@swarmify/agents-cli 1.13.4 → 1.14.2

package/dist/lib/runner.js

@@ -1,325 +0,0 @@
-/**
- * Job execution engine for routines.
- *
- * Builds agent-specific CLI commands from job configs, spawns them with
- * sandboxed or unsandboxed environments, captures stdout to log files,
- * enforces timeouts, and extracts the final assistant report from the
- * agent's stream-JSON output.
- */
-import { spawn } from 'child_process';
-import * as fs from 'fs';
-import * as path from 'path';
-import * as os from 'os';
-import { resolveJobPrompt, parseTimeout, writeRunMeta, getRunDir, } from './routines.js';
-import { getRunsDir } from './state.js';
-import { prepareJobHome, buildSpawnEnv } from './sandbox.js';
-import { resolveModel, buildReasoningFlags } from './models.js';
-/** CLI command templates per agent, with {prompt} as a placeholder. */
-const AGENT_COMMANDS = {
-    claude: ['claude', '-p', '--verbose', '{prompt}', '--output-format', 'stream-json', '--permission-mode', 'plan'],
-    codex: ['codex', 'exec', '--sandbox', 'workspace-write', '{prompt}', '--json'],
-    gemini: ['gemini', '{prompt}', '--output-format', 'stream-json'],
-};
-/** Build the full CLI argv for executing a job, applying mode, model, and permission flags. */
-export function buildJobCommand(config, resolvedPrompt) {
-    const template = AGENT_COMMANDS[config.agent];
-    if (!template) {
-        throw new Error(`Unsupported agent for daemon jobs: ${config.agent}`);
-    }
-    let cmd = template.map((part) => part.replace('{prompt}', resolvedPrompt));
-    if (config.agent === 'claude') {
-        if (config.mode === 'edit') {
-            const planIndex = cmd.indexOf('plan');
-            if (planIndex !== -1)
-                cmd[planIndex] = 'acceptEdits';
-        }
-        else if (config.mode === 'full') {
-            // Replace --permission-mode plan with --dangerously-skip-permissions
-            const pmIndex = cmd.indexOf('--permission-mode');
-            if (pmIndex !== -1)
-                cmd.splice(pmIndex, 2, '--dangerously-skip-permissions');
-        }
-        if (config.allow?.dirs) {
-            for (const dir of config.allow.dirs) {
-                const resolved = dir.replace(/^~/, os.homedir());
-                cmd.push('--add-dir', resolved);
-            }
-        }
-        appendModelAndReasoning(cmd, config);
-    }
-    if (config.agent === 'codex') {
-        if (config.mode === 'edit') {
-            cmd.push('--full-auto');
-        }
-        else if (config.mode === 'full') {
-            // Remove sandbox restriction, just --full-auto
-            const sbIndex = cmd.indexOf('--sandbox');
-            if (sbIndex !== -1)
-                cmd.splice(sbIndex, 2);
-            cmd.push('--full-auto');
-        }
-        appendModelAndReasoning(cmd, config);
-    }
-    if (config.agent === 'gemini') {
-        if (config.mode === 'edit' || config.mode === 'full') {
-            cmd.push('--yolo');
-        }
-        appendModelAndReasoning(cmd, config);
-    }
-    return cmd;
-}
-/**
- * Append --model and reasoning flags to a command being assembled.
- *
- * Pass-through model resolution: validates against the installed (agent, version)
- * catalog when possible and writes a warning to stderr on miss, but never blocks.
- * Reasoning level (config.config.reasoning) maps to per-agent flags via models.ts.
- */
-function appendModelAndReasoning(cmd, config) {
-    const model = config.config?.model;
-    if (model) {
-        if (config.version) {
-            const resolved = resolveModel(config.agent, config.version, model);
-            if (resolved.warning) {
-                process.stderr.write(`[agents] ${resolved.warning}\n`);
-            }
-            cmd.push('--model', resolved.forwarded);
-        }
-        else {
-            cmd.push('--model', model);
-        }
-    }
-    const reasoning = config.config?.reasoning;
-    if (reasoning) {
-        const flags = buildReasoningFlags(config.agent, reasoning);
-        if (flags.length > 0)
-            cmd.push(...flags);
-    }
-}
-function generateRunId() {
-    return new Date().toISOString().replace(/[:.]/g, '-');
-}
-/** Execute a job synchronously (waits for completion or timeout before resolving). */
-export async function executeJob(config) {
-    const resolvedPrompt = resolveJobPrompt(config);
-    const cmd = buildJobCommand(config, resolvedPrompt);
-    const useSandbox = config.sandbox !== false;
-    const overlayHome = useSandbox ? prepareJobHome(config) : undefined;
-    const runId = generateRunId();
-    const runDir = getRunDir(config.name, runId);
-    fs.mkdirSync(runDir, { recursive: true });
-    const stdoutPath = path.join(runDir, 'stdout.log');
-    const stdoutFd = fs.openSync(stdoutPath, 'w');
-    let spawnEnv = useSandbox ? buildSpawnEnv(overlayHome) : { ...process.env };
-    if (config.timezone) {
-        spawnEnv.TZ = config.timezone;
-    }
-    const meta = {
-        jobName: config.name,
-        runId,
-        agent: config.agent,
-        pid: null,
-        status: 'running',
-        startedAt: new Date().toISOString(),
-        completedAt: null,
-        exitCode: null,
-    };
-    writeRunMeta(meta);
-    const timeoutMs = parseTimeout(config.timeout) || 30 * 60 * 1000;
-    return new Promise((resolve) => {
-        const child = spawn(cmd[0], cmd.slice(1), {
-            stdio: ['ignore', stdoutFd, stdoutFd],
-            detached: true,
-            env: spawnEnv,
-        });
-        meta.pid = child.pid || null;
-        writeRunMeta(meta);
-        let settled = false;
-        const timeoutTimer = setTimeout(() => {
-            if (settled)
-                return;
-            settled = true;
-            try {
-                if (child.pid)
-                    process.kill(-child.pid, 'SIGTERM');
-            }
-            catch { /* process already exited */ }
-            setTimeout(() => {
-                try {
-                    if (child.pid)
-                        process.kill(-child.pid, 'SIGKILL');
-                }
-                catch { /* process already exited */ }
-            }, 5000);
-            meta.status = 'timeout';
-            meta.completedAt = new Date().toISOString();
-            writeRunMeta(meta);
-            const reportPath = extractAndSaveReport(stdoutPath, config.agent, runDir);
-            resolve({ meta, reportPath });
-        }, timeoutMs);
-        child.on('exit', (code) => {
-            if (settled)
-                return;
-            settled = true;
-            clearTimeout(timeoutTimer);
-            try {
-                fs.closeSync(stdoutFd);
-            }
-            catch { /* fd already closed */ }
-            meta.exitCode = code;
-            meta.status = code === 0 ? 'completed' : 'failed';
-            meta.completedAt = new Date().toISOString();
-            writeRunMeta(meta);
-            const reportPath = extractAndSaveReport(stdoutPath, config.agent, runDir);
-            resolve({ meta, reportPath });
-        });
-        child.on('error', (err) => {
-            if (settled)
-                return;
-            settled = true;
-            clearTimeout(timeoutTimer);
-            try {
-                fs.closeSync(stdoutFd);
-            }
-            catch { /* fd already closed */ }
-            meta.status = 'failed';
-            meta.completedAt = new Date().toISOString();
-            writeRunMeta(meta);
-            resolve({ meta, reportPath: null });
-        });
-        child.unref();
-    });
-}
-/** Spawn a job as a detached process and return immediately with run metadata. */
-export async function executeJobDetached(config) {
-    const resolvedPrompt = resolveJobPrompt(config);
-    const cmd = buildJobCommand(config, resolvedPrompt);
-    const useSandbox = config.sandbox !== false;
-    const overlayHome = useSandbox ? prepareJobHome(config) : undefined;
-    const runId = generateRunId();
-    const runDir = getRunDir(config.name, runId);
-    fs.mkdirSync(runDir, { recursive: true });
-    const stdoutPath = path.join(runDir, 'stdout.log');
-    const stdoutFd = fs.openSync(stdoutPath, 'w');
-    let spawnEnv = useSandbox ? buildSpawnEnv(overlayHome) : { ...process.env };
-    if (config.timezone) {
-        spawnEnv.TZ = config.timezone;
-    }
-    const meta = {
-        jobName: config.name,
-        runId,
-        agent: config.agent,
-        pid: null,
-        status: 'running',
-        startedAt: new Date().toISOString(),
-        completedAt: null,
-        exitCode: null,
-    };
-    const child = spawn(cmd[0], cmd.slice(1), {
-        stdio: ['ignore', stdoutFd, stdoutFd],
-        detached: true,
-        env: spawnEnv,
-    });
-    child.unref();
-    try {
-        fs.closeSync(stdoutFd);
-    }
-    catch { /* fd already closed */ }
-    meta.pid = child.pid || null;
-    writeRunMeta(meta);
-    return meta;
-}
-function extractAndSaveReport(stdoutPath, agentType, runDir) {
-    try {
-        const report = extractReport(stdoutPath, agentType);
-        if (report) {
-            const reportPath = path.join(runDir, 'report.md');
-            fs.writeFileSync(reportPath, report, 'utf-8');
-            return reportPath;
-        }
-    }
-    catch (err) {
-        if (process.env.AGENTS_DEBUG) {
-            console.error(`[debug] Could not extract report: ${err.message}`);
-        }
-    }
-    return null;
-}
-/** Extract the final assistant message from a stream-JSON log file as a markdown report. */
-export function extractReport(stdoutPath, agentType) {
-    if (!fs.existsSync(stdoutPath))
-        return null;
-    try {
-        const content = fs.readFileSync(stdoutPath, 'utf-8');
-        const lines = content.split('\n').filter((l) => l.trim());
-        let lastMessage = '';
-        for (const line of lines) {
-            try {
-                const parsed = JSON.parse(line);
-                if (agentType === 'claude') {
-                    if (parsed.type === 'assistant' && parsed.message?.content) {
-                        for (const block of parsed.message.content) {
-                            if (block.type === 'text' && block.text) {
-                                lastMessage = block.text;
-                            }
-                        }
-                    }
-                }
-                if (agentType === 'codex') {
-                    if (parsed.type === 'message' && parsed.content) {
-                        lastMessage = typeof parsed.content === 'string'
-                            ? parsed.content
-                            : JSON.stringify(parsed.content);
-                    }
-                }
-                if (agentType === 'gemini') {
-                    if (parsed.type === 'text' && parsed.text) {
-                        lastMessage = parsed.text;
-                    }
-                }
-            }
-            catch { /* malformed JSONL line */ }
-        }
-        return lastMessage || null;
-    }
-    catch {
-        return null;
-    }
-}
-/** Scan all runs marked "running" and finalize any whose process has exited. */
-export function monitorRunningJobs() {
-    const runsDir = getRunsDir();
-    if (!fs.existsSync(runsDir))
-        return;
-    const jobDirs = fs.readdirSync(runsDir, { withFileTypes: true })
-        .filter((e) => e.isDirectory());
-    for (const jobDir of jobDirs) {
-        const jobRunsPath = path.join(runsDir, jobDir.name);
-        const runDirs = fs.readdirSync(jobRunsPath, { withFileTypes: true })
-            .filter((e) => e.isDirectory());
-        for (const runDirEntry of runDirs) {
-            const metaPath = path.join(jobRunsPath, runDirEntry.name, 'meta.json');
-            if (!fs.existsSync(metaPath))
-                continue;
-            try {
-                const meta = JSON.parse(fs.readFileSync(metaPath, 'utf-8'));
-                if (meta.status !== 'running')
-                    continue;
-                if (!meta.pid)
-                    continue;
-                try {
-                    process.kill(meta.pid, 0);
-                }
-                catch { /* process no longer running */
-                    meta.status = 'failed';
-                    meta.completedAt = new Date().toISOString();
-                    writeRunMeta(meta);
-                    const stdoutPath = path.join(jobRunsPath, runDirEntry.name, 'stdout.log');
-                    extractAndSaveReport(stdoutPath, meta.agent, path.join(jobRunsPath, runDirEntry.name));
-                }
-            }
-            catch { /* corrupt or unreadable meta.json */ }
-        }
-    }
-}
-//# sourceMappingURL=runner.js.map

package/dist/lib/runner.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"runner.js","sourceRoot":"","sources":["../../src/lib/runner.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,KAAK,EAAE,MAAM,eAAe,CAAC;AACtC,OAAO,KAAK,EAAE,MAAM,IAAI,CAAC;AACzB,OAAO,KAAK,IAAI,MAAM,MAAM,CAAC;AAC7B,OAAO,KAAK,EAAE,MAAM,IAAI,CAAC;AAEzB,OAAO,EACL,gBAAgB,EAChB,YAAY,EACZ,YAAY,EACZ,SAAS,GACV,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAExC,OAAO,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAC7D,OAAO,EAAE,YAAY,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAQhE,uEAAuE;AACvE,MAAM,cAAc,GAA6B;IAC/C,MAAM,EAAE,CAAC,QAAQ,EAAE,IAAI,EAAE,WAAW,EAAE,UAAU,EAAE,iBAAiB,EAAE,aAAa,EAAE,mBAAmB,EAAE,MAAM,CAAC;IAChH,KAAK,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,iBAAiB,EAAE,UAAU,EAAE,QAAQ,CAAC;IAC9E,MAAM,EAAE,CAAC,QAAQ,EAAE,UAAU,EAAE,iBAAiB,EAAE,aAAa,CAAC;CACjE,CAAC;AAEF,+FAA+F;AAC/F,MAAM,UAAU,eAAe,CAAC,MAAiB,EAAE,cAAsB;IACvE,MAAM,QAAQ,GAAG,cAAc,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC9C,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,MAAM,IAAI,KAAK,CAAC,sCAAsC,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC;IACxE,CAAC;IAED,IAAI,GAAG,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,cAAc,CAAC,CAAC,CAAC;IAE3E,IAAI,MAAM,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,IAAI,MAAM,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;YAC3B,MAAM,SAAS,GAAG,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;YACtC,IAAI,SAAS,KAAK,CAAC,CAAC;gBAAE,GAAG,CAAC,SAAS,CAAC,GAAG,aAAa,CAAC;QACvD,CAAC;aAAM,IAAI,MAAM,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;YAClC,qEAAqE;YACrE,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC,mBAAmB,CAAC,CAAC;YACjD,IAAI,OAAO,KAAK,CAAC,CAAC;gBAAE,GAAG,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC,EAAE,gCAAgC,CAAC,CAAC;QAC/E,CAAC;QAED,IAAI,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC;YACvB,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;gBACpC,MAAM,QAAQ,GAAG,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC;gBACjD,GAAG,CAAC,IAAI,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;YAClC,CAAC;QACH,CAAC;QAED,uBAAuB,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IACvC,CAAC;IAED,IAAI,MAAM,CAAC,KAAK,KAAK,OAAO,EAAE,CAAC;QAC7B,IAAI,MAAM,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;YAC3B,GAAG,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QAC1B,CAAC;aAAM,IAAI,MAAM,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;YAClC,+CAA+C;YAC/C,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;YACzC,IAAI,OAAO,KAAK,CAAC,CAAC;gBAAE,GAAG,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;YAC3C,GAAG,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QAC1B,CAAC;QAED,uBAAuB,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IACvC,CAAC;IAED,IAAI,MAAM,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,IAAI,MAAM,CAAC,IAAI,KAAK,MAAM,IAAI,MAAM,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;YACrD,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACrB,CAAC;QAED,uBAAuB,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IACvC,CAAC;IAED,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;;;GAMG;AACH,SAAS,uBAAuB,CAAC,GAAa,EAAE,MAAiB;IAC/D,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,EAAE,KAA2B,CAAC;IACzD,IAAI,KAAK,EAAE,CAAC;QACV,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;YACnB,MAAM,QAAQ,GAAG,YAAY,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;YACnE,IAAI,QAAQ,CAAC,OAAO,EAAE,CAAC;gBACrB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,YAAY,QAAQ,CAAC,OAAO,IAAI,CAAC,CAAC;YACzD,CAAC;YACD,GAAG,CAAC,IAAI,CAAC,SAAS,EAAE,QAAQ,CAAC,SAAS,CAAC,CAAC;QAC1C,CAAC;aAAM,CAAC;YACN,GAAG,CAAC,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;QAC7B,CAAC;IACH,CAAC;IAED,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,EAAE,SAA+B,CAAC;IACjE,IAAI,SAAS,EAAE,CAAC;QACd,MAAM,KAAK,GAAG,mBAAmB,CAAC,MAAM,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;QAC3D,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;YAAE,GAAG,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,CAAC;IAC3C,CAAC;AACH,CAAC;AAED,SAAS,aAAa;IACpB,OAAO,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;AACxD,CAAC;AAED,sFAAsF;AACtF,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,MAAiB;IAChD,MAAM,cAAc,GAAG,gBAAgB,CAAC,MAAM,CAAC,CAAC;IAChD,MAAM,GAAG,GAAG,eAAe,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;IAEpD,MAAM,UAAU,GAAG,MAAM,CAAC,OAAO,KAAK,KAAK,CAAC;IAC5C,MAAM,WAAW,GAAG,UAAU,CAAC,CAAC,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAEpE,MAAM,KAAK,GAAG,aAAa,EAAE,CAAC;IAC9B,MAAM,MAAM,GAAG,SAAS,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IAC7C,EAAE,CAAC,SAAS,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAE1C,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;IACnD,MAAM,QAAQ,GAAG,EAAE,CAAC,QAAQ,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC;IAE9C,IAAI,QAAQ,GAAG,UAAU,CAAC,CAAC,CAAC,aAAa,CAAC,WAAY,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,OAAO,CAAC,GAAG,EAA4B,CAAC;IACvG,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;QACpB,QAAQ,CAAC,EAAE,GAAG,MAAM,CAAC,QAAQ,CAAC;IAChC,CAAC;IAED,MAAM,IAAI,GAAY;QACpB,OAAO,EAAE,MAAM,CAAC,IAAI;QACpB,KAAK;QACL,KAAK,EAAE,MAAM,CAAC,KAAK;QACnB,GAAG,EAAE,IAAI;QACT,MAAM,EAAE,SAAS;QACjB,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACnC,WAAW,EAAE,IAAI;QACjB,QAAQ,EAAE,IAAI;KACf,CAAC;IACF,YAAY,CAAC,IAAI,CAAC,CAAC;IAEnB,MAAM,SAAS,GAAG,YAAY,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;IAEjE,OAAO,IAAI,OAAO,CAAY,CAAC,OAAO,EAAE,EAAE;QACxC,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE;YACxC,KAAK,EAAE,CAAC,QAAQ,EAAE,QAAQ,EAAE,QAAQ,CAAC;YACrC,QAAQ,EAAE,IAAI;YACd,GAAG,EAAE,QAAQ;SACd,CAAC,CAAC;QAEH,IAAI,CAAC,GAAG,GAAG,KAAK,CAAC,GAAG,IAAI,IAAI,CAAC;QAC7B,YAAY,CAAC,IAAI,CAAC,CAAC;QAEnB,IAAI,OAAO,GAAG,KAAK,CAAC;QAEpB,MAAM,YAAY,GAAG,UAAU,CAAC,GAAG,EAAE;YACnC,IAAI,OAAO;gBAAE,OAAO;YACpB,OAAO,GAAG,IAAI,CAAC;YAEf,IAAI,CAAC;gBACH,IAAI,KAAK,CAAC,GAAG;oBAAE,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;YACrD,CAAC;YAAC,MAAM,CAAC,CAAC,4BAA4B,CAAC,CAAC;YAExC,UAAU,CAAC,GAAG,EAAE;gBACd,IAAI,CAAC;oBACH,IAAI,KAAK,CAAC,GAAG;wBAAE,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;gBACrD,CAAC;gBAAC,MAAM,CAAC,CAAC,4BAA4B,CAAC,CAAC;YAC1C,CAAC,EAAE,IAAI,CAAC,CAAC;YAET,IAAI,CAAC,MAAM,GAAG,SAAS,CAAC;YACxB,IAAI,CAAC,WAAW,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;YAC5C,YAAY,CAAC,IAAI,CAAC,CAAC;YAEnB,MAAM,UAAU,GAAG,oBAAoB,CAAC,UAAU,EAAE,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;YAC1E,OAAO,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC,CAAC;QAChC,CAAC,EAAE,SAAS,CAAC,CAAC;QAEd,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE;YACxB,IAAI,OAAO;gBAAE,OAAO;YACpB,OAAO,GAAG,IAAI,CAAC;YACf,YAAY,CAAC,YAAY,CAAC,CAAC;YAE3B,IAAI,CAAC;gBAAC,EAAE,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC,CAAC,uBAAuB,CAAC,CAAC;YAEjE,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC;YACrB,IAAI,CAAC,MAAM,GAAG,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,QAAQ,CAAC;YAClD,IAAI,CAAC,WAAW,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;YAC5C,YAAY,CAAC,IAAI,CAAC,CAAC;YAEnB,MAAM,UAAU,GAAG,oBAAoB,CAAC,UAAU,EAAE,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;YAC1E,OAAO,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC,CAAC;QAChC,CAAC,CAAC,CAAC;QAEH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;YACxB,IAAI,OAAO;gBAAE,OAAO;YACpB,OAAO,GAAG,IAAI,CAAC;YACf,YAAY,CAAC,YAAY,CAAC,CAAC;YAE3B,IAAI,CAAC;gBAAC,EAAE,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC,CAAC,uBAAuB,CAAC,CAAC;YAEjE,IAAI,CAAC,MAAM,GAAG,QAAQ,CAAC;YACvB,IAAI,CAAC,WAAW,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;YAC5C,YAAY,CAAC,IAAI,CAAC,CAAC;YACnB,OAAO,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC;QACtC,CAAC,CAAC,CAAC;QAEH,KAAK,CAAC,KAAK,EAAE,CAAC;IAChB,CAAC,CAAC,CAAC;AACL,CAAC;AAED,kFAAkF;AAClF,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,MAAiB;IACxD,MAAM,cAAc,GAAG,gBAAgB,CAAC,MAAM,CAAC,CAAC;IAChD,MAAM,GAAG,GAAG,eAAe,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;IAEpD,MAAM,UAAU,GAAG,MAAM,CAAC,OAAO,KAAK,KAAK,CAAC;IAC5C,MAAM,WAAW,GAAG,UAAU,CAAC,CAAC,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAEpE,MAAM,KAAK,GAAG,aAAa,EAAE,CAAC;IAC9B,MAAM,MAAM,GAAG,SAAS,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IAC7C,EAAE,CAAC,SAAS,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAE1C,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;IACnD,MAAM,QAAQ,GAAG,EAAE,CAAC,QAAQ,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC;IAE9C,IAAI,QAAQ,GAAG,UAAU,CAAC,CAAC,CAAC,aAAa,CAAC,WAAY,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,OAAO,CAAC,GAAG,EAA4B,CAAC;IACvG,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;QACpB,QAAQ,CAAC,EAAE,GAAG,MAAM,CAAC,QAAQ,CAAC;IAChC,CAAC;IAED,MAAM,IAAI,GAAY;QACpB,OAAO,EAAE,MAAM,CAAC,IAAI;QACpB,KAAK;QACL,KAAK,EAAE,MAAM,CAAC,KAAK;QACnB,GAAG,EAAE,IAAI;QACT,MAAM,EAAE,SAAS;QACjB,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACnC,WAAW,EAAE,IAAI;QACjB,QAAQ,EAAE,IAAI;KACf,CAAC;IAEF,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE;QACxC,KAAK,EAAE,CAAC,QAAQ,EAAE,QAAQ,EAAE,QAAQ,CAAC;QACrC,QAAQ,EAAE,IAAI;QACd,GAAG,EAAE,QAAQ;KACd,CAAC,CAAC;IAEH,KAAK,CAAC,KAAK,EAAE,CAAC;IACd,IAAI,CAAC;QAAC,EAAE,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC,CAAC,uBAAuB,CAAC,CAAC;IAEjE,IAAI,CAAC,GAAG,GAAG,KAAK,CAAC,GAAG,IAAI,IAAI,CAAC;IAC7B,YAAY,CAAC,IAAI,CAAC,CAAC;IAEnB,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,oBAAoB,CAC3B,UAAkB,EAClB,SAAkB,EAClB,MAAc;IAEd,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,aAAa,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC;QACpD,IAAI,MAAM,EAAE,CAAC;YACX,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;YAClD,EAAE,CAAC,aAAa,CAAC,UAAU,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;YAC9C,OAAO,UAAU,CAAC;QACpB,CAAC;IACH,CAAC;IAAC,OAAO,GAAQ,EAAE,CAAC;QAClB,IAAI,OAAO,CAAC,GAAG,CAAC,YAAY,EAAE,CAAC;YAC7B,OAAO,CAAC,KAAK,CAAC,qCAAqC,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;QACpE,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,4FAA4F;AAC5F,MAAM,UAAU,aAAa,CAAC,UAAkB,EAAE,SAAkB;IAClE,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC;QAAE,OAAO,IAAI,CAAC;IAE5C,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;QACrD,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;QAE1D,IAAI,WAAW,GAAG,EAAE,CAAC;QAErB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;gBAEhC,IAAI,SAAS,KAAK,QAAQ,EAAE,CAAC;oBAC3B,IAAI,MAAM,CAAC,IAAI,KAAK,WAAW,IAAI,MAAM,CAAC,OAAO,EAAE,OAAO,EAAE,CAAC;wBAC3D,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;4BAC3C,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC;gCACxC,WAAW,GAAG,KAAK,CAAC,IAAI,CAAC;4BAC3B,CAAC;wBACH,CAAC;oBACH,CAAC;gBACH,CAAC;gBAED,IAAI,SAAS,KAAK,OAAO,EAAE,CAAC;oBAC1B,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;wBAChD,WAAW,GAAG,OAAO,MAAM,CAAC,OAAO,KAAK,QAAQ;4BAC9C,CAAC,CAAC,MAAM,CAAC,OAAO;4BAChB,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;oBACrC,CAAC;gBACH,CAAC;gBAED,IAAI,SAAS,KAAK,QAAQ,EAAE,CAAC;oBAC3B,IAAI,MAAM,CAAC,IAAI,KAAK,MAAM,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC;wBAC1C,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC;oBAC5B,CAAC;gBACH,CAAC;YACH,CAAC;YAAC,MAAM,CAAC,CAAC,0BAA0B,CAAC,CAAC;QACxC,CAAC;QAED,OAAO,WAAW,IAAI,IAAI,CAAC;IAC7B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,gFAAgF;AAChF,MAAM,UAAU,kBAAkB;IAChC,MAAM,OAAO,GAAG,UAAU,EAAE,CAAC;IAC7B,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC;QAAE,OAAO;IAEpC,MAAM,OAAO,GAAG,EAAE,CAAC,WAAW,CAAC,OAAO,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC;SAC7D,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;IAElC,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;QACpD,MAAM,OAAO,GAAG,EAAE,CAAC,WAAW,CAAC,WAAW,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC;aACjE,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;QAElC,KAAK,MAAM,WAAW,IAAI,OAAO,EAAE,CAAC;YAClC,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,WAAW,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;YACvE,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC;gBAAE,SAAS;YAEvC,IAAI,CAAC;gBACH,MAAM,IAAI,GAAY,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC;gBACrE,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS;oBAAE,SAAS;gBACxC,IAAI,CAAC,IAAI,CAAC,GAAG;oBAAE,SAAS;gBAExB,IAAI,CAAC;oBACH,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;gBAC5B,CAAC;gBAAC,MAAM,CAAC,CAAC,+BAA+B;oBACvC,IAAI,CAAC,MAAM,GAAG,QAAQ,CAAC;oBACvB,IAAI,CAAC,WAAW,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;oBAC5C,YAAY,CAAC,IAAI,CAAC,CAAC;oBAEnB,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,WAAW,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;oBAC1E,oBAAoB,CAAC,UAAU,EAAE,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC;gBACzF,CAAC;YACH,CAAC;YAAC,MAAM,CAAC,CAAC,qCAAqC,CAAC,CAAC;QACnD,CAAC;IACH,CAAC;AACH,CAAC"}

package/dist/lib/sandbox.d.ts

@@ -1,26 +0,0 @@
-/**
- * Sandbox environment for routine job execution.
- *
- * Creates an overlay HOME directory per job with symlinked allowed
- * directories and agent-specific config files (permissions, settings).
- * The spawned agent process sees only the overlay, limiting filesystem
- * access to explicitly allowed paths.
- */
-import type { JobConfig } from './routines.js';
-/** Build a restricted environment for a sandboxed process, setting HOME to the overlay. */
-export declare function buildSpawnEnv(overlayHome: string, extraEnv?: Record<string, string>): Record<string, string>;
-/** Get the overlay HOME directory path for a named job. */
-export declare function getJobHomePath(name: string): string;
-/** Create a fresh overlay HOME for a job, including agent config and allowed-dir symlinks. */
-export declare function prepareJobHome(config: JobConfig): string;
-/** Remove a job's overlay HOME directory entirely. */
-export declare function cleanJobHome(name: string): void;
-/** Symlink allowed directories into the overlay HOME, skipping paths outside the real HOME. */
-export declare function symlinkAllowedDirs(overlayHome: string, dirs: string[]): void;
-/** Generate a Claude settings.json in the overlay with scoped permissions from the job config. */
-export declare function generateClaudeConfig(overlayHome: string, config: JobConfig): void;
-/** Generate a Codex config.toml in the overlay with model and approval-mode settings. */
-export declare function generateCodexConfig(overlayHome: string, config: JobConfig): void;
-/** Generate a Gemini settings.json in the overlay from the job's config block. */
-export declare function generateGeminiConfig(overlayHome: string, config: JobConfig): void;
-//# sourceMappingURL=sandbox.d.ts.map

package/dist/lib/sandbox.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"sandbox.d.ts","sourceRoot":"","sources":["../../src/lib/sandbox.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAKH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,eAAe,CAAC;AAsC/C,2FAA2F;AAC3F,wBAAgB,aAAa,CAAC,WAAW,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAc5G;AAED,2DAA2D;AAC3D,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAEnD;AAED,8FAA8F;AAC9F,wBAAgB,cAAc,CAAC,MAAM,EAAE,SAAS,GAAG,MAAM,CAmBxD;AAED,sDAAsD;AACtD,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAK/C;AAED,+FAA+F;AAC/F,wBAAgB,kBAAkB,CAAC,WAAW,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,IAAI,CA8B5E;AAED,kGAAkG;AAClG,wBAAgB,oBAAoB,CAAC,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,GAAG,IAAI,CA4EjF;AAED,yFAAyF;AACzF,wBAAgB,mBAAmB,CAAC,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,GAAG,IAAI,CAiChF;AAED,kFAAkF;AAClF,wBAAgB,oBAAoB,CAAC,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,GAAG,IAAI,CAqBjF"}

package/dist/lib/sandbox.js

@@ -1,218 +0,0 @@
-/**
- * Sandbox environment for routine job execution.
- *
- * Creates an overlay HOME directory per job with symlinked allowed
- * directories and agent-specific config files (permissions, settings).
- * The spawned agent process sees only the overlay, limiting filesystem
- * access to explicitly allowed paths.
- */
-import * as fs from 'fs';
-import * as path from 'path';
-import * as os from 'os';
-import { getRoutinesDir } from './state.js';
-const REAL_HOME = os.homedir();
-/** Environment variables forwarded from the parent process into the sandbox. */
-const ENV_ALLOWLIST = [
-    'PATH',
-    'SHELL',
-    'TERM',
-    'LANG',
-    'LC_ALL',
-    'LC_CTYPE',
-    'USER',
-    'LOGNAME',
-    'TMPDIR',
-    'XDG_RUNTIME_DIR',
-    'XDG_CONFIG_HOME',
-    'XDG_DATA_HOME',
-    'XDG_CACHE_HOME',
-    'NODE_PATH',
-    'NVM_DIR',
-    'BUN_INSTALL',
-    'EDITOR',
-    'VISUAL',
-    'NO_COLOR',
-    'FORCE_COLOR',
-];
-/** Tools safe to grant as wildcards (no filesystem access). */
-const SAFE_TOOLS = {
-    web_search: 'WebSearch(*)',
-    web_fetch: 'WebFetch(*)',
-};
-/** Bare tool names that get scoped to allow.dirs, never wildcarded. */
-const DIR_SCOPED_TOOLS = new Set(['read', 'write', 'edit', 'glob', 'grep', 'notebook_edit']);
-/** Build a restricted environment for a sandboxed process, setting HOME to the overlay. */
-export function buildSpawnEnv(overlayHome, extraEnv) {
-    const env = { HOME: overlayHome };
-    for (const key of ENV_ALLOWLIST) {
-        if (process.env[key]) {
-            env[key] = process.env[key];
-        }
-    }
-    if (extraEnv) {
-        Object.assign(env, extraEnv);
-    }
-    return env;
-}
-/** Get the overlay HOME directory path for a named job. */
-export function getJobHomePath(name) {
-    return path.join(getRoutinesDir(), name, 'home');
-}
-/** Create a fresh overlay HOME for a job, including agent config and allowed-dir symlinks. */
-export function prepareJobHome(config) {
-    const overlayHome = getJobHomePath(config.name);
-    cleanJobHome(config.name);
-    fs.mkdirSync(overlayHome, { recursive: true });
-    if (config.agent === 'claude') {
-        generateClaudeConfig(overlayHome, config);
-    }
-    else if (config.agent === 'codex') {
-        generateCodexConfig(overlayHome, config);
-    }
-    else if (config.agent === 'gemini') {
-        generateGeminiConfig(overlayHome, config);
-    }
-    if (config.allow?.dirs) {
-        symlinkAllowedDirs(overlayHome, config.allow.dirs);
-    }
-    return overlayHome;
-}
-/** Remove a job's overlay HOME directory entirely. */
-export function cleanJobHome(name) {
-    const overlayHome = getJobHomePath(name);
-    if (fs.existsSync(overlayHome)) {
-        fs.rmSync(overlayHome, { recursive: true, force: true });
-    }
-}
-/** Symlink allowed directories into the overlay HOME, skipping paths outside the real HOME. */
-export function symlinkAllowedDirs(overlayHome, dirs) {
-    for (const dir of dirs) {
-        const expanded = dir.replace(/^~/, REAL_HOME);
-        // Resolve .. and symlinks to prevent path traversal outside HOME
-        let realPath;
-        try {
-            // Use realpath if the directory exists (resolves symlinks)
-            realPath = fs.realpathSync(expanded);
-        }
-        catch {
-            // Directory doesn't exist yet — resolve .. components without following symlinks
-            realPath = path.resolve(expanded);
-        }
-        if (!realPath.startsWith(REAL_HOME + path.sep) && realPath !== REAL_HOME) {
-            continue;
-        }
-        const relativePath = path.relative(REAL_HOME, realPath);
-        const symlinkTarget = path.join(overlayHome, relativePath);
-        const parentDir = path.dirname(symlinkTarget);
-        fs.mkdirSync(parentDir, { recursive: true });
-        if (!fs.existsSync(symlinkTarget)) {
-            try {
-                fs.symlinkSync(realPath, symlinkTarget);
-            }
-            catch { /* symlink already exists */ }
-        }
-    }
-}
-/** Generate a Claude settings.json in the overlay with scoped permissions from the job config. */
-export function generateClaudeConfig(overlayHome, config) {
-    const claudeDir = path.join(overlayHome, '.claude');
-    fs.mkdirSync(claudeDir, { recursive: true });
-    const allowPermissions = [];
-    const enabledTools = new Set(config.allow?.tools || []);
-    if (config.allow?.tools) {
-        for (const tool of config.allow.tools) {
-            // Safe wildcards (no filesystem access)
-            if (tool in SAFE_TOOLS) {
-                allowPermissions.push(SAFE_TOOLS[tool]);
-                continue;
-            }
-            // Bare filesystem tool names — permissions come from allow.dirs
-            if (DIR_SCOPED_TOOLS.has(tool)) {
-                continue;
-            }
-            // Bare "bash" — must use scoped pattern like "Bash(git *)"
-            if (tool === 'bash') {
-                throw new Error('Bare "bash" not allowed in sandbox — use scoped patterns like "Bash(git *)"');
-            }
-            // Reject wildcard patterns like Bash(*), Read(*)
-            if (/^\w+\(\*\)$/.test(tool)) {
-                throw new Error(`Wildcard "${tool}" not allowed in sandbox — use scoped patterns`);
-            }
-            // Scoped pattern like "Bash(git *)" — pass through
-            allowPermissions.push(tool);
-        }
-    }
-    // Scope filesystem tools to allowed dirs
-    if (config.allow?.dirs) {
-        for (const dir of config.allow.dirs) {
-            const resolved = dir.replace(/^~/, REAL_HOME);
-            // Read always granted for allowed dirs
-            allowPermissions.push(`Read(${resolved}/**)`);
-            if (config.mode === 'edit') {
-                allowPermissions.push(`Write(${resolved}/**)`);
-                allowPermissions.push(`Edit(${resolved}/**)`);
-            }
-            if (enabledTools.has('glob')) {
-                allowPermissions.push(`Glob(${resolved}/**)`);
-            }
-            if (enabledTools.has('grep')) {
-                allowPermissions.push(`Grep(${resolved}/**)`);
-            }
-            if (enabledTools.has('notebook_edit') && config.mode === 'edit') {
-                allowPermissions.push(`NotebookEdit(${resolved}/**)`);
-            }
-        }
-    }
-    const settings = {
-        permissions: {
-            allow: allowPermissions,
-            deny: [],
-        },
-    };
-    fs.writeFileSync(path.join(claudeDir, 'settings.json'), JSON.stringify(settings, null, 2), 'utf-8');
-}
-/** Generate a Codex config.toml in the overlay with model and approval-mode settings. */
-export function generateCodexConfig(overlayHome, config) {
-    const codexDir = path.join(overlayHome, '.codex');
-    fs.mkdirSync(codexDir, { recursive: true });
-    const lines = [];
-    const model = config.config?.model;
-    if (model) {
-        lines.push(`model = "${model}"`);
-    }
-    if (config.mode === 'edit') {
-        lines.push('approval_mode = "full-auto"');
-    }
-    else {
-        lines.push('approval_mode = "suggest"');
-    }
-    if (config.config) {
-        for (const [key, value] of Object.entries(config.config)) {
-            if (key === 'model')
-                continue;
-            if (typeof value === 'string') {
-                lines.push(`${key} = "${value}"`);
-            }
-            else if (typeof value === 'boolean' || typeof value === 'number') {
-                lines.push(`${key} = ${value}`);
-            }
-        }
-    }
-    fs.writeFileSync(path.join(codexDir, 'config.toml'), lines.join('\n') + '\n', 'utf-8');
-}
-/** Generate a Gemini settings.json in the overlay from the job's config block. */
-export function generateGeminiConfig(overlayHome, config) {
-    const geminiDir = path.join(overlayHome, '.gemini');
-    fs.mkdirSync(geminiDir, { recursive: true });
-    const settings = {};
-    if (config.config?.model) {
-        settings.model = config.config.model;
-    }
-    if (config.config) {
-        for (const [key, value] of Object.entries(config.config)) {
-            settings[key] = value;
-        }
-    }
-    fs.writeFileSync(path.join(geminiDir, 'settings.json'), JSON.stringify(settings, null, 2), 'utf-8');
-}
-//# sourceMappingURL=sandbox.js.map

package/dist/lib/sandbox.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"sandbox.js","sourceRoot":"","sources":["../../src/lib/sandbox.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,KAAK,EAAE,MAAM,IAAI,CAAC;AACzB,OAAO,KAAK,IAAI,MAAM,MAAM,CAAC;AAC7B,OAAO,KAAK,EAAE,MAAM,IAAI,CAAC;AAEzB,OAAO,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAE5C,MAAM,SAAS,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC;AAE/B,gFAAgF;AAChF,MAAM,aAAa,GAAG;IACpB,MAAM;IACN,OAAO;IACP,MAAM;IACN,MAAM;IACN,QAAQ;IACR,UAAU;IACV,MAAM;IACN,SAAS;IACT,QAAQ;IACR,iBAAiB;IACjB,iBAAiB;IACjB,eAAe;IACf,gBAAgB;IAChB,WAAW;IACX,SAAS;IACT,aAAa;IACb,QAAQ;IACR,QAAQ;IACR,UAAU;IACV,aAAa;CACd,CAAC;AAEF,+DAA+D;AAC/D,MAAM,UAAU,GAA2B;IACzC,UAAU,EAAE,cAAc;IAC1B,SAAS,EAAE,aAAa;CACzB,CAAC;AAEF,uEAAuE;AACvE,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,eAAe,CAAC,CAAC,CAAC;AAE7F,2FAA2F;AAC3F,MAAM,UAAU,aAAa,CAAC,WAAmB,EAAE,QAAiC;IAClF,MAAM,GAAG,GAA2B,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC;IAE1D,KAAK,MAAM,GAAG,IAAI,aAAa,EAAE,CAAC;QAChC,IAAI,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YACrB,GAAG,CAAC,GAAG,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,GAAG,CAAE,CAAC;QAC/B,CAAC;IACH,CAAC;IAED,IAAI,QAAQ,EAAE,CAAC;QACb,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;IAC/B,CAAC;IAED,OAAO,GAAG,CAAC;AACb,CAAC;AAED,2DAA2D;AAC3D,MAAM,UAAU,cAAc,CAAC,IAAY;IACzC,OAAO,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;AACnD,CAAC;AAED,8FAA8F;AAC9F,MAAM,UAAU,cAAc,CAAC,MAAiB;IAC9C,MAAM,WAAW,GAAG,cAAc,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAEhD,YAAY,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAC1B,EAAE,CAAC,SAAS,CAAC,WAAW,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAE/C,IAAI,MAAM,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,oBAAoB,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;IAC5C,CAAC;SAAM,IAAI,MAAM,CAAC,KAAK,KAAK,OAAO,EAAE,CAAC;QACpC,mBAAmB,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;IAC3C,CAAC;SAAM,IAAI,MAAM,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;QACrC,oBAAoB,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;IAC5C,CAAC;IAED,IAAI,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC;QACvB,kBAAkB,CAAC,WAAW,EAAE,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACrD,CAAC;IAED,OAAO,WAAW,CAAC;AACrB,CAAC;AAED,sDAAsD;AACtD,MAAM,UAAU,YAAY,CAAC,IAAY;IACvC,MAAM,WAAW,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC;IACzC,IAAI,EAAE,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;QAC/B,EAAE,CAAC,MAAM,CAAC,WAAW,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAC3D,CAAC;AACH,CAAC;AAED,+FAA+F;AAC/F,MAAM,UAAU,kBAAkB,CAAC,WAAmB,EAAE,IAAc;IACpE,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,MAAM,QAAQ,GAAG,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;QAE9C,iEAAiE;QACjE,IAAI,QAAgB,CAAC;QACrB,IAAI,CAAC;YACH,2DAA2D;YAC3D,QAAQ,GAAG,EAAE,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;QACvC,CAAC;QAAC,MAAM,CAAC;YACP,iFAAiF;YACjF,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QACpC,CAAC;QAED,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YACzE,SAAS;QACX,CAAC;QAED,MAAM,YAAY,GAAG,IAAI,CAAC,QAAQ,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;QACxD,MAAM,aAAa,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,YAAY,CAAC,CAAC;QAC3D,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;QAE9C,EAAE,CAAC,SAAS,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAE7C,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,aAAa,CAAC,EAAE,CAAC;YAClC,IAAI,CAAC;gBACH,EAAE,CAAC,WAAW,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC;YAC1C,CAAC;YAAC,MAAM,CAAC,CAAC,4BAA4B,CAAC,CAAC;QAC1C,CAAC;IACH,CAAC;AACH,CAAC;AAED,kGAAkG;AAClG,MAAM,UAAU,oBAAoB,CAAC,WAAmB,EAAE,MAAiB;IACzE,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC;IACpD,EAAE,CAAC,SAAS,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAE7C,MAAM,gBAAgB,GAAa,EAAE,CAAC;IACtC,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,KAAK,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC;IAExD,IAAI,MAAM,CAAC,KAAK,EAAE,KAAK,EAAE,CAAC;QACxB,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;YACtC,wCAAwC;YACxC,IAAI,IAAI,IAAI,UAAU,EAAE,CAAC;gBACvB,gBAAgB,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC;gBACxC,SAAS;YACX,CAAC;YAED,gEAAgE;YAChE,IAAI,gBAAgB,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC/B,SAAS;YACX,CAAC;YAED,2DAA2D;YAC3D,IAAI,IAAI,KAAK,MAAM,EAAE,CAAC;gBACpB,MAAM,IAAI,KAAK,CACb,6EAA6E,CAC9E,CAAC;YACJ,CAAC;YAED,iDAAiD;YACjD,IAAI,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC7B,MAAM,IAAI,KAAK,CACb,aAAa,IAAI,gDAAgD,CAClE,CAAC;YACJ,CAAC;YAED,mDAAmD;YACnD,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC9B,CAAC;IACH,CAAC;IAED,yCAAyC;IACzC,IAAI,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC;QACvB,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;YACpC,MAAM,QAAQ,GAAG,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;YAE9C,uCAAuC;YACvC,gBAAgB,CAAC,IAAI,CAAC,QAAQ,QAAQ,MAAM,CAAC,CAAC;YAE9C,IAAI,MAAM,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;gBAC3B,gBAAgB,CAAC,IAAI,CAAC,SAAS,QAAQ,MAAM,CAAC,CAAC;gBAC/C,gBAAgB,CAAC,IAAI,CAAC,QAAQ,QAAQ,MAAM,CAAC,CAAC;YAChD,CAAC;YAED,IAAI,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;gBAC7B,gBAAgB,CAAC,IAAI,CAAC,QAAQ,QAAQ,MAAM,CAAC,CAAC;YAChD,CAAC;YACD,IAAI,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;gBAC7B,gBAAgB,CAAC,IAAI,CAAC,QAAQ,QAAQ,MAAM,CAAC,CAAC;YAChD,CAAC;YACD,IAAI,YAAY,CAAC,GAAG,CAAC,eAAe,CAAC,IAAI,MAAM,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;gBAChE,gBAAgB,CAAC,IAAI,CAAC,gBAAgB,QAAQ,MAAM,CAAC,CAAC;YACxD,CAAC;QACH,CAAC;IACH,CAAC;IAED,MAAM,QAAQ,GAA4B;QACxC,WAAW,EAAE;YACX,KAAK,EAAE,gBAAgB;YACvB,IAAI,EAAE,EAAE;SACT;KACF,CAAC;IAEF,EAAE,CAAC,aAAa,CACd,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,eAAe,CAAC,EACrC,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,EACjC,OAAO,CACR,CAAC;AACJ,CAAC;AAED,yFAAyF;AACzF,MAAM,UAAU,mBAAmB,CAAC,WAAmB,EAAE,MAAiB;IACxE,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;IAClD,EAAE,CAAC,SAAS,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAE5C,MAAM,KAAK,GAAa,EAAE,CAAC;IAE3B,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,EAAE,KAA2B,CAAC;IACzD,IAAI,KAAK,EAAE,CAAC;QACV,KAAK,CAAC,IAAI,CAAC,YAAY,KAAK,GAAG,CAAC,CAAC;IACnC,CAAC;IAED,IAAI,MAAM,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;QAC3B,KAAK,CAAC,IAAI,CAAC,6BAA6B,CAAC,CAAC;IAC5C,CAAC;SAAM,CAAC;QACN,KAAK,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC;IAC1C,CAAC;IAED,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;QAClB,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;YACzD,IAAI,GAAG,KAAK,OAAO;gBAAE,SAAS;YAC9B,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;gBAC9B,KAAK,CAAC,IAAI,CAAC,GAAG,GAAG,OAAO,KAAK,GAAG,CAAC,CAAC;YACpC,CAAC;iBAAM,IAAI,OAAO,KAAK,KAAK,SAAS,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;gBACnE,KAAK,CAAC,IAAI,CAAC,GAAG,GAAG,MAAM,KAAK,EAAE,CAAC,CAAC;YAClC,CAAC;QACH,CAAC;IACH,CAAC;IAED,EAAE,CAAC,aAAa,CACd,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,aAAa,CAAC,EAClC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,EACvB,OAAO,CACR,CAAC;AACJ,CAAC;AAED,kFAAkF;AAClF,MAAM,UAAU,oBAAoB,CAAC,WAAmB,EAAE,MAAiB;IACzE,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC;IACpD,EAAE,CAAC,SAAS,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAE7C,MAAM,QAAQ,GAA4B,EAAE,CAAC;IAE7C,IAAI,MAAM,CAAC,MAAM,EAAE,KAAK,EAAE,CAAC;QACzB,QAAQ,CAAC,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC;IACvC,CAAC;IAED,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;QAClB,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;YACzD,QAAQ,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;QACxB,CAAC;IACH,CAAC;IAED,EAAE,CAAC,aAAa,CACd,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,eAAe,CAAC,EACrC,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,EACjC,OAAO,CACR,CAAC;AACJ,CAAC"}

package/dist/lib/scheduler.d.ts

@@ -1,26 +0,0 @@
-/**
- * Cron-based job scheduler for routines.
- *
- * Wraps the croner library to manage scheduled jobs in-memory. The daemon
- * process creates a single JobScheduler instance that loads enabled jobs
- * on startup and reloads them on SIGHUP.
- */
-import type { JobConfig } from './routines.js';
-/** In-memory cron scheduler that triggers a callback when jobs fire. */
-export declare class JobScheduler {
-    private jobs;
-    private onTrigger;
-    constructor(onTrigger: (config: JobConfig) => Promise<void>);
-    loadAll(): void;
-    schedule(config: JobConfig): void;
-    unschedule(name: string): void;
-    reloadAll(): void;
-    stopAll(): void;
-    getNextRun(name: string): Date | null;
-    listScheduled(): Array<{
-        name: string;
-        nextRun: Date | null;
-        enabled: boolean;
-    }>;
-}
-//# sourceMappingURL=scheduler.d.ts.map

package/dist/lib/scheduler.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"scheduler.d.ts","sourceRoot":"","sources":["../../src/lib/scheduler.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAGH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,eAAe,CAAC;AAS/C,wEAAwE;AACxE,qBAAa,YAAY;IACvB,OAAO,CAAC,IAAI,CAAmC;IAC/C,OAAO,CAAC,SAAS,CAAuC;gBAE5C,SAAS,EAAE,CAAC,MAAM,EAAE,SAAS,KAAK,OAAO,CAAC,IAAI,CAAC;IAI3D,OAAO,IAAI,IAAI;IASf,QAAQ,CAAC,MAAM,EAAE,SAAS,GAAG,IAAI;IAoBjC,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI;IAQ9B,SAAS,IAAI,IAAI;IAKjB,OAAO,IAAI,IAAI;IAOf,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,GAAG,IAAI;IAMrC,aAAa,IAAI,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,IAAI,GAAG,IAAI,CAAC;QAAC,OAAO,EAAE,OAAO,CAAA;KAAE,CAAC;CAWjF"}