@namzu/cli 29.0.0 → 29.1.0

package/dist/permissions/checks.js

@@ -43,7 +43,7 @@
  * something else — and would keep passing after the rule it was written for was
  * deleted.
  */
-import { AuthorizationGate, NOOP_LOGGER } from '@namzu/sdk';
+import { AuthorizationGate, NOOP_LOGGER, getBuiltinTools } from '@namzu/sdk';
 import { isPermissionEffect } from './rules.js';
 /**
  * The gate's vocabulary against the operator's.
@@ -96,10 +96,16 @@ export function verifyPermissionChecks(rules, checks) {
             });
             continue;
         }
+        // A builtin's command line is read for the shell the tool spawns, as it
+        // is at runtime; the CLI runs commands on the host unless a sandbox is
+        // chosen, and a sandboxed reading is only ever stricter.
+        const builtin = getBuiltinTools().find((tool) => tool.name === check.tool);
+        const commandDialect = builtin?.commandDialect?.({ sandboxed: false });
         const verdict = gate.evaluate({
             toolName: check.tool,
             toolInput: check.input,
             toolDef: undefined,
+            ...(commandDialect !== undefined ? { commandDialect } : {}),
         });
         const actual = asEffect(verdict.decision);
         if (actual === check.expect)

package/dist/permissions/checks.js.map

@@ -1 +1 @@
-{"version":3,"file":"checks.js","sourceRoot":"","sources":["../../src/permissions/checks.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4CG;AAEH,OAAO,EAAE,iBAAiB,EAA0B,WAAW,EAAE,MAAM,YAAY,CAAA;AAGnF,OAAO,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAA;AAW/C;;;;;;GAMG;AACH,SAAS,QAAQ,CAAC,QAAqC;IACtD,OAAO,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAA;AAChD,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,sBAAsB,CACrC,KAAmC,EACnC,MAA0C;IAE1C,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAA;IAE7C,MAAM,WAAW,GAAwB,EAAE,CAAA;IAC3C,MAAM,IAAI,GAAG,IAAI,iBAAiB,CACjC;QACC,OAAO,EAAE,IAAI;QACb,KAAK,EAAE,CAAC,GAAG,KAAK,CAAC;QACjB,kBAAkB,EAAE,KAAK;QACzB,wDAAwD;QACxD,qBAAqB,EAAE,KAAK;QAC5B,YAAY,EAAE,KAAK;KACnB,EACD,WAAW,CACX,CAAA;IAED,KAAK,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,EAAE,EAAE,CAAC;QAC/C,MAAM,KAAK,GAAG,oBAAoB,KAAK,GAAG,CAAA;QAE1C,IAAI,OAAO,KAAK,EAAE,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,KAAK,EAAE,EAAE,CAAC;YAC1D,WAAW,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,+CAA+C,EAAE,CAAC,CAAA;YAC3F,SAAQ;QACT,CAAC;QACD,IAAI,OAAO,KAAK,CAAC,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;YAC3F,WAAW,CAAC,IAAI,CAAC;gBAChB,IAAI,EAAE,KAAK;gBACX,OAAO,EAAE,kCAAkC,KAAK,CAAC,IAAI,SAAS,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE;aACrF,CAAC,CAAA;YACF,SAAQ;QACT,CAAC;QACD,IAAI,CAAC,kBAAkB,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;YACvC,WAAW,CAAC,IAAI,CAAC;gBAChB,IAAI,EAAE,KAAK;gBACX,OAAO,EAAE,yDAAyD,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE;aAChG,CAAC,CAAA;YACF,SAAQ;QACT,CAAC;QAED,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC;YAC7B,QAAQ,EAAE,KAAK,CAAC,IAAI;YACpB,SAAS,EAAE,KAAK,CAAC,KAAK;YACtB,OAAO,EAAE,SAAS;SAClB,CAAC,CAAA;QACF,MAAM,MAAM,GAAG,QAAQ,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAA;QACzC,IAAI,MAAM,KAAK,KAAK,CAAC,MAAM;YAAE,SAAQ;QAErC,wEAAwE;QACxE,sEAAsE;QACtE,kDAAkD;QAClD,WAAW,CAAC,IAAI,CAAC;YAChB,IAAI,EAAE,KAAK;YACX,OAAO,EAAE,GAAG,KAAK,CAAC,IAAI,IAAI,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,MAAM,wBAAwB,KAAK,CAAC,MAAM,OAAO,OAAO,CAAC,MAAM,EAAE;SAC9H,CAAC,CAAA;IACH,CAAC;IAED,OAAO,WAAW,CAAA;AACnB,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC/B,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,MAAM,CAAA;IACjC,OAAO,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,OAAO,KAAK,CAAA;AACxD,CAAC"}
+{"version":3,"file":"checks.js","sourceRoot":"","sources":["../../src/permissions/checks.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4CG;AAEH,OAAO,EAAE,iBAAiB,EAA0B,WAAW,EAAE,eAAe,EAAE,MAAM,YAAY,CAAA;AAGpG,OAAO,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAA;AAW/C;;;;;;GAMG;AACH,SAAS,QAAQ,CAAC,QAAqC;IACtD,OAAO,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAA;AAChD,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,sBAAsB,CACrC,KAAmC,EACnC,MAA0C;IAE1C,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAA;IAE7C,MAAM,WAAW,GAAwB,EAAE,CAAA;IAC3C,MAAM,IAAI,GAAG,IAAI,iBAAiB,CACjC;QACC,OAAO,EAAE,IAAI;QACb,KAAK,EAAE,CAAC,GAAG,KAAK,CAAC;QACjB,kBAAkB,EAAE,KAAK;QACzB,wDAAwD;QACxD,qBAAqB,EAAE,KAAK;QAC5B,YAAY,EAAE,KAAK;KACnB,EACD,WAAW,CACX,CAAA;IAED,KAAK,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,EAAE,EAAE,CAAC;QAC/C,MAAM,KAAK,GAAG,oBAAoB,KAAK,GAAG,CAAA;QAE1C,IAAI,OAAO,KAAK,EAAE,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,KAAK,EAAE,EAAE,CAAC;YAC1D,WAAW,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,+CAA+C,EAAE,CAAC,CAAA;YAC3F,SAAQ;QACT,CAAC;QACD,IAAI,OAAO,KAAK,CAAC,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;YAC3F,WAAW,CAAC,IAAI,CAAC;gBAChB,IAAI,EAAE,KAAK;gBACX,OAAO,EAAE,kCAAkC,KAAK,CAAC,IAAI,SAAS,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE;aACrF,CAAC,CAAA;YACF,SAAQ;QACT,CAAC;QACD,IAAI,CAAC,kBAAkB,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;YACvC,WAAW,CAAC,IAAI,CAAC;gBAChB,IAAI,EAAE,KAAK;gBACX,OAAO,EAAE,yDAAyD,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE;aAChG,CAAC,CAAA;YACF,SAAQ;QACT,CAAC;QAED,wEAAwE;QACxE,uEAAuE;QACvE,yDAAyD;QACzD,MAAM,OAAO,GAAG,eAAe,EAAE,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,KAAK,CAAC,IAAI,CAAC,CAAA;QAC1E,MAAM,cAAc,GAAG,OAAO,EAAE,cAAc,EAAE,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CAAA;QACtE,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC;YAC7B,QAAQ,EAAE,KAAK,CAAC,IAAI;YACpB,SAAS,EAAE,KAAK,CAAC,KAAK;YACtB,OAAO,EAAE,SAAS;YAClB,GAAG,CAAC,cAAc,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC3D,CAAC,CAAA;QACF,MAAM,MAAM,GAAG,QAAQ,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAA;QACzC,IAAI,MAAM,KAAK,KAAK,CAAC,MAAM;YAAE,SAAQ;QAErC,wEAAwE;QACxE,sEAAsE;QACtE,kDAAkD;QAClD,WAAW,CAAC,IAAI,CAAC;YAChB,IAAI,EAAE,KAAK;YACX,OAAO,EAAE,GAAG,KAAK,CAAC,IAAI,IAAI,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,MAAM,wBAAwB,KAAK,CAAC,MAAM,OAAO,OAAO,CAAC,MAAM,EAAE;SAC9H,CAAC,CAAA;IACH,CAAC;IAED,OAAO,WAAW,CAAA;AACnB,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC/B,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,MAAM,CAAA;IACjC,OAAO,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,OAAO,KAAK,CAAA;AACxD,CAAC"}

package/dist/permissions/rules.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"rules.d.ts","sourceRoot":"","sources":["../../src/permissions/rules.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAAE,KAAK,iBAAiB,EAA2B,MAAM,YAAY,CAAA;AAE5E,OAAO,EAAE,KAAK,sBAAsB,EAA0B,MAAM,aAAa,CAAA;AAEjF,6DAA6D;AAC7D,MAAM,MAAM,gBAAgB,GAAG,OAAO,GAAG,KAAK,GAAG,MAAM,CAAA;AAIvD,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,gBAAgB,CAE5E;AAED;;;;;;;GAOG;AACH,MAAM,MAAM,cAAc,GAAG,gBAAgB,GAAG,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC,CAAA;AAE1F,MAAM,MAAM,iBAAiB,GAAG,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC,CAAA;AAExE,MAAM,WAAW,iBAAiB;IACjC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;CACxB;AAED,MAAM,WAAW,mBAAmB;IACnC,QAAQ,CAAC,KAAK,EAAE,SAAS,iBAAiB,EAAE,CAAA;IAC5C;;;;;;;OAOG;IACH,QAAQ,CAAC,WAAW,EAAE,SAAS,iBAAiB,EAAE,CAAA;CAClD;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAQ7D;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgEG;AACH,wBAAgB,iBAAiB,CAChC,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,MAAM,EACf,QAAQ,GAAE,OAAO,GAAG,MAAe,GACjC,MAAM,CASR;AA+CD,oEAAoE;AACpE,wBAAgB,cAAc,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAKtE;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,aAAa,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,GAAG,MAAM,CAU1D;AAED;;;;;GAKG;AACH,wBAAgB,kBAAkB,CACjC,MAAM,EAAE,iBAAiB,GAAG,SAAS,EACrC,MAAM,CAAC,EAAE,sBAAsB,GAC7B,mBAAmB,CAqFrB"}
+{"version":3,"file":"rules.d.ts","sourceRoot":"","sources":["../../src/permissions/rules.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EACN,KAAK,iBAAiB,EAGtB,MAAM,YAAY,CAAA;AAEnB,OAAO,EAAE,KAAK,sBAAsB,EAA0B,MAAM,aAAa,CAAA;AAEjF,6DAA6D;AAC7D,MAAM,MAAM,gBAAgB,GAAG,OAAO,GAAG,KAAK,GAAG,MAAM,CAAA;AAIvD,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,gBAAgB,CAE5E;AAED;;;;;;;GAOG;AACH,MAAM,MAAM,cAAc,GAAG,gBAAgB,GAAG,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC,CAAA;AAE1F,MAAM,MAAM,iBAAiB,GAAG,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC,CAAA;AAExE,MAAM,WAAW,iBAAiB;IACjC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;CACxB;AAED,MAAM,WAAW,mBAAmB;IACnC,QAAQ,CAAC,KAAK,EAAE,SAAS,iBAAiB,EAAE,CAAA;IAC5C;;;;;;;OAOG;IACH,QAAQ,CAAC,WAAW,EAAE,SAAS,iBAAiB,EAAE,CAAA;CAClD;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAI7D;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgEG;AACH,wBAAgB,iBAAiB,CAChC,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,MAAM,EACf,QAAQ,GAAE,OAAO,GAAG,MAAe,GACjC,MAAM,CASR;AA+CD,oEAAoE;AACpE,wBAAgB,cAAc,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAKtE;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,aAAa,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,GAAG,MAAM,CAU1D;AAED;;;;;GAKG;AACH,wBAAgB,kBAAkB,CACjC,MAAM,EAAE,iBAAiB,GAAG,SAAS,EACrC,MAAM,CAAC,EAAE,sBAAsB,GAC7B,mBAAmB,CAqFrB"}

package/dist/permissions/rules.js

@@ -10,7 +10,7 @@
  * The whole surface is pure: config in, rules out. The gate stays the only
  * thing that decides anything, which is what keeps this testable without a turn.
  */
-import { builtinCommandArguments } from '@namzu/sdk';
+import { builtinCommandArguments, permissionPatternToRegExpSource, } from '@namzu/sdk';
 import { verifyPermissionChecks } from './checks.js';
 const EFFECTS = new Set(['allow', 'ask', 'deny']);
 export function isPermissionEffect(value) {
@@ -30,13 +30,9 @@ export function isPermissionEffect(value) {
  * exists to stop.
  */
 export function patternToRegExpSource(pattern) {
-    const normalized = pattern.replaceAll('\\', '/');
-    const escaped = normalized
-        .replace(/[.+^${}()|[\]\\]/g, '\\$&')
-        .replace(/\*/g, '.*')
-        .replace(/\?/g, '.');
-    const trailingSpaceStar = escaped.endsWith(' .*') ? `${escaped.slice(0, -3)}( .*)?` : escaped;
-    return `^${trailingSpaceStar}$`;
+    // The kernel owns the dialect so a skill's `Bash(git status *)` and this
+    // table's `"git status *"` cannot drift apart.
+    return permissionPatternToRegExpSource(pattern);
 }
 /**
  * A pattern that matches this tool, and only this tool, doing this thing.

package/dist/permissions/rules.js.map

@@ -1 +1 @@
-{"version":3,"file":"rules.js","sourceRoot":"","sources":["../../src/permissions/rules.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAA0B,uBAAuB,EAAE,MAAM,YAAY,CAAA;AAE5E,OAAO,EAA+B,sBAAsB,EAAE,MAAM,aAAa,CAAA;AAKjF,MAAM,OAAO,GAAG,IAAI,GAAG,CAAS,CAAC,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC,CAAA;AAEzD,MAAM,UAAU,kBAAkB,CAAC,KAAc;IAChD,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAA;AACvD,CAAC;AAiCD;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,qBAAqB,CAAC,OAAe;IACpD,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,CAAA;IAChD,MAAM,OAAO,GAAG,UAAU;SACxB,OAAO,CAAC,mBAAmB,EAAE,MAAM,CAAC;SACpC,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC;SACpB,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAA;IACrB,MAAM,iBAAiB,GAAG,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAA;IAC7F,OAAO,IAAI,iBAAiB,GAAG,CAAA;AAChC,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgEG;AACH,MAAM,UAAU,iBAAiB,CAChC,IAAY,EACZ,OAAe,EACf,WAA6B,MAAM;IAEnC,MAAM,QAAQ,GAAG,YAAY,CAAC,IAAI,CAAC,CAAA;IACnC,MAAM,OAAO,GAAG,qBAAqB,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAA;IAC3D,wEAAwE;IACxE,yEAAyE;IACzE,wEAAwE;IACxE,qEAAqE;IACrE,MAAM,aAAa,GAAG,QAAQ,KAAK,OAAO,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,EAAE,EAAE,CAAC,KAAK,EAAE,CAAA;IAChF,OAAO,aAAa,CAAC,CAAC,CAAC,IAAI,QAAQ,OAAO,OAAO,KAAK,CAAC,CAAC,CAAC,IAAI,QAAQ,MAAM,OAAO,KAAK,CAAA;AACxF,CAAC;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,SAAS,WAAW,CACnB,IAAY,EACZ,QAAgB,EAChB,OAAe,EACf,QAA0B;IAE1B,sEAAsE;IACtE,2EAA2E;IAC3E,2EAA2E;IAC3E,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,EAAE,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC;QACxC,OAAO,QAAQ,KAAK,OAAO;YAC1B,CAAC,CAAC,EAAE,IAAI,EAAE,eAAe,EAAE,SAAS,EAAE,CAAC,IAAI,CAAC,EAAE;YAC9C,CAAC,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,SAAS,EAAE,CAAC,IAAI,CAAC,EAAE,CAAA;IAC/C,CAAC;IACD,MAAM,QAAQ,GAAG,qBAAqB,CAAC,OAAO,CAAC,CAAA;IAC/C,OAAO;QACN,IAAI,EAAE,kBAAkB;QACxB,SAAS,EAAE,CAAC,IAAI,CAAC;QACjB,QAAQ;QACR,OAAO,EAAE,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QAChE,QAAQ;KACR,CAAA;AACF,CAAC;AAED,SAAS,YAAY,CAAC,KAAa;IAClC,OAAO,KAAK,CAAC,OAAO,CAAC,qBAAqB,EAAE,MAAM,CAAC,CAAA;AACpD,CAAC;AAED,oEAAoE;AACpE,MAAM,UAAU,cAAc,CAAC,KAAa,EAAE,OAAe;IAC5D,iEAAiE;IACjE,sDAAsD;IACtD,MAAM,KAAK,GAAG,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAA;IACvD,OAAO,IAAI,MAAM,CAAC,qBAAqB,CAAC,OAAO,CAAC,EAAE,KAAK,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAA;AAC3F,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,aAAa,CAAC,CAAS,EAAE,CAAS;IACjD,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,GAAG;QAAE,OAAO,CAAC,CAAA;IACpC,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,GAAG;QAAE,OAAO,CAAC,CAAC,CAAA;IACrC,MAAM,OAAO,GAAG,CAAC,CAAS,EAAU,EAAE;QACrC,MAAM,IAAI,GAAG,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;QAC7B,OAAO,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAA;IACrC,CAAC,CAAA;IACD,MAAM,IAAI,GAAG,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAAA;IACpC,IAAI,IAAI,KAAK,CAAC;QAAE,OAAO,IAAI,CAAA;IAC3B,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;AAClC,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,kBAAkB,CACjC,MAAqC,EACrC,MAA+B;IAE/B,MAAM,KAAK,GAAwB,EAAE,CAAA;IACrC,MAAM,WAAW,GAAwB,EAAE,CAAA;IAC3C,yEAAyE;IACzE,yEAAyE;IACzE,6DAA6D;IAC7D,IAAI,CAAC,MAAM;QAAE,OAAO,EAAE,KAAK,EAAE,WAAW,EAAE,sBAAsB,CAAC,KAAK,EAAE,MAAM,CAAC,EAAE,CAAA;IAEjF,2EAA2E;IAC3E,0EAA0E;IAC1E,+BAA+B;IAC/B,MAAM,gBAAgB,GAAG,uBAAuB,EAAE,CAAA;IAElD,KAAK,MAAM,CAAC,IAAI,EAAE,UAAU,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QACzD,IAAI,kBAAkB,CAAC,UAAU,CAAC,EAAE,CAAC;YACpC,IAAI,UAAU,KAAK,OAAO;gBAAE,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,eAAe,EAAE,SAAS,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;YACpF,IAAI,UAAU,KAAK,MAAM;gBAAE,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,SAAS,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;YAClF,IAAI,UAAU,KAAK,KAAK,EAAE,CAAC;gBAC1B,KAAK,CAAC,IAAI,CAAC;oBACV,IAAI,EAAE,gBAAgB;oBACtB,OAAO,EAAE,IAAI,YAAY,CAAC,IAAI,CAAC,GAAG;oBAClC,MAAM,EAAE,MAAM;oBACd,QAAQ,EAAE,QAAQ;iBAClB,CAAC,CAAA;YACH,CAAC;YACD,SAAQ;QACT,CAAC;QACD,IAAI,OAAO,UAAU,KAAK,QAAQ,IAAI,UAAU,KAAK,IAAI,EAAE,CAAC;YAC3D,WAAW,CAAC,IAAI,CAAC;gBAChB,IAAI;gBACJ,OAAO,EAAE,gEAAgE,OAAO,UAAU,EAAE;aAC5F,CAAC,CAAA;YACF,SAAQ;QACT,CAAC;QACD,KAAK,MAAM,OAAO,IAAI,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,EAAE,CAAC;YACnE,MAAM,MAAM,GAAG,UAAU,CAAC,OAAO,CAAC,CAAA;YAClC,IAAI,CAAC,kBAAkB,CAAC,MAAM,CAAC,EAAE,CAAC;gBACjC,WAAW,CAAC,IAAI,CAAC;oBAChB,IAAI;oBACJ,OAAO;oBACP,OAAO,EAAE,0CAA0C,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE;iBAC3E,CAAC,CAAA;gBACF,SAAQ;YACT,CAAC;YACD,IAAI,CAAC;gBACJ,IAAI,MAAM,CAAC,qBAAqB,CAAC,OAAO,CAAC,CAAC,CAAA;YAC3C,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACd,WAAW,CAAC,IAAI,CAAC;oBAChB,IAAI;oBACJ,OAAO;oBACP,OAAO,EAAE,0BAA0B,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE;iBACrF,CAAC,CAAA;gBACF,SAAQ;YACT,CAAC;YACD,IAAI,MAAM,KAAK,KAAK,EAAE,CAAC;gBACtB,KAAK,CAAC,IAAI,CAAC;oBACV,IAAI,EAAE,gBAAgB;oBACtB,OAAO,EAAE,iBAAiB,CAAC,IAAI,EAAE,OAAO,CAAC;oBACzC,MAAM,EAAE,MAAM;oBACd,QAAQ,EAAE,QAAQ;iBAClB,CAAC,CAAA;gBACF,SAAQ;YACT,CAAC;YACD,mEAAmE;YACnE,8DAA8D;YAC9D,mEAAmE;YACnE,+DAA+D;YAC/D,MAAM,QAAQ,GAAG,gBAAgB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;YAC3C,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;gBAC5B,KAAK,CAAC,IAAI,CAAC;oBACV,IAAI,EAAE,gBAAgB;oBACtB,OAAO,EAAE,iBAAiB,CAAC,IAAI,EAAE,OAAO,EAAE,MAAM,CAAC;oBACjD,MAAM,EAAE,MAAM;oBACd,QAAQ,EAAE,MAAM;iBAChB,CAAC,CAAA;gBACF,SAAQ;YACT,CAAC;YACD,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC,CAAA;QACzD,CAAC;IACF,CAAC;IACD,uEAAuE;IACvE,wEAAwE;IACxE,4DAA4D;IAC5D,WAAW,CAAC,IAAI,CAAC,GAAG,sBAAsB,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,CAAA;IAC1D,OAAO,EAAE,KAAK,EAAE,WAAW,EAAE,CAAA;AAC9B,CAAC"}
+{"version":3,"file":"rules.js","sourceRoot":"","sources":["../../src/permissions/rules.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAEN,uBAAuB,EACvB,+BAA+B,GAC/B,MAAM,YAAY,CAAA;AAEnB,OAAO,EAA+B,sBAAsB,EAAE,MAAM,aAAa,CAAA;AAKjF,MAAM,OAAO,GAAG,IAAI,GAAG,CAAS,CAAC,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC,CAAA;AAEzD,MAAM,UAAU,kBAAkB,CAAC,KAAc;IAChD,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAA;AACvD,CAAC;AAiCD;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,qBAAqB,CAAC,OAAe;IACpD,yEAAyE;IACzE,+CAA+C;IAC/C,OAAO,+BAA+B,CAAC,OAAO,CAAC,CAAA;AAChD,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgEG;AACH,MAAM,UAAU,iBAAiB,CAChC,IAAY,EACZ,OAAe,EACf,WAA6B,MAAM;IAEnC,MAAM,QAAQ,GAAG,YAAY,CAAC,IAAI,CAAC,CAAA;IACnC,MAAM,OAAO,GAAG,qBAAqB,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAA;IAC3D,wEAAwE;IACxE,yEAAyE;IACzE,wEAAwE;IACxE,qEAAqE;IACrE,MAAM,aAAa,GAAG,QAAQ,KAAK,OAAO,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,EAAE,EAAE,CAAC,KAAK,EAAE,CAAA;IAChF,OAAO,aAAa,CAAC,CAAC,CAAC,IAAI,QAAQ,OAAO,OAAO,KAAK,CAAC,CAAC,CAAC,IAAI,QAAQ,MAAM,OAAO,KAAK,CAAA;AACxF,CAAC;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,SAAS,WAAW,CACnB,IAAY,EACZ,QAAgB,EAChB,OAAe,EACf,QAA0B;IAE1B,sEAAsE;IACtE,2EAA2E;IAC3E,2EAA2E;IAC3E,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,EAAE,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC;QACxC,OAAO,QAAQ,KAAK,OAAO;YAC1B,CAAC,CAAC,EAAE,IAAI,EAAE,eAAe,EAAE,SAAS,EAAE,CAAC,IAAI,CAAC,EAAE;YAC9C,CAAC,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,SAAS,EAAE,CAAC,IAAI,CAAC,EAAE,CAAA;IAC/C,CAAC;IACD,MAAM,QAAQ,GAAG,qBAAqB,CAAC,OAAO,CAAC,CAAA;IAC/C,OAAO;QACN,IAAI,EAAE,kBAAkB;QACxB,SAAS,EAAE,CAAC,IAAI,CAAC;QACjB,QAAQ;QACR,OAAO,EAAE,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QAChE,QAAQ;KACR,CAAA;AACF,CAAC;AAED,SAAS,YAAY,CAAC,KAAa;IAClC,OAAO,KAAK,CAAC,OAAO,CAAC,qBAAqB,EAAE,MAAM,CAAC,CAAA;AACpD,CAAC;AAED,oEAAoE;AACpE,MAAM,UAAU,cAAc,CAAC,KAAa,EAAE,OAAe;IAC5D,iEAAiE;IACjE,sDAAsD;IACtD,MAAM,KAAK,GAAG,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAA;IACvD,OAAO,IAAI,MAAM,CAAC,qBAAqB,CAAC,OAAO,CAAC,EAAE,KAAK,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAA;AAC3F,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,aAAa,CAAC,CAAS,EAAE,CAAS;IACjD,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,GAAG;QAAE,OAAO,CAAC,CAAA;IACpC,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,GAAG;QAAE,OAAO,CAAC,CAAC,CAAA;IACrC,MAAM,OAAO,GAAG,CAAC,CAAS,EAAU,EAAE;QACrC,MAAM,IAAI,GAAG,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;QAC7B,OAAO,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAA;IACrC,CAAC,CAAA;IACD,MAAM,IAAI,GAAG,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAAA;IACpC,IAAI,IAAI,KAAK,CAAC;QAAE,OAAO,IAAI,CAAA;IAC3B,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;AAClC,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,kBAAkB,CACjC,MAAqC,EACrC,MAA+B;IAE/B,MAAM,KAAK,GAAwB,EAAE,CAAA;IACrC,MAAM,WAAW,GAAwB,EAAE,CAAA;IAC3C,yEAAyE;IACzE,yEAAyE;IACzE,6DAA6D;IAC7D,IAAI,CAAC,MAAM;QAAE,OAAO,EAAE,KAAK,EAAE,WAAW,EAAE,sBAAsB,CAAC,KAAK,EAAE,MAAM,CAAC,EAAE,CAAA;IAEjF,2EAA2E;IAC3E,0EAA0E;IAC1E,+BAA+B;IAC/B,MAAM,gBAAgB,GAAG,uBAAuB,EAAE,CAAA;IAElD,KAAK,MAAM,CAAC,IAAI,EAAE,UAAU,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QACzD,IAAI,kBAAkB,CAAC,UAAU,CAAC,EAAE,CAAC;YACpC,IAAI,UAAU,KAAK,OAAO;gBAAE,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,eAAe,EAAE,SAAS,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;YACpF,IAAI,UAAU,KAAK,MAAM;gBAAE,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,SAAS,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;YAClF,IAAI,UAAU,KAAK,KAAK,EAAE,CAAC;gBAC1B,KAAK,CAAC,IAAI,CAAC;oBACV,IAAI,EAAE,gBAAgB;oBACtB,OAAO,EAAE,IAAI,YAAY,CAAC,IAAI,CAAC,GAAG;oBAClC,MAAM,EAAE,MAAM;oBACd,QAAQ,EAAE,QAAQ;iBAClB,CAAC,CAAA;YACH,CAAC;YACD,SAAQ;QACT,CAAC;QACD,IAAI,OAAO,UAAU,KAAK,QAAQ,IAAI,UAAU,KAAK,IAAI,EAAE,CAAC;YAC3D,WAAW,CAAC,IAAI,CAAC;gBAChB,IAAI;gBACJ,OAAO,EAAE,gEAAgE,OAAO,UAAU,EAAE;aAC5F,CAAC,CAAA;YACF,SAAQ;QACT,CAAC;QACD,KAAK,MAAM,OAAO,IAAI,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,EAAE,CAAC;YACnE,MAAM,MAAM,GAAG,UAAU,CAAC,OAAO,CAAC,CAAA;YAClC,IAAI,CAAC,kBAAkB,CAAC,MAAM,CAAC,EAAE,CAAC;gBACjC,WAAW,CAAC,IAAI,CAAC;oBAChB,IAAI;oBACJ,OAAO;oBACP,OAAO,EAAE,0CAA0C,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE;iBAC3E,CAAC,CAAA;gBACF,SAAQ;YACT,CAAC;YACD,IAAI,CAAC;gBACJ,IAAI,MAAM,CAAC,qBAAqB,CAAC,OAAO,CAAC,CAAC,CAAA;YAC3C,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACd,WAAW,CAAC,IAAI,CAAC;oBAChB,IAAI;oBACJ,OAAO;oBACP,OAAO,EAAE,0BAA0B,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE;iBACrF,CAAC,CAAA;gBACF,SAAQ;YACT,CAAC;YACD,IAAI,MAAM,KAAK,KAAK,EAAE,CAAC;gBACtB,KAAK,CAAC,IAAI,CAAC;oBACV,IAAI,EAAE,gBAAgB;oBACtB,OAAO,EAAE,iBAAiB,CAAC,IAAI,EAAE,OAAO,CAAC;oBACzC,MAAM,EAAE,MAAM;oBACd,QAAQ,EAAE,QAAQ;iBAClB,CAAC,CAAA;gBACF,SAAQ;YACT,CAAC;YACD,mEAAmE;YACnE,8DAA8D;YAC9D,mEAAmE;YACnE,+DAA+D;YAC/D,MAAM,QAAQ,GAAG,gBAAgB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;YAC3C,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;gBAC5B,KAAK,CAAC,IAAI,CAAC;oBACV,IAAI,EAAE,gBAAgB;oBACtB,OAAO,EAAE,iBAAiB,CAAC,IAAI,EAAE,OAAO,EAAE,MAAM,CAAC;oBACjD,MAAM,EAAE,MAAM;oBACd,QAAQ,EAAE,MAAM;iBAChB,CAAC,CAAA;gBACF,SAAQ;YACT,CAAC;YACD,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC,CAAA;QACzD,CAAC;IACF,CAAC;IACD,uEAAuE;IACvE,wEAAwE;IACxE,4DAA4D;IAC5D,WAAW,CAAC,IAAI,CAAC,GAAG,sBAAsB,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,CAAA;IAC1D,OAAO,EAAE,KAAK,EAAE,WAAW,EAAE,CAAA;AAC9B,CAAC"}

package/dist/schedule/build.d.ts

@@ -0,0 +1,79 @@
+/**
+ * Turning what an operator (or a confirmed model proposal) asked for into a
+ * job, and what they are shown before they confirm it.
+ *
+ * Shared by `schedule add`, the TUI and the `schedule` tool's host, so every
+ * surface refuses the same things and shows the same preview:
+ *
+ * - an explicit permission set is required; there is no default;
+ * - `unmatched: allow` beside host execution needs `allowUnattendedHost`,
+ *   which only the CLI flag sets (the tool can never);
+ * - the folder is canonicalised and may not be `/`, the home directory, or
+ *   anything containing or inside `NAMZU_HOME`;
+ * - the token budget and the wall clock are always above zero;
+ * - the schedule parses in the job's zone and fires at least once.
+ *
+ * A built job is inert (`pending-confirmation`, no trust) until
+ * {@link confirmJob} records who confirmed it and on which surface.
+ */
+import { type ScheduleSpec } from '@namzu/sdk';
+import type { NamzuCliConfig } from '../config/schema.js';
+import type { SchedulePaths } from './paths.js';
+import { type CompiledJobPolicy, type PermissionInput } from './policy.js';
+import type { ConfirmationSurface, ScheduleBudget, ScheduleJob } from './types.js';
+export declare const DEFAULT_TOKEN_BUDGET = 500000;
+export declare const DEFAULT_TIMEOUT_MS: number;
+export declare const DEFAULT_MAX_ITERATIONS = 50;
+/** Below this many iterations a run's preview warns that it may stop unfinished. */
+export declare const FEW_ITERATIONS = 10;
+/** Below this token budget a run's preview warns: one model call resends the whole prompt. */
+export declare const FEW_TOKENS = 50000;
+export declare const DEFAULT_WAIT_FOR_PROVIDER_MS: number;
+export declare const DEFAULT_APPROVAL_TTL_MS: number;
+export declare const DEFAULT_KEEP_SESSIONS = 20;
+export declare const DEFAULT_PAUSE_AFTER_FAILURES = 5;
+export interface JobRequest {
+    readonly name: string;
+    readonly prompt: string;
+    readonly when: string;
+    /** A spec already parsed (an edit that keeps its schedule); `when` is then ignored. */
+    readonly spec?: ScheduleSpec;
+    readonly folder: string;
+    readonly tz?: string;
+    readonly permissions: PermissionInput;
+    readonly budget?: Partial<ScheduleBudget>;
+    /** `provider` or `provider/model`; absent: the operator's configured primary. */
+    readonly model?: string;
+    readonly effort?: string;
+    readonly includeSummary?: boolean;
+    readonly keepSessions?: number;
+    readonly pauseAfterFailures?: number;
+    readonly approvalTtlMs?: number;
+    readonly createdBy: ScheduleJob['createdBy'];
+    /** Only the CLI's `--allow-unattended-host` sets this. */
+    readonly allowUnattendedHost?: boolean;
+}
+export declare class JobRequestError extends Error {
+    readonly name = "JobRequestError";
+}
+/** The model a job pins: `provider[/model]`, or the configured primary. */
+export declare function resolveJobModel(spec: string | undefined, home?: string): ScheduleJob['model'];
+export declare function buildJob(request: JobRequest, context: {
+    readonly paths: SchedulePaths;
+    readonly config: Pick<NamzuCliConfig, 'limits'>;
+    readonly now: Date;
+    readonly osHome?: string;
+}): ScheduleJob;
+/**
+ * Record a confirmation: trust for the job's folder (for this job only —
+ * `trust.json` is not touched), the digest of what was confirmed, and the
+ * surface it happened on. A non-interactive surface confirms nothing.
+ */
+export declare function confirmJob(job: ScheduleJob, surface: ConfirmationSurface, now: Date, options?: {
+    readonly paused?: boolean;
+}): ScheduleJob;
+/** At most how many times a day the schedule fires (the busiest of the next seven days). */
+export declare function runsPerDay(spec: ScheduleSpec, now: Date): number;
+/** The job as a person is asked to confirm it. Every line is computed here, never taken from a proposal. */
+export declare function previewLines(job: ScheduleJob, policy: CompiledJobPolicy, now: Date): string[];
+//# sourceMappingURL=build.d.ts.map

package/dist/schedule/build.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"build.d.ts","sourceRoot":"","sources":["../../src/schedule/build.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,OAAO,EAEN,KAAK,YAAY,EAQjB,MAAM,YAAY,CAAA;AACnB,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAA;AAOzD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,YAAY,CAAA;AAC/C,OAAO,EAAE,KAAK,iBAAiB,EAAE,KAAK,eAAe,EAAqB,MAAM,aAAa,CAAA;AAG7F,OAAO,KAAK,EAAE,mBAAmB,EAAE,cAAc,EAAE,WAAW,EAAE,MAAM,YAAY,CAAA;AAElF,eAAO,MAAM,oBAAoB,SAAU,CAAA;AAC3C,eAAO,MAAM,kBAAkB,QAAc,CAAA;AAC7C,eAAO,MAAM,sBAAsB,KAAK,CAAA;AACxC,oFAAoF;AACpF,eAAO,MAAM,cAAc,KAAK,CAAA;AAChC,8FAA8F;AAC9F,eAAO,MAAM,UAAU,QAAS,CAAA;AAChC,eAAO,MAAM,4BAA4B,QAAc,CAAA;AACvD,eAAO,MAAM,uBAAuB,QAAuB,CAAA;AAC3D,eAAO,MAAM,qBAAqB,KAAK,CAAA;AACvC,eAAO,MAAM,4BAA4B,IAAI,CAAA;AAE7C,MAAM,WAAW,UAAU;IAC1B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,uFAAuF;IACvF,QAAQ,CAAC,IAAI,CAAC,EAAE,YAAY,CAAA;IAC5B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,EAAE,CAAC,EAAE,MAAM,CAAA;IACpB,QAAQ,CAAC,WAAW,EAAE,eAAe,CAAA;IACrC,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC,cAAc,CAAC,CAAA;IACzC,iFAAiF;IACjF,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAA;IACxB,QAAQ,CAAC,cAAc,CAAC,EAAE,OAAO,CAAA;IACjC,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAA;IAC9B,QAAQ,CAAC,kBAAkB,CAAC,EAAE,MAAM,CAAA;IACpC,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAA;IAC/B,QAAQ,CAAC,SAAS,EAAE,WAAW,CAAC,WAAW,CAAC,CAAA;IAC5C,0DAA0D;IAC1D,QAAQ,CAAC,mBAAmB,CAAC,EAAE,OAAO,CAAA;CACtC;AAED,qBAAa,eAAgB,SAAQ,KAAK;IACzC,SAAkB,IAAI,qBAAoB;CAC1C;AASD,2EAA2E;AAC3E,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,GAAG,SAAS,EAAE,IAAI,CAAC,EAAE,MAAM,GAAG,WAAW,CAAC,OAAO,CAAC,CAyB7F;AAED,wBAAgB,QAAQ,CACvB,OAAO,EAAE,UAAU,EACnB,OAAO,EAAE;IACR,QAAQ,CAAC,KAAK,EAAE,aAAa,CAAA;IAC7B,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC,cAAc,EAAE,QAAQ,CAAC,CAAA;IAC/C,QAAQ,CAAC,GAAG,EAAE,IAAI,CAAA;IAClB,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CACxB,GACC,WAAW,CAqGb;AAED;;;;GAIG;AACH,wBAAgB,UAAU,CACzB,GAAG,EAAE,WAAW,EAChB,OAAO,EAAE,mBAAmB,EAC5B,GAAG,EAAE,IAAI,EACT,OAAO,GAAE;IAAE,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,CAAA;CAAO,GACzC,WAAW,CAeb;AAED,4FAA4F;AAC5F,wBAAgB,UAAU,CAAC,IAAI,EAAE,YAAY,EAAE,GAAG,EAAE,IAAI,GAAG,MAAM,CAUhE;AASD,4GAA4G;AAC5G,wBAAgB,YAAY,CAAC,GAAG,EAAE,WAAW,EAAE,MAAM,EAAE,iBAAiB,EAAE,GAAG,EAAE,IAAI,GAAG,MAAM,EAAE,CA8C7F"}

package/dist/schedule/build.js

@@ -0,0 +1,246 @@
+/**
+ * Turning what an operator (or a confirmed model proposal) asked for into a
+ * job, and what they are shown before they confirm it.
+ *
+ * Shared by `schedule add`, the TUI and the `schedule` tool's host, so every
+ * surface refuses the same things and shows the same preview:
+ *
+ * - an explicit permission set is required; there is no default;
+ * - `unmatched: allow` beside host execution needs `allowUnattendedHost`,
+ *   which only the CLI flag sets (the tool can never);
+ * - the folder is canonicalised and may not be `/`, the home directory, or
+ *   anything containing or inside `NAMZU_HOME`;
+ * - the token budget and the wall clock are always above zero;
+ * - the schedule parses in the job's zone and fires at least once.
+ *
+ * A built job is inert (`pending-confirmation`, no trust) until
+ * {@link confirmJob} records who confirmed it and on which surface.
+ */
+import { SCHEDULE_CATCH_UP_WINDOW_MS, countOccurrences, describeSchedule, generateScheduleJobId, hostTimeZone, parseScheduleSpec, upcomingFireTimes, validateTimeZone, } from '@namzu/sdk';
+import { PROVIDER_REGISTRY, readPreferences, } from '../integrations/providers/index.js';
+import { checkJobFolder } from './folder.js';
+import { expandPermissions } from './policy.js';
+import { computeProjectDigest } from './store/digest.js';
+import { JOB_NAME, jobSecurityDigest } from './store/jobs.js';
+export const DEFAULT_TOKEN_BUDGET = 500_000;
+export const DEFAULT_TIMEOUT_MS = 30 * 60_000;
+export const DEFAULT_MAX_ITERATIONS = 50;
+/** Below this many iterations a run's preview warns that it may stop unfinished. */
+export const FEW_ITERATIONS = 10;
+/** Below this token budget a run's preview warns: one model call resends the whole prompt. */
+export const FEW_TOKENS = 50_000;
+export const DEFAULT_WAIT_FOR_PROVIDER_MS = 10 * 60_000;
+export const DEFAULT_APPROVAL_TTL_MS = 7 * 24 * 60 * 60_000;
+export const DEFAULT_KEEP_SESSIONS = 20;
+export const DEFAULT_PAUSE_AFTER_FAILURES = 5;
+export class JobRequestError extends Error {
+    name = 'JobRequestError';
+}
+function positive(label, value, fallback) {
+    const v = value ?? fallback;
+    if (!Number.isSafeInteger(v) || v <= 0)
+        throw new JobRequestError(`${label} must be a whole number above zero`);
+    return v;
+}
+/** The model a job pins: `provider[/model]`, or the configured primary. */
+export function resolveJobModel(spec, home) {
+    if (spec) {
+        const [provider = '', ...rest] = spec.split('/');
+        if (!(provider in PROVIDER_REGISTRY)) {
+            throw new JobRequestError(`unknown provider "${provider}" (known: ${Object.keys(PROVIDER_REGISTRY).join(', ')})`);
+        }
+        const model = rest.join('/');
+        return {
+            provider,
+            ...(model ? { model } : { model: PROVIDER_REGISTRY[provider].defaultModel }),
+        };
+    }
+    const read = readPreferences(home);
+    const primary = read.status === 'ok' ? read.prefs.providers[0] : undefined;
+    if (!primary) {
+        throw new JobRequestError('no provider is configured; pass --model <provider>/<model> or pick one in namzu first');
+    }
+    return {
+        provider: primary.id,
+        model: primary.model ?? PROVIDER_REGISTRY[primary.id].defaultModel,
+    };
+}
+export function buildJob(request, context) {
+    if (!JOB_NAME.test(request.name)) {
+        throw new JobRequestError(`"${request.name}" is not a job name: lowercase letters, digits and dashes, starting with a letter or digit`);
+    }
+    if (!request.prompt.trim())
+        throw new JobRequestError('the prompt is empty');
+    const permissions = (() => {
+        try {
+            return expandPermissions(request.permissions);
+        }
+        catch (error) {
+            throw new JobRequestError(error instanceof Error ? error.message : String(error));
+        }
+    })();
+    if (permissions.unmatched === 'allow' &&
+        permissions.execution === 'host' &&
+        !request.allowUnattendedHost) {
+        throw new JobRequestError('unmatched: allow with execution on the host lets an unattended run do anything no rule forbids; pass --allow-unattended-host to mean it, or use --execution sandbox');
+    }
+    const folder = checkJobFolder(request.folder, {
+        namzuHome: context.paths.home,
+        ...(context.osHome ? { osHome: context.osHome } : {}),
+    });
+    if (!folder.ok)
+        throw new JobRequestError(folder.reason);
+    const extra = (permissions.additionalDirectories ?? []).map((dir) => {
+        const checked = checkJobFolder(dir, {
+            namzuHome: context.paths.home,
+            ...(context.osHome ? { osHome: context.osHome } : {}),
+        });
+        if (!checked.ok)
+            throw new JobRequestError(`additional directory: ${checked.reason}`);
+        return checked.canonical;
+    });
+    const tz = validateTimeZone(request.tz ?? hostTimeZone());
+    let spec;
+    try {
+        spec = request.spec ?? parseScheduleSpec(request.when, { now: context.now, tz });
+    }
+    catch (error) {
+        throw new JobRequestError(error instanceof Error ? error.message : String(error));
+    }
+    const limits = context.config.limits ?? {};
+    const budget = {
+        maxIterations: positive('max iterations', request.budget?.maxIterations, limits.maxIterations || DEFAULT_MAX_ITERATIONS),
+        tokenBudget: positive('the token budget', request.budget?.tokenBudget, limits.tokenBudget || DEFAULT_TOKEN_BUDGET),
+        timeoutMs: positive('the timeout', request.budget?.timeoutMs, limits.timeoutMs || DEFAULT_TIMEOUT_MS),
+        waitForProviderMs: request.budget?.waitForProviderMs ?? limits.waitForProviderMs ?? DEFAULT_WAIT_FOR_PROVIDER_MS,
+    };
+    if (budget.timeoutMs > 2_147_483_647 - 60_000)
+        throw new JobRequestError('the timeout is too long');
+    const at = context.now.toISOString();
+    return {
+        v: 1,
+        kind: 'schedule-job',
+        id: generateScheduleJobId(),
+        name: request.name,
+        revision: 0,
+        createdAt: at,
+        updatedAt: at,
+        createdBy: request.createdBy,
+        prompt: request.prompt,
+        folder: { path: request.folder, canonical: folder.canonical },
+        trust: null,
+        schedule: spec,
+        permissions: { ...permissions, ...(extra.length > 0 ? { additionalDirectories: extra } : {}) },
+        budget,
+        model: {
+            ...resolveJobModel(request.model, context.paths.home),
+            ...(request.effort ? { effort: request.effort } : {}),
+        },
+        catchUp: { windowMs: SCHEDULE_CATCH_UP_WINDOW_MS },
+        notify: {
+            finished: true,
+            failed: true,
+            awaitingApproval: true,
+            includeSummary: request.includeSummary === true,
+        },
+        failurePolicy: {
+            pauseAfterFailures: request.pauseAfterFailures ?? DEFAULT_PAUSE_AFTER_FAILURES,
+        },
+        retention: { keepSessions: request.keepSessions ?? DEFAULT_KEEP_SESSIONS },
+        state: 'pending-confirmation',
+        approvalTtlMs: request.approvalTtlMs ?? DEFAULT_APPROVAL_TTL_MS,
+        projectDigest: computeProjectDigest(folder.canonical),
+        confirmation: null,
+    };
+}
+/**
+ * Record a confirmation: trust for the job's folder (for this job only —
+ * `trust.json` is not touched), the digest of what was confirmed, and the
+ * surface it happened on. A non-interactive surface confirms nothing.
+ */
+export function confirmJob(job, surface, now, options = {}) {
+    if (surface === 'cli-noninteractive')
+        return { ...job, state: 'pending-confirmation', confirmation: null };
+    const at = now.toISOString();
+    const trusted = {
+        ...job,
+        trust: { canonical: job.folder.canonical, grantedAt: at, by: 'operator-confirmation' },
+        projectDigest: computeProjectDigest(job.folder.canonical),
+    };
+    return {
+        ...trusted,
+        state: options.paused ? 'paused' : 'active',
+        ...(options.paused ? { pausedAt: at, pausedBy: 'operator' } : {}),
+        confirmation: { at, surface, digest: jobSecurityDigest(trusted) },
+    };
+}
+/** At most how many times a day the schedule fires (the busiest of the next seven days). */
+export function runsPerDay(spec, now) {
+    if (spec.kind === 'at')
+        return 1;
+    if (spec.kind === 'every')
+        return Math.ceil((24 * 60 * 60_000) / spec.everyMs);
+    let most = 0;
+    for (let d = 0; d < 7; d++) {
+        const from = new Date(now.getTime() + d * 24 * 60 * 60_000);
+        const to = new Date(from.getTime() + 24 * 60 * 60_000);
+        most = Math.max(most, countOccurrences(spec, from, to).count);
+    }
+    return most;
+}
+function duration(ms) {
+    if (ms % 86_400_000 === 0)
+        return `${ms / 86_400_000} d`;
+    if (ms % 3_600_000 === 0)
+        return `${ms / 3_600_000} h`;
+    if (ms % 60_000 === 0)
+        return `${ms / 60_000} min`;
+    return `${Math.round(ms / 1000)} s`;
+}
+/** The job as a person is asked to confirm it. Every line is computed here, never taken from a proposal. */
+export function previewLines(job, policy, now) {
+    const tz = job.schedule.kind === 'cron' ? job.schedule.tz : hostTimeZone();
+    const next = upcomingFireTimes(job.schedule, now, 3).map((t) => new Intl.DateTimeFormat('en-GB', {
+        dateStyle: 'medium',
+        timeStyle: 'short',
+        timeZone: tz,
+    }).format(t));
+    const perDay = runsPerDay(job.schedule, now);
+    return [
+        `Job         ${job.name}`,
+        `Folder      ${job.folder.canonical}`,
+        `When        ${describeSchedule(job.schedule, { tz })}`,
+        `Next        ${next.length > 0 ? next.join(' · ') : 'never'}`,
+        `Model       ${job.model.provider}${job.model.model ? `/${job.model.model}` : ''}${job.model.effort ? ` (${job.model.effort})` : ''}`,
+        `Budget      ${job.budget.tokenBudget.toLocaleString('en-US')} tokens, ${job.budget.maxIterations} iterations, ${duration(job.budget.timeoutMs)} per run`,
+        // A proposal once set 1, read as "one post per run": the first run
+        // stopped after its first model call, with nothing done.
+        ...(job.budget.maxIterations < FEW_ITERATIONS
+            ? [
+                `Warning     ${job.budget.maxIterations} iteration${job.budget.maxIterations === 1 ? '' : 's'} is one model call${job.budget.maxIterations === 1 ? '' : ' each'} with its tool calls; most tasks need more (the default is ${DEFAULT_MAX_ITERATIONS}), and a run that runs out stops unfinished`,
+            ]
+            : []),
+        // A proposal once set 4,000 tokens for a job whose runs each took
+        // about 110,000: every model call resends the whole prompt.
+        ...(job.budget.tokenBudget < FEW_TOKENS
+            ? [
+                `Warning     ${job.budget.tokenBudget.toLocaleString('en-US')} tokens may not cover even a few model calls, each of which resends the whole prompt; a run that runs out stops unfinished (the default is ${DEFAULT_TOKEN_BUDGET.toLocaleString('en-US')})`,
+            ]
+            : []),
+        `Ceiling     up to ${perDay} run${perDay === 1 ? '' : 's'} a day × ${job.budget.tokenBudget.toLocaleString('en-US')} tokens = ${(perDay * job.budget.tokenBudget).toLocaleString('en-US')} tokens a day`,
+        `Runs on     ${job.permissions.execution === 'host' ? 'this machine (host)' : 'the sandbox'}`,
+        ...(policy.network ? ['Network     THIS RUN CAN REACH THE NETWORK'] : []),
+        ...(job.permissions.browser
+            ? [
+                `Browser     SIGNED IN AS YOU: profile ${job.permissions.browser.profile}, only ${Object.keys(job.permissions.browser.sites).join(', ')}`,
+            ]
+            : []),
+        ...(job.permissions.unmatched === 'allow'
+            ? ['Unmatched   CALLS NO RULE COVERS RUN WITHOUT ASKING']
+            : []),
+        'Permissions',
+        ...policy.lines.map((line) => `  ${line}`),
+        `Approvals   a call that waits for you expires after ${duration(job.approvalTtlMs)}`,
+    ];
+}
+//# sourceMappingURL=build.js.map

package/dist/schedule/build.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"build.js","sourceRoot":"","sources":["../../src/schedule/build.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,OAAO,EACN,2BAA2B,EAE3B,gBAAgB,EAChB,gBAAgB,EAChB,qBAAqB,EACrB,YAAY,EACZ,iBAAiB,EACjB,iBAAiB,EACjB,gBAAgB,GAChB,MAAM,YAAY,CAAA;AAEnB,OAAO,EACN,iBAAiB,EAEjB,eAAe,GACf,MAAM,oCAAoC,CAAA;AAC3C,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAA;AAE5C,OAAO,EAAgD,iBAAiB,EAAE,MAAM,aAAa,CAAA;AAC7F,OAAO,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAA;AACxD,OAAO,EAAE,QAAQ,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAA;AAG7D,MAAM,CAAC,MAAM,oBAAoB,GAAG,OAAO,CAAA;AAC3C,MAAM,CAAC,MAAM,kBAAkB,GAAG,EAAE,GAAG,MAAM,CAAA;AAC7C,MAAM,CAAC,MAAM,sBAAsB,GAAG,EAAE,CAAA;AACxC,oFAAoF;AACpF,MAAM,CAAC,MAAM,cAAc,GAAG,EAAE,CAAA;AAChC,8FAA8F;AAC9F,MAAM,CAAC,MAAM,UAAU,GAAG,MAAM,CAAA;AAChC,MAAM,CAAC,MAAM,4BAA4B,GAAG,EAAE,GAAG,MAAM,CAAA;AACvD,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,MAAM,CAAA;AAC3D,MAAM,CAAC,MAAM,qBAAqB,GAAG,EAAE,CAAA;AACvC,MAAM,CAAC,MAAM,4BAA4B,GAAG,CAAC,CAAA;AAwB7C,MAAM,OAAO,eAAgB,SAAQ,KAAK;IACvB,IAAI,GAAG,iBAAiB,CAAA;CAC1C;AAED,SAAS,QAAQ,CAAC,KAAa,EAAE,KAAyB,EAAE,QAAgB;IAC3E,MAAM,CAAC,GAAG,KAAK,IAAI,QAAQ,CAAA;IAC3B,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;QACrC,MAAM,IAAI,eAAe,CAAC,GAAG,KAAK,oCAAoC,CAAC,CAAA;IACxE,OAAO,CAAC,CAAA;AACT,CAAC;AAED,2EAA2E;AAC3E,MAAM,UAAU,eAAe,CAAC,IAAwB,EAAE,IAAa;IACtE,IAAI,IAAI,EAAE,CAAC;QACV,MAAM,CAAC,QAAQ,GAAG,EAAE,EAAE,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;QAChD,IAAI,CAAC,CAAC,QAAQ,IAAI,iBAAiB,CAAC,EAAE,CAAC;YACtC,MAAM,IAAI,eAAe,CACxB,qBAAqB,QAAQ,aAAa,MAAM,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CACtF,CAAA;QACF,CAAC;QACD,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;QAC5B,OAAO;YACN,QAAQ;YACR,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,iBAAiB,CAAC,QAAsB,CAAC,CAAC,YAAY,EAAE,CAAC;SAC1F,CAAA;IACF,CAAC;IACD,MAAM,IAAI,GAAG,eAAe,CAAC,IAAI,CAAC,CAAA;IAClC,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;IAC1E,IAAI,CAAC,OAAO,EAAE,CAAC;QACd,MAAM,IAAI,eAAe,CACxB,uFAAuF,CACvF,CAAA;IACF,CAAC;IACD,OAAO;QACN,QAAQ,EAAE,OAAO,CAAC,EAAE;QACpB,KAAK,EAAE,OAAO,CAAC,KAAK,IAAI,iBAAiB,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,YAAY;KAClE,CAAA;AACF,CAAC;AAED,MAAM,UAAU,QAAQ,CACvB,OAAmB,EACnB,OAKC;IAED,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QAClC,MAAM,IAAI,eAAe,CACxB,IAAI,OAAO,CAAC,IAAI,4FAA4F,CAC5G,CAAA;IACF,CAAC;IACD,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE;QAAE,MAAM,IAAI,eAAe,CAAC,qBAAqB,CAAC,CAAA;IAC5E,MAAM,WAAW,GAAG,CAAC,GAAG,EAAE;QACzB,IAAI,CAAC;YACJ,OAAO,iBAAiB,CAAC,OAAO,CAAC,WAAW,CAAC,CAAA;QAC9C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,MAAM,IAAI,eAAe,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAA;QAClF,CAAC;IACF,CAAC,CAAC,EAAE,CAAA;IACJ,IACC,WAAW,CAAC,SAAS,KAAK,OAAO;QACjC,WAAW,CAAC,SAAS,KAAK,MAAM;QAChC,CAAC,OAAO,CAAC,mBAAmB,EAC3B,CAAC;QACF,MAAM,IAAI,eAAe,CACxB,qKAAqK,CACrK,CAAA;IACF,CAAC;IACD,MAAM,MAAM,GAAG,cAAc,CAAC,OAAO,CAAC,MAAM,EAAE;QAC7C,SAAS,EAAE,OAAO,CAAC,KAAK,CAAC,IAAI;QAC7B,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACrD,CAAC,CAAA;IACF,IAAI,CAAC,MAAM,CAAC,EAAE;QAAE,MAAM,IAAI,eAAe,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;IACxD,MAAM,KAAK,GAAG,CAAC,WAAW,CAAC,qBAAqB,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE;QACnE,MAAM,OAAO,GAAG,cAAc,CAAC,GAAG,EAAE;YACnC,SAAS,EAAE,OAAO,CAAC,KAAK,CAAC,IAAI;YAC7B,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACrD,CAAC,CAAA;QACF,IAAI,CAAC,OAAO,CAAC,EAAE;YAAE,MAAM,IAAI,eAAe,CAAC,yBAAyB,OAAO,CAAC,MAAM,EAAE,CAAC,CAAA;QACrF,OAAO,OAAO,CAAC,SAAS,CAAA;IACzB,CAAC,CAAC,CAAA;IACF,MAAM,EAAE,GAAG,gBAAgB,CAAC,OAAO,CAAC,EAAE,IAAI,YAAY,EAAE,CAAC,CAAA;IACzD,IAAI,IAAkB,CAAA;IACtB,IAAI,CAAC;QACJ,IAAI,GAAG,OAAO,CAAC,IAAI,IAAI,iBAAiB,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,EAAE,EAAE,CAAC,CAAA;IACjF,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,MAAM,IAAI,eAAe,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAA;IAClF,CAAC;IACD,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,IAAI,EAAE,CAAA;IAC1C,MAAM,MAAM,GAAmB;QAC9B,aAAa,EAAE,QAAQ,CACtB,gBAAgB,EAChB,OAAO,CAAC,MAAM,EAAE,aAAa,EAC7B,MAAM,CAAC,aAAa,IAAI,sBAAsB,CAC9C;QACD,WAAW,EAAE,QAAQ,CACpB,kBAAkB,EAClB,OAAO,CAAC,MAAM,EAAE,WAAW,EAC3B,MAAM,CAAC,WAAW,IAAI,oBAAoB,CAC1C;QACD,SAAS,EAAE,QAAQ,CAClB,aAAa,EACb,OAAO,CAAC,MAAM,EAAE,SAAS,EACzB,MAAM,CAAC,SAAS,IAAI,kBAAkB,CACtC;QACD,iBAAiB,EAChB,OAAO,CAAC,MAAM,EAAE,iBAAiB,IAAI,MAAM,CAAC,iBAAiB,IAAI,4BAA4B;KAC9F,CAAA;IACD,IAAI,MAAM,CAAC,SAAS,GAAG,aAAa,GAAG,MAAM;QAC5C,MAAM,IAAI,eAAe,CAAC,yBAAyB,CAAC,CAAA;IACrD,MAAM,EAAE,GAAG,OAAO,CAAC,GAAG,CAAC,WAAW,EAAE,CAAA;IACpC,OAAO;QACN,CAAC,EAAE,CAAC;QACJ,IAAI,EAAE,cAAc;QACpB,EAAE,EAAE,qBAAqB,EAAE;QAC3B,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,QAAQ,EAAE,CAAC;QACX,SAAS,EAAE,EAAE;QACb,SAAS,EAAE,EAAE;QACb,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,MAAM,EAAE,EAAE,IAAI,EAAE,OAAO,CAAC,MAAM,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE;QAC7D,KAAK,EAAE,IAAI;QACX,QAAQ,EAAE,IAAI;QACd,WAAW,EAAE,EAAE,GAAG,WAAW,EAAE,GAAG,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,qBAAqB,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE;QAC9F,MAAM;QACN,KAAK,EAAE;YACN,GAAG,eAAe,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC;YACrD,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACrD;QACD,OAAO,EAAE,EAAE,QAAQ,EAAE,2BAA2B,EAAE;QAClD,MAAM,EAAE;YACP,QAAQ,EAAE,IAAI;YACd,MAAM,EAAE,IAAI;YACZ,gBAAgB,EAAE,IAAI;YACtB,cAAc,EAAE,OAAO,CAAC,cAAc,KAAK,IAAI;SAC/C;QACD,aAAa,EAAE;YACd,kBAAkB,EAAE,OAAO,CAAC,kBAAkB,IAAI,4BAA4B;SAC9E;QACD,SAAS,EAAE,EAAE,YAAY,EAAE,OAAO,CAAC,YAAY,IAAI,qBAAqB,EAAE;QAC1E,KAAK,EAAE,sBAAsB;QAC7B,aAAa,EAAE,OAAO,CAAC,aAAa,IAAI,uBAAuB;QAC/D,aAAa,EAAE,oBAAoB,CAAC,MAAM,CAAC,SAAS,CAAC;QACrD,YAAY,EAAE,IAAI;KAClB,CAAA;AACF,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,UAAU,CACzB,GAAgB,EAChB,OAA4B,EAC5B,GAAS,EACT,UAAyC,EAAE;IAE3C,IAAI,OAAO,KAAK,oBAAoB;QACnC,OAAO,EAAE,GAAG,GAAG,EAAE,KAAK,EAAE,sBAAsB,EAAE,YAAY,EAAE,IAAI,EAAE,CAAA;IACrE,MAAM,EAAE,GAAG,GAAG,CAAC,WAAW,EAAE,CAAA;IAC5B,MAAM,OAAO,GAAgB;QAC5B,GAAG,GAAG;QACN,KAAK,EAAE,EAAE,SAAS,EAAE,GAAG,CAAC,MAAM,CAAC,SAAS,EAAE,SAAS,EAAE,EAAE,EAAE,EAAE,EAAE,uBAAuB,EAAE;QACtF,aAAa,EAAE,oBAAoB,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC;KACzD,CAAA;IACD,OAAO;QACN,GAAG,OAAO;QACV,KAAK,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ;QAC3C,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,QAAQ,EAAE,UAAmB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC1E,YAAY,EAAE,EAAE,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,iBAAiB,CAAC,OAAO,CAAC,EAAE;KACjE,CAAA;AACF,CAAC;AAED,4FAA4F;AAC5F,MAAM,UAAU,UAAU,CAAC,IAAkB,EAAE,GAAS;IACvD,IAAI,IAAI,CAAC,IAAI,KAAK,IAAI;QAAE,OAAO,CAAC,CAAA;IAChC,IAAI,IAAI,CAAC,IAAI,KAAK,OAAO;QAAE,OAAO,IAAI,CAAC,IAAI,CAAC,CAAC,EAAE,GAAG,EAAE,GAAG,MAAM,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,CAAA;IAC9E,IAAI,IAAI,GAAG,CAAC,CAAA;IACZ,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QAC5B,MAAM,IAAI,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,MAAM,CAAC,CAAA;QAC3D,MAAM,EAAE,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,MAAM,CAAC,CAAA;QACtD,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,gBAAgB,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAA;IAC9D,CAAC;IACD,OAAO,IAAI,CAAA;AACZ,CAAC;AAED,SAAS,QAAQ,CAAC,EAAU;IAC3B,IAAI,EAAE,GAAG,UAAU,KAAK,CAAC;QAAE,OAAO,GAAG,EAAE,GAAG,UAAU,IAAI,CAAA;IACxD,IAAI,EAAE,GAAG,SAAS,KAAK,CAAC;QAAE,OAAO,GAAG,EAAE,GAAG,SAAS,IAAI,CAAA;IACtD,IAAI,EAAE,GAAG,MAAM,KAAK,CAAC;QAAE,OAAO,GAAG,EAAE,GAAG,MAAM,MAAM,CAAA;IAClD,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,GAAG,IAAI,CAAC,IAAI,CAAA;AACpC,CAAC;AAED,4GAA4G;AAC5G,MAAM,UAAU,YAAY,CAAC,GAAgB,EAAE,MAAyB,EAAE,GAAS;IAClF,MAAM,EAAE,GAAG,GAAG,CAAC,QAAQ,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,YAAY,EAAE,CAAA;IAC1E,MAAM,IAAI,GAAG,iBAAiB,CAAC,GAAG,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAC9D,IAAI,IAAI,CAAC,cAAc,CAAC,OAAO,EAAE;QAChC,SAAS,EAAE,QAAQ;QACnB,SAAS,EAAE,OAAO;QAClB,QAAQ,EAAE,EAAE;KACZ,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CACZ,CAAA;IACD,MAAM,MAAM,GAAG,UAAU,CAAC,GAAG,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAA;IAC5C,OAAO;QACN,eAAe,GAAG,CAAC,IAAI,EAAE;QACzB,eAAe,GAAG,CAAC,MAAM,CAAC,SAAS,EAAE;QACrC,eAAe,gBAAgB,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE,EAAE,EAAE,CAAC,EAAE;QACvD,eAAe,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE;QAC7D,eAAe,GAAG,CAAC,KAAK,CAAC,QAAQ,GAAG,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;QACrI,eAAe,GAAG,CAAC,MAAM,CAAC,WAAW,CAAC,cAAc,CAAC,OAAO,CAAC,YAAY,GAAG,CAAC,MAAM,CAAC,aAAa,gBAAgB,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,UAAU;QACzJ,mEAAmE;QACnE,yDAAyD;QACzD,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,aAAa,GAAG,cAAc;YAC5C,CAAC,CAAC;gBACA,eAAe,GAAG,CAAC,MAAM,CAAC,aAAa,aAAa,GAAG,CAAC,MAAM,CAAC,aAAa,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,qBAAqB,GAAG,CAAC,MAAM,CAAC,aAAa,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,8DAA8D,sBAAsB,6CAA6C;aAChS;YACF,CAAC,CAAC,EAAE,CAAC;QACN,kEAAkE;QAClE,4DAA4D;QAC5D,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,WAAW,GAAG,UAAU;YACtC,CAAC,CAAC;gBACA,eAAe,GAAG,CAAC,MAAM,CAAC,WAAW,CAAC,cAAc,CAAC,OAAO,CAAC,8IAA8I,oBAAoB,CAAC,cAAc,CAAC,OAAO,CAAC,GAAG;aAC1P;YACF,CAAC,CAAC,EAAE,CAAC;QACN,qBAAqB,MAAM,OAAO,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,YAAY,GAAG,CAAC,MAAM,CAAC,WAAW,CAAC,cAAc,CAAC,OAAO,CAAC,aAAa,CAAC,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,cAAc,CAAC,OAAO,CAAC,eAAe;QACxM,eAAe,GAAG,CAAC,WAAW,CAAC,SAAS,KAAK,MAAM,CAAC,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,aAAa,EAAE;QAC7F,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,4CAA4C,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACzE,GAAG,CAAC,GAAG,CAAC,WAAW,CAAC,OAAO;YAC1B,CAAC,CAAC;gBACA,yCAAyC,GAAG,CAAC,WAAW,CAAC,OAAO,CAAC,OAAO,UAAU,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;aACzI;YACF,CAAC,CAAC,EAAE,CAAC;QACN,GAAG,CAAC,GAAG,CAAC,WAAW,CAAC,SAAS,KAAK,OAAO;YACxC,CAAC,CAAC,CAAC,qDAAqD,CAAC;YACzD,CAAC,CAAC,EAAE,CAAC;QACN,aAAa;QACb,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC;QAC1C,uDAAuD,QAAQ,CAAC,GAAG,CAAC,aAAa,CAAC,EAAE;KACpF,CAAA;AACF,CAAC"}

package/dist/schedule/changes.d.ts

@@ -0,0 +1,22 @@
+/**
+ * What changed in a job since someone last confirmed it, for the person
+ * confirming it again.
+ *
+ * An edit is confirmed again whole, and the preview is long: a site added to
+ * a browser grant was one line among forty. The lines that differ from the
+ * version last confirmed are shown on their own, above the question, as
+ * `+ added` and `- removed`. An edit saved without a terminal (`--yes`) is
+ * confirmed later, by `schedule confirm` or the TUI, so the edit records its
+ * changes in the job's history and the confirmation reads them back.
+ */
+import type { CompiledJobPolicy } from './policy.js';
+import type { ScheduleHistoryRecord, ScheduleJob } from './types.js';
+/** The preview as compared: without the next fire times, which change by the minute. */
+export declare function confirmationView(job: ScheduleJob, policy: CompiledJobPolicy, now: Date): string[];
+/** `+ line` for each line only in `after`, `- line` for each only in `before`. */
+export declare function describeChanges(before: readonly string[], after: readonly string[]): string[];
+/** The changes recorded by edits saved since the job was last confirmed, oldest first. */
+export declare function changesSinceConfirmed(history: readonly ScheduleHistoryRecord[]): string[];
+/** The block shown above the question, or nothing. */
+export declare function changesBlock(changes: readonly string[]): string[];
+//# sourceMappingURL=changes.d.ts.map

package/dist/schedule/changes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"changes.d.ts","sourceRoot":"","sources":["../../src/schedule/changes.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAGH,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAA;AACpD,OAAO,KAAK,EAAE,qBAAqB,EAAE,WAAW,EAAE,MAAM,YAAY,CAAA;AAEpE,wFAAwF;AACxF,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,WAAW,EAAE,MAAM,EAAE,iBAAiB,EAAE,GAAG,EAAE,IAAI,GAAG,MAAM,EAAE,CAKjG;AAED,kFAAkF;AAClF,wBAAgB,eAAe,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,EAAE,KAAK,EAAE,SAAS,MAAM,EAAE,GAAG,MAAM,EAAE,CAO7F;AAYD,0FAA0F;AAC1F,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,SAAS,qBAAqB,EAAE,GAAG,MAAM,EAAE,CAQzF;AAED,sDAAsD;AACtD,wBAAgB,YAAY,CAAC,OAAO,EAAE,SAAS,MAAM,EAAE,GAAG,MAAM,EAAE,CAIjE"}

package/dist/schedule/changes.js

@@ -0,0 +1,55 @@
+/**
+ * What changed in a job since someone last confirmed it, for the person
+ * confirming it again.
+ *
+ * An edit is confirmed again whole, and the preview is long: a site added to
+ * a browser grant was one line among forty. The lines that differ from the
+ * version last confirmed are shown on their own, above the question, as
+ * `+ added` and `- removed`. An edit saved without a terminal (`--yes`) is
+ * confirmed later, by `schedule confirm` or the TUI, so the edit records its
+ * changes in the job's history and the confirmation reads them back.
+ */
+import { previewLines } from './build.js';
+/** The preview as compared: without the next fire times, which change by the minute. */
+export function confirmationView(job, policy, now) {
+    return [
+        ...previewLines(job, policy, now).filter((line) => !line.startsWith('Next ')),
+        ...job.prompt.split('\n').map((line) => `Prompt  ${line}`),
+    ];
+}
+/** `+ line` for each line only in `after`, `- line` for each only in `before`. */
+export function describeChanges(before, after) {
+    const was = new Set(before.map((line) => line.trim()));
+    const now = new Set(after.map((line) => line.trim()));
+    return [
+        ...before.filter((line) => !now.has(line.trim())).map((line) => `- ${line.trim()}`),
+        ...after.filter((line) => !was.has(line.trim())).map((line) => `+ ${line.trim()}`),
+    ];
+}
+/** Records that mean a person confirmed the job as it then stood. */
+function confirmedHere(record) {
+    if (record.kind !== 'job')
+        return false;
+    if (record.action === 'confirmed')
+        return true;
+    return ((record.action === 'created' || record.action === 'edited') &&
+        record.by !== 'cli-noninteractive');
+}
+/** The changes recorded by edits saved since the job was last confirmed, oldest first. */
+export function changesSinceConfirmed(history) {
+    const out = [];
+    for (const record of history) {
+        if (confirmedHere(record))
+            out.length = 0;
+        else if (record.kind === 'job' && record.action === 'edited' && record.changes)
+            out.push(...record.changes);
+    }
+    return out;
+}
+/** The block shown above the question, or nothing. */
+export function changesBlock(changes) {
+    return changes.length === 0
+        ? []
+        : ['Changed since it was last confirmed', ...changes.map((line) => `  ${line}`)];
+}
+//# sourceMappingURL=changes.js.map

package/dist/schedule/changes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"changes.js","sourceRoot":"","sources":["../../src/schedule/changes.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,YAAY,CAAA;AAIzC,wFAAwF;AACxF,MAAM,UAAU,gBAAgB,CAAC,GAAgB,EAAE,MAAyB,EAAE,GAAS;IACtF,OAAO;QACN,GAAG,YAAY,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;QAC7E,GAAG,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,WAAW,IAAI,EAAE,CAAC;KAC1D,CAAA;AACF,CAAC;AAED,kFAAkF;AAClF,MAAM,UAAU,eAAe,CAAC,MAAyB,EAAE,KAAwB;IAClF,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAA;IACtD,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAA;IACrD,OAAO;QACN,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,KAAK,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC;QACnF,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,KAAK,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC;KAClF,CAAA;AACF,CAAC;AAED,qEAAqE;AACrE,SAAS,aAAa,CAAC,MAA6B;IACnD,IAAI,MAAM,CAAC,IAAI,KAAK,KAAK;QAAE,OAAO,KAAK,CAAA;IACvC,IAAI,MAAM,CAAC,MAAM,KAAK,WAAW;QAAE,OAAO,IAAI,CAAA;IAC9C,OAAO,CACN,CAAC,MAAM,CAAC,MAAM,KAAK,SAAS,IAAI,MAAM,CAAC,MAAM,KAAK,QAAQ,CAAC;QAC3D,MAAM,CAAC,EAAE,KAAK,oBAAoB,CAClC,CAAA;AACF,CAAC;AAED,0FAA0F;AAC1F,MAAM,UAAU,qBAAqB,CAAC,OAAyC;IAC9E,MAAM,GAAG,GAAa,EAAE,CAAA;IACxB,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC9B,IAAI,aAAa,CAAC,MAAM,CAAC;YAAE,GAAG,CAAC,MAAM,GAAG,CAAC,CAAA;aACpC,IAAI,MAAM,CAAC,IAAI,KAAK,KAAK,IAAI,MAAM,CAAC,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,OAAO;YAC7E,GAAG,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,OAAO,CAAC,CAAA;IAC7B,CAAC;IACD,OAAO,GAAG,CAAA;AACX,CAAC;AAED,sDAAsD;AACtD,MAAM,UAAU,YAAY,CAAC,OAA0B;IACtD,OAAO,OAAO,CAAC,MAAM,KAAK,CAAC;QAC1B,CAAC,CAAC,EAAE;QACJ,CAAC,CAAC,CAAC,qCAAqC,EAAE,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,CAAA;AAClF,CAAC"}

package/dist/schedule/commands/add.d.ts

@@ -0,0 +1,24 @@
+/**
+ * `schedule add`, `schedule edit` and `schedule confirm`.
+ *
+ * A job is confirmed only by a person: on a terminal here, or in the TUI's
+ * `/schedule` panel. Without a terminal (`--yes`, a script, a model's own
+ * bash call) the job is written INERT — `pending-confirmation` — and the
+ * daemon will not run it until someone confirms it. `--yes` means "do not
+ * ask", never "consider it confirmed".
+ */
+import type { CommandContext } from '../../commands/types.js';
+import { type PermissionInput } from '../policy.js';
+import { type ParsedArgs } from './args.js';
+export declare const ADD_FLAGS: readonly ["home", "prompt", "prompt-file", "when", "folder", "permissions", "unmatched", "execution", "tz", "model", "effort", "max-iterations", "token-budget", "timeout", "wait-for-provider", "approval-ttl", "keep-sessions", "pause-after-failures", "add-dir", "paused!", "yes!", "allow-unattended-host!", "notify-summary!", "browser", "browser-site", "browser-headed!", "no-browser!"];
+/**
+ * `--browser <profile>`, `--browser-site <site>=read|ask|act` (repeatable)
+ * and `--browser-headed`, over the grant a job already has (an edit). On an
+ * edit a site is added or its level changed, `<site>=none` takes it off,
+ * and `--no-browser` drops the grant. `undefined`: no grant.
+ */
+export declare function browserInput(args: ParsedArgs, base?: PermissionInput['browser']): PermissionInput['browser'] | undefined;
+export declare function addCommand(ctx: CommandContext, argv: readonly string[]): Promise<number>;
+export declare function editCommand(ctx: CommandContext, argv: readonly string[]): Promise<number>;
+export declare function confirmCommand(ctx: CommandContext, argv: readonly string[]): Promise<number>;
+//# sourceMappingURL=add.d.ts.map

package/dist/schedule/commands/add.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"add.d.ts","sourceRoot":"","sources":["../../../src/schedule/commands/add.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAIH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAA;AAa7D,OAAO,EAAE,KAAK,eAAe,EAAkC,MAAM,cAAc,CAAA;AAInF,OAAO,EACN,KAAK,UAAU,EAQf,MAAM,WAAW,CAAA;AAGlB,eAAO,MAAM,SAAS,mYA4BZ,CAAA;AAEV;;;;;GAKG;AACH,wBAAgB,YAAY,CAC3B,IAAI,EAAE,UAAU,EAChB,IAAI,CAAC,EAAE,eAAe,CAAC,SAAS,CAAC,GAC/B,eAAe,CAAC,SAAS,CAAC,GAAG,SAAS,CA+CxC;AA6OD,wBAAsB,UAAU,CAAC,GAAG,EAAE,cAAc,EAAE,IAAI,EAAE,SAAS,MAAM,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,CAmD9F;AAED,wBAAsB,WAAW,CAAC,GAAG,EAAE,cAAc,EAAE,IAAI,EAAE,SAAS,MAAM,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,CAyE/F;AAED,wBAAsB,cAAc,CACnC,GAAG,EAAE,cAAc,EACnB,IAAI,EAAE,SAAS,MAAM,EAAE,GACrB,OAAO,CAAC,MAAM,CAAC,CA6CjB"}