@ai-dossier/cli 0.89.4 → 0.89.5-next.548.1

package/dist/sched-ensure.d.ts

@@ -0,0 +1,35 @@
+/**
+ * `sched ensure-running` — the non-systemd watchdog (#945 AC1). Run every
+ * minute (cron): if no live engine holds the lease, raise the once-per-episode
+ * stale-lease alert and start one, detached, with its output appended to
+ * `<sched-dir>/engine.log`. Starting is race-safe by construction — the engine
+ * itself takes the lease atomically, so two watchdogs (or a watchdog and a
+ * systemd unit) can never run two engines.
+ *
+ * `--disable` / `--enable` toggle a marker file so an operator can stop the
+ * engine on purpose without the watchdog resurrecting it.
+ */
+import type { AlertNotifier } from '@ai-dossier/sched';
+import { type Journal, type SchedStore } from '@ai-dossier/sched';
+export declare const ENSURE_DISABLED_MARKER = ".ensure-running-disabled";
+/**
+ * No respawn storm. The minimum gap between watchdog starts is
+ * `ENSURE_BASE_INTERVAL_MS * 2^streak` (capped), where `streak` counts starts
+ * that were NOT followed by a live engine at the next check. At a 60 s cron
+ * cadence: the first restart is immediate, the second waits 60 s, then 120 s,
+ * 240 s … up to {@link ENSURE_MAX_INTERVAL_MS}. Seeing a live engine resets it.
+ */
+export declare const ENSURE_BASE_INTERVAL_MS = 30000;
+export declare const ENSURE_MAX_INTERVAL_MS: number;
+export type EnsureOutcome = 'alive' | 'disabled' | 'throttled' | 'started' | 'start-failed';
+export interface EnsureDeps {
+    store: SchedStore;
+    journal: Journal;
+    notify: AlertNotifier;
+    /** Spawn the engine detached; returns its pid or null when the spawn failed. */
+    spawnEngine: (logFile: string) => number | null;
+    now: () => Date;
+}
+export declare function setEnsureDisabled(store: SchedStore, disabled: boolean): void;
+export declare function ensureRunning(deps: EnsureDeps): EnsureOutcome;
+//# sourceMappingURL=sched-ensure.d.ts.map

package/dist/sched-ensure.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sched-ensure.d.ts","sourceRoot":"","sources":["../src/sched-ensure.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAIH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AACvD,OAAO,EAAwB,KAAK,OAAO,EAAE,KAAK,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAExF,eAAO,MAAM,sBAAsB,6BAA6B,CAAC;AACjE;;;;;;GAMG;AACH,eAAO,MAAM,uBAAuB,QAAS,CAAC;AAC9C,eAAO,MAAM,sBAAsB,QAAc,CAAC;AAsBlD,MAAM,MAAM,aAAa,GAAG,OAAO,GAAG,UAAU,GAAG,WAAW,GAAG,SAAS,GAAG,cAAc,CAAC;AAE5F,MAAM,WAAW,UAAU;IACzB,KAAK,EAAE,UAAU,CAAC;IAClB,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,EAAE,aAAa,CAAC;IACtB,gFAAgF;IAChF,WAAW,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,MAAM,GAAG,IAAI,CAAC;IAChD,GAAG,EAAE,MAAM,IAAI,CAAC;CACjB;AAED,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,UAAU,EAAE,QAAQ,EAAE,OAAO,GAAG,IAAI,CAQ5E;AAED,wBAAgB,aAAa,CAAC,IAAI,EAAE,UAAU,GAAG,aAAa,CA8C7D"}

package/dist/sched-ensure.js

@@ -0,0 +1,128 @@
+"use strict";
+/**
+ * `sched ensure-running` — the non-systemd watchdog (#945 AC1). Run every
+ * minute (cron): if no live engine holds the lease, raise the once-per-episode
+ * stale-lease alert and start one, detached, with its output appended to
+ * `<sched-dir>/engine.log`. Starting is race-safe by construction — the engine
+ * itself takes the lease atomically, so two watchdogs (or a watchdog and a
+ * systemd unit) can never run two engines.
+ *
+ * `--disable` / `--enable` toggle a marker file so an operator can stop the
+ * engine on purpose without the watchdog resurrecting it.
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ENSURE_MAX_INTERVAL_MS = exports.ENSURE_BASE_INTERVAL_MS = exports.ENSURE_DISABLED_MARKER = void 0;
+exports.setEnsureDisabled = setEnsureDisabled;
+exports.ensureRunning = ensureRunning;
+const fs = __importStar(require("node:fs"));
+const path = __importStar(require("node:path"));
+const sched_1 = require("@ai-dossier/sched");
+exports.ENSURE_DISABLED_MARKER = '.ensure-running-disabled';
+/**
+ * No respawn storm. The minimum gap between watchdog starts is
+ * `ENSURE_BASE_INTERVAL_MS * 2^streak` (capped), where `streak` counts starts
+ * that were NOT followed by a live engine at the next check. At a 60 s cron
+ * cadence: the first restart is immediate, the second waits 60 s, then 120 s,
+ * 240 s … up to {@link ENSURE_MAX_INTERVAL_MS}. Seeing a live engine resets it.
+ */
+exports.ENSURE_BASE_INTERVAL_MS = 30_000;
+exports.ENSURE_MAX_INTERVAL_MS = 30 * 60_000;
+const ENSURE_LAST_MARKER = '.ensure-running-last';
+function readRecord(file) {
+    try {
+        const raw = fs.readFileSync(file, 'utf8').trim();
+        // Older format: a bare timestamp.
+        if (/^\d+$/.test(raw))
+            return { at: Number(raw), streak: 1 };
+        const rec = JSON.parse(raw);
+        return typeof rec.at === 'number' && typeof rec.streak === 'number'
+            ? { at: rec.at, streak: rec.streak }
+            : null;
+    }
+    catch {
+        return null;
+    }
+}
+function setEnsureDisabled(store, disabled) {
+    const marker = path.join(store.dir, exports.ENSURE_DISABLED_MARKER);
+    if (disabled) {
+        fs.mkdirSync(store.dir, { recursive: true, mode: 0o700 });
+        fs.writeFileSync(marker, `${new Date().toISOString()}\n`, { mode: 0o600 });
+    }
+    else {
+        fs.rmSync(marker, { force: true });
+    }
+}
+function ensureRunning(deps) {
+    const { store, journal } = deps;
+    if (fs.existsSync(path.join(store.dir, exports.ENSURE_DISABLED_MARKER)))
+        return 'disabled';
+    const lease = store.engineLeaseStatus();
+    if (lease?.alive) {
+        // A healthy engine ends the crash-loop episode.
+        fs.rmSync(path.join(store.dir, ENSURE_LAST_MARKER), { force: true });
+        return 'alive';
+    }
+    // Dead or absent: alert (deduped per episode), then bring the engine back.
+    try {
+        (0, sched_1.checkStaleLeaseAlert)(store, journal, deps.notify, deps.now());
+    }
+    catch (err) {
+        // An unreadable state must not stop the restart attempt — the alert is advisory.
+        process.stderr.write(`⚠ sched ensure-running: stale-lease alert skipped: ${err.message}\n`);
+    }
+    const lastFile = path.join(store.dir, ENSURE_LAST_MARKER);
+    const last = readRecord(lastFile);
+    const streak = last === null ? 0 : last.streak;
+    if (last !== null) {
+        const gap = Math.min(exports.ENSURE_BASE_INTERVAL_MS * 2 ** (streak - 1), exports.ENSURE_MAX_INTERVAL_MS);
+        if (deps.now().getTime() - last.at < gap)
+            return 'throttled';
+    }
+    fs.mkdirSync(store.dir, { recursive: true, mode: 0o700 });
+    fs.writeFileSync(lastFile, `${JSON.stringify({ at: deps.now().getTime(), streak: streak + 1 })}\n`, { mode: 0o600 });
+    const pid = deps.spawnEngine(path.join(store.dir, 'engine.log'));
+    journal.append({
+        event: 'engine-started',
+        ...(pid !== null ? { pid } : {}),
+        reason: pid !== null ? 'ensure-running' : 'ensure-running-spawn-failed',
+        detail: pid !== null
+            ? `watchdog started the engine (${lease ? `stale lease pid ${lease.pid}` : 'no lease'})`
+            : 'watchdog could not spawn the engine',
+    }, deps.now());
+    return pid !== null ? 'started' : 'start-failed';
+}
+//# sourceMappingURL=sched-ensure.js.map

package/dist/sched-ensure.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sched-ensure.js","sourceRoot":"","sources":["../src/sched-ensure.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;GAUG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAiDH,8CAQC;AAED,sCA8CC;AAvGD,4CAA8B;AAC9B,gDAAkC;AAElC,6CAAwF;AAE3E,QAAA,sBAAsB,GAAG,0BAA0B,CAAC;AACjE;;;;;;GAMG;AACU,QAAA,uBAAuB,GAAG,MAAM,CAAC;AACjC,QAAA,sBAAsB,GAAG,EAAE,GAAG,MAAM,CAAC;AAClD,MAAM,kBAAkB,GAAG,sBAAsB,CAAC;AAOlD,SAAS,UAAU,CAAC,IAAY;IAC9B,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;QACjD,kCAAkC;QAClC,IAAI,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC;YAAE,OAAO,EAAE,EAAE,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC;QAC7D,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAA0B,CAAC;QACrD,OAAO,OAAO,GAAG,CAAC,EAAE,KAAK,QAAQ,IAAI,OAAO,GAAG,CAAC,MAAM,KAAK,QAAQ;YACjE,CAAC,CAAC,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE;YACpC,CAAC,CAAC,IAAI,CAAC;IACX,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAaD,SAAgB,iBAAiB,CAAC,KAAiB,EAAE,QAAiB;IACpE,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,8BAAsB,CAAC,CAAC;IAC5D,IAAI,QAAQ,EAAE,CAAC;QACb,EAAE,CAAC,SAAS,CAAC,KAAK,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QAC1D,EAAE,CAAC,aAAa,CAAC,MAAM,EAAE,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC7E,CAAC;SAAM,CAAC;QACN,EAAE,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACrC,CAAC;AACH,CAAC;AAED,SAAgB,aAAa,CAAC,IAAgB;IAC5C,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC;IAChC,IAAI,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,8BAAsB,CAAC,CAAC;QAAE,OAAO,UAAU,CAAC;IACnF,MAAM,KAAK,GAAG,KAAK,CAAC,iBAAiB,EAAE,CAAC;IACxC,IAAI,KAAK,EAAE,KAAK,EAAE,CAAC;QACjB,gDAAgD;QAChD,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,kBAAkB,CAAC,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACrE,OAAO,OAAO,CAAC;IACjB,CAAC;IACD,2EAA2E;IAC3E,IAAI,CAAC;QACH,IAAA,4BAAoB,EAAC,KAAK,EAAE,OAAO,EAAE,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;IAChE,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,iFAAiF;QACjF,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,sDAAuD,GAAa,CAAC,OAAO,IAAI,CACjF,CAAC;IACJ,CAAC;IAED,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,kBAAkB,CAAC,CAAC;IAC1D,MAAM,IAAI,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC;IAClC,MAAM,MAAM,GAAG,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC;IAC/C,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;QAClB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,+BAAuB,GAAG,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,EAAE,8BAAsB,CAAC,CAAC;QAC1F,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,EAAE,GAAG,GAAG;YAAE,OAAO,WAAW,CAAC;IAC/D,CAAC;IACD,EAAE,CAAC,SAAS,CAAC,KAAK,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC1D,EAAE,CAAC,aAAa,CACd,QAAQ,EACR,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,EAAE,MAAM,EAAE,MAAM,GAAG,CAAC,EAAE,CAAC,IAAI,EACvE,EAAE,IAAI,EAAE,KAAK,EAAE,CAChB,CAAC;IACF,MAAM,GAAG,GAAG,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC,CAAC;IACjE,OAAO,CAAC,MAAM,CACZ;QACE,KAAK,EAAE,gBAAgB;QACvB,GAAG,CAAC,GAAG,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAChC,MAAM,EAAE,GAAG,KAAK,IAAI,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,6BAA6B;QACvE,MAAM,EACJ,GAAG,KAAK,IAAI;YACV,CAAC,CAAC,gCAAgC,KAAK,CAAC,CAAC,CAAC,mBAAmB,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,UAAU,GAAG;YACxF,CAAC,CAAC,qCAAqC;KAC5C,EACD,IAAI,CAAC,GAAG,EAAE,CACX,CAAC;IACF,OAAO,GAAG,KAAK,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,cAAc,CAAC;AACnD,CAAC"}

package/dist/sched-service.d.ts

@@ -0,0 +1,113 @@
+/**
+ * Supervised engine deployment (#945 AC1): `sched service install|uninstall|status`.
+ *
+ * The engine is safe to kill at any instant (lease + heartbeat, crash-safe
+ * state, work preserved before respawn) — what it cannot do is restart ITSELF.
+ * This module makes the supervisor the default rather than a paragraph in a
+ * README:
+ *
+ *  - systemd *user* unit `dossier-sched-<project>.service`: Restart=always,
+ *    KillMode=process (agents outlive the engine, #679), the node/nvm PATH
+ *    captured at install time, WorkingDirectory = the project checkout (the
+ *    engine treats its cwd as the repo). Output goes to the journal
+ *    (`journalctl --user -u <unit>`); the engine's own `events.jsonl` journal
+ *    is the durable per-project trail.
+ *  - non-systemd fallback: a tagged crontab block — `@reboot` plus a
+ *    once-a-minute `sched ensure-running` watchdog that starts the engine when
+ *    its lease is stale or absent.
+ *
+ * Everything is injectable (exec, fs roots, crontab I/O) so unit generation and
+ * both install paths are tested against temp directories — no test, and no
+ * dry run, ever touches the real systemd or crontab.
+ */
+export type ServiceMode = 'systemd' | 'cron';
+export interface ServiceSpec {
+    project: string;
+    /** Node binary (`process.execPath`) — an absolute path, so nvm needs no shell init. */
+    nodePath: string;
+    /** The CLI entry the unit runs (`process.argv[1]`, the `ai-dossier` launcher — stable across `npm i -g`). */
+    cliPath: string;
+    /** The project's checkout: WorkingDirectory / cron `cd`. */
+    repoDir: string;
+    /** PATH captured at install time (nvm's node dir, gh, git, claude). */
+    envPath: string;
+    autoUpgrade: boolean;
+    alertIssue?: number;
+}
+/**
+ * PATH for a long-lived service: absolute entries only (a relative one such as
+ * `./node_modules/.bin` would resolve against the service's cwd — the project
+ * checkout — letting a repo's files shadow `git`/`gh`), de-duplicated in order.
+ */
+export declare function serviceEnvPath(raw: string | undefined): string;
+export declare const SERVICE_PREFIX = "dossier-sched-";
+export declare function unitName(project: string): string;
+export declare function startArgs(spec: ServiceSpec): string[];
+export declare const START_LIMIT_INTERVAL_SEC = 600;
+export declare const START_LIMIT_BURST = 10;
+export declare function renderSystemdUnit(spec: ServiceSpec): string;
+export declare function renderCronBlock(spec: ServiceSpec): string;
+/** Remove this project's tagged block from a crontab; returns the text unchanged when there is none. */
+export declare function stripCronBlock(crontab: string, project: string): string;
+export declare function hasCronBlock(crontab: string, project: string): boolean;
+/** New crontab text with exactly one up-to-date block for `spec.project` (idempotent). */
+export declare function upsertCronBlock(crontab: string, spec: ServiceSpec): string;
+/**
+ * A supervisor pins absolute paths at install time, so an ephemeral one (a temp
+ * dir, a batch/issue worktree, a removed checkout) silently breaks it later.
+ * Returns hard errors (refuse to install) and soft warnings.
+ */
+export declare function validateServicePaths(spec: ServiceSpec, exists?: (p: string) => boolean, tmp?: string): {
+    errors: string[];
+    warnings: string[];
+};
+/** Run a command; null on failure (the `ExecFn` contract). */
+export type RunFn = (file: string, args: string[]) => string | null;
+export interface ServiceIo {
+    run: RunFn;
+    /** Directory for the systemd user unit (default `~/.config/systemd/user`). */
+    unitDir: string;
+    /**
+     * The current crontab text. `''` ONLY when the user verifiably has none
+     * ("no crontab for <user>"); any other failure THROWS — installing over an
+     * unreadable crontab would overwrite the user's whole schedule.
+     */
+    readCrontab: () => string;
+    writeCrontab: (text: string) => boolean;
+    /** When true no `systemctl`/`crontab` is invoked — files are only rendered (tests, `--no-activate`). */
+    render: boolean;
+}
+export declare function defaultUnitDir(home?: string): string;
+/** Whether `systemctl --user` is usable here (a user manager is running). */
+export declare function systemdUserAvailable(run: RunFn): boolean;
+export interface InstallResult {
+    mode: ServiceMode;
+    changed: boolean;
+    /** False when anything the install had to do failed — the caller must exit non-zero. */
+    ok: boolean;
+    /** True only when the supervisor is really active (enabled/started, or the crontab written); false under render-only. */
+    activated: boolean;
+    unitPath?: string;
+    notes: string[];
+}
+export declare function installService(spec: ServiceSpec, mode: ServiceMode, io: ServiceIo): InstallResult;
+export declare function uninstallService(project: string, io: ServiceIo): {
+    removed: string[];
+    errors: string[];
+};
+export interface ServiceStatus {
+    project: string;
+    systemd: {
+        installed: boolean;
+        enabled: string | null;
+        active: string | null;
+        unitPath: string;
+    };
+    cron: {
+        installed: boolean;
+        error?: string;
+    };
+    supervised: boolean;
+}
+export declare function serviceStatus(project: string, io: ServiceIo): ServiceStatus;
+//# sourceMappingURL=sched-service.d.ts.map

package/dist/sched-service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sched-service.d.ts","sourceRoot":"","sources":["../src/sched-service.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAMH,MAAM,MAAM,WAAW,GAAG,SAAS,GAAG,MAAM,CAAC;AAE7C,MAAM,WAAW,WAAW;IAC1B,OAAO,EAAE,MAAM,CAAC;IAChB,uFAAuF;IACvF,QAAQ,EAAE,MAAM,CAAC;IACjB,6GAA6G;IAC7G,OAAO,EAAE,MAAM,CAAC;IAChB,4DAA4D;IAC5D,OAAO,EAAE,MAAM,CAAC;IAChB,uEAAuE;IACvE,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,OAAO,CAAC;IACrB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED;;;;GAIG;AACH,wBAAgB,cAAc,CAAC,GAAG,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,CAM9D;AAED,eAAO,MAAM,cAAc,mBAAmB,CAAC;AAE/C,wBAAgB,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAEhD;AAyBD,wBAAgB,SAAS,CAAC,IAAI,EAAE,WAAW,GAAG,MAAM,EAAE,CASrD;AAED,eAAO,MAAM,wBAAwB,MAAM,CAAC;AAC5C,eAAO,MAAM,iBAAiB,KAAK,CAAC;AAEpC,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,WAAW,GAAG,MAAM,CAiC3D;AAaD,wBAAgB,eAAe,CAAC,IAAI,EAAE,WAAW,GAAG,MAAM,CAczD;AAED,wGAAwG;AACxG,wBAAgB,cAAc,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,MAAM,CAgBvE;AAED,wBAAgB,YAAY,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAEtE;AAED,0FAA0F;AAC1F,wBAAgB,eAAe,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,WAAW,GAAG,MAAM,CAG1E;AAED;;;;GAIG;AACH,wBAAgB,oBAAoB,CAClC,IAAI,EAAE,WAAW,EACjB,MAAM,GAAE,CAAC,CAAC,EAAE,MAAM,KAAK,OAAuB,EAC9C,GAAG,GAAE,MAAoB,GACxB;IAAE,MAAM,EAAE,MAAM,EAAE,CAAC;IAAC,QAAQ,EAAE,MAAM,EAAE,CAAA;CAAE,CAwB1C;AAID,8DAA8D;AAC9D,MAAM,MAAM,KAAK,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,MAAM,GAAG,IAAI,CAAC;AAEpE,MAAM,WAAW,SAAS;IACxB,GAAG,EAAE,KAAK,CAAC;IACX,8EAA8E;IAC9E,OAAO,EAAE,MAAM,CAAC;IAChB;;;;OAIG;IACH,WAAW,EAAE,MAAM,MAAM,CAAC;IAC1B,YAAY,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC;IACxC,wGAAwG;IACxG,MAAM,EAAE,OAAO,CAAC;CACjB;AAED,wBAAgB,cAAc,CAAC,IAAI,SAAe,GAAG,MAAM,CAE1D;AAED,6EAA6E;AAC7E,wBAAgB,oBAAoB,CAAC,GAAG,EAAE,KAAK,GAAG,OAAO,CAExD;AAED,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,WAAW,CAAC;IAClB,OAAO,EAAE,OAAO,CAAC;IACjB,wFAAwF;IACxF,EAAE,EAAE,OAAO,CAAC;IACZ,yHAAyH;IACzH,SAAS,EAAE,OAAO,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,EAAE,CAAC;CACjB;AAED,wBAAgB,cAAc,CAAC,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,WAAW,EAAE,EAAE,EAAE,SAAS,GAAG,aAAa,CA4DjG;AAED,wBAAgB,gBAAgB,CAC9B,OAAO,EAAE,MAAM,EACf,EAAE,EAAE,SAAS,GACZ;IAAE,OAAO,EAAE,MAAM,EAAE,CAAC;IAAC,MAAM,EAAE,MAAM,EAAE,CAAA;CAAE,CAgCzC;AAED,MAAM,WAAW,aAAa;IAC5B,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE;QAAE,SAAS,EAAE,OAAO,CAAC;QAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAA;KAAE,CAAC;IACjG,IAAI,EAAE;QAAE,SAAS,EAAE,OAAO,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAC7C,UAAU,EAAE,OAAO,CAAC;CACrB;AAED,wBAAgB,aAAa,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,SAAS,GAAG,aAAa,CA0B3E"}

package/dist/sched-service.js

@@ -0,0 +1,364 @@
+"use strict";
+/**
+ * Supervised engine deployment (#945 AC1): `sched service install|uninstall|status`.
+ *
+ * The engine is safe to kill at any instant (lease + heartbeat, crash-safe
+ * state, work preserved before respawn) — what it cannot do is restart ITSELF.
+ * This module makes the supervisor the default rather than a paragraph in a
+ * README:
+ *
+ *  - systemd *user* unit `dossier-sched-<project>.service`: Restart=always,
+ *    KillMode=process (agents outlive the engine, #679), the node/nvm PATH
+ *    captured at install time, WorkingDirectory = the project checkout (the
+ *    engine treats its cwd as the repo). Output goes to the journal
+ *    (`journalctl --user -u <unit>`); the engine's own `events.jsonl` journal
+ *    is the durable per-project trail.
+ *  - non-systemd fallback: a tagged crontab block — `@reboot` plus a
+ *    once-a-minute `sched ensure-running` watchdog that starts the engine when
+ *    its lease is stale or absent.
+ *
+ * Everything is injectable (exec, fs roots, crontab I/O) so unit generation and
+ * both install paths are tested against temp directories — no test, and no
+ * dry run, ever touches the real systemd or crontab.
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.START_LIMIT_BURST = exports.START_LIMIT_INTERVAL_SEC = exports.SERVICE_PREFIX = void 0;
+exports.serviceEnvPath = serviceEnvPath;
+exports.unitName = unitName;
+exports.startArgs = startArgs;
+exports.renderSystemdUnit = renderSystemdUnit;
+exports.renderCronBlock = renderCronBlock;
+exports.stripCronBlock = stripCronBlock;
+exports.hasCronBlock = hasCronBlock;
+exports.upsertCronBlock = upsertCronBlock;
+exports.validateServicePaths = validateServicePaths;
+exports.defaultUnitDir = defaultUnitDir;
+exports.systemdUserAvailable = systemdUserAvailable;
+exports.installService = installService;
+exports.uninstallService = uninstallService;
+exports.serviceStatus = serviceStatus;
+const fs = __importStar(require("node:fs"));
+const os = __importStar(require("node:os"));
+const path = __importStar(require("node:path"));
+/**
+ * PATH for a long-lived service: absolute entries only (a relative one such as
+ * `./node_modules/.bin` would resolve against the service's cwd — the project
+ * checkout — letting a repo's files shadow `git`/`gh`), de-duplicated in order.
+ */
+function serviceEnvPath(raw) {
+    const seen = new Set();
+    for (const entry of (raw ?? '').split(':')) {
+        if (entry.startsWith('/') && !seen.has(entry))
+            seen.add(entry);
+    }
+    return seen.size > 0 ? [...seen].join(':') : '/usr/local/bin:/usr/bin:/bin';
+}
+exports.SERVICE_PREFIX = 'dossier-sched-';
+function unitName(project) {
+    return `${exports.SERVICE_PREFIX}${project.replace(/[^A-Za-z0-9._-]+/g, '-')}.service`;
+}
+/** Systemd unit values may not contain newlines and are `%`-expanded — reject/escape both. */
+function unitValue(v) {
+    if (/[\r\n]/.test(v))
+        throw new Error(`refusing a newline in a unit value: ${JSON.stringify(v)}`);
+    return v.replace(/%/g, '%%');
+}
+/** Quote a systemd unit value that may contain spaces, quotes, or backslashes. */
+function quotedUnitValue(v) {
+    if (/[\r\n]/.test(v))
+        throw new Error(`refusing a newline in a unit value: ${JSON.stringify(v)}`);
+    return `"${v.replace(/\\/g, '\\\\').replace(/"/g, '\\"').replace(/%/g, '%%')}"`;
+}
+/** Quote one ExecStart argument (systemd's own quoting: double quotes, `\"` and `\\`). */
+function execArg(v) {
+    if (/[\r\n]/.test(v))
+        throw new Error(`refusing a newline in an ExecStart argument`);
+    const escaped = v
+        .replace(/\\/g, '\\\\')
+        .replace(/"/g, '\\"')
+        .replace(/%/g, '%%')
+        .replace(/\$/g, () => '$$');
+    return /^[A-Za-z0-9_./:@=+-]+$/.test(v) ? escaped : `"${escaped}"`;
+}
+function startArgs(spec) {
+    return [
+        'sched',
+        'start',
+        '--project',
+        spec.project,
+        ...(spec.autoUpgrade ? ['--auto-upgrade'] : []),
+        ...(spec.alertIssue !== undefined ? ['--alert-issue', String(spec.alertIssue)] : []),
+    ];
+}
+exports.START_LIMIT_INTERVAL_SEC = 600;
+exports.START_LIMIT_BURST = 10;
+function renderSystemdUnit(spec) {
+    const exec = [spec.nodePath, spec.cliPath, ...startArgs(spec)].map(execArg).join(' ');
+    return `${[
+        '# Managed by `ai-dossier sched service install` (#945) — re-run it to update, `sched service uninstall` to remove.',
+        '[Unit]',
+        `Description=dossier sched engine (${unitValue(spec.project)})`,
+        'After=network-online.target',
+        'Wants=network-online.target',
+        // A crash-looping engine must not restart every few seconds forever: at most
+        // START_LIMIT_BURST starts per START_LIMIT_INTERVAL_SEC, then the unit is left
+        // `failed` for an operator (`systemctl --user reset-failed <unit>` + start).
+        `StartLimitIntervalSec=${exports.START_LIMIT_INTERVAL_SEC}`,
+        `StartLimitBurst=${exports.START_LIMIT_BURST}`,
+        '',
+        '[Service]',
+        'Type=simple',
+        `WorkingDirectory=${quotedUnitValue(spec.repoDir)}`,
+        `Environment=${quotedUnitValue(`PATH=${spec.envPath}`)}`,
+        `ExecStart=${exec}`,
+        // Always: a clean exit (a graceful stop, an upgrade restart) must come back too.
+        'Restart=always',
+        // Exponential backoff between restarts (systemd >= 254; older versions ignore
+        // the two Restart*= lines below with a warning and keep RestartSec).
+        'RestartSec=10',
+        'RestartSteps=5',
+        'RestartMaxDelaySec=300',
+        // Kill ONLY the engine on stop/restart — dispatched agents outlive it (#679).
+        'KillMode=process',
+        'TimeoutStopSec=60',
+        '',
+        '[Install]',
+        'WantedBy=default.target',
+    ].join('\n')}\n`;
+}
+// --- cron fallback ---
+const CRON_BEGIN = (project) => `# BEGIN dossier-sched ${project}`;
+const CRON_END = (project) => `# END dossier-sched ${project}`;
+/** Single-quote for /bin/sh. */
+function shq(v) {
+    if (/[\r\n\0]/.test(v))
+        throw new Error('refusing a newline in a cron value');
+    return `'${v.replace(/'/g, `'\\''`)}'`;
+}
+function renderCronBlock(spec) {
+    const cmd = `cd ${shq(spec.repoDir)} && PATH=${shq(spec.envPath)} ${shq(spec.nodePath)} ${shq(spec.cliPath)}`;
+    // cron turns an unescaped `%` in a command into a newline (and feeds the rest to stdin).
+    const ensure = `${cmd} sched ensure-running --project ${shq(spec.project)}${spec.autoUpgrade ? ' --auto-upgrade' : ''}${spec.alertIssue !== undefined ? ` --alert-issue ${spec.alertIssue}` : ''}`.replace(/%/g, '\\%');
+    return [
+        CRON_BEGIN(spec.project),
+        `@reboot ${ensure} >/dev/null 2>&1`,
+        `* * * * * ${ensure} >/dev/null 2>&1`,
+        CRON_END(spec.project),
+    ].join('\n');
+}
+/** Remove this project's tagged block from a crontab; returns the text unchanged when there is none. */
+function stripCronBlock(crontab, project) {
+    const lines = crontab.split('\n');
+    const out = [];
+    let skipping = false;
+    for (const line of lines) {
+        if (line === CRON_BEGIN(project)) {
+            skipping = true;
+            continue;
+        }
+        if (skipping) {
+            if (line === CRON_END(project))
+                skipping = false;
+            continue;
+        }
+        out.push(line);
+    }
+    return out.join('\n');
+}
+function hasCronBlock(crontab, project) {
+    return crontab.split('\n').includes(CRON_BEGIN(project));
+}
+/** New crontab text with exactly one up-to-date block for `spec.project` (idempotent). */
+function upsertCronBlock(crontab, spec) {
+    const base = stripCronBlock(crontab, spec.project).replace(/\n+$/, '');
+    return `${base === '' ? '' : `${base}\n`}${renderCronBlock(spec)}\n`;
+}
+/**
+ * A supervisor pins absolute paths at install time, so an ephemeral one (a temp
+ * dir, a batch/issue worktree, a removed checkout) silently breaks it later.
+ * Returns hard errors (refuse to install) and soft warnings.
+ */
+function validateServicePaths(spec, exists = fs.existsSync, tmp = os.tmpdir()) {
+    const errors = [];
+    const warnings = [];
+    const ephemeral = (p) => p === tmp || p.startsWith(`${tmp}${path.sep}`) || p.split(path.sep).includes('worktrees');
+    for (const [label, p] of [
+        ['node binary', spec.nodePath],
+        ['ai-dossier entry point', spec.cliPath],
+        ['repository', spec.repoDir],
+    ]) {
+        if (!path.isAbsolute(p))
+            errors.push(`${label} is not an absolute path: ${p}`);
+        else if (!exists(p))
+            errors.push(`${label} does not exist: ${p}`);
+        else if (ephemeral(p)) {
+            errors.push(`${label} is under a temporary or worktree directory (${p}) — it will not survive; install from the project's main checkout with a global ai-dossier`);
+        }
+    }
+    if (spec.nodePath.includes(`${path.sep}.nvm${path.sep}versions${path.sep}`)) {
+        warnings.push('node is an nvm version path: after `nvm install`/upgrading node, re-run `sched service install` to re-pin it.');
+    }
+    return { errors, warnings };
+}
+function defaultUnitDir(home = os.homedir()) {
+    return path.join(home, '.config', 'systemd', 'user');
+}
+/** Whether `systemctl --user` is usable here (a user manager is running). */
+function systemdUserAvailable(run) {
+    return run('systemctl', ['--user', 'show-environment']) !== null;
+}
+function installService(spec, mode, io) {
+    const notes = [];
+    let ok = true;
+    const activated = !io.render;
+    if (mode === 'systemd') {
+        const unitPath = path.join(io.unitDir, unitName(spec.project));
+        const text = renderSystemdUnit(spec);
+        let previous = null;
+        try {
+            previous = fs.readFileSync(unitPath, 'utf8');
+        }
+        catch {
+            // not installed yet
+        }
+        const changed = previous !== text;
+        if (changed) {
+            fs.mkdirSync(io.unitDir, { recursive: true });
+            fs.writeFileSync(unitPath, text, { mode: 0o644 });
+        }
+        if (!io.render) {
+            const unit = unitName(spec.project);
+            if (changed && io.run('systemctl', ['--user', 'daemon-reload']) === null) {
+                ok = false;
+                notes.push('systemctl --user daemon-reload failed');
+            }
+            // enable --now is idempotent; it also (re)starts an inactive unit.
+            if (io.run('systemctl', ['--user', 'enable', '--now', unit]) === null) {
+                ok = false;
+                notes.push(`systemctl --user enable --now ${unit} failed`);
+            }
+            else if (changed && previous !== null) {
+                if (io.run('systemctl', ['--user', 'restart', unit]) === null) {
+                    ok = false;
+                    notes.push(`systemctl --user restart ${unit} failed`);
+                }
+                else {
+                    notes.push('unit changed: restarted (agents keep running — KillMode=process)');
+                }
+            }
+            notes.push('Run `loginctl enable-linger $USER` once so the service starts at boot without a login session.');
+        }
+        return { mode, changed, ok, activated, unitPath, notes };
+    }
+    // cron: render-only never reads or writes the crontab.
+    if (io.render) {
+        return { mode, changed: false, ok: true, activated: false, notes };
+    }
+    let current;
+    try {
+        current = io.readCrontab();
+    }
+    catch (err) {
+        notes.push(`could not read the crontab — nothing was changed: ${err.message}`);
+        return { mode, changed: false, ok: false, activated: false, notes };
+    }
+    const next = upsertCronBlock(current, spec);
+    const changed = next !== current;
+    if (changed && !io.writeCrontab(next)) {
+        ok = false;
+        notes.push('could not write the crontab');
+    }
+    return { mode, changed, ok, activated, notes };
+}
+function uninstallService(project, io) {
+    const removed = [];
+    const errors = [];
+    const unitPath = path.join(io.unitDir, unitName(project));
+    if (fs.existsSync(unitPath)) {
+        if (!io.render &&
+            io.run('systemctl', ['--user', 'disable', '--now', unitName(project)]) === null) {
+            errors.push(`systemctl --user disable --now ${unitName(project)} failed`);
+        }
+        fs.rmSync(unitPath, { force: true });
+        if (!io.render && io.run('systemctl', ['--user', 'daemon-reload']) === null) {
+            errors.push('systemctl --user daemon-reload failed');
+        }
+        removed.push(unitPath);
+    }
+    if (!io.render) {
+        let crontab = null;
+        try {
+            crontab = io.readCrontab();
+        }
+        catch (err) {
+            errors.push(`could not read the crontab — its block (if any) was not removed: ${err.message}`);
+        }
+        if (crontab !== null && hasCronBlock(crontab, project)) {
+            if (io.writeCrontab(stripCronBlock(crontab, project)))
+                removed.push('crontab block');
+            else
+                errors.push('could not write the crontab');
+        }
+    }
+    return { removed, errors };
+}
+function serviceStatus(project, io) {
+    const unitPath = path.join(io.unitDir, unitName(project));
+    const installed = fs.existsSync(unitPath);
+    const enabled = installed && !io.render
+        ? io.run('systemctl', ['--user', 'is-enabled', unitName(project)])
+        : null;
+    const active = installed && !io.render
+        ? io.run('systemctl', ['--user', 'is-active', unitName(project)])
+        : null;
+    let cronInstalled = false;
+    let cronError;
+    if (!io.render) {
+        try {
+            cronInstalled = hasCronBlock(io.readCrontab(), project);
+        }
+        catch (err) {
+            cronError = err.message;
+        }
+    }
+    return {
+        project,
+        systemd: { installed, enabled, active, unitPath },
+        cron: { installed: cronInstalled, ...(cronError ? { error: cronError } : {}) },
+        supervised: (installed && (active === 'active' || io.render)) || cronInstalled,
+    };
+}
+//# sourceMappingURL=sched-service.js.map