@hasna/loops 0.3.47 → 0.3.48

package/dist/daemon/index.js

@@ -329,6 +329,13 @@ function optionalPositiveInteger(value, label) {
     throw new Error(`${label} must be a positive integer`);
   return value;
 }
+function optionalBoolean(value, label) {
+  if (value === undefined)
+    return;
+  if (typeof value !== "boolean")
+    throw new Error(`${label} must be a boolean`);
+  return value;
+}
 function optionalStringArray(value, label) {
   if (value === undefined)
     return;
@@ -340,6 +347,18 @@ function optionalStringArray(value, label) {
   }).filter(Boolean);
   return values.length ? values : undefined;
 }
+function optionalAccountRef(value, label) {
+  if (value === undefined)
+    return;
+  assertObject(value, label);
+  assertString(value.profile, `${label}.profile`);
+  if (value.tool !== undefined)
+    assertString(value.tool, `${label}.tool`);
+  return {
+    profile: value.profile.trim(),
+    tool: typeof value.tool === "string" ? value.tool.trim() : undefined
+  };
+}
 function normalizeGoalSpec(value, label = "goal") {
   if (value === undefined)
     return;
@@ -386,8 +405,21 @@ function validateTarget(value, label) {
       if (value.provider !== "codewith")
         throw new Error(`${label}.authProfile is currently supported only for provider codewith`);
     }
+    if (value.configIsolation !== undefined) {
+      assertString(value.configIsolation, `${label}.configIsolation`);
+      if (!["safe", "none"].includes(value.configIsolation))
+        throw new Error(`${label}.configIsolation must be safe or none`);
+    }
+    if (value.model !== undefined)
+      assertString(value.model, `${label}.model`);
     if (value.variant !== undefined)
       assertString(value.variant, `${label}.variant`);
+    if (value.agent !== undefined)
+      assertString(value.agent, `${label}.agent`);
+    if (value.provider === "cursor" && value.variant !== undefined)
+      throw new Error(`${label}.variant is not supported for provider cursor`);
+    if (value.provider === "codex" && value.agent !== undefined)
+      throw new Error(`${label}.agent is not supported for provider codex`);
     optionalStringArray(value.addDirs, `${label}.addDirs`);
     if (Array.isArray(value.addDirs) && value.addDirs.length > 0 && !["codewith", "codex"].includes(value.provider)) {
       throw new Error(`${label}.addDirs is currently supported only for provider codewith or codex`);
@@ -484,8 +516,10 @@ function normalizeCreateWorkflowInput(input) {
       id: step.id,
       goal: normalizeGoalSpec(step.goal, `workflow.steps[${index}].goal`),
       target: validateTarget(step.target, `workflow.steps[${index}].target`),
-      dependsOn: step.dependsOn ?? [],
-      continueOnFailure: step.continueOnFailure ?? false
+      dependsOn: optionalStringArray(step.dependsOn, `workflow.steps[${index}].dependsOn`) ?? [],
+      continueOnFailure: optionalBoolean(step.continueOnFailure, `workflow.steps[${index}].continueOnFailure`) ?? false,
+      timeoutMs: optionalPositiveInteger(step.timeoutMs, `workflow.steps[${index}].timeoutMs`),
+      account: optionalAccountRef(step.account, `workflow.steps[${index}].account`)
     };
   });
   for (const step of steps) {
@@ -586,6 +620,9 @@ function writeWorkflowRunManifest(args) {
 }
 
 // src/lib/store.ts
+var DEFAULT_RECOVERY_BATCH_LIMIT = 100;
+var DEFAULT_RECOVERY_SCAN_MULTIPLIER = 5;
+var LIVE_EXPIRED_RUN_GRACE_MS = 60000;
 function rowToLoop(row) {
   return {
     id: row.id,
@@ -852,6 +889,7 @@ class Store {
       ensurePrivateStorePath(file);
     this.rootDir = file === ":memory:" ? mkdtempSync(join3(tmpdir(), "open-loops-store-")) : dirname(file);
     this.db = new Database(file);
+    this.db.exec("PRAGMA foreign_keys = ON;");
     this.db.exec("PRAGMA busy_timeout = 5000;");
     this.db.exec("PRAGMA journal_mode = WAL;");
     if (file !== ":memory:")
@@ -915,6 +953,7 @@ class Store {
       );
       CREATE INDEX IF NOT EXISTS idx_runs_loop ON loop_runs(loop_id, created_at);
       CREATE INDEX IF NOT EXISTS idx_runs_status ON loop_runs(status);
+      CREATE INDEX IF NOT EXISTS idx_runs_status_lease ON loop_runs(status, lease_expires_at);
       CREATE INDEX IF NOT EXISTS idx_runs_scheduled ON loop_runs(scheduled_for);
 
       CREATE TABLE IF NOT EXISTS daemon_lease (
@@ -1242,39 +1281,51 @@ class Store {
     }
     return rows.map(rowToLoop);
   }
-  dueLoops(now) {
+  dueLoops(now, limit = 500) {
     const rows = this.db.query(`SELECT * FROM loops
          WHERE status = 'active'
            AND archived_at IS NULL
            AND next_run_at IS NOT NULL
            AND next_run_at <= ?
-         ORDER BY next_run_at ASC`).all(now.toISOString());
+         ORDER BY next_run_at ASC
+         LIMIT ?`).all(now.toISOString(), limit);
     return rows.map(rowToLoop);
   }
   updateLoop(id, patch, opts = {}) {
-    const current = this.getLoop(id);
-    if (!current)
-      throw new Error(`loop not found: ${id}`);
     const updated = (opts.now ?? new Date).toISOString();
-    const merged = { ...current, ...patch, updatedAt: updated };
-    this.db.query(`UPDATE loops SET status=$status, next_run_at=$nextRun, retry_scheduled_for=$retrySlot,
-         expires_at=$expiresAt, updated_at=$updated
-         WHERE id=$id
-           AND ($daemonLeaseId IS NULL OR EXISTS (
-             SELECT 1 FROM daemon_lease WHERE id=$daemonLeaseId AND expires_at > $now
-           ))`).run({
-      $id: id,
-      $status: merged.status,
-      $nextRun: merged.nextRunAt ?? null,
-      $retrySlot: merged.retryScheduledFor ?? null,
-      $expiresAt: merged.expiresAt ?? null,
-      $updated: merged.updatedAt,
-      $daemonLeaseId: opts.daemonLeaseId ?? null,
-      $now: updated
-    });
-    if (patch.status && patch.status !== "active") {
-      const status = patch.status === "paused" ? "deferred" : "cancelled";
-      this.setWorkflowWorkItemsForLoop(id, status, `loop ${patch.status}`, updated);
+    this.db.exec("BEGIN IMMEDIATE");
+    try {
+      const current = this.getLoop(id);
+      if (!current)
+        throw new Error(`loop not found: ${id}`);
+      const merged = { ...current, ...patch, updatedAt: updated };
+      const res = this.db.query(`UPDATE loops SET status=$status, next_run_at=$nextRun, retry_scheduled_for=$retrySlot,
+           expires_at=$expiresAt, updated_at=$updated
+           WHERE id=$id
+             AND ($daemonLeaseId IS NULL OR EXISTS (
+               SELECT 1 FROM daemon_lease WHERE id=$daemonLeaseId AND expires_at > $now
+             ))`).run({
+        $id: id,
+        $status: merged.status,
+        $nextRun: merged.nextRunAt ?? null,
+        $retrySlot: merged.retryScheduledFor ?? null,
+        $expiresAt: merged.expiresAt ?? null,
+        $updated: merged.updatedAt,
+        $daemonLeaseId: opts.daemonLeaseId ?? null,
+        $now: updated
+      });
+      if (res.changes !== 1)
+        throw new Error("daemon lease lost");
+      if (patch.status && patch.status !== "active") {
+        const status = patch.status === "paused" ? "deferred" : "cancelled";
+        this.setWorkflowWorkItemsForLoop(id, status, `loop ${patch.status}`, updated);
+      }
+      this.db.exec("COMMIT");
+    } catch (error) {
+      try {
+        this.db.exec("ROLLBACK");
+      } catch {}
+      throw error;
     }
     const after = this.getLoop(id);
     if (!after)
@@ -2505,14 +2556,40 @@ class Store {
     }
     return rows.map(rowToRun);
   }
+  deferLiveExpiredRun(id, now, opts = {}) {
+    const updated = now.toISOString();
+    const deferredUntil = new Date(now.getTime() + LIVE_EXPIRED_RUN_GRACE_MS).toISOString();
+    this.db.query(`UPDATE loop_runs SET lease_expires_at=$deferredUntil, updated_at=$updated
+         WHERE id=$id AND status='running' AND lease_expires_at <= $now
+           AND ($daemonLeaseId IS NULL OR EXISTS (
+             SELECT 1 FROM daemon_lease WHERE id=$daemonLeaseId AND expires_at > $now
+           ))`).run({
+      $id: id,
+      $deferredUntil: deferredUntil,
+      $updated: updated,
+      $now: updated,
+      $daemonLeaseId: opts.daemonLeaseId ?? null
+    });
+  }
   recoverExpiredRunLeases(now = new Date, opts = {}) {
-    const rows = this.db.query("SELECT * FROM loop_runs WHERE status = 'running' AND lease_expires_at <= ?").all(now.toISOString());
+    const limit = Math.max(1, Math.min(1000, Math.floor(opts.limit ?? DEFAULT_RECOVERY_BATCH_LIMIT)));
+    const scanLimit = Math.max(limit, Math.min(5000, Math.floor(opts.scanLimit ?? limit * DEFAULT_RECOVERY_SCAN_MULTIPLIER)));
+    const rows = this.db.query(`SELECT * FROM loop_runs
+         WHERE status = 'running' AND lease_expires_at <= ?
+         ORDER BY lease_expires_at ASC
+         LIMIT ?`).all(now.toISOString(), scanLimit);
     const recovered = [];
     for (const row of rows) {
-      if (row.pid && isProcessAlive(row.pid))
+      if (recovered.length >= limit)
+        break;
+      if (row.pid && isProcessAlive(row.pid)) {
+        this.deferLiveExpiredRun(row.id, now, opts);
         continue;
-      if (this.hasLiveWorkflowStepProcesses(row.id))
+      }
+      if (this.hasLiveWorkflowStepProcesses(row.id)) {
+        this.deferLiveExpiredRun(row.id, now, opts);
         continue;
+      }
       const finished = now.toISOString();
       this.db.exec("BEGIN IMMEDIATE");
       try {
@@ -2909,6 +2986,7 @@ var AUTH_ENV_KEYS = [
   "CODEWITH_HOME",
   "CODEX_HOME",
   "CURSOR_CONFIG_DIR",
+  "CURSOR_API_KEY",
   "OPENCODE_CONFIG_DIR",
   "AICOPILOT_CONFIG_DIR",
   "ANTHROPIC_API_KEY",
@@ -3038,6 +3116,10 @@ function assertSupportedAgentOptions(target) {
   assertStringOption(target.model, `${target.provider}.model`);
   assertStringOption(target.agent, `${target.provider}.agent`);
   assertStringOption(target.authProfile, `${target.provider}.authProfile`);
+  assertStringOption(target.configIsolation, `${target.provider}.configIsolation`);
+  if (target.configIsolation !== undefined && target.configIsolation !== "safe" && target.configIsolation !== "none") {
+    throw new Error(`${target.provider}.configIsolation must be safe or none`);
+  }
   if (target.authProfile !== undefined && target.provider !== "codewith") {
     throw new Error(`${target.provider}.authProfile is supported only for codewith`);
   }
@@ -3050,6 +3132,8 @@ function assertSupportedAgentOptions(target) {
   if (target.sandbox && !["read-only", "workspace-write", "danger-full-access", "enabled", "disabled"].includes(target.sandbox)) {
     throw new Error(`${target.provider}.sandbox is not supported: ${target.sandbox}`);
   }
+  if (target.provider === "codex" && target.agent !== undefined)
+    throw new Error("codex.agent is not supported");
   if (["codewith", "codex"].includes(target.provider)) {
     if (target.permissionMode && !["default", "bypass"].includes(target.permissionMode)) {
       throw new Error(`${target.provider}.permissionMode supports only default or bypass`);
@@ -3064,6 +3148,8 @@ function assertSupportedAgentOptions(target) {
     return;
   }
   if (target.provider === "cursor") {
+    if (target.variant !== undefined)
+      throw new Error("cursor.variant is not supported");
     if (target.permissionMode === "auto")
       throw new Error("cursor.permissionMode auto is not supported; use provider-specific extraArgs for Cursor auto-review");
     if (target.sandbox !== undefined && target.sandbox !== "enabled" && target.sandbox !== "disabled") {
@@ -3105,10 +3191,8 @@ function agentArgs(target) {
         "set -eu",
         "if command -v agent >/dev/null 2>&1; then",
         '  exec agent "$@"',
-        "elif command -v cursor >/dev/null 2>&1; then",
-        '  exec cursor agent "$@"',
         "else",
-        "  echo 'Executable not found in PATH: cursor agent or agent' >&2",
+        "  echo 'Executable not found in PATH: agent' >&2",
         "  exit 127",
         "fi"
       ].join(`
@@ -3149,7 +3233,7 @@ function agentArgs(target) {
     case "codex":
       if (target.variant)
         args.push("-c", `model_reasoning_effort=${configStringValue(target.variant)}`);
-      args.push("exec", "--json", "--ephemeral", "--sandbox", codewithLikeSandbox(target), "--skip-git-repo-check");
+      args.push("--ask-for-approval", "never", "exec", "--json", "--ephemeral", "--sandbox", codewithLikeSandbox(target), "--skip-git-repo-check");
       if (isolation === "safe")
         args.push("--ignore-rules");
       if (target.cwd)
@@ -3219,7 +3303,7 @@ function commandSpec(target) {
     account: agentTarget.account,
     accountTool: agentTarget.account?.tool ?? accountToolForProvider(agentTarget.provider),
     nativeAuthProfile: agentTarget.authProfile ? { provider: agentTarget.provider, profile: agentTarget.authProfile } : undefined,
-    preflightAnyOf: agentTarget.provider === "cursor" ? ["cursor", "agent"] : undefined,
+    preflightAnyOf: agentTarget.provider === "cursor" ? ["agent"] : undefined,
     stdin: agentTarget.prompt,
     allowlist: agentTarget.allowlist
   };
@@ -4602,12 +4686,14 @@ function claimDueRuns(deps) {
   const claimed = [];
   const skipped = [];
   const maxClaims = Math.max(0, deps.maxClaims ?? Number.POSITIVE_INFINITY);
+  if (maxClaims === 0)
+    return { claims, claimed, completed: [], skipped, recovered, expired };
   for (const loop of deps.store.dueLoops(now)) {
-    if (claims.length >= maxClaims)
+    if (claims.length + skipped.length >= maxClaims)
       break;
     const plan = dueSlots(loop, now);
     for (const slot of plan.slots) {
-      if (claims.length >= maxClaims)
+      if (claims.length + skipped.length >= maxClaims)
         break;
       const run = claimSlot(deps, loop, slot);
       if (!run)
@@ -5057,7 +5143,7 @@ function enableStartup(result) {
 // package.json
 var package_default = {
   name: "@hasna/loops",
-  version: "0.3.47",
+  version: "0.3.48",
   description: "Persistent local loop and workflow runner for deterministic commands and headless AI coding agents",
   type: "module",
   main: "dist/index.js",

package/dist/index.js

@@ -327,6 +327,13 @@ function optionalPositiveInteger(value, label) {
     throw new Error(`${label} must be a positive integer`);
   return value;
 }
+function optionalBoolean(value, label) {
+  if (value === undefined)
+    return;
+  if (typeof value !== "boolean")
+    throw new Error(`${label} must be a boolean`);
+  return value;
+}
 function optionalStringArray(value, label) {
   if (value === undefined)
     return;
@@ -338,6 +345,18 @@ function optionalStringArray(value, label) {
   }).filter(Boolean);
   return values.length ? values : undefined;
 }
+function optionalAccountRef(value, label) {
+  if (value === undefined)
+    return;
+  assertObject(value, label);
+  assertString(value.profile, `${label}.profile`);
+  if (value.tool !== undefined)
+    assertString(value.tool, `${label}.tool`);
+  return {
+    profile: value.profile.trim(),
+    tool: typeof value.tool === "string" ? value.tool.trim() : undefined
+  };
+}
 function normalizeGoalSpec(value, label = "goal") {
   if (value === undefined)
     return;
@@ -384,8 +403,21 @@ function validateTarget(value, label) {
       if (value.provider !== "codewith")
         throw new Error(`${label}.authProfile is currently supported only for provider codewith`);
     }
+    if (value.configIsolation !== undefined) {
+      assertString(value.configIsolation, `${label}.configIsolation`);
+      if (!["safe", "none"].includes(value.configIsolation))
+        throw new Error(`${label}.configIsolation must be safe or none`);
+    }
+    if (value.model !== undefined)
+      assertString(value.model, `${label}.model`);
     if (value.variant !== undefined)
       assertString(value.variant, `${label}.variant`);
+    if (value.agent !== undefined)
+      assertString(value.agent, `${label}.agent`);
+    if (value.provider === "cursor" && value.variant !== undefined)
+      throw new Error(`${label}.variant is not supported for provider cursor`);
+    if (value.provider === "codex" && value.agent !== undefined)
+      throw new Error(`${label}.agent is not supported for provider codex`);
     optionalStringArray(value.addDirs, `${label}.addDirs`);
     if (Array.isArray(value.addDirs) && value.addDirs.length > 0 && !["codewith", "codex"].includes(value.provider)) {
       throw new Error(`${label}.addDirs is currently supported only for provider codewith or codex`);
@@ -482,8 +514,10 @@ function normalizeCreateWorkflowInput(input) {
       id: step.id,
       goal: normalizeGoalSpec(step.goal, `workflow.steps[${index}].goal`),
       target: validateTarget(step.target, `workflow.steps[${index}].target`),
-      dependsOn: step.dependsOn ?? [],
-      continueOnFailure: step.continueOnFailure ?? false
+      dependsOn: optionalStringArray(step.dependsOn, `workflow.steps[${index}].dependsOn`) ?? [],
+      continueOnFailure: optionalBoolean(step.continueOnFailure, `workflow.steps[${index}].continueOnFailure`) ?? false,
+      timeoutMs: optionalPositiveInteger(step.timeoutMs, `workflow.steps[${index}].timeoutMs`),
+      account: optionalAccountRef(step.account, `workflow.steps[${index}].account`)
     };
   });
   for (const step of steps) {
@@ -584,6 +618,9 @@ function writeWorkflowRunManifest(args) {
 }
 
 // src/lib/store.ts
+var DEFAULT_RECOVERY_BATCH_LIMIT = 100;
+var DEFAULT_RECOVERY_SCAN_MULTIPLIER = 5;
+var LIVE_EXPIRED_RUN_GRACE_MS = 60000;
 function rowToLoop(row) {
   return {
     id: row.id,
@@ -850,6 +887,7 @@ class Store {
       ensurePrivateStorePath(file);
     this.rootDir = file === ":memory:" ? mkdtempSync(join3(tmpdir(), "open-loops-store-")) : dirname(file);
     this.db = new Database(file);
+    this.db.exec("PRAGMA foreign_keys = ON;");
     this.db.exec("PRAGMA busy_timeout = 5000;");
     this.db.exec("PRAGMA journal_mode = WAL;");
     if (file !== ":memory:")
@@ -913,6 +951,7 @@ class Store {
       );
       CREATE INDEX IF NOT EXISTS idx_runs_loop ON loop_runs(loop_id, created_at);
       CREATE INDEX IF NOT EXISTS idx_runs_status ON loop_runs(status);
+      CREATE INDEX IF NOT EXISTS idx_runs_status_lease ON loop_runs(status, lease_expires_at);
       CREATE INDEX IF NOT EXISTS idx_runs_scheduled ON loop_runs(scheduled_for);
 
       CREATE TABLE IF NOT EXISTS daemon_lease (
@@ -1240,39 +1279,51 @@ class Store {
     }
     return rows.map(rowToLoop);
   }
-  dueLoops(now) {
+  dueLoops(now, limit = 500) {
     const rows = this.db.query(`SELECT * FROM loops
          WHERE status = 'active'
            AND archived_at IS NULL
            AND next_run_at IS NOT NULL
            AND next_run_at <= ?
-         ORDER BY next_run_at ASC`).all(now.toISOString());
+         ORDER BY next_run_at ASC
+         LIMIT ?`).all(now.toISOString(), limit);
     return rows.map(rowToLoop);
   }
   updateLoop(id, patch, opts = {}) {
-    const current = this.getLoop(id);
-    if (!current)
-      throw new Error(`loop not found: ${id}`);
     const updated = (opts.now ?? new Date).toISOString();
-    const merged = { ...current, ...patch, updatedAt: updated };
-    this.db.query(`UPDATE loops SET status=$status, next_run_at=$nextRun, retry_scheduled_for=$retrySlot,
-         expires_at=$expiresAt, updated_at=$updated
-         WHERE id=$id
-           AND ($daemonLeaseId IS NULL OR EXISTS (
-             SELECT 1 FROM daemon_lease WHERE id=$daemonLeaseId AND expires_at > $now
-           ))`).run({
-      $id: id,
-      $status: merged.status,
-      $nextRun: merged.nextRunAt ?? null,
-      $retrySlot: merged.retryScheduledFor ?? null,
-      $expiresAt: merged.expiresAt ?? null,
-      $updated: merged.updatedAt,
-      $daemonLeaseId: opts.daemonLeaseId ?? null,
-      $now: updated
-    });
-    if (patch.status && patch.status !== "active") {
-      const status = patch.status === "paused" ? "deferred" : "cancelled";
-      this.setWorkflowWorkItemsForLoop(id, status, `loop ${patch.status}`, updated);
+    this.db.exec("BEGIN IMMEDIATE");
+    try {
+      const current = this.getLoop(id);
+      if (!current)
+        throw new Error(`loop not found: ${id}`);
+      const merged = { ...current, ...patch, updatedAt: updated };
+      const res = this.db.query(`UPDATE loops SET status=$status, next_run_at=$nextRun, retry_scheduled_for=$retrySlot,
+           expires_at=$expiresAt, updated_at=$updated
+           WHERE id=$id
+             AND ($daemonLeaseId IS NULL OR EXISTS (
+               SELECT 1 FROM daemon_lease WHERE id=$daemonLeaseId AND expires_at > $now
+             ))`).run({
+        $id: id,
+        $status: merged.status,
+        $nextRun: merged.nextRunAt ?? null,
+        $retrySlot: merged.retryScheduledFor ?? null,
+        $expiresAt: merged.expiresAt ?? null,
+        $updated: merged.updatedAt,
+        $daemonLeaseId: opts.daemonLeaseId ?? null,
+        $now: updated
+      });
+      if (res.changes !== 1)
+        throw new Error("daemon lease lost");
+      if (patch.status && patch.status !== "active") {
+        const status = patch.status === "paused" ? "deferred" : "cancelled";
+        this.setWorkflowWorkItemsForLoop(id, status, `loop ${patch.status}`, updated);
+      }
+      this.db.exec("COMMIT");
+    } catch (error) {
+      try {
+        this.db.exec("ROLLBACK");
+      } catch {}
+      throw error;
     }
     const after = this.getLoop(id);
     if (!after)
@@ -2503,14 +2554,40 @@ class Store {
     }
     return rows.map(rowToRun);
   }
+  deferLiveExpiredRun(id, now, opts = {}) {
+    const updated = now.toISOString();
+    const deferredUntil = new Date(now.getTime() + LIVE_EXPIRED_RUN_GRACE_MS).toISOString();
+    this.db.query(`UPDATE loop_runs SET lease_expires_at=$deferredUntil, updated_at=$updated
+         WHERE id=$id AND status='running' AND lease_expires_at <= $now
+           AND ($daemonLeaseId IS NULL OR EXISTS (
+             SELECT 1 FROM daemon_lease WHERE id=$daemonLeaseId AND expires_at > $now
+           ))`).run({
+      $id: id,
+      $deferredUntil: deferredUntil,
+      $updated: updated,
+      $now: updated,
+      $daemonLeaseId: opts.daemonLeaseId ?? null
+    });
+  }
   recoverExpiredRunLeases(now = new Date, opts = {}) {
-    const rows = this.db.query("SELECT * FROM loop_runs WHERE status = 'running' AND lease_expires_at <= ?").all(now.toISOString());
+    const limit = Math.max(1, Math.min(1000, Math.floor(opts.limit ?? DEFAULT_RECOVERY_BATCH_LIMIT)));
+    const scanLimit = Math.max(limit, Math.min(5000, Math.floor(opts.scanLimit ?? limit * DEFAULT_RECOVERY_SCAN_MULTIPLIER)));
+    const rows = this.db.query(`SELECT * FROM loop_runs
+         WHERE status = 'running' AND lease_expires_at <= ?
+         ORDER BY lease_expires_at ASC
+         LIMIT ?`).all(now.toISOString(), scanLimit);
     const recovered = [];
     for (const row of rows) {
-      if (row.pid && isProcessAlive(row.pid))
+      if (recovered.length >= limit)
+        break;
+      if (row.pid && isProcessAlive(row.pid)) {
+        this.deferLiveExpiredRun(row.id, now, opts);
         continue;
-      if (this.hasLiveWorkflowStepProcesses(row.id))
+      }
+      if (this.hasLiveWorkflowStepProcesses(row.id)) {
+        this.deferLiveExpiredRun(row.id, now, opts);
         continue;
+      }
       const finished = now.toISOString();
       this.db.exec("BEGIN IMMEDIATE");
       try {
@@ -2899,6 +2976,7 @@ var AUTH_ENV_KEYS = [
   "CODEWITH_HOME",
   "CODEX_HOME",
   "CURSOR_CONFIG_DIR",
+  "CURSOR_API_KEY",
   "OPENCODE_CONFIG_DIR",
   "AICOPILOT_CONFIG_DIR",
   "ANTHROPIC_API_KEY",
@@ -3028,6 +3106,10 @@ function assertSupportedAgentOptions(target) {
   assertStringOption(target.model, `${target.provider}.model`);
   assertStringOption(target.agent, `${target.provider}.agent`);
   assertStringOption(target.authProfile, `${target.provider}.authProfile`);
+  assertStringOption(target.configIsolation, `${target.provider}.configIsolation`);
+  if (target.configIsolation !== undefined && target.configIsolation !== "safe" && target.configIsolation !== "none") {
+    throw new Error(`${target.provider}.configIsolation must be safe or none`);
+  }
   if (target.authProfile !== undefined && target.provider !== "codewith") {
     throw new Error(`${target.provider}.authProfile is supported only for codewith`);
   }
@@ -3040,6 +3122,8 @@ function assertSupportedAgentOptions(target) {
   if (target.sandbox && !["read-only", "workspace-write", "danger-full-access", "enabled", "disabled"].includes(target.sandbox)) {
     throw new Error(`${target.provider}.sandbox is not supported: ${target.sandbox}`);
   }
+  if (target.provider === "codex" && target.agent !== undefined)
+    throw new Error("codex.agent is not supported");
   if (["codewith", "codex"].includes(target.provider)) {
     if (target.permissionMode && !["default", "bypass"].includes(target.permissionMode)) {
       throw new Error(`${target.provider}.permissionMode supports only default or bypass`);
@@ -3054,6 +3138,8 @@ function assertSupportedAgentOptions(target) {
     return;
   }
   if (target.provider === "cursor") {
+    if (target.variant !== undefined)
+      throw new Error("cursor.variant is not supported");
     if (target.permissionMode === "auto")
       throw new Error("cursor.permissionMode auto is not supported; use provider-specific extraArgs for Cursor auto-review");
     if (target.sandbox !== undefined && target.sandbox !== "enabled" && target.sandbox !== "disabled") {
@@ -3095,10 +3181,8 @@ function agentArgs(target) {
         "set -eu",
         "if command -v agent >/dev/null 2>&1; then",
         '  exec agent "$@"',
-        "elif command -v cursor >/dev/null 2>&1; then",
-        '  exec cursor agent "$@"',
         "else",
-        "  echo 'Executable not found in PATH: cursor agent or agent' >&2",
+        "  echo 'Executable not found in PATH: agent' >&2",
         "  exit 127",
         "fi"
       ].join(`
@@ -3139,7 +3223,7 @@ function agentArgs(target) {
     case "codex":
       if (target.variant)
         args.push("-c", `model_reasoning_effort=${configStringValue(target.variant)}`);
-      args.push("exec", "--json", "--ephemeral", "--sandbox", codewithLikeSandbox(target), "--skip-git-repo-check");
+      args.push("--ask-for-approval", "never", "exec", "--json", "--ephemeral", "--sandbox", codewithLikeSandbox(target), "--skip-git-repo-check");
       if (isolation === "safe")
         args.push("--ignore-rules");
       if (target.cwd)
@@ -3209,7 +3293,7 @@ function commandSpec(target) {
     account: agentTarget.account,
     accountTool: agentTarget.account?.tool ?? accountToolForProvider(agentTarget.provider),
     nativeAuthProfile: agentTarget.authProfile ? { provider: agentTarget.provider, profile: agentTarget.authProfile } : undefined,
-    preflightAnyOf: agentTarget.provider === "cursor" ? ["cursor", "agent"] : undefined,
+    preflightAnyOf: agentTarget.provider === "cursor" ? ["agent"] : undefined,
     stdin: agentTarget.prompt,
     allowlist: agentTarget.allowlist
   };
@@ -4592,12 +4676,14 @@ function claimDueRuns(deps) {
   const claimed = [];
   const skipped = [];
   const maxClaims = Math.max(0, deps.maxClaims ?? Number.POSITIVE_INFINITY);
+  if (maxClaims === 0)
+    return { claims, claimed, completed: [], skipped, recovered, expired };
   for (const loop of deps.store.dueLoops(now)) {
-    if (claims.length >= maxClaims)
+    if (claims.length + skipped.length >= maxClaims)
       break;
     const plan = dueSlots(loop, now);
     for (const slot of plan.slots) {
-      if (claims.length >= maxClaims)
+      if (claims.length + skipped.length >= maxClaims)
         break;
       const run = claimSlot(deps, loop, slot);
       if (!run)
@@ -5868,35 +5954,17 @@ async function stopDaemon(opts = {}) {
 // src/lib/doctor.ts
 var PROVIDER_COMMANDS = [
   "claude",
-  "cursor agent",
+  "agent",
   "codewith",
   "aicopilot",
   "opencode",
   "codex"
 ];
 function hasCommand(command) {
-  if (command === "cursor agent") {
-    return hasCommand("cursor") || hasCommand("agent");
-  }
   const result = spawnSync3("sh", ["-c", 'command -v "$1" >/dev/null', "sh", command], { stdio: "ignore" });
   return (result.status ?? 1) === 0;
 }
 function commandVersion(command) {
-  if (command === "cursor agent") {
-    const cursorResult = spawnSync3("cursor", ["agent", "--version"], {
-      encoding: "utf8",
-      stdio: ["ignore", "pipe", "pipe"]
-    });
-    if ((cursorResult.status ?? 1) === 0)
-      return (cursorResult.stdout || cursorResult.stderr).trim().split(/\r?\n/)[0];
-    const agentResult = spawnSync3("agent", ["--version"], {
-      encoding: "utf8",
-      stdio: ["ignore", "pipe", "pipe"]
-    });
-    if ((agentResult.status ?? 1) === 0)
-      return (agentResult.stdout || agentResult.stderr).trim().split(/\r?\n/)[0];
-    return;
-  }
   const result = spawnSync3(command, ["--version"], {
     encoding: "utf8",
     stdio: ["ignore", "pipe", "pipe"]

package/dist/lib/store.d.ts

@@ -81,7 +81,7 @@ export declare class Store {
         archived?: boolean;
         includeArchived?: boolean;
     }): Loop[];
-    dueLoops(now: Date): Loop[];
+    dueLoops(now: Date, limit?: number): Loop[];
     updateLoop(id: string, patch: Partial<Pick<Loop, "status" | "nextRunAt" | "retryScheduledFor" | "expiresAt">>, opts?: DaemonLeaseFence): Loop;
     renameLoop(id: string, name: string, opts?: DaemonLeaseFence): Loop;
     archiveLoop(idOrName: string): Loop;
@@ -195,7 +195,11 @@ export declare class Store {
         status?: RunStatus;
         limit?: number;
     }): LoopRun[];
-    recoverExpiredRunLeases(now?: Date, opts?: DaemonLeaseFence): LoopRun[];
+    private deferLiveExpiredRun;
+    recoverExpiredRunLeases(now?: Date, opts?: DaemonLeaseFence & {
+        limit?: number;
+        scanLimit?: number;
+    }): LoopRun[];
     expireLoops(now?: Date, opts?: DaemonLeaseFence): Loop[];
     countLoops(status?: LoopStatus, opts?: {
         archived?: boolean;