aimeat 1.16.2 → 1.18.0

package/dist/src/services/owner-session.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"owner-session.d.ts","sourceRoot":"","sources":["../../../src/services/owner-session.ts"],"names":[],"mappings":"AAcA,OAAO,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AACjD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AACjD,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,yBAAyB,CAAC;AAGvD,iFAAiF;AACjF,eAAO,MAAM,cAAc,cAAc,CAAC;AAI1C,iEAAiE;AACjE,wBAAgB,SAAS,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAE/C;AAOD,0FAA0F;AAC1F,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,OAAO,GAAG,MAAM,GAAG,IAAI,CAW7D;AAED,4EAA4E;AAC5E,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,EAAE,MAAM,EAAE,YAAY,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI,CAQvG;AAED,sEAAsE;AACtE,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,GAAG,IAAI,CAOpE;AA0BD,MAAM,WAAW,kBAAkB;IACjC,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED;;;GAGG;AACH,wBAAsB,qBAAqB,CACzC,OAAO,EAAE,OAAO,EAChB,MAAM,EAAE,YAAY,EACpB,GAAG,EAAE,OAAO,EACZ,GAAG,EAAE,QAAQ,EACb,QAAQ,EAAE;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,EAAE,CAAA;CAAE,GAC3C,OAAO,CAAC,kBAAkB,CAAC,CA8B7B;AAED,MAAM,MAAM,aAAa,GACrB;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,OAAO,CAAA;CAAE,GAChE;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC;AAEjE;;;GAGG;AACH,wBAAsB,mBAAmB,CACvC,OAAO,EAAE,OAAO,EAChB,MAAM,EAAE,YAAY,EACpB,GAAG,EAAE,OAAO,EACZ,GAAG,EAAE,QAAQ,GACZ,OAAO,CAAC,aAAa,CAAC,CAuExB"}

package/dist/src/services/owner-session.js

@@ -0,0 +1,175 @@
+/**
+ * @file owner-session.ts
+ * @description Owner (human) login sessions backed by rotating, server-side refresh
+ *   tokens delivered as an httpOnly cookie. Decouples session continuity from the
+ *   owner keypair so logging in on one device never invalidates another. Provides the
+ *   cookie helpers, session establishment (login), and the refresh-with-rotation +
+ *   reuse-detection logic used by POST /v1/auth/refresh.
+ * @structure REFRESH_COOKIE constant; cookie helpers (read/set/clear/secure);
+ *   establishOwnerSession() for login; refreshOwnerSession() for rotation.
+ * @usage import { establishOwnerSession, refreshOwnerSession, clearRefreshCookie } from '../services/owner-session.js'
+ * @version-history
+ * v1.0.0 - 2026-06-03 - Initial implementation (plan 2026-06-03-owner-session-refresh-tokens).
+ */
+import { createHash, randomBytes, randomUUID } from 'node:crypto';
+import { issueJWT } from '../auth/jwt.js';
+/** Name of the httpOnly refresh-token cookie. Scoped to /v1/auth on the wire. */
+export const REFRESH_COOKIE = 'aimeat_rt';
+const COOKIE_PATH = '/v1/auth';
+const DAY_MS = 86_400_000;
+/** SHA-256 hex of a raw token — only the hash is ever stored. */
+export function hashToken(token) {
+    return createHash('sha256').update(token).digest('hex');
+}
+/** Whether the cookie should carry the Secure flag (https or proxied https). */
+function cookieSecure(req) {
+    return req.secure || req.headers['x-forwarded-proto'] === 'https';
+}
+/** Read the raw refresh token from the request's Cookie header (no cookie-parser dep). */
+export function readRefreshCookie(req) {
+    const header = req.headers.cookie;
+    if (!header)
+        return null;
+    for (const part of header.split(';')) {
+        const eq = part.indexOf('=');
+        if (eq === -1)
+            continue;
+        if (part.slice(0, eq).trim() === REFRESH_COOKIE) {
+            return decodeURIComponent(part.slice(eq + 1).trim());
+        }
+    }
+    return null;
+}
+/** Set the httpOnly refresh cookie. maxAge defaults to the absolute cap. */
+export function setRefreshCookie(req, res, config, token) {
+    res.cookie(REFRESH_COOKIE, token, {
+        httpOnly: true,
+        secure: cookieSecure(req),
+        sameSite: 'strict',
+        path: COOKIE_PATH,
+        maxAge: config.refreshAbsoluteDays * DAY_MS,
+    });
+}
+/** Clear the refresh cookie (logout / revocation / invalid token). */
+export function clearRefreshCookie(req, res) {
+    res.clearCookie(REFRESH_COOKIE, {
+        httpOnly: true,
+        secure: cookieSecure(req),
+        sameSite: 'strict',
+        path: COOKIE_PATH,
+    });
+}
+/** Best-effort human label for the session list, derived from the User-Agent. */
+function deviceLabelFromUA(ua) {
+    if (!ua)
+        return 'Unknown device';
+    const browser = /Edg\//.test(ua) ? 'Edge'
+        : /OPR\/|Opera/.test(ua) ? 'Opera'
+            : /Chrome\//.test(ua) ? 'Chrome'
+                : /Firefox\//.test(ua) ? 'Firefox'
+                    : /Safari\//.test(ua) ? 'Safari'
+                        : 'Browser';
+    const os = /Windows/.test(ua) ? 'Windows'
+        : /Mac OS X|Macintosh/.test(ua) ? 'macOS'
+            : /Android/.test(ua) ? 'Android'
+                : /iPhone|iPad|iPod|iOS/.test(ua) ? 'iOS'
+                    : /Linux/.test(ua) ? 'Linux'
+                        : '';
+    return os ? `${browser} on ${os}` : browser;
+}
+/** Re-read the owner's current roles so refreshed tokens never carry stale privileges. */
+async function freshOwnerRoles(storage, owner) {
+    const ownerRecord = await storage.getOwner(owner);
+    return ownerRecord?.roles ?? ['owner'];
+}
+/**
+ * Create an owner login session: mint a refresh token (cookie) + a short-lived access
+ * JWT bound to the session, and persist the session row. Called on successful login.
+ */
+export async function establishOwnerSession(storage, config, req, res, identity) {
+    const sessionId = randomUUID();
+    const rawToken = randomBytes(32).toString('hex');
+    const now = Date.now();
+    const issuedAt = new Date(now).toISOString();
+    const idleExpiresAt = new Date(now + config.refreshIdleDays * DAY_MS).toISOString();
+    const absoluteExpiresAt = new Date(now + config.refreshAbsoluteDays * DAY_MS).toISOString();
+    await storage.createOwnerSession({
+        sessionId,
+        gaii: identity.owner, // owner sessions are keyed to the bare owner name (no agent GAII)
+        owner: identity.owner,
+        issuedAt,
+        refreshTokenHash: hashToken(rawToken),
+        idleExpiresAt,
+        absoluteExpiresAt,
+        lastUsedAt: issuedAt,
+        deviceLabel: deviceLabelFromUA(req.headers['user-agent']),
+        userAgent: (req.headers['user-agent'] ?? null),
+    });
+    setRefreshCookie(req, res, config, rawToken);
+    const token = await issueJWT({ sub: identity.owner, owner: identity.owner, node: config.nodeId, roles: identity.roles }, config.accessTtlSeconds, sessionId);
+    return { token, sessionId, expiresIn: config.accessTtlSeconds };
+}
+/**
+ * Validate the refresh cookie, rotate it (one-time use with a grace window), detect
+ * reuse, and issue a new access token. Sets/clears the cookie on `res` as needed.
+ */
+export async function refreshOwnerSession(storage, config, req, res) {
+    const rawToken = readRefreshCookie(req);
+    if (!rawToken) {
+        return { ok: false, status: 401, code: 'AUTH_REQUIRED', message: 'No refresh token' };
+    }
+    // CSRF guard: cross-site requests cannot set this custom header without a CORS preflight.
+    if (req.headers['x-aimeat-refresh'] !== '1') {
+        return { ok: false, status: 400, code: 'CSRF_REQUIRED', message: 'Missing X-AIMEAT-Refresh header' };
+    }
+    const presentedHash = hashToken(rawToken);
+    const session = await storage.getSessionByRefreshHash(presentedHash);
+    if (!session) {
+        clearRefreshCookie(req, res);
+        return { ok: false, status: 401, code: 'INVALID_GRANT', message: 'Invalid refresh token' };
+    }
+    if (session.revoked) {
+        clearRefreshCookie(req, res);
+        return { ok: false, status: 401, code: 'SESSION_REVOKED', message: 'Session has been revoked' };
+    }
+    const now = Date.now();
+    const idle = session.idleExpiresAt ? Date.parse(session.idleExpiresAt) : 0;
+    const absolute = session.absoluteExpiresAt ? Date.parse(session.absoluteExpiresAt) : 0;
+    if ((idle && now >= idle) || (absolute && now >= absolute)) {
+        await storage.revokeSession(session.sessionId);
+        clearRefreshCookie(req, res);
+        return { ok: false, status: 401, code: 'SESSION_EXPIRED', message: 'Session expired — please log in again' };
+    }
+    // Reuse detection: the presented token matched the PREVIOUS hash.
+    if (session.prevTokenHash && presentedHash === session.prevTokenHash) {
+        const graceUntil = session.prevValidUntil ? Date.parse(session.prevValidUntil) : 0;
+        if (!(graceUntil && now < graceUntil)) {
+            // Previous token replayed after the grace window → treat as theft, revoke the family.
+            await storage.revokeSession(session.sessionId);
+            clearRefreshCookie(req, res);
+            return { ok: false, status: 401, code: 'SESSION_REVOKED', message: 'Refresh token reuse detected' };
+        }
+        // Within grace: an in-flight request carrying the just-rotated-away cookie. A sibling
+        // request already rotated and set the new cookie, so DON'T rotate again — just issue a
+        // fresh access token bound to the session.
+        const roles = await freshOwnerRoles(storage, session.owner);
+        const token = await issueJWT({ sub: session.gaii, owner: session.owner, node: config.nodeId, roles }, config.accessTtlSeconds, session.sessionId);
+        return { ok: true, token, expiresIn: config.accessTtlSeconds, rotated: false };
+    }
+    // Normal path: presented token == current. Rotate one-time-use and slide the idle window.
+    const roles = await freshOwnerRoles(storage, session.owner);
+    const newRawToken = randomBytes(32).toString('hex');
+    const newIdle = new Date(absolute ? Math.min(now + config.refreshIdleDays * DAY_MS, absolute) : now + config.refreshIdleDays * DAY_MS).toISOString();
+    await storage.rotateSessionRefresh(session.sessionId, {
+        refreshTokenHash: hashToken(newRawToken),
+        prevTokenHash: session.refreshTokenHash ?? null,
+        prevValidUntil: new Date(now + config.refreshGraceMs).toISOString(),
+        idleExpiresAt: newIdle,
+        expiresAt: newIdle,
+        lastUsedAt: new Date(now).toISOString(),
+    });
+    setRefreshCookie(req, res, config, newRawToken);
+    const token = await issueJWT({ sub: session.gaii, owner: session.owner, node: config.nodeId, roles }, config.accessTtlSeconds, session.sessionId);
+    return { ok: true, token, expiresIn: config.accessTtlSeconds, rotated: true };
+}
+//# sourceMappingURL=owner-session.js.map

package/dist/src/services/owner-session.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"owner-session.js","sourceRoot":"","sources":["../../../src/services/owner-session.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AACH,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAIlE,OAAO,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAE1C,iFAAiF;AACjF,MAAM,CAAC,MAAM,cAAc,GAAG,WAAW,CAAC;AAC1C,MAAM,WAAW,GAAG,UAAU,CAAC;AAC/B,MAAM,MAAM,GAAG,UAAU,CAAC;AAE1B,iEAAiE;AACjE,MAAM,UAAU,SAAS,CAAC,KAAa;IACrC,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC1D,CAAC;AAED,gFAAgF;AAChF,SAAS,YAAY,CAAC,GAAY;IAChC,OAAO,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,OAAO,CAAC,mBAAmB,CAAC,KAAK,OAAO,CAAC;AACpE,CAAC;AAED,0FAA0F;AAC1F,MAAM,UAAU,iBAAiB,CAAC,GAAY;IAC5C,MAAM,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC;IAClC,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IACzB,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;QACrC,MAAM,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAC7B,IAAI,EAAE,KAAK,CAAC,CAAC;YAAE,SAAS;QACxB,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,KAAK,cAAc,EAAE,CAAC;YAChD,OAAO,kBAAkB,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;QACvD,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,4EAA4E;AAC5E,MAAM,UAAU,gBAAgB,CAAC,GAAY,EAAE,GAAa,EAAE,MAAoB,EAAE,KAAa;IAC/F,GAAG,CAAC,MAAM,CAAC,cAAc,EAAE,KAAK,EAAE;QAChC,QAAQ,EAAE,IAAI;QACd,MAAM,EAAE,YAAY,CAAC,GAAG,CAAC;QACzB,QAAQ,EAAE,QAAQ;QAClB,IAAI,EAAE,WAAW;QACjB,MAAM,EAAE,MAAM,CAAC,mBAAmB,GAAG,MAAM;KAC5C,CAAC,CAAC;AACL,CAAC;AAED,sEAAsE;AACtE,MAAM,UAAU,kBAAkB,CAAC,GAAY,EAAE,GAAa;IAC5D,GAAG,CAAC,WAAW,CAAC,cAAc,EAAE;QAC9B,QAAQ,EAAE,IAAI;QACd,MAAM,EAAE,YAAY,CAAC,GAAG,CAAC;QACzB,QAAQ,EAAE,QAAQ;QAClB,IAAI,EAAE,WAAW;KAClB,CAAC,CAAC;AACL,CAAC;AAED,iFAAiF;AACjF,SAAS,iBAAiB,CAAC,EAAsB;IAC/C,IAAI,CAAC,EAAE;QAAE,OAAO,gBAAgB,CAAC;IACjC,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM;QACvC,CAAC,CAAC,aAAa,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO;YAClC,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ;gBAChC,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS;oBAClC,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ;wBAChC,CAAC,CAAC,SAAS,CAAC;IACd,MAAM,EAAE,GAAG,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS;QACvC,CAAC,CAAC,oBAAoB,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO;YACzC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS;gBAChC,CAAC,CAAC,sBAAsB,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK;oBACzC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO;wBAC5B,CAAC,CAAC,EAAE,CAAC;IACP,OAAO,EAAE,CAAC,CAAC,CAAC,GAAG,OAAO,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC;AAC9C,CAAC;AAED,0FAA0F;AAC1F,KAAK,UAAU,eAAe,CAAC,OAAgB,EAAE,KAAa;IAC5D,MAAM,WAAW,GAAG,MAAM,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IAClD,OAAO,WAAW,EAAE,KAAK,IAAI,CAAC,OAAO,CAAC,CAAC;AACzC,CAAC;AAQD;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,OAAgB,EAChB,MAAoB,EACpB,GAAY,EACZ,GAAa,EACb,QAA4C;IAE5C,MAAM,SAAS,GAAG,UAAU,EAAE,CAAC;IAC/B,MAAM,QAAQ,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IACjD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,MAAM,QAAQ,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,CAAC;IAC7C,MAAM,aAAa,GAAG,IAAI,IAAI,CAAC,GAAG,GAAG,MAAM,CAAC,eAAe,GAAG,MAAM,CAAC,CAAC,WAAW,EAAE,CAAC;IACpF,MAAM,iBAAiB,GAAG,IAAI,IAAI,CAAC,GAAG,GAAG,MAAM,CAAC,mBAAmB,GAAG,MAAM,CAAC,CAAC,WAAW,EAAE,CAAC;IAE5F,MAAM,OAAO,CAAC,kBAAkB,CAAC;QAC/B,SAAS;QACT,IAAI,EAAE,QAAQ,CAAC,KAAK,EAAE,kEAAkE;QACxF,KAAK,EAAE,QAAQ,CAAC,KAAK;QACrB,QAAQ;QACR,gBAAgB,EAAE,SAAS,CAAC,QAAQ,CAAC;QACrC,aAAa;QACb,iBAAiB;QACjB,UAAU,EAAE,QAAQ;QACpB,WAAW,EAAE,iBAAiB,CAAC,GAAG,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;QACzD,SAAS,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,YAAY,CAAC,IAAI,IAAI,CAAkB;KAChE,CAAC,CAAC;IAEH,gBAAgB,CAAC,GAAG,EAAE,GAAG,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC;IAE7C,MAAM,KAAK,GAAG,MAAM,QAAQ,CAC1B,EAAE,GAAG,EAAE,QAAQ,CAAC,KAAK,EAAE,KAAK,EAAE,QAAQ,CAAC,KAAK,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,KAAK,EAAE,QAAQ,CAAC,KAAK,EAAE,EAC1F,MAAM,CAAC,gBAAgB,EACvB,SAAS,CACV,CAAC;IAEF,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,CAAC,gBAAgB,EAAE,CAAC;AAClE,CAAC;AAMD;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,OAAgB,EAChB,MAAoB,EACpB,GAAY,EACZ,GAAa;IAEb,MAAM,QAAQ,GAAG,iBAAiB,CAAC,GAAG,CAAC,CAAC;IACxC,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,kBAAkB,EAAE,CAAC;IACxF,CAAC;IACD,0FAA0F;IAC1F,IAAI,GAAG,CAAC,OAAO,CAAC,kBAAkB,CAAC,KAAK,GAAG,EAAE,CAAC;QAC5C,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,iCAAiC,EAAE,CAAC;IACvG,CAAC;IAED,MAAM,aAAa,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;IAC1C,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,uBAAuB,CAAC,aAAa,CAAC,CAAC;IACrE,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,kBAAkB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QAC7B,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,uBAAuB,EAAE,CAAC;IAC7F,CAAC;IACD,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;QACpB,kBAAkB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QAC7B,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,iBAAiB,EAAE,OAAO,EAAE,0BAA0B,EAAE,CAAC;IAClG,CAAC;IAED,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,MAAM,IAAI,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC3E,MAAM,QAAQ,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACvF,IAAI,CAAC,IAAI,IAAI,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,QAAQ,IAAI,GAAG,IAAI,QAAQ,CAAC,EAAE,CAAC;QAC3D,MAAM,OAAO,CAAC,aAAa,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QAC/C,kBAAkB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QAC7B,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,iBAAiB,EAAE,OAAO,EAAE,uCAAuC,EAAE,CAAC;IAC/G,CAAC;IAED,kEAAkE;IAClE,IAAI,OAAO,CAAC,aAAa,IAAI,aAAa,KAAK,OAAO,CAAC,aAAa,EAAE,CAAC;QACrE,MAAM,UAAU,GAAG,OAAO,CAAC,cAAc,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACnF,IAAI,CAAC,CAAC,UAAU,IAAI,GAAG,GAAG,UAAU,CAAC,EAAE,CAAC;YACtC,sFAAsF;YACtF,MAAM,OAAO,CAAC,aAAa,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;YAC/C,kBAAkB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;YAC7B,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,iBAAiB,EAAE,OAAO,EAAE,8BAA8B,EAAE,CAAC;QACtG,CAAC;QACD,sFAAsF;QACtF,uFAAuF;QACvF,2CAA2C;QAC3C,MAAM,KAAK,GAAG,MAAM,eAAe,CAAC,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;QAC5D,MAAM,KAAK,GAAG,MAAM,QAAQ,CAC1B,EAAE,GAAG,EAAE,OAAO,CAAC,IAAI,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,KAAK,EAAE,EACvE,MAAM,CAAC,gBAAgB,EACvB,OAAO,CAAC,SAAS,CAClB,CAAC;QACF,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,CAAC,gBAAgB,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IACjF,CAAC;IAED,0FAA0F;IAC1F,MAAM,KAAK,GAAG,MAAM,eAAe,CAAC,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;IAC5D,MAAM,WAAW,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IACpD,MAAM,OAAO,GAAG,IAAI,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,GAAG,MAAM,CAAC,eAAe,GAAG,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,GAAG,GAAG,MAAM,CAAC,eAAe,GAAG,MAAM,CAAC,CAAC,WAAW,EAAE,CAAC;IACrJ,MAAM,OAAO,CAAC,oBAAoB,CAAC,OAAO,CAAC,SAAS,EAAE;QACpD,gBAAgB,EAAE,SAAS,CAAC,WAAW,CAAC;QACxC,aAAa,EAAE,OAAO,CAAC,gBAAgB,IAAI,IAAI;QAC/C,cAAc,EAAE,IAAI,IAAI,CAAC,GAAG,GAAG,MAAM,CAAC,cAAc,CAAC,CAAC,WAAW,EAAE;QACnE,aAAa,EAAE,OAAO;QACtB,SAAS,EAAE,OAAO;QAClB,UAAU,EAAE,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE;KACxC,CAAC,CAAC;IACH,gBAAgB,CAAC,GAAG,EAAE,GAAG,EAAE,MAAM,EAAE,WAAW,CAAC,CAAC;IAEhD,MAAM,KAAK,GAAG,MAAM,QAAQ,CAC1B,EAAE,GAAG,EAAE,OAAO,CAAC,IAAI,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,KAAK,EAAE,EACvE,MAAM,CAAC,gBAAgB,EACvB,OAAO,CAAC,SAAS,CAClB,CAAC;IACF,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,CAAC,gBAAgB,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;AAChF,CAAC"}

package/dist/src/services/schedule-constraints.d.ts

@@ -0,0 +1,65 @@
+/**
+ * @file schedule-constraints.ts
+ * @description Extensible, opt-in budget/run guards for recurring schedules.
+ *   Each guard is a registry entry implementing a pre-fire check() (and optional
+ *   post-run hook). Guards are stored on ScheduledJobRecord.constraints as a JSON
+ *   array, so adding a new guard type later is one REGISTRY entry + a UI toggle —
+ *   no schema migration. All guards are disabled unless explicitly toggled on.
+ *
+ *   v1 guards:
+ *     - max_runs    { limit }              — stop after N successful fires
+ *     - daily_limit { limit }              — cap today's AI spend (USD) for the
+ *                                            owner before an `ai` fire; sourced
+ *                                            from the guard, falling back to the
+ *                                            agent's dailySpendLimit.
+ * @structure
+ *   - REGISTRY: Record<type, ConstraintDef>
+ *   - evaluateConstraints(schedule, ctx) — pre-fire gate (allow/deny + disable hint)
+ *   - applyAfterRun(schedule, ctx)       — post-fire constraint-state updates
+ *   - mergeConstraintDefaults(...)       — inherit agent defaults at creation
+ * @version-history
+ *   v1.0.0 — 2026-06-03 — Initial registry (max_runs, daily_limit)
+ */
+import type { AimeatConfig } from '../config.js';
+import type { Storage, ScheduledJobRecord, ScheduleConstraint, AgentRecord } from '../storage/interface.js';
+export interface ConstraintContext {
+    storage: Storage;
+    config: AimeatConfig;
+    /** Owner GHII whose spend/usage the guard checks (for daily_limit). */
+    ownerGaii?: string;
+    /** The target agent record, when the schedule belongs to one. */
+    agent?: AgentRecord | null;
+}
+export interface ConstraintCheckResult {
+    allow: boolean;
+    reason?: string;
+    /** When true, the scheduler should disable the schedule entirely (e.g. max_runs reached). */
+    disable?: boolean;
+}
+export interface ConstraintDef {
+    type: string;
+    /** Pre-fire gate. allow=false skips this fire (logged as 'skipped'). */
+    check(schedule: ScheduledJobRecord, constraint: ScheduleConstraint, ctx: ConstraintContext): Promise<ConstraintCheckResult>;
+    /** Optional post-successful-fire state mutation; returns the updated constraint state. */
+    onAfterRun?(schedule: ScheduledJobRecord, constraint: ScheduleConstraint, ctx: ConstraintContext): Promise<Record<string, unknown> | void>;
+}
+/** True if a guard type is known to the registry. */
+export declare function isKnownConstraint(type: string): boolean;
+/** The set of guard types the node currently supports (for UI + validation). */
+export declare function knownConstraintTypes(): string[];
+/**
+ * Evaluate all enabled+known guards before a fire. Returns the first denial
+ * (with an optional `disable` hint), else allow.
+ */
+export declare function evaluateConstraints(schedule: ScheduledJobRecord, ctx: ConstraintContext): Promise<ConstraintCheckResult>;
+/**
+ * Apply post-fire state updates. Returns the new constraints array if any guard
+ * mutated its state, else undefined (no write needed).
+ */
+export declare function applyAfterRun(schedule: ScheduledJobRecord, ctx: ConstraintContext): Promise<ScheduleConstraint[] | undefined>;
+/**
+ * At schedule creation, inherit the agent's default guards for any guard type
+ * the new schedule didn't specify. Explicit per-schedule guards win.
+ */
+export declare function mergeConstraintDefaults(scheduleConstraints: ScheduleConstraint[] | undefined, agentDefaults: ScheduleConstraint[] | undefined): ScheduleConstraint[] | undefined;
+//# sourceMappingURL=schedule-constraints.d.ts.map

package/dist/src/services/schedule-constraints.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"schedule-constraints.d.ts","sourceRoot":"","sources":["../../../src/services/schedule-constraints.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AACjD,OAAO,KAAK,EAAE,OAAO,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAC;AAG5G,MAAM,WAAW,iBAAiB;IAChC,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,EAAE,YAAY,CAAC;IACrB,uEAAuE;IACvE,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,iEAAiE;IACjE,KAAK,CAAC,EAAE,WAAW,GAAG,IAAI,CAAC;CAC5B;AAED,MAAM,WAAW,qBAAqB;IACpC,KAAK,EAAE,OAAO,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,6FAA6F;IAC7F,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAED,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,wEAAwE;IACxE,KAAK,CAAC,QAAQ,EAAE,kBAAkB,EAAE,UAAU,EAAE,kBAAkB,EAAE,GAAG,EAAE,iBAAiB,GAAG,OAAO,CAAC,qBAAqB,CAAC,CAAC;IAC5H,0FAA0F;IAC1F,UAAU,CAAC,CAAC,QAAQ,EAAE,kBAAkB,EAAE,UAAU,EAAE,kBAAkB,EAAE,GAAG,EAAE,iBAAiB,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC,CAAC;CAC5I;AA0CD,qDAAqD;AACrD,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAEvD;AAED,gFAAgF;AAChF,wBAAgB,oBAAoB,IAAI,MAAM,EAAE,CAE/C;AAED;;;GAGG;AACH,wBAAsB,mBAAmB,CACvC,QAAQ,EAAE,kBAAkB,EAC5B,GAAG,EAAE,iBAAiB,GACrB,OAAO,CAAC,qBAAqB,CAAC,CAUhC;AAED;;;GAGG;AACH,wBAAsB,aAAa,CACjC,QAAQ,EAAE,kBAAkB,EAC5B,GAAG,EAAE,iBAAiB,GACrB,OAAO,CAAC,kBAAkB,EAAE,GAAG,SAAS,CAAC,CAY3C;AAED;;;GAGG;AACH,wBAAgB,uBAAuB,CACrC,mBAAmB,EAAE,kBAAkB,EAAE,GAAG,SAAS,EACrD,aAAa,EAAE,kBAAkB,EAAE,GAAG,SAAS,GAC9C,kBAAkB,EAAE,GAAG,SAAS,CAQlC"}

package/dist/src/services/schedule-constraints.js

@@ -0,0 +1,106 @@
+import { getTodayUsage } from './ai-completion.js';
+const numParam = (constraint, key) => {
+    const v = constraint.params?.[key];
+    return typeof v === 'number' && Number.isFinite(v) ? v : undefined;
+};
+const REGISTRY = {
+    // ── Stop after N successful fires ──
+    max_runs: {
+        type: 'max_runs',
+        async check(schedule, constraint) {
+            const limit = numParam(constraint, 'limit');
+            if (limit === undefined || limit <= 0)
+                return { allow: true };
+            const ran = schedule.runCount ?? 0;
+            if (ran >= limit) {
+                return { allow: false, disable: true, reason: `max_runs reached (${ran}/${limit})` };
+            }
+            return { allow: true };
+        },
+    },
+    // ── Cap today's AI spend (USD) for the owner before an ai-kind fire ──
+    daily_limit: {
+        type: 'daily_limit',
+        async check(schedule, constraint, ctx) {
+            // Only the `ai` path has a real per-day spend signal today (ai-usage.<gaii>.<day>).
+            // For other kinds the guard is a no-op (documented); kept extensible.
+            if (schedule.type !== 'ai')
+                return { allow: true };
+            const limit = numParam(constraint, 'limit') ?? ctx.agent?.dailySpendLimit ?? undefined;
+            if (limit === undefined || limit === null || limit <= 0)
+                return { allow: true };
+            const owner = ctx.ownerGaii ?? schedule.ownerScope;
+            if (!owner)
+                return { allow: true };
+            const usage = await getTodayUsage(ctx.storage, owner);
+            if (usage.total_cost_usd >= limit) {
+                return { allow: false, reason: `daily AI spend limit reached ($${usage.total_cost_usd.toFixed(4)} / $${limit})` };
+            }
+            return { allow: true };
+        },
+    },
+};
+/** True if a guard type is known to the registry. */
+export function isKnownConstraint(type) {
+    return type in REGISTRY;
+}
+/** The set of guard types the node currently supports (for UI + validation). */
+export function knownConstraintTypes() {
+    return Object.keys(REGISTRY);
+}
+/**
+ * Evaluate all enabled+known guards before a fire. Returns the first denial
+ * (with an optional `disable` hint), else allow.
+ */
+export async function evaluateConstraints(schedule, ctx) {
+    const constraints = schedule.constraints ?? [];
+    for (const c of constraints) {
+        if (!c.enabled)
+            continue;
+        const def = REGISTRY[c.type];
+        if (!def)
+            continue; // unknown guard type — ignore (forward-compatible)
+        const result = await def.check(schedule, c, ctx);
+        if (!result.allow)
+            return result;
+    }
+    return { allow: true };
+}
+/**
+ * Apply post-fire state updates. Returns the new constraints array if any guard
+ * mutated its state, else undefined (no write needed).
+ */
+export async function applyAfterRun(schedule, ctx) {
+    const constraints = schedule.constraints ?? [];
+    let changed = false;
+    const next = await Promise.all(constraints.map(async (c) => {
+        if (!c.enabled)
+            return c;
+        const def = REGISTRY[c.type];
+        if (!def?.onAfterRun)
+            return c;
+        const patch = await def.onAfterRun(schedule, c, ctx);
+        if (patch) {
+            changed = true;
+            return { ...c, state: { ...(c.state ?? {}), ...patch } };
+        }
+        return c;
+    }));
+    return changed ? next : undefined;
+}
+/**
+ * At schedule creation, inherit the agent's default guards for any guard type
+ * the new schedule didn't specify. Explicit per-schedule guards win.
+ */
+export function mergeConstraintDefaults(scheduleConstraints, agentDefaults) {
+    if (!agentDefaults?.length)
+        return scheduleConstraints;
+    const out = [...(scheduleConstraints ?? [])];
+    const present = new Set(out.map(c => c.type));
+    for (const d of agentDefaults) {
+        if (!present.has(d.type))
+            out.push({ ...d });
+    }
+    return out.length ? out : undefined;
+}
+//# sourceMappingURL=schedule-constraints.js.map

package/dist/src/services/schedule-constraints.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"schedule-constraints.js","sourceRoot":"","sources":["../../../src/services/schedule-constraints.ts"],"names":[],"mappings":"AAwBA,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AA0BnD,MAAM,QAAQ,GAAG,CAAC,UAA8B,EAAE,GAAW,EAAsB,EAAE;IACnF,MAAM,CAAC,GAAG,UAAU,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC;IACnC,OAAO,OAAO,CAAC,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AACrE,CAAC,CAAC;AAEF,MAAM,QAAQ,GAAkC;IAC9C,sCAAsC;IACtC,QAAQ,EAAE;QACR,IAAI,EAAE,UAAU;QAChB,KAAK,CAAC,KAAK,CAAC,QAAQ,EAAE,UAAU;YAC9B,MAAM,KAAK,GAAG,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;YAC5C,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,IAAI,CAAC;gBAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;YAC9D,MAAM,GAAG,GAAG,QAAQ,CAAC,QAAQ,IAAI,CAAC,CAAC;YACnC,IAAI,GAAG,IAAI,KAAK,EAAE,CAAC;gBACjB,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,qBAAqB,GAAG,IAAI,KAAK,GAAG,EAAE,CAAC;YACvF,CAAC;YACD,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;QACzB,CAAC;KACF;IAED,wEAAwE;IACxE,WAAW,EAAE;QACX,IAAI,EAAE,aAAa;QACnB,KAAK,CAAC,KAAK,CAAC,QAAQ,EAAE,UAAU,EAAE,GAAG;YACnC,oFAAoF;YACpF,sEAAsE;YACtE,IAAI,QAAQ,CAAC,IAAI,KAAK,IAAI;gBAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;YACnD,MAAM,KAAK,GAAG,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAC,IAAI,GAAG,CAAC,KAAK,EAAE,eAAe,IAAI,SAAS,CAAC;YACvF,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,IAAI,CAAC;gBAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;YAChF,MAAM,KAAK,GAAG,GAAG,CAAC,SAAS,IAAI,QAAQ,CAAC,UAAU,CAAC;YACnD,IAAI,CAAC,KAAK;gBAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;YACnC,MAAM,KAAK,GAAG,MAAM,aAAa,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;YACtD,IAAI,KAAK,CAAC,cAAc,IAAI,KAAK,EAAE,CAAC;gBAClC,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,kCAAkC,KAAK,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,KAAK,GAAG,EAAE,CAAC;YACpH,CAAC;YACD,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;QACzB,CAAC;KACF;CACF,CAAC;AAEF,qDAAqD;AACrD,MAAM,UAAU,iBAAiB,CAAC,IAAY;IAC5C,OAAO,IAAI,IAAI,QAAQ,CAAC;AAC1B,CAAC;AAED,gFAAgF;AAChF,MAAM,UAAU,oBAAoB;IAClC,OAAO,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;AAC/B,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,QAA4B,EAC5B,GAAsB;IAEtB,MAAM,WAAW,GAAG,QAAQ,CAAC,WAAW,IAAI,EAAE,CAAC;IAC/C,KAAK,MAAM,CAAC,IAAI,WAAW,EAAE,CAAC;QAC5B,IAAI,CAAC,CAAC,CAAC,OAAO;YAAE,SAAS;QACzB,MAAM,GAAG,GAAG,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QAC7B,IAAI,CAAC,GAAG;YAAE,SAAS,CAAC,mDAAmD;QACvE,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC,EAAE,GAAG,CAAC,CAAC;QACjD,IAAI,CAAC,MAAM,CAAC,KAAK;YAAE,OAAO,MAAM,CAAC;IACnC,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;AACzB,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,QAA4B,EAC5B,GAAsB;IAEtB,MAAM,WAAW,GAAG,QAAQ,CAAC,WAAW,IAAI,EAAE,CAAC;IAC/C,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,EAAE,EAAE;QACzD,IAAI,CAAC,CAAC,CAAC,OAAO;YAAE,OAAO,CAAC,CAAC;QACzB,MAAM,GAAG,GAAG,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QAC7B,IAAI,CAAC,GAAG,EAAE,UAAU;YAAE,OAAO,CAAC,CAAC;QAC/B,MAAM,KAAK,GAAG,MAAM,GAAG,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC,EAAE,GAAG,CAAC,CAAC;QACrD,IAAI,KAAK,EAAE,CAAC;YAAC,OAAO,GAAG,IAAI,CAAC;YAAC,OAAO,EAAE,GAAG,CAAC,EAAE,KAAK,EAAE,EAAE,GAAG,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC,EAAE,GAAG,KAAK,EAAE,EAAE,CAAC;QAAC,CAAC;QACxF,OAAO,CAAC,CAAC;IACX,CAAC,CAAC,CAAC,CAAC;IACJ,OAAO,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;AACpC,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,uBAAuB,CACrC,mBAAqD,EACrD,aAA+C;IAE/C,IAAI,CAAC,aAAa,EAAE,MAAM;QAAE,OAAO,mBAAmB,CAAC;IACvD,MAAM,GAAG,GAAyB,CAAC,GAAG,CAAC,mBAAmB,IAAI,EAAE,CAAC,CAAC,CAAC;IACnE,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IAC9C,KAAK,MAAM,CAAC,IAAI,aAAa,EAAE,CAAC;QAC9B,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;YAAE,GAAG,CAAC,IAAI,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;IAC/C,CAAC;IACD,OAAO,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;AACtC,CAAC"}

package/dist/src/services/scheduler.d.ts

@@ -1,6 +1,11 @@
 import type { AimeatConfig } from '../config.js';
 import type { Storage, ScheduledJobRecord } from '../storage/interface.js';
 import type { EmailService } from './email.js';
+import type { PushService } from './push.js';
+import type { createWebhookDispatcher } from './webhook-dispatcher.js';
+type WebhookDispatcher = ReturnType<typeof createWebhookDispatcher>;
+export declare function setActiveScheduler(scheduler: Scheduler): void;
+export declare function getActiveScheduler(): Scheduler | null;
 export type JobTrigger = 'cron' | 'manual' | 'activate';
 export declare class Scheduler {
     private config;
@@ -9,7 +14,15 @@ export declare class Scheduler {
     private coreHandlers;
     private running;
     private emailService?;
+    private webhookDispatcher?;
+    private pushService?;
+    /** Guards against overlapping fires of the same job (one run at a time). */
+    private executing;
     constructor(config: AimeatConfig, storage: Storage, emailService?: EmailService);
+    /** Inject the webhook dispatcher used to wake agents for `agent_task` fires. */
+    setWebhookDispatcher(dispatcher: WebhookDispatcher): void;
+    /** Inject the push service used to notify the owner on failed/auto-paused schedules. */
+    setPushService(pushService: PushService): void;
     /**
      * Register a core handler function that can be referenced by scheduled jobs.
      * Must be called before start().
@@ -49,7 +62,28 @@ export declare class Scheduler {
     private runActivateJobsList;
     private scheduleJob;
     private executeJob;
+    /** Write one ExecutionLogEntry (best-effort). */
+    private writeLog;
+    /** Disable a schedule (stop the cron, persist enabled:false) and notify the owner. */
+    private autoDisable;
+    /** After a successful run, disable the schedule if a max_runs cap is now reached. */
+    private maybeAutoDisableMaxRuns;
+    /** Send an owner push notification (best-effort; no-op if push disabled). */
+    private notifyOwner;
+    /**
+     * `ai` kind: gather predefined input memory keys, compose the prompt, run a
+     * server-side completion on the owner's OpenRouter key, and store the result
+     * to the owner's output key. Zero agent involvement; runs even when offline.
+     */
+    private executeAiJob;
+    /**
+     * `agent_task` kind: materialise an AgentTaskRecord into the target agent's
+     * queue and wake it via the existing webhook/MCP/SSE fan-out. The schedule is
+     * the parent (parentTaskId); offline agents pick it up on reconnect.
+     */
+    private executeAgentTaskJob;
     private executeCoreJob;
     private executeExtensionJob;
 }
+export {};
 //# sourceMappingURL=scheduler.d.ts.map

package/dist/src/services/scheduler.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"scheduler.d.ts","sourceRoot":"","sources":["../../../src/services/scheduler.ts"],"names":[],"mappings":"AAYA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AACjD,OAAO,KAAK,EAAE,OAAO,EAAE,kBAAkB,EAAqB,MAAM,yBAAyB,CAAC;AAG9F,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAG/C,MAAM,MAAM,UAAU,GAAG,MAAM,GAAG,QAAQ,GAAG,UAAU,CAAC;AAExD,qBAAa,SAAS;IACpB,OAAO,CAAC,MAAM,CAAe;IAC7B,OAAO,CAAC,OAAO,CAAU;IACzB,OAAO,CAAC,QAAQ,CAA2B;IAC3C,OAAO,CAAC,YAAY,CAA0C;IAC9D,OAAO,CAAC,OAAO,CAAS;IACxB,OAAO,CAAC,YAAY,CAAC,CAAe;gBAExB,MAAM,EAAE,YAAY,EAAE,OAAO,EAAE,OAAO,EAAE,YAAY,CAAC,EAAE,YAAY;IAM/E;;;OAGG;IACH,mBAAmB,CAAC,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI;IAI9D;;;OAGG;IACG,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAwB5B;;OAEG;IACH,IAAI,IAAI,IAAI;IAUZ;;;OAGG;IACH,MAAM,CAAC,MAAM,EAAE,kBAAkB,GAAG,IAAI;IAMxC;;OAEG;IACH,SAAS,CAAC,EAAE,EAAE,MAAM,GAAG,IAAI;IAS3B;;OAEG;IACG,UAAU,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAM3C;;;OAGG;IACG,eAAe,CAAC,aAAa,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAS3D;;OAEG;IACG,UAAU,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;YAU7B,mBAAmB;IAWjC,OAAO,CAAC,WAAW;YA8BL,UAAU;YAoEV,cAAc;YAad,mBAAmB;CAiNlC"}
+{"version":3,"file":"scheduler.d.ts","sourceRoot":"","sources":["../../../src/services/scheduler.ts"],"names":[],"mappings":"AAYA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AACjD,OAAO,KAAK,EAAE,OAAO,EAAE,kBAAkB,EAA0E,MAAM,yBAAyB,CAAC;AAGnJ,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAC/C,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AAC7C,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,yBAAyB,CAAC;AAOvE,KAAK,iBAAiB,GAAG,UAAU,CAAC,OAAO,uBAAuB,CAAC,CAAC;AAQpE,wBAAgB,kBAAkB,CAAC,SAAS,EAAE,SAAS,GAAG,IAAI,CAAkC;AAChG,wBAAgB,kBAAkB,IAAI,SAAS,GAAG,IAAI,CAA6B;AAEnF,MAAM,MAAM,UAAU,GAAG,MAAM,GAAG,QAAQ,GAAG,UAAU,CAAC;AASxD,qBAAa,SAAS;IACpB,OAAO,CAAC,MAAM,CAAe;IAC7B,OAAO,CAAC,OAAO,CAAU;IACzB,OAAO,CAAC,QAAQ,CAA2B;IAC3C,OAAO,CAAC,YAAY,CAA0C;IAC9D,OAAO,CAAC,OAAO,CAAS;IACxB,OAAO,CAAC,YAAY,CAAC,CAAe;IACpC,OAAO,CAAC,iBAAiB,CAAC,CAAoB;IAC9C,OAAO,CAAC,WAAW,CAAC,CAAc;IAClC,4EAA4E;IAC5E,OAAO,CAAC,SAAS,CAAqB;gBAE1B,MAAM,EAAE,YAAY,EAAE,OAAO,EAAE,OAAO,EAAE,YAAY,CAAC,EAAE,YAAY;IAM/E,gFAAgF;IAChF,oBAAoB,CAAC,UAAU,EAAE,iBAAiB,GAAG,IAAI;IAIzD,wFAAwF;IACxF,cAAc,CAAC,WAAW,EAAE,WAAW,GAAG,IAAI;IAI9C;;;OAGG;IACH,mBAAmB,CAAC,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI;IAI9D;;;OAGG;IACG,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAwB5B;;OAEG;IACH,IAAI,IAAI,IAAI;IAUZ;;;OAGG;IACH,MAAM,CAAC,MAAM,EAAE,kBAAkB,GAAG,IAAI;IAMxC;;OAEG;IACH,SAAS,CAAC,EAAE,EAAE,MAAM,GAAG,IAAI;IAS3B;;OAEG;IACG,UAAU,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAM3C;;;OAGG;IACG,eAAe,CAAC,aAAa,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAS3D;;OAEG;IACG,UAAU,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;YAU7B,mBAAmB;IAWjC,OAAO,CAAC,WAAW;YAkCL,UAAU;IA6FxB,iDAAiD;YACnC,QAAQ;IAwBtB,sFAAsF;YACxE,WAAW;IASzB,qFAAqF;YACvE,uBAAuB;IAWrC,6EAA6E;IAC7E,OAAO,CAAC,WAAW;IAYnB;;;;OAIG;YACW,YAAY;IAoD1B;;;;OAIG;YACW,mBAAmB;YAoFnB,cAAc;YAad,mBAAmB;CAiNlC"}