@phuetz/code-buddy 0.3.0 → 1.0.0-rc.8

package/dist/scheduler/pre-check-runner.d.ts

@@ -0,0 +1,61 @@
+/**
+ * Cron pre-check runner.
+ *
+ * A pre-check is a *non-LLM* gate evaluated before an expensive scheduled job.
+ * It answers one question: "has anything changed enough to justify running the
+ * agent?". Hermes Agent's cron supports the same idea (e.g. only run lead
+ * discovery if the seed source changed). This keeps Code Buddy's scheduled
+ * autonomy cheap: a watched file that did not change, or a guard command that
+ * reports "nothing to do", skips the LLM run with explicit evidence.
+ *
+ * Two kinds:
+ *   - `file_changed`: fingerprint one or more paths; run only when the
+ *     fingerprint differs from the previous run (first run always runs).
+ *   - `command`: spawn a bounded local command (no shell) and gate on its exit
+ *     code or on whether its stdout changed.
+ *
+ * Fail-open: if the pre-check itself errors (bad path is fine, but a spawn
+ * failure or timeout), the job is allowed to run. A broken pre-check must never
+ * silently disable a schedule forever.
+ */
+export type CronPreCheckType = 'file_changed' | 'command';
+export type CronPreCheckRunWhen = 'exit_zero' | 'exit_nonzero' | 'stdout_changed';
+export interface CronPreCheckCommand {
+    executable: string;
+    args?: string[];
+    cwd?: string;
+}
+export interface CronPreCheck {
+    /** Pre-check kind. */
+    type: CronPreCheckType;
+    /** file_changed: paths whose combined content fingerprint gates the run. */
+    paths?: string[];
+    /** command: executable + args, spawned without a shell. */
+    command?: CronPreCheckCommand;
+    /** command: how to interpret the result (default `exit_zero`). */
+    runWhen?: CronPreCheckRunWhen;
+    /** command timeout in ms (default 30000, clamped to [100, 600000]). */
+    timeoutMs?: number;
+    /** Persisted across runs — fingerprint of the last observation. */
+    lastFingerprint?: string;
+    /** Extra allowed command executables (basename match), merged with defaults. */
+    allowedExecutables?: string[];
+}
+export interface CronPreCheckResult {
+    /** Whether the expensive job should run. */
+    shouldRun: boolean;
+    /** Human-readable evidence for the decision. */
+    reason: string;
+    /** New fingerprint to persist back onto the job, when applicable. */
+    fingerprint?: string;
+    /** Structured evidence for logs/telemetry. */
+    evidence: Record<string, unknown>;
+}
+/**
+ * Evaluate a pre-check. Read-only against the filesystem; the only side effect
+ * is spawning the configured guard command (without a shell).
+ *
+ * The caller is responsible for persisting `result.fingerprint` back onto the
+ * job's pre-check config so the next run can compare against it.
+ */
+export declare function evaluateCronPreCheck(preCheck: CronPreCheck): Promise<CronPreCheckResult>;

package/dist/scheduler/pre-check-runner.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pre-check-runner.js","sourceRoot":"","sources":["../../src/scheduler/pre-check-runner.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,EAAE,KAAK,EAAE,MAAM,eAAe,CAAC;AACtC,OAAO,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAC;AACpC,OAAO,EAAE,MAAM,IAAI,CAAC;AACpB,OAAO,IAAI,MAAM,MAAM,CAAC;AAuCxB,MAAM,0BAA0B,GAAG,MAAM,CAAC;AAC1C,MAAM,qBAAqB,GAAG,SAAS,CAAC,CAAC,kCAAkC;AAC3E,MAAM,gBAAgB,GAAG,SAAS,CAAC;AAEnC,MAAM,2BAA2B,GAAG,IAAI,GAAG,CAAC;IAC1C,MAAM;IACN,KAAK;IACL,SAAS;IACT,MAAM;IACN,UAAU;IACV,KAAK;IACL,SAAS;IACT,YAAY;IACZ,gBAAgB;IAChB,MAAM;IACN,UAAU;IACV,QAAQ;IACR,YAAY;IACZ,SAAS;IACT,aAAa;IACb,IAAI;CACL,CAAC,CAAC;AAEH;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,QAAsB;IAC/D,IAAI,CAAC,QAAQ,IAAI,OAAO,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAC9C,OAAO,SAAS,CAAC,qCAAqC,EAAE,EAAE,KAAK,EAAE,gBAAgB,EAAE,CAAC,CAAC;IACvF,CAAC;IAED,QAAQ,QAAQ,CAAC,IAAI,EAAE,CAAC;QACtB,KAAK,cAAc;YACjB,OAAO,mBAAmB,CAAC,QAAQ,CAAC,CAAC;QACvC,KAAK,SAAS;YACZ,OAAO,eAAe,CAAC,QAAQ,CAAC,CAAC;QACnC;YACE,OAAO,SAAS,CAAC,2BAA2B,MAAM,CAAE,QAA+B,CAAC,IAAI,CAAC,EAAE,EAAE;gBAC3F,KAAK,EAAE,cAAc;aACtB,CAAC,CAAC;IACP,CAAC;AACH,CAAC;AAED,SAAS,mBAAmB,CAAC,QAAsB;IACjD,MAAM,KAAK,GAAG,CAAC,QAAQ,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IAC1F,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,OAAO,SAAS,CAAC,qCAAqC,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC,CAAC;IACjF,CAAC;IAED,IAAI,WAAmB,CAAC;IACxB,IAAI,CAAC;QACH,WAAW,GAAG,gBAAgB,CAAC,KAAK,CAAC,CAAC;IACxC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,SAAS,CAAC,oCAAoC,MAAM,CAAC,GAAG,CAAC,EAAE,EAAE;YAClE,KAAK,EAAE,oBAAoB;YAC3B,KAAK;SACN,CAAC,CAAC;IACL,CAAC;IAED,IAAI,CAAC,QAAQ,CAAC,eAAe,EAAE,CAAC;QAC9B,OAAO;YACL,SAAS,EAAE,IAAI;YACf,MAAM,EAAE,wCAAwC,KAAK,CAAC,MAAM,UAAU;YACtE,WAAW;YACX,QAAQ,EAAE,EAAE,IAAI,EAAE,cAAc,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE;SAC1D,CAAC;IACJ,CAAC;IAED,MAAM,OAAO,GAAG,WAAW,KAAK,QAAQ,CAAC,eAAe,CAAC;IACzD,OAAO;QACL,SAAS,EAAE,OAAO;QAClB,MAAM,EAAE,OAAO;YACb,CAAC,CAAC,wCAAwC;YAC1C,CAAC,CAAC,qDAAqD;QACzD,WAAW;QACX,QAAQ,EAAE,EAAE,IAAI,EAAE,cAAc,EAAE,KAAK,EAAE,OAAO,EAAE;KACnD,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,eAAe,CAAC,QAAsB;IACnD,MAAM,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAC;IACjC,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,CAAC,UAAU,KAAK,QAAQ,IAAI,OAAO,CAAC,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1F,OAAO,SAAS,CAAC,qCAAqC,EAAE,EAAE,KAAK,EAAE,eAAe,EAAE,CAAC,CAAC;IACtF,CAAC;IAED,IAAI,CAAC;QACH,uBAAuB,CAAC,OAAO,CAAC,UAAU,EAAE,QAAQ,CAAC,kBAAkB,CAAC,CAAC;IAC3E,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,SAAS,CAAC,0CAA0C,MAAM,CAAC,GAAG,CAAC,EAAE,EAAE;YACxE,KAAK,EAAE,wBAAwB;YAC/B,UAAU,EAAE,OAAO,CAAC,UAAU;SAC/B,CAAC,CAAC;IACL,CAAC;IAED,MAAM,OAAO,GAAwB,QAAQ,CAAC,OAAO,IAAI,WAAW,CAAC;IACrE,MAAM,SAAS,GAAG,gBAAgB,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;IAEvD,IAAI,OAAsG,CAAC;IAC3G,IAAI,CAAC;QACH,OAAO,GAAG,MAAM,aAAa,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;IACpD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,SAAS,CAAC,mCAAmC,MAAM,CAAC,GAAG,CAAC,EAAE,EAAE;YACjE,KAAK,EAAE,cAAc;YACrB,UAAU,EAAE,OAAO,CAAC,UAAU;SAC/B,CAAC,CAAC;IACL,CAAC;IAED,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;QACrB,OAAO,SAAS,CAAC,qCAAqC,SAAS,IAAI,EAAE;YACnE,KAAK,EAAE,WAAW;YAClB,UAAU,EAAE,OAAO,CAAC,UAAU;YAC9B,SAAS;SACV,CAAC,CAAC;IACL,CAAC;IAED,MAAM,YAAY,GAAG;QACnB,IAAI,EAAE,SAAS;QACf,UAAU,EAAE,OAAO,CAAC,UAAU;QAC9B,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,OAAO;KACR,CAAC;IAEF,IAAI,OAAO,KAAK,gBAAgB,EAAE,CAAC;QACjC,MAAM,WAAW,GAAG,UAAU,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,gBAAgB,CAAC,CAAC,CAAC;QAC1E,IAAI,CAAC,QAAQ,CAAC,eAAe,EAAE,CAAC;YAC9B,OAAO;gBACL,SAAS,EAAE,IAAI;gBACf,MAAM,EAAE,yCAAyC;gBACjD,WAAW;gBACX,QAAQ,EAAE,EAAE,GAAG,YAAY,EAAE,QAAQ,EAAE,IAAI,EAAE;aAC9C,CAAC;QACJ,CAAC;QACD,MAAM,OAAO,GAAG,WAAW,KAAK,QAAQ,CAAC,eAAe,CAAC;QACzD,OAAO;YACL,SAAS,EAAE,OAAO;YAClB,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,uCAAuC,CAAC,CAAC,CAAC,qCAAqC;YACjG,WAAW;YACX,QAAQ,EAAE,EAAE,GAAG,YAAY,EAAE,OAAO,EAAE;SACvC,CAAC;IACJ,CAAC;IAED,MAAM,UAAU,GAAG,OAAO,CAAC,QAAQ,KAAK,CAAC,CAAC;IAC1C,MAAM,SAAS,GAAG,OAAO,KAAK,cAAc,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC;IACxE,OAAO;QACL,SAAS;QACT,MAAM,EAAE,SAAS;YACf,CAAC,CAAC,4BAA4B,OAAO,UAAU,OAAO,CAAC,QAAQ,GAAG;YAClE,CAAC,CAAC,gCAAgC,OAAO,UAAU,OAAO,CAAC,QAAQ,cAAc;QACnF,QAAQ,EAAE,EAAE,GAAG,YAAY,EAAE,SAAS,EAAE;KACzC,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,SAAS,gBAAgB,CAAC,KAAe;IACvC,MAAM,IAAI,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC;IAClC,KAAK,MAAM,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;QAClC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;QAC3B,IAAI,CAAC,MAAM,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC,CAAC;IACxC,CAAC;IACD,OAAO,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC5B,CAAC;AAED,SAAS,qBAAqB,CAAC,MAAc;IAC3C,IAAI,IAAc,CAAC;IACnB,IAAI,CAAC;QACH,IAAI,GAAG,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC7B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,IAAI,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC;QACvB,MAAM,KAAK,GAAa,EAAE,CAAC;QAC3B,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC;QAC/B,KAAK,CAAC,IAAI,EAAE,CAAC;QACb,OAAO,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IACtC,CAAC;IAED,IAAI,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC;QAClB,IAAI,CAAC;YACH,MAAM,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;YACpC,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,qBAAqB,CAAC,CAAC;gBAC1D,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;gBACpC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC;gBACtC,OAAO,UAAU,CAAC,QAAQ,CAAC;qBACxB,MAAM,CAAC,MAAM,CAAC;qBACd,MAAM,CAAC,SAAS,IAAI,CAAC,IAAI,EAAE,CAAC;qBAC5B,MAAM,CAAC,KAAK,CAAC,CAAC;YACnB,CAAC;oBAAS,CAAC;gBACT,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;YACnB,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,mDAAmD;YACnD,OAAO,QAAQ,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QACzD,CAAC;IACH,CAAC;IAED,uCAAuC;IACvC,OAAO,QAAQ,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;AACzD,CAAC;AAED,SAAS,OAAO,CAAC,IAAY,EAAE,GAAW,EAAE,GAAa,EAAE,KAAK,GAAG,CAAC;IAClE,IAAI,KAAK,GAAG,EAAE;QAAE,OAAO,CAAC,mDAAmD;IAC3E,IAAI,OAAoB,CAAC;IACzB,IAAI,CAAC;QACH,OAAO,GAAG,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;IACzD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO;IACT,CAAC;IACD,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;QACxC,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QACtC,IAAI,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;YACxB,OAAO,CAAC,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;QACtC,CAAC;aAAM,CAAC;YACN,IAAI,CAAC;gBACH,MAAM,IAAI,GAAG,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;gBAC/B,GAAG,CAAC,IAAI,CAAC,GAAG,GAAG,IAAI,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;YAC9D,CAAC;YAAC,MAAM,CAAC;gBACP,GAAG,CAAC,IAAI,CAAC,GAAG,GAAG,UAAU,CAAC,CAAC;YAC7B,CAAC;QACH,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,aAAa,CACpB,OAA4B,EAC5B,SAAiB;IAEjB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,UAAU,EAAE,OAAO,CAAC,IAAI,IAAI,EAAE,EAAE;YAC1D,GAAG,EAAE,OAAO,CAAC,GAAG;YAChB,KAAK,EAAE,KAAK;YACZ,WAAW,EAAE,IAAI;SAClB,CAAC,CAAC;QACH,IAAI,MAAM,GAAG,EAAE,CAAC;QAChB,IAAI,QAAQ,GAAG,KAAK,CAAC;QACrB,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;YAC5B,QAAQ,GAAG,IAAI,CAAC;YAChB,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACxB,CAAC,EAAE,SAAS,CAAC,CAAC;QAEd,KAAK,CAAC,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;QACjC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;YACxC,IAAI,MAAM,CAAC,MAAM,GAAG,gBAAgB,EAAE,CAAC;gBACrC,MAAM,IAAI,KAAK,CAAC;YAClB,CAAC;QACH,CAAC,CAAC,CAAC;QACH,4DAA4D;QAC5D,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QAClC,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE;YAC1B,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,MAAM,CAAC,KAAK,CAAC,CAAC;QAChB,CAAC,CAAC,CAAC;QACH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,EAAE;YACrC,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,OAAO,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC;QAClD,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,uBAAuB,CAAC,UAAkB,EAAE,KAA2B;IAC9E,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC;QACtB,GAAG,2BAA2B;QAC9B,GAAG,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC;KACrD,CAAC,CAAC;IACH,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,WAAW,EAAE,CAAC;IACrD,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,WAAW,EAAE,CAAC,EAAE,CAAC;QACjE,MAAM,IAAI,KAAK,CAAC,qCAAqC,UAAU,EAAE,CAAC,CAAC;IACrE,CAAC;AACH,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAyB;IACjD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QACzD,OAAO,0BAA0B,CAAC;IACpC,CAAC;IACD,OAAO,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AAC7D,CAAC;AAED,SAAS,UAAU,CAAC,KAAa;IAC/B,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC1D,CAAC;AAED,SAAS,SAAS,CAAC,MAAc,EAAE,QAAiC;IAClE,OAAO;QACL,SAAS,EAAE,IAAI;QACf,MAAM,EAAE,2BAA2B,MAAM,wBAAwB;QACjE,QAAQ,EAAE,EAAE,GAAG,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE;KAC1C,CAAC;AACJ,CAAC;AAED,SAAS,MAAM,CAAC,GAAY;IAC1B,OAAO,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;AAC1D,CAAC"}

package/dist/scheduler/scheduled-delivery.d.ts

@@ -0,0 +1,75 @@
+/**
+ * Scheduled delivery helpers.
+ *
+ * Hermes Agent's cron can deliver a job's result "to any platform". Code
+ * Buddy already has a rich channel layer (Telegram, Discord, Slack, email, …)
+ * and `CronAgentBridge.deliverResult`, but delivery was limited to a single
+ * channel string plus an optional webhook. These pure helpers add:
+ *
+ *   - multi-target fan-out: a scheduled job can name several `type:id` targets;
+ *   - a mobile-safe `summary` format: title + status + a redacted, truncated
+ *     body, so a push/DM never carries secrets or a full prompt (item 17).
+ *
+ * Pure and side-effect free: the bridge owns the actual channel sends.
+ */
+export type ScheduledDeliveryFormat = 'full' | 'summary';
+export interface ScheduledDeliveryConfig {
+    /** Single channel spec, kept for backward compatibility. */
+    channel?: string;
+    /** Multiple `type:id` channel specs (e.g. `telegram:123`, `discord:456`). */
+    targets?: string[];
+    /** Body format: `full` (default) or mobile-safe `summary`. */
+    format?: ScheduledDeliveryFormat;
+}
+export interface ParsedDeliveryTarget {
+    /** Raw `type:id` (or `type`) spec as configured. */
+    spec: string;
+    /** Channel type, e.g. `telegram`. */
+    channelType: string;
+    /** Channel id, defaulting to `default` when the spec omits one. */
+    channelId: string;
+}
+/**
+ * Collect and de-duplicate channel targets from a delivery config. The legacy
+ * single `channel` field and the new `targets[]` are merged; order is stable
+ * (single channel first, then targets) and duplicates are dropped.
+ */
+export declare function collectDeliveryTargets(delivery: ScheduledDeliveryConfig | undefined): ParsedDeliveryTarget[];
+export interface ScheduledSummaryInput {
+    jobName: string;
+    /** High-level outcome label. */
+    status: string;
+    /** Raw job output to summarize. */
+    output: string;
+    /** Optional risk label surfaced in the header. */
+    risk?: string;
+    /** Body truncation budget (default 800 chars). */
+    maxChars?: number;
+}
+export interface ScheduledSummaryResult {
+    content: string;
+    redactionCount: number;
+    truncated: boolean;
+}
+/**
+ * Build a mobile-safe delivery body: a compact header (job, status, optional
+ * risk) plus a secrets-redacted, length-capped excerpt of the output. Never
+ * includes the original prompt — only the produced output, redacted.
+ */
+export declare function formatScheduledSummary(input: ScheduledSummaryInput): ScheduledSummaryResult;
+/**
+ * Resolve the body a scheduled delivery should carry, honoring the configured
+ * format. `summary` is mobile-safe (redacted + truncated); `full` is the raw
+ * output, prefixed with the job name like the legacy delivery path.
+ */
+export declare function resolveDeliveryBody(input: {
+    jobName: string;
+    output: string;
+    status: string;
+    format: ScheduledDeliveryFormat | undefined;
+    risk?: string;
+    maxChars?: number;
+}): {
+    content: string;
+    redactionCount: number;
+};

package/dist/scheduler/scheduled-delivery.js

@@ -0,0 +1,106 @@
+/**
+ * Scheduled delivery helpers.
+ *
+ * Hermes Agent's cron can deliver a job's result "to any platform". Code
+ * Buddy already has a rich channel layer (Telegram, Discord, Slack, email, …)
+ * and `CronAgentBridge.deliverResult`, but delivery was limited to a single
+ * channel string plus an optional webhook. These pure helpers add:
+ *
+ *   - multi-target fan-out: a scheduled job can name several `type:id` targets;
+ *   - a mobile-safe `summary` format: title + status + a redacted, truncated
+ *     body, so a push/DM never carries secrets or a full prompt (item 17).
+ *
+ * Pure and side-effect free: the bridge owns the actual channel sends.
+ */
+import { getDataRedactionEngine } from '../security/data-redaction.js';
+const DEFAULT_SUMMARY_MAX_CHARS = 800;
+/**
+ * Collect and de-duplicate channel targets from a delivery config. The legacy
+ * single `channel` field and the new `targets[]` are merged; order is stable
+ * (single channel first, then targets) and duplicates are dropped.
+ */
+export function collectDeliveryTargets(delivery) {
+    if (!delivery)
+        return [];
+    const specs = [];
+    if (typeof delivery.channel === 'string' && delivery.channel.trim().length > 0) {
+        specs.push(delivery.channel.trim());
+    }
+    for (const target of delivery.targets ?? []) {
+        if (typeof target === 'string' && target.trim().length > 0) {
+            specs.push(target.trim());
+        }
+    }
+    const seen = new Set();
+    const parsed = [];
+    for (const spec of specs) {
+        if (seen.has(spec))
+            continue;
+        seen.add(spec);
+        const [channelType, channelId] = spec.includes(':')
+            ? splitFirst(spec, ':')
+            : [spec, 'default'];
+        if (channelType.length === 0)
+            continue;
+        parsed.push({ spec, channelType, channelId: channelId.length > 0 ? channelId : 'default' });
+    }
+    return parsed;
+}
+/**
+ * Build a mobile-safe delivery body: a compact header (job, status, optional
+ * risk) plus a secrets-redacted, length-capped excerpt of the output. Never
+ * includes the original prompt — only the produced output, redacted.
+ */
+export function formatScheduledSummary(input) {
+    const maxChars = normalizeMaxChars(input.maxChars);
+    const redactor = getDataRedactionEngine();
+    const redacted = redactor.redact(input.output ?? '');
+    const redactionCount = redacted.redactions.length;
+    let body = redacted.redacted.trim();
+    let truncated = false;
+    if (body.length > maxChars) {
+        body = `${body.slice(0, maxChars).trimEnd()}\n… [truncated]`;
+        truncated = true;
+    }
+    const header = [
+        `Scheduled: ${input.jobName}`,
+        `Status: ${input.status}`,
+        ...(input.risk ? [`Risk: ${input.risk}`] : []),
+    ].join(' | ');
+    return {
+        content: body.length > 0 ? `${header}\n\n${body}` : header,
+        redactionCount,
+        truncated,
+    };
+}
+/**
+ * Resolve the body a scheduled delivery should carry, honoring the configured
+ * format. `summary` is mobile-safe (redacted + truncated); `full` is the raw
+ * output, prefixed with the job name like the legacy delivery path.
+ */
+export function resolveDeliveryBody(input) {
+    if (input.format === 'summary') {
+        const summary = formatScheduledSummary({
+            jobName: input.jobName,
+            status: input.status,
+            output: input.output,
+            risk: input.risk,
+            maxChars: input.maxChars,
+        });
+        return { content: summary.content, redactionCount: summary.redactionCount };
+    }
+    return { content: `**Cron Job: ${input.jobName}**\n\n${input.output}`, redactionCount: 0 };
+}
+function splitFirst(value, separator) {
+    const index = value.indexOf(separator);
+    if (index < 0)
+        return [value, ''];
+    return [value.slice(0, index), value.slice(index + separator.length)];
+}
+function normalizeMaxChars(value) {
+    if (typeof value !== 'number' || !Number.isFinite(value)) {
+        return DEFAULT_SUMMARY_MAX_CHARS;
+    }
+    return Math.min(8000, Math.max(80, Math.trunc(value)));
+}
+//# sourceMappingURL=scheduled-delivery.js.map

package/dist/scheduler/scheduled-delivery.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"scheduled-delivery.js","sourceRoot":"","sources":["../../src/scheduler/scheduled-delivery.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,EAAE,sBAAsB,EAAE,MAAM,+BAA+B,CAAC;AAsBvE,MAAM,yBAAyB,GAAG,GAAG,CAAC;AAEtC;;;;GAIG;AACH,MAAM,UAAU,sBAAsB,CAAC,QAA6C;IAClF,IAAI,CAAC,QAAQ;QAAE,OAAO,EAAE,CAAC;IACzB,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,IAAI,OAAO,QAAQ,CAAC,OAAO,KAAK,QAAQ,IAAI,QAAQ,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC/E,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;IACtC,CAAC;IACD,KAAK,MAAM,MAAM,IAAI,QAAQ,CAAC,OAAO,IAAI,EAAE,EAAE,CAAC;QAC5C,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC3D,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;QAC5B,CAAC;IACH,CAAC;IAED,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,MAAM,MAAM,GAA2B,EAAE,CAAC;IAC1C,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,SAAS;QAC7B,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACf,MAAM,CAAC,WAAW,EAAE,SAAS,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC;YACjD,CAAC,CAAC,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC;YACvB,CAAC,CAAC,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;QACtB,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC;YAAE,SAAS;QACvC,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,SAAS,EAAE,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC;IAC9F,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAoBD;;;;GAIG;AACH,MAAM,UAAU,sBAAsB,CAAC,KAA4B;IACjE,MAAM,QAAQ,GAAG,iBAAiB,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IACnD,MAAM,QAAQ,GAAG,sBAAsB,EAAE,CAAC;IAC1C,MAAM,QAAQ,GAAG,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC;IACrD,MAAM,cAAc,GAAG,QAAQ,CAAC,UAAU,CAAC,MAAM,CAAC;IAElD,IAAI,IAAI,GAAG,QAAQ,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;IACpC,IAAI,SAAS,GAAG,KAAK,CAAC;IACtB,IAAI,IAAI,CAAC,MAAM,GAAG,QAAQ,EAAE,CAAC;QAC3B,IAAI,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,OAAO,EAAE,iBAAiB,CAAC;QAC7D,SAAS,GAAG,IAAI,CAAC;IACnB,CAAC;IAED,MAAM,MAAM,GAAG;QACb,cAAc,KAAK,CAAC,OAAO,EAAE;QAC7B,WAAW,KAAK,CAAC,MAAM,EAAE;QACzB,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;KAC/C,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAEd,OAAO;QACL,OAAO,EAAE,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,MAAM,OAAO,IAAI,EAAE,CAAC,CAAC,CAAC,MAAM;QAC1D,cAAc;QACd,SAAS;KACV,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,mBAAmB,CAAC,KAOnC;IACC,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QAC/B,MAAM,OAAO,GAAG,sBAAsB,CAAC;YACrC,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,QAAQ,EAAE,KAAK,CAAC,QAAQ;SACzB,CAAC,CAAC;QACH,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,cAAc,EAAE,OAAO,CAAC,cAAc,EAAE,CAAC;IAC9E,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,eAAe,KAAK,CAAC,OAAO,SAAS,KAAK,CAAC,MAAM,EAAE,EAAE,cAAc,EAAE,CAAC,EAAE,CAAC;AAC7F,CAAC;AAED,SAAS,UAAU,CAAC,KAAa,EAAE,SAAiB;IAClD,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IACvC,IAAI,KAAK,GAAG,CAAC;QAAE,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IAClC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,KAAK,CAAC,KAAK,CAAC,KAAK,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;AACxE,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAyB;IAClD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QACzD,OAAO,yBAAyB,CAAC;IACnC,CAAC;IACD,OAAO,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AACzD,CAAC"}

package/dist/scheduler/script-runner.d.ts

@@ -0,0 +1,37 @@
+/**
+ * No-agent script runner for cron jobs.
+ *
+ * Hermes Agent's cron supports script-only scheduling — a job that runs a plain
+ * command on a schedule without ever invoking the LLM. Code Buddy's `script`
+ * task type runs the command directly through this runner.
+ *
+ * Security follows the deliberate pattern already used by the watchdog and
+ * pre-check runners: commands are spawned WITHOUT a shell (`shell: false`),
+ * their executable must be on an allowlist (basename match, extendable per
+ * job), and they run under a bounded timeout. This avoids the obvious
+ * arbitrary-`shell: true` regression while still covering the common case of
+ * scheduled maintenance commands (`npm run …`, `git …`, `python …`).
+ */
+export interface CronScriptCommand {
+    executable: string;
+    args?: string[];
+    cwd?: string;
+    /** Extra allowed executables (basename match), merged with defaults. */
+    allowedExecutables?: string[];
+    /** Command timeout in ms (default 600000, clamped to [100, 600000]). */
+    timeoutMs?: number;
+}
+export interface CronScriptResult {
+    /** Exit code (null when the process was killed by a signal). */
+    exitCode: number | null;
+    /** Combined stdout + stderr, capped. */
+    output: string;
+    /** True when the timeout fired and the process was killed. */
+    timedOut: boolean;
+}
+/**
+ * Run a bounded, allowlisted command without a shell. Never instantiates an
+ * agent or calls a model provider. Throws synchronously (before spawning) when
+ * the executable is not allowlisted; otherwise resolves with the outcome.
+ */
+export declare function runScriptCommand(command: CronScriptCommand): Promise<CronScriptResult>;

package/dist/scheduler/script-runner.js

@@ -0,0 +1,111 @@
+/**
+ * No-agent script runner for cron jobs.
+ *
+ * Hermes Agent's cron supports script-only scheduling — a job that runs a plain
+ * command on a schedule without ever invoking the LLM. Code Buddy's `script`
+ * task type runs the command directly through this runner.
+ *
+ * Security follows the deliberate pattern already used by the watchdog and
+ * pre-check runners: commands are spawned WITHOUT a shell (`shell: false`),
+ * their executable must be on an allowlist (basename match, extendable per
+ * job), and they run under a bounded timeout. This avoids the obvious
+ * arbitrary-`shell: true` regression while still covering the common case of
+ * scheduled maintenance commands (`npm run …`, `git …`, `python …`).
+ */
+import { spawn } from 'child_process';
+import path from 'path';
+const DEFAULT_SCRIPT_TIMEOUT_MS = 600_000;
+const MAX_OUTPUT_BYTES = 1_048_576; // 1 MiB cap on captured output
+const DEFAULT_ALLOWED_EXECUTABLES = new Set([
+    'bash',
+    'cargo',
+    'cargo.exe',
+    'git',
+    'git.exe',
+    'go',
+    'go.exe',
+    'make',
+    'node',
+    'node.exe',
+    'npm',
+    'npm.cmd',
+    'npx',
+    'npx.cmd',
+    'pnpm',
+    'pnpm.cmd',
+    'powershell',
+    'powershell.exe',
+    'pwsh',
+    'pwsh.exe',
+    'python',
+    'python.exe',
+    'python3',
+    'python3.exe',
+    'sh',
+    'tsc',
+    'tsc.cmd',
+    'yarn',
+    'yarn.cmd',
+]);
+/**
+ * Run a bounded, allowlisted command without a shell. Never instantiates an
+ * agent or calls a model provider. Throws synchronously (before spawning) when
+ * the executable is not allowlisted; otherwise resolves with the outcome.
+ */
+export async function runScriptCommand(command) {
+    if (!command || typeof command.executable !== 'string' || command.executable.length === 0) {
+        throw new Error('script command requires an executable');
+    }
+    assertExecutableAllowed(command.executable, command.allowedExecutables);
+    const timeoutMs = normalizeTimeout(command.timeoutMs);
+    return spawnScript(command, timeoutMs);
+}
+function spawnScript(command, timeoutMs) {
+    return new Promise((resolve, reject) => {
+        const child = spawn(command.executable, command.args ?? [], {
+            cwd: command.cwd,
+            shell: false,
+            windowsHide: true,
+        });
+        let output = '';
+        let timedOut = false;
+        const append = (chunk) => {
+            if (output.length < MAX_OUTPUT_BYTES) {
+                output += chunk;
+            }
+        };
+        const timer = setTimeout(() => {
+            timedOut = true;
+            child.kill('SIGTERM');
+        }, timeoutMs);
+        child.stdout.setEncoding('utf8');
+        child.stdout.on('data', append);
+        child.stderr.setEncoding('utf8');
+        child.stderr.on('data', append);
+        child.on('error', (error) => {
+            clearTimeout(timer);
+            reject(error);
+        });
+        child.on('close', (exitCode) => {
+            clearTimeout(timer);
+            resolve({ exitCode, output: output.trimEnd(), timedOut });
+        });
+    });
+}
+function assertExecutableAllowed(executable, extra) {
+    const allowed = new Set([
+        ...DEFAULT_ALLOWED_EXECUTABLES,
+        ...(extra ?? []).map((value) => value.toLowerCase()),
+    ]);
+    const name = path.basename(executable).toLowerCase();
+    if (!allowed.has(name) && !allowed.has(executable.toLowerCase())) {
+        throw new Error(`script executable not allowed: ${executable}`);
+    }
+}
+function normalizeTimeout(value) {
+    if (typeof value !== 'number' || !Number.isFinite(value)) {
+        return DEFAULT_SCRIPT_TIMEOUT_MS;
+    }
+    return Math.min(600_000, Math.max(100, Math.trunc(value)));
+}
+//# sourceMappingURL=script-runner.js.map

package/dist/scheduler/script-runner.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"script-runner.js","sourceRoot":"","sources":["../../src/scheduler/script-runner.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,EAAE,KAAK,EAAE,MAAM,eAAe,CAAC;AACtC,OAAO,IAAI,MAAM,MAAM,CAAC;AAqBxB,MAAM,yBAAyB,GAAG,OAAO,CAAC;AAC1C,MAAM,gBAAgB,GAAG,SAAS,CAAC,CAAC,+BAA+B;AAEnE,MAAM,2BAA2B,GAAG,IAAI,GAAG,CAAC;IAC1C,MAAM;IACN,OAAO;IACP,WAAW;IACX,KAAK;IACL,SAAS;IACT,IAAI;IACJ,QAAQ;IACR,MAAM;IACN,MAAM;IACN,UAAU;IACV,KAAK;IACL,SAAS;IACT,KAAK;IACL,SAAS;IACT,MAAM;IACN,UAAU;IACV,YAAY;IACZ,gBAAgB;IAChB,MAAM;IACN,UAAU;IACV,QAAQ;IACR,YAAY;IACZ,SAAS;IACT,aAAa;IACb,IAAI;IACJ,KAAK;IACL,SAAS;IACT,MAAM;IACN,UAAU;CACX,CAAC,CAAC;AAEH;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,OAA0B;IAC/D,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,CAAC,UAAU,KAAK,QAAQ,IAAI,OAAO,CAAC,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1F,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;IAC3D,CAAC;IAED,uBAAuB,CAAC,OAAO,CAAC,UAAU,EAAE,OAAO,CAAC,kBAAkB,CAAC,CAAC;IAExE,MAAM,SAAS,GAAG,gBAAgB,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IACtD,OAAO,WAAW,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;AACzC,CAAC;AAED,SAAS,WAAW,CAAC,OAA0B,EAAE,SAAiB;IAChE,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,UAAU,EAAE,OAAO,CAAC,IAAI,IAAI,EAAE,EAAE;YAC1D,GAAG,EAAE,OAAO,CAAC,GAAG;YAChB,KAAK,EAAE,KAAK;YACZ,WAAW,EAAE,IAAI;SAClB,CAAC,CAAC;QAEH,IAAI,MAAM,GAAG,EAAE,CAAC;QAChB,IAAI,QAAQ,GAAG,KAAK,CAAC;QACrB,MAAM,MAAM,GAAG,CAAC,KAAa,EAAQ,EAAE;YACrC,IAAI,MAAM,CAAC,MAAM,GAAG,gBAAgB,EAAE,CAAC;gBACrC,MAAM,IAAI,KAAK,CAAC;YAClB,CAAC;QACH,CAAC,CAAC;QAEF,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;YAC5B,QAAQ,GAAG,IAAI,CAAC;YAChB,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACxB,CAAC,EAAE,SAAS,CAAC,CAAC;QAEd,KAAK,CAAC,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;QACjC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAChC,KAAK,CAAC,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;QACjC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAEhC,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE;YAC1B,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,MAAM,CAAC,KAAK,CAAC,CAAC;QAChB,CAAC,CAAC,CAAC;QACH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,EAAE;YAC7B,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,OAAO,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,OAAO,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC;QAC5D,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,uBAAuB,CAAC,UAAkB,EAAE,KAA2B;IAC9E,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC;QACtB,GAAG,2BAA2B;QAC9B,GAAG,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC;KACrD,CAAC,CAAC;IACH,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,WAAW,EAAE,CAAC;IACrD,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,WAAW,EAAE,CAAC,EAAE,CAAC;QACjE,MAAM,IAAI,KAAK,CAAC,kCAAkC,UAAU,EAAE,CAAC,CAAC;IAClE,CAAC;AACH,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAyB;IACjD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QACzD,OAAO,yBAAyB,CAAC;IACnC,CAAC;IACD,OAAO,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AAC7D,CAAC"}

package/dist/scheduler/watchdog-handlers.d.ts

@@ -0,0 +1,70 @@
+/**
+ * No-agent watchdog handlers.
+ *
+ * Hermes Agent's cron can run lightweight monitors that never invoke the LLM:
+ * disk checks, server pings, repo status, build status. Code Buddy's scheduler
+ * previously only had `message`/`tool`/`agent` task types, each of which spins
+ * up a `CodeBuddyAgent` and burns tokens. A watchdog job runs these checks
+ * directly — no agent, no provider call — so simple monitoring stays cheap.
+ *
+ * Each check returns one of:
+ *   - `ok`    — the monitored condition is healthy.
+ *   - `alert` — the check ran but the condition is breached (disk low, server
+ *               down, repo dirty, build failed).
+ *   - `error` — the check itself could not run (missing binary, bad path).
+ *
+ * The aggregate `ok` is true only when there are no alerts and no errors.
+ */
+export type CronWatchdogCheckType = 'disk' | 'http' | 'repo' | 'build';
+export interface CronWatchdogCheck {
+    type: CronWatchdogCheckType;
+    /** Optional human label for output. */
+    name?: string;
+    /** Path whose filesystem free space is checked (default: cwd). */
+    path?: string;
+    /** Alert when free bytes fall below this. */
+    minFreeBytes?: number;
+    /** Alert when free space percentage falls below this (0–100). */
+    minFreePercent?: number;
+    /** URL to probe with a GET request. */
+    url?: string;
+    /** Alert when the status code is >= this (default 400). */
+    expectStatusBelow?: number;
+    /** Probe timeout in ms (default 10000). */
+    timeoutMs?: number;
+    /** Git repository directory (default: cwd). */
+    repoDir?: string;
+    /** When true (default), a dirty working tree is an alert. */
+    expectClean?: boolean;
+    /** Build command, spawned without a shell. Exit 0 = ok, else alert. */
+    command?: {
+        executable: string;
+        args?: string[];
+        cwd?: string;
+    };
+}
+export interface CronWatchdog {
+    checks: CronWatchdogCheck[];
+    /** Extra allowed build executables (basename match), merged with defaults. */
+    allowedExecutables?: string[];
+}
+export interface WatchdogCheckResult {
+    type: CronWatchdogCheckType;
+    name: string;
+    status: 'ok' | 'alert' | 'error';
+    summary: string;
+    details: Record<string, unknown>;
+}
+export interface WatchdogRunResult {
+    /** True when no check produced an alert or error. */
+    ok: boolean;
+    alerts: number;
+    errors: number;
+    checks: WatchdogCheckResult[];
+    summary: string;
+}
+/**
+ * Run every configured watchdog check. Never instantiates an agent or calls a
+ * model provider.
+ */
+export declare function runWatchdog(watchdog: CronWatchdog): Promise<WatchdogRunResult>;