@geminixiang/mikan 1.0.0-beta.7 → 1.0.0-beta.71

package/dist/events/index.js

@@ -0,0 +1,340 @@
+import { Type } from "@sinclair/typebox";
+import { parseJsonSchemaValue } from "../file-guards.js";
+/**
+ * Single home for the scheduled-event file format (`events/*.json`, the
+ * workspace scheduling bus). Every reader and writer — the EventsWatcher
+ * scheduler and the agent `event` tool — must go
+ * through this module: one schema, one payload union, one parser, one
+ * builder. Per-type field rules (`at` for one-shot, `schedule` + `timezone`
+ * for periodic) live here and nowhere else.
+ */
+/** Typebox union for the `type` field, shared by the file schema and the event tool's parameters. */
+export const EventTypeSchema = Type.Union([
+    Type.Literal("immediate"),
+    Type.Literal("one-shot"),
+    Type.Literal("periodic"),
+]);
+/**
+ * Lenient file-reading schema: every field optional so shape problems surface
+ * as the specific missing-field messages below rather than typebox noise.
+ * `channelId` is the legacy alias for `conversationId`.
+ */
+const EventFileSchema = Type.Object({
+    type: Type.Optional(EventTypeSchema),
+    platform: Type.Optional(Type.String()),
+    conversationId: Type.Optional(Type.String()),
+    channelId: Type.Optional(Type.String()),
+    conversationKind: Type.Optional(Type.Union([Type.Literal("direct"), Type.Literal("shared")])),
+    userId: Type.Optional(Type.String()),
+    text: Type.Optional(Type.String()),
+    at: Type.Optional(Type.String()),
+    schedule: Type.Optional(Type.String()),
+    timezone: Type.Optional(Type.String()),
+});
+const ISO_TIMESTAMP_WITH_OFFSET = /^(\d{4})-(\d{2})-(\d{2})T(\d{2}):(\d{2})(?::(\d{2})(?:\.\d+)?)?(Z|[+-](\d{2}):(\d{2}))$/;
+function daysInMonth(year, month) {
+    if (month === 2) {
+        const leapYear = year % 4 === 0 && (year % 100 !== 0 || year % 400 === 0);
+        return leapYear ? 29 : 28;
+    }
+    return month === 4 || month === 6 || month === 9 || month === 11 ? 30 : 31;
+}
+/** True for a complete ISO 8601 timestamp that carries an explicit UTC offset. */
+/**
+ * Validate an untrusted event filename: a bare `*.json` basename with no
+ * path traversal. Every surface that touches the events bus by filename
+ * (the event tool's store, the admin portal's file endpoints) validates
+ * through this single rule.
+ */
+export function validateEventFilename(filename) {
+    const trimmed = filename.trim();
+    if (!trimmed ||
+        trimmed.includes("/") ||
+        trimmed.includes("\\") ||
+        trimmed.includes("..") ||
+        !trimmed.endsWith(".json")) {
+        throw new Error("Invalid event filename");
+    }
+    return trimmed;
+}
+function isValidIsoTimestampWithOffset(value) {
+    const match = ISO_TIMESTAMP_WITH_OFFSET.exec(value);
+    if (!match)
+        return false;
+    const year = Number(match[1]);
+    const month = Number(match[2]);
+    const day = Number(match[3]);
+    const hour = Number(match[4]);
+    const minute = Number(match[5]);
+    const second = match[6] === undefined ? 0 : Number(match[6]);
+    const offsetHour = match[8] === undefined ? 0 : Number(match[8]);
+    const offsetMinute = match[9] === undefined ? 0 : Number(match[9]);
+    return (month >= 1 &&
+        month <= 12 &&
+        day >= 1 &&
+        day <= daysInMonth(year, month) &&
+        hour >= 0 &&
+        hour <= 23 &&
+        minute >= 0 &&
+        minute <= 59 &&
+        second >= 0 &&
+        second <= 59 &&
+        offsetHour >= 0 &&
+        offsetHour <= 23 &&
+        offsetMinute >= 0 &&
+        offsetMinute <= 59 &&
+        Number.isFinite(Date.parse(value)));
+}
+/**
+ * Parse and validate one event file's content into the canonical payload.
+ * `filename` appears in error messages. Throws on malformed JSON, wrong
+ * field types, and missing required fields (common and per-type).
+ */
+export function parseEventPayload(content, filename) {
+    const data = parseJsonSchemaValue(content, EventFileSchema, (detail) => detail === "unexpected JSON shape"
+        ? `Expected top-level JSON object in ${filename}`
+        : `Malformed event file ${filename}: ${detail}`);
+    // `channelId` is the legacy alias; parsed payloads expose only the
+    // canonical `conversationId` field.
+    const conversationId = typeof data.conversationId === "string"
+        ? data.conversationId
+        : typeof data.channelId === "string"
+            ? data.channelId
+            : undefined;
+    const { type, text } = data;
+    if (!type || !conversationId || !text) {
+        throw new Error(`Missing required fields (type, conversationId, text) in ${filename}`);
+    }
+    const base = {
+        ...(data.platform !== undefined ? { platform: data.platform } : {}),
+        conversationId,
+        ...(data.conversationKind !== undefined ? { conversationKind: data.conversationKind } : {}),
+        ...(data.userId !== undefined ? { userId: data.userId } : {}),
+        text,
+    };
+    switch (type) {
+        case "immediate":
+            return { type, ...base };
+        case "one-shot":
+            if (typeof data.at !== "string" || data.at.length === 0) {
+                throw new Error(`Missing 'at' field for one-shot event in ${filename}`);
+            }
+            if (!isValidIsoTimestampWithOffset(data.at)) {
+                throw new Error(`Invalid 'at' field for one-shot event in ${filename}: expected a valid ISO 8601 timestamp with UTC offset`);
+            }
+            return { type, ...base, at: data.at };
+        case "periodic":
+            if (typeof data.schedule !== "string" || data.schedule.length === 0) {
+                throw new Error(`Missing 'schedule' field for periodic event in ${filename}`);
+            }
+            if (typeof data.timezone !== "string" || data.timezone.length === 0) {
+                throw new Error(`Missing 'timezone' field for periodic event in ${filename}`);
+            }
+            return { type, ...base, schedule: data.schedule, timezone: data.timezone };
+    }
+}
+/**
+ * Validate and assemble a new event payload for writing. Owns the per-type
+ * field rules; write-side *policy* beyond the format (e.g. the event tool's
+ * requirement that `at` lies in the future) stays with the writer.
+ */
+export function buildEventPayload(input) {
+    const base = {
+        ...(input.platform !== undefined ? { platform: input.platform } : {}),
+        conversationId: input.conversationId,
+        ...(input.conversationKind !== undefined ? { conversationKind: input.conversationKind } : {}),
+        ...(input.userId !== undefined ? { userId: input.userId } : {}),
+        text: input.text,
+    };
+    switch (input.type) {
+        case "immediate":
+            return { type: "immediate", ...base };
+        case "one-shot": {
+            if (!input.at) {
+                throw new Error("`at` is required for one-shot events");
+            }
+            if (!isValidIsoTimestampWithOffset(input.at)) {
+                throw new Error("`at` must be a valid ISO 8601 timestamp with UTC offset");
+            }
+            return { type: "one-shot", ...base, at: input.at };
+        }
+        case "periodic":
+            if (!input.schedule) {
+                throw new Error("`schedule` is required for periodic events");
+            }
+            if (!input.timezone) {
+                throw new Error("`timezone` is required for periodic events");
+            }
+            return { type: "periodic", ...base, schedule: input.schedule, timezone: input.timezone };
+    }
+}
+import { existsSync, mkdirSync, readdirSync, readFileSync, rmSync, statSync } from "node:fs";
+import { mkdir, readdir, readFile, rm, stat } from "node:fs/promises";
+import { join } from "node:path";
+import { atomicWritePrivateFile } from "../file-guards.js";
+import { createOfficeAddress, listRegisteredOffices, officeKey } from "../office/index.js";
+/** Host-only per-office events directory: `<office state dir>/events`. */
+export function officeEventsDir(office) {
+    return join(office.stateDir, "events");
+}
+export class OfficeEventStore {
+    constructor(office, scheduler) {
+        this.office = office;
+        this.scheduler = scheduler;
+        this.address = office.address;
+        this.eventsDir = officeEventsDir(office);
+    }
+    async create(filename, payload) {
+        const safeFilename = validateEventFilename(filename);
+        this.assertOwnPayload(payload);
+        const filePath = join(this.eventsDir, safeFilename);
+        if (existsSync(filePath)) {
+            throw new Error(`Event ${safeFilename} already exists`);
+        }
+        return this.writeRecord(safeFilename, payload);
+    }
+    async list() {
+        if (!existsSync(this.eventsDir))
+            return [];
+        const entries = await readdir(this.eventsDir, { withFileTypes: true });
+        const events = await Promise.all(entries
+            .filter((entry) => entry.isFile() && entry.name.endsWith(".json"))
+            .map(async (entry) => {
+            try {
+                return await this.read(entry.name);
+            }
+            catch {
+                try {
+                    const fileStat = await stat(join(this.eventsDir, entry.name));
+                    return {
+                        filename: entry.name,
+                        payload: null,
+                        size: fileStat.size,
+                        mtimeMs: fileStat.mtimeMs,
+                    };
+                }
+                catch {
+                    return null;
+                }
+            }
+        }));
+        return events
+            .filter((event) => event !== null)
+            .toSorted((a, b) => a.filename.localeCompare(b.filename));
+    }
+    async read(filename) {
+        const safeFilename = validateEventFilename(filename);
+        const filePath = join(this.eventsDir, safeFilename);
+        if (!existsSync(filePath)) {
+            throw new Error(`Event ${safeFilename} not found in the current office`);
+        }
+        const [raw, fileStat] = await Promise.all([readFile(filePath, "utf-8"), stat(filePath)]);
+        return {
+            filename: safeFilename,
+            payload: parseEventPayload(raw, safeFilename),
+            size: fileStat.size,
+            mtimeMs: fileStat.mtimeMs,
+        };
+    }
+    async update(filename, payload) {
+        const safeFilename = validateEventFilename(filename);
+        this.assertOwnPayload(payload);
+        if (!existsSync(join(this.eventsDir, safeFilename))) {
+            throw new Error(`Event ${safeFilename} not found in the current office`);
+        }
+        return this.writeRecord(safeFilename, payload);
+    }
+    async delete(filename) {
+        const safeFilename = validateEventFilename(filename);
+        const filePath = join(this.eventsDir, safeFilename);
+        if (!existsSync(filePath)) {
+            throw new Error(`Event ${safeFilename} not found in the current office`);
+        }
+        // Cancel before removing so no timer can fire for a record being deleted.
+        this.scheduler?.cancelRecord(this.address, safeFilename);
+        await rm(filePath, { force: true });
+        return { deleted: true };
+    }
+    assertOwnPayload(payload) {
+        if (payload.platform !== this.address.platform ||
+            payload.conversationId !== this.address.conversationId) {
+            throw new Error("Event payload must address the current office");
+        }
+    }
+    async writeRecord(safeFilename, payload) {
+        await mkdir(this.eventsDir, { recursive: true });
+        const filePath = join(this.eventsDir, safeFilename);
+        atomicWritePrivateFile(filePath, JSON.stringify(payload) + "\n");
+        const fileStat = await stat(filePath);
+        this.scheduler?.scheduleRecord(this.address, {
+            filename: safeFilename,
+            payload,
+            size: fileStat.size,
+            mtimeMs: fileStat.mtimeMs,
+        });
+        return { path: filePath, size: fileStat.size };
+    }
+}
+/**
+ * One-time move of legacy `<workspace>/events/*.json` records into the owning
+ * office's host-only state. Only records with an explicit platform matching a
+ * registered office move; everything else stays for an operator to inspect.
+ * Run with the daemon stopped.
+ */
+export function migrateLegacyWorkspaceEvents(workspace) {
+    const report = { migrated: [], skipped: [] };
+    const legacyDir = join(workspace.root, "events");
+    if (!existsSync(legacyDir))
+        return report;
+    const registered = new Set(listRegisteredOffices(workspace.stateDir).map((record) => officeKey(record)));
+    for (const filename of readdirSync(legacyDir).filter((name) => name.endsWith(".json"))) {
+        const source = join(legacyDir, filename);
+        if (!statSync(source).isFile())
+            continue;
+        let payload;
+        try {
+            payload = parseEventPayload(readFileSync(source, "utf-8"), filename);
+        }
+        catch (error) {
+            report.skipped.push({
+                filename,
+                reason: error instanceof Error ? error.message : String(error),
+            });
+            continue;
+        }
+        if (!payload.platform) {
+            report.skipped.push({ filename, reason: "no platform; owner cannot be attributed" });
+            continue;
+        }
+        let address;
+        try {
+            address = createOfficeAddress(payload.platform, payload.conversationId);
+        }
+        catch (error) {
+            report.skipped.push({
+                filename,
+                reason: error instanceof Error ? error.message : String(error),
+            });
+            continue;
+        }
+        const key = officeKey(address);
+        if (!registered.has(key)) {
+            report.skipped.push({ filename, reason: `office ${key} is not registered` });
+            continue;
+        }
+        const office = workspace.office(address);
+        const targetDir = officeEventsDir(office);
+        mkdirSync(targetDir, { recursive: true });
+        const target = join(targetDir, filename);
+        if (existsSync(target)) {
+            report.skipped.push({ filename, reason: `already exists in ${key}` });
+            continue;
+        }
+        // Rewrite instead of rename so the record gets host-private permissions.
+        atomicWritePrivateFile(target, JSON.stringify(payload) + "\n");
+        rmSync(source);
+        report.migrated.push({ filename, key });
+    }
+    return report;
+}
+//# sourceMappingURL=index.js.map

package/dist/events/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/events/index.ts"],"names":[],"mappings":"AA2GA,OAAO,EAAe,IAAI,EAAE,MAAM,mBAAmB,CAAC;AACtD,OAAO,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAC;AAEzD;;;;;;;GAOG;AAEH,qGAAqG;AACrG,MAAM,CAAC,MAAM,eAAe,GAAG,IAAI,CAAC,KAAK,CAAC;IACxC,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC;IACzB,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC;IACxB,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC;CACzB,CAAC,CAAC;AAEH;;;;GAIG;AACH,MAAM,eAAe,GAAG,IAAI,CAAC,MAAM,CAAC;IAClC,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,eAAe,CAAC;IACpC,QAAQ,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;IACtC,cAAc,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;IAC5C,SAAS,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;IACvC,gBAAgB,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;IAC7F,MAAM,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;IACpC,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;IAClC,EAAE,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;IAChC,QAAQ,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;IACtC,QAAQ,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;CACvC,CAAC,CAAC;AAIH,MAAM,yBAAyB,GAC7B,yFAAyF,CAAC;AAE5F,SAAS,WAAW,CAAC,IAAY,EAAE,KAAa;IAC9C,IAAI,KAAK,KAAK,CAAC,EAAE,CAAC;QAChB,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,GAAG,GAAG,KAAK,CAAC,IAAI,IAAI,GAAG,GAAG,KAAK,CAAC,CAAC,CAAC;QAC1E,OAAO,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IAC5B,CAAC;IACD,OAAO,KAAK,KAAK,CAAC,IAAI,KAAK,KAAK,CAAC,IAAI,KAAK,KAAK,CAAC,IAAI,KAAK,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;AAC7E,CAAC;AAED,kFAAkF;AAClF;;;;;GAKG;AACH,MAAM,UAAU,qBAAqB,CAAC,QAAgB;IACpD,MAAM,OAAO,GAAG,QAAQ,CAAC,IAAI,EAAE,CAAC;IAChC,IACE,CAAC,OAAO;QACR,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC;QACrB,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC;QACtB,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC;QACtB,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,EAC1B,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;IAC5C,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,6BAA6B,CAAC,KAAa;IAClD,MAAM,KAAK,GAAG,yBAAyB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACpD,IAAI,CAAC,KAAK;QAAE,OAAO,KAAK,CAAC;IAEzB,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAC9B,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAC/B,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAC7B,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAC9B,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAChC,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAC7D,MAAM,UAAU,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IACjE,MAAM,YAAY,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAEnE,OAAO,CACL,KAAK,IAAI,CAAC;QACV,KAAK,IAAI,EAAE;QACX,GAAG,IAAI,CAAC;QACR,GAAG,IAAI,WAAW,CAAC,IAAI,EAAE,KAAK,CAAC;QAC/B,IAAI,IAAI,CAAC;QACT,IAAI,IAAI,EAAE;QACV,MAAM,IAAI,CAAC;QACX,MAAM,IAAI,EAAE;QACZ,MAAM,IAAI,CAAC;QACX,MAAM,IAAI,EAAE;QACZ,UAAU,IAAI,CAAC;QACf,UAAU,IAAI,EAAE;QAChB,YAAY,IAAI,CAAC;QACjB,YAAY,IAAI,EAAE;QAClB,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CACnC,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,iBAAiB,CAAC,OAAe,EAAE,QAAgB;IACjE,MAAM,IAAI,GAAkB,oBAAoB,CAAC,OAAO,EAAE,eAAe,EAAE,CAAC,MAAM,EAAE,EAAE,CACpF,MAAM,KAAK,uBAAuB;QAChC,CAAC,CAAC,qCAAqC,QAAQ,EAAE;QACjD,CAAC,CAAC,wBAAwB,QAAQ,KAAK,MAAM,EAAE,CAClD,CAAC;IACF,mEAAmE;IACnE,oCAAoC;IACpC,MAAM,cAAc,GAClB,OAAO,IAAI,CAAC,cAAc,KAAK,QAAQ;QACrC,CAAC,CAAC,IAAI,CAAC,cAAc;QACrB,CAAC,CAAC,OAAO,IAAI,CAAC,SAAS,KAAK,QAAQ;YAClC,CAAC,CAAC,IAAI,CAAC,SAAS;YAChB,CAAC,CAAC,SAAS,CAAC;IAClB,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC;IAE5B,IAAI,CAAC,IAAI,IAAI,CAAC,cAAc,IAAI,CAAC,IAAI,EAAE,CAAC;QACtC,MAAM,IAAI,KAAK,CAAC,2DAA2D,QAAQ,EAAE,CAAC,CAAC;IACzF,CAAC;IAED,MAAM,IAAI,GAAG;QACX,GAAG,CAAC,IAAI,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACnE,cAAc;QACd,GAAG,CAAC,IAAI,CAAC,gBAAgB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,IAAI,CAAC,gBAAgB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3F,GAAG,CAAC,IAAI,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7D,IAAI;KACL,CAAC;IAEF,QAAQ,IAAI,EAAE,CAAC;QACb,KAAK,WAAW;YACd,OAAO,EAAE,IAAI,EAAE,GAAG,IAAI,EAAE,CAAC;QAE3B,KAAK,UAAU;YACb,IAAI,OAAO,IAAI,CAAC,EAAE,KAAK,QAAQ,IAAI,IAAI,CAAC,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACxD,MAAM,IAAI,KAAK,CAAC,4CAA4C,QAAQ,EAAE,CAAC,CAAC;YAC1E,CAAC;YACD,IAAI,CAAC,6BAA6B,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC;gBAC5C,MAAM,IAAI,KAAK,CACb,4CAA4C,QAAQ,uDAAuD,CAC5G,CAAC;YACJ,CAAC;YACD,OAAO,EAAE,IAAI,EAAE,GAAG,IAAI,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC;QAExC,KAAK,UAAU;YACb,IAAI,OAAO,IAAI,CAAC,QAAQ,KAAK,QAAQ,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACpE,MAAM,IAAI,KAAK,CAAC,kDAAkD,QAAQ,EAAE,CAAC,CAAC;YAChF,CAAC;YACD,IAAI,OAAO,IAAI,CAAC,QAAQ,KAAK,QAAQ,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACpE,MAAM,IAAI,KAAK,CAAC,kDAAkD,QAAQ,EAAE,CAAC,CAAC;YAChF,CAAC;YACD,OAAO,EAAE,IAAI,EAAE,GAAG,IAAI,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC;IAC/E,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,iBAAiB,CAAC,KAAwB;IACxD,MAAM,IAAI,GAAG;QACX,GAAG,CAAC,KAAK,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACrE,cAAc,EAAE,KAAK,CAAC,cAAc;QACpC,GAAG,CAAC,KAAK,CAAC,gBAAgB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,KAAK,CAAC,gBAAgB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7F,GAAG,CAAC,KAAK,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/D,IAAI,EAAE,KAAK,CAAC,IAAI;KACjB,CAAC;IAEF,QAAQ,KAAK,CAAC,IAAI,EAAE,CAAC;QACnB,KAAK,WAAW;YACd,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,GAAG,IAAI,EAAE,CAAC;QAExC,KAAK,UAAU,EAAE,CAAC;YAChB,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC;gBACd,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;YAC1D,CAAC;YACD,IAAI,CAAC,6BAA6B,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,CAAC;gBAC7C,MAAM,IAAI,KAAK,CAAC,yDAAyD,CAAC,CAAC;YAC7E,CAAC;YACD,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,GAAG,IAAI,EAAE,EAAE,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC;QACrD,CAAC;QAED,KAAK,UAAU;YACb,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC;gBACpB,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;YAChE,CAAC;YACD,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC;gBACpB,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;YAChE,CAAC;YACD,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,GAAG,IAAI,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,CAAC;IAC7F,CAAC;AACH,CAAC;AAED,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAC7F,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AACtE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,sBAAsB,EAAE,MAAM,mBAAmB,CAAC;AAE3D,OAAO,EAAE,mBAAmB,EAAE,qBAAqB,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAE3F,0EAA0E;AAC1E,MAAM,UAAU,eAAe,CAAC,MAAc;IAC5C,OAAO,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;AACzC,CAAC;AAED,MAAM,OAAO,gBAAgB;IAI3B,YACmB,MAAc,EACd,SAA6B;sBAD7B,MAAM;yBACN,SAAS;QAE1B,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC;QAC9B,IAAI,CAAC,SAAS,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC;IAC3C,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,QAAgB,EAAE,OAAqB;QAClD,MAAM,YAAY,GAAG,qBAAqB,CAAC,QAAQ,CAAC,CAAC;QACrD,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC;QAC/B,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC;QACpD,IAAI,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;YACzB,MAAM,IAAI,KAAK,CAAC,SAAS,YAAY,iBAAiB,CAAC,CAAC;QAC1D,CAAC;QACD,OAAO,IAAI,CAAC,WAAW,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC;IACjD,CAAC;IAED,KAAK,CAAC,IAAI;QACR,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC;YAAE,OAAO,EAAE,CAAC;QAC3C,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,SAAS,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;QACvE,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,GAAG,CAC9B,OAAO;aACJ,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,EAAE,IAAI,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;aACjE,GAAG,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE;YACnB,IAAI,CAAC;gBACH,OAAO,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YACrC,CAAC;YAAC,MAAM,CAAC;gBACP,IAAI,CAAC;oBACH,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;oBAC9D,OAAO;wBACL,QAAQ,EAAE,KAAK,CAAC,IAAI;wBACpB,OAAO,EAAE,IAAI;wBACb,IAAI,EAAE,QAAQ,CAAC,IAAI;wBACnB,OAAO,EAAE,QAAQ,CAAC,OAAO;qBAC1B,CAAC;gBACJ,CAAC;gBAAC,MAAM,CAAC;oBACP,OAAO,IAAI,CAAC;gBACd,CAAC;YACH,CAAC;QACH,CAAC,CAAC,CACL,CAAC;QACF,OAAO,MAAM;aACV,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,KAAK,IAAI,CAAC;aACjC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC;IAC9D,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,QAAgB;QACzB,MAAM,YAAY,GAAG,qBAAqB,CAAC,QAAQ,CAAC,CAAC;QACrD,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC;QACpD,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC1B,MAAM,IAAI,KAAK,CAAC,SAAS,YAAY,kCAAkC,CAAC,CAAC;QAC3E,CAAC;QACD,MAAM,CAAC,GAAG,EAAE,QAAQ,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;QACzF,OAAO;YACL,QAAQ,EAAE,YAAY;YACtB,OAAO,EAAE,iBAAiB,CAAC,GAAG,EAAE,YAAY,CAAC;YAC7C,IAAI,EAAE,QAAQ,CAAC,IAAI;YACnB,OAAO,EAAE,QAAQ,CAAC,OAAO;SAC1B,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,QAAgB,EAAE,OAAqB;QAClD,MAAM,YAAY,GAAG,qBAAqB,CAAC,QAAQ,CAAC,CAAC;QACrD,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC;QAC/B,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC,EAAE,CAAC;YACpD,MAAM,IAAI,KAAK,CAAC,SAAS,YAAY,kCAAkC,CAAC,CAAC;QAC3E,CAAC;QACD,OAAO,IAAI,CAAC,WAAW,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC;IACjD,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,QAAgB;QAC3B,MAAM,YAAY,GAAG,qBAAqB,CAAC,QAAQ,CAAC,CAAC;QACrD,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC;QACpD,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC1B,MAAM,IAAI,KAAK,CAAC,SAAS,YAAY,kCAAkC,CAAC,CAAC;QAC3E,CAAC;QACD,0EAA0E;QAC1E,IAAI,CAAC,SAAS,EAAE,YAAY,CAAC,IAAI,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;QACzD,MAAM,EAAE,CAAC,QAAQ,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACpC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC3B,CAAC;IAEO,gBAAgB,CAAC,OAAqB;QAC5C,IACE,OAAO,CAAC,QAAQ,KAAK,IAAI,CAAC,OAAO,CAAC,QAAQ;YAC1C,OAAO,CAAC,cAAc,KAAK,IAAI,CAAC,OAAO,CAAC,cAAc,EACtD,CAAC;YACD,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;QACnE,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,WAAW,CACvB,YAAoB,EACpB,OAAqB;QAErB,MAAM,KAAK,CAAC,IAAI,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACjD,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC;QACpD,sBAAsB,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,GAAG,IAAI,CAAC,CAAC;QACjE,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,CAAC;QACtC,IAAI,CAAC,SAAS,EAAE,cAAc,CAAC,IAAI,CAAC,OAAO,EAAE;YAC3C,QAAQ,EAAE,YAAY;YACtB,OAAO;YACP,IAAI,EAAE,QAAQ,CAAC,IAAI;YACnB,OAAO,EAAE,QAAQ,CAAC,OAAO;SAC1B,CAAC,CAAC;QACH,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC;IACjD,CAAC;CACF;AAOD;;;;;GAKG;AACH,MAAM,UAAU,4BAA4B,CAAC,SAAoB;IAC/D,MAAM,MAAM,GAA+B,EAAE,QAAQ,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;IACzE,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IACjD,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC;QAAE,OAAO,MAAM,CAAC;IAC1C,MAAM,UAAU,GAAG,IAAI,GAAG,CACxB,qBAAqB,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAC7E,CAAC;IACF,KAAK,MAAM,QAAQ,IAAI,WAAW,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC;QACvF,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;QACzC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE;YAAE,SAAS;QACzC,IAAI,OAAyB,CAAC;QAC9B,IAAI,CAAC;YACH,OAAO,GAAG,iBAAiB,CAAC,YAAY,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,QAAQ,CAAC,CAAC;QACvE,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC;gBAClB,QAAQ;gBACR,MAAM,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;aAC/D,CAAC,CAAC;YACH,SAAS;QACX,CAAC;QACD,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC;YACtB,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,yCAAyC,EAAE,CAAC,CAAC;YACrF,SAAS;QACX,CAAC;QACD,IAAI,OAAsB,CAAC;QAC3B,IAAI,CAAC;YACH,OAAO,GAAG,mBAAmB,CAC3B,OAAO,CAAC,QAAqC,EAC7C,OAAO,CAAC,cAAc,CACvB,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC;gBAClB,QAAQ;gBACR,MAAM,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;aAC/D,CAAC,CAAC;YACH,SAAS;QACX,CAAC;QACD,MAAM,GAAG,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC;QAC/B,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YACzB,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,UAAU,GAAG,oBAAoB,EAAE,CAAC,CAAC;YAC7E,SAAS;QACX,CAAC;QACD,MAAM,MAAM,GAAG,SAAS,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QACzC,MAAM,SAAS,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC;QAC1C,SAAS,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC1C,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;QACzC,IAAI,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;YACvB,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,qBAAqB,GAAG,EAAE,EAAE,CAAC,CAAC;YACtE,SAAS;QACX,CAAC;QACD,yEAAyE;QACzE,sBAAsB,CAAC,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,GAAG,IAAI,CAAC,CAAC;QAC/D,MAAM,CAAC,MAAM,CAAC,CAAC;QACf,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC,CAAC;IAC1C,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC","sourcesContent":["import type { OfficeAddress, OfficeKey } from \"../types.js\";\n\nexport type EventPayload = EventFilePayload;\n\nexport interface EventRecord {\n  filename: string;\n  payload: EventFilePayload;\n  size: number;\n  mtimeMs: number;\n}\n\n/**\n * One office's admitted scheduled work. Every method is confined to that\n * office: filenames of other offices read as \"not found\", and payloads must\n * address the store's own office.\n */\nexport interface EventStore {\n  readonly address: OfficeAddress;\n  /** Create a new record; an existing filename is an error, never overwritten. */\n  create(filename: string, payload: EventFilePayload): Promise<{ path: string; size: number }>;\n  /**\n   * List this office's records. Entries whose JSON cannot be parsed or fail\n   * format validation are kept with a `null` payload so operators can still\n   * surface and delete them; files that disappear mid-listing are skipped.\n   */\n  list(): Promise<Array<Omit<EventRecord, \"payload\"> & { payload: EventFilePayload | null }>>;\n  read(filename: string): Promise<EventRecord>;\n  update(filename: string, payload: EventFilePayload): Promise<{ path: string; size: number }>;\n  delete(filename: string): Promise<{ deleted: boolean }>;\n}\n\n/** Scheduler hooks the store calls after each admitted mutation. */\nexport interface EventScheduleSink {\n  scheduleRecord(address: OfficeAddress, record: EventRecord): void;\n  cancelRecord(address: OfficeAddress, filename: string): void;\n}\n\nexport type EventConversationKind = \"direct\" | \"shared\";\n\nexport type EventType = \"immediate\" | \"one-shot\" | \"periodic\";\n\ninterface EventPayloadBase {\n  /** Target platform; may be omitted when only one platform is running. */\n  platform?: string;\n  conversationId: string;\n  conversationKind?: EventConversationKind;\n  userId?: string;\n  /** Self-contained task text; event runs do not inherit conversation history. */\n  text: string;\n}\n\nexport interface ImmediateEventPayload extends EventPayloadBase {\n  type: \"immediate\";\n}\n\nexport interface OneShotEventPayload extends EventPayloadBase {\n  type: \"one-shot\";\n  /** ISO 8601 timestamp with offset. */\n  at: string;\n}\n\nexport interface PeriodicEventPayload extends EventPayloadBase {\n  type: \"periodic\";\n  /** Cron expression (croner syntax). */\n  schedule: string;\n  /** IANA timezone, e.g. \"Asia/Taipei\". */\n  timezone: string;\n}\n\n/** Wire shape of one event file. */\nexport type EventFilePayload = ImmediateEventPayload | OneShotEventPayload | PeriodicEventPayload;\n\nexport interface EventPayloadInput {\n  type: EventType;\n  platform?: string;\n  conversationId: string;\n  conversationKind?: EventConversationKind;\n  userId?: string;\n  text: string;\n  at?: string;\n  schedule?: string;\n  timezone?: string;\n}\n\n// Resolved runtime shapes: the watcher fills in the platform default and\n// infers the conversation kind before an event reaches a bot.\ninterface ResolvedEventFields {\n  platform: string;\n  conversationKind: EventConversationKind;\n}\n\nexport type MikanEvent =\n  | (ImmediateEventPayload & ResolvedEventFields)\n  | (OneShotEventPayload & ResolvedEventFields)\n  | (PeriodicEventPayload & ResolvedEventFields);\n\nexport interface PeriodicEventInfo {\n  filename: string;\n  platform: string;\n  conversationId: string;\n  conversationKind: EventConversationKind;\n  text: string;\n  schedule: string;\n  timezone: string;\n  nextRun: string | null;\n}\n\nimport { type Static, Type } from \"@sinclair/typebox\";\nimport { parseJsonSchemaValue } from \"../file-guards.js\";\n\n/**\n * Single home for the scheduled-event file format (`events/*.json`, the\n * workspace scheduling bus). Every reader and writer — the EventsWatcher\n * scheduler and the agent `event` tool — must go\n * through this module: one schema, one payload union, one parser, one\n * builder. Per-type field rules (`at` for one-shot, `schedule` + `timezone`\n * for periodic) live here and nowhere else.\n */\n\n/** Typebox union for the `type` field, shared by the file schema and the event tool's parameters. */\nexport const EventTypeSchema = Type.Union([\n  Type.Literal(\"immediate\"),\n  Type.Literal(\"one-shot\"),\n  Type.Literal(\"periodic\"),\n]);\n\n/**\n * Lenient file-reading schema: every field optional so shape problems surface\n * as the specific missing-field messages below rather than typebox noise.\n * `channelId` is the legacy alias for `conversationId`.\n */\nconst EventFileSchema = Type.Object({\n  type: Type.Optional(EventTypeSchema),\n  platform: Type.Optional(Type.String()),\n  conversationId: Type.Optional(Type.String()),\n  channelId: Type.Optional(Type.String()),\n  conversationKind: Type.Optional(Type.Union([Type.Literal(\"direct\"), Type.Literal(\"shared\")])),\n  userId: Type.Optional(Type.String()),\n  text: Type.Optional(Type.String()),\n  at: Type.Optional(Type.String()),\n  schedule: Type.Optional(Type.String()),\n  timezone: Type.Optional(Type.String()),\n});\n\ntype EventFileData = Static<typeof EventFileSchema>;\n\nconst ISO_TIMESTAMP_WITH_OFFSET =\n  /^(\\d{4})-(\\d{2})-(\\d{2})T(\\d{2}):(\\d{2})(?::(\\d{2})(?:\\.\\d+)?)?(Z|[+-](\\d{2}):(\\d{2}))$/;\n\nfunction daysInMonth(year: number, month: number): number {\n  if (month === 2) {\n    const leapYear = year % 4 === 0 && (year % 100 !== 0 || year % 400 === 0);\n    return leapYear ? 29 : 28;\n  }\n  return month === 4 || month === 6 || month === 9 || month === 11 ? 30 : 31;\n}\n\n/** True for a complete ISO 8601 timestamp that carries an explicit UTC offset. */\n/**\n * Validate an untrusted event filename: a bare `*.json` basename with no\n * path traversal. Every surface that touches the events bus by filename\n * (the event tool's store, the admin portal's file endpoints) validates\n * through this single rule.\n */\nexport function validateEventFilename(filename: string): string {\n  const trimmed = filename.trim();\n  if (\n    !trimmed ||\n    trimmed.includes(\"/\") ||\n    trimmed.includes(\"\\\\\") ||\n    trimmed.includes(\"..\") ||\n    !trimmed.endsWith(\".json\")\n  ) {\n    throw new Error(\"Invalid event filename\");\n  }\n  return trimmed;\n}\n\nfunction isValidIsoTimestampWithOffset(value: string): boolean {\n  const match = ISO_TIMESTAMP_WITH_OFFSET.exec(value);\n  if (!match) return false;\n\n  const year = Number(match[1]);\n  const month = Number(match[2]);\n  const day = Number(match[3]);\n  const hour = Number(match[4]);\n  const minute = Number(match[5]);\n  const second = match[6] === undefined ? 0 : Number(match[6]);\n  const offsetHour = match[8] === undefined ? 0 : Number(match[8]);\n  const offsetMinute = match[9] === undefined ? 0 : Number(match[9]);\n\n  return (\n    month >= 1 &&\n    month <= 12 &&\n    day >= 1 &&\n    day <= daysInMonth(year, month) &&\n    hour >= 0 &&\n    hour <= 23 &&\n    minute >= 0 &&\n    minute <= 59 &&\n    second >= 0 &&\n    second <= 59 &&\n    offsetHour >= 0 &&\n    offsetHour <= 23 &&\n    offsetMinute >= 0 &&\n    offsetMinute <= 59 &&\n    Number.isFinite(Date.parse(value))\n  );\n}\n\n/**\n * Parse and validate one event file's content into the canonical payload.\n * `filename` appears in error messages. Throws on malformed JSON, wrong\n * field types, and missing required fields (common and per-type).\n */\nexport function parseEventPayload(content: string, filename: string): EventFilePayload {\n  const data: EventFileData = parseJsonSchemaValue(content, EventFileSchema, (detail) =>\n    detail === \"unexpected JSON shape\"\n      ? `Expected top-level JSON object in ${filename}`\n      : `Malformed event file ${filename}: ${detail}`,\n  );\n  // `channelId` is the legacy alias; parsed payloads expose only the\n  // canonical `conversationId` field.\n  const conversationId =\n    typeof data.conversationId === \"string\"\n      ? data.conversationId\n      : typeof data.channelId === \"string\"\n        ? data.channelId\n        : undefined;\n  const { type, text } = data;\n\n  if (!type || !conversationId || !text) {\n    throw new Error(`Missing required fields (type, conversationId, text) in ${filename}`);\n  }\n\n  const base = {\n    ...(data.platform !== undefined ? { platform: data.platform } : {}),\n    conversationId,\n    ...(data.conversationKind !== undefined ? { conversationKind: data.conversationKind } : {}),\n    ...(data.userId !== undefined ? { userId: data.userId } : {}),\n    text,\n  };\n\n  switch (type) {\n    case \"immediate\":\n      return { type, ...base };\n\n    case \"one-shot\":\n      if (typeof data.at !== \"string\" || data.at.length === 0) {\n        throw new Error(`Missing 'at' field for one-shot event in ${filename}`);\n      }\n      if (!isValidIsoTimestampWithOffset(data.at)) {\n        throw new Error(\n          `Invalid 'at' field for one-shot event in ${filename}: expected a valid ISO 8601 timestamp with UTC offset`,\n        );\n      }\n      return { type, ...base, at: data.at };\n\n    case \"periodic\":\n      if (typeof data.schedule !== \"string\" || data.schedule.length === 0) {\n        throw new Error(`Missing 'schedule' field for periodic event in ${filename}`);\n      }\n      if (typeof data.timezone !== \"string\" || data.timezone.length === 0) {\n        throw new Error(`Missing 'timezone' field for periodic event in ${filename}`);\n      }\n      return { type, ...base, schedule: data.schedule, timezone: data.timezone };\n  }\n}\n\n/**\n * Validate and assemble a new event payload for writing. Owns the per-type\n * field rules; write-side *policy* beyond the format (e.g. the event tool's\n * requirement that `at` lies in the future) stays with the writer.\n */\nexport function buildEventPayload(input: EventPayloadInput): EventFilePayload {\n  const base = {\n    ...(input.platform !== undefined ? { platform: input.platform } : {}),\n    conversationId: input.conversationId,\n    ...(input.conversationKind !== undefined ? { conversationKind: input.conversationKind } : {}),\n    ...(input.userId !== undefined ? { userId: input.userId } : {}),\n    text: input.text,\n  };\n\n  switch (input.type) {\n    case \"immediate\":\n      return { type: \"immediate\", ...base };\n\n    case \"one-shot\": {\n      if (!input.at) {\n        throw new Error(\"`at` is required for one-shot events\");\n      }\n      if (!isValidIsoTimestampWithOffset(input.at)) {\n        throw new Error(\"`at` must be a valid ISO 8601 timestamp with UTC offset\");\n      }\n      return { type: \"one-shot\", ...base, at: input.at };\n    }\n\n    case \"periodic\":\n      if (!input.schedule) {\n        throw new Error(\"`schedule` is required for periodic events\");\n      }\n      if (!input.timezone) {\n        throw new Error(\"`timezone` is required for periodic events\");\n      }\n      return { type: \"periodic\", ...base, schedule: input.schedule, timezone: input.timezone };\n  }\n}\n\nimport { existsSync, mkdirSync, readdirSync, readFileSync, rmSync, statSync } from \"node:fs\";\nimport { mkdir, readdir, readFile, rm, stat } from \"node:fs/promises\";\nimport { join } from \"node:path\";\nimport { atomicWritePrivateFile } from \"../file-guards.js\";\nimport type { Office, Workspace } from \"../office/index.js\";\nimport { createOfficeAddress, listRegisteredOffices, officeKey } from \"../office/index.js\";\n\n/** Host-only per-office events directory: `<office state dir>/events`. */\nexport function officeEventsDir(office: Office): string {\n  return join(office.stateDir, \"events\");\n}\n\nexport class OfficeEventStore implements EventStore {\n  readonly address: OfficeAddress;\n  private readonly eventsDir: string;\n\n  constructor(\n    private readonly office: Office,\n    private readonly scheduler?: EventScheduleSink,\n  ) {\n    this.address = office.address;\n    this.eventsDir = officeEventsDir(office);\n  }\n\n  async create(filename: string, payload: EventPayload): Promise<{ path: string; size: number }> {\n    const safeFilename = validateEventFilename(filename);\n    this.assertOwnPayload(payload);\n    const filePath = join(this.eventsDir, safeFilename);\n    if (existsSync(filePath)) {\n      throw new Error(`Event ${safeFilename} already exists`);\n    }\n    return this.writeRecord(safeFilename, payload);\n  }\n\n  async list(): Promise<Array<Omit<EventRecord, \"payload\"> & { payload: EventPayload | null }>> {\n    if (!existsSync(this.eventsDir)) return [];\n    const entries = await readdir(this.eventsDir, { withFileTypes: true });\n    const events = await Promise.all(\n      entries\n        .filter((entry) => entry.isFile() && entry.name.endsWith(\".json\"))\n        .map(async (entry) => {\n          try {\n            return await this.read(entry.name);\n          } catch {\n            try {\n              const fileStat = await stat(join(this.eventsDir, entry.name));\n              return {\n                filename: entry.name,\n                payload: null,\n                size: fileStat.size,\n                mtimeMs: fileStat.mtimeMs,\n              };\n            } catch {\n              return null;\n            }\n          }\n        }),\n    );\n    return events\n      .filter((event) => event !== null)\n      .toSorted((a, b) => a.filename.localeCompare(b.filename));\n  }\n\n  async read(filename: string): Promise<EventRecord> {\n    const safeFilename = validateEventFilename(filename);\n    const filePath = join(this.eventsDir, safeFilename);\n    if (!existsSync(filePath)) {\n      throw new Error(`Event ${safeFilename} not found in the current office`);\n    }\n    const [raw, fileStat] = await Promise.all([readFile(filePath, \"utf-8\"), stat(filePath)]);\n    return {\n      filename: safeFilename,\n      payload: parseEventPayload(raw, safeFilename),\n      size: fileStat.size,\n      mtimeMs: fileStat.mtimeMs,\n    };\n  }\n\n  async update(filename: string, payload: EventPayload): Promise<{ path: string; size: number }> {\n    const safeFilename = validateEventFilename(filename);\n    this.assertOwnPayload(payload);\n    if (!existsSync(join(this.eventsDir, safeFilename))) {\n      throw new Error(`Event ${safeFilename} not found in the current office`);\n    }\n    return this.writeRecord(safeFilename, payload);\n  }\n\n  async delete(filename: string): Promise<{ deleted: boolean }> {\n    const safeFilename = validateEventFilename(filename);\n    const filePath = join(this.eventsDir, safeFilename);\n    if (!existsSync(filePath)) {\n      throw new Error(`Event ${safeFilename} not found in the current office`);\n    }\n    // Cancel before removing so no timer can fire for a record being deleted.\n    this.scheduler?.cancelRecord(this.address, safeFilename);\n    await rm(filePath, { force: true });\n    return { deleted: true };\n  }\n\n  private assertOwnPayload(payload: EventPayload): void {\n    if (\n      payload.platform !== this.address.platform ||\n      payload.conversationId !== this.address.conversationId\n    ) {\n      throw new Error(\"Event payload must address the current office\");\n    }\n  }\n\n  private async writeRecord(\n    safeFilename: string,\n    payload: EventPayload,\n  ): Promise<{ path: string; size: number }> {\n    await mkdir(this.eventsDir, { recursive: true });\n    const filePath = join(this.eventsDir, safeFilename);\n    atomicWritePrivateFile(filePath, JSON.stringify(payload) + \"\\n\");\n    const fileStat = await stat(filePath);\n    this.scheduler?.scheduleRecord(this.address, {\n      filename: safeFilename,\n      payload,\n      size: fileStat.size,\n      mtimeMs: fileStat.mtimeMs,\n    });\n    return { path: filePath, size: fileStat.size };\n  }\n}\n\nexport interface LegacyEventMigrationReport {\n  migrated: { filename: string; key: OfficeKey }[];\n  skipped: { filename: string; reason: string }[];\n}\n\n/**\n * One-time move of legacy `<workspace>/events/*.json` records into the owning\n * office's host-only state. Only records with an explicit platform matching a\n * registered office move; everything else stays for an operator to inspect.\n * Run with the daemon stopped.\n */\nexport function migrateLegacyWorkspaceEvents(workspace: Workspace): LegacyEventMigrationReport {\n  const report: LegacyEventMigrationReport = { migrated: [], skipped: [] };\n  const legacyDir = join(workspace.root, \"events\");\n  if (!existsSync(legacyDir)) return report;\n  const registered = new Set(\n    listRegisteredOffices(workspace.stateDir).map((record) => officeKey(record)),\n  );\n  for (const filename of readdirSync(legacyDir).filter((name) => name.endsWith(\".json\"))) {\n    const source = join(legacyDir, filename);\n    if (!statSync(source).isFile()) continue;\n    let payload: EventFilePayload;\n    try {\n      payload = parseEventPayload(readFileSync(source, \"utf-8\"), filename);\n    } catch (error) {\n      report.skipped.push({\n        filename,\n        reason: error instanceof Error ? error.message : String(error),\n      });\n      continue;\n    }\n    if (!payload.platform) {\n      report.skipped.push({ filename, reason: \"no platform; owner cannot be attributed\" });\n      continue;\n    }\n    let address: OfficeAddress;\n    try {\n      address = createOfficeAddress(\n        payload.platform as OfficeAddress[\"platform\"],\n        payload.conversationId,\n      );\n    } catch (error) {\n      report.skipped.push({\n        filename,\n        reason: error instanceof Error ? error.message : String(error),\n      });\n      continue;\n    }\n    const key = officeKey(address);\n    if (!registered.has(key)) {\n      report.skipped.push({ filename, reason: `office ${key} is not registered` });\n      continue;\n    }\n    const office = workspace.office(address);\n    const targetDir = officeEventsDir(office);\n    mkdirSync(targetDir, { recursive: true });\n    const target = join(targetDir, filename);\n    if (existsSync(target)) {\n      report.skipped.push({ filename, reason: `already exists in ${key}` });\n      continue;\n    }\n    // Rewrite instead of rename so the record gets host-private permissions.\n    atomicWritePrivateFile(target, JSON.stringify(payload) + \"\\n\");\n    rmSync(source);\n    report.migrated.push({ filename, key });\n  }\n  return report;\n}\n"]}

package/dist/events/scheduler.d.ts

@@ -0,0 +1,34 @@
+import type { MessagingBot } from "../types.js";
+import { type Workspace } from "../office/index.js";
+import type { OfficeAddress } from "../types.js";
+import { type EventRecord, type EventScheduleSink, type MikanEvent, type PeriodicEventInfo } from "./index.js";
+export type { MikanEvent, PeriodicEventInfo } from "./index.js";
+/**
+ * In-memory timer/cron owner for every office's admitted events. Records are
+ * loaded once from each registered office's host-only events directory at
+ * start; afterwards the only inputs are {@link OfficeEventStore} mutations
+ * through {@link EventScheduleSink}. There is no filesystem watcher: files
+ * edited by hand take effect on the next start.
+ */
+export declare class EventScheduler implements EventScheduleSink {
+    private readonly workspace;
+    private readonly botsByPlatform;
+    private readonly scheduled;
+    private startTime;
+    constructor(workspace: Workspace, botsByPlatform: Record<string, MessagingBot>);
+    start(): void;
+    stop(): void;
+    scheduledCount(): number;
+    /** Active periodic events of one office with their next run. */
+    periodicEvents(address: OfficeAddress): PeriodicEventInfo[];
+    scheduleRecord(address: OfficeAddress, record: EventRecord): void;
+    cancelRecord(address: OfficeAddress, filename: string): void;
+    private key;
+    private cancelKey;
+    private resolve;
+    private execute;
+    private reportFailure;
+    private removeFile;
+}
+export declare function buildEventPrompt(event: MikanEvent): string;
+//# sourceMappingURL=scheduler.d.ts.map

package/dist/events/scheduler.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"scheduler.d.ts","sourceRoot":"","sources":["../../src/events/scheduler.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAoB,YAAY,EAAgB,MAAM,aAAa,CAAC;AAEhF,OAAO,EAAoC,KAAK,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAGtF,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AACjD,OAAO,EAGL,KAAK,WAAW,EAChB,KAAK,iBAAiB,EACtB,KAAK,UAAU,EACf,KAAK,iBAAiB,EACvB,MAAM,YAAY,CAAC;AAEpB,YAAY,EAAE,UAAU,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAUhE;;;;;;GAMG;AACH,qBAAa,cAAe,YAAW,iBAAiB;IAKpD,OAAO,CAAC,QAAQ,CAAC,SAAS;IAC1B,OAAO,CAAC,QAAQ,CAAC,cAAc;IALjC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAgC;IAC1D,OAAO,CAAC,SAAS,CAAc;IAE/B,YACmB,SAAS,EAAE,SAAS,EACpB,cAAc,EAAE,MAAM,CAAC,MAAM,EAAE,YAAY,CAAC,EAC3D;IAEJ,KAAK,IAAI,IAAI,CAuBZ;IAED,IAAI,IAAI,IAAI,CAOX;IAED,cAAc,IAAI,MAAM,CAEvB;IAED,gEAAgE;IAChE,cAAc,CAAC,OAAO,EAAE,aAAa,GAAG,iBAAiB,EAAE,CAiB1D;IAED,cAAc,CAAC,OAAO,EAAE,aAAa,EAAE,MAAM,EAAE,WAAW,GAAG,IAAI,CA6ChE;IAED,YAAY,CAAC,OAAO,EAAE,aAAa,EAAE,QAAQ,EAAE,MAAM,GAAG,IAAI,CAE3D;IAED,OAAO,CAAC,GAAG;IAIX,OAAO,CAAC,SAAS;IAQjB,OAAO,CAAC,OAAO;IAcf,OAAO,CAAC,OAAO;IA0Bf,OAAO,CAAC,aAAa;IAyBrB,OAAO,CAAC,UAAU;CAUnB;AAED,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,UAAU,GAAG,MAAM,CAwB1D"}