@oneuptime/common 11.7.3 → 12.0.0

package/build/dist/Server/Services/RumSessionService.js

@@ -0,0 +1,102 @@
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+import AnalyticsDatabaseService from "./AnalyticsDatabaseService";
+import RumSession from "../../Models/AnalyticsModels/RumSession";
+import CaptureSpan from "../Utils/Telemetry/CaptureSpan";
+import TableColumnType from "../../Types/AnalyticsDatabase/TableColumnType";
+import { SQL } from "../Utils/AnalyticsDatabase/Statement";
+import { getQuerySettings } from "../Utils/AnalyticsDatabase/QuerySettingsHelper";
+export class RumSessionService extends AnalyticsDatabaseService {
+    constructor(clickhouseDatabase) {
+        super({ modelType: RumSession, database: clickhouseDatabase });
+    }
+    /*
+     * Session-replay usage for billing.
+     *
+     * Deliberately NOT the inherited groupTelemetryUsageByService, for two
+     * reasons that both matter:
+     *
+     * 1. It meters off THIS table, never the chunk table. Chunks are
+     *    partitioned by expiry date, so a "yesterday" window over them cannot
+     *    prune partitions and would full-scan a multi-gigabyte blob table under
+     *    the 120s cap. A timeout there is not a retry - stageTelemetryUsage
+     *    always targets yesterday and nothing re-stages an older date, so the
+     *    day would be billed as zero permanently.
+     *
+     * 2. It sums the exact payloadBytes recorded at ingest rather than
+     *    byteSize(*). byteSize is ClickHouse's uncompressed in-memory row size,
+     *    which for a table whose rows are mostly a few narrow numbers would
+     *    have nothing to do with what was actually ingested.
+     *
+     * isFinalized = 1 excludes provisional headers, whose aggregates are still
+     * zero. A session that finalizes across the staging boundary is therefore
+     * billed on the following day's run at its true size, rather than being
+     * billed now at zero and never corrected.
+     *
+     * The inner ORDER BY / LIMIT 1 BY collapses ReplacingMergeTree versions:
+     * there is no FINAL support anywhere in this repo, so duplicate versions of
+     * a header are visible until a merge and would otherwise be summed twice.
+     */
+    async groupSessionReplayUsageByEntity(data) {
+        if (!this.database) {
+            this.useDefaultDatabase();
+        }
+        const databaseName = this.database.getDatasourceOptions().database;
+        const statement = SQL `SELECT primaryEntityId AS primaryEntityId, primaryEntityType AS primaryEntityType, count() AS rowCount, sum(payloadBytes) AS estimatedBytes FROM (SELECT projectId, sessionId, primaryEntityId, primaryEntityType, payloadBytes FROM ${databaseName}.${this.model.tableName} WHERE projectId = ${{
+            type: TableColumnType.ObjectID,
+            value: data.projectId,
+        }} AND startTime >= ${{
+            type: TableColumnType.DateTime64,
+            value: data.startDate,
+        }} AND startTime <= ${{
+            type: TableColumnType.DateTime64,
+            value: data.endDate,
+        }} AND isFinalized = 1 ORDER BY version DESC LIMIT 1 BY projectId, sessionId) GROUP BY primaryEntityId, primaryEntityType`;
+        /*
+         * Same reasoning as the shared billing scan: no
+         * timeout_overflow_mode='break', because a partial aggregation would
+         * silently undercount and be billed as though it were complete.
+         */
+        statement.append(getQuerySettings({ maxExecutionTimeInSeconds: 120 }));
+        const dbResult = await this.executeQuery(statement);
+        const responseJSON = await dbResult.json();
+        const items = responseJSON.data ? responseJSON.data : [];
+        const results = [];
+        for (const item of items) {
+            const primaryEntityId = item["primaryEntityId"] || "";
+            if (!primaryEntityId) {
+                continue;
+            }
+            const entityTypeRaw = item["primaryEntityType"];
+            const primaryEntityType = typeof entityTypeRaw === "string" && entityTypeRaw.trim()
+                ? entityTypeRaw
+                : null;
+            results.push({
+                primaryEntityId: primaryEntityId,
+                primaryEntityType: primaryEntityType,
+                /*
+                 * 64-bit sums arrive from ClickHouse as JSON strings, so Number() is
+                 * load-bearing rather than defensive.
+                 */
+                rowCount: Number(item["rowCount"]) || 0,
+                estimatedBytes: Number(item["estimatedBytes"]) || 0,
+            });
+        }
+        return results;
+    }
+}
+__decorate([
+    CaptureSpan(),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object]),
+    __metadata("design:returntype", Promise)
+], RumSessionService.prototype, "groupSessionReplayUsageByEntity", null);
+export default new RumSessionService();
+//# sourceMappingURL=RumSessionService.js.map

package/build/dist/Server/Services/RumSessionService.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"RumSessionService.js","sourceRoot":"","sources":["../../../../Server/Services/RumSessionService.ts"],"names":[],"mappings":";;;;;;;;;AACA,OAAO,wBAAwB,MAAM,4BAA4B,CAAC;AAClE,OAAO,UAAU,MAAM,yCAAyC,CAAC;AACjE,OAAO,WAAW,MAAM,gCAAgC,CAAC;AACzD,OAAO,eAAe,MAAM,+CAA+C,CAAC;AAG5E,OAAO,EAAE,GAAG,EAAa,MAAM,sCAAsC,CAAC;AACtE,OAAO,EAAE,gBAAgB,EAAE,MAAM,gDAAgD,CAAC;AAGlF,MAAM,OAAO,iBAAkB,SAAQ,wBAAoC;IACzE,YAAmB,kBAAmD;QACpE,KAAK,CAAC,EAAE,SAAS,EAAE,UAAU,EAAE,QAAQ,EAAE,kBAAkB,EAAE,CAAC,CAAC;IACjE,CAAC;IAED;;;;;;;;;;;;;;;;;;;;;;;;;;OA0BG;IAEU,AAAN,KAAK,CAAC,+BAA+B,CAAC,IAI5C;QAQC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;YACnB,IAAI,CAAC,kBAAkB,EAAE,CAAC;QAC5B,CAAC;QAED,MAAM,YAAY,GAChB,IAAI,CAAC,QAAS,CAAC,oBAAoB,EAAE,CAAC,QAAS,CAAC;QAElD,MAAM,SAAS,GAAc,GAAG,CAAA,wOAAwO,YAAY,IAAI,IAAI,CAAC,KAAK,CAAC,SAAS,sBAAsB;YAChU,IAAI,EAAE,eAAe,CAAC,QAAQ;YAC9B,KAAK,EAAE,IAAI,CAAC,SAAS;SACtB,qBAAqB;YACpB,IAAI,EAAE,eAAe,CAAC,UAAU;YAChC,KAAK,EAAE,IAAI,CAAC,SAAS;SACtB,qBAAqB;YACpB,IAAI,EAAE,eAAe,CAAC,UAAU;YAChC,KAAK,EAAE,IAAI,CAAC,OAAO;SACpB,yHAAyH,CAAC;QAE3H;;;;WAIG;QACH,SAAS,CAAC,MAAM,CAAC,gBAAgB,CAAC,EAAE,yBAAyB,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC;QAEvE,MAAM,QAAQ,GAAsB,MAAM,IAAI,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC;QACvE,MAAM,YAAY,GAChB,MAAM,QAAQ,CAAC,IAAI,EAAc,CAAC;QACpC,MAAM,KAAK,GAAsB,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;QAE5E,MAAM,OAAO,GAKR,EAAE,CAAC;QAER,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,MAAM,eAAe,GAAY,IAAI,CAAC,iBAAiB,CAAY,IAAI,EAAE,CAAC;YAE1E,IAAI,CAAC,eAAe,EAAE,CAAC;gBACrB,SAAS;YACX,CAAC;YAED,MAAM,aAAa,GAAY,IAAI,CAAC,mBAAmB,CAAC,CAAC;YACzD,MAAM,iBAAiB,GACrB,OAAO,aAAa,KAAK,QAAQ,IAAI,aAAa,CAAC,IAAI,EAAE;gBACvD,CAAC,CAAC,aAAa;gBACf,CAAC,CAAC,IAAI,CAAC;YAEX,OAAO,CAAC,IAAI,CAAC;gBACX,eAAe,EAAE,eAAe;gBAChC,iBAAiB,EAAE,iBAAiB;gBACpC;;;mBAGG;gBACH,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC;gBACvC,cAAc,EAAE,MAAM,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,IAAI,CAAC;aACpD,CAAC,CAAC;QACL,CAAC;QAED,OAAO,OAAO,CAAC;IACjB,CAAC;CACF;AA5Ec;IADZ,WAAW,EAAE;;;;wEA4Eb;AAGH,eAAe,IAAI,iBAAiB,EAAE,CAAC"}

package/build/dist/Server/Services/RunbookCredentialService.js

@@ -0,0 +1,67 @@
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+import DatabaseService from "./DatabaseService";
+import BadDataException from "../../Types/Exception/BadDataException";
+import RunbookCredentialType from "../../Types/Runbook/RunbookCredentialType";
+import RunbookCredential from "../../Models/DatabaseModels/RunbookCredential";
+import CaptureSpan from "../Utils/Telemetry/CaptureSpan";
+export class Service extends DatabaseService {
+    constructor() {
+        super(RunbookCredential);
+    }
+    /*
+     * A credential that is missing what its type needs is not a credential —
+     * it is a step that will fail at execution time, on the far side of an
+     * approval, in front of somebody's incident. Reject it at creation.
+     */
+    async onBeforeCreate(createBy) {
+        const type = createBy.data.credentialType;
+        if (!type) {
+            throw new BadDataException("Credential type is required.");
+        }
+        if (type === RunbookCredentialType.SSH) {
+            if (!createBy.data.sshHostname) {
+                throw new BadDataException("SSH credentials need a hostname.");
+            }
+            if (!createBy.data.sshUsername) {
+                throw new BadDataException("SSH credentials need a username.");
+            }
+            if (!createBy.data.sshPrivateKey && !createBy.data.sshPassword) {
+                throw new BadDataException("SSH credentials need either a private key or a password.");
+            }
+        }
+        /*
+         * The column is free text, not a database enum, so an unrecognised type
+         * would otherwise create a credential that skips every check below and
+         * can never be executed by anything.
+         */
+        if (type !== RunbookCredentialType.SSH &&
+            type !== RunbookCredentialType.Kubernetes) {
+            throw new BadDataException(`Unknown credential type: ${String(type)}`);
+        }
+        if (type === RunbookCredentialType.Kubernetes) {
+            if (!createBy.data.kubernetesApiServerUrl) {
+                throw new BadDataException("Kubernetes credentials need an API server URL.");
+            }
+            if (!createBy.data.kubernetesServiceAccountToken) {
+                throw new BadDataException("Kubernetes credentials need a service account token.");
+            }
+        }
+        return { createBy, carryForward: [] };
+    }
+}
+__decorate([
+    CaptureSpan(),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object]),
+    __metadata("design:returntype", Promise)
+], Service.prototype, "onBeforeCreate", null);
+export default new Service();
+//# sourceMappingURL=RunbookCredentialService.js.map

package/build/dist/Server/Services/RunbookCredentialService.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"RunbookCredentialService.js","sourceRoot":"","sources":["../../../../Server/Services/RunbookCredentialService.ts"],"names":[],"mappings":";;;;;;;;;AAAA,OAAO,eAAe,MAAM,mBAAmB,CAAC;AAGhD,OAAO,gBAAgB,MAAM,wCAAwC,CAAC;AACtE,OAAO,qBAAqB,MAAM,2CAA2C,CAAC;AAC9E,OAAO,iBAAiB,MAAM,+CAA+C,CAAC;AAC9E,OAAO,WAAW,MAAM,gCAAgC,CAAC;AAEzD,MAAM,OAAO,OAAQ,SAAQ,eAAkC;IAC7D;QACE,KAAK,CAAC,iBAAiB,CAAC,CAAC;IAC3B,CAAC;IAED;;;;OAIG;IAEsB,AAAN,KAAK,CAAC,cAAc,CACrC,QAAqC;QAErC,MAAM,IAAI,GACR,QAAQ,CAAC,IAAI,CAAC,cAAc,CAAC;QAE/B,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,MAAM,IAAI,gBAAgB,CAAC,8BAA8B,CAAC,CAAC;QAC7D,CAAC;QAED,IAAI,IAAI,KAAK,qBAAqB,CAAC,GAAG,EAAE,CAAC;YACvC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;gBAC/B,MAAM,IAAI,gBAAgB,CAAC,kCAAkC,CAAC,CAAC;YACjE,CAAC;YAED,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;gBAC/B,MAAM,IAAI,gBAAgB,CAAC,kCAAkC,CAAC,CAAC;YACjE,CAAC;YAED,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,aAAa,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;gBAC/D,MAAM,IAAI,gBAAgB,CACxB,0DAA0D,CAC3D,CAAC;YACJ,CAAC;QACH,CAAC;QAED;;;;WAIG;QACH,IACE,IAAI,KAAK,qBAAqB,CAAC,GAAG;YAClC,IAAI,KAAK,qBAAqB,CAAC,UAAU,EACzC,CAAC;YACD,MAAM,IAAI,gBAAgB,CAAC,4BAA4B,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACzE,CAAC;QAED,IAAI,IAAI,KAAK,qBAAqB,CAAC,UAAU,EAAE,CAAC;YAC9C,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,sBAAsB,EAAE,CAAC;gBAC1C,MAAM,IAAI,gBAAgB,CACxB,gDAAgD,CACjD,CAAC;YACJ,CAAC;YAED,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,6BAA6B,EAAE,CAAC;gBACjD,MAAM,IAAI,gBAAgB,CACxB,sDAAsD,CACvD,CAAC;YACJ,CAAC;QACH,CAAC;QAED,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,EAAE,EAAE,CAAC;IACxC,CAAC;CACF;AAtD0B;IADxB,WAAW,EAAE;;;;6CAsDb;AAGH,eAAe,IAAI,OAAO,EAAE,CAAC"}

package/build/dist/Server/Services/{RunbookAgentJobService.js → RunnerJobService.js}

@@ -10,9 +10,20 @@ var __metadata = (this && this.__metadata) || function (k, v) {
 import DatabaseService from "./DatabaseService";
 import ObjectID from "../../Types/ObjectID";
 import BadDataException from "../../Types/Exception/BadDataException";
-import Model from "../../Models/DatabaseModels/RunbookAgentJob";
-import RunbookAgentJobStatus from "../../Types/Runbook/RunbookAgentJobStatus";
-import RunbookStepType from "../../Types/Runbook/RunbookStepType";
+import Model from "../../Models/DatabaseModels/RunnerJob";
+import RunnerJobStatus from "../../Types/Runbook/RunnerJobStatus";
+import RunnerJobOrigin from "../../Types/Runbook/RunnerJobOrigin";
+import RunbookStepType, { isRunnerExecutedStepType, } from "../../Types/Runbook/RunbookStepType";
+import { AI_COMMAND_STEP_TYPES } from "../../Types/AutoRemediation/AiRemediationCommandPlan";
+import CommandPolicy from "../../Utils/AiRemediation/CommandPolicy";
+import QueryHelper from "../Types/Database/QueryHelper";
+/*
+ * Project-wide hourly ceiling on AI-composed command jobs, counted on the
+ * RunnerJob rows themselves so every path (FullAuto inline execution,
+ * approved plans, rollbacks) shares one brake.
+ */
+export const MAX_AI_COMMAND_JOBS_PER_PROJECT_PER_HOUR = 30;
+import SortOrder from "../../Types/BaseDatabase/SortOrder";
 import OneUptimeDate from "../../Types/Date";
 import PostgresAppInstance from "../Infrastructure/PostgresDatabase";
 import logger from "../Utils/Logger";
@@ -31,6 +42,20 @@ const DEFAULT_LEASE_MS = 30000;
  */
 const DEFAULT_CLAIM_TIMEOUT_MS = 2 * 60000;
 const POLL_INTERVAL_MS = 500;
+/*
+ * A job in one of these states will never change again, so its row is a
+ * durable record of what the step did. Everything else is still in flight and
+ * can be waited on.
+ */
+const TERMINAL_STATUSES = [
+    RunnerJobStatus.Succeeded,
+    RunnerJobStatus.Failed,
+    RunnerJobStatus.TimedOut,
+    RunnerJobStatus.Cancelled,
+];
+export function isTerminalAgentJobStatus(status) {
+    return Boolean(status && TERMINAL_STATUSES.includes(status));
+}
 /*
  * TypeORM's dataSource.query returns `[rows, rowCount]` for UPDATE/DELETE
  * (even with RETURNING), and just `rows` for SELECT/INSERT. This helper
@@ -54,25 +79,137 @@ export class Service extends DatabaseService {
     async enqueue(data) {
         var _a;
         if (!data.targetAgentId) {
-            throw new BadDataException("targetAgentId is required to dispatch a step to a Runbook Agent.");
+            throw new BadDataException("targetAgentId is required to dispatch a step to a Runner.");
         }
-        if (data.stepType !== RunbookStepType.Bash &&
-            data.stepType !== RunbookStepType.JavaScript) {
-            throw new BadDataException(`RunbookAgent does not execute step type "${data.stepType}".`);
+        if (!isRunnerExecutedStepType(data.stepType)) {
+            throw new BadDataException(`Runner does not execute step type "${data.stepType}".`);
         }
         const claimDeadlineAt = OneUptimeDate.addRemoveSeconds(OneUptimeDate.getCurrentDate(), Math.ceil(((_a = data.claimTimeoutInMs) !== null && _a !== void 0 ? _a : DEFAULT_CLAIM_TIMEOUT_MS) / 1000));
         const row = new Model();
         row.projectId = data.projectId;
         row.runbookExecutionId = data.runbookExecutionId;
+        row.origin = RunnerJobOrigin.Runbook;
         row.stepId = data.stepId;
         row.stepType = data.stepType;
         row.targetAgentId = data.targetAgentId;
         row.script = data.script;
+        if (data.payload) {
+            row.payload = data.payload;
+        }
         row.timeoutInMs = data.timeoutInMs;
-        row.status = RunbookAgentJobStatus.Pending;
+        row.status = RunnerJobStatus.Pending;
         row.claimDeadlineAt = claimDeadlineAt;
         return this.create({ data: row, props: { isRoot: true } });
     }
+    /*
+     * Enqueue an ad-hoc AI-composed command as an AiRemediation-origin job.
+     * This is a server-side chokepoint on the path an LLM's output takes to a
+     * shell, so it re-validates what the tool layer already checked: step
+     * type and the hard command denylist. The claim path then only serves
+     * these jobs to Runners whose canRunAiCommands capability is on.
+     */
+    async enqueueAiCommand(data) {
+        var _a;
+        if (!data.targetAgentId) {
+            throw new BadDataException("targetAgentId is required to dispatch a command to a Runner.");
+        }
+        if (!AI_COMMAND_STEP_TYPES.includes(data.stepType)) {
+            throw new BadDataException(`AI remediation does not execute step type "${data.stepType}".`);
+        }
+        const command = (data.command || "").trim();
+        if (!command) {
+            throw new BadDataException("An AI command job needs a command.");
+        }
+        const denyReason = CommandPolicy.getDenyReason(command);
+        if (denyReason) {
+            throw new BadDataException(`Denied by the remediation command policy: ${denyReason}.`);
+        }
+        if (data.stepType === RunbookStepType.SSH && !data.credentialId) {
+            throw new BadDataException("An SSH command job needs a credentialId.");
+        }
+        /*
+         * Project-wide hourly storm brake for the whole AI-command lane. It
+         * lives HERE, at the single enqueue chokepoint, so it also bounds the
+         * approved-plan and rollback paths — not just the FullAuto inline tool
+         * that has its own pre-check for a friendlier message to the model.
+         * Check-then-act, so a burst of concurrent runs can overshoot slightly;
+         * the cap is a storm brake, not a quota.
+         */
+        const jobsInLastHour = (await this.countBy({
+            query: {
+                projectId: data.projectId,
+                origin: RunnerJobOrigin.AiRemediation,
+                createdAt: QueryHelper.greaterThan(OneUptimeDate.getSomeHoursAgo(1)),
+            },
+            props: { isRoot: true },
+        })).toNumber();
+        if (jobsInLastHour >= MAX_AI_COMMAND_JOBS_PER_PROJECT_PER_HOUR) {
+            throw new BadDataException(`This project has run ${jobsInLastHour} AI remediation commands in the last hour, which is its limit (${MAX_AI_COMMAND_JOBS_PER_PROJECT_PER_HOUR}). No further AI commands can run this hour.`);
+        }
+        const claimDeadlineAt = OneUptimeDate.addRemoveSeconds(OneUptimeDate.getCurrentDate(), Math.ceil(((_a = data.claimTimeoutInMs) !== null && _a !== void 0 ? _a : DEFAULT_CLAIM_TIMEOUT_MS) / 1000));
+        const row = new Model();
+        row.projectId = data.projectId;
+        row.origin = RunnerJobOrigin.AiRemediation;
+        row.aiRunId = data.aiRunId;
+        row.autoRemediationSuggestionId = data.autoRemediationSuggestionId;
+        row.stepId = data.stepId;
+        row.stepType = data.stepType;
+        row.targetAgentId = data.targetAgentId;
+        /*
+         * Same layout the runbook step executors use: Bash carries the command
+         * as the script; SSH carries an empty script plus structured payload,
+         * and the credential is resolved at claim time — never stored here.
+         */
+        if (data.stepType === RunbookStepType.Bash) {
+            row.script = command;
+        }
+        else {
+            row.script = "";
+            row.payload = {
+                credentialId: data.credentialId,
+                command: command,
+            };
+        }
+        row.timeoutInMs = data.timeoutInMs;
+        row.status = RunnerJobStatus.Pending;
+        row.claimDeadlineAt = claimDeadlineAt;
+        return this.create({ data: row, props: { isRoot: true } });
+    }
+    /*
+     * The job this (execution, step) pair already produced, if any.
+     *
+     * A runbook execution runs inside a single BullMQ job, so a Worker restart
+     * mid-step means the execution is re-delivered and RunRunbook walks back to
+     * the same step — which is still persisted as Running. Without this lookup
+     * the step would be dispatched a second time and the agent would run the
+     * script again. The dispatcher calls this first: a terminal row is the
+     * step's result, a live row is something to re-attach to.
+     *
+     * A step is dispatched at most once per execution, so the newest row is the
+     * only one there can be; ordering is belt-and-braces against a torn write
+     * from a previous release.
+     */
+    async findLatestJobForStep(data) {
+        const jobs = await this.findBy({
+            query: {
+                runbookExecutionId: data.runbookExecutionId,
+                stepId: data.stepId,
+            },
+            select: {
+                _id: true,
+                status: true,
+                output: true,
+                exitCode: true,
+                errorMessage: true,
+                createdAt: true,
+            },
+            sort: { createdAt: SortOrder.Descending },
+            limit: 1,
+            skip: 0,
+            props: { isRoot: true },
+        });
+        return jobs[0] || null;
+    }
     /*
      * Atomically claim the oldest Pending job in the agent's project targeted
      * at this specific agent. Uses FOR UPDATE SKIP LOCKED so concurrent agents
@@ -85,19 +222,23 @@ export class Service extends DatabaseService {
             throw new BadDataException("Database is not connected");
         }
         const leaseMs = (_a = data.leaseMs) !== null && _a !== void 0 ? _a : DEFAULT_LEASE_MS;
+        const allowedOrigins = data.allowedOrigins && data.allowedOrigins.length > 0
+            ? data.allowedOrigins
+            : [RunnerJobOrigin.Runbook];
         const sql = `
       WITH claimed AS (
-        SELECT "_id" FROM "RunbookAgentJob"
+        SELECT "_id" FROM "RunnerJob"
         WHERE "projectId" = $1::uuid
           AND "status" = $2
           AND "targetAgentId" = $3::uuid
+          AND "origin" = ANY($6::text[])
           AND "claimDeadlineAt" > NOW()
           AND "deletedAt" IS NULL
         ORDER BY "createdAt" ASC
         LIMIT 1
         FOR UPDATE SKIP LOCKED
       )
-      UPDATE "RunbookAgentJob" j
+      UPDATE "RunnerJob" j
       SET "status" = $4,
           "assignedAgentId" = $3::uuid,
           "claimedAt" = NOW(),
@@ -106,16 +247,19 @@ export class Service extends DatabaseService {
           "version" = j."version" + 1
       FROM claimed
       WHERE j."_id" = claimed."_id"
-      RETURNING j."_id", j."projectId", j."runbookExecutionId",
+      RETURNING j."_id", j."projectId", j."runbookExecutionId", j."origin",
+                j."aiRunId", j."autoRemediationSuggestionId",
                 j."stepId", j."stepType", j."targetAgentId", j."script",
-                j."timeoutInMs", j."status", j."claimedAt", j."leaseExpiresAt";
+                j."payload", j."timeoutInMs", j."status", j."claimedAt",
+                j."leaseExpiresAt";
     `;
         const rows = unwrapRows(await dataSource.query(sql, [
             data.projectId.toString(),
-            RunbookAgentJobStatus.Pending,
+            RunnerJobStatus.Pending,
             data.agentId.toString(),
-            RunbookAgentJobStatus.Claimed,
+            RunnerJobStatus.Claimed,
             leaseMs.toString(),
+            allowedOrigins,
         ]));
         if (!rows || rows.length === 0) {
             return null;
@@ -124,11 +268,23 @@ export class Service extends DatabaseService {
         const job = new Model();
         job._id = String(r["_id"]);
         job.projectId = new ObjectID(String(r["projectId"]));
-        job.runbookExecutionId = new ObjectID(String(r["runbookExecutionId"]));
+        if (r["runbookExecutionId"]) {
+            job.runbookExecutionId = new ObjectID(String(r["runbookExecutionId"]));
+        }
+        job.origin = r["origin"] || RunnerJobOrigin.Runbook;
+        if (r["aiRunId"]) {
+            job.aiRunId = new ObjectID(String(r["aiRunId"]));
+        }
+        if (r["autoRemediationSuggestionId"]) {
+            job.autoRemediationSuggestionId = new ObjectID(String(r["autoRemediationSuggestionId"]));
+        }
         job.stepId = String(r["stepId"]);
         job.stepType = r["stepType"];
         job.targetAgentId = new ObjectID(String(r["targetAgentId"]));
         job.script = String(r["script"]);
+        if (r["payload"] && typeof r["payload"] === "object") {
+            job.payload = r["payload"];
+        }
         job.timeoutInMs = Number(r["timeoutInMs"]);
         job.status = r["status"];
         if (r["claimedAt"]) {
@@ -153,7 +309,7 @@ export class Service extends DatabaseService {
          * should stop executing.
          */
         const sql = `
-      UPDATE "RunbookAgentJob"
+      UPDATE "RunnerJob"
       SET "status" = CASE WHEN "status" = $4 THEN $5 ELSE "status" END,
           "startedAt" = COALESCE("startedAt", NOW()),
           "leaseExpiresAt" = NOW() + ($1 || ' milliseconds')::interval,
@@ -168,8 +324,8 @@ export class Service extends DatabaseService {
             leaseMs.toString(),
             data.jobId.toString(),
             data.agentId.toString(),
-            RunbookAgentJobStatus.Claimed,
-            RunbookAgentJobStatus.Running,
+            RunnerJobStatus.Claimed,
+            RunnerJobStatus.Running,
         ]));
         return rows.length > 0;
     }
@@ -180,15 +336,15 @@ export class Service extends DatabaseService {
             throw new BadDataException("Database is not connected");
         }
         const status = data.success
-            ? RunbookAgentJobStatus.Succeeded
-            : RunbookAgentJobStatus.Failed;
+            ? RunnerJobStatus.Succeeded
+            : RunnerJobStatus.Failed;
         /*
          * Only the agent that holds the lease is allowed to write the terminal
          * result. If the lease has already moved on (Worker timed out and
          * reclaimed), this is a no-op.
          */
         const sql = `
-      UPDATE "RunbookAgentJob"
+      UPDATE "RunnerJob"
       SET "status" = $1,
           "output" = $2,
           "exitCode" = $3,
@@ -208,8 +364,8 @@ export class Service extends DatabaseService {
             (_c = data.errorMessage) !== null && _c !== void 0 ? _c : null,
             data.jobId.toString(),
             data.agentId.toString(),
-            RunbookAgentJobStatus.Claimed,
-            RunbookAgentJobStatus.Running,
+            RunnerJobStatus.Claimed,
+            RunnerJobStatus.Running,
         ]));
         return rows.length > 0;
     }
@@ -218,9 +374,14 @@ export class Service extends DatabaseService {
      * POLL_INTERVAL_MS until the job reaches a terminal status, or until the
      * combined claim + execution window is exhausted (in which case we mark
      * the job TimedOut ourselves and return it).
+     *
+     * waitStartedAt anchors that window. It defaults to now — right for a job
+     * this Worker just enqueued — but a Worker re-attaching to a job left behind
+     * by a restart passes the job's createdAt, so the step keeps the single
+     * window its author configured instead of earning a fresh one per redelivery.
      */
     async pollUntilTerminal(data) {
-        const overallDeadline = OneUptimeDate.addRemoveSeconds(OneUptimeDate.getCurrentDate(), Math.ceil((data.claimTimeoutInMs + data.executionTimeoutInMs + 5000) / 1000));
+        const overallDeadline = OneUptimeDate.addRemoveSeconds(data.waitStartedAt || OneUptimeDate.getCurrentDate(), Math.ceil((data.claimTimeoutInMs + data.executionTimeoutInMs + 5000) / 1000));
         while (true) {
             const job = await this.findOneById({
                 id: data.jobId,
@@ -240,17 +401,14 @@ export class Service extends DatabaseService {
                 props: { isRoot: true },
             });
             if (!job) {
-                throw new BadDataException(`RunbookAgentJob ${data.jobId.toString()} disappeared while waiting.`);
+                throw new BadDataException(`RunnerJob ${data.jobId.toString()} disappeared while waiting.`);
             }
-            if (job.status === RunbookAgentJobStatus.Succeeded ||
-                job.status === RunbookAgentJobStatus.Failed ||
-                job.status === RunbookAgentJobStatus.TimedOut ||
-                job.status === RunbookAgentJobStatus.Cancelled) {
+            if (isTerminalAgentJobStatus(job.status)) {
                 return job;
             }
             const now = OneUptimeDate.getCurrentDate();
             // Pending with claim deadline elapsed -> no agent picked it up.
-            if (job.status === RunbookAgentJobStatus.Pending &&
+            if (job.status === RunnerJobStatus.Pending &&
                 job.claimDeadlineAt &&
                 now > job.claimDeadlineAt) {
                 return this.timeoutJob({
@@ -259,8 +417,8 @@ export class Service extends DatabaseService {
                 });
             }
             // Claimed/Running with lease elapsed -> agent went silent.
-            if ((job.status === RunbookAgentJobStatus.Claimed ||
-                job.status === RunbookAgentJobStatus.Running) &&
+            if ((job.status === RunnerJobStatus.Claimed ||
+                job.status === RunnerJobStatus.Running) &&
                 job.leaseExpiresAt &&
                 now > job.leaseExpiresAt) {
                 return this.timeoutJob({
@@ -287,7 +445,7 @@ export class Service extends DatabaseService {
          * state. The same agent's late-arriving result must lose to this race.
          */
         const sql = `
-      UPDATE "RunbookAgentJob"
+      UPDATE "RunnerJob"
       SET "status" = $1,
           "errorMessage" = $2,
           "completedAt" = NOW(),
@@ -298,13 +456,13 @@ export class Service extends DatabaseService {
       RETURNING "_id";
     `;
         await dataSource.query(sql, [
-            RunbookAgentJobStatus.TimedOut,
+            RunnerJobStatus.TimedOut,
             data.reason,
             data.jobId.toString(),
-            RunbookAgentJobStatus.Succeeded,
-            RunbookAgentJobStatus.Failed,
-            RunbookAgentJobStatus.TimedOut,
-            RunbookAgentJobStatus.Cancelled,
+            RunnerJobStatus.Succeeded,
+            RunnerJobStatus.Failed,
+            RunnerJobStatus.TimedOut,
+            RunnerJobStatus.Cancelled,
         ]);
         const updated = await this.findOneById({
             id: data.jobId,
@@ -319,7 +477,7 @@ export class Service extends DatabaseService {
             props: { isRoot: true },
         });
         if (!updated) {
-            throw new BadDataException(`RunbookAgentJob ${data.jobId.toString()} not found while timing out.`);
+            throw new BadDataException(`RunnerJob ${data.jobId.toString()} not found while timing out.`);
         }
         return updated;
     }
@@ -329,20 +487,20 @@ export class Service extends DatabaseService {
             throw new BadDataException("Database is not connected");
         }
         try {
-            await dataSource.query(`UPDATE "RunbookAgentJob"
+            await dataSource.query(`UPDATE "RunnerJob"
          SET "status" = $1, "completedAt" = NOW(), "updatedAt" = NOW(), "version" = "version" + 1
          WHERE "runbookExecutionId" = $2::uuid
            AND "status" NOT IN ($3, $4, $5, $6)`, [
-                RunbookAgentJobStatus.Cancelled,
+                RunnerJobStatus.Cancelled,
                 data.runbookExecutionId.toString(),
-                RunbookAgentJobStatus.Succeeded,
-                RunbookAgentJobStatus.Failed,
-                RunbookAgentJobStatus.TimedOut,
-                RunbookAgentJobStatus.Cancelled,
+                RunnerJobStatus.Succeeded,
+                RunnerJobStatus.Failed,
+                RunnerJobStatus.TimedOut,
+                RunnerJobStatus.Cancelled,
             ]);
         }
         catch (err) {
-            logger.error("Failed to cancel RunbookAgentJobs for execution");
+            logger.error("Failed to cancel RunnerJobs for execution");
             logger.error(err);
         }
     }
@@ -353,6 +511,18 @@ __decorate([
     __metadata("design:paramtypes", [Object]),
     __metadata("design:returntype", Promise)
 ], Service.prototype, "enqueue", null);
+__decorate([
+    CaptureSpan(),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object]),
+    __metadata("design:returntype", Promise)
+], Service.prototype, "enqueueAiCommand", null);
+__decorate([
+    CaptureSpan(),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object]),
+    __metadata("design:returntype", Promise)
+], Service.prototype, "findLatestJobForStep", null);
 __decorate([
     CaptureSpan(),
     __metadata("design:type", Function),
@@ -390,4 +560,4 @@ __decorate([
     __metadata("design:returntype", Promise)
 ], Service.prototype, "cancelJobsForExecution", null);
 export default new Service();
-//# sourceMappingURL=RunbookAgentJobService.js.map
+//# sourceMappingURL=RunnerJobService.js.map

package/build/dist/Server/Services/RunnerJobService.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"RunnerJobService.js","sourceRoot":"","sources":["../../../../Server/Services/RunnerJobService.ts"],"names":[],"mappings":";;;;;;;;;AAAA,OAAO,eAAe,MAAM,mBAAmB,CAAC;AAChD,OAAO,QAAQ,MAAM,sBAAsB,CAAC;AAC5C,OAAO,gBAAgB,MAAM,wCAAwC,CAAC;AACtE,OAAO,KAAK,MAAM,uCAAuC,CAAC;AAC1D,OAAO,eAAe,MAAM,qCAAqC,CAAC;AAClE,OAAO,eAAe,MAAM,qCAAqC,CAAC;AAClE,OAAO,eAAe,EAAE,EACtB,wBAAwB,GACzB,MAAM,qCAAqC,CAAC;AAC7C,OAAO,EAAE,qBAAqB,EAAE,MAAM,sDAAsD,CAAC;AAC7F,OAAO,aAAa,MAAM,yCAAyC,CAAC;AACpE,OAAO,WAAW,MAAM,+BAA+B,CAAC;AAExD;;;;GAIG;AACH,MAAM,CAAC,MAAM,wCAAwC,GAAW,EAAE,CAAC;AACnE,OAAO,SAAS,MAAM,oCAAoC,CAAC;AAC3D,OAAO,aAAa,MAAM,kBAAkB,CAAC;AAE7C,OAAO,mBAAmB,MAAM,oCAAoC,CAAC;AACrE,OAAO,MAAM,MAAM,iBAAiB,CAAC;AACrC,OAAO,KAAK,MAAM,mBAAmB,CAAC;AACtC,OAAO,WAAW,MAAM,gCAAgC,CAAC;AAEzD;;;;GAIG;AACH,MAAM,gBAAgB,GAAW,KAAM,CAAC;AACxC;;;;GAIG;AACH,MAAM,wBAAwB,GAAW,CAAC,GAAG,KAAM,CAAC;AAEpD,MAAM,gBAAgB,GAAW,GAAG,CAAC;AAErC;;;;GAIG;AACH,MAAM,iBAAiB,GAA2B;IAChD,eAAe,CAAC,SAAS;IACzB,eAAe,CAAC,MAAM;IACtB,eAAe,CAAC,QAAQ;IACxB,eAAe,CAAC,SAAS;CAC1B,CAAC;AAEF,MAAM,UAAU,wBAAwB,CACtC,MAAmC;IAEnC,OAAO,OAAO,CAAC,MAAM,IAAI,iBAAiB,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;AAC/D,CAAC;AAED;;;;GAIG;AACH,SAAS,UAAU,CAAC,MAAe;IACjC,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QAC1B,IACE,MAAM,CAAC,MAAM,KAAK,CAAC;YACnB,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;YACxB,OAAO,MAAM,CAAC,CAAC,CAAC,KAAK,QAAQ,EAC7B,CAAC;YACD,OAAO,MAAM,CAAC,CAAC,CAAsB,CAAC;QACxC,CAAC;QACD,OAAO,MAA2B,CAAC;IACrC,CAAC;IACD,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,MAAM,OAAO,OAAQ,SAAQ,eAAsB;IACjD;QACE,KAAK,CAAC,KAAK,CAAC,CAAC;IACf,CAAC;IAGY,AAAN,KAAK,CAAC,OAAO,CAAC,IAUpB;;QACC,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC;YACxB,MAAM,IAAI,gBAAgB,CACxB,2DAA2D,CAC5D,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,wBAAwB,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC7C,MAAM,IAAI,gBAAgB,CACxB,sCAAsC,IAAI,CAAC,QAAQ,IAAI,CACxD,CAAC;QACJ,CAAC;QAED,MAAM,eAAe,GAAS,aAAa,CAAC,gBAAgB,CAC1D,aAAa,CAAC,cAAc,EAAE,EAC9B,IAAI,CAAC,IAAI,CAAC,CAAC,MAAA,IAAI,CAAC,gBAAgB,mCAAI,wBAAwB,CAAC,GAAG,IAAI,CAAC,CACtE,CAAC;QAEF,MAAM,GAAG,GAAU,IAAI,KAAK,EAAE,CAAC;QAC/B,GAAG,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC;QAC/B,GAAG,CAAC,kBAAkB,GAAG,IAAI,CAAC,kBAAkB,CAAC;QACjD,GAAG,CAAC,MAAM,GAAG,eAAe,CAAC,OAAO,CAAC;QACrC,GAAG,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;QACzB,GAAG,CAAC,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC;QAC7B,GAAG,CAAC,aAAa,GAAG,IAAI,CAAC,aAAa,CAAC;QACvC,GAAG,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;QACzB,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACjB,GAAG,CAAC,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC;QAC7B,CAAC;QACD,GAAG,CAAC,WAAW,GAAG,IAAI,CAAC,WAAW,CAAC;QACnC,GAAG,CAAC,MAAM,GAAG,eAAe,CAAC,OAAO,CAAC;QACrC,GAAG,CAAC,eAAe,GAAG,eAAe,CAAC;QAEtC,OAAO,IAAI,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;IAC7D,CAAC;IAED;;;;;;OAMG;IAEU,AAAN,KAAK,CAAC,gBAAgB,CAAC,IAW7B;;QACC,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC;YACxB,MAAM,IAAI,gBAAgB,CACxB,8DAA8D,CAC/D,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,qBAAqB,CAAC,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;YACnD,MAAM,IAAI,gBAAgB,CACxB,8CAA8C,IAAI,CAAC,QAAQ,IAAI,CAChE,CAAC;QACJ,CAAC;QAED,MAAM,OAAO,GAAW,CAAC,IAAI,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QACpD,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,IAAI,gBAAgB,CAAC,oCAAoC,CAAC,CAAC;QACnE,CAAC;QAED,MAAM,UAAU,GAAkB,aAAa,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC;QACvE,IAAI,UAAU,EAAE,CAAC;YACf,MAAM,IAAI,gBAAgB,CACxB,6CAA6C,UAAU,GAAG,CAC3D,CAAC;QACJ,CAAC;QAED,IAAI,IAAI,CAAC,QAAQ,KAAK,eAAe,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC;YAChE,MAAM,IAAI,gBAAgB,CAAC,0CAA0C,CAAC,CAAC;QACzE,CAAC;QAED;;;;;;;WAOG;QACH,MAAM,cAAc,GAAW,CAC7B,MAAM,IAAI,CAAC,OAAO,CAAC;YACjB,KAAK,EAAE;gBACL,SAAS,EAAE,IAAI,CAAC,SAAS;gBACzB,MAAM,EAAE,eAAe,CAAC,aAAa;gBACrC,SAAS,EAAE,WAAW,CAAC,WAAW,CAAC,aAAa,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;aACrE;YACD,KAAK,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE;SACxB,CAAC,CACH,CAAC,QAAQ,EAAE,CAAC;QAEb,IAAI,cAAc,IAAI,wCAAwC,EAAE,CAAC;YAC/D,MAAM,IAAI,gBAAgB,CACxB,wBAAwB,cAAc,kEAAkE,wCAAwC,8CAA8C,CAC/L,CAAC;QACJ,CAAC;QAED,MAAM,eAAe,GAAS,aAAa,CAAC,gBAAgB,CAC1D,aAAa,CAAC,cAAc,EAAE,EAC9B,IAAI,CAAC,IAAI,CAAC,CAAC,MAAA,IAAI,CAAC,gBAAgB,mCAAI,wBAAwB,CAAC,GAAG,IAAI,CAAC,CACtE,CAAC;QAEF,MAAM,GAAG,GAAU,IAAI,KAAK,EAAE,CAAC;QAC/B,GAAG,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC;QAC/B,GAAG,CAAC,MAAM,GAAG,eAAe,CAAC,aAAa,CAAC;QAC3C,GAAG,CAAC,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC;QAC3B,GAAG,CAAC,2BAA2B,GAAG,IAAI,CAAC,2BAA2B,CAAC;QACnE,GAAG,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;QACzB,GAAG,CAAC,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC;QAC7B,GAAG,CAAC,aAAa,GAAG,IAAI,CAAC,aAAa,CAAC;QACvC;;;;WAIG;QACH,IAAI,IAAI,CAAC,QAAQ,KAAK,eAAe,CAAC,IAAI,EAAE,CAAC;YAC3C,GAAG,CAAC,MAAM,GAAG,OAAO,CAAC;QACvB,CAAC;aAAM,CAAC;YACN,GAAG,CAAC,MAAM,GAAG,EAAE,CAAC;YAChB,GAAG,CAAC,OAAO,GAAG;gBACZ,YAAY,EAAE,IAAI,CAAC,YAAsB;gBACzC,OAAO,EAAE,OAAO;aACjB,CAAC;QACJ,CAAC;QACD,GAAG,CAAC,WAAW,GAAG,IAAI,CAAC,WAAW,CAAC;QACnC,GAAG,CAAC,MAAM,GAAG,eAAe,CAAC,OAAO,CAAC;QACrC,GAAG,CAAC,eAAe,GAAG,eAAe,CAAC;QAEtC,OAAO,IAAI,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;IAC7D,CAAC;IAED;;;;;;;;;;;;;OAaG;IAEU,AAAN,KAAK,CAAC,oBAAoB,CAAC,IAGjC;QACC,MAAM,IAAI,GAAiB,MAAM,IAAI,CAAC,MAAM,CAAC;YAC3C,KAAK,EAAE;gBACL,kBAAkB,EAAE,IAAI,CAAC,kBAAkB;gBAC3C,MAAM,EAAE,IAAI,CAAC,MAAM;aACpB;YACD,MAAM,EAAE;gBACN,GAAG,EAAE,IAAI;gBACT,MAAM,EAAE,IAAI;gBACZ,MAAM,EAAE,IAAI;gBACZ,QAAQ,EAAE,IAAI;gBACd,YAAY,EAAE,IAAI;gBAClB,SAAS,EAAE,IAAI;aAChB;YACD,IAAI,EAAE,EAAE,SAAS,EAAE,SAAS,CAAC,UAAU,EAAE;YACzC,KAAK,EAAE,CAAC;YACR,IAAI,EAAE,CAAC;YACP,KAAK,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE;SACxB,CAAC,CAAC;QAEH,OAAO,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC;IACzB,CAAC;IAED;;;;OAIG;IAEU,AAAN,KAAK,CAAC,YAAY,CAAC,IAUzB;;QACC,MAAM,UAAU,GACd,mBAAmB,CAAC,aAAa,EAAE,CAAC;QAEtC,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,MAAM,IAAI,gBAAgB,CAAC,2BAA2B,CAAC,CAAC;QAC1D,CAAC;QAED,MAAM,OAAO,GAAW,MAAA,IAAI,CAAC,OAAO,mCAAI,gBAAgB,CAAC;QAEzD,MAAM,cAAc,GAClB,IAAI,CAAC,cAAc,IAAI,IAAI,CAAC,cAAc,CAAC,MAAM,GAAG,CAAC;YACnD,CAAC,CAAC,IAAI,CAAC,cAAc;YACrB,CAAC,CAAC,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC;QAEhC,MAAM,GAAG,GAAW;;;;;;;;;;;;;;;;;;;;;;;;;;;KA2BnB,CAAC;QAEF,MAAM,IAAI,GAAsB,UAAU,CACxC,MAAM,UAAU,CAAC,KAAK,CAAC,GAAG,EAAE;YAC1B,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE;YACzB,eAAe,CAAC,OAAO;YACvB,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE;YACvB,eAAe,CAAC,OAAO;YACvB,OAAO,CAAC,QAAQ,EAAE;YAClB,cAAc;SACf,CAAC,CACH,CAAC;QAEF,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC/B,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,CAAC,GAAe,IAAI,CAAC,CAAC,CAAE,CAAC;QAC/B,MAAM,GAAG,GAAU,IAAI,KAAK,EAAE,CAAC;QAC/B,GAAG,CAAC,GAAG,GAAG,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;QAC3B,GAAG,CAAC,SAAS,GAAG,IAAI,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC;QACrD,IAAI,CAAC,CAAC,oBAAoB,CAAC,EAAE,CAAC;YAC5B,GAAG,CAAC,kBAAkB,GAAG,IAAI,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,CAAC;QACzE,CAAC;QACD,GAAG,CAAC,MAAM,GAAI,CAAC,CAAC,QAAQ,CAAqB,IAAI,eAAe,CAAC,OAAO,CAAC;QACzE,IAAI,CAAC,CAAC,SAAS,CAAC,EAAE,CAAC;YACjB,GAAG,CAAC,OAAO,GAAG,IAAI,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;QACnD,CAAC;QACD,IAAI,CAAC,CAAC,6BAA6B,CAAC,EAAE,CAAC;YACrC,GAAG,CAAC,2BAA2B,GAAG,IAAI,QAAQ,CAC5C,MAAM,CAAC,CAAC,CAAC,6BAA6B,CAAC,CAAC,CACzC,CAAC;QACJ,CAAC;QACD,GAAG,CAAC,MAAM,GAAG,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC;QACjC,GAAG,CAAC,QAAQ,GAAG,CAAC,CAAC,UAAU,CAAoB,CAAC;QAChD,GAAG,CAAC,aAAa,GAAG,IAAI,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;QAC7D,GAAG,CAAC,MAAM,GAAG,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC;QACjC,IAAI,CAAC,CAAC,SAAS,CAAC,IAAI,OAAO,CAAC,CAAC,SAAS,CAAC,KAAK,QAAQ,EAAE,CAAC;YACrD,GAAG,CAAC,OAAO,GAAG,CAAC,CAAC,SAAS,CAAe,CAAC;QAC3C,CAAC;QACD,GAAG,CAAC,WAAW,GAAG,MAAM,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC;QAC3C,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,QAAQ,CAAoB,CAAC;QAC5C,IAAI,CAAC,CAAC,WAAW,CAAC,EAAE,CAAC;YACnB,GAAG,CAAC,SAAS,GAAG,IAAI,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC;QACnD,CAAC;QACD,IAAI,CAAC,CAAC,gBAAgB,CAAC,EAAE,CAAC;YACxB,GAAG,CAAC,cAAc,GAAG,IAAI,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC;QAC7D,CAAC;QACD,GAAG,CAAC,eAAe,GAAG,IAAI,CAAC,OAAO,CAAC;QACnC,OAAO,GAAG,CAAC;IACb,CAAC;IAGY,AAAN,KAAK,CAAC,YAAY,CAAC,IAIzB;;QACC,MAAM,UAAU,GACd,mBAAmB,CAAC,aAAa,EAAE,CAAC;QACtC,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,MAAM,IAAI,gBAAgB,CAAC,2BAA2B,CAAC,CAAC;QAC1D,CAAC;QAED,MAAM,OAAO,GAAW,MAAA,IAAI,CAAC,OAAO,mCAAI,gBAAgB,CAAC;QAEzD;;;;WAIG;QACH,MAAM,GAAG,GAAW;;;;;;;;;;;KAWnB,CAAC;QACF,MAAM,IAAI,GAAsB,UAAU,CACxC,MAAM,UAAU,CAAC,KAAK,CAAC,GAAG,EAAE;YAC1B,OAAO,CAAC,QAAQ,EAAE;YAClB,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE;YACrB,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE;YACvB,eAAe,CAAC,OAAO;YACvB,eAAe,CAAC,OAAO;SACxB,CAAC,CACH,CAAC;QAEF,OAAO,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC;IACzB,CAAC;IAGY,AAAN,KAAK,CAAC,YAAY,CAAC,IAOzB;;QACC,MAAM,UAAU,GACd,mBAAmB,CAAC,aAAa,EAAE,CAAC;QACtC,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,MAAM,IAAI,gBAAgB,CAAC,2BAA2B,CAAC,CAAC;QAC1D,CAAC;QAED,MAAM,MAAM,GAAoB,IAAI,CAAC,OAAO;YAC1C,CAAC,CAAC,eAAe,CAAC,SAAS;YAC3B,CAAC,CAAC,eAAe,CAAC,MAAM,CAAC;QAE3B;;;;WAIG;QACH,MAAM,GAAG,GAAW;;;;;;;;;;;;;KAanB,CAAC;QACF,MAAM,IAAI,GAAsB,UAAU,CACxC,MAAM,UAAU,CAAC,KAAK,CAAC,GAAG,EAAE;YAC1B,MAAM;YACN,MAAA,IAAI,CAAC,MAAM,mCAAI,IAAI;YACnB,MAAA,IAAI,CAAC,QAAQ,mCAAI,IAAI;YACrB,MAAA,IAAI,CAAC,YAAY,mCAAI,IAAI;YACzB,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE;YACrB,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE;YACvB,eAAe,CAAC,OAAO;YACvB,eAAe,CAAC,OAAO;SACxB,CAAC,CACH,CAAC;QAEF,OAAO,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC;IACzB,CAAC;IAED;;;;;;;;;;OAUG;IAEU,AAAN,KAAK,CAAC,iBAAiB,CAAC,IAK9B;QACC,MAAM,eAAe,GAAS,aAAa,CAAC,gBAAgB,CAC1D,IAAI,CAAC,aAAa,IAAI,aAAa,CAAC,cAAc,EAAE,EACpD,IAAI,CAAC,IAAI,CACP,CAAC,IAAI,CAAC,gBAAgB,GAAG,IAAI,CAAC,oBAAoB,GAAG,IAAK,CAAC,GAAG,IAAI,CACnE,CACF,CAAC;QAEF,OAAO,IAAI,EAAE,CAAC;YACZ,MAAM,GAAG,GAAiB,MAAM,IAAI,CAAC,WAAW,CAAC;gBAC/C,EAAE,EAAE,IAAI,CAAC,KAAK;gBACd,MAAM,EAAE;oBACN,GAAG,EAAE,IAAI;oBACT,MAAM,EAAE,IAAI;oBACZ,MAAM,EAAE,IAAI;oBACZ,QAAQ,EAAE,IAAI;oBACd,YAAY,EAAE,IAAI;oBAClB,eAAe,EAAE,IAAI;oBACrB,cAAc,EAAE,IAAI;oBACpB,SAAS,EAAE,IAAI;oBACf,SAAS,EAAE,IAAI;oBACf,WAAW,EAAE,IAAI;oBACjB,eAAe,EAAE,IAAI;iBACtB;gBACD,KAAK,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE;aACxB,CAAC,CAAC;YAEH,IAAI,CAAC,GAAG,EAAE,CAAC;gBACT,MAAM,IAAI,gBAAgB,CACxB,aAAa,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,6BAA6B,CAChE,CAAC;YACJ,CAAC;YAED,IAAI,wBAAwB,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;gBACzC,OAAO,GAAG,CAAC;YACb,CAAC;YAED,MAAM,GAAG,GAAS,aAAa,CAAC,cAAc,EAAE,CAAC;YAEjD,gEAAgE;YAChE,IACE,GAAG,CAAC,MAAM,KAAK,eAAe,CAAC,OAAO;gBACtC,GAAG,CAAC,eAAe;gBACnB,GAAG,GAAG,GAAG,CAAC,eAAe,EACzB,CAAC;gBACD,OAAO,IAAI,CAAC,UAAU,CAAC;oBACrB,KAAK,EAAE,IAAI,CAAC,KAAK;oBACjB,MAAM,EACJ,yJAAyJ;iBAC5J,CAAC,CAAC;YACL,CAAC;YAED,2DAA2D;YAC3D,IACE,CAAC,GAAG,CAAC,MAAM,KAAK,eAAe,CAAC,OAAO;gBACrC,GAAG,CAAC,MAAM,KAAK,eAAe,CAAC,OAAO,CAAC;gBACzC,GAAG,CAAC,cAAc;gBAClB,GAAG,GAAG,GAAG,CAAC,cAAc,EACxB,CAAC;gBACD,OAAO,IAAI,CAAC,UAAU,CAAC;oBACrB,KAAK,EAAE,IAAI,CAAC,KAAK;oBACjB,MAAM,EACJ,kMAAkM;iBACrM,CAAC,CAAC;YACL,CAAC;YAED,IAAI,GAAG,GAAG,eAAe,EAAE,CAAC;gBAC1B,OAAO,IAAI,CAAC,UAAU,CAAC;oBACrB,KAAK,EAAE,IAAI,CAAC,KAAK;oBACjB,MAAM,EACJ,8HAA8H;iBACjI,CAAC,CAAC;YACL,CAAC;YAED,MAAM,KAAK,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC;QACtC,CAAC;IACH,CAAC;IAGY,AAAN,KAAK,CAAC,UAAU,CAAC,IAGvB;QACC,MAAM,UAAU,GACd,mBAAmB,CAAC,aAAa,EAAE,CAAC;QACtC,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,MAAM,IAAI,gBAAgB,CAAC,2BAA2B,CAAC,CAAC;QAC1D,CAAC;QAED;;;WAGG;QACH,MAAM,GAAG,GAAW;;;;;;;;;;KAUnB,CAAC;QACF,MAAM,UAAU,CAAC,KAAK,CAAC,GAAG,EAAE;YAC1B,eAAe,CAAC,QAAQ;YACxB,IAAI,CAAC,MAAM;YACX,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE;YACrB,eAAe,CAAC,SAAS;YACzB,eAAe,CAAC,MAAM;YACtB,eAAe,CAAC,QAAQ;YACxB,eAAe,CAAC,SAAS;SAC1B,CAAC,CAAC;QAEH,MAAM,OAAO,GAAiB,MAAM,IAAI,CAAC,WAAW,CAAC;YACnD,EAAE,EAAE,IAAI,CAAC,KAAK;YACd,MAAM,EAAE;gBACN,GAAG,EAAE,IAAI;gBACT,MAAM,EAAE,IAAI;gBACZ,MAAM,EAAE,IAAI;gBACZ,QAAQ,EAAE,IAAI;gBACd,YAAY,EAAE,IAAI;gBAClB,WAAW,EAAE,IAAI;aAClB;YACD,KAAK,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE;SACxB,CAAC,CAAC;QAEH,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,IAAI,gBAAgB,CACxB,aAAa,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,8BAA8B,CACjE,CAAC;QACJ,CAAC;QAED,OAAO,OAAO,CAAC;IACjB,CAAC;IAGY,AAAN,KAAK,CAAC,sBAAsB,CAAC,IAEnC;QACC,MAAM,UAAU,GACd,mBAAmB,CAAC,aAAa,EAAE,CAAC;QACtC,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,MAAM,IAAI,gBAAgB,CAAC,2BAA2B,CAAC,CAAC;QAC1D,CAAC;QACD,IAAI,CAAC;YACH,MAAM,UAAU,CAAC,KAAK,CACpB;;;gDAGwC,EACxC;gBACE,eAAe,CAAC,SAAS;gBACzB,IAAI,CAAC,kBAAkB,CAAC,QAAQ,EAAE;gBAClC,eAAe,CAAC,SAAS;gBACzB,eAAe,CAAC,MAAM;gBACtB,eAAe,CAAC,QAAQ;gBACxB,eAAe,CAAC,SAAS;aAC1B,CACF,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,CAAC,KAAK,CAAC,2CAA2C,CAAC,CAAC;YAC1D,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACpB,CAAC;IACH,CAAC;CACF;AAxkBc;IADZ,WAAW,EAAE;;;;sCA6Cb;AAUY;IADZ,WAAW,EAAE;;;;+CAkGb;AAiBY;IADZ,WAAW,EAAE;;;;mDAyBb;AAQY;IADZ,WAAW,EAAE;;;;2CAuGb;AAGY;IADZ,WAAW,EAAE;;;;2CA0Cb;AAGY;IADZ,WAAW,EAAE;;;;2CAoDb;AAcY;IADZ,WAAW,EAAE;;;;gDAkFb;AAGY;IADZ,WAAW,EAAE;;;;yCAwDb;AAGY;IADZ,WAAW,EAAE;;;;qDA4Bb;AAGH,eAAe,IAAI,OAAO,EAAE,CAAC"}