@cat-factory/contracts 0.6.0

package/dist/personal-subscriptions.js

@@ -0,0 +1,70 @@
+import * as v from 'valibot';
+import { subscriptionVendorSchema } from './vendor-credentials.js';
+// ---------------------------------------------------------------------------
+// Personal (individual-usage) subscription wire contracts.
+//
+// Some subscriptions are licensed for INDIVIDUAL use only (Anthropic's consumer
+// Claude subscription). Those are NOT pooled per workspace like the commercial
+// coding-plan vendors; instead each user stores their OWN credential, and only
+// that user's runs may use it. To make "only the user can use it" true even
+// against an operator with the database + system key, the credential is
+// **double-encrypted**: the raw token is sealed under a key derived from the
+// user's PERSONAL PASSWORD (never stored), then encrypted again with the system
+// key. The password is supplied at task start/retry — carried on the ambient
+// `X-Personal-Password` header (not a body field) and cached client-side with a TTL to
+// stay low-friction — to mint a short-lived, per-run activation the async container steps
+// use (re-minted transparently while the run is tended; see the docs).
+//
+// The password layer's purpose is preventing ACCIDENTAL misuse (a credential can't be
+// silently pooled), not defending against a system-key holder — the system encryption is
+// the primary at-rest protection. See docs/individual-subscription-usage.md §3 for the
+// honest threat model + the full safeguards.
+// ---------------------------------------------------------------------------
+/**
+ * The personal password that gates the second encryption layer (8–256 chars). Restricted
+ * to printable ASCII so the same value can ride **raw** in the `X-Personal-Password`
+ * request header (see below) when unlocking a run — HTTP header values must be Latin-1, so
+ * a non-ASCII password could not be sent without encoding. Never stored server-side.
+ */
+export const personalPasswordSchema = v.pipe(v.string(), v.minLength(8), v.maxLength(256), v.regex(/^[\x20-\x7e]+$/, 'Password must use printable ASCII characters (no tabs/newlines).'));
+/**
+ * HTTP header carrying the personal password to unlock a run's individual-usage
+ * credential(s). It is an AMBIENT credential — like the bearer token, the client attaches
+ * it on the gated calls (start / retry / resolve / approve / request-changes) rather than
+ * baking it into each request body — so it never appears in a wire-contract payload. The
+ * server reads it, unlocks, and mints/re-mints the per-run activation; absent + required ⇒
+ * `428 credential_required`.
+ */
+export const PERSONAL_PASSWORD_HEADER = 'X-Personal-Password';
+/** Store (or replace) the signed-in user's personal subscription for a vendor. */
+export const storePersonalSubscriptionSchema = v.object({
+    vendor: subscriptionVendorSchema,
+    label: v.pipe(v.string(), v.trim(), v.minLength(1), v.maxLength(120)),
+    /** The raw secret (write-only): the `claude setup-token` OAuth token for `claude`. */
+    token: v.pipe(v.string(), v.trim(), v.minLength(1)),
+    /** Personal password that gates the second encryption layer. Never stored. */
+    password: personalPasswordSchema,
+    /**
+     * Epoch ms the subscription itself expires (so we can warn well in advance and
+     * block runs once lapsed). Optional — omit if the plan has no fixed end date.
+     */
+    expiresAt: v.optional(v.nullable(v.number())),
+});
+/** Read-only status of one personal subscription — metadata only, never the secret. */
+export const personalSubscriptionStatusSchema = v.object({
+    vendor: subscriptionVendorSchema,
+    label: v.string(),
+    createdAt: v.number(),
+    updatedAt: v.number(),
+    lastUsedAt: v.nullable(v.number()),
+    /** Subscription's own expiry (null = no fixed end date). */
+    expiresAt: v.nullable(v.number()),
+    /** Whole days until `expiresAt` (negative once lapsed; null when no expiry). */
+    expiresInDays: v.nullable(v.number()),
+    /** Whether the subscription's expiry has already passed. */
+    expired: v.boolean(),
+    /** Whether renewal should be surfaced now (expiry within the warning window). */
+    renewSoon: v.boolean(),
+});
+export const personalSubscriptionListSchema = v.array(personalSubscriptionStatusSchema);
+//# sourceMappingURL=personal-subscriptions.js.map

package/dist/personal-subscriptions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"personal-subscriptions.js","sourceRoot":"","sources":["../src/personal-subscriptions.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,SAAS,CAAA;AAC5B,OAAO,EAAE,wBAAwB,EAAE,MAAM,yBAAyB,CAAA;AAElE,8EAA8E;AAC9E,2DAA2D;AAC3D,EAAE;AACF,gFAAgF;AAChF,+EAA+E;AAC/E,+EAA+E;AAC/E,4EAA4E;AAC5E,wEAAwE;AACxE,6EAA6E;AAC7E,gFAAgF;AAChF,6EAA6E;AAC7E,uFAAuF;AACvF,0FAA0F;AAC1F,uEAAuE;AACvE,EAAE;AACF,sFAAsF;AACtF,yFAAyF;AACzF,uFAAuF;AACvF,6CAA6C;AAC7C,8EAA8E;AAE9E;;;;;GAKG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,CAAC,IAAI,CAC1C,CAAC,CAAC,MAAM,EAAE,EACV,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EACd,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,EAChB,CAAC,CAAC,KAAK,CAAC,gBAAgB,EAAE,kEAAkE,CAAC,CAC9F,CAAA;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAG,qBAAqB,CAAA;AAE7D,kFAAkF;AAClF,MAAM,CAAC,MAAM,+BAA+B,GAAG,CAAC,CAAC,MAAM,CAAC;IACtD,MAAM,EAAE,wBAAwB;IAChC,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;IACrE,sFAAsF;IACtF,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;IACnD,8EAA8E;IAC9E,QAAQ,EAAE,sBAAsB;IAChC;;;OAGG;IACH,SAAS,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;CAC9C,CAAC,CAAA;AAGF,uFAAuF;AACvF,MAAM,CAAC,MAAM,gCAAgC,GAAG,CAAC,CAAC,MAAM,CAAC;IACvD,MAAM,EAAE,wBAAwB;IAChC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;IACjB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;IACrB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;IACrB,UAAU,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;IAClC,4DAA4D;IAC5D,SAAS,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;IACjC,gFAAgF;IAChF,aAAa,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;IACrC,4DAA4D;IAC5D,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE;IACpB,iFAAiF;IACjF,SAAS,EAAE,CAAC,CAAC,OAAO,EAAE;CACvB,CAAC,CAAA;AAGF,MAAM,CAAC,MAAM,8BAA8B,GAAG,CAAC,CAAC,KAAK,CAAC,gCAAgC,CAAC,CAAA"}

package/dist/primitives.d.ts

@@ -0,0 +1,57 @@
+import * as v from 'valibot';
+export declare const blockTypeSchema: v.PicklistSchema<["frontend", "service", "api", "database", "queue", "integration", "external", "environment"], undefined>;
+export type BlockType = v.InferOutput<typeof blockTypeSchema>;
+export declare const blockStatusSchema: v.PicklistSchema<["planned", "ready", "in_progress", "blocked", "pr_ready", "done"], undefined>;
+export type BlockStatus = v.InferOutput<typeof blockStatusSchema>;
+export declare const blockLevelSchema: v.PicklistSchema<["frame", "module", "task"], undefined>;
+export type BlockLevel = v.InferOutput<typeof blockLevelSchema>;
+/**
+ * The kind of work a task represents, chosen by the human at creation. Drives the
+ * task card's icon/badge, per-type creation fields, and (optionally) the per-service
+ * running-task limit's bucketing. `recurring` is special: such tasks are NOT created
+ * through `addTask` — they are the reused on-board block of a recurring-pipeline
+ * schedule, stamped with this type so the board renders them consistently.
+ */
+export declare const taskTypeSchema: v.PicklistSchema<["feature", "bug", "document", "spike", "recurring"], undefined>;
+export type TaskType = v.InferOutput<typeof taskTypeSchema>;
+/** The task types a human can pick in the create-task form (recurring is created via a schedule). */
+export declare const createTaskTypeSchema: v.PicklistSchema<["feature", "bug", "document", "spike"], undefined>;
+export type CreateTaskType = v.InferOutput<typeof createTaskTypeSchema>;
+/**
+ * Small, additive, per-type fields collected on the create-task form. All optional;
+ * which ones are shown depends on the chosen {@link TaskType}. Stored verbatim on the
+ * block as a sparse object so adding a field never needs a schema migration.
+ */
+export declare const taskTypeFieldsSchema: v.ObjectSchema<{
+    /** Bug: how severe the defect is. */
+    readonly severity: v.OptionalSchema<v.PicklistSchema<["low", "medium", "high", "critical"], undefined>, undefined>;
+    /** Bug: reproduction steps / observed-vs-expected. */
+    readonly stepsToReproduce: v.OptionalSchema<v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.MaxLengthAction<string, 4000, undefined>]>, undefined>;
+    /** Spike: the investigation time-box, in hours. */
+    readonly timeboxHours: v.OptionalSchema<v.SchemaWithPipe<readonly [v.NumberSchema<undefined>, v.MinValueAction<number, 0, undefined>, v.MaxValueAction<number, 1000, undefined>]>, undefined>;
+    /** Document: what kind of document this task produces. */
+    readonly docKind: v.OptionalSchema<v.PicklistSchema<["prd", "rfc", "runbook", "reference", "other"], undefined>, undefined>;
+}, undefined>;
+export type TaskTypeFields = v.InferOutput<typeof taskTypeFieldsSchema>;
+export declare const agentStateSchema: v.PicklistSchema<["pending", "working", "waiting_decision", "done"], undefined>;
+export type AgentState = v.InferOutput<typeof agentStateSchema>;
+/** Agent kinds are an open set — custom agents get free-form ids. */
+export declare const agentKindSchema: v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.MinLengthAction<string, 1, undefined>]>;
+export type AgentKind = v.InferOutput<typeof agentKindSchema>;
+export declare const positionSchema: v.ObjectSchema<{
+    readonly x: v.NumberSchema<undefined>;
+    readonly y: v.NumberSchema<undefined>;
+}, undefined>;
+export type Position = v.InferOutput<typeof positionSchema>;
+/**
+ * An explicit pixel size for a resizable block (a service frame today). Optional
+ * on a block: when absent the board auto-sizes the frame from its contents; when
+ * present it is the user's dragged size, clamped client-side to never shrink below
+ * the content's natural extent. Strictly positive.
+ */
+export declare const sizeSchema: v.ObjectSchema<{
+    readonly w: v.SchemaWithPipe<readonly [v.NumberSchema<undefined>, v.MinValueAction<number, 1, undefined>]>;
+    readonly h: v.SchemaWithPipe<readonly [v.NumberSchema<undefined>, v.MinValueAction<number, 1, undefined>]>;
+}, undefined>;
+export type Size = v.InferOutput<typeof sizeSchema>;
+//# sourceMappingURL=primitives.d.ts.map

package/dist/primitives.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"primitives.d.ts","sourceRoot":"","sources":["../src/primitives.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,SAAS,CAAA;AAM5B,eAAO,MAAM,eAAe,4HAS1B,CAAA;AACF,MAAM,MAAM,SAAS,GAAG,CAAC,CAAC,WAAW,CAAC,OAAO,eAAe,CAAC,CAAA;AAE7D,eAAO,MAAM,iBAAiB,iGAO5B,CAAA;AACF,MAAM,MAAM,WAAW,GAAG,CAAC,CAAC,WAAW,CAAC,OAAO,iBAAiB,CAAC,CAAA;AAEjE,eAAO,MAAM,gBAAgB,0DAA0C,CAAA;AACvE,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,WAAW,CAAC,OAAO,gBAAgB,CAAC,CAAA;AAE/D;;;;;;GAMG;AACH,eAAO,MAAM,cAAc,mFAAmE,CAAA;AAC9F,MAAM,MAAM,QAAQ,GAAG,CAAC,CAAC,WAAW,CAAC,OAAO,cAAc,CAAC,CAAA;AAE3D,qGAAqG;AACrG,eAAO,MAAM,oBAAoB,sEAAsD,CAAA;AACvF,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,WAAW,CAAC,OAAO,oBAAoB,CAAC,CAAA;AAEvE;;;;GAIG;AACH,eAAO,MAAM,oBAAoB;IAC/B,qCAAqC;;IAErC,sDAAsD;;IAEtD,mDAAmD;;IAEnD,0DAA0D;;aAE1D,CAAA;AACF,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,WAAW,CAAC,OAAO,oBAAoB,CAAC,CAAA;AAEvE,eAAO,MAAM,gBAAgB,iFAAiE,CAAA;AAC9F,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,WAAW,CAAC,OAAO,gBAAgB,CAAC,CAAA;AAE/D,qEAAqE;AACrE,eAAO,MAAM,eAAe,iGAAqC,CAAA;AACjE,MAAM,MAAM,SAAS,GAAG,CAAC,CAAC,WAAW,CAAC,OAAO,eAAe,CAAC,CAAA;AAE7D,eAAO,MAAM,cAAc;;;aAGzB,CAAA;AACF,MAAM,MAAM,QAAQ,GAAG,CAAC,CAAC,WAAW,CAAC,OAAO,cAAc,CAAC,CAAA;AAE3D;;;;;GAKG;AACH,eAAO,MAAM,UAAU;;;aAGrB,CAAA;AACF,MAAM,MAAM,IAAI,GAAG,CAAC,CAAC,WAAW,CAAC,OAAO,UAAU,CAAC,CAAA"}

package/dist/primitives.js

@@ -0,0 +1,66 @@
+import * as v from 'valibot';
+// Shared scalar schemas. Picklists mirror the frontend's `app/types/domain.ts`
+// unions exactly, so a payload that validates here drops straight into the Pinia
+// stores without translation.
+export const blockTypeSchema = v.picklist([
+    'frontend',
+    'service',
+    'api',
+    'database',
+    'queue',
+    'integration',
+    'external',
+    'environment',
+]);
+export const blockStatusSchema = v.picklist([
+    'planned',
+    'ready',
+    'in_progress',
+    'blocked',
+    'pr_ready',
+    'done',
+]);
+export const blockLevelSchema = v.picklist(['frame', 'module', 'task']);
+/**
+ * The kind of work a task represents, chosen by the human at creation. Drives the
+ * task card's icon/badge, per-type creation fields, and (optionally) the per-service
+ * running-task limit's bucketing. `recurring` is special: such tasks are NOT created
+ * through `addTask` — they are the reused on-board block of a recurring-pipeline
+ * schedule, stamped with this type so the board renders them consistently.
+ */
+export const taskTypeSchema = v.picklist(['feature', 'bug', 'document', 'spike', 'recurring']);
+/** The task types a human can pick in the create-task form (recurring is created via a schedule). */
+export const createTaskTypeSchema = v.picklist(['feature', 'bug', 'document', 'spike']);
+/**
+ * Small, additive, per-type fields collected on the create-task form. All optional;
+ * which ones are shown depends on the chosen {@link TaskType}. Stored verbatim on the
+ * block as a sparse object so adding a field never needs a schema migration.
+ */
+export const taskTypeFieldsSchema = v.object({
+    /** Bug: how severe the defect is. */
+    severity: v.optional(v.picklist(['low', 'medium', 'high', 'critical'])),
+    /** Bug: reproduction steps / observed-vs-expected. */
+    stepsToReproduce: v.optional(v.pipe(v.string(), v.maxLength(4000))),
+    /** Spike: the investigation time-box, in hours. */
+    timeboxHours: v.optional(v.pipe(v.number(), v.minValue(0), v.maxValue(1000))),
+    /** Document: what kind of document this task produces. */
+    docKind: v.optional(v.picklist(['prd', 'rfc', 'runbook', 'reference', 'other'])),
+});
+export const agentStateSchema = v.picklist(['pending', 'working', 'waiting_decision', 'done']);
+/** Agent kinds are an open set — custom agents get free-form ids. */
+export const agentKindSchema = v.pipe(v.string(), v.minLength(1));
+export const positionSchema = v.object({
+    x: v.number(),
+    y: v.number(),
+});
+/**
+ * An explicit pixel size for a resizable block (a service frame today). Optional
+ * on a block: when absent the board auto-sizes the frame from its contents; when
+ * present it is the user's dragged size, clamped client-side to never shrink below
+ * the content's natural extent. Strictly positive.
+ */
+export const sizeSchema = v.object({
+    w: v.pipe(v.number(), v.minValue(1)),
+    h: v.pipe(v.number(), v.minValue(1)),
+});
+//# sourceMappingURL=primitives.js.map

package/dist/primitives.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"primitives.js","sourceRoot":"","sources":["../src/primitives.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,SAAS,CAAA;AAE5B,+EAA+E;AAC/E,iFAAiF;AACjF,8BAA8B;AAE9B,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,CAAC,QAAQ,CAAC;IACxC,UAAU;IACV,SAAS;IACT,KAAK;IACL,UAAU;IACV,OAAO;IACP,aAAa;IACb,UAAU;IACV,aAAa;CACd,CAAC,CAAA;AAGF,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,CAAC,QAAQ,CAAC;IAC1C,SAAS;IACT,OAAO;IACP,aAAa;IACb,SAAS;IACT,UAAU;IACV,MAAM;CACP,CAAC,CAAA;AAGF,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC,OAAO,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAA;AAGvE;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC,SAAS,EAAE,KAAK,EAAE,UAAU,EAAE,OAAO,EAAE,WAAW,CAAC,CAAC,CAAA;AAG9F,qGAAqG;AACrG,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC,SAAS,EAAE,KAAK,EAAE,UAAU,EAAE,OAAO,CAAC,CAAC,CAAA;AAGvF;;;;GAIG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3C,qCAAqC;IACrC,QAAQ,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,UAAU,CAAC,CAAC,CAAC;IACvE,sDAAsD;IACtD,gBAAgB,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;IACnE,mDAAmD;IACnD,YAAY,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;IAC7E,0DAA0D;IAC1D,OAAO,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,SAAS,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC,CAAC;CACjF,CAAC,CAAA;AAGF,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC,SAAS,EAAE,SAAS,EAAE,kBAAkB,EAAE,MAAM,CAAC,CAAC,CAAA;AAG9F,qEAAqE;AACrE,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAA;AAGjE,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,CAAC,MAAM,CAAC;IACrC,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE;IACb,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE;CACd,CAAC,CAAA;AAGF;;;;;GAKG;AACH,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,CAAC,MAAM,CAAC;IACjC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;IACpC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;CACrC,CAAC,CAAA"}

package/dist/provisioning.d.ts

@@ -0,0 +1,46 @@
+import * as v from 'valibot';
+/**
+ * Where a service's container jobs run. `cloudflare` is the built-in per-run
+ * Container backend; `docker` is the local Docker/Podman daemon the local-mode
+ * facade drives directly (no cloud at all — the abstract size maps to container
+ * resource limits, and the Tester stands its infra up with Docker-in-Docker);
+ * `aws`/`gcp`/`azure`/`custom` all route to a self-hosted runner pool that
+ * provisions on that cloud — we only forward the resolved instance-type id, we
+ * never call those clouds' APIs directly.
+ */
+export declare const cloudProviderSchema: v.PicklistSchema<["cloudflare", "docker", "aws", "gcp", "azure", "custom"], undefined>;
+export type CloudProvider = v.InferOutput<typeof cloudProviderSchema>;
+/** Abstract, cloud-neutral instance size selectable per service. */
+export declare const instanceSizeSchema: v.PicklistSchema<["small", "medium", "large", "xlarge"], undefined>;
+export type InstanceSize = v.InferOutput<typeof instanceSizeSchema>;
+/** The default size used when a service has not picked one. */
+export declare const DEFAULT_INSTANCE_SIZE: InstanceSize;
+/** The default provider used when neither the service nor its account has picked one. */
+export declare const DEFAULT_CLOUD_PROVIDER: CloudProvider;
+/**
+ * Map each `(provider, size)` to the concrete instance-type id the target expects.
+ * Cloudflare ids are real Container instance types (see `wrangler.toml`); the other
+ * clouds carry conventional defaults a self-hosted pool can honour or override. For
+ * `custom` the abstract size IS the id — a custom pool's manifest maps it to its own
+ * sizing (so an org with bespoke orchestration plugs its definitions in there).
+ */
+export declare const INSTANCE_TYPE_IDS: Record<CloudProvider, Record<InstanceSize, string>>;
+/** Resolve the concrete instance-type id to send to the transport for a service. */
+export declare function resolveInstanceTypeId(provider?: CloudProvider, size?: InstanceSize): string;
+/**
+ * Concrete container resource limits per abstract size, used by the local
+ * Docker/Podman runner backend (`--memory` / `--cpus` on `docker run`). The
+ * local facade never provisions cloud instances — it sizes the per-job container
+ * on the host daemon — so the abstract `InstanceSize` maps straight to limits here
+ * rather than to a cloud instance-type id.
+ */
+export interface DockerResourceLimits {
+    /** `--memory` value (e.g. `2g`). */
+    memory: string;
+    /** `--cpus` value (e.g. `2`). */
+    cpus: string;
+}
+export declare const DOCKER_RESOURCE_LIMITS: Record<InstanceSize, DockerResourceLimits>;
+/** Resolve the local container resource limits for a service's abstract size. */
+export declare function resolveDockerResources(size?: InstanceSize): DockerResourceLimits;
+//# sourceMappingURL=provisioning.d.ts.map

package/dist/provisioning.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"provisioning.d.ts","sourceRoot":"","sources":["../src/provisioning.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,SAAS,CAAA;AAuB5B;;;;;;;;GAQG;AACH,eAAO,MAAM,mBAAmB,wFAO9B,CAAA;AACF,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,WAAW,CAAC,OAAO,mBAAmB,CAAC,CAAA;AAErE,oEAAoE;AACpE,eAAO,MAAM,kBAAkB,qEAAqD,CAAA;AACpF,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,WAAW,CAAC,OAAO,kBAAkB,CAAC,CAAA;AAEnE,+DAA+D;AAC/D,eAAO,MAAM,qBAAqB,EAAE,YAAuB,CAAA;AAE3D,yFAAyF;AACzF,eAAO,MAAM,sBAAsB,EAAE,aAA4B,CAAA;AAEjE;;;;;;GAMG;AACH,eAAO,MAAM,iBAAiB,EAAE,MAAM,CAAC,aAAa,EAAE,MAAM,CAAC,YAAY,EAAE,MAAM,CAAC,CAwCjF,CAAA;AAED,oFAAoF;AACpF,wBAAgB,qBAAqB,CACnC,QAAQ,GAAE,aAAsC,EAChD,IAAI,GAAE,YAAoC,GACzC,MAAM,CAER;AAED;;;;;;GAMG;AACH,MAAM,WAAW,oBAAoB;IACnC,oCAAoC;IACpC,MAAM,EAAE,MAAM,CAAA;IACd,iCAAiC;IACjC,IAAI,EAAE,MAAM,CAAA;CACb;AAED,eAAO,MAAM,sBAAsB,EAAE,MAAM,CAAC,YAAY,EAAE,oBAAoB,CAK7E,CAAA;AAED,iFAAiF;AACjF,wBAAgB,sBAAsB,CACpC,IAAI,GAAE,YAAoC,GACzC,oBAAoB,CAEtB"}

package/dist/provisioning.js

@@ -0,0 +1,107 @@
+import * as v from 'valibot';
+// ---------------------------------------------------------------------------
+// Container provisioning vocabulary.
+//
+// We do NOT provision compute on AWS/GCP/Azure ourselves — an org's self-hosted
+// runner pool does that. What we own is a small, cloud-neutral vocabulary:
+//   - a `CloudProvider` selecting which target a service's jobs run on, and
+//   - an abstract t-shirt `InstanceSize` per service.
+// At dispatch we resolve `(provider, size)` to the concrete instance-type id the
+// target understands (the id string a custom pool expects) and hand it to the
+// transport: a custom pool provisions itself from the id, and the local Docker
+// backend maps the abstract size to `--memory`/`--cpus` limits. The provider is
+// chosen per service and, when unset, falls back to the owning account's
+// `defaultCloudProvider` (the engine resolves this at dispatch).
+//
+// Per-service sizing applies only to the backends that can honour it (the
+// self-hosted pool and local Docker). The Cloudflare Container backend has a FIXED
+// instance type per container class — set by `[[containers]] instance_type` in
+// `wrangler.toml`, applying to every run — with no per-dispatch override, so it
+// ignores these hints. Pick `cloudflare` when you don't need per-service sizing.
+// ---------------------------------------------------------------------------
+/**
+ * Where a service's container jobs run. `cloudflare` is the built-in per-run
+ * Container backend; `docker` is the local Docker/Podman daemon the local-mode
+ * facade drives directly (no cloud at all — the abstract size maps to container
+ * resource limits, and the Tester stands its infra up with Docker-in-Docker);
+ * `aws`/`gcp`/`azure`/`custom` all route to a self-hosted runner pool that
+ * provisions on that cloud — we only forward the resolved instance-type id, we
+ * never call those clouds' APIs directly.
+ */
+export const cloudProviderSchema = v.picklist([
+    'cloudflare',
+    'docker',
+    'aws',
+    'gcp',
+    'azure',
+    'custom',
+]);
+/** Abstract, cloud-neutral instance size selectable per service. */
+export const instanceSizeSchema = v.picklist(['small', 'medium', 'large', 'xlarge']);
+/** The default size used when a service has not picked one. */
+export const DEFAULT_INSTANCE_SIZE = 'medium';
+/** The default provider used when neither the service nor its account has picked one. */
+export const DEFAULT_CLOUD_PROVIDER = 'cloudflare';
+/**
+ * Map each `(provider, size)` to the concrete instance-type id the target expects.
+ * Cloudflare ids are real Container instance types (see `wrangler.toml`); the other
+ * clouds carry conventional defaults a self-hosted pool can honour or override. For
+ * `custom` the abstract size IS the id — a custom pool's manifest maps it to its own
+ * sizing (so an org with bespoke orchestration plugs its definitions in there).
+ */
+export const INSTANCE_TYPE_IDS = {
+    cloudflare: {
+        small: 'standard-1',
+        medium: 'standard-2',
+        large: 'standard-3',
+        xlarge: 'standard-4',
+    },
+    aws: {
+        small: 't3.small',
+        medium: 't3.large',
+        large: 'm5.xlarge',
+        xlarge: 'm5.2xlarge',
+    },
+    gcp: {
+        small: 'e2-small',
+        medium: 'e2-standard-2',
+        large: 'e2-standard-4',
+        xlarge: 'e2-standard-8',
+    },
+    azure: {
+        small: 'Standard_B2s',
+        medium: 'Standard_D2s_v5',
+        large: 'Standard_D4s_v5',
+        xlarge: 'Standard_D8s_v5',
+    },
+    // Pass-through: the abstract size id is forwarded verbatim (to the custom pool's
+    // manifest, or — for `docker` — to the local transport, which maps it to concrete
+    // container resource limits via `DOCKER_RESOURCE_LIMITS`).
+    custom: {
+        small: 'small',
+        medium: 'medium',
+        large: 'large',
+        xlarge: 'xlarge',
+    },
+    docker: {
+        small: 'small',
+        medium: 'medium',
+        large: 'large',
+        xlarge: 'xlarge',
+    },
+};
+/** Resolve the concrete instance-type id to send to the transport for a service. */
+export function resolveInstanceTypeId(provider = DEFAULT_CLOUD_PROVIDER, size = DEFAULT_INSTANCE_SIZE) {
+    return INSTANCE_TYPE_IDS[provider][size];
+}
+export const DOCKER_RESOURCE_LIMITS = {
+    small: { memory: '1g', cpus: '1' },
+    medium: { memory: '2g', cpus: '2' },
+    large: { memory: '4g', cpus: '4' },
+    xlarge: { memory: '8g', cpus: '8' },
+};
+/** Resolve the local container resource limits for a service's abstract size. */
+export function resolveDockerResources(size = DEFAULT_INSTANCE_SIZE) {
+    return DOCKER_RESOURCE_LIMITS[size];
+}
+//# sourceMappingURL=provisioning.js.map

package/dist/provisioning.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"provisioning.js","sourceRoot":"","sources":["../src/provisioning.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,SAAS,CAAA;AAE5B,8EAA8E;AAC9E,qCAAqC;AACrC,EAAE;AACF,gFAAgF;AAChF,2EAA2E;AAC3E,4EAA4E;AAC5E,sDAAsD;AACtD,iFAAiF;AACjF,8EAA8E;AAC9E,+EAA+E;AAC/E,gFAAgF;AAChF,yEAAyE;AACzE,iEAAiE;AACjE,EAAE;AACF,0EAA0E;AAC1E,mFAAmF;AACnF,+EAA+E;AAC/E,gFAAgF;AAChF,iFAAiF;AACjF,8EAA8E;AAE9E;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC,QAAQ,CAAC;IAC5C,YAAY;IACZ,QAAQ;IACR,KAAK;IACL,KAAK;IACL,OAAO;IACP,QAAQ;CACT,CAAC,CAAA;AAGF,oEAAoE;AACpE,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAA;AAGpF,+DAA+D;AAC/D,MAAM,CAAC,MAAM,qBAAqB,GAAiB,QAAQ,CAAA;AAE3D,yFAAyF;AACzF,MAAM,CAAC,MAAM,sBAAsB,GAAkB,YAAY,CAAA;AAEjE;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAwD;IACpF,UAAU,EAAE;QACV,KAAK,EAAE,YAAY;QACnB,MAAM,EAAE,YAAY;QACpB,KAAK,EAAE,YAAY;QACnB,MAAM,EAAE,YAAY;KACrB;IACD,GAAG,EAAE;QACH,KAAK,EAAE,UAAU;QACjB,MAAM,EAAE,UAAU;QAClB,KAAK,EAAE,WAAW;QAClB,MAAM,EAAE,YAAY;KACrB;IACD,GAAG,EAAE;QACH,KAAK,EAAE,UAAU;QACjB,MAAM,EAAE,eAAe;QACvB,KAAK,EAAE,eAAe;QACtB,MAAM,EAAE,eAAe;KACxB;IACD,KAAK,EAAE;QACL,KAAK,EAAE,cAAc;QACrB,MAAM,EAAE,iBAAiB;QACzB,KAAK,EAAE,iBAAiB;QACxB,MAAM,EAAE,iBAAiB;KAC1B;IACD,iFAAiF;IACjF,kFAAkF;IAClF,2DAA2D;IAC3D,MAAM,EAAE;QACN,KAAK,EAAE,OAAO;QACd,MAAM,EAAE,QAAQ;QAChB,KAAK,EAAE,OAAO;QACd,MAAM,EAAE,QAAQ;KACjB;IACD,MAAM,EAAE;QACN,KAAK,EAAE,OAAO;QACd,MAAM,EAAE,QAAQ;QAChB,KAAK,EAAE,OAAO;QACd,MAAM,EAAE,QAAQ;KACjB;CACF,CAAA;AAED,oFAAoF;AACpF,MAAM,UAAU,qBAAqB,CACnC,QAAQ,GAAkB,sBAAsB,EAChD,IAAI,GAAiB,qBAAqB;IAE1C,OAAO,iBAAiB,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAA;AAC1C,CAAC;AAgBD,MAAM,CAAC,MAAM,sBAAsB,GAA+C;IAChF,KAAK,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE;IAClC,MAAM,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE;IACnC,KAAK,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE;IAClC,MAAM,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE;CACpC,CAAA;AAED,iFAAiF;AACjF,MAAM,UAAU,sBAAsB,CACpC,IAAI,GAAiB,qBAAqB;IAE1C,OAAO,sBAAsB,CAAC,IAAI,CAAC,CAAA;AACrC,CAAC"}

package/dist/recurring.d.ts

@@ -0,0 +1,117 @@
+import * as v from 'valibot';
+/** Template a schedule was created from; drives the seeded block description. */
+export declare const scheduleTemplateSchema: v.PicklistSchema<["dep-update", "tech-debt", "custom"], undefined>;
+export type ScheduleTemplate = v.InferOutput<typeof scheduleTemplateSchema>;
+/**
+ * How often a schedule fires and when it is allowed to. `intervalHours` is the
+ * base cadence; `weekdays` (0=Sunday..6=Saturday; empty = every day) and the
+ * `windowStartHour`/`windowEndHour` range (both null = any hour) gate which
+ * instants are eligible, evaluated in `timezone` (an IANA zone, e.g.
+ * "Europe/Helsinki"; default "UTC").
+ */
+export declare const recurrenceSchema: v.ObjectSchema<{
+    readonly intervalHours: v.SchemaWithPipe<readonly [v.NumberSchema<undefined>, v.IntegerAction<number, undefined>, v.MinValueAction<number, 1, undefined>, v.MaxValueAction<number, number, undefined>]>;
+    /** Allowed weekdays (0–6). Empty means every day. */
+    readonly weekdays: v.ArraySchema<v.SchemaWithPipe<readonly [v.NumberSchema<undefined>, v.IntegerAction<number, undefined>, v.MinValueAction<number, 0, undefined>, v.MaxValueAction<number, 6, undefined>]>, undefined>;
+    /** Inclusive start of the allowed hour-of-day window, or null for no lower bound. */
+    readonly windowStartHour: v.NullableSchema<v.SchemaWithPipe<readonly [v.NumberSchema<undefined>, v.IntegerAction<number, undefined>, v.MinValueAction<number, 0, undefined>, v.MaxValueAction<number, 23, undefined>]>, undefined>;
+    /** Exclusive end of the allowed hour-of-day window, or null for no upper bound. */
+    readonly windowEndHour: v.NullableSchema<v.SchemaWithPipe<readonly [v.NumberSchema<undefined>, v.IntegerAction<number, undefined>, v.MinValueAction<number, 0, undefined>, v.MaxValueAction<number, 23, undefined>]>, undefined>;
+    /** IANA timezone the weekday/hour window is evaluated in. */
+    readonly timezone: v.StringSchema<undefined>;
+}, undefined>;
+export type Recurrence = v.InferOutput<typeof recurrenceSchema>;
+/**
+ * A recurring pipeline attached to a service. `blockId` is the reused on-board
+ * task block the pipeline runs against; `frameId` is the service frame it lives
+ * in. `nextRunAt` is the computed epoch-ms of the next eligible fire (the global
+ * sweeper queries `enabled AND nextRunAt <= now`).
+ */
+export declare const pipelineScheduleSchema: v.ObjectSchema<{
+    readonly id: v.StringSchema<undefined>;
+    /**
+     * The account-owned service this schedule belongs to (in-org sharing): a schedule on a
+     * shared service is visible on every workspace that mounts it and fires once per org.
+     * Null for a legacy schedule not yet associated with a service.
+     */
+    readonly serviceId: v.NullableSchema<v.StringSchema<undefined>, undefined>;
+    readonly blockId: v.StringSchema<undefined>;
+    readonly frameId: v.StringSchema<undefined>;
+    readonly pipelineId: v.StringSchema<undefined>;
+    readonly template: v.PicklistSchema<["dep-update", "tech-debt", "custom"], undefined>;
+    readonly name: v.StringSchema<undefined>;
+    readonly recurrence: v.ObjectSchema<{
+        readonly intervalHours: v.SchemaWithPipe<readonly [v.NumberSchema<undefined>, v.IntegerAction<number, undefined>, v.MinValueAction<number, 1, undefined>, v.MaxValueAction<number, number, undefined>]>;
+        /** Allowed weekdays (0–6). Empty means every day. */
+        readonly weekdays: v.ArraySchema<v.SchemaWithPipe<readonly [v.NumberSchema<undefined>, v.IntegerAction<number, undefined>, v.MinValueAction<number, 0, undefined>, v.MaxValueAction<number, 6, undefined>]>, undefined>;
+        /** Inclusive start of the allowed hour-of-day window, or null for no lower bound. */
+        readonly windowStartHour: v.NullableSchema<v.SchemaWithPipe<readonly [v.NumberSchema<undefined>, v.IntegerAction<number, undefined>, v.MinValueAction<number, 0, undefined>, v.MaxValueAction<number, 23, undefined>]>, undefined>;
+        /** Exclusive end of the allowed hour-of-day window, or null for no upper bound. */
+        readonly windowEndHour: v.NullableSchema<v.SchemaWithPipe<readonly [v.NumberSchema<undefined>, v.IntegerAction<number, undefined>, v.MinValueAction<number, 0, undefined>, v.MaxValueAction<number, 23, undefined>]>, undefined>;
+        /** IANA timezone the weekday/hour window is evaluated in. */
+        readonly timezone: v.StringSchema<undefined>;
+    }, undefined>;
+    readonly enabled: v.BooleanSchema<undefined>;
+    readonly lastRunAt: v.NullableSchema<v.NumberSchema<undefined>, undefined>;
+    readonly nextRunAt: v.NumberSchema<undefined>;
+    readonly createdAt: v.NumberSchema<undefined>;
+}, undefined>;
+export type PipelineSchedule = v.InferOutput<typeof pipelineScheduleSchema>;
+/** One historical fire of a schedule (retained ~1 week), surfaced in the inspector. */
+export declare const scheduleRunSchema: v.ObjectSchema<{
+    readonly id: v.StringSchema<undefined>;
+    readonly scheduleId: v.StringSchema<undefined>;
+    /** The execution this fire started, or null if the start was skipped/failed. */
+    readonly executionId: v.NullableSchema<v.StringSchema<undefined>, undefined>;
+    readonly status: v.PicklistSchema<["running", "done", "failed", "skipped"], undefined>;
+    readonly startedAt: v.NumberSchema<undefined>;
+    readonly finishedAt: v.NullableSchema<v.NumberSchema<undefined>, undefined>;
+    /** Short outcome line (e.g. a PR URL or "merged"), or null while running. */
+    readonly outcome: v.NullableSchema<v.StringSchema<undefined>, undefined>;
+}, undefined>;
+export type ScheduleRun = v.InferOutput<typeof scheduleRunSchema>;
+/** Create a recurring pipeline on a service frame. */
+export declare const createScheduleSchema: v.ObjectSchema<{
+    readonly frameId: v.StringSchema<undefined>;
+    readonly pipelineId: v.StringSchema<undefined>;
+    readonly template: v.OptionalSchema<v.PicklistSchema<["dep-update", "tech-debt", "custom"], undefined>, "custom">;
+    readonly name: v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.TrimAction, v.MinLengthAction<string, 1, undefined>, v.MaxLengthAction<string, 80, undefined>]>;
+    readonly recurrence: v.ObjectSchema<{
+        readonly intervalHours: v.SchemaWithPipe<readonly [v.NumberSchema<undefined>, v.IntegerAction<number, undefined>, v.MinValueAction<number, 1, undefined>, v.MaxValueAction<number, number, undefined>]>;
+        /** Allowed weekdays (0–6). Empty means every day. */
+        readonly weekdays: v.ArraySchema<v.SchemaWithPipe<readonly [v.NumberSchema<undefined>, v.IntegerAction<number, undefined>, v.MinValueAction<number, 0, undefined>, v.MaxValueAction<number, 6, undefined>]>, undefined>;
+        /** Inclusive start of the allowed hour-of-day window, or null for no lower bound. */
+        readonly windowStartHour: v.NullableSchema<v.SchemaWithPipe<readonly [v.NumberSchema<undefined>, v.IntegerAction<number, undefined>, v.MinValueAction<number, 0, undefined>, v.MaxValueAction<number, 23, undefined>]>, undefined>;
+        /** Exclusive end of the allowed hour-of-day window, or null for no upper bound. */
+        readonly windowEndHour: v.NullableSchema<v.SchemaWithPipe<readonly [v.NumberSchema<undefined>, v.IntegerAction<number, undefined>, v.MinValueAction<number, 0, undefined>, v.MaxValueAction<number, 23, undefined>]>, undefined>;
+        /** IANA timezone the weekday/hour window is evaluated in. */
+        readonly timezone: v.StringSchema<undefined>;
+    }, undefined>;
+    readonly enabled: v.OptionalSchema<v.BooleanSchema<undefined>, true>;
+    /**
+     * The prompt/description for the reused on-board task block — the same free-text a
+     * normal task carries, fed to every agent step. Omitted/empty ⇒ the template's seed
+     * description. This is what lets a `custom` recurring task say what it should do.
+     */
+    readonly description: v.OptionalSchema<v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.TrimAction, v.MaxLengthAction<string, 2000, undefined>]>, undefined>;
+}, undefined>;
+export type CreateScheduleInput = v.InferOutput<typeof createScheduleSchema>;
+/** Patch an existing schedule (all fields optional). */
+export declare const updateScheduleSchema: v.ObjectSchema<{
+    readonly name: v.OptionalSchema<v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.TrimAction, v.MinLengthAction<string, 1, undefined>, v.MaxLengthAction<string, 80, undefined>]>, undefined>;
+    readonly pipelineId: v.OptionalSchema<v.StringSchema<undefined>, undefined>;
+    readonly recurrence: v.OptionalSchema<v.ObjectSchema<{
+        readonly intervalHours: v.SchemaWithPipe<readonly [v.NumberSchema<undefined>, v.IntegerAction<number, undefined>, v.MinValueAction<number, 1, undefined>, v.MaxValueAction<number, number, undefined>]>;
+        /** Allowed weekdays (0–6). Empty means every day. */
+        readonly weekdays: v.ArraySchema<v.SchemaWithPipe<readonly [v.NumberSchema<undefined>, v.IntegerAction<number, undefined>, v.MinValueAction<number, 0, undefined>, v.MaxValueAction<number, 6, undefined>]>, undefined>;
+        /** Inclusive start of the allowed hour-of-day window, or null for no lower bound. */
+        readonly windowStartHour: v.NullableSchema<v.SchemaWithPipe<readonly [v.NumberSchema<undefined>, v.IntegerAction<number, undefined>, v.MinValueAction<number, 0, undefined>, v.MaxValueAction<number, 23, undefined>]>, undefined>;
+        /** Exclusive end of the allowed hour-of-day window, or null for no upper bound. */
+        readonly windowEndHour: v.NullableSchema<v.SchemaWithPipe<readonly [v.NumberSchema<undefined>, v.IntegerAction<number, undefined>, v.MinValueAction<number, 0, undefined>, v.MaxValueAction<number, 23, undefined>]>, undefined>;
+        /** IANA timezone the weekday/hour window is evaluated in. */
+        readonly timezone: v.StringSchema<undefined>;
+    }, undefined>, undefined>;
+    readonly enabled: v.OptionalSchema<v.BooleanSchema<undefined>, undefined>;
+}, undefined>;
+export type UpdateScheduleInput = v.InferOutput<typeof updateScheduleSchema>;
+//# sourceMappingURL=recurring.d.ts.map

package/dist/recurring.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"recurring.d.ts","sourceRoot":"","sources":["../src/recurring.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,SAAS,CAAA;AAiB5B,iFAAiF;AACjF,eAAO,MAAM,sBAAsB,oEAAoD,CAAA;AACvF,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,WAAW,CAAC,OAAO,sBAAsB,CAAC,CAAA;AAK3E;;;;;;GAMG;AACH,eAAO,MAAM,gBAAgB;;IAE3B,qDAAqD;;IAErD,qFAAqF;;IAErF,mFAAmF;;IAEnF,6DAA6D;;aAE7D,CAAA;AACF,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,WAAW,CAAC,OAAO,gBAAgB,CAAC,CAAA;AAE/D;;;;;GAKG;AACH,eAAO,MAAM,sBAAsB;;IAEjC;;;;OAIG;;;;;;;;;QAvBH,qDAAqD;;QAErD,qFAAqF;;QAErF,mFAAmF;;QAEnF,6DAA6D;;;;;;;aA6B7D,CAAA;AACF,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,WAAW,CAAC,OAAO,sBAAsB,CAAC,CAAA;AAE3E,uFAAuF;AACvF,eAAO,MAAM,iBAAiB;;;IAG5B,gFAAgF;;;;;IAKhF,6EAA6E;;aAE7E,CAAA;AACF,MAAM,MAAM,WAAW,GAAG,CAAC,CAAC,WAAW,CAAC,OAAO,iBAAiB,CAAC,CAAA;AAMjE,sDAAsD;AACtD,eAAO,MAAM,oBAAoB;;;;;;;QAzD/B,qDAAqD;;QAErD,qFAAqF;;QAErF,mFAAmF;;QAEnF,6DAA6D;;;;IA0D7D;;;;OAIG;;aAEH,CAAA;AACF,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,WAAW,CAAC,OAAO,oBAAoB,CAAC,CAAA;AAE5E,wDAAwD;AACxD,eAAO,MAAM,oBAAoB;;;;;QA1E/B,qDAAqD;;QAErD,qFAAqF;;QAErF,mFAAmF;;QAEnF,6DAA6D;;;;aAyE7D,CAAA;AACF,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,WAAW,CAAC,OAAO,oBAAoB,CAAC,CAAA"}

package/dist/recurring.js

@@ -0,0 +1,99 @@
+import * as v from 'valibot';
+// ---------------------------------------------------------------------------
+// Recurring-pipeline wire contracts. A *pipeline schedule* attaches a reusable
+// pipeline to a service (a `frame` block) and re-runs it on a recurring cadence —
+// e.g. weekly dependency updates, or a tech-debt remediation pass. Each schedule
+// owns exactly one reused on-board block (a `task` leaf inside the service frame);
+// every time the schedule fires it starts the pipeline against that block, so the
+// board shows a single recurring task whose live status and run history a human
+// can inspect.
+//
+// The cadence is "run every `intervalHours`", optionally constrained to an
+// allowed window — a set of weekdays plus an hour-of-day range (e.g. business
+// hours) evaluated in the schedule's timezone. The engine rolls the computed next
+// run forward until it lands inside an allowed window.
+// ---------------------------------------------------------------------------
+/** Template a schedule was created from; drives the seeded block description. */
+export const scheduleTemplateSchema = v.picklist(['dep-update', 'tech-debt', 'custom']);
+const hourOfDaySchema = v.pipe(v.number(), v.integer(), v.minValue(0), v.maxValue(23));
+const weekdaySchema = v.pipe(v.number(), v.integer(), v.minValue(0), v.maxValue(6));
+/**
+ * How often a schedule fires and when it is allowed to. `intervalHours` is the
+ * base cadence; `weekdays` (0=Sunday..6=Saturday; empty = every day) and the
+ * `windowStartHour`/`windowEndHour` range (both null = any hour) gate which
+ * instants are eligible, evaluated in `timezone` (an IANA zone, e.g.
+ * "Europe/Helsinki"; default "UTC").
+ */
+export const recurrenceSchema = v.object({
+    intervalHours: v.pipe(v.number(), v.integer(), v.minValue(1), v.maxValue(24 * 365)),
+    /** Allowed weekdays (0–6). Empty means every day. */
+    weekdays: v.array(weekdaySchema),
+    /** Inclusive start of the allowed hour-of-day window, or null for no lower bound. */
+    windowStartHour: v.nullable(hourOfDaySchema),
+    /** Exclusive end of the allowed hour-of-day window, or null for no upper bound. */
+    windowEndHour: v.nullable(hourOfDaySchema),
+    /** IANA timezone the weekday/hour window is evaluated in. */
+    timezone: v.string(),
+});
+/**
+ * A recurring pipeline attached to a service. `blockId` is the reused on-board
+ * task block the pipeline runs against; `frameId` is the service frame it lives
+ * in. `nextRunAt` is the computed epoch-ms of the next eligible fire (the global
+ * sweeper queries `enabled AND nextRunAt <= now`).
+ */
+export const pipelineScheduleSchema = v.object({
+    id: v.string(),
+    /**
+     * The account-owned service this schedule belongs to (in-org sharing): a schedule on a
+     * shared service is visible on every workspace that mounts it and fires once per org.
+     * Null for a legacy schedule not yet associated with a service.
+     */
+    serviceId: v.nullable(v.string()),
+    blockId: v.string(),
+    frameId: v.string(),
+    pipelineId: v.string(),
+    template: scheduleTemplateSchema,
+    name: v.string(),
+    recurrence: recurrenceSchema,
+    enabled: v.boolean(),
+    lastRunAt: v.nullable(v.number()),
+    nextRunAt: v.number(),
+    createdAt: v.number(),
+});
+/** One historical fire of a schedule (retained ~1 week), surfaced in the inspector. */
+export const scheduleRunSchema = v.object({
+    id: v.string(),
+    scheduleId: v.string(),
+    /** The execution this fire started, or null if the start was skipped/failed. */
+    executionId: v.nullable(v.string()),
+    status: v.picklist(['running', 'done', 'failed', 'skipped']),
+    startedAt: v.number(),
+    finishedAt: v.nullable(v.number()),
+    /** Short outcome line (e.g. a PR URL or "merged"), or null while running. */
+    outcome: v.nullable(v.string()),
+});
+// ---- Request bodies -------------------------------------------------------
+const scheduleNameSchema = v.pipe(v.string(), v.trim(), v.minLength(1), v.maxLength(80));
+/** Create a recurring pipeline on a service frame. */
+export const createScheduleSchema = v.object({
+    frameId: v.string(),
+    pipelineId: v.string(),
+    template: v.optional(scheduleTemplateSchema, 'custom'),
+    name: scheduleNameSchema,
+    recurrence: recurrenceSchema,
+    enabled: v.optional(v.boolean(), true),
+    /**
+     * The prompt/description for the reused on-board task block — the same free-text a
+     * normal task carries, fed to every agent step. Omitted/empty ⇒ the template's seed
+     * description. This is what lets a `custom` recurring task say what it should do.
+     */
+    description: v.optional(v.pipe(v.string(), v.trim(), v.maxLength(2000))),
+});
+/** Patch an existing schedule (all fields optional). */
+export const updateScheduleSchema = v.object({
+    name: v.optional(scheduleNameSchema),
+    pipelineId: v.optional(v.string()),
+    recurrence: v.optional(recurrenceSchema),
+    enabled: v.optional(v.boolean()),
+});
+//# sourceMappingURL=recurring.js.map

package/dist/recurring.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"recurring.js","sourceRoot":"","sources":["../src/recurring.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,SAAS,CAAA;AAE5B,8EAA8E;AAC9E,+EAA+E;AAC/E,kFAAkF;AAClF,iFAAiF;AACjF,mFAAmF;AACnF,kFAAkF;AAClF,gFAAgF;AAChF,eAAe;AACf,EAAE;AACF,2EAA2E;AAC3E,8EAA8E;AAC9E,kFAAkF;AAClF,uDAAuD;AACvD,8EAA8E;AAE9E,iFAAiF;AACjF,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC,YAAY,EAAE,WAAW,EAAE,QAAQ,CAAC,CAAC,CAAA;AAGvF,MAAM,eAAe,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAA;AACtF,MAAM,aAAa,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAA;AAEnF;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC;IACvC,aAAa,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,EAAE,GAAG,GAAG,CAAC,CAAC;IACnF,qDAAqD;IACrD,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,aAAa,CAAC;IAChC,qFAAqF;IACrF,eAAe,EAAE,CAAC,CAAC,QAAQ,CAAC,eAAe,CAAC;IAC5C,mFAAmF;IACnF,aAAa,EAAE,CAAC,CAAC,QAAQ,CAAC,eAAe,CAAC;IAC1C,6DAA6D;IAC7D,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE;CACrB,CAAC,CAAA;AAGF;;;;;GAKG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC7C,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE;IACd;;;;OAIG;IACH,SAAS,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;IACjC,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;IACnB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;IACnB,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE;IACtB,QAAQ,EAAE,sBAAsB;IAChC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,UAAU,EAAE,gBAAgB;IAC5B,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE;IACpB,SAAS,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;IACjC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;IACrB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;CACtB,CAAC,CAAA;AAGF,uFAAuF;AACvF,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,CAAC,MAAM,CAAC;IACxC,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE;IACd,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE;IACtB,gFAAgF;IAChF,WAAW,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;IACnC,MAAM,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC;IAC5D,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;IACrB,UAAU,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;IAClC,6EAA6E;IAC7E,OAAO,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;CAChC,CAAC,CAAA;AAGF,8EAA8E;AAE9E,MAAM,kBAAkB,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,CAAA;AAExF,sDAAsD;AACtD,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3C,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;IACnB,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE;IACtB,QAAQ,EAAE,CAAC,CAAC,QAAQ,CAAC,sBAAsB,EAAE,QAAQ,CAAC;IACtD,IAAI,EAAE,kBAAkB;IACxB,UAAU,EAAE,gBAAgB;IAC5B,OAAO,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,EAAE,EAAE,IAAI,CAAC;IACtC;;;;OAIG;IACH,WAAW,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;CACzE,CAAC,CAAA;AAGF,wDAAwD;AACxD,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3C,IAAI,EAAE,CAAC,CAAC,QAAQ,CAAC,kBAAkB,CAAC;IACpC,UAAU,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;IAClC,UAAU,EAAE,CAAC,CAAC,QAAQ,CAAC,gBAAgB,CAAC;IACxC,OAAO,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;CACjC,CAAC,CAAA"}