@spinabot/brigade 0.1.2 → 1.0.1

package/dist/cron/isolated-agent/run-executor.d.ts

@@ -0,0 +1,49 @@
+/**
+ * Cron isolated-agent executor — bridges a `CronJob` to `runSingleTurn`.
+ *
+ * Called by `service/timer.ts` via the `runIsolatedAgentJob` dep when a
+ * cron job's `sessionTarget` is `"isolated"` or `"session:<id>"`. For
+ * `"main"` targets the timer path uses `enqueueSystemEvent` directly and
+ * never reaches here.
+ *
+ * What this layer adds on top of `runSingleTurn`:
+ *   - `senderIsOwner: false` — owner-only tools (bash) are pre-filtered out
+ *     of the cron's tool surface, so an approval prompt the operator can't
+ *     answer never gets queued.
+ *   - `cronMode: true` capability — the assembler picks the right
+ *     `## Cron` opener and gates operator-only sections.
+ *   - `lightContext` honoured — when on, every workspace bootstrap file is
+ *     dropped from the system prompt (token-cheap automation runs).
+ *   - `toolsAllow` enforced — the model only sees the explicitly-allowlisted
+ *     tools. Layered AFTER `senderIsOwner` so both filters compose.
+ *   - Per-cron `provider` + `modelId` + `thinkingLevel` + `timeoutSeconds`
+ *     resolved with sensible fallbacks (operator's defaults from config).
+ *   - Session-key derivation: isolated → fresh uuid each run; session:<id>
+ *     → stable per-name (preserves history across fires).
+ */
+import { type BrigadeConfig } from "../../config/io.js";
+import type { CronIsolatedRunArgs, CronIsolatedRunOutcome } from "../service/state.js";
+/** Per-agent provider — `cfg.agents.<agentId>.provider` wins, then the
+ *  workspace's `defaults.provider`, then "anthropic". */
+export declare function resolveAgentProvider(config: BrigadeConfig, agentId: string): string;
+/** Per-agent model — `cfg.agents.<agentId>.model.primary` wins, then the
+ *  workspace's `defaults.model.primary`, then "claude-opus-4-7". */
+export declare function resolveAgentModel(config: BrigadeConfig, agentId: string): string;
+/**
+ * Execute one cron job as an isolated agent turn. Returns a uniform
+ * `CronIsolatedRunOutcome` shape regardless of how the underlying run
+ * resolved or threw.
+ */
+export declare function executeCronAgentRun(args: CronIsolatedRunArgs): Promise<CronIsolatedRunOutcome>;
+/**
+ * Execute a `script` cron job. By default delivers the command's stdout with NO
+ * model turn (zero tokens — the cost saver). When `wakeAgent` is set AND the
+ * script didn't veto it AND there's output, runs an agent turn with the stdout
+ * injected. OWNER-ONLY at the execution boundary (defense-in-depth; createJob
+ * also rejects channel-origin script jobs).
+ */
+export declare function executeCronScriptRun(args: CronIsolatedRunArgs): Promise<CronIsolatedRunOutcome>;
+/** Dispatch an isolated/session cron run by payload kind (the timer's
+ *  `runIsolatedAgentJob` dep points here). */
+export declare function executeCronIsolatedRun(args: CronIsolatedRunArgs): Promise<CronIsolatedRunOutcome>;
+//# sourceMappingURL=run-executor.d.ts.map

package/dist/cron/isolated-agent/run-executor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"run-executor.d.ts","sourceRoot":"","sources":["../../../src/cron/isolated-agent/run-executor.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAMH,OAAO,EAAoB,KAAK,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAI1E,OAAO,KAAK,EACX,mBAAmB,EACnB,sBAAsB,EACtB,MAAM,qBAAqB,CAAC;AAmC7B;yDACyD;AACzD,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,aAAa,EAAE,OAAO,EAAE,MAAM,GAAG,MAAM,CAMnF;AAED;oEACoE;AACpE,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,aAAa,EAAE,OAAO,EAAE,MAAM,GAAG,MAAM,CAMhF;AA6BD;;;;GAIG;AACH,wBAAsB,mBAAmB,CACxC,IAAI,EAAE,mBAAmB,GACvB,OAAO,CAAC,sBAAsB,CAAC,CAyFjC;AA0FD;;;;;;GAMG;AACH,wBAAsB,oBAAoB,CACzC,IAAI,EAAE,mBAAmB,GACvB,OAAO,CAAC,sBAAsB,CAAC,CAqDjC;AAED;8CAC8C;AAC9C,wBAAsB,sBAAsB,CAC3C,IAAI,EAAE,mBAAmB,GACvB,OAAO,CAAC,sBAAsB,CAAC,CAGjC"}

package/dist/cron/isolated-agent/run-executor.js

@@ -0,0 +1,343 @@
+/**
+ * Cron isolated-agent executor — bridges a `CronJob` to `runSingleTurn`.
+ *
+ * Called by `service/timer.ts` via the `runIsolatedAgentJob` dep when a
+ * cron job's `sessionTarget` is `"isolated"` or `"session:<id>"`. For
+ * `"main"` targets the timer path uses `enqueueSystemEvent` directly and
+ * never reaches here.
+ *
+ * What this layer adds on top of `runSingleTurn`:
+ *   - `senderIsOwner: false` — owner-only tools (bash) are pre-filtered out
+ *     of the cron's tool surface, so an approval prompt the operator can't
+ *     answer never gets queued.
+ *   - `cronMode: true` capability — the assembler picks the right
+ *     `## Cron` opener and gates operator-only sections.
+ *   - `lightContext` honoured — when on, every workspace bootstrap file is
+ *     dropped from the system prompt (token-cheap automation runs).
+ *   - `toolsAllow` enforced — the model only sees the explicitly-allowlisted
+ *     tools. Layered AFTER `senderIsOwner` so both filters compose.
+ *   - Per-cron `provider` + `modelId` + `thinkingLevel` + `timeoutSeconds`
+ *     resolved with sensible fallbacks (operator's defaults from config).
+ *   - Session-key derivation: isolated → fresh uuid each run; session:<id>
+ *     → stable per-name (preserves history across fires).
+ */
+import { spawn } from "node:child_process";
+import { randomUUID } from "node:crypto";
+import { resolveAgentWorkspaceDir } from "../../config/paths.js";
+import { readConfigOrInit } from "../../config/io.js";
+import { createSubsystemLogger } from "../../logging/subsystem-logger.js";
+import { redactSensitiveText } from "../../logging/redact.js";
+import { extractSessionTargetId, isSessionTargetWithId } from "../session-target.js";
+const log = createSubsystemLogger("cron/run-executor");
+const DEFAULT_AGENT_ID = "main";
+function resolveDefaultProvider(config) {
+    const provider = config.agents
+        ?.defaults?.provider;
+    if (typeof provider === "string" && provider.length > 0)
+        return provider;
+    return "anthropic";
+}
+function resolveDefaultModel(config) {
+    const model = config.agents
+        ?.defaults?.model?.primary;
+    if (typeof model === "string" && model.length > 0)
+        return model;
+    return "claude-opus-4-7";
+}
+/** Pull the per-agent override block out of `config.agents.<agentId>` (when
+ *  present), with permissive shape so we don't drift away from the actual
+ *  config type's surface. */
+function readAgentOverride(config, agentId) {
+    const agents = config.agents;
+    if (!agents)
+        return undefined;
+    const ov = agents[agentId];
+    if (!ov || typeof ov !== "object")
+        return undefined;
+    return ov;
+}
+/** Per-agent provider — `cfg.agents.<agentId>.provider` wins, then the
+ *  workspace's `defaults.provider`, then "anthropic". */
+export function resolveAgentProvider(config, agentId) {
+    const ov = readAgentOverride(config, agentId);
+    if (ov && typeof ov.provider === "string" && ov.provider.length > 0) {
+        return ov.provider;
+    }
+    return resolveDefaultProvider(config);
+}
+/** Per-agent model — `cfg.agents.<agentId>.model.primary` wins, then the
+ *  workspace's `defaults.model.primary`, then "claude-opus-4-7". */
+export function resolveAgentModel(config, agentId) {
+    const ov = readAgentOverride(config, agentId);
+    if (ov?.model && typeof ov.model.primary === "string" && ov.model.primary.length > 0) {
+        return ov.model.primary;
+    }
+    return resolveDefaultModel(config);
+}
+/**
+ * Derive the child session key for this cron's run.
+ *   - `"isolated"`     → fresh per-fire: `cron:<jobId>:run:<uuid>`
+ *   - `"session:<id>"` → stable per name: `cron:<jobId>:<id>`
+ *
+ * `"main"` targets don't reach here (handled by the systemEvent path).
+ */
+function deriveCronSessionKey(job) {
+    if (isSessionTargetWithId(job.sessionTarget)) {
+        const id = extractSessionTargetId(job.sessionTarget);
+        return `cron:${job.id}:${id}`;
+    }
+    // "isolated" — fresh uuid each run so per-fire transcripts don't collide.
+    return `cron:${job.id}:run:${randomUUID()}`;
+}
+/**
+ * Extract a short summary string from the assistant's final reply. The
+ * caller (timer's `runDueJob`) uses this for the run-log entry + optional
+ * delivery announcement. We collapse whitespace and cap at 240 chars so
+ * the audit log stays scannable even for very long replies.
+ */
+function summariseReply(reply) {
+    const flat = reply.replace(/\s+/g, " ").trim();
+    return flat.length <= 240 ? flat : `${flat.slice(0, 237)}…`;
+}
+/**
+ * Execute one cron job as an isolated agent turn. Returns a uniform
+ * `CronIsolatedRunOutcome` shape regardless of how the underlying run
+ * resolved or threw.
+ */
+export async function executeCronAgentRun(args) {
+    const { job, abortSignal } = args;
+    if (job.payload.kind !== "agentTurn") {
+        return {
+            status: "error",
+            error: "executeCronAgentRun called with non-agentTurn payload",
+        };
+    }
+    const payload = job.payload;
+    const config = readConfigOrInit();
+    const agentId = job.agentId ?? DEFAULT_AGENT_ID;
+    // Self-identification prefix — lift from reference run-executor so the
+    // isolated turn's input clearly carries the cron id + name. Without this
+    // the model sees a bare prompt and may treat it as a normal operator
+    // turn, losing the "I am a scheduled job" context.
+    const cronPrefix = `[cron:${job.id} ${job.name}]\n`;
+    const messageWithPrefix = `${cronPrefix}${payload.message}`;
+    // Per-agent provider/model resolution — `cfg.agents.<agentId>` wins over
+    // `cfg.agents.defaults`. Without this multi-agent installs would always
+    // run cron fires under the default agent's model even when the cron was
+    // scheduled by a non-default agent.
+    const provider = resolveAgentProvider(config, agentId);
+    const modelId = payload.model ?? resolveAgentModel(config, agentId);
+    const sessionKey = deriveCronSessionKey(job);
+    log.info("cron run starting", {
+        jobId: job.id,
+        name: job.name,
+        sessionKey,
+        provider,
+        modelId,
+        lightContext: payload.lightContext === true,
+        toolsAllowCount: payload.toolsAllow?.length ?? 0,
+    });
+    try {
+        // Lazy import to keep this module decoupled from the agent loop at
+        // module-load time. The dynamic import resolves from the cache on
+        // every subsequent call, so the cost is one-time.
+        const { runSingleTurn } = await import("../../agents/agent-loop.js");
+        const result = await runSingleTurn({
+            agentId,
+            provider,
+            modelId,
+            message: messageWithPrefix,
+            sessionKey,
+            ...(payload.thinking !== undefined ? { thinkingLevel: payload.thinking } : {}),
+            ...(abortSignal ? { signal: abortSignal } : {}),
+            // Cron turns NEVER act as the operator. Owner-only tools (bash) get
+            // pre-filtered out by `applyOwnerOnlyToolPolicy` so the model never
+            // sees them — no possibility of an unanswerable approval prompt.
+            senderIsOwner: false,
+            // Cron-mode flag — flips the assembler into the "# Scheduled Task
+            // Context" banner + gates operator-only sections. Without this the
+            // cron run would render as a normal operator turn, which is the bug
+            // the dedicated executor exists to prevent.
+            cronMode: true,
+            // Optional per-job lightContext — when set, drops EVERY workspace
+            // bootstrap file from the persona prompt for a minimal token spend.
+            ...(payload.lightContext === true ? { lightContext: true } : {}),
+            // Optional per-job tool allowlist — stacks AFTER the senderIsOwner
+            // ownerOnly filter to give the model only the named tools.
+            ...(payload.toolsAllow && payload.toolsAllow.length > 0
+                ? { toolsAllow: payload.toolsAllow }
+                : {}),
+        });
+        const reply = result.reply ?? "";
+        return {
+            status: "ok",
+            summary: summariseReply(reply),
+            sessionId: result.sessionId,
+            sessionKey: result.sessionKey,
+            ...(result.servedBy?.provider !== undefined ? { provider: result.servedBy.provider } : { provider }),
+            ...(result.servedBy?.modelId !== undefined ? { model: result.servedBy.modelId } : { model: modelId }),
+        };
+    }
+    catch (err) {
+        const message = err instanceof Error ? err.message : String(err);
+        // AbortError → cron-side called this an abort; surface as a non-permanent
+        // error so the failure-alert path applies the normal backoff schedule.
+        log.warn("cron run threw", { jobId: job.id, error: message });
+        const errorKind = classifyAgentRunError(message);
+        return {
+            status: "error",
+            error: message,
+            ...(errorKind ? { errorKind } : {}),
+        };
+    }
+}
+/**
+ * Map a runtime error message to a retry classification. Returns
+ * `"permanent"` for well-known unrecoverable shapes (model spec invalid,
+ * unknown provider, malformed config) so the scheduler disables the job
+ * rather than thrashing on backoff. Undefined falls back to the default
+ * `"transient"` retry path.
+ */
+function classifyAgentRunError(message) {
+    const m = message.toLowerCase();
+    if (m.includes("unknown provider"))
+        return "permanent";
+    if (m.includes("invalid model"))
+        return "permanent";
+    if (m.includes("model not found"))
+        return "permanent";
+    if (m.includes("no such agent"))
+        return "permanent";
+    return undefined;
+}
+/* ───────────────────────── script payload (cost-saver) ───────────────────────── */
+const SCRIPT_OUTPUT_CAP_BYTES = 64 * 1024;
+/** Run a shell command, bounded by time + output size. Never rejects — a spawn
+ *  error resolves as a non-zero exit. The command is OWNER-authored (script cron
+ *  jobs are owner-only), so a shell is acceptable here, like a crontab line. */
+function runShellCommand(command, opts) {
+    return new Promise((resolve) => {
+        let stdout = "";
+        let stderr = "";
+        let timedOut = false;
+        let settled = false;
+        const child = spawn(command, { cwd: opts.cwd, shell: true });
+        const finish = (code) => {
+            if (settled)
+                return;
+            settled = true;
+            clearTimeout(timer);
+            opts.signal?.removeEventListener?.("abort", onAbort);
+            resolve({ stdout, stderr, code, timedOut });
+        };
+        const onAbort = () => {
+            try {
+                child.kill("SIGKILL");
+            }
+            catch {
+                /* already gone */
+            }
+        };
+        const timer = setTimeout(() => {
+            timedOut = true;
+            onAbort();
+            finish(124);
+        }, opts.timeoutMs);
+        timer.unref?.();
+        opts.signal?.addEventListener?.("abort", onAbort, { once: true });
+        child.stdout?.on("data", (d) => {
+            if (stdout.length < SCRIPT_OUTPUT_CAP_BYTES)
+                stdout += d.toString("utf8");
+        });
+        child.stderr?.on("data", (d) => {
+            if (stderr.length < SCRIPT_OUTPUT_CAP_BYTES)
+                stderr += d.toString("utf8");
+        });
+        child.on("error", (e) => {
+            stderr += String(e?.message ?? e);
+            finish(1);
+        });
+        child.on("close", (code) => finish(code ?? 0));
+    });
+}
+/** The script can opt OUT of waking the agent at runtime: a final stdout line
+ *  `{"wakeAgent":false}` means "nothing to act on — don't spend a model turn". */
+function scriptRequestsNoWake(stdout) {
+    const lines = stdout.trimEnd().split("\n");
+    const last = lines[lines.length - 1]?.trim();
+    if (!last || !last.startsWith("{"))
+        return false;
+    try {
+        return JSON.parse(last).wakeAgent === false;
+    }
+    catch {
+        return false;
+    }
+}
+/**
+ * Execute a `script` cron job. By default delivers the command's stdout with NO
+ * model turn (zero tokens — the cost saver). When `wakeAgent` is set AND the
+ * script didn't veto it AND there's output, runs an agent turn with the stdout
+ * injected. OWNER-ONLY at the execution boundary (defense-in-depth; createJob
+ * also rejects channel-origin script jobs).
+ */
+export async function executeCronScriptRun(args) {
+    const { job, abortSignal } = args;
+    if (job.payload.kind !== "script") {
+        return { status: "error", error: "executeCronScriptRun called with non-script payload" };
+    }
+    if (job.createdBy && job.createdBy.kind !== "owner") {
+        return { status: "error", error: "script cron jobs are owner-only", errorKind: "permanent" };
+    }
+    const payload = job.payload;
+    const agentId = job.agentId ?? DEFAULT_AGENT_ID;
+    const cwd = payload.cwd && payload.cwd.trim() ? payload.cwd : resolveAgentWorkspaceDir(agentId);
+    const timeoutMs = (payload.timeoutSeconds && payload.timeoutSeconds > 0 ? payload.timeoutSeconds : 60) * 1000;
+    log.info("cron script starting", { jobId: job.id, name: job.name, cwd, timeoutMs, wakeAgent: payload.wakeAgent === true });
+    const res = await runShellCommand(payload.command, {
+        cwd,
+        timeoutMs,
+        ...(abortSignal ? { signal: abortSignal } : {}),
+    });
+    const wake = payload.wakeAgent === true && !scriptRequestsNoWake(res.stdout) && res.stdout.trim() !== "";
+    if (!wake) {
+        // NO MODEL TURN — deliver the script output directly. Zero tokens.
+        if (res.timedOut)
+            return { status: "error", error: `script timed out after ${timeoutMs}ms` };
+        if (res.code !== 0) {
+            // Redact BOTH streams at the source so the downstream run-log +
+            // failure-alert never carry a token / key / phone number. Include a
+            // bounded stdout slice alongside stderr — many scripts log their
+            // diagnostics to stdout, so a bare `script exited N` is useless when
+            // the watchdog itself breaks.
+            const errStderr = redactSensitiveText(res.stderr).slice(0, 200);
+            const errStdout = redactSensitiveText(res.stdout).slice(0, 200);
+            return {
+                status: "error",
+                error: `script exited ${res.code}${errStderr ? `: ${errStderr}` : ""}${errStdout ? `; stdout: ${errStdout}` : ""}`,
+            };
+        }
+        // Redact stdout before it becomes the run outcome — the summary flows
+        // verbatim to the persistent run-log AND (for announce-delivery jobs) to
+        // a chat channel, so secrets must be scrubbed at the source.
+        return { status: "ok", summary: summariseReply(redactSensitiveText(res.stdout) || "(no output)") };
+    }
+    // WAKE — run an agent turn over the script's output via the existing path.
+    const derived = {
+        kind: "agentTurn",
+        // Redact the injected stdout — when the wake agent's reply summarises or
+        // echoes the script output it would otherwise carry secrets onward to the
+        // run-log + announce sinks, so scrub at the source here too.
+        message: `${payload.agentMessage?.trim() || "React to this scheduled script's output."}\n\n## Script Output\n\`\`\`\n${redactSensitiveText(res.stdout).slice(0, 8000)}\n\`\`\``,
+        ...(payload.timeoutSeconds ? { timeoutSeconds: payload.timeoutSeconds } : {}),
+    };
+    return executeCronAgentRun({ ...args, job: { ...job, payload: derived } });
+}
+/** Dispatch an isolated/session cron run by payload kind (the timer's
+ *  `runIsolatedAgentJob` dep points here). */
+export async function executeCronIsolatedRun(args) {
+    if (args.job.payload.kind === "script")
+        return executeCronScriptRun(args);
+    return executeCronAgentRun(args);
+}
+//# sourceMappingURL=run-executor.js.map

package/dist/cron/isolated-agent/run-executor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"run-executor.js","sourceRoot":"","sources":["../../../src/cron/isolated-agent/run-executor.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAEH,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAC3C,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,OAAO,EAAE,wBAAwB,EAAE,MAAM,uBAAuB,CAAC;AACjE,OAAO,EAAE,gBAAgB,EAAsB,MAAM,oBAAoB,CAAC;AAC1E,OAAO,EAAE,qBAAqB,EAAE,MAAM,mCAAmC,CAAC;AAC1E,OAAO,EAAE,mBAAmB,EAAE,MAAM,yBAAyB,CAAC;AAC9D,OAAO,EAAE,sBAAsB,EAAE,qBAAqB,EAAE,MAAM,sBAAsB,CAAC;AAOrF,MAAM,GAAG,GAAG,qBAAqB,CAAC,mBAAmB,CAAC,CAAC;AAEvD,MAAM,gBAAgB,GAAG,MAAM,CAAC;AAEhC,SAAS,sBAAsB,CAAC,MAAqB;IACpD,MAAM,QAAQ,GAAI,MAAM,CAAC,MAA4D;QACpF,EAAE,QAAQ,EAAE,QAAQ,CAAC;IACtB,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,QAAQ,CAAC;IACzE,OAAO,WAAW,CAAC;AACpB,CAAC;AAED,SAAS,mBAAmB,CAAC,MAAqB;IACjD,MAAM,KAAK,GAAI,MAAM,CAAC,MAAuE;QAC5F,EAAE,QAAQ,EAAE,KAAK,EAAE,OAAO,CAAC;IAC5B,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,KAAK,CAAC;IAChE,OAAO,iBAAiB,CAAC;AAC1B,CAAC;AAED;;6BAE6B;AAC7B,SAAS,iBAAiB,CACzB,MAAqB,EACrB,OAAe;IAEf,MAAM,MAAM,GAAG,MAAM,CAAC,MAA6C,CAAC;IACpE,IAAI,CAAC,MAAM;QAAE,OAAO,SAAS,CAAC;IAC9B,MAAM,EAAE,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC;IAC3B,IAAI,CAAC,EAAE,IAAI,OAAO,EAAE,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IACpD,OAAO,EAA2D,CAAC;AACpE,CAAC;AAED;yDACyD;AACzD,MAAM,UAAU,oBAAoB,CAAC,MAAqB,EAAE,OAAe;IAC1E,MAAM,EAAE,GAAG,iBAAiB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC9C,IAAI,EAAE,IAAI,OAAO,EAAE,CAAC,QAAQ,KAAK,QAAQ,IAAI,EAAE,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACrE,OAAO,EAAE,CAAC,QAAQ,CAAC;IACpB,CAAC;IACD,OAAO,sBAAsB,CAAC,MAAM,CAAC,CAAC;AACvC,CAAC;AAED;oEACoE;AACpE,MAAM,UAAU,iBAAiB,CAAC,MAAqB,EAAE,OAAe;IACvE,MAAM,EAAE,GAAG,iBAAiB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC9C,IAAI,EAAE,EAAE,KAAK,IAAI,OAAO,EAAE,CAAC,KAAK,CAAC,OAAO,KAAK,QAAQ,IAAI,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACtF,OAAO,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC;IACzB,CAAC;IACD,OAAO,mBAAmB,CAAC,MAAM,CAAC,CAAC;AACpC,CAAC;AAED;;;;;;GAMG;AACH,SAAS,oBAAoB,CAAC,GAAY;IACzC,IAAI,qBAAqB,CAAC,GAAG,CAAC,aAAa,CAAC,EAAE,CAAC;QAC9C,MAAM,EAAE,GAAG,sBAAsB,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;QACrD,OAAO,QAAQ,GAAG,CAAC,EAAE,IAAI,EAAE,EAAE,CAAC;IAC/B,CAAC;IACD,0EAA0E;IAC1E,OAAO,QAAQ,GAAG,CAAC,EAAE,QAAQ,UAAU,EAAE,EAAE,CAAC;AAC7C,CAAC;AAED;;;;;GAKG;AACH,SAAS,cAAc,CAAC,KAAa;IACpC,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;IAC/C,OAAO,IAAI,CAAC,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,GAAG,CAAC;AAC7D,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACxC,IAAyB;IAEzB,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,GAAG,IAAI,CAAC;IAClC,IAAI,GAAG,CAAC,OAAO,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;QACtC,OAAO;YACN,MAAM,EAAE,OAAO;YACf,KAAK,EAAE,uDAAuD;SAC9D,CAAC;IACH,CAAC;IACD,MAAM,OAAO,GAAG,GAAG,CAAC,OAA+B,CAAC;IACpD,MAAM,MAAM,GAAG,gBAAgB,EAAE,CAAC;IAClC,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,IAAI,gBAAgB,CAAC;IAChD,uEAAuE;IACvE,yEAAyE;IACzE,qEAAqE;IACrE,mDAAmD;IACnD,MAAM,UAAU,GAAG,SAAS,GAAG,CAAC,EAAE,IAAI,GAAG,CAAC,IAAI,KAAK,CAAC;IACpD,MAAM,iBAAiB,GAAG,GAAG,UAAU,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC;IAC5D,yEAAyE;IACzE,wEAAwE;IACxE,wEAAwE;IACxE,oCAAoC;IACpC,MAAM,QAAQ,GAAG,oBAAoB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACvD,MAAM,OAAO,GAAG,OAAO,CAAC,KAAK,IAAI,iBAAiB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACpE,MAAM,UAAU,GAAG,oBAAoB,CAAC,GAAG,CAAC,CAAC;IAE7C,GAAG,CAAC,IAAI,CAAC,mBAAmB,EAAE;QAC7B,KAAK,EAAE,GAAG,CAAC,EAAE;QACb,IAAI,EAAE,GAAG,CAAC,IAAI;QACd,UAAU;QACV,QAAQ;QACR,OAAO;QACP,YAAY,EAAE,OAAO,CAAC,YAAY,KAAK,IAAI;QAC3C,eAAe,EAAE,OAAO,CAAC,UAAU,EAAE,MAAM,IAAI,CAAC;KAChD,CAAC,CAAC;IAEH,IAAI,CAAC;QACJ,mEAAmE;QACnE,kEAAkE;QAClE,kDAAkD;QAClD,MAAM,EAAE,aAAa,EAAE,GAAG,MAAM,MAAM,CAAC,4BAA4B,CAAC,CAAC;QAErE,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC;YAClC,OAAO;YACP,QAAQ;YACR,OAAO;YACP,OAAO,EAAE,iBAAiB;YAC1B,UAAU;YACV,GAAG,CAAC,OAAO,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC9E,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC/C,oEAAoE;YACpE,oEAAoE;YACpE,iEAAiE;YACjE,aAAa,EAAE,KAAK;YACpB,kEAAkE;YAClE,mEAAmE;YACnE,oEAAoE;YACpE,4CAA4C;YAC5C,QAAQ,EAAE,IAAI;YACd,kEAAkE;YAClE,oEAAoE;YACpE,GAAG,CAAC,OAAO,CAAC,YAAY,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAChE,mEAAmE;YACnE,2DAA2D;YAC3D,GAAG,CAAC,OAAO,CAAC,UAAU,IAAI,OAAO,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC;gBACtD,CAAC,CAAC,EAAE,UAAU,EAAE,OAAO,CAAC,UAAU,EAAE;gBACpC,CAAC,CAAC,EAAE,CAAC;SACN,CAAC,CAAC;QAEH,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC;QACjC,OAAO;YACN,MAAM,EAAE,IAAI;YACZ,OAAO,EAAE,cAAc,CAAC,KAAK,CAAC;YAC9B,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,UAAU,EAAE,MAAM,CAAC,UAAU;YAC7B,GAAG,CAAC,MAAM,CAAC,QAAQ,EAAE,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC;YACpG,GAAG,CAAC,MAAM,CAAC,QAAQ,EAAE,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC;SACrG,CAAC;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACd,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACjE,0EAA0E;QAC1E,uEAAuE;QACvE,GAAG,CAAC,IAAI,CAAC,gBAAgB,EAAE,EAAE,KAAK,EAAE,GAAG,CAAC,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;QAC9D,MAAM,SAAS,GAAG,qBAAqB,CAAC,OAAO,CAAC,CAAC;QACjD,OAAO;YACN,MAAM,EAAE,OAAO;YACf,KAAK,EAAE,OAAO;YACd,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACnC,CAAC;IACH,CAAC;AACF,CAAC;AAED;;;;;;GAMG;AACH,SAAS,qBAAqB,CAAC,OAAe;IAC7C,MAAM,CAAC,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC;IAChC,IAAI,CAAC,CAAC,QAAQ,CAAC,kBAAkB,CAAC;QAAE,OAAO,WAAW,CAAC;IACvD,IAAI,CAAC,CAAC,QAAQ,CAAC,eAAe,CAAC;QAAE,OAAO,WAAW,CAAC;IACpD,IAAI,CAAC,CAAC,QAAQ,CAAC,iBAAiB,CAAC;QAAE,OAAO,WAAW,CAAC;IACtD,IAAI,CAAC,CAAC,QAAQ,CAAC,eAAe,CAAC;QAAE,OAAO,WAAW,CAAC;IACpD,OAAO,SAAS,CAAC;AAClB,CAAC;AAED,qFAAqF;AAErF,MAAM,uBAAuB,GAAG,EAAE,GAAG,IAAI,CAAC;AAS1C;;gFAEgF;AAChF,SAAS,eAAe,CACvB,OAAe,EACf,IAA8D;IAE9D,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC9B,IAAI,MAAM,GAAG,EAAE,CAAC;QAChB,IAAI,MAAM,GAAG,EAAE,CAAC;QAChB,IAAI,QAAQ,GAAG,KAAK,CAAC;QACrB,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,EAAE,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAC7D,MAAM,MAAM,GAAG,CAAC,IAAY,EAAQ,EAAE;YACrC,IAAI,OAAO;gBAAE,OAAO;YACpB,OAAO,GAAG,IAAI,CAAC;YACf,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,IAAI,CAAC,MAAM,EAAE,mBAAmB,EAAE,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YACrD,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;QAC7C,CAAC,CAAC;QACF,MAAM,OAAO,GAAG,GAAS,EAAE;YAC1B,IAAI,CAAC;gBACJ,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YACvB,CAAC;YAAC,MAAM,CAAC;gBACR,kBAAkB;YACnB,CAAC;QACF,CAAC,CAAC;QACF,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;YAC7B,QAAQ,GAAG,IAAI,CAAC;YAChB,OAAO,EAAE,CAAC;YACV,MAAM,CAAC,GAAG,CAAC,CAAC;QACb,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;QACnB,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC;QAChB,IAAI,CAAC,MAAM,EAAE,gBAAgB,EAAE,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QAClE,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,CAAS,EAAE,EAAE;YACtC,IAAI,MAAM,CAAC,MAAM,GAAG,uBAAuB;gBAAE,MAAM,IAAI,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QAC3E,CAAC,CAAC,CAAC;QACH,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,CAAS,EAAE,EAAE;YACtC,IAAI,MAAM,CAAC,MAAM,GAAG,uBAAuB;gBAAE,MAAM,IAAI,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QAC3E,CAAC,CAAC,CAAC;QACH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,CAAQ,EAAE,EAAE;YAC9B,MAAM,IAAI,MAAM,CAAC,CAAC,EAAE,OAAO,IAAI,CAAC,CAAC,CAAC;YAClC,MAAM,CAAC,CAAC,CAAC,CAAC;QACX,CAAC,CAAC,CAAC;QACH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAmB,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC;IAC/D,CAAC,CAAC,CAAC;AACJ,CAAC;AAED;kFACkF;AAClF,SAAS,oBAAoB,CAAC,MAAc;IAC3C,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC3C,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC;IAC7C,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,KAAK,CAAC;IACjD,IAAI,CAAC;QACJ,OAAQ,IAAI,CAAC,KAAK,CAAC,IAAI,CAA6B,CAAC,SAAS,KAAK,KAAK,CAAC;IAC1E,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,KAAK,CAAC;IACd,CAAC;AACF,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACzC,IAAyB;IAEzB,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,GAAG,IAAI,CAAC;IAClC,IAAI,GAAG,CAAC,OAAO,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;QACnC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,qDAAqD,EAAE,CAAC;IAC1F,CAAC;IACD,IAAI,GAAG,CAAC,SAAS,IAAI,GAAG,CAAC,SAAS,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;QACrD,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,iCAAiC,EAAE,SAAS,EAAE,WAAW,EAAE,CAAC;IAC9F,CAAC;IACD,MAAM,OAAO,GAAG,GAAG,CAAC,OAA4B,CAAC;IACjD,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,IAAI,gBAAgB,CAAC;IAChD,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,wBAAwB,CAAC,OAAO,CAAC,CAAC;IAChG,MAAM,SAAS,GAAG,CAAC,OAAO,CAAC,cAAc,IAAI,OAAO,CAAC,cAAc,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC;IAC9G,GAAG,CAAC,IAAI,CAAC,sBAAsB,EAAE,EAAE,KAAK,EAAE,GAAG,CAAC,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,GAAG,EAAE,SAAS,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,KAAK,IAAI,EAAE,CAAC,CAAC;IAE3H,MAAM,GAAG,GAAG,MAAM,eAAe,CAAC,OAAO,CAAC,OAAO,EAAE;QAClD,GAAG;QACH,SAAS;QACT,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC/C,CAAC,CAAC;IAEH,MAAM,IAAI,GAAG,OAAO,CAAC,SAAS,KAAK,IAAI,IAAI,CAAC,oBAAoB,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC;IACzG,IAAI,CAAC,IAAI,EAAE,CAAC;QACX,mEAAmE;QACnE,IAAI,GAAG,CAAC,QAAQ;YAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,0BAA0B,SAAS,IAAI,EAAE,CAAC;QAC7F,IAAI,GAAG,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;YACpB,gEAAgE;YAChE,oEAAoE;YACpE,iEAAiE;YACjE,qEAAqE;YACrE,8BAA8B;YAC9B,MAAM,SAAS,GAAG,mBAAmB,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;YAChE,MAAM,SAAS,GAAG,mBAAmB,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;YAChE,OAAO;gBACN,MAAM,EAAE,OAAO;gBACf,KAAK,EAAE,iBAAiB,GAAG,CAAC,IAAI,GAAG,SAAS,CAAC,CAAC,CAAC,KAAK,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,SAAS,CAAC,CAAC,CAAC,aAAa,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE;aAClH,CAAC;QACH,CAAC;QACD,sEAAsE;QACtE,yEAAyE;QACzE,6DAA6D;QAC7D,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,cAAc,CAAC,mBAAmB,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,aAAa,CAAC,EAAE,CAAC;IACpG,CAAC;IAED,2EAA2E;IAC3E,MAAM,OAAO,GAAyB;QACrC,IAAI,EAAE,WAAW;QACjB,yEAAyE;QACzE,0EAA0E;QAC1E,6DAA6D;QAC7D,OAAO,EAAE,GAAG,OAAO,CAAC,YAAY,EAAE,IAAI,EAAE,IAAI,0CAA0C,iCAAiC,mBAAmB,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,UAAU;QAC/K,GAAG,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,OAAO,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC7E,CAAC;IACF,OAAO,mBAAmB,CAAC,EAAE,GAAG,IAAI,EAAE,GAAG,EAAE,EAAE,GAAG,GAAG,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC;AAC5E,CAAC;AAED;8CAC8C;AAC9C,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC3C,IAAyB;IAEzB,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,KAAK,QAAQ;QAAE,OAAO,oBAAoB,CAAC,IAAI,CAAC,CAAC;IAC1E,OAAO,mBAAmB,CAAC,IAAI,CAAC,CAAC;AAClC,CAAC"}

package/dist/cron/isolated-agent/run.d.ts

@@ -0,0 +1,27 @@
+/**
+ * Entry point for the cron service's "run an agentTurn job" dependency.
+ *
+ * This is the function that gets wired into `CronServiceDeps.runIsolatedAgentJob`
+ * at gateway boot time. The cron service holds the call deliberately abstract
+ * (`runIsolatedAgentJob?: (args) => Promise<CronIsolatedRunOutcome>`) so the
+ * service layer is testable without standing up a real agent loop — tests
+ * pass a fake that returns a deterministic outcome.
+ *
+ * Production wiring (in `core/server.ts` or equivalent boot path):
+ *
+ *   const cronState = createCronServiceState({
+ *     deps: {
+ *       ...,
+ *       runIsolatedAgentJob: runCronIsolatedAgentJob,
+ *     },
+ *   });
+ *
+ * The implementation delegates to `executeCronIsolatedRun`, which dispatches by
+ * payload kind — `agentTurn` → the full `runSingleTurn` integration (per-job
+ * model / thinking / tools-allow / light-context), `script` → a shell run that
+ * by default delivers output with no model turn (the cost-saver).
+ */
+import type { CronIsolatedRunArgs, CronIsolatedRunOutcome } from "../service/state.js";
+/** The dep callback signature documented in `CronServiceDeps`. */
+export declare function runCronIsolatedAgentJob(args: CronIsolatedRunArgs): Promise<CronIsolatedRunOutcome>;
+//# sourceMappingURL=run.d.ts.map

package/dist/cron/isolated-agent/run.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"run.d.ts","sourceRoot":"","sources":["../../../src/cron/isolated-agent/run.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAGH,OAAO,KAAK,EACX,mBAAmB,EACnB,sBAAsB,EACtB,MAAM,qBAAqB,CAAC;AAE7B,kEAAkE;AAClE,wBAAsB,uBAAuB,CAC5C,IAAI,EAAE,mBAAmB,GACvB,OAAO,CAAC,sBAAsB,CAAC,CAEjC"}

package/dist/cron/isolated-agent/run.js

@@ -0,0 +1,29 @@
+/**
+ * Entry point for the cron service's "run an agentTurn job" dependency.
+ *
+ * This is the function that gets wired into `CronServiceDeps.runIsolatedAgentJob`
+ * at gateway boot time. The cron service holds the call deliberately abstract
+ * (`runIsolatedAgentJob?: (args) => Promise<CronIsolatedRunOutcome>`) so the
+ * service layer is testable without standing up a real agent loop — tests
+ * pass a fake that returns a deterministic outcome.
+ *
+ * Production wiring (in `core/server.ts` or equivalent boot path):
+ *
+ *   const cronState = createCronServiceState({
+ *     deps: {
+ *       ...,
+ *       runIsolatedAgentJob: runCronIsolatedAgentJob,
+ *     },
+ *   });
+ *
+ * The implementation delegates to `executeCronIsolatedRun`, which dispatches by
+ * payload kind — `agentTurn` → the full `runSingleTurn` integration (per-job
+ * model / thinking / tools-allow / light-context), `script` → a shell run that
+ * by default delivers output with no model turn (the cost-saver).
+ */
+import { executeCronIsolatedRun } from "./run-executor.js";
+/** The dep callback signature documented in `CronServiceDeps`. */
+export async function runCronIsolatedAgentJob(args) {
+    return executeCronIsolatedRun(args);
+}
+//# sourceMappingURL=run.js.map

package/dist/cron/isolated-agent/run.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"run.js","sourceRoot":"","sources":["../../../src/cron/isolated-agent/run.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAEH,OAAO,EAAE,sBAAsB,EAAE,MAAM,mBAAmB,CAAC;AAM3D,kEAAkE;AAClE,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC5C,IAAyB;IAEzB,OAAO,sBAAsB,CAAC,IAAI,CAAC,CAAC;AACrC,CAAC"}

package/dist/cron/normalize.d.ts

@@ -0,0 +1,103 @@
+/**
+ * Normalization + defaulting layer.
+ *
+ * `ops.add` / `ops.update` take a partial `CronJobCreate` from the caller (CLI,
+ * RPC, or agent tool) and the store needs a fully-realised `CronJob` with
+ * every field decided. This file owns the defaulting rules so the timer
+ * loop, the run log, and the delivery dispatcher can all trust that
+ * downstream values are present.
+ *
+ * Defaulting rules locked from the reference architecture:
+ *   - `enabled` defaults to `true`.
+ *   - `wakeMode` defaults to `"next-heartbeat"` (less disruptive than `"now"`).
+ *   - `deleteAfterRun` defaults to `true` for `kind: "at"`, undefined otherwise.
+ *   - `sessionTarget` defaults to `"main"` for `systemEvent` payloads,
+ *     `"isolated"` for `agentTurn` payloads.
+ *   - `delivery.mode` defaults: `"none"` for `systemEvent`, `"announce"` for
+ *     `agentTurn` (so the operator sees the result by default).
+ *   - `delivery.bestEffort` defaults to `false`.
+ *   - Top-of-hour `cron` patterns get a 5-minute stagger window unless
+ *     explicit.
+ *
+ * Validation calls live in `service/jobs.ts:assertSupportedJobSpec`; this
+ * file only fills defaults + light coercion.
+ */
+import type { CronDelivery, CronJobCreate, CronPayload, CronSchedule, CronSessionTarget, CronWakeMode } from "./types.js";
+/** Default sessionTarget given a payload's kind. */
+export declare function defaultSessionTargetForPayload(payload: CronPayload): CronSessionTarget;
+/**
+ * Rewrite a relative-offset schedule input into the canonical
+ * `{kind: "at", at: <epoch ms>}` form using `nowMs`. Pass-through for any
+ * input that isn't a relative form (absolute `at`, `every`, `cron`, etc.).
+ * Throws a clear error for a `kind: "in"` with a missing / non-positive
+ * offset so the caller (agent tool / RPC) gets an actionable refusal.
+ */
+export declare function resolveRelativeScheduleInput(raw: unknown, nowMs: number): unknown;
+/**
+ * Coerce a permissive caller-supplied schedule into a canonical `CronSchedule`.
+ *
+ * The agent tool's TypeBox shape is `Type.Any()` so the LLM can pass any of:
+ *   - a bare string  → `"0 9 * * *"` (treated as a cron expression)
+ *   - a record missing `kind` but carrying `expr` / `cron` / `everyMs` / `at`
+ *   - the canonical `{kind: "cron", expr: "..."}` shape
+ *
+ * Without this coercion a string slipped past `normalizeSchedule` unchanged,
+ * landed on disk with no `kind`, and `computeNextRunAtMs`'s switch returned
+ * `undefined` forever — the job never fired. Migration of already-stored
+ * bad-shape schedules happens in `store.ts:ensureLoaded` using this same
+ * helper, so an operator who hit the bug on an older build doesn't have to
+ * hand-edit `~/.brigade/cron.json`.
+ */
+export declare function coerceScheduleInput(raw: unknown): CronSchedule;
+/**
+ * Fill in a schedule's optional fields. For `cron` kind, applies the
+ * top-of-hour stagger default. Other kinds pass through unchanged.
+ *
+ * Always run AFTER `coerceScheduleInput` — accepts only canonical-shape
+ * schedules. Stale callers that pass a bare string slip past here unchanged
+ * (the type-guard `schedule.kind !== "cron"` is true for `undefined`), so
+ * make sure the entry point calls coerce first.
+ */
+export declare function normalizeSchedule(schedule: CronSchedule): CronSchedule;
+/**
+ * Fill in a delivery block's missing fields. Returns `undefined` only if the
+ * caller already opted out by omitting delivery AND the payload's natural
+ * default is also `none`.
+ */
+export declare function normalizeDelivery(delivery: CronDelivery | undefined, payload: CronPayload): CronDelivery | undefined;
+/** Default wake mode for `wake` actions when the caller didn't specify. */
+export declare function defaultWakeMode(): CronWakeMode;
+/**
+ * Resolve `deleteAfterRun` for a schedule kind. Caller-supplied wins; else
+ * one-shot `at` jobs auto-delete on success, recurring jobs do not.
+ */
+export declare function resolveDeleteAfterRun(caller: boolean | undefined, schedule: CronSchedule): boolean | undefined;
+/**
+ * Optional context the caller can thread into `defaultCronJobCreate` so the
+ * normalizer can resolve `sessionTarget: "current"` into a concrete
+ * `session:<sessionKey>` value. CLI / headless callers omit it; the agent
+ * tool (which knows its calling session) supplies it.
+ */
+export interface CronJobCreateNormalizeOpts {
+    sessionContext?: {
+        /** Caller's session key — used to resolve `sessionTarget: "current"`. */
+        sessionKey?: string;
+    };
+    /**
+     * Optional scheduler-virtual clock for `kind: "at"` future-time validation.
+     * Production callers pass `state.deps.nowMs!()`; tests that drive a
+     * simulated clock pass their virtual time. Omit to use `Date.now()`.
+     */
+    nowMs?: number;
+}
+/**
+ * Produce a fully-defaulted create input — every optional field decided.
+ * Doesn't validate; that's `assertSupportedJobSpec`'s job. Doesn't write to
+ * disk; the caller (ops.add) does that.
+ *
+ * Pass `opts.sessionContext.sessionKey` to resolve `sessionTarget: "current"`
+ * into the caller's session. Existing callers that omit `opts` keep the
+ * pre-existing single-agent behaviour (no "current" → no rewrite).
+ */
+export declare function defaultCronJobCreate(input: CronJobCreate, opts?: CronJobCreateNormalizeOpts): Required<Pick<CronJobCreate, "enabled" | "sessionTarget" | "wakeMode">> & CronJobCreate;
+//# sourceMappingURL=normalize.d.ts.map

package/dist/cron/normalize.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"normalize.d.ts","sourceRoot":"","sources":["../../src/cron/normalize.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAMH,OAAO,KAAK,EACX,YAAY,EACZ,aAAa,EACb,WAAW,EACX,YAAY,EACZ,iBAAiB,EACjB,YAAY,EACZ,MAAM,YAAY,CAAC;AAEpB,oDAAoD;AACpD,wBAAgB,8BAA8B,CAAC,OAAO,EAAE,WAAW,GAAG,iBAAiB,CAEtF;AA0ED;;;;;;GAMG;AACH,wBAAgB,4BAA4B,CAAC,GAAG,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAkBjF;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,OAAO,GAAG,YAAY,CA0G9D;AAED;;;;;;;;GAQG;AACH,wBAAgB,iBAAiB,CAAC,QAAQ,EAAE,YAAY,GAAG,YAAY,CAMtE;AAED;;;;GAIG;AACH,wBAAgB,iBAAiB,CAChC,QAAQ,EAAE,YAAY,GAAG,SAAS,EAClC,OAAO,EAAE,WAAW,GAClB,YAAY,GAAG,SAAS,CAY1B;AAED,2EAA2E;AAC3E,wBAAgB,eAAe,IAAI,YAAY,CAE9C;AAED;;;GAGG;AACH,wBAAgB,qBAAqB,CACpC,MAAM,EAAE,OAAO,GAAG,SAAS,EAC3B,QAAQ,EAAE,YAAY,GACpB,OAAO,GAAG,SAAS,CAGrB;AAED;;;;;GAKG;AACH,MAAM,WAAW,0BAA0B;IAC1C,cAAc,CAAC,EAAE;QAChB,yEAAyE;QACzE,UAAU,CAAC,EAAE,MAAM,CAAC;KACpB,CAAC;IACF;;;;OAIG;IACH,KAAK,CAAC,EAAE,MAAM,CAAC;CACf;AA6BD;;;;;;;;GAQG;AACH,wBAAgB,oBAAoB,CACnC,KAAK,EAAE,aAAa,EACpB,IAAI,CAAC,EAAE,0BAA0B,GAC/B,QAAQ,CAAC,IAAI,CAAC,aAAa,EAAE,SAAS,GAAG,eAAe,GAAG,UAAU,CAAC,CAAC,GAAG,aAAa,CAmDzF"}