aimeat 3.2.0 → 3.3.0

package/dist/src/services/extension-schedules.d.ts

@@ -0,0 +1,90 @@
+/**
+ * @file src/services/extension-schedules.ts
+ * @description Registering the schedules an extension's manifest declares, and saying WHOSE they are.
+ *
+ *   A manifest-declared schedule is built in four places — activate (services/extension-lifecycle.ts),
+ *   redeploy (services/extension-upsert.ts), package install (routes/instances/install.ts) and the
+ *   admin install route — and all four built the record by hand. None of them stamped `ownerScope`,
+ *   which cost every scheduled extension on aimeat.io: from 2026-08-15 the executor reads the owner
+ *   off the JOB (services/scheduler-extension-job.ts) rather than off the extension record, so a job
+ *   with no ownerScope refuses before it starts. Every `@activate` job on the node failed with
+ *   "has no owner scope" on every restart, and every cron-bearing one on every fire.
+ *
+ *   WHOSE A MANIFEST SCHEDULE IS. The installer's, always: the schedule comes from the extension's own
+ *   manifest and is created by the act of installing it, so the responsible party is `installedBy` and
+ *   nobody else. That is the value the executor used before it moved to the job record, and it is what
+ *   is written here — as a GHII, because a schedule's ownerScope is a GHII everywhere else.
+ *
+ *   The stamp is not decoration: it is what the RUN-time owner fence compares. An extension deleted
+ *   and reinstalled by a DIFFERENT owner leaves the old job behind, and the old job then names the old
+ *   owner while the record names the new one — which is exactly the case the fence exists for, and
+ *   exactly the case a fallback to `ext.installedBy` would wave through.
+ * @structure
+ *   - extensionJobOwnerScope() — the installer's GHII, from whatever form installedBy is in
+ *   - registerExtensionSchedules() — build and store the manifest's jobs; replace or skip existing
+ *   - backfillExtensionJobOwnerScope() — startup repair for jobs stored before the stamp existed
+ * @usage
+ *   await registerExtensionSchedules({ storage, config, scheduler }, ext, actor);
+ *   await registerExtensionSchedules({ storage, config, scheduler }, ext, actor, { replace: true });
+ * @version-history
+ *   v1.0.0 — 2026-08-16 — Extracted from the four hand-built copies, with the ownerScope they all
+ *     lacked. Adds the startup backfill, because an already-stored job is not re-created by a deploy.
+ */
+import type { AimeatConfig } from '../config.js';
+import type { Storage, ExtensionRecord } from '../storage/interface.js';
+import type { Scheduler } from './scheduler.js';
+export interface ExtensionScheduleDeps {
+    storage: Storage;
+    config: AimeatConfig;
+    /** Absent on a door with no scheduler wired; then nothing is registered. */
+    scheduler?: Scheduler | null;
+}
+/**
+ * The owner scope a manifest-declared job carries: the installer's GHII on this node.
+ *
+ * `installedBy` is a bare owner name on every door that writes it today, but one route stores
+ * `req.auth!.sub`, so the bare name is taken rather than assumed. Returns '' when there is nothing to
+ * derive, which the caller must treat as "do not stamp a wrong owner".
+ */
+export declare function extensionJobOwnerScope(installedBy: string | undefined, nodeId: string): string;
+/** The scheduled-job id a manifest schedule gets. Stable: activate, redeploy and install all reuse it. */
+export declare function extensionJobId(extensionName: string, scheduleId: string): string;
+/**
+ * Did this job come from an extension's manifest, or did the owner create it?
+ *
+ * The id says so: a manifest job is addressed `ext:<extension>:<schedule>` and an owner-created one
+ * gets a UUID (services/schedule-write.ts). The distinction is what the schedules view is built on —
+ * a manifest job is shown as a fact about the extension, an owner's own schedule is shown with the
+ * controls that edit it — and the two used to be told apart by ownerScope, which stopped separating
+ * anything the moment a manifest job started carrying one.
+ */
+export declare function isManifestDeclaredJob(job: {
+    id: string;
+    type?: string;
+}): boolean;
+/**
+ * Register the schedules an extension's manifest declares.
+ *
+ * `replace: true` drops the extension's existing jobs first — what a redeploy needs, because the new
+ * manifest's schedules are the whole truth about its clock. Without it an id that already exists is
+ * left alone, which is what activation and package install need: they must not restart a job that has
+ * been running.
+ *
+ * Returns how many jobs were created.
+ */
+export declare function registerExtensionSchedules(deps: ExtensionScheduleDeps, ext: ExtensionRecord, actor: string, opts?: {
+    replace?: boolean;
+}): Promise<number>;
+/**
+ * Stamp the missing owner scope onto extension jobs stored before it was written.
+ *
+ * A deploy does not fix these on its own: activation and install skip an id that already exists, so a
+ * job created by the old code keeps its old shape until somebody rewrites it. Runs at startup BEFORE
+ * the scheduler starts, so the first `@activate` wave after a restart already has what it needs.
+ *
+ * The extension record is the only place the answer can come from, and it is the same answer the
+ * executor itself used until 2026-08-15. A job whose extension is gone is left alone: it names nobody,
+ * and it would refuse for the better reason a moment later anyway.
+ */
+export declare function backfillExtensionJobOwnerScope(config: AimeatConfig, storage: Storage): Promise<number>;
+//# sourceMappingURL=extension-schedules.d.ts.map

package/dist/src/services/extension-schedules.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"extension-schedules.d.ts","sourceRoot":"","sources":["../../../src/services/extension-schedules.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AACH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AACjD,OAAO,KAAK,EAAE,OAAO,EAAE,eAAe,EAAsB,MAAM,yBAAyB,CAAC;AAC5F,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAGhD,MAAM,WAAW,qBAAqB;IAClC,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,EAAE,YAAY,CAAC;IACrB,4EAA4E;IAC5E,SAAS,CAAC,EAAE,SAAS,GAAG,IAAI,CAAC;CAChC;AAED;;;;;;GAMG;AACH,wBAAgB,sBAAsB,CAAC,WAAW,EAAE,MAAM,GAAG,SAAS,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,CAG9F;AAED,0GAA0G;AAC1G,wBAAgB,cAAc,CAAC,aAAa,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,MAAM,CAEhF;AAED;;;;;;;;GAQG;AACH,wBAAgB,qBAAqB,CAAC,GAAG,EAAE;IAAE,EAAE,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAEjF;AAED;;;;;;;;;GASG;AACH,wBAAsB,0BAA0B,CAC5C,IAAI,EAAE,qBAAqB,EAC3B,GAAG,EAAE,eAAe,EACpB,KAAK,EAAE,MAAM,EACb,IAAI,GAAE;IAAE,OAAO,CAAC,EAAE,OAAO,CAAA;CAAO,GACjC,OAAO,CAAC,MAAM,CAAC,CAgDjB;AAED;;;;;;;;;;GAUG;AACH,wBAAsB,8BAA8B,CAAC,MAAM,EAAE,YAAY,EAAE,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,CAmB5G"}

package/dist/src/services/extension-schedules.js

@@ -0,0 +1,123 @@
+import { logger } from '../utils/logger.js';
+/**
+ * The owner scope a manifest-declared job carries: the installer's GHII on this node.
+ *
+ * `installedBy` is a bare owner name on every door that writes it today, but one route stores
+ * `req.auth!.sub`, so the bare name is taken rather than assumed. Returns '' when there is nothing to
+ * derive, which the caller must treat as "do not stamp a wrong owner".
+ */
+export function extensionJobOwnerScope(installedBy, nodeId) {
+    const bare = (installedBy ?? '').split('@')[0];
+    return bare ? `${bare}@${nodeId}` : '';
+}
+/** The scheduled-job id a manifest schedule gets. Stable: activate, redeploy and install all reuse it. */
+export function extensionJobId(extensionName, scheduleId) {
+    return `ext:${extensionName}:${scheduleId}`;
+}
+/**
+ * Did this job come from an extension's manifest, or did the owner create it?
+ *
+ * The id says so: a manifest job is addressed `ext:<extension>:<schedule>` and an owner-created one
+ * gets a UUID (services/schedule-write.ts). The distinction is what the schedules view is built on —
+ * a manifest job is shown as a fact about the extension, an owner's own schedule is shown with the
+ * controls that edit it — and the two used to be told apart by ownerScope, which stopped separating
+ * anything the moment a manifest job started carrying one.
+ */
+export function isManifestDeclaredJob(job) {
+    return job.type === 'extension' && job.id.startsWith('ext:');
+}
+/**
+ * Register the schedules an extension's manifest declares.
+ *
+ * `replace: true` drops the extension's existing jobs first — what a redeploy needs, because the new
+ * manifest's schedules are the whole truth about its clock. Without it an id that already exists is
+ * left alone, which is what activation and package install need: they must not restart a job that has
+ * been running.
+ *
+ * Returns how many jobs were created.
+ */
+export async function registerExtensionSchedules(deps, ext, actor, opts = {}) {
+    const { storage, config, scheduler } = deps;
+    if (!scheduler)
+        return 0;
+    if (opts.replace) {
+        const existing = await storage.listScheduledJobs({ extensionName: ext.name });
+        for (const job of existing) {
+            scheduler.removeJob(job.id);
+            await storage.deleteScheduledJob(job.id);
+        }
+    }
+    const schedules = ext.config?.__schedules ?? [];
+    if (schedules.length === 0)
+        return 0;
+    const ownerScope = extensionJobOwnerScope(ext.installedBy, config.nodeId);
+    if (!ownerScope) {
+        // An unattended run has no owner to be, so a job that cannot name one would only fail later.
+        logger.error(`Extension "${ext.name}" has no installer — its ${schedules.length} manifest schedules were NOT registered`);
+        return 0;
+    }
+    let created = 0;
+    for (const sched of schedules) {
+        const jobId = extensionJobId(ext.name, sched.id);
+        if (!opts.replace && await storage.getScheduledJob(jobId))
+            continue;
+        const now = new Date().toISOString();
+        const jobRecord = {
+            id: jobId,
+            name: sched.description ?? `${ext.name}/${sched.id}`,
+            type: 'extension',
+            extensionName: ext.name,
+            actionId: sched.action,
+            cron: sched.cron,
+            enabled: true,
+            input: sched.input ?? undefined,
+            // Whose it is, and what the run-time owner fence compares. See the file header.
+            ownerScope,
+            createdBy: actor,
+            createdAt: now,
+            updatedAt: now,
+        };
+        await storage.createScheduledJob(jobRecord);
+        scheduler.addJob(jobRecord);
+        created++;
+        logger.info(`Registered scheduled job: ${jobId}`, { cron: jobRecord.cron, ownerScope });
+    }
+    return created;
+}
+/**
+ * Stamp the missing owner scope onto extension jobs stored before it was written.
+ *
+ * A deploy does not fix these on its own: activation and install skip an id that already exists, so a
+ * job created by the old code keeps its old shape until somebody rewrites it. Runs at startup BEFORE
+ * the scheduler starts, so the first `@activate` wave after a restart already has what it needs.
+ *
+ * The extension record is the only place the answer can come from, and it is the same answer the
+ * executor itself used until 2026-08-15. A job whose extension is gone is left alone: it names nobody,
+ * and it would refuse for the better reason a moment later anyway.
+ */
+export async function backfillExtensionJobOwnerScope(config, storage) {
+    const jobs = await storage.listScheduledJobs({ type: 'extension' });
+    let repaired = 0;
+    let orphaned = 0;
+    for (const job of jobs) {
+        if (job.ownerScope || !job.extensionName)
+            continue;
+        const ext = await storage.getExtension(job.extensionName);
+        const ownerScope = extensionJobOwnerScope(ext?.installedBy, config.nodeId);
+        if (!ownerScope) {
+            orphaned++;
+            continue;
+        }
+        await storage.updateScheduledJob(job.id, { ownerScope, updatedAt: new Date().toISOString() });
+        repaired++;
+    }
+    if (repaired > 0)
+        logger.info(`Stamped owner scope onto ${repaired} extension scheduled jobs`);
+    if (orphaned > 0) {
+        // These keep refusing, and the log says why rather than leaving the same line to repeat on
+        // every fire: there is no installer to name, because the extension is gone or never had one.
+        logger.warn(`${orphaned} extension scheduled jobs have no installer to name — they will refuse until their extension is reinstalled`);
+    }
+    return repaired;
+}
+//# sourceMappingURL=extension-schedules.js.map

package/dist/src/services/extension-schedules.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"extension-schedules.js","sourceRoot":"","sources":["../../../src/services/extension-schedules.ts"],"names":[],"mappings":"AAmCA,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAS5C;;;;;;GAMG;AACH,MAAM,UAAU,sBAAsB,CAAC,WAA+B,EAAE,MAAc;IAClF,MAAM,IAAI,GAAG,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IAC/C,OAAO,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,IAAI,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;AAC3C,CAAC;AAED,0GAA0G;AAC1G,MAAM,UAAU,cAAc,CAAC,aAAqB,EAAE,UAAkB;IACpE,OAAO,OAAO,aAAa,IAAI,UAAU,EAAE,CAAC;AAChD,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,qBAAqB,CAAC,GAAkC;IACpE,OAAO,GAAG,CAAC,IAAI,KAAK,WAAW,IAAI,GAAG,CAAC,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;AACjE,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAC5C,IAA2B,EAC3B,GAAoB,EACpB,KAAa,EACb,OAA8B,EAAE;IAEhC,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,GAAG,IAAI,CAAC;IAC5C,IAAI,CAAC,SAAS;QAAE,OAAO,CAAC,CAAC;IAEzB,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;QACf,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,iBAAiB,CAAC,EAAE,aAAa,EAAE,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;QAC9E,KAAK,MAAM,GAAG,IAAI,QAAQ,EAAE,CAAC;YACzB,SAAS,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAC5B,MAAM,OAAO,CAAC,kBAAkB,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC7C,CAAC;IACL,CAAC;IAED,MAAM,SAAS,GAAI,GAAG,CAAC,MAAM,EAAE,WAA0D,IAAI,EAAE,CAAC;IAChG,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,CAAC,CAAC;IAErC,MAAM,UAAU,GAAG,sBAAsB,CAAC,GAAG,CAAC,WAAW,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;IAC1E,IAAI,CAAC,UAAU,EAAE,CAAC;QACd,6FAA6F;QAC7F,MAAM,CAAC,KAAK,CAAC,cAAc,GAAG,CAAC,IAAI,4BAA4B,SAAS,CAAC,MAAM,yCAAyC,CAAC,CAAC;QAC1H,OAAO,CAAC,CAAC;IACb,CAAC;IAED,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,KAAK,MAAM,KAAK,IAAI,SAAS,EAAE,CAAC;QAC5B,MAAM,KAAK,GAAG,cAAc,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,CAAC,EAAY,CAAC,CAAC;QAC3D,IAAI,CAAC,IAAI,CAAC,OAAO,IAAI,MAAM,OAAO,CAAC,eAAe,CAAC,KAAK,CAAC;YAAE,SAAS;QACpE,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QACrC,MAAM,SAAS,GAAuB;YAClC,EAAE,EAAE,KAAK;YACT,IAAI,EAAG,KAAK,CAAC,WAAsB,IAAI,GAAG,GAAG,CAAC,IAAI,IAAI,KAAK,CAAC,EAAY,EAAE;YAC1E,IAAI,EAAE,WAAW;YACjB,aAAa,EAAE,GAAG,CAAC,IAAI;YACvB,QAAQ,EAAE,KAAK,CAAC,MAAgB;YAChC,IAAI,EAAE,KAAK,CAAC,IAAc;YAC1B,OAAO,EAAE,IAAI;YACb,KAAK,EAAG,KAAK,CAAC,KAAiC,IAAI,SAAS;YAC5D,gFAAgF;YAChF,UAAU;YACV,SAAS,EAAE,KAAK;YAChB,SAAS,EAAE,GAAG;YACd,SAAS,EAAE,GAAG;SACjB,CAAC;QACF,MAAM,OAAO,CAAC,kBAAkB,CAAC,SAAS,CAAC,CAAC;QAC5C,SAAS,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QAC5B,OAAO,EAAE,CAAC;QACV,MAAM,CAAC,IAAI,CAAC,6BAA6B,KAAK,EAAE,EAAE,EAAE,IAAI,EAAE,SAAS,CAAC,IAAI,EAAE,UAAU,EAAE,CAAC,CAAC;IAC5F,CAAC;IACD,OAAO,OAAO,CAAC;AACnB,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,CAAC,KAAK,UAAU,8BAA8B,CAAC,MAAoB,EAAE,OAAgB;IACvF,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,iBAAiB,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC;IACpE,IAAI,QAAQ,GAAG,CAAC,CAAC;IACjB,IAAI,QAAQ,GAAG,CAAC,CAAC;IACjB,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACrB,IAAI,GAAG,CAAC,UAAU,IAAI,CAAC,GAAG,CAAC,aAAa;YAAE,SAAS;QACnD,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,YAAY,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;QAC1D,MAAM,UAAU,GAAG,sBAAsB,CAAC,GAAG,EAAE,WAAW,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;QAC3E,IAAI,CAAC,UAAU,EAAE,CAAC;YAAC,QAAQ,EAAE,CAAC;YAAC,SAAS;QAAC,CAAC;QAC1C,MAAM,OAAO,CAAC,kBAAkB,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,UAAU,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;QAC9F,QAAQ,EAAE,CAAC;IACf,CAAC;IACD,IAAI,QAAQ,GAAG,CAAC;QAAE,MAAM,CAAC,IAAI,CAAC,4BAA4B,QAAQ,2BAA2B,CAAC,CAAC;IAC/F,IAAI,QAAQ,GAAG,CAAC,EAAE,CAAC;QACf,2FAA2F;QAC3F,6FAA6F;QAC7F,MAAM,CAAC,IAAI,CAAC,GAAG,QAAQ,6GAA6G,CAAC,CAAC;IAC1I,CAAC;IACD,OAAO,QAAQ,CAAC;AACpB,CAAC"}

package/dist/src/services/extension-system-run.d.ts

@@ -0,0 +1,91 @@
+/**
+ * @file src/services/extension-system-run.ts
+ * @description Running one extension action with NOBODY PRESENT — the shared half of the two roads
+ *   that do it: a schedule firing on a clock, and a workflow step reaching its turn.
+ *
+ *   WHY THIS IS ONE FUNCTION. The steps between "an id names an action" and "the sandbox starts" are
+ *   seven, and every one of them is a place a road can be wrong differently: resolve the extension,
+ *   refuse an inactive one, find the action, refuse a stranger's, decrypt the manifest secrets,
+ *   resolve the instance and ITS secrets, build the context. The scheduler road had all seven; the
+ *   workflow road was about to grow a second copy of them. This node has already paid for that shape
+ *   once — four hand-built sandbox contexts, each missing a different guard, five findings in the
+ *   August 2026 audit — which is why `services/extension-ctx.ts` exists and why the layer above it
+ *   should not be re-derived either.
+ *
+ *   THE ONE RULE THAT MAKES AN UNATTENDED CALL SAFE: it must be the OWNER'S OWN EXTENSION. A system
+ *   run has no paywall, no contract and no meter — there is no door where a price could be asked —
+ *   so a clock or a workflow pointed at somebody else's extension is an unlimited standing call on
+ *   their capability, their API keys and their quota. `POST /v1/schedules` has refused that since it
+ *   was written (services/schedule-write.ts); here it is checked again at RUN time, because
+ *   `installedBy` is decided at install and a saved schedule or workflow outlives the record it
+ *   names. A create-time gate cannot see a delete-and-reinstall by a different owner.
+ *
+ *   WHAT A SYSTEM RUN DOES NOT GET: a wallet. Nobody's balance is available to spend when nobody is
+ *   present, so `ctx.wallet` is the empty object it has always been on these roads, and a script that
+ *   reaches for it gets `undefined` rather than someone else's money.
+ * @structure SystemRunTarget · SystemRunPrincipal · runExtensionActionAsSystem
+ * @usage
+ *   const out = await runExtensionActionAsSystem({ storage, config, emailService }, {
+ *     extensionName, actionId, instanceId, input,
+ *     callerGaii: `scheduler@${config.nodeId}`, storageOwnerGhii: ownerGhii, ownerName,
+ *     logLabel: 'scheduler',
+ *   });
+ * @version-history
+ *   v1.0.0 -- 2026-08-15 -- TARGET-063 A3: extracted from services/scheduler-extension-job.ts when
+ *     the workflow engine gained an `extension` step and would otherwise have grown the second copy.
+ */
+import type { AimeatConfig } from '../config.js';
+import type { Storage } from '../storage/interface.js';
+import type { EmailService } from './email.js';
+export interface SystemRunDeps {
+    storage: Storage;
+    config: AimeatConfig;
+    emailService?: EmailService;
+}
+export interface SystemRunArgs {
+    extensionName: string;
+    actionId: string;
+    /** Instance-scoped run: its config (secrets decrypted) is handed to the sandbox as ctx.instance. */
+    instanceId?: string;
+    input?: Record<string, unknown>;
+    /**
+     * What the sandbox sees as `ctx.caller.gaii`. A schedule passes `scheduler@<node>` — there is
+     * genuinely nobody — while a workflow step passes the run's owner GHII, because a workflow HAS
+     * an owner and naming them is more honest than naming a machine.
+     */
+    callerGaii: string;
+    /** Bare owner name: whose notifications, whose email consents, whose extension this must be. */
+    ownerName: string;
+    /**
+     * The namespace `ctx.files` reads and writes. ALWAYS the owner's GHII on these roads, never the
+     * caller — a data package produced on a clock has to sit at the same permanent
+     * `/v1/pub/<owner>/…` address as the same package produced from the app or by an agent, and
+     * `scheduler@<node>` owns no storage at all.
+     */
+    storageOwnerGhii: string;
+    /** Distinguishes this road in the sandbox's log lines, e.g. 'scheduler' or 'wf:daily-scan'. */
+    logLabel: string;
+    /** What a data package produced on this road records as its producer. A clock and a workflow are
+     *  different things to a consumer deciding whether to trust a cadence. */
+    producerKind: 'extension' | 'workflow';
+    /** The producer's own address — the schedule id or the workflow's `id/step` — so a consumer
+     *  looking at a package can find the thing that makes it. */
+    producerRef?: string;
+    /** The cron the producer runs on, when it has one. This is what `updateFrequency` in the ODPS
+     *  SLA block is projected from, so it is recorded rather than described. */
+    producerSchedule?: string;
+    /** Wrap the context in memory-access tracking and return the reads/writes (the scheduler logs them). */
+    trackMemory?: boolean;
+}
+export interface SystemRunResult {
+    result: unknown;
+    reads: string[];
+    writes: string[];
+}
+/**
+ * Run one action with nobody present. Throws on every refusal rather than returning a shape the
+ * caller has to remember to inspect: both roads treat a thrown error as a failed run that notifies
+ * the owner, and a returned "not really" would be recorded as success by each of them.
+ */
+export declare function runExtensionActionAsSystem(deps: SystemRunDeps, args: SystemRunArgs): Promise<SystemRunResult>;
+//# sourceMappingURL=extension-system-run.d.ts.map

package/dist/src/services/extension-system-run.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"extension-system-run.d.ts","sourceRoot":"","sources":["../../../src/services/extension-system-run.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmCG;AACH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AACjD,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,yBAAyB,CAAC;AAQvD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAE/C,MAAM,WAAW,aAAa;IAC1B,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,EAAE,YAAY,CAAC;IACrB,YAAY,CAAC,EAAE,YAAY,CAAC;CAC/B;AAED,MAAM,WAAW,aAAa;IAC1B,aAAa,EAAE,MAAM,CAAC;IACtB,QAAQ,EAAE,MAAM,CAAC;IACjB,oGAAoG;IACpG,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAChC;;;;OAIG;IACH,UAAU,EAAE,MAAM,CAAC;IACnB,gGAAgG;IAChG,SAAS,EAAE,MAAM,CAAC;IAClB;;;;;OAKG;IACH,gBAAgB,EAAE,MAAM,CAAC;IACzB,+FAA+F;IAC/F,QAAQ,EAAE,MAAM,CAAC;IACjB;8EAC0E;IAC1E,YAAY,EAAE,WAAW,GAAG,UAAU,CAAC;IACvC;iEAC6D;IAC7D,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;gFAC4E;IAC5E,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,wGAAwG;IACxG,WAAW,CAAC,EAAE,OAAO,CAAC;CACzB;AAED,MAAM,WAAW,eAAe;IAC5B,MAAM,EAAE,OAAO,CAAC;IAChB,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,MAAM,EAAE,MAAM,EAAE,CAAC;CACpB;AAED;;;;GAIG;AACH,wBAAsB,0BAA0B,CAAC,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,aAAa,GAAG,OAAO,CAAC,eAAe,CAAC,CA0FnH"}

package/dist/src/services/extension-system-run.js

@@ -0,0 +1,100 @@
+import { executeExtensionAction, trackMemoryAccess } from './extension-runtime.js';
+import { buildExtensionCtx, buildExtensionNotify, buildExtensionEmail, sandboxLimits } from './extension-ctx.js';
+import { makeExtensionFiles } from './extension-files.js';
+import { makeExtensionDataPackage } from './datapackage/ext-capability.js';
+import { getEncryptionKey } from './encryption.js';
+import { getExtSecretKeys, getInstanceSecretKeys, decryptSecretFields } from './extension-secrets.js';
+/**
+ * Run one action with nobody present. Throws on every refusal rather than returning a shape the
+ * caller has to remember to inspect: both roads treat a thrown error as a failed run that notifies
+ * the owner, and a returned "not really" would be recorded as success by each of them.
+ */
+export async function runExtensionActionAsSystem(deps, args) {
+    const { storage, config, emailService } = deps;
+    const { extensionName, actionId, instanceId, ownerName, callerGaii, storageOwnerGhii, logLabel } = args;
+    const ext = await storage.getExtension(extensionName);
+    if (!ext)
+        throw new Error(`Extension "${extensionName}" not found`);
+    if (ext.status !== 'active')
+        throw new Error(`Extension "${extensionName}" is not active`);
+    // The fence. See the file header: an unattended call has no door where a price could be asked.
+    if (ext.installedBy !== ownerName) {
+        throw new Error(`Extension "${extensionName}" belongs to another owner — an unattended run may only call your own`);
+    }
+    const action = ext.actions.find(a => a.id === actionId);
+    if (!action)
+        throw new Error(`Action "${actionId}" not found in extension "${extensionName}"`);
+    const encKey = getEncryptionKey(config);
+    const extMemoryOwner = instanceId ? `ext:${ext.name}.${instanceId}` : `ext:${ext.name}`;
+    // An instance-scoped run gets the same bring-your-own-key config a live instance action would;
+    // `type: 'secret'` fields are decrypted just before the VM (services/extension-secrets.ts).
+    let instanceCtx;
+    if (instanceId) {
+        const inst = await storage.getExtensionInstance(ext.name, instanceId);
+        instanceCtx = {
+            id: instanceId,
+            config: inst
+                ? decryptSecretFields(inst.config, getInstanceSecretKeys(ext), encKey)
+                : (args.input ?? {}),
+        };
+    }
+    const baseCtx = buildExtensionCtx({
+        config,
+        storage,
+        extMemoryOwner,
+        // 'operator' is what the sandbox reads to decide no human is present. It is the role even
+        // when `gaii` names the owner: a workflow step acts in the owner's name, it is not the owner
+        // sitting at a screen, and an IAM gate that treats the two the same would let an unattended
+        // run pass a door meant for a person.
+        caller: { gaii: callerGaii, owner: ownerName, roles: ['operator'] },
+        extConfig: decryptSecretFields(ext.config, getExtSecretKeys(ext), encKey),
+        instance: instanceCtx,
+        logPrefix: `[ext:${ext.name}:${logLabel}]`,
+        // No wallet: see the file header.
+        files: makeExtensionFiles({
+            config, storage, extName: ext.name,
+            callerGaii: storageOwnerGhii,
+            callerOwner: ownerName,
+        }),
+        // The deterministic producers live here, so this is the road ctx.datapackage exists for.
+        // Owner namespace on both roads, and the producer block records WHICH unattended road it
+        // was: a package a clock refreshes weekly and one a workflow rebuilds after a human approval
+        // are different products, and a buyer choosing between them needs to see which is which.
+        datapackage: makeExtensionDataPackage({
+            config, storage,
+            ownerGhii: storageOwnerGhii,
+            producedBy: {
+                gaii: callerGaii,
+                kind: args.producerKind,
+                ref: args.producerRef ?? `${ext.name}/${actionId}`,
+                ...(args.producerSchedule ? { schedule: args.producerSchedule } : {}),
+            },
+        }),
+        notify: buildExtensionNotify({
+            storage, config, extName: ext.name,
+            recipientGaii: ownerName, recipientOwner: ownerName,
+        }),
+        email: buildExtensionEmail({
+            storage, config, extName: ext.name, extConfig: ext.config,
+            ownerName, emailService,
+        }),
+    });
+    const tracked = args.trackMemory ? trackMemoryAccess(baseCtx) : null;
+    const ctx = tracked ? tracked.ctx : baseCtx;
+    // Reject a non-serialisable input before the VM rather than inside it, where the failure reads
+    // as a script bug.
+    let input;
+    try {
+        input = JSON.parse(JSON.stringify(args.input ?? {}));
+    }
+    catch {
+        throw new Error(`Extension run "${extensionName}/${actionId}" has non-serializable input`);
+    }
+    const result = await executeExtensionAction(action.scriptContent, ctx, input, sandboxLimits(ext.limits, config));
+    return {
+        result,
+        reads: tracked?.accessLog.reads ?? [],
+        writes: tracked?.accessLog.writes ?? [],
+    };
+}
+//# sourceMappingURL=extension-system-run.js.map

package/dist/src/services/extension-system-run.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"extension-system-run.js","sourceRoot":"","sources":["../../../src/services/extension-system-run.ts"],"names":[],"mappings":"AAsCA,OAAO,EAAE,sBAAsB,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAEnF,OAAO,EAAE,iBAAiB,EAAE,oBAAoB,EAAE,mBAAmB,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AACjH,OAAO,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAC1D,OAAO,EAAE,wBAAwB,EAAE,MAAM,iCAAiC,CAAC;AAC3E,OAAO,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AACnD,OAAO,EAAE,gBAAgB,EAAE,qBAAqB,EAAE,mBAAmB,EAAE,MAAM,wBAAwB,CAAC;AAmDtG;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAAC,IAAmB,EAAE,IAAmB;IACrF,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,GAAG,IAAI,CAAC;IAC/C,MAAM,EAAE,aAAa,EAAE,QAAQ,EAAE,UAAU,EAAE,SAAS,EAAE,UAAU,EAAE,gBAAgB,EAAE,QAAQ,EAAE,GAAG,IAAI,CAAC;IAExG,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,YAAY,CAAC,aAAa,CAAC,CAAC;IACtD,IAAI,CAAC,GAAG;QAAE,MAAM,IAAI,KAAK,CAAC,cAAc,aAAa,aAAa,CAAC,CAAC;IACpE,IAAI,GAAG,CAAC,MAAM,KAAK,QAAQ;QAAE,MAAM,IAAI,KAAK,CAAC,cAAc,aAAa,iBAAiB,CAAC,CAAC;IAC3F,+FAA+F;IAC/F,IAAI,GAAG,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;QAChC,MAAM,IAAI,KAAK,CAAC,cAAc,aAAa,uEAAuE,CAAC,CAAC;IACxH,CAAC;IACD,MAAM,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,QAAQ,CAAC,CAAC;IACxD,IAAI,CAAC,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,WAAW,QAAQ,6BAA6B,aAAa,GAAG,CAAC,CAAC;IAE/F,MAAM,MAAM,GAAG,gBAAgB,CAAC,MAAM,CAAC,CAAC;IACxC,MAAM,cAAc,GAAG,UAAU,CAAC,CAAC,CAAC,OAAO,GAAG,CAAC,IAAI,IAAI,UAAU,EAAE,CAAC,CAAC,CAAC,OAAO,GAAG,CAAC,IAAI,EAAE,CAAC;IAExF,+FAA+F;IAC/F,4FAA4F;IAC5F,IAAI,WAAwE,CAAC;IAC7E,IAAI,UAAU,EAAE,CAAC;QACb,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,oBAAoB,CAAC,GAAG,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;QACtE,WAAW,GAAG;YACV,EAAE,EAAE,UAAU;YACd,MAAM,EAAE,IAAI;gBACR,CAAC,CAAC,mBAAmB,CAAC,IAAI,CAAC,MAAM,EAAE,qBAAqB,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC;gBACtE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC;SAC3B,CAAC;IACN,CAAC;IAED,MAAM,OAAO,GAAiB,iBAAiB,CAAC;QAC5C,MAAM;QACN,OAAO;QACP,cAAc;QACd,0FAA0F;QAC1F,6FAA6F;QAC7F,4FAA4F;QAC5F,sCAAsC;QACtC,MAAM,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,UAAU,CAAC,EAAE;QACnE,SAAS,EAAE,mBAAmB,CAAC,GAAG,CAAC,MAAM,EAAE,gBAAgB,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC;QACzE,QAAQ,EAAE,WAAW;QACrB,SAAS,EAAE,QAAQ,GAAG,CAAC,IAAI,IAAI,QAAQ,GAAG;QAC1C,kCAAkC;QAClC,KAAK,EAAE,kBAAkB,CAAC;YACtB,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,CAAC,IAAI;YAClC,UAAU,EAAE,gBAAgB;YAC5B,WAAW,EAAE,SAAS;SACzB,CAAC;QACF,yFAAyF;QACzF,yFAAyF;QACzF,6FAA6F;QAC7F,yFAAyF;QACzF,WAAW,EAAE,wBAAwB,CAAC;YAClC,MAAM,EAAE,OAAO;YACf,SAAS,EAAE,gBAAgB;YAC3B,UAAU,EAAE;gBACR,IAAI,EAAE,UAAU;gBAChB,IAAI,EAAE,IAAI,CAAC,YAAY;gBACvB,GAAG,EAAE,IAAI,CAAC,WAAW,IAAI,GAAG,GAAG,CAAC,IAAI,IAAI,QAAQ,EAAE;gBAClD,GAAG,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,gBAAgB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACxE;SACJ,CAAC;QACF,MAAM,EAAE,oBAAoB,CAAC;YACzB,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,CAAC,IAAI;YAClC,aAAa,EAAE,SAAS,EAAE,cAAc,EAAE,SAAS;SACtD,CAAC;QACF,KAAK,EAAE,mBAAmB,CAAC;YACvB,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,CAAC,IAAI,EAAE,SAAS,EAAE,GAAG,CAAC,MAAM;YACzD,SAAS,EAAE,YAAY;SAC1B,CAAC;KACL,CAAC,CAAC;IAEH,MAAM,OAAO,GAAG,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,iBAAiB,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACrE,MAAM,GAAG,GAAG,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC;IAE5C,+FAA+F;IAC/F,mBAAmB;IACnB,IAAI,KAA8B,CAAC;IACnC,IAAI,CAAC;QACD,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC,CAA4B,CAAC;IACpF,CAAC;IAAC,MAAM,CAAC;QACL,MAAM,IAAI,KAAK,CAAC,kBAAkB,aAAa,IAAI,QAAQ,8BAA8B,CAAC,CAAC;IAC/F,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,sBAAsB,CAAC,MAAM,CAAC,aAAa,EAAE,GAAG,EAAE,KAAK,EAAE,aAAa,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IACjH,OAAO;QACH,MAAM;QACN,KAAK,EAAE,OAAO,EAAE,SAAS,CAAC,KAAK,IAAI,EAAE;QACrC,MAAM,EAAE,OAAO,EAAE,SAAS,CAAC,MAAM,IAAI,EAAE;KAC1C,CAAC;AACN,CAAC"}

package/dist/src/services/extension-upsert.d.ts

@@ -17,6 +17,8 @@
  *     { ownerName, actor, wasActive });
  *   if (!out.record) return refuse('the write did not apply');
  * @version-history
+ *   v1.1.0 — 2026-08-16 — Schedule re-registration goes through services/extension-schedules.ts, so a
+ *     redeployed extension's jobs carry the installer's `ownerScope` like every other road's.
  *   v1.0.0 — 2026-08-11 — Extracted after the copied-logic check found the pair.
  */
 import type { AimeatConfig } from '../config.js';

package/dist/src/services/extension-upsert.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"extension-upsert.d.ts","sourceRoot":"","sources":["../../../src/services/extension-upsert.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AACjD,OAAO,KAAK,EAAE,OAAO,EAAE,eAAe,EAAsB,MAAM,yBAAyB,CAAC;AAC5F,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAIhD,MAAM,WAAW,UAAU;IACvB,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,EAAE,YAAY,CAAC;IACrB,gGAAgG;IAChG,SAAS,CAAC,EAAE,SAAS,GAAG,IAAI,CAAC;CAChC;AAED,MAAM,WAAW,aAAa;IAC1B,wDAAwD;IACxD,SAAS,EAAE,MAAM,CAAC;IAClB,yEAAyE;IACzE,KAAK,EAAE,MAAM,CAAC;IACd,wDAAwD;IACxD,SAAS,EAAE,OAAO,CAAC;CACtB;AAED;;;;;;;;GAQG;AACH,wBAAsB,sBAAsB,CACxC,IAAI,EAAE,UAAU,EAChB,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,eAAe,EACvB,GAAG,EAAE,aAAa,GACnB,OAAO,CAAC;IAAE,MAAM,EAAE,eAAe,GAAG,IAAI,CAAC;IAAC,aAAa,EAAE,OAAO,CAAA;CAAE,CAAC,CAoDrE"}
+{"version":3,"file":"extension-upsert.d.ts","sourceRoot":"","sources":["../../../src/services/extension-upsert.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AACjD,OAAO,KAAK,EAAE,OAAO,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AACxE,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAKhD,MAAM,WAAW,UAAU;IACvB,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,EAAE,YAAY,CAAC;IACrB,gGAAgG;IAChG,SAAS,CAAC,EAAE,SAAS,GAAG,IAAI,CAAC;CAChC;AAED,MAAM,WAAW,aAAa;IAC1B,wDAAwD;IACxD,SAAS,EAAE,MAAM,CAAC;IAClB,yEAAyE;IACzE,KAAK,EAAE,MAAM,CAAC;IACd,wDAAwD;IACxD,SAAS,EAAE,OAAO,CAAC;CACtB;AAED;;;;;;;;GAQG;AACH,wBAAsB,sBAAsB,CACxC,IAAI,EAAE,UAAU,EAChB,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,eAAe,EACvB,GAAG,EAAE,aAAa,GACnB,OAAO,CAAC;IAAE,MAAM,EAAE,eAAe,GAAG,IAAI,CAAC;IAAC,aAAa,EAAE,OAAO,CAAA;CAAE,CAAC,CAiCrE"}

package/dist/src/services/extension-upsert.js

@@ -1,4 +1,5 @@
 import { reconcileAfterExtensionWrite } from './exchange-projection.js';
+import { registerExtensionSchedules } from './extension-schedules.js';
 import { logger } from '../utils/logger.js';
 /**
  * Replace an installed extension's code and metadata, preserving its lifecycle fields and its
@@ -31,30 +32,11 @@ export async function upsertExtensionInPlace(deps, name, record, ctx) {
     // is already live — each call reads scriptContent fresh from storage.
     if (!(ctx.wasActive && scheduler))
         return { record: updated, reinitialized: false };
-    const jobs = await storage.listScheduledJobs({ extensionName: name });
-    for (const job of jobs) {
-        scheduler.removeJob(job.id);
-        await storage.deleteScheduledJob(job.id);
-    }
-    const schedules = record.config.__schedules ?? [];
-    for (const sched of schedules) {
-        const now = new Date().toISOString();
-        const jobRecord = {
-            id: `ext:${name}:${sched.id}`,
-            name: sched.description ?? `${name}/${sched.id}`,
-            type: 'extension',
-            extensionName: name,
-            actionId: sched.action,
-            cron: sched.cron,
-            enabled: true,
-            input: sched.input ?? undefined,
-            createdBy: ctx.actor,
-            createdAt: now,
-            updatedAt: now,
-        };
-        await storage.createScheduledJob(jobRecord);
-        scheduler.addJob(jobRecord);
-    }
+    // `replace: true`: the new manifest's schedules are the whole truth about this extension's clock,
+    // so the old ones go first. The jobs are stamped with the INSTALLER's owner scope, which is
+    // `updated.installedBy` and not the redeployer — an operator may write on somebody else's behalf,
+    // and the schedule still belongs to the person whose extension it is.
+    await registerExtensionSchedules({ storage, config, scheduler }, updated, ctx.actor, { replace: true });
     scheduler.runActivateJobs(name).catch(err => logger.error(`Failed to run @activate jobs for ${name}`, { error: String(err) }));
     return { record: updated, reinitialized: true };
 }

package/dist/src/services/extension-upsert.js.map

@@ -1 +1 @@
-{"version":3,"file":"extension-upsert.js","sourceRoot":"","sources":["../../../src/services/extension-upsert.ts"],"names":[],"mappings":"AAwBA,OAAO,EAAE,4BAA4B,EAAE,MAAM,0BAA0B,CAAC;AACxE,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAkB5C;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CACxC,IAAgB,EAChB,IAAY,EACZ,MAAuB,EACvB,GAAkB;IAElB,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,GAAG,IAAI,CAAC;IAE5C,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,eAAe,CAAC,IAAI,EAAE;QAChD,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,WAAW,EAAE,MAAM,CAAC,WAAW;QAC/B,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,YAAY,EAAE,MAAM,CAAC,YAAY;QACjC,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,UAAU,EAAE,MAAM,CAAC,UAAU;QAC7B,SAAS,EAAE,MAAM,CAAC,SAAS;KAC9B,CAAC,CAAC;IACH,IAAI,CAAC,OAAO;QAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,aAAa,EAAE,KAAK,EAAE,CAAC;IAE5D,kGAAkG;IAClG,MAAM,4BAA4B,CAAC,OAAO,EAAE,GAAG,CAAC,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IAEhF,0FAA0F;IAC1F,+FAA+F;IAC/F,sEAAsE;IACtE,IAAI,CAAC,CAAC,GAAG,CAAC,SAAS,IAAI,SAAS,CAAC;QAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,aAAa,EAAE,KAAK,EAAE,CAAC;IAEpF,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,iBAAiB,CAAC,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;IACtE,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACrB,SAAS,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC5B,MAAM,OAAO,CAAC,kBAAkB,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAC7C,CAAC;IACD,MAAM,SAAS,GAAI,MAAM,CAAC,MAAM,CAAC,WAA0D,IAAI,EAAE,CAAC;IAClG,KAAK,MAAM,KAAK,IAAI,SAAS,EAAE,CAAC;QAC5B,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QACrC,MAAM,SAAS,GAAuB;YAClC,EAAE,EAAE,OAAO,IAAI,IAAI,KAAK,CAAC,EAAY,EAAE;YACvC,IAAI,EAAG,KAAK,CAAC,WAAsB,IAAI,GAAG,IAAI,IAAI,KAAK,CAAC,EAAY,EAAE;YACtE,IAAI,EAAE,WAAW;YACjB,aAAa,EAAE,IAAI;YACnB,QAAQ,EAAE,KAAK,CAAC,MAAgB;YAChC,IAAI,EAAE,KAAK,CAAC,IAAc;YAC1B,OAAO,EAAE,IAAI;YACb,KAAK,EAAG,KAAK,CAAC,KAAiC,IAAI,SAAS;YAC5D,SAAS,EAAE,GAAG,CAAC,KAAK;YACpB,SAAS,EAAE,GAAG;YACd,SAAS,EAAE,GAAG;SACjB,CAAC;QACF,MAAM,OAAO,CAAC,kBAAkB,CAAC,SAAS,CAAC,CAAC;QAC5C,SAAS,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IAChC,CAAC;IACD,SAAS,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CACxC,MAAM,CAAC,KAAK,CAAC,oCAAoC,IAAI,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;IAEtF,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC;AACpD,CAAC"}
+{"version":3,"file":"extension-upsert.js","sourceRoot":"","sources":["../../../src/services/extension-upsert.ts"],"names":[],"mappings":"AA0BA,OAAO,EAAE,4BAA4B,EAAE,MAAM,0BAA0B,CAAC;AACxE,OAAO,EAAE,0BAA0B,EAAE,MAAM,0BAA0B,CAAC;AACtE,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAkB5C;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CACxC,IAAgB,EAChB,IAAY,EACZ,MAAuB,EACvB,GAAkB;IAElB,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,GAAG,IAAI,CAAC;IAE5C,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,eAAe,CAAC,IAAI,EAAE;QAChD,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,WAAW,EAAE,MAAM,CAAC,WAAW;QAC/B,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,YAAY,EAAE,MAAM,CAAC,YAAY;QACjC,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,UAAU,EAAE,MAAM,CAAC,UAAU;QAC7B,SAAS,EAAE,MAAM,CAAC,SAAS;KAC9B,CAAC,CAAC;IACH,IAAI,CAAC,OAAO;QAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,aAAa,EAAE,KAAK,EAAE,CAAC;IAE5D,kGAAkG;IAClG,MAAM,4BAA4B,CAAC,OAAO,EAAE,GAAG,CAAC,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IAEhF,0FAA0F;IAC1F,+FAA+F;IAC/F,sEAAsE;IACtE,IAAI,CAAC,CAAC,GAAG,CAAC,SAAS,IAAI,SAAS,CAAC;QAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,aAAa,EAAE,KAAK,EAAE,CAAC;IAEpF,kGAAkG;IAClG,4FAA4F;IAC5F,kGAAkG;IAClG,sEAAsE;IACtE,MAAM,0BAA0B,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,EAAE,OAAO,EAAE,GAAG,CAAC,KAAK,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;IACxG,SAAS,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CACxC,MAAM,CAAC,KAAK,CAAC,oCAAoC,IAAI,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;IAEtF,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC;AACpD,CAAC"}

package/dist/src/services/goose-acp.d.ts

@@ -0,0 +1,84 @@
+import type { AimeatConfig } from '../config.js';
+/** An MCP server handed to one session. `http` is the transport goose reports as supported. */
+export interface AcpMcpServer {
+    name: string;
+    type: 'http';
+    url: string;
+    headers?: Array<{
+        name: string;
+        value: string;
+    }>;
+}
+/** One thing that happened during a turn, flattened for the chat surface to render. */
+export type SessionUpdate = {
+    kind: 'text';
+    text: string;
+} | {
+    kind: 'thought';
+    text: string;
+} | {
+    kind: 'tool_call';
+    id: string;
+    title: string;
+    status: string;
+    raw: unknown;
+} | {
+    kind: 'other';
+    type: string;
+    raw: unknown;
+} | {
+    kind: 'done';
+    stopReason: string;
+    tokens?: number;
+} | {
+    kind: 'error';
+    message: string;
+};
+export declare class GooseAcpClient {
+    private readonly child;
+    private nextId;
+    private readonly pending;
+    private readonly bus;
+    private buffer;
+    private closed;
+    private constructor();
+    /**
+     * Start the agent and shake hands.
+     *
+     * Client capabilities are declared HONESTLY: no filesystem, no terminal. The node has neither to
+     * offer a hosted agent, and claiming otherwise then failing the callback is worse than saying no
+     * up front — the agent plans around what the client says it can do.
+     */
+    static start(config: AimeatConfig): Promise<GooseAcpClient>;
+    /** Split the stream into lines; every line is one JSON-RPC message. */
+    private onData;
+    /** A reply to us, a request FROM the agent that must be answered, or a notification. */
+    private dispatch;
+    /**
+     * Answer the agent's callbacks.
+     *
+     * Permission is granted, because the node already decided what this session may do: the session's
+     * MCP token carries the owner's scopes and the tool surface refuses what it must. A second
+     * yes/no here would be a permission model in a place that cannot see the identity.
+     *
+     * Filesystem and terminal are refused, matching what start() declared.
+     */
+    private answerAgentRequest;
+    private write;
+    private failAllPending;
+    private call;
+    /** Start a session with its own MCP servers. `cwd` is required by the protocol and unused here. */
+    newSession(opts: {
+        mcpServers: AcpMcpServer[];
+        cwd?: string;
+    }): Promise<string>;
+    /** Run one turn, yielding what happens as it happens. */
+    prompt(sessionId: string, text: string): AsyncGenerator<SessionUpdate>;
+    /** Ask the agent to stop the current turn. */
+    cancel(sessionId: string): Promise<void>;
+    /** Stop the agent. SIGTERM first; a child that ignores it is killed after a grace period. */
+    close(): void;
+}
+/** The aimeat MCP server, as one session's tool surface, carrying that person's own agent token. */
+export declare function aimeatMcpServer(baseUrl: string, agentToken: string): AcpMcpServer;
+//# sourceMappingURL=goose-acp.d.ts.map

package/dist/src/services/goose-acp.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"goose-acp.d.ts","sourceRoot":"","sources":["../../../src/services/goose-acp.ts"],"names":[],"mappings":"AAqCA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAGjD,+FAA+F;AAC/F,MAAM,WAAW,YAAY;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,EAAE,MAAM,CAAC;IACZ,OAAO,CAAC,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CACpD;AAED,uFAAuF;AACvF,MAAM,MAAM,aAAa,GACnB;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAC9B;IAAE,IAAI,EAAE,SAAS,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GACjC;IAAE,IAAI,EAAE,WAAW,CAAC;IAAC,EAAE,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,OAAO,CAAA;CAAE,GAC9E;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,OAAO,CAAA;CAAE,GAC7C;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,GACrD;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC;AAgBzC,qBAAa,cAAc;IASH,OAAO,CAAC,QAAQ,CAAC,KAAK;IAR1C,OAAO,CAAC,MAAM,CAAO;IACrB,OAAO,CAAC,QAAQ,CAAC,OAAO,CAEnB;IACL,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAsB;IAC1C,OAAO,CAAC,MAAM,CAAM;IACpB,OAAO,CAAC,MAAM,CAAS;IAEvB,OAAO;IA4BP;;;;;;OAMG;WACU,KAAK,CAAC,MAAM,EAAE,YAAY,GAAG,OAAO,CAAC,cAAc,CAAC;IAoBjE,uEAAuE;IACvE,OAAO,CAAC,MAAM;IAgBd,wFAAwF;IACxF,OAAO,CAAC,QAAQ;IAyBhB;;;;;;;;OAQG;IACH,OAAO,CAAC,kBAAkB;IAmB1B,OAAO,CAAC,KAAK;IAKb,OAAO,CAAC,cAAc;IAKtB,OAAO,CAAC,IAAI;IAaZ,mGAAmG;IAC7F,UAAU,CAAC,IAAI,EAAE;QAAE,UAAU,EAAE,YAAY,EAAE,CAAC;QAAC,GAAG,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,MAAM,CAAC;IAgBrF,yDAAyD;IAClD,MAAM,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,cAAc,CAAC,aAAa,CAAC;IA4B7E,8CAA8C;IACxC,MAAM,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAM9C,6FAA6F;IAC7F,KAAK,IAAI,IAAI;CAchB;AA2BD,oGAAoG;AACpG,wBAAgB,eAAe,CAAC,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,YAAY,CAOjF"}