@stigmer/server 3.14.0-dev.20260910084630

package/dist/domain/schedule/cron.d.ts

@@ -0,0 +1,29 @@
+/**
+ * Enforces the DD-009 C-4 grammar; throws InvalidArgument with the
+ * cross-edition byte-pinned copy. Pure and deterministic.
+ */
+export declare function validateScheduleCron(cron: string): void;
+/**
+ * Requires a name the platform tz database resolves — Go
+ * validateScheduleTimeZone (the Temporal server loads the same database
+ * when it evaluates the cron, DD-008 D2).
+ *
+ * "Local" is rejected explicitly: Go resolves it to the host's zone
+ * (nondeterministic across replicas) while Java's ZoneId does not resolve
+ * it at all — accepting it would be a cross-edition divergence on top of a
+ * correctness bug. The EMPTY string is valid, as in Go: time.LoadLocation("")
+ * is UTC (and the artifact's empty TimeZoneName means UTC to Temporal).
+ */
+export declare function validateScheduleTimeZone(timeZone: string): void;
+/**
+ * The TS spelling of Go time.LoadLocation's yes/no answer. ICU (behind
+ * Intl) resolves zone names CASE-INSENSITIVELY (and may canonicalize
+ * through historical aliases, e.g. asia/kolkata → Asia/Calcutta) while
+ * Go's tzdata file lookup is case-sensitive. The guard restores Go's
+ * refusal: an input that is a mere case-variant of a canonical zone is
+ * rejected; genuine links ("US/Pacific") pass through ICU acceptance as
+ * they do in Go. Residual divergence — a case-variant of a LINK name —
+ * is a disclosed parity nuance (PR register), not silently absorbed.
+ */
+export declare function isLoadableTimeZone(timeZone: string): boolean;
+//# sourceMappingURL=cron.d.ts.map

package/dist/domain/schedule/cron.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cron.d.ts","sourceRoot":"","sources":["../../../src/domain/schedule/cron.ts"],"names":[],"mappings":"AA0CA;;;GAGG;AACH,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAwCvD;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,wBAAwB,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAM/D;AAgBD;;;;;;;;;GASG;AACH,wBAAgB,kBAAkB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAkB5D"}

package/dist/domain/schedule/cron.js

@@ -0,0 +1,130 @@
+/**
+ * Lexical cron and time-zone validation — ports
+ * pkg/domain/schedule/controller/cron.go (DD-009 C-4).
+ *
+ * The platform owns NO cron parsing in either edition — calendar and DST
+ * semantics live in the Temporal server (DD-008 D2). This module restricts
+ * the accepted GRAMMAR to the subset that is safe to store: the classic
+ * 5-field form plus the @daily-family shorthands. Everything rejected here
+ * is something Temporal's wider grammar would accept but that must not
+ * reach a stored spec (timezone prefixes carry a second timezone authority
+ * and fail at artifact-create time; @every bypasses the calendar model;
+ * 6/7-field forms defeat the structural one-minute floor; "#" comments are
+ * noise).
+ *
+ * Both server editions and the cloud Java edition mirror these checks with
+ * byte-identical messages; the shared rejection matrix is pinned by unit
+ * tests on every side. Widening this grammar later is additive; narrowing
+ * it would break stored specs — start narrow.
+ */
+import { invalidArgumentError } from "../../pipeline/errors.js";
+/**
+ * The accepted @-shorthands — deliberately only the calendar ones Temporal
+ * documents (no @every, and none of the nonstandard aliases like @annually
+ * or @midnight some cron implementations accept).
+ */
+const CRON_SHORTHANDS = new Set([
+    "@hourly",
+    "@daily",
+    "@weekly",
+    "@monthly",
+    "@yearly",
+]);
+/**
+ * Bounds each field to the character set of Temporal's CalendarSpec
+ * ranges: digits, month/day names (Jan, MON), '*', ',', '-', '/'.
+ * Quartz-isms ('?', 'L', 'W', '#') and anything else are rejected —
+ * Temporal does not implement them.
+ */
+const CRON_FIELD_PATTERN = /^[0-9A-Za-z*,/-]+$/;
+/**
+ * Enforces the DD-009 C-4 grammar; throws InvalidArgument with the
+ * cross-edition byte-pinned copy. Pure and deterministic.
+ */
+export function validateScheduleCron(cron) {
+    if (cron.startsWith("CRON_TZ=") || cron.startsWith("TZ=")) {
+        throw invalidArgumentError("spec.cron must not carry a timezone prefix (CRON_TZ=/TZ=) — spec.time_zone is the single timezone authority");
+    }
+    if (cron.includes("#")) {
+        throw invalidArgumentError("spec.cron must not contain a comment (#)");
+    }
+    if (cron.startsWith("@")) {
+        if (cron.startsWith("@every")) {
+            throw invalidArgumentError("spec.cron must be a calendar expression — @every intervals are not supported");
+        }
+        if (!CRON_SHORTHANDS.has(cron)) {
+            throw invalidArgumentError(`spec.cron shorthand "${cron}" is not supported — use @hourly, @daily, @weekly, @monthly, or @yearly, or a 5-field cron expression`);
+        }
+        return;
+    }
+    // Go strings.Fields: split on any run of whitespace, no empty fields.
+    const fields = cron.split(/\s+/).filter((field) => field !== "");
+    if (fields.length !== 5) {
+        throw invalidArgumentError(`spec.cron must have exactly 5 fields (minute hour day-of-month month day-of-week); got ${fields.length}`);
+    }
+    for (const field of fields) {
+        if (!CRON_FIELD_PATTERN.test(field)) {
+            throw invalidArgumentError(`spec.cron field "${field}" contains unsupported characters — allowed: digits, names, '*', ',', '-', '/'`);
+        }
+    }
+}
+/**
+ * Requires a name the platform tz database resolves — Go
+ * validateScheduleTimeZone (the Temporal server loads the same database
+ * when it evaluates the cron, DD-008 D2).
+ *
+ * "Local" is rejected explicitly: Go resolves it to the host's zone
+ * (nondeterministic across replicas) while Java's ZoneId does not resolve
+ * it at all — accepting it would be a cross-edition divergence on top of a
+ * correctness bug. The EMPTY string is valid, as in Go: time.LoadLocation("")
+ * is UTC (and the artifact's empty TimeZoneName means UTC to Temporal).
+ */
+export function validateScheduleTimeZone(timeZone) {
+    if (timeZone === "Local" || !isLoadableTimeZone(timeZone)) {
+        throw invalidArgumentError(`spec.time_zone "${timeZone}" is not a valid IANA time zone (e.g. "Asia/Kolkata")`);
+    }
+}
+// The canonical IANA zone list ICU ships (exact case), plus its lowered
+// twin for the case-guard below. Built once — the list is immutable for
+// the process lifetime.
+let canonicalZones;
+let canonicalZonesLowered;
+function zoneSets() {
+    if (canonicalZones === undefined || canonicalZonesLowered === undefined) {
+        const values = Intl.supportedValuesOf("timeZone");
+        canonicalZones = new Set(values);
+        canonicalZonesLowered = new Set(values.map((zone) => zone.toLowerCase()));
+    }
+    return { exact: canonicalZones, lowered: canonicalZonesLowered };
+}
+/**
+ * The TS spelling of Go time.LoadLocation's yes/no answer. ICU (behind
+ * Intl) resolves zone names CASE-INSENSITIVELY (and may canonicalize
+ * through historical aliases, e.g. asia/kolkata → Asia/Calcutta) while
+ * Go's tzdata file lookup is case-sensitive. The guard restores Go's
+ * refusal: an input that is a mere case-variant of a canonical zone is
+ * rejected; genuine links ("US/Pacific") pass through ICU acceptance as
+ * they do in Go. Residual divergence — a case-variant of a LINK name —
+ * is a disclosed parity nuance (PR register), not silently absorbed.
+ */
+export function isLoadableTimeZone(timeZone) {
+    if (timeZone === "") {
+        return true; // Go LoadLocation("") — UTC.
+    }
+    const { exact, lowered } = zoneSets();
+    if (exact.has(timeZone)) {
+        return true;
+    }
+    // A case-variant of a canonical zone: ICU would accept it, Go refuses.
+    if (lowered.has(timeZone.toLowerCase())) {
+        return false;
+    }
+    try {
+        new Intl.DateTimeFormat("en-US", { timeZone });
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
+//# sourceMappingURL=cron.js.map

package/dist/domain/schedule/cron.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cron.js","sourceRoot":"","sources":["../../../src/domain/schedule/cron.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AACH,OAAO,EAAE,oBAAoB,EAAE,MAAM,0BAA0B,CAAC;AAEhE;;;;GAIG;AACH,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC;IAC9B,SAAS;IACT,QAAQ;IACR,SAAS;IACT,UAAU;IACV,SAAS;CACV,CAAC,CAAC;AAEH;;;;;GAKG;AACH,MAAM,kBAAkB,GAAG,oBAAoB,CAAC;AAEhD;;;GAGG;AACH,MAAM,UAAU,oBAAoB,CAAC,IAAY;IAC/C,IAAI,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;QAC1D,MAAM,oBAAoB,CACxB,6GAA6G,CAC9G,CAAC;IACJ,CAAC;IAED,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QACvB,MAAM,oBAAoB,CAAC,0CAA0C,CAAC,CAAC;IACzE,CAAC;IAED,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACzB,IAAI,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC9B,MAAM,oBAAoB,CACxB,8EAA8E,CAC/E,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YAC/B,MAAM,oBAAoB,CACxB,wBAAwB,IAAI,uGAAuG,CACpI,CAAC;QACJ,CAAC;QACD,OAAO;IACT,CAAC;IAED,sEAAsE;IACtE,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,KAAK,EAAE,CAAC,CAAC;IACjE,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxB,MAAM,oBAAoB,CACxB,0FAA0F,MAAM,CAAC,MAAM,EAAE,CAC1G,CAAC;IACJ,CAAC;IAED,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;YACpC,MAAM,oBAAoB,CACxB,oBAAoB,KAAK,gFAAgF,CAC1G,CAAC;QACJ,CAAC;IACH,CAAC;AACH,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,wBAAwB,CAAC,QAAgB;IACvD,IAAI,QAAQ,KAAK,OAAO,IAAI,CAAC,kBAAkB,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC1D,MAAM,oBAAoB,CACxB,mBAAmB,QAAQ,uDAAuD,CACnF,CAAC;IACJ,CAAC;AACH,CAAC;AAED,wEAAwE;AACxE,wEAAwE;AACxE,wBAAwB;AACxB,IAAI,cAAuC,CAAC;AAC5C,IAAI,qBAA8C,CAAC;AACnD,SAAS,QAAQ;IACf,IAAI,cAAc,KAAK,SAAS,IAAI,qBAAqB,KAAK,SAAS,EAAE,CAAC;QACxE,MAAM,MAAM,GAAG,IAAI,CAAC,iBAAiB,CAAC,UAAU,CAAC,CAAC;QAClD,cAAc,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC;QACjC,qBAAqB,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;IAC5E,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,cAAc,EAAE,OAAO,EAAE,qBAAqB,EAAE,CAAC;AACnE,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,kBAAkB,CAAC,QAAgB;IACjD,IAAI,QAAQ,KAAK,EAAE,EAAE,CAAC;QACpB,OAAO,IAAI,CAAC,CAAC,6BAA6B;IAC5C,CAAC;IACD,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,QAAQ,EAAE,CAAC;IACtC,IAAI,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;QACxB,OAAO,IAAI,CAAC;IACd,CAAC;IACD,uEAAuE;IACvE,IAAI,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC,EAAE,CAAC;QACxC,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,CAAC;QACH,IAAI,IAAI,CAAC,cAAc,CAAC,OAAO,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC;QAC/C,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC"}

package/dist/domain/schedule/list-runs.d.ts

@@ -0,0 +1,24 @@
+import { ScheduleQueryController } from "@stigmer/protos/ai/stigmer/agentic/schedule/v1/query_pb";
+import type { PipelineStep } from "../../pipeline/pipeline.js";
+import type { Store } from "../../store/interface.js";
+type ListRunsInput = typeof ScheduleQueryController.method.listRuns.input;
+export declare const LIST_RUNS_RESULT_KEY = "listRunsResult";
+/**
+ * Bounds an unpaginated listRuns read — history can hold a quarter's worth
+ * of daily fires, and "the recent runs" is the question the surface
+ * answers (Go defaultRunsPageSize).
+ */
+export declare const DEFAULT_RUNS_PAGE_SIZE = 50;
+/**
+ * Confirms the schedule exists — a missing schedule answers NOT_FOUND,
+ * never an empty history that reads as "exists but never fired" (Go
+ * loadScheduleForRunsStep).
+ */
+export declare function newLoadScheduleForRunsStep(store: Store): PipelineStep<ListRunsInput>;
+/**
+ * Pages the fire ledger (newest first) and enriches in-flight rows with
+ * the execution's live phase (Go listRunsFromLedgerStep).
+ */
+export declare function newListRunsFromLedgerStep(store: Store): PipelineStep<ListRunsInput>;
+export {};
+//# sourceMappingURL=list-runs.d.ts.map

package/dist/domain/schedule/list-runs.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"list-runs.d.ts","sourceRoot":"","sources":["../../../src/domain/schedule/list-runs.ts"],"names":[],"mappings":"AAmBA,OAAO,EAAE,uBAAuB,EAAE,MAAM,yDAAyD,CAAC;AAWlG,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,4BAA4B,CAAC;AAG/D,OAAO,KAAK,EAAqB,KAAK,EAAE,MAAM,0BAA0B,CAAC;AAEzE,KAAK,aAAa,GAAG,OAAO,uBAAuB,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;AAE1E,eAAO,MAAM,oBAAoB,mBAAmB,CAAC;AAErD;;;;GAIG;AACH,eAAO,MAAM,sBAAsB,KAAK,CAAC;AAEzC;;;;GAIG;AACH,wBAAgB,0BAA0B,CAAC,KAAK,EAAE,KAAK,GAAG,YAAY,CAAC,aAAa,CAAC,CAmBpF;AAED;;;GAGG;AACH,wBAAgB,yBAAyB,CAAC,KAAK,EAAE,KAAK,GAAG,YAAY,CAAC,aAAa,CAAC,CAyCnF"}

package/dist/domain/schedule/list-runs.js

@@ -0,0 +1,203 @@
+/**
+ * The listRuns query steps — port pkg/domain/schedule/controller/list_runs.go:
+ * the fire-ledger surface (DD-017 D-7). Every fire leaves a row, INCLUDING
+ * fires that created no execution (a refused launch gate, a missing target
+ * agent), with the refusing gate's copy verbatim: this is the RPC that
+ * explains status.consecutive_failures.
+ *
+ * Rows carrying an execution id but no terminal outcome are enriched with
+ * the execution's LIVE phase at read time — manual fires are untracked by
+ * design (the caller watches the execution), so their outcome is resolved
+ * here rather than by a tracker, and outcome columns never lie while a run
+ * is in flight.
+ */
+import { create } from "@bufbuild/protobuf";
+import { timestampFromDate } from "@bufbuild/protobuf/wkt";
+import { AgentExecutionSchema } from "@stigmer/protos/ai/stigmer/agentic/agentexecution/v1/api_pb";
+import { ExecutionPhase } from "@stigmer/protos/ai/stigmer/agentic/agentexecution/v1/enum_pb";
+import { ScheduleSchema } from "@stigmer/protos/ai/stigmer/agentic/schedule/v1/api_pb";
+import { ScheduleRunListSchema, ScheduleRunOrigin, ScheduleRunOutcome, ScheduleRunSchema, } from "@stigmer/protos/ai/stigmer/agentic/schedule/v1/io_pb";
+import { ApiResourceKind } from "@stigmer/protos/ai/stigmer/commons/apiresource/apiresourcekind/api_resource_kind_pb";
+import { internalError, notFoundError } from "../../pipeline/errors.js";
+import { ResourceNotFoundError } from "../../store/interface.js";
+export const LIST_RUNS_RESULT_KEY = "listRunsResult";
+/**
+ * Bounds an unpaginated listRuns read — history can hold a quarter's worth
+ * of daily fires, and "the recent runs" is the question the surface
+ * answers (Go defaultRunsPageSize).
+ */
+export const DEFAULT_RUNS_PAGE_SIZE = 50;
+/**
+ * Confirms the schedule exists — a missing schedule answers NOT_FOUND,
+ * never an empty history that reads as "exists but never fired" (Go
+ * loadScheduleForRunsStep).
+ */
+export function newLoadScheduleForRunsStep(store) {
+    return {
+        name: "LoadScheduleForRuns",
+        async execute(ctx) {
+            const scheduleId = ctx.input.scheduleId;
+            try {
+                await store.getResource(ApiResourceKind.schedule, scheduleId, ScheduleSchema);
+            }
+            catch (error) {
+                if (error instanceof ResourceNotFoundError) {
+                    throw notFoundError("Schedule", scheduleId);
+                }
+                throw internalError(error, "failed to load schedule");
+            }
+        },
+    };
+}
+/**
+ * Pages the fire ledger (newest first) and enriches in-flight rows with
+ * the execution's live phase (Go listRunsFromLedgerStep).
+ */
+export function newListRunsFromLedgerStep(store) {
+    return {
+        name: "ListRunsFromLedger",
+        async execute(ctx) {
+            const req = ctx.input;
+            // PageInfo.num is 1-indexed by contract (pagination.proto); a
+            // zero/absent page reads as the first.
+            let size = req.pageInfo?.size ?? 0;
+            if (size <= 0) {
+                size = DEFAULT_RUNS_PAGE_SIZE;
+            }
+            let num = req.pageInfo?.num ?? 0;
+            if (num < 1) {
+                num = 1;
+            }
+            const offset = (num - 1) * size;
+            let runs;
+            let total;
+            try {
+                ({ runs, total } = await store.listScheduleRuns(req.scheduleId, offset, size));
+            }
+            catch (error) {
+                throw internalError(error, "failed to list schedule runs");
+            }
+            const items = [];
+            for (const record of runs) {
+                items.push(await toProtoRun(store, record));
+            }
+            ctx.set(LIST_RUNS_RESULT_KEY, create(ScheduleRunListSchema, { totalCount: total, items }));
+        },
+    };
+}
+/**
+ * Maps one ledger row to the wire, enriching a non-terminal row that
+ * carries an execution id with the execution's live phase — the read-time
+ * honesty rule (Go toProtoRun).
+ */
+async function toProtoRun(store, record) {
+    const run = create(ScheduleRunSchema, {
+        scheduleId: record.scheduleId,
+        org: record.org,
+        origin: runOriginFromLabel(record.origin),
+        outcome: runOutcomeFromLabel(record.outcome),
+        reason: record.reason,
+        executionId: record.executionId,
+    });
+    const nominal = parseTime(record.nominalFireTime);
+    if (nominal !== undefined) {
+        run.nominalFireTime = timestampFromDate(nominal);
+    }
+    const recordedAt = parseTime(record.recordedAt);
+    if (recordedAt !== undefined) {
+        run.recordedAt = timestampFromDate(recordedAt);
+    }
+    if (record.completedAt !== "") {
+        const completedAt = parseTime(record.completedAt);
+        if (completedAt !== undefined) {
+            run.completedAt = timestampFromDate(completedAt);
+        }
+        return run;
+    }
+    // In flight on paper — ask the execution row what actually happened.
+    if (record.executionId === "") {
+        return run;
+    }
+    let phase;
+    try {
+        const execution = await store.getResource(ApiResourceKind.agent_execution, record.executionId, AgentExecutionSchema);
+        phase = execution.status?.phase ?? ExecutionPhase.EXECUTION_PHASE_UNSPECIFIED;
+    }
+    catch {
+        // Execution deleted (or unreadable): the ledger row stands as
+        // recorded — deleting a run must not rewrite its history.
+        return run;
+    }
+    switch (phase) {
+        case ExecutionPhase.EXECUTION_COMPLETED:
+            run.outcome = ScheduleRunOutcome.COMPLETED;
+            break;
+        case ExecutionPhase.EXECUTION_FAILED:
+        case ExecutionPhase.EXECUTION_CANCELLED:
+        case ExecutionPhase.EXECUTION_TERMINATED:
+            run.outcome = ScheduleRunOutcome.FAILED;
+            run.reason = `run ${record.executionId} ended ${executionPhaseWord(phase)}`;
+            break;
+        default:
+            // Genuinely still running — "started" is the honest answer.
+            break;
+    }
+    return run;
+}
+/**
+ * Lowers an ExecutionPhase to the reason vocabulary the tick's verdict
+ * writer uses ("run X ended failed") — Go executionPhaseWord.
+ */
+function executionPhaseWord(phase) {
+    switch (phase) {
+        case ExecutionPhase.EXECUTION_FAILED:
+            return "failed";
+        case ExecutionPhase.EXECUTION_CANCELLED:
+            return "cancelled";
+        case ExecutionPhase.EXECUTION_TERMINATED:
+            return "terminated";
+        default:
+            return "unknown";
+    }
+}
+/** Maps the ledger's lowercase origin vocabulary back to the wire enum. */
+function runOriginFromLabel(origin) {
+    switch (origin) {
+        case "cron":
+            return ScheduleRunOrigin.CRON;
+        case "manual":
+            return ScheduleRunOrigin.MANUAL;
+        default:
+            return ScheduleRunOrigin.UNSPECIFIED;
+    }
+}
+/** Maps the ledger's lowercase outcome vocabulary back to the wire enum. */
+function runOutcomeFromLabel(outcome) {
+    switch (outcome) {
+        case "started":
+            return ScheduleRunOutcome.STARTED;
+        case "refused":
+            return ScheduleRunOutcome.REFUSED;
+        case "target_missing":
+            return ScheduleRunOutcome.TARGET_MISSING;
+        case "skipped":
+            return ScheduleRunOutcome.SKIPPED;
+        case "completed":
+            return ScheduleRunOutcome.COMPLETED;
+        case "failed":
+            return ScheduleRunOutcome.FAILED;
+        case "timed_out":
+            return ScheduleRunOutcome.TIMED_OUT;
+        default:
+            return ScheduleRunOutcome.UNSPECIFIED;
+    }
+}
+/** Go's time.Parse(time.RFC3339) tolerance: unparseable leaves the field unset. */
+function parseTime(value) {
+    if (value === "") {
+        return undefined;
+    }
+    const parsed = new Date(value);
+    return Number.isNaN(parsed.getTime()) ? undefined : parsed;
+}
+//# sourceMappingURL=list-runs.js.map

package/dist/domain/schedule/list-runs.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"list-runs.js","sourceRoot":"","sources":["../../../src/domain/schedule/list-runs.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AACH,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAC5C,OAAO,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAE3D,OAAO,EAAE,oBAAoB,EAAE,MAAM,6DAA6D,CAAC;AACnG,OAAO,EAAE,cAAc,EAAE,MAAM,8DAA8D,CAAC;AAC9F,OAAO,EAAE,cAAc,EAAE,MAAM,uDAAuD,CAAC;AAEvF,OAAO,EACL,qBAAqB,EACrB,iBAAiB,EACjB,kBAAkB,EAClB,iBAAiB,GAClB,MAAM,sDAAsD,CAAC;AAE9D,OAAO,EAAE,eAAe,EAAE,MAAM,qFAAqF,CAAC;AAEtH,OAAO,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAC;AAGxE,OAAO,EAAE,qBAAqB,EAAE,MAAM,0BAA0B,CAAC;AAKjE,MAAM,CAAC,MAAM,oBAAoB,GAAG,gBAAgB,CAAC;AAErD;;;;GAIG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,EAAE,CAAC;AAEzC;;;;GAIG;AACH,MAAM,UAAU,0BAA0B,CAAC,KAAY;IACrD,OAAO;QACL,IAAI,EAAE,qBAAqB;QAC3B,KAAK,CAAC,OAAO,CAAC,GAAkC;YAC9C,MAAM,UAAU,GAAG,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC;YACxC,IAAI,CAAC;gBACH,MAAM,KAAK,CAAC,WAAW,CACrB,eAAe,CAAC,QAAQ,EACxB,UAAU,EACV,cAAc,CACf,CAAC;YACJ,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,KAAK,YAAY,qBAAqB,EAAE,CAAC;oBAC3C,MAAM,aAAa,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC;gBAC9C,CAAC;gBACD,MAAM,aAAa,CAAC,KAAK,EAAE,yBAAyB,CAAC,CAAC;YACxD,CAAC;QACH,CAAC;KACF,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,yBAAyB,CAAC,KAAY;IACpD,OAAO;QACL,IAAI,EAAE,oBAAoB;QAC1B,KAAK,CAAC,OAAO,CAAC,GAAkC;YAC9C,MAAM,GAAG,GAAG,GAAG,CAAC,KAAK,CAAC;YAEtB,8DAA8D;YAC9D,uCAAuC;YACvC,IAAI,IAAI,GAAG,GAAG,CAAC,QAAQ,EAAE,IAAI,IAAI,CAAC,CAAC;YACnC,IAAI,IAAI,IAAI,CAAC,EAAE,CAAC;gBACd,IAAI,GAAG,sBAAsB,CAAC;YAChC,CAAC;YACD,IAAI,GAAG,GAAG,GAAG,CAAC,QAAQ,EAAE,GAAG,IAAI,CAAC,CAAC;YACjC,IAAI,GAAG,GAAG,CAAC,EAAE,CAAC;gBACZ,GAAG,GAAG,CAAC,CAAC;YACV,CAAC;YACD,MAAM,MAAM,GAAG,CAAC,GAAG,GAAG,CAAC,CAAC,GAAG,IAAI,CAAC;YAEhC,IAAI,IAAyB,CAAC;YAC9B,IAAI,KAAa,CAAC;YAClB,IAAI,CAAC;gBACH,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,KAAK,CAAC,gBAAgB,CAC7C,GAAG,CAAC,UAAU,EACd,MAAM,EACN,IAAI,CACL,CAAC,CAAC;YACL,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,aAAa,CAAC,KAAK,EAAE,8BAA8B,CAAC,CAAC;YAC7D,CAAC;YAED,MAAM,KAAK,GAAkB,EAAE,CAAC;YAChC,KAAK,MAAM,MAAM,IAAI,IAAI,EAAE,CAAC;gBAC1B,KAAK,CAAC,IAAI,CAAC,MAAM,UAAU,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC;YAC9C,CAAC;YAED,GAAG,CAAC,GAAG,CACL,oBAAoB,EACpB,MAAM,CAAC,qBAAqB,EAAE,EAAE,UAAU,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAC5D,CAAC;QACJ,CAAC;KACF,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,KAAK,UAAU,UAAU,CACvB,KAAY,EACZ,MAAyB;IAEzB,MAAM,GAAG,GAAG,MAAM,CAAC,iBAAiB,EAAE;QACpC,UAAU,EAAE,MAAM,CAAC,UAAU;QAC7B,GAAG,EAAE,MAAM,CAAC,GAAG;QACf,MAAM,EAAE,kBAAkB,CAAC,MAAM,CAAC,MAAM,CAAC;QACzC,OAAO,EAAE,mBAAmB,CAAC,MAAM,CAAC,OAAO,CAAC;QAC5C,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,WAAW,EAAE,MAAM,CAAC,WAAW;KAChC,CAAC,CAAC;IACH,MAAM,OAAO,GAAG,SAAS,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC;IAClD,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;QAC1B,GAAG,CAAC,eAAe,GAAG,iBAAiB,CAAC,OAAO,CAAC,CAAC;IACnD,CAAC;IACD,MAAM,UAAU,GAAG,SAAS,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;IAChD,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;QAC7B,GAAG,CAAC,UAAU,GAAG,iBAAiB,CAAC,UAAU,CAAC,CAAC;IACjD,CAAC;IACD,IAAI,MAAM,CAAC,WAAW,KAAK,EAAE,EAAE,CAAC;QAC9B,MAAM,WAAW,GAAG,SAAS,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;QAClD,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;YAC9B,GAAG,CAAC,WAAW,GAAG,iBAAiB,CAAC,WAAW,CAAC,CAAC;QACnD,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;IAED,qEAAqE;IACrE,IAAI,MAAM,CAAC,WAAW,KAAK,EAAE,EAAE,CAAC;QAC9B,OAAO,GAAG,CAAC;IACb,CAAC;IACD,IAAI,KAAqB,CAAC;IAC1B,IAAI,CAAC;QACH,MAAM,SAAS,GAAG,MAAM,KAAK,CAAC,WAAW,CACvC,eAAe,CAAC,eAAe,EAC/B,MAAM,CAAC,WAAW,EAClB,oBAAoB,CACrB,CAAC;QACF,KAAK,GAAG,SAAS,CAAC,MAAM,EAAE,KAAK,IAAI,cAAc,CAAC,2BAA2B,CAAC;IAChF,CAAC;IAAC,MAAM,CAAC;QACP,8DAA8D;QAC9D,0DAA0D;QAC1D,OAAO,GAAG,CAAC;IACb,CAAC;IACD,QAAQ,KAAK,EAAE,CAAC;QACd,KAAK,cAAc,CAAC,mBAAmB;YACrC,GAAG,CAAC,OAAO,GAAG,kBAAkB,CAAC,SAAS,CAAC;YAC3C,MAAM;QACR,KAAK,cAAc,CAAC,gBAAgB,CAAC;QACrC,KAAK,cAAc,CAAC,mBAAmB,CAAC;QACxC,KAAK,cAAc,CAAC,oBAAoB;YACtC,GAAG,CAAC,OAAO,GAAG,kBAAkB,CAAC,MAAM,CAAC;YACxC,GAAG,CAAC,MAAM,GAAG,OAAO,MAAM,CAAC,WAAW,UAAU,kBAAkB,CAAC,KAAK,CAAC,EAAE,CAAC;YAC5E,MAAM;QACR;YACE,4DAA4D;YAC5D,MAAM;IACV,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;GAGG;AACH,SAAS,kBAAkB,CAAC,KAAqB;IAC/C,QAAQ,KAAK,EAAE,CAAC;QACd,KAAK,cAAc,CAAC,gBAAgB;YAClC,OAAO,QAAQ,CAAC;QAClB,KAAK,cAAc,CAAC,mBAAmB;YACrC,OAAO,WAAW,CAAC;QACrB,KAAK,cAAc,CAAC,oBAAoB;YACtC,OAAO,YAAY,CAAC;QACtB;YACE,OAAO,SAAS,CAAC;IACrB,CAAC;AACH,CAAC;AAED,2EAA2E;AAC3E,SAAS,kBAAkB,CAAC,MAAc;IACxC,QAAQ,MAAM,EAAE,CAAC;QACf,KAAK,MAAM;YACT,OAAO,iBAAiB,CAAC,IAAI,CAAC;QAChC,KAAK,QAAQ;YACX,OAAO,iBAAiB,CAAC,MAAM,CAAC;QAClC;YACE,OAAO,iBAAiB,CAAC,WAAW,CAAC;IACzC,CAAC;AACH,CAAC;AAED,4EAA4E;AAC5E,SAAS,mBAAmB,CAAC,OAAe;IAC1C,QAAQ,OAAO,EAAE,CAAC;QAChB,KAAK,SAAS;YACZ,OAAO,kBAAkB,CAAC,OAAO,CAAC;QACpC,KAAK,SAAS;YACZ,OAAO,kBAAkB,CAAC,OAAO,CAAC;QACpC,KAAK,gBAAgB;YACnB,OAAO,kBAAkB,CAAC,cAAc,CAAC;QAC3C,KAAK,SAAS;YACZ,OAAO,kBAAkB,CAAC,OAAO,CAAC;QACpC,KAAK,WAAW;YACd,OAAO,kBAAkB,CAAC,SAAS,CAAC;QACtC,KAAK,QAAQ;YACX,OAAO,kBAAkB,CAAC,MAAM,CAAC;QACnC,KAAK,WAAW;YACd,OAAO,kBAAkB,CAAC,SAAS,CAAC;QACtC;YACE,OAAO,kBAAkB,CAAC,WAAW,CAAC;IAC1C,CAAC;AACH,CAAC;AAED,mFAAmF;AACnF,SAAS,SAAS,CAAC,KAAa;IAC9B,IAAI,KAAK,KAAK,EAAE,EAAE,CAAC;QACjB,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,MAAM,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC;IAC/B,OAAO,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC;AAC7D,CAAC"}

package/dist/domain/schedule/persist-update.d.ts

@@ -0,0 +1,5 @@
+import { ScheduleSchema } from "@stigmer/protos/ai/stigmer/agentic/schedule/v1/api_pb";
+import type { PipelineStep } from "../../pipeline/pipeline.js";
+import type { Store } from "../../store/interface.js";
+export declare function newPersistScheduleUpdateStep(store: Store): PipelineStep<typeof ScheduleSchema>;
+//# sourceMappingURL=persist-update.d.ts.map

package/dist/domain/schedule/persist-update.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"persist-update.d.ts","sourceRoot":"","sources":["../../../src/domain/schedule/persist-update.ts"],"names":[],"mappings":"AAoBA,OAAO,EAAE,cAAc,EAAE,MAAM,uDAAuD,CAAC;AAMvF,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,4BAA4B,CAAC;AAG/D,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,0BAA0B,CAAC;AAEtD,wBAAgB,4BAA4B,CAC1C,KAAK,EAAE,KAAK,GACX,YAAY,CAAC,OAAO,cAAc,CAAC,CA0CrC"}

package/dist/domain/schedule/persist-update.js

@@ -0,0 +1,62 @@
+/**
+ * The update pipeline's persist step — ports persistScheduleUpdateStep of
+ * pkg/domain/schedule/controller/update.go.
+ *
+ * Persists an update as a graft of exactly what the request path owns —
+ * apiVersion/kind/metadata/spec plus the audit bump BuildUpdateState
+ * stamped — onto the LIVE row, inside one store.updateResource closure.
+ * NOT the generic Persist step: schedule status has a concurrent writer
+ * (the tick), and a full-row save of the load-time snapshot could silently
+ * revert a fire record, a streak write, or a PAUSE — breaking the "resume
+ * is the one clearing path" pin. The OSS twin of the cloud's targeted
+ * metadata+spec+status.audit patch, shaped for a store whose unit of write
+ * is the whole protobuf blob (DD-015 D-C).
+ *
+ * Unlike a save, the graft never resurrects a concurrently deleted row:
+ * updateResource answers not-found, relayed as NOT_FOUND — the delete won,
+ * honestly.
+ */
+import { create } from "@bufbuild/protobuf";
+import { ScheduleSchema } from "@stigmer/protos/ai/stigmer/agentic/schedule/v1/api_pb";
+import { ScheduleStatusSchema } from "@stigmer/protos/ai/stigmer/agentic/schedule/v1/status_pb";
+import { ApiResourceKind } from "@stigmer/protos/ai/stigmer/commons/apiresource/apiresourcekind/api_resource_kind_pb";
+import { internalError, notFoundError } from "../../pipeline/errors.js";
+import { ResourceNotFoundError } from "../../store/interface.js";
+export function newPersistScheduleUpdateStep(store) {
+    return {
+        name: "PersistScheduleUpdate",
+        async execute(ctx) {
+            const newState = ctx.newState;
+            const scheduleId = newState.metadata?.id ?? "";
+            let live;
+            try {
+                live = await store.updateResource(ApiResourceKind.schedule, scheduleId, ScheduleSchema, (row) => {
+                    row.apiVersion = newState.apiVersion;
+                    row.kind = newState.kind;
+                    row.metadata = newState.metadata;
+                    row.spec = newState.spec;
+                    // The one status subtree the request path owns: its own audit
+                    // bump. Every other status leaf stays exactly as the
+                    // concurrent runtime last wrote it.
+                    if (newState.status?.audit !== undefined) {
+                        if (row.status === undefined) {
+                            row.status = create(ScheduleStatusSchema);
+                        }
+                        row.status.audit = newState.status.audit;
+                    }
+                });
+            }
+            catch (error) {
+                if (error instanceof ResourceNotFoundError) {
+                    throw notFoundError("Schedule", scheduleId);
+                }
+                throw internalError(error, "failed to persist schedule update");
+            }
+            // Answer with the persisted post-image: the new spec plus the LIVE
+            // status — fresher than the load-time snapshot, and honest about
+            // anything the runtime wrote mid-request.
+            ctx.setNewState(live);
+        },
+    };
+}
+//# sourceMappingURL=persist-update.js.map

package/dist/domain/schedule/persist-update.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"persist-update.js","sourceRoot":"","sources":["../../../src/domain/schedule/persist-update.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AACH,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAE5C,OAAO,EAAE,cAAc,EAAE,MAAM,uDAAuD,CAAC;AAEvF,OAAO,EAAE,oBAAoB,EAAE,MAAM,0DAA0D,CAAC;AAChG,OAAO,EAAE,eAAe,EAAE,MAAM,qFAAqF,CAAC;AAEtH,OAAO,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAC;AAGxE,OAAO,EAAE,qBAAqB,EAAE,MAAM,0BAA0B,CAAC;AAGjE,MAAM,UAAU,4BAA4B,CAC1C,KAAY;IAEZ,OAAO;QACL,IAAI,EAAE,uBAAuB;QAC7B,KAAK,CAAC,OAAO,CAAC,GAA0C;YACtD,MAAM,QAAQ,GAAG,GAAG,CAAC,QAAQ,CAAC;YAC9B,MAAM,UAAU,GAAG,QAAQ,CAAC,QAAQ,EAAE,EAAE,IAAI,EAAE,CAAC;YAE/C,IAAI,IAAc,CAAC;YACnB,IAAI,CAAC;gBACH,IAAI,GAAG,MAAM,KAAK,CAAC,cAAc,CAC/B,eAAe,CAAC,QAAQ,EACxB,UAAU,EACV,cAAc,EACd,CAAC,GAAG,EAAE,EAAE;oBACN,GAAG,CAAC,UAAU,GAAG,QAAQ,CAAC,UAAU,CAAC;oBACrC,GAAG,CAAC,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC;oBACzB,GAAG,CAAC,QAAQ,GAAG,QAAQ,CAAC,QAAQ,CAAC;oBACjC,GAAG,CAAC,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC;oBACzB,8DAA8D;oBAC9D,qDAAqD;oBACrD,oCAAoC;oBACpC,IAAI,QAAQ,CAAC,MAAM,EAAE,KAAK,KAAK,SAAS,EAAE,CAAC;wBACzC,IAAI,GAAG,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;4BAC7B,GAAG,CAAC,MAAM,GAAG,MAAM,CAAC,oBAAoB,CAAC,CAAC;wBAC5C,CAAC;wBACD,GAAG,CAAC,MAAM,CAAC,KAAK,GAAG,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC;oBAC3C,CAAC;gBACH,CAAC,CACF,CAAC;YACJ,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,KAAK,YAAY,qBAAqB,EAAE,CAAC;oBAC3C,MAAM,aAAa,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC;gBAC9C,CAAC;gBACD,MAAM,aAAa,CAAC,KAAK,EAAE,mCAAmC,CAAC,CAAC;YAClE,CAAC;YAED,mEAAmE;YACnE,iEAAiE;YACjE,0CAA0C;YAC1C,GAAG,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;QACxB,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/domain/schedule/resume.d.ts

@@ -0,0 +1,33 @@
+/**
+ * The resume command's clearing step — ports
+ * pkg/domain/schedule/controller/resume.go.
+ *
+ * "Paused" is the platform's latch (status.paused_reason, written by the
+ * failure-streak auto-pause), distinct from "disabled", the owner's switch
+ * (spec.enabled) — DD-013 D-E. Resume clears the latch and resets
+ * status.consecutive_failures, and is deliberately the ONLY path that does
+ * either (DD-013 D-D): update and apply preserve status verbatim, so a
+ * routine manifest apply can never silently un-pause a failing schedule.
+ *
+ * Resuming a schedule that is not paused (and has no failure streak)
+ * succeeds and changes nothing — no write, no audit bump. A disabled
+ * schedule stays disabled: the latch and the switch are independent.
+ */
+import type { DescMessage } from "@bufbuild/protobuf";
+import type { PipelineStep } from "../../pipeline/pipeline.js";
+import type { Store } from "../../store/interface.js";
+/**
+ * Clears status.paused_reason and resets status.consecutive_failures in
+ * ONE store.updateResource closure on the freshly-read row, preserving
+ * every other status leaf as the concurrent runtime last wrote it (Go
+ * clearSchedulePauseStep).
+ *
+ * This is the revisit DD-013 D-D reserved for the clock slice: a previous
+ * load-mutate-save across step boundaries was safe only while nothing else
+ * wrote schedule status. The clock ended that — a fire recorded (or a
+ * streak advanced) between the load and the save would have been silently
+ * reverted. The agent-execution domain adopted this exact primitive after
+ * losing user approvals to the same race class.
+ */
+export declare function newClearSchedulePauseStep<Desc extends DescMessage>(store: Store): PipelineStep<Desc>;
+//# sourceMappingURL=resume.d.ts.map

package/dist/domain/schedule/resume.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"resume.d.ts","sourceRoot":"","sources":["../../../src/domain/schedule/resume.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AACH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAOtD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,4BAA4B,CAAC;AAK/D,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,0BAA0B,CAAC;AActD;;;;;;;;;;;;GAYG;AACH,wBAAgB,yBAAyB,CAAC,IAAI,SAAS,WAAW,EAChE,KAAK,EAAE,KAAK,GACX,YAAY,CAAC,IAAI,CAAC,CAiEpB"}

package/dist/domain/schedule/resume.js

@@ -0,0 +1,82 @@
+import { ScheduleSchema } from "@stigmer/protos/ai/stigmer/agentic/schedule/v1/api_pb";
+import { ApiResourceKind } from "@stigmer/protos/ai/stigmer/commons/apiresource/apiresourcekind/api_resource_kind_pb";
+import { internalError, notFoundError } from "../../pipeline/errors.js";
+import { setAuditFieldsForUpdate } from "../../pipeline/steps/defaults.js";
+import { EXISTING_RESOURCE_KEY } from "../../pipeline/steps/load-existing.js";
+import { ResourceNotFoundError } from "../../store/interface.js";
+/**
+ * Aborts the atomic write on the idempotent no-op path — the fresh row has
+ * no latch and no streak, so nothing is written and no audit bumps (Go
+ * errResumeNothingToClear).
+ */
+class NothingToClearError extends Error {
+    constructor() {
+        super("nothing to clear");
+        this.name = "NothingToClearError";
+    }
+}
+/**
+ * Clears status.paused_reason and resets status.consecutive_failures in
+ * ONE store.updateResource closure on the freshly-read row, preserving
+ * every other status leaf as the concurrent runtime last wrote it (Go
+ * clearSchedulePauseStep).
+ *
+ * This is the revisit DD-013 D-D reserved for the clock slice: a previous
+ * load-mutate-save across step boundaries was safe only while nothing else
+ * wrote schedule status. The clock ended that — a fire recorded (or a
+ * streak advanced) between the load and the save would have been silently
+ * reverted. The agent-execution domain adopted this exact primitive after
+ * losing user approvals to the same race class.
+ */
+export function newClearSchedulePauseStep(store) {
+    return {
+        name: "ClearSchedulePause",
+        async execute(ctx) {
+            const loaded = ctx.get(EXISTING_RESOURCE_KEY);
+            const scheduleId = loaded.metadata?.id ?? "";
+            let live;
+            try {
+                live = await store.updateResource(ApiResourceKind.schedule, scheduleId, ScheduleSchema, (row) => {
+                    const status = row.status;
+                    if ((status?.pausedReason ?? "") === "" &&
+                        (status?.consecutiveFailures ?? 0) === 0) {
+                        throw new NothingToClearError();
+                    }
+                    // status is defined here: a latch or streak exists only on a
+                    // materialized status message.
+                    row.status.pausedReason = "";
+                    // Resuming with strikes left would re-pause on the next
+                    // failure — a lie; both clear together, always.
+                    row.status.consecutiveFailures = 0;
+                    setAuditFieldsForUpdate(ScheduleSchema, row, "status_audit", ctx.callerIdentity);
+                });
+            }
+            catch (error) {
+                if (error instanceof NothingToClearError) {
+                    // The untouched fresh row is the honest response on the no-op
+                    // path; updateResource skipped the write, so re-read the live
+                    // row (Go's out-param `live` holds it either way).
+                    try {
+                        live = await store.getResource(ApiResourceKind.schedule, scheduleId, ScheduleSchema);
+                    }
+                    catch (readError) {
+                        if (readError instanceof ResourceNotFoundError) {
+                            throw notFoundError("Schedule", scheduleId);
+                        }
+                        throw internalError(readError, "failed to resume schedule");
+                    }
+                    ctx.set(EXISTING_RESOURCE_KEY, live);
+                    return;
+                }
+                if (error instanceof ResourceNotFoundError) {
+                    // Deleted between load and clear: the delete won.
+                    throw notFoundError("Schedule", scheduleId);
+                }
+                throw internalError(error, "failed to resume schedule");
+            }
+            // live holds the post-image (cleared) — the honest response.
+            ctx.set(EXISTING_RESOURCE_KEY, live);
+        },
+    };
+}
+//# sourceMappingURL=resume.js.map

package/dist/domain/schedule/resume.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"resume.js","sourceRoot":"","sources":["../../../src/domain/schedule/resume.ts"],"names":[],"mappings":"AAiBA,OAAO,EAAE,cAAc,EAAE,MAAM,uDAAuD,CAAC;AAEvF,OAAO,EAAE,eAAe,EAAE,MAAM,qFAAqF,CAAC;AAEtH,OAAO,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAC;AAGxE,OAAO,EAAE,uBAAuB,EAAE,MAAM,kCAAkC,CAAC;AAC3E,OAAO,EAAE,qBAAqB,EAAE,MAAM,uCAAuC,CAAC;AAC9E,OAAO,EAAE,qBAAqB,EAAE,MAAM,0BAA0B,CAAC;AAGjE;;;;GAIG;AACH,MAAM,mBAAoB,SAAQ,KAAK;IACrC;QACE,KAAK,CAAC,kBAAkB,CAAC,CAAC;QAC1B,IAAI,CAAC,IAAI,GAAG,qBAAqB,CAAC;IACpC,CAAC;CACF;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,yBAAyB,CACvC,KAAY;IAEZ,OAAO;QACL,IAAI,EAAE,oBAAoB;QAC1B,KAAK,CAAC,OAAO,CAAC,GAAyB;YACrC,MAAM,MAAM,GAAG,GAAG,CAAC,GAAG,CAAC,qBAAqB,CAAa,CAAC;YAC1D,MAAM,UAAU,GAAG,MAAM,CAAC,QAAQ,EAAE,EAAE,IAAI,EAAE,CAAC;YAE7C,IAAI,IAAc,CAAC;YACnB,IAAI,CAAC;gBACH,IAAI,GAAG,MAAM,KAAK,CAAC,cAAc,CAC/B,eAAe,CAAC,QAAQ,EACxB,UAAU,EACV,cAAc,EACd,CAAC,GAAG,EAAE,EAAE;oBACN,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC;oBAC1B,IACE,CAAC,MAAM,EAAE,YAAY,IAAI,EAAE,CAAC,KAAK,EAAE;wBACnC,CAAC,MAAM,EAAE,mBAAmB,IAAI,CAAC,CAAC,KAAK,CAAC,EACxC,CAAC;wBACD,MAAM,IAAI,mBAAmB,EAAE,CAAC;oBAClC,CAAC;oBACD,6DAA6D;oBAC7D,+BAA+B;oBAC/B,GAAG,CAAC,MAAO,CAAC,YAAY,GAAG,EAAE,CAAC;oBAC9B,wDAAwD;oBACxD,gDAAgD;oBAChD,GAAG,CAAC,MAAO,CAAC,mBAAmB,GAAG,CAAC,CAAC;oBACpC,uBAAuB,CACrB,cAAc,EACd,GAAG,EACH,cAAc,EACd,GAAG,CAAC,cAAc,CACnB,CAAC;gBACJ,CAAC,CACF,CAAC;YACJ,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,KAAK,YAAY,mBAAmB,EAAE,CAAC;oBACzC,8DAA8D;oBAC9D,8DAA8D;oBAC9D,mDAAmD;oBACnD,IAAI,CAAC;wBACH,IAAI,GAAG,MAAM,KAAK,CAAC,WAAW,CAC5B,eAAe,CAAC,QAAQ,EACxB,UAAU,EACV,cAAc,CACf,CAAC;oBACJ,CAAC;oBAAC,OAAO,SAAS,EAAE,CAAC;wBACnB,IAAI,SAAS,YAAY,qBAAqB,EAAE,CAAC;4BAC/C,MAAM,aAAa,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC;wBAC9C,CAAC;wBACD,MAAM,aAAa,CAAC,SAAS,EAAE,2BAA2B,CAAC,CAAC;oBAC9D,CAAC;oBACD,GAAG,CAAC,GAAG,CAAC,qBAAqB,EAAE,IAAI,CAAC,CAAC;oBACrC,OAAO;gBACT,CAAC;gBACD,IAAI,KAAK,YAAY,qBAAqB,EAAE,CAAC;oBAC3C,kDAAkD;oBAClD,MAAM,aAAa,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC;gBAC9C,CAAC;gBACD,MAAM,aAAa,CAAC,KAAK,EAAE,2BAA2B,CAAC,CAAC;YAC1D,CAAC;YACD,6DAA6D;YAC7D,GAAG,CAAC,GAAG,CAAC,qBAAqB,EAAE,IAAI,CAAC,CAAC;QACvC,CAAC;KACF,CAAC;AACJ,CAAC"}