@namzu/cli 29.0.1 → 30.0.0

package/dist/schedule/daemon/retention.js

@@ -0,0 +1,46 @@
+/**
+ * Every run is its own session, and a job every minute would leave 1 440 a
+ * day in the folder's `/resume` list. After each completed run the daemon
+ * ARCHIVES (never deletes) this job's completed-run sessions beyond the
+ * newest `retention.keepSessions` — `session_updated{ archived: true }`, the
+ * same read-only tombstone `/archive` writes. Parked, failed and interrupted
+ * runs are never archived here. `namzu schedule prune` is the only thing that
+ * deletes.
+ */
+import { asSessionId } from '@namzu/sdk';
+import { archiveConversation, closeSessions, openSessions, } from '../../integrations/sessions/store.js';
+import { foldHistory, readHistory } from '../store/history.js';
+/** The session ids retention would archive now. */
+export function sessionsToArchive(paths, job, state) {
+    const done = new Set(state.archivedSessions ?? []);
+    const completed = foldHistory(readHistory(paths, job.id)).filter((r) => r.kind === 'run' && r.status === 'completed' && typeof r.sessionId === 'string');
+    return completed
+        .slice(Math.max(0, job.retention.keepSessions))
+        .map((r) => r.sessionId)
+        .filter((id) => !done.has(id));
+}
+/** Archive what retention allows. Returns the ids archived (or already archived). */
+export async function archiveOldRuns(paths, job, state) {
+    const ids = sessionsToArchive(paths, job, state);
+    if (ids.length === 0)
+        return [];
+    const sessions = await openSessions(job.folder.canonical, { stateRoot: paths.home });
+    const archived = [];
+    try {
+        for (const id of ids) {
+            try {
+                await archiveConversation(sessions, asSessionId(id));
+                archived.push(id);
+            }
+            catch (error) {
+                if (error instanceof Error && /already archived/.test(error.message))
+                    archived.push(id);
+            }
+        }
+    }
+    finally {
+        closeSessions(sessions);
+    }
+    return archived;
+}
+//# sourceMappingURL=retention.js.map

package/dist/schedule/daemon/retention.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"retention.js","sourceRoot":"","sources":["../../../src/schedule/daemon/retention.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAA;AACxC,OAAO,EACN,mBAAmB,EACnB,aAAa,EACb,YAAY,GACZ,MAAM,sCAAsC,CAAA;AAE7C,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAA;AAG9D,mDAAmD;AACnD,MAAM,UAAU,iBAAiB,CAChC,KAAoB,EACpB,GAAgB,EAChB,KAAiD;IAEjD,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,gBAAgB,IAAI,EAAE,CAAC,CAAA;IAClD,MAAM,SAAS,GAAG,WAAW,CAAC,WAAW,CAAC,KAAK,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAC/D,CAAC,CAAC,EAA2C,EAAE,CAC9C,CAAC,CAAC,IAAI,KAAK,KAAK,IAAI,CAAC,CAAC,MAAM,KAAK,WAAW,IAAI,OAAO,CAAC,CAAC,SAAS,KAAK,QAAQ,CAChF,CAAA;IACD,OAAO,SAAS;SACd,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC;SAC9C,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAmB,CAAC;SACjC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAA;AAChC,CAAC;AAED,qFAAqF;AACrF,MAAM,CAAC,KAAK,UAAU,cAAc,CACnC,KAAoB,EACpB,GAAgB,EAChB,KAAiD;IAEjD,MAAM,GAAG,GAAG,iBAAiB,CAAC,KAAK,EAAE,GAAG,EAAE,KAAK,CAAC,CAAA;IAChD,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAA;IAC/B,MAAM,QAAQ,GAAG,MAAM,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,CAAA;IACpF,MAAM,QAAQ,GAAa,EAAE,CAAA;IAC7B,IAAI,CAAC;QACJ,KAAK,MAAM,EAAE,IAAI,GAAG,EAAE,CAAC;YACtB,IAAI,CAAC;gBACJ,MAAM,mBAAmB,CAAC,QAAQ,EAAE,WAAW,CAAC,EAAE,CAAC,CAAC,CAAA;gBACpD,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;YAClB,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBAChB,IAAI,KAAK,YAAY,KAAK,IAAI,kBAAkB,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC;oBAAE,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;YACxF,CAAC;QACF,CAAC;IACF,CAAC;YAAS,CAAC;QACV,aAAa,CAAC,QAAQ,CAAC,CAAA;IACxB,CAAC;IACD,OAAO,QAAQ,CAAA;AAChB,CAAC"}

package/dist/schedule/daemon/sessions.d.ts

@@ -0,0 +1,23 @@
+/**
+ * What the daemon reads about a run's session: whether its lease is held,
+ * and how its turn ended. Read-only, from the log and the lease files; the
+ * daemon writes a session only to abandon an expired park and to archive old
+ * runs.
+ */
+import { type ConversationFacts } from '../../integrations/sessions/store.js';
+export interface RunSessionRef {
+    readonly home: string;
+    readonly projectSlug: string;
+    readonly sessionId: string;
+}
+/** Whether somebody holds the session's writer lease right now. */
+export declare function sessionLeaseLive(ref: RunSessionRef, now?: number): Promise<boolean>;
+export declare function sessionFacts(ref: RunSessionRef): Promise<ConversationFacts | null>;
+/** How a settled turn ended: `completed`, `failed`, or `undefined` if the log does not say. */
+export declare function turnOutcome(facts: ConversationFacts, turnId: string | undefined): {
+    status: 'completed' | 'failed';
+    reason?: string;
+} | undefined;
+/** Close a parked turn nobody answered in time (`turn_failed{ abandoned }`). */
+export declare function abandonParkedTurn(ref: RunSessionRef, turnId: string, reason: string): Promise<void>;
+//# sourceMappingURL=sessions.d.ts.map

package/dist/schedule/daemon/sessions.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sessions.d.ts","sourceRoot":"","sources":["../../../src/schedule/daemon/sessions.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAWH,OAAO,EAAE,KAAK,iBAAiB,EAAyB,MAAM,sCAAsC,CAAA;AAEpG,MAAM,WAAW,aAAa;IAC7B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAA;IAC5B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;CAC1B;AAMD,mEAAmE;AACnE,wBAAsB,gBAAgB,CAAC,GAAG,EAAE,aAAa,EAAE,GAAG,SAAa,GAAG,OAAO,CAAC,OAAO,CAAC,CAO7F;AAED,wBAAsB,YAAY,CAAC,GAAG,EAAE,aAAa,GAAG,OAAO,CAAC,iBAAiB,GAAG,IAAI,CAAC,CAUxF;AAED,+FAA+F;AAC/F,wBAAgB,WAAW,CAC1B,KAAK,EAAE,iBAAiB,EACxB,MAAM,EAAE,MAAM,GAAG,SAAS,GACxB;IAAE,MAAM,EAAE,WAAW,GAAG,QAAQ,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,SAAS,CAiBjE;AAED,gFAAgF;AAChF,wBAAsB,iBAAiB,CACtC,GAAG,EAAE,aAAa,EAClB,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,MAAM,GACZ,OAAO,CAAC,IAAI,CAAC,CAGf"}

package/dist/schedule/daemon/sessions.js

@@ -0,0 +1,52 @@
+/**
+ * What the daemon reads about a run's session: whether its lease is held,
+ * and how its turn ended. Read-only, from the log and the lease files; the
+ * daemon writes a session only to abandon an expired park and to archive old
+ * runs.
+ */
+import { DiskSessionLog, SessionPaths, abandonTurn, asSessionId, isLeaseLive, readSessionLease, } from '@namzu/sdk';
+import { readConversationFacts } from '../../integrations/sessions/store.js';
+function pathsOf(ref) {
+    return new SessionPaths({ home: ref.home, slug: ref.projectSlug });
+}
+/** Whether somebody holds the session's writer lease right now. */
+export async function sessionLeaseLive(ref, now = Date.now()) {
+    const dir = pathsOf(ref).sessionDir({ sessionId: asSessionId(ref.sessionId) });
+    try {
+        return isLeaseLive(await readSessionLease(dir), now);
+    }
+    catch {
+        return false;
+    }
+}
+export async function sessionFacts(ref) {
+    try {
+        return await readConversationFacts({ paths: pathsOf(ref) }, asSessionId(ref.sessionId), 'tolerant');
+    }
+    catch {
+        return null;
+    }
+}
+/** How a settled turn ended: `completed`, `failed`, or `undefined` if the log does not say. */
+export function turnOutcome(facts, turnId) {
+    for (let i = facts.records.length - 1; i >= 0; i--) {
+        const record = facts.records[i];
+        if (turnId && record.turnId !== turnId)
+            continue;
+        if (record.type === 'turn_completed')
+            return { status: 'completed' };
+        if (record.type === 'turn_failed') {
+            return {
+                status: 'failed',
+                ...(record.error?.message ? { reason: record.error.message } : {}),
+            };
+        }
+    }
+    return undefined;
+}
+/** Close a parked turn nobody answered in time (`turn_failed{ abandoned }`). */
+export async function abandonParkedTurn(ref, turnId, reason) {
+    const log = DiskSessionLog.at(pathsOf(ref), { sessionId: asSessionId(ref.sessionId) });
+    await abandonTurn(asSessionId(ref.sessionId), turnId, reason, { log });
+}
+//# sourceMappingURL=sessions.js.map

package/dist/schedule/daemon/sessions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sessions.js","sourceRoot":"","sources":["../../../src/schedule/daemon/sessions.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EACN,cAAc,EACd,YAAY,EAEZ,WAAW,EACX,WAAW,EACX,WAAW,EACX,gBAAgB,GAChB,MAAM,YAAY,CAAA;AACnB,OAAO,EAA0B,qBAAqB,EAAE,MAAM,sCAAsC,CAAA;AAQpG,SAAS,OAAO,CAAC,GAAkB;IAClC,OAAO,IAAI,YAAY,CAAC,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,IAAI,EAAE,GAAG,CAAC,WAAW,EAAE,CAAC,CAAA;AACnE,CAAC;AAED,mEAAmE;AACnE,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,GAAkB,EAAE,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE;IAC1E,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,UAAU,CAAC,EAAE,SAAS,EAAE,WAAW,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC,CAAA;IAC9E,IAAI,CAAC;QACJ,OAAO,WAAW,CAAC,MAAM,gBAAgB,CAAC,GAAG,CAAC,EAAE,GAAG,CAAC,CAAA;IACrD,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,KAAK,CAAA;IACb,CAAC;AACF,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,GAAkB;IACpD,IAAI,CAAC;QACJ,OAAO,MAAM,qBAAqB,CACjC,EAAE,KAAK,EAAE,OAAO,CAAC,GAAG,CAAC,EAAE,EACvB,WAAW,CAAC,GAAG,CAAC,SAAS,CAAC,EAC1B,UAAU,CACV,CAAA;IACF,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,IAAI,CAAA;IACZ,CAAC;AACF,CAAC;AAED,+FAA+F;AAC/F,MAAM,UAAU,WAAW,CAC1B,KAAwB,EACxB,MAA0B;IAE1B,KAAK,IAAI,CAAC,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QACpD,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC,CAI7B,CAAA;QACD,IAAI,MAAM,IAAI,MAAM,CAAC,MAAM,KAAK,MAAM;YAAE,SAAQ;QAChD,IAAI,MAAM,CAAC,IAAI,KAAK,gBAAgB;YAAE,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,CAAA;QACpE,IAAI,MAAM,CAAC,IAAI,KAAK,aAAa,EAAE,CAAC;YACnC,OAAO;gBACN,MAAM,EAAE,QAAQ;gBAChB,GAAG,CAAC,MAAM,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAClE,CAAA;QACF,CAAC;IACF,CAAC;IACD,OAAO,SAAS,CAAA;AACjB,CAAC;AAED,gFAAgF;AAChF,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACtC,GAAkB,EAClB,MAAc,EACd,MAAc;IAEd,MAAM,GAAG,GAAG,cAAc,CAAC,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,EAAE,SAAS,EAAE,WAAW,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC,CAAA;IACtF,MAAM,WAAW,CAAC,WAAW,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,MAAgB,EAAE,MAAM,EAAE,EAAE,GAAG,EAAE,CAAC,CAAA;AACjF,CAAC"}

package/dist/schedule/env.d.ts

@@ -0,0 +1,32 @@
+/**
+ * The environment a scheduled run starts with.
+ *
+ * A service does not see what an interactive shell exported, so the daemon
+ * builds each child's environment from an allowlist rather than passing its
+ * own along; `daemon.env` (0600, `KEY=value` lines) supplies credentials. Its
+ * values reach PROVIDER DISCOVERY only — the fire child reads the file itself
+ * and hands the variables to discovery as an object, never into `process.env`,
+ * where the bash tool would inherit whatever name a credential happened to
+ * have.
+ */
+/** Variables a child inherits from the daemon. Nothing else. */
+export declare const CHILD_ENV_ALLOWLIST: readonly ["HOME", "USER", "LOGNAME", "LANG", "LC_ALL", "TZ", "TMPDIR", "SHELL", "XDG_RUNTIME_DIR", "XDG_CONFIG_HOME", "DBUS_SESSION_BUS_ADDRESS", "WSL_DISTRO_NAME", "WSL_INTEROP", "SystemRoot", "USERPROFILE", "APPDATA", "LOCALAPPDATA", "DISPLAY", "WAYLAND_DISPLAY", "XAUTHORITY"];
+/**
+ * `PATH` without Windows drive mounts: under WSL a failed lookup through
+ * `/mnt/c` costs seconds. The drives are the one-letter directories under
+ * the mount root `/etc/wsl.conf` sets (`[automount] root`, `/mnt/` by default).
+ */
+export declare function stripWindowsMounts(path: string | undefined, mountRoot?: string): string;
+/** The environment of a fire child. `mountRoot` is for a test; absent reads `/etc/wsl.conf`. */
+export declare function childEnvironment(source: NodeJS.ProcessEnv, namzuHome: string, mountRoot?: string): NodeJS.ProcessEnv;
+export interface DaemonEnvFile {
+    readonly values: Readonly<Record<string, string>>;
+    readonly warnings: readonly string[];
+}
+/**
+ * Read `daemon.env`: `KEY=value` per line, `#` comments, optional matching
+ * quotes around a value. A file others can read is reported, not refused:
+ * refusing would stop every job over a mode bit.
+ */
+export declare function readDaemonEnv(path: string): DaemonEnvFile;
+//# sourceMappingURL=env.d.ts.map

package/dist/schedule/env.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"env.d.ts","sourceRoot":"","sources":["../../src/schedule/env.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAKH,gEAAgE;AAChE,eAAO,MAAM,mBAAmB,yRAuBtB,CAAA;AAEV;;;;GAIG;AACH,wBAAgB,kBAAkB,CACjC,IAAI,EAAE,MAAM,GAAG,SAAS,EACxB,SAAS,GAAE,MAA2B,GACpC,MAAM,CAOR;AAED,gGAAgG;AAChG,wBAAgB,gBAAgB,CAC/B,MAAM,EAAE,MAAM,CAAC,UAAU,EACzB,SAAS,EAAE,MAAM,EACjB,SAAS,CAAC,EAAE,MAAM,GAChB,MAAM,CAAC,UAAU,CAUnB;AAED,MAAM,WAAW,aAAa;IAC7B,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAA;IACjD,QAAQ,CAAC,QAAQ,EAAE,SAAS,MAAM,EAAE,CAAA;CACpC;AAED;;;;GAIG;AACH,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG,aAAa,CA8BzD"}

package/dist/schedule/env.js

@@ -0,0 +1,106 @@
+/**
+ * The environment a scheduled run starts with.
+ *
+ * A service does not see what an interactive shell exported, so the daemon
+ * builds each child's environment from an allowlist rather than passing its
+ * own along; `daemon.env` (0600, `KEY=value` lines) supplies credentials. Its
+ * values reach PROVIDER DISCOVERY only — the fire child reads the file itself
+ * and hands the variables to discovery as an object, never into `process.env`,
+ * where the bash tool would inherit whatever name a credential happened to
+ * have.
+ */
+import { readFileSync, statSync } from 'node:fs';
+import { readWslMountRoot } from '../context/environment.js';
+/** Variables a child inherits from the daemon. Nothing else. */
+export const CHILD_ENV_ALLOWLIST = [
+    'HOME',
+    'USER',
+    'LOGNAME',
+    'LANG',
+    'LC_ALL',
+    'TZ',
+    'TMPDIR',
+    'SHELL',
+    'XDG_RUNTIME_DIR',
+    'XDG_CONFIG_HOME',
+    'DBUS_SESSION_BUS_ADDRESS',
+    'WSL_DISTRO_NAME',
+    'WSL_INTEROP',
+    'SystemRoot',
+    'USERPROFILE',
+    'APPDATA',
+    'LOCALAPPDATA',
+    // A job with `browser.headed` opens a window: X11, Wayland (WSLg sets
+    // both), and the X authority file a display may need.
+    'DISPLAY',
+    'WAYLAND_DISPLAY',
+    'XAUTHORITY',
+];
+/**
+ * `PATH` without Windows drive mounts: under WSL a failed lookup through
+ * `/mnt/c` costs seconds. The drives are the one-letter directories under
+ * the mount root `/etc/wsl.conf` sets (`[automount] root`, `/mnt/` by default).
+ */
+export function stripWindowsMounts(path, mountRoot = readWslMountRoot()) {
+    const root = mountRoot.replace(/[.*+?^${}()|[\]\\]/g, '\\$&');
+    const drive = new RegExp(`^${root}[a-z](/|$)`, 'i');
+    return (path ?? '')
+        .split(':')
+        .filter((entry) => entry !== '' && !drive.test(entry))
+        .join(':');
+}
+/** The environment of a fire child. `mountRoot` is for a test; absent reads `/etc/wsl.conf`. */
+export function childEnvironment(source, namzuHome, mountRoot) {
+    const env = {};
+    for (const key of CHILD_ENV_ALLOWLIST)
+        if (source[key] !== undefined)
+            env[key] = source[key];
+    env.PATH =
+        process.platform === 'win32'
+            ? (source.PATH ?? source.Path ?? '')
+            : stripWindowsMounts(source.PATH, mountRoot);
+    if (!env.PATH)
+        env.PATH = '/usr/local/bin:/usr/bin:/bin';
+    env.NAMZU_HOME = namzuHome;
+    return env;
+}
+/**
+ * Read `daemon.env`: `KEY=value` per line, `#` comments, optional matching
+ * quotes around a value. A file others can read is reported, not refused:
+ * refusing would stop every job over a mode bit.
+ */
+export function readDaemonEnv(path) {
+    let text;
+    try {
+        text = readFileSync(path, 'utf8');
+    }
+    catch {
+        return { values: {}, warnings: [] };
+    }
+    const warnings = [];
+    try {
+        const mode = statSync(path).mode & 0o077;
+        if (mode !== 0 && process.platform !== 'win32') {
+            warnings.push(`${path} can be read by other users; run chmod 600 on it`);
+        }
+    }
+    catch { }
+    const values = {};
+    text.split(/\r?\n/).forEach((raw, index) => {
+        const line = raw.trim();
+        if (!line || line.startsWith('#'))
+            return;
+        const match = /^(?:export\s+)?([A-Za-z_][A-Za-z0-9_]*)\s*=\s*(.*)$/.exec(line);
+        if (!match) {
+            warnings.push(`${path}:${index + 1} is not KEY=value; ignored`);
+            return;
+        }
+        let value = match[2] ?? '';
+        if (value.length >= 2 && (value[0] === '"' || value[0] === "'") && value.at(-1) === value[0]) {
+            value = value.slice(1, -1);
+        }
+        values[match[1]] = value;
+    });
+    return { values, warnings };
+}
+//# sourceMappingURL=env.js.map

package/dist/schedule/env.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"env.js","sourceRoot":"","sources":["../../src/schedule/env.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAA;AAChD,OAAO,EAAE,gBAAgB,EAAE,MAAM,2BAA2B,CAAA;AAE5D,gEAAgE;AAChE,MAAM,CAAC,MAAM,mBAAmB,GAAG;IAClC,MAAM;IACN,MAAM;IACN,SAAS;IACT,MAAM;IACN,QAAQ;IACR,IAAI;IACJ,QAAQ;IACR,OAAO;IACP,iBAAiB;IACjB,iBAAiB;IACjB,0BAA0B;IAC1B,iBAAiB;IACjB,aAAa;IACb,YAAY;IACZ,aAAa;IACb,SAAS;IACT,cAAc;IACd,sEAAsE;IACtE,sDAAsD;IACtD,SAAS;IACT,iBAAiB;IACjB,YAAY;CACH,CAAA;AAEV;;;;GAIG;AACH,MAAM,UAAU,kBAAkB,CACjC,IAAwB,EACxB,YAAoB,gBAAgB,EAAE;IAEtC,MAAM,IAAI,GAAG,SAAS,CAAC,OAAO,CAAC,qBAAqB,EAAE,MAAM,CAAC,CAAA;IAC7D,MAAM,KAAK,GAAG,IAAI,MAAM,CAAC,IAAI,IAAI,YAAY,EAAE,GAAG,CAAC,CAAA;IACnD,OAAO,CAAC,IAAI,IAAI,EAAE,CAAC;SACjB,KAAK,CAAC,GAAG,CAAC;SACV,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;SACrD,IAAI,CAAC,GAAG,CAAC,CAAA;AACZ,CAAC;AAED,gGAAgG;AAChG,MAAM,UAAU,gBAAgB,CAC/B,MAAyB,EACzB,SAAiB,EACjB,SAAkB;IAElB,MAAM,GAAG,GAAsB,EAAE,CAAA;IACjC,KAAK,MAAM,GAAG,IAAI,mBAAmB;QAAE,IAAI,MAAM,CAAC,GAAG,CAAC,KAAK,SAAS;YAAE,GAAG,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,CAAA;IAC5F,GAAG,CAAC,IAAI;QACP,OAAO,CAAC,QAAQ,KAAK,OAAO;YAC3B,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;YACpC,CAAC,CAAC,kBAAkB,CAAC,MAAM,CAAC,IAAI,EAAE,SAAS,CAAC,CAAA;IAC9C,IAAI,CAAC,GAAG,CAAC,IAAI;QAAE,GAAG,CAAC,IAAI,GAAG,8BAA8B,CAAA;IACxD,GAAG,CAAC,UAAU,GAAG,SAAS,CAAA;IAC1B,OAAO,GAAG,CAAA;AACX,CAAC;AAOD;;;;GAIG;AACH,MAAM,UAAU,aAAa,CAAC,IAAY;IACzC,IAAI,IAAY,CAAA;IAChB,IAAI,CAAC;QACJ,IAAI,GAAG,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAA;IAClC,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAA;IACpC,CAAC;IACD,MAAM,QAAQ,GAAa,EAAE,CAAA;IAC7B,IAAI,CAAC;QACJ,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,IAAI,GAAG,KAAK,CAAA;QACxC,IAAI,IAAI,KAAK,CAAC,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;YAChD,QAAQ,CAAC,IAAI,CAAC,GAAG,IAAI,kDAAkD,CAAC,CAAA;QACzE,CAAC;IACF,CAAC;IAAC,MAAM,CAAC,CAAA,CAAC;IACV,MAAM,MAAM,GAA2B,EAAE,CAAA;IACzC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE;QAC1C,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,EAAE,CAAA;QACvB,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,OAAM;QACzC,MAAM,KAAK,GAAG,qDAAqD,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QAC9E,IAAI,CAAC,KAAK,EAAE,CAAC;YACZ,QAAQ,CAAC,IAAI,CAAC,GAAG,IAAI,IAAI,KAAK,GAAG,CAAC,4BAA4B,CAAC,CAAA;YAC/D,OAAM;QACP,CAAC;QACD,IAAI,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAA;QAC1B,IAAI,KAAK,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,GAAG,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;YAC9F,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAA;QAC3B,CAAC;QACD,MAAM,CAAC,KAAK,CAAC,CAAC,CAAW,CAAC,GAAG,KAAK,CAAA;IACnC,CAAC,CAAC,CAAA;IACF,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAA;AAC5B,CAAC"}

package/dist/schedule/fire/browser-preflight.d.ts

@@ -0,0 +1,41 @@
+/**
+ * Whether a scheduled run with a browser grant can drive its browser, asked
+ * before any model call: a run that would stop at its first browser call
+ * because the profile is missing or the browser cannot start is
+ * `blocked-config` with nothing spent, and says what to do.
+ *
+ * Checks, in order: `@namzu/browser` loads; the profile has a descriptor in
+ * `NAMZU_HOME` and its user data directory is there; the engine the profile
+ * was signed in with can run in this process's environment (for the Windows
+ * browser from WSL: interop, `powershell.exe` and Chrome or Edge, which a
+ * systemd service finds through `/run/WSL`); and a window, when the job
+ * asks for one, has a display.
+ *
+ * The run uses the engine the profile belongs to, never another: a
+ * profile signed in with the Windows Chrome has its cookies there, and a
+ * local Chromium would start signed out.
+ */
+import type { BrowserEngineSetting, BrowserEnvironmentProbes } from '@namzu/browser';
+import type { ScheduleBrowserGrant } from '@namzu/sdk';
+export type BrowserPreflight = {
+    readonly ok: true;
+    /** The engine the profile belongs to, forced for the run. */
+    readonly engine: Exclude<BrowserEngineSetting, 'auto'>;
+    /** Why the run's browser is what it is, for the run's warnings. */
+    readonly warnings: readonly string[];
+} | {
+    readonly ok: false;
+    readonly reason: string;
+};
+export interface BrowserPreflightDependencies {
+    readonly env: NodeJS.ProcessEnv;
+    readonly platform?: NodeJS.Platform;
+    /** Test seam: the file-system questions detection asks. */
+    readonly probes?: BrowserEnvironmentProbes;
+    /** Test seam: whether a path exists. */
+    readonly exists?: (path: string) => boolean;
+    /** Test seam: the browser package. */
+    readonly load?: () => Promise<typeof import('@namzu/browser')>;
+}
+export declare function browserPreflight(grant: ScheduleBrowserGrant, home: string, deps: BrowserPreflightDependencies): Promise<BrowserPreflight>;
+//# sourceMappingURL=browser-preflight.d.ts.map

package/dist/schedule/fire/browser-preflight.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"browser-preflight.d.ts","sourceRoot":"","sources":["../../../src/schedule/fire/browser-preflight.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAGH,OAAO,KAAK,EAAE,oBAAoB,EAAE,wBAAwB,EAAE,MAAM,gBAAgB,CAAA;AACpF,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,YAAY,CAAA;AAEtD,MAAM,MAAM,gBAAgB,GACzB;IACA,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAA;IACjB,6DAA6D;IAC7D,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC,oBAAoB,EAAE,MAAM,CAAC,CAAA;IACtD,mEAAmE;IACnE,QAAQ,CAAC,QAAQ,EAAE,SAAS,MAAM,EAAE,CAAA;CACnC,GACD;IAAE,QAAQ,CAAC,EAAE,EAAE,KAAK,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAA;AAElD,MAAM,WAAW,4BAA4B;IAC5C,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC,UAAU,CAAA;IAC/B,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,QAAQ,CAAA;IACnC,2DAA2D;IAC3D,QAAQ,CAAC,MAAM,CAAC,EAAE,wBAAwB,CAAA;IAC1C,wCAAwC;IACxC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAA;IAC3C,sCAAsC;IACtC,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,OAAO,CAAC,cAAc,gBAAgB,CAAC,CAAC,CAAA;CAC9D;AAED,wBAAsB,gBAAgB,CACrC,KAAK,EAAE,oBAAoB,EAC3B,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,4BAA4B,GAChC,OAAO,CAAC,gBAAgB,CAAC,CA2D3B"}

package/dist/schedule/fire/browser-preflight.js

@@ -0,0 +1,73 @@
+/**
+ * Whether a scheduled run with a browser grant can drive its browser, asked
+ * before any model call: a run that would stop at its first browser call
+ * because the profile is missing or the browser cannot start is
+ * `blocked-config` with nothing spent, and says what to do.
+ *
+ * Checks, in order: `@namzu/browser` loads; the profile has a descriptor in
+ * `NAMZU_HOME` and its user data directory is there; the engine the profile
+ * was signed in with can run in this process's environment (for the Windows
+ * browser from WSL: interop, `powershell.exe` and Chrome or Edge, which a
+ * systemd service finds through `/run/WSL`); and a window, when the job
+ * asks for one, has a display.
+ *
+ * The run uses the engine the profile belongs to, never another: a
+ * profile signed in with the Windows Chrome has its cookies there, and a
+ * local Chromium would start signed out.
+ */
+import { existsSync } from 'node:fs';
+export async function browserPreflight(grant, home, deps) {
+    let browser;
+    try {
+        browser = await (deps.load ?? (() => import('@namzu/browser')))();
+    }
+    catch (error) {
+        return {
+            ok: false,
+            reason: `the job uses the browser, but @namzu/browser cannot be loaded (${error instanceof Error ? error.message : String(error)}); run namzu doctor`,
+        };
+    }
+    const login = `namzu browser login ${grant.profile} ${Object.keys(grant.sites)[0] ?? '<url>'}`;
+    let descriptor;
+    try {
+        descriptor = new browser.BrowserProfileStore(home).get(grant.profile);
+    }
+    catch (error) {
+        return {
+            ok: false,
+            reason: `browser profile ${grant.profile} cannot be read: ${error instanceof Error ? error.message : String(error)}`,
+        };
+    }
+    if (!descriptor) {
+        return {
+            ok: false,
+            reason: `browser profile ${grant.profile} does not exist; sign in once with ${login}`,
+        };
+    }
+    const engine = descriptor.engine === 'windows-cdp' ? 'windows' : 'local';
+    const plan = browser.runnableBrowserPlan(browser.detectBrowserEnvironment(deps.env, deps.platform ?? process.platform, deps.probes ?? browser.nodeBrowserProbes, { engine, headless: grant.headed ? 'never' : 'always', mode: 'unattended' }));
+    if (plan.unavailableReason !== undefined) {
+        return {
+            ok: false,
+            reason: `the browser for profile ${grant.profile} cannot start here: ${plan.unavailableReason}`,
+        };
+    }
+    if (plan.engine !== descriptor.engine) {
+        return {
+            ok: false,
+            reason: `browser profile ${grant.profile} was signed in with ${descriptor.engine === 'windows-cdp' ? 'the Windows browser' : 'a browser inside Linux'}, and this run would use ${plan.engine === 'windows-cdp' ? 'the Windows browser' : 'a browser inside Linux'}`,
+        };
+    }
+    const exists = deps.exists ?? existsSync;
+    const dataDir = plan.engine === 'windows-cdp'
+        ? browser.windowsPathToWsl(descriptor.userDataDir, plan.mountRoot)
+        : descriptor.userDataDir;
+    if (dataDir === undefined || !exists(dataDir)) {
+        return {
+            ok: false,
+            reason: `browser profile ${grant.profile} has no data at ${descriptor.userDataDir}; sign in again with ${login}`,
+        };
+    }
+    return { ok: true, engine, warnings: plan.warnings };
+}
+//# sourceMappingURL=browser-preflight.js.map

package/dist/schedule/fire/browser-preflight.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"browser-preflight.js","sourceRoot":"","sources":["../../../src/schedule/fire/browser-preflight.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAA;AAyBpC,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACrC,KAA2B,EAC3B,IAAY,EACZ,IAAkC;IAElC,IAAI,OAAwC,CAAA;IAC5C,IAAI,CAAC;QACJ,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC,CAAC,EAAE,CAAA;IAClE,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,OAAO;YACN,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,kEAAkE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,qBAAqB;SACrJ,CAAA;IACF,CAAC;IACD,MAAM,KAAK,GAAG,uBAAuB,KAAK,CAAC,OAAO,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,OAAO,EAAE,CAAA;IAC9F,IAAI,UAA+E,CAAA;IACnF,IAAI,CAAC;QACJ,UAAU,GAAG,IAAI,OAAO,CAAC,mBAAmB,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAA;IACtE,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,OAAO;YACN,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,mBAAmB,KAAK,CAAC,OAAO,oBAAoB,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE;SACpH,CAAA;IACF,CAAC;IACD,IAAI,CAAC,UAAU,EAAE,CAAC;QACjB,OAAO;YACN,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,mBAAmB,KAAK,CAAC,OAAO,sCAAsC,KAAK,EAAE;SACrF,CAAA;IACF,CAAC;IACD,MAAM,MAAM,GAAG,UAAU,CAAC,MAAM,KAAK,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAA;IACxE,MAAM,IAAI,GAAG,OAAO,CAAC,mBAAmB,CACvC,OAAO,CAAC,wBAAwB,CAC/B,IAAI,CAAC,GAAG,EACR,IAAI,CAAC,QAAQ,IAAI,OAAO,CAAC,QAAQ,EACjC,IAAI,CAAC,MAAM,IAAI,OAAO,CAAC,iBAAiB,EACxC,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,EAAE,IAAI,EAAE,YAAY,EAAE,CAC3E,CACD,CAAA;IACD,IAAI,IAAI,CAAC,iBAAiB,KAAK,SAAS,EAAE,CAAC;QAC1C,OAAO;YACN,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,2BAA2B,KAAK,CAAC,OAAO,uBAAuB,IAAI,CAAC,iBAAiB,EAAE;SAC/F,CAAA;IACF,CAAC;IACD,IAAI,IAAI,CAAC,MAAM,KAAK,UAAU,CAAC,MAAM,EAAE,CAAC;QACvC,OAAO;YACN,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,mBAAmB,KAAK,CAAC,OAAO,uBAAuB,UAAU,CAAC,MAAM,KAAK,aAAa,CAAC,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,wBAAwB,4BAA4B,IAAI,CAAC,MAAM,KAAK,aAAa,CAAC,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,wBAAwB,EAAE;SACnQ,CAAA;IACF,CAAC;IACD,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,UAAU,CAAA;IACxC,MAAM,OAAO,GACZ,IAAI,CAAC,MAAM,KAAK,aAAa;QAC5B,CAAC,CAAC,OAAO,CAAC,gBAAgB,CAAC,UAAU,CAAC,WAAW,EAAE,IAAI,CAAC,SAAS,CAAC;QAClE,CAAC,CAAC,UAAU,CAAC,WAAW,CAAA;IAC1B,IAAI,OAAO,KAAK,SAAS,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;QAC/C,OAAO;YACN,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,mBAAmB,KAAK,CAAC,OAAO,mBAAmB,UAAU,CAAC,WAAW,wBAAwB,KAAK,EAAE;SAChH,CAAA;IACF,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAA;AACrD,CAAC"}

package/dist/schedule/fire/calls.d.ts

@@ -0,0 +1,49 @@
+/**
+ * The tool calls of one scheduled run that did not do what they were for:
+ * refused (they never ran — a gate rule, the scheduled-run floor, the mode, a
+ * declined review) and failed (they ran and returned an error).
+ *
+ * A run ends `completed` when its turn ends normally, whatever its calls
+ * did: a run whose only command the floor refused ended `completed`, and its
+ * notification said `finished`. How the turn ended stays the status, and the
+ * counts with each kind's first reason travel beside it, in the run's
+ * result, its history record, the job's state and its notification.
+ */
+import type { ScheduleCallTally } from '../types.js';
+/** How long a recorded reason may be. */
+export declare const CALL_REASON_MAX = 300;
+export interface CallEnd {
+    readonly toolName: string;
+    readonly isError: boolean;
+    readonly output?: string;
+    readonly summary: string;
+    /** The person declined on the tool's own screen: nothing failed. */
+    readonly cancelled?: boolean;
+}
+export interface CallTallies {
+    readonly refusedCalls?: ScheduleCallTally;
+    readonly failedCalls?: ScheduleCallTally;
+}
+export declare class CallTally {
+    #private;
+    /**
+     * `withheld`: the tools the run was not given because its permissions
+     * never let it use them. A call to one comes back as an unknown tool, and
+     * is a refusal, not a failure.
+     */
+    constructor(withheld?: Iterable<string>);
+    /** Count one finished call. */
+    observe(call: CallEnd): void;
+    /** The counts so far, each only when above zero. */
+    tallies(): CallTallies;
+}
+/** `1 call was refused (bash: <reason>); 2 calls failed (read: <reason>)`, or nothing. */
+export declare function callsLine(result: CallTallies): string;
+/** `1 call refused, 2 failed` for a job's last run, from its state's counts, or nothing. */
+export declare function callsCount(last: {
+    readonly refusedCalls?: number;
+    readonly failedCalls?: number;
+}): string;
+/** `1 call was refused`, `2 calls failed`: a count in words. */
+export declare function callsWords(tally: ScheduleCallTally, verb: 'refused' | 'failed'): string;
+//# sourceMappingURL=calls.d.ts.map

package/dist/schedule/fire/calls.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"calls.d.ts","sourceRoot":"","sources":["../../../src/schedule/fire/calls.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAGH,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAA;AAapD,yCAAyC;AACzC,eAAO,MAAM,eAAe,MAAM,CAAA;AAElC,MAAM,WAAW,OAAO;IACvB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAA;IACzB,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAA;IACxB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;IACxB,oEAAoE;IACpE,QAAQ,CAAC,SAAS,CAAC,EAAE,OAAO,CAAA;CAC5B;AAED,MAAM,WAAW,WAAW;IAC3B,QAAQ,CAAC,YAAY,CAAC,EAAE,iBAAiB,CAAA;IACzC,QAAQ,CAAC,WAAW,CAAC,EAAE,iBAAiB,CAAA;CACxC;AAED,qBAAa,SAAS;;IAOrB;;;;OAIG;gBACS,QAAQ,GAAE,QAAQ,CAAC,MAAM,CAAM;IAI3C,+BAA+B;IAC/B,OAAO,CAAC,IAAI,EAAE,OAAO,GAAG,IAAI;IAiC5B,oDAAoD;IACpD,OAAO,IAAI,WAAW;CAUtB;AAED,0FAA0F;AAC1F,wBAAgB,SAAS,CAAC,MAAM,EAAE,WAAW,GAAG,MAAM,CAarD;AAED,4FAA4F;AAC5F,wBAAgB,UAAU,CAAC,IAAI,EAAE;IAChC,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAA;IAC9B,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAA;CAC7B,GAAG,MAAM,CAMT;AAED,gEAAgE;AAChE,wBAAgB,UAAU,CAAC,KAAK,EAAE,iBAAiB,EAAE,IAAI,EAAE,SAAS,GAAG,QAAQ,GAAG,MAAM,CAKvF"}

package/dist/schedule/fire/calls.js

@@ -0,0 +1,114 @@
+/**
+ * The tool calls of one scheduled run that did not do what they were for:
+ * refused (they never ran — a gate rule, the scheduled-run floor, the mode, a
+ * declined review) and failed (they ran and returned an error).
+ *
+ * A run ends `completed` when its turn ends normally, whatever its calls
+ * did: a run whose only command the floor refused ended `completed`, and its
+ * notification said `finished`. How the turn ended stays the status, and the
+ * counts with each kind's first reason travel beside it, in the run's
+ * result, its history record, the job's state and its notification.
+ */
+import { sanitizeLine } from '../../integrations/notifications/desktop/sanitize.js';
+/** What the kernel writes in place of a result for a call that never ran (`deniedToolOutput`). */
+const NOT_EXECUTED = /^Error: Tool "[^"]*" was not executed\.\s*/;
+/**
+ * What the kernel writes for a call to a tool the session does not have, in
+ * each of its forms: `Error: Unknown tool "x"`, followed by `. Available: …`
+ * (what the step can call) when the registry says it lacks the name, and
+ * `Error: Unknown or unavailable tool "x": …` from a direct call.
+ */
+const UNKNOWN_TOOL = /^Error: Unknown (?:or unavailable )?tool "/;
+/** The gate's prefix, which says nothing the word "refused" does not. */
+const GATE = /^Blocked by the authorization gate:\s*/;
+/** How long a recorded reason may be. */
+export const CALL_REASON_MAX = 300;
+export class CallTally {
+    #refused = 0;
+    #failed = 0;
+    #firstRefused;
+    #firstFailed;
+    #withheld;
+    /**
+     * `withheld`: the tools the run was not given because its permissions
+     * never let it use them. A call to one comes back as an unknown tool, and
+     * is a refusal, not a failure.
+     */
+    constructor(withheld = []) {
+        this.#withheld = new Set(withheld);
+    }
+    /** Count one finished call. */
+    observe(call) {
+        if (!call.isError || call.cancelled)
+            return;
+        const text = call.output ?? call.summary;
+        const refused = NOT_EXECUTED.exec(text);
+        if (refused) {
+            this.#refused++;
+            this.#firstRefused ??= {
+                tool: call.toolName,
+                reason: sanitizeLine(text.slice(refused[0].length).replace(GATE, ''), CALL_REASON_MAX),
+            };
+            return;
+        }
+        if (this.#withheld.has(call.toolName) && UNKNOWN_TOOL.test(text)) {
+            this.#refused++;
+            this.#firstRefused ??= {
+                tool: call.toolName,
+                reason: `the job's permissions never let a run use ${call.toolName}, so the run was not given it`,
+            };
+            return;
+        }
+        this.#failed++;
+        this.#firstFailed ??= {
+            tool: call.toolName,
+            reason: sanitizeLine(text
+                .replace(/^Error:\s*/, '')
+                .split(/\r?\n/)
+                .find((line) => line.trim().length > 0) ?? '', CALL_REASON_MAX),
+        };
+    }
+    /** The counts so far, each only when above zero. */
+    tallies() {
+        return {
+            ...(this.#refused > 0 && this.#firstRefused
+                ? { refusedCalls: { count: this.#refused, first: this.#firstRefused } }
+                : {}),
+            ...(this.#failed > 0 && this.#firstFailed
+                ? { failedCalls: { count: this.#failed, first: this.#firstFailed } }
+                : {}),
+        };
+    }
+}
+/** `1 call was refused (bash: <reason>); 2 calls failed (read: <reason>)`, or nothing. */
+export function callsLine(result) {
+    return [
+        ...(result.refusedCalls
+            ? [
+                `${callsWords(result.refusedCalls, 'refused')} (${result.refusedCalls.first.tool}: ${result.refusedCalls.first.reason})`,
+            ]
+            : []),
+        ...(result.failedCalls
+            ? [
+                `${callsWords(result.failedCalls, 'failed')} (${result.failedCalls.first.tool}: ${result.failedCalls.first.reason})`,
+            ]
+            : []),
+    ].join('; ');
+}
+/** `1 call refused, 2 failed` for a job's last run, from its state's counts, or nothing. */
+export function callsCount(last) {
+    const refused = last.refusedCalls ?? 0;
+    const failed = last.failedCalls ?? 0;
+    const calls = (n) => `${n} call${n === 1 ? '' : 's'}`;
+    if (refused > 0)
+        return `${calls(refused)} refused${failed > 0 ? `, ${failed} failed` : ''}`;
+    return failed > 0 ? `${calls(failed)} failed` : '';
+}
+/** `1 call was refused`, `2 calls failed`: a count in words. */
+export function callsWords(tally, verb) {
+    const n = tally.count;
+    return verb === 'refused'
+        ? `${n} call${n === 1 ? ' was' : 's were'} refused`
+        : `${n} call${n === 1 ? '' : 's'} failed`;
+}
+//# sourceMappingURL=calls.js.map

package/dist/schedule/fire/calls.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"calls.js","sourceRoot":"","sources":["../../../src/schedule/fire/calls.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,sDAAsD,CAAA;AAGnF,kGAAkG;AAClG,MAAM,YAAY,GAAG,4CAA4C,CAAA;AACjE;;;;;GAKG;AACH,MAAM,YAAY,GAAG,4CAA4C,CAAA;AACjE,yEAAyE;AACzE,MAAM,IAAI,GAAG,wCAAwC,CAAA;AACrD,yCAAyC;AACzC,MAAM,CAAC,MAAM,eAAe,GAAG,GAAG,CAAA;AAgBlC,MAAM,OAAO,SAAS;IACrB,QAAQ,GAAG,CAAC,CAAA;IACZ,OAAO,GAAG,CAAC,CAAA;IACX,aAAa,CAAwC;IACrD,YAAY,CAAwC;IAC3C,SAAS,CAAqB;IAEvC;;;;OAIG;IACH,YAAY,WAA6B,EAAE;QAC1C,IAAI,CAAC,SAAS,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,CAAA;IACnC,CAAC;IAED,+BAA+B;IAC/B,OAAO,CAAC,IAAa;QACpB,IAAI,CAAC,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,SAAS;YAAE,OAAM;QAC3C,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,OAAO,CAAA;QACxC,MAAM,OAAO,GAAG,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QACvC,IAAI,OAAO,EAAE,CAAC;YACb,IAAI,CAAC,QAAQ,EAAE,CAAA;YACf,IAAI,CAAC,aAAa,KAAK;gBACtB,IAAI,EAAE,IAAI,CAAC,QAAQ;gBACnB,MAAM,EAAE,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,EAAE,eAAe,CAAC;aACtF,CAAA;YACD,OAAM;QACP,CAAC;QACD,IAAI,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YAClE,IAAI,CAAC,QAAQ,EAAE,CAAA;YACf,IAAI,CAAC,aAAa,KAAK;gBACtB,IAAI,EAAE,IAAI,CAAC,QAAQ;gBACnB,MAAM,EAAE,6CAA6C,IAAI,CAAC,QAAQ,+BAA+B;aACjG,CAAA;YACD,OAAM;QACP,CAAC;QACD,IAAI,CAAC,OAAO,EAAE,CAAA;QACd,IAAI,CAAC,YAAY,KAAK;YACrB,IAAI,EAAE,IAAI,CAAC,QAAQ;YACnB,MAAM,EAAE,YAAY,CACnB,IAAI;iBACF,OAAO,CAAC,YAAY,EAAE,EAAE,CAAC;iBACzB,KAAK,CAAC,OAAO,CAAC;iBACd,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC,IAAI,EAAE,EAC9C,eAAe,CACf;SACD,CAAA;IACF,CAAC;IAED,oDAAoD;IACpD,OAAO;QACN,OAAO;YACN,GAAG,CAAC,IAAI,CAAC,QAAQ,GAAG,CAAC,IAAI,IAAI,CAAC,aAAa;gBAC1C,CAAC,CAAC,EAAE,YAAY,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,QAAQ,EAAE,KAAK,EAAE,IAAI,CAAC,aAAa,EAAE,EAAE;gBACvE,CAAC,CAAC,EAAE,CAAC;YACN,GAAG,CAAC,IAAI,CAAC,OAAO,GAAG,CAAC,IAAI,IAAI,CAAC,YAAY;gBACxC,CAAC,CAAC,EAAE,WAAW,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,YAAY,EAAE,EAAE;gBACpE,CAAC,CAAC,EAAE,CAAC;SACN,CAAA;IACF,CAAC;CACD;AAED,0FAA0F;AAC1F,MAAM,UAAU,SAAS,CAAC,MAAmB;IAC5C,OAAO;QACN,GAAG,CAAC,MAAM,CAAC,YAAY;YACtB,CAAC,CAAC;gBACA,GAAG,UAAU,CAAC,MAAM,CAAC,YAAY,EAAE,SAAS,CAAC,KAAK,MAAM,CAAC,YAAY,CAAC,KAAK,CAAC,IAAI,KAAK,MAAM,CAAC,YAAY,CAAC,KAAK,CAAC,MAAM,GAAG;aACxH;YACF,CAAC,CAAC,EAAE,CAAC;QACN,GAAG,CAAC,MAAM,CAAC,WAAW;YACrB,CAAC,CAAC;gBACA,GAAG,UAAU,CAAC,MAAM,CAAC,WAAW,EAAE,QAAQ,CAAC,KAAK,MAAM,CAAC,WAAW,CAAC,KAAK,CAAC,IAAI,KAAK,MAAM,CAAC,WAAW,CAAC,KAAK,CAAC,MAAM,GAAG;aACpH;YACF,CAAC,CAAC,EAAE,CAAC;KACN,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;AACb,CAAC;AAED,4FAA4F;AAC5F,MAAM,UAAU,UAAU,CAAC,IAG1B;IACA,MAAM,OAAO,GAAG,IAAI,CAAC,YAAY,IAAI,CAAC,CAAA;IACtC,MAAM,MAAM,GAAG,IAAI,CAAC,WAAW,IAAI,CAAC,CAAA;IACpC,MAAM,KAAK,GAAG,CAAC,CAAS,EAAE,EAAE,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,EAAE,CAAA;IAC7D,IAAI,OAAO,GAAG,CAAC;QAAE,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,WAAW,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,MAAM,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,CAAA;IAC5F,OAAO,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAA;AACnD,CAAC;AAED,gEAAgE;AAChE,MAAM,UAAU,UAAU,CAAC,KAAwB,EAAE,IAA0B;IAC9E,MAAM,CAAC,GAAG,KAAK,CAAC,KAAK,CAAA;IACrB,OAAO,IAAI,KAAK,SAAS;QACxB,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,UAAU;QACnD,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,SAAS,CAAA;AAC3C,CAAC"}