@namzu/cli 29.0.0 → 29.1.0

package/dist/schedule/daemon/retention.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"retention.js","sourceRoot":"","sources":["../../../src/schedule/daemon/retention.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAA;AACxC,OAAO,EACN,mBAAmB,EACnB,aAAa,EACb,YAAY,GACZ,MAAM,sCAAsC,CAAA;AAE7C,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAA;AAG9D,mDAAmD;AACnD,MAAM,UAAU,iBAAiB,CAChC,KAAoB,EACpB,GAAgB,EAChB,KAAiD;IAEjD,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,gBAAgB,IAAI,EAAE,CAAC,CAAA;IAClD,MAAM,SAAS,GAAG,WAAW,CAAC,WAAW,CAAC,KAAK,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAC/D,CAAC,CAAC,EAA2C,EAAE,CAC9C,CAAC,CAAC,IAAI,KAAK,KAAK,IAAI,CAAC,CAAC,MAAM,KAAK,WAAW,IAAI,OAAO,CAAC,CAAC,SAAS,KAAK,QAAQ,CAChF,CAAA;IACD,OAAO,SAAS;SACd,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC;SAC9C,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAmB,CAAC;SACjC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAA;AAChC,CAAC;AAED,qFAAqF;AACrF,MAAM,CAAC,KAAK,UAAU,cAAc,CACnC,KAAoB,EACpB,GAAgB,EAChB,KAAiD;IAEjD,MAAM,GAAG,GAAG,iBAAiB,CAAC,KAAK,EAAE,GAAG,EAAE,KAAK,CAAC,CAAA;IAChD,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAA;IAC/B,MAAM,QAAQ,GAAG,MAAM,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,CAAA;IACpF,MAAM,QAAQ,GAAa,EAAE,CAAA;IAC7B,IAAI,CAAC;QACJ,KAAK,MAAM,EAAE,IAAI,GAAG,EAAE,CAAC;YACtB,IAAI,CAAC;gBACJ,MAAM,mBAAmB,CAAC,QAAQ,EAAE,WAAW,CAAC,EAAE,CAAC,CAAC,CAAA;gBACpD,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;YAClB,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBAChB,IAAI,KAAK,YAAY,KAAK,IAAI,kBAAkB,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC;oBAAE,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;YACxF,CAAC;QACF,CAAC;IACF,CAAC;YAAS,CAAC;QACV,aAAa,CAAC,QAAQ,CAAC,CAAA;IACxB,CAAC;IACD,OAAO,QAAQ,CAAA;AAChB,CAAC"}

package/dist/schedule/daemon/sessions.d.ts

@@ -0,0 +1,23 @@
+/**
+ * What the daemon reads about a run's session: whether its lease is held,
+ * and how its turn ended. Read-only, from the log and the lease files; the
+ * daemon writes a session only to abandon an expired park and to archive old
+ * runs.
+ */
+import { type ConversationFacts } from '../../integrations/sessions/store.js';
+export interface RunSessionRef {
+    readonly home: string;
+    readonly projectSlug: string;
+    readonly sessionId: string;
+}
+/** Whether somebody holds the session's writer lease right now. */
+export declare function sessionLeaseLive(ref: RunSessionRef, now?: number): Promise<boolean>;
+export declare function sessionFacts(ref: RunSessionRef): Promise<ConversationFacts | null>;
+/** How a settled turn ended: `completed`, `failed`, or `undefined` if the log does not say. */
+export declare function turnOutcome(facts: ConversationFacts, turnId: string | undefined): {
+    status: 'completed' | 'failed';
+    reason?: string;
+} | undefined;
+/** Close a parked turn nobody answered in time (`turn_failed{ abandoned }`). */
+export declare function abandonParkedTurn(ref: RunSessionRef, turnId: string, reason: string): Promise<void>;
+//# sourceMappingURL=sessions.d.ts.map

package/dist/schedule/daemon/sessions.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sessions.d.ts","sourceRoot":"","sources":["../../../src/schedule/daemon/sessions.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAWH,OAAO,EAAE,KAAK,iBAAiB,EAAyB,MAAM,sCAAsC,CAAA;AAEpG,MAAM,WAAW,aAAa;IAC7B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAA;IAC5B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;CAC1B;AAMD,mEAAmE;AACnE,wBAAsB,gBAAgB,CAAC,GAAG,EAAE,aAAa,EAAE,GAAG,SAAa,GAAG,OAAO,CAAC,OAAO,CAAC,CAO7F;AAED,wBAAsB,YAAY,CAAC,GAAG,EAAE,aAAa,GAAG,OAAO,CAAC,iBAAiB,GAAG,IAAI,CAAC,CAUxF;AAED,+FAA+F;AAC/F,wBAAgB,WAAW,CAC1B,KAAK,EAAE,iBAAiB,EACxB,MAAM,EAAE,MAAM,GAAG,SAAS,GACxB;IAAE,MAAM,EAAE,WAAW,GAAG,QAAQ,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,SAAS,CAiBjE;AAED,gFAAgF;AAChF,wBAAsB,iBAAiB,CACtC,GAAG,EAAE,aAAa,EAClB,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,MAAM,GACZ,OAAO,CAAC,IAAI,CAAC,CAGf"}

package/dist/schedule/daemon/sessions.js

@@ -0,0 +1,52 @@
+/**
+ * What the daemon reads about a run's session: whether its lease is held,
+ * and how its turn ended. Read-only, from the log and the lease files; the
+ * daemon writes a session only to abandon an expired park and to archive old
+ * runs.
+ */
+import { DiskSessionLog, SessionPaths, abandonTurn, asSessionId, isLeaseLive, readSessionLease, } from '@namzu/sdk';
+import { readConversationFacts } from '../../integrations/sessions/store.js';
+function pathsOf(ref) {
+    return new SessionPaths({ home: ref.home, slug: ref.projectSlug });
+}
+/** Whether somebody holds the session's writer lease right now. */
+export async function sessionLeaseLive(ref, now = Date.now()) {
+    const dir = pathsOf(ref).sessionDir({ sessionId: asSessionId(ref.sessionId) });
+    try {
+        return isLeaseLive(await readSessionLease(dir), now);
+    }
+    catch {
+        return false;
+    }
+}
+export async function sessionFacts(ref) {
+    try {
+        return await readConversationFacts({ paths: pathsOf(ref) }, asSessionId(ref.sessionId), 'tolerant');
+    }
+    catch {
+        return null;
+    }
+}
+/** How a settled turn ended: `completed`, `failed`, or `undefined` if the log does not say. */
+export function turnOutcome(facts, turnId) {
+    for (let i = facts.records.length - 1; i >= 0; i--) {
+        const record = facts.records[i];
+        if (turnId && record.turnId !== turnId)
+            continue;
+        if (record.type === 'turn_completed')
+            return { status: 'completed' };
+        if (record.type === 'turn_failed') {
+            return {
+                status: 'failed',
+                ...(record.error?.message ? { reason: record.error.message } : {}),
+            };
+        }
+    }
+    return undefined;
+}
+/** Close a parked turn nobody answered in time (`turn_failed{ abandoned }`). */
+export async function abandonParkedTurn(ref, turnId, reason) {
+    const log = DiskSessionLog.at(pathsOf(ref), { sessionId: asSessionId(ref.sessionId) });
+    await abandonTurn(asSessionId(ref.sessionId), turnId, reason, { log });
+}
+//# sourceMappingURL=sessions.js.map

package/dist/schedule/daemon/sessions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sessions.js","sourceRoot":"","sources":["../../../src/schedule/daemon/sessions.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EACN,cAAc,EACd,YAAY,EAEZ,WAAW,EACX,WAAW,EACX,WAAW,EACX,gBAAgB,GAChB,MAAM,YAAY,CAAA;AACnB,OAAO,EAA0B,qBAAqB,EAAE,MAAM,sCAAsC,CAAA;AAQpG,SAAS,OAAO,CAAC,GAAkB;IAClC,OAAO,IAAI,YAAY,CAAC,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,IAAI,EAAE,GAAG,CAAC,WAAW,EAAE,CAAC,CAAA;AACnE,CAAC;AAED,mEAAmE;AACnE,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,GAAkB,EAAE,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE;IAC1E,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,UAAU,CAAC,EAAE,SAAS,EAAE,WAAW,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC,CAAA;IAC9E,IAAI,CAAC;QACJ,OAAO,WAAW,CAAC,MAAM,gBAAgB,CAAC,GAAG,CAAC,EAAE,GAAG,CAAC,CAAA;IACrD,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,KAAK,CAAA;IACb,CAAC;AACF,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,GAAkB;IACpD,IAAI,CAAC;QACJ,OAAO,MAAM,qBAAqB,CACjC,EAAE,KAAK,EAAE,OAAO,CAAC,GAAG,CAAC,EAAE,EACvB,WAAW,CAAC,GAAG,CAAC,SAAS,CAAC,EAC1B,UAAU,CACV,CAAA;IACF,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,IAAI,CAAA;IACZ,CAAC;AACF,CAAC;AAED,+FAA+F;AAC/F,MAAM,UAAU,WAAW,CAC1B,KAAwB,EACxB,MAA0B;IAE1B,KAAK,IAAI,CAAC,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QACpD,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC,CAI7B,CAAA;QACD,IAAI,MAAM,IAAI,MAAM,CAAC,MAAM,KAAK,MAAM;YAAE,SAAQ;QAChD,IAAI,MAAM,CAAC,IAAI,KAAK,gBAAgB;YAAE,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,CAAA;QACpE,IAAI,MAAM,CAAC,IAAI,KAAK,aAAa,EAAE,CAAC;YACnC,OAAO;gBACN,MAAM,EAAE,QAAQ;gBAChB,GAAG,CAAC,MAAM,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAClE,CAAA;QACF,CAAC;IACF,CAAC;IACD,OAAO,SAAS,CAAA;AACjB,CAAC;AAED,gFAAgF;AAChF,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACtC,GAAkB,EAClB,MAAc,EACd,MAAc;IAEd,MAAM,GAAG,GAAG,cAAc,CAAC,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,EAAE,SAAS,EAAE,WAAW,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC,CAAA;IACtF,MAAM,WAAW,CAAC,WAAW,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,MAAgB,EAAE,MAAM,EAAE,EAAE,GAAG,EAAE,CAAC,CAAA;AACjF,CAAC"}

package/dist/schedule/env.d.ts

@@ -0,0 +1,28 @@
+/**
+ * The environment a scheduled run starts with.
+ *
+ * A service does not see what an interactive shell exported, so the daemon
+ * builds each child's environment from an allowlist rather than passing its
+ * own along; `daemon.env` (0600, `KEY=value` lines) supplies credentials. Its
+ * values reach PROVIDER DISCOVERY only — the fire child reads the file itself
+ * and hands the variables to discovery as an object, never into `process.env`,
+ * where the bash tool would inherit whatever name a credential happened to
+ * have.
+ */
+/** Variables a child inherits from the daemon. Nothing else. */
+export declare const CHILD_ENV_ALLOWLIST: readonly ["HOME", "USER", "LOGNAME", "LANG", "LC_ALL", "TZ", "TMPDIR", "SHELL", "XDG_RUNTIME_DIR", "XDG_CONFIG_HOME", "DBUS_SESSION_BUS_ADDRESS", "WSL_DISTRO_NAME", "WSL_INTEROP", "SystemRoot", "USERPROFILE", "APPDATA", "LOCALAPPDATA", "DISPLAY", "WAYLAND_DISPLAY", "XAUTHORITY"];
+/** `PATH` without Windows drive mounts: under WSL a failed lookup through `/mnt/c` costs seconds. */
+export declare function stripWindowsMounts(path: string | undefined): string;
+/** The environment of a fire child. */
+export declare function childEnvironment(source: NodeJS.ProcessEnv, namzuHome: string): NodeJS.ProcessEnv;
+export interface DaemonEnvFile {
+    readonly values: Readonly<Record<string, string>>;
+    readonly warnings: readonly string[];
+}
+/**
+ * Read `daemon.env`: `KEY=value` per line, `#` comments, optional matching
+ * quotes around a value. A file others can read is reported, not refused:
+ * refusing would stop every job over a mode bit.
+ */
+export declare function readDaemonEnv(path: string): DaemonEnvFile;
+//# sourceMappingURL=env.d.ts.map

package/dist/schedule/env.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"env.d.ts","sourceRoot":"","sources":["../../src/schedule/env.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAIH,gEAAgE;AAChE,eAAO,MAAM,mBAAmB,yRAuBtB,CAAA;AAEV,qGAAqG;AACrG,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,CAKnE;AAED,uCAAuC;AACvC,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,MAAM,CAAC,UAAU,EAAE,SAAS,EAAE,MAAM,GAAG,MAAM,CAAC,UAAU,CAUhG;AAED,MAAM,WAAW,aAAa;IAC7B,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAA;IACjD,QAAQ,CAAC,QAAQ,EAAE,SAAS,MAAM,EAAE,CAAA;CACpC;AAED;;;;GAIG;AACH,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG,aAAa,CA8BzD"}

package/dist/schedule/env.js

@@ -0,0 +1,99 @@
+/**
+ * The environment a scheduled run starts with.
+ *
+ * A service does not see what an interactive shell exported, so the daemon
+ * builds each child's environment from an allowlist rather than passing its
+ * own along; `daemon.env` (0600, `KEY=value` lines) supplies credentials. Its
+ * values reach PROVIDER DISCOVERY only — the fire child reads the file itself
+ * and hands the variables to discovery as an object, never into `process.env`,
+ * where the bash tool would inherit whatever name a credential happened to
+ * have.
+ */
+import { readFileSync, statSync } from 'node:fs';
+/** Variables a child inherits from the daemon. Nothing else. */
+export const CHILD_ENV_ALLOWLIST = [
+    'HOME',
+    'USER',
+    'LOGNAME',
+    'LANG',
+    'LC_ALL',
+    'TZ',
+    'TMPDIR',
+    'SHELL',
+    'XDG_RUNTIME_DIR',
+    'XDG_CONFIG_HOME',
+    'DBUS_SESSION_BUS_ADDRESS',
+    'WSL_DISTRO_NAME',
+    'WSL_INTEROP',
+    'SystemRoot',
+    'USERPROFILE',
+    'APPDATA',
+    'LOCALAPPDATA',
+    // A job with `browser.headed` opens a window: X11, Wayland (WSLg sets
+    // both), and the X authority file a display may need.
+    'DISPLAY',
+    'WAYLAND_DISPLAY',
+    'XAUTHORITY',
+];
+/** `PATH` without Windows drive mounts: under WSL a failed lookup through `/mnt/c` costs seconds. */
+export function stripWindowsMounts(path) {
+    return (path ?? '')
+        .split(':')
+        .filter((entry) => entry !== '' && !/^\/mnt\/[a-z](\/|$)/i.test(entry))
+        .join(':');
+}
+/** The environment of a fire child. */
+export function childEnvironment(source, namzuHome) {
+    const env = {};
+    for (const key of CHILD_ENV_ALLOWLIST)
+        if (source[key] !== undefined)
+            env[key] = source[key];
+    env.PATH =
+        process.platform === 'win32'
+            ? (source.PATH ?? source.Path ?? '')
+            : stripWindowsMounts(source.PATH);
+    if (!env.PATH)
+        env.PATH = '/usr/local/bin:/usr/bin:/bin';
+    env.NAMZU_HOME = namzuHome;
+    return env;
+}
+/**
+ * Read `daemon.env`: `KEY=value` per line, `#` comments, optional matching
+ * quotes around a value. A file others can read is reported, not refused:
+ * refusing would stop every job over a mode bit.
+ */
+export function readDaemonEnv(path) {
+    let text;
+    try {
+        text = readFileSync(path, 'utf8');
+    }
+    catch {
+        return { values: {}, warnings: [] };
+    }
+    const warnings = [];
+    try {
+        const mode = statSync(path).mode & 0o077;
+        if (mode !== 0 && process.platform !== 'win32') {
+            warnings.push(`${path} can be read by other users; run chmod 600 on it`);
+        }
+    }
+    catch { }
+    const values = {};
+    text.split(/\r?\n/).forEach((raw, index) => {
+        const line = raw.trim();
+        if (!line || line.startsWith('#'))
+            return;
+        const match = /^(?:export\s+)?([A-Za-z_][A-Za-z0-9_]*)\s*=\s*(.*)$/.exec(line);
+        if (!match) {
+            warnings.push(`${path}:${index + 1} is not KEY=value; ignored`);
+            return;
+        }
+        let value = match[2] ?? '';
+        if (value.length >= 2 && (value[0] === '"' || value[0] === "'") && value.at(-1) === value[0]) {
+            value = value.slice(1, -1);
+        }
+        values[match[1]] = value;
+    });
+    return { values, warnings };
+}
+//# sourceMappingURL=env.js.map

package/dist/schedule/env.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"env.js","sourceRoot":"","sources":["../../src/schedule/env.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAA;AAEhD,gEAAgE;AAChE,MAAM,CAAC,MAAM,mBAAmB,GAAG;IAClC,MAAM;IACN,MAAM;IACN,SAAS;IACT,MAAM;IACN,QAAQ;IACR,IAAI;IACJ,QAAQ;IACR,OAAO;IACP,iBAAiB;IACjB,iBAAiB;IACjB,0BAA0B;IAC1B,iBAAiB;IACjB,aAAa;IACb,YAAY;IACZ,aAAa;IACb,SAAS;IACT,cAAc;IACd,sEAAsE;IACtE,sDAAsD;IACtD,SAAS;IACT,iBAAiB;IACjB,YAAY;CACH,CAAA;AAEV,qGAAqG;AACrG,MAAM,UAAU,kBAAkB,CAAC,IAAwB;IAC1D,OAAO,CAAC,IAAI,IAAI,EAAE,CAAC;SACjB,KAAK,CAAC,GAAG,CAAC;SACV,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,KAAK,EAAE,IAAI,CAAC,sBAAsB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;SACtE,IAAI,CAAC,GAAG,CAAC,CAAA;AACZ,CAAC;AAED,uCAAuC;AACvC,MAAM,UAAU,gBAAgB,CAAC,MAAyB,EAAE,SAAiB;IAC5E,MAAM,GAAG,GAAsB,EAAE,CAAA;IACjC,KAAK,MAAM,GAAG,IAAI,mBAAmB;QAAE,IAAI,MAAM,CAAC,GAAG,CAAC,KAAK,SAAS;YAAE,GAAG,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,CAAA;IAC5F,GAAG,CAAC,IAAI;QACP,OAAO,CAAC,QAAQ,KAAK,OAAO;YAC3B,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;YACpC,CAAC,CAAC,kBAAkB,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;IACnC,IAAI,CAAC,GAAG,CAAC,IAAI;QAAE,GAAG,CAAC,IAAI,GAAG,8BAA8B,CAAA;IACxD,GAAG,CAAC,UAAU,GAAG,SAAS,CAAA;IAC1B,OAAO,GAAG,CAAA;AACX,CAAC;AAOD;;;;GAIG;AACH,MAAM,UAAU,aAAa,CAAC,IAAY;IACzC,IAAI,IAAY,CAAA;IAChB,IAAI,CAAC;QACJ,IAAI,GAAG,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAA;IAClC,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAA;IACpC,CAAC;IACD,MAAM,QAAQ,GAAa,EAAE,CAAA;IAC7B,IAAI,CAAC;QACJ,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,IAAI,GAAG,KAAK,CAAA;QACxC,IAAI,IAAI,KAAK,CAAC,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;YAChD,QAAQ,CAAC,IAAI,CAAC,GAAG,IAAI,kDAAkD,CAAC,CAAA;QACzE,CAAC;IACF,CAAC;IAAC,MAAM,CAAC,CAAA,CAAC;IACV,MAAM,MAAM,GAA2B,EAAE,CAAA;IACzC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE;QAC1C,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,EAAE,CAAA;QACvB,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,OAAM;QACzC,MAAM,KAAK,GAAG,qDAAqD,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QAC9E,IAAI,CAAC,KAAK,EAAE,CAAC;YACZ,QAAQ,CAAC,IAAI,CAAC,GAAG,IAAI,IAAI,KAAK,GAAG,CAAC,4BAA4B,CAAC,CAAA;YAC/D,OAAM;QACP,CAAC;QACD,IAAI,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAA;QAC1B,IAAI,KAAK,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,GAAG,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;YAC9F,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAA;QAC3B,CAAC;QACD,MAAM,CAAC,KAAK,CAAC,CAAC,CAAW,CAAC,GAAG,KAAK,CAAA;IACnC,CAAC,CAAC,CAAA;IACF,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAA;AAC5B,CAAC"}

package/dist/schedule/fire/browser-preflight.d.ts

@@ -0,0 +1,41 @@
+/**
+ * Whether a scheduled run with a browser grant can drive its browser, asked
+ * before any model call: a run that would stop at its first browser call
+ * because the profile is missing or the browser cannot start is
+ * `blocked-config` with nothing spent, and says what to do.
+ *
+ * Checks, in order: `@namzu/browser` loads; the profile has a descriptor in
+ * `NAMZU_HOME` and its user data directory is there; the engine the profile
+ * was signed in with can run in this process's environment (for the Windows
+ * browser from WSL: interop, `powershell.exe` and Chrome or Edge, which a
+ * systemd service finds through `/run/WSL`); and a window, when the job
+ * asks for one, has a display.
+ *
+ * The run uses the engine the profile belongs to, never another: a
+ * profile signed in with the Windows Chrome has its cookies there, and a
+ * local Chromium would start signed out.
+ */
+import type { BrowserEngineSetting, BrowserEnvironmentProbes } from '@namzu/browser';
+import type { ScheduleBrowserGrant } from '@namzu/sdk';
+export type BrowserPreflight = {
+    readonly ok: true;
+    /** The engine the profile belongs to, forced for the run. */
+    readonly engine: Exclude<BrowserEngineSetting, 'auto'>;
+    /** Why the run's browser is what it is, for the run's warnings. */
+    readonly warnings: readonly string[];
+} | {
+    readonly ok: false;
+    readonly reason: string;
+};
+export interface BrowserPreflightDependencies {
+    readonly env: NodeJS.ProcessEnv;
+    readonly platform?: NodeJS.Platform;
+    /** Test seam: the file-system questions detection asks. */
+    readonly probes?: BrowserEnvironmentProbes;
+    /** Test seam: whether a path exists. */
+    readonly exists?: (path: string) => boolean;
+    /** Test seam: the browser package. */
+    readonly load?: () => Promise<typeof import('@namzu/browser')>;
+}
+export declare function browserPreflight(grant: ScheduleBrowserGrant, home: string, deps: BrowserPreflightDependencies): Promise<BrowserPreflight>;
+//# sourceMappingURL=browser-preflight.d.ts.map

package/dist/schedule/fire/browser-preflight.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"browser-preflight.d.ts","sourceRoot":"","sources":["../../../src/schedule/fire/browser-preflight.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAGH,OAAO,KAAK,EAAE,oBAAoB,EAAE,wBAAwB,EAAE,MAAM,gBAAgB,CAAA;AACpF,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,YAAY,CAAA;AAEtD,MAAM,MAAM,gBAAgB,GACzB;IACA,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAA;IACjB,6DAA6D;IAC7D,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC,oBAAoB,EAAE,MAAM,CAAC,CAAA;IACtD,mEAAmE;IACnE,QAAQ,CAAC,QAAQ,EAAE,SAAS,MAAM,EAAE,CAAA;CACnC,GACD;IAAE,QAAQ,CAAC,EAAE,EAAE,KAAK,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAA;AAElD,MAAM,WAAW,4BAA4B;IAC5C,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC,UAAU,CAAA;IAC/B,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,QAAQ,CAAA;IACnC,2DAA2D;IAC3D,QAAQ,CAAC,MAAM,CAAC,EAAE,wBAAwB,CAAA;IAC1C,wCAAwC;IACxC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAA;IAC3C,sCAAsC;IACtC,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,OAAO,CAAC,cAAc,gBAAgB,CAAC,CAAC,CAAA;CAC9D;AAED,wBAAsB,gBAAgB,CACrC,KAAK,EAAE,oBAAoB,EAC3B,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,4BAA4B,GAChC,OAAO,CAAC,gBAAgB,CAAC,CA2D3B"}

package/dist/schedule/fire/browser-preflight.js

@@ -0,0 +1,73 @@
+/**
+ * Whether a scheduled run with a browser grant can drive its browser, asked
+ * before any model call: a run that would stop at its first browser call
+ * because the profile is missing or the browser cannot start is
+ * `blocked-config` with nothing spent, and says what to do.
+ *
+ * Checks, in order: `@namzu/browser` loads; the profile has a descriptor in
+ * `NAMZU_HOME` and its user data directory is there; the engine the profile
+ * was signed in with can run in this process's environment (for the Windows
+ * browser from WSL: interop, `powershell.exe` and Chrome or Edge, which a
+ * systemd service finds through `/run/WSL`); and a window, when the job
+ * asks for one, has a display.
+ *
+ * The run uses the engine the profile belongs to, never another: a
+ * profile signed in with the Windows Chrome has its cookies there, and a
+ * local Chromium would start signed out.
+ */
+import { existsSync } from 'node:fs';
+export async function browserPreflight(grant, home, deps) {
+    let browser;
+    try {
+        browser = await (deps.load ?? (() => import('@namzu/browser')))();
+    }
+    catch (error) {
+        return {
+            ok: false,
+            reason: `the job uses the browser, but @namzu/browser cannot be loaded (${error instanceof Error ? error.message : String(error)}); run namzu doctor`,
+        };
+    }
+    const login = `namzu browser login ${grant.profile} ${Object.keys(grant.sites)[0] ?? '<url>'}`;
+    let descriptor;
+    try {
+        descriptor = new browser.BrowserProfileStore(home).get(grant.profile);
+    }
+    catch (error) {
+        return {
+            ok: false,
+            reason: `browser profile ${grant.profile} cannot be read: ${error instanceof Error ? error.message : String(error)}`,
+        };
+    }
+    if (!descriptor) {
+        return {
+            ok: false,
+            reason: `browser profile ${grant.profile} does not exist; sign in once with ${login}`,
+        };
+    }
+    const engine = descriptor.engine === 'windows-cdp' ? 'windows' : 'local';
+    const plan = browser.runnableBrowserPlan(browser.detectBrowserEnvironment(deps.env, deps.platform ?? process.platform, deps.probes ?? browser.nodeBrowserProbes, { engine, headless: grant.headed ? 'never' : 'always', mode: 'unattended' }));
+    if (plan.unavailableReason !== undefined) {
+        return {
+            ok: false,
+            reason: `the browser for profile ${grant.profile} cannot start here: ${plan.unavailableReason}`,
+        };
+    }
+    if (plan.engine !== descriptor.engine) {
+        return {
+            ok: false,
+            reason: `browser profile ${grant.profile} was signed in with ${descriptor.engine === 'windows-cdp' ? 'the Windows browser' : 'a browser inside Linux'}, and this run would use ${plan.engine === 'windows-cdp' ? 'the Windows browser' : 'a browser inside Linux'}`,
+        };
+    }
+    const exists = deps.exists ?? existsSync;
+    const dataDir = plan.engine === 'windows-cdp'
+        ? browser.windowsPathToWsl(descriptor.userDataDir, plan.mountRoot)
+        : descriptor.userDataDir;
+    if (dataDir === undefined || !exists(dataDir)) {
+        return {
+            ok: false,
+            reason: `browser profile ${grant.profile} has no data at ${descriptor.userDataDir}; sign in again with ${login}`,
+        };
+    }
+    return { ok: true, engine, warnings: plan.warnings };
+}
+//# sourceMappingURL=browser-preflight.js.map

package/dist/schedule/fire/browser-preflight.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"browser-preflight.js","sourceRoot":"","sources":["../../../src/schedule/fire/browser-preflight.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAA;AAyBpC,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACrC,KAA2B,EAC3B,IAAY,EACZ,IAAkC;IAElC,IAAI,OAAwC,CAAA;IAC5C,IAAI,CAAC;QACJ,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC,CAAC,EAAE,CAAA;IAClE,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,OAAO;YACN,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,kEAAkE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,qBAAqB;SACrJ,CAAA;IACF,CAAC;IACD,MAAM,KAAK,GAAG,uBAAuB,KAAK,CAAC,OAAO,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,OAAO,EAAE,CAAA;IAC9F,IAAI,UAA+E,CAAA;IACnF,IAAI,CAAC;QACJ,UAAU,GAAG,IAAI,OAAO,CAAC,mBAAmB,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAA;IACtE,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,OAAO;YACN,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,mBAAmB,KAAK,CAAC,OAAO,oBAAoB,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE;SACpH,CAAA;IACF,CAAC;IACD,IAAI,CAAC,UAAU,EAAE,CAAC;QACjB,OAAO;YACN,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,mBAAmB,KAAK,CAAC,OAAO,sCAAsC,KAAK,EAAE;SACrF,CAAA;IACF,CAAC;IACD,MAAM,MAAM,GAAG,UAAU,CAAC,MAAM,KAAK,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAA;IACxE,MAAM,IAAI,GAAG,OAAO,CAAC,mBAAmB,CACvC,OAAO,CAAC,wBAAwB,CAC/B,IAAI,CAAC,GAAG,EACR,IAAI,CAAC,QAAQ,IAAI,OAAO,CAAC,QAAQ,EACjC,IAAI,CAAC,MAAM,IAAI,OAAO,CAAC,iBAAiB,EACxC,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,EAAE,IAAI,EAAE,YAAY,EAAE,CAC3E,CACD,CAAA;IACD,IAAI,IAAI,CAAC,iBAAiB,KAAK,SAAS,EAAE,CAAC;QAC1C,OAAO;YACN,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,2BAA2B,KAAK,CAAC,OAAO,uBAAuB,IAAI,CAAC,iBAAiB,EAAE;SAC/F,CAAA;IACF,CAAC;IACD,IAAI,IAAI,CAAC,MAAM,KAAK,UAAU,CAAC,MAAM,EAAE,CAAC;QACvC,OAAO;YACN,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,mBAAmB,KAAK,CAAC,OAAO,uBAAuB,UAAU,CAAC,MAAM,KAAK,aAAa,CAAC,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,wBAAwB,4BAA4B,IAAI,CAAC,MAAM,KAAK,aAAa,CAAC,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,wBAAwB,EAAE;SACnQ,CAAA;IACF,CAAC;IACD,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,UAAU,CAAA;IACxC,MAAM,OAAO,GACZ,IAAI,CAAC,MAAM,KAAK,aAAa;QAC5B,CAAC,CAAC,OAAO,CAAC,gBAAgB,CAAC,UAAU,CAAC,WAAW,EAAE,IAAI,CAAC,SAAS,CAAC;QAClE,CAAC,CAAC,UAAU,CAAC,WAAW,CAAA;IAC1B,IAAI,OAAO,KAAK,SAAS,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;QAC/C,OAAO;YACN,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,mBAAmB,KAAK,CAAC,OAAO,mBAAmB,UAAU,CAAC,WAAW,wBAAwB,KAAK,EAAE;SAChH,CAAA;IACF,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAA;AACrD,CAAC"}

package/dist/schedule/fire/fire.d.ts

@@ -0,0 +1,78 @@
+/**
+ * `namzu schedule __fire`: one scheduled run, as a headless turn in the
+ * job's folder. Started only by the daemon (or `schedule run-now` without
+ * one), never by hand, and not listed in help.
+ *
+ * It composes what `exec` composes — trust, the project's config, a new
+ * conversation, `createAgentSession`, `send`, the provider wait — without
+ * sharing `exec`'s runner: `exec` resolves `prompt` into `auto` because
+ * nobody can answer, and a scheduled run must do the opposite. Here every
+ * batch that would reach a person is HELD (`SendOptions.reviewHold`): the
+ * turn parks durably, the run records `awaiting-approval`, and the operator
+ * answers later in the TUI.
+ *
+ * Checks before any model call, each ending the run as `blocked-config` with
+ * zero tokens spent: the job still exists at the revision the daemon
+ * claimed, is active and still matches its confirmation; the folder is the
+ * canonical folder trust was granted for and can be listed; the project's
+ * code-executing config is the one confirmed; every permission rule compiles;
+ * the pinned provider has a credential in the service's environment.
+ *
+ * The child's own watchdog enforces the wall clock: the kernel's turn
+ * timeout first, then, a minute later, it releases its session lease and
+ * exits. The daemon never kills a run by a pid it read from disk.
+ */
+import type { CommandContext } from '../../commands/types.js';
+import type { SchedulePaths } from '../paths.js';
+import type { ScheduleJob, ScheduleRunTrigger } from '../types.js';
+import { browserPreflight } from './browser-preflight.js';
+export declare const HOLD_REASON = "Scheduled run: waiting for the operator to approve";
+/** How long past the turn's own timeout the child waits before it stops itself. */
+export declare const WATCHDOG_GRACE_MS = 60000;
+export interface FireArgs {
+    readonly jobId: string;
+    readonly runId: string;
+    readonly key: string;
+    readonly revision: number;
+    readonly trigger: ScheduleRunTrigger;
+    readonly scheduledFor?: string;
+    readonly daemonEpoch?: string;
+}
+export declare function parseFireArgs(argv: readonly string[]): FireArgs | {
+    error: string;
+};
+export declare const BORROWED_CREDENTIAL_WARNING = "This run used another program's sign-in. Refreshing it here can race that program's own refresh; store a credential with `namzu login` or daemon.env for unattended runs.";
+export interface FireDependencies {
+    /** The environment the service gave this process; read, never modified. */
+    readonly env?: NodeJS.ProcessEnv;
+    /** Test seam: the agent module. */
+    readonly agent?: Pick<typeof import('../../tui/agent.js'), 'probeAgentSession' | 'createAgentSession'>;
+    /** Test seam: stop the process after the watchdog grace. */
+    readonly exit?: (code: number) => void;
+    readonly now?: () => Date;
+    /** Test seam: how long past the turn timeout the watchdog waits. */
+    readonly graceMs?: number;
+    /** Test seam: leave the process's logging as it is. */
+    readonly keepLogging?: boolean;
+    /** Test seam: whether the job's browser can run (see `browser-preflight.ts`). */
+    readonly browserPreflight?: typeof browserPreflight;
+}
+/**
+ * Run one fire. Returns the exit code; the result file is the record. Exit
+ * codes follow `exec`: 0 completed or parked, 1 failed, 64 usage, 75 the
+ * provider stayed unavailable, 77 the folder is not trusted for this job.
+ */
+export declare function runFire(ctx: CommandContext, paths: SchedulePaths, args: FireArgs, deps?: FireDependencies): Promise<number>;
+/**
+ * What a parked run tells the operator it needs: the tool's reason, and for
+ * the browser the command that signs in again. "http://… is showing a
+ * sign-in page" alone, in a notification and `schedule list`, left what to
+ * do unsaid.
+ */
+export declare function handoffReason(handoff: {
+    readonly reason: string;
+    readonly detail?: Readonly<Record<string, string>>;
+}): string;
+/** A one-line description for logs and notifications; never the prompt. */
+export declare function describeJob(job: ScheduleJob): string;
+//# sourceMappingURL=fire.d.ts.map

package/dist/schedule/fire/fire.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"fire.d.ts","sourceRoot":"","sources":["../../../src/schedule/fire/fire.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAWH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAA;AAgB7D,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,aAAa,CAAA;AAIhD,OAAO,KAAK,EACX,WAAW,EAGX,kBAAkB,EAClB,MAAM,aAAa,CAAA;AACpB,OAAO,EAAyB,gBAAgB,EAAE,MAAM,wBAAwB,CAAA;AAIhF,eAAO,MAAM,WAAW,uDAAuD,CAAA;AAC/E,mFAAmF;AACnF,eAAO,MAAM,iBAAiB,QAAS,CAAA;AAEvC,MAAM,WAAW,QAAQ;IACxB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAA;IACpB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,OAAO,EAAE,kBAAkB,CAAA;IACpC,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAA;IAC9B,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAA;CAC7B;AAED,wBAAgB,aAAa,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,GAAG,QAAQ,GAAG;IAAE,KAAK,EAAE,MAAM,CAAA;CAAE,CA2BnF;AAyBD,eAAO,MAAM,2BAA2B,8KACoI,CAAA;AAE5K,MAAM,WAAW,gBAAgB;IAChC,2EAA2E;IAC3E,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAA;IAChC,mCAAmC;IACnC,QAAQ,CAAC,KAAK,CAAC,EAAE,IAAI,CACpB,cAAc,oBAAoB,CAAC,EACnC,mBAAmB,GAAG,oBAAoB,CAC1C,CAAA;IACD,4DAA4D;IAC5D,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAA;IACtC,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,IAAI,CAAA;IACzB,oEAAoE;IACpE,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAA;IACzB,uDAAuD;IACvD,QAAQ,CAAC,WAAW,CAAC,EAAE,OAAO,CAAA;IAC9B,iFAAiF;IACjF,QAAQ,CAAC,gBAAgB,CAAC,EAAE,OAAO,gBAAgB,CAAA;CACnD;AAED;;;;GAIG;AACH,wBAAsB,OAAO,CAC5B,GAAG,EAAE,cAAc,EACnB,KAAK,EAAE,aAAa,EACpB,IAAI,EAAE,QAAQ,EACd,IAAI,GAAE,gBAAqB,GACzB,OAAO,CAAC,MAAM,CAAC,CA+XjB;AAED;;;;;GAKG;AACH,wBAAgB,aAAa,CAAC,OAAO,EAAE;IACtC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,MAAM,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAA;CAClD,GAAG,MAAM,CAGT;AAcD,2EAA2E;AAC3E,wBAAgB,WAAW,CAAC,GAAG,EAAE,WAAW,GAAG,MAAM,CAEpD"}