@namzu/cli 29.0.1 → 30.0.0

package/dist/schedule/service/wsl.d.ts

@@ -0,0 +1,69 @@
+/**
+ * WSL: the daemon runs inside the distro, supervised by Windows Task
+ * Scheduler through `wsl.exe`.
+ *
+ * A distro is not running after Windows logs on until something starts it,
+ * and a systemd unit inside the distro cannot start its own distro; the
+ * `wsl.exe` process the task holds open both starts it and keeps WSL's idle
+ * shutdown away. The Windows programs are resolved once, here, from their
+ * fixed locations — never through PATH, whose `/mnt` entries make a failed
+ * lookup cost seconds — and recorded in the manifest.
+ *
+ * Refused at install: interop that does not answer, a node or CLI whose path
+ * `wsl.exe` would re-parse into something else, and a CLI running from the
+ * npx cache (it disappears).
+ */
+import type { CommandRunner } from './runner.js';
+import { type TaskDefinition, taskPath } from './windows-task.js';
+export interface WindowsTools {
+    /** Where WSL mounts the Windows drives, with a trailing slash (`/mnt/`). */
+    readonly mountRoot: string;
+    /**
+     * `C:` as WSL mounts it (`/mnt/c`): the directory a Windows program is
+     * started in, since one started in a Linux directory warns about UNC paths.
+     */
+    readonly drive: string;
+    readonly systemRoot: string;
+    readonly cmd: string;
+    readonly schtasks: string;
+    readonly powershell: string;
+    readonly whoami: string;
+    readonly conhost: string;
+    readonly wsl: string;
+}
+/** `System32` under the default mount root. */
+export declare const DEFAULT_SYSTEM32: string;
+/**
+ * The Windows programs, under `system32` — by default under the drive mount
+ * root `/etc/wsl.conf` sets (`[automount] root`, `/mnt/` unless moved).
+ */
+export declare function windowsTools(system32?: string): WindowsTools;
+/** Interop answers: a Windows program starts and exits 0. */
+export declare function probeInterop(run: CommandRunner, tools: WindowsTools, env?: NodeJS.ProcessEnv): Promise<{
+    ok: true;
+} | {
+    ok: false;
+    reason: string;
+}>;
+/** `DOMAIN\user` of the Windows account, from `whoami.exe`. */
+export declare function windowsUser(run: CommandRunner, tools: WindowsTools): Promise<string>;
+/** A Linux path as Windows sees it, through `wslpath -w`. */
+export declare function toWindowsPath(run: CommandRunner, path: string): Promise<string>;
+/** Whether a CLI path is inside the npx cache, which is not kept. */
+export declare function isEphemeralBin(bin: string): boolean;
+export declare function wslTaskName(name: string, distro: string): string;
+/**
+ * The task that runs the daemon in the distro. `conhost.exe --headless` keeps
+ * a console window from appearing at logon.
+ */
+export declare function wslTaskDefinition(options: {
+    readonly userId: string;
+    readonly distro: string;
+    readonly linuxUser: string;
+    readonly node: string;
+    readonly bin: string;
+    readonly namzuHome: string;
+    readonly systemRoot?: string;
+}): TaskDefinition;
+export { taskPath };
+//# sourceMappingURL=wsl.d.ts.map

package/dist/schedule/service/wsl.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"wsl.d.ts","sourceRoot":"","sources":["../../../src/schedule/service/wsl.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAKH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,aAAa,CAAA;AAChD,OAAO,EAAE,KAAK,cAAc,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAA;AAEjE,MAAM,WAAW,YAAY;IAC5B,4EAA4E;IAC5E,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B;;;OAGG;IACH,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAA;IACpB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;IACxB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAA;CACpB;AAED,+CAA+C;AAC/C,eAAO,MAAM,gBAAgB,QAAgB,CAAA;AAE7C;;;GAGG;AACH,wBAAgB,YAAY,CAAC,QAAQ,SAAkC,GAAG,YAAY,CAcrF;AAED,6DAA6D;AAC7D,wBAAsB,YAAY,CACjC,GAAG,EAAE,aAAa,EAClB,KAAK,EAAE,YAAY,EACnB,GAAG,GAAE,MAAM,CAAC,UAAwB,GAClC,OAAO,CAAC;IAAE,EAAE,EAAE,IAAI,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC,CAgBvD;AAED,+DAA+D;AAC/D,wBAAsB,WAAW,CAAC,GAAG,EAAE,aAAa,EAAE,KAAK,EAAE,YAAY,GAAG,OAAO,CAAC,MAAM,CAAC,CAS1F;AAED,6DAA6D;AAC7D,wBAAsB,aAAa,CAAC,GAAG,EAAE,aAAa,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAIrF;AAED,qEAAqE;AACrE,wBAAgB,cAAc,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAEnD;AAED,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,CAEhE;AAED;;;GAGG;AACH,wBAAgB,iBAAiB,CAAC,OAAO,EAAE;IAC1C,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAA;IACpB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAA;CAC5B,GAAG,cAAc,CAiCjB;AAED,OAAO,EAAE,QAAQ,EAAE,CAAA"}

package/dist/schedule/service/wsl.js

@@ -0,0 +1,121 @@
+/**
+ * WSL: the daemon runs inside the distro, supervised by Windows Task
+ * Scheduler through `wsl.exe`.
+ *
+ * A distro is not running after Windows logs on until something starts it,
+ * and a systemd unit inside the distro cannot start its own distro; the
+ * `wsl.exe` process the task holds open both starts it and keeps WSL's idle
+ * shutdown away. The Windows programs are resolved once, here, from their
+ * fixed locations — never through PATH, whose `/mnt` entries make a failed
+ * lookup cost seconds — and recorded in the manifest.
+ *
+ * Refused at install: interop that does not answer, a node or CLI whose path
+ * `wsl.exe` would re-parse into something else, and a CLI running from the
+ * npx cache (it disappears).
+ */
+import { existsSync } from 'node:fs';
+import { readWslMountRoot, wslSystem32 } from '../../context/environment.js';
+import { checkWslPath } from './quote.js';
+import { taskPath } from './windows-task.js';
+/** `System32` under the default mount root. */
+export const DEFAULT_SYSTEM32 = wslSystem32();
+/**
+ * The Windows programs, under `system32` — by default under the drive mount
+ * root `/etc/wsl.conf` sets (`[automount] root`, `/mnt/` unless moved).
+ */
+export function windowsTools(system32 = wslSystem32(readWslMountRoot())) {
+    const systemRoot = system32.replace(/\/System32$/i, '');
+    const drive = systemRoot.replace(/\/Windows$/i, '');
+    return {
+        mountRoot: drive.replace(/[^/]+$/, ''),
+        drive,
+        systemRoot,
+        cmd: `${system32}/cmd.exe`,
+        schtasks: `${system32}/schtasks.exe`,
+        powershell: `${system32}/WindowsPowerShell/v1.0/powershell.exe`,
+        whoami: `${system32}/whoami.exe`,
+        conhost: `${system32}/conhost.exe`,
+        wsl: `${system32}/wsl.exe`,
+    };
+}
+/** Interop answers: a Windows program starts and exits 0. */
+export async function probeInterop(run, tools, env = process.env) {
+    if (!existsSync(tools.cmd))
+        return { ok: false, reason: `${tools.cmd} was not found (is C: mounted at ${tools.drive}?)` };
+    if (!env.WSL_INTEROP && !existsSync('/proc/sys/fs/binfmt_misc/WSLInterop')) {
+        return {
+            ok: false,
+            reason: 'WSL interop is disabled ([interop] enabled=false in /etc/wsl.conf)',
+        };
+    }
+    const result = await run(tools.cmd, ['/d', '/c', 'ver'], { timeoutMs: 20_000, cwd: tools.drive });
+    return result.code === 0
+        ? { ok: true }
+        : {
+            ok: false,
+            reason: `a Windows program did not start through interop (${result.stderr.trim() || `exit ${result.code}`})`,
+        };
+}
+/** `DOMAIN\user` of the Windows account, from `whoami.exe`. */
+export async function windowsUser(run, tools) {
+    const result = await run(tools.whoami, [], { timeoutMs: 20_000, cwd: tools.drive });
+    const user = result.stdout.trim();
+    if (result.code !== 0 || !/^[^\\\s]+\\[^\\\s]+$/.test(user)) {
+        throw new Error(`could not read the Windows user from whoami.exe (${result.stderr.trim() || user || `exit ${result.code}`})`);
+    }
+    return user;
+}
+/** A Linux path as Windows sees it, through `wslpath -w`. */
+export async function toWindowsPath(run, path) {
+    const result = await run('wslpath', ['-w', path], { timeoutMs: 10_000 });
+    if (result.code !== 0 || !result.stdout.trim())
+        throw new Error(`wslpath -w ${path} failed`);
+    return result.stdout.trim();
+}
+/** Whether a CLI path is inside the npx cache, which is not kept. */
+export function isEphemeralBin(bin) {
+    return /[\\/]_npx[\\/]/.test(bin) || /[\\/]\.npm[\\/]_cacache[\\/]/.test(bin);
+}
+export function wslTaskName(name, distro) {
+    return `${name}-wsl-${distro.replace(/[^A-Za-z0-9._-]/g, '_')}`;
+}
+/**
+ * The task that runs the daemon in the distro. `conhost.exe --headless` keeps
+ * a console window from appearing at logon.
+ */
+export function wslTaskDefinition(options) {
+    checkWslPath('node', options.node);
+    checkWslPath('the namzu CLI', options.bin);
+    checkWslPath('NAMZU_HOME', options.namzuHome);
+    if (!/^[A-Za-z0-9._-]+$/.test(options.distro))
+        throw new Error(`unusual WSL distro name: ${options.distro}`);
+    if (!/^[a-z_][a-z0-9_-]*\$?$/i.test(options.linuxUser))
+        throw new Error(`unusual Linux user name: ${options.linuxUser}`);
+    const root = options.systemRoot ?? 'C:\\Windows';
+    return {
+        userId: options.userId,
+        description: `namzu scheduler for NAMZU_HOME=${options.namzuHome} in WSL ${options.distro}`,
+        command: `${root}\\System32\\conhost.exe`,
+        args: [
+            '--headless',
+            `${root}\\System32\\wsl.exe`,
+            '-d',
+            options.distro,
+            '-u',
+            options.linuxUser,
+            '--cd',
+            '/',
+            '--exec',
+            '/usr/bin/env',
+            `NAMZU_HOME=${options.namzuHome}`,
+            options.node,
+            options.bin,
+            'schedule',
+            'daemon',
+            '--home',
+            options.namzuHome,
+        ],
+    };
+}
+export { taskPath };
+//# sourceMappingURL=wsl.js.map

package/dist/schedule/service/wsl.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"wsl.js","sourceRoot":"","sources":["../../../src/schedule/service/wsl.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAA;AACpC,OAAO,EAAE,gBAAgB,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAA;AAC5E,OAAO,EAAE,YAAY,EAAE,MAAM,YAAY,CAAA;AAEzC,OAAO,EAAuB,QAAQ,EAAE,MAAM,mBAAmB,CAAA;AAmBjE,+CAA+C;AAC/C,MAAM,CAAC,MAAM,gBAAgB,GAAG,WAAW,EAAE,CAAA;AAE7C;;;GAGG;AACH,MAAM,UAAU,YAAY,CAAC,QAAQ,GAAG,WAAW,CAAC,gBAAgB,EAAE,CAAC;IACtE,MAAM,UAAU,GAAG,QAAQ,CAAC,OAAO,CAAC,cAAc,EAAE,EAAE,CAAC,CAAA;IACvD,MAAM,KAAK,GAAG,UAAU,CAAC,OAAO,CAAC,aAAa,EAAE,EAAE,CAAC,CAAA;IACnD,OAAO;QACN,SAAS,EAAE,KAAK,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC;QACtC,KAAK;QACL,UAAU;QACV,GAAG,EAAE,GAAG,QAAQ,UAAU;QAC1B,QAAQ,EAAE,GAAG,QAAQ,eAAe;QACpC,UAAU,EAAE,GAAG,QAAQ,wCAAwC;QAC/D,MAAM,EAAE,GAAG,QAAQ,aAAa;QAChC,OAAO,EAAE,GAAG,QAAQ,cAAc;QAClC,GAAG,EAAE,GAAG,QAAQ,UAAU;KAC1B,CAAA;AACF,CAAC;AAED,6DAA6D;AAC7D,MAAM,CAAC,KAAK,UAAU,YAAY,CACjC,GAAkB,EAClB,KAAmB,EACnB,MAAyB,OAAO,CAAC,GAAG;IAEpC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC;QACzB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,KAAK,CAAC,GAAG,oCAAoC,KAAK,CAAC,KAAK,IAAI,EAAE,CAAA;IAC9F,IAAI,CAAC,GAAG,CAAC,WAAW,IAAI,CAAC,UAAU,CAAC,qCAAqC,CAAC,EAAE,CAAC;QAC5E,OAAO;YACN,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,oEAAoE;SAC5E,CAAA;IACF,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC,CAAA;IACjG,OAAO,MAAM,CAAC,IAAI,KAAK,CAAC;QACvB,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE;QACd,CAAC,CAAC;YACA,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,oDAAoD,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,QAAQ,MAAM,CAAC,IAAI,EAAE,GAAG;SAC5G,CAAA;AACJ,CAAC;AAED,+DAA+D;AAC/D,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,GAAkB,EAAE,KAAmB;IACxE,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,KAAK,CAAC,MAAM,EAAE,EAAE,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC,CAAA;IACnF,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAA;IACjC,IAAI,MAAM,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,sBAAsB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QAC7D,MAAM,IAAI,KAAK,CACd,oDAAoD,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,IAAI,IAAI,QAAQ,MAAM,CAAC,IAAI,EAAE,GAAG,CAC5G,CAAA;IACF,CAAC;IACD,OAAO,IAAI,CAAA;AACZ,CAAC;AAED,6DAA6D;AAC7D,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,GAAkB,EAAE,IAAY;IACnE,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,SAAS,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC,CAAA;IACxE,IAAI,MAAM,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,cAAc,IAAI,SAAS,CAAC,CAAA;IAC5F,OAAO,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAA;AAC5B,CAAC;AAED,qEAAqE;AACrE,MAAM,UAAU,cAAc,CAAC,GAAW;IACzC,OAAO,gBAAgB,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,8BAA8B,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;AAC9E,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,IAAY,EAAE,MAAc;IACvD,OAAO,GAAG,IAAI,QAAQ,MAAM,CAAC,OAAO,CAAC,kBAAkB,EAAE,GAAG,CAAC,EAAE,CAAA;AAChE,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,iBAAiB,CAAC,OAQjC;IACA,YAAY,CAAC,MAAM,EAAE,OAAO,CAAC,IAAI,CAAC,CAAA;IAClC,YAAY,CAAC,eAAe,EAAE,OAAO,CAAC,GAAG,CAAC,CAAA;IAC1C,YAAY,CAAC,YAAY,EAAE,OAAO,CAAC,SAAS,CAAC,CAAA;IAC7C,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC;QAC5C,MAAM,IAAI,KAAK,CAAC,4BAA4B,OAAO,CAAC,MAAM,EAAE,CAAC,CAAA;IAC9D,IAAI,CAAC,yBAAyB,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC;QACrD,MAAM,IAAI,KAAK,CAAC,4BAA4B,OAAO,CAAC,SAAS,EAAE,CAAC,CAAA;IACjE,MAAM,IAAI,GAAG,OAAO,CAAC,UAAU,IAAI,aAAa,CAAA;IAChD,OAAO;QACN,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,WAAW,EAAE,kCAAkC,OAAO,CAAC,SAAS,WAAW,OAAO,CAAC,MAAM,EAAE;QAC3F,OAAO,EAAE,GAAG,IAAI,yBAAyB;QACzC,IAAI,EAAE;YACL,YAAY;YACZ,GAAG,IAAI,qBAAqB;YAC5B,IAAI;YACJ,OAAO,CAAC,MAAM;YACd,IAAI;YACJ,OAAO,CAAC,SAAS;YACjB,MAAM;YACN,GAAG;YACH,QAAQ;YACR,cAAc;YACd,cAAc,OAAO,CAAC,SAAS,EAAE;YACjC,OAAO,CAAC,IAAI;YACZ,OAAO,CAAC,GAAG;YACX,UAAU;YACV,QAAQ;YACR,QAAQ;YACR,OAAO,CAAC,SAAS;SACjB;KACD,CAAA;AACF,CAAC;AAED,OAAO,EAAE,QAAQ,EAAE,CAAA"}

package/dist/schedule/store/atomic.d.ts

@@ -0,0 +1,43 @@
+/**
+ * How the scheduler's files are written.
+ *
+ * Two rules, the ones the session lease settled on (`@namzu/sdk`
+ * `store/session-log/lease.ts`):
+ *
+ * - A file that ARBITRATES — who started an occurrence — is published with
+ *   `link` from a fully written, fsynced temporary. `link` fails with `EEXIST`
+ *   when the name exists, so of any number of simultaneous writers exactly one
+ *   wins, and the name never exists without its whole body. Never `wx` on the
+ *   real name (a reader can see it empty) and never rename-then-read-back (two
+ *   renamers can each read themselves).
+ * - A file that is a VIEW or an operator-owned document — a job, a state — is
+ *   replaced by an fsynced temporary and `rename`, so a reader sees the old
+ *   body or the new one.
+ *
+ * Every file is 0600 in a 0700 directory.
+ */
+export declare const PRIVATE_FILE_MODE = 384;
+export declare const PRIVATE_DIR_MODE = 448;
+/** A file newer than this reader understands. Never rewritten. */
+export declare class ScheduleFormatError extends Error {
+    readonly path: string;
+    readonly name = "ScheduleFormatError";
+    constructor(path: string, message: string);
+}
+export declare function ensureDir(path: string): void;
+/** Replace `path` with `value` as JSON: fsynced temporary, then rename. */
+export declare function writeJsonAtomic(path: string, value: unknown): void;
+/**
+ * Publish `value` at `path` only if nothing is there yet. `true` when this
+ * call created it; `false` when the name already existed (someone else won).
+ */
+export declare function publishExclusive(path: string, value: unknown): boolean;
+/**
+ * Read a scheduler file of `kind`, or `undefined` when there is none.
+ * Refuses a newer version or another kind, naming the file.
+ */
+export declare function readVersioned<T extends {
+    readonly v: number;
+    readonly kind: string;
+}>(path: string, kind: T['kind']): T | undefined;
+//# sourceMappingURL=atomic.d.ts.map

package/dist/schedule/store/atomic.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"atomic.d.ts","sourceRoot":"","sources":["../../../src/schedule/store/atomic.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAgBH,eAAO,MAAM,iBAAiB,MAAQ,CAAA;AACtC,eAAO,MAAM,gBAAgB,MAAQ,CAAA;AAErC,kEAAkE;AAClE,qBAAa,mBAAoB,SAAQ,KAAK;IAG5C,QAAQ,CAAC,IAAI,EAAE,MAAM;IAFtB,SAAkB,IAAI,yBAAwB;gBAEpC,IAAI,EAAE,MAAM,EACrB,OAAO,EAAE,MAAM;CAIhB;AAED,wBAAgB,SAAS,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAE5C;AAgCD,2EAA2E;AAC3E,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,GAAG,IAAI,CAalE;AAED;;;GAGG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,GAAG,OAAO,CAgBtE;AAED;;;GAGG;AACH,wBAAgB,aAAa,CAAC,CAAC,SAAS;IAAE,QAAQ,CAAC,CAAC,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;CAAE,EACpF,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,GACb,CAAC,GAAG,SAAS,CAyBf"}

package/dist/schedule/store/atomic.js

@@ -0,0 +1,135 @@
+/**
+ * How the scheduler's files are written.
+ *
+ * Two rules, the ones the session lease settled on (`@namzu/sdk`
+ * `store/session-log/lease.ts`):
+ *
+ * - A file that ARBITRATES — who started an occurrence — is published with
+ *   `link` from a fully written, fsynced temporary. `link` fails with `EEXIST`
+ *   when the name exists, so of any number of simultaneous writers exactly one
+ *   wins, and the name never exists without its whole body. Never `wx` on the
+ *   real name (a reader can see it empty) and never rename-then-read-back (two
+ *   renamers can each read themselves).
+ * - A file that is a VIEW or an operator-owned document — a job, a state — is
+ *   replaced by an fsynced temporary and `rename`, so a reader sees the old
+ *   body or the new one.
+ *
+ * Every file is 0600 in a 0700 directory.
+ */
+import { randomBytes } from 'node:crypto';
+import { closeSync, fsyncSync, linkSync, mkdirSync, openSync, readFileSync, renameSync, unlinkSync, writeSync, } from 'node:fs';
+import { basename, dirname, join } from 'node:path';
+export const PRIVATE_FILE_MODE = 0o600;
+export const PRIVATE_DIR_MODE = 0o700;
+/** A file newer than this reader understands. Never rewritten. */
+export class ScheduleFormatError extends Error {
+    path;
+    name = 'ScheduleFormatError';
+    constructor(path, message) {
+        super(`${path}: ${message}`);
+        this.path = path;
+    }
+}
+export function ensureDir(path) {
+    mkdirSync(path, { recursive: true, mode: PRIVATE_DIR_MODE });
+}
+function temporaryBeside(path) {
+    return join(dirname(path), `.${basename(path)}.${process.pid}.${randomBytes(6).toString('hex')}.tmp`);
+}
+function writeDurably(path, text) {
+    const fd = openSync(path, 'wx', PRIVATE_FILE_MODE);
+    try {
+        writeSync(fd, text);
+        fsyncSync(fd);
+    }
+    finally {
+        closeSync(fd);
+    }
+}
+function fsyncDir(path) {
+    try {
+        const fd = openSync(path, 'r');
+        try {
+            fsyncSync(fd);
+        }
+        finally {
+            closeSync(fd);
+        }
+    }
+    catch {
+        // Not every platform can fsync a directory (Windows). Best effort.
+    }
+}
+/** Replace `path` with `value` as JSON: fsynced temporary, then rename. */
+export function writeJsonAtomic(path, value) {
+    ensureDir(dirname(path));
+    const temporary = temporaryBeside(path);
+    writeDurably(temporary, `${JSON.stringify(value, null, 2)}\n`);
+    try {
+        renameSync(temporary, path);
+    }
+    catch (error) {
+        try {
+            unlinkSync(temporary);
+        }
+        catch { }
+        throw error;
+    }
+    fsyncDir(dirname(path));
+}
+/**
+ * Publish `value` at `path` only if nothing is there yet. `true` when this
+ * call created it; `false` when the name already existed (someone else won).
+ */
+export function publishExclusive(path, value) {
+    ensureDir(dirname(path));
+    const temporary = temporaryBeside(path);
+    writeDurably(temporary, `${JSON.stringify(value)}\n`);
+    try {
+        linkSync(temporary, path);
+        fsyncDir(dirname(path));
+        return true;
+    }
+    catch (error) {
+        if (error.code === 'EEXIST')
+            return false;
+        throw error;
+    }
+    finally {
+        try {
+            unlinkSync(temporary);
+        }
+        catch { }
+    }
+}
+/**
+ * Read a scheduler file of `kind`, or `undefined` when there is none.
+ * Refuses a newer version or another kind, naming the file.
+ */
+export function readVersioned(path, kind) {
+    let text;
+    try {
+        text = readFileSync(path, 'utf8');
+    }
+    catch (error) {
+        if (error.code === 'ENOENT')
+            return undefined;
+        throw error;
+    }
+    let parsed;
+    try {
+        parsed = JSON.parse(text);
+    }
+    catch {
+        throw new ScheduleFormatError(path, 'is not valid JSON');
+    }
+    const record = parsed;
+    if (typeof record !== 'object' || record === null || record.kind !== kind) {
+        throw new ScheduleFormatError(path, `is not a ${kind} file`);
+    }
+    if (typeof record.v !== 'number' || record.v > 1) {
+        throw new ScheduleFormatError(path, `was written by a newer namzu (format ${String(record.v)}); this one reads format 1 and will not change it`);
+    }
+    return parsed;
+}
+//# sourceMappingURL=atomic.js.map

package/dist/schedule/store/atomic.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"atomic.js","sourceRoot":"","sources":["../../../src/schedule/store/atomic.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAA;AACzC,OAAO,EACN,SAAS,EACT,SAAS,EACT,QAAQ,EACR,SAAS,EACT,QAAQ,EACR,YAAY,EACZ,UAAU,EACV,UAAU,EACV,SAAS,GACT,MAAM,SAAS,CAAA;AAChB,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAEnD,MAAM,CAAC,MAAM,iBAAiB,GAAG,KAAK,CAAA;AACtC,MAAM,CAAC,MAAM,gBAAgB,GAAG,KAAK,CAAA;AAErC,kEAAkE;AAClE,MAAM,OAAO,mBAAoB,SAAQ,KAAK;IAGnC;IAFQ,IAAI,GAAG,qBAAqB,CAAA;IAC9C,YACU,IAAY,EACrB,OAAe;QAEf,KAAK,CAAC,GAAG,IAAI,KAAK,OAAO,EAAE,CAAC,CAAA;QAHnB,SAAI,GAAJ,IAAI,CAAQ;IAItB,CAAC;CACD;AAED,MAAM,UAAU,SAAS,CAAC,IAAY;IACrC,SAAS,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,gBAAgB,EAAE,CAAC,CAAA;AAC7D,CAAC;AAED,SAAS,eAAe,CAAC,IAAY;IACpC,OAAO,IAAI,CACV,OAAO,CAAC,IAAI,CAAC,EACb,IAAI,QAAQ,CAAC,IAAI,CAAC,IAAI,OAAO,CAAC,GAAG,IAAI,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CACzE,CAAA;AACF,CAAC;AAED,SAAS,YAAY,CAAC,IAAY,EAAE,IAAY;IAC/C,MAAM,EAAE,GAAG,QAAQ,CAAC,IAAI,EAAE,IAAI,EAAE,iBAAiB,CAAC,CAAA;IAClD,IAAI,CAAC;QACJ,SAAS,CAAC,EAAE,EAAE,IAAI,CAAC,CAAA;QACnB,SAAS,CAAC,EAAE,CAAC,CAAA;IACd,CAAC;YAAS,CAAC;QACV,SAAS,CAAC,EAAE,CAAC,CAAA;IACd,CAAC;AACF,CAAC;AAED,SAAS,QAAQ,CAAC,IAAY;IAC7B,IAAI,CAAC;QACJ,MAAM,EAAE,GAAG,QAAQ,CAAC,IAAI,EAAE,GAAG,CAAC,CAAA;QAC9B,IAAI,CAAC;YACJ,SAAS,CAAC,EAAE,CAAC,CAAA;QACd,CAAC;gBAAS,CAAC;YACV,SAAS,CAAC,EAAE,CAAC,CAAA;QACd,CAAC;IACF,CAAC;IAAC,MAAM,CAAC;QACR,mEAAmE;IACpE,CAAC;AACF,CAAC;AAED,2EAA2E;AAC3E,MAAM,UAAU,eAAe,CAAC,IAAY,EAAE,KAAc;IAC3D,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAA;IACxB,MAAM,SAAS,GAAG,eAAe,CAAC,IAAI,CAAC,CAAA;IACvC,YAAY,CAAC,SAAS,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAA;IAC9D,IAAI,CAAC;QACJ,UAAU,CAAC,SAAS,EAAE,IAAI,CAAC,CAAA;IAC5B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,IAAI,CAAC;YACJ,UAAU,CAAC,SAAS,CAAC,CAAA;QACtB,CAAC;QAAC,MAAM,CAAC,CAAA,CAAC;QACV,MAAM,KAAK,CAAA;IACZ,CAAC;IACD,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAA;AACxB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,gBAAgB,CAAC,IAAY,EAAE,KAAc;IAC5D,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAA;IACxB,MAAM,SAAS,GAAG,eAAe,CAAC,IAAI,CAAC,CAAA;IACvC,YAAY,CAAC,SAAS,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;IACrD,IAAI,CAAC;QACJ,QAAQ,CAAC,SAAS,EAAE,IAAI,CAAC,CAAA;QACzB,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAA;QACvB,OAAO,IAAI,CAAA;IACZ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,KAAK,CAAA;QACpE,MAAM,KAAK,CAAA;IACZ,CAAC;YAAS,CAAC;QACV,IAAI,CAAC;YACJ,UAAU,CAAC,SAAS,CAAC,CAAA;QACtB,CAAC;QAAC,MAAM,CAAC,CAAA,CAAC;IACX,CAAC;AACF,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,aAAa,CAC5B,IAAY,EACZ,IAAe;IAEf,IAAI,IAAY,CAAA;IAChB,IAAI,CAAC;QACJ,IAAI,GAAG,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAA;IAClC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,SAAS,CAAA;QACxE,MAAM,KAAK,CAAA;IACZ,CAAC;IACD,IAAI,MAAe,CAAA;IACnB,IAAI,CAAC;QACJ,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;IAC1B,CAAC;IAAC,MAAM,CAAC;QACR,MAAM,IAAI,mBAAmB,CAAC,IAAI,EAAE,mBAAmB,CAAC,CAAA;IACzD,CAAC;IACD,MAAM,MAAM,GAAG,MAAyC,CAAA;IACxD,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI,IAAI,MAAM,CAAC,IAAI,KAAK,IAAI,EAAE,CAAC;QAC3E,MAAM,IAAI,mBAAmB,CAAC,IAAI,EAAE,YAAY,IAAI,OAAO,CAAC,CAAA;IAC7D,CAAC;IACD,IAAI,OAAO,MAAM,CAAC,CAAC,KAAK,QAAQ,IAAI,MAAM,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;QAClD,MAAM,IAAI,mBAAmB,CAC5B,IAAI,EACJ,wCAAwC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,mDAAmD,CAC3G,CAAA;IACF,CAAC;IACD,OAAO,MAAW,CAAA;AACnB,CAAC"}

package/dist/schedule/store/claims.d.ts

@@ -0,0 +1,26 @@
+/**
+ * `schedule/claims/<job-id>/<key>.json`: one per occurrence ever started.
+ *
+ * Published with `link` when the run is DISPATCHED — not when it is queued —
+ * so a daemon that restarts while a run waits for a slot re-derives it and
+ * runs it once, and a second daemon (or a backward clock) can never start an
+ * occurrence that already started. This file is the final once-only
+ * guarantee, independent of the daemon lease.
+ */
+import type { SchedulePaths } from '../paths.js';
+export interface ScheduleClaim {
+    readonly v: 1;
+    readonly kind: 'schedule-claim';
+    readonly jobId: string;
+    readonly key: string;
+    readonly runId: string;
+    readonly daemonEpoch: string;
+    readonly at: string;
+}
+/** `true` when this call started the occurrence; `false` when it was already started. */
+export declare function claimOccurrence(paths: SchedulePaths, claim: Omit<ScheduleClaim, 'v' | 'kind'>): boolean;
+export declare function readClaim(paths: SchedulePaths, jobId: string, key: string): ScheduleClaim | undefined;
+export declare function isClaimed(paths: SchedulePaths, jobId: string, key: string): boolean;
+/** Remove claims older than `maxAgeMs` (nothing that old can be due again). */
+export declare function pruneClaims(paths: SchedulePaths, jobId: string, maxAgeMs: number, now?: number): number;
+//# sourceMappingURL=claims.d.ts.map

package/dist/schedule/store/claims.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"claims.d.ts","sourceRoot":"","sources":["../../../src/schedule/store/claims.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAIH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,aAAa,CAAA;AAGhD,MAAM,WAAW,aAAa;IAC7B,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAA;IACb,QAAQ,CAAC,IAAI,EAAE,gBAAgB,CAAA;IAC/B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAA;IACpB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAA;IAC5B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;CACnB;AAED,yFAAyF;AACzF,wBAAgB,eAAe,CAC9B,KAAK,EAAE,aAAa,EACpB,KAAK,EAAE,IAAI,CAAC,aAAa,EAAE,GAAG,GAAG,MAAM,CAAC,GACtC,OAAO,CAWT;AAED,wBAAgB,SAAS,CACxB,KAAK,EAAE,aAAa,EACpB,KAAK,EAAE,MAAM,EACb,GAAG,EAAE,MAAM,GACT,aAAa,GAAG,SAAS,CAE3B;AAED,wBAAgB,SAAS,CAAC,KAAK,EAAE,aAAa,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAOnF;AAED,+EAA+E;AAC/E,wBAAgB,WAAW,CAC1B,KAAK,EAAE,aAAa,EACpB,KAAK,EAAE,MAAM,EACb,QAAQ,EAAE,MAAM,EAChB,GAAG,SAAa,GACd,MAAM,CAiBR"}

package/dist/schedule/store/claims.js

@@ -0,0 +1,57 @@
+/**
+ * `schedule/claims/<job-id>/<key>.json`: one per occurrence ever started.
+ *
+ * Published with `link` when the run is DISPATCHED — not when it is queued —
+ * so a daemon that restarts while a run waits for a slot re-derives it and
+ * runs it once, and a second daemon (or a backward clock) can never start an
+ * occurrence that already started. This file is the final once-only
+ * guarantee, independent of the daemon lease.
+ */
+import { readdirSync, rmSync, statSync } from 'node:fs';
+import { join } from 'node:path';
+import { publishExclusive, readVersioned } from './atomic.js';
+/** `true` when this call started the occurrence; `false` when it was already started. */
+export function claimOccurrence(paths, claim) {
+    if (!/^(\d{1,16}|manual-[0-9a-f-]{8,64})$/.test(claim.key)) {
+        throw new Error(`Refusing an occurrence key that is not an instant or a manual run: ${claim.key}`);
+    }
+    return publishExclusive(paths.claim(claim.jobId, claim.key), {
+        v: 1,
+        kind: 'schedule-claim',
+        ...claim,
+    });
+}
+export function readClaim(paths, jobId, key) {
+    return readVersioned(paths.claim(jobId, key), 'schedule-claim');
+}
+export function isClaimed(paths, jobId, key) {
+    try {
+        statSync(paths.claim(jobId, key));
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
+/** Remove claims older than `maxAgeMs` (nothing that old can be due again). */
+export function pruneClaims(paths, jobId, maxAgeMs, now = Date.now()) {
+    let removed = 0;
+    let names;
+    try {
+        names = readdirSync(paths.claimsOf(jobId));
+    }
+    catch {
+        return 0;
+    }
+    for (const name of names) {
+        const match = /^(\d{1,16})\.json$/.exec(name);
+        if (!match)
+            continue;
+        if (now - Number(match[1]) > maxAgeMs) {
+            rmSync(join(paths.claimsOf(jobId), name), { force: true });
+            removed++;
+        }
+    }
+    return removed;
+}
+//# sourceMappingURL=claims.js.map

package/dist/schedule/store/claims.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"claims.js","sourceRoot":"","sources":["../../../src/schedule/store/claims.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAA;AACvD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAEhC,OAAO,EAAE,gBAAgB,EAAE,aAAa,EAAE,MAAM,aAAa,CAAA;AAY7D,yFAAyF;AACzF,MAAM,UAAU,eAAe,CAC9B,KAAoB,EACpB,KAAwC;IAExC,IAAI,CAAC,qCAAqC,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;QAC5D,MAAM,IAAI,KAAK,CACd,sEAAsE,KAAK,CAAC,GAAG,EAAE,CACjF,CAAA;IACF,CAAC;IACD,OAAO,gBAAgB,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC,EAAE;QAC5D,CAAC,EAAE,CAAC;QACJ,IAAI,EAAE,gBAAgB;QACtB,GAAG,KAAK;KACR,CAAC,CAAA;AACH,CAAC;AAED,MAAM,UAAU,SAAS,CACxB,KAAoB,EACpB,KAAa,EACb,GAAW;IAEX,OAAO,aAAa,CAAgB,KAAK,CAAC,KAAK,CAAC,KAAK,EAAE,GAAG,CAAC,EAAE,gBAAgB,CAAC,CAAA;AAC/E,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,KAAoB,EAAE,KAAa,EAAE,GAAW;IACzE,IAAI,CAAC;QACJ,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,CAAA;QACjC,OAAO,IAAI,CAAA;IACZ,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,KAAK,CAAA;IACb,CAAC;AACF,CAAC;AAED,+EAA+E;AAC/E,MAAM,UAAU,WAAW,CAC1B,KAAoB,EACpB,KAAa,EACb,QAAgB,EAChB,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE;IAEhB,IAAI,OAAO,GAAG,CAAC,CAAA;IACf,IAAI,KAAe,CAAA;IACnB,IAAI,CAAC;QACJ,KAAK,GAAG,WAAW,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAA;IAC3C,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,CAAC,CAAA;IACT,CAAC;IACD,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QAC1B,MAAM,KAAK,GAAG,oBAAoB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QAC7C,IAAI,CAAC,KAAK;YAAE,SAAQ;QACpB,IAAI,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,QAAQ,EAAE,CAAC;YACvC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,IAAI,CAAC,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;YAC1D,OAAO,EAAE,CAAA;QACV,CAAC;IACF,CAAC;IACD,OAAO,OAAO,CAAA;AACf,CAAC"}

package/dist/schedule/store/digest.d.ts

@@ -0,0 +1,18 @@
+/**
+ * A digest of the project configuration that runs code, pinned when a job is
+ * confirmed.
+ *
+ * `namzu.config.json` in the job's folder is repository content: a `git pull`
+ * in one run can add a hook, a tool server, a plugin or a permission before the
+ * next. A folder check compares a path; this compares what is IN it. The
+ * sections that execute code or change what may run are hashed, plus the
+ * project's command files and plugin bundles. A change gives the next run
+ * `blocked-config` until the operator confirms the job again.
+ */
+import type { ProjectDigest } from '../types.js';
+export declare const DIGESTED_SECTIONS: readonly ["hooks", "mcpServers", "plugins", "permissions", "permissionChecks", "sandbox", "web", "additionalDirectories", "profiles"];
+/** The digest of `folder`'s code-executing project configuration now. */
+export declare function computeProjectDigest(folder: string): ProjectDigest;
+/** The entries that differ between two digests, by relative path. */
+export declare function projectDigestChanges(pinned: ProjectDigest, now: ProjectDigest): string[];
+//# sourceMappingURL=digest.d.ts.map

package/dist/schedule/store/digest.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"digest.d.ts","sourceRoot":"","sources":["../../../src/schedule/store/digest.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAKH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,aAAa,CAAA;AAGhD,eAAO,MAAM,iBAAiB,uIAUpB,CAAA;AA2FV,yEAAyE;AACzE,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,MAAM,GAAG,aAAa,CAUlE;AAED,qEAAqE;AACrE,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,aAAa,EAAE,GAAG,EAAE,aAAa,GAAG,MAAM,EAAE,CAGxF"}

package/dist/schedule/store/digest.js

@@ -0,0 +1,139 @@
+/**
+ * A digest of the project configuration that runs code, pinned when a job is
+ * confirmed.
+ *
+ * `namzu.config.json` in the job's folder is repository content: a `git pull`
+ * in one run can add a hook, a tool server, a plugin or a permission before the
+ * next. A folder check compares a path; this compares what is IN it. The
+ * sections that execute code or change what may run are hashed, plus the
+ * project's command files and plugin bundles. A change gives the next run
+ * `blocked-config` until the operator confirms the job again.
+ */
+import { createHash } from 'node:crypto';
+import { lstatSync, readFileSync, readdirSync } from 'node:fs';
+import { join, relative } from 'node:path';
+import { stableStringify } from './jobs.js';
+export const DIGESTED_SECTIONS = [
+    'hooks',
+    'mcpServers',
+    'plugins',
+    'permissions',
+    'permissionChecks',
+    'sandbox',
+    'web',
+    'additionalDirectories',
+    'profiles',
+];
+const MAX_FILES = 2_000;
+const MAX_BYTES = 32 * 1024 * 1024;
+function sha(text) {
+    return createHash('sha256').update(text).digest('hex');
+}
+function configSections(folder) {
+    let raw;
+    try {
+        raw = readFileSync(join(folder, 'namzu.config.json'), 'utf8');
+    }
+    catch {
+        return 'absent';
+    }
+    try {
+        const parsed = JSON.parse(raw);
+        const picked = {};
+        for (const key of DIGESTED_SECTIONS)
+            if (key in parsed)
+                picked[key] = parsed[key];
+        // A file that declares none of these runs nothing, like no file at all.
+        return Object.keys(picked).length === 0 ? 'absent' : sha(stableStringify(picked));
+    }
+    catch {
+        // Unparseable is a state too: hash the bytes, so fixing it is a change.
+        return `unparsed:${sha(raw)}`;
+    }
+}
+function treeDigest(root) {
+    const hash = createHash('sha256');
+    let files = 0;
+    let bytes = 0;
+    let overflow = false;
+    const visit = (dir) => {
+        let entries;
+        try {
+            entries = readdirSync(dir).sort();
+        }
+        catch {
+            return;
+        }
+        for (const name of entries) {
+            if (files >= MAX_FILES) {
+                overflow = true;
+                return;
+            }
+            const path = join(dir, name);
+            let st;
+            try {
+                st = lstatSync(path);
+            }
+            catch {
+                continue;
+            }
+            const rel = relative(root, path).replaceAll('\\', '/');
+            if (st.isSymbolicLink()) {
+                hash.update(`link:${rel}\0`);
+                continue;
+            }
+            if (st.isDirectory()) {
+                if (name === 'node_modules' || name === '.git') {
+                    hash.update(`dir:${rel}:${st.mtimeMs}\0`);
+                    continue;
+                }
+                visit(path);
+                continue;
+            }
+            if (!st.isFile())
+                continue;
+            files++;
+            if (bytes + st.size > MAX_BYTES) {
+                overflow = true;
+                hash.update(`file:${rel}:${st.size}:${st.mtimeMs}\0`);
+                continue;
+            }
+            bytes += st.size;
+            hash.update(`file:${rel}\0`);
+            try {
+                hash.update(readFileSync(path));
+            }
+            catch {
+                hash.update('unreadable');
+            }
+            hash.update('\0');
+        }
+    };
+    try {
+        if (!lstatSync(root).isDirectory())
+            return 'absent';
+    }
+    catch {
+        return 'absent';
+    }
+    visit(root);
+    return `${overflow ? 'partial:' : ''}${hash.digest('hex')}`;
+}
+/** The digest of `folder`'s code-executing project configuration now. */
+export function computeProjectDigest(folder) {
+    return {
+        algo: 'sha256',
+        files: {
+            'namzu.config.json': configSections(folder),
+            '.namzu/commands': treeDigest(join(folder, '.namzu', 'commands')),
+            '.namzu/plugins': treeDigest(join(folder, '.namzu', 'plugins')),
+        },
+        sections: [...DIGESTED_SECTIONS],
+    };
+}
+/** The entries that differ between two digests, by relative path. */
+export function projectDigestChanges(pinned, now) {
+    const keys = new Set([...Object.keys(pinned.files), ...Object.keys(now.files)]);
+    return [...keys].filter((k) => pinned.files[k] !== now.files[k]).sort();
+}
+//# sourceMappingURL=digest.js.map