@jonit-dev/night-watch-cli 1.5.0 → 1.5.1

package/dist/utils/execution-history.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"execution-history.d.ts","sourceRoot":"","sources":["../../src/utils/execution-history.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAYH,MAAM,MAAM,gBAAgB,GAAG,SAAS,GAAG,SAAS,GAAG,SAAS,GAAG,cAAc,CAAC;AAElF,MAAM,WAAW,gBAAgB;IAC/B,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,gBAAgB,CAAC;IAC1B,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,UAAU,WAAW;IACnB,OAAO,EAAE,gBAAgB,EAAE,CAAC;CAC7B;AAED;;GAEG;AACH,MAAM,MAAM,iBAAiB,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC,CAAC;AAS5E;;GAEG;AACH,wBAAgB,cAAc,IAAI,MAAM,CAIvC;AAwFD;;GAEG;AACH,wBAAgB,WAAW,IAAI,iBAAiB,CAE/C;AAED;;GAEG;AACH,wBAAgB,WAAW,CAAC,OAAO,EAAE,iBAAiB,GAAG,IAAI,CAQ5D;AAED;;;GAGG;AACH,wBAAgB,eAAe,CAC7B,UAAU,EAAE,MAAM,EAClB,OAAO,EAAE,MAAM,EACf,OAAO,EAAE,gBAAgB,EACzB,QAAQ,EAAE,MAAM,EAChB,OAAO,GAAE,MAAU,GAClB,IAAI,CAmCN;AAED;;;GAGG;AACH,wBAAgB,gBAAgB,CAC9B,UAAU,EAAE,MAAM,EAClB,OAAO,EAAE,MAAM,GACd,gBAAgB,GAAG,IAAI,CAQzB;AAED;;;GAGG;AACH,wBAAgB,YAAY,CAC1B,UAAU,EAAE,MAAM,EAClB,OAAO,EAAE,MAAM,EACf,cAAc,EAAE,MAAM,GACrB,OAAO,CAYT"}

package/dist/utils/execution-history.js

@@ -0,0 +1,183 @@
+/**
+ * Execution history ledger for Night Watch CLI
+ * Stores PRD execution records in ~/.night-watch/history.json
+ * Decoupled from PRD file paths — keyed by project directory + PRD filename.
+ */
+import * as fs from "fs";
+import * as os from "os";
+import * as path from "path";
+import { GLOBAL_CONFIG_DIR, HISTORY_FILE_NAME, MAX_HISTORY_RECORDS_PER_PRD, } from "../constants.js";
+const HISTORY_LOCK_SUFFIX = ".lock";
+const HISTORY_LOCK_TIMEOUT_MS = 5000;
+const HISTORY_LOCK_STALE_MS = 30000;
+const HISTORY_LOCK_POLL_MS = 25;
+const sleepState = new Int32Array(new SharedArrayBuffer(4));
+/**
+ * Get the path to the history file
+ */
+export function getHistoryPath() {
+    const base = process.env.NIGHT_WATCH_HOME || path.join(os.homedir(), GLOBAL_CONFIG_DIR);
+    return path.join(base, HISTORY_FILE_NAME);
+}
+function sleepMs(ms) {
+    Atomics.wait(sleepState, 0, 0, ms);
+}
+function acquireHistoryLock(historyPath) {
+    const lockPath = `${historyPath}${HISTORY_LOCK_SUFFIX}`;
+    fs.mkdirSync(path.dirname(lockPath), { recursive: true });
+    const deadline = Date.now() + HISTORY_LOCK_TIMEOUT_MS;
+    while (true) {
+        try {
+            return fs.openSync(lockPath, "wx");
+        }
+        catch (error) {
+            const err = error;
+            if (err.code !== "EEXIST") {
+                throw err;
+            }
+            try {
+                const lockStats = fs.statSync(lockPath);
+                if (Date.now() - lockStats.mtimeMs > HISTORY_LOCK_STALE_MS) {
+                    fs.unlinkSync(lockPath);
+                    continue;
+                }
+            }
+            catch {
+                // Lock may have disappeared between checks; retry.
+            }
+            if (Date.now() >= deadline) {
+                throw new Error(`Timed out acquiring execution history lock: ${lockPath}`);
+            }
+            sleepMs(HISTORY_LOCK_POLL_MS);
+        }
+    }
+}
+function releaseHistoryLock(lockFd, historyPath) {
+    const lockPath = `${historyPath}${HISTORY_LOCK_SUFFIX}`;
+    try {
+        fs.closeSync(lockFd);
+    }
+    catch {
+        // Ignore close errors; lock cleanup still attempted.
+    }
+    try {
+        fs.unlinkSync(lockPath);
+    }
+    catch {
+        // Ignore lock cleanup errors.
+    }
+}
+function loadHistoryFromPath(historyPath) {
+    if (!fs.existsSync(historyPath)) {
+        return {};
+    }
+    try {
+        const content = fs.readFileSync(historyPath, "utf-8");
+        const parsed = JSON.parse(content);
+        if (parsed === null || typeof parsed !== "object" || Array.isArray(parsed)) {
+            return {};
+        }
+        return parsed;
+    }
+    catch {
+        return {};
+    }
+}
+function saveHistoryAtomic(historyPath, history) {
+    const dir = path.dirname(historyPath);
+    fs.mkdirSync(dir, { recursive: true });
+    const tmpPath = path.join(dir, `${HISTORY_FILE_NAME}.${process.pid}.${Date.now()}.tmp`);
+    try {
+        fs.writeFileSync(tmpPath, JSON.stringify(history, null, 2) + "\n");
+        fs.renameSync(tmpPath, historyPath);
+    }
+    finally {
+        if (fs.existsSync(tmpPath)) {
+            fs.rmSync(tmpPath, { force: true });
+        }
+    }
+}
+/**
+ * Load execution history from disk. Returns empty object if missing or invalid.
+ */
+export function loadHistory() {
+    return loadHistoryFromPath(getHistoryPath());
+}
+/**
+ * Save execution history to disk.
+ */
+export function saveHistory(history) {
+    const historyPath = getHistoryPath();
+    const lockFd = acquireHistoryLock(historyPath);
+    try {
+        saveHistoryAtomic(historyPath, history);
+    }
+    finally {
+        releaseHistoryLock(lockFd, historyPath);
+    }
+}
+/**
+ * Record a PRD execution result.
+ * Appends a record and trims to MAX_HISTORY_RECORDS_PER_PRD.
+ */
+export function recordExecution(projectDir, prdFile, outcome, exitCode, attempt = 1) {
+    const historyPath = getHistoryPath();
+    const lockFd = acquireHistoryLock(historyPath);
+    const resolved = path.resolve(projectDir);
+    try {
+        const history = loadHistoryFromPath(historyPath);
+        if (!history[resolved]) {
+            history[resolved] = {};
+        }
+        if (!history[resolved][prdFile]) {
+            history[resolved][prdFile] = { records: [] };
+        }
+        const record = {
+            timestamp: Math.floor(Date.now() / 1000),
+            outcome,
+            exitCode,
+            attempt,
+        };
+        history[resolved][prdFile].records.push(record);
+        // Trim to max records (keep most recent)
+        const records = history[resolved][prdFile].records;
+        if (records.length > MAX_HISTORY_RECORDS_PER_PRD) {
+            history[resolved][prdFile].records = records.slice(records.length - MAX_HISTORY_RECORDS_PER_PRD);
+        }
+        saveHistoryAtomic(historyPath, history);
+    }
+    finally {
+        releaseHistoryLock(lockFd, historyPath);
+    }
+}
+/**
+ * Get the most recent execution record for a PRD.
+ * Returns null if no history exists.
+ */
+export function getLastExecution(projectDir, prdFile) {
+    const resolved = path.resolve(projectDir);
+    const history = loadHistory();
+    const prdHistory = history[resolved]?.[prdFile];
+    if (!prdHistory || prdHistory.records.length === 0) {
+        return null;
+    }
+    return prdHistory.records[prdHistory.records.length - 1];
+}
+/**
+ * Check if a PRD is in cooldown after a recent non-success execution.
+ * Returns true if the PRD should be skipped.
+ */
+export function isInCooldown(projectDir, prdFile, cooldownPeriod) {
+    const last = getLastExecution(projectDir, prdFile);
+    if (!last) {
+        return false;
+    }
+    // Success records don't trigger cooldown
+    if (last.outcome === "success") {
+        return false;
+    }
+    const now = Math.floor(Date.now() / 1000);
+    const age = now - last.timestamp;
+    return age < cooldownPeriod;
+}
+//# sourceMappingURL=execution-history.js.map

package/dist/utils/execution-history.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"execution-history.js","sourceRoot":"","sources":["../../src/utils/execution-history.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EAAE,MAAM,IAAI,CAAC;AACzB,OAAO,KAAK,EAAE,MAAM,IAAI,CAAC;AACzB,OAAO,KAAK,IAAI,MAAM,MAAM,CAAC;AAE7B,OAAO,EACL,iBAAiB,EACjB,iBAAiB,EACjB,2BAA2B,GAC5B,MAAM,iBAAiB,CAAC;AAoBzB,MAAM,mBAAmB,GAAG,OAAO,CAAC;AACpC,MAAM,uBAAuB,GAAG,IAAI,CAAC;AACrC,MAAM,qBAAqB,GAAG,KAAK,CAAC;AACpC,MAAM,oBAAoB,GAAG,EAAE,CAAC;AAEhC,MAAM,UAAU,GAAG,IAAI,UAAU,CAAC,IAAI,iBAAiB,CAAC,CAAC,CAAC,CAAC,CAAC;AAE5D;;GAEG;AACH,MAAM,UAAU,cAAc;IAC5B,MAAM,IAAI,GACR,OAAO,CAAC,GAAG,CAAC,gBAAgB,IAAI,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,iBAAiB,CAAC,CAAC;IAC7E,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,iBAAiB,CAAC,CAAC;AAC5C,CAAC;AAED,SAAS,OAAO,CAAC,EAAU;IACzB,OAAO,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;AACrC,CAAC;AAED,SAAS,kBAAkB,CAAC,WAAmB;IAC7C,MAAM,QAAQ,GAAG,GAAG,WAAW,GAAG,mBAAmB,EAAE,CAAC;IACxD,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC1D,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,uBAAuB,CAAC;IAEtD,OAAO,IAAI,EAAE,CAAC;QACZ,IAAI,CAAC;YACH,OAAO,EAAE,CAAC,QAAQ,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;QACrC,CAAC;QAAC,OAAO,KAAc,EAAE,CAAC;YACxB,MAAM,GAAG,GAAG,KAA8B,CAAC;YAC3C,IAAI,GAAG,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;gBAC1B,MAAM,GAAG,CAAC;YACZ,CAAC;YAED,IAAI,CAAC;gBACH,MAAM,SAAS,GAAG,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;gBACxC,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC,OAAO,GAAG,qBAAqB,EAAE,CAAC;oBAC3D,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;oBACxB,SAAS;gBACX,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,mDAAmD;YACrD,CAAC;YAED,IAAI,IAAI,CAAC,GAAG,EAAE,IAAI,QAAQ,EAAE,CAAC;gBAC3B,MAAM,IAAI,KAAK,CAAC,+CAA+C,QAAQ,EAAE,CAAC,CAAC;YAC7E,CAAC;YAED,OAAO,CAAC,oBAAoB,CAAC,CAAC;QAChC,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,kBAAkB,CAAC,MAAc,EAAE,WAAmB;IAC7D,MAAM,QAAQ,GAAG,GAAG,WAAW,GAAG,mBAAmB,EAAE,CAAC;IACxD,IAAI,CAAC;QACH,EAAE,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;IACvB,CAAC;IAAC,MAAM,CAAC;QACP,qDAAqD;IACvD,CAAC;IACD,IAAI,CAAC;QACH,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;IAC1B,CAAC;IAAC,MAAM,CAAC;QACP,8BAA8B;IAChC,CAAC;AACH,CAAC;AAED,SAAS,mBAAmB,CAAC,WAAmB;IAC9C,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;QAChC,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;QACtD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACnC,IAAI,MAAM,KAAK,IAAI,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;YAC3E,OAAO,EAAE,CAAC;QACZ,CAAC;QACD,OAAO,MAA2B,CAAC;IACrC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,SAAS,iBAAiB,CAAC,WAAmB,EAAE,OAA0B;IACxE,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;IACtC,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAEvC,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CACvB,GAAG,EACH,GAAG,iBAAiB,IAAI,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE,MAAM,CACxD,CAAC;IAEF,IAAI,CAAC;QACH,EAAE,CAAC,aAAa,CAAC,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;QACnE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;IACtC,CAAC;YAAS,CAAC;QACT,IAAI,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;YAC3B,EAAE,CAAC,MAAM,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACtC,CAAC;IACH,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,WAAW;IACzB,OAAO,mBAAmB,CAAC,cAAc,EAAE,CAAC,CAAC;AAC/C,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,WAAW,CAAC,OAA0B;IACpD,MAAM,WAAW,GAAG,cAAc,EAAE,CAAC;IACrC,MAAM,MAAM,GAAG,kBAAkB,CAAC,WAAW,CAAC,CAAC;IAC/C,IAAI,CAAC;QACH,iBAAiB,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;IAC1C,CAAC;YAAS,CAAC;QACT,kBAAkB,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;IAC1C,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,eAAe,CAC7B,UAAkB,EAClB,OAAe,EACf,OAAyB,EACzB,QAAgB,EAChB,UAAkB,CAAC;IAEnB,MAAM,WAAW,GAAG,cAAc,EAAE,CAAC;IACrC,MAAM,MAAM,GAAG,kBAAkB,CAAC,WAAW,CAAC,CAAC;IAC/C,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IAC1C,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,mBAAmB,CAAC,WAAW,CAAC,CAAC;QAEjD,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;YACvB,OAAO,CAAC,QAAQ,CAAC,GAAG,EAAE,CAAC;QACzB,CAAC;QACD,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;YAChC,OAAO,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;QAC/C,CAAC;QAED,MAAM,MAAM,GAAqB;YAC/B,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;YACxC,OAAO;YACP,QAAQ;YACR,OAAO;SACR,CAAC;QAEF,OAAO,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAEhD,yCAAyC;QACzC,MAAM,OAAO,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC;QACnD,IAAI,OAAO,CAAC,MAAM,GAAG,2BAA2B,EAAE,CAAC;YACjD,OAAO,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,CAAC,OAAO,GAAG,OAAO,CAAC,KAAK,CAChD,OAAO,CAAC,MAAM,GAAG,2BAA2B,CAC7C,CAAC;QACJ,CAAC;QAED,iBAAiB,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;IAC1C,CAAC;YAAS,CAAC;QACT,kBAAkB,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;IAC1C,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,gBAAgB,CAC9B,UAAkB,EAClB,OAAe;IAEf,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IAC1C,MAAM,OAAO,GAAG,WAAW,EAAE,CAAC;IAC9B,MAAM,UAAU,GAAG,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC;IAChD,IAAI,CAAC,UAAU,IAAI,UAAU,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACnD,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,UAAU,CAAC,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;AAC3D,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,YAAY,CAC1B,UAAkB,EAClB,OAAe,EACf,cAAsB;IAEtB,MAAM,IAAI,GAAG,gBAAgB,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;IACnD,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,OAAO,KAAK,CAAC;IACf,CAAC;IACD,yCAAyC;IACzC,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;QAC/B,OAAO,KAAK,CAAC;IACf,CAAC;IACD,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;IAC1C,MAAM,GAAG,GAAG,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC;IACjC,OAAO,GAAG,GAAG,cAAc,CAAC;AAC9B,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@jonit-dev/night-watch-cli",
-  "version": "1.5.0",
+  "version": "1.5.1",
   "description": "Autonomous PRD execution using AI Provider CLIs + cron",
   "type": "module",
   "bin": {

package/scripts/night-watch-cron.sh

@@ -55,7 +55,7 @@ fi
 
 cleanup_worktrees "${PROJECT_DIR}"
 
-ELIGIBLE_PRD=$(find_eligible_prd "${PRD_DIR}" "${MAX_RUNTIME}")
+ELIGIBLE_PRD=$(find_eligible_prd "${PRD_DIR}" "${MAX_RUNTIME}" "${PROJECT_DIR}")
 
 if [ -z "${ELIGIBLE_PRD}" ]; then
   log "SKIP: No eligible PRDs (all done, in-progress, or blocked)"
@@ -119,41 +119,77 @@ if [ "${NW_DRY_RUN:-0}" = "1" ]; then
   exit 0
 fi
 
+# Sandbox: prevent the agent from modifying crontab during execution
+export NW_EXECUTION_CONTEXT=agent
+
+MAX_RETRIES="${NW_MAX_RETRIES:-3}"
+if ! [[ "${MAX_RETRIES}" =~ ^[0-9]+$ ]] || [ "${MAX_RETRIES}" -lt 1 ]; then
+  MAX_RETRIES=1
+fi
+BACKOFF_BASE=300  # 5 minutes in seconds
 EXIT_CODE=0
+ATTEMPT=0
+
+while [ "${ATTEMPT}" -lt "${MAX_RETRIES}" ]; do
+  EXIT_CODE=0
+
+  case "${PROVIDER_CMD}" in
+    claude)
+      if timeout "${MAX_RUNTIME}" \
+        claude -p "${PROMPT}" \
+          --dangerously-skip-permissions \
+          >> "${LOG_FILE}" 2>&1; then
+        EXIT_CODE=0
+      else
+        EXIT_CODE=$?
+      fi
+      ;;
+    codex)
+      if timeout "${MAX_RUNTIME}" \
+        codex --quiet \
+          --yolo \
+          --prompt "${PROMPT}" \
+          >> "${LOG_FILE}" 2>&1; then
+        EXIT_CODE=0
+      else
+        EXIT_CODE=$?
+      fi
+      ;;
+    *)
+      log "ERROR: Unknown provider: ${PROVIDER_CMD}"
+      exit 1
+      ;;
+  esac
+
+  # Success or timeout — don't retry
+  if [ ${EXIT_CODE} -eq 0 ] || [ ${EXIT_CODE} -eq 124 ]; then
+    break
+  fi
 
-case "${PROVIDER_CMD}" in
-  claude)
-    if timeout "${MAX_RUNTIME}" \
-      claude -p "${PROMPT}" \
-        --dangerously-skip-permissions \
-        >> "${LOG_FILE}" 2>&1; then
-      EXIT_CODE=0
-    else
-      EXIT_CODE=$?
+  # Check if this was a rate limit (429) error
+  if check_rate_limited "${LOG_FILE}"; then
+    ATTEMPT=$((ATTEMPT + 1))
+    if [ "${ATTEMPT}" -ge "${MAX_RETRIES}" ]; then
+      log "RATE-LIMITED: All ${MAX_RETRIES} attempts exhausted for ${ELIGIBLE_PRD}"
+      night_watch_history record "${PROJECT_DIR}" "${ELIGIBLE_PRD}" rate_limited --exit-code "${EXIT_CODE}" --attempt "${ATTEMPT}" 2>/dev/null || true
+      break
     fi
-    ;;
-  codex)
-    if timeout "${MAX_RUNTIME}" \
-      codex --quiet \
-        --yolo \
-        --prompt "${PROMPT}" \
-        >> "${LOG_FILE}" 2>&1; then
-      EXIT_CODE=0
-    else
-      EXIT_CODE=$?
-    fi
-    ;;
-  *)
-    log "ERROR: Unknown provider: ${PROVIDER_CMD}"
-    exit 1
-    ;;
-esac
+    BACKOFF=$(( BACKOFF_BASE * (1 << (ATTEMPT - 1)) ))
+    BACKOFF_MIN=$(( BACKOFF / 60 ))
+    log "RATE-LIMITED: Attempt ${ATTEMPT}/${MAX_RETRIES}, retrying in ${BACKOFF_MIN}m"
+    sleep "${BACKOFF}"
+  else
+    # Non-retryable failure
+    break
+  fi
+done
 
 if [ ${EXIT_CODE} -eq 0 ]; then
   PR_EXISTS=$(gh pr list --state open --json headRefName --jq '.[].headRefName' 2>/dev/null | grep -cF "${BRANCH_NAME}" || echo "0")
   if [ "${PR_EXISTS}" -gt 0 ]; then
     release_claim "${PRD_DIR}" "${ELIGIBLE_PRD}"
     mark_prd_done "${PRD_DIR}" "${ELIGIBLE_PRD}"
+    night_watch_history record "${PROJECT_DIR}" "${ELIGIBLE_PRD}" success --exit-code 0 2>/dev/null || true
     git -C "${PROJECT_DIR}" add -A docs/PRDs/night-watch/
     git -C "${PROJECT_DIR}" commit -m "chore: mark ${ELIGIBLE_PRD} as done (PR opened on ${BRANCH_NAME})
 
@@ -165,8 +201,10 @@ Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>" || true
   fi
 elif [ ${EXIT_CODE} -eq 124 ]; then
   log "TIMEOUT: Night watch killed after ${MAX_RUNTIME}s while processing ${ELIGIBLE_PRD}"
+  night_watch_history record "${PROJECT_DIR}" "${ELIGIBLE_PRD}" timeout --exit-code 124 2>/dev/null || true
   cleanup_worktrees "${PROJECT_DIR}"
 else
   log "FAIL: Night watch exited with code ${EXIT_CODE} while processing ${ELIGIBLE_PRD}"
+  night_watch_history record "${PROJECT_DIR}" "${ELIGIBLE_PRD}" failure --exit-code "${EXIT_CODE}" 2>/dev/null || true
   cleanup_worktrees "${PROJECT_DIR}"
 fi

package/scripts/night-watch-helpers.sh

@@ -19,6 +19,44 @@ validate_provider() {
   esac
 }
 
+# Resolve a usable night-watch CLI binary for nested script calls.
+# Resolution order:
+# 1) NW_CLI_BIN from parent environment (absolute path set by installer/runtime)
+# 2) `night-watch` found in PATH
+# 3) bundled bin path next to scripts/ in this package checkout/install
+resolve_night_watch_cli() {
+  if [ -n "${NW_CLI_BIN:-}" ] && [ -x "${NW_CLI_BIN}" ]; then
+    printf "%s" "${NW_CLI_BIN}"
+    return 0
+  fi
+
+  if command -v night-watch >/dev/null 2>&1; then
+    printf "%s" "night-watch"
+    return 0
+  fi
+
+  local script_dir
+  if [ -n "${SCRIPT_DIR:-}" ]; then
+    script_dir="${SCRIPT_DIR}"
+  else
+    script_dir="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+  fi
+
+  local bundled_bin="${script_dir}/../bin/night-watch.mjs"
+  if [ -x "${bundled_bin}" ]; then
+    printf "%s" "${bundled_bin}"
+    return 0
+  fi
+
+  return 1
+}
+
+night_watch_history() {
+  local cli_bin
+  cli_bin=$(resolve_night_watch_cli) || return 127
+  "${cli_bin}" history "$@"
+}
+
 # ── Logging ──────────────────────────────────────────────────────────────────
 
 log() {
@@ -167,6 +205,7 @@ is_claimed() {
 find_eligible_prd() {
   local prd_dir="${1:?prd_dir required}"
   local max_runtime="${2:-7200}"
+  local project_dir="${3:-}"
   local done_dir="${prd_dir}/done"
 
   local prd_files
@@ -210,6 +249,12 @@ find_eligible_prd() {
       continue
     fi
 
+    # Skip if in cooldown after a recent failure (checked via execution history ledger)
+    if [ -n "${project_dir}" ] && night_watch_history check "${project_dir}" "${prd_file}" --cooldown "${max_runtime}" 2>/dev/null; then
+      log "SKIP-PRD: ${prd_file} — in cooldown after recent failure"
+      continue
+    fi
+
     # Skip if a PR already exists for this PRD
     if echo "${open_branches}" | grep -qF "${prd_name}"; then
       log "SKIP-PRD: ${prd_file} — open PR already exists"
@@ -276,3 +321,12 @@ mark_prd_done() {
     return 1
   fi
 }
+
+# ── Rate limit detection ────────────────────────────────────────────────────
+
+# Check if the last N lines of the log contain a 429 rate limit error.
+# Returns 0 if rate limited, 1 otherwise.
+check_rate_limited() {
+  local log_file="${1:?log_file required}"
+  tail -20 "${log_file}" 2>/dev/null | grep -q "429"
+}