@ai-dossier/sched 0.2.0 → 0.2.1

package/dist/journal.js

@@ -0,0 +1,113 @@
+"use strict";
+/**
+ * Append-only event journal (#464, AC6 — "all events journaled"; RFC-0001 §D.4
+ * "Audit"). Every engine decision lands here as one JSONL line in
+ * `<sched-dir>/events.jsonl`. The journal must never crash a tick: write
+ * failures are swallowed after a one-line stderr warning — state.json remains
+ * the operational truth, the journal is the operator's flight recorder.
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.Journal = exports.JOURNAL_FILE = void 0;
+exports.readJsonl = readJsonl;
+exports.issueOfUnit = issueOfUnit;
+exports.unitEvent = unitEvent;
+const fs = __importStar(require("node:fs"));
+const path = __importStar(require("node:path"));
+/** The journal file name — the single source (persist.ts's journalPath uses it). */
+exports.JOURNAL_FILE = 'events.jsonl';
+class Journal {
+    filePath;
+    constructor(dir) {
+        this.filePath = path.join(dir, exports.JOURNAL_FILE);
+    }
+    /** Append one event, stamping `ts` from the caller's clock. Never throws. */
+    append(event, now = new Date()) {
+        const line = { ts: now.toISOString(), ...event };
+        try {
+            fs.mkdirSync(path.dirname(this.filePath), { recursive: true, mode: 0o700 });
+            fs.appendFileSync(this.filePath, `${JSON.stringify(line)}\n`, {
+                encoding: 'utf8',
+                mode: 0o600,
+            });
+        }
+        catch (err) {
+            process.stderr.write(`⚠ sched: could not append journal event ${event.event}: ${err.message}\n`);
+        }
+    }
+    /** Read every event, oldest first; malformed lines are skipped. */
+    read() {
+        return readJsonl(this.filePath);
+    }
+}
+exports.Journal = Journal;
+/**
+ * Read a JSONL file oldest-first, skipping malformed lines; `[]` when the
+ * file is absent or unreadable. Shared by the journal and the CLI's run log
+ * so the read-loop exists once.
+ */
+function readJsonl(file) {
+    try {
+        if (!fs.existsSync(file))
+            return [];
+        const lines = fs.readFileSync(file, 'utf8').split('\n').filter(Boolean);
+        const out = [];
+        for (const line of lines) {
+            try {
+                out.push(JSON.parse(line));
+            }
+            catch {
+                // Skip malformed lines — append-only best-effort files.
+            }
+        }
+        return out;
+    }
+    catch {
+        return [];
+    }
+}
+/** `issue:464` → 464; null for batch or malformed unit ids. */
+function issueOfUnit(unit) {
+    if (unit === null || !unit.startsWith('issue:'))
+        return null;
+    const n = Number.parseInt(unit.slice('issue:'.length), 10);
+    return Number.isInteger(n) && n > 0 ? n : null;
+}
+/** Convenience: build the journaled event for a unit without repeating ids. */
+function unitEvent(event, unit, extra = {}) {
+    const issue = issueOfUnit(unit);
+    return { event, unit, ...(issue !== null ? { issue } : {}), ...extra };
+}
+//# sourceMappingURL=journal.js.map

package/dist/journal.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"journal.js","sourceRoot":"","sources":["../src/journal.ts"],"names":[],"mappings":";AAAA;;;;;;GAMG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA2CH,8BAgBC;AAGD,kCAIC;AAGD,8BAOC;AA1ED,4CAA8B;AAC9B,gDAAkC;AAGlC,oFAAoF;AACvE,QAAA,YAAY,GAAG,cAAc,CAAC;AAE3C,MAAa,OAAO;IACT,QAAQ,CAAS;IAE1B,YAAY,GAAW;QACrB,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,oBAAY,CAAC,CAAC;IAC/C,CAAC;IAED,6EAA6E;IAC7E,MAAM,CAAC,KAA+B,EAAE,MAAY,IAAI,IAAI,EAAE;QAC5D,MAAM,IAAI,GAAiB,EAAE,EAAE,EAAE,GAAG,CAAC,WAAW,EAAE,EAAE,GAAG,KAAK,EAAE,CAAC;QAC/D,IAAI,CAAC;YACH,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;YAC5E,EAAE,CAAC,cAAc,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE;gBAC5D,QAAQ,EAAE,MAAM;gBAChB,IAAI,EAAE,KAAK;aACZ,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,2CAA2C,KAAK,CAAC,KAAK,KAAM,GAAa,CAAC,OAAO,IAAI,CACtF,CAAC;QACJ,CAAC;IACH,CAAC;IAED,mEAAmE;IACnE,IAAI;QACF,OAAO,SAAS,CAAe,IAAI,CAAC,QAAQ,CAAC,CAAC;IAChD,CAAC;CACF;AA3BD,0BA2BC;AAED;;;;GAIG;AACH,SAAgB,SAAS,CAAI,IAAY;IACvC,IAAI,CAAC;QACH,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC;YAAE,OAAO,EAAE,CAAC;QACpC,MAAM,KAAK,GAAG,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QACxE,MAAM,GAAG,GAAQ,EAAE,CAAC;QACpB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,IAAI,CAAC;gBACH,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAM,CAAC,CAAC;YAClC,CAAC;YAAC,MAAM,CAAC;gBACP,wDAAwD;YAC1D,CAAC;QACH,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,+DAA+D;AAC/D,SAAgB,WAAW,CAAC,IAAmB;IAC7C,IAAI,IAAI,KAAK,IAAI,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC;QAAE,OAAO,IAAI,CAAC;IAC7D,MAAM,CAAC,GAAG,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC;IAC3D,OAAO,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AACjD,CAAC;AAED,+EAA+E;AAC/E,SAAgB,SAAS,CACvB,KAAuB,EACvB,IAAY,EACZ,QAAqD,EAAE;IAEvD,MAAM,KAAK,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;IAChC,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,CAAC,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,KAAK,EAAE,CAAC;AACzE,CAAC"}

package/dist/persist.d.ts

@@ -0,0 +1,54 @@
+/**
+ * Crash-safe persistence for the scheduler core.
+ *
+ * `state.json` is written atomically: contents land in `state.json.tmp` in the
+ * SAME directory (rename is atomic only within a filesystem), get fsynced, and
+ * are renamed over `state.json`. A process killed between writes therefore
+ * leaves either the previous complete state or the new one — never a partial
+ * file (AC2). A stray `.tmp` is ignored by `load()` and overwritten by the
+ * next write.
+ *
+ * Cross-process mutations are serialized by a directory mutex (`.sched-lock`),
+ * the same acquire/release protocol as `packages/worktree-pool/src/pool-actions.ts`
+ * (acquireLock/releaseLock there) — the two copies must be kept in lockstep.
+ */
+import { type SchedConfig, type SchedState } from './types';
+/** Thrown when the cross-process lock cannot be acquired in time. */
+export declare class LockTimeoutError extends Error {
+    readonly lockPath: string;
+    constructor(lockPath: string, heldByPid: number | null);
+}
+export declare class CorruptStateError extends Error {
+    readonly filePath: string;
+    constructor(filePath: string, cause: unknown);
+}
+/** Write `contents` to `filePath` atomically (tmp + fsync + rename, same directory). */
+export declare function writeAtomic(filePath: string, contents: string): void;
+/**
+ * Filesystem-backed store for one project's scheduler state
+ * (`~/.dossier/sched/<project>/`). The constructor only records the directory;
+ * all I/O happens per call so a long-lived instance always sees fresh disk
+ * state under the lock.
+ */
+export declare class SchedStore {
+    readonly dir: string;
+    constructor(dir: string);
+    get statePath(): string;
+    get configPath(): string;
+    get journalPath(): string;
+    /** Directory for per-unit agent output logs (`runs/<unit>.log`). */
+    get runsDir(): string;
+    load(): SchedState;
+    save(state: SchedState): void;
+    /**
+     * Load → mutate → save under the cross-process lock. The mutator must be
+     * pure (state in, state out) — same contract as pool's `withLock`.
+     */
+    withLock<T>(fn: (state: SchedState) => {
+        state: SchedState;
+        result: T;
+    }): T;
+    loadConfig(): SchedConfig;
+    saveConfig(config: SchedConfig): void;
+}
+//# sourceMappingURL=persist.d.ts.map

package/dist/persist.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"persist.d.ts","sourceRoot":"","sources":["../src/persist.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAMH,OAAO,EAQL,KAAK,WAAW,EAEhB,KAAK,UAAU,EAChB,MAAM,SAAS,CAAC;AASjB,qEAAqE;AACrE,qBAAa,gBAAiB,SAAQ,KAAK;IACzC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;gBAEd,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,IAAI;CASvD;AAED,qBAAa,iBAAkB,SAAQ,KAAK;IAC1C,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;gBAEd,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO;CAS7C;AAED,wFAAwF;AACxF,wBAAgB,WAAW,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,IAAI,CAwBpE;AA8DD;;;;;GAKG;AACH,qBAAa,UAAU;IACrB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;gBAET,GAAG,EAAE,MAAM;IAIvB,IAAI,SAAS,IAAI,MAAM,CAEtB;IAED,IAAI,UAAU,IAAI,MAAM,CAEvB;IAED,IAAI,WAAW,IAAI,MAAM,CAExB;IAED,oEAAoE;IACpE,IAAI,OAAO,IAAI,MAAM,CAEpB;IAED,IAAI,IAAI,UAAU;IAyBlB,IAAI,CAAC,KAAK,EAAE,UAAU,GAAG,IAAI;IAI7B;;;OAGG;IACH,QAAQ,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,KAAK,EAAE,UAAU,KAAK;QAAE,KAAK,EAAE,UAAU,CAAC;QAAC,MAAM,EAAE,CAAC,CAAA;KAAE,GAAG,CAAC;IAY3E,UAAU,IAAI,WAAW;IA+CzB,UAAU,CAAC,MAAM,EAAE,WAAW,GAAG,IAAI;CActC"}

package/dist/persist.js

@@ -0,0 +1,334 @@
+"use strict";
+/**
+ * Crash-safe persistence for the scheduler core.
+ *
+ * `state.json` is written atomically: contents land in `state.json.tmp` in the
+ * SAME directory (rename is atomic only within a filesystem), get fsynced, and
+ * are renamed over `state.json`. A process killed between writes therefore
+ * leaves either the previous complete state or the new one — never a partial
+ * file (AC2). A stray `.tmp` is ignored by `load()` and overwritten by the
+ * next write.
+ *
+ * Cross-process mutations are serialized by a directory mutex (`.sched-lock`),
+ * the same acquire/release protocol as `packages/worktree-pool/src/pool-actions.ts`
+ * (acquireLock/releaseLock there) — the two copies must be kept in lockstep.
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SchedStore = exports.CorruptStateError = exports.LockTimeoutError = void 0;
+exports.writeAtomic = writeAtomic;
+const fs = __importStar(require("node:fs"));
+const path = __importStar(require("node:path"));
+const journal_1 = require("./journal");
+const state_1 = require("./state");
+const types_1 = require("./types");
+const LOCK_TIMEOUT_MS = 10_000;
+const LOCK_RETRY_MS = 200;
+const STATE_FILE = 'state.json';
+const CONFIG_FILE = 'config.json';
+const LOCK_DIR = '.sched-lock';
+/** Thrown when the cross-process lock cannot be acquired in time. */
+class LockTimeoutError extends Error {
+    lockPath;
+    constructor(lockPath, heldByPid) {
+        const holder = heldByPid !== null ? `; held by pid ${heldByPid}` : ' (no pid file found)';
+        super(`Timed out waiting for scheduler lock (${LOCK_TIMEOUT_MS}ms)${holder}. ` +
+            `If that process is not running, remove ${lockPath}`);
+        this.name = 'LockTimeoutError';
+        this.lockPath = lockPath;
+    }
+}
+exports.LockTimeoutError = LockTimeoutError;
+class CorruptStateError extends Error {
+    filePath;
+    constructor(filePath, cause) {
+        const reason = cause instanceof Error ? cause.message : String(cause);
+        super(`Scheduler state file is corrupt: ${filePath} (${reason}). ` +
+            'Rename or remove it to reset the queue — GitHub remains the system of record.');
+        this.name = 'CorruptStateError';
+        this.filePath = filePath;
+    }
+}
+exports.CorruptStateError = CorruptStateError;
+/** Write `contents` to `filePath` atomically (tmp + fsync + rename, same directory). */
+function writeAtomic(filePath, contents) {
+    const dir = path.dirname(filePath);
+    fs.mkdirSync(dir, { recursive: true, mode: 0o700 });
+    const tmp = `${filePath}.tmp`;
+    const fd = fs.openSync(tmp, 'w', 0o600);
+    try {
+        fs.writeFileSync(fd, contents, 'utf8');
+        fs.fsyncSync(fd);
+    }
+    finally {
+        fs.closeSync(fd);
+    }
+    fs.renameSync(tmp, filePath);
+    // Best-effort directory fsync so the rename itself is durable. Not available
+    // on every platform/fs — a failure here never blocks the write.
+    try {
+        const dfd = fs.openSync(dir, 'r');
+        try {
+            fs.fsyncSync(dfd);
+        }
+        finally {
+            fs.closeSync(dfd);
+        }
+    }
+    catch {
+        // ignore
+    }
+}
+// --- Lock (directory mutex, worktree-pool protocol) ---
+function acquireLock(dir) {
+    const lockPath = path.join(dir, LOCK_DIR);
+    fs.mkdirSync(dir, { recursive: true, mode: 0o700 });
+    const start = Date.now();
+    let heldByPid = null;
+    while (true) {
+        try {
+            fs.mkdirSync(lockPath);
+            fs.writeFileSync(path.join(lockPath, 'pid'), String(process.pid), { mode: 0o600 });
+            return;
+        }
+        catch {
+            heldByPid = null;
+            try {
+                const pidFile = path.join(lockPath, 'pid');
+                if (fs.existsSync(pidFile)) {
+                    const lockPid = Number.parseInt(fs.readFileSync(pidFile, 'utf-8').trim(), 10);
+                    heldByPid = Number.isNaN(lockPid) ? null : lockPid;
+                    try {
+                        process.kill(lockPid, 0);
+                    }
+                    catch {
+                        // Recorded holder is dead. Take the stale lock over by RENAMING it
+                        // first: with two contenders both seeing the dead pid, only one
+                        // rename succeeds — the loser's rmSync cannot delete the winner's
+                        // freshly-acquired lock (the plain rmSync-race the pool protocol
+                        // inherits from its original mkdir-mutex).
+                        const stale = `${lockPath}.stale-${process.pid}-${Date.now()}`;
+                        try {
+                            fs.renameSync(lockPath, stale);
+                        }
+                        catch {
+                            // another contender already took it over — fall through to retry
+                        }
+                        try {
+                            fs.rmSync(stale, { recursive: true, force: true });
+                        }
+                        catch {
+                            // best effort cleanup
+                        }
+                        continue;
+                    }
+                }
+            }
+            catch {
+                // retry
+            }
+            if (Date.now() - start > LOCK_TIMEOUT_MS) {
+                throw new LockTimeoutError(lockPath, heldByPid);
+            }
+            Atomics.wait(new Int32Array(new SharedArrayBuffer(4)), 0, 0, LOCK_RETRY_MS);
+        }
+    }
+}
+function releaseLock(dir) {
+    fs.rmSync(path.join(dir, LOCK_DIR), { recursive: true, force: true });
+}
+// --- Store ---
+/**
+ * Filesystem-backed store for one project's scheduler state
+ * (`~/.dossier/sched/<project>/`). The constructor only records the directory;
+ * all I/O happens per call so a long-lived instance always sees fresh disk
+ * state under the lock.
+ */
+class SchedStore {
+    dir;
+    constructor(dir) {
+        this.dir = dir;
+    }
+    get statePath() {
+        return path.join(this.dir, STATE_FILE);
+    }
+    get configPath() {
+        return path.join(this.dir, CONFIG_FILE);
+    }
+    get journalPath() {
+        return path.join(this.dir, journal_1.JOURNAL_FILE);
+    }
+    /** Directory for per-unit agent output logs (`runs/<unit>.log`). */
+    get runsDir() {
+        return path.join(this.dir, 'runs');
+    }
+    load() {
+        const statePath = this.statePath;
+        if (!fs.existsSync(statePath)) {
+            return (0, state_1.createEmptyState)();
+        }
+        let raw;
+        try {
+            raw = fs.readFileSync(statePath, 'utf-8');
+        }
+        catch (err) {
+            // An I/O failure (permissions, disk, read-only mount) is NOT corruption —
+            // the destructive "rename to reset" advice must not attach to it.
+            throw new CorruptStateError(statePath, new Error(`could not READ the file (${err.message}) — this is an I/O failure, not corruption; renaming will not fix it`));
+        }
+        try {
+            return (0, state_1.validateState)(JSON.parse(raw));
+        }
+        catch (err) {
+            throw new CorruptStateError(statePath, err);
+        }
+    }
+    save(state) {
+        writeAtomic(this.statePath, `${JSON.stringify(state, null, 2)}\n`);
+    }
+    /**
+     * Load → mutate → save under the cross-process lock. The mutator must be
+     * pure (state in, state out) — same contract as pool's `withLock`.
+     */
+    withLock(fn) {
+        acquireLock(this.dir);
+        try {
+            const current = this.load();
+            const { state, result } = fn(current);
+            this.save(state);
+            return result;
+        }
+        finally {
+            releaseLock(this.dir);
+        }
+    }
+    loadConfig() {
+        if (!fs.existsSync(this.configPath)) {
+            return { max_slots: types_1.DEFAULT_MAX_SLOTS };
+        }
+        try {
+            const parsed = JSON.parse(fs.readFileSync(this.configPath, 'utf-8'));
+            const version = String(parsed.schema_version);
+            if (version !== types_1.CONFIG_SCHEMA_VERSION && !types_1.LEGACY_CONFIG_SCHEMA_VERSIONS.includes(version)) {
+                throw new Error(`unsupported schema version ${version}`);
+            }
+            if (!Number.isInteger(parsed.max_slots) ||
+                parsed.max_slots < types_1.MIN_MAX_SLOTS ||
+                parsed.max_slots > types_1.MAX_MAX_SLOTS) {
+                throw new Error(`max_slots must be an integer between ${types_1.MIN_MAX_SLOTS} and ${types_1.MAX_MAX_SLOTS}`);
+            }
+            const config = { max_slots: parsed.max_slots };
+            if (parsed.stall_timeout_ms !== undefined) {
+                if (!Number.isInteger(parsed.stall_timeout_ms) || parsed.stall_timeout_ms <= 0) {
+                    throw new Error('stall_timeout_ms must be a positive integer (milliseconds)');
+                }
+                config.stall_timeout_ms = parsed.stall_timeout_ms;
+            }
+            if (parsed.reconcile_interval_ms !== undefined) {
+                if (!Number.isInteger(parsed.reconcile_interval_ms) || parsed.reconcile_interval_ms <= 0) {
+                    throw new Error('reconcile_interval_ms must be a positive integer (milliseconds)');
+                }
+                config.reconcile_interval_ms = parsed.reconcile_interval_ms;
+            }
+            if (parsed.dispatch !== undefined) {
+                config.dispatch = validateDispatchConfig(parsed.dispatch);
+            }
+            return config;
+        }
+        catch (err) {
+            // Deliberate degrade-to-default (unlike state.json, config is re-derivable
+            // operator intent and hard-failing every command on a typo would brick
+            // even `sched status`) — but never silently.
+            console.error(`⚠ Scheduler config ${this.configPath} is unreadable (${err.message}) — using default max_slots=${types_1.DEFAULT_MAX_SLOTS}`);
+            return { max_slots: types_1.DEFAULT_MAX_SLOTS };
+        }
+    }
+    saveConfig(config) {
+        const file = {
+            schema_version: types_1.CONFIG_SCHEMA_VERSION,
+            max_slots: config.max_slots,
+            ...(config.stall_timeout_ms !== undefined
+                ? { stall_timeout_ms: config.stall_timeout_ms }
+                : {}),
+            ...(config.reconcile_interval_ms !== undefined
+                ? { reconcile_interval_ms: config.reconcile_interval_ms }
+                : {}),
+            ...(config.dispatch !== undefined ? { dispatch: config.dispatch } : {}),
+        };
+        writeAtomic(this.configPath, `${JSON.stringify(file, null, 2)}\n`);
+    }
+}
+exports.SchedStore = SchedStore;
+const MODEL_TIERS = ['mechanical', 'mid', 'strong'];
+/** Strict validation of the optional `dispatch` section (#464). */
+function validateDispatchConfig(raw) {
+    if (raw === null || typeof raw !== 'object' || Array.isArray(raw)) {
+        throw new Error('dispatch must be an object');
+    }
+    const dispatch = raw;
+    if (dispatch.command !== undefined) {
+        if (!Array.isArray(dispatch.command) ||
+            dispatch.command.length === 0 ||
+            dispatch.command.some((c) => typeof c !== 'string' || c.length === 0)) {
+            throw new Error('dispatch.command must be a non-empty array of non-empty strings');
+        }
+    }
+    if (dispatch.prompt !== undefined && typeof dispatch.prompt !== 'string') {
+        throw new Error('dispatch.prompt must be a string');
+    }
+    if (dispatch.tier_models !== undefined) {
+        if (dispatch.tier_models === null || typeof dispatch.tier_models !== 'object') {
+            throw new Error('dispatch.tier_models must be an object');
+        }
+        for (const [tier, model] of Object.entries(dispatch.tier_models)) {
+            if (!MODEL_TIERS.includes(tier)) {
+                throw new Error(`dispatch.tier_models: unknown tier '${tier}'`);
+            }
+            if (typeof model !== 'string' || model.length === 0) {
+                throw new Error(`dispatch.tier_models.${tier} must be a non-empty string`);
+            }
+        }
+    }
+    const out = {};
+    if (dispatch.command !== undefined)
+        out.command = dispatch.command;
+    if (dispatch.prompt !== undefined)
+        out.prompt = dispatch.prompt;
+    if (dispatch.tier_models !== undefined) {
+        out.tier_models = dispatch.tier_models;
+    }
+    return out;
+}
+//# sourceMappingURL=persist.js.map

package/dist/persist.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"persist.js","sourceRoot":"","sources":["../src/persist.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;GAaG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAwDH,kCAwBC;AA9ED,4CAA8B;AAC9B,gDAAkC;AAClC,uCAAyC;AACzC,mCAA0D;AAC1D,mCAWiB;AAEjB,MAAM,eAAe,GAAG,MAAM,CAAC;AAC/B,MAAM,aAAa,GAAG,GAAG,CAAC;AAE1B,MAAM,UAAU,GAAG,YAAY,CAAC;AAChC,MAAM,WAAW,GAAG,aAAa,CAAC;AAClC,MAAM,QAAQ,GAAG,aAAa,CAAC;AAE/B,qEAAqE;AACrE,MAAa,gBAAiB,SAAQ,KAAK;IAChC,QAAQ,CAAS;IAE1B,YAAY,QAAgB,EAAE,SAAwB;QACpD,MAAM,MAAM,GAAG,SAAS,KAAK,IAAI,CAAC,CAAC,CAAC,iBAAiB,SAAS,EAAE,CAAC,CAAC,CAAC,sBAAsB,CAAC;QAC1F,KAAK,CACH,yCAAyC,eAAe,MAAM,MAAM,IAAI;YACtE,0CAA0C,QAAQ,EAAE,CACvD,CAAC;QACF,IAAI,CAAC,IAAI,GAAG,kBAAkB,CAAC;QAC/B,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;IAC3B,CAAC;CACF;AAZD,4CAYC;AAED,MAAa,iBAAkB,SAAQ,KAAK;IACjC,QAAQ,CAAS;IAE1B,YAAY,QAAgB,EAAE,KAAc;QAC1C,MAAM,MAAM,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACtE,KAAK,CACH,oCAAoC,QAAQ,KAAK,MAAM,KAAK;YAC1D,+EAA+E,CAClF,CAAC;QACF,IAAI,CAAC,IAAI,GAAG,mBAAmB,CAAC;QAChC,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;IAC3B,CAAC;CACF;AAZD,8CAYC;AAED,wFAAwF;AACxF,SAAgB,WAAW,CAAC,QAAgB,EAAE,QAAgB;IAC5D,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IACnC,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACpD,MAAM,GAAG,GAAG,GAAG,QAAQ,MAAM,CAAC;IAC9B,MAAM,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC;IACxC,IAAI,CAAC;QACH,EAAE,CAAC,aAAa,CAAC,EAAE,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;QACvC,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;IACnB,CAAC;YAAS,CAAC;QACT,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;IACnB,CAAC;IACD,EAAE,CAAC,UAAU,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;IAC7B,6EAA6E;IAC7E,gEAAgE;IAChE,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,EAAE,CAAC,QAAQ,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QAClC,IAAI,CAAC;YACH,EAAE,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;QACpB,CAAC;gBAAS,CAAC;YACT,EAAE,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;QACpB,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,SAAS;IACX,CAAC;AACH,CAAC;AAED,yDAAyD;AAEzD,SAAS,WAAW,CAAC,GAAW;IAC9B,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;IAC1C,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAEpD,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACzB,IAAI,SAAS,GAAkB,IAAI,CAAC;IACpC,OAAO,IAAI,EAAE,CAAC;QACZ,IAAI,CAAC;YACH,EAAE,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;YACvB,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,KAAK,CAAC,EAAE,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;YACnF,OAAO;QACT,CAAC;QAAC,MAAM,CAAC;YACP,SAAS,GAAG,IAAI,CAAC;YACjB,IAAI,CAAC;gBACH,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;gBAC3C,IAAI,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;oBAC3B,MAAM,OAAO,GAAG,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,YAAY,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;oBAC9E,SAAS,GAAG,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC;oBACnD,IAAI,CAAC;wBACH,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;oBAC3B,CAAC;oBAAC,MAAM,CAAC;wBACP,mEAAmE;wBACnE,gEAAgE;wBAChE,kEAAkE;wBAClE,iEAAiE;wBACjE,2CAA2C;wBAC3C,MAAM,KAAK,GAAG,GAAG,QAAQ,UAAU,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;wBAC/D,IAAI,CAAC;4BACH,EAAE,CAAC,UAAU,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;wBACjC,CAAC;wBAAC,MAAM,CAAC;4BACP,iEAAiE;wBACnE,CAAC;wBACD,IAAI,CAAC;4BACH,EAAE,CAAC,MAAM,CAAC,KAAK,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;wBACrD,CAAC;wBAAC,MAAM,CAAC;4BACP,sBAAsB;wBACxB,CAAC;wBACD,SAAS;oBACX,CAAC;gBACH,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,QAAQ;YACV,CAAC;YAED,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,GAAG,eAAe,EAAE,CAAC;gBACzC,MAAM,IAAI,gBAAgB,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;YAClD,CAAC;YACD,OAAO,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC,IAAI,iBAAiB,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,aAAa,CAAC,CAAC;QAC9E,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,WAAW,CAAC,GAAW;IAC9B,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;AACxE,CAAC;AAED,gBAAgB;AAEhB;;;;;GAKG;AACH,MAAa,UAAU;IACZ,GAAG,CAAS;IAErB,YAAY,GAAW;QACrB,IAAI,CAAC,GAAG,GAAG,GAAG,CAAC;IACjB,CAAC;IAED,IAAI,SAAS;QACX,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC;IACzC,CAAC;IAED,IAAI,UAAU;QACZ,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC;IAC1C,CAAC;IAED,IAAI,WAAW;QACb,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,sBAAY,CAAC,CAAC;IAC3C,CAAC;IAED,oEAAoE;IACpE,IAAI,OAAO;QACT,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IACrC,CAAC;IAED,IAAI;QACF,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC;QACjC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;YAC9B,OAAO,IAAA,wBAAgB,GAAE,CAAC;QAC5B,CAAC;QACD,IAAI,GAAW,CAAC;QAChB,IAAI,CAAC;YACH,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;QAC5C,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,0EAA0E;YAC1E,kEAAkE;YAClE,MAAM,IAAI,iBAAiB,CACzB,SAAS,EACT,IAAI,KAAK,CACP,4BAA6B,GAAa,CAAC,OAAO,sEAAsE,CACzH,CACF,CAAC;QACJ,CAAC;QACD,IAAI,CAAC;YACH,OAAO,IAAA,qBAAa,EAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;QACxC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,IAAI,iBAAiB,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;QAC9C,CAAC;IACH,CAAC;IAED,IAAI,CAAC,KAAiB;QACpB,WAAW,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;IACrE,CAAC;IAED;;;OAGG;IACH,QAAQ,CAAI,EAA2D;QACrE,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACtB,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;YAC5B,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,CAAC;YACtC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACjB,OAAO,MAAM,CAAC;QAChB,CAAC;gBAAS,CAAC;YACT,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACxB,CAAC;IACH,CAAC;IAED,UAAU;QACR,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;YACpC,OAAO,EAAE,SAAS,EAAE,yBAAiB,EAAE,CAAC;QAC1C,CAAC;QACD,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,UAAU,EAAE,OAAO,CAAC,CAAoB,CAAC;YACxF,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC;YAC9C,IAAI,OAAO,KAAK,6BAAqB,IAAI,CAAC,qCAA6B,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;gBAC1F,MAAM,IAAI,KAAK,CAAC,8BAA8B,OAAO,EAAE,CAAC,CAAC;YAC3D,CAAC;YACD,IACE,CAAC,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,SAAS,CAAC;gBACnC,MAAM,CAAC,SAAS,GAAG,qBAAa;gBAChC,MAAM,CAAC,SAAS,GAAG,qBAAa,EAChC,CAAC;gBACD,MAAM,IAAI,KAAK,CACb,wCAAwC,qBAAa,QAAQ,qBAAa,EAAE,CAC7E,CAAC;YACJ,CAAC;YACD,MAAM,MAAM,GAAgB,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,CAAC;YAC5D,IAAI,MAAM,CAAC,gBAAgB,KAAK,SAAS,EAAE,CAAC;gBAC1C,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,gBAAgB,CAAC,IAAI,MAAM,CAAC,gBAAgB,IAAI,CAAC,EAAE,CAAC;oBAC/E,MAAM,IAAI,KAAK,CAAC,4DAA4D,CAAC,CAAC;gBAChF,CAAC;gBACD,MAAM,CAAC,gBAAgB,GAAG,MAAM,CAAC,gBAAgB,CAAC;YACpD,CAAC;YACD,IAAI,MAAM,CAAC,qBAAqB,KAAK,SAAS,EAAE,CAAC;gBAC/C,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,qBAAqB,CAAC,IAAI,MAAM,CAAC,qBAAqB,IAAI,CAAC,EAAE,CAAC;oBACzF,MAAM,IAAI,KAAK,CAAC,iEAAiE,CAAC,CAAC;gBACrF,CAAC;gBACD,MAAM,CAAC,qBAAqB,GAAG,MAAM,CAAC,qBAAqB,CAAC;YAC9D,CAAC;YACD,IAAI,MAAM,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;gBAClC,MAAM,CAAC,QAAQ,GAAG,sBAAsB,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;YAC5D,CAAC;YACD,OAAO,MAAM,CAAC;QAChB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,2EAA2E;YAC3E,uEAAuE;YACvE,6CAA6C;YAC7C,OAAO,CAAC,KAAK,CACX,sBAAsB,IAAI,CAAC,UAAU,mBAAoB,GAAa,CAAC,OAAO,+BAA+B,yBAAiB,EAAE,CACjI,CAAC;YACF,OAAO,EAAE,SAAS,EAAE,yBAAiB,EAAE,CAAC;QAC1C,CAAC;IACH,CAAC;IAED,UAAU,CAAC,MAAmB;QAC5B,MAAM,IAAI,GAAoB;YAC5B,cAAc,EAAE,6BAAqB;YACrC,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,GAAG,CAAC,MAAM,CAAC,gBAAgB,KAAK,SAAS;gBACvC,CAAC,CAAC,EAAE,gBAAgB,EAAE,MAAM,CAAC,gBAAgB,EAAE;gBAC/C,CAAC,CAAC,EAAE,CAAC;YACP,GAAG,CAAC,MAAM,CAAC,qBAAqB,KAAK,SAAS;gBAC5C,CAAC,CAAC,EAAE,qBAAqB,EAAE,MAAM,CAAC,qBAAqB,EAAE;gBACzD,CAAC,CAAC,EAAE,CAAC;YACP,GAAG,CAAC,MAAM,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACxE,CAAC;QACF,WAAW,CAAC,IAAI,CAAC,UAAU,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;IACrE,CAAC;CACF;AAlID,gCAkIC;AAED,MAAM,WAAW,GAAyB,CAAC,YAAY,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC;AAE1E,mEAAmE;AACnE,SAAS,sBAAsB,CAAC,GAAY;IAC1C,IAAI,GAAG,KAAK,IAAI,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QAClE,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;IAChD,CAAC;IACD,MAAM,QAAQ,GAAG,GAA8B,CAAC;IAChD,IAAI,QAAQ,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;QACnC,IACE,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC;YAChC,QAAQ,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC;YAC7B,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,EACrE,CAAC;YACD,MAAM,IAAI,KAAK,CAAC,iEAAiE,CAAC,CAAC;QACrF,CAAC;IACH,CAAC;IACD,IAAI,QAAQ,CAAC,MAAM,KAAK,SAAS,IAAI,OAAO,QAAQ,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;QACzE,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;IACtD,CAAC;IACD,IAAI,QAAQ,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;QACvC,IAAI,QAAQ,CAAC,WAAW,KAAK,IAAI,IAAI,OAAO,QAAQ,CAAC,WAAW,KAAK,QAAQ,EAAE,CAAC;YAC9E,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;QAC5D,CAAC;QACD,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;YACjE,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,IAAiB,CAAC,EAAE,CAAC;gBAC7C,MAAM,IAAI,KAAK,CAAC,uCAAuC,IAAI,GAAG,CAAC,CAAC;YAClE,CAAC;YACD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACpD,MAAM,IAAI,KAAK,CAAC,wBAAwB,IAAI,6BAA6B,CAAC,CAAC;YAC7E,CAAC;QACH,CAAC;IACH,CAAC;IACD,MAAM,GAAG,GAAmB,EAAE,CAAC;IAC/B,IAAI,QAAQ,CAAC,OAAO,KAAK,SAAS;QAAE,GAAG,CAAC,OAAO,GAAG,QAAQ,CAAC,OAAmB,CAAC;IAC/E,IAAI,QAAQ,CAAC,MAAM,KAAK,SAAS;QAAE,GAAG,CAAC,MAAM,GAAG,QAAQ,CAAC,MAAgB,CAAC;IAC1E,IAAI,QAAQ,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;QACvC,GAAG,CAAC,WAAW,GAAG,QAAQ,CAAC,WAAiD,CAAC;IAC/E,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/project.d.ts

@@ -0,0 +1,41 @@
+/**
+ * Project identity for the scheduler state directory
+ * (`~/.dossier/sched/<project>/`).
+ *
+ * `<project>` follows fleet-cycle's convention exactly: the repo slug
+ * `<owner>-<repo>` from `gh repo view --json owner,name`; when that fails (no
+ * remote, no `gh`), the basename of `git rev-parse --show-toplevel`.
+ *
+ * The exec function is injectable so tests (and any non-CLI consumer) never
+ * spawn processes. Since #464 these are no longer the package's only
+ * subprocesses (dispatch.ts spawns the configured agent; groundtruth.ts execs
+ * runstate/gh/git), but all process I/O in the package is injectable, and
+ * none of it is an LLM call the scheduler makes itself (AC7).
+ */
+/**
+ * Run a command and return trimmed stdout, or null when it fails (non-zero
+ * exit, missing binary). Never throws — callers degrade to their fallback.
+ */
+export type ExecFn = (file: string, args: string[], cwd?: string) => string | null;
+/** Build an `ExecFn` via `execFileSync` (never throws), optionally with a hard timeout and a failure observer. */
+export declare function createExecFn(timeoutMs?: number, opts?: {
+    onError?: (file: string, args: string[], err: Error) => void;
+}): ExecFn;
+/** Default exec: no timeout. */
+export declare const defaultExec: ExecFn;
+/**
+ * Filesystem-safe form of an arbitrary identifier: everything outside
+ * `[A-Za-z0-9._-]` becomes `-`. `.` and `..` survive the character allowlist
+ * but are path components that would escape `~/.dossier/sched/` (e.g.
+ * `--project ..` → `~/.dossier` itself, overwriting the global CLI config via
+ * saveConfig) — those collapse to `default`.
+ */
+export declare function sanitizeSlug(slug: string): string;
+/**
+ * Resolve the project slug for `cwd` (default: process cwd). `gh` first, git
+ * basename as fallback; a final sanitized non-empty string otherwise.
+ */
+export declare function resolveProjectSlug(exec?: ExecFn, cwd?: string): string;
+/** State directory for one project under the dossier home (testable via `home`). */
+export declare function schedStateDir(project: string, home?: string): string;
+//# sourceMappingURL=project.d.ts.map

package/dist/project.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"project.d.ts","sourceRoot":"","sources":["../src/project.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAMH;;;GAGG;AACH,MAAM,MAAM,MAAM,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,GAAG,CAAC,EAAE,MAAM,KAAK,MAAM,GAAG,IAAI,CAAC;AAEnF,kHAAkH;AAClH,wBAAgB,YAAY,CAC1B,SAAS,CAAC,EAAE,MAAM,EAClB,IAAI,CAAC,EAAE;IAAE,OAAO,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,GAAG,EAAE,KAAK,KAAK,IAAI,CAAA;CAAE,GACtE,MAAM,CAgBR;AAED,gCAAgC;AAChC,eAAO,MAAM,WAAW,EAAE,MAAuB,CAAC;AAKlD;;;;;;GAMG;AACH,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAIjD;AAED;;;GAGG;AACH,wBAAgB,kBAAkB,CAAC,IAAI,GAAE,MAAoB,EAAE,GAAG,CAAC,EAAE,MAAM,GAAG,MAAM,CAoBnF;AAED,oFAAoF;AACpF,wBAAgB,aAAa,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,GAAE,MAAqB,GAAG,MAAM,CAElF"}