@stratusagent/cli 0.11.2 → 0.11.3

package/dist/commands/plugins.js

@@ -0,0 +1,359 @@
+import { matchesToolAllowlist, raiseRiskTo, toolScopesOverlap, } from '@stratusagent/core';
+import { declaredRiskFor, isFirstPartyPackage, parseToolRiskOverrides, preflightPlugin, readPluginManifest, riskFloorFor, } from '@stratusagent/plugins';
+import { workspacesDirPath } from '@stratusagent/state';
+import { describeUnattendedReach } from "../approvals.js";
+import { writeLine } from "../io.js";
+import { packageInstalled } from "../loaders.js";
+import { PLUGIN_MARKETPLACE_URL, FIRST_PARTY_CAPABILITY_PACKAGES, KERNEL_TOOL_NAMES, } from "../plugin-catalog.js";
+import { soulGrantsTool, rosterSoulsWithConfigured } from "../roster.js";
+import { loadServeApprovals, loadServeApi, loadServePlugins } from "../trusted-config.js";
+/**
+ * What this machine's plugins are, and where the chain from installed to
+ * callable breaks.
+ *
+ * Four things have to be true before an agent can call a plugin's tool —
+ * the package is installed, a trusted config enables it, the agent's
+ * `tools:` names it, and the approval policy lets the call through — and
+ * every one of them fails silently on its own. A listing of installed
+ * packages answers the first and reads as an answer to all four, which is
+ * how an agent ends up with a persona describing tools it never had.
+ *
+ * Manifests rather than a load: `readPluginManifest` imports nothing, so
+ * this never runs a plugin's `setup` — which for the MCP bridge would spawn
+ * every configured server's subprocess to answer a question about a
+ * daemon that is not running.
+ */
+export const collectPluginsReport = async (command, env, warn) => {
+    const pluginsConfig = await loadServePlugins(env, command.configPath, warn);
+    const approvals = await loadServeApprovals(env, command.configPath, warn);
+    // What the loader would fold in, so the validation below is against the
+    // object a daemon on this machine would build.
+    const workspaceRoot = workspacesDirPath(env);
+    // Read the same way the daemon reads it: installed, and not switched off
+    // by the trusted config's `api` block.
+    const api = await loadServeApi(env, command.configPath, warn);
+    const apiReachable = packageInstalled('@stratusagent/control-api', env) && api.enabled !== false;
+    // Who grants what, from the roster a dispatch actually serves — the same
+    // resolution `stratus skills` uses, so the two commands cannot disagree
+    // about which souls are live.
+    let roster = [];
+    let rosterUnreadable = false;
+    try {
+        const resolved = await rosterSoulsWithConfigured(env, warn, {
+            ...(command.configPath !== undefined ? { configPath: command.configPath } : {}),
+            includeBuiltIn: true,
+        });
+        roster = resolved.entries;
+        rosterUnreadable = !resolved.complete;
+    }
+    catch (error) {
+        rosterUnreadable = true;
+        warn(`cannot say who is granted what — the roster did not load: ${error instanceof Error ? error.message : String(error)}`);
+    }
+    /**
+     * Which agents a declared name reaches. A soul with no `tools:` key
+     * grants every registered tool, which is the opposite of an empty list —
+     * so an absent allowlist matches everything here too, or this would
+     * report the most permissive agents as the least.
+     */
+    const grantedTo = (name, discovered) => roster
+        .filter((entry) => soulGrantsTool(entry.soul.agent.tools, name, discovered))
+        .map((entry) => entry.soul.agent.id);
+    // Configured first, in the operator's own order, then the first-party
+    // packages they have not configured — the second group is why an install
+    // that granted nothing is visible at all.
+    const configured = Object.keys(pluginsConfig);
+    const packages = [
+        ...configured,
+        ...FIRST_PARTY_CAPABILITY_PACKAGES.filter((name) => !configured.includes(name)),
+    ];
+    const plugins = [];
+    // Which package claimed each literal tool name, across the whole loop.
+    // `loadPlugins` keeps the same map and rejects the *later* plugin whole
+    // when a registration collides, so a per-plugin check would report two
+    // packages ready to serve one name that only one of them will get.
+    //
+    // Literal declarations only: the registry claims names as they register,
+    // and a namespace has none until its server connects.
+    // Qualified skill ids, tracked the same way and for the same reason.
+    const claimedSkills = new Map();
+    /**
+     * Every name or namespace some plugin may register, in config order.
+     *
+     * One list rather than a map of literals, because a collision is an
+     * *overlap* and overlap has no preferred direction: a later literal falls
+     * under an earlier namespace exactly as a later namespace covers an
+     * earlier literal. Two one-way passes is what this was, and it missed
+     * whichever direction was written second.
+     *
+     * The daemon's own tools are *registered*, unconditionally, before any
+     * plugin loads; a plugin's entry is only a declaration, which is why the
+     * two produce different warnings.
+     */
+    const claims = KERNEL_TOOL_NAMES
+        .map((name) => ({ pattern: name, owner: 'the daemon itself', registered: true }));
+    for (const specifier of packages) {
+        const block = pluginsConfig[specifier] ?? {};
+        const isConfigured = configured.includes(specifier);
+        const base = {
+            package: specifier,
+            installed: packageInstalled(specifier, env),
+            configured: isConfigured,
+            enabled: isConfigured && block.enabled !== false,
+            tools: [],
+        };
+        // Nothing below runs for a plugin the loader would skip. It skips an
+        // absent or switched-off block before it reads a manifest, parses an
+        // override, or validates anything — so doing any of that here invents a
+        // failure for a plugin that has none, and the renderer shows no tools
+        // for one either way. Gating the whole block rather than each call is
+        // deliberate: gating them one at a time is what left the override parse
+        // unconditional after the preflight moved.
+        if (!base.installed || !base.enabled) {
+            plugins.push(base);
+            continue;
+        }
+        try {
+            const { manifest, directory } = await readPluginManifest(specifier, {
+                resolve: (target) => import.meta.resolve(target),
+            });
+            const floor = riskFloorFor(isFirstPartyPackage(manifest.packageName));
+            const overrides = parseToolRiskOverrides(manifest, block);
+            // Everything the loader checks before importing, through the loader's
+            // own function — a plugin whose settings or skill files it rejects
+            // registers nothing, and reading here as enabled is the false clean
+            // bill this command exists to stop giving.
+            //
+            // Only for a plugin the loader would actually reach, though: it skips
+            // an absent or switched-off block before validating anything, so
+            // preflighting one would report `plugin-mcp` that nobody configured as
+            // broken settings instead of as the install to enable.
+            if (base.enabled) {
+                await preflightPlugin(manifest, directory, block, workspaceRoot);
+            }
+            // One row per tool the report will name, tracked as they are emitted.
+            // A concrete name can be reached more than one way — declared outright
+            // *and* covered by a namespace, or covered by two nested namespaces
+            // like `mcp.*` and `mcp.linear.*` — and every one of those is a single
+            // runtime tool. Filtering each source against the others is what
+            // produced two rounds of duplicate rows; one set, checked as rows are
+            // added, cannot miss a path.
+            const seen = new Set();
+            const declared = [];
+            const emit = (row) => {
+                if (seen.has(row.name)) {
+                    return;
+                }
+                seen.add(row.name);
+                declared.push(row);
+            };
+            // Literal declarations first: a name the manifest states outright is
+            // described best by its own entry, not by a namespace that covers it.
+            // Risk through `declaredRiskFor`, never the declaration in hand: with
+            // overlapping namespaces (`mcp.*` and `mcp.linear.*`) it is the *first*
+            // match that registration uses, so reading each entry's own risk would
+            // show a narrower namespace at a risk none of its tools will have.
+            const riskOf = (name, fallback) => declaredRiskFor(manifest, name) ?? fallback;
+            for (const tool of manifest.contributes.tools) {
+                emit({ name: tool.name, discovered: false, namespace: false, declared: riskOf(tool.name, tool.risk) });
+            }
+            for (const entry of manifest.contributes.toolsDiscovered) {
+                emit({
+                    name: entry.namespace,
+                    discovered: true,
+                    namespace: true,
+                    declared: riskOf(entry.namespace, entry.risk),
+                });
+                // An override under a declared namespace names a concrete tool
+                // (`mcp.linear.get_issue`), which is the whole point of the key for
+                // a bridge — and it can never equal the namespace, so the namespace
+                // row alone would report the default risk for a tool the operator
+                // has deliberately re-rated. Listed beside it rather than folded in:
+                // they are different risks, and which tools carry the override is
+                // the thing worth seeing.
+                for (const name of overrides.keys()) {
+                    // Any wildcard key, not merely the declared namespace itself: the
+                    // registry applies an override by each concrete *registered*
+                    // name, so a nested `mcp.linear.*` is exactly as inert as
+                    // `mcp.*`. Excluding only the equal case left the nested one
+                    // advertising a re-rating no call gets.
+                    if (name.endsWith('.*')) {
+                        continue;
+                    }
+                    if (matchesToolAllowlist(name, [entry.namespace])) {
+                        emit({ name, discovered: true, namespace: false, declared: riskOf(name, entry.risk) });
+                    }
+                }
+            }
+            // A warning, not a failure. Ownership is claimed at registration —
+            // `view.commit(owners)` records what `setup()` actually registered —
+            // so a name two manifests both declare collides only if both plugins
+            // go on to register it, which nothing here can know. Reporting it as
+            // a load failure would condemn a plugin that loads perfectly well
+            // because its tool is optional.
+            // Keyed by config entry, never by package name: the same package
+            // configured through two specifiers is two entries the loader treats
+            // as two plugins, and exempting them for sharing a `packageName`
+            // would hide the collision an operator is likeliest to create by
+            // accident.
+            //
+            // A plugin never collides with itself: everything it declares is
+            // gathered first, checked against what came before, and only then
+            // added. That ordering is what makes a manifest declaring both
+            // `mcp.ping` and `mcp.*` silent — it registers that name once — and
+            // it is load-bearing, so adding claims inside the loop below would
+            // reintroduce a warning telling operators to fix a working config.
+            const declaredHere = [
+                ...manifest.contributes.tools.map((tool) => tool.name),
+                ...manifest.contributes.toolsDiscovered.map((entry) => entry.namespace),
+            ];
+            for (const pattern of declaredHere) {
+                for (const claim of claims) {
+                    if (!toolScopesOverlap(pattern, claim.pattern)) {
+                        continue;
+                    }
+                    const subject = pattern === claim.pattern
+                        ? `${pattern} is`
+                        : `${pattern} overlaps ${claim.pattern}, which is`;
+                    // One sentence for every collision, because a manifest cannot
+                    // tell when a name registers and the cost turns entirely on
+                    // that. `ManifestBoundToolRegistry` stages while `owners` is
+                    // unset and registers live once `commit` sets it, so a clash
+                    // before the plugin commits rolls it back whole and a clash
+                    // after refuses that one registration. Neither side of the
+                    // declaration says which: a bridge's first connect happens
+                    // inside `setup()` when its server is up and on a reconnect
+                    // when it is not, and a plugin may hold `context.tools` and
+                    // register a plainly-named tool from a timer long after.
+                    //
+                    // Three rounds of review went into splitting this by
+                    // declaration kind, then by which side of the pair held the
+                    // namespace. Both splits claimed knowledge the manifest does
+                    // not have. Do not reintroduce one.
+                    base.warnings = [
+                        ...(base.warnings ?? []),
+                        `${subject} ${claim.registered ? 'already registered by' : 'also declared by'} ${claim.owner}; `
+                            + 'if both register that name, a daemon keeps the first and refuses the second registration — '
+                            + 'the whole plugin, tools and skills together, if it happens before that plugin finishes loading, '
+                            + 'or just that one tool if it happens after',
+                    ];
+                }
+            }
+            for (const pattern of declaredHere) {
+                claims.push({ pattern, owner: specifier, registered: false });
+            }
+            // Skills collide on the qualified `packageName:id`, so a clash means
+            // one package configured twice — the two-specifier case again. Firmer
+            // than the tool warning and worded that way: the loader stages skills
+            // from the manifest and refuses the second entry outright rather than
+            // waiting to see what `setup()` does. Still "if it loads", since a
+            // plugin that fails to import never reaches the check.
+            for (const skill of manifest.contributes.skills) {
+                const qualified = `${manifest.packageName}:${skill.id}`;
+                const owner = claimedSkills.get(qualified);
+                if (owner !== undefined) {
+                    base.warnings = [
+                        ...(base.warnings ?? []),
+                        `skill ${qualified} is already declared by ${owner}; if both load, a daemon keeps the first `
+                            + 'and refuses this one whole, tools and skills together',
+                    ];
+                }
+                else {
+                    claimedSkills.set(qualified, specifier);
+                }
+            }
+            base.tools = declared.map((tool) => {
+                // Never on the namespace row. `parseToolRiskOverrides` accepts a
+                // namespace-shaped key, but the registry looks an override up by
+                // each concrete *registered* name — so `toolRisks: { "mcp.*": … }`
+                // changes no call, and showing the row at that risk would advertise
+                // a re-rating the daemon will not honour.
+                const override = tool.namespace ? undefined : overrides.get(tool.name);
+                return {
+                    name: tool.name,
+                    discovered: tool.discovered,
+                    risk: override !== undefined
+                        ? raiseRiskTo(override, floor)
+                        : raiseRiskTo(tool.declared, floor),
+                    grantedTo: grantedTo(tool.name, tool.discovered),
+                };
+            });
+        }
+        catch (error) {
+            // Reported per plugin rather than thrown: one package with a broken
+            // manifest must not take down the listing that would have shown it.
+            base.problem = error instanceof Error ? error.message : String(error);
+        }
+        plugins.push(base);
+    }
+    const mode = approvals.mode ?? 'headless';
+    return {
+        approvals: mode,
+        approvalsSummary: await describeUnattendedReach(mode, approvals, env, rosterUnreadable ? undefined : roster.map((entry) => entry.soul.agent.id), apiReachable),
+        rosterUnreadable,
+        plugins,
+    };
+};
+/** `stratus plugins` — the chain from installed to callable, per plugin. */
+export const runPlugins = async (command, streams, env = {}) => {
+    const report = await collectPluginsReport(command, env, (line) => {
+        writeLine(streams.stderr, `Warning: ${line}`);
+    });
+    if (command.format === 'json') {
+        writeLine(streams.stdout, JSON.stringify(report, null, 2));
+        return 0;
+    }
+    writeLine(streams.stdout, `approvals: ${report.approvalsSummary}`);
+    writeLine(streams.stdout);
+    for (const plugin of report.plugins) {
+        const state = !plugin.installed
+            ? 'not installed'
+            : !plugin.configured
+                ? 'installed, not enabled'
+                : !plugin.enabled
+                    ? 'installed, switched off'
+                    // Enabled and loadable are separate: a plugin whose settings its
+                    // own schema rejects is enabled and registers nothing, and saying
+                    // only "enabled" here is the false clean bill this command exists
+                    // to stop giving.
+                    : plugin.problem !== undefined ? 'installed, enabled, will not load' : 'installed, enabled';
+        // Padded to a column, but never run together: a package name longer
+        // than the column would otherwise touch its own status.
+        writeLine(streams.stdout, `${plugin.package.padEnd(29)} ${state}`);
+        if (plugin.problem !== undefined) {
+            writeLine(streams.stdout, `  a daemon would register nothing for it: ${plugin.problem}`);
+            continue;
+        }
+        if (!plugin.installed) {
+            writeLine(streams.stdout, `  install it: npm install -g ${plugin.package}`);
+            continue;
+        }
+        // Nothing is registered for a plugin that will not load, so its tools
+        // are not listed: a grant column beside a name no agent can call reads
+        // as capability this machine has.
+        if (!plugin.configured) {
+            writeLine(streams.stdout, `  installing granted nothing — add "${plugin.package}" to the plugins block of a trusted config to load it`);
+            continue;
+        }
+        if (!plugin.enabled) {
+            writeLine(streams.stdout, '  switched off — remove "enabled": false to load it');
+            continue;
+        }
+        for (const warning of plugin.warnings ?? []) {
+            writeLine(streams.stdout, `  warning: ${warning}`);
+        }
+        for (const tool of plugin.tools) {
+            const granted = report.rosterUnreadable
+                ? ''
+                : tool.grantedTo.length > 0
+                    ? ` → ${tool.grantedTo.join(', ')}`
+                    : ' → nobody, until a soul’s tools: list names it';
+            const shape = tool.discovered ? ' (names arrive at connect)' : '';
+            writeLine(streams.stdout, `  ${tool.name.padEnd(28)}${tool.risk}${shape}${granted}`);
+        }
+    }
+    writeLine(streams.stdout);
+    writeLine(streams.stdout, `More plugins — ${PLUGIN_MARKETPLACE_URL}`);
+    return 0;
+};
+//# sourceMappingURL=plugins.js.map

package/dist/commands/plugins.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"plugins.js","sourceRoot":"","sources":["../../src/commands/plugins.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,oBAAoB,EACpB,WAAW,EACX,iBAAiB,GAElB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACL,eAAe,EACf,mBAAmB,EACnB,sBAAsB,EACtB,eAAe,EACf,kBAAkB,EAClB,YAAY,GACb,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAmB,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AACzE,OAAO,EAAE,uBAAuB,EAAE,MAAM,iBAAiB,CAAC;AAE1D,OAAO,EAAE,SAAS,EAAE,MAAM,UAAU,CAAC;AACrC,OAAO,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AAEjD,OAAO,EACL,sBAAsB,EACtB,+BAA+B,EAC/B,iBAAiB,GAClB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,cAAc,EAAE,yBAAyB,EAAE,MAAM,cAAc,CAAC;AACzE,OAAO,EAAE,kBAAkB,EAAE,YAAY,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AAyE1F;;;;;;;;;;;;;;;GAeG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,KAAK,EACvC,OAA6B,EAC7B,GAAmB,EACnB,IAA4B,EACJ,EAAE;IAC1B,MAAM,aAAa,GAAG,MAAM,gBAAgB,CAAC,GAAG,EAAE,OAAO,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;IAC5E,MAAM,SAAS,GAAG,MAAM,kBAAkB,CAAC,GAAG,EAAE,OAAO,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;IAC1E,wEAAwE;IACxE,+CAA+C;IAC/C,MAAM,aAAa,GAAG,iBAAiB,CAAC,GAAG,CAAC,CAAC;IAC7C,yEAAyE;IACzE,uCAAuC;IACvC,MAAM,GAAG,GAAG,MAAM,YAAY,CAAC,GAAG,EAAE,OAAO,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;IAC9D,MAAM,YAAY,GAAG,gBAAgB,CAAC,2BAA2B,EAAE,GAAG,CAAC,IAAI,GAAG,CAAC,OAAO,KAAK,KAAK,CAAC;IAEjG,yEAAyE;IACzE,wEAAwE;IACxE,8BAA8B;IAC9B,IAAI,MAAM,GAAgD,EAAE,CAAC;IAC7D,IAAI,gBAAgB,GAAG,KAAK,CAAC;IAC7B,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,yBAAyB,CAAC,GAAG,EAAE,IAAI,EAAE;YAC1D,GAAG,CAAC,OAAO,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC/E,cAAc,EAAE,IAAI;SACrB,CAAC,CAAC;QACH,MAAM,GAAG,QAAQ,CAAC,OAAO,CAAC;QAC1B,gBAAgB,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC;IACxC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,gBAAgB,GAAG,IAAI,CAAC;QACxB,IAAI,CAAC,6DAA6D,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAC9H,CAAC;IAED;;;;;OAKG;IACH,MAAM,SAAS,GAAG,CAAC,IAAY,EAAE,UAAmB,EAAY,EAAE,CAAC,MAAM;SACtE,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,cAAc,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,IAAI,EAAE,UAAU,CAAC,CAAC;SAC3E,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAEvC,sEAAsE;IACtE,yEAAyE;IACzE,0CAA0C;IAC1C,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;IAC9C,MAAM,QAAQ,GAAG;QACf,GAAG,UAAU;QACb,GAAG,+BAA+B,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;KAChF,CAAC;IAEF,MAAM,OAAO,GAAmB,EAAE,CAAC;IACnC,uEAAuE;IACvE,wEAAwE;IACxE,uEAAuE;IACvE,mEAAmE;IACnE,EAAE;IACF,yEAAyE;IACzE,sDAAsD;IACtD,qEAAqE;IACrE,MAAM,aAAa,GAAG,IAAI,GAAG,EAAkB,CAAC;IAChD;;;;;;;;;;;;OAYG;IACH,MAAM,MAAM,GAAmE,iBAAiB;SAC7F,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,mBAAmB,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;IACpF,KAAK,MAAM,SAAS,IAAI,QAAQ,EAAE,CAAC;QACjC,MAAM,KAAK,GAAG,aAAa,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC;QAC7C,MAAM,YAAY,GAAG,UAAU,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;QACpD,MAAM,IAAI,GAAiB;YACzB,OAAO,EAAE,SAAS;YAClB,SAAS,EAAE,gBAAgB,CAAC,SAAS,EAAE,GAAG,CAAC;YAC3C,UAAU,EAAE,YAAY;YACxB,OAAO,EAAE,YAAY,IAAI,KAAK,CAAC,OAAO,KAAK,KAAK;YAChD,KAAK,EAAE,EAAE;SACV,CAAC;QACF,qEAAqE;QACrE,qEAAqE;QACrE,wEAAwE;QACxE,sEAAsE;QACtE,sEAAsE;QACtE,wEAAwE;QACxE,2CAA2C;QAC3C,IAAI,CAAC,IAAI,CAAC,SAAS,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;YACrC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACnB,SAAS;QACX,CAAC;QACD,IAAI,CAAC;YACH,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,GAAG,MAAM,kBAAkB,CAAC,SAAS,EAAE;gBAClE,OAAO,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC;aACjD,CAAC,CAAC;YACH,MAAM,KAAK,GAAG,YAAY,CAAC,mBAAmB,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC,CAAC;YACtE,MAAM,SAAS,GAAG,sBAAsB,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;YAC1D,sEAAsE;YACtE,mEAAmE;YACnE,oEAAoE;YACpE,2CAA2C;YAC3C,EAAE;YACF,sEAAsE;YACtE,iEAAiE;YACjE,uEAAuE;YACvE,uDAAuD;YACvD,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;gBACjB,MAAM,eAAe,CAAC,QAAQ,EAAE,SAAS,EAAE,KAAK,EAAE,aAAa,CAAC,CAAC;YACnE,CAAC;YACD,sEAAsE;YACtE,uEAAuE;YACvE,oEAAoE;YACpE,uEAAuE;YACvE,iEAAiE;YACjE,sEAAsE;YACtE,6BAA6B;YAC7B,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;YAC/B,MAAM,QAAQ,GAAyF,EAAE,CAAC;YAC1G,MAAM,IAAI,GAAG,CAAC,GAAkF,EAAQ,EAAE;gBACxG,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;oBACvB,OAAO;gBACT,CAAC;gBACD,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;gBACnB,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACrB,CAAC,CAAC;YACF,qEAAqE;YACrE,sEAAsE;YACtE,sEAAsE;YACtE,wEAAwE;YACxE,uEAAuE;YACvE,mEAAmE;YACnE,MAAM,MAAM,GAAG,CAAC,IAAY,EAAE,QAAkB,EAAY,EAAE,CAAC,eAAe,CAAC,QAAQ,EAAE,IAAI,CAAC,IAAI,QAAQ,CAAC;YAC3G,KAAK,MAAM,IAAI,IAAI,QAAQ,CAAC,WAAW,CAAC,KAAK,EAAE,CAAC;gBAC9C,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACzG,CAAC;YACD,KAAK,MAAM,KAAK,IAAI,QAAQ,CAAC,WAAW,CAAC,eAAe,EAAE,CAAC;gBACzD,IAAI,CAAC;oBACH,IAAI,EAAE,KAAK,CAAC,SAAS;oBACrB,UAAU,EAAE,IAAI;oBAChB,SAAS,EAAE,IAAI;oBACf,QAAQ,EAAE,MAAM,CAAC,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,IAAI,CAAC;iBAC9C,CAAC,CAAC;gBACH,+DAA+D;gBAC/D,oEAAoE;gBACpE,oEAAoE;gBACpE,kEAAkE;gBAClE,qEAAqE;gBACrE,kEAAkE;gBAClE,0BAA0B;gBAC1B,KAAK,MAAM,IAAI,IAAI,SAAS,CAAC,IAAI,EAAE,EAAE,CAAC;oBACpC,kEAAkE;oBAClE,6DAA6D;oBAC7D,0DAA0D;oBAC1D,6DAA6D;oBAC7D,wCAAwC;oBACxC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;wBACxB,SAAS;oBACX,CAAC;oBACD,IAAI,oBAAoB,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC;wBAClD,IAAI,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;oBACzF,CAAC;gBACH,CAAC;YACH,CAAC;YACD,mEAAmE;YACnE,qEAAqE;YACrE,qEAAqE;YACrE,qEAAqE;YACrE,kEAAkE;YAClE,gCAAgC;YAChC,iEAAiE;YACjE,qEAAqE;YACrE,iEAAiE;YACjE,iEAAiE;YACjE,YAAY;YACZ,EAAE;YACF,iEAAiE;YACjE,kEAAkE;YAClE,+DAA+D;YAC/D,oEAAoE;YACpE,mEAAmE;YACnE,mEAAmE;YACnE,MAAM,YAAY,GAAG;gBACnB,GAAG,QAAQ,CAAC,WAAW,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC;gBACtD,GAAG,QAAQ,CAAC,WAAW,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC;aACxE,CAAC;YACF,KAAK,MAAM,OAAO,IAAI,YAAY,EAAE,CAAC;gBACnC,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;oBAC3B,IAAI,CAAC,iBAAiB,CAAC,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;wBAC/C,SAAS;oBACX,CAAC;oBACD,MAAM,OAAO,GAAG,OAAO,KAAK,KAAK,CAAC,OAAO;wBACvC,CAAC,CAAC,GAAG,OAAO,KAAK;wBACjB,CAAC,CAAC,GAAG,OAAO,aAAa,KAAK,CAAC,OAAO,YAAY,CAAC;oBACrD,8DAA8D;oBAC9D,4DAA4D;oBAC5D,6DAA6D;oBAC7D,6DAA6D;oBAC7D,4DAA4D;oBAC5D,2DAA2D;oBAC3D,2DAA2D;oBAC3D,4DAA4D;oBAC5D,4DAA4D;oBAC5D,yDAAyD;oBACzD,EAAE;oBACF,qDAAqD;oBACrD,4DAA4D;oBAC5D,6DAA6D;oBAC7D,oCAAoC;oBACpC,IAAI,CAAC,QAAQ,GAAG;wBACd,GAAG,CAAC,IAAI,CAAC,QAAQ,IAAI,EAAE,CAAC;wBACxB,GAAG,OAAO,IAAI,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,uBAAuB,CAAC,CAAC,CAAC,kBAAkB,IAAI,KAAK,CAAC,KAAK,IAAI;8BAC9F,6FAA6F;8BAC7F,kGAAkG;8BAClG,2CAA2C;qBAC9C,CAAC;gBACJ,CAAC;YACH,CAAC;YACD,KAAK,MAAM,OAAO,IAAI,YAAY,EAAE,CAAC;gBACnC,MAAM,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,CAAC;YAChE,CAAC;YAED,qEAAqE;YACrE,sEAAsE;YACtE,sEAAsE;YACtE,sEAAsE;YACtE,mEAAmE;YACnE,uDAAuD;YACvD,KAAK,MAAM,KAAK,IAAI,QAAQ,CAAC,WAAW,CAAC,MAAM,EAAE,CAAC;gBAChD,MAAM,SAAS,GAAG,GAAG,QAAQ,CAAC,WAAW,IAAI,KAAK,CAAC,EAAE,EAAE,CAAC;gBACxD,MAAM,KAAK,GAAG,aAAa,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;gBAC3C,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;oBACxB,IAAI,CAAC,QAAQ,GAAG;wBACd,GAAG,CAAC,IAAI,CAAC,QAAQ,IAAI,EAAE,CAAC;wBACxB,SAAS,SAAS,2BAA2B,KAAK,2CAA2C;8BAC3F,uDAAuD;qBAC1D,CAAC;gBACJ,CAAC;qBAAM,CAAC;oBACN,aAAa,CAAC,GAAG,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;gBAC1C,CAAC;YACH,CAAC;YACD,IAAI,CAAC,KAAK,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;gBACjC,iEAAiE;gBACjE,iEAAiE;gBACjE,mEAAmE;gBACnE,oEAAoE;gBACpE,0CAA0C;gBAC1C,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBACvE,OAAO;oBACL,IAAI,EAAE,IAAI,CAAC,IAAI;oBACf,UAAU,EAAE,IAAI,CAAC,UAAU;oBAC3B,IAAI,EAAE,QAAQ,KAAK,SAAS;wBAC1B,CAAC,CAAC,WAAW,CAAC,QAAQ,EAAE,KAAK,CAAC;wBAC9B,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,QAAQ,EAAE,KAAK,CAAC;oBACrC,SAAS,EAAE,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,UAAU,CAAC;iBACjD,CAAC;YACJ,CAAC,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,oEAAoE;YACpE,oEAAoE;YACpE,IAAI,CAAC,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACxE,CAAC;QACD,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACrB,CAAC;IAED,MAAM,IAAI,GAAG,SAAS,CAAC,IAAI,IAAI,UAAU,CAAC;IAC1C,OAAO;QACL,SAAS,EAAE,IAAI;QACf,gBAAgB,EAAE,MAAM,uBAAuB,CAC7C,IAAI,EACJ,SAAS,EACT,GAAG,EACH,gBAAgB,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,EACzE,YAAY,CACb;QACD,gBAAgB;QAChB,OAAO;KACR,CAAC;AACJ,CAAC,CAAC;AAEF,4EAA4E;AAC5E,MAAM,CAAC,MAAM,UAAU,GAAG,KAAK,EAC7B,OAA6B,EAC7B,OAAmB,EACnB,MAAsB,EAAE,EACP,EAAE;IACnB,MAAM,MAAM,GAAG,MAAM,oBAAoB,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,IAAI,EAAE,EAAE;QAC/D,SAAS,CAAC,OAAO,CAAC,MAAM,EAAE,YAAY,IAAI,EAAE,CAAC,CAAC;IAChD,CAAC,CAAC,CAAC;IAEH,IAAI,OAAO,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;QAC9B,SAAS,CAAC,OAAO,CAAC,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QAC3D,OAAO,CAAC,CAAC;IACX,CAAC;IAED,SAAS,CAAC,OAAO,CAAC,MAAM,EAAE,cAAc,MAAM,CAAC,gBAAgB,EAAE,CAAC,CAAC;IACnE,SAAS,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IAE1B,KAAK,MAAM,MAAM,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;QACpC,MAAM,KAAK,GAAG,CAAC,MAAM,CAAC,SAAS;YAC7B,CAAC,CAAC,eAAe;YACjB,CAAC,CAAC,CAAC,MAAM,CAAC,UAAU;gBAClB,CAAC,CAAC,wBAAwB;gBAC1B,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO;oBACf,CAAC,CAAC,yBAAyB;oBAC3B,iEAAiE;oBACjE,kEAAkE;oBAClE,kEAAkE;oBAClE,kBAAkB;oBAClB,CAAC,CAAC,MAAM,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,mCAAmC,CAAC,CAAC,CAAC,oBAAoB,CAAC;QAClG,oEAAoE;QACpE,wDAAwD;QACxD,SAAS,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,KAAK,EAAE,CAAC,CAAC;QAEnE,IAAI,MAAM,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;YACjC,SAAS,CAAC,OAAO,CAAC,MAAM,EAAE,6CAA6C,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC;YACzF,SAAS;QACX,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC;YACtB,SAAS,CAAC,OAAO,CAAC,MAAM,EAAE,gCAAgC,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC;YAC5E,SAAS;QACX,CAAC;QACD,sEAAsE;QACtE,uEAAuE;QACvE,kCAAkC;QAClC,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC;YACvB,SAAS,CAAC,OAAO,CAAC,MAAM,EAAE,uCAAuC,MAAM,CAAC,OAAO,uDAAuD,CAAC,CAAC;YACxI,SAAS;QACX,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,SAAS,CAAC,OAAO,CAAC,MAAM,EAAE,qDAAqD,CAAC,CAAC;YACjF,SAAS;QACX,CAAC;QACD,KAAK,MAAM,OAAO,IAAI,MAAM,CAAC,QAAQ,IAAI,EAAE,EAAE,CAAC;YAC5C,SAAS,CAAC,OAAO,CAAC,MAAM,EAAE,cAAc,OAAO,EAAE,CAAC,CAAC;QACrD,CAAC;QACD,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;YAChC,MAAM,OAAO,GAAG,MAAM,CAAC,gBAAgB;gBACrC,CAAC,CAAC,EAAE;gBACJ,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC;oBACzB,CAAC,CAAC,MAAM,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;oBACnC,CAAC,CAAC,gDAAgD,CAAC;YACvD,MAAM,KAAK,GAAG,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,4BAA4B,CAAC,CAAC,CAAC,EAAE,CAAC;YAClE,SAAS,CAAC,OAAO,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,IAAI,GAAG,KAAK,GAAG,OAAO,EAAE,CAAC,CAAC;QACvF,CAAC;IACH,CAAC;IAED,SAAS,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IAC1B,SAAS,CAAC,OAAO,CAAC,MAAM,EAAE,kBAAkB,sBAAsB,EAAE,CAAC,CAAC;IACtE,OAAO,CAAC,CAAC;AACX,CAAC,CAAC"}

package/dist/commands/restart.d.ts

@@ -0,0 +1,4 @@
+import type { CliStreams, CliEnvironment } from '../environment.ts';
+import type { ParsedRestartCommand } from '../parse.ts';
+export declare const runRestart: (command: ParsedRestartCommand, streams: CliStreams, env?: CliEnvironment) => Promise<number>;
+//# sourceMappingURL=restart.d.ts.map

package/dist/commands/restart.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"restart.d.ts","sourceRoot":"","sources":["../../src/commands/restart.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAEpE,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAC;AAExD,eAAO,MAAM,UAAU,GACrB,SAAS,oBAAoB,EAC7B,SAAS,UAAU,EACnB,MAAK,cAAmB,KACvB,OAAO,CAAC,MAAM,CAwBhB,CAAC"}

package/dist/commands/restart.js

@@ -0,0 +1,25 @@
+import { runningGatewayBase, callRunningGateway, gatewayErrorMessage, noRunningDaemonMessage, } from "../daemon.js";
+import { writeLine } from "../io.js";
+export const runRestart = async (command, streams, env = {}) => {
+    const base = await runningGatewayBase(env, command);
+    if (!base) {
+        writeLine(streams.stderr, `Error: ${noRunningDaemonMessage(env)}`);
+        return 1;
+    }
+    const response = await callRunningGateway(env, command, base, '/api/v1/restart', {
+        reason: command.reason ?? 'stratus restart',
+        ...(command.drainTimeoutMs !== undefined ? { drainTimeoutMs: command.drainTimeoutMs } : {}),
+    });
+    if (!response.ok) {
+        writeLine(streams.stderr, `Error: ${await gatewayErrorMessage(response)}`);
+        return 1;
+    }
+    const status = await response.json();
+    const inflight = status.inflight ?? 0;
+    const window = Math.round((status.drainTimeoutMs ?? 0) / 1000);
+    writeLine(streams.stdout, `restart announced to the daemon at ${base} — new turns are refused; ${inflight} turn(s) in flight `
+        + `get up to ${window}s to finish, then it comes back.`);
+    writeLine(streams.stdout, 'Watch it come back: stratus logs -f');
+    return 0;
+};
+//# sourceMappingURL=restart.js.map

package/dist/commands/restart.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"restart.js","sourceRoot":"","sources":["../../src/commands/restart.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,kBAAkB,EAClB,kBAAkB,EAClB,mBAAmB,EACnB,sBAAsB,GACvB,MAAM,cAAc,CAAC;AAEtB,OAAO,EAAE,SAAS,EAAE,MAAM,UAAU,CAAC;AAGrC,MAAM,CAAC,MAAM,UAAU,GAAG,KAAK,EAC7B,OAA6B,EAC7B,OAAmB,EACnB,MAAsB,EAAE,EACP,EAAE;IACnB,MAAM,IAAI,GAAG,MAAM,kBAAkB,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;IACpD,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,SAAS,CAAC,OAAO,CAAC,MAAM,EAAE,UAAU,sBAAsB,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACnE,OAAO,CAAC,CAAC;IACX,CAAC;IACD,MAAM,QAAQ,GAAG,MAAM,kBAAkB,CAAC,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,iBAAiB,EAAE;QAC/E,MAAM,EAAE,OAAO,CAAC,MAAM,IAAI,iBAAiB;QAC3C,GAAG,CAAC,OAAO,CAAC,cAAc,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,OAAO,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC5F,CAAC,CAAC;IACH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,SAAS,CAAC,OAAO,CAAC,MAAM,EAAE,UAAU,MAAM,mBAAmB,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;QAC3E,OAAO,CAAC,CAAC;IACX,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAoD,CAAC;IACvF,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,IAAI,CAAC,CAAC;IACtC,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,cAAc,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;IAC/D,SAAS,CACP,OAAO,CAAC,MAAM,EACd,sCAAsC,IAAI,6BAA6B,QAAQ,qBAAqB;UAClG,aAAa,MAAM,kCAAkC,CACxD,CAAC;IACF,SAAS,CAAC,OAAO,CAAC,MAAM,EAAE,qCAAqC,CAAC,CAAC;IACjE,OAAO,CAAC,CAAC;AACX,CAAC,CAAC"}

package/dist/commands/schedules.d.ts

@@ -0,0 +1,11 @@
+import type { CliStreams, CliEnvironment } from '../environment.ts';
+import type { ParsedSchedulesCommand } from '../parse.ts';
+/**
+ * List and cancel what the fleet has scheduled — against the daemon's own
+ * database, the way `stratus logs` reads the daemon's own log. WAL makes a
+ * second process on the file routine; a running daemon re-reads due rows
+ * every tick and the destination grant on every send, so a cancel from
+ * here takes effect without asking it anything.
+ */
+export declare const runSchedules: (command: ParsedSchedulesCommand, streams: CliStreams, env?: CliEnvironment) => Promise<number>;
+//# sourceMappingURL=schedules.d.ts.map

package/dist/commands/schedules.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"schedules.d.ts","sourceRoot":"","sources":["../../src/commands/schedules.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAEpE,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,aAAa,CAAC;AAE1D;;;;;;GAMG;AACH,eAAO,MAAM,YAAY,GACvB,SAAS,sBAAsB,EAC/B,SAAS,UAAU,EACnB,MAAK,cAAmB,KACvB,OAAO,CAAC,MAAM,CAuChB,CAAC"}

package/dist/commands/schedules.js

@@ -0,0 +1,50 @@
+import { canonicalDestination, describeCadence, describeSchedule } from '@stratusagent/agents';
+import { writeLine } from "../io.js";
+/**
+ * List and cancel what the fleet has scheduled — against the daemon's own
+ * database, the way `stratus logs` reads the daemon's own log. WAL makes a
+ * second process on the file routine; a running daemon re-reads due rows
+ * every tick and the destination grant on every send, so a cancel from
+ * here takes effect without asking it anything.
+ */
+export const runSchedules = async (command, streams, env = {}) => {
+    // Lazy like the serve path: node:sqlite loads only for the command that
+    // needs it.
+    const { SqliteScheduleStore, defaultSessionDbPath } = await import('@stratusagent/gateway');
+    const store = new SqliteScheduleStore(defaultSessionDbPath(env));
+    try {
+        if (command.action === 'cancel') {
+            const id = command.scheduleId ?? '';
+            const record = store.get(id);
+            if (!record || !store.delete(id)) {
+                writeLine(streams.stderr, `No schedule with id ${id}. \`stratus schedules\` lists what exists.`);
+                return 1;
+            }
+            writeLine(streams.stdout, `Cancelled ${id} (${record.agentId}, ${describeCadence(record.cadence)}).`);
+            if (record.destination) {
+                writeLine(streams.stdout, `Its pre-authorized destination ${canonicalDestination(record.destination)} is revoked with it.`);
+            }
+            return 0;
+        }
+        const schedules = store.list();
+        if (command.format === 'json') {
+            writeLine(streams.stdout, JSON.stringify({ schedules: schedules.map(describeSchedule) }, null, 2));
+            return 0;
+        }
+        if (schedules.length === 0) {
+            writeLine(streams.stdout, 'No schedules set. An agent sets one with the schedule.every / schedule.at tools.');
+            return 0;
+        }
+        for (const record of schedules) {
+            const destination = record.destination ? `  →  ${canonicalDestination(record.destination)}` : '';
+            writeLine(streams.stdout, `${record.id}  [${record.agentId}]  ${describeCadence(record.cadence)}${destination}`);
+            writeLine(streams.stdout, `  next: ${record.nextFireAt ?? '(spent — awaiting cleanup)'}${record.lastFiredAt ? `   last: ${record.lastFiredAt}` : ''}`);
+            writeLine(streams.stdout, `  prompt: ${record.prompt}`);
+        }
+        return 0;
+    }
+    finally {
+        store.close();
+    }
+};
+//# sourceMappingURL=schedules.js.map

package/dist/commands/schedules.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"schedules.js","sourceRoot":"","sources":["../../src/commands/schedules.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oBAAoB,EAAE,eAAe,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AAE/F,OAAO,EAAE,SAAS,EAAE,MAAM,UAAU,CAAC;AAGrC;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,YAAY,GAAG,KAAK,EAC/B,OAA+B,EAC/B,OAAmB,EACnB,MAAsB,EAAE,EACP,EAAE;IACnB,wEAAwE;IACxE,YAAY;IACZ,MAAM,EAAE,mBAAmB,EAAE,oBAAoB,EAAE,GAAG,MAAM,MAAM,CAAC,uBAAuB,CAAC,CAAC;IAC5F,MAAM,KAAK,GAAG,IAAI,mBAAmB,CAAC,oBAAoB,CAAC,GAAG,CAAC,CAAC,CAAC;IACjE,IAAI,CAAC;QACH,IAAI,OAAO,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;YAChC,MAAM,EAAE,GAAG,OAAO,CAAC,UAAU,IAAI,EAAE,CAAC;YACpC,MAAM,MAAM,GAAG,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAC7B,IAAI,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC;gBACjC,SAAS,CAAC,OAAO,CAAC,MAAM,EAAE,uBAAuB,EAAE,4CAA4C,CAAC,CAAC;gBACjG,OAAO,CAAC,CAAC;YACX,CAAC;YACD,SAAS,CAAC,OAAO,CAAC,MAAM,EAAE,aAAa,EAAE,KAAK,MAAM,CAAC,OAAO,KAAK,eAAe,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;YACtG,IAAI,MAAM,CAAC,WAAW,EAAE,CAAC;gBACvB,SAAS,CAAC,OAAO,CAAC,MAAM,EAAE,kCAAkC,oBAAoB,CAAC,MAAM,CAAC,WAAW,CAAC,sBAAsB,CAAC,CAAC;YAC9H,CAAC;YACD,OAAO,CAAC,CAAC;QACX,CAAC;QAED,MAAM,SAAS,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;QAC/B,IAAI,OAAO,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;YAC9B,SAAS,CAAC,OAAO,CAAC,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,SAAS,EAAE,SAAS,CAAC,GAAG,CAAC,gBAAgB,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;YACnG,OAAO,CAAC,CAAC;QACX,CAAC;QACD,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC3B,SAAS,CAAC,OAAO,CAAC,MAAM,EAAE,kFAAkF,CAAC,CAAC;YAC9G,OAAO,CAAC,CAAC;QACX,CAAC;QACD,KAAK,MAAM,MAAM,IAAI,SAAS,EAAE,CAAC;YAC/B,MAAM,WAAW,GAAG,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,QAAQ,oBAAoB,CAAC,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACjG,SAAS,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,MAAM,CAAC,EAAE,MAAM,MAAM,CAAC,OAAO,MAAM,eAAe,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,WAAW,EAAE,CAAC,CAAC;YACjH,SAAS,CAAC,OAAO,CAAC,MAAM,EAAE,WAAW,MAAM,CAAC,UAAU,IAAI,4BAA4B,GAAG,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,YAAY,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YACvJ,SAAS,CAAC,OAAO,CAAC,MAAM,EAAE,aAAa,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;QAC1D,CAAC;QACD,OAAO,CAAC,CAAC;IACX,CAAC;YAAS,CAAC;QACT,KAAK,CAAC,KAAK,EAAE,CAAC;IAChB,CAAC;AACH,CAAC,CAAC"}

package/dist/commands/serve.d.ts

@@ -0,0 +1,4 @@
+import type { CliStreams, CliEnvironment } from '../environment.ts';
+import type { ParsedServeCommand } from '../parse.ts';
+export declare const runServe: (command: ParsedServeCommand, streams: CliStreams, env?: CliEnvironment) => Promise<number>;
+//# sourceMappingURL=serve.d.ts.map

package/dist/commands/serve.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"serve.d.ts","sourceRoot":"","sources":["../../src/commands/serve.ts"],"names":[],"mappings":"AA8BA,OAAO,KAAK,EAAE,UAAU,EAAE,cAAc,EAAoB,MAAM,mBAAmB,CAAC;AAItF,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AAiBtD,eAAO,MAAM,QAAQ,GACnB,SAAS,kBAAkB,EAC3B,SAAS,UAAU,EACnB,MAAK,cAAmB,KACvB,OAAO,CAAC,MAAM,CAuDhB,CAAC"}