@maudecode/talaria-web 1.17.2 → 1.19.0

package/dist/tools/commands.js

@@ -31,10 +31,15 @@ export const CLIENT_COMMANDS = [
     client('skills', 'List skills'),
     client('use', 'Use a skill', { args_hint: '<skill>', ...webOnly('Use `/skills [query]` to search skills.') }),
 ];
+/** Agent commands `POST /api/commands/exec` runs on the chat's session itself rather than through the sidecar's `commands.exec` (TAL-902). */
+export const SESSION_EXEC_COMMANDS = new Set(['refine']);
+/** What a client shows for an Agent prompt built-in this Agent cannot expand (TAL-817); the turn path refuses it with the same text. */
+export const unsupportedPromptMessage = (name) => `/${name} is not available in Talaria yet.`;
 /**
  * The client table followed by the Agent registry. An Agent command whose name is already a client name or alias is
  * dropped, and client-claimed aliases are removed from the rest, so every typed name resolves to one entry.
- * Gateway-only commands never reach a client; CLI-only ones stay listed for no client.
+ * Gateway-only commands never reach a client; CLI-only ones and prompt built-ins the sidecar cannot expand stay listed
+ * for no client. An expandable prompt built-in is `handler: 'prompt'`: chat start sends the Agent's expansion (TAL-817).
  */
 export function commandCatalog(agent) {
     const claimed = new Set(CLIENT_COMMANDS.flatMap((c) => [c.name, ...c.aliases]));
@@ -45,7 +50,8 @@ export function commandCatalog(agent) {
         const aliases = c.aliases.filter((a) => !claimed.has(a));
         for (const a of aliases)
             claimed.add(a);
-        return [{ ...c, aliases, handler: 'agent', clients: c.cli_only ? [] : ALL, ...(c.cli_only ? { unsupported_message: `/${c.name} runs only in the Hermes CLI.` } : {}) }];
+        const unsupported = c.cli_only ? `/${c.name} runs only in the Hermes CLI.` : c.prompt === 'unsupported' ? unsupportedPromptMessage(c.name) : null;
+        return [{ ...c, aliases, exec: c.exec || SESSION_EXEC_COMMANDS.has(c.name), handler: c.prompt === 'expand' ? 'prompt' : 'agent', clients: unsupported === null ? ALL : [], ...(unsupported === null ? {} : { unsupported_message: unsupported }) }];
     });
     return [...CLIENT_COMMANDS, ...rows];
 }

package/dist/tools/commands.js.map

@@ -1 +1 @@
-{"version":3,"file":"commands.js","sourceRoot":"","sources":["../../src/tools/commands.ts"],"names":[],"mappings":"AAQA,MAAM,GAAG,GAAoB,CAAC,KAAK,EAAE,KAAK,CAAC,CAAA;AAC3C,MAAM,MAAM,GAAG,CAAC,IAAY,EAAE,WAAmB,EAAE,QAA0B,EAAE,EAAW,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,EAAE,GAAG,KAAK,EAAE,CAAC,CAAA;AAC5K,MAAM,OAAO,GAAG,CAAC,mBAA2B,EAAoB,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE,mBAAmB,EAAE,CAAC,CAAA;AAE9G,kIAAkI;AAClI,MAAM,CAAC,MAAM,eAAe,GAAuB;IACjD,MAAM,CAAC,MAAM,EAAE,yBAAyB,CAAC;IACzC,MAAM,CAAC,KAAK,EAAE,0BAA0B,CAAC;IACzC,MAAM,CAAC,OAAO,EAAE,yBAAyB,CAAC;IAC1C,MAAM,CAAC,MAAM,EAAE,2BAA2B,CAAC;IAC3C,MAAM,CAAC,WAAW,EAAE,oBAAoB,EAAE,EAAE,SAAS,EAAE,WAAW,EAAE,CAAC;IACrE,MAAM,CAAC,OAAO,EAAE,mBAAmB,EAAE,EAAE,SAAS,EAAE,WAAW,EAAE,CAAC;IAChE,MAAM,CAAC,OAAO,EAAE,4BAA4B,EAAE,EAAE,SAAS,EAAE,WAAW,EAAE,CAAC;IACzE,MAAM,CAAC,OAAO,EAAE,+BAA+B,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC;IACvE,MAAM,CAAC,WAAW,EAAE,kBAAkB,EAAE,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC;IAChE,MAAM,CAAC,UAAU,EAAE,+BAA+B,EAAE,OAAO,CAAC,8CAA8C,CAAC,CAAC;IAC5G,MAAM,CAAC,OAAO,EAAE,0BAA0B,EAAE,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC;IACpE,MAAM,CAAC,OAAO,EAAE,qBAAqB,CAAC;IACtC,MAAM,CAAC,MAAM,EAAE,oBAAoB,CAAC;IACpC,MAAM,CAAC,UAAU,EAAE,sBAAsB,EAAE,EAAE,OAAO,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC;IACpE,MAAM,CAAC,OAAO,EAAE,kBAAkB,EAAE,OAAO,CAAC,iDAAiD,CAAC,CAAC;IAC/F,MAAM,CAAC,OAAO,EAAE,cAAc,EAAE,EAAE,SAAS,EAAE,qBAAqB,EAAE,GAAG,OAAO,CAAC,8DAA8D,CAAC,EAAE,CAAC;IACjJ,MAAM,CAAC,MAAM,EAAE,mCAAmC,EAAE,OAAO,CAAC,+CAA+C,CAAC,CAAC;IAC7G,MAAM,CAAC,QAAQ,EAAE,yBAAyB,EAAE,EAAE,OAAO,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC;IAClE,MAAM,CAAC,OAAO,EAAE,mBAAmB,EAAE,OAAO,CAAC,qDAAqD,CAAC,CAAC;IACpG,MAAM,CAAC,WAAW,EAAE,sBAAsB,EAAE,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC;IACrE,MAAM,CAAC,aAAa,EAAE,qBAAqB,EAAE,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC;IACrE,MAAM,CAAC,MAAM,EAAE,sBAAsB,EAAE,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC;IAC/D,MAAM,CAAC,QAAQ,EAAE,qBAAqB,CAAC;IACvC,MAAM,CAAC,KAAK,EAAE,yCAAyC,EAAE,EAAE,SAAS,EAAE,YAAY,EAAE,CAAC;IACrF,MAAM,CAAC,YAAY,EAAE,uBAAuB,EAAE,EAAE,SAAS,EAAE,WAAW,EAAE,OAAO,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;IAC1F,MAAM,CAAC,QAAQ,EAAE,aAAa,CAAC;IAC/B,MAAM,CAAC,KAAK,EAAE,aAAa,EAAE,EAAE,SAAS,EAAE,SAAS,EAAE,GAAG,OAAO,CAAC,yCAAyC,CAAC,EAAE,CAAC;CAC9G,CAAA;AAED;;;;GAIG;AACH,MAAM,UAAU,cAAc,CAAC,KAA8B;IAC3D,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAA;IAC/E,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAa,EAAE;QAC1C,IAAI,CAAC,CAAC,YAAY,IAAI,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;YAAE,OAAO,EAAE,CAAA;QACpD,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAA;QACnB,MAAM,OAAO,GAAG,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAA;QACxD,KAAK,MAAM,CAAC,IAAI,OAAO;YAAE,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAA;QACvC,OAAO,CAAC,EAAE,GAAG,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,mBAAmB,EAAE,IAAI,CAAC,CAAC,IAAI,+BAA+B,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAA;IACzK,CAAC,CAAC,CAAA;IACF,OAAO,CAAC,GAAG,eAAe,EAAE,GAAG,IAAI,CAAC,CAAA;AACtC,CAAC"}
+{"version":3,"file":"commands.js","sourceRoot":"","sources":["../../src/tools/commands.ts"],"names":[],"mappings":"AAQA,MAAM,GAAG,GAAoB,CAAC,KAAK,EAAE,KAAK,CAAC,CAAA;AAC3C,MAAM,MAAM,GAAG,CAAC,IAAY,EAAE,WAAmB,EAAE,QAA0B,EAAE,EAAW,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,EAAE,GAAG,KAAK,EAAE,CAAC,CAAA;AAC5K,MAAM,OAAO,GAAG,CAAC,mBAA2B,EAAoB,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE,mBAAmB,EAAE,CAAC,CAAA;AAE9G,kIAAkI;AAClI,MAAM,CAAC,MAAM,eAAe,GAAuB;IACjD,MAAM,CAAC,MAAM,EAAE,yBAAyB,CAAC;IACzC,MAAM,CAAC,KAAK,EAAE,0BAA0B,CAAC;IACzC,MAAM,CAAC,OAAO,EAAE,yBAAyB,CAAC;IAC1C,MAAM,CAAC,MAAM,EAAE,2BAA2B,CAAC;IAC3C,MAAM,CAAC,WAAW,EAAE,oBAAoB,EAAE,EAAE,SAAS,EAAE,WAAW,EAAE,CAAC;IACrE,MAAM,CAAC,OAAO,EAAE,mBAAmB,EAAE,EAAE,SAAS,EAAE,WAAW,EAAE,CAAC;IAChE,MAAM,CAAC,OAAO,EAAE,4BAA4B,EAAE,EAAE,SAAS,EAAE,WAAW,EAAE,CAAC;IACzE,MAAM,CAAC,OAAO,EAAE,+BAA+B,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC;IACvE,MAAM,CAAC,WAAW,EAAE,kBAAkB,EAAE,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC;IAChE,MAAM,CAAC,UAAU,EAAE,+BAA+B,EAAE,OAAO,CAAC,8CAA8C,CAAC,CAAC;IAC5G,MAAM,CAAC,OAAO,EAAE,0BAA0B,EAAE,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC;IACpE,MAAM,CAAC,OAAO,EAAE,qBAAqB,CAAC;IACtC,MAAM,CAAC,MAAM,EAAE,oBAAoB,CAAC;IACpC,MAAM,CAAC,UAAU,EAAE,sBAAsB,EAAE,EAAE,OAAO,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC;IACpE,MAAM,CAAC,OAAO,EAAE,kBAAkB,EAAE,OAAO,CAAC,iDAAiD,CAAC,CAAC;IAC/F,MAAM,CAAC,OAAO,EAAE,cAAc,EAAE,EAAE,SAAS,EAAE,qBAAqB,EAAE,GAAG,OAAO,CAAC,8DAA8D,CAAC,EAAE,CAAC;IACjJ,MAAM,CAAC,MAAM,EAAE,mCAAmC,EAAE,OAAO,CAAC,+CAA+C,CAAC,CAAC;IAC7G,MAAM,CAAC,QAAQ,EAAE,yBAAyB,EAAE,EAAE,OAAO,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC;IAClE,MAAM,CAAC,OAAO,EAAE,mBAAmB,EAAE,OAAO,CAAC,qDAAqD,CAAC,CAAC;IACpG,MAAM,CAAC,WAAW,EAAE,sBAAsB,EAAE,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC;IACrE,MAAM,CAAC,aAAa,EAAE,qBAAqB,EAAE,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC;IACrE,MAAM,CAAC,MAAM,EAAE,sBAAsB,EAAE,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC;IAC/D,MAAM,CAAC,QAAQ,EAAE,qBAAqB,CAAC;IACvC,MAAM,CAAC,KAAK,EAAE,yCAAyC,EAAE,EAAE,SAAS,EAAE,YAAY,EAAE,CAAC;IACrF,MAAM,CAAC,YAAY,EAAE,uBAAuB,EAAE,EAAE,SAAS,EAAE,WAAW,EAAE,OAAO,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;IAC1F,MAAM,CAAC,QAAQ,EAAE,aAAa,CAAC;IAC/B,MAAM,CAAC,KAAK,EAAE,aAAa,EAAE,EAAE,SAAS,EAAE,SAAS,EAAE,GAAG,OAAO,CAAC,yCAAyC,CAAC,EAAE,CAAC;CAC9G,CAAA;AAED,8IAA8I;AAC9I,MAAM,CAAC,MAAM,qBAAqB,GAAwB,IAAI,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAA;AAE7E,wIAAwI;AACxI,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,IAAY,EAAU,EAAE,CAAC,IAAI,IAAI,mCAAmC,CAAA;AAE7G;;;;;GAKG;AACH,MAAM,UAAU,cAAc,CAAC,KAA8B;IAC3D,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAA;IAC/E,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAa,EAAE;QAC1C,IAAI,CAAC,CAAC,YAAY,IAAI,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;YAAE,OAAO,EAAE,CAAA;QACpD,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAA;QACnB,MAAM,OAAO,GAAG,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAA;QACxD,KAAK,MAAM,CAAC,IAAI,OAAO;YAAE,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAA;QACvC,MAAM,WAAW,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,+BAA+B,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,KAAK,aAAa,CAAC,CAAC,CAAC,wBAAwB,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;QACjJ,OAAO,CAAC,EAAE,GAAG,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,IAAI,qBAAqB,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,EAAE,OAAO,EAAE,WAAW,KAAK,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,GAAG,CAAC,WAAW,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,mBAAmB,EAAE,WAAW,EAAE,CAAC,EAAE,CAAC,CAAA;IACrP,CAAC,CAAC,CAAA;IACF,OAAO,CAAC,GAAG,eAAe,EAAE,GAAG,IAAI,CAAC,CAAA;AACtC,CAAC"}

package/dist/tools/connectors.d.ts

@@ -0,0 +1,33 @@
+/**
+ * TAL-818: the Connectors page and connect card, composed from the sidecar's raw `connectors.*` answers. The policy model
+ * follows the Agent desktop's (`apps/desktop/.../connectors/data/join.ts`): the member layer is the user's own rules and
+ * the one a change writes; organization and role layers lock an app or tool off.
+ */
+import type { ConnectorOperationView, ConnectorsPage, ConnectorToolsView, SidecarResult } from '@maudecode/talaria-web-contracts';
+type Policy = SidecarResult<'connectors.policy.get'>;
+type Catalog = SidecarResult<'connectors.catalog'>['connectors'];
+type Accounts = SidecarResult<'connectors.accounts'>['accounts'];
+type Tools = SidecarResult<'connectors.tools'>;
+type Snapshot = SidecarResult<'connectors.operation'>;
+export declare function rememberCatalogNames(home: string, catalog: Catalog): Record<string, string>;
+export declare const catalogNames: (home: string) => Record<string, string> | undefined;
+/**
+ * `available: false` hides the page. Rules that cannot be read (`policy` null) fail closed: every app reads off and
+ * read-only, and `rules_error` says why, instead of showing apps the rules may keep off as on.
+ */
+export declare function connectorsPage(catalog: Catalog, accounts: Accounts, policy: Policy | null, rulesError?: string | null): ConnectorsPage;
+/**
+ * Each tool as Hermes gets it: on only when every layer allows the app, no layer turns the tool off by name or tag, and the
+ * member rules leave it on. Its switch writes the member's tool rule, so it is editable only where that rule decides.
+ * Unreadable rules fail closed: every tool reads off and read-only.
+ */
+export declare function connectorTools(listing: Tools, policy: Policy | null): ConnectorToolsView;
+/** `google_calendar` → `Google Calendar`: the title of a target the catalog does not name (an MCP server, or before a catalog read). */
+export declare const connectorTitle: (slug: string) => string;
+/**
+ * The moves the user may make on each target now (the Agent's transition table, `tools/connectors/contract.py`): skip any
+ * unresolved target, retry a failed or expired one, approve an MCP install the card holds. A settled operation is frozen.
+ * Only a chat card continues: the model is waiting on it.
+ */
+export declare function connectorOperation(snapshot: Snapshot, names?: Record<string, string>): ConnectorOperationView;
+export {};

package/dist/tools/connectors.js

@@ -0,0 +1,121 @@
+function rulesOf(body, revision) {
+    const tools = Object.fromEntries(Object.entries(body.tools ?? {}).map(([slug, rule]) => [slug, rule.disable]));
+    const tags = { enable: body.tags?.enable ?? [], disable: body.tags?.disable ?? [] };
+    if (body.mode === 'unrestricted')
+        return { allowed: null, denied: new Set(), tools: {}, tags: { enable: [], disable: [] }, revision };
+    if (body.mode === 'deny-all')
+        return { allowed: new Set(), denied: new Set(), tools: {}, tags: { enable: [], disable: [] }, revision };
+    if (body.mode === 'allow')
+        return { allowed: new Set(body.connectors ?? []), denied: new Set(), tools, tags, revision };
+    return { allowed: null, denied: new Set(body.disabled_connectors ?? []), tools, tags, revision };
+}
+const PROBLEMS = new Set(['pending', 'failed', 'expired', 'revoked', 'inactive']);
+/** An account's gateway status while it is not active; a status this server does not know reads as `inactive`. */
+const accountProblem = (status) => status === 'active' ? null : PROBLEMS.has(status) ? status : 'inactive';
+const FACETS = new Set(['read', 'write', 'destructive', 'unclassified']);
+const facetOf = (facet) => FACETS.has(facet) ? facet : 'unclassified';
+/** Catalog names by profile home, kept from the last catalog read so a connect card names `github` GitHub. */
+const catalogNameCache = new Map();
+export function rememberCatalogNames(home, catalog) {
+    const names = Object.fromEntries(catalog.map((row) => [row.slug, row.name]));
+    catalogNameCache.set(home, names);
+    return names;
+}
+export const catalogNames = (home) => catalogNameCache.get(home);
+const allows = (rules, slug) => (rules.allowed === null || rules.allowed.has(slug)) && !rules.denied.has(slug);
+/** The member layer (null: none, so the rules are read-only) and every other layer. */
+function layers(policy) {
+    const member = policy?.layers.find((layer) => layer.kind === 'member');
+    return {
+        member: member ? rulesOf(member.body, member.revision) : null,
+        others: (policy?.layers ?? []).filter((layer) => layer.kind !== 'member').map((layer) => rulesOf(layer.body, layer.revision)),
+    };
+}
+/** A layer's tag rules keep a tool off: it carries a disabled tag, or the layer enables tags and it carries none of them. */
+const tagBlocks = (rules, hints) => rules.tags.disable.some((tag) => hints.includes(tag)) || (rules.tags.enable.length > 0 && !rules.tags.enable.some((tag) => hints.includes(tag)));
+/**
+ * `available: false` hides the page. Rules that cannot be read (`policy` null) fail closed: every app reads off and
+ * read-only, and `rules_error` says why, instead of showing apps the rules may keep off as on.
+ */
+export function connectorsPage(catalog, accounts, policy, rulesError = null) {
+    const { member, others } = layers(policy);
+    const slugs = [...new Set([...catalog.map((row) => row.slug), ...accounts.map((row) => row.connector)])];
+    const connectors = slugs.map((slug) => {
+        const entry = catalog.find((row) => row.slug === slug);
+        // Live accounts only (a reconnect retires the one it replaced), active first, then newest.
+        const mine = accounts.filter((row) => row.connector === slug && !row.disabled)
+            .sort((a, b) => Number(b.active) - Number(a.active) || b.created_at.localeCompare(a.created_at));
+        const orgLocked = others.some((rules) => !allows(rules, slug));
+        return {
+            slug, name: entry?.name || slug, description: entry?.description ?? '', category: entry?.category ?? '', logo_url: entry?.logo_url ?? null,
+            connected: mine.length > 0,
+            accounts: mine.map((row) => ({ connection_id: row.connection_id, name: row.alias?.trim() || row.label, problem: accountProblem(row.status), status_reason: row.status_reason?.trim() || null, active: row.active, created_at: row.created_at })),
+            // The switch shows what Hermes gets: an app another layer locks off reads off, whatever the member rule says.
+            enabled: policy !== null && (member === null || allows(member, slug)) && !orgLocked,
+            org_locked: orgLocked,
+            rules_editable: member !== null && !orgLocked,
+            tools_off: member?.tools[slug]?.length ?? 0,
+        };
+    });
+    return { available: true, connectors, policy_revision: member?.revision ?? null, rules_error: policy === null ? rulesError ?? 'Connector rules are unavailable.' : null };
+}
+/**
+ * Each tool as Hermes gets it: on only when every layer allows the app, no layer turns the tool off by name or tag, and the
+ * member rules leave it on. Its switch writes the member's tool rule, so it is editable only where that rule decides.
+ * Unreadable rules fail closed: every tool reads off and read-only.
+ */
+export function connectorTools(listing, policy) {
+    const { member, others } = layers(policy);
+    const slug = listing.connector;
+    const off = new Set(member?.tools[slug] ?? []);
+    const appOn = policy !== null && (member === null || allows(member, slug)) && others.every((rules) => allows(rules, slug));
+    return {
+        connector: slug, policy_revision: member?.revision ?? null,
+        tools: listing.tools.map((tool) => {
+            // Another layer's name or tag rule locks the tool; the member's own tag rules keep it off without its switch deciding.
+            const locked = others.some((rules) => (rules.tools[slug] ?? []).includes(tool.slug) || tagBlocks(rules, tool.hints));
+            const memberTagOff = member !== null && tagBlocks(member, tool.hints);
+            return {
+                slug: tool.slug, name: tool.name, description: tool.description, facet: facetOf(tool.facet), deprecated: tool.deprecated,
+                enabled: appOn && !off.has(tool.slug) && !locked && !memberTagOff, locked,
+                // The Agent refuses a tool rule for an app the member rules keep off (`compose_tools_write`).
+                editable: member !== null && appOn && !locked && !memberTagOff,
+            };
+        }),
+    };
+}
+const SKIPPABLE = new Set(['pending', 'initiated', 'failed', 'expired']);
+/** `google_calendar` → `Google Calendar`: the title of a target the catalog does not name (an MCP server, or before a catalog read). */
+export const connectorTitle = (slug) => slug.split(/[_\s-]+/).filter(Boolean).map((word) => word[0].toUpperCase() + word.slice(1)).join(' ') || slug;
+/**
+ * The moves the user may make on each target now (the Agent's transition table, `tools/connectors/contract.py`): skip any
+ * unresolved target, retry a failed or expired one, approve an MCP install the card holds. A settled operation is frozen.
+ * Only a chat card continues: the model is waiting on it.
+ */
+export function connectorOperation(snapshot, names = {}) {
+    const open = !snapshot.settled;
+    return {
+        op_id: snapshot.op_id, settled: snapshot.settled, tool_call_id: snapshot.tool_call_id,
+        outcome: open ? null : snapshot.targets.every((target) => target.state === 'connected') ? 'connected' : 'not_connected',
+        can_continue: open && snapshot.owner === 'session',
+        targets: snapshot.targets.map((target) => {
+            const local = target.kind !== 'connector';
+            const actions = [];
+            if (open && local && target.state === 'pending')
+                actions.push('approve');
+            if (open && (target.state === 'failed' || target.state === 'expired'))
+                actions.push('retry');
+            if (open && SKIPPABLE.has(target.state))
+                actions.push('skip');
+            return {
+                name: target.name, title: names[target.name] ?? connectorTitle(target.name), kind: target.kind, state: target.state, detail: target.detail,
+                // Only an https authorization link reaches a client; anything else is dropped rather than rendered as a link.
+                connect_url: open && target.state === 'initiated' && /^https:\/\//i.test(target.connect_url ?? '') ? target.connect_url : null,
+                actions,
+                // An approval (or a failed install's retry) sends the credentials the install still needs.
+                env_fields: open && local && (target.state === 'pending' || target.state === 'failed') ? target.required_env.map((field) => ({ name: field.name, label: field.prompt.trim() || field.name, required: field.required, secret: field.secret })) : [],
+            };
+        }),
+    };
+}
+//# sourceMappingURL=connectors.js.map

package/dist/tools/connectors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"connectors.js","sourceRoot":"","sources":["../../src/tools/connectors.ts"],"names":[],"mappings":"AAgBA,SAAS,OAAO,CAAC,IAAU,EAAE,QAAgB;IAC3C,MAAM,KAAK,GAAG,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAA;IAC9G,MAAM,IAAI,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,IAAI,EAAE,MAAM,IAAI,EAAE,EAAE,OAAO,EAAE,IAAI,CAAC,IAAI,EAAE,OAAO,IAAI,EAAE,EAAE,CAAA;IACnF,IAAI,IAAI,CAAC,IAAI,KAAK,cAAc;QAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,GAAG,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,EAAE,QAAQ,EAAE,CAAA;IACrI,IAAI,IAAI,CAAC,IAAI,KAAK,UAAU;QAAE,OAAO,EAAE,OAAO,EAAE,IAAI,GAAG,EAAE,EAAE,MAAM,EAAE,IAAI,GAAG,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,EAAE,QAAQ,EAAE,CAAA;IACtI,IAAI,IAAI,CAAC,IAAI,KAAK,OAAO;QAAE,OAAO,EAAE,OAAO,EAAE,IAAI,GAAG,CAAC,IAAI,CAAC,UAAU,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,IAAI,GAAG,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAA;IACvH,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,GAAG,CAAC,IAAI,CAAC,mBAAmB,IAAI,EAAE,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAA;AAClG,CAAC;AAED,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,CAAC,SAAS,EAAE,QAAQ,EAAE,SAAS,EAAE,SAAS,EAAE,UAAU,CAAU,CAAC,CAAA;AAE1F,kHAAkH;AAClH,MAAM,cAAc,GAAG,CAAC,MAAc,EAAkB,EAAE,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAiB,CAAC,CAAC,CAAC,CAAC,MAAiB,CAAC,CAAC,CAAC,UAAU,CAAA;AAExJ,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,OAAO,EAAE,aAAa,EAAE,cAAc,CAAU,CAAC,CAAA;AAEjF,MAAM,OAAO,GAAG,CAAC,KAAa,EAAS,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,KAAc,CAAC,CAAC,CAAC,CAAC,KAAc,CAAC,CAAC,CAAC,cAAc,CAAA;AAEtG,8GAA8G;AAC9G,MAAM,gBAAgB,GAAG,IAAI,GAAG,EAAkC,CAAA;AAClE,MAAM,UAAU,oBAAoB,CAAC,IAAY,EAAE,OAAgB;IACjE,MAAM,KAAK,GAAG,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IAC5E,gBAAgB,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,CAAC,CAAA;IACjC,OAAO,KAAK,CAAA;AACd,CAAC;AACD,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,IAAY,EAAsC,EAAE,CAAC,gBAAgB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;AAE5G,MAAM,MAAM,GAAG,CAAC,KAAY,EAAE,IAAY,EAAW,EAAE,CAAC,CAAC,KAAK,CAAC,OAAO,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;AAEtI,uFAAuF;AACvF,SAAS,MAAM,CAAC,MAAqB;IACnC,MAAM,MAAM,GAAG,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAA;IACtE,OAAO;QACL,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI;QAC7D,MAAM,EAAE,CAAC,MAAM,EAAE,MAAM,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;KAC9H,CAAA;AACH,CAAC;AAED,6HAA6H;AAC7H,MAAM,SAAS,GAAG,CAAC,KAAY,EAAE,KAAe,EAAW,EAAE,CAC3D,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAA;AAElJ;;;GAGG;AACH,MAAM,UAAU,cAAc,CAAC,OAAgB,EAAE,QAAkB,EAAE,MAAqB,EAAE,aAA4B,IAAI;IAC1H,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,CAAC,MAAM,CAAC,CAAA;IACzC,MAAM,KAAK,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAA;IACxG,MAAM,UAAU,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;QACpC,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,KAAK,IAAI,CAAC,CAAA;QACtD,2FAA2F;QAC3F,MAAM,IAAI,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,SAAS,KAAK,IAAI,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC;aAC3E,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAA;QAClG,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,CAAA;QAC9D,OAAO;YACL,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,IAAI,IAAI,EAAE,WAAW,EAAE,KAAK,EAAE,WAAW,IAAI,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,QAAQ,IAAI,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,QAAQ,IAAI,IAAI;YAC1I,SAAS,EAAE,IAAI,CAAC,MAAM,GAAG,CAAC;YAC1B,QAAQ,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,EAAE,aAAa,EAAE,GAAG,CAAC,aAAa,EAAE,IAAI,EAAE,GAAG,CAAC,KAAK,EAAE,IAAI,EAAE,IAAI,GAAG,CAAC,KAAK,EAAE,OAAO,EAAE,cAAc,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,aAAa,EAAE,GAAG,CAAC,aAAa,EAAE,IAAI,EAAE,IAAI,IAAI,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,UAAU,EAAE,GAAG,CAAC,UAAU,EAAE,CAAC,CAAC;YAChP,8GAA8G;YAC9G,OAAO,EAAE,MAAM,KAAK,IAAI,IAAI,CAAC,MAAM,KAAK,IAAI,IAAI,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,SAAS;YACnF,UAAU,EAAE,SAAS;YACrB,cAAc,EAAE,MAAM,KAAK,IAAI,IAAI,CAAC,SAAS;YAC7C,SAAS,EAAE,MAAM,EAAE,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,IAAI,CAAC;SAC5C,CAAA;IACH,CAAC,CAAC,CAAA;IACF,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,EAAE,QAAQ,IAAI,IAAI,EAAE,WAAW,EAAE,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,UAAU,IAAI,kCAAkC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAA;AAC3K,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,cAAc,CAAC,OAAc,EAAE,MAAqB;IAClE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,CAAC,MAAM,CAAC,CAAA;IACzC,MAAM,IAAI,GAAG,OAAO,CAAC,SAAS,CAAA;IAC9B,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAA;IAC9C,MAAM,KAAK,GAAG,MAAM,KAAK,IAAI,IAAI,CAAC,MAAM,KAAK,IAAI,IAAI,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,CAAA;IAC1H,OAAO;QACL,SAAS,EAAE,IAAI,EAAE,eAAe,EAAE,MAAM,EAAE,QAAQ,IAAI,IAAI;QAC1D,KAAK,EAAE,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;YAChC,uHAAuH;YACvH,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,SAAS,CAAC,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAA;YACpH,MAAM,YAAY,GAAG,MAAM,KAAK,IAAI,IAAI,SAAS,CAAC,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,CAAA;YACrE,OAAO;gBACL,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,KAAK,EAAE,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU;gBACxH,OAAO,EAAE,KAAK,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,IAAI,CAAC,YAAY,EAAE,MAAM;gBACzE,8FAA8F;gBAC9F,QAAQ,EAAE,MAAM,KAAK,IAAI,IAAI,KAAK,IAAI,CAAC,MAAM,IAAI,CAAC,YAAY;aAC/D,CAAA;QACH,CAAC,CAAC;KACH,CAAA;AACH,CAAC;AAED,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,CAAC,SAAS,EAAE,WAAW,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC,CAAA;AAExE,wIAAwI;AACxI,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,IAAY,EAAU,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CAAE,CAAC,WAAW,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,IAAI,CAAA;AAErK;;;;GAIG;AACH,MAAM,UAAU,kBAAkB,CAAC,QAAkB,EAAE,QAAgC,EAAE;IACvF,MAAM,IAAI,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAA;IAC9B,OAAO;QACL,KAAK,EAAE,QAAQ,CAAC,KAAK,EAAE,OAAO,EAAE,QAAQ,CAAC,OAAO,EAAE,YAAY,EAAE,QAAQ,CAAC,YAAY;QACrF,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,KAAK,WAAW,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,eAAe;QACvH,YAAY,EAAE,IAAI,IAAI,QAAQ,CAAC,KAAK,KAAK,SAAS;QAClD,OAAO,EAAE,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE;YACvC,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,KAAK,WAAW,CAAA;YACzC,MAAM,OAAO,GAAqC,EAAE,CAAA;YACpD,IAAI,IAAI,IAAI,KAAK,IAAI,MAAM,CAAC,KAAK,KAAK,SAAS;gBAAE,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;YACxE,IAAI,IAAI,IAAI,CAAC,MAAM,CAAC,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,KAAK,KAAK,SAAS,CAAC;gBAAE,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;YAC5F,IAAI,IAAI,IAAI,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC;gBAAE,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;YAC7D,OAAO;gBACL,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,cAAc,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM;gBAC1I,8GAA8G;gBAC9G,WAAW,EAAE,IAAI,IAAI,MAAM,CAAC,KAAK,KAAK,WAAW,IAAI,cAAc,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,WAAY,CAAC,CAAC,CAAC,IAAI;gBAC/H,OAAO;gBACP,2FAA2F;gBAC3F,UAAU,EAAE,IAAI,IAAI,KAAK,IAAI,CAAC,MAAM,CAAC,KAAK,KAAK,SAAS,IAAI,MAAM,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,KAAK,CAAC,IAAI,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE;aACnP,CAAA;QACH,CAAC,CAAC;KACH,CAAA;AACH,CAAC"}

package/dist/tools/crons.d.ts

@@ -17,6 +17,7 @@ export interface CronDeps {
     modelOptionFor?: (home: string, model: string | null, provider: string | null) => Promise<string | null>;
     /** Python `_RUNNING_CRON_JOBS`: job id → start time, read by the session list's `cron_running` stamp. */
     runningJobs?: Map<string, number>;
+    updateInProgress?: () => boolean;
 }
 /** Python `_cron_job_for_api`, plus the derived status every client renders (TAL-296). */
 export declare function jobForApi(job: Dict, running?: boolean): Dict;
@@ -37,11 +38,47 @@ export declare class CronService {
     private readonly deps;
     constructor(deps: CronDeps);
     private sidecar;
+    blueprints(home: string): Promise<{
+        blueprints: {
+            key: string;
+            title: string;
+            description: string;
+            category: string;
+            source: "plugin" | "builtin";
+            plugin: string | null;
+            schedule_label: string;
+            slots: {
+                name: string;
+                type: string;
+                label: string;
+                default: string | null;
+                options: string[];
+                optional: boolean;
+                strict: boolean;
+                help: string;
+            }[];
+        }[];
+    }>;
+    blueprintFill(home: string, input: {
+        key: string;
+        values: Record<string, string>;
+    }): Promise<{
+        draft: {
+            name: string;
+            prompt: string;
+            schedule: string;
+            deliver: string;
+            skills: string[];
+        };
+    }>;
     private profileNames;
     availableProfileNames(): Promise<Set<string>>;
     normalizeProfile(value: unknown): Promise<string | null>;
     private profileForHome;
-    /** The physical store owns execution. Additive owner_profile metadata lets the creator manage a new job there. */
+    /**
+     * The physical store owns execution. Additive owner_profile metadata lets the creator manage a new job there.
+     * Passing `unwritable` probes each listed store's writes (TAL-810) and collects the ones that fail.
+     */
     private storedJobs;
     /** `pickerHome` is the profile whose `/api/models` catalog the requesting client shows. */
     private view;

package/dist/tools/crons.js

@@ -8,6 +8,7 @@ import { stripToolCallXml } from '../sessions/merge.js';
 import { str } from '../util.js';
 const JOB_ID_RE = /^[A-Za-z0-9_-][A-Za-z0-9_.-]{0,63}$/;
 const PASSTHROUGH_FIELDS = ['script', 'no_agent', 'context_from', 'reasoning_effort'];
+const isContextSource = (job) => job.recovery_only !== true;
 /** TAL-301: a picked catalog id (`@provider:model`) names its own provider, exactly as a chat request does; a bare id keeps the explicit one. */
 function modelSelection(model, provider) {
     const raw = str(model).trim();
@@ -32,10 +33,66 @@ export function jobForApi(job, running = false) {
     payload.derived_state = state;
     payload.needs_attention = state === 'needs_attention' || state === 'schedule_error';
     payload.resumable = payload.needs_attention || state === 'paused' || state === 'off';
-    payload.running = running || job.running === true;
+    // TAL-599: a stuck job whose error names croniter gets the "restart the Gateway with cron support" hint.
+    payload.attention_hint = payload.needs_attention && /croniter/i.test(str(job.last_error)) ? 'croniter_missing' : null;
+    // TAL-810: a run the gateway scheduler (or any other live process) owns reads as running too.
+    payload.running = running || job.running === true || job.running_elsewhere === true;
+    delete payload.running_elsewhere;
+    delete payload.recovery_only;
+    payload.last_failure = lastFailure(job.last_failure);
     Object.assign(payload, scheduleText(job));
     return payload;
 }
+/** TAL-810: the Agent's sticky `{at, detail}` stamp of the latest failed run, which survives later successes. */
+function lastFailure(value) {
+    if (!value || typeof value !== 'object')
+        return null;
+    const failure = value;
+    return { at: completedAtSeconds(failure.at), detail: str(failure.detail).trim() || 'run failed' };
+}
+/** TAL-601: the canonical list order every client renders: running first, then soonest next run (none last), then name. */
+function compareListedJobs(a, b) {
+    if (a.running !== b.running)
+        return a.running ? -1 : 1;
+    const [an, bn] = [completedAtSeconds(nextRunValue(a)), completedAtSeconds(nextRunValue(b))];
+    if (an !== bn)
+        return an === null ? 1 : bn === null ? -1 : an - bn;
+    return (str(a.name) || str(a.schedule_display)).localeCompare(str(b.name) || str(b.schedule_display), 'en', { sensitivity: 'accent' });
+}
+const PROMPT_HEADING = '## Prompt\n\n';
+const PROMPT_FRAME = /^\*\*Prompt Characters:\*\* (\d+)\n## Prompt\n\n/m;
+const RESPONSE_FRAME = /^\*\*Response Characters:\*\* (\d+)\n## Response\n\n/;
+/**
+ * TAL-599, TAL-912: the agent's reply from a run file, read like the Agent's v0.21.6 `_archive_answer`. A framed run skips its
+ * prompt by the writer's length stamp and takes exactly the stamped answer (none when that frame is broken), so a prompt
+ * quoting `## Response` never leaks.
+ * Otherwise the last Response heading is the writer's own; a run without one (script mode) is the whole text.
+ */
+function runResponse(raw) {
+    const content = raw.replace(/\r\n?/g, '\n');
+    const prompt = PROMPT_FRAME.exec(content);
+    const promptStart = prompt ? prompt.index + prompt[0].length : -1;
+    if (prompt && content.indexOf(PROMPT_HEADING) === promptStart - PROMPT_HEADING.length) {
+        const frameAt = advanceCodePoints(content, promptStart, Number(prompt[1])) + 2;
+        const frame = RESPONSE_FRAME.exec(content.slice(frameAt));
+        const answerStart = frame ? frameAt + frame[0].length : -1;
+        const answerEnd = frame ? advanceCodePoints(content, answerStart, Number(frame[1])) : -1;
+        // A truncated or missing answer frame is unusable: any later heading belongs to the prompt.
+        return frame && content.slice(answerEnd) === '\n' ? content.slice(answerStart, answerEnd).trim() : '';
+    }
+    const idx = [...content.matchAll(/^#{1,2} Response\s*$/gm)].at(-1)?.index ?? -1;
+    if (idx < 0)
+        return content.trim();
+    const afterHeading = content.indexOf('\n', idx);
+    return afterHeading < 0 ? '' : content.slice(afterHeading + 1).trim();
+}
+/** The writer's frames count Python code points; JavaScript indexes UTF-16 units. */
+function advanceCodePoints(text, from, count) {
+    let at = from;
+    for (let i = 0; i < count && at < text.length; i++)
+        at += text.codePointAt(at) > 0xffff ? 2 : 1;
+    return at;
+}
 /** TAL-298: the schedule's display text and the editor's prefill, in the scheduler's own vocabulary (not localized copy). */
 function scheduleText(job) {
     const schedule = job.schedule;
@@ -65,10 +122,14 @@ function isRecurring(job) {
     // Legacy string schedules carry no kind; an unlimited repeat record marks the job recurring (a one-shot has times: 1).
     return typeof schedule === 'string' && hasUnlimitedRepeat(job);
 }
+/** `next_run_at`, else an older agent's `next_run`. */
+function nextRunValue(job) {
+    return job.next_run_at ?? (typeof job.next_run === 'number' || typeof job.next_run === 'string' ? job.next_run : null);
+}
 /** Older agents report `paused` / `status` / `next_run` instead of `state` / `last_status` / `next_run_at`; all stay supported. */
 function cronDerivedState(job) {
     const errored = job.state === 'error' || completionOutcome(job.last_status) === 'failed' || job.status === 'error';
-    const nextRun = job.next_run_at ?? (typeof job.next_run === 'number' || typeof job.next_run === 'string' ? job.next_run : null);
+    const nextRun = nextRunValue(job);
     if (isRecurring(job) && hasUnlimitedRepeat(job) && job.enabled === false && job.state === 'completed' && !nextRun)
         return 'needs_attention';
     // A paused job keeps the last run's error and has no next run; that is not a schedule failure.
@@ -177,6 +238,19 @@ export class CronService {
             throw new HttpFailure(503, 'Hermes Agent sidecar is not running; cron jobs are unavailable');
         return s;
     }
+    async blueprints(home) {
+        return this.sidecar().call('cron.blueprints', { profile_home: home });
+    }
+    async blueprintFill(home, input) {
+        try {
+            return await this.sidecar().call('cron.blueprint_fill', { ...input, profile_home: home });
+        }
+        catch (error) {
+            if (error instanceof SidecarError && error.code === -32602)
+                throw new HttpFailure(400, error.message);
+            throw error;
+        }
+    }
     async profileNames(active) {
         const names = [];
         const seen = new Set();
@@ -214,25 +288,45 @@ export class CronService {
     }
     async profileForHome(home) {
         const names = this.deps.isolatedProfileMode() ? (await this.deps.profileNames()).map((row) => row.name) : await this.availableProfileNames();
-        for (const profile of names)
-            if (this.deps.profileHome(profile) === home)
-                return profile;
+        // A profile whose home escapes the profiles root (`profileHome` throws) owns no store.
+        for (const profile of names) {
+            try {
+                if (this.deps.profileHome(profile) === home)
+                    return profile;
+            }
+            catch { /* skip */ }
+        }
         throw new HttpFailure(403, 'Unknown cron profile home');
     }
-    /** The physical store owns execution. Additive owner_profile metadata lets the creator manage a new job there. */
-    async storedJobs(active) {
+    /**
+     * The physical store owns execution. Additive owner_profile metadata lets the creator manage a new job there.
+     * Passing `unwritable` probes each listed store's writes (TAL-810) and collects the ones that fail.
+     */
+    async storedJobs(active, unwritable) {
         // ponytail: scan visible stores per request; add an index only if profile/job counts make this expensive.
         const rows = [];
         const seen = new Set();
         for (const profile of await this.profileNames(active)) {
-            const home = this.deps.profileHome(profile);
+            const local = this.deps.profilesMatch(profile, active);
+            let home;
+            try {
+                home = this.deps.profileHome(profile);
+            }
+            catch (error) {
+                if (local)
+                    throw error;
+                continue;
+            }
             if (seen.has(home))
                 continue;
             seen.add(home);
-            const local = this.deps.profilesMatch(profile, active);
             let jobs;
             try {
-                jobs = (await this.sidecar().call('cron.list', { profile_home: home })).jobs;
+                const listed = await this.sidecar().call('cron.list', unwritable ? { profile_home: home, probe_store: true } : { profile_home: home });
+                jobs = listed.jobs;
+                const health = listed.store_health;
+                if (unwritable && health)
+                    unwritable.push({ profile, store: health.store, error: health.error, fix: health.fix, since: completedAtSeconds(health.since) });
             }
             catch (error) {
                 if (local)
@@ -261,7 +355,7 @@ export class CronService {
         const refs = continuityRefs(fields.context_from, false);
         if (!refs.length)
             return;
-        const ids = new Set((await this.sidecar().call('cron.list', { profile_home: home })).jobs.map((job) => job.id));
+        const ids = new Set((await this.sidecar().call('cron.list', { profile_home: home })).jobs.filter(isContextSource).map((job) => job.id));
         if (refs.some((ref) => !ids.has(str(ref))))
             throw new HttpFailure(400, 'Context jobs must belong to the execution profile');
     }
@@ -297,7 +391,7 @@ export class CronService {
         const included = new Set();
         for (const row of inStore) {
             const id = str(row.job.id).trim();
-            if (!row.managed || !id || id === excludeId || counts.get(id) !== 1)
+            if (!row.managed || !isContextSource(row.job) || !id || id === excludeId || counts.get(id) !== 1)
                 continue;
             sources.push({ job_id: id, label: str(row.job.name).trim() || id, selectable: true });
             included.add(id);
@@ -317,17 +411,23 @@ export class CronService {
         const activeJobs = [];
         const otherJobs = [];
         const pickerHome = this.deps.profileHome(active);
+        const unwritable = [];
+        const all = allProfiles && !this.deps.isolatedProfileMode();
+        // TAL-810: a failing store is reported for the active profile and for every store whose jobs this list shows.
+        const shownStores = new Set([active]);
         try {
-            for (const row of await this.storedJobs(active))
+            for (const row of await this.storedJobs(active, unwritable)) {
                 (row.managed ? activeJobs : otherJobs).push(await this.view(row, pickerHome));
+                if (row.managed || all)
+                    shownStores.add(row.profile);
+            }
         }
         catch (error) {
             if (error instanceof SidecarError && error.condition === 'cron_unavailable')
-                return { jobs: [], cron_unavailable: true };
+                return { jobs: [], cron_unavailable: true, unwritable_stores: [] };
             throw error;
         }
-        const all = allProfiles && !this.deps.isolatedProfileMode();
-        return { jobs: all ? [...activeJobs, ...otherJobs] : activeJobs, all_profiles: all, active_profile: active, other_profile_count: all ? 0 : otherJobs.length };
+        return { jobs: (all ? [...activeJobs, ...otherJobs] : activeJobs).sort(compareListedJobs), ordered: true, all_profiles: all, active_profile: active, other_profile_count: all ? 0 : otherJobs.length, unwritable_stores: unwritable.filter((store) => shownStores.has(store.profile)) };
     }
     /**
      * Python `/api/crons/recent`: each active-profile job's latest completion after `since`, newest first (ties by
@@ -485,6 +585,8 @@ export class CronService {
     async runNow(home, jobId) {
         if (!jobId)
             throw new HttpFailure(400, 'job_id required');
+        if (this.deps.updateInProgress?.())
+            throw new HttpFailure(503, 'Web is updating. Retry after it restarts.');
         const running = this.deps.runningJobs;
         const existing = running?.get(jobId);
         if (existing !== undefined)
@@ -582,8 +684,10 @@ export class CronService {
         home = (await this.resolveStore(home, jobId)).home;
         try {
             const detail = await this.sidecar().call('cron.run_detail', { profile_home: home, job_id: jobId, filename });
-            // Leaked tool-call XML is removed from the run's text, as from a transcript reply (TAL-302).
-            return { ...detail, content: stripToolCallXml(detail.content), snippet: stripToolCallXml(detail.snippet) };
+            // Leaked tool-call XML is removed from the run's text, as from a transcript reply (TAL-302); the response is
+            // framed on the Agent's raw text (TAL-912), then stripped.
+            const content = stripToolCallXml(detail.content);
+            return { ...detail, content, snippet: stripToolCallXml(detail.snippet), response: stripToolCallXml(runResponse(detail.content)) };
         }
         catch (error) {
             if (error instanceof SidecarError && error.condition === 'not_found')