@provos/ironcurtain 0.6.0 → 0.7.1

package/dist/session/preflight.js.map

@@ -1 +1 @@
-{"version":3,"file":"preflight.js","sourceRoot":"","sources":["../../src/session/preflight.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,QAAQ,IAAI,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAC5D,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAItC,OAAO,EAAE,gBAAgB,EAAE,oBAAoB,EAA0B,MAAM,gCAAgC,CAAC;AAEhH,MAAM,QAAQ,GAAG,SAAS,CAAC,UAAU,CAAC,CAAC;AAEvC,MAAM,iBAAiB,GAAG,KAAK,CAAC;AAChC,MAAM,oBAAoB,GAAG,aAAwB,CAAC;AAEtD;;;GAGG;AACH,MAAM,OAAO,cAAe,SAAQ,KAAK;IACvC,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,gBAAgB,CAAC;IAC/B,CAAC;CACF;AAkBD;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB;IACxC,IAAI,CAAC;QACH,MAAM,QAAQ,CAAC,QAAQ,EAAE,CAAC,MAAM,CAAC,EAAE,EAAE,OAAO,EAAE,iBAAiB,EAAE,CAAC,CAAC;QACnE,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,gBAAgB,GAAsB;IAC1C,YAAY,EAAE,oBAAoB;IAClC,gBAAgB,EAAE,GAAG,EAAE,CAAC,IAAI;CAC7B,CAAC;AAEF;;;;;;GAMG;AACH,SAAS,iBAAiB,CACxB,QAAiB,EACjB,MAAyB,EACzB,OAA2B;IAE3B,MAAM,IAAI,GAAG,gBAAgB,CAAC,MAAM,EAAE,OAAO,IAAI,gBAAgB,CAAC,CAAC;IACnE,IAAI,IAAI,CAAC,IAAI,KAAK,MAAM;QAAE,OAAO,IAAI,CAAC;IACtC,OAAO,IAAI,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC;AACpD,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,OAAyB;IAChE,MAAM,EAAE,MAAM,EAAE,cAAc,EAAE,iBAAiB,EAAE,GAAG,OAAO,CAAC;IAC9D,MAAM,iBAAiB,GAAG,OAAO,CAAC,iBAAiB,IAAI,oBAAoB,CAAC;IAE5E,IAAI,cAAc,KAAK,SAAS,EAAE,CAAC;QACjC,OAAO,eAAe,CAAC,cAAc,EAAE,MAAM,EAAE,iBAAiB,EAAE,iBAAiB,CAAC,CAAC;IACvF,CAAC;IAED,OAAO,iBAAiB,CAAC,MAAM,EAAE,iBAAiB,EAAE,iBAAiB,CAAC,CAAC;AACzE,CAAC;AAED,KAAK,UAAU,eAAe,CAC5B,KAAc,EACd,MAAyB,EACzB,iBAAyC,EACzC,iBAAqC;IAErC,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxB,OAAO;YACL,IAAI,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE;YACzB,MAAM,EAAE,0BAA0B;SACnC,CAAC;IACJ,CAAC;IAED,MAAM,QAAQ,GAAG,MAAM,iBAAiB,EAAE,CAAC;IAC3C,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,MAAM,IAAI,cAAc,CACtB,WAAW,KAAK,4DAA4D,GAAG,kCAAkC,CAClH,CAAC;IACJ,CAAC;IAED,MAAM,QAAQ,GAAG,iBAAiB,CAAC,KAAK,EAAE,MAAM,EAAE,iBAAiB,CAAC,CAAC;IACrE,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;QACtB,MAAM,IAAI,cAAc,CACtB,WAAW,KAAK,4BAA4B,GAAG,8DAA8D,CAC9G,CAAC;IACJ,CAAC;IAED,OAAO;QACL,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE;QACnD,MAAM,EAAE,+BAA+B,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,GAAG;KACrF,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,iBAAiB,CAC9B,MAAyB,EACzB,iBAAyC,EACzC,iBAAqC;IAErC,MAAM,QAAQ,GAAG,MAAM,iBAAiB,EAAE,CAAC;IAC3C,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,OAAO;YACL,IAAI,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE;YACzB,MAAM,EAAE,sBAAsB;SAC/B,CAAC;IACJ,CAAC;IAED,MAAM,QAAQ,GAAG,iBAAiB,CAAC,oBAAoB,EAAE,MAAM,EAAE,iBAAiB,CAAC,CAAC;IACpF,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;QACtB,OAAO;YACL,IAAI,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE;YACzB,MAAM,EAAE,mCAAmC;SAC5C,CAAC;IACJ,CAAC;IAED,OAAO;QACL,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,oBAAoB,EAAE,QAAQ,EAAE,QAAQ,EAAE;QACzE,MAAM,EAAE,qBAAqB,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,mBAAmB,WAAW;KAC7F,CAAC;AACJ,CAAC"}
+{"version":3,"file":"preflight.js","sourceRoot":"","sources":["../../src/session/preflight.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,QAAQ,IAAI,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAC5D,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAItC,OAAO,EAAE,gBAAgB,EAAE,oBAAoB,EAA0B,MAAM,gCAAgC,CAAC;AAChH,OAAO,EAAE,wBAAwB,EAAE,MAAM,6BAA6B,CAAC;AAEvE,MAAM,QAAQ,GAAG,SAAS,CAAC,UAAU,CAAC,CAAC;AAEvC,MAAM,iBAAiB,GAAG,KAAK,CAAC;AAEhC;;;GAGG;AACH,MAAM,OAAO,cAAe,SAAQ,KAAK;IACvC,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,gBAAgB,CAAC;IAC/B,CAAC;CACF;AAkBD;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB;IACxC,IAAI,CAAC;QACH,MAAM,QAAQ,CAAC,QAAQ,EAAE,CAAC,MAAM,CAAC,EAAE,EAAE,OAAO,EAAE,iBAAiB,EAAE,CAAC,CAAC;QACnE,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,gBAAgB,GAAsB;IAC1C,YAAY,EAAE,oBAAoB;IAClC,gBAAgB,EAAE,GAAG,EAAE,CAAC,IAAI;CAC7B,CAAC;AAEF;;;;;;GAMG;AACH,SAAS,iBAAiB,CACxB,OAAgB,EAChB,MAAyB,EACzB,OAA2B;IAE3B,8DAA8D;IAC9D,IAAI,OAAO,KAAK,OAAO,EAAE,CAAC;QACxB,MAAM,QAAQ,GAAG,MAAM,CAAC,UAAU,CAAC,aAAa,CAAC;QACjD,MAAM,GAAG,GAAG,wBAAwB,CAAC,QAAQ,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC;QAClE,OAAO,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC;IAC/B,CAAC;IAED,6EAA6E;IAC7E,MAAM,IAAI,GAAG,gBAAgB,CAAC,MAAM,EAAE,OAAO,IAAI,gBAAgB,CAAC,CAAC;IACnE,IAAI,IAAI,CAAC,IAAI,KAAK,MAAM;QAAE,OAAO,IAAI,CAAC;IACtC,OAAO,IAAI,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC;AACpD,CAAC;AAED;;GAEG;AACH,SAAS,sBAAsB,CAAC,OAAgB,EAAE,MAAyB;IACzE,IAAI,OAAO,KAAK,OAAO,EAAE,CAAC;QACxB,MAAM,QAAQ,GAAG,MAAM,CAAC,UAAU,CAAC,aAAa,CAAC;QACjD,OAAO,CACL,mDAAmD,QAAQ,KAAK;YAChE,4DAA4D;YAC5D,wCAAwC,CACzC,CAAC;IACJ,CAAC;IACD,OAAO,WAAW,OAAO,0FAA0F,CAAC;AACtH,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,OAAyB;IAChE,MAAM,EAAE,MAAM,EAAE,cAAc,EAAE,iBAAiB,EAAE,GAAG,OAAO,CAAC;IAC9D,MAAM,iBAAiB,GAAG,OAAO,CAAC,iBAAiB,IAAI,oBAAoB,CAAC;IAE5E,IAAI,cAAc,KAAK,SAAS,EAAE,CAAC;QACjC,OAAO,eAAe,CAAC,cAAc,EAAE,MAAM,EAAE,iBAAiB,EAAE,iBAAiB,CAAC,CAAC;IACvF,CAAC;IAED,OAAO,iBAAiB,CAAC,MAAM,EAAE,iBAAiB,EAAE,iBAAiB,CAAC,CAAC;AACzE,CAAC;AAED,KAAK,UAAU,eAAe,CAC5B,KAAc,EACd,MAAyB,EACzB,iBAAyC,EACzC,iBAAqC;IAErC,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxB,OAAO;YACL,IAAI,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE;YACzB,MAAM,EAAE,0BAA0B;SACnC,CAAC;IACJ,CAAC;IAED,MAAM,QAAQ,GAAG,MAAM,iBAAiB,EAAE,CAAC;IAC3C,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,MAAM,IAAI,cAAc,CACtB,WAAW,KAAK,4DAA4D,GAAG,kCAAkC,CAClH,CAAC;IACJ,CAAC;IAED,MAAM,QAAQ,GAAG,iBAAiB,CAAC,KAAK,EAAE,MAAM,EAAE,iBAAiB,CAAC,CAAC;IACrE,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;QACtB,MAAM,IAAI,cAAc,CAAC,sBAAsB,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC;IAClE,CAAC;IAED,OAAO;QACL,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE;QACnD,MAAM,EAAE,+BAA+B,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,GAAG;KACrF,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,iBAAiB,CAC9B,MAAyB,EACzB,iBAAyC,EACzC,iBAAqC;IAErC,MAAM,QAAQ,GAAG,MAAM,iBAAiB,EAAE,CAAC;IAC3C,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,OAAO;YACL,IAAI,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE;YACzB,MAAM,EAAE,sBAAsB;SAC/B,CAAC;IACJ,CAAC;IAED,MAAM,YAAY,GAAG,MAAM,CAAC,UAAU,CAAC,oBAA+B,CAAC;IACvE,MAAM,QAAQ,GAAG,iBAAiB,CAAC,YAAY,EAAE,MAAM,EAAE,iBAAiB,CAAC,CAAC;IAC5E,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;QACtB,OAAO;YACL,IAAI,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE;YACzB,MAAM,EAAE,mCAAmC;SAC5C,CAAC;IACJ,CAAC;IAED,OAAO;QACL,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,YAAY,EAAE,QAAQ,EAAE,QAAQ,EAAE;QACjE,MAAM,EAAE,qBAAqB,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,WAAW;KACnF,CAAC;AACJ,CAAC"}

package/dist/session/prompts.d.ts

@@ -9,3 +9,17 @@ export interface ServerListing {
  * to discover tools on demand.
  */
 export declare function buildSystemPrompt(serverListings: ServerListing[], allowedDirectory?: string): string;
+/**
+ * Context injected into the system prompt for cron-initiated sessions.
+ */
+export interface CronPromptContext {
+    /** The English task description from the job definition. */
+    readonly taskDescription: string;
+    /** Absolute path to the persistent workspace directory. */
+    readonly workspacePath: string;
+}
+/**
+ * Builds the system prompt augmentation for cron sessions.
+ * Appended to the standard system prompt (from buildSystemPrompt).
+ */
+export declare function buildCronSystemPromptAugmentation(context: CronPromptContext): string;

package/dist/session/prompts.js

@@ -63,7 +63,8 @@ ${serverLines}
 ### Tool discovery
 
 Call \`help.help('serverName')\` to list the tools in a server with their required parameters.
-Call \`__getToolInterface('namespace.tool_name')\` to inspect a tool's full TypeScript interface.
+Call \`__getToolInterface('tools.server_toolname')\` to inspect a tool's full TypeScript interface.
+Use the exact callable name from the catalog (e.g., \`tools.filesystem_read_text_file\`, \`tools.git_git_push\`).
 
 Example workflow:
 \`\`\`typescript
@@ -71,10 +72,46 @@ Example workflow:
 const info = help.help('filesystem');
 return info;
 
-// 2. Then use them
+// 2. Inspect a tool's interface
+const iface = __getToolInterface('tools.filesystem_read_text_file');
+return iface;
+
+// 3. Then use them
 const content = tools.filesystem_read_text_file({ path: '/data/config.json' });
 return content;
 \`\`\`
 `;
 }
+/**
+ * Builds the system prompt augmentation for cron sessions.
+ * Appended to the standard system prompt (from buildSystemPrompt).
+ */
+export function buildCronSystemPromptAugmentation(context) {
+    return `## Scheduled Task Mode
+
+You are running as an automated scheduled task. There is no interactive user present.
+
+### Your Task
+
+${context.taskDescription}
+
+### Workspace
+
+Your persistent workspace is: ${context.workspacePath}
+This directory persists across runs. Use it for cross-run state:
+
+- **workspace/memory.md** -- Your notes for yourself. Read this at the start of each run to recall context from previous runs. Update it with anything you want to remember for next time (last processed item, patterns observed, recurring issues, etc.).
+- **workspace/last-run.md** -- Write a structured summary here before finishing. Include:
+  - Date and time of this run
+  - Actions taken (with counts: "Labeled 12 issues, commented on 3, closed 1")
+  - Any issues encountered or items skipped
+  - Recommendations for next run (if any)
+
+### Headless Behavior
+
+- If a tool call is denied, do NOT retry it. Note the denial in your summary and continue with other work.
+- If a tool call requires approval and no human responds in time, it will be auto-denied. Continue without that operation.
+- Work efficiently: this is a recurring job, not an exploration. Focus on the task.
+- Always write workspace/last-run.md before finishing, even if the task failed.`;
+}
 //# sourceMappingURL=prompts.js.map

package/dist/session/prompts.js.map

@@ -1 +1 @@
-{"version":3,"file":"prompts.js","sourceRoot":"","sources":["../../src/session/prompts.ts"],"names":[],"mappings":"AAMA;;;;GAIG;AACH,MAAM,UAAU,iBAAiB,CAAC,cAA+B,EAAE,gBAAyB;IAC1F,MAAM,WAAW,GAAG,gBAAgB;QAClC,CAAC,CAAC,gCAAgC,gBAAgB,0EAA0E;QAC5H,CAAC,CAAC,EAAE,CAAC;IAEP,MAAM,WAAW,GACf,cAAc,CAAC,MAAM,GAAG,CAAC;QACvB,CAAC,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,IAAI,QAAQ,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;QAC5E,CAAC,CAAC,2BAA2B,CAAC;IAElC,OAAO;;;EAGP,WAAW;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EA6CX,WAAW;;;;;;;;;;;;;;;;;CAiBZ,CAAC;AACF,CAAC"}
+{"version":3,"file":"prompts.js","sourceRoot":"","sources":["../../src/session/prompts.ts"],"names":[],"mappings":"AAMA;;;;GAIG;AACH,MAAM,UAAU,iBAAiB,CAAC,cAA+B,EAAE,gBAAyB;IAC1F,MAAM,WAAW,GAAG,gBAAgB;QAClC,CAAC,CAAC,gCAAgC,gBAAgB,0EAA0E;QAC5H,CAAC,CAAC,EAAE,CAAC;IAEP,MAAM,WAAW,GACf,cAAc,CAAC,MAAM,GAAG,CAAC;QACvB,CAAC,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,IAAI,QAAQ,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;QAC5E,CAAC,CAAC,2BAA2B,CAAC;IAElC,OAAO;;;EAGP,WAAW;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EA6CX,WAAW;;;;;;;;;;;;;;;;;;;;;;CAsBZ,CAAC;AACF,CAAC;AAiBD;;;GAGG;AACH,MAAM,UAAU,iCAAiC,CAAC,OAA0B;IAC1E,OAAO;;;;;;EAMP,OAAO,CAAC,eAAe;;;;gCAIO,OAAO,CAAC,aAAa;;;;;;;;;;;;;;;gFAe2B,CAAC;AACjF,CAAC"}

package/dist/session/session-manager.d.ts

@@ -0,0 +1,105 @@
+/**
+ * SessionManager -- Unified session state management.
+ *
+ * Extracted from SignalBotDaemon to serve as the single owner of all
+ * managed session state. Both Signal-initiated and cron-initiated
+ * sessions register here for unified lifecycle management and
+ * escalation routing.
+ *
+ * This is the canonical location for SessionSource and ManagedSession
+ * types. The daemon module re-exports them for convenience.
+ */
+import type { Session } from './types.js';
+import type { Transport } from './transport.js';
+import type { JobId } from '../cron/types.js';
+/**
+ * Source discriminant for managed sessions.
+ * Determines cleanup behavior, notification routing, and
+ * message forwarding eligibility.
+ *
+ * - 'signal': interactive session created via Signal message.
+ *   Accepts follow-up messages via forwardToSession().
+ * - 'cron': headless session created by the cron scheduler.
+ *   Does NOT accept follow-up messages.
+ */
+export type SessionSource = {
+    readonly kind: 'signal';
+} | {
+    readonly kind: 'cron';
+    readonly jobId: JobId;
+    readonly jobName: string;
+};
+/**
+ * Unified managed session entry. Used for both Signal-initiated
+ * interactive sessions and cron-initiated headless sessions.
+ *
+ * The transport field uses the base Transport interface because
+ * cron sessions use HeadlessTransport. Code that needs
+ * Signal-specific methods must guard on source.kind === 'signal'.
+ */
+export interface ManagedSession {
+    readonly label: number;
+    readonly session: Session;
+    readonly transport: Transport;
+    readonly source: SessionSource;
+    messageInFlight: boolean;
+    pendingEscalationId: string | null;
+    escalationResolving: boolean;
+}
+/**
+ * Owns all managed session state. Both SignalBotDaemon and
+ * CronScheduler delegate to this class for session registration,
+ * lookup, and teardown.
+ *
+ * Invariants:
+ * - Labels are monotonically increasing integers starting at 1.
+ * - At most one session exists per label.
+ * - currentLabel is always either null or a valid label in the map.
+ */
+export declare class SessionManager {
+    private sessions;
+    private nextLabel;
+    /**
+     * The currently "focused" session label for Signal message routing.
+     * When a Signal message arrives without an explicit #N prefix, it
+     * is routed to this session.
+     *
+     * Only updated by register() for Signal sessions. Cron sessions
+     * do not steal Signal focus.
+     */
+    currentLabel: number | null;
+    /**
+     * Registers a new session and returns its assigned label.
+     *
+     * For Signal sessions: sets currentLabel to the new session.
+     * For cron sessions: currentLabel is NOT changed.
+     */
+    register(session: Session, transport: Transport, source: SessionSource): number;
+    /**
+     * Ends a session by label: closes the transport, closes the
+     * session, and removes it from the map.
+     *
+     * If the ended session was currentLabel, switches to the most
+     * recently registered remaining Signal session, or null if none.
+     */
+    end(label: number): Promise<void>;
+    /** Returns the ManagedSession for a label, or undefined. */
+    get(label: number): ManagedSession | undefined;
+    /** Returns all managed sessions (snapshot). */
+    all(): readonly ManagedSession[];
+    /** Returns managed sessions filtered by source kind. */
+    byKind(kind: SessionSource['kind']): readonly ManagedSession[];
+    /** Returns the number of active sessions. */
+    get size(): number;
+    /** Records that a session has a pending escalation. */
+    setPendingEscalation(label: number, escalationId: string): void;
+    /** Clears a session's pending escalation. */
+    clearPendingEscalation(label: number): void;
+    /** Returns sessions that have pending escalations. */
+    withPendingEscalation(): readonly ManagedSession[];
+    /**
+     * Finds the most recently registered Signal session label.
+     * Returns null if no Signal sessions exist.
+     */
+    private findMostRecentSignalLabel;
+}

package/dist/session/session-manager.js

@@ -0,0 +1,134 @@
+/**
+ * SessionManager -- Unified session state management.
+ *
+ * Extracted from SignalBotDaemon to serve as the single owner of all
+ * managed session state. Both Signal-initiated and cron-initiated
+ * sessions register here for unified lifecycle management and
+ * escalation routing.
+ *
+ * This is the canonical location for SessionSource and ManagedSession
+ * types. The daemon module re-exports them for convenience.
+ */
+import * as logger from '../logger.js';
+/**
+ * Owns all managed session state. Both SignalBotDaemon and
+ * CronScheduler delegate to this class for session registration,
+ * lookup, and teardown.
+ *
+ * Invariants:
+ * - Labels are monotonically increasing integers starting at 1.
+ * - At most one session exists per label.
+ * - currentLabel is always either null or a valid label in the map.
+ */
+export class SessionManager {
+    sessions = new Map();
+    nextLabel = 1;
+    /**
+     * The currently "focused" session label for Signal message routing.
+     * When a Signal message arrives without an explicit #N prefix, it
+     * is routed to this session.
+     *
+     * Only updated by register() for Signal sessions. Cron sessions
+     * do not steal Signal focus.
+     */
+    currentLabel = null;
+    /**
+     * Registers a new session and returns its assigned label.
+     *
+     * For Signal sessions: sets currentLabel to the new session.
+     * For cron sessions: currentLabel is NOT changed.
+     */
+    register(session, transport, source) {
+        const label = this.nextLabel++;
+        const managed = {
+            label,
+            session,
+            transport,
+            source,
+            messageInFlight: false,
+            pendingEscalationId: null,
+            escalationResolving: false,
+        };
+        this.sessions.set(label, managed);
+        // Only Signal sessions update currentLabel
+        if (source.kind === 'signal') {
+            this.currentLabel = label;
+        }
+        return label;
+    }
+    /**
+     * Ends a session by label: closes the transport, closes the
+     * session, and removes it from the map.
+     *
+     * If the ended session was currentLabel, switches to the most
+     * recently registered remaining Signal session, or null if none.
+     */
+    async end(label) {
+        const managed = this.sessions.get(label);
+        if (!managed)
+            return;
+        try {
+            managed.transport.close();
+        }
+        catch (err) {
+            logger.warn(`[SessionManager] Error closing transport for session #${label}: ${String(err)}`);
+        }
+        try {
+            await managed.session.close();
+        }
+        catch (err) {
+            logger.warn(`[SessionManager] Error closing session #${label}: ${String(err)}`);
+        }
+        this.sessions.delete(label);
+        // If the ended session was the current label, find a replacement
+        if (this.currentLabel === label) {
+            this.currentLabel = this.findMostRecentSignalLabel();
+        }
+    }
+    /** Returns the ManagedSession for a label, or undefined. */
+    get(label) {
+        return this.sessions.get(label);
+    }
+    /** Returns all managed sessions (snapshot). */
+    all() {
+        return [...this.sessions.values()];
+    }
+    /** Returns managed sessions filtered by source kind. */
+    byKind(kind) {
+        return [...this.sessions.values()].filter((m) => m.source.kind === kind);
+    }
+    /** Returns the number of active sessions. */
+    get size() {
+        return this.sessions.size;
+    }
+    /** Records that a session has a pending escalation. */
+    setPendingEscalation(label, escalationId) {
+        const managed = this.sessions.get(label);
+        if (managed) {
+            managed.pendingEscalationId = escalationId;
+        }
+    }
+    /** Clears a session's pending escalation. */
+    clearPendingEscalation(label) {
+        const managed = this.sessions.get(label);
+        if (managed) {
+            managed.pendingEscalationId = null;
+            managed.escalationResolving = false;
+        }
+    }
+    /** Returns sessions that have pending escalations. */
+    withPendingEscalation() {
+        return [...this.sessions.values()].filter((m) => m.pendingEscalationId !== null);
+    }
+    /**
+     * Finds the most recently registered Signal session label.
+     * Returns null if no Signal sessions exist.
+     */
+    findMostRecentSignalLabel() {
+        const signalSessions = this.byKind('signal');
+        if (signalSessions.length === 0)
+            return null;
+        return Math.max(...signalSessions.map((m) => m.label));
+    }
+}
+//# sourceMappingURL=session-manager.js.map

package/dist/session/session-manager.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-manager.js","sourceRoot":"","sources":["../../src/session/session-manager.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAKH,OAAO,KAAK,MAAM,MAAM,cAAc,CAAC;AAkCvC;;;;;;;;;GASG;AACH,MAAM,OAAO,cAAc;IACjB,QAAQ,GAAG,IAAI,GAAG,EAA0B,CAAC;IAC7C,SAAS,GAAG,CAAC,CAAC;IAEtB;;;;;;;OAOG;IACH,YAAY,GAAkB,IAAI,CAAC;IAEnC;;;;;OAKG;IACH,QAAQ,CAAC,OAAgB,EAAE,SAAoB,EAAE,MAAqB;QACpE,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;QAE/B,MAAM,OAAO,GAAmB;YAC9B,KAAK;YACL,OAAO;YACP,SAAS;YACT,MAAM;YACN,eAAe,EAAE,KAAK;YACtB,mBAAmB,EAAE,IAAI;YACzB,mBAAmB,EAAE,KAAK;SAC3B,CAAC;QAEF,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;QAElC,2CAA2C;QAC3C,IAAI,MAAM,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC7B,IAAI,CAAC,YAAY,GAAG,KAAK,CAAC;QAC5B,CAAC;QAED,OAAO,KAAK,CAAC;IACf,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,GAAG,CAAC,KAAa;QACrB,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACzC,IAAI,CAAC,OAAO;YAAE,OAAO;QAErB,IAAI,CAAC;YACH,OAAO,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC;QAC5B,CAAC;QAAC,OAAO,GAAY,EAAE,CAAC;YACtB,MAAM,CAAC,IAAI,CAAC,yDAAyD,KAAK,KAAK,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAChG,CAAC;QAED,IAAI,CAAC;YACH,MAAM,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;QAChC,CAAC;QAAC,OAAO,GAAY,EAAE,CAAC;YACtB,MAAM,CAAC,IAAI,CAAC,2CAA2C,KAAK,KAAK,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAClF,CAAC;QAED,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAE5B,iEAAiE;QACjE,IAAI,IAAI,CAAC,YAAY,KAAK,KAAK,EAAE,CAAC;YAChC,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC,yBAAyB,EAAE,CAAC;QACvD,CAAC;IACH,CAAC;IAED,4DAA4D;IAC5D,GAAG,CAAC,KAAa;QACf,OAAO,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IAClC,CAAC;IAED,+CAA+C;IAC/C,GAAG;QACD,OAAO,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;IACrC,CAAC;IAED,wDAAwD;IACxD,MAAM,CAAC,IAA2B;QAChC,OAAO,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;IAC3E,CAAC;IAED,6CAA6C;IAC7C,IAAI,IAAI;QACN,OAAO,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;IAC5B,CAAC;IAED,uDAAuD;IACvD,oBAAoB,CAAC,KAAa,EAAE,YAAoB;QACtD,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACzC,IAAI,OAAO,EAAE,CAAC;YACZ,OAAO,CAAC,mBAAmB,GAAG,YAAY,CAAC;QAC7C,CAAC;IACH,CAAC;IAED,6CAA6C;IAC7C,sBAAsB,CAAC,KAAa;QAClC,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACzC,IAAI,OAAO,EAAE,CAAC;YACZ,OAAO,CAAC,mBAAmB,GAAG,IAAI,CAAC;YACnC,OAAO,CAAC,mBAAmB,GAAG,KAAK,CAAC;QACtC,CAAC;IACH,CAAC;IAED,sDAAsD;IACtD,qBAAqB;QACnB,OAAO,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,mBAAmB,KAAK,IAAI,CAAC,CAAC;IACnF,CAAC;IAED;;;OAGG;IACK,yBAAyB;QAC/B,MAAM,cAAc,GAAG,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAC7C,IAAI,cAAc,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QAC7C,OAAO,IAAI,CAAC,GAAG,CAAC,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;IACzD,CAAC;CACF"}

package/dist/session/session-metadata.d.ts

@@ -0,0 +1,18 @@
+/**
+ * Persistence for session metadata (persona, workspace, policyDir).
+ *
+ * Written once when a session is created; read back on --resume so
+ * the session continues with the same settings.
+ */
+import type { SessionMetadata } from './types.js';
+/**
+ * Writes session metadata to disk. No-ops if the file already exists
+ * (idempotent for edge cases like retried session creation).
+ */
+export declare function saveSessionMetadata(sessionId: string, metadata: SessionMetadata): void;
+/**
+ * Reads session metadata from disk. Returns undefined if the file
+ * is missing or contains invalid JSON (graceful for old sessions
+ * created before metadata persistence was added).
+ */
+export declare function loadSessionMetadata(sessionId: string): SessionMetadata | undefined;

package/dist/session/session-metadata.js

@@ -0,0 +1,34 @@
+/**
+ * Persistence for session metadata (persona, workspace, policyDir).
+ *
+ * Written once when a session is created; read back on --resume so
+ * the session continues with the same settings.
+ */
+import { existsSync, readFileSync, writeFileSync } from 'node:fs';
+import { getSessionMetadataPath } from '../config/paths.js';
+/**
+ * Writes session metadata to disk. No-ops if the file already exists
+ * (idempotent for edge cases like retried session creation).
+ */
+export function saveSessionMetadata(sessionId, metadata) {
+    const path = getSessionMetadataPath(sessionId);
+    if (existsSync(path))
+        return;
+    writeFileSync(path, JSON.stringify(metadata, null, 2) + '\n', 'utf-8');
+}
+/**
+ * Reads session metadata from disk. Returns undefined if the file
+ * is missing or contains invalid JSON (graceful for old sessions
+ * created before metadata persistence was added).
+ */
+export function loadSessionMetadata(sessionId) {
+    const path = getSessionMetadataPath(sessionId);
+    try {
+        const raw = readFileSync(path, 'utf-8');
+        return JSON.parse(raw);
+    }
+    catch {
+        return undefined;
+    }
+}
+//# sourceMappingURL=session-metadata.js.map

package/dist/session/session-metadata.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-metadata.js","sourceRoot":"","sources":["../../src/session/session-metadata.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAClE,OAAO,EAAE,sBAAsB,EAAE,MAAM,oBAAoB,CAAC;AAG5D;;;GAGG;AACH,MAAM,UAAU,mBAAmB,CAAC,SAAiB,EAAE,QAAyB;IAC9E,MAAM,IAAI,GAAG,sBAAsB,CAAC,SAAS,CAAC,CAAC;IAC/C,IAAI,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO;IAC7B,aAAa,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE,OAAO,CAAC,CAAC;AACzE,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,mBAAmB,CAAC,SAAiB;IACnD,MAAM,IAAI,GAAG,sBAAsB,CAAC,SAAS,CAAC,CAAC;IAC/C,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QACxC,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAoB,CAAC;IAC5C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC"}

package/dist/session/types.d.ts

@@ -12,6 +12,19 @@ export type SessionId = string & {
 };
 /** Creates a new unique SessionId. */
 export declare function createSessionId(): SessionId;
+/**
+ * Persisted session metadata written to session-metadata.json.
+ * Stores the original user intent (persona name, explicit workspace)
+ * rather than resolved paths so that on resume the persona can be
+ * re-resolved with updated policies.
+ */
+export interface SessionMetadata {
+    readonly createdAt: string;
+    readonly persona?: string;
+    readonly workspacePath?: string;
+    readonly policyDir?: string;
+    readonly disableAutoApprove?: boolean;
+}
 /**
  * The possible states a session can be in. Linear progression:
  * initializing -> ready -> (processing <-> ready) -> closed.
@@ -180,6 +193,12 @@ export interface SessionOptions {
      * The transport uses this to clear the escalation banner and notify the user.
      */
     onEscalationExpired?: () => void;
+    /**
+     * Callback invoked when a pending escalation is resolved (approved or denied).
+     * Fires after the response file is written, regardless of whether the resolution
+     * was initiated by the transport or by the proxy (e.g., Signal approve command).
+     */
+    onEscalationResolved?: (escalationId: string, decision: 'approved' | 'denied') => void;
     /**
      * Callback invoked during message processing with diagnostic events.
      * Transports use this to display progress (e.g., tool call previews).
@@ -192,6 +211,34 @@ export interface SessionOptions {
      * Must be validated via validateWorkspacePath() before passing here.
      */
     workspacePath?: string;
+    /**
+     * When set, loads compiled-policy.json (and optionally
+     * dynamic-lists.json) from this directory instead of the global
+     * generated directory. Tool annotations are always loaded from
+     * the global location regardless of this setting.
+     *
+     * Used by cron sessions to load task-scoped policy.
+     */
+    policyDir?: string;
+    /**
+     * Additional content appended to the system prompt.
+     * Used by cron sessions to inject task context and workspace
+     * conventions.
+     */
+    systemPromptAugmentation?: string;
+    /**
+     * When true, disables the auto-approver for this session even if
+     * enabled in user config. Used by cron/headless sessions where there
+     * is no interactive user context to match escalations against.
+     */
+    disableAutoApprove?: boolean;
+    /**
+     * Persona name. When set, resolves to a policyDir, optional server
+     * filter, persistent workspace, and system prompt augmentation.
+     * Mutually exclusive with policyDir -- if both are provided,
+     * persona takes precedence with a warning.
+     */
+    persona?: string;
 }
 /**
  * The core session contract. A session is a stateful conversation

package/dist/session/workspace-validation.d.ts

@@ -6,6 +6,8 @@
  * as the allowedDirectory, so it must not overlap with protected paths
  * or sensitive system directories.
  */
+/** Returns true when `child` is equal to or nested inside `parent`. */
+export declare function isEqualOrInside(child: string, parent: string): boolean;
 /**
  * Validates and canonicalizes a workspace path.
  *

package/dist/session/workspace-validation.js

@@ -12,7 +12,7 @@ import { resolve } from 'node:path';
 import { expandTilde, resolveRealPath } from '../types/argument-roles.js';
 import { getIronCurtainHome } from '../config/paths.js';
 /** Returns true when `child` is equal to or nested inside `parent`. */
-function isEqualOrInside(child, parent) {
+export function isEqualOrInside(child, parent) {
     if (child === parent)
         return true;
     const prefix = parent === '/' ? '/' : parent + '/';
@@ -50,15 +50,16 @@ export function validateWorkspacePath(rawPath, protectedPaths) {
     if (isEqualOrInside(canonical, ironCurtainHome)) {
         throw new Error(`Workspace path is inside the IronCurtain home directory: ${canonical}`);
     }
-    // Bidirectional overlap check with protected paths
+    // Check that workspace is not inside a protected path.
+    // The reverse direction (protected path inside workspace) is intentionally
+    // NOT checked here — the PolicyEngine already protects those paths at
+    // runtime regardless of the allowedDirectory, so a workspace that happens
+    // to contain e.g. src/config/generated/ is perfectly safe.
     for (const pp of protectedPaths) {
         const protectedCanonical = resolveRealPath(pp);
         if (isEqualOrInside(canonical, protectedCanonical)) {
             throw new Error(`Workspace path overlaps with protected path: ${protectedCanonical}`);
         }
-        if (isEqualOrInside(protectedCanonical, canonical)) {
-            throw new Error(`Workspace would contain protected path ${protectedCanonical} — ` + `use a more specific subdirectory`);
-        }
     }
     return canonical;
 }

package/dist/session/workspace-validation.js.map

@@ -1 +1 @@
-{"version":3,"file":"workspace-validation.js","sourceRoot":"","sources":["../../src/session/workspace-validation.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AACnC,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,4BAA4B,CAAC;AAC1E,OAAO,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AAExD,uEAAuE;AACvE,SAAS,eAAe,CAAC,KAAa,EAAE,MAAc;IACpD,IAAI,KAAK,KAAK,MAAM;QAAE,OAAO,IAAI,CAAC;IAClC,MAAM,MAAM,GAAG,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,GAAG,GAAG,CAAC;IACnD,OAAO,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;AAClC,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,qBAAqB,CAAC,OAAe,EAAE,cAAwB;IAC7E,MAAM,QAAQ,GAAG,OAAO,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC;IAC/C,MAAM,SAAS,GAAG,eAAe,CAAC,QAAQ,CAAC,CAAC;IAE5C,gCAAgC;IAChC,IAAI,IAAiC,CAAC;IACtC,IAAI,CAAC;QACH,IAAI,GAAG,QAAQ,CAAC,SAAS,CAAC,CAAC;IAC7B,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,kCAAkC,SAAS,EAAE,CAAC,CAAC;IACjE,CAAC;IACD,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC;QACxB,MAAM,IAAI,KAAK,CAAC,sCAAsC,SAAS,EAAE,CAAC,CAAC;IACrE,CAAC;IAED,IAAI,SAAS,KAAK,GAAG,EAAE,CAAC;QACtB,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;IAC5D,CAAC;IAED,IAAI,SAAS,KAAK,eAAe,CAAC,OAAO,EAAE,CAAC,EAAE,CAAC;QAC7C,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;IAC5D,CAAC;IAED,MAAM,eAAe,GAAG,eAAe,CAAC,kBAAkB,EAAE,CAAC,CAAC;IAC9D,IAAI,eAAe,CAAC,SAAS,EAAE,eAAe,CAAC,EAAE,CAAC;QAChD,MAAM,IAAI,KAAK,CAAC,4DAA4D,SAAS,EAAE,CAAC,CAAC;IAC3F,CAAC;IAED,mDAAmD;IACnD,KAAK,MAAM,EAAE,IAAI,cAAc,EAAE,CAAC;QAChC,MAAM,kBAAkB,GAAG,eAAe,CAAC,EAAE,CAAC,CAAC;QAE/C,IAAI,eAAe,CAAC,SAAS,EAAE,kBAAkB,CAAC,EAAE,CAAC;YACnD,MAAM,IAAI,KAAK,CAAC,gDAAgD,kBAAkB,EAAE,CAAC,CAAC;QACxF,CAAC;QAED,IAAI,eAAe,CAAC,kBAAkB,EAAE,SAAS,CAAC,EAAE,CAAC;YACnD,MAAM,IAAI,KAAK,CACb,0CAA0C,kBAAkB,KAAK,GAAG,kCAAkC,CACvG,CAAC;QACJ,CAAC;IACH,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC"}
+{"version":3,"file":"workspace-validation.js","sourceRoot":"","sources":["../../src/session/workspace-validation.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AACnC,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,4BAA4B,CAAC;AAC1E,OAAO,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AAExD,uEAAuE;AACvE,MAAM,UAAU,eAAe,CAAC,KAAa,EAAE,MAAc;IAC3D,IAAI,KAAK,KAAK,MAAM;QAAE,OAAO,IAAI,CAAC;IAClC,MAAM,MAAM,GAAG,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,GAAG,GAAG,CAAC;IACnD,OAAO,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;AAClC,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,qBAAqB,CAAC,OAAe,EAAE,cAAwB;IAC7E,MAAM,QAAQ,GAAG,OAAO,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC;IAC/C,MAAM,SAAS,GAAG,eAAe,CAAC,QAAQ,CAAC,CAAC;IAE5C,gCAAgC;IAChC,IAAI,IAAiC,CAAC;IACtC,IAAI,CAAC;QACH,IAAI,GAAG,QAAQ,CAAC,SAAS,CAAC,CAAC;IAC7B,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,kCAAkC,SAAS,EAAE,CAAC,CAAC;IACjE,CAAC;IACD,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC;QACxB,MAAM,IAAI,KAAK,CAAC,sCAAsC,SAAS,EAAE,CAAC,CAAC;IACrE,CAAC;IAED,IAAI,SAAS,KAAK,GAAG,EAAE,CAAC;QACtB,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;IAC5D,CAAC;IAED,IAAI,SAAS,KAAK,eAAe,CAAC,OAAO,EAAE,CAAC,EAAE,CAAC;QAC7C,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;IAC5D,CAAC;IAED,MAAM,eAAe,GAAG,eAAe,CAAC,kBAAkB,EAAE,CAAC,CAAC;IAC9D,IAAI,eAAe,CAAC,SAAS,EAAE,eAAe,CAAC,EAAE,CAAC;QAChD,MAAM,IAAI,KAAK,CAAC,4DAA4D,SAAS,EAAE,CAAC,CAAC;IAC3F,CAAC;IAED,uDAAuD;IACvD,2EAA2E;IAC3E,sEAAsE;IACtE,0EAA0E;IAC1E,2DAA2D;IAC3D,KAAK,MAAM,EAAE,IAAI,cAAc,EAAE,CAAC;QAChC,MAAM,kBAAkB,GAAG,eAAe,CAAC,EAAE,CAAC,CAAC;QAE/C,IAAI,eAAe,CAAC,SAAS,EAAE,kBAAkB,CAAC,EAAE,CAAC;YACnD,MAAM,IAAI,KAAK,CAAC,gDAAgD,kBAAkB,EAAE,CAAC,CAAC;QACxF,CAAC;IACH,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC"}

package/dist/signal/bot-command.d.ts

@@ -6,6 +6,8 @@
  * indefinitely. Sessions are created on demand when the user sends a
  * Signal message and destroyed when they end.
  */
+import type { CommandSpec } from '../cli-help.js';
+export declare const botSpec: CommandSpec;
 export interface BotOptions {
     /** Explicit agent selection (e.g., 'claude-code'). */
     agent?: string;

package/dist/signal/bot-command.js

@@ -15,6 +15,14 @@ import { SignalBotDaemon } from './signal-bot-daemon.js';
 import { createSignalContainerManager } from './signal-container.js';
 import { resolveSignalConfig } from './signal-config.js';
 import * as logger from '../logger.js';
+export const botSpec = {
+    name: 'ironcurtain bot',
+    description: 'Run the Signal transport (standalone, without cron scheduler)',
+    usage: ['ironcurtain bot [options]'],
+    options: [
+        { flag: 'agent', short: 'a', description: 'Agent mode: builtin or claude-code (Docker)', placeholder: '<name>' },
+    ],
+};
 export async function runBot(options = {}) {
     const userConfig = loadUserConfig();
     const signalConfig = resolveSignalConfig(userConfig);

package/dist/signal/bot-command.js.map

@@ -1 +1 @@
-{"version":3,"file":"bot-command.js","sourceRoot":"","sources":["../../src/signal/bot-command.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAChD,OAAO,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAC1D,OAAO,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AACtD,OAAO,EAAE,mBAAmB,EAAE,MAAM,6BAA6B,CAAC;AAClE,OAAO,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAC7D,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AACzD,OAAO,EAAE,4BAA4B,EAAE,MAAM,uBAAuB,CAAC;AACrE,OAAO,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AACzD,OAAO,KAAK,MAAM,MAAM,cAAc,CAAC;AAQvC,MAAM,CAAC,KAAK,UAAU,MAAM,CAAC,UAAsB,EAAE;IACnD,MAAM,UAAU,GAAG,cAAc,EAAE,CAAC;IACpC,MAAM,YAAY,GAAG,mBAAmB,CAAC,UAAU,CAAC,CAAC;IAErD,IAAI,CAAC,YAAY,EAAE,CAAC;QAClB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,2DAA2D,CAAC,CAAC;QAClF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,sDAAsD;IACtD,6DAA6D;IAC7D,yDAAyD;IACzD,MAAM,CAAC,KAAK,CAAC,EAAE,WAAW,EAAE,gBAAgB,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC;IAE9D,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;IAE5B,2DAA2D;IAC3D,MAAM,SAAS,GAAG,MAAM,kBAAkB,CAAC;QACzC,MAAM;QACN,cAAc,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC,CAAE,OAAO,CAAC,KAAiB,CAAC,CAAC,CAAC,SAAS;KACvE,CAAC,CAAC;IACH,MAAM,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC;IAE5B,MAAM,MAAM,GAAG,mBAAmB,EAAE,CAAC;IACrC,MAAM,gBAAgB,GAAG,4BAA4B,CAAC,MAAM,EAAE,YAAY,CAAC,SAAS,CAAC,CAAC;IAEtF,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC;QACjC,MAAM,EAAE,YAAY;QACpB,gBAAgB;QAChB,IAAI;KACL,CAAC,CAAC;IAEH,gDAAgD;IAChD,IAAI,YAAY,GAAG,KAAK,CAAC;IACzB,MAAM,QAAQ,GAAG,KAAK,IAAmB,EAAE;QACzC,IAAI,YAAY;YAAE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,4BAA4B;QAC/D,YAAY,GAAG,IAAI,CAAC;QACpB,MAAM,MAAM,CAAC,QAAQ,EAAE,CAAC;QACxB,MAAM,CAAC,QAAQ,EAAE,CAAC;QAClB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC,CAAC;IACF,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,KAAK,QAAQ,EAAE,CAAC,CAAC;IAC5C,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,KAAK,QAAQ,EAAE,CAAC,CAAC;IAE7C,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,mCAAmC,IAAI,CAAC,IAAI,QAAQ,CAAC,CAAC;IAC3E,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,yBAAyB,CAAC,CAAC;IAEhD,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;AACvB,CAAC"}
+{"version":3,"file":"bot-command.js","sourceRoot":"","sources":["../../src/signal/bot-command.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAChD,OAAO,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAC1D,OAAO,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AACtD,OAAO,EAAE,mBAAmB,EAAE,MAAM,6BAA6B,CAAC;AAClE,OAAO,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAC7D,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AACzD,OAAO,EAAE,4BAA4B,EAAE,MAAM,uBAAuB,CAAC;AACrE,OAAO,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AACzD,OAAO,KAAK,MAAM,MAAM,cAAc,CAAC;AAIvC,MAAM,CAAC,MAAM,OAAO,GAAgB;IAClC,IAAI,EAAE,iBAAiB;IACvB,WAAW,EAAE,+DAA+D;IAC5E,KAAK,EAAE,CAAC,2BAA2B,CAAC;IACpC,OAAO,EAAE;QACP,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,WAAW,EAAE,6CAA6C,EAAE,WAAW,EAAE,QAAQ,EAAE;KACjH;CACF,CAAC;AAOF,MAAM,CAAC,KAAK,UAAU,MAAM,CAAC,UAAsB,EAAE;IACnD,MAAM,UAAU,GAAG,cAAc,EAAE,CAAC;IACpC,MAAM,YAAY,GAAG,mBAAmB,CAAC,UAAU,CAAC,CAAC;IAErD,IAAI,CAAC,YAAY,EAAE,CAAC;QAClB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,2DAA2D,CAAC,CAAC;QAClF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,sDAAsD;IACtD,6DAA6D;IAC7D,yDAAyD;IACzD,MAAM,CAAC,KAAK,CAAC,EAAE,WAAW,EAAE,gBAAgB,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC;IAE9D,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;IAE5B,2DAA2D;IAC3D,MAAM,SAAS,GAAG,MAAM,kBAAkB,CAAC;QACzC,MAAM;QACN,cAAc,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC,CAAE,OAAO,CAAC,KAAiB,CAAC,CAAC,CAAC,SAAS;KACvE,CAAC,CAAC;IACH,MAAM,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC;IAE5B,MAAM,MAAM,GAAG,mBAAmB,EAAE,CAAC;IACrC,MAAM,gBAAgB,GAAG,4BAA4B,CAAC,MAAM,EAAE,YAAY,CAAC,SAAS,CAAC,CAAC;IAEtF,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC;QACjC,MAAM,EAAE,YAAY;QACpB,gBAAgB;QAChB,IAAI;KACL,CAAC,CAAC;IAEH,gDAAgD;IAChD,IAAI,YAAY,GAAG,KAAK,CAAC;IACzB,MAAM,QAAQ,GAAG,KAAK,IAAmB,EAAE;QACzC,IAAI,YAAY;YAAE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,4BAA4B;QAC/D,YAAY,GAAG,IAAI,CAAC;QACpB,MAAM,MAAM,CAAC,QAAQ,EAAE,CAAC;QACxB,MAAM,CAAC,QAAQ,EAAE,CAAC;QAClB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC,CAAC;IACF,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,KAAK,QAAQ,EAAE,CAAC,CAAC;IAC5C,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,KAAK,QAAQ,EAAE,CAAC,CAAC;IAE7C,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,mCAAmC,IAAI,CAAC,IAAI,QAAQ,CAAC,CAAC;IAC3E,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,yBAAyB,CAAC,CAAC;IAEhD,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;AACvB,CAAC"}

package/dist/signal/format.d.ts

@@ -49,3 +49,30 @@ export declare function formatSessionList(sessions: SessionListEntry[], currentL
  * Prefixes a message with `[#N]` when multiple sessions are active.
  */
 export declare function prefixWithLabel(text: string, label: number, sessionCount: number): string;
+/**
+ * Information about a scheduled job for display in Signal.
+ * Dates are ISO strings (serialized by the control socket).
+ */
+export interface JobListEntry {
+    readonly job: {
+        readonly id: string;
+        readonly name: string;
+        readonly schedule: string;
+        readonly enabled: boolean;
+    };
+    readonly nextRun: string | null;
+    readonly lastRun: {
+        readonly outcome: {
+            readonly kind: string;
+            readonly message?: string;
+            readonly dimension?: string;
+        };
+        readonly startedAt: string;
+    } | undefined;
+    readonly isRunning: boolean;
+}
+/**
+ * Formats the /jobs command output.
+ * Shows each job with schedule, status, next run, and last run outcome.
+ */
+export declare function formatJobList(jobs: JobListEntry[]): string;