@positronic/cloudflare 0.0.68 → 0.0.69

package/dist/src/api/auth-middleware.js

@@ -126,6 +126,31 @@ function _ts_generator(thisArg, body) {
     }
 }
 import { jwtVerify, decodeJwt, importJWK } from 'jose';
+/**
+ * Middleware that restricts access to root users only.
+ * Returns 403 if the authenticated user is not root.
+ */ export function requireRoot() {
+    return function(c, next) {
+        return _async_to_generator(function() {
+            var auth;
+            return _ts_generator(this, function(_state) {
+                auth = c.get('auth');
+                if (!(auth === null || auth === void 0 ? void 0 : auth.isRoot)) {
+                    return [
+                        2,
+                        c.json({
+                            error: 'Root access required'
+                        }, 403)
+                    ];
+                }
+                return [
+                    2,
+                    next()
+                ];
+            });
+        })();
+    };
+}
 /**
  * Get the JWT algorithm based on JWK key type
  */ function getAlgorithmForJwk(jwk) {

package/dist/src/api/brains.js

@@ -160,9 +160,18 @@ import Fuse from 'fuse.js';
 import { isSignalValid, brainMachineDefinition } from '@positronic/core';
 import { getManifest } from '../brain-runner-do.js';
 var brains = new Hono();
+/**
+ * Get the userId for ownership filtering from the auth context.
+ * Root users get null (no filter — sees everything).
+ * Non-root users get their userId (sees only their own).
+ */ function scopeUserId(context) {
+    var auth = context.get('auth');
+    var _auth_userId;
+    return (auth === null || auth === void 0 ? void 0 : auth.isRoot) ? null : (_auth_userId = auth === null || auth === void 0 ? void 0 : auth.userId) !== null && _auth_userId !== void 0 ? _auth_userId : null;
+}
 brains.post('/runs', function(context) {
     return _async_to_generator(function() {
-        var requestBody, options, identifier, manifest, resolution, brain, brainRunId, namespace, doId, stub, initialData, brainTitle, response;
+        var requestBody, options, identifier, manifest, resolution, brain, brainRunId, namespace, doId, stub, auth, currentUser, initialData, brainTitle, response;
         return _ts_generator(this, function(_state) {
             switch(_state.label){
                 case 0:
@@ -218,6 +227,19 @@ brains.post('/runs', function(context) {
                     namespace = context.env.BRAIN_RUNNER_DO;
                     doId = namespace.idFromName(brainRunId);
                     stub = namespace.get(doId);
+                    // Read auth context for currentUser (every brain run must have an owner)
+                    auth = context.get('auth');
+                    if (!(auth === null || auth === void 0 ? void 0 : auth.userId) && !(auth === null || auth === void 0 ? void 0 : auth.isRoot)) {
+                        return [
+                            2,
+                            context.json({
+                                error: 'Authentication required to run a brain'
+                            }, 401)
+                        ];
+                    }
+                    currentUser = {
+                        id: auth.userId || 'root'
+                    };
                     // Pass options to the brain runner if provided
                     initialData = options ? {
                         options: options
@@ -226,7 +248,7 @@ brains.post('/runs', function(context) {
                     brainTitle = brain.title || identifier;
                     return [
                         4,
-                        stub.start(brainTitle, brainRunId, initialData)
+                        stub.start(brainTitle, brainRunId, currentUser, initialData)
                     ];
                 case 2:
                     _state.sent();
@@ -243,7 +265,7 @@ brains.post('/runs', function(context) {
 });
 brains.post('/runs/rerun', function(context) {
     return _async_to_generator(function() {
-        var requestBody, runId, startsAt, stopsAfter, identifier, manifest, resolution, brain, monitorId, monitorStub, existingRun, newBrainRunId, namespace, doId, stub, rerunOptions, brainTitle, response;
+        var requestBody, runId, startsAt, stopsAfter, identifier, manifest, resolution, brain, monitorId, monitorStub, existingRun, auth, currentUser, newBrainRunId, namespace, doId, stub, rerunOptions, brainTitle, response;
         return _ts_generator(this, function(_state) {
             switch(_state.label){
                 case 0:
@@ -317,6 +339,19 @@ brains.post('/runs/rerun', function(context) {
                     }
                     _state.label = 3;
                 case 3:
+                    // Read auth context for currentUser (every brain run must have an owner)
+                    auth = context.get('auth');
+                    if (!(auth === null || auth === void 0 ? void 0 : auth.userId) && !(auth === null || auth === void 0 ? void 0 : auth.isRoot)) {
+                        return [
+                            2,
+                            context.json({
+                                error: 'Authentication required to run a brain'
+                            }, 401)
+                        ];
+                    }
+                    currentUser = {
+                        id: auth.userId || 'root'
+                    };
                     // Create a new brain run with rerun parameters
                     newBrainRunId = uuidv4();
                     namespace = context.env.BRAIN_RUNNER_DO;
@@ -334,7 +369,7 @@ brains.post('/runs/rerun', function(context) {
                     brainTitle = brain.title || identifier;
                     return [
                         4,
-                        stub.start(brainTitle, newBrainRunId, rerunOptions)
+                        stub.start(brainTitle, newBrainRunId, currentUser, rerunOptions)
                     ];
                 case 4:
                     _state.sent();
@@ -375,16 +410,17 @@ brains.get('/runs/:runId/watch', function(context) {
 });
 brains.get('/runs/:runId', function(context) {
     return _async_to_generator(function() {
-        var runId, monitorId, monitorStub, run;
+        var runId, userId, monitorId, monitorStub, run;
         return _ts_generator(this, function(_state) {
             switch(_state.label){
                 case 0:
                     runId = context.req.param('runId');
+                    userId = scopeUserId(context);
                     monitorId = context.env.MONITOR_DO.idFromName('singleton');
                     monitorStub = context.env.MONITOR_DO.get(monitorId);
                     return [
                         4,
-                        monitorStub.getRun(runId)
+                        monitorStub.getRun(runId, userId)
                     ];
                 case 1:
                     run = _state.sent();
@@ -640,7 +676,7 @@ brains.post('/runs/:runId/resume', function(context) {
 });
 brains.get('/:identifier/history', function(context) {
     return _async_to_generator(function() {
-        var identifier, limit, manifest, resolution, brain, brainTitle, monitorId, monitorStub, runs;
+        var identifier, limit, manifest, resolution, brain, brainTitle, monitorId, monitorStub, userId, runs;
         return _ts_generator(this, function(_state) {
             switch(_state.label){
                 case 0:
@@ -681,9 +717,10 @@ brains.get('/:identifier/history', function(context) {
                     // Get the monitor singleton instance
                     monitorId = context.env.MONITOR_DO.idFromName('singleton');
                     monitorStub = context.env.MONITOR_DO.get(monitorId);
+                    userId = scopeUserId(context);
                     return [
                         4,
-                        monitorStub.history(brainTitle, limit)
+                        monitorStub.history(brainTitle, limit, userId)
                     ];
                 case 1:
                     runs = _state.sent();
@@ -699,7 +736,7 @@ brains.get('/:identifier/history', function(context) {
 });
 brains.get('/:identifier/active-runs', function(context) {
     return _async_to_generator(function() {
-        var identifier, manifest, resolution, brain, brainTitle, monitorId, monitorStub, runs;
+        var identifier, manifest, resolution, brain, brainTitle, monitorId, monitorStub, userId, runs;
         return _ts_generator(this, function(_state) {
             switch(_state.label){
                 case 0:
@@ -739,9 +776,10 @@ brains.get('/:identifier/active-runs', function(context) {
                     // Get the monitor singleton instance
                     monitorId = context.env.MONITOR_DO.idFromName('singleton');
                     monitorStub = context.env.MONITOR_DO.get(monitorId);
+                    userId = scopeUserId(context);
                     return [
                         4,
-                        monitorStub.activeRuns(brainTitle)
+                        monitorStub.activeRuns(brainTitle, userId)
                     ];
                 case 1:
                     runs = _state.sent();
@@ -922,7 +960,7 @@ brains.get('/', function(context) {
 // Create a new schedule
 brains.post('/schedules', function(context) {
     return _async_to_generator(function() {
-        var body, cronExpression, identifier, manifest, resolution, brain, brainTitle, scheduleDoId, scheduleStub, timezone, schedule, error, errorMessage;
+        var body, cronExpression, identifier, manifest, resolution, brain, brainTitle, scheduleDoId, scheduleStub, auth, runAsUserId, timezone, schedule, error, errorMessage;
         return _ts_generator(this, function(_state) {
             switch(_state.label){
                 case 0:
@@ -1003,6 +1041,17 @@ brains.post('/schedules', function(context) {
                     // Get the schedule singleton instance
                     scheduleDoId = context.env.SCHEDULE_DO.idFromName('singleton');
                     scheduleStub = context.env.SCHEDULE_DO.get(scheduleDoId);
+                    // Require authentication — scheduled runs will execute as this user
+                    auth = context.get('auth');
+                    if (!(auth === null || auth === void 0 ? void 0 : auth.userId) && !(auth === null || auth === void 0 ? void 0 : auth.isRoot)) {
+                        return [
+                            2,
+                            context.json({
+                                error: 'Authentication required to create a schedule'
+                            }, 401)
+                        ];
+                    }
+                    runAsUserId = auth.userId || 'root';
                     // Determine timezone: use provided value, fall back to project timezone
                     timezone = body.timezone;
                     if (!!timezone) return [
@@ -1032,7 +1081,7 @@ brains.post('/schedules', function(context) {
                     }
                     return [
                         4,
-                        scheduleStub.createSchedule(brainTitle, cronExpression, timezone)
+                        scheduleStub.createSchedule(brainTitle, cronExpression, timezone, runAsUserId)
                     ];
                 case 4:
                     schedule = _state.sent();
@@ -1060,15 +1109,16 @@ brains.post('/schedules', function(context) {
 // List all schedules
 brains.get('/schedules', function(context) {
     return _async_to_generator(function() {
-        var scheduleId, scheduleStub, result;
+        var scheduleId, scheduleStub, userId, result;
         return _ts_generator(this, function(_state) {
             switch(_state.label){
                 case 0:
                     scheduleId = context.env.SCHEDULE_DO.idFromName('singleton');
                     scheduleStub = context.env.SCHEDULE_DO.get(scheduleId);
+                    userId = scopeUserId(context);
                     return [
                         4,
-                        scheduleStub.listSchedules()
+                        scheduleStub.listSchedules(userId)
                     ];
                 case 1:
                     result = _state.sent();
@@ -1083,7 +1133,7 @@ brains.get('/schedules', function(context) {
 // Get scheduled run history - MUST be before :scheduleId route
 brains.get('/schedules/runs', function(context) {
     return _async_to_generator(function() {
-        var scheduleIdParam, limit, scheduleDoId, scheduleStub, result;
+        var scheduleIdParam, limit, scheduleDoId, scheduleStub, userId, result;
         return _ts_generator(this, function(_state) {
             switch(_state.label){
                 case 0:
@@ -1091,9 +1141,10 @@ brains.get('/schedules/runs', function(context) {
                     limit = Number(context.req.query('limit') || '100');
                     scheduleDoId = context.env.SCHEDULE_DO.idFromName('singleton');
                     scheduleStub = context.env.SCHEDULE_DO.get(scheduleDoId);
+                    userId = scopeUserId(context);
                     return [
                         4,
-                        scheduleStub.getAllRuns(scheduleIdParam, limit)
+                        scheduleStub.getAllRuns(scheduleIdParam, limit, userId)
                     ];
                 case 1:
                     result = _state.sent();

package/dist/src/api/secrets.js

@@ -178,6 +178,7 @@ function _ts_generator(thisArg, body) {
     }
 }
 import { Hono } from 'hono';
+import { requireRoot } from './auth-middleware.js';
 /**
  * Helper to check if Cloudflare API credentials are configured
  */ function getSecretsApiConfig(env) {
@@ -214,6 +215,8 @@ import { Hono } from 'hono';
     }).apply(this, arguments);
 }
 var secrets = new Hono();
+// Only root users can manage secrets
+secrets.use('*', requireRoot());
 // Protected secret name that cannot be managed via the API
 var PROTECTED_SECRET = 'ROOT_PUBLIC_KEY';
 // List all secrets (names only, not values)

package/dist/src/brain-runner-do.js

@@ -300,6 +300,7 @@ import { EventLoader } from './event-loader.js';
 import { createPagesService } from './pages-service.js';
 import { setGovernorBinding, rateGoverned } from './governor-client-wrapper.js';
 import { CloudflareR2Loader } from './r2-loader.js';
+import { createR2Backend } from './create-r2-store.js';
 import { createResources } from '@positronic/core';
 var manifest = null;
 export function setManifest(generatedManifest) {
@@ -504,6 +505,8 @@ var ScheduleAdapter = /*#__PURE__*/ function() {
     ]);
     return BatchChunkAdapter;
 }();
+// SQL to initialize the run owner table (stores who started this brain run)
+var runOwnerTableSQL = "\nCREATE TABLE IF NOT EXISTS run_owner (\n  user_id TEXT NOT NULL\n);\n";
 // SQL to initialize the signals table
 var signalsTableSQL = "\nCREATE TABLE IF NOT EXISTS brain_signals (\n  id INTEGER PRIMARY KEY AUTOINCREMENT,\n  signal_type TEXT NOT NULL,\n  content TEXT,\n  queued_at INTEGER NOT NULL\n);\n";
 // SQL to initialize the wait timeout table
@@ -517,13 +520,37 @@ export var BrainRunnerDO = /*#__PURE__*/ function(DurableObject) {
         _this = _call_super(this, BrainRunnerDO, [
             state,
             env
-        ]), _define_property(_this, "sql", void 0), _define_property(_this, "brainRunId", void 0), _define_property(_this, "eventStreamAdapter", new EventStreamAdapter()), _define_property(_this, "abortController", null), _define_property(_this, "pageAdapter", null), _define_property(_this, "signalsTableInitialized", false), _define_property(_this, "waitTimeoutTableInitialized", false);
+        ]), _define_property(_this, "sql", void 0), _define_property(_this, "brainRunId", void 0), _define_property(_this, "eventStreamAdapter", new EventStreamAdapter()), _define_property(_this, "abortController", null), _define_property(_this, "pageAdapter", null), _define_property(_this, "runOwnerTableInitialized", false), _define_property(_this, "signalsTableInitialized", false), _define_property(_this, "waitTimeoutTableInitialized", false);
         _this.sql = state.storage.sql;
         _this.brainRunId = state.id.toString();
         _this.env = env;
         return _this;
     }
     _create_class(BrainRunnerDO, [
+        {
+            key: "initializeRunOwnerTable",
+            value: function initializeRunOwnerTable() {
+                if (!this.runOwnerTableInitialized) {
+                    this.sql.exec(runOwnerTableSQL);
+                    this.runOwnerTableInitialized = true;
+                }
+            }
+        },
+        {
+            key: "storeRunOwner",
+            value: function storeRunOwner(userId) {
+                this.initializeRunOwnerTable();
+                this.sql.exec("INSERT INTO run_owner (user_id) VALUES (?)", userId);
+            }
+        },
+        {
+            key: "getRunOwner",
+            value: function getRunOwner() {
+                this.initializeRunOwnerTable();
+                var results = this.sql.exec("SELECT user_id FROM run_owner LIMIT 1").toArray();
+                return results.length > 0 ? results[0].user_id : null;
+            }
+        },
         {
             key: "initializeSignalsTable",
             value: function initializeSignalsTable() {
@@ -1019,7 +1046,7 @@ export var BrainRunnerDO = /*#__PURE__*/ function(DurableObject) {
         },
         {
             key: "start",
-            value: function start(brainTitle, brainRunId, initialData) {
+            value: function start(brainTitle, brainRunId, currentUser, initialData) {
                 return _async_to_generator(function() {
                     var _this, sql, resolution, brainToRun, sqliteAdapter, eventStreamAdapter, monitorDOStub, monitorAdapter, scheduleAdapter, webhookAdapter, env, pagesService, r2Resources, runnerWithResources, signalProvider, options, initialState, batchChunkAdapter, timeoutAdapter;
                     return _ts_generator(this, function(_state) {
@@ -1080,10 +1107,12 @@ export var BrainRunnerDO = /*#__PURE__*/ function(DurableObject) {
                                 });
                                 runnerWithResources = runnerWithResources.withSignalProvider(signalProvider).withGovernor(function(c) {
                                     return rateGoverned(c);
-                                });
+                                }).withStoreProvider(createR2Backend(this.env.RESOURCES_BUCKET));
                                 // Extract options from initialData if present
                                 options = initialData === null || initialData === void 0 ? void 0 : initialData.options;
                                 initialState = initialData && !initialData.options ? initialData : {};
+                                // Persist run owner durably (immutable, not derived from events)
+                                this.storeRunOwner(currentUser.id);
                                 // Create abort controller for this run
                                 this.abortController = new AbortController();
                                 batchChunkAdapter = new BatchChunkAdapter(function(signal) {
@@ -1106,6 +1135,7 @@ export var BrainRunnerDO = /*#__PURE__*/ function(DurableObject) {
                                     batchChunkAdapter,
                                     timeoutAdapter
                                 ]).run(brainToRun, _object_spread_props(_object_spread({
+                                    currentUser: currentUser,
                                     initialState: initialState,
                                     brainRunId: brainRunId
                                 }, options && {
@@ -1135,7 +1165,7 @@ export var BrainRunnerDO = /*#__PURE__*/ function(DurableObject) {
    * This method reconstructs state and calls BrainRunner.resume().
    */ function wakeUp(brainRunId) {
                 return _async_to_generator(function() {
-                    var _this, sql, pendingTimeout, eventLoader, startEvent, brainTitle, initialState, originalBrainRunId, resolution, brainToRun, allEvents, machine, _iteratorNormalCompletion, _didIteratorError, _iteratorError, _iterator, _step, event, sqliteAdapter, eventStreamAdapter, monitorDOStub, monitorAdapter, scheduleAdapter, webhookAdapter, env, pagesService, r2Resources, runnerWithResources, signalProvider, batchChunkAdapter, timeoutAdapter;
+                    var _this, sql, pendingTimeout, eventLoader, startEvent, brainTitle, initialState, ownerId, currentUser, originalBrainRunId, resolution, brainToRun, allEvents, machine, _iteratorNormalCompletion, _didIteratorError, _iteratorError, _iterator, _step, event, sqliteAdapter, eventStreamAdapter, monitorDOStub, monitorAdapter, scheduleAdapter, webhookAdapter, env, pagesService, r2Resources, runnerWithResources, signalProvider, batchChunkAdapter, timeoutAdapter;
                     return _ts_generator(this, function(_state) {
                         switch(_state.label){
                             case 0:
@@ -1174,6 +1204,14 @@ export var BrainRunnerDO = /*#__PURE__*/ function(DurableObject) {
                                 }
                                 brainTitle = startEvent.brainTitle;
                                 initialState = startEvent.initialState || {};
+                                // Read run owner from durable storage (set once in start(), not from events)
+                                ownerId = this.getRunOwner();
+                                if (!ownerId) {
+                                    throw new Error("No run owner found for brain run ".concat(brainRunId));
+                                }
+                                currentUser = {
+                                    id: ownerId
+                                };
                                 // Use the brainRunId from the START event, not the parameter.
                                 // alarm() passes state.id.toString() (the DO hex ID), but the brain was
                                 // originally started with a UUID. Events must use the original UUID so
@@ -1260,7 +1298,7 @@ export var BrainRunnerDO = /*#__PURE__*/ function(DurableObject) {
                                 });
                                 runnerWithResources = runnerWithResources.withSignalProvider(signalProvider).withGovernor(function(c) {
                                     return rateGoverned(c);
-                                });
+                                }).withStoreProvider(createR2Backend(this.env.RESOURCES_BUCKET));
                                 // Create abort controller for this run
                                 this.abortController = new AbortController();
                                 batchChunkAdapter = new BatchChunkAdapter(function(signal) {
@@ -1283,6 +1321,7 @@ export var BrainRunnerDO = /*#__PURE__*/ function(DurableObject) {
                                     batchChunkAdapter,
                                     timeoutAdapter
                                 ]).resume(brainToRun, {
+                                    currentUser: currentUser,
                                     machine: machine,
                                     brainRunId: originalBrainRunId,
                                     signal: this.abortController.signal

package/dist/src/create-r2-store.js

@@ -0,0 +1,319 @@
+function _array_like_to_array(arr, len) {
+    if (len == null || len > arr.length) len = arr.length;
+    for(var i = 0, arr2 = new Array(len); i < len; i++)arr2[i] = arr[i];
+    return arr2;
+}
+function _array_with_holes(arr) {
+    if (Array.isArray(arr)) return arr;
+}
+function asyncGeneratorStep(gen, resolve, reject, _next, _throw, key, arg) {
+    try {
+        var info = gen[key](arg);
+        var value = info.value;
+    } catch (error) {
+        reject(error);
+        return;
+    }
+    if (info.done) {
+        resolve(value);
+    } else {
+        Promise.resolve(value).then(_next, _throw);
+    }
+}
+function _async_to_generator(fn) {
+    return function() {
+        var self = this, args = arguments;
+        return new Promise(function(resolve, reject) {
+            var gen = fn.apply(self, args);
+            function _next(value) {
+                asyncGeneratorStep(gen, resolve, reject, _next, _throw, "next", value);
+            }
+            function _throw(err) {
+                asyncGeneratorStep(gen, resolve, reject, _next, _throw, "throw", err);
+            }
+            _next(undefined);
+        });
+    };
+}
+function _iterable_to_array_limit(arr, i) {
+    var _i = arr == null ? null : typeof Symbol !== "undefined" && arr[Symbol.iterator] || arr["@@iterator"];
+    if (_i == null) return;
+    var _arr = [];
+    var _n = true;
+    var _d = false;
+    var _s, _e;
+    try {
+        for(_i = _i.call(arr); !(_n = (_s = _i.next()).done); _n = true){
+            _arr.push(_s.value);
+            if (i && _arr.length === i) break;
+        }
+    } catch (err) {
+        _d = true;
+        _e = err;
+    } finally{
+        try {
+            if (!_n && _i["return"] != null) _i["return"]();
+        } finally{
+            if (_d) throw _e;
+        }
+    }
+    return _arr;
+}
+function _non_iterable_rest() {
+    throw new TypeError("Invalid attempt to destructure non-iterable instance.\\nIn order to be iterable, non-array objects must have a [Symbol.iterator]() method.");
+}
+function _sliced_to_array(arr, i) {
+    return _array_with_holes(arr) || _iterable_to_array_limit(arr, i) || _unsupported_iterable_to_array(arr, i) || _non_iterable_rest();
+}
+function _type_of(obj) {
+    "@swc/helpers - typeof";
+    return obj && typeof Symbol !== "undefined" && obj.constructor === Symbol ? "symbol" : typeof obj;
+}
+function _unsupported_iterable_to_array(o, minLen) {
+    if (!o) return;
+    if (typeof o === "string") return _array_like_to_array(o, minLen);
+    var n = Object.prototype.toString.call(o).slice(8, -1);
+    if (n === "Object" && o.constructor) n = o.constructor.name;
+    if (n === "Map" || n === "Set") return Array.from(n);
+    if (n === "Arguments" || /^(?:Ui|I)nt(?:8|16|32)(?:Clamped)?Array$/.test(n)) return _array_like_to_array(o, minLen);
+}
+function _ts_generator(thisArg, body) {
+    var f, y, t, _ = {
+        label: 0,
+        sent: function() {
+            if (t[0] & 1) throw t[1];
+            return t[1];
+        },
+        trys: [],
+        ops: []
+    }, g = Object.create((typeof Iterator === "function" ? Iterator : Object).prototype);
+    return g.next = verb(0), g["throw"] = verb(1), g["return"] = verb(2), typeof Symbol === "function" && (g[Symbol.iterator] = function() {
+        return this;
+    }), g;
+    function verb(n) {
+        return function(v) {
+            return step([
+                n,
+                v
+            ]);
+        };
+    }
+    function step(op) {
+        if (f) throw new TypeError("Generator is already executing.");
+        while(g && (g = 0, op[0] && (_ = 0)), _)try {
+            if (f = 1, y && (t = op[0] & 2 ? y["return"] : op[0] ? y["throw"] || ((t = y["return"]) && t.call(y), 0) : y.next) && !(t = t.call(y, op[1])).done) return t;
+            if (y = 0, t) op = [
+                op[0] & 2,
+                t.value
+            ];
+            switch(op[0]){
+                case 0:
+                case 1:
+                    t = op;
+                    break;
+                case 4:
+                    _.label++;
+                    return {
+                        value: op[1],
+                        done: false
+                    };
+                case 5:
+                    _.label++;
+                    y = op[1];
+                    op = [
+                        0
+                    ];
+                    continue;
+                case 7:
+                    op = _.ops.pop();
+                    _.trys.pop();
+                    continue;
+                default:
+                    if (!(t = _.trys, t = t.length > 0 && t[t.length - 1]) && (op[0] === 6 || op[0] === 2)) {
+                        _ = 0;
+                        continue;
+                    }
+                    if (op[0] === 3 && (!t || op[1] > t[0] && op[1] < t[3])) {
+                        _.label = op[1];
+                        break;
+                    }
+                    if (op[0] === 6 && _.label < t[1]) {
+                        _.label = t[1];
+                        t = op;
+                        break;
+                    }
+                    if (t && _.label < t[2]) {
+                        _.label = t[2];
+                        _.ops.push(op);
+                        break;
+                    }
+                    if (t[2]) _.ops.pop();
+                    _.trys.pop();
+                    continue;
+            }
+            op = body.call(thisArg, _);
+        } catch (e) {
+            op = [
+                6,
+                e
+            ];
+            y = 0;
+        } finally{
+            f = t = 0;
+        }
+        if (op[0] & 5) throw op[1];
+        return {
+            value: op[0] ? op[1] : void 0,
+            done: true
+        };
+    }
+}
+/**
+ * Type guard for per-user field definitions in a store schema.
+ */ function isPerUserField(value) {
+    return value !== null && (typeof value === "undefined" ? "undefined" : _type_of(value)) === 'object' && 'perUser' in value && value.perUser === true && 'type' in value;
+}
+/**
+ * Create a StoreProvider backed by Cloudflare R2.
+ *
+ * Key resolution:
+ *   shared:   store/{brainTitle}/{key}.json
+ *   per-user: store/{brainTitle}/user/{userId}/{key}.json
+ *
+ * The factory receives the store schema, brain title, and currentUser,
+ * and returns a typed Store<any> with full key resolution built in.
+ */ export function createR2Backend(bucket) {
+    return function(param) {
+        var schema = param.schema, brainTitle = param.brainTitle, currentUser = param.currentUser;
+        var resolveKey = function resolveKey(key) {
+            if (perUserKeys.has(key)) {
+                if (!currentUser) {
+                    throw new Error('Store key "'.concat(key, '" is per-user but no currentUser was provided. ') + "Per-user store keys require a currentUser in run params.");
+                }
+                return "store/".concat(brainTitle, "/user/").concat(currentUser.id, "/").concat(key);
+            }
+            return "store/".concat(brainTitle, "/").concat(key);
+        };
+        // Parse which keys are per-user from the schema
+        var perUserKeys = new Set();
+        var _iteratorNormalCompletion = true, _didIteratorError = false, _iteratorError = undefined;
+        try {
+            for(var _iterator = Object.entries(schema)[Symbol.iterator](), _step; !(_iteratorNormalCompletion = (_step = _iterator.next()).done); _iteratorNormalCompletion = true){
+                var _step_value = _sliced_to_array(_step.value, 2), key = _step_value[0], value = _step_value[1];
+                if (isPerUserField(value)) {
+                    perUserKeys.add(key);
+                }
+            }
+        } catch (err) {
+            _didIteratorError = true;
+            _iteratorError = err;
+        } finally{
+            try {
+                if (!_iteratorNormalCompletion && _iterator.return != null) {
+                    _iterator.return();
+                }
+            } finally{
+                if (_didIteratorError) {
+                    throw _iteratorError;
+                }
+            }
+        }
+        var store = {
+            get: function get(key) {
+                return _async_to_generator(function() {
+                    var resolved, object, _;
+                    return _ts_generator(this, function(_state) {
+                        switch(_state.label){
+                            case 0:
+                                resolved = resolveKey(key);
+                                return [
+                                    4,
+                                    bucket.get("".concat(resolved, ".json"))
+                                ];
+                            case 1:
+                                object = _state.sent();
+                                if (object === null) return [
+                                    2,
+                                    undefined
+                                ];
+                                _ = JSON.parse;
+                                return [
+                                    4,
+                                    object.text()
+                                ];
+                            case 2:
+                                return [
+                                    2,
+                                    _.apply(JSON, [
+                                        _state.sent()
+                                    ])
+                                ];
+                        }
+                    });
+                })();
+            },
+            set: function set(key, value) {
+                return _async_to_generator(function() {
+                    var resolved;
+                    return _ts_generator(this, function(_state) {
+                        switch(_state.label){
+                            case 0:
+                                resolved = resolveKey(key);
+                                return [
+                                    4,
+                                    bucket.put("".concat(resolved, ".json"), JSON.stringify(value))
+                                ];
+                            case 1:
+                                _state.sent();
+                                return [
+                                    2
+                                ];
+                        }
+                    });
+                })();
+            },
+            delete: function _delete(key) {
+                return _async_to_generator(function() {
+                    var resolved;
+                    return _ts_generator(this, function(_state) {
+                        switch(_state.label){
+                            case 0:
+                                resolved = resolveKey(key);
+                                return [
+                                    4,
+                                    bucket.delete("".concat(resolved, ".json"))
+                                ];
+                            case 1:
+                                _state.sent();
+                                return [
+                                    2
+                                ];
+                        }
+                    });
+                })();
+            },
+            has: function has(key) {
+                return _async_to_generator(function() {
+                    var resolved, object;
+                    return _ts_generator(this, function(_state) {
+                        switch(_state.label){
+                            case 0:
+                                resolved = resolveKey(key);
+                                return [
+                                    4,
+                                    bucket.head("".concat(resolved, ".json"))
+                                ];
+                            case 1:
+                                object = _state.sent();
+                                return [
+                                    2,
+                                    object !== null
+                                ];
+                        }
+                    });
+                })();
+            }
+        };
+        return store;
+    };
+}

package/dist/src/index.js

@@ -4,5 +4,6 @@ export { ScheduleDO } from './schedule-do.js';
 export { AuthDO } from './auth-do.js';
 export { GovernorDO } from './governor-do.js';
 export { rateGoverned, setGovernorBinding } from './governor-client-wrapper.js';
+export { createR2Backend } from './create-r2-store.js';
 export { PositronicManifest } from './manifest.js';
 export { default as api } from './api/index.js';

package/dist/src/monitor-do.js

@@ -265,6 +265,12 @@ export var MonitorDO = /*#__PURE__*/ function(DurableObject) {
         } catch (e) {
         // Column already exists
         }
+        // Migration: add user_id column to brain_runs for ownership tracking
+        try {
+            _this.storage.exec("ALTER TABLE brain_runs ADD COLUMN user_id TEXT");
+        } catch (e) {
+        // Column already exists
+        }
         return _this;
     }
     _create_class(MonitorDO, [
@@ -310,7 +316,9 @@ export var MonitorDO = /*#__PURE__*/ function(DurableObject) {
                     } else {
                         // All other events have brainTitle/brainDescription (BrainBaseEvent types)
                         var brainEvent = event;
-                        this.storage.exec("\n          INSERT INTO brain_runs (\n            run_id, brain_title, brain_description, type, status,\n            options, error, created_at, started_at, completed_at\n          ) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?)\n          ON CONFLICT(run_id) DO UPDATE SET\n            type = excluded.type,\n            status = excluded.status,\n            error = excluded.error,\n            completed_at = excluded.completed_at\n        ", brainRunId, brainEvent.brainTitle, brainEvent.brainDescription || null, event.type, status, JSON.stringify(event.options || {}), error, currentTime, startTime, completeTime);
+                        // Extract user_id from START event (set once, never updated)
+                        var userId = event.type === BRAIN_EVENTS.START ? event.currentUser.id : null;
+                        this.storage.exec("\n          INSERT INTO brain_runs (\n            run_id, brain_title, brain_description, type, status,\n            options, error, created_at, started_at, completed_at, user_id\n          ) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)\n          ON CONFLICT(run_id) DO UPDATE SET\n            type = excluded.type,\n            status = excluded.status,\n            error = excluded.error,\n            completed_at = excluded.completed_at\n        ", brainRunId, brainEvent.brainTitle, brainEvent.brainDescription || null, event.type, status, JSON.stringify(event.options || {}), error, currentTime, startTime, completeTime, userId);
                     }
                     // Clean up registrations and in-memory state when brain terminates
                     if (isTerminalStatus) {
@@ -445,10 +453,12 @@ export var MonitorDO = /*#__PURE__*/ function(DurableObject) {
         {
             /**
    * Get detailed information about a specific brain run
-   * Returns null if run not found
+   * Returns null if run not found or not owned by userId
+   * Pass null for userId to skip ownership check (root access)
    */ key: "getRun",
             value: function getRun(brainRunId) {
-                var results = this.storage.exec("\n      SELECT\n        run_id as brainRunId,\n        brain_title as brainTitle,\n        brain_description as brainDescription,\n        type,\n        status,\n        options,\n        error,\n        created_at as createdAt,\n        started_at as startedAt,\n        completed_at as completedAt\n      FROM brain_runs\n      WHERE run_id = ?\n    ", brainRunId).toArray();
+                var userId = arguments.length > 1 && arguments[1] !== void 0 ? arguments[1] : null;
+                var results = this.storage.exec("\n      SELECT\n        run_id as brainRunId,\n        brain_title as brainTitle,\n        brain_description as brainDescription,\n        type,\n        status,\n        options,\n        error,\n        created_at as createdAt,\n        started_at as startedAt,\n        completed_at as completedAt,\n        user_id as userId\n      FROM brain_runs\n      WHERE run_id = ?\n        AND (? IS NULL OR user_id = ?)\n    ", brainRunId, userId, userId).toArray();
                 if (results.length === 0) {
                     return null;
                 }
@@ -461,20 +471,23 @@ export var MonitorDO = /*#__PURE__*/ function(DurableObject) {
             }
         },
         {
-            // Update history method parameter and query
-            key: "history",
+            /**
+   * Get run history for a brain.
+   * Pass null for userId to skip ownership filter (root access).
+   */ key: "history",
             value: function history(brainTitle) {
-                var limit = arguments.length > 1 && arguments[1] !== void 0 ? arguments[1] : 10;
-                // Renamed parameter
-                // Update select query with aliases and filter by brain_title
-                return this.storage.exec("\n      SELECT\n        run_id as brainRunId,\n        brain_title as brainTitle,\n        brain_description as brainDescription,\n        type,\n        status,\n        options,\n        error,\n        created_at as createdAt,\n        started_at as startedAt,\n        completed_at as completedAt\n      FROM brain_runs\n      WHERE brain_title = ? -- Filter by new column name\n      ORDER BY created_at DESC\n      LIMIT ?\n    ", brainTitle, limit).toArray(); // Use renamed parameter
+                var limit = arguments.length > 1 && arguments[1] !== void 0 ? arguments[1] : 10, userId = arguments.length > 2 && arguments[2] !== void 0 ? arguments[2] : null;
+                return this.storage.exec("\n      SELECT\n        run_id as brainRunId,\n        brain_title as brainTitle,\n        brain_description as brainDescription,\n        type,\n        status,\n        options,\n        error,\n        created_at as createdAt,\n        started_at as startedAt,\n        completed_at as completedAt,\n        user_id as userId\n      FROM brain_runs\n      WHERE brain_title = ?\n        AND (? IS NULL OR user_id = ?)\n      ORDER BY created_at DESC\n      LIMIT ?\n    ", brainTitle, userId, userId, limit).toArray();
             }
         },
         {
-            // Get active brain runs for a specific brain (running, paused, or waiting)
-            key: "activeRuns",
+            /**
+   * Get active brain runs for a specific brain (running, paused, or waiting).
+   * Pass null for userId to skip ownership filter (root access).
+   */ key: "activeRuns",
             value: function activeRuns(brainTitle) {
-                return this.storage.exec("\n      SELECT\n        run_id as brainRunId,\n        brain_title as brainTitle,\n        brain_description as brainDescription,\n        type,\n        status,\n        options,\n        error,\n        created_at as createdAt,\n        started_at as startedAt,\n        completed_at as completedAt\n      FROM brain_runs\n      WHERE brain_title = ? AND status IN (?, ?, ?)\n      ORDER BY created_at DESC\n    ", brainTitle, STATUS.RUNNING, STATUS.PAUSED, STATUS.WAITING).toArray();
+                var userId = arguments.length > 1 && arguments[1] !== void 0 ? arguments[1] : null;
+                return this.storage.exec("\n      SELECT\n        run_id as brainRunId,\n        brain_title as brainTitle,\n        brain_description as brainDescription,\n        type,\n        status,\n        options,\n        error,\n        created_at as createdAt,\n        started_at as startedAt,\n        completed_at as completedAt,\n        user_id as userId\n      FROM brain_runs\n      WHERE brain_title = ? AND status IN (?, ?, ?)\n        AND (? IS NULL OR user_id = ?)\n      ORDER BY created_at DESC\n    ", brainTitle, STATUS.RUNNING, STATUS.PAUSED, STATUS.WAITING, userId, userId).toArray();
             }
         },
         {

package/dist/src/schedule-do.js

@@ -253,7 +253,7 @@ export var ScheduleDO = /*#__PURE__*/ function(DurableObject) {
         ]), _define_property(_this, "storage", void 0);
         _this.storage = state.storage.sql;
         // Initialize database schema
-        _this.storage.exec("\n      CREATE TABLE IF NOT EXISTS schedules (\n        id TEXT PRIMARY KEY,\n        brain_title TEXT NOT NULL,\n        cron_expression TEXT NOT NULL,\n        enabled INTEGER NOT NULL DEFAULT 1,\n        created_at INTEGER NOT NULL,\n        next_run_at INTEGER\n      );\n\n      CREATE INDEX IF NOT EXISTS idx_schedules_brain\n      ON schedules(brain_title);\n\n      CREATE INDEX IF NOT EXISTS idx_schedules_enabled\n      ON schedules(enabled);\n\n      CREATE TABLE IF NOT EXISTS scheduled_runs (\n        id INTEGER PRIMARY KEY AUTOINCREMENT,\n        schedule_id TEXT NOT NULL,\n        brain_run_id TEXT UNIQUE,\n        status TEXT NOT NULL CHECK(status IN ('triggered', 'failed', 'complete')),\n        ran_at INTEGER NOT NULL,\n        completed_at INTEGER,\n        error TEXT,\n        FOREIGN KEY (schedule_id) REFERENCES schedules(id) ON DELETE CASCADE\n      );\n\n      CREATE INDEX IF NOT EXISTS idx_runs_schedule\n      ON scheduled_runs(schedule_id, ran_at DESC);\n    ");
+        _this.storage.exec("\n      CREATE TABLE IF NOT EXISTS schedules (\n        id TEXT PRIMARY KEY,\n        brain_title TEXT NOT NULL,\n        cron_expression TEXT NOT NULL,\n        enabled INTEGER NOT NULL DEFAULT 1,\n        created_at INTEGER NOT NULL,\n        next_run_at INTEGER,\n        run_as_user_id TEXT NOT NULL\n      );\n\n      CREATE INDEX IF NOT EXISTS idx_schedules_brain\n      ON schedules(brain_title);\n\n      CREATE INDEX IF NOT EXISTS idx_schedules_enabled\n      ON schedules(enabled);\n\n      CREATE TABLE IF NOT EXISTS scheduled_runs (\n        id INTEGER PRIMARY KEY AUTOINCREMENT,\n        schedule_id TEXT NOT NULL,\n        brain_run_id TEXT UNIQUE,\n        status TEXT NOT NULL CHECK(status IN ('triggered', 'failed', 'complete')),\n        ran_at INTEGER NOT NULL,\n        completed_at INTEGER,\n        error TEXT,\n        FOREIGN KEY (schedule_id) REFERENCES schedules(id) ON DELETE CASCADE\n      );\n\n      CREATE INDEX IF NOT EXISTS idx_runs_schedule\n      ON scheduled_runs(schedule_id, ran_at DESC);\n    ");
         // Migration: add timezone column for existing DOs
         try {
             _this.storage.exec("ALTER TABLE schedules ADD COLUMN timezone TEXT NOT NULL DEFAULT 'UTC'");
@@ -266,7 +266,7 @@ export var ScheduleDO = /*#__PURE__*/ function(DurableObject) {
         {
             key: "createSchedule",
             value: function createSchedule(brainTitle, cronExpression) {
-                var timezone = arguments.length > 2 && arguments[2] !== void 0 ? arguments[2] : 'UTC';
+                var timezone = arguments.length > 2 && arguments[2] !== void 0 ? arguments[2] : 'UTC', runAsUserId = arguments.length > 3 ? arguments[3] : void 0;
                 return _async_to_generator(function() {
                     var id, createdAt, alarm, nextRunAt;
                     return _ts_generator(this, function(_state) {
@@ -299,7 +299,7 @@ export var ScheduleDO = /*#__PURE__*/ function(DurableObject) {
                                 // Note: Cron expression is validated at the API level before calling this method
                                 // Calculate next run time
                                 nextRunAt = this.calculateNextRunTime(cronExpression, createdAt, timezone);
-                                this.storage.exec("INSERT INTO schedules (id, brain_title, cron_expression, timezone, enabled, created_at, next_run_at)\n       VALUES (?, ?, ?, ?, 1, ?, ?)", id, brainTitle, cronExpression, timezone, createdAt, nextRunAt);
+                                this.storage.exec("INSERT INTO schedules (id, brain_title, cron_expression, timezone, enabled, created_at, next_run_at, run_as_user_id)\n       VALUES (?, ?, ?, ?, 1, ?, ?, ?)", id, brainTitle, cronExpression, timezone, createdAt, nextRunAt, runAsUserId);
                                 return [
                                     2,
                                     {
@@ -309,7 +309,8 @@ export var ScheduleDO = /*#__PURE__*/ function(DurableObject) {
                                         timezone: timezone,
                                         enabled: true,
                                         createdAt: createdAt,
-                                        nextRunAt: nextRunAt
+                                        nextRunAt: nextRunAt,
+                                        runAsUserId: runAsUserId
                                     }
                                 ];
                         }
@@ -323,7 +324,7 @@ export var ScheduleDO = /*#__PURE__*/ function(DurableObject) {
                 return _async_to_generator(function() {
                     var results, result;
                     return _ts_generator(this, function(_state) {
-                        results = this.storage.exec("SELECT id, brain_title, cron_expression, timezone, enabled, created_at, next_run_at\n         FROM schedules WHERE id = ?", scheduleId).toArray();
+                        results = this.storage.exec("SELECT id, brain_title, cron_expression, timezone, enabled, created_at, next_run_at, run_as_user_id\n         FROM schedules WHERE id = ?", scheduleId).toArray();
                         if (results.length === 0) {
                             return [
                                 2,
@@ -340,7 +341,8 @@ export var ScheduleDO = /*#__PURE__*/ function(DurableObject) {
                                 timezone: result.timezone || 'UTC',
                                 enabled: result.enabled === 1,
                                 createdAt: result.created_at,
-                                nextRunAt: result.next_run_at
+                                nextRunAt: result.next_run_at,
+                                runAsUserId: result.run_as_user_id
                             }
                         ];
                     });
@@ -379,7 +381,10 @@ export var ScheduleDO = /*#__PURE__*/ function(DurableObject) {
         },
         {
             key: "listSchedules",
-            value: function listSchedules() {
+            value: /**
+   * List all schedules. Pass null for userId to skip ownership filter (root access).
+   */ function listSchedules() {
+                var userId = arguments.length > 0 && arguments[0] !== void 0 ? arguments[0] : null;
                 return _async_to_generator(function() {
                     var alarm, schedules;
                     return _ts_generator(this, function(_state) {
@@ -416,7 +421,7 @@ export var ScheduleDO = /*#__PURE__*/ function(DurableObject) {
                                 _state.sent();
                                 _state.label = 4;
                             case 4:
-                                schedules = this.storage.exec("SELECT id, brain_title, cron_expression, timezone, enabled, created_at, next_run_at\n         FROM schedules\n         ORDER BY created_at DESC").toArray().map(function(row) {
+                                schedules = this.storage.exec("SELECT id, brain_title, cron_expression, timezone, enabled, created_at, next_run_at, run_as_user_id\n         FROM schedules\n         WHERE (? IS NULL OR run_as_user_id = ?)\n         ORDER BY created_at DESC", userId, userId).toArray().map(function(row) {
                                     return {
                                         id: row.id,
                                         brainTitle: row.brain_title,
@@ -424,7 +429,8 @@ export var ScheduleDO = /*#__PURE__*/ function(DurableObject) {
                                         timezone: row.timezone || 'UTC',
                                         enabled: row.enabled === 1,
                                         createdAt: row.created_at,
-                                        nextRunAt: row.next_run_at
+                                        nextRunAt: row.next_run_at,
+                                        runAsUserId: row.run_as_user_id
                                     };
                                 });
                                 return [
@@ -441,18 +447,23 @@ export var ScheduleDO = /*#__PURE__*/ function(DurableObject) {
         },
         {
             key: "getAllRuns",
-            value: function getAllRuns(scheduleId) {
-                var limit = arguments.length > 1 && arguments[1] !== void 0 ? arguments[1] : 100;
+            value: /**
+   * Get all scheduled runs. Pass null for userId to skip ownership filter (root access).
+   * When userId is set, only returns runs for schedules owned by that user.
+   */ function getAllRuns(scheduleId) {
+                var limit = arguments.length > 1 && arguments[1] !== void 0 ? arguments[1] : 100, userId = arguments.length > 2 && arguments[2] !== void 0 ? arguments[2] : null;
                 return _async_to_generator(function() {
                     var _this_storage, _this_storage1, query, params, runs, countQuery, countParams, countResult, count;
                     return _ts_generator(this, function(_state) {
-                        query = "\n      SELECT id, schedule_id, brain_run_id, status, ran_at, completed_at, error\n      FROM scheduled_runs\n    ";
+                        query = "\n      SELECT sr.id, sr.schedule_id, sr.brain_run_id, sr.status, sr.ran_at, sr.completed_at, sr.error\n      FROM scheduled_runs sr\n      JOIN schedules s ON sr.schedule_id = s.id\n      WHERE 1=1\n    ";
                         params = [];
                         if (scheduleId) {
-                            query += " WHERE schedule_id = ?";
+                            query += " AND sr.schedule_id = ?";
                             params.push(scheduleId);
                         }
-                        query += " ORDER BY ran_at DESC LIMIT ?";
+                        query += " AND (? IS NULL OR s.run_as_user_id = ?)";
+                        params.push(userId, userId);
+                        query += " ORDER BY sr.ran_at DESC LIMIT ?";
                         params.push(limit);
                         runs = (_this_storage = this.storage).exec.apply(_this_storage, [
                             query
@@ -468,12 +479,14 @@ export var ScheduleDO = /*#__PURE__*/ function(DurableObject) {
                             };
                         });
                         // Get total count
-                        countQuery = "SELECT COUNT(*) as count FROM scheduled_runs";
+                        countQuery = "\n      SELECT COUNT(*) as count\n      FROM scheduled_runs sr\n      JOIN schedules s ON sr.schedule_id = s.id\n      WHERE 1=1\n    ";
                         countParams = [];
                         if (scheduleId) {
-                            countQuery += " WHERE schedule_id = ?";
+                            countQuery += " AND sr.schedule_id = ?";
                             countParams.push(scheduleId);
                         }
+                        countQuery += " AND (? IS NULL OR s.run_as_user_id = ?)";
+                        countParams.push(userId, userId);
                         countResult = (_this_storage1 = this.storage).exec.apply(_this_storage1, [
                             countQuery
                         ].concat(_to_consumable_array(countParams))).one();
@@ -494,7 +507,7 @@ export var ScheduleDO = /*#__PURE__*/ function(DurableObject) {
             value: // Handle the alarm trigger - runs every minute in a perpetual cycle
             function alarm() {
                 return _async_to_generator(function() {
-                    var now, dueSchedules, _iteratorNormalCompletion, _didIteratorError, _iteratorError, _iterator, _step, schedule, scheduleId, brainTitle, cronExpression, brainRunId, error, errorMessage, timezone, nextRunAt, err;
+                    var now, dueSchedules, _iteratorNormalCompletion, _didIteratorError, _iteratorError, _iterator, _step, schedule, scheduleId, brainTitle, cronExpression, runAsUserId, brainRunId, error, errorMessage, timezone, nextRunAt, err;
                     return _ts_generator(this, function(_state) {
                         switch(_state.label){
                             case 0:
@@ -509,7 +522,7 @@ export var ScheduleDO = /*#__PURE__*/ function(DurableObject) {
                                 // checking every minute ensures we never miss a scheduled run.
                                 // Get all enabled schedules that are due
                                 now = Date.now();
-                                dueSchedules = this.storage.exec("SELECT id, brain_title, cron_expression, timezone\n           FROM schedules\n           WHERE enabled = 1 AND next_run_at <= ?", now).toArray();
+                                dueSchedules = this.storage.exec("SELECT id, brain_title, cron_expression, timezone, run_as_user_id\n           FROM schedules\n           WHERE enabled = 1 AND next_run_at <= ?", now).toArray();
                                 _iteratorNormalCompletion = true, _didIteratorError = false, _iteratorError = undefined;
                                 _state.label = 1;
                             case 1:
@@ -530,6 +543,7 @@ export var ScheduleDO = /*#__PURE__*/ function(DurableObject) {
                                 scheduleId = schedule.id;
                                 brainTitle = schedule.brain_title;
                                 cronExpression = schedule.cron_expression;
+                                runAsUserId = schedule.run_as_user_id;
                                 _state.label = 3;
                             case 3:
                                 _state.trys.push([
@@ -540,7 +554,7 @@ export var ScheduleDO = /*#__PURE__*/ function(DurableObject) {
                                 ]);
                                 return [
                                     4,
-                                    this.triggerBrainRun(brainTitle)
+                                    this.triggerBrainRun(brainTitle, runAsUserId)
                                 ];
                             case 4:
                                 brainRunId = _state.sent();
@@ -630,7 +644,7 @@ export var ScheduleDO = /*#__PURE__*/ function(DurableObject) {
         },
         {
             key: "triggerBrainRun",
-            value: function triggerBrainRun(brainTitle) {
+            value: function triggerBrainRun(brainTitle, runAsUserId) {
                 return _async_to_generator(function() {
                     var brainRunId, namespace, doId, stub;
                     return _ts_generator(this, function(_state) {
@@ -640,10 +654,12 @@ export var ScheduleDO = /*#__PURE__*/ function(DurableObject) {
                                 namespace = this.env.BRAIN_RUNNER_DO;
                                 doId = namespace.idFromName(brainRunId);
                                 stub = namespace.get(doId);
-                                console.log("[ScheduleDO] Triggering brain run ".concat(brainTitle, " with id ").concat(brainRunId));
+                                console.log("[ScheduleDO] Triggering brain run ".concat(brainTitle, " with id ").concat(brainRunId, " as user ").concat(runAsUserId));
                                 return [
                                     4,
-                                    stub.start(brainTitle, brainRunId)
+                                    stub.start(brainTitle, brainRunId, {
+                                        id: runAsUserId
+                                    })
                                 ];
                             case 1:
                                 _state.sent();

package/dist/types/api/auth-middleware.d.ts

@@ -4,6 +4,11 @@ export interface AuthContext {
     userId: string | null;
     isRoot: boolean;
 }
+/**
+ * Middleware that restricts access to root users only.
+ * Returns 403 if the authenticated user is not root.
+ */
+export declare function requireRoot(): MiddlewareHandler;
 declare module 'hono' {
     interface ContextVariableMap {
         auth: AuthContext;

package/dist/types/api/auth-middleware.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"auth-middleware.d.ts","sourceRoot":"","sources":["../../../src/api/auth-middleware.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAW,iBAAiB,EAAE,MAAM,MAAM,CAAC;AACvD,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AAI3C,MAAM,WAAW,WAAW;IAC1B,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,MAAM,EAAE,OAAO,CAAC;CACjB;AAGD,OAAO,QAAQ,MAAM,CAAC;IACpB,UAAU,kBAAkB;QAC1B,IAAI,EAAE,WAAW,CAAC;KACnB;CACF;AAwBD;;;GAGG;AACH,wBAAgB,cAAc,IAAI,iBAAiB,CAAC;IAAE,QAAQ,EAAE,QAAQ,CAAA;CAAE,CAAC,CAsF1E"}
+{"version":3,"file":"auth-middleware.d.ts","sourceRoot":"","sources":["../../../src/api/auth-middleware.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAW,iBAAiB,EAAE,MAAM,MAAM,CAAC;AACvD,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AAI3C,MAAM,WAAW,WAAW;IAC1B,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,MAAM,EAAE,OAAO,CAAC;CACjB;AAED;;;GAGG;AACH,wBAAgB,WAAW,IAAI,iBAAiB,CAQ/C;AAGD,OAAO,QAAQ,MAAM,CAAC;IACpB,UAAU,kBAAkB;QAC1B,IAAI,EAAE,WAAW,CAAC;KACnB;CACF;AAwBD;;;GAGG;AACH,wBAAgB,cAAc,IAAI,iBAAiB,CAAC;IAAE,QAAQ,EAAE,QAAQ,CAAA;CAAE,CAAC,CAsF1E"}

package/dist/types/api/brains.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"brains.d.ts","sourceRoot":"","sources":["../../../src/api/brains.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAgB,MAAM,MAAM,CAAC;AAM1C,OAAO,KAAK,EAAE,QAAQ,EAAiD,MAAM,YAAY,CAAC;AAE1F,QAAA,MAAM,MAAM;cAAwB,QAAQ;yCAAK,CAAC;AA+lBlD,eAAe,MAAM,CAAC"}
+{"version":3,"file":"brains.d.ts","sourceRoot":"","sources":["../../../src/api/brains.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAgB,MAAM,MAAM,CAAC;AAM1C,OAAO,KAAK,EAAE,QAAQ,EAAiD,MAAM,YAAY,CAAC;AAE1F,QAAA,MAAM,MAAM;cAAwB,QAAQ;yCAAK,CAAC;AAooBlD,eAAe,MAAM,CAAC"}

package/dist/types/api/secrets.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"secrets.d.ts","sourceRoot":"","sources":["../../../src/api/secrets.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAgB,MAAM,MAAM,CAAC;AAC1C,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AAiD3C,QAAA,MAAM,OAAO;cAAwB,QAAQ;yCAAK,CAAC;AA0SnD,eAAe,OAAO,CAAC"}
+{"version":3,"file":"secrets.d.ts","sourceRoot":"","sources":["../../../src/api/secrets.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAgB,MAAM,MAAM,CAAC;AAC1C,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AAkD3C,QAAA,MAAM,OAAO;cAAwB,QAAQ;yCAAK,CAAC;AA6SnD,eAAe,OAAO,CAAC"}

package/dist/types/brain-runner-do.d.ts

@@ -24,9 +24,13 @@ export declare class BrainRunnerDO extends DurableObject<Env> {
     private eventStreamAdapter;
     private abortController;
     private pageAdapter;
+    private runOwnerTableInitialized;
     private signalsTableInitialized;
     private waitTimeoutTableInitialized;
     constructor(state: DurableObjectState, env: Env);
+    private initializeRunOwnerTable;
+    private storeRunOwner;
+    private getRunOwner;
     private initializeSignalsTable;
     private initializeWaitTimeoutTable;
     storeWaitTimeout(brainRunId: string, timeoutAt: number): void;
@@ -74,7 +78,9 @@ export declare class BrainRunnerDO extends DurableObject<Env> {
         message: string;
     }>;
     alarm(): Promise<void>;
-    start(brainTitle: string, brainRunId: string, initialData?: Record<string, any>): Promise<void>;
+    start(brainTitle: string, brainRunId: string, currentUser: {
+        id: string;
+    }, initialData?: Record<string, any>): Promise<void>;
     /**
      * Wake up (resume) a brain from a previous execution point.
      * Webhook response data comes from signals, not as a parameter.

package/dist/types/brain-runner-do.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"brain-runner-do.d.ts","sourceRoot":"","sources":["../../src/brain-runner-do.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAiG,KAAK,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAChK,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAUnD,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AACjD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AACnD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AACnD,OAAO,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AAInD,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,2BAA2B,CAAC;AAG1D,wBAAgB,WAAW,CAAC,iBAAiB,EAAE,kBAAkB,QAEhE;AAED,wBAAgB,WAAW,IAAI,kBAAkB,GAAG,IAAI,CAEvD;AAGD,wBAAgB,cAAc,CAAC,MAAM,EAAE,WAAW,QAEjD;AAGD,wBAAgB,kBAAkB,CAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,QAE/D;AAED,wBAAgB,kBAAkB,IAAI,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAExD;AAED,MAAM,WAAW,GAAG;IAClB,eAAe,EAAE,sBAAsB,CAAC;IACxC,UAAU,EAAE,sBAAsB,CAAC,SAAS,CAAC,CAAC;IAC9C,WAAW,EAAE,sBAAsB,CAAC,UAAU,CAAC,CAAC;IAChD,WAAW,EAAE,sBAAsB,CAAC,UAAU,CAAC,CAAC;IAChD,gBAAgB,EAAE,QAAQ,CAAC;IAC3B,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAsGD,qBAAa,aAAc,SAAQ,aAAa,CAAC,GAAG,CAAC;IACnD,OAAO,CAAC,GAAG,CAAa;IACxB,OAAO,CAAC,UAAU,CAAS;IAC3B,OAAO,CAAC,kBAAkB,CAA4B;IACtD,OAAO,CAAC,eAAe,CAAgC;IACvD,OAAO,CAAC,WAAW,CAA4B;IAC/C,OAAO,CAAC,uBAAuB,CAAS;IACxC,OAAO,CAAC,2BAA2B,CAAS;gBAEhC,KAAK,EAAE,kBAAkB,EAAE,GAAG,EAAE,GAAG;IAO/C,OAAO,CAAC,sBAAsB;IAO9B,OAAO,CAAC,0BAA0B;IAOlC,gBAAgB,CAAC,UAAU,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM;IAStD,gBAAgB,CAAC,UAAU,EAAE,MAAM;IAQnC,cAAc,IAAI;QAAE,UAAU,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI;IAWlE;;;;OAIG;IACG,WAAW,CAAC,MAAM,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;KAAE,GAAG,OAAO,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAA;KAAE,CAAC;IAmB9I;;;;OAIG;IACH,oBAAoB,CAAC,MAAM,EAAE,SAAS,GAAG,SAAS,GAAG,KAAK,GAAG,WAAW,EAAE;YA+C5D,mBAAmB;IAqEjC;;;OAGG;IACH,OAAO,CAAC,eAAe;IAiBvB;;;;;;;;OAQG;IACG,IAAI,CAAC,UAAU,CAAC,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;IAkF9F,KAAK;IASL,KAAK,CACT,UAAU,EAAE,MAAM,EAClB,UAAU,EAAE,MAAM,EAClB,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC;IA6HnC;;;;OAIG;IACG,MAAM,CAAC,UAAU,EAAE,MAAM;IA6JzB,KAAK,CAAC,OAAO,EAAE,OAAO;CAkE7B"}
+{"version":3,"file":"brain-runner-do.d.ts","sourceRoot":"","sources":["../../src/brain-runner-do.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAiG,KAAK,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAChK,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAUnD,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AACjD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AACnD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AACnD,OAAO,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AAKnD,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,2BAA2B,CAAC;AAG1D,wBAAgB,WAAW,CAAC,iBAAiB,EAAE,kBAAkB,QAEhE;AAED,wBAAgB,WAAW,IAAI,kBAAkB,GAAG,IAAI,CAEvD;AAGD,wBAAgB,cAAc,CAAC,MAAM,EAAE,WAAW,QAEjD;AAGD,wBAAgB,kBAAkB,CAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,QAE/D;AAED,wBAAgB,kBAAkB,IAAI,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAExD;AAED,MAAM,WAAW,GAAG;IAClB,eAAe,EAAE,sBAAsB,CAAC;IACxC,UAAU,EAAE,sBAAsB,CAAC,SAAS,CAAC,CAAC;IAC9C,WAAW,EAAE,sBAAsB,CAAC,UAAU,CAAC,CAAC;IAChD,WAAW,EAAE,sBAAsB,CAAC,UAAU,CAAC,CAAC;IAChD,gBAAgB,EAAE,QAAQ,CAAC;IAC3B,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AA6GD,qBAAa,aAAc,SAAQ,aAAa,CAAC,GAAG,CAAC;IACnD,OAAO,CAAC,GAAG,CAAa;IACxB,OAAO,CAAC,UAAU,CAAS;IAC3B,OAAO,CAAC,kBAAkB,CAA4B;IACtD,OAAO,CAAC,eAAe,CAAgC;IACvD,OAAO,CAAC,WAAW,CAA4B;IAC/C,OAAO,CAAC,wBAAwB,CAAS;IACzC,OAAO,CAAC,uBAAuB,CAAS;IACxC,OAAO,CAAC,2BAA2B,CAAS;gBAEhC,KAAK,EAAE,kBAAkB,EAAE,GAAG,EAAE,GAAG;IAO/C,OAAO,CAAC,uBAAuB;IAO/B,OAAO,CAAC,aAAa;IAKrB,OAAO,CAAC,WAAW;IAQnB,OAAO,CAAC,sBAAsB;IAO9B,OAAO,CAAC,0BAA0B;IAOlC,gBAAgB,CAAC,UAAU,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM;IAStD,gBAAgB,CAAC,UAAU,EAAE,MAAM;IAQnC,cAAc,IAAI;QAAE,UAAU,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI;IAWlE;;;;OAIG;IACG,WAAW,CAAC,MAAM,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;KAAE,GAAG,OAAO,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAA;KAAE,CAAC;IAmB9I;;;;OAIG;IACH,oBAAoB,CAAC,MAAM,EAAE,SAAS,GAAG,SAAS,GAAG,KAAK,GAAG,WAAW,EAAE;YA+C5D,mBAAmB;IAqEjC;;;OAGG;IACH,OAAO,CAAC,eAAe;IAiBvB;;;;;;;;OAQG;IACG,IAAI,CAAC,UAAU,CAAC,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;IAkF9F,KAAK;IASL,KAAK,CACT,UAAU,EAAE,MAAM,EAClB,UAAU,EAAE,MAAM,EAClB,WAAW,EAAE;QAAE,EAAE,EAAE,MAAM,CAAA;KAAE,EAC3B,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC;IAkInC;;;;OAIG;IACG,MAAM,CAAC,UAAU,EAAE,MAAM;IAsKzB,KAAK,CAAC,OAAO,EAAE,OAAO;CAkE7B"}

package/dist/types/create-r2-store.d.ts

@@ -0,0 +1,14 @@
+import type { R2Bucket } from '@cloudflare/workers-types';
+import type { StoreProvider } from '@positronic/core';
+/**
+ * Create a StoreProvider backed by Cloudflare R2.
+ *
+ * Key resolution:
+ *   shared:   store/{brainTitle}/{key}.json
+ *   per-user: store/{brainTitle}/user/{userId}/{key}.json
+ *
+ * The factory receives the store schema, brain title, and currentUser,
+ * and returns a typed Store<any> with full key resolution built in.
+ */
+export declare function createR2Backend(bucket: R2Bucket): StoreProvider;
+//# sourceMappingURL=create-r2-store.d.ts.map

package/dist/types/create-r2-store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"create-r2-store.d.ts","sourceRoot":"","sources":["../../src/create-r2-store.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,2BAA2B,CAAC;AAC1D,OAAO,KAAK,EAAE,aAAa,EAAS,MAAM,kBAAkB,CAAC;AAe7D;;;;;;;;;GASG;AACH,wBAAgB,eAAe,CAAC,MAAM,EAAE,QAAQ,GAAG,aAAa,CA+C/D"}

package/dist/types/index.d.ts

@@ -4,6 +4,7 @@ export { ScheduleDO } from './schedule-do.js';
 export { AuthDO } from './auth-do.js';
 export { GovernorDO } from './governor-do.js';
 export { rateGoverned, setGovernorBinding } from './governor-client-wrapper.js';
+export { createR2Backend } from './create-r2-store.js';
 export { PositronicManifest, type BrainMetadata } from './manifest.js';
 export { default as api } from './api/index.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/types/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,aAAa,EACb,cAAc,EACd,WAAW,EACX,kBAAkB,GACnB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAC5C,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAC9C,OAAO,EAAE,MAAM,EAAE,MAAM,cAAc,CAAC;AACtC,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAC9C,OAAO,EAAE,YAAY,EAAE,kBAAkB,EAAE,MAAM,8BAA8B,CAAC;AAChF,OAAO,EAAE,kBAAkB,EAAE,KAAK,aAAa,EAAE,MAAM,eAAe,CAAC;AACvE,OAAO,EAAE,OAAO,IAAI,GAAG,EAAE,MAAM,gBAAgB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,aAAa,EACb,cAAc,EACd,WAAW,EACX,kBAAkB,GACnB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAC5C,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAC9C,OAAO,EAAE,MAAM,EAAE,MAAM,cAAc,CAAC;AACtC,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAC9C,OAAO,EAAE,YAAY,EAAE,kBAAkB,EAAE,MAAM,8BAA8B,CAAC;AAChF,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AACvD,OAAO,EAAE,kBAAkB,EAAE,KAAK,aAAa,EAAE,MAAM,eAAe,CAAC;AACvE,OAAO,EAAE,OAAO,IAAI,GAAG,EAAE,MAAM,gBAAgB,CAAC"}

package/dist/types/monitor-do.d.ts

@@ -13,11 +13,20 @@ export declare class MonitorDO extends DurableObject<Env> {
     getLastEvent(brainRunId: string): Record<string, SqlStorageValue> | null;
     /**
      * Get detailed information about a specific brain run
-     * Returns null if run not found
+     * Returns null if run not found or not owned by userId
+     * Pass null for userId to skip ownership check (root access)
      */
-    getRun(brainRunId: string): any;
-    history(brainTitle: string, limit?: number): Record<string, SqlStorageValue>[];
-    activeRuns(brainTitle: string): Record<string, SqlStorageValue>[];
+    getRun(brainRunId: string, userId?: string | null): any;
+    /**
+     * Get run history for a brain.
+     * Pass null for userId to skip ownership filter (root access).
+     */
+    history(brainTitle: string, limit?: number, userId?: string | null): Record<string, SqlStorageValue>[];
+    /**
+     * Get active brain runs for a specific brain (running, paused, or waiting).
+     * Pass null for userId to skip ownership filter (root access).
+     */
+    activeRuns(brainTitle: string, userId?: string | null): Record<string, SqlStorageValue>[];
     /**
      * Register a webhook to wait for
      * Called when a brain emits a WEBHOOK event

package/dist/types/monitor-do.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"monitor-do.d.ts","sourceRoot":"","sources":["../../src/monitor-do.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAQnD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAEnD,MAAM,WAAW,GAAG;CAEnB;AAED,qBAAa,SAAU,SAAQ,aAAa,CAAC,GAAG,CAAC;IAC/C,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAa;IACrC,OAAO,CAAC,kBAAkB,CAA4B;IAEtD,OAAO,CAAC,QAAQ,CAAwC;gBAE5C,KAAK,EAAE,kBAAkB,EAAE,GAAG,EAAE,GAAG;IAyE/C,gBAAgB,CAAC,KAAK,EAAE,UAAU,CAAC,GAAG,CAAC;YAmHzB,sBAAsB;IA4B9B,KAAK,CAAC,OAAO,EAAE,OAAO;IAmE5B,YAAY,CAAC,UAAU,EAAE,MAAM;IAa/B;;;OAGG;IACH,MAAM,CAAC,UAAU,EAAE,MAAM;IAqCzB,OAAO,CAAC,UAAU,EAAE,MAAM,EAAE,KAAK,GAAE,MAAW;IA6B9C,UAAU,CAAC,UAAU,EAAE,MAAM;IA2B7B;;;OAGG;IACH,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM;IAcpF;;;OAGG;IACH,gBAAgB,CAAC,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG;QAAE,UAAU,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,GAAG,IAAI;IAmBvG;;;OAGG;IACH,yBAAyB,CAAC,UAAU,EAAE,MAAM;IAU5C;;;OAGG;IACH,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO;IAgB/D;;OAEG;IACH,cAAc,CAAC,IAAI,EAAE,MAAM;IAU3B;;;OAGG;IACH,2BAA2B,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM,EAAE;IAezD;;;OAGG;IACH,sBAAsB,CAAC,UAAU,EAAE,MAAM;CAU1C"}
+{"version":3,"file":"monitor-do.d.ts","sourceRoot":"","sources":["../../src/monitor-do.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAQnD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAEnD,MAAM,WAAW,GAAG;CAEnB;AAED,qBAAa,SAAU,SAAQ,aAAa,CAAC,GAAG,CAAC;IAC/C,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAa;IACrC,OAAO,CAAC,kBAAkB,CAA4B;IAEtD,OAAO,CAAC,QAAQ,CAAwC;gBAE5C,KAAK,EAAE,kBAAkB,EAAE,GAAG,EAAE,GAAG;IAgF/C,gBAAgB,CAAC,KAAK,EAAE,UAAU,CAAC,GAAG,CAAC;YA0HzB,sBAAsB;IA4B9B,KAAK,CAAC,OAAO,EAAE,OAAO;IAmE5B,YAAY,CAAC,UAAU,EAAE,MAAM;IAa/B;;;;OAIG;IACH,MAAM,CAAC,UAAU,EAAE,MAAM,EAAE,MAAM,GAAE,MAAM,GAAG,IAAW;IAwCvD;;;OAGG;IACH,OAAO,CAAC,UAAU,EAAE,MAAM,EAAE,KAAK,GAAE,MAAW,EAAE,MAAM,GAAE,MAAM,GAAG,IAAW;IA8B5E;;;OAGG;IACH,UAAU,CAAC,UAAU,EAAE,MAAM,EAAE,MAAM,GAAE,MAAM,GAAG,IAAW;IA+B3D;;;OAGG;IACH,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM;IAcpF;;;OAGG;IACH,gBAAgB,CAAC,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG;QAAE,UAAU,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,GAAG,IAAI;IAmBvG;;;OAGG;IACH,yBAAyB,CAAC,UAAU,EAAE,MAAM;IAU5C;;;OAGG;IACH,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO;IAgB/D;;OAEG;IACH,cAAc,CAAC,IAAI,EAAE,MAAM;IAU3B;;;OAGG;IACH,2BAA2B,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM,EAAE;IAezD;;;OAGG;IACH,sBAAsB,CAAC,UAAU,EAAE,MAAM;CAU1C"}

package/dist/types/schedule-do.d.ts

@@ -14,6 +14,7 @@ interface Schedule {
     enabled: boolean;
     createdAt: number;
     nextRunAt?: number;
+    runAsUserId: string;
 }
 interface ScheduledRun {
     id: number;
@@ -27,14 +28,21 @@ interface ScheduledRun {
 export declare class ScheduleDO extends DurableObject<Env> {
     private readonly storage;
     constructor(state: DurableObjectState, env: Env);
-    createSchedule(brainTitle: string, cronExpression: string, timezone?: string): Promise<Schedule>;
+    createSchedule(brainTitle: string, cronExpression: string, timezone: string | undefined, runAsUserId: string): Promise<Schedule>;
     getSchedule(scheduleId: string): Promise<Schedule | null>;
     deleteSchedule(scheduleId: string): Promise<boolean>;
-    listSchedules(): Promise<{
+    /**
+     * List all schedules. Pass null for userId to skip ownership filter (root access).
+     */
+    listSchedules(userId?: string | null): Promise<{
         schedules: Schedule[];
         count: number;
     }>;
-    getAllRuns(scheduleId?: string, limit?: number): Promise<{
+    /**
+     * Get all scheduled runs. Pass null for userId to skip ownership filter (root access).
+     * When userId is set, only returns runs for schedules owned by that user.
+     */
+    getAllRuns(scheduleId?: string, limit?: number, userId?: string | null): Promise<{
         runs: ScheduledRun[];
         count: number;
     }>;

package/dist/types/schedule-do.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"schedule-do.d.ts","sourceRoot":"","sources":["../../src/schedule-do.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAGnD,OAAO,EAAgB,KAAK,UAAU,EAAE,MAAM,kBAAkB,CAAC;AACjE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAE1D,MAAM,WAAW,GAAG;IAClB,eAAe,EAAE,sBAAsB,CAAC,aAAa,CAAC,CAAC;IACvD,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,UAAU,QAAQ;IAChB,EAAE,EAAE,MAAM,CAAC;IACX,UAAU,EAAE,MAAM,CAAC;IACnB,cAAc,EAAE,MAAM,CAAC;IACvB,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,OAAO,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,UAAU,YAAY;IACpB,EAAE,EAAE,MAAM,CAAC;IACX,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,WAAW,GAAG,QAAQ,GAAG,UAAU,CAAC;IAC5C,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAID,qBAAa,UAAW,SAAQ,aAAa,CAAC,GAAG,CAAC;IAChD,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAa;gBAEzB,KAAK,EAAE,kBAAkB,EAAE,GAAG,EAAE,GAAG;IA4CzC,cAAc,CAClB,UAAU,EAAE,MAAM,EAClB,cAAc,EAAE,MAAM,EACtB,QAAQ,GAAE,MAAc,GACvB,OAAO,CAAC,QAAQ,CAAC;IAmCd,WAAW,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC;IA0BzD,cAAc,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAYpD,aAAa,IAAI,OAAO,CAAC;QAAE,SAAS,EAAE,QAAQ,EAAE,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC;IAmClE,UAAU,CACd,UAAU,CAAC,EAAE,MAAM,EACnB,KAAK,GAAE,MAAY,GAClB,OAAO,CAAC;QAAE,IAAI,EAAE,YAAY,EAAE,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC;IA4C7C,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;YA2Ed,eAAe;IAcvB,gBAAgB,CAAC,KAAK,EAAE,UAAU,CAAC,GAAG,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC;IA6C7D,OAAO,CAAC,qBAAqB;IAS7B,OAAO,CAAC,oBAAoB;IAMtB,kBAAkB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAInD,kBAAkB,IAAI,OAAO,CAAC,MAAM,CAAC;CAG5C"}
+{"version":3,"file":"schedule-do.d.ts","sourceRoot":"","sources":["../../src/schedule-do.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAGnD,OAAO,EAAgB,KAAK,UAAU,EAAE,MAAM,kBAAkB,CAAC;AACjE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAE1D,MAAM,WAAW,GAAG;IAClB,eAAe,EAAE,sBAAsB,CAAC,aAAa,CAAC,CAAC;IACvD,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,UAAU,QAAQ;IAChB,EAAE,EAAE,MAAM,CAAC;IACX,UAAU,EAAE,MAAM,CAAC;IACnB,cAAc,EAAE,MAAM,CAAC;IACvB,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,OAAO,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,UAAU,YAAY;IACpB,EAAE,EAAE,MAAM,CAAC;IACX,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,WAAW,GAAG,QAAQ,GAAG,UAAU,CAAC;IAC5C,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAID,qBAAa,UAAW,SAAQ,aAAa,CAAC,GAAG,CAAC;IAChD,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAa;gBAEzB,KAAK,EAAE,kBAAkB,EAAE,GAAG,EAAE,GAAG;IA8CzC,cAAc,CAClB,UAAU,EAAE,MAAM,EAClB,cAAc,EAAE,MAAM,EACtB,QAAQ,EAAE,MAAM,YAAQ,EACxB,WAAW,EAAE,MAAM,GAClB,OAAO,CAAC,QAAQ,CAAC;IAqCd,WAAW,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC;IA2BzD,cAAc,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAY1D;;OAEG;IACG,aAAa,CAAC,MAAM,GAAE,MAAM,GAAG,IAAW,GAAG,OAAO,CAAC;QAAE,SAAS,EAAE,QAAQ,EAAE,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC;IAuCpG;;;OAGG;IACG,UAAU,CACd,UAAU,CAAC,EAAE,MAAM,EACnB,KAAK,GAAE,MAAY,EACnB,MAAM,GAAE,MAAM,GAAG,IAAW,GAC3B,OAAO,CAAC;QAAE,IAAI,EAAE,YAAY,EAAE,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC;IAyD7C,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;YA4Ed,eAAe;IAcvB,gBAAgB,CAAC,KAAK,EAAE,UAAU,CAAC,GAAG,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC;IA6C7D,OAAO,CAAC,qBAAqB;IAS7B,OAAO,CAAC,oBAAoB;IAMtB,kBAAkB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAInD,kBAAkB,IAAI,OAAO,CAAC,MAAM,CAAC;CAG5C"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@positronic/cloudflare",
-  "version": "0.0.68",
+  "version": "0.0.69",
   "publishConfig": {
     "access": "public"
   },
@@ -31,9 +31,9 @@
     "clean": "rm -rf tsconfig.tsbuildinfo dist"
   },
   "dependencies": {
-    "@positronic/core": "^0.0.68",
-    "@positronic/spec": "^0.0.68",
-    "@positronic/template-new-project": "^0.0.68",
+    "@positronic/core": "^0.0.69",
+    "@positronic/spec": "^0.0.69",
+    "@positronic/template-new-project": "^0.0.69",
     "aws4fetch": "^1.0.18",
     "caz": "^2.0.0",
     "croner": "^10.0.1",