@namzu/cli 35.0.0 → 36.0.0

package/dist/schedule/fire/fire.js

@@ -1,681 +0,0 @@
-/**
- * `namzu schedule __fire`: one scheduled run, as a headless turn in the
- * job's folder. Started only by the daemon (or `schedule run-now` without
- * one), never by hand, and not listed in help.
- *
- * It composes what `exec` composes — trust, the project's config, a new
- * conversation, `createAgentSession`, `send`, the provider wait — without
- * sharing `exec`'s runner: `exec` resolves `prompt` into `auto` because
- * nobody can answer, and a scheduled run must do the opposite. Here every
- * batch that would reach a person is HELD (`SendOptions.reviewHold`): the
- * turn parks durably, the run records `awaiting-approval`, and the operator
- * answers later in the TUI.
- *
- * Checks before any model call, each ending the run as `blocked-config` with
- * zero tokens spent: the job still exists at the revision the daemon
- * claimed, is active and still matches its confirmation; the folder is the
- * canonical folder trust was granted for and can be listed; the project's
- * code-executing config is the one confirmed; every permission rule compiles;
- * the pinned provider has a credential in the service's environment.
- *
- * The child's own watchdog enforces the wall clock: the kernel's turn
- * timeout first, then, a minute later, it releases its session lease and
- * exits. The daemon never kills a run by a pid it read from disk.
- */
-import { hostname } from 'node:os';
-import { TurnCancelled, asSessionId, describeSchedule, hostTimeZone, installedCommandShellForDialect, releaseHeldSessionLeases, revealHiddenCharacters, scanSchedulePrompt, } from '@namzu/sdk';
-import { pauseWait } from '../../commands/provider-wait.js';
-import { readPermissionLayers } from '../../config/load.js';
-import { resolveTrustedProjectContext } from '../../config/trusted-project-context.js';
-import { sanitizeLine, summaryOf } from '../../integrations/notifications/desktop/sanitize.js';
-import { closeSessions, openSessions, setTitle, startConversation, } from '../../integrations/sessions/store.js';
-import { cliLogger, createStderrSink, installCliLogging } from '../../logging.js';
-import { describeTurnInterruption, retryAfterMs } from '../../tui/turn-interruption.js';
-import { DEFAULT_WAKE_GATE_CONTEXT_CHARS } from '../build.js';
-import { readDaemonEnv } from '../env.js';
-import { checkJobFolder, folderReadable } from '../folder.js';
-import { compileJobPolicy, compileScriptCheckPolicy, withheldTools } from '../policy.js';
-import { verifyScheduledScript } from '../script-check.js';
-import { scriptShellUnavailableReason } from '../script-shell.js';
-import { computeProjectDigest, projectDigestChanges } from '../store/digest.js';
-import { confirmationHolds, readJob } from '../store/jobs.js';
-import { runResultVersion, } from '../types.js';
-import { browserPreflight } from './browser-preflight.js';
-import { CallTally } from './calls.js';
-import { writeRunResult } from './result.js';
-import { capOutput, runScript } from './run-script.js';
-import { unattendedNote } from './unattended-note.js';
-import { parseWakeGateOutput } from './wake-gate.js';
-export const HOLD_REASON = 'Scheduled run: waiting for the operator to approve';
-/** How long past the turn's own timeout the child waits before it stops itself. */
-export const WATCHDOG_GRACE_MS = 60_000;
-export function parseFireArgs(argv) {
-    const get = (name) => {
-        const at = argv.indexOf(`--${name}`);
-        return at >= 0 ? argv[at + 1] : undefined;
-    };
-    const jobId = get('job');
-    const runId = get('run');
-    const key = get('key');
-    const revision = Number(get('revision'));
-    const trigger = (get('trigger') ?? 'scheduled');
-    if (!jobId || !runId || !key || !Number.isSafeInteger(revision)) {
-        return { error: '__fire needs --job, --run, --key and --revision' };
-    }
-    if (!['scheduled', 'late', 'catch-up', 'manual'].includes(trigger)) {
-        return { error: `__fire: unknown trigger ${trigger}` };
-    }
-    const scheduledFor = get('scheduled-for');
-    const daemonEpoch = get('epoch');
-    return {
-        jobId,
-        runId,
-        key,
-        revision,
-        trigger,
-        ...(scheduledFor ? { scheduledFor } : {}),
-        ...(daemonEpoch ? { daemonEpoch } : {}),
-    };
-}
-/** Where a credential came from, in words, and whether it is another program's. */
-function credentialSource(source) {
-    switch (source.kind) {
-        case 'env':
-            return {
-                text: `environment variable ${source.envName ?? ''}`.trim(),
-                borrowed: false,
-            };
-        case 'claude-file':
-            return {
-                text: `Claude Code's sign-in (${source.path ?? ''})`,
-                borrowed: true,
-            };
-        case 'codex-file':
-            return { text: `Codex's sign-in (${source.path ?? ''})`, borrowed: true };
-        case 'gemini-file':
-            return {
-                text: `Gemini CLI's sign-in (${source.path ?? ''})`,
-                borrowed: true,
-            };
-        case 'stored-gemini-key':
-            return {
-                text: `namzu's saved Gemini API key (${source.path ?? ''})`,
-                borrowed: false,
-            };
-        case 'stored':
-            return {
-                text: `namzu's credential store (${source.path ?? ''})`,
-                borrowed: false,
-            };
-        case 'keychain':
-            return { text: 'the system keychain', borrowed: true };
-        default:
-            return { text: source.kind, borrowed: false };
-    }
-}
-export const BORROWED_CREDENTIAL_WARNING = "This run used another program's sign-in. Refreshing it here can race that program's own refresh; store a credential with `namzu login` or daemon.env for unattended runs.";
-/**
- * Run one fire. Returns the exit code; the result file is the record. Exit
- * codes follow `exec`: 0 completed or parked, 1 failed, 64 usage, 75 the
- * provider stayed unavailable, 77 the folder is not trusted for this job.
- */
-export async function runFire(ctx, paths, args, deps = {}) {
-    const now = deps.now ?? (() => new Date());
-    const startedAt = now().toISOString();
-    if (!deps.keepLogging)
-        installCliLogging(createStderrSink('json'), 'info');
-    const log = cliLogger();
-    let sessionId;
-    let projectSlug;
-    let turnId;
-    const warnings = [];
-    const found = {};
-    let calls = new CallTally();
-    // `script+agent` only: set once its gate has run, so every finish() from
-    // here on — whichever status the rest of this function reaches — carries
-    // it, the same way sessionId/turnId are threaded through `base()`.
-    let gateResult;
-    let scriptOutput;
-    const base = () => ({
-        v: 1,
-        kind: 'schedule-run-result',
-        runId: args.runId,
-        jobId: args.jobId,
-        startedAt,
-        ...(sessionId ? { sessionId } : {}),
-        ...(projectSlug ? { projectSlug } : {}),
-        ...(turnId ? { turnId } : {}),
-        ...(found.credential ? { credentialSource: found.credential } : {}),
-        ...(warnings.length > 0 ? { warnings: [...warnings] } : {}),
-        ...(gateResult ? { gateResult } : {}),
-        ...(scriptOutput ? { scriptOutput } : {}),
-        ...calls.tallies(),
-    });
-    // Once the watchdog has recorded the wall clock, nothing after it rewrites the result.
-    let settledByWatchdog = false;
-    const finish = (status, exitCode, extra = {}) => {
-        if (settledByWatchdog)
-            return 1;
-        const result = {
-            ...base(),
-            status,
-            exitCode,
-            endedAt: now().toISOString(),
-            ...extra,
-        };
-        writeRunResult(paths, { ...result, v: runResultVersion(result) });
-        log.info('scheduled run finished', {
-            'namzu.schedule.job_id': args.jobId,
-            'namzu.schedule.run_id': args.runId,
-            'namzu.schedule.status': status,
-        });
-        return exitCode;
-    };
-    const blocked = (reason, exitCode = 1) => finish('blocked-config', exitCode, { reason });
-    writeRunResult(paths, { ...base(), status: 'running', exitCode: 0 });
-    // ── the job, as claimed ───────────────────────────────────────────────
-    let job;
-    try {
-        job = readJob(paths, args.jobId);
-    }
-    catch (error) {
-        return blocked(error instanceof Error ? error.message : String(error));
-    }
-    if (!job)
-        return blocked('the job was removed before the run started');
-    if (job.revision !== args.revision) {
-        return blocked(`job changed: revision ${job.revision}, the run was claimed for ${args.revision}`);
-    }
-    if (job.state !== 'active')
-        return blocked(`the job is ${job.state}`);
-    if (!confirmationHolds(job)) {
-        return blocked(`job changed outside namzu since it was confirmed; run namzu schedule confirm ${job.name}`);
-    }
-    const runKind = job.runKind ?? 'agent';
-    if (runKind !== 'agent' && runKind !== 'script' && runKind !== 'script+agent') {
-        return blocked(`the job has an unknown run kind: ${String(runKind)}`);
-    }
-    if (runKind !== 'agent' && !job.script) {
-        return blocked(`the ${runKind} job has no script recorded`);
-    }
-    const model = job.model;
-    if (runKind !== 'script' && !model)
-        return blocked('an agent job has no model; edit the job and confirm it again');
-    // ── the folder, as trusted ────────────────────────────────────────────
-    const folder = checkJobFolder(job.folder.path, { namzuHome: paths.home });
-    if (!folder.ok)
-        return blocked(folder.reason, 77);
-    if (folder.canonical !== job.folder.canonical || job.trust?.canonical !== folder.canonical) {
-        return blocked(`folder moved or replaced: ${job.folder.path} is now ${folder.canonical}, the job was confirmed for ${job.folder.canonical}`, 77);
-    }
-    const readable = folderReadable(folder.canonical);
-    if (!readable.ok)
-        return blocked(readable.reason);
-    const changed = projectDigestChanges(job.projectDigest, computeProjectDigest(folder.canonical));
-    if (changed.length > 0) {
-        return blocked(`project config changed since the job was confirmed (${changed.join(', ')}); run namzu schedule confirm ${job.name}`);
-    }
-    // ── what the run may do ───────────────────────────────────────────────
-    let projectCtx;
-    let layers;
-    try {
-        projectCtx = resolveTrustedProjectContext(ctx, folder.canonical);
-        // The user config is the scheduler's home's, whatever NAMZU_HOME the
-        // environment given to the run names (or leaves unset).
-        layers = readPermissionLayers({
-            cwd: folder.canonical,
-            env: { ...(deps.env ?? process.env), NAMZU_HOME: paths.home },
-        });
-    }
-    catch (error) {
-        return blocked(`config cannot be read: ${error instanceof Error ? error.message : String(error)}`);
-    }
-    const policy = compileJobPolicy(job.permissions, {
-        layers,
-        namzuHome: paths.home,
-        folder: job.folder,
-    });
-    if (policy.diagnostics.length > 0) {
-        // A rule someone believes is in force and that would be dropped is
-        // worse than not running.
-        return blocked(`permission rules do not compile: ${policy.diagnostics.join('; ')}`);
-    }
-    // ── a pure script job: no model, no session, no browser or provider ────
-    // Everything above already re-verified the job is active, its
-    // confirmation still holds (which now covers the script's own text), its
-    // folder is the confirmed one and its project config has not drifted —
-    // exactly what an agent run checks before it opens a session. A script
-    // job stops here instead of going any further.
-    // `build.ts` already refuses to CREATE a script/script+agent job on
-    // native (non-WSL) Windows, but a job confirmed on WSL or Linux can still
-    // be fired by a daemon that later finds itself running on native Windows
-    // (a moved NAMZU_HOME, a machine re-imaged from WSL to a native install).
-    // The `sh` dialect label `verifyScheduledScript` checked the job's script
-    // against is shared by POSIX sh AND cmd.exe, so a dialect match alone
-    // does not mean the floor actually read what would run; refuse here too,
-    // the same way the dialect-mismatch check below refuses a changed shell.
-    if (runKind !== 'agent' && process.platform === 'win32') {
-        return blocked(`a ${runKind} job cannot run on native Windows: its script would run through cmd.exe, read only as a loose approximation the floor cannot fully verify. Use WSL, where a job's script runs on the Linux side, or an agent job.`);
-    }
-    const selectedScriptShell = runKind !== 'agent' && job.script
-        ? installedCommandShellForDialect(job.script.shell)
-        : undefined;
-    if (runKind !== 'agent' && job.script && !selectedScriptShell)
-        return blocked(scriptShellUnavailableReason(job.script.shell));
-    if (runKind !== 'agent' && job.script && selectedScriptShell) {
-        // The digest binds the script's own text and the job's OWN rules, but
-        // not a config file's `deny` rules — those can gain a new one after
-        // confirmation without the digest ever changing. An agent phase would
-        // see that new deny on its very next live call; a script has no live
-        // calls to see it with, so it is re-verified fresh, every fire, the
-        // same way a moved folder or a changed project config already is.
-        const scriptPolicy = compileScriptCheckPolicy(job.permissions, {
-            layers,
-            namzuHome: paths.home,
-            folder: job.folder,
-        });
-        const checked = verifyScheduledScript(job.script.body, selectedScriptShell.dialect, scriptPolicy);
-        if (!checked.ok) {
-            return blocked(`the ${runKind === 'script' ? 'script' : 'wake-gate script'} is no longer allowed: ${checked.reason}; run namzu schedule confirm ${job.name} once it is fixed`);
-        }
-    }
-    if (runKind === 'script') {
-        return runScriptJob(job, folder.canonical, paths, deps, selectedScriptShell, finish, blocked);
-    }
-    if (!model)
-        return blocked('an agent job has no model; edit the job and confirm it again');
-    // ── script+agent's wake-gate: a cheap script decides whether the
-    // (expensive) agent phase is worth running at all ─────────────────────
-    let wakeGateContext;
-    if (runKind === 'script+agent') {
-        const script = job.script;
-        if (!script)
-            return blocked(`${job.name} is a script+agent job with no wake-gate recorded`);
-        const gateEnv = { ...(deps.env ?? process.env), NAMZU_HOME: paths.home };
-        const gate = await runScript(script.body, script.shell, {
-            cwd: folder.canonical,
-            env: gateEnv,
-            timeoutMs: script.timeoutMs,
-            resolvedShell: selectedScriptShell,
-        });
-        if (gate.shellUnavailable)
-            return blocked(scriptShellUnavailableReason(gate.shellUnavailable));
-        if (gate.dialectMismatch) {
-            return blocked(`the wake-gate script was confirmed for ${gate.dialectMismatch.expected}, but this host now runs commands as ${gate.dialectMismatch.actual}; run namzu schedule confirm ${job.name} to verify it in the shell that will actually run it`);
-        }
-        scriptOutput = {
-            stdout: capOutput(gate.stdout),
-            stderr: capOutput(gate.stderr),
-        };
-        if (gate.timedOut) {
-            return finish('check-failed', 1, {
-                reason: `the wake-gate script exceeded its ${script.timeoutMs} ms timeout`,
-            });
-        }
-        if (gate.exitCode !== 0) {
-            return finish('check-failed', 1, {
-                reason: `the wake-gate script exited ${gate.exitCode ?? 'without a code'}`,
-            });
-        }
-        const parsed = parseWakeGateOutput(gate.stdout, job.wakeGate?.maxContextChars ?? DEFAULT_WAKE_GATE_CONTEXT_CHARS);
-        if (!parsed.ok)
-            return finish('check-failed', 1, { reason: parsed.reason });
-        gateResult = {
-            wake: parsed.result.wake,
-            contextChars: parsed.result.context.length,
-        };
-        if (!parsed.result.wake)
-            return finish('completed', 0, {});
-        // A warning only: runtime output is not something anyone confirms in
-        // advance, so this never blocks the way the same scan can gate a
-        // proposed prompt.
-        const findings = scanSchedulePrompt(parsed.result.context);
-        if (findings.length > 0)
-            warnings.push(...findings.map((f) => `wake-gate context: ${f}`));
-        wakeGateContext = revealHiddenCharacters(parsed.result.context);
-    }
-    // ── the browser, when the job has one ─────────────────────────────────
-    const grant = job.permissions.browser;
-    let browser;
-    if (grant) {
-        const checked = await (deps.browserPreflight ?? browserPreflight)(grant, paths.home, {
-            env: deps.env ?? process.env,
-        });
-        if (!checked.ok)
-            return blocked(checked.reason);
-        browser = checked;
-        warnings.push(...checked.warnings);
-    }
-    // ── the provider, as the service sees it ──────────────────────────────
-    const daemonEnv = readDaemonEnv(paths.daemonEnv);
-    warnings.push(...daemonEnv.warnings);
-    const discoveryEnv = { ...(deps.env ?? process.env), ...daemonEnv.values };
-    const agent = deps.agent ?? (await import('../../tui/agent.js'));
-    const probe = await agent.probeAgentSession({ env: discoveryEnv });
-    const detected = probe.detected.find((d) => d.entry.id === model.provider);
-    if (!detected) {
-        return blocked(`no credential for ${model.provider} in the scheduler's environment; run namzu login, or put the key in ${paths.daemonEnv}`);
-    }
-    const source = credentialSource(detected.source);
-    found.credential = source.text;
-    if (source.borrowed)
-        warnings.push(BORROWED_CREDENTIAL_WARNING);
-    const prefs = {
-        version: 3,
-        providers: [
-            {
-                id: model.provider,
-                ...(model.model ? { model: model.model } : {}),
-            },
-        ],
-        subagents: { active: [] },
-    };
-    const withheld = withheldTools(job.permissions, policy);
-    calls = new CallTally(withheld);
-    // ── the conversation ──────────────────────────────────────────────────
-    let sessions;
-    try {
-        sessions = await openSessions(folder.canonical, { stateRoot: paths.home });
-        projectSlug = sessions.slug;
-        sessionId = await startConversation(sessions, {
-            origin: { protocol: 'cli', kind: 'prompt' },
-        });
-        const when = args.scheduledFor ?? startedAt;
-        const tz = job.schedule.kind === 'cron' ? job.schedule.tz : undefined;
-        await setTitle(sessions, asSessionId(sessionId), `Scheduled: ${job.name} · ${describeWhen(when, tz)}`);
-    }
-    catch (error) {
-        return finish('failed', 1, {
-            reason: `the conversation could not be started: ${error instanceof Error ? error.message : String(error)}`,
-        });
-    }
-    writeRunResult(paths, { ...base(), status: 'running', exitCode: 0 });
-    const config = projectCtx.config;
-    const session = await agent.createAgentSession(prefs, [detected], {
-        cwd: folder.canonical,
-        stateRoot: paths.home,
-        conversationSessions: sessions,
-        scope: {
-            sessionId: asSessionId(sessionId),
-            topicId: sessions.topicId,
-            projectId: sessions.projectId,
-            tenantId: sessions.tenantId,
-        },
-        rules: policy.rules,
-        permissionMode: policy.mode,
-        withheldTools: withheld,
-        ...(config.mcpServers ? { mcpServers: config.mcpServers } : {}),
-        ...(config.plugins ? { plugins: config.plugins } : {}),
-        ...(config.skills ? { skills: config.skills } : {}),
-        ...(config.hooks ? { hooks: config.hooks } : {}),
-        ...(policy.network && config.web ? { web: config.web } : {}),
-        ...(config.compaction ? { compaction: config.compaction } : {}),
-        ...(config.memory ? { memory: config.memory } : {}),
-        sandbox: job.permissions.execution === 'sandbox'
-            ? { ...(config.sandbox ?? {}), enabled: true }
-            : { enabled: false },
-        ...(job.permissions.additionalDirectories
-            ? { additionalDirectories: [...job.permissions.additionalDirectories] }
-            : {}),
-        ...(grant && browser
-            ? {
-                browser: {
-                    profile: grant.profile,
-                    engine: browser.engine,
-                    headless: grant.headed ? 'never' : 'always',
-                    // The host checks every landing against the same sites the
-                    // gate was given: the grant, what a config file denies, and
-                    // nothing else.
-                    sites: {
-                        ...grant.sites,
-                        ...Object.fromEntries(layers.flatMap((layer) => layer.browserDenies ?? []).map((site) => [site, 'deny'])),
-                        '*': 'deny',
-                    },
-                    home: paths.home,
-                    mode: 'unattended',
-                },
-            }
-            : {}),
-        limits: {
-            maxIterations: job.budget.maxIterations,
-            tokenBudget: job.budget.tokenBudget,
-            timeoutMs: job.budget.timeoutMs,
-        },
-    });
-    const closeAll = async () => {
-        await session.close().catch(() => undefined);
-        closeSessions(sessions);
-    };
-    if (!session.hasProvider) {
-        await closeAll();
-        return blocked(session.errorHint ?? 'the provider could not be started');
-    }
-    if (session.mcpFailed.length > 0) {
-        await closeAll();
-        return blocked(`tool servers unavailable: ${session.mcpFailed.map((f) => `${f.name} (${f.reason})`).join(', ')}`);
-    }
-    // ── the turn ──────────────────────────────────────────────────────────
-    const abort = new AbortController();
-    const exit = deps.exit ?? ((code) => process.exit(code));
-    const watchdog = setTimeout(() => {
-        abort.abort(new TurnCancelled('user'));
-        void (async () => {
-            finish('timed-out', 1, {
-                reason: `the run exceeded its ${job.budget.timeoutMs} ms wall clock`,
-            });
-            settledByWatchdog = true;
-            await releaseHeldSessionLeases().catch(() => undefined);
-            exit(1);
-        })();
-    }, job.budget.timeoutMs + (deps.graceMs ?? WATCHDOG_GRACE_MS));
-    watchdog.unref();
-    let text = '';
-    let totalTokens;
-    let costUsd;
-    let paused = null;
-    let failed = null;
-    let stopReason;
-    const consume = async (stream) => {
-        paused = null;
-        failed = null;
-        for await (const event of stream) {
-            switch (event.kind) {
-                case 'delta':
-                    text += event.text;
-                    break;
-                case 'usage':
-                    totalTokens = event.totalTokens;
-                    costUsd = event.cost?.totalCost;
-                    break;
-                case 'paused':
-                    paused = event;
-                    turnId = event.turnId;
-                    failed = describeTurnInterruption(event);
-                    break;
-                case 'error':
-                    failed = describeTurnInterruption(event);
-                    break;
-                case 'done':
-                    if (event.text !== undefined)
-                        text = event.text;
-                    stopReason = event.stopReason;
-                    if (event.turnId)
-                        turnId = event.turnId;
-                    break;
-                case 'tool-start':
-                    log.info('scheduled run tool call', {
-                        'namzu.schedule.run_id': args.runId,
-                        'namzu.tool.name': event.toolName,
-                    });
-                    break;
-                case 'tool-end':
-                    calls.observe(event);
-                    break;
-            }
-        }
-    };
-    try {
-        await consume(session.send([{ role: 'user', content: job.prompt, timestamp: Date.now() }], {
-            signal: abort.signal,
-            permissionMode: policy.mode,
-            reviewHold: { reason: HOLD_REASON },
-            systemNote: unattendedNote(job.name, {
-                browser: grant !== undefined,
-                now: now(),
-                tz: job.schedule.kind === 'cron' ? job.schedule.tz : hostTimeZone(),
-                ...(wakeGateContext !== undefined ? { wakeGateContext } : {}),
-            }),
-            ...(model.effort ? { effort: model.effort } : {}),
-        }));
-        // A provider pause is waited out inside the job's budget, from the
-        // checkpoint, as `exec --wait-for-provider` does.
-        let waits = 0;
-        let waitedMs = 0;
-        for (;;) {
-            const current = paused;
-            if (!current || !(current.providerError || current.failure))
-                break;
-            const asked = retryAfterMs(current);
-            const decision = pauseWait({
-                waited: waits,
-                ...(asked !== undefined ? { retryAfterMs: asked } : {}),
-                waitedMs,
-                budgetMs: job.budget.waitForProviderMs,
-            });
-            if (decision.kind === 'stop') {
-                await closeAll();
-                clearTimeout(watchdog);
-                return finish('failed', 75, {
-                    reason: `${failed ?? 'the provider paused the turn'}; not resumed: ${decision.reason}`,
-                    ...(asked !== undefined ? { retryAfterMs: asked } : {}),
-                });
-            }
-            waits++;
-            await new Promise((resolve) => setTimeout(resolve, decision.delayMs));
-            waitedMs += decision.delayMs;
-            await consume(session.resumePaused({
-                turnId: current.turnId,
-                checkpointId: current.checkpointId,
-                signal: abort.signal,
-                permissionMode: policy.mode,
-                reviewHold: { reason: HOLD_REASON },
-            }));
-        }
-    }
-    finally {
-        clearTimeout(watchdog);
-    }
-    await closeAll();
-    const usage = {
-        ...(totalTokens !== undefined ? { totalTokens } : {}),
-        ...(costUsd !== undefined ? { costUsd } : {}),
-    };
-    const withUsage = Object.keys(usage).length > 0 ? { usage } : {};
-    const summary = summaryOf(text);
-    const parked = paused;
-    if (parked) {
-        // A tool that asked for a person parks the run the same way a held
-        // batch does: the operator continues it from the TUI. The reason is
-        // what they have to do, so it is recorded as the reason.
-        const handoff = parked.handoff ? sanitizeLine(handoffReason(parked.handoff), 300) : '';
-        return finish('awaiting-approval', 0, {
-            reason: handoff || parked.reason,
-            ...(handoff ? { handoff: { reason: handoff } } : {}),
-            ...(summary ? { summary } : {}),
-            ...withUsage,
-        });
-    }
-    if (failed)
-        return finish('failed', 1, {
-            reason: failed,
-            ...(summary ? { summary } : {}),
-            ...withUsage,
-        });
-    if (stopReason === 'timeout') {
-        return finish('timed-out', 1, {
-            reason: `the turn reached its ${job.budget.timeoutMs} ms time limit`,
-            ...(summary ? { summary } : {}),
-            ...withUsage,
-        });
-    }
-    if (stopReason && stopReason !== 'end_turn') {
-        return finish('failed', 1, {
-            reason: `the turn did not finish normally: ${stopReason}`,
-            ...(summary ? { summary } : {}),
-            ...withUsage,
-        });
-    }
-    return finish('completed', 0, {
-        ...(summary ? { summary } : {}),
-        ...withUsage,
-    });
-}
-/**
- * Run a pure `script` job's body on the host and map the outcome to a
- * status: `completed` (exit 0), `failed` (non-zero exit), `timed-out` (the
- * script's own `timeoutMs`, a separate clock from `budget.timeoutMs`).
- * `blocked-config` only for what stops the script before it could even
- * start — here, the host's shell no longer matching the dialect the script
- * was verified in. Never `awaiting-approval`/`approval-expired`/
- * `interrupted` in the tool-parking sense: nothing about a script can park.
- */
-async function runScriptJob(job, cwd, paths, deps, selectedShell, finish, blocked) {
-    const script = job.script;
-    if (!script)
-        return blocked(`${job.name} is a script job with no script recorded`);
-    const env = { ...(deps.env ?? process.env), NAMZU_HOME: paths.home };
-    const result = await runScript(script.body, script.shell, {
-        cwd,
-        env,
-        timeoutMs: script.timeoutMs,
-        resolvedShell: selectedShell,
-    });
-    if (result.shellUnavailable)
-        return blocked(scriptShellUnavailableReason(result.shellUnavailable));
-    if (result.dialectMismatch) {
-        return blocked(`the script was confirmed for ${result.dialectMismatch.expected}, but this host now runs commands as ${result.dialectMismatch.actual}; run namzu schedule confirm ${job.name} to verify it in the shell that will actually run it`);
-    }
-    const scriptOutput = {
-        stdout: capOutput(result.stdout),
-        stderr: capOutput(result.stderr),
-    };
-    if (result.timedOut) {
-        return finish('timed-out', 1, {
-            reason: `the script exceeded its ${script.timeoutMs} ms timeout`,
-            scriptOutput,
-        });
-    }
-    if (result.exitCode === 0)
-        return finish('completed', 0, { scriptOutput });
-    return finish('failed', result.exitCode ?? 1, {
-        reason: `the script exited ${result.exitCode ?? 'without a code'}`,
-        scriptOutput,
-    });
-}
-/**
- * What a parked run tells the operator it needs: the tool's reason, and for
- * the browser the command that signs in again. "http://… is showing a
- * sign-in page" alone, in a notification and `schedule list`, left what to
- * do unsaid.
- */
-export function handoffReason(handoff) {
-    const login = handoff.detail?.tool === 'browser' ? handoff.detail.loginCommand : undefined;
-    return login ? `${handoff.reason}; sign in again with ${login}` : handoff.reason;
-}
-function describeWhen(iso, tz) {
-    try {
-        return new Intl.DateTimeFormat('en-GB', {
-            dateStyle: 'medium',
-            timeStyle: 'short',
-            ...(tz ? { timeZone: tz } : {}),
-        }).format(new Date(iso));
-    }
-    catch {
-        return iso;
-    }
-}
-/** A one-line description for logs and notifications; never the prompt. */
-export function describeJob(job) {
-    return `${job.name} (${describeSchedule(job.schedule, job.schedule.kind === 'cron' ? { tz: job.schedule.tz } : {})}) on ${hostname()}`;
-}
-//# sourceMappingURL=fire.js.map