@namzu/sdk 45.0.0 → 45.1.0

package/dist/tools/schedules/schedule-tool.js

@@ -0,0 +1,327 @@
+import { z } from 'zod';
+import { canonicalizeBrowserSitePattern } from '../builtins/browser-url.js';
+import { defineTool } from '../defineTool.js';
+import { presentScheduleCall, presentScheduleResult } from './present.js';
+import { scanSchedulePrompt } from './prompt-scan.js';
+export const SCHEDULE_TOOL_NAME = 'schedule';
+/**
+ * A person reads the whole proposal — the prompt, the rules, the schedule,
+ * the credential source — before answering `create`, `resume` or `delete`.
+ * The executor's `DEFAULT_TOOL_TIMEOUT_MS` (two minutes) is sized for a tool
+ * call, not a person on the other end of a screen, and would abandon the
+ * call out from under them mid-read. `save_skill`
+ * (`packages/cli/src/skills/save.ts`) waits on the same kind of answer and
+ * uses the same thirty minutes, for the same reason.
+ */
+const OPERATOR_CONFIRM_TIMEOUT_MS = 30 * 60_000;
+const EFFECT = z.enum(['allow', 'ask', 'deny']);
+const NETWORK_TOOLS = ['web_fetch', 'web_search'];
+const BROWSER_PROFILE = /^[a-z0-9][a-z0-9-]{0,62}$/;
+const inputSchema = z.object({
+    action: z
+        .enum(['create', 'list', 'pause', 'resume', 'delete'])
+        .describe('What to do. create, resume and delete ask the operator first.'),
+    name: z
+        .string()
+        .regex(/^[a-z0-9][a-z0-9-]{0,62}$/)
+        .optional()
+        .describe('create: job name, lowercase letters, digits and dashes'),
+    prompt: z.string().min(1).max(20_000).optional().describe('create: what the run is asked to do'),
+    when: z
+        .string()
+        .optional()
+        .describe('create: "every 30m", "0 9 * * 1-5" (cron), "at 2026-09-24 09:00", "in 2h"'),
+    folder: z
+        .string()
+        .optional()
+        .describe("create: folder to run in; leave unset for the session's unless the user named one"),
+    tz: z
+        .string()
+        .optional()
+        .describe("create: IANA time zone; leave unset for the operator's own zone unless the user named another"),
+    permissions: z
+        .object({
+        preset: z
+            .enum(['read-only', 'edit-in-folder'])
+            .optional()
+            .describe('read-only: read/glob/grep/ls only. edit-in-folder: also edit and write, bash asks'),
+        unmatched: z
+            .enum(['park', 'deny'])
+            .describe('A call no rule covers: park (wait for the operator) or deny'),
+        execution: z
+            .enum(['host', 'sandbox'])
+            .optional()
+            .describe('Where commands run; leave unset (this machine) unless the user asked for a sandbox'),
+        rules: z
+            .record(z.string(), z.union([EFFECT, z.record(z.string(), EFFECT)]))
+            .optional()
+            .describe('Extra rules, e.g. {"bash": {"npm test*": "allow"}}'),
+        browser: z
+            .object({
+            profile: z
+                .string()
+                .regex(BROWSER_PROFILE)
+                .describe('Browser profile the operator signed in with, e.g. "work"'),
+            sites: z
+                .record(z.string(), z.enum(['read', 'ask', 'act']))
+                .describe('Site to level, e.g. {"https://github.com": "read"}. read: open and read only; ask: changes wait for the operator; act: changes run unasked. Unlisted sites are denied; there is no "*".'),
+            headed: z.boolean().optional().describe('Show the browser window; default no window'),
+        })
+            .optional()
+            .describe('Browser access; omit for none'),
+    })
+        .optional()
+        .describe('create: REQUIRED explicit permission set; there is no default'),
+    budget: z
+        .object({
+        maxIterations: z
+            .number()
+            .int()
+            .positive()
+            .optional()
+            .describe('Model steps one run may take (each model call with its tool calls is one step), not how many times the job runs. Omit for the default; a browser task takes 10 or more.'),
+        tokenBudget: z
+            .number()
+            .int()
+            .positive()
+            .optional()
+            .describe('Tokens one run may spend in total. Every model call resends the whole prompt (often 10,000-30,000 tokens each), so a run needs far more than its answer; omit for the default.'),
+        timeoutMs: z
+            .number()
+            .int()
+            .positive()
+            .optional()
+            .describe('Wall clock of one run, in milliseconds'),
+    })
+        .optional()
+        .describe('Limits of ONE run; omit to use the defaults'),
+    job: z.string().optional().describe('pause/resume/delete: job name'),
+    allFolders: z.boolean().optional().describe('list: include jobs of other folders (names only)'),
+});
+function refuse(error) {
+    return { success: false, output: '', error };
+}
+function effectsOf(rule) {
+    if (typeof rule === 'string')
+        return [rule];
+    if (rule && typeof rule === 'object')
+        return Object.values(rule);
+    return [];
+}
+/**
+ * Refuse a network tool beside a shell that runs on the host: a scheduled run
+ * that can both read the machine and reach the internet, unattended, is the
+ * exfiltration shape, and only the operator can choose it.
+ */
+function networkWithHostShell(draft) {
+    const rules = draft.permissions.rules ?? {};
+    const network = draft.permissions.browser !== undefined ||
+        NETWORK_TOOLS.some((t) => effectsOf(rules[t]).some((e) => e === 'allow' || e === 'ask'));
+    if (!network)
+        return false;
+    const bashEffects = effectsOf(rules.bash);
+    // The read-only preset denies bash; its rules are expanded by the host,
+    // so the draft carries only its name.
+    const shellPossible = bashEffects.length > 0
+        ? bashEffects.some((e) => e !== 'deny')
+        : draft.permissions.preset !== 'read-only' && draft.permissions.unmatched !== 'deny';
+    return shellPossible && (draft.permissions.execution ?? 'host') === 'host';
+}
+/**
+ * The browser grant with its site keys canonicalised, or why it is refused.
+ * Keys are rewritten so the host, the confirmation and the compiled rules
+ * all see one spelling of each site.
+ */
+function browserGrant(host, proposed) {
+    if (host.browserGrants !== true) {
+        return {
+            ok: false,
+            error: 'This host cannot give a scheduled job browser access. Propose the job without permissions.browser, or ask the operator to add it with `namzu schedule add`.',
+        };
+    }
+    const entries = Object.entries(proposed.sites);
+    if (entries.length === 0) {
+        return {
+            ok: false,
+            error: 'permissions.browser.sites is empty; list each site the run may open, e.g. {"https://github.com": "read"}.',
+        };
+    }
+    const sites = {};
+    for (const [key, level] of entries) {
+        if (key.trim() === '*') {
+            return {
+                ok: false,
+                error: 'A scheduled job cannot grant every site ("*"); unlisted sites are always denied. List each site.',
+            };
+        }
+        const verdict = canonicalizeBrowserSitePattern(key);
+        if (!verdict.ok)
+            return { ok: false, error: `permissions.browser.sites: ${verdict.reason}` };
+        if (verdict.pattern in sites && sites[verdict.pattern] !== level) {
+            return {
+                ok: false,
+                error: `permissions.browser.sites names ${verdict.pattern} twice with different levels.`,
+            };
+        }
+        sites[verdict.pattern] = level;
+    }
+    return {
+        ok: true,
+        grant: {
+            profile: proposed.profile,
+            sites,
+            ...(proposed.headed !== undefined ? { headed: proposed.headed } : {}),
+        },
+    };
+}
+async function create(host, input, signal) {
+    const missing = ['name', 'prompt', 'when', 'permissions'].filter((k) => input[k] === undefined);
+    if (missing.length > 0) {
+        return refuse(`create needs ${missing.join(', ')}. permissions is required: propose an explicit set (a preset and/or rules, plus unmatched).`);
+    }
+    const proposed = input.permissions;
+    if (!proposed.preset && !proposed.rules && !proposed.browser) {
+        return refuse('permissions needs a preset, rules or a browser grant; an empty permission set is not a choice.');
+    }
+    let permissions = proposed;
+    if (proposed.browser) {
+        const grant = browserGrant(host, proposed.browser);
+        if (!grant.ok)
+            return refuse(grant.error);
+        permissions = { ...proposed, browser: grant.grant };
+    }
+    const draft = {
+        name: input.name,
+        prompt: input.prompt,
+        when: input.when,
+        ...(input.folder !== undefined ? { folder: input.folder } : {}),
+        ...(input.tz !== undefined ? { tz: input.tz } : {}),
+        permissions,
+        ...(input.budget ? { budget: input.budget } : {}),
+    };
+    if (networkWithHostShell(draft)) {
+        return refuse('A scheduled job proposed here cannot combine web or browser access with a shell on the host. Deny bash, use execution "sandbox", or ask the operator to create it with `namzu schedule add`.');
+    }
+    let preview;
+    try {
+        preview = await host.preview(draft);
+    }
+    catch (error) {
+        return refuse(error instanceof Error ? error.message : String(error));
+    }
+    let answer;
+    try {
+        answer = await host.confirm({
+            preview,
+            promptFindings: scanSchedulePrompt(preview.prompt),
+            proposedBy: 'model',
+        }, signal);
+    }
+    catch {
+        answer = 'cancel';
+    }
+    // The deadline or the turn can settle `host.confirm` from underneath a
+    // host that resolves optimistically on its own close; never create on an
+    // answer that arrived after the operator was no longer being asked.
+    if (signal?.aborted)
+        answer = 'cancel';
+    if (answer !== 'create' && answer !== 'create-paused') {
+        return {
+            success: false,
+            output: '',
+            error: 'The operator did not confirm the job, so it was not created.',
+            data: { cancelled: true },
+        };
+    }
+    const created = await host.create(draft, preview, { paused: answer === 'create-paused' });
+    const said = answer === 'create-paused'
+        ? `Job "${created.name}" was created paused. The operator can resume it with /schedule.`
+        : `Job "${created.name}" was created. It runs ${preview.schedule}, with nobody watching; results arrive as a notification and a session.`;
+    return {
+        success: true,
+        output: created.note ? `${said} ${created.note}` : said,
+        data: { name: created.name, paused: answer === 'create-paused' },
+    };
+}
+async function list(host, input) {
+    const jobs = await host.list({ allFolders: input.allFolders === true });
+    if (jobs.length === 0)
+        return { success: true, output: 'No scheduled jobs.', data: { jobs: [] } };
+    const lines = jobs.map((j) => `${j.name} · ${j.state} · ${j.schedule}${j.nextFireAt ? ` · next ${j.nextFireAt}` : ''}${j.lastStatus ? ` · last ${j.lastStatus}` : ''} · ${j.folder}`);
+    return { success: true, output: lines.join('\n'), data: { jobs } };
+}
+async function lifecycle(host, input, action, signal) {
+    if (!input.job)
+        return refuse(`${action} needs job (the job's name).`);
+    const job = await host.find(input.job);
+    if (!job)
+        return refuse(`No scheduled job is named "${input.job}".`);
+    if (action !== 'pause') {
+        let confirmed = false;
+        try {
+            confirmed = await host.confirmAction(job, action, signal);
+        }
+        catch {
+            confirmed = false;
+        }
+        if (signal?.aborted)
+            confirmed = false;
+        if (!confirmed)
+            return {
+                ...refuse(`The operator did not confirm; "${job.name}" was not changed.`),
+                data: { cancelled: true },
+            };
+    }
+    if (action === 'pause')
+        await host.pause(job.name);
+    else if (action === 'resume')
+        await host.resume(job.name);
+    else
+        await host.delete(job.name);
+    const verb = action === 'pause' ? 'paused' : action === 'resume' ? 'resumed' : 'deleted';
+    return { success: true, output: `Job "${job.name}" ${verb}.`, data: { name: job.name, action } };
+}
+/**
+ * The `schedule` tool: create, list, pause, resume and delete the operator's
+ * scheduled jobs from a conversation.
+ *
+ * Creation, resuming and deleting are confirmed by a person through the host
+ * (`ScheduleToolHost.confirm`), on a screen the host draws from its own
+ * computation. The model cannot propose that uncovered calls run without
+ * asking, nor web access beside a host shell. Register it only where a person
+ * is present to confirm: never in a headless run, a scheduled run or a
+ * sub-agent.
+ */
+export function buildScheduleTools(host) {
+    return [
+        defineTool({
+            name: SCHEDULE_TOOL_NAME,
+            description: "Manage the operator's scheduled jobs: prompts that run later in a folder, with nobody watching, under an explicit permission set. Use it only when the user asks for something to happen on a schedule. create, resume and delete are confirmed by the operator; pause is not. A job needs name, prompt, when and permissions (unmatched: park or deny, plus a preset, rules or a browser grant). Leave every other field (folder, tz, execution, budget, headed) unset unless the user asked for it: the defaults are the operator's, and the confirmation marks each value you chose. Scheduled runs cannot ask questions.",
+            inputSchema,
+            category: 'custom',
+            permissions: [],
+            readOnly: (input) => input.action === 'list',
+            // `delete` removes a job only after the operator confirms it on the
+            // host's own screen; a destructive flag would put a second review,
+            // over the raw arguments, in front of that confirmation.
+            destructive: false,
+            concurrencySafe: false,
+            presentCall: presentScheduleCall,
+            presentResult: presentScheduleResult,
+            // A person, not a tool, answers `create`/`resume`/`delete`; see
+            // `OPERATOR_CONFIRM_TIMEOUT_MS`.
+            timeoutMs: OPERATOR_CONFIRM_TIMEOUT_MS,
+            async execute(input, context) {
+                switch (input.action) {
+                    case 'create':
+                        return create(host, input, context.abortSignal);
+                    case 'list':
+                        return list(host, input);
+                    default:
+                        return lifecycle(host, input, input.action, context.abortSignal);
+                }
+            },
+        }),
+    ];
+}
+//# sourceMappingURL=schedule-tool.js.map

package/dist/tools/schedules/schedule-tool.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"schedule-tool.js","sourceRoot":"","sources":["../../../src/tools/schedules/schedule-tool.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AAEvB,OAAO,EAAE,8BAA8B,EAAE,MAAM,4BAA4B,CAAA;AAC3E,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAA;AAC7C,OAAO,EAAE,mBAAmB,EAAE,qBAAqB,EAAE,MAAM,cAAc,CAAA;AACzE,OAAO,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAA;AAQrD,MAAM,CAAC,MAAM,kBAAkB,GAAG,UAAU,CAAA;AAE5C;;;;;;;;GAQG;AACH,MAAM,2BAA2B,GAAG,EAAE,GAAG,MAAM,CAAA;AAE/C,MAAM,MAAM,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC,CAAA;AAC/C,MAAM,aAAa,GAAG,CAAC,WAAW,EAAE,YAAY,CAAC,CAAA;AACjD,MAAM,eAAe,GAAG,2BAA2B,CAAA;AAEnD,MAAM,WAAW,GAAG,CAAC,CAAC,MAAM,CAAC;IAC5B,MAAM,EAAE,CAAC;SACP,IAAI,CAAC,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC;SACrD,QAAQ,CAAC,+DAA+D,CAAC;IAC3E,IAAI,EAAE,CAAC;SACL,MAAM,EAAE;SACR,KAAK,CAAC,2BAA2B,CAAC;SAClC,QAAQ,EAAE;SACV,QAAQ,CAAC,wDAAwD,CAAC;IACpE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,qCAAqC,CAAC;IAChG,IAAI,EAAE,CAAC;SACL,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,QAAQ,CAAC,2EAA2E,CAAC;IACvF,MAAM,EAAE,CAAC;SACP,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,QAAQ,CAAC,mFAAmF,CAAC;IAC/F,EAAE,EAAE,CAAC;SACH,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,QAAQ,CACR,+FAA+F,CAC/F;IACF,WAAW,EAAE,CAAC;SACZ,MAAM,CAAC;QACP,MAAM,EAAE,CAAC;aACP,IAAI,CAAC,CAAC,WAAW,EAAE,gBAAgB,CAAC,CAAC;aACrC,QAAQ,EAAE;aACV,QAAQ,CACR,mFAAmF,CACnF;QACF,SAAS,EAAE,CAAC;aACV,IAAI,CAAC,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;aACtB,QAAQ,CAAC,6DAA6D,CAAC;QACzE,SAAS,EAAE,CAAC;aACV,IAAI,CAAC,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;aACzB,QAAQ,EAAE;aACV,QAAQ,CACR,oFAAoF,CACpF;QACF,KAAK,EAAE,CAAC;aACN,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;aACnE,QAAQ,EAAE;aACV,QAAQ,CAAC,oDAAoD,CAAC;QAChE,OAAO,EAAE,CAAC;aACR,MAAM,CAAC;YACP,OAAO,EAAE,CAAC;iBACR,MAAM,EAAE;iBACR,KAAK,CAAC,eAAe,CAAC;iBACtB,QAAQ,CAAC,0DAA0D,CAAC;YACtE,KAAK,EAAE,CAAC;iBACN,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC;iBAClD,QAAQ,CACR,yLAAyL,CACzL;YACF,MAAM,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,4CAA4C,CAAC;SACrF,CAAC;aACD,QAAQ,EAAE;aACV,QAAQ,CAAC,+BAA+B,CAAC;KAC3C,CAAC;SACD,QAAQ,EAAE;SACV,QAAQ,CAAC,+DAA+D,CAAC;IAC3E,MAAM,EAAE,CAAC;SACP,MAAM,CAAC;QACP,aAAa,EAAE,CAAC;aACd,MAAM,EAAE;aACR,GAAG,EAAE;aACL,QAAQ,EAAE;aACV,QAAQ,EAAE;aACV,QAAQ,CACR,yKAAyK,CACzK;QACF,WAAW,EAAE,CAAC;aACZ,MAAM,EAAE;aACR,GAAG,EAAE;aACL,QAAQ,EAAE;aACV,QAAQ,EAAE;aACV,QAAQ,CACR,gLAAgL,CAChL;QACF,SAAS,EAAE,CAAC;aACV,MAAM,EAAE;aACR,GAAG,EAAE;aACL,QAAQ,EAAE;aACV,QAAQ,EAAE;aACV,QAAQ,CAAC,wCAAwC,CAAC;KACpD,CAAC;SACD,QAAQ,EAAE;SACV,QAAQ,CAAC,6CAA6C,CAAC;IACzD,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,+BAA+B,CAAC;IACpE,UAAU,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,kDAAkD,CAAC;CAC/F,CAAC,CAAA;AAIF,SAAS,MAAM,CAAC,KAAa;IAC5B,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,KAAK,EAAE,CAAA;AAC7C,CAAC;AAED,SAAS,SAAS,CAAC,IAAa;IAC/B,IAAI,OAAO,IAAI,KAAK,QAAQ;QAAE,OAAO,CAAC,IAAI,CAAC,CAAA;IAC3C,IAAI,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ;QAAE,OAAO,MAAM,CAAC,MAAM,CAAC,IAA8B,CAAC,CAAA;IAC1F,OAAO,EAAE,CAAA;AACV,CAAC;AAED;;;;GAIG;AACH,SAAS,oBAAoB,CAAC,KAAuB;IACpD,MAAM,KAAK,GAAG,KAAK,CAAC,WAAW,CAAC,KAAK,IAAI,EAAE,CAAA;IAC3C,MAAM,OAAO,GACZ,KAAK,CAAC,WAAW,CAAC,OAAO,KAAK,SAAS;QACvC,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,OAAO,IAAI,CAAC,KAAK,KAAK,CAAC,CAAC,CAAA;IACzF,IAAI,CAAC,OAAO;QAAE,OAAO,KAAK,CAAA;IAC1B,MAAM,WAAW,GAAG,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;IACzC,wEAAwE;IACxE,sCAAsC;IACtC,MAAM,aAAa,GAClB,WAAW,CAAC,MAAM,GAAG,CAAC;QACrB,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,MAAM,CAAC;QACvC,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,MAAM,KAAK,WAAW,IAAI,KAAK,CAAC,WAAW,CAAC,SAAS,KAAK,MAAM,CAAA;IACtF,OAAO,aAAa,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,SAAS,IAAI,MAAM,CAAC,KAAK,MAAM,CAAA;AAC3E,CAAC;AAED;;;;GAIG;AACH,SAAS,YAAY,CACpB,IAAsB,EACtB,QAAmE;IAEnE,IAAI,IAAI,CAAC,aAAa,KAAK,IAAI,EAAE,CAAC;QACjC,OAAO;YACN,EAAE,EAAE,KAAK;YACT,KAAK,EACJ,6JAA6J;SAC9J,CAAA;IACF,CAAC;IACD,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAA;IAC9C,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1B,OAAO;YACN,EAAE,EAAE,KAAK;YACT,KAAK,EACJ,2GAA2G;SAC5G,CAAA;IACF,CAAC;IACD,MAAM,KAAK,GAA6C,EAAE,CAAA;IAC1D,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,OAAO,EAAE,CAAC;QACpC,IAAI,GAAG,CAAC,IAAI,EAAE,KAAK,GAAG,EAAE,CAAC;YACxB,OAAO;gBACN,EAAE,EAAE,KAAK;gBACT,KAAK,EACJ,kGAAkG;aACnG,CAAA;QACF,CAAC;QACD,MAAM,OAAO,GAAG,8BAA8B,CAAC,GAAG,CAAC,CAAA;QACnD,IAAI,CAAC,OAAO,CAAC,EAAE;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,8BAA8B,OAAO,CAAC,MAAM,EAAE,EAAE,CAAA;QAC5F,IAAI,OAAO,CAAC,OAAO,IAAI,KAAK,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,KAAK,EAAE,CAAC;YAClE,OAAO;gBACN,EAAE,EAAE,KAAK;gBACT,KAAK,EAAE,mCAAmC,OAAO,CAAC,OAAO,+BAA+B;aACxF,CAAA;QACF,CAAC;QACD,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,KAAK,CAAA;IAC/B,CAAC;IACD,OAAO;QACN,EAAE,EAAE,IAAI;QACR,KAAK,EAAE;YACN,OAAO,EAAE,QAAQ,CAAC,OAAO;YACzB,KAAK;YACL,GAAG,CAAC,QAAQ,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACrE;KACD,CAAA;AACF,CAAC;AAED,KAAK,UAAU,MAAM,CACpB,IAAsB,EACtB,KAAY,EACZ,MAA+B;IAE/B,MAAM,OAAO,GAAI,CAAC,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,aAAa,CAAW,CAAC,MAAM,CAC1E,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,SAAS,CAC7B,CAAA;IACD,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxB,OAAO,MAAM,CACZ,gBAAgB,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,6FAA6F,CAC/H,CAAA;IACF,CAAC;IACD,MAAM,QAAQ,GAAG,KAAK,CAAC,WAAgD,CAAA;IACvE,IAAI,CAAC,QAAQ,CAAC,MAAM,IAAI,CAAC,QAAQ,CAAC,KAAK,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC;QAC9D,OAAO,MAAM,CACZ,gGAAgG,CAChG,CAAA;IACF,CAAC;IACD,IAAI,WAAW,GAAoC,QAAQ,CAAA;IAC3D,IAAI,QAAQ,CAAC,OAAO,EAAE,CAAC;QACtB,MAAM,KAAK,GAAG,YAAY,CAAC,IAAI,EAAE,QAAQ,CAAC,OAAO,CAAC,CAAA;QAClD,IAAI,CAAC,KAAK,CAAC,EAAE;YAAE,OAAO,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAA;QACzC,WAAW,GAAG,EAAE,GAAG,QAAQ,EAAE,OAAO,EAAE,KAAK,CAAC,KAAK,EAAE,CAAA;IACpD,CAAC;IACD,MAAM,KAAK,GAAqB;QAC/B,IAAI,EAAE,KAAK,CAAC,IAAc;QAC1B,MAAM,EAAE,KAAK,CAAC,MAAgB;QAC9B,IAAI,EAAE,KAAK,CAAC,IAAc;QAC1B,GAAG,CAAC,KAAK,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/D,GAAG,CAAC,KAAK,CAAC,EAAE,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACnD,WAAW;QACX,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACjD,CAAA;IACD,IAAI,oBAAoB,CAAC,KAAK,CAAC,EAAE,CAAC;QACjC,OAAO,MAAM,CACZ,8LAA8L,CAC9L,CAAA;IACF,CAAC;IACD,IAAI,OAAyD,CAAA;IAC7D,IAAI,CAAC;QACJ,OAAO,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAA;IACpC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,OAAO,MAAM,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAA;IACtE,CAAC;IACD,IAAI,MAAc,CAAA;IAClB,IAAI,CAAC;QACJ,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAC1B;YACC,OAAO;YACP,cAAc,EAAE,kBAAkB,CAAC,OAAO,CAAC,MAAM,CAAC;YAClD,UAAU,EAAE,OAAO;SACnB,EACD,MAAM,CACN,CAAA;IACF,CAAC;IAAC,MAAM,CAAC;QACR,MAAM,GAAG,QAAQ,CAAA;IAClB,CAAC;IACD,uEAAuE;IACvE,yEAAyE;IACzE,oEAAoE;IACpE,IAAI,MAAM,EAAE,OAAO;QAAE,MAAM,GAAG,QAAQ,CAAA;IACtC,IAAI,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,eAAe,EAAE,CAAC;QACvD,OAAO;YACN,OAAO,EAAE,KAAK;YACd,MAAM,EAAE,EAAE;YACV,KAAK,EAAE,8DAA8D;YACrE,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE;SACzB,CAAA;IACF,CAAC;IACD,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,MAAM,KAAK,eAAe,EAAE,CAAC,CAAA;IACzF,MAAM,IAAI,GACT,MAAM,KAAK,eAAe;QACzB,CAAC,CAAC,QAAQ,OAAO,CAAC,IAAI,kEAAkE;QACxF,CAAC,CAAC,QAAQ,OAAO,CAAC,IAAI,0BAA0B,OAAO,CAAC,QAAQ,yEAAyE,CAAA;IAC3I,OAAO;QACN,OAAO,EAAE,IAAI;QACb,MAAM,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI;QACvD,IAAI,EAAE,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,KAAK,eAAe,EAAE;KAChE,CAAA;AACF,CAAC;AAED,KAAK,UAAU,IAAI,CAAC,IAAsB,EAAE,KAAY;IACvD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,KAAK,IAAI,EAAE,CAAC,CAAA;IACvE,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,oBAAoB,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,EAAE,CAAA;IACjG,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CACrB,CAAC,CAAC,EAAE,EAAE,CACL,GAAG,CAAC,CAAC,IAAI,MAAM,CAAC,CAAC,KAAK,MAAM,CAAC,CAAC,QAAQ,GAAG,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,MAAM,EAAE,CACvJ,CAAA;IACD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,EAAE,CAAA;AACnE,CAAC;AAED,KAAK,UAAU,SAAS,CACvB,IAAsB,EACtB,KAAY,EACZ,MAAqC,EACrC,MAA+B;IAE/B,IAAI,CAAC,KAAK,CAAC,GAAG;QAAE,OAAO,MAAM,CAAC,GAAG,MAAM,8BAA8B,CAAC,CAAA;IACtE,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;IACtC,IAAI,CAAC,GAAG;QAAE,OAAO,MAAM,CAAC,8BAA8B,KAAK,CAAC,GAAG,IAAI,CAAC,CAAA;IACpE,IAAI,MAAM,KAAK,OAAO,EAAE,CAAC;QACxB,IAAI,SAAS,GAAG,KAAK,CAAA;QACrB,IAAI,CAAC;YACJ,SAAS,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,CAAC,CAAA;QAC1D,CAAC;QAAC,MAAM,CAAC;YACR,SAAS,GAAG,KAAK,CAAA;QAClB,CAAC;QACD,IAAI,MAAM,EAAE,OAAO;YAAE,SAAS,GAAG,KAAK,CAAA;QACtC,IAAI,CAAC,SAAS;YACb,OAAO;gBACN,GAAG,MAAM,CAAC,kCAAkC,GAAG,CAAC,IAAI,oBAAoB,CAAC;gBACzE,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE;aACzB,CAAA;IACH,CAAC;IACD,IAAI,MAAM,KAAK,OAAO;QAAE,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;SAC7C,IAAI,MAAM,KAAK,QAAQ;QAAE,MAAM,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;;QACpD,MAAM,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;IAChC,MAAM,IAAI,GAAG,MAAM,KAAK,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAA;IACxF,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,GAAG,CAAC,IAAI,KAAK,IAAI,GAAG,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,CAAA;AACjG,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,kBAAkB,CAAC,IAAsB;IACxD,OAAO;QACN,UAAU,CAAC;YACV,IAAI,EAAE,kBAAkB;YACxB,WAAW,EACV,8lBAA8lB;YAC/lB,WAAW;YACX,QAAQ,EAAE,QAAQ;YAClB,WAAW,EAAE,EAAE;YACf,QAAQ,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,KAAK,MAAM;YAC5C,oEAAoE;YACpE,mEAAmE;YACnE,yDAAyD;YACzD,WAAW,EAAE,KAAK;YAClB,eAAe,EAAE,KAAK;YACtB,WAAW,EAAE,mBAAmB;YAChC,aAAa,EAAE,qBAAqB;YACpC,gEAAgE;YAChE,iCAAiC;YACjC,SAAS,EAAE,2BAA2B;YACtC,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,OAAoB;gBACxC,QAAQ,KAAK,CAAC,MAAM,EAAE,CAAC;oBACtB,KAAK,QAAQ;wBACZ,OAAO,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,OAAO,CAAC,WAAW,CAAC,CAAA;oBAChD,KAAK,MAAM;wBACV,OAAO,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,CAAA;oBACzB;wBACC,OAAO,SAAS,CAAC,IAAI,EAAE,KAAK,EAAE,KAAK,CAAC,MAAM,EAAE,OAAO,CAAC,WAAW,CAAC,CAAA;gBAClE,CAAC;YACF,CAAC;SACD,CAAC;KACF,CAAA;AACF,CAAC"}

package/dist/tools/schedules/types.d.ts

@@ -0,0 +1,184 @@
+/**
+ * The host side of the `schedule` and `session_loop` tools.
+ *
+ * The SDK holds the tool's contract with the model — its schema, its refusals
+ * and its confirmation rule — and nothing about where jobs are stored or how
+ * a confirmation is drawn. The host supplies both, and it computes every
+ * field a person is asked to confirm: the model's own words are never what
+ * the confirmation shows as fact.
+ */
+/** A rule effect, in the vocabulary of the CLI's `[permissions]` table. */
+export type ScheduleRuleEffect = 'allow' | 'ask' | 'deny';
+/** What the model proposes. Validated by the tool's schema, then by the host. */
+export interface ScheduleJobDraft {
+    readonly name: string;
+    readonly prompt: string;
+    /** Schedule words: `every 30m`, `0 9 * * 1-5`, `at 09:00`, `in 2h`. */
+    readonly when: string;
+    /** Folder the job runs in. Absent: the session's working directory. */
+    readonly folder?: string;
+    /** IANA zone for a cron expression or a local time. Absent: the host's. */
+    readonly tz?: string;
+    readonly permissions: {
+        readonly preset?: 'read-only' | 'edit-in-folder';
+        /**
+         * What happens to a call no rule covers. The model may choose `park`
+         * (wait for the operator) or `deny`; running uncovered calls without
+         * asking is an operator decision the tool cannot propose.
+         */
+        readonly unmatched: 'park' | 'deny';
+        readonly execution?: 'host' | 'sandbox';
+        readonly rules?: Readonly<Record<string, ScheduleRuleEffect | Readonly<Record<string, ScheduleRuleEffect>>>>;
+        /**
+         * Browser access for the run. Absent: the `browser` and `browser_act`
+         * tools are denied. Present: only the listed sites are reachable, at
+         * the listed level, and every other site is denied — there is no
+         * catch-all key. The tool refuses this block unless the host sets
+         * {@link ScheduleToolHost.browserGrants}.
+         */
+        readonly browser?: ScheduleBrowserGrant;
+    };
+    readonly budget?: {
+        readonly maxIterations?: number;
+        readonly tokenBudget?: number;
+        readonly timeoutMs?: number;
+    };
+}
+/**
+ * How far a scheduled run may go on one site. `read`: open and read pages,
+ * never change them. `ask`: open and change pages, each change parked for the
+ * operator. `act`: open and change pages without asking.
+ */
+export type ScheduleBrowserSiteLevel = 'read' | 'ask' | 'act';
+/** A scheduled job's browser grant. */
+export interface ScheduleBrowserGrant {
+    /** The browser profile the run uses; the operator's, signed in beforehand. */
+    readonly profile: string;
+    /**
+     * Canonical site key (`https://github.com`, `https://*.example.com`,
+     * `http://localhost:*`) to level. The tool canonicalises the keys the
+     * model wrote (see `canonicalizeBrowserSitePattern`) before the host sees
+     * them. Unlisted sites are denied.
+     */
+    readonly sites: Readonly<Record<string, ScheduleBrowserSiteLevel>>;
+    /** Show the browser window during the run. Default: no window. */
+    readonly headed?: boolean;
+}
+/** What the person confirming is shown. Every field is the host's own computation. */
+export interface ScheduleJobPreview {
+    readonly name: string;
+    /** The canonical folder the job would run in. */
+    readonly folder: string;
+    /** True when `folder` is outside the session's working directory and added directories. */
+    readonly outsideSessionRoots: boolean;
+    readonly prompt: string;
+    /** The schedule in words, with its zone. */
+    readonly schedule: string;
+    /** The next fire times, ISO-8601 UTC. */
+    readonly nextFireTimes: readonly string[];
+    /** The permission set expanded to one line per rule, config denies included. */
+    readonly rules: readonly string[];
+    readonly unmatched: 'park' | 'deny' | 'allow';
+    readonly execution: 'host' | 'sandbox';
+    /** A rule lets the run reach the network. */
+    readonly networkAccess: boolean;
+    readonly budget: {
+        readonly maxIterations: number;
+        readonly tokenBudget: number;
+        readonly timeoutMs: number;
+    };
+    /** Runs per day at most, times the token budget. Absent for a one-shot. */
+    readonly dailyTokenCeiling?: number;
+    /** Provider and model the job is pinned to. */
+    readonly model: string;
+    /** Where the run's credential comes from, in words. */
+    readonly credentialSource?: string;
+    /** Anything the host wants said in the warning colour. */
+    readonly warnings: readonly string[];
+}
+/** A job as the `list` action reports it. */
+export interface ScheduleJobSummary {
+    readonly name: string;
+    readonly folder: string;
+    readonly state: string;
+    readonly schedule: string;
+    readonly nextFireAt?: string;
+    readonly lastStatus?: string;
+    /** Present only for jobs in the session's own folder. */
+    readonly prompt?: string;
+}
+/** What the person answered to a proposed job. */
+export type ScheduleConfirmAnswer = 'create' | 'create-paused' | 'cancel';
+export interface ScheduleConfirmRequest {
+    readonly preview: ScheduleJobPreview;
+    /** The prompt tripwire's findings over `preview.prompt`. */
+    readonly promptFindings: readonly string[];
+    /** Always `model` from this tool: the banner says it was not the operator. */
+    readonly proposedBy: 'model';
+}
+export interface ScheduleToolHost {
+    /**
+     * The host can store and enforce {@link ScheduleJobDraft.permissions}
+     * `.browser`. Absent or false: the tool refuses a draft carrying one,
+     * rather than let the host drop it and confirm a job the model believes
+     * can use the browser.
+     */
+    readonly browserGrants?: boolean;
+    /** Validate the draft and compute what the person will be shown. Throws with a message on a refusal. */
+    preview(draft: ScheduleJobDraft): Promise<ScheduleJobPreview>;
+    /**
+     * Ask the person. Anything but `create` or `create-paused` — `cancel`, a
+     * thrown error, a closed screen — means no job.
+     *
+     * `signal` fires when the tool's own confirmation deadline elapses or the
+     * turn is aborted; a host that draws a screen closes it then rather than
+     * leaving it live after the tool has given up on the answer.
+     */
+    confirm(request: ScheduleConfirmRequest, signal?: AbortSignal): Promise<ScheduleConfirmAnswer>;
+    /**
+     * Create the job the person confirmed. `note`, when given, is appended to
+     * what the model is told, for what the person must still do before the
+     * job runs (install a scheduler, say): the model reports the job as set
+     * up otherwise.
+     */
+    create(draft: ScheduleJobDraft, preview: ScheduleJobPreview, options: {
+        readonly paused: boolean;
+    }): Promise<{
+        readonly name: string;
+        readonly note?: string;
+    }>;
+    /** Jobs, the session folder's in full, other folders' without their prompts. */
+    list(options: {
+        readonly allFolders: boolean;
+    }): Promise<readonly ScheduleJobSummary[]>;
+    /** A job by name or id prefix, or undefined. */
+    find(job: string): Promise<ScheduleJobSummary | undefined>;
+    /** Ask the person to confirm resuming or deleting a job. See `confirm` on `signal`. */
+    confirmAction(job: ScheduleJobSummary, action: 'resume' | 'delete', signal?: AbortSignal): Promise<boolean>;
+    pause(job: string): Promise<void>;
+    resume(job: string): Promise<void>;
+    delete(job: string): Promise<void>;
+}
+/** A prompt the session re-sends to itself on an interval. */
+export interface SessionLoop {
+    readonly id: string;
+    /** The interval in words. */
+    readonly schedule: string;
+    readonly prompt: string;
+    readonly createdAt: string;
+    readonly expiresAt?: string;
+    readonly lastFiredAt?: string;
+    readonly createdBy: 'operator' | 'model';
+}
+export interface SessionLoopHost {
+    /** Throws with a message when the interval is not usable or the loop limit is reached. */
+    create(request: {
+        readonly interval: string;
+        readonly prompt: string;
+        readonly createdBy: 'model';
+    }): Promise<SessionLoop>;
+    list(): readonly SessionLoop[];
+    /** Stop one loop by id, or every loop with `all`. Returns how many stopped. */
+    delete(id: string): Promise<number>;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/tools/schedules/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/tools/schedules/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,2EAA2E;AAC3E,MAAM,MAAM,kBAAkB,GAAG,OAAO,GAAG,KAAK,GAAG,MAAM,CAAA;AAEzD,iFAAiF;AACjF,MAAM,WAAW,gBAAgB;IAChC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,uEAAuE;IACvE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,uEAAuE;IACvE,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAA;IACxB,2EAA2E;IAC3E,QAAQ,CAAC,EAAE,CAAC,EAAE,MAAM,CAAA;IACpB,QAAQ,CAAC,WAAW,EAAE;QACrB,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,GAAG,gBAAgB,CAAA;QAChD;;;;WAIG;QACH,QAAQ,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,CAAA;QACnC,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;QACvC,QAAQ,CAAC,KAAK,CAAC,EAAE,QAAQ,CACxB,MAAM,CAAC,MAAM,EAAE,kBAAkB,GAAG,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,kBAAkB,CAAC,CAAC,CAAC,CACjF,CAAA;QACD;;;;;;WAMG;QACH,QAAQ,CAAC,OAAO,CAAC,EAAE,oBAAoB,CAAA;KACvC,CAAA;IACD,QAAQ,CAAC,MAAM,CAAC,EAAE;QACjB,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAA;QAC/B,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAA;QAC7B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAA;KAC3B,CAAA;CACD;AAED;;;;GAIG;AACH,MAAM,MAAM,wBAAwB,GAAG,MAAM,GAAG,KAAK,GAAG,KAAK,CAAA;AAE7D,uCAAuC;AACvC,MAAM,WAAW,oBAAoB;IACpC,8EAA8E;IAC9E,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;IACxB;;;;;OAKG;IACH,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,wBAAwB,CAAC,CAAC,CAAA;IAClE,kEAAkE;IAClE,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,CAAA;CACzB;AAED,sFAAsF;AACtF,MAAM,WAAW,kBAAkB;IAClC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,iDAAiD;IACjD,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,2FAA2F;IAC3F,QAAQ,CAAC,mBAAmB,EAAE,OAAO,CAAA;IACrC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,4CAA4C;IAC5C,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;IACzB,yCAAyC;IACzC,QAAQ,CAAC,aAAa,EAAE,SAAS,MAAM,EAAE,CAAA;IACzC,gFAAgF;IAChF,QAAQ,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,CAAA;IACjC,QAAQ,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAAA;IAC7C,QAAQ,CAAC,SAAS,EAAE,MAAM,GAAG,SAAS,CAAA;IACtC,6CAA6C;IAC7C,QAAQ,CAAC,aAAa,EAAE,OAAO,CAAA;IAC/B,QAAQ,CAAC,MAAM,EAAE;QAChB,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAA;QAC9B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAA;QAC5B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;KAC1B,CAAA;IACD,2EAA2E;IAC3E,QAAQ,CAAC,iBAAiB,CAAC,EAAE,MAAM,CAAA;IACnC,+CAA+C;IAC/C,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,uDAAuD;IACvD,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAA;IAClC,0DAA0D;IAC1D,QAAQ,CAAC,QAAQ,EAAE,SAAS,MAAM,EAAE,CAAA;CACpC;AAED,6CAA6C;AAC7C,MAAM,WAAW,kBAAkB;IAClC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAA;IAC5B,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAA;IAC5B,yDAAyD;IACzD,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CACxB;AAED,kDAAkD;AAClD,MAAM,MAAM,qBAAqB,GAAG,QAAQ,GAAG,eAAe,GAAG,QAAQ,CAAA;AAEzE,MAAM,WAAW,sBAAsB;IACtC,QAAQ,CAAC,OAAO,EAAE,kBAAkB,CAAA;IACpC,4DAA4D;IAC5D,QAAQ,CAAC,cAAc,EAAE,SAAS,MAAM,EAAE,CAAA;IAC1C,8EAA8E;IAC9E,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAA;CAC5B;AAED,MAAM,WAAW,gBAAgB;IAChC;;;;;OAKG;IACH,QAAQ,CAAC,aAAa,CAAC,EAAE,OAAO,CAAA;IAChC,wGAAwG;IACxG,OAAO,CAAC,KAAK,EAAE,gBAAgB,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAAA;IAC7D;;;;;;;OAOG;IACH,OAAO,CAAC,OAAO,EAAE,sBAAsB,EAAE,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,qBAAqB,CAAC,CAAA;IAC9F;;;;;OAKG;IACH,MAAM,CACL,KAAK,EAAE,gBAAgB,EACvB,OAAO,EAAE,kBAAkB,EAC3B,OAAO,EAAE;QAAE,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAA;KAAE,GACnC,OAAO,CAAC;QAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;IAC7D,gFAAgF;IAChF,IAAI,CAAC,OAAO,EAAE;QAAE,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAA;KAAE,GAAG,OAAO,CAAC,SAAS,kBAAkB,EAAE,CAAC,CAAA;IACvF,gDAAgD;IAChD,IAAI,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,kBAAkB,GAAG,SAAS,CAAC,CAAA;IAC1D,uFAAuF;IACvF,aAAa,CACZ,GAAG,EAAE,kBAAkB,EACvB,MAAM,EAAE,QAAQ,GAAG,QAAQ,EAC3B,MAAM,CAAC,EAAE,WAAW,GAClB,OAAO,CAAC,OAAO,CAAC,CAAA;IACnB,KAAK,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IACjC,MAAM,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAClC,MAAM,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;CAClC;AAED,8DAA8D;AAC9D,MAAM,WAAW,WAAW;IAC3B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;IACnB,6BAA6B;IAC7B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAA;IAC7B,QAAQ,CAAC,SAAS,EAAE,UAAU,GAAG,OAAO,CAAA;CACxC;AAED,MAAM,WAAW,eAAe;IAC/B,0FAA0F;IAC1F,MAAM,CAAC,OAAO,EAAE;QACf,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;QACzB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;QACvB,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAA;KAC3B,GAAG,OAAO,CAAC,WAAW,CAAC,CAAA;IACxB,IAAI,IAAI,SAAS,WAAW,EAAE,CAAA;IAC9B,+EAA+E;IAC/E,MAAM,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAA;CACnC"}

package/dist/tools/schedules/types.js

@@ -0,0 +1,11 @@
+/**
+ * The host side of the `schedule` and `session_loop` tools.
+ *
+ * The SDK holds the tool's contract with the model — its schema, its refusals
+ * and its confirmation rule — and nothing about where jobs are stored or how
+ * a confirmation is drawn. The host supplies both, and it computes every
+ * field a person is asked to confirm: the model's own words are never what
+ * the confirmation shows as fact.
+ */
+export {};
+//# sourceMappingURL=types.js.map

package/dist/tools/schedules/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../src/tools/schedules/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG"}