@namzu/sdk 49.0.0 → 50.1.0

package/src/tools/host-output.ts

@@ -0,0 +1,136 @@
+import { execFileSync } from 'node:child_process'
+import { StringDecoder } from 'node:string_decoder'
+
+import { OEM_UPPER_HALF } from './oem-code-pages.js'
+
+/**
+ * Decodes the bytes a host command writes.
+ *
+ * Off Windows that is UTF-8. On Windows, cmd and console programs write the
+ * console's OEM code page (850 on Western installs, 857 on Turkish ones), not
+ * UTF-8, so a strict UTF-8 decode turns `ç` into U+FFFD. PowerShell and Node
+ * children do write UTF-8. So a stream starts as strict UTF-8 and falls back
+ * to the code page for good the first time it holds bytes that are not UTF-8.
+ */
+export interface HostOutputDecoder {
+	write(chunk: Buffer): string
+	end(): string
+}
+
+export interface HostOutputDecoderOptions {
+	readonly platform?: NodeJS.Platform
+	/** Windows only: the OEM code page. Default: probed once with `chcp`. */
+	readonly codePage?: number | undefined
+}
+
+let probedCodePage: number | null | undefined
+
+/** The console's active code page on Windows, probed once; null when unknown. */
+export function probeOemCodePage(): number | null {
+	if (probedCodePage !== undefined) return probedCodePage
+	try {
+		const out = execFileSync('cmd.exe', ['/d', '/s', '/c', 'chcp'], {
+			encoding: 'latin1',
+			windowsHide: true,
+			stdio: ['ignore', 'pipe', 'ignore'],
+			timeout: 5000,
+		})
+		const match = /(\d{3,5})\s*$/.exec(out.trim())
+		probedCodePage = match ? Number(match[1]) : null
+	} catch {
+		probedCodePage = null
+	}
+	return probedCodePage
+}
+
+/** A decoder for one non-UTF-8 console code page, or undefined when none is known. */
+function legacyDecoder(codePage: number | undefined): HostOutputDecoder | undefined {
+	if (codePage === undefined || codePage === 65001) return undefined
+	const table = OEM_UPPER_HALF[codePage]
+	if (table !== undefined) {
+		// Single-byte: no state between chunks.
+		return {
+			write(chunk) {
+				let text = ''
+				for (const byte of chunk)
+					text += byte < 0x80 ? String.fromCharCode(byte) : table[byte - 0x80]
+				return text
+			},
+			end: () => '',
+		}
+	}
+	// The WHATWG labels Node knows: Windows ANSI pages and IBM866.
+	const label =
+		codePage >= 1250 && codePage <= 1258
+			? `windows-${codePage}`
+			: codePage === 866
+				? 'ibm866'
+				: undefined
+	if (label === undefined) return undefined
+	try {
+		const decoder = new TextDecoder(label)
+		return {
+			write: (chunk) => decoder.decode(chunk, { stream: true }),
+			end: () => decoder.decode(),
+		}
+	} catch {
+		return undefined
+	}
+}
+
+/** The trailing bytes of `bytes` that start a UTF-8 character it does not finish. */
+function incompleteUtf8Tail(bytes: Buffer): Buffer {
+	for (let back = 1; back <= Math.min(3, bytes.length); back++) {
+		const byte = bytes[bytes.length - back] as number
+		if ((byte & 0xc0) === 0x80) continue
+		const needed = byte >= 0xf0 ? 4 : byte >= 0xe0 ? 3 : byte >= 0xc0 ? 2 : 1
+		return needed > back ? bytes.subarray(bytes.length - back) : Buffer.alloc(0)
+	}
+	return Buffer.alloc(0)
+}
+
+export function createHostOutputDecoder(options: HostOutputDecoderOptions = {}): HostOutputDecoder {
+	const platform = options.platform ?? process.platform
+	if (platform !== 'win32') return new StringDecoder('utf8')
+	const legacy = legacyDecoder(
+		'codePage' in options ? options.codePage : (probeOemCodePage() ?? undefined),
+	)
+	if (legacy === undefined) return new StringDecoder('utf8')
+	let utf8: InstanceType<typeof TextDecoder> | undefined = new TextDecoder('utf-8', { fatal: true })
+	// The bytes of a character cut by the last chunk, which the UTF-8 decoder
+	// holds internally and cannot hand back when the stream turns out not to
+	// be UTF-8: the legacy decoder must start from them, not lose them.
+	let tail: Buffer = Buffer.alloc(0)
+	return {
+		write(chunk) {
+			if (utf8 !== undefined) {
+				try {
+					const text = utf8.decode(chunk, { stream: true })
+					tail = incompleteUtf8Tail(chunk.length >= 3 ? chunk : Buffer.concat([tail, chunk]))
+					return text
+				} catch {
+					utf8 = undefined
+					return legacy.write(Buffer.concat([tail, chunk]))
+				}
+			}
+			return legacy.write(chunk)
+		},
+		end() {
+			if (utf8 !== undefined) {
+				try {
+					return utf8.decode()
+				} catch {
+					utf8 = undefined
+					return legacy.write(tail) + legacy.end()
+				}
+			}
+			return legacy.end()
+		},
+	}
+}
+
+/** Decode a whole captured buffer. */
+export function decodeHostOutput(bytes: Buffer, options: HostOutputDecoderOptions = {}): string {
+	const decoder = createHostOutputDecoder(options)
+	return decoder.write(bytes) + decoder.end()
+}

package/src/tools/oem-code-pages.ts

@@ -0,0 +1,22 @@
+/**
+ * The upper half (bytes 0x80-0xFF) of the DOS/OEM single-byte code pages a
+ * Windows console reports. WHATWG `TextDecoder` has no IBM437/850/852/857
+ * labels, and cmd.exe writes these, so they are tabulated here. Generated
+ * from Python's `codecs` tables; each string is exactly 128 characters.
+ */
+export const OEM_UPPER_HALF: Readonly<Record<number, string>> = {
+	437: '\xc7\xfc\xe9\xe2\xe4\xe0\xe5\xe7\xea\xeb\xe8\xef\xee\xec\xc4\xc5\xc9\xe6\xc6\xf4\xf6\xf2\xfb\xf9\xff\xd6\xdc\xa2\xa3\xa5\u20a7\u0192\xe1\xed\xf3\xfa\xf1\xd1\xaa\xba\xbf\u2310\xac\xbd\xbc\xa1\xab\xbb\u2591\u2592\u2593\u2502\u2524\u2561\u2562\u2556\u2555\u2563\u2551\u2557\u255d\u255c\u255b\u2510\u2514\u2534\u252c\u251c\u2500\u253c\u255e\u255f\u255a\u2554\u2569\u2566\u2560\u2550\u256c\u2567\u2568\u2564\u2565\u2559\u2558\u2552\u2553\u256b\u256a\u2518\u250c\u2588\u2584\u258c\u2590\u2580\u03b1\xdf\u0393\u03c0\u03a3\u03c3\xb5\u03c4\u03a6\u0398\u03a9\u03b4\u221e\u03c6\u03b5\u2229\u2261\xb1\u2265\u2264\u2320\u2321\xf7\u2248\xb0\u2219\xb7\u221a\u207f\xb2\u25a0\xa0',
+	737: '\u0391\u0392\u0393\u0394\u0395\u0396\u0397\u0398\u0399\u039a\u039b\u039c\u039d\u039e\u039f\u03a0\u03a1\u03a3\u03a4\u03a5\u03a6\u03a7\u03a8\u03a9\u03b1\u03b2\u03b3\u03b4\u03b5\u03b6\u03b7\u03b8\u03b9\u03ba\u03bb\u03bc\u03bd\u03be\u03bf\u03c0\u03c1\u03c3\u03c2\u03c4\u03c5\u03c6\u03c7\u03c8\u2591\u2592\u2593\u2502\u2524\u2561\u2562\u2556\u2555\u2563\u2551\u2557\u255d\u255c\u255b\u2510\u2514\u2534\u252c\u251c\u2500\u253c\u255e\u255f\u255a\u2554\u2569\u2566\u2560\u2550\u256c\u2567\u2568\u2564\u2565\u2559\u2558\u2552\u2553\u256b\u256a\u2518\u250c\u2588\u2584\u258c\u2590\u2580\u03c9\u03ac\u03ad\u03ae\u03ca\u03af\u03cc\u03cd\u03cb\u03ce\u0386\u0388\u0389\u038a\u038c\u038e\u038f\xb1\u2265\u2264\u03aa\u03ab\xf7\u2248\xb0\u2219\xb7\u221a\u207f\xb2\u25a0\xa0',
+	775: '\u0106\xfc\xe9\u0101\xe4\u0123\xe5\u0107\u0142\u0113\u0156\u0157\u012b\u0179\xc4\xc5\xc9\xe6\xc6\u014d\xf6\u0122\xa2\u015a\u015b\xd6\xdc\xf8\xa3\xd8\xd7\xa4\u0100\u012a\xf3\u017b\u017c\u017a\u201d\xa6\xa9\xae\xac\xbd\xbc\u0141\xab\xbb\u2591\u2592\u2593\u2502\u2524\u0104\u010c\u0118\u0116\u2563\u2551\u2557\u255d\u012e\u0160\u2510\u2514\u2534\u252c\u251c\u2500\u253c\u0172\u016a\u255a\u2554\u2569\u2566\u2560\u2550\u256c\u017d\u0105\u010d\u0119\u0117\u012f\u0161\u0173\u016b\u017e\u2518\u250c\u2588\u2584\u258c\u2590\u2580\xd3\xdf\u014c\u0143\xf5\xd5\xb5\u0144\u0136\u0137\u013b\u013c\u0146\u0112\u0145\u2019\xad\xb1\u201c\xbe\xb6\xa7\xf7\u201e\xb0\u2219\xb7\xb9\xb3\xb2\u25a0\xa0',
+	850: '\xc7\xfc\xe9\xe2\xe4\xe0\xe5\xe7\xea\xeb\xe8\xef\xee\xec\xc4\xc5\xc9\xe6\xc6\xf4\xf6\xf2\xfb\xf9\xff\xd6\xdc\xf8\xa3\xd8\xd7\u0192\xe1\xed\xf3\xfa\xf1\xd1\xaa\xba\xbf\xae\xac\xbd\xbc\xa1\xab\xbb\u2591\u2592\u2593\u2502\u2524\xc1\xc2\xc0\xa9\u2563\u2551\u2557\u255d\xa2\xa5\u2510\u2514\u2534\u252c\u251c\u2500\u253c\xe3\xc3\u255a\u2554\u2569\u2566\u2560\u2550\u256c\xa4\xf0\xd0\xca\xcb\xc8\u0131\xcd\xce\xcf\u2518\u250c\u2588\u2584\xa6\xcc\u2580\xd3\xdf\xd4\xd2\xf5\xd5\xb5\xfe\xde\xda\xdb\xd9\xfd\xdd\xaf\xb4\xad\xb1\u2017\xbe\xb6\xa7\xf7\xb8\xb0\xa8\xb7\xb9\xb3\xb2\u25a0\xa0',
+	852: '\xc7\xfc\xe9\xe2\xe4\u016f\u0107\xe7\u0142\xeb\u0150\u0151\xee\u0179\xc4\u0106\xc9\u0139\u013a\xf4\xf6\u013d\u013e\u015a\u015b\xd6\xdc\u0164\u0165\u0141\xd7\u010d\xe1\xed\xf3\xfa\u0104\u0105\u017d\u017e\u0118\u0119\xac\u017a\u010c\u015f\xab\xbb\u2591\u2592\u2593\u2502\u2524\xc1\xc2\u011a\u015e\u2563\u2551\u2557\u255d\u017b\u017c\u2510\u2514\u2534\u252c\u251c\u2500\u253c\u0102\u0103\u255a\u2554\u2569\u2566\u2560\u2550\u256c\xa4\u0111\u0110\u010e\xcb\u010f\u0147\xcd\xce\u011b\u2518\u250c\u2588\u2584\u0162\u016e\u2580\xd3\xdf\xd4\u0143\u0144\u0148\u0160\u0161\u0154\xda\u0155\u0170\xfd\xdd\u0163\xb4\xad\u02dd\u02db\u02c7\u02d8\xa7\xf7\xb8\xb0\xa8\u02d9\u0171\u0158\u0159\u25a0\xa0',
+	855: '\u0452\u0402\u0453\u0403\u0451\u0401\u0454\u0404\u0455\u0405\u0456\u0406\u0457\u0407\u0458\u0408\u0459\u0409\u045a\u040a\u045b\u040b\u045c\u040c\u045e\u040e\u045f\u040f\u044e\u042e\u044a\u042a\u0430\u0410\u0431\u0411\u0446\u0426\u0434\u0414\u0435\u0415\u0444\u0424\u0433\u0413\xab\xbb\u2591\u2592\u2593\u2502\u2524\u0445\u0425\u0438\u0418\u2563\u2551\u2557\u255d\u0439\u0419\u2510\u2514\u2534\u252c\u251c\u2500\u253c\u043a\u041a\u255a\u2554\u2569\u2566\u2560\u2550\u256c\xa4\u043b\u041b\u043c\u041c\u043d\u041d\u043e\u041e\u043f\u2518\u250c\u2588\u2584\u041f\u044f\u2580\u042f\u0440\u0420\u0441\u0421\u0442\u0422\u0443\u0423\u0436\u0416\u0432\u0412\u044c\u042c\u2116\xad\u044b\u042b\u0437\u0417\u0448\u0428\u044d\u042d\u0449\u0429\u0447\u0427\xa7\u25a0\xa0',
+	857: '\xc7\xfc\xe9\xe2\xe4\xe0\xe5\xe7\xea\xeb\xe8\xef\xee\u0131\xc4\xc5\xc9\xe6\xc6\xf4\xf6\xf2\xfb\xf9\u0130\xd6\xdc\xf8\xa3\xd8\u015e\u015f\xe1\xed\xf3\xfa\xf1\xd1\u011e\u011f\xbf\xae\xac\xbd\xbc\xa1\xab\xbb\u2591\u2592\u2593\u2502\u2524\xc1\xc2\xc0\xa9\u2563\u2551\u2557\u255d\xa2\xa5\u2510\u2514\u2534\u252c\u251c\u2500\u253c\xe3\xc3\u255a\u2554\u2569\u2566\u2560\u2550\u256c\xa4\xba\xaa\xca\xcb\xc8\ufffd\xcd\xce\xcf\u2518\u250c\u2588\u2584\xa6\xcc\u2580\xd3\xdf\xd4\xd2\xf5\xd5\xb5\ufffd\xd7\xda\xdb\xd9\xec\xff\xaf\xb4\xad\xb1\ufffd\xbe\xb6\xa7\xf7\xb8\xb0\xa8\xb7\xb9\xb3\xb2\u25a0\xa0',
+	858: '\xc7\xfc\xe9\xe2\xe4\xe0\xe5\xe7\xea\xeb\xe8\xef\xee\xec\xc4\xc5\xc9\xe6\xc6\xf4\xf6\xf2\xfb\xf9\xff\xd6\xdc\xf8\xa3\xd8\xd7\u0192\xe1\xed\xf3\xfa\xf1\xd1\xaa\xba\xbf\xae\xac\xbd\xbc\xa1\xab\xbb\u2591\u2592\u2593\u2502\u2524\xc1\xc2\xc0\xa9\u2563\u2551\u2557\u255d\xa2\xa5\u2510\u2514\u2534\u252c\u251c\u2500\u253c\xe3\xc3\u255a\u2554\u2569\u2566\u2560\u2550\u256c\xa4\xf0\xd0\xca\xcb\xc8\u20ac\xcd\xce\xcf\u2518\u250c\u2588\u2584\xa6\xcc\u2580\xd3\xdf\xd4\xd2\xf5\xd5\xb5\xfe\xde\xda\xdb\xd9\xfd\xdd\xaf\xb4\xad\xb1\u2017\xbe\xb6\xa7\xf7\xb8\xb0\xa8\xb7\xb9\xb3\xb2\u25a0\xa0',
+	860: '\xc7\xfc\xe9\xe2\xe3\xe0\xc1\xe7\xea\xca\xe8\xcd\xd4\xec\xc3\xc2\xc9\xc0\xc8\xf4\xf5\xf2\xda\xf9\xcc\xd5\xdc\xa2\xa3\xd9\u20a7\xd3\xe1\xed\xf3\xfa\xf1\xd1\xaa\xba\xbf\xd2\xac\xbd\xbc\xa1\xab\xbb\u2591\u2592\u2593\u2502\u2524\u2561\u2562\u2556\u2555\u2563\u2551\u2557\u255d\u255c\u255b\u2510\u2514\u2534\u252c\u251c\u2500\u253c\u255e\u255f\u255a\u2554\u2569\u2566\u2560\u2550\u256c\u2567\u2568\u2564\u2565\u2559\u2558\u2552\u2553\u256b\u256a\u2518\u250c\u2588\u2584\u258c\u2590\u2580\u03b1\xdf\u0393\u03c0\u03a3\u03c3\xb5\u03c4\u03a6\u0398\u03a9\u03b4\u221e\u03c6\u03b5\u2229\u2261\xb1\u2265\u2264\u2320\u2321\xf7\u2248\xb0\u2219\xb7\u221a\u207f\xb2\u25a0\xa0',
+	861: '\xc7\xfc\xe9\xe2\xe4\xe0\xe5\xe7\xea\xeb\xe8\xd0\xf0\xde\xc4\xc5\xc9\xe6\xc6\xf4\xf6\xfe\xfb\xdd\xfd\xd6\xdc\xf8\xa3\xd8\u20a7\u0192\xe1\xed\xf3\xfa\xc1\xcd\xd3\xda\xbf\u2310\xac\xbd\xbc\xa1\xab\xbb\u2591\u2592\u2593\u2502\u2524\u2561\u2562\u2556\u2555\u2563\u2551\u2557\u255d\u255c\u255b\u2510\u2514\u2534\u252c\u251c\u2500\u253c\u255e\u255f\u255a\u2554\u2569\u2566\u2560\u2550\u256c\u2567\u2568\u2564\u2565\u2559\u2558\u2552\u2553\u256b\u256a\u2518\u250c\u2588\u2584\u258c\u2590\u2580\u03b1\xdf\u0393\u03c0\u03a3\u03c3\xb5\u03c4\u03a6\u0398\u03a9\u03b4\u221e\u03c6\u03b5\u2229\u2261\xb1\u2265\u2264\u2320\u2321\xf7\u2248\xb0\u2219\xb7\u221a\u207f\xb2\u25a0\xa0',
+	862: '\u05d0\u05d1\u05d2\u05d3\u05d4\u05d5\u05d6\u05d7\u05d8\u05d9\u05da\u05db\u05dc\u05dd\u05de\u05df\u05e0\u05e1\u05e2\u05e3\u05e4\u05e5\u05e6\u05e7\u05e8\u05e9\u05ea\xa2\xa3\xa5\u20a7\u0192\xe1\xed\xf3\xfa\xf1\xd1\xaa\xba\xbf\u2310\xac\xbd\xbc\xa1\xab\xbb\u2591\u2592\u2593\u2502\u2524\u2561\u2562\u2556\u2555\u2563\u2551\u2557\u255d\u255c\u255b\u2510\u2514\u2534\u252c\u251c\u2500\u253c\u255e\u255f\u255a\u2554\u2569\u2566\u2560\u2550\u256c\u2567\u2568\u2564\u2565\u2559\u2558\u2552\u2553\u256b\u256a\u2518\u250c\u2588\u2584\u258c\u2590\u2580\u03b1\xdf\u0393\u03c0\u03a3\u03c3\xb5\u03c4\u03a6\u0398\u03a9\u03b4\u221e\u03c6\u03b5\u2229\u2261\xb1\u2265\u2264\u2320\u2321\xf7\u2248\xb0\u2219\xb7\u221a\u207f\xb2\u25a0\xa0',
+	863: '\xc7\xfc\xe9\xe2\xc2\xe0\xb6\xe7\xea\xeb\xe8\xef\xee\u2017\xc0\xa7\xc9\xc8\xca\xf4\xcb\xcf\xfb\xf9\xa4\xd4\xdc\xa2\xa3\xd9\xdb\u0192\xa6\xb4\xf3\xfa\xa8\xb8\xb3\xaf\xce\u2310\xac\xbd\xbc\xbe\xab\xbb\u2591\u2592\u2593\u2502\u2524\u2561\u2562\u2556\u2555\u2563\u2551\u2557\u255d\u255c\u255b\u2510\u2514\u2534\u252c\u251c\u2500\u253c\u255e\u255f\u255a\u2554\u2569\u2566\u2560\u2550\u256c\u2567\u2568\u2564\u2565\u2559\u2558\u2552\u2553\u256b\u256a\u2518\u250c\u2588\u2584\u258c\u2590\u2580\u03b1\xdf\u0393\u03c0\u03a3\u03c3\xb5\u03c4\u03a6\u0398\u03a9\u03b4\u221e\u03c6\u03b5\u2229\u2261\xb1\u2265\u2264\u2320\u2321\xf7\u2248\xb0\u2219\xb7\u221a\u207f\xb2\u25a0\xa0',
+	865: '\xc7\xfc\xe9\xe2\xe4\xe0\xe5\xe7\xea\xeb\xe8\xef\xee\xec\xc4\xc5\xc9\xe6\xc6\xf4\xf6\xf2\xfb\xf9\xff\xd6\xdc\xf8\xa3\xd8\u20a7\u0192\xe1\xed\xf3\xfa\xf1\xd1\xaa\xba\xbf\u2310\xac\xbd\xbc\xa1\xab\xa4\u2591\u2592\u2593\u2502\u2524\u2561\u2562\u2556\u2555\u2563\u2551\u2557\u255d\u255c\u255b\u2510\u2514\u2534\u252c\u251c\u2500\u253c\u255e\u255f\u255a\u2554\u2569\u2566\u2560\u2550\u256c\u2567\u2568\u2564\u2565\u2559\u2558\u2552\u2553\u256b\u256a\u2518\u250c\u2588\u2584\u258c\u2590\u2580\u03b1\xdf\u0393\u03c0\u03a3\u03c3\xb5\u03c4\u03a6\u0398\u03a9\u03b4\u221e\u03c6\u03b5\u2229\u2261\xb1\u2265\u2264\u2320\u2321\xf7\u2248\xb0\u2219\xb7\u221a\u207f\xb2\u25a0\xa0',
+	869: '\ufffd\ufffd\ufffd\ufffd\ufffd\ufffd\u0386\ufffd\xb7\xac\xa6\u2018\u2019\u0388\u2015\u0389\u038a\u03aa\u038c\ufffd\ufffd\u038e\u03ab\xa9\u038f\xb2\xb3\u03ac\xa3\u03ad\u03ae\u03af\u03ca\u0390\u03cc\u03cd\u0391\u0392\u0393\u0394\u0395\u0396\u0397\xbd\u0398\u0399\xab\xbb\u2591\u2592\u2593\u2502\u2524\u039a\u039b\u039c\u039d\u2563\u2551\u2557\u255d\u039e\u039f\u2510\u2514\u2534\u252c\u251c\u2500\u253c\u03a0\u03a1\u255a\u2554\u2569\u2566\u2560\u2550\u256c\u03a3\u03a4\u03a5\u03a6\u03a7\u03a8\u03a9\u03b1\u03b2\u03b3\u2518\u250c\u2588\u2584\u03b4\u03b5\u2580\u03b6\u03b7\u03b8\u03b9\u03ba\u03bb\u03bc\u03bd\u03be\u03bf\u03c0\u03c1\u03c3\u03c2\u03c4\u0384\xad\xb1\u03c5\u03c6\u03c7\xa7\u03c8\u0385\xb0\xa8\u03c9\u03cb\u03b0\u03ce\u25a0\xa0',
+}

package/src/tools/schedules/schedule-tool.ts

@@ -54,6 +54,12 @@ const inputSchema = z.object({
 			body: z.string().min(1).describe('The exact script text, run verbatim once confirmed'),
 			shell: z.enum(['bash', 'sh']).describe('Which shell reads it; no default'),
 			timeoutMs: z.number().int().positive().optional().describe('The script’s own wall clock'),
+			report: z
+				.literal('json-v1')
+				.optional()
+				.describe(
+					'Pure script only: stdout must be exactly one JSON object line, {"v":1,"state":"quiet"} or {"v":1,"state":"changed","summary":"..."}, with optional nextState. Quiet runs report no result; changed runs deliver the summary. The scheduler owns nextState. Omit for ordinary stdout.',
+				),
 		})
 		.optional()
 		.describe(
@@ -75,7 +81,13 @@ const inputSchema = z.object({
 		.string()
 		.optional()
 		.describe(
-			"create: existing working directory for the job; leave unset for the session's folder when valid. The file system root, the operator's home directory, NAMZU_HOME and a folder containing NAMZU_HOME are refused. If this session is in one of those, choose an existing project subfolder and set folder explicitly",
+			"create/update: existing project directory for the job; leave unset to use this session's project folder. Root, the operator's home directory, NAMZU_HOME and a folder containing NAMZU_HOME are refused. For a project-free pure script use workspace: 'none' and omit folder; do not make a visible folder merely to satisfy validation",
+		),
+	workspace: z
+		.literal('none')
+		.optional()
+		.describe(
+			'create/update: pure script only. Run in a private scheduler workspace with no project; omit folder. The script still runs as your user on this machine, so this is not a sandbox or a write boundary.',
 		),
 	tz: z
 		.string()
@@ -143,10 +155,10 @@ const inputSchema = z.object({
 			tokenBudget: z
 				.number()
 				.int()
-				.positive()
+				.nonnegative()
 				.optional()
 				.describe(
-					'Tokens one run may spend in total. Every model call resends the whole prompt (often 10,000-30,000 tokens each), so a run needs far more than its answer; omit for the default.',
+					'Tokens one run may spend in total; 0 means no token limit. Every model call resends the whole prompt (often 10,000-30,000 tokens each), so a finite budget needs far more than its answer; omit to inherit the host default.',
 				),
 			timeoutMs: z
 				.number()
@@ -299,6 +311,12 @@ async function create(
 	if (runKind === 'agent' && input.script !== undefined) {
 		return refuse('an agent job has no script; omit kind (or set it to agent) to use one')
 	}
+	if (input.workspace === 'none' && runKind !== 'script')
+		return refuse("workspace: 'none' is only for a pure script job")
+	if (input.workspace === 'none' && input.folder !== undefined)
+		return refuse("workspace: 'none' cannot be combined with folder; omit folder")
+	if (input.script?.report !== undefined && runKind !== 'script')
+		return refuse('script.report is only for a pure script job')
 	if (runKind === 'script' && input.prompt !== undefined)
 		return refuse('a pure script job has no prompt; remove prompt')
 	if (runKind === 'script' && input.budget !== undefined) {
@@ -318,6 +336,7 @@ async function create(
 		...(input.script ? { script: input.script } : {}),
 		...(input.prompt !== undefined ? { prompt: input.prompt } : {}),
 		...(input.folder !== undefined ? { folder: input.folder } : {}),
+		...(input.workspace !== undefined ? { workspace: input.workspace } : {}),
 		...(input.tz !== undefined ? { tz: input.tz } : {}),
 		...(input.notifyOnFinish !== undefined ? { notifyOnFinish: input.notifyOnFinish } : {}),
 		permissions,
@@ -389,6 +408,7 @@ const CHANGEABLE = [
 	'prompt',
 	'when',
 	'folder',
+	'workspace',
 	'tz',
 	'notifyOnFinish',
 	'permissions',
@@ -422,6 +442,12 @@ async function update(
 			'update cannot set kind to agent while also giving a script; drop script to make it an agent job, or leave kind unset (or as script/script+agent) to keep one.',
 		)
 	}
+	if (input.workspace === 'none' && input.folder !== undefined)
+		return refuse("workspace: 'none' cannot be combined with folder; omit folder")
+	if (input.workspace === 'none' && input.kind !== undefined && input.kind !== 'script')
+		return refuse("workspace: 'none' is only for a pure script job")
+	if (input.script?.report !== undefined && input.kind !== undefined && input.kind !== 'script')
+		return refuse('script.report is only for a pure script job')
 	let permissions: ScheduleJobDraft['permissions'] | undefined
 	if (input.permissions) {
 		const checked = checkPermissions(host, input.permissions)
@@ -448,6 +474,7 @@ async function update(
 		...(input.prompt !== undefined ? { prompt: input.prompt } : {}),
 		...(input.when !== undefined ? { when: input.when } : {}),
 		...(input.folder !== undefined ? { folder: input.folder } : {}),
+		...(input.workspace !== undefined ? { workspace: input.workspace } : {}),
 		...(input.tz !== undefined ? { tz: input.tz } : {}),
 		...(input.notifyOnFinish !== undefined ? { notifyOnFinish: input.notifyOnFinish } : {}),
 		...(permissions ? { permissions } : {}),
@@ -532,7 +559,13 @@ async function lifecycle(
 	}
 	if (action === 'pause') await host.pause(job.name)
 	else if (action === 'resume') await host.resume(job.name)
-	else await host.delete(job.name)
+	else {
+		try {
+			await host.delete(job.name)
+		} catch (error) {
+			return refuse(error instanceof Error ? error.message : String(error))
+		}
+	}
 	const verb = action === 'pause' ? 'paused' : action === 'resume' ? 'resumed' : 'deleted'
 	return { success: true, output: `Job "${job.name}" ${verb}.`, data: { name: job.name, action } }
 }
@@ -554,7 +587,7 @@ export function buildScheduleTools(host: ScheduleToolHost): ToolDefinition[] {
 		defineTool({
 			name: SCHEDULE_TOOL_NAME,
 			description:
-				"Manage the operator's scheduled jobs: model prompts or fixed scripts that run later in a folder, with nobody watching, under an explicit permission set. Use it only when the user asks for something to happen on a schedule. create, update, resume and delete are confirmed by the operator; pause is not. A job needs name, when and permissions (unmatched: park or deny, plus a preset, rules or a browser grant). agent and script+agent also need prompt; script and script+agent also need script. For a pure script, use permissions {rules:{},unmatched:'deny'} without a preset unless you intend deny rules: read-only denies bash and blocks every script. A pure script has no prompt, model, agent budget, browser grant or session; set script.timeoutMs to limit it. To change a job, update it with job and only the fields that change; do not delete and recreate it. Leave folder unset when the session folder is valid; home, root and NAMZU_HOME are invalid, so choose an existing project subfolder there. Leave tz, execution, budget and headed unset unless the user asked for them: the defaults are the operator's, and the confirmation marks each value you chose. Scheduled runs cannot ask questions.",
+				"Manage durable jobs that run later, including while Namzu is closed when its scheduler is installed. For repetition in this open conversation while the TUI is open, use session_loop (/loop); a loop is not a background service. Use schedule only when the user asks for durable scheduled work. create, update, resume and delete ask the operator; pause does not. A job needs name, when and explicit permissions. agent and script+agent need prompt; script and script+agent need script. For a pure script, use permissions {rules:{},unmatched:'deny'} without a preset unless you intend deny rules: read-only denies bash and blocks every script. A pure script has no prompt, model, agent budget, browser grant or run session; set script.timeoutMs to limit it. A pure script may opt into script.report:'json-v1': one JSON stdout line says quiet or changed with a summary and optional scheduler-owned nextState. For a project-free pure script set workspace:'none' and omit folder; its private scheduler workspace is not a sandbox, and its shell still has host authority. For project work, use the actual existing project folder; home, root and NAMZU_HOME are invalid. Do not create a visible folder merely to satisfy validation. The requesting conversation can receive important results separately from the run workspace. To change a job, update it with job and only the fields that change; do not delete and recreate it. Leave tz, execution, budget and headed unset unless requested: defaults are the operator's. Scheduled runs cannot ask questions.",
 			inputSchema,
 			category: 'custom',
 			permissions: [],

package/src/tools/schedules/types.ts

@@ -33,11 +33,15 @@ export interface ScheduleJobDraft {
 		readonly body: string
 		readonly shell: 'bash' | 'sh'
 		readonly timeoutMs?: number
+		/** Pure scripts only: one JSON v1 report line on stdout per run. */
+		readonly report?: 'json-v1'
 	}
 	/** Schedule words: `every 30m`, `0 9 * * 1-5`, `at 09:00`, `in 2h`. */
 	readonly when: string
-	/** Folder the job runs in. Absent: the session's working directory. */
+	/** Project folder the job runs in. Absent: the session's folder, unless `workspace` is `'none'`. */
 	readonly folder?: string
+	/** A private scheduler workspace for a pure script; omit `folder` when set. */
+	readonly workspace?: 'none'
 	/** IANA zone for a cron expression or a local time. Absent: the host's. */
 	readonly tz?: string
 	/** Enable routine completion notices. Absent: the host's usual setting. */
@@ -65,6 +69,7 @@ export interface ScheduleJobDraft {
 	}
 	readonly budget?: {
 		readonly maxIterations?: number
+		/** Total model tokens per agent phase; zero means no token limit. Omit to inherit the host default. */
 		readonly tokenBudget?: number
 		readonly timeoutMs?: number
 	}
@@ -95,8 +100,18 @@ export interface ScheduleBrowserGrant {
 /** What the person confirming is shown. Every field is the host's own computation. */
 export interface ScheduleJobPreview {
 	readonly name: string
-	/** The canonical folder the job would run in. */
+	/** The canonical working directory, including the private planned path for `workspace: 'none'`. */
 	readonly folder: string
+	/** The private scheduler workspace is used instead of a project folder. */
+	readonly workspace?: 'none'
+	/** Host-bound source conversation that receives results; absent for older hosts. */
+	readonly delivery?: {
+		readonly kind: 'source-conversation'
+		readonly sessionId: string
+		readonly projectSlug: string
+		readonly projectId: string
+		readonly tenantId: string
+	}
 	/** True when `folder` is outside the session's working directory and added directories. */
 	readonly outsideSessionRoots: boolean
 	/** Empty for a pure `'script'` job, whose prompt is unused. */
@@ -108,6 +123,7 @@ export interface ScheduleJobPreview {
 		readonly body: string
 		readonly shell: 'bash' | 'sh'
 		readonly timeoutMs: number
+		readonly report?: 'json-v1'
 	}
 	/** The schedule in words, with its zone. */
 	readonly schedule: string
@@ -126,10 +142,11 @@ export interface ScheduleJobPreview {
 	/** Effective run limits. A pure script has zero model iterations/tokens and its script timeout. */
 	readonly budget: {
 		readonly maxIterations: number
+		/** Zero means no token limit for an agent phase, or no model use for a pure script. */
 		readonly tokenBudget: number
 		readonly timeoutMs: number
 	}
-	/** Runs per day at most, times the token budget. Absent for a one-shot. */
+	/** Runs per day at most, times a finite token budget. Absent for a one-shot, an unlimited agent phase, or a pure script. */
 	readonly dailyTokenCeiling?: number
 	/** Provider and model the agent phase is pinned to. Absent for a pure script job. */
 	readonly model?: string
@@ -142,6 +159,7 @@ export interface ScheduleJobPreview {
 /** A job as the `list` action reports it. */
 export interface ScheduleJobSummary {
 	readonly name: string
+	/** Canonical project path, or a host-provided label for a private workspace. */
 	readonly folder: string
 	readonly state: string
 	readonly schedule: string
@@ -167,6 +185,8 @@ export interface ScheduleJobChanges {
 	readonly prompt?: string
 	readonly when?: string
 	readonly folder?: string
+	/** Switch a pure script to a private scheduler workspace; omit `folder` when set. */
+	readonly workspace?: 'none'
 	readonly tz?: string
 	/** Whether routine Namzu desktop completion notices are enabled. */
 	readonly notifyOnFinish?: boolean

package/src/tools/task/list.ts

@@ -13,7 +13,7 @@ export function buildTaskListTool(
 	return defineTool({
 		name: 'task_list',
 		description:
-			'List planning items for this session: every open one, and those closed during the current turn. Not delegated agent invocations. Use agent_task_list, when available, to inspect agent execution. Shows subject, status, owner, and unresolved blockers. Use this to review your plan and decide what to work on next.',
+			'List planning items for this session: every open one, and those closed during the current turn. Earlier completed or failed items remain stored but are omitted; returned tasks and stats count only this current-turn view, not the full stored history. Not delegated agent invocations. Use agent_task_list, when available, to inspect agent execution. Shows subject, status, owner, and unresolved blockers. Use this to review your plan and decide what to work on next.',
 		inputSchema: z.object({}),
 		category: 'custom',
 		permissions: [],
@@ -26,13 +26,13 @@ export function buildTaskListTool(
 			const all = await taskStore.list({ sessionId: scope.sessionId })
 			// Blockers resolve against every task of the session, shown or not: a
 			// blocker closed in an earlier turn is resolved, not unknown.
-			const completedIds = new Set(
+			const terminalIds = new Set(
 				all.filter((t) => isTerminalTaskStatus(t.status)).map((t) => t.id),
 			)
 			const tasks = selectTaskContext(all, scope)
 
 			const summary = tasks.map((task) => {
-				const unresolvedBlockers = task.blockedBy.filter((bid) => !completedIds.has(bid))
+				const unresolvedBlockers = task.blockedBy.filter((bid) => !terminalIds.has(bid))
 
 				return {
 					id: task.id,
@@ -49,14 +49,22 @@ export function buildTaskListTool(
 				pending: tasks.filter((t) => t.status === 'pending').length,
 				in_progress: tasks.filter((t) => t.status === 'in_progress').length,
 				completed: tasks.filter((t) => t.status === 'completed').length,
+				failed: tasks.filter((t) => t.status === 'failed').length,
 			}
+			const omitted = all.length - tasks.length
+			const history = omitted
+				? ` ${countTasks(omitted)} closed in earlier turns ${omitted === 1 ? 'remains' : 'remain'} stored and ${omitted === 1 ? 'is' : 'are'} omitted from this view.`
+				: ''
+			const output =
+				all.length === 0
+					? 'No planning tasks found for this session. This list does not report delegated agent status; use agent_task_list when available.'
+					: tasks.length === 0
+						? `No open or current-turn planning tasks.${history}`
+						: `Current-turn view: ${countTasks(stats.total)}: ${stats.completed} completed, ${stats.in_progress} in progress, ${stats.pending} pending${stats.failed ? `, ${stats.failed} failed` : ''}.${history}`
 
 			return {
 				success: true,
-				output:
-					tasks.length === 0
-						? 'No planning tasks yet. This list does not report delegated agent status; use agent_task_list when available.'
-						: `${countTasks(stats.total)}: ${stats.completed} completed, ${stats.in_progress} in progress, ${stats.pending} pending.`,
+				output,
 				data: { tasks: summary, stats },
 			}
 		},

package/src/tools/task/present.ts

@@ -28,7 +28,11 @@ function activity(label: string): ToolCallView {
 }
 
 /** A successful receipt: the call row already said it. */
-const HIDDEN_RESULT: ToolResultView = { kind: 'generic', label: '', visibility: 'hidden' }
+const HIDDEN_RESULT: ToolResultView = {
+	kind: 'generic',
+	label: '',
+	visibility: 'hidden',
+}
 
 /** `N task` / `N tasks`. */
 export function countTasks(count: number): string {
@@ -44,7 +48,9 @@ function failure(result: ToolResult, fallback: string): ToolResultView {
 	}
 }
 
-export function presentTaskCreateCall(input: { readonly subject?: unknown }): ToolCallView {
+export function presentTaskCreateCall(input: {
+	readonly subject?: unknown
+}): ToolCallView {
 	const subject = typeof input.subject === 'string' ? oneLine(input.subject) : ''
 	return activity(subject ? `Add task · ${subject}` : 'Add task')
 }
@@ -61,10 +67,12 @@ export function taskUpdateVerb(status: unknown): string {
 			return 'Start task'
 		case 'completed':
 			return 'Complete task'
+		case 'failed':
+			return 'Fail task'
 		case 'deleted':
 			return 'Remove task'
 		case 'pending':
-			return 'Reopen task'
+			return 'Set task pending'
 		default:
 			return 'Update task'
 	}
@@ -80,7 +88,22 @@ export function presentTaskUpdateCall(input: {
 }
 
 export function presentTaskUpdateResult(_input: unknown, result: ToolResult): ToolResultView {
-	if (!result.success) return failure(result, 'The task was not changed')
+	if (!result.success) {
+		const data = result.data as { status?: unknown; requestedStatus?: unknown } | undefined
+		if (
+			typeof data?.requestedStatus === 'string' &&
+			data.requestedStatus !== data.status &&
+			(data.status === 'pending' ||
+				data.status === 'in_progress' ||
+				data.status === 'completed' ||
+				data.status === 'failed')
+		)
+			return {
+				kind: 'generic',
+				label: `Task remains ${data.status.replace('_', ' ')}; other edits may have applied`,
+			}
+		return failure(result, 'The task was not changed')
+	}
 	return HIDDEN_RESULT
 }
 
@@ -90,13 +113,20 @@ export function presentTaskListCall(): ToolCallView {
 
 export function presentTaskListResult(_input: unknown, result: ToolResult): ToolResultView {
 	if (!result.success) return { kind: 'generic', label: 'The task list could not be read' }
-	const stats = (result.data as { stats?: { total?: unknown; completed?: unknown } } | undefined)
-		?.stats
+	const stats = (
+		result.data as
+			| { stats?: { total?: unknown; completed?: unknown; failed?: unknown } }
+			| undefined
+	)?.stats
 	const total = typeof stats?.total === 'number' ? stats.total : undefined
 	const completed = typeof stats?.completed === 'number' ? stats.completed : undefined
+	const failed = typeof stats?.failed === 'number' ? stats.failed : 0
 	if (total === undefined || completed === undefined) return HIDDEN_RESULT
 	return {
 		kind: 'generic',
-		label: total === 0 ? 'No tasks yet' : `Tasks · ${completed}/${total} done`,
+		label:
+			total === 0
+				? 'No open or current-turn tasks'
+				: `Current-turn task view · ${completed}/${total} done${failed ? ` · ${failed} failed` : ''}`,
 	}
 }

package/src/tools/task/update.ts

@@ -9,14 +9,14 @@ export function buildTaskUpdateTool(taskStore: TaskStore): ToolDefinition {
 	return defineTool({
 		name: 'task_update',
 		description:
-			'Update an existing task. Change its status (pending → in_progress → completed), edit its description, transfer ownership, or manage dependencies. Use status "deleted" to remove a task entirely.',
+			'Update task fields, owner or dependencies. Built-in statuses move forward only; completed/failed are terminal. Create follow-up tasks instead of reopening. Record failures as failed. An unconfirmed status may leave other edits applied. Outcomes are reported, not verified. Use "deleted" to remove a task.',
 		inputSchema: z.object({
 			id: z.string().describe('Task ID (e.g. "task_abc123")'),
 			subject: z.string().optional().describe('Updated title'),
 			description: z.string().optional().describe('Updated description'),
 			activeForm: z.string().optional().describe('Updated present continuous form'),
 			status: z
-				.enum(['pending', 'in_progress', 'completed', 'deleted'])
+				.enum(['pending', 'in_progress', 'completed', 'failed', 'deleted'])
 				.optional()
 				.describe('New status'),
 			owner: z.string().optional().describe('Agent name to assign ownership'),
@@ -76,7 +76,7 @@ export function buildTaskUpdateTool(taskStore: TaskStore): ToolDefinition {
 				subject,
 				description,
 				activeForm,
-				status: status as 'pending' | 'in_progress' | 'completed' | undefined,
+				status,
 				owner,
 				metadata,
 			})
@@ -85,14 +85,21 @@ export function buildTaskUpdateTool(taskStore: TaskStore): ToolDefinition {
 				return { success: false, output: `Task ${id} not found` }
 			}
 
+			// Stores can retain the old status while applying other edits. The
+			// receipt describes the returned state; it cannot prove whether the
+			// request was refused or a concurrent writer advanced it again.
+			const statusApplied = status === undefined || updated.status === status
 			return {
-				success: true,
-				output: `Task ${id} updated — status: ${updated.status}`,
+				success: statusApplied,
+				output: statusApplied
+					? `Task ${id} updated — status: ${updated.status}`
+					: `Task ${id} requested status "${status}" could not be confirmed; returned status is "${updated.status}". Other requested edits may have applied. Inspect the task and create a new task for follow-up work.`,
 				data: {
 					id: updated.id,
 					subject: updated.subject,
 					status: updated.status,
 					owner: updated.owner,
+					...(statusApplied ? {} : { requestedStatus: status }),
 				},
 			}
 		},

package/src/tools/text-window.ts

@@ -0,0 +1,87 @@
+import type { ToolTextWindow } from '../types/tool/presentation.js'
+
+/** Lines kept from the start and from the end of a long text. */
+export const WINDOW_HEAD_LINES = 80
+export const WINDOW_TAIL_LINES = 40
+/** A window never holds more than this many characters in either half. */
+export const WINDOW_HALF_CHARS = 6_000
+
+function clipHead(text: string, max: number): string {
+	if (text.length <= max) return text
+	// By code point so a surrogate pair is never cut in two.
+	let end = max
+	const last = text.charCodeAt(end - 1)
+	if (last >= 0xd800 && last <= 0xdbff) end -= 1
+	return `${text.slice(0, end)}…`
+}
+
+function clipTail(text: string, max: number): string {
+	if (text.length <= max) return text
+	let start = text.length - max
+	const first = text.charCodeAt(start)
+	if (first >= 0xdc00 && first <= 0xdfff) start += 1
+	return `…${text.slice(start)}`
+}
+
+/**
+ * A bounded window onto `text` for the person's view: everything when it is
+ * short, otherwise the first and last lines with a count of what lay between.
+ * The model's own text is not touched; this is built beside it.
+ */
+export function windowText(
+	text: string,
+	totalBytes = Buffer.byteLength(text, 'utf8'),
+): ToolTextWindow {
+	const body = text.endsWith('\n') ? text.slice(0, -1) : text
+	const lines = body.length === 0 ? [] : body.split('\n')
+	const totalLines = lines.length
+	if (totalLines <= WINDOW_HEAD_LINES + WINDOW_TAIL_LINES && body.length <= WINDOW_HALF_CHARS * 2) {
+		return { head: body, totalLines, totalBytes }
+	}
+	const headLines = lines.slice(0, WINDOW_HEAD_LINES)
+	const tailLines =
+		totalLines > WINDOW_HEAD_LINES
+			? lines.slice(Math.max(WINDOW_HEAD_LINES, totalLines - WINDOW_TAIL_LINES))
+			: []
+	const head = clipHead(headLines.join('\n'), WINDOW_HALF_CHARS)
+	const tail = clipTail(tailLines.join('\n'), WINDOW_HALF_CHARS)
+	const omittedLines = totalLines - headLines.length - tailLines.length
+	return {
+		head,
+		...(tail ? { tail } : {}),
+		...(omittedLines > 0 ? { omittedLines } : {}),
+		totalLines,
+		totalBytes,
+	}
+}
+
+const SAMPLE_CHARS = 8_000
+
+/**
+ * Whether decoded output is a stream of bytes and not text: a NUL, or a
+ * noticeable share of control characters and replacement characters that no
+ * terminal prints. ANSI escapes, tabs, backspaces and line ends are text.
+ */
+export function looksBinary(text: string): boolean {
+	const sample = text.length > SAMPLE_CHARS ? text.slice(0, SAMPLE_CHARS) : text
+	if (sample.length === 0) return false
+	let odd = 0
+	for (let i = 0; i < sample.length; i++) {
+		const code = sample.charCodeAt(i)
+		if (code === 0) return true
+		if (code === 0xfffd) odd++
+		else if (
+			code < 0x20 &&
+			code !== 9 &&
+			code !== 10 &&
+			code !== 13 &&
+			code !== 27 &&
+			code !== 8 &&
+			code !== 7 &&
+			code !== 12
+		)
+			odd++
+		else if (code === 0x7f) odd++
+	}
+	return odd / sample.length > 0.02
+}