patchwork-os 0.2.0-alpha.9 → 0.2.0-beta.0

package/dist/recipes/resolveRecipePath.js

@@ -0,0 +1,202 @@
+/**
+ * resolveRecipePath — recipe-runner path jail.
+ *
+ * Closes G-security F-01 (CRITICAL — `file.read/write/append` accept any
+ * absolute path), F-02 (CRITICAL — template-substituted vars escape via
+ * `..`), and the R2 C-1 chained-runner third-substitution-site gap.
+ *
+ * Mirrors the symlink-walking strategy from `src/tools/utils.ts:104-200`
+ * (`resolveFilePath`) but operates against an allowlist of recipe-roots
+ * rather than a single workspace root:
+ *
+ *   - `~/.patchwork/`               (always allowed — recipe install dir)
+ *   - the bridge / CLI workspace    (always allowed — passed in via `opts.workspace`)
+ *   - `os.tmpdir()`                 (OFF by default; opt-in via the
+ *                                    `CLAUDE_IDE_BRIDGE_RECIPE_TMP_JAIL=1`
+ *                                    env var, per R2 C-2 maintainer decision)
+ *
+ * On any escape (null byte, segment outside all roots, symlink target
+ * outside roots, hardlink on a write target) the helper throws an `Error`
+ * with `err.code = "recipe_path_jail_escape"`. Callers and tests must
+ * assert on `err.code`, never on message text (R2 M-4).
+ *
+ * Defense-in-depth — apply at every layer:
+ *   - `src/recipes/tools/file.ts`            (per-tool execute())
+ *   - `src/recipes/yamlRunner.ts:976-994`    (default StepDeps file ops)
+ *   - `src/recipes/yamlRunner.ts:642`        (post-render path snapshot)
+ *   - `src/recipes/yamlRunner.ts:1252-1262`  (chained-runner executeTool)
+ *   - `src/recipes/chainedRunner.ts:194-205` (template-substitution site)
+ *   - `src/recipeRoutes.ts:131-138 :172-181` (HTTP vars validator)
+ *   - `src/commands/recipe.ts:1080-1102`     (CLI warn on out-of-jail recipe ref)
+ */
+import fs from "node:fs";
+import os from "node:os";
+import path from "node:path";
+/** Build a jail error with the canonical code. Never expose internals via message-matching. */
+function jailError(message) {
+    const err = new Error(message);
+    err.code = "recipe_path_jail_escape";
+    return err;
+}
+/** Expand a leading `~/` segment using `os.homedir()` (or the test override). */
+function expandHome(p, homeDir) {
+    if (p === "~")
+        return homeDir;
+    if (p.startsWith("~/"))
+        return path.join(homeDir, p.slice(2));
+    return p;
+}
+/** Compute the active jail roots given the runtime opts. */
+function jailRoots(opts) {
+    const homeDir = opts.homeDir ?? os.homedir();
+    const allowTmp = opts.allowTmp ?? process.env.CLAUDE_IDE_BRIDGE_RECIPE_TMP_JAIL === "1";
+    const workspace = opts.workspace ?? process.cwd();
+    const roots = [path.resolve(homeDir, ".patchwork"), path.resolve(workspace)];
+    if (allowTmp) {
+        // On macOS `os.tmpdir()` returns `/var/folders/...` but the conventional
+        // `/tmp` symlink points at `/private/tmp` — we expose both so a recipe
+        // (or a legacy test) that hard-codes `/tmp/...` resolves cleanly. The
+        // symlink-aware realpath check below will still reject anything whose
+        // physical target is outside both roots.
+        roots.push(path.resolve(os.tmpdir()));
+        roots.push("/tmp");
+    }
+    // Dedupe — workspace==tmpdir on some CI runners would double-count and
+    // confuse the "outside all roots" reject branch.
+    return Array.from(new Set(roots));
+}
+/** True if `target` is inside (or equal to) any allowed jail root. */
+function isInsideAnyRoot(target, roots) {
+    for (const root of roots) {
+        if (target === root)
+            return true;
+        if (target.startsWith(root + path.sep))
+            return true;
+    }
+    return false;
+}
+/**
+ * Walk up the ancestor chain of a (possibly non-existent) path, returning
+ * the realpath of the first ancestor that exists on disk plus the unresolved
+ * suffix. Mirrors `src/tools/utils.ts:130-177` so a symlink anywhere along
+ * the chain (including the bridge / install dir) is followed before the
+ * containment check.
+ */
+function realpathOrAncestor(p) {
+    try {
+        return fs.realpathSync(p);
+    }
+    catch {
+        let ancestor = path.dirname(p);
+        const suffix = [path.basename(p)];
+        while (ancestor !== path.dirname(ancestor)) {
+            try {
+                const realAncestor = fs.realpathSync(ancestor);
+                return path.join(realAncestor, ...suffix);
+            }
+            catch {
+                suffix.unshift(path.basename(ancestor));
+                ancestor = path.dirname(ancestor);
+            }
+        }
+        // Reached fs root without finding a real ancestor — fail closed; the
+        // caller will translate this to a jail-escape rather than skip the
+        // containment check.
+        throw new Error(`no real ancestor found for "${p}"`);
+    }
+}
+/**
+ * Resolve a recipe-supplied path, expanding `~/`, normalising, and asserting
+ * the result lives inside one of the jail roots after symlink resolution.
+ *
+ * Throws `RecipePathJailError` (code `"recipe_path_jail_escape"`) on any
+ * containment violation. Callers should propagate the error unchanged so
+ * tests can assert on `err.code`.
+ */
+export function resolveRecipePath(rawPath, opts = {}) {
+    if (typeof rawPath !== "string") {
+        throw jailError("recipe path must be a string");
+    }
+    if (rawPath.length === 0) {
+        throw jailError("recipe path must not be empty");
+    }
+    if (rawPath.includes("\x00")) {
+        throw jailError("recipe path must not contain null bytes");
+    }
+    const homeDir = opts.homeDir ?? os.homedir();
+    const expanded = expandHome(rawPath, homeDir);
+    const resolved = path.isAbsolute(expanded)
+        ? path.resolve(expanded)
+        : path.resolve(opts.workspace ?? process.cwd(), expanded);
+    const roots = jailRoots(opts);
+    // Lexical containment first — cheap reject for `..` segments resolving
+    // outside any root before we do any FS calls.
+    if (!isInsideAnyRoot(resolved, roots)) {
+        throw jailError(`recipe path "${rawPath}" resolves outside the allowed jail roots`);
+    }
+    // Symlink-aware re-check. We resolve the realpath of every existing
+    // ancestor so a link at any level (including a freshly-installed recipe
+    // dir pointing at `/tmp`) cannot bypass the lexical check above.
+    let real;
+    try {
+        real = realpathOrAncestor(resolved);
+    }
+    catch (err) {
+        throw jailError(`recipe path "${rawPath}" failed symlink resolution: ${err instanceof Error ? err.message : String(err)}`);
+    }
+    const realRoots = [];
+    for (const root of roots) {
+        try {
+            realRoots.push(fs.realpathSync(root));
+        }
+        catch {
+            // Root does not exist yet (e.g. ~/.patchwork on a fresh install).
+            // Use the resolved (lexical) form — `mkdirSync({recursive:true})`
+            // will create it inside the lexical jail anyway, and the symlink
+            // walk above already confirmed nothing on disk redirects out.
+            realRoots.push(root);
+        }
+    }
+    if (!isInsideAnyRoot(real, realRoots)) {
+        throw jailError(`recipe path "${rawPath}" escapes jail via symlink (real target "${real}")`);
+    }
+    // Hardlink guard for write paths — same rationale as `resolveFilePath`'s
+    // `opts.write` branch: a hardlink from inside the jail to an outside
+    // file shares an inode and passes the realpath check, but writing
+    // through it would modify the outside file.
+    if (opts.write) {
+        try {
+            const lst = fs.lstatSync(resolved);
+            if (!lst.isDirectory() && lst.nlink > 1) {
+                throw jailError(`recipe path "${rawPath}" is a hardlink (nlink=${lst.nlink}); writes denied to prevent jail escape`);
+            }
+        }
+        catch (err) {
+            // ENOENT — file doesn't exist yet, safe to create. Re-throw if it's
+            // already a jail error (the nlink branch above).
+            if (err instanceof Error &&
+                err.code === "recipe_path_jail_escape") {
+                throw err;
+            }
+            // Other lstat errors (EACCES, etc.) — non-fatal; the write call will
+            // surface them with the OS-level message.
+        }
+    }
+    return resolved;
+}
+/**
+ * Side-effect-free predicate variant — returns `null` on jail escape rather
+ * than throwing. Used by the CLI `recipe run` warn path (F-10), which wants
+ * to write a stderr notice when a recipe **file** lives outside the jail
+ * but still loads it (the YAML loader is a separate trust boundary from the
+ * tool dispatch jail).
+ */
+export function tryResolveRecipePath(rawPath, opts = {}) {
+    try {
+        return resolveRecipePath(rawPath, opts);
+    }
+    catch {
+        return null;
+    }
+}
+//# sourceMappingURL=resolveRecipePath.js.map

package/dist/recipes/resolveRecipePath.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"resolveRecipePath.js","sourceRoot":"","sources":["../../src/recipes/resolveRecipePath.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AAEH,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAI7B,+FAA+F;AAC/F,SAAS,SAAS,CAAC,OAAe;IAChC,MAAM,GAAG,GAAG,IAAI,KAAK,CAAC,OAAO,CAAwB,CAAC;IACtD,GAAG,CAAC,IAAI,GAAG,yBAAyB,CAAC;IACrC,OAAO,GAAG,CAAC;AACb,CAAC;AAqBD,iFAAiF;AACjF,SAAS,UAAU,CAAC,CAAS,EAAE,OAAe;IAC5C,IAAI,CAAC,KAAK,GAAG;QAAE,OAAO,OAAO,CAAC;IAC9B,IAAI,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAC9D,OAAO,CAAC,CAAC;AACX,CAAC;AAED,4DAA4D;AAC5D,SAAS,SAAS,CAAC,IAA8B;IAC/C,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,EAAE,CAAC,OAAO,EAAE,CAAC;IAC7C,MAAM,QAAQ,GACZ,IAAI,CAAC,QAAQ,IAAI,OAAO,CAAC,GAAG,CAAC,iCAAiC,KAAK,GAAG,CAAC;IACzE,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;IAClD,MAAM,KAAK,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,YAAY,CAAC,EAAE,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC;IAC7E,IAAI,QAAQ,EAAE,CAAC;QACb,yEAAyE;QACzE,uEAAuE;QACvE,sEAAsE;QACtE,sEAAsE;QACtE,yCAAyC;QACzC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QACtC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACrB,CAAC;IACD,uEAAuE;IACvE,iDAAiD;IACjD,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC;AACpC,CAAC;AAED,sEAAsE;AACtE,SAAS,eAAe,CAAC,MAAc,EAAE,KAAe;IACtD,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,MAAM,KAAK,IAAI;YAAE,OAAO,IAAI,CAAC;QACjC,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC;YAAE,OAAO,IAAI,CAAC;IACtD,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;;GAMG;AACH,SAAS,kBAAkB,CAAC,CAAS;IACnC,IAAI,CAAC;QACH,OAAO,EAAE,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;IAC5B,CAAC;IAAC,MAAM,CAAC;QACP,IAAI,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;QAC/B,MAAM,MAAM,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;QAClC,OAAO,QAAQ,KAAK,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC3C,IAAI,CAAC;gBACH,MAAM,YAAY,GAAG,EAAE,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;gBAC/C,OAAO,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,GAAG,MAAM,CAAC,CAAC;YAC5C,CAAC;YAAC,MAAM,CAAC;gBACP,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC;gBACxC,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;YACpC,CAAC;QACH,CAAC;QACD,qEAAqE;QACrE,mEAAmE;QACnE,qBAAqB;QACrB,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,GAAG,CAAC,CAAC;IACvD,CAAC;AACH,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,iBAAiB,CAC/B,OAAe,EACf,OAAiC,EAAE;IAEnC,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;QAChC,MAAM,SAAS,CAAC,8BAA8B,CAAC,CAAC;IAClD,CAAC;IACD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,MAAM,SAAS,CAAC,+BAA+B,CAAC,CAAC;IACnD,CAAC;IACD,IAAI,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;QAC7B,MAAM,SAAS,CAAC,yCAAyC,CAAC,CAAC;IAC7D,CAAC;IAED,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,EAAE,CAAC,OAAO,EAAE,CAAC;IAC7C,MAAM,QAAQ,GAAG,UAAU,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAC9C,MAAM,QAAQ,GAAG,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC;QACxC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC;QACxB,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,IAAI,OAAO,CAAC,GAAG,EAAE,EAAE,QAAQ,CAAC,CAAC;IAE5D,MAAM,KAAK,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;IAE9B,uEAAuE;IACvE,8CAA8C;IAC9C,IAAI,CAAC,eAAe,CAAC,QAAQ,EAAE,KAAK,CAAC,EAAE,CAAC;QACtC,MAAM,SAAS,CACb,gBAAgB,OAAO,2CAA2C,CACnE,CAAC;IACJ,CAAC;IAED,oEAAoE;IACpE,wEAAwE;IACxE,iEAAiE;IACjE,IAAI,IAAY,CAAC;IACjB,IAAI,CAAC;QACH,IAAI,GAAG,kBAAkB,CAAC,QAAQ,CAAC,CAAC;IACtC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,SAAS,CACb,gBAAgB,OAAO,gCAAgC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAC1G,CAAC;IACJ,CAAC;IAED,MAAM,SAAS,GAAa,EAAE,CAAC;IAC/B,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,CAAC;YACH,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC;QACxC,CAAC;QAAC,MAAM,CAAC;YACP,kEAAkE;YAClE,kEAAkE;YAClE,iEAAiE;YACjE,8DAA8D;YAC9D,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACvB,CAAC;IACH,CAAC;IACD,IAAI,CAAC,eAAe,CAAC,IAAI,EAAE,SAAS,CAAC,EAAE,CAAC;QACtC,MAAM,SAAS,CACb,gBAAgB,OAAO,4CAA4C,IAAI,IAAI,CAC5E,CAAC;IACJ,CAAC;IAED,yEAAyE;IACzE,qEAAqE;IACrE,kEAAkE;IAClE,4CAA4C;IAC5C,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;QACf,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,EAAE,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;YACnC,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,IAAI,GAAG,CAAC,KAAK,GAAG,CAAC,EAAE,CAAC;gBACxC,MAAM,SAAS,CACb,gBAAgB,OAAO,0BAA0B,GAAG,CAAC,KAAK,yCAAyC,CACpG,CAAC;YACJ,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,oEAAoE;YACpE,iDAAiD;YACjD,IACE,GAAG,YAAY,KAAK;gBACnB,GAAyB,CAAC,IAAI,KAAK,yBAAyB,EAC7D,CAAC;gBACD,MAAM,GAAG,CAAC;YACZ,CAAC;YACD,qEAAqE;YACrE,0CAA0C;QAC5C,CAAC;IACH,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,oBAAoB,CAClC,OAAe,EACf,OAAiC,EAAE;IAEnC,IAAI,CAAC;QACH,OAAO,iBAAiB,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IAC1C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC"}

package/dist/recipes/scheduler.d.ts

@@ -1,10 +1,12 @@
+import cron from "node-cron";
 import type { Logger } from "../logger.js";
 /**
- * RecipeScheduler — runs cron-triggered recipes on a simple interval.
+ * RecipeScheduler — runs cron-triggered recipes on a simple interval or
+ * standard 5-field cron expression.
  *
- * Phase-0 scope supports the `@every Ns|Nm|Nh` schedule form, which is
- * enough to demonstrate "works while you're away" without pulling in a full
- * cron dependency. Standard 5-field expressions can be added later.
+ * Supported schedule forms:
+ *   @every Ns|Nm|Nh  — simple interval (setInterval-based)
+ *   <5-field cron>   — standard cron expression (node-cron-based)
  *
  * Scheduler is a pure consumer of the recipes-on-disk contract and an
  * injected enqueue fn, so it's trivial to unit test without the orchestrator.
@@ -13,15 +15,20 @@ export type SchedulerEnqueue = (opts: {
     prompt: string;
     triggerSource: string;
 }) => string;
+export type SchedulerRunYaml = (name: string) => Promise<void>;
 export interface ScheduledRecipe {
     name: string;
     schedule: string;
     intervalMs: number;
     timer: ReturnType<typeof setInterval>;
+    /** Present only for cron5-kind recipes. */
+    cronJob?: cron.ScheduledTask;
 }
 export interface SchedulerOptions {
     recipesDir: string;
     enqueue: SchedulerEnqueue;
+    /** Called for YAML recipes instead of enqueue. */
+    runYaml?: SchedulerRunYaml;
     logger?: Logger;
     /** Override for tests — defaults to setInterval. */
     setInterval?: typeof setInterval;
@@ -36,10 +43,19 @@ export declare class RecipeScheduler {
     constructor(opts: SchedulerOptions);
     start(): ScheduledRecipe[];
     stop(): void;
-    list(): ReadonlyArray<Omit<ScheduledRecipe, "timer">>;
+    restart(): void;
+    list(): ReadonlyArray<Omit<ScheduledRecipe, "timer" | "cronJob">>;
     /** Test hook: dispatch a recipe immediately without waiting for the interval. */
     fireForTest(name: string): void;
     private fire;
 }
-/** Parse @every forms into milliseconds. Returns null for unsupported schedules. */
-export declare function parseSchedule(schedule: string): number | null;
+type ParsedSchedule = {
+    kind: "interval";
+    intervalMs: number;
+} | {
+    kind: "cron5";
+    expression: string;
+};
+/** Parse @every forms into milliseconds, or detect a 5-field cron expression. Returns null for unsupported schedules. */
+export declare function parseSchedule(schedule: string): ParsedSchedule | null;
+export {};

package/dist/recipes/scheduler.js

@@ -1,6 +1,10 @@
-import { readdirSync, readFileSync } from "node:fs";
+import { existsSync, readdirSync, readFileSync, statSync } from "node:fs";
 import path from "node:path";
-import { loadRecipePrompt } from "../recipesHttp.js";
+import cron from "node-cron";
+import { parse as parseYaml } from "yaml";
+import { loadConfig } from "../patchworkConfig.js";
+import { findYamlRecipePath, loadRecipePrompt } from "../recipesHttp.js";
+import { getConfigDisabledNames, isInstallDirDisabled, } from "./disabledMarkers.js";
 export class RecipeScheduler {
     opts;
     scheduled = [];
@@ -13,6 +17,14 @@ export class RecipeScheduler {
     }
     start() {
         this.stop();
+        // Load disabled list from config
+        let disabled = new Set();
+        try {
+            disabled = getConfigDisabledNames(loadConfig());
+        }
+        catch {
+            // non-fatal — proceed with empty disabled set
+        }
         let entries;
         try {
             entries = readdirSync(this.opts.recipesDir);
@@ -20,60 +32,220 @@ export class RecipeScheduler {
         catch {
             return [];
         }
+        const candidates = [];
         for (const f of entries) {
-            if (!f.endsWith(".json") || f.endsWith(".permissions.json"))
-                continue;
             const fullPath = path.join(this.opts.recipesDir, f);
+            let isDir = false;
             try {
-                const raw = readFileSync(fullPath, "utf-8");
-                const parsed = JSON.parse(raw);
-                if (parsed.trigger?.type !== "cron")
+                isDir = statSync(fullPath).isDirectory();
+            }
+            catch {
+                continue;
+            }
+            if (isDir) {
+                // Honor the per-recipe `.disabled` marker written by recipeInstall.
+                if (isInstallDirDisabled(fullPath)) {
+                    this.opts.logger?.info?.(`[scheduler] skipping recipe in "${f}" — .disabled marker present`);
                     continue;
-                if (!parsed.trigger.schedule ||
-                    typeof parsed.trigger.schedule !== "string")
+                }
+                // Locate the recipe entrypoint inside the install dir.
+                // Prefer recipe.json's `recipes.main`, then fall back to first YAML.
+                const manifestPath = path.join(fullPath, "recipe.json");
+                let entrypoint = null;
+                if (existsSync(manifestPath)) {
+                    try {
+                        const m = JSON.parse(readFileSync(manifestPath, "utf-8"));
+                        if (m.recipes?.main) {
+                            const candidate = path.join(fullPath, m.recipes.main);
+                            if (existsSync(candidate))
+                                entrypoint = candidate;
+                        }
+                    }
+                    catch (err) {
+                        // Malformed manifest — fall through to first-yaml fallback,
+                        // but surface the issue so the user can fix it. Silent failures
+                        // here led to "why isn't my recipe firing?" confusion.
+                        this.opts.logger?.warn?.(`[scheduler] could not parse recipe.json in "${f}" — ${err instanceof Error ? err.message : String(err)}; falling back to first-yaml lookup`);
+                    }
+                }
+                if (!entrypoint) {
+                    try {
+                        const yaml = readdirSync(fullPath).find((x) => /\.ya?ml$/i.test(x));
+                        if (yaml)
+                            entrypoint = path.join(fullPath, yaml);
+                    }
+                    catch {
+                        // unreadable — skip
+                    }
+                }
+                if (entrypoint) {
+                    const ext = path.extname(entrypoint).toLowerCase();
+                    candidates.push({
+                        filePath: entrypoint,
+                        kind: ext === ".json" ? "json" : "yaml",
+                        installDir: fullPath,
+                    });
+                }
+                continue;
+            }
+            const isJson = f.endsWith(".json") && !f.endsWith(".permissions.json");
+            const isYaml = f.endsWith(".yaml") || f.endsWith(".yml");
+            if (!isJson && !isYaml)
+                continue;
+            candidates.push({
+                filePath: fullPath,
+                kind: isJson ? "json" : "yaml",
+                installDir: null,
+            });
+        }
+        for (const cand of candidates) {
+            const f = path.basename(cand.filePath);
+            try {
+                let name;
+                let schedule;
+                if (cand.kind === "json") {
+                    const raw = readFileSync(cand.filePath, "utf-8");
+                    const parsed = JSON.parse(raw);
+                    if (parsed.trigger?.type !== "cron")
+                        continue;
+                    if (!parsed.trigger.schedule ||
+                        typeof parsed.trigger.schedule !== "string")
+                        continue;
+                    schedule = parsed.trigger.schedule;
+                    name = parsed.name ?? path.basename(f, ".json");
+                }
+                else {
+                    // YAML
+                    const raw = readFileSync(cand.filePath, "utf-8");
+                    const parsed = parseYaml(raw);
+                    if (parsed.trigger?.type !== "cron")
+                        continue;
+                    schedule = parsed.trigger.at ?? parsed.trigger.schedule;
+                    if (!schedule || typeof schedule !== "string")
+                        continue;
+                    name = parsed.name ?? path.basename(f, path.extname(f));
+                }
+                // Apply config-file disabled list (legacy mechanism)
+                if (disabled.has(name)) {
+                    this.opts.logger?.info?.(`[scheduler] skipping disabled recipe "${name}"`);
                     continue;
-                const intervalMs = parseSchedule(parsed.trigger.schedule);
-                if (intervalMs === null) {
-                    this.opts.logger?.warn?.(`[scheduler] ignoring recipe "${parsed.name ?? f}" — unsupported schedule "${parsed.trigger.schedule}" (use @every Ns|Nm|Nh)`);
+                }
+                const parsed2 = parseSchedule(schedule);
+                if (parsed2 === null) {
+                    this.opts.logger?.warn?.(`[scheduler] ignoring recipe "${name}" — unsupported schedule "${schedule}" (use @every Ns|Nm|Nh or a 5-field cron expression)`);
                     continue;
                 }
-                const name = parsed.name ?? path.basename(f, ".json");
-                const timer = this.setIntervalFn(() => {
-                    this.fire(name);
-                }, intervalMs);
-                if (typeof timer === "object" && "unref" in timer)
-                    timer.unref();
-                this.scheduled.push({
-                    name,
-                    schedule: parsed.trigger.schedule,
-                    intervalMs,
-                    timer,
-                });
-                this.opts.logger?.info?.(`[scheduler] "${name}" scheduled every ${intervalMs}ms (${parsed.trigger.schedule})`);
+                if (parsed2.kind === "interval") {
+                    const intervalMs = parsed2.intervalMs;
+                    const timer = this.setIntervalFn(() => {
+                        this.fire(name);
+                    }, intervalMs);
+                    if (typeof timer === "object" && "unref" in timer)
+                        timer.unref();
+                    this.scheduled.push({
+                        name,
+                        schedule,
+                        intervalMs,
+                        timer,
+                    });
+                    this.opts.logger?.info?.(`[scheduler] "${name}" scheduled every ${intervalMs}ms (${schedule})`);
+                }
+                else {
+                    // cron5
+                    const cronJob = cron.schedule(parsed2.expression, () => {
+                        this.fire(name);
+                    });
+                    // Store a sentinel timer so the ScheduledRecipe shape stays stable
+                    const dummyTimer = this.setIntervalFn(() => { }, 2_147_483_647);
+                    if (typeof dummyTimer === "object" && "unref" in dummyTimer)
+                        dummyTimer.unref();
+                    this.scheduled.push({
+                        name,
+                        schedule,
+                        intervalMs: 0,
+                        timer: dummyTimer,
+                        cronJob,
+                    });
+                    this.opts.logger?.info?.(`[scheduler] "${name}" scheduled with cron expression "${schedule}"`);
+                }
             }
-            catch {
-                // skip malformed recipe
+            catch (err) {
+                // Malformed recipe file — surface so users can debug rather than
+                // silently dropping the recipe from the schedule.
+                this.opts.logger?.warn?.(`[scheduler] could not load recipe at "${cand.filePath}" — ${err instanceof Error ? err.message : String(err)}; recipe will not be scheduled`);
             }
         }
         return this.scheduled;
     }
     stop() {
         for (const entry of this.scheduled) {
-            this.clearIntervalFn(entry.timer);
+            if (entry.cronJob) {
+                entry.cronJob.stop();
+            }
+            else {
+                this.clearIntervalFn(entry.timer);
+            }
         }
         this.scheduled = [];
     }
+    restart() {
+        this.stop();
+        this.start();
+    }
     list() {
-        return this.scheduled.map(({ timer: _t, ...rest }) => rest);
+        return this.scheduled.map(({ timer: _t, cronJob: _c, ...rest }) => rest);
     }
     /** Test hook: dispatch a recipe immediately without waiting for the interval. */
     fireForTest(name) {
         this.fire(name);
     }
     fire(name) {
+        // TOCTOU defence: re-check the legacy `cfg.recipes.disabled` list at
+        // fire time. `start()` snapshots it once; if the user runs `recipe
+        // disable <name>` after start (and the recipe is a top-level legacy
+        // file, where the marker file doesn't apply), the timer would
+        // otherwise still fire until next restart(). The `.disabled` marker
+        // case is handled inside findYamlRecipePath / loadRecipePrompt
+        // (skip disabled install dirs) thanks to PR #49.
+        try {
+            if (getConfigDisabledNames(loadConfig()).has(name)) {
+                this.opts.logger?.info?.(`[scheduler] skipping "${name}" — disabled via config (TOCTOU re-check)`);
+                return;
+            }
+        }
+        catch {
+            // proceed if config unreadable — falling back to scan-time snapshot
+        }
+        // YAML recipe — delegate to runYaml if provided. findYamlRecipePath
+        // now throws RecipeNameConflictError when two recipes declare the same
+        // name; surface that loudly instead of letting the timer crash silently.
+        let yamlPath;
+        try {
+            yamlPath = findYamlRecipePath(this.opts.recipesDir, name);
+        }
+        catch (err) {
+            this.opts.logger?.warn?.(`[scheduler] skipped "${name}" — ${err instanceof Error ? err.message : String(err)}`);
+            return;
+        }
+        if (yamlPath) {
+            if (!this.opts.runYaml) {
+                this.opts.logger?.warn?.(`[scheduler] skipped "${name}" — YAML recipe requires runYaml callback (start bridge with --claude-driver)`);
+                return;
+            }
+            this.opts.runYaml(name).catch((err) => {
+                this.opts.logger?.warn?.(`[scheduler] YAML recipe "${name}" failed: ${err instanceof Error ? err.message : String(err)}`);
+            });
+            this.opts.logger?.info?.(`[scheduler] fired YAML recipe "${name}"`);
+            return;
+        }
+        // JSON recipe — legacy path
         const loaded = loadRecipePrompt(this.opts.recipesDir, name);
         if (!loaded) {
-            this.opts.logger?.warn?.(`[scheduler] skipped "${name}" — recipe file disappeared`);
+            // After PR #49, findYamlRecipePath / loadRecipePrompt return null for
+            // recipes whose install dir has a `.disabled` marker — that's the
+            // common case here. "Disappeared" was misleading; prefer a message
+            // that names both possibilities.
+            this.opts.logger?.warn?.(`[scheduler] skipped "${name}" — recipe not found or disabled`);
             return;
         }
         try {
@@ -88,23 +260,31 @@ export class RecipeScheduler {
         }
     }
 }
-/** Parse @every forms into milliseconds. Returns null for unsupported schedules. */
+/** Parse @every forms into milliseconds, or detect a 5-field cron expression. Returns null for unsupported schedules. */
 export function parseSchedule(schedule) {
     const trimmed = schedule.trim();
+    // @every Ns|Nm|Nh
     const m = /^@every\s+(\d+)\s*(ms|s|m|h)$/i.exec(trimmed);
-    if (!m)
-        return null;
-    const n = Number.parseInt(m[1], 10);
-    const unit = m[2].toLowerCase();
-    if (!Number.isFinite(n) || n <= 0)
-        return null;
-    const multiplier = unit === "ms"
-        ? 1
-        : unit === "s"
-            ? 1000
-            : unit === "m"
-                ? 60_000
-                : 60 * 60_000;
-    return n * multiplier;
+    if (m) {
+        const n = Number.parseInt(m[1], 10);
+        const unit = m[2]?.toLowerCase();
+        if (!Number.isFinite(n) || n <= 0)
+            return null;
+        const multiplier = unit === "ms"
+            ? 1
+            : unit === "s"
+                ? 1000
+                : unit === "m"
+                    ? 60_000
+                    : 60 * 60_000;
+        return { kind: "interval", intervalMs: n * multiplier };
+    }
+    // 5-field cron expression (e.g. "0 8 * * 1-5")
+    if (/^\S+\s+\S+\s+\S+\s+\S+\s+\S+$/.test(trimmed)) {
+        if (cron.validate(trimmed)) {
+            return { kind: "cron5", expression: trimmed };
+        }
+    }
+    return null;
 }
 //# sourceMappingURL=scheduler.js.map

package/dist/recipes/scheduler.js.map

@@ -1 +1 @@
-{"version":3,"file":"scheduler.js","sourceRoot":"","sources":["../../src/recipes/scheduler.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACpD,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAmCrD,MAAM,OAAO,eAAe;IAKG;IAJrB,SAAS,GAAsB,EAAE,CAAC;IACzB,aAAa,CAAqB;IAClC,eAAe,CAAuB;IAEvD,YAA6B,IAAsB;QAAtB,SAAI,GAAJ,IAAI,CAAkB;QACjD,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC,WAAW,IAAI,WAAW,CAAC;QACrD,IAAI,CAAC,eAAe,GAAG,IAAI,CAAC,aAAa,IAAI,aAAa,CAAC;IAC7D,CAAC;IAED,KAAK;QACH,IAAI,CAAC,IAAI,EAAE,CAAC;QACZ,IAAI,OAAiB,CAAC;QACtB,IAAI,CAAC;YACH,OAAO,GAAG,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAC9C,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,CAAC;QACZ,CAAC;QACD,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;YACxB,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,mBAAmB,CAAC;gBAAE,SAAS;YACtE,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC;YACpD,IAAI,CAAC;gBACH,MAAM,GAAG,GAAG,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;gBAC5C,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAG5B,CAAC;gBACF,IAAI,MAAM,CAAC,OAAO,EAAE,IAAI,KAAK,MAAM;oBAAE,SAAS;gBAC9C,IACE,CAAC,MAAM,CAAC,OAAO,CAAC,QAAQ;oBACxB,OAAO,MAAM,CAAC,OAAO,CAAC,QAAQ,KAAK,QAAQ;oBAE3C,SAAS;gBACX,MAAM,UAAU,GAAG,aAAa,CAAC,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;gBAC1D,IAAI,UAAU,KAAK,IAAI,EAAE,CAAC;oBACxB,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,CACtB,gCAAgC,MAAM,CAAC,IAAI,IAAI,CAAC,6BAA6B,MAAM,CAAC,OAAO,CAAC,QAAQ,yBAAyB,CAC9H,CAAC;oBACF,SAAS;gBACX,CAAC;gBACD,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,IAAI,IAAI,CAAC,QAAQ,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;gBACtD,MAAM,KAAK,GAAG,IAAI,CAAC,aAAa,CAAC,GAAG,EAAE;oBACpC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBAClB,CAAC,EAAE,UAAU,CAAC,CAAC;gBACf,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,IAAI,KAAK;oBAAE,KAAK,CAAC,KAAK,EAAE,CAAC;gBACjE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;oBAClB,IAAI;oBACJ,QAAQ,EAAE,MAAM,CAAC,OAAO,CAAC,QAAQ;oBACjC,UAAU;oBACV,KAAK;iBACN,CAAC,CAAC;gBACH,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,CACtB,gBAAgB,IAAI,qBAAqB,UAAU,OAAO,MAAM,CAAC,OAAO,CAAC,QAAQ,GAAG,CACrF,CAAC;YACJ,CAAC;YAAC,MAAM,CAAC;gBACP,wBAAwB;YAC1B,CAAC;QACH,CAAC;QACD,OAAO,IAAI,CAAC,SAAS,CAAC;IACxB,CAAC;IAED,IAAI;QACF,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YACnC,IAAI,CAAC,eAAe,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QACpC,CAAC;QACD,IAAI,CAAC,SAAS,GAAG,EAAE,CAAC;IACtB,CAAC;IAED,IAAI;QACF,OAAO,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,GAAG,IAAI,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC;IAC9D,CAAC;IAED,iFAAiF;IACjF,WAAW,CAAC,IAAY;QACtB,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAClB,CAAC;IAEO,IAAI,CAAC,IAAY;QACvB,MAAM,MAAM,GAAG,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;QAC5D,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,CACtB,wBAAwB,IAAI,6BAA6B,CAC1D,CAAC;YACF,OAAO;QACT,CAAC;QACD,IAAI,CAAC;YACH,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC;gBAChB,MAAM,EAAE,MAAM,CAAC,MAAM;gBACrB,aAAa,EAAE,QAAQ,IAAI,EAAE;aAC9B,CAAC,CAAC;YACH,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,yBAAyB,IAAI,GAAG,CAAC,CAAC;QAC7D,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,CACtB,kCAAkC,IAAI,MAAM,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAC/F,CAAC;QACJ,CAAC;IACH,CAAC;CACF;AAED,oFAAoF;AACpF,MAAM,UAAU,aAAa,CAAC,QAAgB;IAC5C,MAAM,OAAO,GAAG,QAAQ,CAAC,IAAI,EAAE,CAAC;IAChC,MAAM,CAAC,GAAG,gCAAgC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACzD,IAAI,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IACpB,MAAM,CAAC,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAE,EAAE,EAAE,CAAC,CAAC;IACrC,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,CAAE,CAAC,WAAW,EAAE,CAAC;IACjC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IAC/C,MAAM,UAAU,GACd,IAAI,KAAK,IAAI;QACX,CAAC,CAAC,CAAC;QACH,CAAC,CAAC,IAAI,KAAK,GAAG;YACZ,CAAC,CAAC,IAAI;YACN,CAAC,CAAC,IAAI,KAAK,GAAG;gBACZ,CAAC,CAAC,MAAM;gBACR,CAAC,CAAC,EAAE,GAAG,MAAM,CAAC;IACtB,OAAO,CAAC,GAAG,UAAU,CAAC;AACxB,CAAC"}
+{"version":3,"file":"scheduler.js","sourceRoot":"","sources":["../../src/recipes/scheduler.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAC1E,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,KAAK,IAAI,SAAS,EAAE,MAAM,MAAM,CAAC;AAE1C,OAAO,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AACnD,OAAO,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AACzE,OAAO,EACL,sBAAsB,EACtB,oBAAoB,GACrB,MAAM,sBAAsB,CAAC;AA0C9B,MAAM,OAAO,eAAe;IAKG;IAJrB,SAAS,GAAsB,EAAE,CAAC;IACzB,aAAa,CAAqB;IAClC,eAAe,CAAuB;IAEvD,YAA6B,IAAsB;QAAtB,SAAI,GAAJ,IAAI,CAAkB;QACjD,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC,WAAW,IAAI,WAAW,CAAC;QACrD,IAAI,CAAC,eAAe,GAAG,IAAI,CAAC,aAAa,IAAI,aAAa,CAAC;IAC7D,CAAC;IAED,KAAK;QACH,IAAI,CAAC,IAAI,EAAE,CAAC;QAEZ,iCAAiC;QACjC,IAAI,QAAQ,GAAgB,IAAI,GAAG,EAAE,CAAC;QACtC,IAAI,CAAC;YACH,QAAQ,GAAG,sBAAsB,CAAC,UAAU,EAAE,CAAC,CAAC;QAClD,CAAC;QAAC,MAAM,CAAC;YACP,8CAA8C;QAChD,CAAC;QAED,IAAI,OAAiB,CAAC;QACtB,IAAI,CAAC;YACH,OAAO,GAAG,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAC9C,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,CAAC;QACZ,CAAC;QAWD,MAAM,UAAU,GAAgB,EAAE,CAAC;QAEnC,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;YACxB,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC;YACpD,IAAI,KAAK,GAAG,KAAK,CAAC;YAClB,IAAI,CAAC;gBACH,KAAK,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC,WAAW,EAAE,CAAC;YAC3C,CAAC;YAAC,MAAM,CAAC;gBACP,SAAS;YACX,CAAC;YAED,IAAI,KAAK,EAAE,CAAC;gBACV,oEAAoE;gBACpE,IAAI,oBAAoB,CAAC,QAAQ,CAAC,EAAE,CAAC;oBACnC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,CACtB,mCAAmC,CAAC,8BAA8B,CACnE,CAAC;oBACF,SAAS;gBACX,CAAC;gBACD,uDAAuD;gBACvD,qEAAqE;gBACrE,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC;gBACxD,IAAI,UAAU,GAAkB,IAAI,CAAC;gBACrC,IAAI,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;oBAC7B,IAAI,CAAC;wBACH,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,YAAY,EAAE,OAAO,CAAC,CAEvD,CAAC;wBACF,IAAI,CAAC,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC;4BACpB,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;4BACtD,IAAI,UAAU,CAAC,SAAS,CAAC;gCAAE,UAAU,GAAG,SAAS,CAAC;wBACpD,CAAC;oBACH,CAAC;oBAAC,OAAO,GAAG,EAAE,CAAC;wBACb,4DAA4D;wBAC5D,gEAAgE;wBAChE,uDAAuD;wBACvD,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,CACtB,+CAA+C,CAAC,OAAO,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,qCAAqC,CAC7I,CAAC;oBACJ,CAAC;gBACH,CAAC;gBACD,IAAI,CAAC,UAAU,EAAE,CAAC;oBAChB,IAAI,CAAC;wBACH,MAAM,IAAI,GAAG,WAAW,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;wBACpE,IAAI,IAAI;4BAAE,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;oBACnD,CAAC;oBAAC,MAAM,CAAC;wBACP,oBAAoB;oBACtB,CAAC;gBACH,CAAC;gBACD,IAAI,UAAU,EAAE,CAAC;oBACf,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,WAAW,EAAE,CAAC;oBACnD,UAAU,CAAC,IAAI,CAAC;wBACd,QAAQ,EAAE,UAAU;wBACpB,IAAI,EAAE,GAAG,KAAK,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM;wBACvC,UAAU,EAAE,QAAQ;qBACrB,CAAC,CAAC;gBACL,CAAC;gBACD,SAAS;YACX,CAAC;YAED,MAAM,MAAM,GAAG,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,mBAAmB,CAAC,CAAC;YACvE,MAAM,MAAM,GAAG,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;YACzD,IAAI,CAAC,MAAM,IAAI,CAAC,MAAM;gBAAE,SAAS;YACjC,UAAU,CAAC,IAAI,CAAC;gBACd,QAAQ,EAAE,QAAQ;gBAClB,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM;gBAC9B,UAAU,EAAE,IAAI;aACjB,CAAC,CAAC;QACL,CAAC;QAED,KAAK,MAAM,IAAI,IAAI,UAAU,EAAE,CAAC;YAC9B,MAAM,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YACvC,IAAI,CAAC;gBACH,IAAI,IAAY,CAAC;gBACjB,IAAI,QAA4B,CAAC;gBAEjC,IAAI,IAAI,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;oBACzB,MAAM,GAAG,GAAG,YAAY,CAAC,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;oBACjD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAG5B,CAAC;oBACF,IAAI,MAAM,CAAC,OAAO,EAAE,IAAI,KAAK,MAAM;wBAAE,SAAS;oBAC9C,IACE,CAAC,MAAM,CAAC,OAAO,CAAC,QAAQ;wBACxB,OAAO,MAAM,CAAC,OAAO,CAAC,QAAQ,KAAK,QAAQ;wBAE3C,SAAS;oBACX,QAAQ,GAAG,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC;oBACnC,IAAI,GAAG,MAAM,CAAC,IAAI,IAAI,IAAI,CAAC,QAAQ,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;gBAClD,CAAC;qBAAM,CAAC;oBACN,OAAO;oBACP,MAAM,GAAG,GAAG,YAAY,CAAC,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;oBACjD,MAAM,MAAM,GAAG,SAAS,CAAC,GAAG,CAG3B,CAAC;oBACF,IAAI,MAAM,CAAC,OAAO,EAAE,IAAI,KAAK,MAAM;wBAAE,SAAS;oBAC9C,QAAQ,GAAG,MAAM,CAAC,OAAO,CAAC,EAAE,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC;oBACxD,IAAI,CAAC,QAAQ,IAAI,OAAO,QAAQ,KAAK,QAAQ;wBAAE,SAAS;oBACxD,IAAI,GAAG,MAAM,CAAC,IAAI,IAAI,IAAI,CAAC,QAAQ,CAAC,CAAC,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;gBAC1D,CAAC;gBAED,qDAAqD;gBACrD,IAAI,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;oBACvB,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,CACtB,yCAAyC,IAAI,GAAG,CACjD,CAAC;oBACF,SAAS;gBACX,CAAC;gBAED,MAAM,OAAO,GAAG,aAAa,CAAC,QAAQ,CAAC,CAAC;gBACxC,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;oBACrB,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,CACtB,gCAAgC,IAAI,6BAA6B,QAAQ,sDAAsD,CAChI,CAAC;oBACF,SAAS;gBACX,CAAC;gBAED,IAAI,OAAO,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;oBAChC,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC;oBACtC,MAAM,KAAK,GAAG,IAAI,CAAC,aAAa,CAAC,GAAG,EAAE;wBACpC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;oBAClB,CAAC,EAAE,UAAU,CAAC,CAAC;oBACf,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,IAAI,KAAK;wBAAE,KAAK,CAAC,KAAK,EAAE,CAAC;oBACjE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;wBAClB,IAAI;wBACJ,QAAQ;wBACR,UAAU;wBACV,KAAK;qBACN,CAAC,CAAC;oBACH,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,CACtB,gBAAgB,IAAI,qBAAqB,UAAU,OAAO,QAAQ,GAAG,CACtE,CAAC;gBACJ,CAAC;qBAAM,CAAC;oBACN,QAAQ;oBACR,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,UAAU,EAAE,GAAG,EAAE;wBACrD,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;oBAClB,CAAC,CAAC,CAAC;oBACH,mEAAmE;oBACnE,MAAM,UAAU,GAAG,IAAI,CAAC,aAAa,CAAC,GAAG,EAAE,GAAE,CAAC,EAAE,aAAa,CAAC,CAAC;oBAC/D,IAAI,OAAO,UAAU,KAAK,QAAQ,IAAI,OAAO,IAAI,UAAU;wBACzD,UAAU,CAAC,KAAK,EAAE,CAAC;oBACrB,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;wBAClB,IAAI;wBACJ,QAAQ;wBACR,UAAU,EAAE,CAAC;wBACb,KAAK,EAAE,UAAU;wBACjB,OAAO;qBACR,CAAC,CAAC;oBACH,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,CACtB,gBAAgB,IAAI,qCAAqC,QAAQ,GAAG,CACrE,CAAC;gBACJ,CAAC;YACH,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,iEAAiE;gBACjE,kDAAkD;gBAClD,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,CACtB,yCAAyC,IAAI,CAAC,QAAQ,OAAO,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,gCAAgC,CAC9I,CAAC;YACJ,CAAC;QACH,CAAC;QACD,OAAO,IAAI,CAAC,SAAS,CAAC;IACxB,CAAC;IAED,IAAI;QACF,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YACnC,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;gBAClB,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;YACvB,CAAC;iBAAM,CAAC;gBACN,IAAI,CAAC,eAAe,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YACpC,CAAC;QACH,CAAC;QACD,IAAI,CAAC,SAAS,GAAG,EAAE,CAAC;IACtB,CAAC;IAED,OAAO;QACL,IAAI,CAAC,IAAI,EAAE,CAAC;QACZ,IAAI,CAAC,KAAK,EAAE,CAAC;IACf,CAAC;IAED,IAAI;QACF,OAAO,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,GAAG,IAAI,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC;IAC3E,CAAC;IAED,iFAAiF;IACjF,WAAW,CAAC,IAAY;QACtB,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAClB,CAAC;IAEO,IAAI,CAAC,IAAY;QACvB,qEAAqE;QACrE,mEAAmE;QACnE,oEAAoE;QACpE,8DAA8D;QAC9D,oEAAoE;QACpE,+DAA+D;QAC/D,iDAAiD;QACjD,IAAI,CAAC;YACH,IAAI,sBAAsB,CAAC,UAAU,EAAE,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;gBACnD,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,CACtB,yBAAyB,IAAI,2CAA2C,CACzE,CAAC;gBACF,OAAO;YACT,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,oEAAoE;QACtE,CAAC;QAED,oEAAoE;QACpE,uEAAuE;QACvE,yEAAyE;QACzE,IAAI,QAAuB,CAAC;QAC5B,IAAI,CAAC;YACH,QAAQ,GAAG,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;QAC5D,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,CACtB,wBAAwB,IAAI,OAAO,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CACtF,CAAC;YACF,OAAO;QACT,CAAC;QAED,IAAI,QAAQ,EAAE,CAAC;YACb,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;gBACvB,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,CACtB,wBAAwB,IAAI,+EAA+E,CAC5G,CAAC;gBACF,OAAO;YACT,CAAC;YACD,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;gBACpC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,CACtB,4BAA4B,IAAI,aAAa,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAChG,CAAC;YACJ,CAAC,CAAC,CAAC;YACH,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,kCAAkC,IAAI,GAAG,CAAC,CAAC;YACpE,OAAO;QACT,CAAC;QAED,4BAA4B;QAC5B,MAAM,MAAM,GAAG,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;QAC5D,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,sEAAsE;YACtE,kEAAkE;YAClE,mEAAmE;YACnE,iCAAiC;YACjC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,CACtB,wBAAwB,IAAI,kCAAkC,CAC/D,CAAC;YACF,OAAO;QACT,CAAC;QACD,IAAI,CAAC;YACH,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC;gBAChB,MAAM,EAAE,MAAM,CAAC,MAAM;gBACrB,aAAa,EAAE,QAAQ,IAAI,EAAE;aAC9B,CAAC,CAAC;YACH,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,yBAAyB,IAAI,GAAG,CAAC,CAAC;QAC7D,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,CACtB,kCAAkC,IAAI,MAAM,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAC/F,CAAC;QACJ,CAAC;IACH,CAAC;CACF;AAMD,yHAAyH;AACzH,MAAM,UAAU,aAAa,CAAC,QAAgB;IAC5C,MAAM,OAAO,GAAG,QAAQ,CAAC,IAAI,EAAE,CAAC;IAEhC,kBAAkB;IAClB,MAAM,CAAC,GAAG,gCAAgC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACzD,IAAI,CAAC,EAAE,CAAC;QACN,MAAM,CAAC,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAE,EAAE,EAAE,CAAC,CAAC;QACrC,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC;QACjC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,OAAO,IAAI,CAAC;QAC/C,MAAM,UAAU,GACd,IAAI,KAAK,IAAI;YACX,CAAC,CAAC,CAAC;YACH,CAAC,CAAC,IAAI,KAAK,GAAG;gBACZ,CAAC,CAAC,IAAI;gBACN,CAAC,CAAC,IAAI,KAAK,GAAG;oBACZ,CAAC,CAAC,MAAM;oBACR,CAAC,CAAC,EAAE,GAAG,MAAM,CAAC;QACtB,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,UAAU,EAAE,CAAC,GAAG,UAAU,EAAE,CAAC;IAC1D,CAAC;IAED,+CAA+C;IAC/C,IAAI,+BAA+B,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QAClD,IAAI,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;YAC3B,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC;QAChD,CAAC;IACH,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC"}