/scheduler/observability/StatsTracker.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"StatsTracker.js","sourceRoot":"","sources":["../../../src/scheduler/observability/StatsTracker.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAiCH,SAAS,YAAY;IACnB,OAAO;QACL,SAAS,EAAE,IAAI;QACf,QAAQ,EAAE,CAAC;QACX,YAAY,EAAE,CAAC;QACf,UAAU,EAAE,CAAC;QACb,YAAY,EAAE,CAAC;QACf,eAAe,EAAE,CAAC;QAClB,gBAAgB,EAAE,CAAC;KACpB,CAAA;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,OAAO,YAAY;IACvB,MAAM,GAAG,IAAI,GAAG,EAAyB,CAAA;IAEzC,OAAO,CAAC,IAAY;QAClB,IAAI,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;QAC7B,IAAI,CAAC,CAAC,EAAE,CAAC;YACP,CAAC,GAAG,YAAY,EAAE,CAAA;YAClB,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,CAAA;QAC1B,CAAC;QACD,OAAO,CAAC,CAAA;IACV,CAAC;IAED,aAAa,CAAC,IAAY,EAAE,WAAmB;QAC7C,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,SAAS,GAAG,WAAW,CAAA;IAC5C,CAAC;IAED,eAAe,CAAC,IAAY,EAAE,UAAkB;QAC9C,MAAM,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAA;QAC5B,CAAC,CAAC,QAAQ,EAAE,CAAA;QACZ,CAAC,CAAC,YAAY,EAAE,CAAA;QAChB,mEAAmE;QACnE,+DAA+D;QAC/D,sDAAsD;QACtD,IAAI,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;YAChC,CAAC,CAAC,eAAe,IAAI,UAAU,CAAA;YAC/B,CAAC,CAAC,gBAAgB,EAAE,CAAA;QACtB,CAAC;IACH,CAAC;IAED,YAAY,CAAC,IAAY,EAAE,UAAkB;QAC3C,MAAM,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAA;QAC5B,CAAC,CAAC,QAAQ,EAAE,CAAA;QACZ,CAAC,CAAC,UAAU,EAAE,CAAA;QACd,IAAI,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;YAChC,CAAC,CAAC,eAAe,IAAI,UAAU,CAAA;YAC/B,CAAC,CAAC,gBAAgB,EAAE,CAAA;QACtB,CAAC;IACH,CAAC;IAED,aAAa,CAAC,IAAY;QACxB,MAAM,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAA;QAC5B,CAAC,CAAC,QAAQ,EAAE,CAAA;QACZ,CAAC,CAAC,YAAY,EAAE,CAAA;IAClB,CAAC;IAED;;;;;OAKG;IACH,GAAG,CAAC,IAAY;QACd,MAAM,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;QAC/B,IAAI,CAAC,CAAC,EAAE,CAAC;YACP,OAAO;gBACL,SAAS,EAAE,IAAI;gBACf,SAAS,EAAE,IAAI;gBACf,QAAQ,EAAE,CAAC;gBACX,YAAY,EAAE,CAAC;gBACf,UAAU,EAAE,CAAC;gBACb,YAAY,EAAE,CAAC;gBACf,aAAa,EAAE,CAAC;aACjB,CAAA;QACH,CAAC;QACD,OAAO;YACL,SAAS,EAAE,CAAC,CAAC,SAAS;YACtB,SAAS,EAAE,IAAI;YACf,QAAQ,EAAE,CAAC,CAAC,QAAQ;YACpB,YAAY,EAAE,CAAC,CAAC,YAAY;YAC5B,UAAU,EAAE,CAAC,CAAC,UAAU;YACxB,YAAY,EAAE,CAAC,CAAC,YAAY;YAC5B,aAAa,EAAE,CAAC,CAAC,gBAAgB,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,eAAe,GAAG,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC;SACnF,CAAA;IACH,CAAC;CACF"}

package/dist/security/CookieSigner.d.ts

@@ -0,0 +1,13 @@
+/**
+ * Cookie signing and encryption.
+ * Uses Rust NAPI via crypto facade when available.
+ */
+export declare class CookieSigner {
+    #private;
+    constructor(secret: string);
+    sign(value: string): string;
+    unsign(signed: string): string | null;
+    encrypt(value: string): string;
+    decrypt(encrypted: string): string | null;
+}
+//# sourceMappingURL=CookieSigner.d.ts.map

package/dist/security/CookieSigner.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"CookieSigner.d.ts","sourceRoot":"","sources":["../../src/security/CookieSigner.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAKH,qBAAa,YAAY;;gBAIX,MAAM,EAAE,MAAM;IAM1B,IAAI,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM;IAK3B,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI;IAQrC,OAAO,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM;IAQ9B,OAAO,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI;CAc1C"}

package/dist/security/CookieSigner.js

@@ -0,0 +1,51 @@
+/**
+ * Cookie signing and encryption.
+ * Uses Rust NAPI via crypto facade when available.
+ */
+import { createCipheriv, createDecipheriv, createHmac, randomBytes } from 'node:crypto';
+import { hmacSign, hmacVerify } from './crypto.js';
+export class CookieSigner {
+    #secret;
+    #keyBuffer;
+    constructor(secret) {
+        this.#secret = secret;
+        // Derive a 32-byte key for AES-256-GCM via HKDF-like derivation
+        this.#keyBuffer = Buffer.from(createHmac('sha256', secret).update('cookie-key').digest());
+    }
+    sign(value) {
+        const sig = hmacSign(value, this.#secret);
+        return `${value}.${sig}`;
+    }
+    unsign(signed) {
+        const lastDot = signed.lastIndexOf('.');
+        if (lastDot === -1)
+            return null;
+        const value = signed.slice(0, lastDot);
+        const sig = signed.slice(lastDot + 1);
+        return hmacVerify(value, sig, this.#secret) ? value : null;
+    }
+    encrypt(value) {
+        const iv = randomBytes(12);
+        const cipher = createCipheriv('aes-256-gcm', this.#keyBuffer, iv);
+        const encrypted = Buffer.concat([cipher.update(value, 'utf8'), cipher.final()]);
+        const tag = cipher.getAuthTag();
+        return `${iv.toString('base64url')}.${encrypted.toString('base64url')}.${tag.toString('base64url')}`;
+    }
+    decrypt(encrypted) {
+        const parts = encrypted.split('.');
+        if (parts.length !== 3)
+            return null;
+        try {
+            const iv = Buffer.from(parts[0], 'base64url');
+            const data = Buffer.from(parts[1], 'base64url');
+            const tag = Buffer.from(parts[2], 'base64url');
+            const decipher = createDecipheriv('aes-256-gcm', this.#keyBuffer, iv);
+            decipher.setAuthTag(tag);
+            return Buffer.concat([decipher.update(data), decipher.final()]).toString('utf8');
+        }
+        catch {
+            return null;
+        }
+    }
+}
+//# sourceMappingURL=CookieSigner.js.map

package/dist/security/CookieSigner.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"CookieSigner.js","sourceRoot":"","sources":["../../src/security/CookieSigner.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,cAAc,EAAE,gBAAgB,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,aAAa,CAAA;AACvF,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AAElD,MAAM,OAAO,YAAY;IACvB,OAAO,CAAQ;IACf,UAAU,CAAQ;IAElB,YAAY,MAAc;QACxB,IAAI,CAAC,OAAO,GAAG,MAAM,CAAA;QACrB,gEAAgE;QAChE,IAAI,CAAC,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,MAAM,EAAE,CAAC,CAAA;IAC3F,CAAC;IAED,IAAI,CAAC,KAAa;QAChB,MAAM,GAAG,GAAG,QAAQ,CAAC,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,CAAA;QACzC,OAAO,GAAG,KAAK,IAAI,GAAG,EAAE,CAAA;IAC1B,CAAC;IAED,MAAM,CAAC,MAAc;QACnB,MAAM,OAAO,GAAG,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,CAAA;QACvC,IAAI,OAAO,KAAK,CAAC,CAAC;YAAE,OAAO,IAAI,CAAA;QAC/B,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,OAAO,CAAC,CAAA;QACtC,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,OAAO,GAAG,CAAC,CAAC,CAAA;QACrC,OAAO,UAAU,CAAC,KAAK,EAAE,GAAG,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAA;IAC5D,CAAC;IAED,OAAO,CAAC,KAAa;QACnB,MAAM,EAAE,GAAG,WAAW,CAAC,EAAE,CAAC,CAAA;QAC1B,MAAM,MAAM,GAAG,cAAc,CAAC,aAAa,EAAE,IAAI,CAAC,UAAU,EAAE,EAAE,CAAC,CAAA;QACjE,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAA;QAC/E,MAAM,GAAG,GAAG,MAAM,CAAC,UAAU,EAAE,CAAA;QAC/B,OAAO,GAAG,EAAE,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,SAAS,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAA;IACtG,CAAC;IAED,OAAO,CAAC,SAAiB;QACvB,MAAM,KAAK,GAAG,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;QAClC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,IAAI,CAAA;QACnC,IAAI,CAAC;YACH,MAAM,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,WAAW,CAAC,CAAA;YAC7C,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,WAAW,CAAC,CAAA;YAC/C,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,WAAW,CAAC,CAAA;YAC9C,MAAM,QAAQ,GAAG,gBAAgB,CAAC,aAAa,EAAE,IAAI,CAAC,UAAU,EAAE,EAAE,CAAC,CAAA;YACrE,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC,CAAA;YACxB,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAA;QAClF,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAA;QACb,CAAC;IACH,CAAC;CACF"}

package/dist/security/SignedUrl.d.ts

@@ -0,0 +1,17 @@
+/**
+ * Signed URLs — HMAC-SHA256 with expiration.
+ * Uses Rust NAPI via crypto facade when available.
+ */
+export interface SignedUrlConfig {
+    secret: string;
+}
+export declare class SignedUrl {
+    #private;
+    constructor(config: SignedUrlConfig);
+    make(path: string, options?: {
+        expiresIn?: string | number;
+        purpose?: string;
+    }): string;
+    verify(urlString: string, purpose?: string): boolean;
+}
+//# sourceMappingURL=SignedUrl.d.ts.map

package/dist/security/SignedUrl.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"SignedUrl.d.ts","sourceRoot":"","sources":["../../src/security/SignedUrl.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAIH,MAAM,WAAW,eAAe;IAC9B,MAAM,EAAE,MAAM,CAAA;CACf;AAED,qBAAa,SAAS;;gBAGR,MAAM,EAAE,eAAe;IAInC,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE;QAAE,SAAS,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,MAAM;IAqBvF,MAAM,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,OAAO;CAYrD"}