@jungjaehoon/mama-os 0.53.1 → 0.57.0

package/dist/api/report-persistence.js

@@ -2,9 +2,9 @@
 /**
  * ReportStore implementation that survives daemon restarts.
  *
- * Seeds the shared store with saved slots so their original updatedAt and
- * analysis basis survive verbatim. Writes are debounced 250ms to
- * coalesce publish bursts into one snapshot.
+ * Seeds the shared store with saved slots so their original updatedAt survives
+ * verbatim. Agent publications commit a whole snapshot
+ * synchronously; other store changes are debounced for 250ms.
  *
  * filePath is injection-only: the production path is resolved solely at the
  * daemon runtime call site (api-server-init.ts), never inside this module --
@@ -14,13 +14,12 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.createPersistentReportStore = createPersistentReportStore;
 const node_fs_1 = require("node:fs");
+const node_crypto_1 = require("node:crypto");
 const node_path_1 = require("node:path");
 const report_handler_js_1 = require("./report-handler.js");
 const WRITE_DEBOUNCE_MS = 250;
-// One process-exit hook flushes every store's pending debounced write, so a
-// publish landing right before a graceful stop (SIGTERM path) is not lost.
-// SIGKILL restarts still lose the window -- unavoidable, and self-healing on
-// the next publish.
+// One process-exit hook flushes every store's pending debounced write on a
+// graceful stop. Agent publications take the synchronous path below.
 const pendingExitFlushes = new Set();
 let exitHookInstalled = false;
 function installExitHook() {
@@ -45,10 +44,24 @@ function createPersistentReportStore(opts) {
         }
     }
     let writeTimer = null;
+    let persistedBody = (0, node_fs_1.existsSync)(opts.filePath) ? JSON.stringify(snapshot) : null;
+    const persist = (next) => {
+        const directory = (0, node_path_1.dirname)(opts.filePath);
+        (0, node_fs_1.mkdirSync)(directory, { recursive: true });
+        const tempPath = `${opts.filePath}.${process.pid}.${(0, node_crypto_1.randomUUID)()}.tmp`;
+        const body = JSON.stringify(next);
+        try {
+            (0, node_fs_1.writeFileSync)(tempPath, body, { encoding: 'utf8', mode: 0o600, flag: 'wx' });
+            (0, node_fs_1.renameSync)(tempPath, opts.filePath);
+            persistedBody = body;
+        }
+        finally {
+            (0, node_fs_1.rmSync)(tempPath, { force: true });
+        }
+    };
     const writeSnapshot = () => {
         try {
-            (0, node_fs_1.mkdirSync)((0, node_path_1.dirname)(opts.filePath), { recursive: true });
-            (0, node_fs_1.writeFileSync)(opts.filePath, JSON.stringify(snapshot), 'utf-8');
+            persist(snapshot);
         }
         catch (err) {
             console.warn(`[Report] failed to persist slots to ${opts.filePath}:`, err);
@@ -75,9 +88,21 @@ function createPersistentReportStore(opts) {
     };
     return (0, report_handler_js_1.createReportStore)({
         initialSlots: snapshot,
+        beforePublish(next) {
+            // The model sees success only after the whole batch is atomically on disk.
+            // A failed rename leaves both the previous file and in-memory slots intact.
+            persist(next);
+            snapshot = next;
+            if (writeTimer) {
+                clearTimeout(writeTimer);
+                writeTimer = null;
+            }
+        },
         onChange(next) {
             snapshot = next;
-            scheduleWrite();
+            if (JSON.stringify(next) !== persistedBody) {
+                scheduleWrite();
+            }
         },
     });
 }

package/dist/api/report-persistence.js.map

@@ -1 +1 @@
-{"version":3,"file":"report-persistence.js","sourceRoot":"","sources":["../../src/api/report-persistence.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;GAWG;;AAsBH,kEAiDC;AArED,qCAA6E;AAC7E,yCAAoC;AACpC,2DAA2F;AAE3F,MAAM,iBAAiB,GAAG,GAAG,CAAC;AAE9B,4EAA4E;AAC5E,2EAA2E;AAC3E,6EAA6E;AAC7E,oBAAoB;AACpB,MAAM,kBAAkB,GAAG,IAAI,GAAG,EAAc,CAAC;AACjD,IAAI,iBAAiB,GAAG,KAAK,CAAC;AAC9B,SAAS,eAAe;IACtB,IAAI,iBAAiB;QAAE,OAAO;IAC9B,iBAAiB,GAAG,IAAI,CAAC;IACzB,OAAO,CAAC,EAAE,CAAC,MAAM,EAAE,GAAG,EAAE;QACtB,KAAK,MAAM,KAAK,IAAI,kBAAkB;YAAE,KAAK,EAAE,CAAC;IAClD,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAgB,2BAA2B,CAAC,IAA0B;IACpE,IAAI,QAAQ,GAA+B,EAAE,CAAC;IAE9C,IAAI,IAAA,oBAAU,EAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC9B,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAA,sBAAY,EAAC,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAC,CAA+B,CAAC;YAC9F,QAAQ,GAAG,MAAM,CAAC;QACpB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,8EAA8E;YAC9E,OAAO,CAAC,IAAI,CAAC,qCAAqC,IAAI,CAAC,QAAQ,mBAAmB,EAAE,GAAG,CAAC,CAAC;QAC3F,CAAC;IACH,CAAC;IAED,IAAI,UAAU,GAAyC,IAAI,CAAC;IAC5D,MAAM,aAAa,GAAG,GAAS,EAAE;QAC/B,IAAI,CAAC;YACH,IAAA,mBAAS,EAAC,IAAA,mBAAO,EAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YACvD,IAAA,uBAAa,EAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,OAAO,CAAC,CAAC;QAClE,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,IAAI,CAAC,uCAAuC,IAAI,CAAC,QAAQ,GAAG,EAAE,GAAG,CAAC,CAAC;QAC7E,CAAC;IACH,CAAC,CAAC;IAEF,MAAM,YAAY,GAAG,GAAS,EAAE;QAC9B,IAAI,CAAC,UAAU;YAAE,OAAO;QACxB,YAAY,CAAC,UAAU,CAAC,CAAC;QACzB,UAAU,GAAG,IAAI,CAAC;QAClB,aAAa,EAAE,CAAC;IAClB,CAAC,CAAC;IACF,eAAe,EAAE,CAAC;IAClB,kBAAkB,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;IAErC,MAAM,aAAa,GAAG,GAAS,EAAE;QAC/B,IAAI,UAAU;YAAE,YAAY,CAAC,UAAU,CAAC,CAAC;QACzC,UAAU,GAAG,UAAU,CAAC,GAAG,EAAE;YAC3B,UAAU,GAAG,IAAI,CAAC;YAClB,aAAa,EAAE,CAAC;QAClB,CAAC,EAAE,iBAAiB,CAAC,CAAC;QACtB,8DAA8D;QAC9D,UAAU,CAAC,KAAK,EAAE,EAAE,CAAC;IACvB,CAAC,CAAC;IAEF,OAAO,IAAA,qCAAiB,EAAC;QACvB,YAAY,EAAE,QAAQ;QACtB,QAAQ,CAAC,IAAI;YACX,QAAQ,GAAG,IAAI,CAAC;YAChB,aAAa,EAAE,CAAC;QAClB,CAAC;KACF,CAAC,CAAC;AACL,CAAC"}
+{"version":3,"file":"report-persistence.js","sourceRoot":"","sources":["../../src/api/report-persistence.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;GAWG;;AAqBH,kEA0EC;AA7FD,qCAAiG;AACjG,6CAAyC;AACzC,yCAAoC;AACpC,2DAA2F;AAE3F,MAAM,iBAAiB,GAAG,GAAG,CAAC;AAE9B,2EAA2E;AAC3E,qEAAqE;AACrE,MAAM,kBAAkB,GAAG,IAAI,GAAG,EAAc,CAAC;AACjD,IAAI,iBAAiB,GAAG,KAAK,CAAC;AAC9B,SAAS,eAAe;IACtB,IAAI,iBAAiB;QAAE,OAAO;IAC9B,iBAAiB,GAAG,IAAI,CAAC;IACzB,OAAO,CAAC,EAAE,CAAC,MAAM,EAAE,GAAG,EAAE;QACtB,KAAK,MAAM,KAAK,IAAI,kBAAkB;YAAE,KAAK,EAAE,CAAC;IAClD,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAgB,2BAA2B,CAAC,IAA0B;IACpE,IAAI,QAAQ,GAA+B,EAAE,CAAC;IAE9C,IAAI,IAAA,oBAAU,EAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC9B,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAA,sBAAY,EAAC,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAC,CAA+B,CAAC;YAC9F,QAAQ,GAAG,MAAM,CAAC;QACpB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,8EAA8E;YAC9E,OAAO,CAAC,IAAI,CAAC,qCAAqC,IAAI,CAAC,QAAQ,mBAAmB,EAAE,GAAG,CAAC,CAAC;QAC3F,CAAC;IACH,CAAC;IAED,IAAI,UAAU,GAAyC,IAAI,CAAC;IAC5D,IAAI,aAAa,GAAG,IAAA,oBAAU,EAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAChF,MAAM,OAAO,GAAG,CAAC,IAAgC,EAAQ,EAAE;QACzD,MAAM,SAAS,GAAG,IAAA,mBAAO,EAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACzC,IAAA,mBAAS,EAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC1C,MAAM,QAAQ,GAAG,GAAG,IAAI,CAAC,QAAQ,IAAI,OAAO,CAAC,GAAG,IAAI,IAAA,wBAAU,GAAE,MAAM,CAAC;QACvE,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QAClC,IAAI,CAAC;YACH,IAAA,uBAAa,EAAC,QAAQ,EAAE,IAAI,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;YAC7E,IAAA,oBAAU,EAAC,QAAQ,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;YACpC,aAAa,GAAG,IAAI,CAAC;QACvB,CAAC;gBAAS,CAAC;YACT,IAAA,gBAAM,EAAC,QAAQ,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACpC,CAAC;IACH,CAAC,CAAC;IACF,MAAM,aAAa,GAAG,GAAS,EAAE;QAC/B,IAAI,CAAC;YACH,OAAO,CAAC,QAAQ,CAAC,CAAC;QACpB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,IAAI,CAAC,uCAAuC,IAAI,CAAC,QAAQ,GAAG,EAAE,GAAG,CAAC,CAAC;QAC7E,CAAC;IACH,CAAC,CAAC;IAEF,MAAM,YAAY,GAAG,GAAS,EAAE;QAC9B,IAAI,CAAC,UAAU;YAAE,OAAO;QACxB,YAAY,CAAC,UAAU,CAAC,CAAC;QACzB,UAAU,GAAG,IAAI,CAAC;QAClB,aAAa,EAAE,CAAC;IAClB,CAAC,CAAC;IACF,eAAe,EAAE,CAAC;IAClB,kBAAkB,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;IAErC,MAAM,aAAa,GAAG,GAAS,EAAE;QAC/B,IAAI,UAAU;YAAE,YAAY,CAAC,UAAU,CAAC,CAAC;QACzC,UAAU,GAAG,UAAU,CAAC,GAAG,EAAE;YAC3B,UAAU,GAAG,IAAI,CAAC;YAClB,aAAa,EAAE,CAAC;QAClB,CAAC,EAAE,iBAAiB,CAAC,CAAC;QACtB,8DAA8D;QAC9D,UAAU,CAAC,KAAK,EAAE,EAAE,CAAC;IACvB,CAAC,CAAC;IAEF,OAAO,IAAA,qCAAiB,EAAC;QACvB,YAAY,EAAE,QAAQ;QACtB,aAAa,CAAC,IAAI;YAChB,2EAA2E;YAC3E,4EAA4E;YAC5E,OAAO,CAAC,IAAI,CAAC,CAAC;YACd,QAAQ,GAAG,IAAI,CAAC;YAChB,IAAI,UAAU,EAAE,CAAC;gBACf,YAAY,CAAC,UAAU,CAAC,CAAC;gBACzB,UAAU,GAAG,IAAI,CAAC;YACpB,CAAC;QACH,CAAC;QACD,QAAQ,CAAC,IAAI;YACX,QAAQ,GAAG,IAAI,CAAC;YAChB,IAAI,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,aAAa,EAAE,CAAC;gBAC3C,aAAa,EAAE,CAAC;YAClB,CAAC;QACH,CAAC;KACF,CAAC,CAAC;AACL,CAAC"}

package/dist/api/report-source-actions.d.ts

@@ -0,0 +1,11 @@
+import type { ActionRegistration } from '@jungjaehoon/mama-core';
+import type { DatabaseAdapter } from '@jungjaehoon/mama-core/db-manager';
+import type { TimeZoneSetting } from '../runtime/timezone.js';
+type ReportReadPorts = {
+    adapter: Pick<DatabaseAdapter, 'prepare'>;
+    ownerPrincipalId: string;
+    timeZone: TimeZoneSetting;
+};
+export declare function reportSourceActionRegistrations(ports: ReportReadPorts): ActionRegistration[];
+export {};
+//# sourceMappingURL=report-source-actions.d.ts.map

package/dist/api/report-source-actions.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"report-source-actions.d.ts","sourceRoot":"","sources":["../../src/api/report-source-actions.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,wBAAwB,CAAC;AAEjE,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,mCAAmC,CAAC;AACzE,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AAK9D,KAAK,eAAe,GAAG;IACrB,OAAO,EAAE,IAAI,CAAC,eAAe,EAAE,SAAS,CAAC,CAAC;IAC1C,gBAAgB,EAAE,MAAM,CAAC;IACzB,QAAQ,EAAE,eAAe,CAAC;CAC3B,CAAC;AAoWF,wBAAgB,+BAA+B,CAAC,KAAK,EAAE,eAAe,GAAG,kBAAkB,EAAE,CAE5F"}

package/dist/api/report-source-actions.js

@@ -0,0 +1,309 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.reportSourceActionRegistrations = reportSourceActionRegistrations;
+const timezone_js_1 = require("../runtime/timezone.js");
+function grantChannels(access, connector, ownerPrincipalId) {
+    if (!access.connectors?.includes(connector))
+        return [];
+    if (access.principalId === ownerPrincipalId)
+        return null;
+    return [
+        ...new Set((access.channels?.[connector] ?? []).filter((channel) => channel.trim() !== '')),
+    ];
+}
+function allowedRows(rows, access, ownerPrincipalId) {
+    return rows.filter((row) => {
+        const connector = String(row.source_connector);
+        const channels = grantChannels(access, connector, ownerPrincipalId);
+        return channels !== null && channels.length === 0
+            ? false
+            : channels === null || channels.includes(String(row.channel ?? ''));
+    });
+}
+function visibleConnectorFilter(connectors, access, ownerPrincipalId) {
+    const clauses = [];
+    const params = [];
+    for (const connector of connectors) {
+        const wide = access.principalId === ownerPrincipalId;
+        if (wide) {
+            clauses.push('source_connector = ?');
+            params.push(connector);
+            continue;
+        }
+        const granted = access.channels?.[connector] ?? [];
+        const readGranted = granted;
+        if (readGranted.length === 0)
+            continue;
+        clauses.push(`(source_connector = ? AND channel IN (${readGranted.map(() => '?').join(',')}))`);
+        params.push(connector, ...readGranted);
+    }
+    return {
+        sql: clauses.length ? clauses.map((clause) => `(${clause})`).join(' OR ') : '0',
+        params,
+    };
+}
+function sinceTime(value, now) {
+    if (value === undefined)
+        return now - 24 * 60 * 60 * 1_000;
+    if (typeof value === 'number' && Number.isSafeInteger(value) && value >= 0)
+        return value;
+    if (typeof value === 'string') {
+        const duration = /^(\d+)\s*(h|d) ago$/i.exec(value.trim());
+        if (duration)
+            return (now - Number(duration[1]) * (duration[2].toLowerCase() === 'h' ? 3_600_000 : 86_400_000));
+        const parsed = Date.parse(value);
+        if (Number.isFinite(parsed))
+            return parsed;
+    }
+    throw invalidInput('source.recent since must be epoch milliseconds, an ISO time, or a duration such as "24h ago"');
+}
+/** Rows scanned in host memory; each channel reports its full count and its latest lines. */
+const RECENT_SCAN_LIMIT = 20_000;
+function invalidInput(message) {
+    const error = new Error(message);
+    error.name = 'invalid_input';
+    return error;
+}
+function decodeMetadata(value) {
+    if (typeof value !== 'string' || value === '')
+        return {};
+    const parsed = JSON.parse(value);
+    if (!parsed || typeof parsed !== 'object' || Array.isArray(parsed))
+        throw new Error('Stored event metadata is malformed');
+    return parsed;
+}
+function recentAction(ports) {
+    return {
+        contract: {
+            name: 'source.recent',
+            summary: 'Read recent changes from every granted stored source, grouped by channel, with collection failures visible.',
+            inputSchema: {
+                type: 'object',
+                additionalProperties: false,
+                properties: {
+                    since: {
+                        description: 'Start time as epoch milliseconds, timezone-aware ISO time, or duration such as "24h ago". Defaults to 24 hours.',
+                        oneOf: [
+                            { type: 'integer', minimum: 0 },
+                            { type: 'string', minLength: 1 },
+                        ],
+                    },
+                    perChannel: {
+                        type: 'integer',
+                        minimum: 1,
+                        maximum: 20,
+                        description: 'Recent source changes per channel; defaults to 5.',
+                    },
+                    cap: {
+                        type: 'integer',
+                        minimum: 1,
+                        maximum: 500,
+                        description: 'Maximum channels returned; each channel reports its full change count and its latest perChannel lines.',
+                    },
+                },
+            },
+            examples: [{ title: 'Recent source changes', input: { since: '24h ago', perChannel: 5 } }],
+        },
+        exec: (input, context) => {
+            const values = input;
+            const now = Date.now();
+            const since = sinceTime(values.since, now);
+            const perChannel = values.perChannel === undefined ? 5 : values.perChannel;
+            const cap = values.cap === undefined ? 100 : values.cap;
+            if (!Number.isSafeInteger(perChannel) || Number(perChannel) < 1 || Number(perChannel) > 20)
+                throw new Error('source.recent perChannel must be from 1 to 20');
+            if (!Number.isSafeInteger(cap) || Number(cap) < 1 || Number(cap) > 500)
+                throw new Error('source.recent cap must be from 1 to 500');
+            const connectors = context.access.connectors ?? [];
+            if (connectors.length === 0)
+                throw new Error('source.recent requires at least one granted connector');
+            const visibility = visibleConnectorFilter(connectors, context.access, ports.ownerPrincipalId);
+            const sourceCeiling = context.readAllowance?.maxSourceMs;
+            const rows = ports.adapter
+                .prepare(`SELECT source_connector, source_id, source_entity_id, channel, author, content, source_timestamp_ms,
+                current_observation_id, metadata_json
+         FROM connector_event_index WHERE (${visibility.sql}) AND source_timestamp_ms >= ?
+           ${sourceCeiling === undefined || sourceCeiling === null ? '' : 'AND source_timestamp_ms <= ?'}
+         ORDER BY source_timestamp_ms DESC, source_id DESC LIMIT ?`)
+                .all(...visibility.params, since, ...(sourceCeiling === undefined || sourceCeiling === null ? [] : [sourceCeiling]), RECENT_SCAN_LIMIT + 1);
+            if (rows.length > RECENT_SCAN_LIMIT)
+                throw invalidInput(`source.recent found more than ${RECENT_SCAN_LIMIT} changes; narrow since or cap`);
+            const visible = allowedRows(rows, context.access, ports.ownerPrincipalId);
+            const groups = new Map();
+            for (const row of visible) {
+                const metadata = decodeMetadata(row.metadata_json);
+                const source = String(row.source_connector);
+                const key = String(row.channel ?? '');
+                const label = typeof metadata.channelName === 'string' ? metadata.channelName : key || source;
+                const groupKey = `${source}\0${key}`;
+                const group = groups.get(groupKey) ?? { source, channel: label, count: 0, lines: [] };
+                group.count += 1;
+                groups.set(groupKey, group);
+                if (group.lines.length >= Number(perChannel))
+                    continue;
+                const timestamp = Number(row.source_timestamp_ms);
+                if (typeof row.current_observation_id !== 'string' ||
+                    row.current_observation_id.trim() === '') {
+                    throw new Error('source.recent indexed change has no observation reference');
+                }
+                group.lines.push({
+                    author: row.author ?? null,
+                    time: `${new Date(timestamp).toLocaleString('ko-KR', { timeZone: ports.timeZone.get() })} (${ports.timeZone.get()})`,
+                    text: String(row.content).slice(0, 200),
+                    observationRef: row.current_observation_id,
+                });
+                groups.set(groupKey, group);
+            }
+            const failures = ports.adapter
+                .prepare(`SELECT connector_name, last_error, last_error_at FROM connector_event_index_cursors
+         WHERE last_error IS NOT NULL AND connector_name IN (${connectors.map(() => '?').join(',')})`)
+                .all(...connectors);
+            const failedConnectors = failures
+                .filter((row) => {
+                const grant = grantChannels(context.access, String(row.connector_name), ports.ownerPrincipalId);
+                return grant === null || grant.length > 0;
+            })
+                .map((row) => {
+                const connector = String(row.connector_name);
+                const knownChannels = ports.adapter
+                    .prepare(`SELECT source_connector, channel, json_extract(metadata_json, '$.channelName') AS channel_name
+               FROM connector_event_index WHERE source_connector = ? GROUP BY source_connector, channel`)
+                    .all(connector);
+                const failedChannels = [
+                    ...new Map(allowedRows(knownChannels, context.access, ports.ownerPrincipalId)
+                        .filter((event) => event.source_connector === connector)
+                        .map((event) => {
+                        const key = String(event.channel ?? '');
+                        return [
+                            key,
+                            typeof event.channel_name === 'string' ? event.channel_name : key,
+                        ];
+                    })).values(),
+                ];
+                return {
+                    connector,
+                    channels: failedChannels,
+                    error: row.last_error,
+                    failedAt: row.last_error_at,
+                };
+            });
+            if (groups.size > Number(cap))
+                throw invalidInput(`source.recent found changes in ${groups.size} channels, more than cap ${cap}; narrow since or cap`);
+            return {
+                since: new Date(since).toISOString(),
+                cap: Number(cap),
+                scanned: visible.length,
+                returned: [...groups.values()].reduce((count, group) => count + group.lines.length, 0),
+                channels: [...groups.values()].sort((a, b) => a.source.localeCompare(b.source) || a.channel.localeCompare(b.channel)),
+                failedConnectors,
+            };
+        },
+    };
+}
+function upcomingAction(ports) {
+    return {
+        contract: {
+            name: 'schedule.upcoming',
+            summary: 'Read upcoming calendar and iCal events from the stored event index, including configured holiday calendars.',
+            inputSchema: {
+                type: 'object',
+                additionalProperties: false,
+                properties: {
+                    days: {
+                        type: 'integer',
+                        minimum: 0,
+                        maximum: 90,
+                        description: 'Days ahead, default 14.',
+                    },
+                    cap: {
+                        type: 'integer',
+                        minimum: 1,
+                        maximum: 500,
+                        description: 'Event cap; exceeding it fails instead of truncating.',
+                    },
+                },
+            },
+            examples: [{ title: 'Next two weeks', input: { days: 14 } }],
+        },
+        exec: (input, context) => {
+            const values = input;
+            const days = values.days === undefined ? 14 : values.days;
+            const cap = values.cap === undefined ? 250 : values.cap;
+            if (!Number.isSafeInteger(days) || Number(days) < 0 || Number(days) > 90)
+                throw new Error('schedule.upcoming days must be from 0 to 90');
+            if (!Number.isSafeInteger(cap) || Number(cap) < 1 || Number(cap) > 500)
+                throw new Error('schedule.upcoming cap must be from 1 to 500');
+            const connectors = ['calendar', 'ical'].filter((name) => context.access.connectors?.includes(name));
+            if (!connectors.length)
+                throw new Error('schedule.upcoming requires a granted calendar or ical connector');
+            const visibility = visibleConnectorFilter(connectors, context.access, ports.ownerPrincipalId);
+            const raw = ports.adapter
+                .prepare(`SELECT source_connector, source_id, source_entity_id, channel, source_timestamp_ms,
+                metadata_json, current_observation_id
+         FROM (SELECT e.*, ROW_NUMBER() OVER (
+           PARTITION BY source_connector, COALESCE(source_entity_id, source_id)
+           ORDER BY source_timestamp_ms DESC, indexed_at DESC, source_id DESC
+         ) AS revision_order FROM connector_event_index e
+         WHERE (${visibility.sql}))
+         WHERE revision_order=1 ORDER BY source_timestamp_ms DESC`)
+                .all(...visibility.params);
+            const visible = allowedRows(raw, context.access, ports.ownerPrincipalId);
+            const now = Date.now();
+            const until = now + Number(days) * 86_400_000;
+            const events = visible.flatMap((row) => {
+                const metadata = decodeMetadata(row.metadata_json);
+                if (metadata.status === 'cancelled')
+                    return [];
+                const startRaw = metadata.start ?? metadata.dtstart;
+                const endRaw = metadata.end ?? metadata.dtend;
+                if (typeof startRaw !== 'string')
+                    return [];
+                const ownerTimeZone = ports.timeZone.get();
+                const eventZone = typeof metadata.timeZone === 'string'
+                    ? metadata.timeZone
+                    : typeof metadata.startTimeZone === 'string'
+                        ? metadata.startTimeZone
+                        : undefined;
+                const start = (0, timezone_js_1.epochForCalendarValue)(startRaw, eventZone, ownerTimeZone);
+                let end;
+                if (typeof endRaw === 'string') {
+                    end = (0, timezone_js_1.epochForCalendarValue)(endRaw, typeof metadata.endTimeZone === 'string' ? metadata.endTimeZone : eventZone, ownerTimeZone);
+                }
+                else if (typeof metadata.duration === 'string') {
+                    end = (0, timezone_js_1.durationEndEpoch)(startRaw, metadata.duration, eventZone ?? ownerTimeZone);
+                }
+                else {
+                    end = start + (metadata.allDay === true ? 86_400_000 : 0);
+                }
+                const hasEnded = metadata.endExclusive === true ? end <= now : end < now;
+                if (!Number.isFinite(start) || !Number.isFinite(end) || hasEnded || start > until)
+                    return [];
+                return [
+                    {
+                        source: row.source_connector,
+                        calendar: metadata.calendarName ?? metadata.feedName ?? row.channel,
+                        start: startRaw,
+                        end: typeof endRaw === 'string' ? endRaw : startRaw,
+                        ...(typeof metadata.duration === 'string' ? { duration: metadata.duration } : {}),
+                        title: metadata.summary ?? '(Untitled event)',
+                        observationRef: row.current_observation_id,
+                        sortMs: start,
+                    },
+                ];
+            });
+            if (events.length > Number(cap))
+                throw new Error(`schedule.upcoming found more than ${cap} events; narrow days or increase cap`);
+            events.sort((a, b) => a.sortMs - b.sortMs);
+            return {
+                days: Number(days),
+                cap: Number(cap),
+                returned: events.length,
+                events: events.map(({ sortMs: _sortMs, ...event }) => event),
+            };
+        },
+    };
+}
+function reportSourceActionRegistrations(ports) {
+    return [recentAction(ports), upcomingAction(ports)];
+}
+//# sourceMappingURL=report-source-actions.js.map

package/dist/api/report-source-actions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"report-source-actions.js","sourceRoot":"","sources":["../../src/api/report-source-actions.ts"],"names":[],"mappings":";;AAgXA,0EAEC;AA9WD,wDAAiF;AAUjF,SAAS,aAAa,CACpB,MAAc,EACd,SAAiB,EACjB,gBAAwB;IAExB,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,QAAQ,CAAC,SAAS,CAAC;QAAE,OAAO,EAAE,CAAC;IACvD,IAAI,MAAM,CAAC,WAAW,KAAK,gBAAgB;QAAE,OAAO,IAAI,CAAC;IACzD,OAAO;QACL,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;KAC5F,CAAC;AACJ,CAAC;AAED,SAAS,WAAW,CAAC,IAAW,EAAE,MAAc,EAAE,gBAAwB;IACxE,OAAO,IAAI,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE;QACzB,MAAM,SAAS,GAAG,MAAM,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;QAC/C,MAAM,QAAQ,GAAG,aAAa,CAAC,MAAM,EAAE,SAAS,EAAE,gBAAgB,CAAC,CAAC;QACpE,OAAO,QAAQ,KAAK,IAAI,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;YAC/C,CAAC,CAAC,KAAK;YACP,CAAC,CAAC,QAAQ,KAAK,IAAI,IAAI,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,CAAC;IACxE,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,sBAAsB,CAC7B,UAA6B,EAC7B,MAAc,EACd,gBAAwB;IAExB,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;QACnC,MAAM,IAAI,GAAG,MAAM,CAAC,WAAW,KAAK,gBAAgB,CAAC;QACrD,IAAI,IAAI,EAAE,CAAC;YACT,OAAO,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;YACrC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YACvB,SAAS;QACX,CAAC;QACD,MAAM,OAAO,GAAG,MAAM,CAAC,QAAQ,EAAE,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC;QACnD,MAAM,WAAW,GAAG,OAAO,CAAC;QAC5B,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC;YAAE,SAAS;QACvC,OAAO,CAAC,IAAI,CAAC,yCAAyC,WAAW,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAChG,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,WAAW,CAAC,CAAC;IACzC,CAAC;IACD,OAAO;QACL,GAAG,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,IAAI,MAAM,GAAG,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,GAAG;QAC/E,MAAM;KACP,CAAC;AACJ,CAAC;AAED,SAAS,SAAS,CAAC,KAAc,EAAE,GAAW;IAC5C,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,GAAG,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,KAAK,CAAC;IAC3D,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC;IACzF,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,MAAM,QAAQ,GAAG,sBAAsB,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;QAC3D,IAAI,QAAQ;YACV,OAAO,CACL,GAAG,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAE,CAAC,WAAW,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,CAAC,CAC1F,CAAC;QACJ,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QACjC,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC;YAAE,OAAO,MAAM,CAAC;IAC7C,CAAC;IACD,MAAM,YAAY,CAChB,8FAA8F,CAC/F,CAAC;AACJ,CAAC;AAED,6FAA6F;AAC7F,MAAM,iBAAiB,GAAG,MAAM,CAAC;AAEjC,SAAS,YAAY,CAAC,OAAe;IACnC,MAAM,KAAK,GAAG,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC;IACjC,KAAK,CAAC,IAAI,GAAG,eAAe,CAAC;IAC7B,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,cAAc,CAAC,KAAc;IACpC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,EAAE;QAAE,OAAO,EAAE,CAAC;IACzD,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAC1C,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;QAChE,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;IACxD,OAAO,MAAiC,CAAC;AAC3C,CAAC;AAED,SAAS,YAAY,CAAC,KAAsB;IAC1C,OAAO;QACL,QAAQ,EAAE;YACR,IAAI,EAAE,eAAe;YACrB,OAAO,EACL,6GAA6G;YAC/G,WAAW,EAAE;gBACX,IAAI,EAAE,QAAQ;gBACd,oBAAoB,EAAE,KAAK;gBAC3B,UAAU,EAAE;oBACV,KAAK,EAAE;wBACL,WAAW,EACT,iHAAiH;wBACnH,KAAK,EAAE;4BACL,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC,EAAE;4BAC/B,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,EAAE;yBACjC;qBACF;oBACD,UAAU,EAAE;wBACV,IAAI,EAAE,SAAS;wBACf,OAAO,EAAE,CAAC;wBACV,OAAO,EAAE,EAAE;wBACX,WAAW,EAAE,mDAAmD;qBACjE;oBACD,GAAG,EAAE;wBACH,IAAI,EAAE,SAAS;wBACf,OAAO,EAAE,CAAC;wBACV,OAAO,EAAE,GAAG;wBACZ,WAAW,EACT,wGAAwG;qBAC3G;iBACF;aACF;YACD,QAAQ,EAAE,CAAC,EAAE,KAAK,EAAE,uBAAuB,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,UAAU,EAAE,CAAC,EAAE,EAAE,CAAC;SAC3F;QACD,IAAI,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE;YACvB,MAAM,MAAM,GAAG,KAAgC,CAAC;YAChD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YACvB,MAAM,KAAK,GAAG,SAAS,CAAC,MAAM,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;YAC3C,MAAM,UAAU,GAAG,MAAM,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAE,MAAM,CAAC,UAAqB,CAAC;YACvF,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAE,MAAM,CAAC,GAAc,CAAC;YACpE,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,UAAU,CAAC,IAAI,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,MAAM,CAAC,UAAU,CAAC,GAAG,EAAE;gBACxF,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;YACnE,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,GAAG,CAAC,IAAI,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,MAAM,CAAC,GAAG,CAAC,GAAG,GAAG;gBACpE,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;YAC7D,MAAM,UAAU,GAAG,OAAO,CAAC,MAAM,CAAC,UAAU,IAAI,EAAE,CAAC;YACnD,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC;gBACzB,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAC;YAC3E,MAAM,UAAU,GAAG,sBAAsB,CAAC,UAAU,EAAE,OAAO,CAAC,MAAM,EAAE,KAAK,CAAC,gBAAgB,CAAC,CAAC;YAC9F,MAAM,aAAa,GAAG,OAAO,CAAC,aAAa,EAAE,WAAW,CAAC;YACzD,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO;iBACvB,OAAO,CACN;;6CAEmC,UAAU,CAAC,GAAG;aAC9C,aAAa,KAAK,SAAS,IAAI,aAAa,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,8BAA8B;mEACrC,CAC1D;iBACA,GAAG,CACF,GAAG,UAAU,CAAC,MAAM,EACpB,KAAK,EACL,GAAG,CAAC,aAAa,KAAK,SAAS,IAAI,aAAa,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,EACjF,iBAAiB,GAAG,CAAC,CACb,CAAC;YACb,IAAI,IAAI,CAAC,MAAM,GAAG,iBAAiB;gBACjC,MAAM,YAAY,CAChB,iCAAiC,iBAAiB,+BAA+B,CAClF,CAAC;YACJ,MAAM,OAAO,GAAG,WAAW,CAAC,IAAI,EAAE,OAAO,CAAC,MAAM,EAAE,KAAK,CAAC,gBAAgB,CAAC,CAAC;YAC1E,MAAM,MAAM,GAAG,IAAI,GAAG,EAGnB,CAAC;YACJ,KAAK,MAAM,GAAG,IAAI,OAAO,EAAE,CAAC;gBAC1B,MAAM,QAAQ,GAAG,cAAc,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;gBACnD,MAAM,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;gBAC5C,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC;gBACtC,MAAM,KAAK,GACT,OAAO,QAAQ,CAAC,WAAW,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC,CAAC,GAAG,IAAI,MAAM,CAAC;gBAClF,MAAM,QAAQ,GAAG,GAAG,MAAM,KAAK,GAAG,EAAE,CAAC;gBACrC,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC;gBACtF,KAAK,CAAC,KAAK,IAAI,CAAC,CAAC;gBACjB,MAAM,CAAC,GAAG,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;gBAC5B,IAAI,KAAK,CAAC,KAAK,CAAC,MAAM,IAAI,MAAM,CAAC,UAAU,CAAC;oBAAE,SAAS;gBACvD,MAAM,SAAS,GAAG,MAAM,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC;gBAClD,IACE,OAAO,GAAG,CAAC,sBAAsB,KAAK,QAAQ;oBAC9C,GAAG,CAAC,sBAAsB,CAAC,IAAI,EAAE,KAAK,EAAE,EACxC,CAAC;oBACD,MAAM,IAAI,KAAK,CAAC,2DAA2D,CAAC,CAAC;gBAC/E,CAAC;gBACD,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC;oBACf,MAAM,EAAE,GAAG,CAAC,MAAM,IAAI,IAAI;oBAC1B,IAAI,EAAE,GAAG,IAAI,IAAI,CAAC,SAAS,CAAC,CAAC,cAAc,CAAC,OAAO,EAAE,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,CAAC,GAAG,EAAE,EAAE,CAAC,KAAK,KAAK,CAAC,QAAQ,CAAC,GAAG,EAAE,GAAG;oBACpH,IAAI,EAAE,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC;oBACvC,cAAc,EAAE,GAAG,CAAC,sBAAsB;iBAC3C,CAAC,CAAC;gBACH,MAAM,CAAC,GAAG,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;YAC9B,CAAC;YACD,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO;iBAC3B,OAAO,CACN;+DACqD,UAAU,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAC5F;iBACA,GAAG,CAAC,GAAG,UAAU,CAAU,CAAC;YAC/B,MAAM,gBAAgB,GAAG,QAAQ;iBAC9B,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE;gBACd,MAAM,KAAK,GAAG,aAAa,CACzB,OAAO,CAAC,MAAM,EACd,MAAM,CAAC,GAAG,CAAC,cAAc,CAAC,EAC1B,KAAK,CAAC,gBAAgB,CACvB,CAAC;gBACF,OAAO,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC;YAC5C,CAAC,CAAC;iBACD,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE;gBACX,MAAM,SAAS,GAAG,MAAM,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;gBAC7C,MAAM,aAAa,GAAG,KAAK,CAAC,OAAO;qBAChC,OAAO,CACN;wGAC0F,CAC3F;qBACA,GAAG,CAAC,SAAS,CAAU,CAAC;gBAC3B,MAAM,cAAc,GAAG;oBACrB,GAAG,IAAI,GAAG,CACR,WAAW,CAAC,aAAa,EAAE,OAAO,CAAC,MAAM,EAAE,KAAK,CAAC,gBAAgB,CAAC;yBAC/D,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,gBAAgB,KAAK,SAAS,CAAC;yBACvD,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE;wBACb,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC;wBACxC,OAAO;4BACL,GAAG;4BACH,OAAO,KAAK,CAAC,YAAY,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,GAAG;yBACzD,CAAC;oBACb,CAAC,CAAC,CACL,CAAC,MAAM,EAAE;iBACX,CAAC;gBACF,OAAO;oBACL,SAAS;oBACT,QAAQ,EAAE,cAAc;oBACxB,KAAK,EAAE,GAAG,CAAC,UAAU;oBACrB,QAAQ,EAAE,GAAG,CAAC,aAAa;iBAC5B,CAAC;YACJ,CAAC,CAAC,CAAC;YACL,IAAI,MAAM,CAAC,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC;gBAC3B,MAAM,YAAY,CAChB,kCAAkC,MAAM,CAAC,IAAI,4BAA4B,GAAG,uBAAuB,CACpG,CAAC;YACJ,OAAO;gBACL,KAAK,EAAE,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,WAAW,EAAE;gBACpC,GAAG,EAAE,MAAM,CAAC,GAAG,CAAC;gBAChB,OAAO,EAAE,OAAO,CAAC,MAAM;gBACvB,QAAQ,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;gBACtF,QAAQ,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CACjC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,OAAO,CAAC,CACjF;gBACD,gBAAgB;aACjB,CAAC;QACJ,CAAC;KACF,CAAC;AACJ,CAAC;AAED,SAAS,cAAc,CAAC,KAAsB;IAC5C,OAAO;QACL,QAAQ,EAAE;YACR,IAAI,EAAE,mBAAmB;YACzB,OAAO,EACL,6GAA6G;YAC/G,WAAW,EAAE;gBACX,IAAI,EAAE,QAAQ;gBACd,oBAAoB,EAAE,KAAK;gBAC3B,UAAU,EAAE;oBACV,IAAI,EAAE;wBACJ,IAAI,EAAE,SAAS;wBACf,OAAO,EAAE,CAAC;wBACV,OAAO,EAAE,EAAE;wBACX,WAAW,EAAE,yBAAyB;qBACvC;oBACD,GAAG,EAAE;wBACH,IAAI,EAAE,SAAS;wBACf,OAAO,EAAE,CAAC;wBACV,OAAO,EAAE,GAAG;wBACZ,WAAW,EAAE,sDAAsD;qBACpE;iBACF;aACF;YACD,QAAQ,EAAE,CAAC,EAAE,KAAK,EAAE,gBAAgB,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,EAAE,CAAC;SAC7D;QACD,IAAI,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE;YACvB,MAAM,MAAM,GAAG,KAAgC,CAAC;YAChD,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAE,MAAM,CAAC,IAAe,CAAC;YACtE,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAE,MAAM,CAAC,GAAc,CAAC;YACpE,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE;gBACtE,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;YACjE,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,GAAG,CAAC,IAAI,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,MAAM,CAAC,GAAG,CAAC,GAAG,GAAG;gBACpE,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;YACjE,MAAM,UAAU,GAAG,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CACtD,OAAO,CAAC,MAAM,CAAC,UAAU,EAAE,QAAQ,CAAC,IAAI,CAAC,CAC1C,CAAC;YACF,IAAI,CAAC,UAAU,CAAC,MAAM;gBACpB,MAAM,IAAI,KAAK,CAAC,iEAAiE,CAAC,CAAC;YACrF,MAAM,UAAU,GAAG,sBAAsB,CAAC,UAAU,EAAE,OAAO,CAAC,MAAM,EAAE,KAAK,CAAC,gBAAgB,CAAC,CAAC;YAC9F,MAAM,GAAG,GAAG,KAAK,CAAC,OAAO;iBACtB,OAAO,CACN;;;;;;kBAMQ,UAAU,CAAC,GAAG;kEACkC,CACzD;iBACA,GAAG,CAAC,GAAG,UAAU,CAAC,MAAM,CAAU,CAAC;YACtC,MAAM,OAAO,GAAG,WAAW,CAAC,GAAG,EAAE,OAAO,CAAC,MAAM,EAAE,KAAK,CAAC,gBAAgB,CAAC,CAAC;YACzE,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YACvB,MAAM,KAAK,GAAG,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,UAAU,CAAC;YAC9C,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,EAAE;gBACrC,MAAM,QAAQ,GAAG,cAAc,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;gBACnD,IAAI,QAAQ,CAAC,MAAM,KAAK,WAAW;oBAAE,OAAO,EAAE,CAAC;gBAC/C,MAAM,QAAQ,GAAG,QAAQ,CAAC,KAAK,IAAI,QAAQ,CAAC,OAAO,CAAC;gBACpD,MAAM,MAAM,GAAG,QAAQ,CAAC,GAAG,IAAI,QAAQ,CAAC,KAAK,CAAC;gBAC9C,IAAI,OAAO,QAAQ,KAAK,QAAQ;oBAAE,OAAO,EAAE,CAAC;gBAC5C,MAAM,aAAa,GAAG,KAAK,CAAC,QAAQ,CAAC,GAAG,EAAE,CAAC;gBAC3C,MAAM,SAAS,GACb,OAAO,QAAQ,CAAC,QAAQ,KAAK,QAAQ;oBACnC,CAAC,CAAC,QAAQ,CAAC,QAAQ;oBACnB,CAAC,CAAC,OAAO,QAAQ,CAAC,aAAa,KAAK,QAAQ;wBAC1C,CAAC,CAAC,QAAQ,CAAC,aAAa;wBACxB,CAAC,CAAC,SAAS,CAAC;gBAClB,MAAM,KAAK,GAAG,IAAA,mCAAqB,EAAC,QAAQ,EAAE,SAAS,EAAE,aAAa,CAAC,CAAC;gBACxE,IAAI,GAAW,CAAC;gBAChB,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;oBAC/B,GAAG,GAAG,IAAA,mCAAqB,EACzB,MAAM,EACN,OAAO,QAAQ,CAAC,WAAW,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,EAC3E,aAAa,CACd,CAAC;gBACJ,CAAC;qBAAM,IAAI,OAAO,QAAQ,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;oBACjD,GAAG,GAAG,IAAA,8BAAgB,EAAC,QAAQ,EAAE,QAAQ,CAAC,QAAQ,EAAE,SAAS,IAAI,aAAa,CAAC,CAAC;gBAClF,CAAC;qBAAM,CAAC;oBACN,GAAG,GAAG,KAAK,GAAG,CAAC,QAAQ,CAAC,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;gBAC5D,CAAC;gBACD,MAAM,QAAQ,GAAG,QAAQ,CAAC,YAAY,KAAK,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC,GAAG,GAAG,GAAG,CAAC;gBACzE,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,QAAQ,IAAI,KAAK,GAAG,KAAK;oBAC/E,OAAO,EAAE,CAAC;gBACZ,OAAO;oBACL;wBACE,MAAM,EAAE,GAAG,CAAC,gBAAgB;wBAC5B,QAAQ,EAAE,QAAQ,CAAC,YAAY,IAAI,QAAQ,CAAC,QAAQ,IAAI,GAAG,CAAC,OAAO;wBACnE,KAAK,EAAE,QAAQ;wBACf,GAAG,EAAE,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ;wBACnD,GAAG,CAAC,OAAO,QAAQ,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,QAAQ,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;wBACjF,KAAK,EAAE,QAAQ,CAAC,OAAO,IAAI,kBAAkB;wBAC7C,cAAc,EAAE,GAAG,CAAC,sBAAsB;wBAC1C,MAAM,EAAE,KAAK;qBACd;iBACF,CAAC;YACJ,CAAC,CAAC,CAAC;YACH,IAAI,MAAM,CAAC,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC;gBAC7B,MAAM,IAAI,KAAK,CACb,qCAAqC,GAAG,sCAAsC,CAC/E,CAAC;YACJ,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC;YAC3C,OAAO;gBACL,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC;gBAClB,GAAG,EAAE,MAAM,CAAC,GAAG,CAAC;gBAChB,QAAQ,EAAE,MAAM,CAAC,MAAM;gBACvB,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,KAAK,EAAE,EAAE,EAAE,CAAC,KAAK,CAAC;aAC7D,CAAC;QACJ,CAAC;KACF,CAAC;AACJ,CAAC;AAED,SAAgB,+BAA+B,CAAC,KAAsB;IACpE,OAAO,CAAC,YAAY,CAAC,KAAK,CAAC,EAAE,cAAc,CAAC,KAAK,CAAC,CAAC,CAAC;AACtD,CAAC"}

package/dist/api/security-events.d.ts

@@ -0,0 +1,23 @@
+import type { TimeZoneSetting } from '../runtime/timezone.js';
+export type SecurityEventClass = 'owner_access' | 'public_asset' | 'auth_failed' | 'forged_access_header' | 'host_rejected' | 'probe' | 'unknown_identity' | 'request_failed';
+export interface SecurityEvent {
+    time: string;
+    class: SecurityEventClass;
+    method: string;
+    path: string;
+    status: number;
+    cfRay: string | null;
+    country?: string;
+    identity: 'token' | 'anonymous' | `access:${string}`;
+}
+export interface SecurityEventOptions {
+    path?: string;
+    replay?: boolean;
+    sendToOwner?: (text: string, idempotencyKey: string) => Promise<void>;
+    timeZone: TimeZoneSetting;
+}
+export declare function createSecurityEventRecorder(options: SecurityEventOptions): {
+    path: string;
+    record(observed: SecurityEvent): void;
+};
+//# sourceMappingURL=security-events.d.ts.map

package/dist/api/security-events.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"security-events.d.ts","sourceRoot":"","sources":["../../src/api/security-events.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AAE9D,MAAM,MAAM,kBAAkB,GAC1B,cAAc,GACd,cAAc,GACd,aAAa,GACb,sBAAsB,GACtB,eAAe,GACf,OAAO,GACP,kBAAkB,GAClB,gBAAgB,CAAC;AAErB,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,kBAAkB,CAAC;IAC1B,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,OAAO,GAAG,WAAW,GAAG,UAAU,MAAM,EAAE,CAAC;CACtD;AAED,MAAM,WAAW,oBAAoB;IACnC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,WAAW,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACtE,QAAQ,EAAE,eAAe,CAAC;CAC3B;AAID,wBAAgB,2BAA2B,CAAC,OAAO,EAAE,oBAAoB;;qBAMpD,aAAa,GAAG,IAAI;EAqDxC"}

package/dist/api/security-events.js

@@ -0,0 +1,71 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createSecurityEventRecorder = createSecurityEventRecorder;
+const node_crypto_1 = require("node:crypto");
+const node_fs_1 = require("node:fs");
+const node_os_1 = require("node:os");
+const node_path_1 = require("node:path");
+const ALERT_WINDOW_MS = 10 * 60 * 1000;
+function createSecurityEventRecorder(options) {
+    const path = options.path ?? (0, node_path_1.join)((0, node_os_1.homedir)(), '.mama', 'logs', 'security-events.jsonl');
+    const lastAlert = new Map();
+    return {
+        path,
+        record(observed) {
+            // The event id is the alert's idempotency key too, so a Telegram alert in the message ledger
+            // leads back to its line here.
+            const shouldAlert = observed.class !== 'owner_access' && observed.class !== 'public_asset' && !options.replay;
+            const now = Date.now();
+            const previous = lastAlert.get(observed.class);
+            const suppressed = shouldAlert && previous !== undefined && now - previous.time < ALERT_WINDOW_MS;
+            if (suppressed)
+                previous.suppressed++;
+            const suppressedSinceLastAlert = previous?.suppressed ?? 0;
+            if (shouldAlert && !suppressed) {
+                // Reserve before asynchronous delivery, including failures; this is one alert per class.
+                lastAlert.set(observed.class, { time: now, suppressed: 0 });
+            }
+            const event = { eventId: (0, node_crypto_1.randomUUID)(), ...observed, suppressedSinceLastAlert };
+            try {
+                (0, node_fs_1.mkdirSync)((0, node_path_1.dirname)(path), { recursive: true });
+                const fd = (0, node_fs_1.openSync)(path, 'a', 0o600);
+                try {
+                    (0, node_fs_1.fchmodSync)(fd, 0o600);
+                    (0, node_fs_1.writeFileSync)(fd, JSON.stringify(event) + '\n');
+                }
+                finally {
+                    (0, node_fs_1.closeSync)(fd);
+                }
+            }
+            catch {
+                // Observation failures must not change the response or expose filesystem details.
+                console.error('[viewer] security_event_write_failed');
+            }
+            if (!shouldAlert || suppressed)
+                return;
+            const timeZone = options.timeZone.get();
+            const localTime = new Date(event.time).toLocaleString('ko-KR', { timeZone });
+            const text = [
+                'Viewer security alert',
+                `Class: ${event.class}`,
+                `Path: ${event.path}`,
+                `Status: ${event.status}`,
+                `Suppressed since previous alert: ${suppressedSinceLastAlert}`,
+                `Time: ${localTime} (${timeZone})`,
+                `Country: ${event.country ?? 'unknown'}`,
+            ].join('\n');
+            void (async () => {
+                try {
+                    if (!options.sendToOwner)
+                        throw new Error('Owner alert delivery is unavailable');
+                    await options.sendToOwner(text, `viewer-security:${event.eventId}`);
+                }
+                catch {
+                    // Gateway errors can include credentials and destination identifiers.
+                    console.error('[viewer] security_alert_failed');
+                }
+            })();
+        },
+    };
+}
+//# sourceMappingURL=security-events.js.map

package/dist/api/security-events.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"security-events.js","sourceRoot":"","sources":["../../src/api/security-events.ts"],"names":[],"mappings":";;AAoCA,kEA2DC;AA/FD,6CAAyC;AACzC,qCAAoF;AACpF,qCAAkC;AAClC,yCAA0C;AA+B1C,MAAM,eAAe,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAEvC,SAAgB,2BAA2B,CAAC,OAA6B;IACvE,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,IAAI,IAAA,gBAAI,EAAC,IAAA,iBAAO,GAAE,EAAE,OAAO,EAAE,MAAM,EAAE,uBAAuB,CAAC,CAAC;IACvF,MAAM,SAAS,GAAG,IAAI,GAAG,EAA4D,CAAC;IAEtF,OAAO;QACL,IAAI;QACJ,MAAM,CAAC,QAAuB;YAC5B,6FAA6F;YAC7F,+BAA+B;YAC/B,MAAM,WAAW,GACf,QAAQ,CAAC,KAAK,KAAK,cAAc,IAAI,QAAQ,CAAC,KAAK,KAAK,cAAc,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC;YAC5F,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YACvB,MAAM,QAAQ,GAAG,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;YAC/C,MAAM,UAAU,GACd,WAAW,IAAI,QAAQ,KAAK,SAAS,IAAI,GAAG,GAAG,QAAQ,CAAC,IAAI,GAAG,eAAe,CAAC;YACjF,IAAI,UAAU;gBAAE,QAAQ,CAAC,UAAU,EAAE,CAAC;YACtC,MAAM,wBAAwB,GAAG,QAAQ,EAAE,UAAU,IAAI,CAAC,CAAC;YAC3D,IAAI,WAAW,IAAI,CAAC,UAAU,EAAE,CAAC;gBAC/B,yFAAyF;gBACzF,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,UAAU,EAAE,CAAC,EAAE,CAAC,CAAC;YAC9D,CAAC;YACD,MAAM,KAAK,GAAG,EAAE,OAAO,EAAE,IAAA,wBAAU,GAAE,EAAE,GAAG,QAAQ,EAAE,wBAAwB,EAAE,CAAC;YAC/E,IAAI,CAAC;gBACH,IAAA,mBAAS,EAAC,IAAA,mBAAO,EAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;gBAC9C,MAAM,EAAE,GAAG,IAAA,kBAAQ,EAAC,IAAI,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC;gBACtC,IAAI,CAAC;oBACH,IAAA,oBAAU,EAAC,EAAE,EAAE,KAAK,CAAC,CAAC;oBACtB,IAAA,uBAAa,EAAC,EAAE,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,CAAC;gBAClD,CAAC;wBAAS,CAAC;oBACT,IAAA,mBAAS,EAAC,EAAE,CAAC,CAAC;gBAChB,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,kFAAkF;gBAClF,OAAO,CAAC,KAAK,CAAC,sCAAsC,CAAC,CAAC;YACxD,CAAC;YAED,IAAI,CAAC,WAAW,IAAI,UAAU;gBAAE,OAAO;YACvC,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC,GAAG,EAAE,CAAC;YACxC,MAAM,SAAS,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,cAAc,CAAC,OAAO,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC;YAC7E,MAAM,IAAI,GAAG;gBACX,uBAAuB;gBACvB,UAAU,KAAK,CAAC,KAAK,EAAE;gBACvB,SAAS,KAAK,CAAC,IAAI,EAAE;gBACrB,WAAW,KAAK,CAAC,MAAM,EAAE;gBACzB,oCAAoC,wBAAwB,EAAE;gBAC9D,SAAS,SAAS,KAAK,QAAQ,GAAG;gBAClC,YAAY,KAAK,CAAC,OAAO,IAAI,SAAS,EAAE;aACzC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACb,KAAK,CAAC,KAAK,IAAI,EAAE;gBACf,IAAI,CAAC;oBACH,IAAI,CAAC,OAAO,CAAC,WAAW;wBAAE,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;oBACjF,MAAM,OAAO,CAAC,WAAW,CAAC,IAAI,EAAE,mBAAmB,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;gBACtE,CAAC;gBAAC,MAAM,CAAC;oBACP,sEAAsE;oBACtE,OAAO,CAAC,KAAK,CAAC,gCAAgC,CAAC,CAAC;gBAClD,CAAC;YACH,CAAC,CAAC,EAAE,CAAC;QACP,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/api/source-actions.d.ts

@@ -0,0 +1,9 @@
+import type { ActionRegistration } from '@jungjaehoon/mama-core';
+import type { StoredSourceReader } from './stored-source-reader.js';
+import type { TimeZoneSetting } from '../runtime/timezone.js';
+export interface SourcePorts {
+    stored?: StoredSourceReader | null;
+    timeZone: TimeZoneSetting;
+}
+export declare function sourceActionRegistrations(ports: SourcePorts): ActionRegistration[];
+//# sourceMappingURL=source-actions.d.ts.map

package/dist/api/source-actions.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"source-actions.d.ts","sourceRoot":"","sources":["../../src/api/source-actions.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAiB,kBAAkB,EAAsB,MAAM,wBAAwB,CAAC;AAEpG,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AACpE,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AAE9D,MAAM,WAAW,WAAW;IAC1B,MAAM,CAAC,EAAE,kBAAkB,GAAG,IAAI,CAAC;IACnC,QAAQ,EAAE,eAAe,CAAC;CAC3B;AAwKD,wBAAgB,yBAAyB,CAAC,KAAK,EAAE,WAAW,GAAG,kBAAkB,EAAE,CAuJlF"}