@qodeca/xezar 0.11.1 → 0.13.0

package/README.md

@@ -97,7 +97,7 @@ and an orchestrator keeps a whole queue of them moving.
   **orchestrates** them: it runs up to your parallel limit and holds the rest in
   an ordered queue. Point it at a GitHub issue and it runs straight on that, so
   working the tracker down stops being a manual chore. Turn on the opt-in
-  **Inbox** (`XEZ_FOLLOWUPS=1`) and an agent's leftover follow-ups become the
+  **Inbox** (Settings → Resources, or `XEZ_FOLLOWUPS=1`) and an agent's leftover follow-ups become the
   next tasks too — one click each.
 - 🤖 **"Autonomous" means you still have to sit there.** Flip the **Autonomous**
   flag and a run never parks to ask — it keeps going until the task is done. Pair
@@ -269,18 +269,22 @@ Five moves that make the cockpit worth the browser tab:
   everything still `queued` is re-enqueued in order. It's the orchestration layer
   that turns "one agent at a time" into a backlog that drains itself.
 - 🧠 **Memory-aware runs.** Each run's whole process tree is sampled (~2 s) for CPU
-  and RSS, and its **peak memory** is recorded and shown in the task table. Set an
-  optional per-task **memory ceiling** (`memoryLimitMb`) and a run that crosses it
-  is *paused* — freeing its tree so the queue keeps advancing — and resumes on
-  demand. Event logs are append-only NDJSON and streamed rather than re-serialized,
+  and RSS, and its **peak memory** is recorded and shown in the task table. The
+  per-task **memory ceiling** (`memoryLimitMb`) is **on out of the box**: with no
+  setting at all xezar derives a host-sized ceiling from your machine's RAM, and a
+  run that crosses it is *paused* — freeing its tree so the queue keeps advancing —
+  and resumes on demand. Adjust it in **Settings → Resources**; an explicit
+  `"memoryLimitMb": null` still means *no limit*, and a repo that sets its own value
+  overrides the workspace ceiling for its own runs. Event logs are append-only NDJSON and streamed rather than re-serialized,
   and live UI deltas are coalesced so they never hit disk.
 - 🪞 **Parallel variants (×2 / ×3).** Run the same task as competing agents in
   separate worktrees, then compare their diffs side by side and **pick** one —
   the losers are archived and their worktrees cleaned up.
 - 🧹 **Bounded worktree disk.** By default each git task runs in its own full checkout, so a busy
   cockpit would otherwise grow without limit. xezar keeps only the last
-  `worktreeRetention` **finished** worktrees on disk (default **10**; `0` =
-  unlimited) and reclaims the rest — directory only, the `xez/<id8>` branch is
+  `worktreeRetention` **finished** worktrees on disk (default **10**, itself a
+  workspace setting — `resources.worktreeRetentionDefault`, which every project
+  without its own value inherits; `0` = unlimited) and reclaims the rest — directory only, the `xez/<id8>` branch is
   always kept, so the work stays recoverable. Settings → Resources shows every
   worktree's disk use with per-row delete and a **Reclaim now** button.
 - 🛡️ **Review gate (optional, off by default).** Turn it on in Settings → Agents
@@ -300,15 +304,16 @@ Five moves that make the cockpit worth the browser tab:
 
 ## Cockpit tour
 
-Eight views, one browser window, all live over Server-Sent Events (seven until you opt into the Inbox):
+Nine views, one browser window, all live over Server-Sent Events (seven by default — the Inbox and Automations are each opt-in):
 
 | View | What's in it |
 |---|---|
-| **Tasks** | Every task with its status, live event stream (agent text · tool calls · tool results · pasted/generated screenshots and file attachments), tokens and cost. Continue, cancel, open in terminal (`claude --resume`), review the diff, or push a draft PR. |
+| **Tasks** | Every task with its status, the tool and model it ran on, live event stream (agent text · tool calls · tool results · pasted/generated screenshots and file attachments), tokens and cost. Continue, cancel, open in terminal (`claude --resume`), review the diff, or push a draft PR. |
 | **All tasks** | Every *registered project's* tasks in one table, filtered and grouped by tag, project, status or workflow — see [Grouping connected repositories](#grouping-connected-repositories-tags-and-the-all-tasks-page). Appears once a second project is registered. |
-| **Inbox** | **Opt-in** (`XEZ_FOLLOWUPS=1`; hidden by default). Follow-ups an agent left behind (`todos.json`) — one click turns a suggestion into the next task, pre-wired to its suggested skill. Off, agents are never asked to leave follow-ups; each task's own **Notes** handoff journal is unaffected. |
+| **Inbox** | **Opt-in**, hidden by default. Turn it on in **Settings → Resources** (the stored choice wins and needs no restart) or start with `XEZ_FOLLOWUPS=1`. Follow-ups an agent left behind (`todos.json`) — one click turns a suggestion into the next task, pre-wired to its suggested skill. Off, agents are never asked to leave follow-ups; each task's own **Notes** handoff journal is unaffected. |
 | **Git** | Branch, working-tree status, diff vs HEAD, recent commits (click one for its inline patch + GitHub link), and the configurable base branch that worktrees fork from and PRs target. |
 | **GitHub** | Open issues and PRs of the repo's origin, read through your logged-in `gh`. Hand an issue straight to the agent — pick a workflow and skills, one click runs it. |
+| **Automations** | **Opt-in** (`XEZ_AUTOMATIONS=1`; hidden by default). Scheduled GitHub watches: each automation polls on its own interval and launches a task when its bounded filter matches. Test a filter before enabling it, and read the per-check log. |
 | **Skills** | Local skills plus the team skills repo, with a rendered body + prompt preview. Refresh pulls the latest from the remote. |
 | **Workflows** | Build a chain by drag-ordering skills, save it as portable YAML, import/export, or delete. Built-ins always come back. |
 | **Settings** | Appearance (dark/light theme, accent, density), agent backends, notifications, and the skills catalog. |
@@ -325,7 +330,7 @@ a GitHub page.
 One `xezar serve` hosts **every repo you work in**, not just the one you started
 it in. Each repo xezar boots in registers itself in a per-user registry at
 `~/.xezar/config.json` — the workspace file that also holds the global knobs
-(the parallel cap, the memory ceiling, the browse root, and the checkout root). Nothing is added to
+(the parallel cap, the memory ceiling, the idle timeout, the default worktree retention, the Inbox switch, the agent env passthrough list, the browse root, and the checkout root). Nothing is added to
 the repo: per-project state stays exactly where it was, in that repo's
 `.local/xezar/`.
 
@@ -463,6 +468,7 @@ steps:
     # model: opus                # optional per-step model override
     # runner: codex              # optional per-step backend: claude · codex · opencode · pi
     # allowedTools: [Read, Edit, Write, Grep, Glob, Bash]
+    # timeout: 90m               # optional per-step wall clock: 45s · 90m · 2h · none
   - id: verify
     name: Verify
     command: "npm test"          # a check step: exit 0 passes
@@ -475,6 +481,34 @@ steps:
 back, its failing output is appended to the retried agent's prompt so the next
 attempt can see what broke.
 
+### How long a step may run
+
+Every agent step has a wall clock. Leave `timeout` out and nothing changes: the
+workflow's **last** step stays open for your follow-ups with no cap, and every
+**earlier** agent step is killed after **30 minutes** — which is fine for a
+review or a docs pass, and too short for a long investigate-and-implement step.
+`timeout` is how that step asks for more:
+
+```yaml
+  - id: investigate
+    prompt: "{{task}}"
+    timeout: 3h                  # this step only
+```
+
+- `45s`, `90m`, `2h` — whole numbers with `s`, `m` or `h`. Nothing else parses:
+  `90 minutes`, `1.5h` and `30d` are load-time errors, and so is `0s` (say
+  `none` if you mean no cap). The ceiling is `596h`, where Node's own timer
+  stops being able to count.
+- `none` — no wall clock at all. The step ends when the agent ends.
+- The field belongs to an **agent** step. A check step is a shell command, and
+  putting `timeout` on one is a load-time error rather than a key that quietly
+  does nothing.
+
+**All four backends honour it.** `claude`, `codex`, `opencode` and `pi` each arm
+the deadline from the same per-step value; on `claude`, `codex` and `pi` a step
+that overruns is interrupted and then `SIGKILL`ed after a short grace period,
+while `opencode` interrupts and waits for the session to close.
+
 Prefer skills over steps? A workflow can also be written in the portable
 shorthand — an ordered list of skill names, each becoming one agent step:
 
@@ -507,7 +541,7 @@ Useful environment variables:
 | `XEZ_DRY_RUN=1` | Use the bundled mock instead of the real `claude` CLI — the entire cockpit works offline, for demos and development. |
 | `XEZ_AGENT_MODELS_LOCKED=1` | Globally lock each runner to the model configured in its native Claude/Codex/OpenCode settings while keeping runner selection available. Exact `1` also delegates authentication and provider enablement to those native agents, so Xezar skips its credential probes and provider-disable preferences. Existing Xezar presets are preserved but ignored, and an environment change requires a restart. The config-file equivalent is `"modelsLocked": true` in global `~/.xezar/config.json` or one repository's `.xezar/config.json`; config-file locks do not disable provider checks. |
 | `XEZ_APPROVAL_GATE=1` | Opt into Claude's interactive approval UI; by default, unapproved tools are denied without interrupting the run. |
-| `XEZ_FOLLOWUPS=1` | Turn on the global follow-up **Inbox**: agents are asked to leave follow-ups in `todos.json` when they finish, and the Inbox view appears. Off by default — each task's own **Notes** handoff journal runs either way. |
+| `XEZ_FOLLOWUPS=1` | Turn on the global follow-up **Inbox**: agents are asked to leave follow-ups in `todos.json` when they finish, and the Inbox view appears. Off by default — each task's own **Notes** handoff journal runs either way. The Settings → Resources toggle overrides this default and needs no restart. |
 | `XEZ_AUTOMATIONS=1` | Turn on **GitHub automations**: the Automations view appears and xezar polls GitHub on each enabled automation's interval, launching tasks from what it finds. Off by default, and only the exact value `1` enables it — without it nothing polls GitHub, the automations endpoints answer `409`, and the nav item is absent. Read at boot, so restart after changing it; definitions, receipts and high-watermarks are retained, so unsetting it and restarting restores the feature without migration or data loss. |
 | `XEZ_AUTOSAVE=1` | Re-enable the periodic (90 s) autosave commit in task worktrees. Off by default (#471) — turn-end and pre-PR flushes always run, so branches still end complete. Every autosave names its trigger in the commit subject (`xezar autosave (periodic)` vs `(turn end)` / `(run finalize)` / `(pre-PR)`), so the flushes you keep are distinguishable from the timer you disabled. |
 | `XEZ_CLAUDE_BIN=/path/to/claude` | Override which `claude` binary is used. |
@@ -527,7 +561,7 @@ Useful environment variables:
 | `XEZ_HIDE_COST=1` | Hide backend-reported monetary cost throughout the browser cockpit while leaving raw input/output token counts visible. Only the exact value `1` enables it; telemetry and API payloads are unchanged, and a restart is required after changing it. |
 | `XEZ_HIDE_TOKEN_METRICS=1` | Legacy master switch that hides both token usage and cost. It takes precedence over the two independent flags; only the exact value `1` enables it, payloads are unchanged, and a restart is required. |
 | `GITHUB_TOKEN` | Fallback for GitHub reads/PRs when `gh` isn't authenticated. |
-| `XEZ_ENV_PASSTHROUGH=A,B` | Forward these extra host env vars to spawned agents. By default agents get a least-privilege env (safe shell/toolchain vars + the backend's own auth + `GITHUB_TOKEN` + `XEZ_*`), not your full environment — use this to add a var an agent needs. |
+| `XEZ_ENV_PASSTHROUGH=A,B` | Forward these extra host env vars to spawned agents. By default agents get a least-privilege env (safe shell/toolchain vars + the backend's own auth + `GITHUB_TOKEN` + `XEZ_*`), not your full environment — use this to add a var an agent needs. The Settings → Resources control overrides this default and needs no restart. |
 | `XEZ_AGENT_ENV_FULL=1` | Escape hatch: give spawned agents the full host environment (pre-hardening behavior). Off by default; only set it if you understand that this hands every host secret to the agent process. |
 | `XEZ_AGENT_TMPDIR=0` | Stop giving each task its own temp directory and hand agents the host `TMPDIR` again (pre-#785 behavior). On by default: every run gets `TMPDIR`/`TEMP`/`TMP` pointing at `.local/xezar/tmp/<task-id>`, created and write-probed before the agent spawns and reaped when the run ends, so concurrent tasks stop sharing one directory and a task refuses to start rather than run against a temp directory that silently swallows its shell output (see Troubleshooting below). Only an exact `0` disables it, and it disables the whole thing — the pre-spawn check included, so this stays an escape hatch you can actually take. |
 | `XEZ_REDACT_SECRETS=0` | Disable scrubbing of credential values/token shapes from the on-disk state (the NDJSON transcript and the free-text fields of `runs.json`). On by default; leave it on. Best-effort defense-in-depth, not a guarantee: it catches known token shapes and the values of your own secret-named env vars, so a credential in neither category can still get through. |
@@ -602,6 +636,27 @@ host-local catalog yet, always shows its built-in entries. `auto` — send no
 model at all and let the CLI decide — is always available, and a model you
 pinned by hand stays selectable even when it is no longer advertised.
 
+**OpenCode connection checks include native model configuration.** A LAN/local
+provider can be configured without stored login credentials. When
+`opencode auth list` reports no stored or environment credentials, xezar also
+runs `opencode models`:
+
+- A successful listing with a recognized `provider/model` marks OpenCode as
+  configured. Connect recognizes that state without opening a login terminal.
+  The Providers card says **Configured**, rather than **Credentials found**.
+- A successful empty listing leaves OpenCode **Not connected**. Connect opens
+  `opencode auth login` to configure credentials.
+- A failed, unrecognized or timed-out listing reports **Could not verify**,
+  rather than assuming login is needed. Each CLI probe has a ten-second timeout.
+
+If OpenCode works directly but xezar asks you to connect, compare
+`opencode auth list` and `opencode models` from the same project directory and
+environment used by xezar. Zero credentials alone does not mean a local provider
+needs login. A model listing establishes configuration, not endpoint health or
+successful inference; an authentication rejection from an actual task still
+overrides the probe result and requires attention. Xezar does not add credentials
+or change OpenCode's provider configuration during these checks.
+
 **Pick a backend at three levels** (most specific wins):
 
 1. **Config default** — `"defaultRunner": "codex"` in `.xezar/config.json`.
@@ -718,12 +773,24 @@ Run data (`runs.json`, NDJSON event logs, worktrees, `todos.json`) is
 git-ignored automatically; your workflows and skills stay committable.
 
 Settings that belong to *you* rather than to a repo — the parallel cap
-(`maxParallel`, default **2**), the per-task memory ceiling and the checkout
-root — live once in `~/.xezar/config.json`, alongside the
+(`maxParallel`, default **2**), the per-task memory ceiling, the **idle timeout**
+(`idleTimeoutMinutes`, default **15**), the default worktree retention
+(`worktreeRetentionDefault`), the Inbox switch and the agent env passthrough list,
+and the checkout root — live once in `~/.xezar/config.json`, alongside the
 [project registry](#multiple-projects-one-cockpit), and are edited from
-**Settings → Resources** and **Settings → Projects**. A `maxParallel` left over
-in a repo's `.xezar/config.json` is imported into the workspace file the
-first time xezar boots there, and ignored afterwards.
+**Settings → Resources** and **Settings → Projects**.
+
+The idle timeout is how long a task parked at `waiting` keeps its agent session
+alive with nobody talking to it. After it expires the session is closed. Set it to
+**Never** if you run long interactive sessions and would rather keep them — a
+waiting task holds no parallel-task slot, so your queue keeps moving either way,
+but its agent process stays alive and keeps using memory until you send it a
+message or cancel it.
+
+A `maxParallel` left over in a repo's `.xezar/config.json` is imported into the
+workspace file the first time xezar boots there, and ignored afterwards. A per-repo
+`memoryLimitMb` behaves differently on purpose: it is still honoured, and overrides
+the workspace ceiling for runs in that repo.
 
 ### Editing the agents' own config (Settings → Agent config)
 
@@ -819,6 +886,11 @@ npm run test:package # pack/install and exercise the built CLI
 npm run test:e2e     # real-browser cockpit suite (agent-browser)
 ```
 
+Coverage is measured separately, and is not part of the validation gate:
+`npm run test:coverage` runs the vitest suites under the v8 provider and writes line and branch
+numbers to `.local/coverage/`. The behaviour-led gap analysis built from it lives in
+[docs/testing/coverage-gaps.md](docs/testing/coverage-gaps.md).
+
 The stack is deliberately small: **TypeScript** (strict, ESM), **Hono** + SSE for
 the server, **Zod** at every boundary, **YAML** for workflows, and a **React 19 +
 Vite + Tailwind v4 + shadcn/ui** cockpit shipped pre-built in `packages/xezar/web/dist/` — the

package/dist/agent-config/catalog.d.ts

@@ -28,6 +28,16 @@ export interface AgentHomePaths {
     codex: string;
     /** `$XDG_CONFIG_HOME/opencode` or `~/.config/opencode` */
     opencodeConfig: string;
+    /**
+     * `~/.pi/agent` — pi's whole per-user directory (`models.json`, `settings.json`, and the
+     * `auth.json` xezar never reads). No vendor variable relocates it (verified against pi 0.85.1,
+     * 2026-09-10), which is why this slot carries no `env.` alternative the way the three above do.
+     *
+     * `CONFIG_FILES` lists no pi entry yet, so nothing in the raw config editor resolves through
+     * this slot today; model discovery (#152) does, and it lives here so pi's home is derived in
+     * the one place every other agent's is.
+     */
+    pi: string;
 }
 export interface ConfigFileDef {
     /** Stable, opaque, URL-safe. The ONLY thing a client may name (traversal-proof). */

package/dist/agent-config/catalog.js.map

@@ -1 +1 @@
-{"version":3,"file":"catalog.js","sourceRoot":"","sources":["../../src/agent-config/catalog.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAoEjC,MAAM,oBAAoB,GAAG,0CAA0C,CAAC;AACxE,MAAM,kBAAkB,GAAG,wCAAwC,CAAC;AACpE,MAAM,eAAe,GAAG,qCAAqC,CAAC;AAC9D,MAAM,iBAAiB,GAAG,sDAAsD,CAAC;AACjF,MAAM,iBAAiB,GAAG,sDAAsD,CAAC;AACjF,MAAM,oBAAoB,GAAG,kCAAkC,CAAC;AAChE,MAAM,mBAAmB,GAAG,iCAAiC,CAAC;AAE9D;;;GAGG;AACH,MAAM,CAAC,MAAM,YAAY,GAAoB;IAC3C,wBAAwB;IACxB;QACE,EAAE,EAAE,sBAAsB;QAC1B,OAAO,EAAE,CAAC,QAAQ,CAAC;QACnB,IAAI,EAAE,UAAU;QAChB,KAAK,EAAE,MAAM;QACb,OAAO,EAAE,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,eAAe,CAAC;QAC5D,KAAK,EAAE,yBAAyB;QAChC,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,cAAc;QACvB,QAAQ,EAAE,OAAO;QACjB,SAAS,EAAE,CAAC,qBAAqB,EAAE,OAAO,CAAC;QAC3C,aAAa,EAAE,CAAC;QAChB,UAAU,EACR,8HAA8H;QAChI,SAAS,EAAE,sGAAsG;QACjH,OAAO,EAAE,oBAAoB;KAC9B;IACD;QACE,EAAE,EAAE,yBAAyB;QAC7B,OAAO,EAAE,CAAC,QAAQ,CAAC;QACnB,IAAI,EAAE,UAAU;QAChB,KAAK,EAAE,SAAS;QAChB,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,eAAe,CAAC;QACzD,KAAK,EAAE,uBAAuB;QAC9B,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,SAAS;QAClB,QAAQ,EAAE,OAAO;QACjB,SAAS,EAAE,CAAC,qBAAqB,EAAE,OAAO,CAAC;QAC3C,aAAa,EAAE,CAAC;QAChB,UAAU,EACR,4FAA4F;QAC9F,SAAS,EAAE,sGAAsG;QACjH,OAAO,EAAE,oBAAoB;KAC9B;IACD;QACE,EAAE,EAAE,uBAAuB;QAC3B,OAAO,EAAE,CAAC,QAAQ,CAAC;QACnB,IAAI,EAAE,UAAU;QAChB,KAAK,EAAE,OAAO;QACd,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,qBAAqB,CAAC;QAC/D,KAAK,EAAE,6BAA6B;QACpC,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,YAAY;QACrB,MAAM,EAAE,IAAI;QACZ,QAAQ,EAAE,OAAO;QACjB,SAAS,EAAE,CAAC,qBAAqB,EAAE,OAAO,CAAC;QAC3C,aAAa,EAAE,CAAC;QAChB,UAAU,EACR,gKAAgK;QAClK,SAAS,EAAE,sGAAsG;QACjH,OAAO,EAAE,oBAAoB;KAC9B;IACD;QACE,EAAE,EAAE,oBAAoB;QACxB,OAAO,EAAE,CAAC,QAAQ,CAAC;QACnB,IAAI,EAAE,KAAK;QACX,KAAK,EAAE,SAAS;QAChB,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,WAAW,CAAC;QAC1C,KAAK,EAAE,WAAW;QAClB,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,SAAS;QAClB,QAAQ,EAAE,IAAI;QACd,UAAU,EACR,gMAAgM;QAClM,OAAO,EAAE,eAAe;KACzB;IACD;QACE,EAAE,EAAE,oBAAoB;QACxB,OAAO,EAAE,CAAC,QAAQ,CAAC;QACnB,IAAI,EAAE,QAAQ;QACd,KAAK,EAAE,MAAM;QACb,OAAO,EAAE,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,WAAW,CAAC;QACxD,KAAK,EAAE,qBAAqB;QAC5B,MAAM,EAAE,UAAU;QAClB,OAAO,EAAE,cAAc;QACvB,UAAU,EAAE,oFAAoF;QAChG,OAAO,EAAE,kBAAkB;KAC5B;IACD;QACE,EAAE,EAAE,uBAAuB;QAC3B,OAAO,EAAE,CAAC,QAAQ,CAAC;QACnB,IAAI,EAAE,QAAQ;QACd,KAAK,EAAE,SAAS;QAChB,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,WAAW,CAAC;QAC1C,KAAK,EAAE,WAAW;QAClB,MAAM,EAAE,UAAU;QAClB,OAAO,EAAE,SAAS;QAClB,UAAU,EACR,oJAAoJ;QACtJ,OAAO,EAAE,kBAAkB;KAC5B;IACD;QACE,EAAE,EAAE,qBAAqB;QACzB,OAAO,EAAE,CAAC,QAAQ,CAAC;QACnB,IAAI,EAAE,QAAQ;QACd,KAAK,EAAE,OAAO;QACd,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,iBAAiB,CAAC;QAChD,KAAK,EAAE,iBAAiB;QACxB,MAAM,EAAE,UAAU;QAClB,OAAO,EAAE,YAAY;QACrB,MAAM,EAAE,IAAI;QACZ,UAAU,EACR,4HAA4H;QAC9H,OAAO,EAAE,kBAAkB;KAC5B;IAED,kBAAkB;IAClB;QACE,EAAE,EAAE,mBAAmB;QACvB,OAAO,EAAE,CAAC,OAAO,CAAC;QAClB,IAAI,EAAE,UAAU;QAChB,KAAK,EAAE,MAAM;QACb,OAAO,EAAE,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,aAAa,CAAC;QACzD,KAAK,EAAE,sBAAsB;QAC7B,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,cAAc;QACvB,QAAQ,EAAE,IAAI;QACd,QAAQ,EAAE,OAAO;QACjB,gBAAgB,EAAE,gBAAgB;QAClC,aAAa,EAAE,CAAC;QAChB,UAAU,EACR,2MAA2M;QAC7M,OAAO,EAAE,iBAAiB;KAC3B;IACD;QACE,EAAE,EAAE,sBAAsB;QAC1B,OAAO,EAAE,CAAC,OAAO,CAAC;QAClB,IAAI,EAAE,UAAU;QAChB,KAAK,EAAE,SAAS;QAChB,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,EAAE,aAAa,CAAC;QACtD,KAAK,EAAE,oBAAoB;QAC3B,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,SAAS;QAClB,QAAQ,EAAE,OAAO;QACjB,aAAa,EAAE,CAAC;QAChB,QAAQ,EAAE,IAAI;QACd,UAAU,EACR,oLAAoL;QACtL,OAAO,EAAE,iBAAiB;KAC3B;IACD;QACE,EAAE,EAAE,mBAAmB;QACvB,OAAO,EAAE,CAAC,OAAO,CAAC;QAClB,IAAI,EAAE,QAAQ;QACd,KAAK,EAAE,MAAM;QACb,OAAO,EAAE,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,WAAW,CAAC;QACvD,KAAK,EAAE,oBAAoB;QAC3B,MAAM,EAAE,UAAU;QAClB,OAAO,EAAE,cAAc;QACvB,UAAU,EACR,oJAAoJ;QACtJ,OAAO,EAAE,iBAAiB;KAC3B;IAED,qBAAqB;IACrB;QACE,EAAE,EAAE,sBAAsB;QAC1B,OAAO,EAAE,CAAC,UAAU,CAAC;QACrB,IAAI,EAAE,UAAU;QAChB,KAAK,EAAE,MAAM;QACb,OAAO,EAAE,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,eAAe,CAAC;QACpE,KAAK,EAAE,kCAAkC;QACzC,MAAM,EAAE,OAAO;QACf,OAAO,EAAE,cAAc;QACvB,QAAQ,EAAE,IAAI;QACd,QAAQ,EAAE,OAAO;QACjB,aAAa,EAAE,CAAC;QAChB,UAAU,EACR,oKAAoK;QACtK,OAAO,EAAE,oBAAoB;KAC9B;IACD;QACE,EAAE,EAAE,yBAAyB;QAC7B,OAAO,EAAE,CAAC,UAAU,CAAC;QACrB,IAAI,EAAE,UAAU;QAChB,KAAK,EAAE,SAAS;QAChB,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,eAAe,CAAC;QAC9C,KAAK,EAAE,eAAe;QACtB,MAAM,EAAE,OAAO;QACf,OAAO,EAAE,SAAS;QAClB,QAAQ,EAAE,IAAI;QACd,QAAQ,EAAE,OAAO;QACjB,aAAa,EAAE,CAAC;QAChB,UAAU,EACR,kJAAkJ;QACpJ,OAAO,EAAE,oBAAoB;KAC9B;IACD;QACE,EAAE,EAAE,sBAAsB;QAC1B,OAAO,EAAE,CAAC,UAAU,CAAC;QACrB,IAAI,EAAE,QAAQ;QACd,KAAK,EAAE,MAAM;QACb,OAAO,EAAE,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,WAAW,CAAC;QAChE,KAAK,EAAE,8BAA8B;QACrC,MAAM,EAAE,UAAU;QAClB,OAAO,EAAE,cAAc;QACvB,UAAU,EACR,mHAAmH;QACrH,OAAO,EAAE,mBAAmB;KAC7B;IAED,wEAAwE;IACxE;QACE,EAAE,EAAE,gBAAgB;QACpB,OAAO,EAAE,CAAC,OAAO,EAAE,UAAU,CAAC;QAC9B,IAAI,EAAE,QAAQ;QACd,KAAK,EAAE,SAAS;QAChB,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,WAAW,CAAC;QAC1C,KAAK,EAAE,WAAW;QAClB,MAAM,EAAE,UAAU;QAClB,OAAO,EAAE,SAAS;QAClB,UAAU,EACR,6KAA6K;QAC/K,OAAO,EAAE,mBAAmB;KAC7B;CACF,CAAC;AAEF,yBAAyB;AACzB,MAAM,UAAU,eAAe;IAC7B,OAAO,YAAY,CAAC;AACtB,CAAC;AAED,+EAA+E;AAC/E,MAAM,UAAU,cAAc,CAAC,EAAU;IACvC,OAAO,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;AAC/C,CAAC"}
+{"version":3,"file":"catalog.js","sourceRoot":"","sources":["../../src/agent-config/catalog.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AA8EjC,MAAM,oBAAoB,GAAG,0CAA0C,CAAC;AACxE,MAAM,kBAAkB,GAAG,wCAAwC,CAAC;AACpE,MAAM,eAAe,GAAG,qCAAqC,CAAC;AAC9D,MAAM,iBAAiB,GAAG,sDAAsD,CAAC;AACjF,MAAM,iBAAiB,GAAG,sDAAsD,CAAC;AACjF,MAAM,oBAAoB,GAAG,kCAAkC,CAAC;AAChE,MAAM,mBAAmB,GAAG,iCAAiC,CAAC;AAE9D;;;GAGG;AACH,MAAM,CAAC,MAAM,YAAY,GAAoB;IAC3C,wBAAwB;IACxB;QACE,EAAE,EAAE,sBAAsB;QAC1B,OAAO,EAAE,CAAC,QAAQ,CAAC;QACnB,IAAI,EAAE,UAAU;QAChB,KAAK,EAAE,MAAM;QACb,OAAO,EAAE,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,eAAe,CAAC;QAC5D,KAAK,EAAE,yBAAyB;QAChC,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,cAAc;QACvB,QAAQ,EAAE,OAAO;QACjB,SAAS,EAAE,CAAC,qBAAqB,EAAE,OAAO,CAAC;QAC3C,aAAa,EAAE,CAAC;QAChB,UAAU,EACR,8HAA8H;QAChI,SAAS,EAAE,sGAAsG;QACjH,OAAO,EAAE,oBAAoB;KAC9B;IACD;QACE,EAAE,EAAE,yBAAyB;QAC7B,OAAO,EAAE,CAAC,QAAQ,CAAC;QACnB,IAAI,EAAE,UAAU;QAChB,KAAK,EAAE,SAAS;QAChB,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,eAAe,CAAC;QACzD,KAAK,EAAE,uBAAuB;QAC9B,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,SAAS;QAClB,QAAQ,EAAE,OAAO;QACjB,SAAS,EAAE,CAAC,qBAAqB,EAAE,OAAO,CAAC;QAC3C,aAAa,EAAE,CAAC;QAChB,UAAU,EACR,4FAA4F;QAC9F,SAAS,EAAE,sGAAsG;QACjH,OAAO,EAAE,oBAAoB;KAC9B;IACD;QACE,EAAE,EAAE,uBAAuB;QAC3B,OAAO,EAAE,CAAC,QAAQ,CAAC;QACnB,IAAI,EAAE,UAAU;QAChB,KAAK,EAAE,OAAO;QACd,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,qBAAqB,CAAC;QAC/D,KAAK,EAAE,6BAA6B;QACpC,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,YAAY;QACrB,MAAM,EAAE,IAAI;QACZ,QAAQ,EAAE,OAAO;QACjB,SAAS,EAAE,CAAC,qBAAqB,EAAE,OAAO,CAAC;QAC3C,aAAa,EAAE,CAAC;QAChB,UAAU,EACR,gKAAgK;QAClK,SAAS,EAAE,sGAAsG;QACjH,OAAO,EAAE,oBAAoB;KAC9B;IACD;QACE,EAAE,EAAE,oBAAoB;QACxB,OAAO,EAAE,CAAC,QAAQ,CAAC;QACnB,IAAI,EAAE,KAAK;QACX,KAAK,EAAE,SAAS;QAChB,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,WAAW,CAAC;QAC1C,KAAK,EAAE,WAAW;QAClB,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,SAAS;QAClB,QAAQ,EAAE,IAAI;QACd,UAAU,EACR,gMAAgM;QAClM,OAAO,EAAE,eAAe;KACzB;IACD;QACE,EAAE,EAAE,oBAAoB;QACxB,OAAO,EAAE,CAAC,QAAQ,CAAC;QACnB,IAAI,EAAE,QAAQ;QACd,KAAK,EAAE,MAAM;QACb,OAAO,EAAE,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,WAAW,CAAC;QACxD,KAAK,EAAE,qBAAqB;QAC5B,MAAM,EAAE,UAAU;QAClB,OAAO,EAAE,cAAc;QACvB,UAAU,EAAE,oFAAoF;QAChG,OAAO,EAAE,kBAAkB;KAC5B;IACD;QACE,EAAE,EAAE,uBAAuB;QAC3B,OAAO,EAAE,CAAC,QAAQ,CAAC;QACnB,IAAI,EAAE,QAAQ;QACd,KAAK,EAAE,SAAS;QAChB,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,WAAW,CAAC;QAC1C,KAAK,EAAE,WAAW;QAClB,MAAM,EAAE,UAAU;QAClB,OAAO,EAAE,SAAS;QAClB,UAAU,EACR,oJAAoJ;QACtJ,OAAO,EAAE,kBAAkB;KAC5B;IACD;QACE,EAAE,EAAE,qBAAqB;QACzB,OAAO,EAAE,CAAC,QAAQ,CAAC;QACnB,IAAI,EAAE,QAAQ;QACd,KAAK,EAAE,OAAO;QACd,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,iBAAiB,CAAC;QAChD,KAAK,EAAE,iBAAiB;QACxB,MAAM,EAAE,UAAU;QAClB,OAAO,EAAE,YAAY;QACrB,MAAM,EAAE,IAAI;QACZ,UAAU,EACR,4HAA4H;QAC9H,OAAO,EAAE,kBAAkB;KAC5B;IAED,kBAAkB;IAClB;QACE,EAAE,EAAE,mBAAmB;QACvB,OAAO,EAAE,CAAC,OAAO,CAAC;QAClB,IAAI,EAAE,UAAU;QAChB,KAAK,EAAE,MAAM;QACb,OAAO,EAAE,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,aAAa,CAAC;QACzD,KAAK,EAAE,sBAAsB;QAC7B,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,cAAc;QACvB,QAAQ,EAAE,IAAI;QACd,QAAQ,EAAE,OAAO;QACjB,gBAAgB,EAAE,gBAAgB;QAClC,aAAa,EAAE,CAAC;QAChB,UAAU,EACR,2MAA2M;QAC7M,OAAO,EAAE,iBAAiB;KAC3B;IACD;QACE,EAAE,EAAE,sBAAsB;QAC1B,OAAO,EAAE,CAAC,OAAO,CAAC;QAClB,IAAI,EAAE,UAAU;QAChB,KAAK,EAAE,SAAS;QAChB,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,EAAE,aAAa,CAAC;QACtD,KAAK,EAAE,oBAAoB;QAC3B,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,SAAS;QAClB,QAAQ,EAAE,OAAO;QACjB,aAAa,EAAE,CAAC;QAChB,QAAQ,EAAE,IAAI;QACd,UAAU,EACR,oLAAoL;QACtL,OAAO,EAAE,iBAAiB;KAC3B;IACD;QACE,EAAE,EAAE,mBAAmB;QACvB,OAAO,EAAE,CAAC,OAAO,CAAC;QAClB,IAAI,EAAE,QAAQ;QACd,KAAK,EAAE,MAAM;QACb,OAAO,EAAE,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,WAAW,CAAC;QACvD,KAAK,EAAE,oBAAoB;QAC3B,MAAM,EAAE,UAAU;QAClB,OAAO,EAAE,cAAc;QACvB,UAAU,EACR,oJAAoJ;QACtJ,OAAO,EAAE,iBAAiB;KAC3B;IAED,qBAAqB;IACrB;QACE,EAAE,EAAE,sBAAsB;QAC1B,OAAO,EAAE,CAAC,UAAU,CAAC;QACrB,IAAI,EAAE,UAAU;QAChB,KAAK,EAAE,MAAM;QACb,OAAO,EAAE,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,eAAe,CAAC;QACpE,KAAK,EAAE,kCAAkC;QACzC,MAAM,EAAE,OAAO;QACf,OAAO,EAAE,cAAc;QACvB,QAAQ,EAAE,IAAI;QACd,QAAQ,EAAE,OAAO;QACjB,aAAa,EAAE,CAAC;QAChB,UAAU,EACR,oKAAoK;QACtK,OAAO,EAAE,oBAAoB;KAC9B;IACD;QACE,EAAE,EAAE,yBAAyB;QAC7B,OAAO,EAAE,CAAC,UAAU,CAAC;QACrB,IAAI,EAAE,UAAU;QAChB,KAAK,EAAE,SAAS;QAChB,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,eAAe,CAAC;QAC9C,KAAK,EAAE,eAAe;QACtB,MAAM,EAAE,OAAO;QACf,OAAO,EAAE,SAAS;QAClB,QAAQ,EAAE,IAAI;QACd,QAAQ,EAAE,OAAO;QACjB,aAAa,EAAE,CAAC;QAChB,UAAU,EACR,kJAAkJ;QACpJ,OAAO,EAAE,oBAAoB;KAC9B;IACD;QACE,EAAE,EAAE,sBAAsB;QAC1B,OAAO,EAAE,CAAC,UAAU,CAAC;QACrB,IAAI,EAAE,QAAQ;QACd,KAAK,EAAE,MAAM;QACb,OAAO,EAAE,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,WAAW,CAAC;QAChE,KAAK,EAAE,8BAA8B;QACrC,MAAM,EAAE,UAAU;QAClB,OAAO,EAAE,cAAc;QACvB,UAAU,EACR,mHAAmH;QACrH,OAAO,EAAE,mBAAmB;KAC7B;IAED,wEAAwE;IACxE;QACE,EAAE,EAAE,gBAAgB;QACpB,OAAO,EAAE,CAAC,OAAO,EAAE,UAAU,CAAC;QAC9B,IAAI,EAAE,QAAQ;QACd,KAAK,EAAE,SAAS;QAChB,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,WAAW,CAAC;QAC1C,KAAK,EAAE,WAAW;QAClB,MAAM,EAAE,UAAU;QAClB,OAAO,EAAE,SAAS;QAClB,UAAU,EACR,6KAA6K;QAC/K,OAAO,EAAE,mBAAmB;KAC7B;CACF,CAAC;AAEF,yBAAyB;AACzB,MAAM,UAAU,eAAe;IAC7B,OAAO,YAAY,CAAC;AACtB,CAAC;AAED,+EAA+E;AAC/E,MAAM,UAAU,cAAc,CAAC,EAAU;IACvC,OAAO,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;AAC/C,CAAC"}

package/dist/automations/coordinator.js

@@ -2,6 +2,7 @@ import { projectDataDir } from '../project-data-paths.js';
 import { existsSync } from 'node:fs';
 import { join } from 'node:path';
 import { AutomationStore } from './store.js';
+import { ownProjectData } from '../runs/project-writer.js';
 /**
  * Lightweight workspace index for project automation state. Discovery checks
  * only the optional definitions file and never materializes a RunManager or a
@@ -46,6 +47,13 @@ export class AutomationCoordinator {
         const projectRoot = root ?? this.roots.get(projectId);
         if (!projectRoot)
             return undefined;
+        try {
+            ownProjectData(projectDataDir(projectRoot));
+        }
+        catch (error) {
+            this.options.warn?.(`Automation project is unavailable: ${error instanceof Error ? error.message : String(error)}`);
+            return undefined;
+        }
         const store = AutomationStore.open(projectDataDir(projectRoot), { warn: this.options.warn });
         this.stores.set(projectId, store);
         this.roots.set(projectId, projectRoot);

package/dist/automations/coordinator.js.map

@@ -1 +1 @@
-{"version":3,"file":"coordinator.js","sourceRoot":"","sources":["../../src/automations/coordinator.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAC1D,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAa7C;;;;GAIG;AACH,MAAM,OAAO,qBAAqB;IAIH,OAAO;IAHnB,MAAM,GAAG,IAAI,GAAG,EAA2B,CAAC;IAC5C,KAAK,GAAG,IAAI,GAAG,EAAkB,CAAC;IAEnD,YAA6B,OAAqC;uBAArC,OAAO;IAAiC,CAAC;IAEtE,KAAK,CAAC,OAAO;QACX,IAAI,QAA4C,CAAC;QACjD,IAAI,CAAC;YACH,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE,CAAC;QAC/C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,yCAAyC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YACvH,OAAO;QACT,CAAC;QACD,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC;QAC/D,KAAK,MAAM,EAAE,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC;YACpC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;gBAAE,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QACxC,CAAC;QACD,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;YAC/B,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;gBACjC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;gBACxB,SAAS;YACX,CAAC;YACD,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;YACzC,MAAM,WAAW,GAAG,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,kBAAkB,CAAC,CAAC;YAC3E,IAAI,UAAU,CAAC,WAAW,CAAC;gBAAE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;QACpE,CAAC;IACH,CAAC;IAED,KAAK,CAAC,SAAiB,EAAE,IAAa;QACpC,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC5C,IAAI,QAAQ;YAAE,OAAO,QAAQ,CAAC;QAC9B,MAAM,WAAW,GAAG,IAAI,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QACtD,IAAI,CAAC,WAAW;YAAE,OAAO,SAAS,CAAC;QACnC,MAAM,KAAK,GAAG,eAAe,CAAC,IAAI,CAAC,cAAc,CAAC,WAAW,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;QAC7F,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;QAClC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;QACvC,OAAO,KAAK,CAAC;IACf,CAAC;IAED,iBAAiB;QACf,OAAO,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;aAC9B,MAAM,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;aAC5E,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC;IACvB,CAAC;IAED,MAAM,CAAC,SAAiB;QACtB,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QAC9B,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IAC/B,CAAC;IAED,GAAG;QACD,OAAO,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;IACjC,CAAC;CACF"}
+{"version":3,"file":"coordinator.js","sourceRoot":"","sources":["../../src/automations/coordinator.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAC1D,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAC7C,OAAO,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAC;AAa3D;;;;GAIG;AACH,MAAM,OAAO,qBAAqB;IAIH,OAAO;IAHnB,MAAM,GAAG,IAAI,GAAG,EAA2B,CAAC;IAC5C,KAAK,GAAG,IAAI,GAAG,EAAkB,CAAC;IAEnD,YAA6B,OAAqC;uBAArC,OAAO;IAAiC,CAAC;IAEtE,KAAK,CAAC,OAAO;QACX,IAAI,QAA4C,CAAC;QACjD,IAAI,CAAC;YACH,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE,CAAC;QAC/C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,yCAAyC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YACvH,OAAO;QACT,CAAC;QACD,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC;QAC/D,KAAK,MAAM,EAAE,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC;YACpC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;gBAAE,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QACxC,CAAC;QACD,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;YAC/B,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;gBACjC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;gBACxB,SAAS;YACX,CAAC;YACD,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;YACzC,MAAM,WAAW,GAAG,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,kBAAkB,CAAC,CAAC;YAC3E,IAAI,UAAU,CAAC,WAAW,CAAC;gBAAE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;QACpE,CAAC;IACH,CAAC;IAED,KAAK,CAAC,SAAiB,EAAE,IAAa;QACpC,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC5C,IAAI,QAAQ;YAAE,OAAO,QAAQ,CAAC;QAC9B,MAAM,WAAW,GAAG,IAAI,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QACtD,IAAI,CAAC,WAAW;YAAE,OAAO,SAAS,CAAC;QACnC,IAAI,CAAC;YACH,cAAc,CAAC,cAAc,CAAC,WAAW,CAAC,CAAC,CAAC;QAC9C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,sCAAsC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YACpH,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,MAAM,KAAK,GAAG,eAAe,CAAC,IAAI,CAAC,cAAc,CAAC,WAAW,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;QAC7F,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;QAClC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;QACvC,OAAO,KAAK,CAAC;IACf,CAAC;IAED,iBAAiB;QACf,OAAO,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;aAC9B,MAAM,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;aAC5E,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC;IACvB,CAAC;IAED,MAAM,CAAC,SAAiB;QACtB,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QAC9B,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IAC/B,CAAC;IAED,GAAG;QACD,OAAO,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;IACjC,CAAC;CACF"}

package/dist/automations/types.d.ts

@@ -32,6 +32,7 @@ export declare const automationTaskSchema: z.ZodObject<{
         }>>;
         allowedTools: z.ZodOptional<z.ZodArray<z.ZodString>>;
         bashAllowlist: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        timeout: z.ZodOptional<z.ZodString>;
         command: z.ZodOptional<z.ZodString>;
         onFail: z.ZodOptional<z.ZodObject<{
             retry: z.ZodString;
@@ -91,6 +92,7 @@ export declare const automationDefinitionSchema: z.ZodObject<{
             }>>;
             allowedTools: z.ZodOptional<z.ZodArray<z.ZodString>>;
             bashAllowlist: z.ZodOptional<z.ZodArray<z.ZodString>>;
+            timeout: z.ZodOptional<z.ZodString>;
             command: z.ZodOptional<z.ZodString>;
             onFail: z.ZodOptional<z.ZodObject<{
                 retry: z.ZodString;

package/dist/contract/automations.d.ts

@@ -73,6 +73,7 @@ export declare const automationTaskSchema: z.ZodObject<{
         }>>;
         allowedTools: z.ZodOptional<z.ZodArray<z.ZodString>>;
         bashAllowlist: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        timeout: z.ZodOptional<z.ZodString>;
         command: z.ZodOptional<z.ZodString>;
         onFail: z.ZodOptional<z.ZodObject<{
             retry: z.ZodString;
@@ -135,6 +136,7 @@ export declare const automationDefinitionSchema: z.ZodObject<{
             }>>;
             allowedTools: z.ZodOptional<z.ZodArray<z.ZodString>>;
             bashAllowlist: z.ZodOptional<z.ZodArray<z.ZodString>>;
+            timeout: z.ZodOptional<z.ZodString>;
             command: z.ZodOptional<z.ZodString>;
             onFail: z.ZodOptional<z.ZodObject<{
                 retry: z.ZodString;
@@ -290,6 +292,7 @@ export declare const automationListEntrySchema: z.ZodObject<{
             }>>;
             allowedTools: z.ZodOptional<z.ZodArray<z.ZodString>>;
             bashAllowlist: z.ZodOptional<z.ZodArray<z.ZodString>>;
+            timeout: z.ZodOptional<z.ZodString>;
             command: z.ZodOptional<z.ZodString>;
             onFail: z.ZodOptional<z.ZodObject<{
                 retry: z.ZodString;
@@ -435,6 +438,7 @@ export declare const automationsResponseSchema: z.ZodObject<{
                 }>>;
                 allowedTools: z.ZodOptional<z.ZodArray<z.ZodString>>;
                 bashAllowlist: z.ZodOptional<z.ZodArray<z.ZodString>>;
+                timeout: z.ZodOptional<z.ZodString>;
                 command: z.ZodOptional<z.ZodString>;
                 onFail: z.ZodOptional<z.ZodObject<{
                     retry: z.ZodString;
@@ -565,6 +569,7 @@ export declare const automationResponseSchema: z.ZodObject<{
                 }>>;
                 allowedTools: z.ZodOptional<z.ZodArray<z.ZodString>>;
                 bashAllowlist: z.ZodOptional<z.ZodArray<z.ZodString>>;
+                timeout: z.ZodOptional<z.ZodString>;
                 command: z.ZodOptional<z.ZodString>;
                 onFail: z.ZodOptional<z.ZodObject<{
                     retry: z.ZodString;
@@ -632,6 +637,7 @@ export declare const automationDetailResponseSchema: z.ZodObject<{
                 }>>;
                 allowedTools: z.ZodOptional<z.ZodArray<z.ZodString>>;
                 bashAllowlist: z.ZodOptional<z.ZodArray<z.ZodString>>;
+                timeout: z.ZodOptional<z.ZodString>;
                 command: z.ZodOptional<z.ZodString>;
                 onFail: z.ZodOptional<z.ZodObject<{
                     retry: z.ZodString;
@@ -835,6 +841,7 @@ export declare const createAutomationInputSchema: z.ZodObject<{
             }>>;
             allowedTools: z.ZodOptional<z.ZodArray<z.ZodString>>;
             bashAllowlist: z.ZodOptional<z.ZodArray<z.ZodString>>;
+            timeout: z.ZodOptional<z.ZodString>;
             command: z.ZodOptional<z.ZodString>;
             onFail: z.ZodOptional<z.ZodObject<{
                 retry: z.ZodString;
@@ -900,6 +907,7 @@ export declare const updateAutomationInputSchema: z.ZodObject<{
             }>>;
             allowedTools: z.ZodOptional<z.ZodArray<z.ZodString>>;
             bashAllowlist: z.ZodOptional<z.ZodArray<z.ZodString>>;
+            timeout: z.ZodOptional<z.ZodString>;
             command: z.ZodOptional<z.ZodString>;
             onFail: z.ZodOptional<z.ZodObject<{
                 retry: z.ZodString;

package/dist/contract/events.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/contract/index.js

@@ -357,6 +357,12 @@ var workflowStepDefSchema = z4.object({
   runner: runnerSchema.optional(),
   allowedTools: z4.array(z4.string()).optional(),
   bashAllowlist: z4.array(z4.string()).optional(),
+  /** This step's own wall-clock cap (#22): `45s` / `90m` / `2h`, or `none` for no cap.
+   *  Typed as a plain string here, exactly as `model` is: the DURATION FORMAT is validated
+   *  by `src/workflows/types.ts`'s `stepTimeoutSchema`, which is the single source of truth
+   *  for what a user may author (workflow YAML and the inline chain on `POST /runs` both go
+   *  through it). Restating the grammar here would be a second copy free to drift. */
+  timeout: z4.string().optional(),
   // check step
   command: z4.string().optional(),
   onFail: z4.object({
@@ -660,6 +666,43 @@ var runIndexEntrySchema = z5.object({
    *  refinement `workflowLabel` applies needs `steps[]`, which this row deliberately omits, so
    *  a `(planned)` chain reads as itself here rather than as its first agent's name. */
   workflow: z5.string(),
+  /**
+   * The backend this run ran as — RESOLVED server-side, in order of how good the evidence is.
+   *
+   * 1. `RunRecord.runner`. NOT "what the caller asked for": `execute` writes the resolved backend
+   *    onto the record the moment a run starts, so for anything that ever ran this is a fact.
+   * 2. Otherwise the last step that recorded a backend — steps stamp theirs at spawn, so a record
+   *    written before run-level backend affinity still says what it used.
+   * 3. Otherwise the project's current `defaultRunner`, and only then is `runnerInherited` set.
+   *
+   * Resolved HERE rather than in the browser because these rows span every registered project:
+   * finishing step 3 client-side would be one config request per project. A project-scoped surface
+   * does it itself, from the one `GET /config` it already holds.
+   */
+  runner: runnerSchema,
+  /**
+   * Present ONLY when true: the run carried no runner and no step backend, so `runner` above is
+   * the project's current default.
+   *
+   * That is the one case that is not history. A run with no evidence at all has not started, so
+   * the value is what the task WOULD run as — which is why the cockpit renders it muted. Absent
+   * means the row is reporting what actually ran.
+   */
+  runnerInherited: z5.boolean().optional(),
+  /** The model string the run recorded, VERBATIM (`RunRecord.model`). Absent means none was
+   *  recorded and the backend picked, which the cockpit prints as a muted `auto` — the same word
+   *  the task detail header uses. Never prettified through a catalog: a locally-hosted backend's
+   *  own id is the only honest answer. */
+  model: z5.string().optional(),
+  /**
+   * How many DISTINCT backends this run's recorded steps used — a workflow may name one per step.
+   *
+   * A COUNT, deliberately, and present only when it is greater than 1. This row exists to be
+   * slim; `steps[]` is exactly the half it refuses to carry, so the mixed-chain signal is derived
+   * server-side and reduced to the one number the cell renders (`Claude Code +1`). Absent means
+   * one backend or none — which is every ordinary run.
+   */
+  stepBackends: z5.number().int().min(2).optional(),
   /** The task's branch, when it has one — a column on the global page, and the one field that
    *  makes a cross-project row identifiable at a glance without opening it. */
   branch: z5.string().optional(),
@@ -1081,6 +1124,15 @@ var workspaceConfigResponseSchema = z8.object({
   /** Stored override; `null` means inherit `XEZ_SKILLS_AUTO_UPDATE`, then true. */
   skillsAutoUpdate: z8.boolean().nullable(),
   effectiveSkillsAutoUpdate: z8.boolean(),
+  /** Stored follow-up Inbox override (F); `null` = no stored key, `XEZ_FOLLOWUPS` decides. */
+  followups: z8.boolean().nullable(),
+  /** What `followups` + the env actually resolve to right now — what the cockpit shows. */
+  effectiveFollowups: z8.boolean(),
+  /** Stored extra agent env-passthrough names (F); `null` = no stored key,
+   *  `XEZ_ENV_PASSTHROUGH` decides. `[]` is a real stored "forward nothing". */
+  agentEnvPassthrough: z8.array(z8.string()).nullable(),
+  /** What `agentEnvPassthrough` + the env actually resolve to right now. */
+  effectiveAgentEnvPassthrough: z8.array(z8.string()),
   composerDefaults: z8.object({
     autonomous: z8.boolean().nullable(),
     worktree: z8.boolean().nullable(),
@@ -1094,7 +1146,13 @@ var workspaceConfigResponseSchema = z8.object({
     monitoringWakeIntervalMinutes: z8.number().nullable(),
     /** Resume a run a provider usage limit stopped, once the limit resets. Default `true`. */
     autoResumeOnUsageLimit: z8.boolean(),
+    /** Wall clock for a session parked at `waiting`, in minutes; `null` = never close on
+     *  idle. Default 15. */
+    idleTimeoutMinutes: z8.number().nullable(),
     memoryLimitMb: z8.number().nullable(),
+    /** The host-derived ceiling an ABSENT `memoryLimitMb` falls back to (B1) — reported so
+     *  the settings pane can name the machine's own default instead of guessing it. */
+    memoryLimitDefaultMb: z8.number(),
     worktreeRetentionDefault: z8.number()
   }),
   /**
@@ -1119,6 +1177,11 @@ var setWorkspaceConfigInputSchema = z8.object({
   browseRoot: z8.string().trim().min(1).max(4096).optional(),
   projectsDir: z8.string().trim().min(1).max(4096).optional(),
   skillsAutoUpdate: z8.boolean().nullable().optional(),
+  /** Stored Inbox override (F): `null` clears the key back to the `XEZ_FOLLOWUPS` default. */
+  followups: z8.boolean().nullable().optional(),
+  /** Stored env-passthrough names (F): `null` clears the key back to the
+   *  `XEZ_ENV_PASSTHROUGH` default; `[]` stores a real "forward nothing". */
+  agentEnvPassthrough: z8.array(z8.string().trim().min(1).max(200)).max(64).nullable().optional(),
   composerDefaults: z8.object({
     autonomous: z8.boolean().nullable().optional(),
     worktree: z8.boolean().nullable().optional()
@@ -1139,6 +1202,8 @@ var setWorkspaceConfigInputSchema = z8.object({
     maxMonitoringSessions: z8.number().int().min(0).max(16).optional(),
     monitoringWakeIntervalMinutes: z8.number().int().min(1).max(60).nullable().optional(),
     autoResumeOnUsageLimit: z8.boolean().optional(),
+    /** `null` = never close an idle session; a number is minutes (1 to 1440). */
+    idleTimeoutMinutes: z8.number().int().min(1).max(1440).nullable().optional(),
     memoryLimitMb: z8.number().int().min(0).max(1048576).nullable().optional(),
     worktreeRetentionDefault: z8.number().int().min(0).max(1e3).optional()
   }).optional()
@@ -1282,7 +1347,15 @@ var configResponseSchema = z8.object({
   liveTitleUpdates: z8.boolean().nullable(),
   /** Optional review gate (#489): null = no config key, the `XEZ_REVIEW_GATE` env default (OFF)
    *  decides. */
-  reviewGate: z8.boolean().nullable()
+  reviewGate: z8.boolean().nullable(),
+  /** Model the chain planner runs on (Claude aliases only; other backends pick their own).
+   *  Always materialized — the file schema defaults it to `sonnet` (E). */
+  plannerModel: z8.string(),
+  /** Model the task namer runs on, same rule as `plannerModel`. Defaults to `haiku` (E). */
+  namerModel: z8.string(),
+  /** Team skill sources (E). Always materialized: the file schema defaults it to the shared
+   *  catalog, and `[]` is a real "no team skills" choice. */
+  skillsRepos: z8.array(z8.object({ repo: z8.string(), ref: z8.string() }))
 });
 var setConfigResponseSchema = configResponseSchema;
 var setConfigInputSchema = z8.object({
@@ -1303,7 +1376,18 @@ var setConfigInputSchema = z8.object({
   /** null clears the key back to the env-default behavior. */
   liveTitleUpdates: z8.boolean().nullable().optional(),
   /** null clears the key back to the env-default behavior (OFF). */
-  reviewGate: z8.boolean().nullable().optional()
+  reviewGate: z8.boolean().nullable().optional(),
+  /** `null` clears the key back to the schema default (`sonnet`). */
+  plannerModel: z8.string().trim().min(1).max(200).nullable().optional(),
+  /** `null` clears the key back to the schema default (`haiku`). */
+  namerModel: z8.string().trim().min(1).max(200).nullable().optional(),
+  /** `null` clears the key back to the default catalog; `[]` disables team skills. */
+  skillsRepos: z8.array(
+    z8.object({
+      repo: z8.string().trim().min(1).max(500),
+      ref: z8.string().trim().min(1).max(200).optional()
+    })
+  ).max(32).nullable().optional()
 });
 var skillsUpdateStatusSchema = z8.enum([
   "idle",
@@ -1359,7 +1443,7 @@ var providerConnectResponseSchema = z8.discriminatedUnion("opened", [
   z8.object({ opened: z8.literal(true), command: z8.string() }),
   z8.object({ opened: z8.literal(false), connected: z8.literal(true), command: z8.string() })
 ]);
-var modelDiscoveryRunnerSchema = z8.enum(["claude", "codex", "opencode"]);
+var modelDiscoveryRunnerSchema = z8.enum(["claude", "codex", "opencode", "pi"]);
 var MODEL_DISCOVERY_RUNNERS = modelDiscoveryRunnerSchema.options;
 function runnerDiscoversModels(runner) {
   return MODEL_DISCOVERY_RUNNERS.includes(runner);

package/dist/contract/runs.d.ts

@@ -268,6 +268,7 @@ export declare const runRecordSchema: z.ZodObject<{
             }>>;
             allowedTools: z.ZodOptional<z.ZodArray<z.ZodString>>;
             bashAllowlist: z.ZodOptional<z.ZodArray<z.ZodString>>;
+            timeout: z.ZodOptional<z.ZodString>;
             command: z.ZodOptional<z.ZodString>;
             onFail: z.ZodOptional<z.ZodObject<{
                 retry: z.ZodString;
@@ -437,6 +438,7 @@ export declare const apiRunSchema: z.ZodObject<{
             }>>;
             allowedTools: z.ZodOptional<z.ZodArray<z.ZodString>>;
             bashAllowlist: z.ZodOptional<z.ZodArray<z.ZodString>>;
+            timeout: z.ZodOptional<z.ZodString>;
             command: z.ZodOptional<z.ZodString>;
             onFail: z.ZodOptional<z.ZodObject<{
                 retry: z.ZodString;
@@ -501,6 +503,15 @@ export declare const runIndexEntrySchema: z.ZodObject<{
     archived: z.ZodBoolean;
     autoResumeAt: z.ZodOptional<z.ZodString>;
     workflow: z.ZodString;
+    runner: z.ZodEnum<{
+        claude: "claude";
+        codex: "codex";
+        opencode: "opencode";
+        pi: "pi";
+    }>;
+    runnerInherited: z.ZodOptional<z.ZodBoolean>;
+    model: z.ZodOptional<z.ZodString>;
+    stepBackends: z.ZodOptional<z.ZodNumber>;
     branch: z.ZodOptional<z.ZodString>;
     startedAt: z.ZodOptional<z.ZodString>;
     pullRequestUrl: z.ZodOptional<z.ZodString>;
@@ -596,6 +607,15 @@ export declare const runsIndexResponseSchema: z.ZodObject<{
         archived: z.ZodBoolean;
         autoResumeAt: z.ZodOptional<z.ZodString>;
         workflow: z.ZodString;
+        runner: z.ZodEnum<{
+            claude: "claude";
+            codex: "codex";
+            opencode: "opencode";
+            pi: "pi";
+        }>;
+        runnerInherited: z.ZodOptional<z.ZodBoolean>;
+        model: z.ZodOptional<z.ZodString>;
+        stepBackends: z.ZodOptional<z.ZodNumber>;
         branch: z.ZodOptional<z.ZodString>;
         startedAt: z.ZodOptional<z.ZodString>;
         pullRequestUrl: z.ZodOptional<z.ZodString>;
@@ -804,6 +824,7 @@ export declare const createRunResponseSchema: z.ZodUnion<readonly [z.ZodObject<{
             }>>;
             allowedTools: z.ZodOptional<z.ZodArray<z.ZodString>>;
             bashAllowlist: z.ZodOptional<z.ZodArray<z.ZodString>>;
+            timeout: z.ZodOptional<z.ZodString>;
             command: z.ZodOptional<z.ZodString>;
             onFail: z.ZodOptional<z.ZodObject<{
                 retry: z.ZodString;
@@ -967,6 +988,7 @@ export declare const createRunResponseSchema: z.ZodUnion<readonly [z.ZodObject<{
                 }>>;
                 allowedTools: z.ZodOptional<z.ZodArray<z.ZodString>>;
                 bashAllowlist: z.ZodOptional<z.ZodArray<z.ZodString>>;
+                timeout: z.ZodOptional<z.ZodString>;
                 command: z.ZodOptional<z.ZodString>;
                 onFail: z.ZodOptional<z.ZodObject<{
                     retry: z.ZodString;
@@ -1337,6 +1359,7 @@ export declare const pickVariantResponseSchema: z.ZodObject<{
                 }>>;
                 allowedTools: z.ZodOptional<z.ZodArray<z.ZodString>>;
                 bashAllowlist: z.ZodOptional<z.ZodArray<z.ZodString>>;
+                timeout: z.ZodOptional<z.ZodString>;
                 command: z.ZodOptional<z.ZodString>;
                 onFail: z.ZodOptional<z.ZodObject<{
                     retry: z.ZodString;
@@ -1426,6 +1449,7 @@ export declare const createRunInputBaseSchema: z.ZodObject<{
         }>>;
         allowedTools: z.ZodOptional<z.ZodArray<z.ZodString>>;
         bashAllowlist: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        timeout: z.ZodOptional<z.ZodString>;
         command: z.ZodOptional<z.ZodString>;
         onFail: z.ZodOptional<z.ZodObject<{
             retry: z.ZodString;
@@ -1474,6 +1498,7 @@ export declare const createRunInputSchema: z.ZodObject<{
         }>>;
         allowedTools: z.ZodOptional<z.ZodArray<z.ZodString>>;
         bashAllowlist: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        timeout: z.ZodOptional<z.ZodString>;
         command: z.ZodOptional<z.ZodString>;
         onFail: z.ZodOptional<z.ZodObject<{
             retry: z.ZodString;

package/dist/contract/runs.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/contract/skills.d.ts

@@ -217,6 +217,7 @@ export declare const startTodoResponseSchema: z.ZodObject<{
                 }>>;
                 allowedTools: z.ZodOptional<z.ZodArray<z.ZodString>>;
                 bashAllowlist: z.ZodOptional<z.ZodArray<z.ZodString>>;
+                timeout: z.ZodOptional<z.ZodString>;
                 command: z.ZodOptional<z.ZodString>;
                 onFail: z.ZodOptional<z.ZodObject<{
                     retry: z.ZodString;