@poping/yome 0.0.3 → 0.0.4

package/dist/daemon/log.d.ts

@@ -0,0 +1,17 @@
+export type LogEntryType = 'run_start' | 'run_end' | 'tool_use' | 'tool_result' | 'text_delta' | 'permission_denied_auto' | 'timeout' | 'error';
+export interface LogEntry {
+    ts: number;
+    type: LogEntryType;
+    [k: string]: unknown;
+}
+export declare function openTaskLog(taskId: string, runTs: number): string;
+export declare function appendLog(file: string, entry: Omit<LogEntry, 'ts'> & {
+    ts?: number;
+}): void;
+/** List run-log files for a task, newest first. */
+export declare function listRunsForTask(taskId: string): {
+    runTs: number;
+    file: string;
+    sizeBytes: number;
+}[];
+export declare function readRunLog(file: string): LogEntry[];

package/dist/daemon/log.js

@@ -0,0 +1,57 @@
+// JSONL audit log for daemon-run tasks.
+// One file per (taskId, runStartTs). Append-only, line-delimited JSON so
+// `yome cron logs <id>` can tail / parse it without touching live writers.
+import { appendFileSync, readFileSync, readdirSync, existsSync, statSync } from 'fs';
+import { join } from 'path';
+import { logFileForTask, logDirForTask } from './paths.js';
+export function openTaskLog(taskId, runTs) {
+    return logFileForTask(taskId, runTs);
+}
+export function appendLog(file, entry) {
+    const full = { ts: entry.ts ?? Date.now(), ...entry };
+    try {
+        appendFileSync(file, JSON.stringify(full) + '\n', 'utf-8');
+    }
+    catch {
+        // Best-effort: if the log dir vanished mid-run we don't want to crash
+        // the agent. The runner already keeps an in-memory error counter.
+    }
+}
+/** List run-log files for a task, newest first. */
+export function listRunsForTask(taskId) {
+    const dir = logDirForTask(taskId);
+    if (!existsSync(dir))
+        return [];
+    const files = readdirSync(dir).filter((f) => f.endsWith('.jsonl'));
+    const out = files.map((f) => {
+        const full = join(dir, f);
+        const runTs = Number.parseInt(f.replace('.jsonl', ''), 10) || 0;
+        let sizeBytes = 0;
+        try {
+            sizeBytes = statSync(full).size;
+        }
+        catch { /* race */ }
+        return { runTs, file: full, sizeBytes };
+    });
+    out.sort((a, b) => b.runTs - a.runTs);
+    return out;
+}
+export function readRunLog(file) {
+    try {
+        const raw = readFileSync(file, 'utf-8').trim();
+        if (!raw)
+            return [];
+        const out = [];
+        for (const line of raw.split('\n')) {
+            try {
+                out.push(JSON.parse(line));
+            }
+            catch { /* skip malformed */ }
+        }
+        return out;
+    }
+    catch {
+        return [];
+    }
+}
+//# sourceMappingURL=log.js.map

package/dist/daemon/log.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"log.js","sourceRoot":"","sources":["../../src/daemon/log.ts"],"names":[],"mappings":"AAAA,wCAAwC;AACxC,yEAAyE;AACzE,2EAA2E;AAE3E,OAAO,EAAE,cAAc,EAAE,YAAY,EAAE,WAAW,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,IAAI,CAAC;AACrF,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAkB3D,MAAM,UAAU,WAAW,CAAC,MAAc,EAAE,KAAa;IACvD,OAAO,cAAc,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;AACvC,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,IAAY,EAAE,KAA6C;IACnF,MAAM,IAAI,GAAa,EAAE,EAAE,EAAE,KAAK,CAAC,EAAE,IAAI,IAAI,CAAC,GAAG,EAAE,EAAE,GAAG,KAAK,EAAc,CAAC;IAC5E,IAAI,CAAC;QACH,cAAc,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,IAAI,EAAE,OAAO,CAAC,CAAC;IAC7D,CAAC;IAAC,MAAM,CAAC;QACP,sEAAsE;QACtE,kEAAkE;IACpE,CAAC;AACH,CAAC;AAED,mDAAmD;AACnD,MAAM,UAAU,eAAe,CAAC,MAAc;IAC5C,MAAM,GAAG,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC;IAClC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,EAAE,CAAC;IAChC,MAAM,KAAK,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC;IACnE,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;QAC1B,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QAC1B,MAAM,KAAK,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC;QAChE,IAAI,SAAS,GAAG,CAAC,CAAC;QAClB,IAAI,CAAC;YAAC,SAAS,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,UAAU,CAAC,CAAC;QAC7D,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;IAC1C,CAAC,CAAC,CAAC;IACH,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC;IACtC,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,IAAY;IACrC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC;QAC/C,IAAI,CAAC,GAAG;YAAE,OAAO,EAAE,CAAC;QACpB,MAAM,GAAG,GAAe,EAAE,CAAC;QAC3B,KAAK,MAAM,IAAI,IAAI,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;YACnC,IAAI,CAAC;gBAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC,CAAC,oBAAoB,CAAC,CAAC;QACpE,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC"}

package/dist/daemon/paths.d.ts

@@ -0,0 +1,11 @@
+export declare const DAEMON_ROOT: string;
+export declare const CRON_ROOT: string;
+export declare const TASKS_FILE: string;
+export declare const LOGS_ROOT: string;
+export declare const PID_FILE: string;
+export declare const STDOUT_LOG: string;
+export declare const STDERR_LOG: string;
+export declare const PLIST_LABEL = "work.yome.daemon";
+export declare function ensureDirs(): void;
+export declare function logFileForTask(taskId: string, runTs: number): string;
+export declare function logDirForTask(taskId: string): string;

package/dist/daemon/paths.js

@@ -0,0 +1,27 @@
+// Daemon-wide path constants. Centralised so the runner, scheduler, log
+// reader and launchd plist generator all agree on where things live.
+import { join } from 'path';
+import { homedir } from 'os';
+import { mkdirSync } from 'fs';
+export const DAEMON_ROOT = join(homedir(), '.yome', 'daemon');
+export const CRON_ROOT = join(homedir(), '.yome', 'cron');
+export const TASKS_FILE = join(CRON_ROOT, 'tasks.json');
+export const LOGS_ROOT = join(CRON_ROOT, 'logs');
+export const PID_FILE = join(DAEMON_ROOT, 'daemon.pid');
+export const STDOUT_LOG = join(DAEMON_ROOT, 'stdout.log');
+export const STDERR_LOG = join(DAEMON_ROOT, 'stderr.log');
+export const PLIST_LABEL = 'work.yome.daemon';
+export function ensureDirs() {
+    mkdirSync(DAEMON_ROOT, { recursive: true });
+    mkdirSync(CRON_ROOT, { recursive: true });
+    mkdirSync(LOGS_ROOT, { recursive: true });
+}
+export function logFileForTask(taskId, runTs) {
+    const dir = join(LOGS_ROOT, taskId);
+    mkdirSync(dir, { recursive: true });
+    return join(dir, `${runTs}.jsonl`);
+}
+export function logDirForTask(taskId) {
+    return join(LOGS_ROOT, taskId);
+}
+//# sourceMappingURL=paths.js.map

package/dist/daemon/paths.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"paths.js","sourceRoot":"","sources":["../../src/daemon/paths.ts"],"names":[],"mappings":"AAAA,wEAAwE;AACxE,qEAAqE;AAErE,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,EAAE,OAAO,EAAE,MAAM,IAAI,CAAC;AAC7B,OAAO,EAAE,SAAS,EAAE,MAAM,IAAI,CAAC;AAE/B,MAAM,CAAC,MAAM,WAAW,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC;AAC9D,MAAM,CAAC,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;AAC1D,MAAM,CAAC,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC;AACxD,MAAM,CAAC,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;AACjD,MAAM,CAAC,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,EAAE,YAAY,CAAC,CAAC;AACxD,MAAM,CAAC,MAAM,UAAU,GAAG,IAAI,CAAC,WAAW,EAAE,YAAY,CAAC,CAAC;AAC1D,MAAM,CAAC,MAAM,UAAU,GAAG,IAAI,CAAC,WAAW,EAAE,YAAY,CAAC,CAAC;AAC1D,MAAM,CAAC,MAAM,WAAW,GAAG,kBAAkB,CAAC;AAE9C,MAAM,UAAU,UAAU;IACxB,SAAS,CAAC,WAAW,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC5C,SAAS,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC1C,SAAS,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;AAC5C,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,MAAc,EAAE,KAAa;IAC1D,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;IACpC,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACpC,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,QAAQ,CAAC,CAAC;AACrC,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,MAAc;IAC1C,OAAO,IAAI,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;AACjC,CAAC"}

package/dist/daemon/runTaskEntry.d.ts

@@ -0,0 +1 @@
+export declare function runTaskById(taskId: string): Promise<number>;

package/dist/daemon/runTaskEntry.js

@@ -0,0 +1,67 @@
+// Entry point for `yome __run-task <id>`.
+//
+// The cron trigger spawns a child process per fire, with this command.
+// We load the task from tasks.json, build a config (same as interactive
+// `yome`), call runDaemonTask, then exit with 0/1 based on success.
+//
+// This file is intentionally tiny — all business logic lives in
+// runner.ts. Keeping the entry small means the cold-start cost per fire
+// is just "load Node + parse tasks.json + bootstrap Agent".
+import { resolveConfig, loadModelEntries, modelEntryToConfig } from '../config.js';
+import { getTask } from './taskStore.js';
+import { runDaemonTask } from './runner.js';
+import { buildEnvHint } from './envHint.js';
+export async function runTaskById(taskId) {
+    const t = getTask(taskId);
+    if (!t) {
+        console.error(`__run-task: no such task: ${taskId}`);
+        return 1;
+    }
+    // Resolve the LLM config. Same precedence as interactive `yome`:
+    //   stored config → first customModels entry → bail.
+    let config = resolveConfig({});
+    if (!config.apiKey) {
+        const entries = loadModelEntries();
+        if (entries.length > 0)
+            config = modelEntryToConfig(entries[0]);
+    }
+    if (!config.apiKey) {
+        console.error('__run-task: no API key — set one via `yome --key sk-...` first');
+        return 1;
+    }
+    // Compose the final user prompt by stacking three layers, in order:
+    //   1. envHint     — auto-detected local tools + per-OS gotchas, only in daemon mode.
+    //   2. extra       — runtime context injected by file/calendar triggers via env var.
+    //   3. t.prompt    — what the user originally wrote in `yome cron add "..."`.
+    // Each layer is independent: if the env hint detects nothing, it returns
+    // '' and is filtered out so we don't waste tokens on an empty header.
+    const envHint = buildEnvHint();
+    const extra = process.env.YOME_TASK_EXTRA_CONTEXT;
+    const promptWithContext = [envHint, extra?.trim(), t.prompt]
+        .filter((s) => !!s && s.length > 0)
+        .join('\n\n');
+    const result = await runDaemonTask(config, {
+        taskId: t.id,
+        prompt: promptWithContext,
+        cwd: t.cwd,
+        autoAllow: t.autoAllow,
+        autoDeny: t.autoDeny,
+    });
+    // Brief stdout summary — the audit jsonl in ~/.yome/cron/logs/<id>/
+    // has the full transcript. The parent process (scheduler) captures
+    // stdout and stuffs the tail into the run_end log entry, so this
+    // doubles as a coarse status line.
+    console.log(JSON.stringify({
+        taskId: t.id,
+        ok: result.ok,
+        toolCalls: result.toolCalls,
+        durationMs: result.durationMs,
+        inputTokens: result.inputTokens,
+        outputTokens: result.outputTokens,
+        error: result.error,
+        finalTextHead: result.finalText.slice(0, 200),
+        logFile: result.logFile,
+    }));
+    return result.ok ? 0 : 1;
+}
+//# sourceMappingURL=runTaskEntry.js.map

package/dist/daemon/runTaskEntry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"runTaskEntry.js","sourceRoot":"","sources":["../../src/daemon/runTaskEntry.ts"],"names":[],"mappings":"AAAA,0CAA0C;AAC1C,EAAE;AACF,uEAAuE;AACvE,wEAAwE;AACxE,oEAAoE;AACpE,EAAE;AACF,gEAAgE;AAChE,wEAAwE;AACxE,4DAA4D;AAE5D,OAAO,EAAE,aAAa,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAC;AACnF,OAAO,EAAE,OAAO,EAAE,MAAM,gBAAgB,CAAC;AACzC,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAE5C,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,MAAc;IAC9C,MAAM,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAC1B,IAAI,CAAC,CAAC,EAAE,CAAC;QACP,OAAO,CAAC,KAAK,CAAC,6BAA6B,MAAM,EAAE,CAAC,CAAC;QACrD,OAAO,CAAC,CAAC;IACX,CAAC;IAED,iEAAiE;IACjE,qDAAqD;IACrD,IAAI,MAAM,GAAG,aAAa,CAAC,EAAE,CAAC,CAAC;IAC/B,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;QACnB,MAAM,OAAO,GAAG,gBAAgB,EAAE,CAAC;QACnC,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC;YAAE,MAAM,GAAG,kBAAkB,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;IAClE,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;QACnB,OAAO,CAAC,KAAK,CAAC,gEAAgE,CAAC,CAAC;QAChF,OAAO,CAAC,CAAC;IACX,CAAC;IAED,oEAAoE;IACpE,sFAAsF;IACtF,qFAAqF;IACrF,8EAA8E;IAC9E,yEAAyE;IACzE,sEAAsE;IACtE,MAAM,OAAO,GAAG,YAAY,EAAE,CAAC;IAC/B,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,uBAAuB,CAAC;IAClD,MAAM,iBAAiB,GAAG,CAAC,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC;SACzD,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC;SAC/C,IAAI,CAAC,MAAM,CAAC,CAAC;IAEhB,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,MAAM,EAAE;QACzC,MAAM,EAAE,CAAC,CAAC,EAAE;QACZ,MAAM,EAAE,iBAAiB;QACzB,GAAG,EAAE,CAAC,CAAC,GAAG;QACV,SAAS,EAAE,CAAC,CAAC,SAAS;QACtB,QAAQ,EAAE,CAAC,CAAC,QAAQ;KACrB,CAAC,CAAC;IAEH,oEAAoE;IACpE,mEAAmE;IACnE,iEAAiE;IACjE,mCAAmC;IACnC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC;QACzB,MAAM,EAAE,CAAC,CAAC,EAAE;QACZ,EAAE,EAAE,MAAM,CAAC,EAAE;QACb,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,UAAU,EAAE,MAAM,CAAC,UAAU;QAC7B,WAAW,EAAE,MAAM,CAAC,WAAW;QAC/B,YAAY,EAAE,MAAM,CAAC,YAAY;QACjC,KAAK,EAAE,MAAM,CAAC,KAAK;QACnB,aAAa,EAAE,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC;QAC7C,OAAO,EAAE,MAAM,CAAC,OAAO;KACxB,CAAC,CAAC,CAAC;IAEJ,OAAO,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAC3B,CAAC"}

package/dist/daemon/runner.d.ts

@@ -0,0 +1,21 @@
+import type { YomeConfig } from '../config.js';
+export interface DaemonTaskSpec {
+    taskId: string;
+    prompt: string;
+    cwd?: string;
+    /** Permission allowlist, e.g. ['Read', 'Write', 'Yome(@yome/fs:*)']. */
+    autoAllow?: string[];
+    /** Permission denylist (overrides allowlist), e.g. ['Bash(rm:*)']. */
+    autoDeny?: string[];
+}
+export interface DaemonTaskResult {
+    ok: boolean;
+    finalText: string;
+    toolCalls: number;
+    inputTokens: number;
+    outputTokens: number;
+    durationMs: number;
+    logFile: string;
+    error?: string;
+}
+export declare function runDaemonTask(config: YomeConfig, spec: DaemonTaskSpec): Promise<DaemonTaskResult>;

package/dist/daemon/runner.js

@@ -0,0 +1,175 @@
+// Daemon-side Agent runner — "non-interactive" mode.
+//
+// Reuses cli/src/agent.ts wholesale. The trick is in WHICH callbacks we
+// register:
+//   - onAskPermission → auto-deny (with feedback to the LLM) instead of
+//     prompting a human
+//   - setAskUserHandler is NOT called → AskUser tool short-circuits per
+//     its own headless contract (see tools/askUser.ts)
+//   - autoAllow / autoDeny rules layered into the permission context
+//   - all tool_use / tool_result / text_delta written to a per-run jsonl
+//     audit log
+//
+// The agent's own MAX_ITERATIONS=30 (loops/simple.ts) is the iteration
+// safety net. Wall-time budget is enforced by the parent process spawning
+// the runner with a kill timer (see triggers/cron.ts).
+import { Agent } from '../agent.js';
+import { appendLog, openTaskLog } from './log.js';
+/**
+ * Default safety denylist applied to every daemon task on top of the
+ * user's autoDeny.
+ *
+ * We deliberately keep this list TINY. Daemon tasks already require an
+ * explicit `--allow Bash(*)` to use Bash at all, so a second layer of
+ * "no rm, no chmod" was over-cautious and broke common scripted
+ * workflows (Agent writes a shell script then can't `chmod +x` it,
+ * Agent does `rm /tmp/somefile` and gets blocked, etc.).
+ *
+ * We only block the patterns that are catastrophic and cannot be
+ * undone: `sudo` (privilege escalation), and `rm -rf` against root or
+ * the user's home. Garden-variety `rm somefile` is allowed; if you don't
+ * want the agent deleting files at all, use `--deny "Bash(rm:*)"` per
+ * task.
+ */
+const DEFAULT_DAEMON_DENY = [
+    'Bash(sudo:*)',
+    'Bash(rm -rf /:*)',
+    'Bash(rm -rf /*:*)',
+    'Bash(rm -rf ~:*)',
+    'Bash(rm -rf ~/:*)',
+    'Bash(rm -rf $HOME:*)',
+    'Bash(rm -rf $HOME/:*)',
+];
+export async function runDaemonTask(config, spec) {
+    const runTs = Date.now();
+    const logFile = openTaskLog(spec.taskId, runTs);
+    appendLog(logFile, {
+        type: 'run_start',
+        taskId: spec.taskId,
+        prompt: spec.prompt,
+        autoAllow: spec.autoAllow ?? [],
+        autoDeny: spec.autoDeny ?? [],
+        cwd: spec.cwd ?? process.cwd(),
+        model: config.model,
+    });
+    // Optional cwd switch — many tasks expect to read/write under a specific
+    // directory, but we don't want to pollute the daemon's own cwd.
+    const originalCwd = process.cwd();
+    if (spec.cwd) {
+        try {
+            process.chdir(spec.cwd);
+        }
+        catch (e) {
+            appendLog(logFile, { type: 'error', stage: 'chdir', message: String(e) });
+        }
+    }
+    const agent = new Agent(config);
+    for (const rule of spec.autoAllow ?? []) {
+        agent.addPermissionRule(rule, 'allow', 'session');
+    }
+    for (const rule of [...DEFAULT_DAEMON_DENY, ...(spec.autoDeny ?? [])]) {
+        agent.addPermissionRule(rule, 'deny', 'session');
+    }
+    const onAskPermission = async (toolName, message, input) => {
+        appendLog(logFile, {
+            type: 'permission_denied_auto',
+            toolName,
+            message,
+            input: redactForLog(input),
+        });
+        return {
+            decision: 'deny',
+            feedback: `Daemon mode: '${toolName}' is not in this task's autoAllow list. ` +
+                `Either complete the task with a different tool or stop and explain why.`,
+        };
+    };
+    let finalText = '';
+    let toolCalls = 0;
+    let inputTokens = 0;
+    let outputTokens = 0;
+    let error;
+    try {
+        await agent.run(spec.prompt, {
+            onTextDelta: (text) => {
+                finalText += text;
+                // We don't log every delta (too chatty); the run_end entry has the
+                // full assembled text.
+            },
+            onToolUse: (name, input) => {
+                toolCalls++;
+                appendLog(logFile, { type: 'tool_use', name, input: redactForLog(input) });
+            },
+            onToolResult: (name, result) => {
+                appendLog(logFile, {
+                    type: 'tool_result',
+                    name,
+                    result: result.length > 4_000 ? result.slice(0, 4_000) + '…[truncated]' : result,
+                });
+            },
+            onDone: (usage) => {
+                inputTokens = usage.inputTokens;
+                outputTokens = usage.outputTokens;
+            },
+            onError: (err) => {
+                error = err?.message ?? String(err);
+                appendLog(logFile, { type: 'error', stage: 'agent_loop', message: error });
+            },
+            onAskPermission,
+        });
+    }
+    catch (e) {
+        error = e?.message ?? String(e);
+        appendLog(logFile, { type: 'error', stage: 'unhandled', message: error });
+    }
+    finally {
+        if (spec.cwd) {
+            try {
+                process.chdir(originalCwd);
+            }
+            catch { /* noop */ }
+        }
+    }
+    const durationMs = Date.now() - runTs;
+    const ok = !error;
+    appendLog(logFile, {
+        type: 'run_end',
+        ok,
+        durationMs,
+        toolCalls,
+        inputTokens,
+        outputTokens,
+        finalText: finalText.length > 4_000 ? finalText.slice(0, 4_000) + '…[truncated]' : finalText,
+        error,
+    });
+    return {
+        ok,
+        finalText: finalText.trim(),
+        toolCalls,
+        inputTokens,
+        outputTokens,
+        durationMs,
+        logFile,
+        error,
+    };
+}
+/**
+ * Strip obvious secrets from tool input before writing to disk. The audit
+ * log lives in plaintext so we should not leak API keys / tokens that the
+ * agent might pass through. Best-effort — not a security boundary.
+ */
+function redactForLog(input) {
+    const out = {};
+    for (const [k, v] of Object.entries(input)) {
+        if (/key|token|secret|password|authorization/i.test(k)) {
+            out[k] = '[redacted]';
+        }
+        else if (typeof v === 'string' && v.length > 2_000) {
+            out[k] = v.slice(0, 2_000) + '…[truncated]';
+        }
+        else {
+            out[k] = v;
+        }
+    }
+    return out;
+}
+//# sourceMappingURL=runner.js.map

package/dist/daemon/runner.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"runner.js","sourceRoot":"","sources":["../../src/daemon/runner.ts"],"names":[],"mappings":"AAAA,qDAAqD;AACrD,EAAE;AACF,wEAAwE;AACxE,YAAY;AACZ,wEAAwE;AACxE,wBAAwB;AACxB,wEAAwE;AACxE,uDAAuD;AACvD,qEAAqE;AACrE,yEAAyE;AACzE,gBAAgB;AAChB,EAAE;AACF,uEAAuE;AACvE,0EAA0E;AAC1E,uDAAuD;AAEvD,OAAO,EAAE,KAAK,EAAE,MAAM,aAAa,CAAC;AAGpC,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,UAAU,CAAC;AAuBlD;;;;;;;;;;;;;;;GAeG;AACH,MAAM,mBAAmB,GAAG;IAC1B,cAAc;IACd,kBAAkB;IAClB,mBAAmB;IACnB,kBAAkB;IAClB,mBAAmB;IACnB,sBAAsB;IACtB,uBAAuB;CACxB,CAAC;AAEF,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,MAAkB,EAClB,IAAoB;IAEpB,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACzB,MAAM,OAAO,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IAEhD,SAAS,CAAC,OAAO,EAAE;QACjB,IAAI,EAAE,WAAW;QACjB,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,SAAS,EAAE,IAAI,CAAC,SAAS,IAAI,EAAE;QAC/B,QAAQ,EAAE,IAAI,CAAC,QAAQ,IAAI,EAAE;QAC7B,GAAG,EAAE,IAAI,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE;QAC9B,KAAK,EAAE,MAAM,CAAC,KAAK;KACpB,CAAC,CAAC;IAEH,yEAAyE;IACzE,gEAAgE;IAChE,MAAM,WAAW,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;IAClC,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;QACb,IAAI,CAAC;YAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAAC,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YAC1C,SAAS,CAAC,OAAO,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAC5E,CAAC;IACH,CAAC;IAED,MAAM,KAAK,GAAG,IAAI,KAAK,CAAC,MAAM,CAAC,CAAC;IAEhC,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,SAAS,IAAI,EAAE,EAAE,CAAC;QACxC,KAAK,CAAC,iBAAiB,CAAC,IAAI,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC;IACpD,CAAC;IACD,KAAK,MAAM,IAAI,IAAI,CAAC,GAAG,mBAAmB,EAAE,GAAG,CAAC,IAAI,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;QACtE,KAAK,CAAC,iBAAiB,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC;IACnD,CAAC;IAED,MAAM,eAAe,GAAG,KAAK,EAC3B,QAAgB,EAChB,OAAe,EACf,KAA8B,EACA,EAAE;QAChC,SAAS,CAAC,OAAO,EAAE;YACjB,IAAI,EAAE,wBAAwB;YAC9B,QAAQ;YACR,OAAO;YACP,KAAK,EAAE,YAAY,CAAC,KAAK,CAAC;SAC3B,CAAC,CAAC;QACH,OAAO;YACL,QAAQ,EAAE,MAAM;YAChB,QAAQ,EACN,iBAAiB,QAAQ,0CAA0C;gBACnE,yEAAyE;SAC5E,CAAC;IACJ,CAAC,CAAC;IAEF,IAAI,SAAS,GAAG,EAAE,CAAC;IACnB,IAAI,SAAS,GAAG,CAAC,CAAC;IAClB,IAAI,WAAW,GAAG,CAAC,CAAC;IACpB,IAAI,YAAY,GAAG,CAAC,CAAC;IACrB,IAAI,KAAyB,CAAC;IAE9B,IAAI,CAAC;QACH,MAAM,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE;YAC3B,WAAW,EAAE,CAAC,IAAI,EAAE,EAAE;gBACpB,SAAS,IAAI,IAAI,CAAC;gBAClB,mEAAmE;gBACnE,uBAAuB;YACzB,CAAC;YACD,SAAS,EAAE,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE;gBACzB,SAAS,EAAE,CAAC;gBACZ,SAAS,CAAC,OAAO,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,KAAK,EAAE,YAAY,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YAC7E,CAAC;YACD,YAAY,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE;gBAC7B,SAAS,CAAC,OAAO,EAAE;oBACjB,IAAI,EAAE,aAAa;oBACnB,IAAI;oBACJ,MAAM,EAAE,MAAM,CAAC,MAAM,GAAG,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,GAAG,cAAc,CAAC,CAAC,CAAC,MAAM;iBACjF,CAAC,CAAC;YACL,CAAC;YACD,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE;gBAChB,WAAW,GAAG,KAAK,CAAC,WAAW,CAAC;gBAChC,YAAY,GAAG,KAAK,CAAC,YAAY,CAAC;YACpC,CAAC;YACD,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;gBACf,KAAK,GAAG,GAAG,EAAE,OAAO,IAAI,MAAM,CAAC,GAAG,CAAC,CAAC;gBACpC,SAAS,CAAC,OAAO,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,YAAY,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;YAC7E,CAAC;YACD,eAAe;SAChB,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,CAAM,EAAE,CAAC;QAChB,KAAK,GAAG,CAAC,EAAE,OAAO,IAAI,MAAM,CAAC,CAAC,CAAC,CAAC;QAChC,SAAS,CAAC,OAAO,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,WAAW,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;IAC5E,CAAC;YAAS,CAAC;QACT,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;YACb,IAAI,CAAC;gBAAC,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC,CAAC,UAAU,CAAC,CAAC;QAC1D,CAAC;IACH,CAAC;IAED,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC;IACtC,MAAM,EAAE,GAAG,CAAC,KAAK,CAAC;IAClB,SAAS,CAAC,OAAO,EAAE;QACjB,IAAI,EAAE,SAAS;QACf,EAAE;QACF,UAAU;QACV,SAAS;QACT,WAAW;QACX,YAAY;QACZ,SAAS,EAAE,SAAS,CAAC,MAAM,GAAG,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,GAAG,cAAc,CAAC,CAAC,CAAC,SAAS;QAC5F,KAAK;KACN,CAAC,CAAC;IAEH,OAAO;QACL,EAAE;QACF,SAAS,EAAE,SAAS,CAAC,IAAI,EAAE;QAC3B,SAAS;QACT,WAAW;QACX,YAAY;QACZ,UAAU;QACV,OAAO;QACP,KAAK;KACN,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,SAAS,YAAY,CAAC,KAA8B;IAClD,MAAM,GAAG,GAA4B,EAAE,CAAC;IACxC,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAC3C,IAAI,0CAA0C,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;YACvD,GAAG,CAAC,CAAC,CAAC,GAAG,YAAY,CAAC;QACxB,CAAC;aAAM,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,GAAG,KAAK,EAAE,CAAC;YACrD,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,GAAG,cAAc,CAAC;QAC9C,CAAC;aAAM,CAAC;YACN,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;QACb,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/daemon/scheduler.d.ts

@@ -0,0 +1,5 @@
+import type { TaskRecord } from './taskStore.js';
+export declare function startDaemon(): void;
+/** Used by `yome daemon status` (called from a separate process — peeks pid file). */
+export declare function readPidIfRunning(): number | null;
+export { TaskRecord };

package/dist/daemon/scheduler.js

@@ -0,0 +1,162 @@
+// Daemon main loop.
+//
+// Responsibilities:
+//   1. Read tasks.json on startup, register a node-cron job per
+//      enabled cron task.
+//   2. Watch tasks.json for changes (re-register on edit so that
+//      `yome cron add/rm/...` takes effect without restarting daemon).
+//   3. Handle SIGTERM/SIGINT cleanly (unregister jobs, remove pid file).
+//
+// File-trigger and calendar-trigger registration is left as TODO hooks
+// (PR2 / PR4). The shape mirrors registerCronTask so adding a new
+// trigger kind is "implement registerXxxTask + branch on kind here".
+import { watch } from 'fs';
+import { writeFileSync, unlinkSync, existsSync, readFileSync } from 'fs';
+import { listTasks } from './taskStore.js';
+import { registerCronTask, unregisterCronTask, listActive as listActiveCron, resolveYomeBinPath } from './triggers/cron.js';
+import { registerOnceTask, unregisterOnceTask, listActiveOnce } from './triggers/once.js';
+import { registerFileTask, unregisterFileTask, listActiveFile } from './triggers/file.js';
+import { registerCalendarTask, unregisterCalendarTask, listActiveCalendar } from './triggers/calendar.js';
+import { ensureDirs, PID_FILE, TASKS_FILE } from './paths.js';
+let started = false;
+let watcher = null;
+let reloadDebounce = null;
+export function startDaemon() {
+    if (started)
+        return;
+    started = true;
+    ensureDirs();
+    writePidFile();
+    installSignalHandlers();
+    reloadAllTasks();
+    watchTasksFile();
+    // eslint-disable-next-line no-console
+    console.log(`[daemon] started (pid=${process.pid}); ` +
+        `cron=${listActiveCron().length} once=${listActiveOnce().length} ` +
+        `file=${listActiveFile().length} calendar=${listActiveCalendar().length}`);
+}
+function reloadAllTasks() {
+    const yomeBinPath = resolveYomeBinPath();
+    const tasks = listTasks();
+    const seen = new Set();
+    for (const t of tasks) {
+        seen.add(t.id);
+        if (!t.enabled) {
+            unregisterAllForId(t.id);
+            continue;
+        }
+        switch (t.trigger.kind) {
+            case 'cron':
+                registerCronTask(t, { yomeBinPath });
+                break;
+            case 'once':
+                registerOnceTask(t, { yomeBinPath });
+                break;
+            case 'file':
+                registerFileTask(t, { yomeBinPath });
+                break;
+            case 'calendar':
+                registerCalendarTask(t, { yomeBinPath });
+                break;
+        }
+    }
+    // Drop any active registrations that no longer exist in tasks.json.
+    for (const activeId of [
+        ...listActiveCron(),
+        ...listActiveOnce().map((o) => o.taskId),
+        ...listActiveFile(),
+        ...listActiveCalendar(),
+    ]) {
+        if (!seen.has(activeId))
+            unregisterAllForId(activeId);
+    }
+}
+/** Idempotently unregister an id from every trigger subsystem. */
+function unregisterAllForId(id) {
+    unregisterCronTask(id);
+    unregisterOnceTask(id);
+    unregisterFileTask(id);
+    unregisterCalendarTask(id);
+}
+function watchTasksFile() {
+    // tasks.json is written via tmp+rename (atomic). fs.watch on the file
+    // itself loses its handle after the first rename — the kernel inode
+    // changes out from under it. Watching the PARENT directory and
+    // filtering for tasks.json events survives renames forever and works
+    // on macOS, Linux, and Windows.
+    const dir = TASKS_FILE.replace(/\/[^/]+$/, '');
+    const fileBase = TASKS_FILE.split('/').pop();
+    try {
+        watcher = watch(dir, (_eventType, filename) => {
+            if (filename !== fileBase && filename !== `${fileBase}.tmp`)
+                return;
+            if (reloadDebounce)
+                clearTimeout(reloadDebounce);
+            reloadDebounce = setTimeout(() => {
+                if (!existsSync(TASKS_FILE))
+                    return; // mid-rename window
+                // eslint-disable-next-line no-console
+                console.log('[daemon] tasks.json changed, reloading…');
+                try {
+                    reloadAllTasks();
+                }
+                catch (e) {
+                    console.error('[daemon] reload failed:', e);
+                }
+            }, 250);
+        });
+    }
+    catch (e) {
+        console.error('[daemon] failed to watch tasks dir:', e);
+    }
+}
+function writePidFile() {
+    try {
+        writeFileSync(PID_FILE, String(process.pid), 'utf-8');
+    }
+    catch { /* noop */ }
+}
+function removePidFile() {
+    try {
+        unlinkSync(PID_FILE);
+    }
+    catch { /* noop */ }
+}
+function installSignalHandlers() {
+    const shutdown = (sig) => {
+        // eslint-disable-next-line no-console
+        console.log(`[daemon] received ${sig}, shutting down…`);
+        if (watcher)
+            try {
+                watcher.close();
+            }
+            catch { /* noop */ }
+        removePidFile();
+        process.exit(0);
+    };
+    process.on('SIGTERM', () => shutdown('SIGTERM'));
+    process.on('SIGINT', () => shutdown('SIGINT'));
+}
+/** Used by `yome daemon status` (called from a separate process — peeks pid file). */
+export function readPidIfRunning() {
+    try {
+        if (!existsSync(PID_FILE))
+            return null;
+        const raw = readFileSync(PID_FILE, 'utf-8').trim();
+        const pid = Number.parseInt(raw, 10);
+        if (!pid || Number.isNaN(pid))
+            return null;
+        // process.kill(pid, 0) throws if the process doesn't exist.
+        try {
+            process.kill(pid, 0);
+            return pid;
+        }
+        catch {
+            return null;
+        }
+    }
+    catch {
+        return null;
+    }
+}
+//# sourceMappingURL=scheduler.js.map

package/dist/daemon/scheduler.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"scheduler.js","sourceRoot":"","sources":["../../src/daemon/scheduler.ts"],"names":[],"mappings":"AAAA,oBAAoB;AACpB,EAAE;AACF,oBAAoB;AACpB,gEAAgE;AAChE,0BAA0B;AAC1B,iEAAiE;AACjE,uEAAuE;AACvE,yEAAyE;AACzE,EAAE;AACF,uEAAuE;AACvE,kEAAkE;AAClE,qEAAqE;AAErE,OAAO,EAAE,KAAK,EAAE,MAAM,IAAI,CAAC;AAC3B,OAAO,EAAE,aAAa,EAAE,UAAU,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,IAAI,CAAC;AACzE,OAAO,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAC3C,OAAO,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,UAAU,IAAI,cAAc,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AAC5H,OAAO,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AAC1F,OAAO,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AAC1F,OAAO,EAAE,oBAAoB,EAAE,sBAAsB,EAAE,kBAAkB,EAAE,MAAM,wBAAwB,CAAC;AAC1G,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAG9D,IAAI,OAAO,GAAG,KAAK,CAAC;AACpB,IAAI,OAAO,GAAoC,IAAI,CAAC;AACpD,IAAI,cAAc,GAA0B,IAAI,CAAC;AAEjD,MAAM,UAAU,WAAW;IACzB,IAAI,OAAO;QAAE,OAAO;IACpB,OAAO,GAAG,IAAI,CAAC;IACf,UAAU,EAAE,CAAC;IACb,YAAY,EAAE,CAAC;IACf,qBAAqB,EAAE,CAAC;IACxB,cAAc,EAAE,CAAC;IACjB,cAAc,EAAE,CAAC;IACjB,sCAAsC;IACtC,OAAO,CAAC,GAAG,CACT,yBAAyB,OAAO,CAAC,GAAG,KAAK;QACzC,QAAQ,cAAc,EAAE,CAAC,MAAM,SAAS,cAAc,EAAE,CAAC,MAAM,GAAG;QAClE,QAAQ,cAAc,EAAE,CAAC,MAAM,aAAa,kBAAkB,EAAE,CAAC,MAAM,EAAE,CAC1E,CAAC;AACJ,CAAC;AAED,SAAS,cAAc;IACrB,MAAM,WAAW,GAAG,kBAAkB,EAAE,CAAC;IACzC,MAAM,KAAK,GAAG,SAAS,EAAE,CAAC;IAC1B,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAE/B,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACtB,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QACf,IAAI,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;YACf,kBAAkB,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YACzB,SAAS;QACX,CAAC;QACD,QAAQ,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;YACvB,KAAK,MAAM;gBAAM,gBAAgB,CAAC,CAAC,EAAE,EAAE,WAAW,EAAE,CAAC,CAAC;gBAAC,MAAM;YAC7D,KAAK,MAAM;gBAAM,gBAAgB,CAAC,CAAC,EAAE,EAAE,WAAW,EAAE,CAAC,CAAC;gBAAC,MAAM;YAC7D,KAAK,MAAM;gBAAM,gBAAgB,CAAC,CAAC,EAAE,EAAE,WAAW,EAAE,CAAC,CAAC;gBAAC,MAAM;YAC7D,KAAK,UAAU;gBAAE,oBAAoB,CAAC,CAAC,EAAE,EAAE,WAAW,EAAE,CAAC,CAAC;gBAAC,MAAM;QACnE,CAAC;IACH,CAAC;IAED,oEAAoE;IACpE,KAAK,MAAM,QAAQ,IAAI;QACrB,GAAG,cAAc,EAAE;QACnB,GAAG,cAAc,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC;QACxC,GAAG,cAAc,EAAE;QACnB,GAAG,kBAAkB,EAAE;KACxB,EAAE,CAAC;QACF,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC;YAAE,kBAAkB,CAAC,QAAQ,CAAC,CAAC;IACxD,CAAC;AACH,CAAC;AAED,kEAAkE;AAClE,SAAS,kBAAkB,CAAC,EAAU;IACpC,kBAAkB,CAAC,EAAE,CAAC,CAAC;IACvB,kBAAkB,CAAC,EAAE,CAAC,CAAC;IACvB,kBAAkB,CAAC,EAAE,CAAC,CAAC;IACvB,sBAAsB,CAAC,EAAE,CAAC,CAAC;AAC7B,CAAC;AAED,SAAS,cAAc;IACrB,sEAAsE;IACtE,oEAAoE;IACpE,+DAA+D;IAC/D,qEAAqE;IACrE,gCAAgC;IAChC,MAAM,GAAG,GAAG,UAAU,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;IAC/C,MAAM,QAAQ,GAAG,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAG,CAAC;IAC9C,IAAI,CAAC;QACH,OAAO,GAAG,KAAK,CAAC,GAAG,EAAE,CAAC,UAAU,EAAE,QAAQ,EAAE,EAAE;YAC5C,IAAI,QAAQ,KAAK,QAAQ,IAAI,QAAQ,KAAK,GAAG,QAAQ,MAAM;gBAAE,OAAO;YACpE,IAAI,cAAc;gBAAE,YAAY,CAAC,cAAc,CAAC,CAAC;YACjD,cAAc,GAAG,UAAU,CAAC,GAAG,EAAE;gBAC/B,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC;oBAAE,OAAO,CAAC,oBAAoB;gBACzD,sCAAsC;gBACtC,OAAO,CAAC,GAAG,CAAC,yCAAyC,CAAC,CAAC;gBACvD,IAAI,CAAC;oBAAC,cAAc,EAAE,CAAC;gBAAC,CAAC;gBAAC,OAAO,CAAC,EAAE,CAAC;oBAAC,OAAO,CAAC,KAAK,CAAC,yBAAyB,EAAE,CAAC,CAAC,CAAC;gBAAC,CAAC;YACtF,CAAC,EAAE,GAAG,CAAC,CAAC;QACV,CAAC,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,OAAO,CAAC,KAAK,CAAC,qCAAqC,EAAE,CAAC,CAAC,CAAC;IAC1D,CAAC;AACH,CAAC;AAED,SAAS,YAAY;IACnB,IAAI,CAAC;QAAC,aAAa,CAAC,QAAQ,EAAE,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,OAAO,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC,CAAC,UAAU,CAAC,CAAC;AACrF,CAAC;AAED,SAAS,aAAa;IACpB,IAAI,CAAC;QAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC,CAAC,UAAU,CAAC,CAAC;AACpD,CAAC;AAED,SAAS,qBAAqB;IAC5B,MAAM,QAAQ,GAAG,CAAC,GAAW,EAAE,EAAE;QAC/B,sCAAsC;QACtC,OAAO,CAAC,GAAG,CAAC,qBAAqB,GAAG,kBAAkB,CAAC,CAAC;QACxD,IAAI,OAAO;YAAE,IAAI,CAAC;gBAAC,OAAO,CAAC,KAAK,EAAE,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC,CAAC,UAAU,CAAC,CAAC;QAC1D,aAAa,EAAE,CAAC;QAChB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC,CAAC;IACF,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC;IACjD,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC;AACjD,CAAC;AAED,sFAAsF;AACtF,MAAM,UAAU,gBAAgB;IAC9B,IAAI,CAAC;QACH,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC;YAAE,OAAO,IAAI,CAAC;QACvC,MAAM,GAAG,GAAG,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC;QACnD,MAAM,GAAG,GAAG,MAAM,CAAC,QAAQ,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;QACrC,IAAI,CAAC,GAAG,IAAI,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC;YAAE,OAAO,IAAI,CAAC;QAC3C,4DAA4D;QAC5D,IAAI,CAAC;YAAC,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;YAAC,OAAO,GAAG,CAAC;QAAC,CAAC;QACzC,MAAM,CAAC;YAAC,OAAO,IAAI,CAAC;QAAC,CAAC;IACxB,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,IAAI,CAAC;IAAC,CAAC;AAC1B,CAAC"}

package/dist/daemon/taskStore.d.ts

@@ -0,0 +1,62 @@
+export type CalendarEventKind = 'event-start' | 'event-end' | 'event-added';
+export type TriggerSpec = {
+    kind: 'cron';
+    schedule: string;
+    tz?: string;
+} | {
+    kind: 'once';
+    atMs: number;
+} | {
+    kind: 'file';
+    path: string;
+    events?: ('change' | 'add' | 'unlink')[];
+} | {
+    kind: 'calendar';
+    events: CalendarEventKind[];
+    /** For event-start: fire this many ms BEFORE the event begins. Default 0. */
+    leadMs?: number;
+    /** Optional case-insensitive regex on event title. */
+    titleRegex?: string;
+    /** Optional case-insensitive substring of calendar display name. */
+    calendar?: string;
+};
+export interface RunSummary {
+    ts: number;
+    ok: boolean;
+    durationMs: number;
+    toolCalls: number;
+    inputTokens: number;
+    outputTokens: number;
+    error?: string;
+}
+export interface TaskRecord {
+    id: string;
+    createdAt: number;
+    trigger: TriggerSpec;
+    prompt: string;
+    cwd?: string;
+    /** Permission allow rules layered onto the agent for this task. */
+    autoAllow?: string[];
+    /** Permission deny rules — override allow. */
+    autoDeny?: string[];
+    /** Hard wall-time budget. Default 5 min in runner.ts. */
+    maxDurationMs?: number;
+    /** Extra environment variables passed to the spawned __run-task child.
+     *  Useful for skill-level switches (e.g. YOME_WEB_HEADLESS=0 to open a
+     *  visible browser window) without polluting the daemon's own env. */
+    env?: Record<string, string>;
+    enabled: boolean;
+    lastRun?: RunSummary;
+    /** Last N run summaries (newest first). Bounded to avoid unbounded growth. */
+    history?: RunSummary[];
+    /** Free-form description shown in `yome cron list`. */
+    note?: string;
+}
+export declare function listTasks(): TaskRecord[];
+export declare function getTask(id: string): TaskRecord | undefined;
+export declare function addTask(input: Omit<TaskRecord, 'id' | 'createdAt' | 'enabled'> & {
+    enabled?: boolean;
+}): TaskRecord;
+export declare function removeTask(id: string): boolean;
+export declare function setEnabled(id: string, enabled: boolean): boolean;
+export declare function recordRun(id: string, summary: RunSummary): void;