@fungi.computer/truffle 0.5.0 → 0.7.0

package/dist/private-local-schedules.js

@@ -0,0 +1,66 @@
+import * as Schema from "effect/Schema";
+import { z } from "zod";
+import { agentScheduleListInputSchema, agentSchedulePageSchema, agentScheduleTargetSchema, } from "@fungi.computer/shiitake-extensions/schedules";
+import { readAgentSchedulePage } from "@fungi.computer/shiitake-extensions/schedules/client";
+import { logEvent } from "./log-event.js";
+/** Private service ingress, never a Team/member or machine-link request. */
+export const localScheduleListInputSchema = z.strictObject({
+    invocationRoot: z.string().min(1),
+    ...agentScheduleListInputSchema.shape,
+});
+/** Private person-only mutation, distinct from the finite list request. */
+export const localScheduleControlInputSchema = z.strictObject({
+    invocationRoot: z.string().min(1),
+    target: agentScheduleTargetSchema,
+});
+/** Local directory pages reuse the schedule owner's decoder and retained state. */
+export const localSchedulePageSchema = Schema.Struct({
+    items: agentSchedulePageSchema.fields.items,
+    unavailable: Schema.Array(Schema.Struct({
+        agentId: Schema.String,
+        reason: Schema.Literal("owner_unavailable"),
+    })).check(Schema.isMaxLength(8)),
+    next: agentSchedulePageSchema.fields.next,
+});
+/** One bounded read, borrowing existing admitted Agent owners one at a time. */
+export async function readLocalSchedulePage(agentIds, open, input, signal) {
+    signal.throwIfAborted();
+    const candidates = agentIds
+        .filter((agentId) => input.after === undefined ? true : agentId >= input.after.agentId)
+        .sort();
+    const items = [];
+    const unavailable = [];
+    // Bound runtime fan-out even when many retained Agents have no schedules.
+    const owners = candidates.slice(0, 8);
+    for (const agentId of owners) {
+        signal.throwIfAborted();
+        try {
+            const { owner, release } = await open(agentId, signal);
+            try {
+                const limit = input.limit - items.length;
+                const pageInput = input.after?.agentId === agentId
+                    ? { limit, after: input.after }
+                    : { limit };
+                const page = await readAgentSchedulePage(agentId, owner, pageInput);
+                signal.throwIfAborted();
+                items.push(...page.items);
+                if (page.next !== null)
+                    return { items, unavailable, next: page.next };
+            }
+            finally {
+                release();
+            }
+        }
+        catch (cause) {
+            signal.throwIfAborted();
+            logEvent("schedule-directory.owner-unavailable", cause);
+            unavailable.push({ agentId, reason: "owner_unavailable" });
+        }
+    }
+    const unread = candidates.at(owners.length);
+    return {
+        items,
+        unavailable,
+        next: unread === undefined ? null : { agentId: unread, kind: "almanac" },
+    };
+}

package/dist/private-local-service-contract.d.ts

@@ -10,6 +10,7 @@ import type { ServiceDiagnosticsStatus } from "./private-local-service-log.js";
 import type { LocalSandboxStatus } from "./private-local-sandbox.js";
 import type { LocalPermissionMode } from "./private-local-permission-mode.js";
 import type { LocalUiAttachmentLifetime } from "./private-local-ui-attachment.js";
+import type { PrivateLocalScheduleCapability } from "./private-local-schedule-client.js";
 /** Live health, not the on-disk identity record or a cached connection snapshot. */
 export type PrivateLocalServiceStatus = Readonly<{
     /** The client-service wire contract this service speaks. */
@@ -140,6 +141,8 @@ export type PrivateLocalSessionDiscovery = Readonly<{
 }>;
 /** Local process management stays outside the shared Session HTTP contract. */
 export type PrivateLocalServiceManager = Readonly<{
+    /** Explicit private person-only capability; never provided by a mesh/App grant. */
+    schedules: (invocationRoot: string) => PrivateLocalScheduleCapability;
     reload: (invocationRoot: string) => Promise<string>;
     /** Throws `LocalServiceUpdated` when a live service speaks another protocol. */
     status: () => Promise<PrivateLocalServiceStatus | undefined>;

package/dist/private-local-service-discovery.d.ts

@@ -4,7 +4,7 @@ export { sandboxStatusSchema } from "./private-local-sandbox.js";
  * The client-service wire contract. Bump it with any change an older client
  * cannot read; a running client then asks its window to restart.
  */
-export declare const privateLocalServiceProtocol = 4;
+export declare const privateLocalServiceProtocol = 5;
 /** This build's identity: the packed CLI's content hash, or `source` for a source run. */
 export declare function privateLocalServiceVersion(): string;
 /**
@@ -19,7 +19,7 @@ declare const serviceLifecycleSchema: z.ZodObject<{
     startedAt: z.ZodString;
 }, z.core.$loose>;
 declare const serviceRecordSchema: z.ZodObject<{
-    protocol: z.ZodLiteral<4>;
+    protocol: z.ZodLiteral<5>;
     baseUrl: z.ZodURL;
     version: z.ZodString;
     serviceId: z.ZodString & z.ZodType<import("@fungi.computer/cairn").CairnId<"local-service", "service", 1>, string, z.core.$ZodTypeInternals<import("@fungi.computer/cairn").CairnId<"local-service", "service", 1>, string>>;
@@ -29,7 +29,7 @@ declare const serviceRecordSchema: z.ZodObject<{
 export type ServiceRecord = z.infer<typeof serviceRecordSchema>;
 /** Mandatory live diagnostics; never written into the registration pointer. */
 export declare const liveServiceStatusSchema: z.ZodObject<{
-    protocol: z.ZodLiteral<4>;
+    protocol: z.ZodLiteral<5>;
     baseUrl: z.ZodURL;
     version: z.ZodString;
     serviceId: z.ZodString & z.ZodType<import("@fungi.computer/cairn").CairnId<"local-service", "service", 1>, string, z.core.$ZodTypeInternals<import("@fungi.computer/cairn").CairnId<"local-service", "service", 1>, string>>;
@@ -141,9 +141,9 @@ export declare const archiveRequestSchema: z.ZodObject<{
 export declare const archiveRefusalSchema: z.ZodObject<{
     code: z.ZodLiteral<"agent_archive_refused">;
     reason: z.ZodEnum<{
+        archived: "archived";
         pending: "pending";
         running: "running";
-        archived: "archived";
         not_creator: "not_creator";
         self: "self";
         unreadable: "unreadable";

package/dist/private-local-service-discovery.js

@@ -17,7 +17,7 @@ export { sandboxStatusSchema } from "./private-local-sandbox.js";
  * The client-service wire contract. Bump it with any change an older client
  * cannot read; a running client then asks its window to restart.
  */
-export const privateLocalServiceProtocol = 4;
+export const privateLocalServiceProtocol = 5;
 /** This build's identity: the packed CLI's content hash, or `source` for a source run. */
 export function privateLocalServiceVersion() {
     return (z

package/dist/private-local-service-listener.js

@@ -1,5 +1,8 @@
 import { localFailureMetadata, logEvent } from "./log-event.js";
 import { bodyLimit } from "hono/body-limit";
+import { ShiitakeError } from "@fungi.computer/shiitake";
+import { toShiitakeErrorWire } from "@fungi.computer/shiitake/http";
+import { localScheduleControlInputSchema, localScheduleListInputSchema, } from "./private-local-schedules.js";
 import { enrollPrivateLocalMesh, localMeshJoinSchema, } from "./private-local-mesh-enrollment.js";
 import { createLocalMachineEnrollmentAccount, registerFungiAccountOwner, signOutOwnedFungiAccount, } from "./private-fungi-account.js";
 import { createServiceLogLifecycle, } from "./private-local-service-log.js";
@@ -103,6 +106,9 @@ readRecoveryManifest, root = capturePrivateLocalConfigRoot()) {
     const app = new Hono();
     app.onError((error, context) => {
         diagnostics.failure(localFailureMetadata("service.request", error));
+        if (error instanceof ShiitakeError &&
+            context.req.path.startsWith(`${prefix}/schedules/`))
+            return context.json(toShiitakeErrorWire(error), error.cause === "conflict" ? 409 : 400);
         if (error instanceof LocalStoreSchemaError)
             return context.json({
                 code: "store_schema_incompatible",
@@ -308,6 +314,9 @@ readRecoveryManifest, root = capturePrivateLocalConfigRoot()) {
                 archived: input.archived,
             }));
         });
+        app.post(`${prefix}/schedules/list`, bodyLimit({ maxSize: 32 * 1024 }), async (context) => context.json(await owners.schedules(localScheduleListInputSchema.parse(await context.req.json()), context.req.raw.signal)));
+        app.post(`${prefix}/schedules/pause`, bodyLimit({ maxSize: 32 * 1024 }), async (context) => context.json(await owners.pauseSchedule(localScheduleControlInputSchema.parse(await context.req.json()), context.req.raw.signal)));
+        app.post(`${prefix}/schedules/delete`, bodyLimit({ maxSize: 32 * 1024 }), async (context) => context.json(await owners.deleteSchedule(localScheduleControlInputSchema.parse(await context.req.json()), context.req.raw.signal)));
         app.post(`${prefix}/reload`, async (context) => {
             try {
                 const input = z

package/dist/private-local-service-owner.d.ts

@@ -3,10 +3,12 @@ import { type PrivateLocalConfigRoot } from "./private-local-config-root.js";
 import type { ServiceLogLifecycle } from "./private-local-service-log.js";
 import type { StopAllResult } from "./private-local-stop-all.js";
 import { type LocalExtensions } from "./local-extensions.js";
+import { z } from "zod";
 import type { PrivateLocalServiceSelection, PrivateLocalSessionCreation } from "./private-local-service-contract.js";
 import { openPrivateLocalRuntimeHost, type PrivateLocalRuntimeHost } from "./private-local-runtime-host.js";
 import type { LocalUiAttachment } from "./private-local-ui-attachment.js";
 import { createLocalMeshLinks } from "./private-local-mesh-links.js";
+import { localScheduleControlInputSchema, localScheduleListInputSchema } from "./private-local-schedules.js";
 export type LocalServiceRuntime = Pick<PrivateLocalRuntimeHost, "databasePath" | "agentId" | "name" | "getSession" | "effectiveModel" | "setModel" | "setArchived" | "setMode" | "sandboxStatus" | "pendingDelegation" | "assertModelReady" | "listSessions" | "createSession" | "deleteSession" | "extensions" | "prepareReload" | "bindSessionPath" | "acceptMail" | "readSettlement" | "idle" | "close">;
 export declare class LocalSessionPathConflict extends Error {
     readonly name = "LocalSessionPathConflict";
@@ -127,6 +129,134 @@ serviceNative?: () => NonNullable<Parameters<typeof openPrivateLocalRuntimeHost>
         } | undefined;
     }>;
     sweepIdle: () => Promise<void>;
+    schedules: (request: z.input<typeof localScheduleListInputSchema>, signal: AbortSignal) => Promise<{
+        readonly items: readonly ({
+            readonly agentId: string;
+            readonly kind: "almanac";
+            readonly schedule: {
+                readonly id: string;
+                readonly sessionId: string;
+                readonly prompt: string;
+                readonly cron: {
+                    readonly expression: string;
+                    readonly timeZone: string;
+                } | null;
+                readonly nextDueAt: number;
+                readonly state: "cancelled" | "active" | "paused" | "finished";
+                readonly lastCommandId: string | null;
+                readonly lastError: string | null;
+                readonly attempt: number;
+            };
+        } | {
+            readonly agentId: string;
+            readonly kind: "loop";
+            readonly schedule: {
+                readonly sessionId: string;
+                readonly loopId: string;
+                readonly origin: "model" | "human";
+                readonly expiresAt: number | null;
+                readonly prompt: string;
+                readonly mode: "self_paced" | "fixed_interval";
+                readonly cron: {
+                    readonly expression: string;
+                    readonly timeZone: string;
+                } | null;
+                readonly state: "cancelled" | "active" | "failed" | "paused" | "finished";
+                readonly commandId: string;
+                readonly reason: string | null;
+                readonly nextDueAt: number | null;
+                readonly lastError: string | null;
+                readonly consecutiveFailures: number;
+            };
+        })[];
+        readonly unavailable: readonly {
+            readonly agentId: string;
+            readonly reason: "owner_unavailable";
+        }[];
+        readonly next: {
+            readonly agentId: string;
+            readonly kind: "almanac" | "loop";
+            readonly after?: string;
+        } | null;
+    }>;
+    pauseSchedule: (request: z.input<typeof localScheduleControlInputSchema>, signal: AbortSignal) => Promise<{
+        readonly agentId: string;
+        readonly kind: "almanac";
+        readonly schedule: {
+            readonly id: string;
+            readonly sessionId: string;
+            readonly prompt: string;
+            readonly cron: {
+                readonly expression: string;
+                readonly timeZone: string;
+            } | null;
+            readonly nextDueAt: number;
+            readonly state: "cancelled" | "active" | "paused" | "finished";
+            readonly lastCommandId: string | null;
+            readonly lastError: string | null;
+            readonly attempt: number;
+        };
+    } | {
+        readonly agentId: string;
+        readonly kind: "loop";
+        readonly schedule: {
+            readonly sessionId: string;
+            readonly loopId: string;
+            readonly origin: "model" | "human";
+            readonly expiresAt: number | null;
+            readonly prompt: string;
+            readonly mode: "self_paced" | "fixed_interval";
+            readonly cron: {
+                readonly expression: string;
+                readonly timeZone: string;
+            } | null;
+            readonly state: "cancelled" | "active" | "failed" | "paused" | "finished";
+            readonly commandId: string;
+            readonly reason: string | null;
+            readonly nextDueAt: number | null;
+            readonly lastError: string | null;
+            readonly consecutiveFailures: number;
+        };
+    }>;
+    deleteSchedule: (request: z.input<typeof localScheduleControlInputSchema>, signal: AbortSignal) => Promise<{
+        readonly agentId: string;
+        readonly kind: "almanac";
+        readonly schedule: {
+            readonly id: string;
+            readonly sessionId: string;
+            readonly prompt: string;
+            readonly cron: {
+                readonly expression: string;
+                readonly timeZone: string;
+            } | null;
+            readonly nextDueAt: number;
+            readonly state: "cancelled" | "active" | "paused" | "finished";
+            readonly lastCommandId: string | null;
+            readonly lastError: string | null;
+            readonly attempt: number;
+        };
+    } | {
+        readonly agentId: string;
+        readonly kind: "loop";
+        readonly schedule: {
+            readonly sessionId: string;
+            readonly loopId: string;
+            readonly origin: "model" | "human";
+            readonly expiresAt: number | null;
+            readonly prompt: string;
+            readonly mode: "self_paced" | "fixed_interval";
+            readonly cron: {
+                readonly expression: string;
+                readonly timeZone: string;
+            } | null;
+            readonly state: "cancelled" | "active" | "failed" | "paused" | "finished";
+            readonly commandId: string;
+            readonly reason: string | null;
+            readonly nextDueAt: number | null;
+            readonly lastError: string | null;
+            readonly consecutiveFailures: number;
+        };
+    }>;
     archive: (request: Readonly<{
         invocationRoot: string;
         agentId: string;

package/dist/private-local-service-owner.js

@@ -25,6 +25,8 @@ import { createLocalMeshLinks, localMeshLinkKey, } from "./private-local-mesh-li
 import { agentMailAddressSchema, machineAgentRequestSchema, machineDirectorySchema, } from "@fungi.computer/seam/machine-link-protocol";
 import { commandSettlementSchema, settlementReadableBy, } from "@fungi.computer/shiitake/fleet";
 import { BirdDogMailSchema } from "@fungi.computer/bird-dog/effect";
+import { controlAgentScheduleWithContent } from "@fungi.computer/shiitake-extensions/schedules/client";
+import { localScheduleControlInputSchema, localScheduleListInputSchema, readLocalSchedulePage, } from "./private-local-schedules.js";
 export class LocalSessionPathConflict extends Error {
     name = "LocalSessionPathConflict";
     constructor() {
@@ -1034,6 +1036,7 @@ serviceNative, onExecApprovalDecision = () => undefined) {
             }
         }
         return {
+            targets,
             owner: admittedOwner,
             answer: answerAsSender,
             escalate: escalateAsSender,
@@ -1366,6 +1369,29 @@ serviceNative, onExecApprovalDecision = () => undefined) {
         scheduleWakes();
         await saveRecovery();
     }
+    /** Private person-only schedule discovery, never the Agent or mesh directory. */
+    async function schedules(request, signal) {
+        ensureRunning();
+        signal.throwIfAborted();
+        const input = localScheduleListInputSchema.parse(request);
+        const root = await realpath(input.invocationRoot);
+        const control = directory(root);
+        const agents = [...(await control.targets(signal, "all")).keys()];
+        return readLocalSchedulePage(agents, (agentId, requestSignal) => control.owner(agentId, requestSignal, true), input, signal);
+    }
+    async function controlSchedule(request, action, signal) {
+        ensureRunning();
+        signal.throwIfAborted();
+        const input = localScheduleControlInputSchema.parse(request);
+        const root = await realpath(input.invocationRoot);
+        const { owner, release } = await directory(root).owner(input.target.agentId, signal, true);
+        try {
+            return await controlAgentScheduleWithContent(owner, input.target, action);
+        }
+        finally {
+            release();
+        }
+    }
     /** A person archives or restores any Agent of one project folder. */
     async function archive(request, signal) {
         const control = directory(await realpath(request.invocationRoot));
@@ -1521,6 +1547,9 @@ serviceNative, onExecApprovalDecision = () => undefined) {
         effectiveModel,
         sandboxStatus,
         sweepIdle,
+        schedules,
+        pauseSchedule: (request, signal) => controlSchedule(request, "pause", signal),
+        deleteSchedule: (request, signal) => controlSchedule(request, "delete", signal),
         archive,
         stopAll,
         restore,

package/dist/private-local-service.d.ts

@@ -1,3 +1,6 @@
+export type { PrivateLocalScheduleCapability } from "./private-local-schedule-client.js";
+export type { AgentScheduleRow, AgentScheduleTarget, } from "@fungi.computer/shiitake-extensions/schedules";
+export type { LocalSchedulePage } from "./private-local-schedules.js";
 export { LocalSandboxUnavailable } from "./private-local-containment.js";
 export type { StopAllResult } from "./private-local-stop-all.js";
 export { LocalAgentSelectionAmbiguous, LocalSessionPathConflict, } from "./private-local-service-owner.js";

package/dist/private-local-service.js

@@ -1,5 +1,6 @@
 import { FungiMcpSelectionConflict } from "./private-fungi-mcp-selection.js";
 import { logEvent } from "./log-event.js";
+import { createPrivateLocalScheduleCapability } from "./private-local-schedule-client.js";
 import { readBoundedResponse } from "./private-bounded-response.js";
 import { LocalSandboxUnavailable, sandboxUnavailableReasonSchema, } from "./private-local-containment.js";
 export { LocalSandboxUnavailable } from "./private-local-containment.js";
@@ -513,6 +514,7 @@ export function createPrivateLocalServiceManager(options = {}) {
         snapshot: z.unknown(),
     });
     return {
+        schedules: (invocationRoot) => createPrivateLocalScheduleCapability(invocationRoot, start),
         status,
         start,
         createSession: (creation, request) => openConnection("sessions", creation, request),

package/dist/private-mcp-form-session.d.ts

@@ -142,8 +142,8 @@ export declare function createMcpFormSession(): {
                 readonly command: string;
                 readonly cwd: string;
                 readonly justification: string;
-                readonly argv?: readonly string[];
                 readonly prefix?: readonly string[];
+                readonly argv?: readonly string[];
                 readonly warning?: string;
                 readonly alwaysAllowCoverage?: string;
                 readonly alwaysAllowUnavailableReason?: string;
@@ -204,8 +204,8 @@ export declare function createMcpFormSession(): {
                 readonly command: string;
                 readonly cwd: string;
                 readonly justification: string;
-                readonly argv?: readonly string[];
                 readonly prefix?: readonly string[];
+                readonly argv?: readonly string[];
                 readonly warning?: string;
                 readonly alwaysAllowCoverage?: string;
                 readonly alwaysAllowUnavailableReason?: string;

package/dist/private-openai-claims.d.ts

@@ -11,9 +11,9 @@ export declare const openAIIdentityDetailSchema: z.ZodObject<{
         "access_token.sub": "access_token.sub";
     }>;
     problem: z.ZodEnum<{
+        invalid: "invalid";
         absent: "absent";
         malformed: "malformed";
-        invalid: "invalid";
     }>;
     claimNames: z.ZodArray<z.ZodString>;
     authClaimNames: z.ZodOptional<z.ZodArray<z.ZodString>>;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@fungi.computer/truffle",
-  "version": "0.5.0",
+  "version": "0.7.0",
   "private": false,
   "description": "Truffle: Fungi's local Agent runtime, bundled into the fungi command",
   "type": "module",
@@ -77,26 +77,26 @@
     "@cf-wasm/photon": "0.4.0",
     "@earendil-works/pi-ai": "1.3.0",
     "@effect/platform-node": "4.0.2",
-    "@fungi.computer/agar": "0.5.0",
+    "@fungi.computer/agar": "0.6.1",
     "@fungi.computer/approvals": "0.2.0",
-    "@fungi.computer/bird-dog": "0.3.0",
+    "@fungi.computer/bird-dog": "0.3.1",
     "@fungi.computer/cairn": "0.1.0",
     "@fungi.computer/capnweb": "0.12.0",
     "@fungi.computer/carrier": "0.2.0",
     "@fungi.computer/cordyceps": "0.4.0",
     "@fungi.computer/gills": "0.2.0",
-    "@fungi.computer/graft": "0.1.4",
-    "@fungi.computer/knapsack": "0.4.0",
+    "@fungi.computer/graft": "0.1.6",
+    "@fungi.computer/knapsack": "0.4.2",
     "@fungi.computer/lantern": "0.3.1",
-    "@fungi.computer/mycelium": "0.2.3",
-    "@fungi.computer/nacre": "0.1.0",
+    "@fungi.computer/mycelium": "0.3.1",
+    "@fungi.computer/nacre": "0.1.2",
     "@fungi.computer/seam": "0.2.0",
-    "@fungi.computer/shiitake": "0.6.0",
-    "@fungi.computer/shiitake-extensions": "0.4.0",
-    "@fungi.computer/veil": "0.2.1",
+    "@fungi.computer/shiitake": "0.8.0",
+    "@fungi.computer/shiitake-extensions": "0.6.0",
+    "@fungi.computer/veil": "0.3.0",
     "@fungi.computer/watchdog": "0.1.0",
     "@fungi.computer/whistle": "0.3.0",
-    "@fungi.computer/zookeeper": "0.0.5",
+    "@fungi.computer/zookeeper": "0.0.7",
     "@jellybrick/dbus-next": "0.11.4",
     "@modelcontextprotocol/client": "2.0.0",
     "@napi-rs/keyring": "2.1.2",
@@ -107,6 +107,7 @@
     "image-size": "2.0.4",
     "jose": "6.2.11",
     "miniflare": "5.20260828.0-alpha",
+    "npm-package-arg": "14.0.0",
     "proper-lockfile": "4.1.2",
     "re2js": "1.3.3",
     "semver": "7.8.5",
@@ -120,10 +121,11 @@
     "@fungi.computer/mule": "0.2.1",
     "@modelcontextprotocol/server": "2.0.0",
     "@types/node": "24.13.3",
+    "@types/npm-package-arg": "6.1.4",
     "@types/proper-lockfile": "4.1.4",
     "@types/semver": "7.8.0",
     "@types/write-file-atomic": "4.0.3",
-    "bun": "1.4.2",
+    "bun": "1.4.4",
     "bun-types": "1.4.1",
     "esbuild": "0.28.2",
     "typescript": "5.9.3",
@@ -165,12 +167,14 @@
     "clean": "node --input-type=module --eval \"import { rm } from 'node:fs/promises'; await rm('dist', { recursive: true, force: true });\"",
     "test": "pnpm run test:node && pnpm run test:merge && pnpm run test:stop-all",
     "soak:memory": "bun scripts/service-memory-soak.mjs",
+    "soak:sqlite-open-close": "bun scripts/sqlite-open-close-repro.mjs",
     "test:stop-all": "bun test ./test/private-local-stop-all.bun.test.ts",
     "test:full": "pnpm run test && pnpm run test:bun",
     "test:node": "../../node_modules/.bin/vitest run",
+    "test:sandbox:native": "../../node_modules/.bin/vitest run --config vitest.native.config.ts",
     "test:bun": "pnpm run test:mesh-link && pnpm run test:bun:batch && bun test ./test/private-workerd-deadline.bun.test.ts",
     "test:mesh-link": "bun test ./test/private-local-mesh-links.bun.test.ts",
-    "test:bun:batch": "bun test ./test/private-sqlite-approval-driver.bun.test.ts ./test/mcp-form-service.bun.test.ts ./test/private-local-service-discovery.bun.test.ts ./test/private-local-service-listener.bun.test.ts ./test/private-local-service-manager.bun.test.ts ./test/private-local-service-rebind.bun.test.ts ./test/private-local-service-stop.bun.test.ts ./test/private-local-service-ensure.bun.test.ts ./test/private-local-service-identity.bun.test.ts ./test/private-local-service-kill-resume.bun.test.ts ./test/private-local-service-idle-owners.bun.test.ts ./test/private-local-service-idle-delegation.bun.test.ts ./test/private-local-mail-retry.bun.test.ts ./test/private-local-service-log-native.bun.test.ts ./test/private-local-service-log.bun.test.ts ./test/private-local-sqlite-lifetime.bun.test.ts ./test/private-sqlite-driver.bun.test.ts ./test/private-local-reload.bun.test.ts ./test/private-local-auth-rpc.bun.test.ts ./test/private-workerd-forage.bun.test.ts ./test/local-extensions.bun.test.ts ./test/local-extension-archive.bun.test.ts ./test/local-zookeeper-slot.bun.test.ts ./test/local-extension-skills.bun.test.ts ./test/private-local-sandbox-service.bun.test.ts ./test/private-local-native-service.bun.test.ts",
+    "test:bun:batch": "bun test ./test/private-sqlite-approval-driver.bun.test.ts ./test/mcp-form-service.bun.test.ts ./test/private-local-service-discovery.bun.test.ts ./test/private-local-service-listener.bun.test.ts ./test/private-local-schedules.bun.test.ts ./test/private-local-service-manager.bun.test.ts ./test/private-local-service-rebind.bun.test.ts ./test/private-local-service-stop.bun.test.ts ./test/private-local-service-ensure.bun.test.ts ./test/private-local-service-identity.bun.test.ts ./test/private-local-service-kill-resume.bun.test.ts ./test/private-local-service-idle-owners.bun.test.ts ./test/private-local-service-idle-delegation.bun.test.ts ./test/private-local-mail-retry.bun.test.ts ./test/private-local-service-log-native.bun.test.ts ./test/private-local-service-log.bun.test.ts ./test/private-local-sqlite-lifetime.bun.test.ts ./test/private-sqlite-driver.bun.test.ts ./test/private-local-reload.bun.test.ts ./test/private-local-auth-rpc.bun.test.ts ./test/private-workerd-forage.bun.test.ts ./test/local-extensions.bun.test.ts ./test/local-extension-archive.bun.test.ts ./test/local-zookeeper-slot.bun.test.ts ./test/local-extension-skills.bun.test.ts ./test/private-local-sandbox-service.bun.test.ts ./test/private-local-native-service.bun.test.ts",
     "build:native": "fungi-apply-patch-build --out native/bin && node scripts/build-bwrap.mjs --out native/bin && node scripts/generate-native-digests.mjs",
     "test:patch": "node --test --test-timeout=30000 test/apply-patch.native.mjs",
     "test:sandbox:linux": "node --import tsx test/fixtures/local-sandbox-proof.mts",
@@ -178,7 +182,7 @@
     "format:check": "node ../../tooling/repository/scripts/format-package-check.mjs",
     "lint:anti-slop": "node ../../tooling/repository/scripts/lint-package-anti-slop.mjs",
     "test:unit": "node ../../tooling/repository/scripts/test-file-pool.mjs pnpm run test:node && pnpm run test:mesh-link && pnpm run test:bun:batch && pnpm run test:stop-all",
-    "test:merge": "pnpm run test:patch && case \"$(uname -s)\" in Darwin) pnpm run test:sandbox:macos ;; *) pnpm run test:sandbox:linux ;; esac",
+    "test:merge": "pnpm run test:sandbox:native && pnpm run test:patch && case \"$(uname -s)\" in Darwin) pnpm run test:sandbox:macos ;; *) pnpm run test:sandbox:linux ;; esac",
     "proof:goal-loop-sol": "bun scripts/goal-loop-model-proof.mjs",
     "proof:unpatched-login": "node scripts/prove-unpatched-login.mjs",
     "proof:sqlite-close": "bun test ./test/private-local-sqlite-close.bun.test.ts"