@maudecode/talaria-web 1.14.0 → 1.16.1

package/dist/tools/commands.js

@@ -0,0 +1,52 @@
+const ALL = ['web', 'ios'];
+const client = (name, description, extra = {}) => ({ name, description, aliases: [], handler: 'client', clients: ALL, ...extra });
+const webOnly = (unsupported_message) => ({ clients: ['web'], unsupported_message });
+/** Commands a client handles itself, in display order. Every entry outside a client's `clients` carries `unsupported_message`. */
+export const CLIENT_COMMANDS = [
+    client('help', 'Show available commands'),
+    client('new', 'Start a new conversation'),
+    client('clear', 'Clear this conversation'),
+    client('stop', 'Stop the running response'),
+    client('interrupt', 'Interrupt and send', { args_hint: '<message>' }),
+    client('queue', 'Queue a follow-up', { args_hint: '<message>' }),
+    client('steer', 'Steer the running response', { args_hint: '<message>' }),
+    client('model', 'Switch the conversation model', { args_hint: '<id>' }),
+    client('workspace', 'Switch workspace', { args_hint: '<path>' }),
+    client('terminal', 'Toggle the workspace terminal', webOnly('Terminal is not available in the mobile app.')),
+    client('title', 'Rename this conversation', { args_hint: '<text>' }),
+    client('retry', 'Retry the last turn'),
+    client('undo', 'Undo the last turn'),
+    client('compress', 'Compress the context', { aliases: ['compact'] }),
+    client('usage', 'Show token usage', webOnly('Token usage is not available in the mobile app.')),
+    client('theme', 'Switch theme', { args_hint: '<light|dark|system>', ...webOnly('Theme switching is not available from mobile slash commands.') }),
+    client('yolo', 'Toggle YOLO mode (skip approvals)', webOnly('YOLO mode is not available in the mobile app.')),
+    client('branch', 'Branch the conversation', { aliases: ['fork'] }),
+    client('voice', 'Toggle voice mode', webOnly('Voice commands are not available in the mobile app.')),
+    client('reasoning', 'Set reasoning effort', { args_hint: '<level>' }),
+    client('personality', 'Set the personality', { args_hint: '<name>' }),
+    client('goal', 'Set or show the goal', { args_hint: '<text>' }),
+    client('status', 'Show session status'),
+    client('btw', 'Side question without affecting the run', { args_hint: '<question>' }),
+    client('background', 'Run in the background', { args_hint: '<message>', aliases: ['bg'] }),
+    client('skills', 'List skills'),
+    client('use', 'Use a skill', { args_hint: '<skill>', ...webOnly('Use `/skills [query]` to search skills.') }),
+];
+/**
+ * The client table followed by the Agent registry. An Agent command whose name is already a client name or alias is
+ * dropped, and client-claimed aliases are removed from the rest, so every typed name resolves to one entry.
+ * Gateway-only commands never reach a client; CLI-only ones stay listed for no client.
+ */
+export function commandCatalog(agent) {
+    const claimed = new Set(CLIENT_COMMANDS.flatMap((c) => [c.name, ...c.aliases]));
+    const rows = agent.flatMap((c) => {
+        if (c.gateway_only || claimed.has(c.name))
+            return [];
+        claimed.add(c.name);
+        const aliases = c.aliases.filter((a) => !claimed.has(a));
+        for (const a of aliases)
+            claimed.add(a);
+        return [{ ...c, aliases, handler: 'agent', clients: c.cli_only ? [] : ALL, ...(c.cli_only ? { unsupported_message: `/${c.name} runs only in the Hermes CLI.` } : {}) }];
+    });
+    return [...CLIENT_COMMANDS, ...rows];
+}
+//# sourceMappingURL=commands.js.map

package/dist/tools/commands.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"commands.js","sourceRoot":"","sources":["../../src/tools/commands.ts"],"names":[],"mappings":"AAQA,MAAM,GAAG,GAAoB,CAAC,KAAK,EAAE,KAAK,CAAC,CAAA;AAC3C,MAAM,MAAM,GAAG,CAAC,IAAY,EAAE,WAAmB,EAAE,QAA0B,EAAE,EAAW,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,EAAE,GAAG,KAAK,EAAE,CAAC,CAAA;AAC5K,MAAM,OAAO,GAAG,CAAC,mBAA2B,EAAoB,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE,mBAAmB,EAAE,CAAC,CAAA;AAE9G,kIAAkI;AAClI,MAAM,CAAC,MAAM,eAAe,GAAuB;IACjD,MAAM,CAAC,MAAM,EAAE,yBAAyB,CAAC;IACzC,MAAM,CAAC,KAAK,EAAE,0BAA0B,CAAC;IACzC,MAAM,CAAC,OAAO,EAAE,yBAAyB,CAAC;IAC1C,MAAM,CAAC,MAAM,EAAE,2BAA2B,CAAC;IAC3C,MAAM,CAAC,WAAW,EAAE,oBAAoB,EAAE,EAAE,SAAS,EAAE,WAAW,EAAE,CAAC;IACrE,MAAM,CAAC,OAAO,EAAE,mBAAmB,EAAE,EAAE,SAAS,EAAE,WAAW,EAAE,CAAC;IAChE,MAAM,CAAC,OAAO,EAAE,4BAA4B,EAAE,EAAE,SAAS,EAAE,WAAW,EAAE,CAAC;IACzE,MAAM,CAAC,OAAO,EAAE,+BAA+B,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC;IACvE,MAAM,CAAC,WAAW,EAAE,kBAAkB,EAAE,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC;IAChE,MAAM,CAAC,UAAU,EAAE,+BAA+B,EAAE,OAAO,CAAC,8CAA8C,CAAC,CAAC;IAC5G,MAAM,CAAC,OAAO,EAAE,0BAA0B,EAAE,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC;IACpE,MAAM,CAAC,OAAO,EAAE,qBAAqB,CAAC;IACtC,MAAM,CAAC,MAAM,EAAE,oBAAoB,CAAC;IACpC,MAAM,CAAC,UAAU,EAAE,sBAAsB,EAAE,EAAE,OAAO,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC;IACpE,MAAM,CAAC,OAAO,EAAE,kBAAkB,EAAE,OAAO,CAAC,iDAAiD,CAAC,CAAC;IAC/F,MAAM,CAAC,OAAO,EAAE,cAAc,EAAE,EAAE,SAAS,EAAE,qBAAqB,EAAE,GAAG,OAAO,CAAC,8DAA8D,CAAC,EAAE,CAAC;IACjJ,MAAM,CAAC,MAAM,EAAE,mCAAmC,EAAE,OAAO,CAAC,+CAA+C,CAAC,CAAC;IAC7G,MAAM,CAAC,QAAQ,EAAE,yBAAyB,EAAE,EAAE,OAAO,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC;IAClE,MAAM,CAAC,OAAO,EAAE,mBAAmB,EAAE,OAAO,CAAC,qDAAqD,CAAC,CAAC;IACpG,MAAM,CAAC,WAAW,EAAE,sBAAsB,EAAE,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC;IACrE,MAAM,CAAC,aAAa,EAAE,qBAAqB,EAAE,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC;IACrE,MAAM,CAAC,MAAM,EAAE,sBAAsB,EAAE,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC;IAC/D,MAAM,CAAC,QAAQ,EAAE,qBAAqB,CAAC;IACvC,MAAM,CAAC,KAAK,EAAE,yCAAyC,EAAE,EAAE,SAAS,EAAE,YAAY,EAAE,CAAC;IACrF,MAAM,CAAC,YAAY,EAAE,uBAAuB,EAAE,EAAE,SAAS,EAAE,WAAW,EAAE,OAAO,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;IAC1F,MAAM,CAAC,QAAQ,EAAE,aAAa,CAAC;IAC/B,MAAM,CAAC,KAAK,EAAE,aAAa,EAAE,EAAE,SAAS,EAAE,SAAS,EAAE,GAAG,OAAO,CAAC,yCAAyC,CAAC,EAAE,CAAC;CAC9G,CAAA;AAED;;;;GAIG;AACH,MAAM,UAAU,cAAc,CAAC,KAA8B;IAC3D,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAA;IAC/E,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAa,EAAE;QAC1C,IAAI,CAAC,CAAC,YAAY,IAAI,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;YAAE,OAAO,EAAE,CAAA;QACpD,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAA;QACnB,MAAM,OAAO,GAAG,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAA;QACxD,KAAK,MAAM,CAAC,IAAI,OAAO;YAAE,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAA;QACvC,OAAO,CAAC,EAAE,GAAG,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,mBAAmB,EAAE,IAAI,CAAC,CAAC,IAAI,+BAA+B,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAA;IACzK,CAAC,CAAC,CAAA;IACF,OAAO,CAAC,GAAG,eAAe,EAAE,GAAG,IAAI,CAAC,CAAA;AACtC,CAAC"}

package/dist/tools/crons.d.ts

@@ -1,6 +1,6 @@
-/** Cron jobs across profiles through the sidecar `cron.*` namespace (Python `api/routes.py` cron section). */
+import type { CronRecentCompletion, CronContextSources } from '@maudecode/talaria-web-contracts';
 import type { SidecarLike } from '../sidecar/client.js';
-import type { Dict } from '../config/agent-config.js';
+import { type Dict } from '../config/agent-config.js';
 export interface CronDeps {
     sidecar: () => SidecarLike | null;
     profileHome: (name: string) => string;
@@ -13,14 +13,26 @@ export interface CronDeps {
     log: (line: string) => void;
     /** Python `_publish_session_list_changed("cron_complete", profile=...)` once a manual run finishes. */
     publishSessionsChanged?: (reason: string, profile: string | null) => void;
+    /** TAL-301: the catalog entry id a job's stored `(model, provider)` selects in a profile home's picker catalog. */
+    modelOptionFor?: (home: string, model: string | null, provider: string | null) => Promise<string | null>;
     /** Python `_RUNNING_CRON_JOBS`: job id → start time, read by the session list's `cron_running` stamp. */
     runningJobs?: Map<string, number>;
 }
-/** Python `_cron_job_for_api`. */
-export declare function jobForApi(job: Dict): Dict;
+/** Python `_cron_job_for_api`, plus the derived status every client renders (TAL-296). */
+export declare function jobForApi(job: Dict, running?: boolean): Dict;
 /** Python `_cron_job_field_updates`. */
 export declare function jobFieldUpdates(body: Dict, currentContextFrom?: unknown): Dict;
 export declare function validJobId(id: string): boolean;
+/** Python `float(since)` with its ValueError mapped to 0: a malformed `since` means "from the epoch", never a 500. */
+export declare function parseSince(raw: string | undefined): number;
+/**
+ * Python `_handle_cron_recent`'s `last_run_at` read (`datetime.fromisoformat` after `Z` → `+00:00`, or a number).
+ * Only ISO-shaped strings count, so `Date.parse` leniency ("Jan 2 2026") never invents a completion; a time without
+ * an offset is server-local, as in Python. Anything else is skipped.
+ */
+export declare function completedAtSeconds(value: unknown): number | null;
+/** The one place a job's `last_status` becomes the success/failure the clients render. */
+export declare function completionOutcome(status: unknown): CronRecentCompletion['outcome'];
 export declare class CronService {
     private readonly deps;
     constructor(deps: CronDeps);
@@ -28,8 +40,30 @@ export declare class CronService {
     private profileNames;
     availableProfileNames(): Promise<Set<string>>;
     normalizeProfile(value: unknown): Promise<string | null>;
+    private profileForHome;
+    /** The physical store owns execution. Additive owner_profile metadata lets the creator manage a new job there. */
+    private storedJobs;
+    /** `pickerHome` is the profile whose `/api/models` catalog the requesting client shows. */
+    private view;
+    private requireExecutionStore;
+    private validateContext;
+    private resolveStore;
+    contextSources(home: string, input: {
+        profile?: string | undefined;
+        editing_job_id?: string | undefined;
+        exclude_job_id?: string | undefined;
+        selected_refs?: string[] | undefined;
+    }): Promise<CronContextSources>;
     /** Python `/api/crons`: the active profile's rows plus foreign rows (hidden unless `all_profiles`). */
     list(active: string, allProfiles: boolean): Promise<Dict>;
+    /**
+     * Python `/api/crons/recent`: each active-profile job's latest completion after `since`, newest first (ties by
+     * `job_id`), with the server's `outcome` and the newest cron session for that job. One row per job, not a run archive.
+     */
+    recent(home: string, rawSince: string | undefined): Promise<{
+        completions: CronRecentCompletion[];
+        since: number;
+    }>;
     create(home: string, body: Dict): Promise<Dict>;
     update(home: string, body: Dict): Promise<Dict>;
     private simple;

package/dist/tools/crons.js

@@ -1,18 +1,87 @@
+/** Cron jobs across profiles through the sidecar `cron.*` namespace (Python `api/routes.py` cron section). */
+import { join } from 'node:path';
+import { parseProviderQualifiedModel } from '../config/agent-config.js';
 import { HttpFailure } from '../sessions/service.js';
 import { SidecarError } from '../sidecar/client.js';
+import { latestCronSessionInfo } from '../sessions/state-db.js';
+import { stripToolCallXml } from '../sessions/merge.js';
 import { str } from '../util.js';
 const JOB_ID_RE = /^[A-Za-z0-9_-][A-Za-z0-9_.-]{0,63}$/;
 const PASSTHROUGH_FIELDS = ['script', 'no_agent', 'context_from', 'reasoning_effort'];
-/** Python `_cron_job_for_api`. */
-export function jobForApi(job) {
+/** TAL-301: a picked catalog id (`@provider:model`) names its own provider, exactly as a chat request does; a bare id keeps the explicit one. */
+function modelSelection(model, provider) {
+    const raw = str(model).trim();
+    const explicit = str(provider).trim() || null;
+    if (!raw)
+        return [null, explicit];
+    return parseProviderQualifiedModel(raw) ?? [raw, explicit];
+}
+/** Python `_cron_job_for_api`, plus the derived status every client renders (TAL-296). */
+export function jobForApi(job, running = false) {
     const payload = { ...job };
+    // TAL-301: a job stored with a provider-qualified id (older clients) still reads back as a bare model and its provider.
+    const qualified = parseProviderQualifiedModel(job.model);
+    if (qualified)
+        [payload.model, payload.provider] = qualified;
     if (!('profile' in payload))
         payload.profile = null;
     payload.toast_notifications = payload.toast_notifications !== false;
     payload.monitor = str(payload.monitor_url) || str(payload.monitor_script) || '';
     payload.continuity = (Array.isArray(payload.context_from) ? payload.context_from : []).some((r) => str(r).trim().toLowerCase() === 'self');
+    const state = cronDerivedState(job);
+    payload.derived_state = state;
+    payload.needs_attention = state === 'needs_attention' || state === 'schedule_error';
+    payload.resumable = payload.needs_attention || state === 'paused' || state === 'off';
+    payload.running = running || job.running === true;
+    Object.assign(payload, scheduleText(job));
     return payload;
 }
+/** TAL-298: the schedule's display text and the editor's prefill, in the scheduler's own vocabulary (not localized copy). */
+function scheduleText(job) {
+    const schedule = job.schedule;
+    const legacy = typeof schedule === 'string' ? schedule : '';
+    const s = typeof schedule === 'object' && schedule ? schedule : {};
+    const minutes = typeof s.minutes === 'number' && s.minutes > 0 ? s.minutes : 0;
+    const runAt = str(s.run_at);
+    let input = '';
+    let built = '';
+    if (s.kind === 'cron')
+        input = built = str(s.expr);
+    else if (s.kind === 'interval' && minutes)
+        [input, built] = [`every ${minutes}m`, minutes % 60 ? `every ${minutes}m` : `every ${minutes / 60}h`];
+    else if (s.kind === 'once' && runAt)
+        [input, built] = [runAt, `once at ${runAt}`];
+    const display = str(job.schedule_display) || str(s.display) || legacy || built;
+    return { schedule_display: display, schedule_input: input || legacy || display };
+}
+/** `repeat.times == null` means "forever" in the store; a missing record is not unlimited. */
+function hasUnlimitedRepeat(job) {
+    return !!job.repeat && typeof job.repeat === 'object' && job.repeat.times == null;
+}
+function isRecurring(job) {
+    const schedule = job.schedule;
+    if (typeof schedule === 'object' && schedule)
+        return schedule.kind === 'cron' || schedule.kind === 'interval';
+    // Legacy string schedules carry no kind; an unlimited repeat record marks the job recurring (a one-shot has times: 1).
+    return typeof schedule === 'string' && hasUnlimitedRepeat(job);
+}
+/** Older agents report `paused` / `status` / `next_run` instead of `state` / `last_status` / `next_run_at`; all stay supported. */
+function cronDerivedState(job) {
+    const errored = job.state === 'error' || completionOutcome(job.last_status) === 'failed' || job.status === 'error';
+    const nextRun = job.next_run_at ?? (typeof job.next_run === 'number' || typeof job.next_run === 'string' ? job.next_run : null);
+    if (isRecurring(job) && hasUnlimitedRepeat(job) && job.enabled === false && job.state === 'completed' && !nextRun)
+        return 'needs_attention';
+    // A paused job keeps the last run's error and has no next run; that is not a schedule failure.
+    if (job.state === 'paused' || job.paused)
+        return 'paused';
+    if (isRecurring(job) && !nextRun && errored)
+        return 'schedule_error';
+    if (job.enabled === false)
+        return 'off';
+    if (errored)
+        return 'error';
+    return 'active';
+}
 function monitorStorage(monitor) {
     const value = str(monitor).trim();
     if (!value)
@@ -53,6 +122,50 @@ export function jobFieldUpdates(body, currentContextFrom = null) {
 export function validJobId(id) {
     return JOB_ID_RE.test(id) && id !== '.' && id !== '..';
 }
+const PY_FLOAT_RE = /^[+-]?(\d+\.?\d*|\.\d+)([eE][+-]?\d+)?$/;
+/** Python `float(since)` with its ValueError mapped to 0: a malformed `since` means "from the epoch", never a 500. */
+export function parseSince(raw) {
+    const t = (raw ?? '').trim();
+    const n = PY_FLOAT_RE.test(t) ? Number(t) : 0;
+    return Number.isFinite(n) ? n : 0;
+}
+const ISO_RE = /^(\d{4})-(\d{2})-(\d{2})(?:[T ](\d{2})(?::(\d{2})(?::(\d{2})(?:\.(\d{1,6}))?)?)?)?(Z|[+-]\d{2}(?::?\d{2})?)?$/;
+/**
+ * Python `_handle_cron_recent`'s `last_run_at` read (`datetime.fromisoformat` after `Z` → `+00:00`, or a number).
+ * Only ISO-shaped strings count, so `Date.parse` leniency ("Jan 2 2026") never invents a completion; a time without
+ * an offset is server-local, as in Python. Anything else is skipped.
+ */
+export function completedAtSeconds(value) {
+    if (typeof value === 'number')
+        return value && Number.isFinite(value) ? value : null;
+    if (typeof value !== 'string')
+        return null;
+    const m = ISO_RE.exec(value);
+    if (!m)
+        return null;
+    const [y, mo, d, h, mi, sec] = [1, 2, 3, 4, 5, 6].map((i) => Number(m[i] ?? 0));
+    const ms = Number((m[7] ?? '').padEnd(3, '0').slice(0, 3));
+    if (mo < 1 || mo > 12 || d < 1 || new Date(Date.UTC(y, mo - 1, d)).getUTCDate() !== d || h > 23 || mi > 59 || sec > 59)
+        return null;
+    const offset = m[8];
+    if (offset === undefined)
+        return new Date(y, mo - 1, d, h, mi, sec, ms).getTime() / 1000;
+    let offsetMinutes = 0;
+    if (offset !== 'Z') {
+        const digits = offset.slice(1).replace(':', '');
+        offsetMinutes = (offset.startsWith('-') ? -1 : 1) * (Number(digits.slice(0, 2)) * 60 + Number(digits.slice(2) || 0));
+    }
+    return (Date.UTC(y, mo - 1, d, h, mi, sec, ms) - offsetMinutes * 60_000) / 1000;
+}
+/** The one place a job's `last_status` becomes the success/failure the clients render. */
+export function completionOutcome(status) {
+    const s = str(status).trim().toLowerCase();
+    if (s === 'error' || s === 'failed')
+        return 'failed';
+    if (s === 'ok' || s === 'success' || s === 'completed')
+        return 'succeeded';
+    return 'unknown';
+}
 export class CronService {
     deps;
     constructor(deps) {
@@ -72,6 +185,8 @@ export class CronService {
             names.push(n);
         } };
         add(active);
+        if (this.deps.isolatedProfileMode())
+            return names;
         for (const row of await this.deps.profileNames())
             if (row.visible || this.deps.profilesMatch(row.name, active))
                 add(row.name);
@@ -97,51 +212,195 @@ export class CronService {
             throw new HttpFailure(400, `Unknown profile: ${profile}`);
         return profile;
     }
-    /** Python `/api/crons`: the active profile's rows plus foreign rows (hidden unless `all_profiles`). */
-    async list(active, allProfiles) {
-        const sidecar = this.sidecar();
-        const activeJobs = [];
-        const otherJobs = [];
-        const seenHomes = new Set();
-        for (const owner of await this.profileNames(active)) {
-            const home = this.deps.profileHome(owner);
-            if (seenHomes.has(home))
+    async profileForHome(home) {
+        const names = this.deps.isolatedProfileMode() ? (await this.deps.profileNames()).map((row) => row.name) : await this.availableProfileNames();
+        for (const profile of names)
+            if (this.deps.profileHome(profile) === home)
+                return profile;
+        throw new HttpFailure(403, 'Unknown cron profile home');
+    }
+    /** The physical store owns execution. Additive owner_profile metadata lets the creator manage a new job there. */
+    async storedJobs(active) {
+        // ponytail: scan visible stores per request; add an index only if profile/job counts make this expensive.
+        const rows = [];
+        const seen = new Set();
+        for (const profile of await this.profileNames(active)) {
+            const home = this.deps.profileHome(profile);
+            if (seen.has(home))
                 continue;
-            seenHomes.add(home);
-            const isActive = this.deps.profilesMatch(owner, active);
+            seen.add(home);
+            const local = this.deps.profilesMatch(profile, active);
             let jobs;
             try {
-                jobs = (await sidecar.call('cron.list', { profile_home: home })).jobs.map((j) => jobForApi(j));
+                jobs = (await this.sidecar().call('cron.list', { profile_home: home })).jobs;
             }
             catch (error) {
-                if (!isActive)
-                    continue;
-                if (error instanceof SidecarError && error.condition === 'cron_unavailable')
-                    return { jobs: [], cron_unavailable: true };
-                throw error;
+                if (local)
+                    throw error;
+                continue;
+            }
+            for (const job of jobs) {
+                const creator = str(job.owner_profile).trim();
+                rows.push({ home, profile, job, managed: local || Boolean(creator && this.deps.profilesMatch(creator, active)) });
             }
-            for (const job of jobs)
-                (isActive ? activeJobs : otherJobs).push({ ...job, owner_profile: owner, read_only: !isActive });
+        }
+        return rows;
+    }
+    /** `pickerHome` is the profile whose `/api/models` catalog the requesting client shows. */
+    async view(row, pickerHome) {
+        const payload = { ...jobForApi(row.job, this.deps.runningJobs?.has(str(row.job.id)) ?? false), profile: str(row.job.profile).trim() || row.profile, owner_profile: row.profile, read_only: !row.managed };
+        payload.model_option_id = (await this.deps.modelOptionFor?.(pickerHome, str(payload.model) || null, str(payload.provider) || null)) ?? null;
+        return payload;
+    }
+    requireExecutionStore(row) {
+        const profile = str(row.job.profile).trim();
+        if (profile && !this.deps.profilesMatch(profile, row.profile))
+            throw new HttpFailure(409, 'This legacy task must be recreated in its execution profile before it can run or resume');
+    }
+    async validateContext(home, fields) {
+        const refs = continuityRefs(fields.context_from, false);
+        if (!refs.length)
+            return;
+        const ids = new Set((await this.sidecar().call('cron.list', { profile_home: home })).jobs.map((job) => job.id));
+        if (refs.some((ref) => !ids.has(str(ref))))
+            throw new HttpFailure(400, 'Context jobs must belong to the execution profile');
+    }
+    async resolveStore(home, ref) {
+        const active = await this.profileForHome(home);
+        const allRows = await this.storedJobs(active);
+        const rows = allRows.filter((row) => row.managed);
+        const exact = rows.filter((row) => row.job.id === ref);
+        const matches = exact.length ? exact : rows.filter((row) => row.job.name === ref);
+        if (!matches.length)
+            throw new HttpFailure(404, 'Job not found');
+        if (matches.length !== 1)
+            throw new HttpFailure(409, 'Ambiguous cron job reference');
+        const match = matches[0];
+        if (allRows.filter((row) => row.home === match.home && row.job.id === match.job.id).length !== 1)
+            throw new HttpFailure(409, 'Ambiguous cron job reference');
+        return match;
+    }
+    async contextSources(home, input) {
+        const active = await this.profileForHome(home);
+        const editing = input.editing_job_id ? await this.resolveStore(home, input.editing_job_id) : null;
+        const profile = await this.normalizeProfile(input.profile);
+        if (profile && !(await this.profileNames(active)).some((name) => this.deps.profilesMatch(name, profile)))
+            throw new HttpFailure(403, 'Execution profile is not accessible');
+        const executionHome = profile ? this.deps.profileHome(profile) : editing?.home ?? home;
+        const rows = await this.storedJobs(active);
+        const inStore = rows.filter((row) => row.home === executionHome);
+        const excludeId = editing ? str(editing.job.id) : input.exclude_job_id;
+        const counts = new Map();
+        for (const row of inStore)
+            counts.set(str(row.job.id), (counts.get(str(row.job.id)) ?? 0) + 1);
+        const sources = [];
+        const included = new Set();
+        for (const row of inStore) {
+            const id = str(row.job.id).trim();
+            if (!row.managed || !id || id === excludeId || counts.get(id) !== 1)
+                continue;
+            sources.push({ job_id: id, label: str(row.job.name).trim() || id, selectable: true });
+            included.add(id);
+        }
+        for (const raw of input.selected_refs ?? []) {
+            const id = raw.trim();
+            if (!id || id.toLowerCase() === 'self' || included.has(id))
+                continue;
+            const owned = rows.find((row) => row.managed && row.job.id === id);
+            sources.push({ job_id: id, label: str(owned?.job.name).trim() || id, selectable: false });
+            included.add(id);
+        }
+        return { profile: profile ?? editing?.profile ?? active, sources };
+    }
+    /** Python `/api/crons`: the active profile's rows plus foreign rows (hidden unless `all_profiles`). */
+    async list(active, allProfiles) {
+        const activeJobs = [];
+        const otherJobs = [];
+        const pickerHome = this.deps.profileHome(active);
+        try {
+            for (const row of await this.storedJobs(active))
+                (row.managed ? activeJobs : otherJobs).push(await this.view(row, pickerHome));
+        }
+        catch (error) {
+            if (error instanceof SidecarError && error.condition === 'cron_unavailable')
+                return { jobs: [], cron_unavailable: true };
+            throw error;
         }
         const all = allProfiles && !this.deps.isolatedProfileMode();
         return { jobs: all ? [...activeJobs, ...otherJobs] : activeJobs, all_profiles: all, active_profile: active, other_profile_count: all ? 0 : otherJobs.length };
     }
+    /**
+     * Python `/api/crons/recent`: each active-profile job's latest completion after `since`, newest first (ties by
+     * `job_id`), with the server's `outcome` and the newest cron session for that job. One row per job, not a run archive.
+     */
+    async recent(home, rawSince) {
+        const since = parseSince(rawSince);
+        let rows;
+        try {
+            rows = (await this.storedJobs(await this.profileForHome(home))).filter((row) => row.managed);
+        }
+        catch (error) {
+            if (error instanceof SidecarError && error.condition === 'cron_unavailable')
+                return { completions: [], since };
+            throw error;
+        }
+        const completions = [];
+        for (const { job } of rows) {
+            const jobId = str(job.id).trim();
+            const completedAt = completedAtSeconds(job.last_run_at);
+            if (!jobId || completedAt === null || completedAt <= since)
+                continue;
+            const status = 'last_status' in job ? (job.last_status === null ? null : str(job.last_status)) : 'unknown';
+            completions.push({
+                job_id: jobId,
+                name: 'name' in job ? (job.name === null ? null : str(job.name)) : 'Unknown',
+                status,
+                outcome: completionOutcome(status),
+                completed_at: completedAt,
+                toast_notifications: job.toast_notifications !== false,
+                session_id: '',
+            });
+        }
+        completions.sort((a, b) => b.completed_at - a.completed_at || (a.job_id < b.job_id ? -1 : a.job_id > b.job_id ? 1 : 0));
+        for (const storeHome of new Set(rows.map((row) => row.home))) {
+            const ids = rows.filter((row) => row.home === storeHome).map((row) => str(row.job.id));
+            const sessions = latestCronSessionInfo(join(storeHome, 'state.db'), ids, completions.filter((c) => ids.includes(c.job_id)).map((c) => c.job_id));
+            for (const completion of completions) {
+                if (!ids.includes(completion.job_id))
+                    continue;
+                const info = sessions.get(completion.job_id);
+                if (!info)
+                    continue;
+                completion.session_id = info.session_id;
+                if (info.message_count !== null)
+                    completion.message_count = info.message_count;
+            }
+        }
+        return { completions, since };
+    }
     async create(home, body) {
         if (!('schedule' in body) || body.schedule === null || body.schedule === undefined)
             throw new HttpFailure(400, 'Missing required field(s): schedule');
         if (!body.prompt && !body.script && !body.skills)
             throw new HttpFailure(400, 'Missing required field(s): prompt');
         const profile = await this.normalizeProfile(body.profile);
-        const job = { prompt: body.prompt ?? '', schedule: body.schedule, name: body.name ?? null, deliver: body.deliver ?? 'local', skills: body.skills ?? [], model: body.model ?? null, provider: body.provider ?? null, ...jobFieldUpdates(body) };
+        const active = await this.profileForHome(home);
+        if (profile && !(await this.profileNames(active)).some((name) => this.deps.profilesMatch(name, profile)))
+            throw new HttpFailure(403, 'Execution profile is not accessible');
+        const executionHome = profile ? this.deps.profileHome(profile) : home;
+        const [model, provider] = modelSelection(body.model, body.provider);
+        const job = { prompt: body.prompt ?? '', schedule: body.schedule, name: body.name ?? null, deliver: body.deliver ?? 'local', skills: body.skills ?? [], model, provider, ...jobFieldUpdates(body) };
         if (body.repeat !== null && body.repeat !== undefined)
             job.repeat = body.repeat;
         if (profile !== null)
             job.profile = profile;
         if (body.toast_notifications === false)
             job.toast_notifications = false;
+        job.owner_profile = active;
+        await this.validateContext(executionHome, job);
         try {
-            const result = await this.sidecar().call('cron.create', { profile_home: home, job, execution_home: profile ? this.deps.profileHome(profile) : null });
-            return { ok: true, job: jobForApi(result.job) };
+            const result = await this.sidecar().call('cron.create', { profile_home: executionHome, job, execution_home: profile ? executionHome : null });
+            return { ok: true, job: await this.view({ home: executionHome, profile: profile ?? active, job: result.job, managed: true }, home) };
         }
         catch (error) {
             throw new HttpFailure(400, str(error.message));
@@ -151,32 +410,47 @@ export class CronService {
         const jobId = str(body.job_id);
         if (!jobId)
             throw new HttpFailure(400, 'Missing required field(s): job_id');
+        const store = await this.resolveStore(home, jobId);
+        const storedId = str(store.job.id);
+        const pickerHome = home;
+        home = store.home;
         const updates = {};
         for (const [k, v] of Object.entries(body)) {
-            if (k === 'job_id')
+            if (k === 'job_id' || k === 'id' || k === 'owner_profile')
                 continue;
-            if (k === 'profile')
-                updates.profile = await this.normalizeProfile(v);
-            else if (k === 'model' || k === 'provider')
-                updates[k] = v ? v : null;
-            else if (k === 'monitor' || k === 'continuity' || k === 'repeat')
+            if (k === 'profile') {
+                const profile = await this.normalizeProfile(v);
+                if (profile && !this.deps.profilesMatch(profile, store.profile))
+                    throw new HttpFailure(400, 'To change the execution profile, duplicate the task in that profile and delete the old task');
+                updates.profile = profile;
+            }
+            else if (k === 'model' || k === 'provider' || k === 'monitor' || k === 'continuity' || k === 'repeat')
                 continue;
             else if (v !== null && v !== undefined)
                 updates[k] = v;
         }
+        if ('model' in body) {
+            const [model, provider] = modelSelection(body.model, body.provider);
+            updates.model = model;
+            if (provider !== null || 'provider' in body)
+                updates.provider = provider;
+        }
+        else if ('provider' in body)
+            updates.provider = str(body.provider).trim() || null;
         let currentContextFrom = null;
         if ('continuity' in body && !('context_from' in body)) {
             try {
-                currentContextFrom = (await this.sidecar().call('cron.get', { profile_home: home, job_id: jobId })).job?.context_from ?? null;
+                currentContextFrom = (await this.sidecar().call('cron.get', { profile_home: home, job_id: storedId })).job?.context_from ?? null;
             }
             catch {
                 currentContextFrom = null;
             }
         }
         Object.assign(updates, jobFieldUpdates(body, currentContextFrom));
+        await this.validateContext(home, updates);
         try {
-            const result = await this.sidecar().call('cron.update', { profile_home: home, job_id: jobId, updates });
-            return { ok: true, job: jobForApi(result.job) };
+            const result = await this.sidecar().call('cron.update', { profile_home: home, job_id: storedId, updates });
+            return { ok: true, job: await this.view({ ...store, job: result.job }, pickerHome) };
         }
         catch (error) {
             if (error instanceof SidecarError && error.condition === 'not_found')
@@ -187,10 +461,13 @@ export class CronService {
     async simple(method, home, jobId, extra = {}) {
         if (!jobId)
             throw new HttpFailure(400, method === 'cron.delete' ? 'Missing required field(s): job_id' : 'job_id required');
+        const store = await this.resolveStore(home, jobId);
+        if (method === 'cron.resume')
+            this.requireExecutionStore(store);
         try {
-            const result = await this.sidecar().call(method, { profile_home: home, job_id: jobId, ...extra });
+            const result = await this.sidecar().call(method, { profile_home: store.home, job_id: str(store.job.id), ...extra });
             // Python returned the raw `pause_job`/`resume_job` record and `{ok, job_id}` for delete.
-            return 'job' in result ? { ok: true, job: result.job } : { ok: true, job_id: jobId };
+            return 'job' in result ? { ok: true, job: await this.view({ ...store, job: result.job }, home) } : { ok: true, job_id: jobId };
         }
         catch (error) {
             if (error instanceof SidecarError && error.condition === 'not_found')
@@ -216,6 +493,11 @@ export class CronService {
         running?.set(jobId, Date.now() / 1000);
         try {
             const sidecar = this.sidecar();
+            const store = await this.resolveStore(home, jobId);
+            if (store.job.id !== jobId)
+                throw new HttpFailure(404, 'Job not found');
+            this.requireExecutionStore(store);
+            home = store.home;
             let job;
             try {
                 job = (await sidecar.call('cron.get', { profile_home: home, job_id: jobId })).job;
@@ -287,6 +569,7 @@ export class CronService {
         const l = pyInt(limit, 50);
         if (!Number.isFinite(o) || !Number.isFinite(l))
             throw new HttpFailure(400, 'offset and limit must be integers');
+        home = (await this.resolveStore(home, jobId)).home;
         return this.sidecar().call('cron.history', { profile_home: home, job_id: jobId, offset: Math.max(0, o), limit: Math.max(1, Math.min(500, l)) });
     }
     async runDetail(home, jobId, filename) {
@@ -296,8 +579,11 @@ export class CronService {
             throw new HttpFailure(400, 'invalid job_id');
         if (filename.includes('/') || filename.includes('\\') || filename === '..')
             throw new HttpFailure(400, 'invalid filename');
+        home = (await this.resolveStore(home, jobId)).home;
         try {
-            return await this.sidecar().call('cron.run_detail', { profile_home: home, job_id: jobId, filename });
+            const detail = await this.sidecar().call('cron.run_detail', { profile_home: home, job_id: jobId, filename });
+            // Leaked tool-call XML is removed from the run's text, as from a transcript reply (TAL-302).
+            return { ...detail, content: stripToolCallXml(detail.content), snippet: stripToolCallXml(detail.snippet) };
         }
         catch (error) {
             if (error instanceof SidecarError && error.condition === 'not_found')
@@ -311,6 +597,7 @@ export class CronService {
         if (!JOB_ID_RE.test(jobId))
             throw new HttpFailure(400, 'invalid job_id');
         const l = Number.parseInt(limit ?? '5', 10);
+        home = (await this.resolveStore(home, jobId)).home;
         return this.sidecar().call('cron.output', { profile_home: home, job_id: jobId, limit: Number.isFinite(l) ? Math.max(1, Math.min(500, l)) : 5 });
     }
     async deliveryOptions() {