dodo-mcp 1.0.0

package/dist/services/runtime/runtimeService.js

@@ -0,0 +1,364 @@
+import { DodoError, toDodoError } from '../../errors.js';
+import { digestOf, newId, sha256Bytes } from '../../util/hash.js';
+import { actorKey, liveAccess } from '../multimodal/storage.js';
+import { RUNTIME_SCHEMA_VERSION, RuntimeDiagnosis, RuntimeEvidence, RuntimeSession, RuntimeSessionStatus, RuntimeTask, } from './contracts.js';
+const SESSION_DEFAULT_MS = 60 * 60 * 1000;
+const SESSION_MAX_MS = 24 * 60 * 60 * 1000;
+const EVIDENCE_TTL_MS = 24 * 60 * 60 * 1000;
+const MAX_SESSIONS = 32;
+const MAX_RETAINED_SESSIONS = 128;
+const MAX_TASKS = 32;
+const MAX_EVIDENCE_PER_SESSION = 500;
+const MAX_EVIDENCE_TOTAL = 2000;
+const OUTPUT_SAMPLE_BYTES = 32 * 1024;
+/** Durable runtime intelligence. It stores metadata and hashes only, never raw process output, DOM, headers, cookies or environment values. */
+export class RuntimeService {
+    services;
+    closed = false;
+    constructor(services) {
+        this.services = services;
+        this.recover();
+    }
+    close() { this.closed = true; }
+    open(ctx, label, ttlMinutes) {
+        this.check();
+        liveAccess(ctx, 'dodo:write');
+        this.recover();
+        const owner = actorKey(ctx.principal);
+        const count = this.services.store.db.prepare("SELECT COUNT(*) AS n FROM runtime_sessions WHERE workspace_id=? AND owner=? AND status='OPEN'").get(this.services.workspaceId, owner).n;
+        if (count >= MAX_SESSIONS)
+            throw new DodoError('RESOURCE_LIMIT', `at most ${MAX_SESSIONS} open runtime sessions per client and workspace`);
+        const retained = this.services.store.db.prepare('SELECT COUNT(*) AS n FROM runtime_sessions WHERE workspace_id=? AND owner=?').get(this.services.workspaceId, owner).n;
+        if (retained >= MAX_RETAINED_SESSIONS)
+            throw new DodoError('RESOURCE_LIMIT', `at most ${MAX_RETAINED_SESSIONS} retained runtime sessions per client and workspace; wait for retention cleanup`);
+        const now = Date.now(), id = newId('runtime'), expiresAt = now + Math.min(SESSION_MAX_MS, Math.max(60_000, ttlMinutes * 60_000 || SESSION_DEFAULT_MS));
+        this.services.store.db.prepare(`INSERT INTO runtime_sessions(id,workspace_id,opened_epoch,owner,label,status,created_at,last_seen_at,expires_at,closed_at)
+      VALUES (?,?,?,?,?,'OPEN',?,?,?,NULL)`).run(id, this.services.workspaceId, this.services.epoch, owner, label, now, now, expiresAt);
+        return this.sessionData(this.row(id, owner));
+    }
+    status(ctx, sessionId) {
+        this.check();
+        liveAccess(ctx, 'dodo:read');
+        this.recover();
+        const owner = actorKey(ctx.principal), session = this.requireSession(sessionId, owner, true);
+        const tasks = this.taskRows(session.id, owner).map((row) => this.taskData(row));
+        const counts = this.services.store.db.prepare('SELECT status,COUNT(*) AS n FROM runtime_evidence WHERE session_id=? AND owner=? GROUP BY status').all(session.id, owner);
+        const by = new Map(counts.map((r) => [r.status, r.n]));
+        return RuntimeSessionStatus.parse({
+            session: this.sessionData(session), tasks,
+            evidence: { current: by.get('CURRENT') ?? 0, stale: by.get('STALE') ?? 0, expired: by.get('EXPIRED') ?? 0 },
+            reconnectable: true,
+            note: 'Session/task metadata is durable across MCP reconnects and server restarts. Runtime evidence is untrusted and never grants permission.',
+        });
+    }
+    diagnostics(ctx) {
+        this.check();
+        liveAccess(ctx, 'dodo:read');
+        this.recover();
+        const owner = actorKey(ctx.principal);
+        const row = this.services.store.db.prepare(`SELECT
+      (SELECT COUNT(*) FROM runtime_sessions WHERE workspace_id=? AND owner=? AND status='OPEN') AS sessions,
+      (SELECT COUNT(*) FROM runtime_tasks WHERE workspace_id=? AND owner=?) AS tasks,
+      (SELECT COUNT(*) FROM runtime_evidence WHERE workspace_id=? AND owner=? AND status='CURRENT') AS evidence`).get(this.services.workspaceId, owner, this.services.workspaceId, owner, this.services.workspaceId, owner);
+        return { schemaVersion: RUNTIME_SCHEMA_VERSION, available: true, ...row, retentionHours: 24, storesRawOutput: false, autonomousMonitoring: false };
+    }
+    closeSession(ctx, sessionId) {
+        this.check();
+        liveAccess(ctx, 'dodo:write');
+        const owner = actorKey(ctx.principal), session = this.requireSession(sessionId, owner, true);
+        if (session.status === 'CLOSED')
+            return this.sessionData(session);
+        if (session.status === 'EXPIRED')
+            throw new DodoError('CONFLICT', 'runtime session is expired');
+        const running = this.taskRows(session.id, owner).filter((task) => this.services.jobs.getJobChecked(task.job_id, this.services.workspaceId).status === 'running');
+        if (running.length)
+            throw new DodoError('CONFLICT', `${running.length} runtime task(s) are still running`, { recovery: 'cancel them with runtime_task_cancel or wait for completion before closing the session' });
+        const now = Date.now();
+        this.services.store.db.prepare("UPDATE runtime_sessions SET status='CLOSED',closed_at=?,last_seen_at=? WHERE id=? AND owner=?").run(now, now, session.id, owner);
+        return this.sessionData(this.row(session.id, owner));
+    }
+    prepareTask(ctx, sessionId) {
+        this.check();
+        liveAccess(ctx, 'dodo:exec');
+        this.requireSession(sessionId, actorKey(ctx.principal), false);
+    }
+    attachTask(ctx, sessionId, jobId, kind) {
+        this.check();
+        liveAccess(ctx, 'dodo:exec');
+        const owner = actorKey(ctx.principal), session = this.requireSession(sessionId, owner, false);
+        const count = this.services.store.db.prepare('SELECT COUNT(*) AS n FROM runtime_tasks WHERE session_id=? AND owner=?').get(session.id, owner).n;
+        if (count >= MAX_TASKS)
+            throw new DodoError('RESOURCE_LIMIT', `at most ${MAX_TASKS} tasks per runtime session`);
+        const job = this.services.jobs.getJobChecked(jobId, this.services.workspaceId);
+        if (job.principal !== ctx.principal.grantId)
+            throw new DodoError('FORBIDDEN', 'runtime tasks can attach only to jobs created by this OAuth grant');
+        const id = newId('rtask'), now = Date.now();
+        this.services.store.db.prepare('INSERT INTO runtime_tasks(id,session_id,workspace_id,owner,job_id,kind,created_at) VALUES (?,?,?,?,?,?,?)')
+            .run(id, session.id, this.services.workspaceId, owner, jobId, kind, now);
+        return this.taskData({ id, session_id: session.id, workspace_id: this.services.workspaceId, owner, job_id: jobId, kind, created_at: now });
+    }
+    observeTask(ctx, sessionId, taskId, reportPath) {
+        this.check();
+        liveAccess(ctx, 'dodo:read');
+        const owner = actorKey(ctx.principal), session = this.requireSession(sessionId, owner, false), task = this.requireTask(session.id, taskId, owner);
+        const payload = this.taskPayload(task, reportPath);
+        return { task: this.taskData(task), evidence: this.putEvidence(session, owner, task.kind, `job:${task.job_id}${reportPath ? `:report:${reportPath}` : ''}`, payload) };
+    }
+    cancelTask(ctx, sessionId, taskId) {
+        this.check();
+        liveAccess(ctx, 'dodo:exec');
+        const owner = actorKey(ctx.principal), session = this.requireSession(sessionId, owner, false), task = this.requireTask(session.id, taskId, owner);
+        const result = this.services.jobs.cancel(task.job_id, this.services.workspaceId);
+        return { taskId: task.id, jobId: task.job_id, status: result.status };
+    }
+    async collectBrowser(ctx, sessionId, browserSessionId) {
+        this.check();
+        liveAccess(ctx, 'dodo:read');
+        const owner = actorKey(ctx.principal), session = this.requireSession(sessionId, owner, false);
+        const browser = this.services.multimodal?.browser;
+        if (!browser)
+            throw new DodoError('NOT_SUPPORTED', 'browser runtime collection is unavailable in this build');
+        const observation = await browser.observe(ctx.principal, browserSessionId);
+        liveAccess(ctx, 'dodo:read');
+        const safe = await browser.verifyObservation(ctx.principal, browserSessionId, observation.observationId);
+        const payload = {
+            browserSessionId, observationId: observation.observationId, url: safe.url,
+            titleHash: sha256Bytes(observation.title), domHash: sha256Bytes(JSON.stringify({ text: observation.text, elements: observation.elements })),
+            screenshotHash: observation.asset.sha256, elementCount: observation.elements.length, mediaCount: observation.media.length,
+            consoleCount: observation.console.length, networkCount: observation.network.length,
+            blockedNetworkCount: observation.network.filter((entry) => entry.startsWith('BLOCKED ')).length,
+            webSocketPolicy: 'blocked', timing: safe.timing, truncated: observation.truncated,
+        };
+        const evidence = this.putEvidence(session, owner, 'browser', `browser:${browserSessionId}:${observation.observationId}`, payload, safe.sourceHash);
+        return { observation, evidence };
+    }
+    snapshot(ctx, sessionId) {
+        this.check();
+        liveAccess(ctx, 'dodo:read');
+        const owner = actorKey(ctx.principal), session = this.requireSession(sessionId, owner, false), payload = this.snapshotPayload(ctx);
+        return this.putEvidence(session, owner, 'snapshot', `workspace:${this.services.workspaceId}`, payload);
+    }
+    async evidence(ctx, sessionId, evidenceId, refresh) {
+        this.check();
+        liveAccess(ctx, 'dodo:read');
+        this.recover();
+        const owner = actorKey(ctx.principal), session = this.requireSession(sessionId, owner, true);
+        let row = this.services.store.db.prepare('SELECT * FROM runtime_evidence WHERE id=? AND session_id=? AND workspace_id=? AND owner=?')
+            .get(evidenceId, session.id, this.services.workspaceId, owner);
+        if (!row)
+            throw new DodoError('NOT_FOUND', 'runtime evidence was not found for this session, workspace and client');
+        if (refresh && row.status === 'CURRENT')
+            row = await this.refreshEvidence(ctx, row);
+        return this.evidenceData(row);
+    }
+    async diagnose(ctx, sessionId, evidenceIds) {
+        this.check();
+        liveAccess(ctx, 'dodo:read');
+        if (!evidenceIds.length)
+            throw new DodoError('INVALID_INPUT', 'provide at least one runtime evidence ID');
+        const evidence = await Promise.all(evidenceIds.map((id) => this.evidence(ctx, sessionId, id, true)));
+        const facts = [], observations = [], inferences = [];
+        for (const item of evidence) {
+            facts.push(`${item.kind} evidence ${item.evidenceId} is ${item.status} and source-hash bound`);
+            const p = item.payload;
+            if (item.kind === 'process' || item.kind === 'test' || item.kind === 'container') {
+                observations.push(`task ${String(p['taskId'])} status=${String(p['status'])} exitCode=${String(p['exitCode'])}`);
+                if (p['status'] === 'exited' && p['exitCode'] === 0)
+                    inferences.push({ statement: 'The observed process completed successfully at the OS process level.', confidence: 'high', evidenceIds: [item.evidenceId] });
+                else if (p['status'] !== 'running')
+                    inferences.push({ statement: 'The observed process did not complete successfully; inspect bounded job output before changing code.', confidence: 'high', evidenceIds: [item.evidenceId] });
+            }
+            else if (item.kind === 'browser') {
+                observations.push(`browser observation recorded ${String(p['elementCount'])} elements, ${String(p['consoleCount'])} console events and ${String(p['blockedNetworkCount'])} blocked network requests`);
+                if (Number(p['blockedNetworkCount']) > 0)
+                    inferences.push({ statement: 'Blocked browser requests may explain missing runtime behavior.', confidence: 'medium', evidenceIds: [item.evidenceId] });
+            }
+            else {
+                observations.push(`workspace snapshot contains ${String(p['fileCount'])} guarded file metadata entries and ${String(p['rollbackCandidates']?.length ?? 0)} rollback candidates`);
+            }
+        }
+        return RuntimeDiagnosis.parse({
+            sessionId, facts, observations, inferences,
+            limitations: ['Diagnosis is deterministic over bounded metadata and hashes; it does not inspect raw stdout, secrets, cookies, headers, environment values or hidden browser inputs.', 'Process exit success does not by itself prove product behavior; verify source and user-visible state.'],
+            trust: 'untrusted_runtime_evidence',
+        });
+    }
+    /** Bounded current evidence used by Context Engine; same caller/workspace only. */
+    contextHits(ctx, terms, limit) {
+        this.check();
+        liveAccess(ctx, 'dodo:read');
+        this.recover();
+        const owner = actorKey(ctx.principal);
+        const rows = this.services.store.db.prepare("SELECT * FROM runtime_evidence WHERE workspace_id=? AND owner=? AND status='CURRENT' AND expires_at>? ORDER BY created_at DESC LIMIT 200")
+            .all(this.services.workspaceId, owner, Date.now());
+        const wanted = terms.map((term) => term.toLocaleLowerCase('en-US'));
+        return rows.map((row) => {
+            const payload = this.parsePayload(row.payload), haystack = `${row.kind} ${row.source_ref} ${JSON.stringify(payload)}`.toLocaleLowerCase('en-US');
+            const matched = wanted.filter((term) => haystack.includes(term)).length;
+            return { row, payload, matched };
+        }).filter((item) => wanted.length === 0 || item.matched > 0).sort((a, b) => b.matched - a.matched || b.row.created_at - a.row.created_at).slice(0, limit).map(({ row, payload, matched }) => ({
+            evidenceId: row.id,
+            claim: this.safeClaim(row.kind, payload),
+            contentHash: row.content_hash,
+            score: 68 + Math.min(16, matched * 4),
+            limitations: ['Bounded runtime metadata; raw command/browser data is intentionally not retained.'],
+        }));
+    }
+    manifest(ctx) {
+        this.check();
+        liveAccess(ctx, 'dodo:read');
+        this.recover();
+        const owner = actorKey(ctx.principal);
+        const rows = this.services.store.db.prepare("SELECT id,content_hash,status,last_verified_at FROM runtime_evidence WHERE workspace_id=? AND owner=? AND expires_at>? ORDER BY id")
+            .all(this.services.workspaceId, owner, Date.now());
+        return digestOf(rows);
+    }
+    dependencyHash(ctx, evidenceId) {
+        const owner = actorKey(ctx.principal);
+        const row = this.services.store.db.prepare("SELECT content_hash,status,expires_at FROM runtime_evidence WHERE id=? AND workspace_id=? AND owner=?")
+            .get(evidenceId, this.services.workspaceId, owner);
+        return row && row.status === 'CURRENT' && row.expires_at > Date.now() ? row.content_hash : undefined;
+    }
+    taskPayload(task, reportPath) {
+        const job = this.services.jobs.getJobChecked(task.job_id, this.services.workspaceId);
+        if (job.principal !== this.grantForOwner(task.owner))
+            throw new DodoError('FORBIDDEN', 'runtime task ownership no longer matches its job');
+        const stdout = this.services.jobs.inlineOutput(job.id, this.services.workspaceId, 'stdout', OUTPUT_SAMPLE_BYTES);
+        const stderr = this.services.jobs.inlineOutput(job.id, this.services.workspaceId, 'stderr', OUTPUT_SAMPLE_BYTES);
+        const payload = {
+            taskId: task.id, jobId: job.id, kind: task.kind, status: job.status, exitCode: job.exitCode, signal: job.signal,
+            startedAt: job.startedAt, endedAt: job.endedAt, timeoutMs: job.timeoutMs,
+            durationMs: job.startedAt !== null && job.endedAt !== null ? Math.max(0, job.endedAt - job.startedAt) : null,
+            stdout: { bytes: stdout.totalBytes, sampleSha256: sha256Bytes(`${stdout.content}${stdout.tail ?? ''}`), truncated: stdout.truncated },
+            stderr: { bytes: stderr.totalBytes, sampleSha256: sha256Bytes(`${stderr.content}${stderr.tail ?? ''}`), truncated: stderr.truncated },
+        };
+        if (reportPath)
+            payload['testReport'] = this.testReport(reportPath);
+        return payload;
+    }
+    /** Resolve the grant id for a hashed owner through the attached job, without storing or exposing it in evidence. */
+    grantForOwner(owner) {
+        const row = this.services.store.db.prepare('SELECT j.principal FROM runtime_tasks t JOIN jobs j ON j.id=t.job_id WHERE t.owner=? ORDER BY t.created_at DESC LIMIT 1').get(owner);
+        return row?.principal ?? '';
+    }
+    testReport(reportPath) {
+        const file = this.services.wfs.readTextFile(reportPath, 2 * 1024 * 1024);
+        let value;
+        try {
+            value = JSON.parse(file.text);
+        }
+        catch {
+            throw new DodoError('INVALID_INPUT', 'test report must be valid JSON');
+        }
+        const root = value && typeof value === 'object' ? value : {};
+        const number = (...keys) => { for (const key of keys)
+            if (typeof root[key] === 'number' && Number.isFinite(root[key]))
+                return Math.max(0, Math.trunc(root[key])); return null; };
+        return { path: file.rel, hash: file.hash, total: number('numTotalTests', 'total'), passed: number('numPassedTests', 'passed'), failed: number('numFailedTests', 'failed'), skipped: number('numPendingTests', 'skipped'), success: typeof root['success'] === 'boolean' ? root['success'] : null };
+    }
+    snapshotPayload(ctx) {
+        const limit = Math.min(10_000, this.services.limits.semanticFilesMax * 4), files = [];
+        for (const entry of this.services.wfs.walk({ maxEntries: limit + 1, maxDepth: 64 })) {
+            if (entry.stat.isFile())
+                files.push({ path: entry.rel, bytes: entry.stat.size, mtimeMs: entry.stat.mtimeMs, ctimeMs: entry.stat.ctimeMs });
+            if (files.length > limit)
+                break;
+        }
+        const visible = files.slice(0, limit), manifestHash = digestOf(visible);
+        const rollbackCandidates = this.services.store.listChangesets(this.services.workspaceId, 50)
+            .filter((change) => change.principal === ctx.principal.grantId && change.kind === 'apply' && change.status === 'committed')
+            .map((change) => ({ changesetId: change.id, createdAt: change.createdAt, summaryHash: sha256Bytes(change.summary ?? '') }));
+        return { manifestHash, fileCount: visible.length, truncated: files.length > limit, rollbackCandidates, note: 'Snapshot stores guarded file metadata hash only. Rollback remains an explicit rollback_changes call with its existing conflict checks.' };
+    }
+    async refreshEvidence(ctx, row) {
+        let payload, sourceHash, reason = null;
+        try {
+            if (row.kind === 'process' || row.kind === 'test' || row.kind === 'container') {
+                const taskId = String(this.parsePayload(row.payload)['taskId']);
+                const task = this.requireTask(row.session_id, taskId, row.owner);
+                payload = this.taskPayload(task, typeof this.parsePayload(row.payload)['testReport']?.['path'] === 'string' ? String(this.parsePayload(row.payload)['testReport']['path']) : undefined);
+            }
+            else if (row.kind === 'browser') {
+                const old = this.parsePayload(row.payload), browser = this.services.multimodal?.browser;
+                if (!browser)
+                    throw new DodoError('NOT_SUPPORTED', 'browser unavailable');
+                const verified = await browser.verifyObservation(ctx.principal, String(old['browserSessionId']), String(old['observationId']));
+                sourceHash = verified.sourceHash;
+                payload = old;
+            }
+            else
+                payload = this.snapshotPayload(ctx);
+        }
+        catch (error) {
+            reason = `source recheck failed (${toDodoError(error).code})`;
+        }
+        const nextSource = sourceHash ?? (payload ? digestOf(payload) : row.source_hash);
+        const status = reason || nextSource !== row.source_hash ? 'STALE' : 'CURRENT';
+        if (!reason && status === 'STALE')
+            reason = 'source hash changed since evidence was recorded';
+        // Evidence is immutable: a changed source marks the original record stale.
+        // A fresh runtime_task_observe/runtime_snapshot call creates a new record.
+        this.services.store.db.prepare('UPDATE runtime_evidence SET status=?,stale_reason=?,last_verified_at=? WHERE id=?')
+            .run(status, reason, Date.now(), row.id);
+        return this.services.store.db.prepare('SELECT * FROM runtime_evidence WHERE id=?').get(row.id);
+    }
+    putEvidence(session, owner, kind, sourceRef, payload, explicitSourceHash) {
+        this.enforceEvidenceQuota(session.id, owner);
+        const sourceHash = explicitSourceHash ?? digestOf(payload), contentHash = digestOf(payload), now = Date.now();
+        const existing = this.services.store.db.prepare('SELECT * FROM runtime_evidence WHERE session_id=? AND owner=? AND kind=? AND source_ref=? AND source_hash=?')
+            .get(session.id, owner, kind, sourceRef, sourceHash);
+        if (existing) {
+            this.services.store.db.prepare('UPDATE runtime_evidence SET last_verified_at=? WHERE id=?').run(now, existing.id);
+            return this.evidenceData({ ...existing, last_verified_at: now });
+        }
+        const id = newId('runtimeev');
+        this.services.store.db.prepare(`INSERT INTO runtime_evidence(id,session_id,workspace_id,owner,kind,payload,source_ref,source_hash,content_hash,status,stale_reason,created_at,last_verified_at,expires_at)
+      VALUES (?,?,?,?,?,?,?,?,?,'CURRENT',NULL,?,?,?)`).run(id, session.id, this.services.workspaceId, owner, kind, JSON.stringify(payload), sourceRef, sourceHash, contentHash, now, now, now + EVIDENCE_TTL_MS);
+        return this.evidenceData(this.services.store.db.prepare('SELECT * FROM runtime_evidence WHERE id=?').get(id));
+    }
+    enforceEvidenceQuota(sessionId, owner) {
+        const local = this.services.store.db.prepare('SELECT COUNT(*) AS n FROM runtime_evidence WHERE session_id=? AND owner=?').get(sessionId, owner).n;
+        const total = this.services.store.db.prepare('SELECT COUNT(*) AS n FROM runtime_evidence WHERE workspace_id=? AND owner=?').get(this.services.workspaceId, owner).n;
+        if (local >= MAX_EVIDENCE_PER_SESSION || total >= MAX_EVIDENCE_TOTAL)
+            throw new DodoError('RESOURCE_LIMIT', 'runtime evidence retention quota reached; close old sessions or wait for expiry');
+    }
+    row(id, owner) { return this.services.store.db.prepare('SELECT * FROM runtime_sessions WHERE id=? AND workspace_id=? AND owner=?').get(id, this.services.workspaceId, owner); }
+    requireSession(id, owner, allowClosed) {
+        const row = this.row(id, owner);
+        if (!row)
+            throw new DodoError('NOT_FOUND', 'runtime session was not found for this workspace and client');
+        if (!allowClosed && row.status !== 'OPEN')
+            throw new DodoError('CONFLICT', `runtime session is ${row.status.toLowerCase()}`);
+        if (row.status === 'OPEN')
+            this.services.store.db.prepare('UPDATE runtime_sessions SET last_seen_at=? WHERE id=?').run(Date.now(), id);
+        return { ...row, last_seen_at: row.status === 'OPEN' ? Date.now() : row.last_seen_at };
+    }
+    taskRows(sessionId, owner) { return this.services.store.db.prepare('SELECT * FROM runtime_tasks WHERE session_id=? AND workspace_id=? AND owner=? ORDER BY created_at DESC').all(sessionId, this.services.workspaceId, owner); }
+    requireTask(sessionId, id, owner) { const row = this.services.store.db.prepare('SELECT * FROM runtime_tasks WHERE id=? AND session_id=? AND workspace_id=? AND owner=?').get(id, sessionId, this.services.workspaceId, owner); if (!row)
+        throw new DodoError('NOT_FOUND', 'runtime task was not found for this session, workspace and client'); return row; }
+    sessionData(row) { return RuntimeSession.parse({ schemaVersion: RUNTIME_SCHEMA_VERSION, sessionId: row.id, label: row.label, status: row.status, workspaceId: row.workspace_id, openedEpoch: row.opened_epoch, createdAt: row.created_at, lastSeenAt: row.last_seen_at, expiresAt: row.expires_at, closedAt: row.closed_at }); }
+    taskData(row) { const job = this.services.jobs.getJobChecked(row.job_id, this.services.workspaceId); return RuntimeTask.parse({ taskId: row.id, sessionId: row.session_id, jobId: row.job_id, kind: row.kind, status: job.status, exitCode: job.exitCode, signal: job.signal, createdAt: row.created_at, startedAt: job.startedAt, endedAt: job.endedAt, timeoutMs: job.timeoutMs }); }
+    evidenceData(row) { return RuntimeEvidence.parse({ schemaVersion: RUNTIME_SCHEMA_VERSION, evidenceId: row.id, sessionId: row.session_id, kind: row.kind, status: row.status, sourceRef: row.source_ref, sourceHash: row.source_hash, contentHash: row.content_hash, payload: this.parsePayload(row.payload), staleReason: row.stale_reason, createdAt: row.created_at, lastVerifiedAt: row.last_verified_at, expiresAt: row.expires_at, trust: 'untrusted_runtime_evidence' }); }
+    parsePayload(value) { try {
+        const parsed = JSON.parse(value);
+        return parsed && typeof parsed === 'object' && !Array.isArray(parsed) ? parsed : {};
+    }
+    catch {
+        return {};
+    } }
+    safeClaim(kind, payload) { if (kind === 'snapshot')
+        return `Runtime snapshot: ${String(payload['fileCount'])} guarded files; manifest ${String(payload['manifestHash'])}`; if (kind === 'browser')
+        return `Browser runtime observation: ${String(payload['elementCount'])} elements, ${String(payload['consoleCount'])} console events, ${String(payload['blockedNetworkCount'])} blocked requests`; return `${kind} runtime task ${String(payload['taskId'])}: status ${String(payload['status'])}, exit ${String(payload['exitCode'])}`; }
+    recover() {
+        const now = Date.now();
+        this.services.store.db.prepare("UPDATE runtime_sessions SET status='EXPIRED',closed_at=? WHERE status='OPEN' AND expires_at<=?").run(now, now);
+        // Expired evidence handles cease to exist and free their bounded quota.
+        this.services.store.db.prepare('DELETE FROM runtime_evidence WHERE expires_at<=?').run(now);
+        // Keep closed/expired session metadata for one evidence-retention window, then
+        // cascade task/evidence references. Jobs themselves remain in the job store.
+        this.services.store.db.prepare("DELETE FROM runtime_sessions WHERE status IN ('CLOSED','EXPIRED') AND COALESCE(closed_at,expires_at)<=?").run(now - EVIDENCE_TTL_MS);
+    }
+    check() { if (this.closed)
+        throw new DodoError('STALE_WORKSPACE', 'runtime workspace is closed'); }
+}
+//# sourceMappingURL=runtimeService.js.map

package/dist/services/runtime/runtimeService.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtimeService.js","sourceRoot":"","sources":["../../../src/services/runtime/runtimeService.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAEzD,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAClE,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,0BAA0B,CAAC;AAChE,OAAO,EACL,sBAAsB,EACtB,gBAAgB,EAChB,eAAe,EACf,cAAc,EACd,oBAAoB,EACpB,WAAW,GAIZ,MAAM,gBAAgB,CAAC;AAExB,MAAM,kBAAkB,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAC1C,MAAM,cAAc,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAC3C,MAAM,eAAe,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAC5C,MAAM,YAAY,GAAG,EAAE,CAAC;AACxB,MAAM,qBAAqB,GAAG,GAAG,CAAC;AAClC,MAAM,SAAS,GAAG,EAAE,CAAC;AACrB,MAAM,wBAAwB,GAAG,GAAG,CAAC;AACrC,MAAM,kBAAkB,GAAG,IAAI,CAAC;AAChC,MAAM,mBAAmB,GAAG,EAAE,GAAG,IAAI,CAAC;AAatC,+IAA+I;AAC/I,MAAM,OAAO,cAAc;IAGI;IAFrB,MAAM,GAAG,KAAK,CAAC;IAEvB,YAA6B,QAAqB;QAArB,aAAQ,GAAR,QAAQ,CAAa;QAAI,IAAI,CAAC,OAAO,EAAE,CAAC;IAAC,CAAC;IAEvE,KAAK,KAAW,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC,CAAC;IAErC,IAAI,CAAC,GAAY,EAAE,KAAa,EAAE,UAAkB;QAClD,IAAI,CAAC,KAAK,EAAE,CAAC;QAAC,UAAU,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC;QAAC,IAAI,CAAC,OAAO,EAAE,CAAC;QAC5D,MAAM,KAAK,GAAG,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QACtC,MAAM,KAAK,GAAI,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC,OAAO,CAAC,+FAA+F,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE,KAAK,CAAmB,CAAC,CAAC,CAAC;QACzM,IAAI,KAAK,IAAI,YAAY;YAAE,MAAM,IAAI,SAAS,CAAC,gBAAgB,EAAE,WAAW,YAAY,iDAAiD,CAAC,CAAC;QAC3I,MAAM,QAAQ,GAAI,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC,OAAO,CAAC,6EAA6E,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE,KAAK,CAAmB,CAAC,CAAC,CAAC;QAC1L,IAAI,QAAQ,IAAI,qBAAqB;YAAE,MAAM,IAAI,SAAS,CAAC,gBAAgB,EAAE,WAAW,qBAAqB,iFAAiF,CAAC,CAAC;QAChM,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,EAAE,EAAE,GAAG,KAAK,CAAC,SAAS,CAAC,EAAE,SAAS,GAAG,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,cAAc,EAAE,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,UAAU,GAAG,MAAM,IAAI,kBAAkB,CAAC,CAAC,CAAC;QACvJ,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC,OAAO,CAAC;2CACQ,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,SAAS,CAAC,CAAC;QACpI,OAAO,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,KAAK,CAAE,CAAC,CAAC;IAChD,CAAC;IAED,MAAM,CAAC,GAAY,EAAE,SAAiB;QACpC,IAAI,CAAC,KAAK,EAAE,CAAC;QAAC,UAAU,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC;QAAC,IAAI,CAAC,OAAO,EAAE,CAAC;QAC3D,MAAM,KAAK,GAAG,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,OAAO,GAAG,IAAI,CAAC,cAAc,CAAC,SAAS,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;QAC7F,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC;QAChF,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC,OAAO,CAAC,kGAAkG,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,EAAE,KAAK,CAAyC,CAAC;QACjN,MAAM,EAAE,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACvD,OAAO,oBAAoB,CAAC,KAAK,CAAC;YAChC,OAAO,EAAE,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,EAAE,KAAK;YACzC,QAAQ,EAAE,EAAE,OAAO,EAAE,EAAE,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,EAAE,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE;YAC3G,aAAa,EAAE,IAAI;YACnB,IAAI,EAAE,wIAAwI;SAC/I,CAAC,CAAC;IACL,CAAC;IAED,WAAW,CAAC,GAAY;QACtB,IAAI,CAAC,KAAK,EAAE,CAAC;QAAC,UAAU,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC;QAAC,IAAI,CAAC,OAAO,EAAE,CAAC;QAC3D,MAAM,KAAK,GAAG,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QACtC,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC,OAAO,CAAC;;;gHAGiE,CAAC,CAAC,GAAG,CAC7G,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE,KAAK,EAAE,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE,KAAK,EAAE,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE,KAAK,CAC5C,CAAC;QAC7D,OAAO,EAAE,aAAa,EAAE,sBAAsB,EAAE,SAAS,EAAE,IAAI,EAAE,GAAG,GAAG,EAAE,cAAc,EAAE,EAAE,EAAE,eAAe,EAAE,KAAK,EAAE,oBAAoB,EAAE,KAAK,EAAE,CAAC;IACrJ,CAAC;IAED,YAAY,CAAC,GAAY,EAAE,SAAiB;QAC1C,IAAI,CAAC,KAAK,EAAE,CAAC;QAAC,UAAU,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC;QAC5C,MAAM,KAAK,GAAG,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,OAAO,GAAG,IAAI,CAAC,cAAc,CAAC,SAAS,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;QAC7F,IAAI,OAAO,CAAC,MAAM,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;QAClE,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS;YAAE,MAAM,IAAI,SAAS,CAAC,UAAU,EAAE,4BAA4B,CAAC,CAAC;QAChG,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC;QACjK,IAAI,OAAO,CAAC,MAAM;YAAE,MAAM,IAAI,SAAS,CAAC,UAAU,EAAE,GAAG,OAAO,CAAC,MAAM,oCAAoC,EAAE,EAAE,QAAQ,EAAE,wFAAwF,EAAE,CAAC,CAAC;QACnN,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC,OAAO,CAAC,+FAA+F,CAAC,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,OAAO,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;QACjK,OAAO,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,EAAE,KAAK,CAAE,CAAC,CAAC;IACxD,CAAC;IAED,WAAW,CAAC,GAAY,EAAE,SAAiB;QACzC,IAAI,CAAC,KAAK,EAAE,CAAC;QAAC,UAAU,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC;QAC3C,IAAI,CAAC,cAAc,CAAC,SAAS,EAAE,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,KAAK,CAAC,CAAC;IACjE,CAAC;IAED,UAAU,CAAC,GAAY,EAAE,SAAiB,EAAE,KAAa,EAAE,IAAqB;QAC9E,IAAI,CAAC,KAAK,EAAE,CAAC;QAAC,UAAU,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC;QAC3C,MAAM,KAAK,GAAG,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,OAAO,GAAG,IAAI,CAAC,cAAc,CAAC,SAAS,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;QAC9F,MAAM,KAAK,GAAI,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC,OAAO,CAAC,wEAAwE,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,EAAE,KAAK,CAAmB,CAAC,CAAC,CAAC;QACnK,IAAI,KAAK,IAAI,SAAS;YAAE,MAAM,IAAI,SAAS,CAAC,gBAAgB,EAAE,WAAW,SAAS,4BAA4B,CAAC,CAAC;QAChH,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,EAAE,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;QAC/E,IAAI,GAAG,CAAC,SAAS,KAAK,GAAG,CAAC,SAAS,CAAC,OAAO;YAAE,MAAM,IAAI,SAAS,CAAC,WAAW,EAAE,mEAAmE,CAAC,CAAC;QACnJ,MAAM,EAAE,GAAG,KAAK,CAAC,OAAO,CAAC,EAAE,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC5C,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC,OAAO,CAAC,2GAA2G,CAAC;aACxI,GAAG,CAAC,EAAE,EAAE,OAAO,CAAC,EAAE,EAAE,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;QAC3E,OAAO,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,UAAU,EAAE,OAAO,CAAC,EAAE,EAAE,YAAY,EAAE,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC,CAAC;IAC7I,CAAC;IAED,WAAW,CAAC,GAAY,EAAE,SAAiB,EAAE,MAAc,EAAE,UAAmB;QAC9E,IAAI,CAAC,KAAK,EAAE,CAAC;QAAC,UAAU,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC;QAC3C,MAAM,KAAK,GAAG,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,OAAO,GAAG,IAAI,CAAC,cAAc,CAAC,SAAS,EAAE,KAAK,EAAE,KAAK,CAAC,EAAE,IAAI,GAAG,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC;QAClJ,MAAM,OAAO,GAAG,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;QACnD,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,IAAI,EAAE,OAAO,IAAI,CAAC,MAAM,GAAG,UAAU,CAAC,CAAC,CAAC,WAAW,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,OAAO,CAAC,EAAE,CAAC;IACzK,CAAC;IAED,UAAU,CAAC,GAAY,EAAE,SAAiB,EAAE,MAAc;QACxD,IAAI,CAAC,KAAK,EAAE,CAAC;QAAC,UAAU,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC;QAC3C,MAAM,KAAK,GAAG,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,OAAO,GAAG,IAAI,CAAC,cAAc,CAAC,SAAS,EAAE,KAAK,EAAE,KAAK,CAAC,EAAE,IAAI,GAAG,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC;QAClJ,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;QACjF,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC;IACxE,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,GAAY,EAAE,SAAiB,EAAE,gBAAwB;QAC5E,IAAI,CAAC,KAAK,EAAE,CAAC;QAAC,UAAU,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC;QAC3C,MAAM,KAAK,GAAG,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,OAAO,GAAG,IAAI,CAAC,cAAc,CAAC,SAAS,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;QAC9F,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAC;QAClD,IAAI,CAAC,OAAO;YAAE,MAAM,IAAI,SAAS,CAAC,eAAe,EAAE,yDAAyD,CAAC,CAAC;QAC9G,MAAM,WAAW,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,EAAE,gBAAgB,CAAC,CAAC;QAC3E,UAAU,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC;QAC7B,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,iBAAiB,CAAC,GAAG,CAAC,SAAS,EAAE,gBAAgB,EAAE,WAAW,CAAC,aAAa,CAAC,CAAC;QACzG,MAAM,OAAO,GAAG;YACd,gBAAgB,EAAE,aAAa,EAAE,WAAW,CAAC,aAAa,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG;YACzE,SAAS,EAAE,WAAW,CAAC,WAAW,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,WAAW,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,WAAW,CAAC,IAAI,EAAE,QAAQ,EAAE,WAAW,CAAC,QAAQ,EAAE,CAAC,CAAC;YAC3I,cAAc,EAAE,WAAW,CAAC,KAAK,CAAC,MAAM,EAAE,YAAY,EAAE,WAAW,CAAC,QAAQ,CAAC,MAAM,EAAE,UAAU,EAAE,WAAW,CAAC,KAAK,CAAC,MAAM;YACzH,YAAY,EAAE,WAAW,CAAC,OAAO,CAAC,MAAM,EAAE,YAAY,EAAE,WAAW,CAAC,OAAO,CAAC,MAAM;YAClF,mBAAmB,EAAE,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,CAAC,MAAM;YAC/F,eAAe,EAAE,SAAS,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,SAAS,EAAE,WAAW,CAAC,SAAS;SAClF,CAAC;QACF,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,WAAW,gBAAgB,IAAI,WAAW,CAAC,aAAa,EAAE,EAAE,OAAO,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;QACnJ,OAAO,EAAE,WAAW,EAAE,QAAQ,EAAE,CAAC;IACnC,CAAC;IAED,QAAQ,CAAC,GAAY,EAAE,SAAiB;QACtC,IAAI,CAAC,KAAK,EAAE,CAAC;QAAC,UAAU,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC;QAC3C,MAAM,KAAK,GAAG,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,OAAO,GAAG,IAAI,CAAC,cAAc,CAAC,SAAS,EAAE,KAAK,EAAE,KAAK,CAAC,EAAE,OAAO,GAAG,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC;QACnI,OAAO,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,aAAa,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE,EAAE,OAAO,CAAC,CAAC;IACzG,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,GAAY,EAAE,SAAiB,EAAE,UAAkB,EAAE,OAAgB;QAClF,IAAI,CAAC,KAAK,EAAE,CAAC;QAAC,UAAU,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC;QAAC,IAAI,CAAC,OAAO,EAAE,CAAC;QAC3D,MAAM,KAAK,GAAG,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,OAAO,GAAG,IAAI,CAAC,cAAc,CAAC,SAAS,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;QAC7F,IAAI,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC,OAAO,CAAC,2FAA2F,CAAC;aAClI,GAAG,CAAC,UAAU,EAAE,OAAO,CAAC,EAAE,EAAE,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE,KAAK,CAA4B,CAAC;QAC5F,IAAI,CAAC,GAAG;YAAE,MAAM,IAAI,SAAS,CAAC,WAAW,EAAE,uEAAuE,CAAC,CAAC;QACpH,IAAI,OAAO,IAAI,GAAG,CAAC,MAAM,KAAK,SAAS;YAAE,GAAG,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QACpF,OAAO,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC;IAChC,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,GAAY,EAAE,SAAiB,EAAE,WAAqB;QACnE,IAAI,CAAC,KAAK,EAAE,CAAC;QAAC,UAAU,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC;QAC3C,IAAI,CAAC,WAAW,CAAC,MAAM;YAAE,MAAM,IAAI,SAAS,CAAC,eAAe,EAAE,0CAA0C,CAAC,CAAC;QAC1G,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,SAAS,EAAE,EAAE,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;QACrG,MAAM,KAAK,GAAa,EAAE,EAAE,YAAY,GAAa,EAAE,EAAE,UAAU,GAA+F,EAAE,CAAC;QACrK,KAAK,MAAM,IAAI,IAAI,QAAQ,EAAE,CAAC;YAC5B,KAAK,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,IAAI,aAAa,IAAI,CAAC,UAAU,OAAO,IAAI,CAAC,MAAM,wBAAwB,CAAC,CAAC;YAC/F,MAAM,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC;YACvB,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,IAAI,IAAI,CAAC,IAAI,KAAK,MAAM,IAAI,IAAI,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;gBACjF,YAAY,CAAC,IAAI,CAAC,QAAQ,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,WAAW,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,aAAa,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,EAAE,CAAC,CAAC;gBACjH,IAAI,CAAC,CAAC,QAAQ,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC;oBAAE,UAAU,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,sEAAsE,EAAE,UAAU,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;qBAC3M,IAAI,CAAC,CAAC,QAAQ,CAAC,KAAK,SAAS;oBAAE,UAAU,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,sGAAsG,EAAE,UAAU,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;YACjO,CAAC;iBAAM,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;gBACnC,YAAY,CAAC,IAAI,CAAC,gCAAgC,MAAM,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,cAAc,MAAM,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,uBAAuB,MAAM,CAAC,CAAC,CAAC,qBAAqB,CAAC,CAAC,2BAA2B,CAAC,CAAC;gBACtM,IAAI,MAAM,CAAC,CAAC,CAAC,qBAAqB,CAAC,CAAC,GAAG,CAAC;oBAAE,UAAU,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,gEAAgE,EAAE,UAAU,EAAE,QAAQ,EAAE,WAAW,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;YACnM,CAAC;iBAAM,CAAC;gBACN,YAAY,CAAC,IAAI,CAAC,+BAA+B,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,sCAAsC,MAAM,CAAE,CAAC,CAAC,oBAAoB,CAA2B,EAAE,MAAM,IAAI,CAAC,CAAC,sBAAsB,CAAC,CAAC;YAC9M,CAAC;QACH,CAAC;QACD,OAAO,gBAAgB,CAAC,KAAK,CAAC;YAC5B,SAAS,EAAE,KAAK,EAAE,YAAY,EAAE,UAAU;YAC1C,WAAW,EAAE,CAAC,sKAAsK,EAAE,uGAAuG,CAAC;YAC9R,KAAK,EAAE,4BAA4B;SACpC,CAAC,CAAC;IACL,CAAC;IAED,mFAAmF;IACnF,WAAW,CAAC,GAAY,EAAE,KAAe,EAAE,KAAa;QACtD,IAAI,CAAC,KAAK,EAAE,CAAC;QAAC,UAAU,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC;QAAC,IAAI,CAAC,OAAO,EAAE,CAAC;QAC3D,MAAM,KAAK,GAAG,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QACtC,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC,OAAO,CAAC,0IAA0I,CAAC;aACpL,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE,KAAK,EAAE,IAAI,CAAC,GAAG,EAAE,CAAkB,CAAC;QACtE,MAAM,MAAM,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,iBAAiB,CAAC,OAAO,CAAC,CAAC,CAAC;QACpE,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE;YACtB,MAAM,OAAO,GAAG,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,QAAQ,GAAG,GAAG,GAAG,CAAC,IAAI,IAAI,GAAG,CAAC,UAAU,IAAI,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,CAAC,iBAAiB,CAAC,OAAO,CAAC,CAAC;YACjJ,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC;YACxE,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;QACnC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,IAAI,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,GAAG,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,GAAG,CAAC,UAAU,GAAG,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC;YAC5L,UAAU,EAAE,GAAG,CAAC,EAAE;YAClB,KAAK,EAAE,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,EAAE,OAAO,CAAC;YACxC,WAAW,EAAE,GAAG,CAAC,YAAY;YAC7B,KAAK,EAAE,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,OAAO,GAAG,CAAC,CAAC;YACrC,WAAW,EAAE,CAAC,mFAAmF,CAAC;SACnG,CAAC,CAAC,CAAC;IACN,CAAC;IAED,QAAQ,CAAC,GAAY;QACnB,IAAI,CAAC,KAAK,EAAE,CAAC;QAAC,UAAU,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC;QAAC,IAAI,CAAC,OAAO,EAAE,CAAC;QAAC,MAAM,KAAK,GAAG,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAClG,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC,OAAO,CAAC,oIAAoI,CAAC;aAC9K,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE,KAAK,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;QACrD,OAAO,QAAQ,CAAC,IAAI,CAAC,CAAC;IACxB,CAAC;IAED,cAAc,CAAC,GAAY,EAAE,UAAkB;QAC7C,MAAM,KAAK,GAAG,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QACtC,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC,OAAO,CAAC,uGAAuG,CAAC;aAChJ,GAAG,CAAC,UAAU,EAAE,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE,KAAK,CAA6E,CAAC;QACjI,OAAO,GAAG,IAAI,GAAG,CAAC,MAAM,KAAK,SAAS,IAAI,GAAG,CAAC,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC;IACvG,CAAC;IAEO,WAAW,CAAC,IAAa,EAAE,UAAmB;QACpD,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;QACrF,IAAI,GAAG,CAAC,SAAS,KAAK,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC;YAAE,MAAM,IAAI,SAAS,CAAC,WAAW,EAAE,kDAAkD,CAAC,CAAC;QAC3I,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,EAAE,EAAE,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE,QAAQ,EAAE,mBAAmB,CAAC,CAAC;QACjH,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,EAAE,EAAE,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE,QAAQ,EAAE,mBAAmB,CAAC,CAAC;QACjH,MAAM,OAAO,GAA4B;YACvC,MAAM,EAAE,IAAI,CAAC,EAAE,EAAE,KAAK,EAAE,GAAG,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM;YAC/G,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS;YACxE,UAAU,EAAE,GAAG,CAAC,SAAS,KAAK,IAAI,IAAI,GAAG,CAAC,OAAO,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,CAAC,OAAO,GAAG,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI;YAC5G,MAAM,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,UAAU,EAAE,YAAY,EAAE,WAAW,CAAC,GAAG,MAAM,CAAC,OAAO,GAAG,MAAM,CAAC,IAAI,IAAI,EAAE,EAAE,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE;YACrI,MAAM,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,UAAU,EAAE,YAAY,EAAE,WAAW,CAAC,GAAG,MAAM,CAAC,OAAO,GAAG,MAAM,CAAC,IAAI,IAAI,EAAE,EAAE,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE;SACtI,CAAC;QACF,IAAI,UAAU;YAAE,OAAO,CAAC,YAAY,CAAC,GAAG,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;QACpE,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,oHAAoH;IAC5G,aAAa,CAAC,KAAa;QACjC,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC,OAAO,CAAC,yHAAyH,CAAC,CAAC,GAAG,CAAC,KAAK,CAAsC,CAAC;QACtN,OAAO,GAAG,EAAE,SAAS,IAAI,EAAE,CAAC;IAC9B,CAAC;IAEO,UAAU,CAAC,UAAkB;QACnC,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,YAAY,CAAC,UAAU,EAAE,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC,CAAC;QACzE,IAAI,KAAc,CAAC;QACnB,IAAI,CAAC;YAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC;YAAC,MAAM,IAAI,SAAS,CAAC,eAAe,EAAE,gCAAgC,CAAC,CAAC;QAAC,CAAC;QACxH,MAAM,IAAI,GAAG,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAgC,CAAC,CAAC,CAAC,EAAE,CAAC;QACxF,MAAM,MAAM,GAAG,CAAC,GAAG,IAAc,EAAiB,EAAE,GAAG,KAAK,MAAM,GAAG,IAAI,IAAI;YAAE,IAAI,OAAO,IAAI,CAAC,GAAG,CAAC,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;gBAAE,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAW,CAAC,CAAC,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,CAAC,CAAC;QACpN,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,GAAG,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,MAAM,CAAC,eAAe,EAAE,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,gBAAgB,EAAE,QAAQ,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,gBAAgB,EAAE,QAAQ,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,iBAAiB,EAAE,SAAS,CAAC,EAAE,OAAO,EAAE,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IACrS,CAAC;IAEO,eAAe,CAAC,GAAY;QAClC,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,gBAAgB,GAAG,CAAC,CAAC,EAAE,KAAK,GAA6E,EAAE,CAAC;QAChK,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,UAAU,EAAE,KAAK,GAAG,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC;YACpF,IAAI,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE;gBAAE,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,GAAG,EAAE,KAAK,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,EAAE,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;YAC3I,IAAI,KAAK,CAAC,MAAM,GAAG,KAAK;gBAAE,MAAM;QAClC,CAAC;QACD,MAAM,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,YAAY,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC;QACxE,MAAM,kBAAkB,GAAG,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,cAAc,CAAC,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE,EAAE,CAAC;aACzF,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,SAAS,KAAK,GAAG,CAAC,SAAS,CAAC,OAAO,IAAI,MAAM,CAAC,IAAI,KAAK,OAAO,IAAI,MAAM,CAAC,MAAM,KAAK,WAAW,CAAC;aAC1H,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,EAAE,WAAW,EAAE,MAAM,CAAC,EAAE,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,WAAW,EAAE,WAAW,CAAC,MAAM,CAAC,OAAO,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;QAC9H,OAAO,EAAE,YAAY,EAAE,SAAS,EAAE,OAAO,CAAC,MAAM,EAAE,SAAS,EAAE,KAAK,CAAC,MAAM,GAAG,KAAK,EAAE,kBAAkB,EAAE,IAAI,EAAE,wIAAwI,EAAE,CAAC;IAC1P,CAAC;IAEO,KAAK,CAAC,eAAe,CAAC,GAAY,EAAE,GAAgB;QAC1D,IAAI,OAA4C,EAAE,UAA8B,EAAE,MAAM,GAAkB,IAAI,CAAC;QAC/G,IAAI,CAAC;YACH,IAAI,GAAG,CAAC,IAAI,KAAK,SAAS,IAAI,GAAG,CAAC,IAAI,KAAK,MAAM,IAAI,GAAG,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;gBAC9E,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC;gBAChE,MAAM,IAAI,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,UAAU,EAAE,MAAM,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC;gBACjE,OAAO,GAAG,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,OAAQ,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,YAAY,CAAyC,EAAE,CAAC,MAAM,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAE,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,YAAY,CAA6B,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;YAChQ,CAAC;iBAAM,IAAI,GAAG,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;gBAClC,MAAM,GAAG,GAAG,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAC;gBACxF,IAAI,CAAC,OAAO;oBAAE,MAAM,IAAI,SAAS,CAAC,eAAe,EAAE,qBAAqB,CAAC,CAAC;gBAC1E,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,iBAAiB,CAAC,GAAG,CAAC,SAAS,EAAE,MAAM,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC,EAAE,MAAM,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;gBAC/H,UAAU,GAAG,QAAQ,CAAC,UAAU,CAAC;gBACjC,OAAO,GAAG,GAAG,CAAC;YAChB,CAAC;;gBAAM,OAAO,GAAG,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC;QAC7C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAAC,MAAM,GAAG,0BAA0B,WAAW,CAAC,KAAK,CAAC,CAAC,IAAI,GAAG,CAAC;QAAC,CAAC;QAClF,MAAM,UAAU,GAAG,UAAU,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;QACjF,MAAM,MAAM,GAAG,MAAM,IAAI,UAAU,KAAK,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;QAC9E,IAAI,CAAC,MAAM,IAAI,MAAM,KAAK,OAAO;YAAE,MAAM,GAAG,iDAAiD,CAAC;QAC9F,2EAA2E;QAC3E,2EAA2E;QAC3E,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC,OAAO,CAAC,mFAAmF,CAAC;aAChH,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;QAC3C,OAAO,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC,OAAO,CAAC,2CAA2C,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAgB,CAAC;IAChH,CAAC;IAEO,WAAW,CAAC,OAAmB,EAAE,KAAa,EAAE,IAAiC,EAAE,SAAiB,EAAE,OAAgC,EAAE,kBAA2B;QACzK,IAAI,CAAC,oBAAoB,CAAC,OAAO,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;QAC7C,MAAM,UAAU,GAAG,kBAAkB,IAAI,QAAQ,CAAC,OAAO,CAAC,EAAE,WAAW,GAAG,QAAQ,CAAC,OAAO,CAAC,EAAE,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC9G,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC,OAAO,CAAC,6GAA6G,CAAC;aAC3J,GAAG,CAAC,OAAO,CAAC,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,UAAU,CAA4B,CAAC;QAClF,IAAI,QAAQ,EAAE,CAAC;YAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC,OAAO,CAAC,2DAA2D,CAAC,CAAC,GAAG,CAAC,GAAG,EAAE,QAAQ,CAAC,EAAE,CAAC,CAAC;YAAC,OAAO,IAAI,CAAC,YAAY,CAAC,EAAE,GAAG,QAAQ,EAAE,gBAAgB,EAAE,GAAG,EAAE,CAAC,CAAC;QAAC,CAAC;QACtM,MAAM,EAAE,GAAG,KAAK,CAAC,WAAW,CAAC,CAAC;QAC9B,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC,OAAO,CAAC;sDACmB,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,OAAO,CAAC,EAAE,EAAE,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,SAAS,EAAE,UAAU,EAAE,WAAW,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,GAAG,eAAe,CAAC,CAAC;QAC9M,OAAO,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC,OAAO,CAAC,2CAA2C,CAAC,CAAC,GAAG,CAAC,EAAE,CAAgB,CAAC,CAAC;IAC/H,CAAC;IAEO,oBAAoB,CAAC,SAAiB,EAAE,KAAa;QAC3D,MAAM,KAAK,GAAI,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC,OAAO,CAAC,2EAA2E,CAAC,CAAC,GAAG,CAAC,SAAS,EAAE,KAAK,CAAmB,CAAC,CAAC,CAAC;QACrK,MAAM,KAAK,GAAI,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC,OAAO,CAAC,6EAA6E,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE,KAAK,CAAmB,CAAC,CAAC,CAAC;QACvL,IAAI,KAAK,IAAI,wBAAwB,IAAI,KAAK,IAAI,kBAAkB;YAAE,MAAM,IAAI,SAAS,CAAC,gBAAgB,EAAE,iFAAiF,CAAC,CAAC;IACjM,CAAC;IAEO,GAAG,CAAC,EAAU,EAAE,KAAa,IAA4B,OAAO,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC,OAAO,CAAC,0EAA0E,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE,KAAK,CAA2B,CAAC,CAAC,CAAC;IACjP,cAAc,CAAC,EAAU,EAAE,KAAa,EAAE,WAAoB;QACpE,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;QAAC,IAAI,CAAC,GAAG;YAAE,MAAM,IAAI,SAAS,CAAC,WAAW,EAAE,6DAA6D,CAAC,CAAC;QAC3I,IAAI,CAAC,WAAW,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM;YAAE,MAAM,IAAI,SAAS,CAAC,UAAU,EAAE,sBAAsB,GAAG,CAAC,MAAM,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;QAC7H,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM;YAAE,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC,OAAO,CAAC,uDAAuD,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,EAAE,EAAE,CAAC,CAAC;QACvI,OAAO,EAAE,GAAG,GAAG,EAAE,YAAY,EAAE,GAAG,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,YAAY,EAAE,CAAC;IACzF,CAAC;IACO,QAAQ,CAAC,SAAiB,EAAE,KAAa,IAAe,OAAO,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC,OAAO,CAAC,wGAAwG,CAAC,CAAC,GAAG,CAAC,SAAS,EAAE,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE,KAAK,CAAc,CAAC,CAAC,CAAC;IACxQ,WAAW,CAAC,SAAiB,EAAE,EAAU,EAAE,KAAa,IAAa,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC,OAAO,CAAC,wFAAwF,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE,KAAK,CAAwB,CAAC,CAAC,IAAI,CAAC,GAAG;QAAE,MAAM,IAAI,SAAS,CAAC,WAAW,EAAE,mEAAmE,CAAC,CAAC,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC;IACrZ,WAAW,CAAC,GAAe,IAAwB,OAAO,cAAc,CAAC,KAAK,CAAC,EAAE,aAAa,EAAE,sBAAsB,EAAE,SAAS,EAAE,GAAG,CAAC,EAAE,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,WAAW,EAAE,GAAG,CAAC,YAAY,EAAE,WAAW,EAAE,GAAG,CAAC,YAAY,EAAE,SAAS,EAAE,GAAG,CAAC,UAAU,EAAE,UAAU,EAAE,GAAG,CAAC,YAAY,EAAE,SAAS,EAAE,GAAG,CAAC,UAAU,EAAE,QAAQ,EAAE,GAAG,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,CAAC;IAChW,QAAQ,CAAC,GAAY,IAAqB,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC,CAAC,OAAO,WAAW,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,EAAE,EAAE,SAAS,EAAE,GAAG,CAAC,UAAU,EAAE,KAAK,EAAE,GAAG,CAAC,MAAM,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,SAAS,EAAE,GAAG,CAAC,UAAU,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,CAAC;IACjZ,YAAY,CAAC,GAAgB,IAAyB,OAAO,eAAe,CAAC,KAAK,CAAC,EAAE,aAAa,EAAE,sBAAsB,EAAE,UAAU,EAAE,GAAG,CAAC,EAAE,EAAE,SAAS,EAAE,GAAG,CAAC,UAAU,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,SAAS,EAAE,GAAG,CAAC,UAAU,EAAE,UAAU,EAAE,GAAG,CAAC,WAAW,EAAE,WAAW,EAAE,GAAG,CAAC,YAAY,EAAE,OAAO,EAAE,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,WAAW,EAAE,GAAG,CAAC,YAAY,EAAE,SAAS,EAAE,GAAG,CAAC,UAAU,EAAE,cAAc,EAAE,GAAG,CAAC,gBAAgB,EAAE,SAAS,EAAE,GAAG,CAAC,UAAU,EAAE,KAAK,EAAE,4BAA4B,EAAE,CAAC,CAAC,CAAC,CAAC;IACnf,YAAY,CAAC,KAAa,IAA6B,IAAI,CAAC;QAAC,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAAC,OAAO,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAiC,CAAC,CAAC,CAAC,EAAE,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,EAAE,CAAC;IAAC,CAAC,CAAC,CAAC;IACvO,SAAS,CAAC,IAAiC,EAAE,OAAgC,IAAY,IAAI,IAAI,KAAK,UAAU;QAAE,OAAO,qBAAqB,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,4BAA4B,MAAM,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO,gCAAgC,MAAM,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC,cAAc,MAAM,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC,oBAAoB,MAAM,CAAC,OAAO,CAAC,qBAAqB,CAAC,CAAC,mBAAmB,CAAC,CAAC,OAAO,GAAG,IAAI,iBAAiB,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,YAAY,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,UAAU,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IAC1kB,OAAO;QACb,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC,OAAO,CAAC,gGAAgG,CAAC,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QAC/I,wEAAwE;QACxE,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC,OAAO,CAAC,kDAAkD,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAC5F,+EAA+E;QAC/E,6EAA6E;QAC7E,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC,OAAO,CAAC,yGAAyG,CAAC,CAAC,GAAG,CAAC,GAAG,GAAG,eAAe,CAAC,CAAC;IACvK,CAAC;IACO,KAAK,KAAW,IAAI,IAAI,CAAC,MAAM;QAAE,MAAM,IAAI,SAAS,CAAC,iBAAiB,EAAE,6BAA6B,CAAC,CAAC,CAAC,CAAC;CAClH"}

package/dist/services/schedules/scheduleService.js

@@ -0,0 +1,198 @@
+import { z } from 'zod';
+import fs from 'node:fs';
+import { encodeFileIdentity } from '../../platform/fileIdentity.js';
+import { sandboxAvailability } from '../jobs/sandbox.js';
+import { CronExpressionParser } from 'cron-parser';
+import { DodoError } from '../../errors.js';
+import { digestOf, newId } from '../../util/hash.js';
+import { validateShellCommand } from '../jobs/commandInput.js';
+export const ScheduleInput = z.object({
+    name: z.string().min(1).max(120),
+    command: z.string().min(1).max(64 * 1024),
+    cwd: z.string().max(1024).default('.'),
+    cron: z.string().min(9).max(128).describe('Five-field cron, minute precision'),
+    timezone: z.string().min(1).max(100).default('UTC'),
+    expiresAt: z.number().int().positive().describe('Unix milliseconds; at most 30 days ahead'),
+    timeoutMs: z.number().int().min(1000).max(30 * 60_000).default(300_000),
+    sandbox: z.boolean().default(true),
+    network: z.boolean().default(false),
+}).strict();
+/** Internal timer; no OS cron entries or external services. Only approved active-root jobs run. */
+export class ScheduleService {
+    s;
+    timer;
+    bootedAt = Date.now();
+    constructor(s) {
+        this.s = s;
+    }
+    policy() {
+        const row = this.s.store.db.prepare('SELECT max(id) AS id FROM policy_versions WHERE workspace_id=?').get(this.s.workspaceId);
+        return digestOf({ config: this.s.config, policyVersion: row });
+    }
+    next(spec, from) {
+        try {
+            if (spec.cron.trim().split(/\s+/).length !== 5)
+                throw new Error('five fields required');
+            new Intl.DateTimeFormat('en', { timeZone: spec.timezone });
+            return CronExpressionParser.parse(spec.cron, { tz: spec.timezone, currentDate: from }).next().getTime();
+        }
+        catch {
+            throw new DodoError('INVALID_INPUT', 'invalid five-field cron or IANA timezone');
+        }
+    }
+    propose(input, principal) {
+        const spec = ScheduleInput.parse(input);
+        if (process.platform === 'win32' && spec.sandbox && !sandboxAvailability(process.env, undefined, this.s.wfs.root).available)
+            throw new DodoError('NOT_SUPPORTED', 'Windows sandbox is not ready; run dodo setup --components sandbox locally and pass its confinement probes. Alternatively the owner may explicitly request sandbox:false and approve that separate schedule. No policy was downgraded.');
+        const now = Date.now();
+        if (spec.expiresAt <= now || spec.expiresAt > now + 30 * 86400_000)
+            throw new DodoError('INVALID_INPUT', 'schedule consent must expire within 30 days');
+        validateShellCommand(spec.command, Math.min(64 * 1024, this.s.limits.commandBytes));
+        const cwd = this.s.wfs.resolve(spec.cwd);
+        if (!cwd.stat?.isDirectory())
+            throw new DodoError('PATH_DENIED', 'schedule cwd must be a workspace directory');
+        spec.cwd = cwd.rel;
+        if (this.next(spec, now) >= spec.expiresAt)
+            throw new DodoError('INVALID_INPUT', 'no scheduled occurrence before expiry');
+        const n = this.s.store.db.prepare("SELECT count(*) AS n FROM schedules WHERE workspace_id=? AND status IN ('pending','approved') AND expires_at>?").get(this.s.workspaceId, now);
+        if (n.n >= 64)
+            throw new DodoError('RESOURCE_LIMIT', 'at most 64 pending/approved schedules per workspace');
+        const root = this.s.store.getWorkspace(this.s.workspaceId);
+        const payload = { spec, root: root.root, dev: root.dev, ino: root.ino, policy: this.policy(), clientId: principal?.clientId ?? null, grantId: principal?.grantId ?? null };
+        const id = newId('sched', 24);
+        const digest = digestOf(payload);
+        this.s.store.db.prepare('INSERT INTO schedules VALUES (?,?,?,?,?,?,?,?,NULL)').run(id, this.s.workspaceId, JSON.stringify(payload), digest, 'pending', now, spec.expiresAt, null);
+        this.audit(id, 'schedule.propose');
+        return this.inspect(id);
+    }
+    row(id) {
+        const r = this.s.store.db.prepare('SELECT * FROM schedules WHERE id=? AND workspace_id=?').get(id, this.s.workspaceId);
+        if (!r)
+            throw new DodoError('NOT_FOUND', 'unknown schedule');
+        return r;
+    }
+    checked(r) {
+        const p = JSON.parse(r.payload);
+        if (digestOf(p) !== r.digest)
+            throw new DodoError('CONFLICT', 'schedule content changed since review');
+        const root = this.s.store.getWorkspace(this.s.workspaceId);
+        const liveRoot = fs.statSync(this.s.wfs.resolve('.').abs, { bigint: true });
+        if (!liveRoot.isDirectory() || encodeFileIdentity(liveRoot.dev) !== p.dev || encodeFileIdentity(liveRoot.ino) !== p.ino)
+            throw new DodoError('FORBIDDEN', 'workspace directory identity changed');
+        if (root.root !== p.root || root.dev !== p.dev || root.ino !== p.ino || p.policy !== this.policy() || this.s.store.trustMode(this.s.workspaceId) !== 'trusted')
+            throw new DodoError('FORBIDDEN', 'root or policy changed, or saved trust is not trusted; propose and approve again');
+        if (p.clientId !== null && p.clientId !== 'stdio') {
+            const g = p.grantId ? this.s.store.getGrant(p.grantId) : undefined;
+            if (!g || !this.s.store.oauthFind('Grant', p.grantId) || g.revokedAt !== null || !g.scopes.includes('dodo:exec') || !this.s.store.clientAccess(this.s.workspaceId, p.clientId).includes('dodo:exec'))
+                throw new DodoError('FORBIDDEN', 'schedule client grant/access revoked');
+        }
+        return p;
+    }
+    inspect(id) {
+        const r = this.row(id);
+        const p = JSON.parse(r.payload);
+        return { id: r.id, digest: r.digest, status: r.expires_at <= Date.now() ? 'expired' : r.status, ...p, nextAt: r.next_at, expiresAt: r.expires_at, warning: 'Runs current project code with OS-user privileges; command hash does not pin dependencies or project contents.' };
+    }
+    list() {
+        return this.s.store.db.prepare('SELECT id FROM schedules WHERE workspace_id=? ORDER BY created_at DESC LIMIT 100').all(this.s.workspaceId).map(r => this.inspect(r.id));
+    }
+    approve(id, digest) {
+        const r = this.row(id);
+        if (r.status !== 'pending' || r.expires_at <= Date.now() || digest !== r.digest)
+            throw new DodoError('CONFLICT', 'schedule expired, decided or review hash mismatch');
+        const p = this.checked(r);
+        const next = this.next(p.spec, Date.now());
+        if (next >= r.expires_at)
+            throw new DodoError('INVALID_INPUT', 'no occurrence before expiry');
+        this.s.store.db.prepare("UPDATE schedules SET status='approved', approved_at=?, next_at=? WHERE id=?").run(Date.now(), next, id);
+        this.audit(id, 'schedule.approve');
+        return this.inspect(id);
+    }
+    revoke(id) {
+        this.row(id);
+        this.s.store.db.prepare("UPDATE schedules SET status='revoked', next_at=NULL WHERE id=?").run(id);
+        const owned = this.s.store.db.prepare("SELECT id FROM jobs WHERE workspace_id=? AND epoch=? AND principal=? AND status='running'").all(this.s.workspaceId, this.s.epoch, `schedule:${id}`);
+        for (const j of owned)
+            this.s.jobs.cancel(j.id, this.s.workspaceId, 500);
+        this.audit(id, 'schedule.revoke');
+        return { id, status: 'revoked' };
+    }
+    history(id) {
+        this.row(id);
+        const runs = this.s.store.db.prepare('SELECT * FROM schedule_runs WHERE schedule_id=? ORDER BY due_at DESC LIMIT 50').all(id);
+        return runs.map(r => ({ ...r, job: r.job_id ? this.s.store.getJob(r.job_id) ?? null : null }));
+    }
+    start(ready) {
+        if (this.timer)
+            return;
+        this.bootedAt = Date.now();
+        this.timer = setInterval(() => { if (ready()) {
+            try {
+                this.tick();
+            }
+            catch {
+                this.stop();
+                console.error('[dodo] scheduler stopped after a state error; inspect schedules locally before restarting');
+            }
+        } }, 1000);
+        this.timer.unref();
+    }
+    stop() { if (this.timer)
+        clearInterval(this.timer); this.timer = undefined; }
+    /** Synchronous claim->spawn: revoke cannot race between permission check and launch. */
+    tick(now = Date.now()) {
+        const rows = this.s.store.db.prepare("SELECT * FROM schedules WHERE workspace_id=? AND status='approved' ORDER BY next_at LIMIT 64").all(this.s.workspaceId);
+        for (const row of rows) {
+            if (row.expires_at <= now) {
+                this.revoke(row.id);
+                continue;
+            }
+            if (row.next_at === null || row.next_at > now)
+                continue;
+            let p;
+            try {
+                p = this.checked(row);
+            }
+            catch {
+                this.s.store.db.prepare("UPDATE schedules SET status='paused', next_at=NULL WHERE id=?").run(row.id);
+                this.audit(row.id, 'schedule.policy-paused');
+                continue;
+            }
+            // A schedule's own overlap still gets a receipt; other mutations defer
+            // this tick without claiming it, so no command bypasses the shared queue.
+            const ownRunning = !!this.s.store.db.prepare("SELECT id FROM jobs WHERE workspace_id=? AND principal=? AND status='running' LIMIT 1").get(this.s.workspaceId, `schedule:${row.id}`);
+            if (this.s.jobs.mutations?.busy && !ownRunning)
+                continue;
+            const due = row.next_at;
+            const next = this.next(p.spec, now);
+            const claimed = this.s.store.db.transaction(() => {
+                const update = this.s.store.db.prepare("UPDATE schedules SET next_at=? WHERE id=? AND status='approved' AND next_at=?").run(next, row.id, due);
+                if (!update.changes)
+                    return false;
+                return !!this.s.store.db.prepare("INSERT OR IGNORE INTO schedule_runs VALUES (?,?,'claimed',NULL,NULL)").run(row.id, due).changes;
+            }).immediate();
+            if (!claimed)
+                continue;
+            const finish = (status, jobId = null, error = null) => this.s.store.db.prepare('UPDATE schedule_runs SET status=?,job_id=?,error=? WHERE schedule_id=? AND due_at=?').run(status, jobId, error, row.id, due);
+            // Missed ticks, including downtime, are skipped. Claimed/uncertain ticks are never replayed.
+            if (due < this.bootedAt || now - due > 60_000) {
+                finish('skipped_missed');
+                continue;
+            }
+            if (this.s.store.db.prepare("SELECT id FROM jobs WHERE workspace_id=? AND principal=? AND status='running' LIMIT 1").get(this.s.workspaceId, `schedule:${row.id}`)) {
+                finish('skipped_overlap');
+                continue;
+            }
+            try {
+                const job = this.s.jobs.start({ workspaceId: this.s.workspaceId, epoch: this.s.epoch, principal: `schedule:${row.id}`, kind: 'exec', program: p.spec.command, args: [], cwdRel: p.spec.cwd, timeoutMs: p.spec.timeoutMs, shell: true, sandbox: p.spec.sandbox, network: p.spec.network, stdin: false });
+                finish('launched', job.jobId);
+            }
+            catch {
+                finish('launch_failed', null, 'Unable to launch within current limits and sandbox policy');
+            }
+            this.audit(row.id, 'schedule.tick');
+        }
+    }
+    audit(id, tool) { this.s.store.audit({ workspaceId: this.s.workspaceId, principal: 'owner-schedule', tool, refId: id, result: 'ok' }); }
+}
+//# sourceMappingURL=scheduleService.js.map