@zhin.js/agent 1.1.3 → 1.1.6

package/lib/schedule-domain/execution-domain.js

@@ -0,0 +1,125 @@
+import { randomUUID } from 'node:crypto';
+import { DEFAULT_CONFIG } from '../config/zhin-agent-defaults.js';
+import { BudgetGuard } from './budget-guard.js';
+import { JsonlScheduleAuditLogger, createScheduleAuditRecord, } from './audit-logger.js';
+import { validateScheduleOutput } from './output-validator.js';
+import { createScheduleSecurityContext } from './security-harness.js';
+function textFromElements(elements) {
+    return elements.map(element => {
+        if (element.type === 'text')
+            return element.content || '';
+        if (element.type === 'image')
+            return `<image url="${element.url}"/>`;
+        return '';
+    }).join('\n').trim();
+}
+function resolveBudget(config, job) {
+    const global = config.schedule?.budget ?? DEFAULT_CONFIG.schedule?.budget ?? {};
+    return {
+        maxTokens: job.budget?.maxTokens ?? global.maxTokens ?? 32_000,
+        maxToolCalls: job.budget?.maxToolCalls ?? global.maxToolCalls ?? 15,
+        timeoutMs: job.budget?.timeoutMs ?? global.timeoutMs ?? 120_000,
+    };
+}
+function terminationLabel(reason) {
+    if (reason === 'token_limit')
+        return 'token 预算耗尽';
+    if (reason === 'tool_limit')
+        return '工具调用预算耗尽';
+    return '执行超时';
+}
+export class ScheduleExecutionDomainImpl {
+    deps;
+    auditLogger;
+    now;
+    constructor(deps) {
+        this.deps = deps;
+        this.auditLogger = deps.auditLogger ?? new JsonlScheduleAuditLogger();
+        this.now = deps.now ?? Date.now;
+    }
+    async execute(job, message, options = {}) {
+        const startedAt = this.now();
+        const executionId = randomUUID();
+        const prompt = job.executionPlan?.prompt?.trim() || job.action.prompt.trim();
+        const scheduleContext = {
+            jobId: job.id,
+            preview: options.preview || undefined,
+            executionPlan: job.executionPlan,
+            createdBy: job.createdBy,
+            activityFeedback: job.activityFeedback,
+            security: createScheduleSecurityContext(this.deps.agent.config.schedule?.security?.execPreset ?? 'readonly', this.deps.agent.config.schedule?.security?.allowedDomains ?? []),
+            securityDenials: [],
+        };
+        const guard = new BudgetGuard(resolveBudget(this.deps.agent.config, job));
+        let streamed = '';
+        let usageSeen = false;
+        let cumulativeUsage = { input: 0, output: 0 };
+        const guarded = await guard.run(async (budget) => this.deps.agent.processTurn({
+            content: prompt,
+            message,
+            signal: budget.signal,
+            scheduleContext,
+            activityFeedbackEligible: false,
+            onChunk: (_chunk, full) => { streamed = full; },
+            onTurnEvent: (event) => {
+                if (event.type === 'tool_call')
+                    budget.onToolCall(event.toolName);
+                if (event.type === 'usage') {
+                    usageSeen = true;
+                    cumulativeUsage = {
+                        input: cumulativeUsage.input + event.usage.promptTokens,
+                        output: cumulativeUsage.output + event.usage.completionTokens,
+                    };
+                    budget.onUsage(cumulativeUsage.input, cumulativeUsage.output);
+                }
+                else if (event.type === 'turn_end' && !usageSeen) {
+                    budget.onUsage(event.usage.promptTokens, event.usage.completionTokens);
+                }
+            },
+        }));
+        const raw = guarded.value ? textFromElements(guarded.value) : streamed;
+        const validation = validateScheduleOutput(raw);
+        const suffix = guarded.terminatedBy ? `\n\n[任务因${terminationLabel(guarded.terminatedBy)}被终止]` : '';
+        const output = validation.valid ? `${validation.cleaned}${suffix}` : '';
+        const durationMs = this.now() - startedAt;
+        const resolution = scheduleContext.toolResolution ?? {
+            tools: [], skills: [], resolvedBy: 'affinity', missingTools: [], missingSkills: [],
+        };
+        const acceptedPartial = Boolean(guarded.terminatedBy && validation.valid);
+        const error = acceptedPartial
+            ? undefined
+            : guarded.error?.message ?? (validation.valid ? undefined : 'schedule output is empty after validation');
+        const audit = createScheduleAuditRecord({
+            jobId: job.id,
+            executionId,
+            timestamp: startedAt,
+            createdBy: job.createdBy,
+            prompt,
+            toolsResolved: resolution.tools,
+            toolsResolvedBy: resolution.resolvedBy,
+            skillsResolved: resolution.skills,
+            missingTools: resolution.missingTools,
+            missingSkills: resolution.missingSkills,
+            toolsUsed: guarded.toolCalls,
+            tokenUsage: guarded.tokenUsage,
+            durationMs,
+            budgetTerminated: guarded.terminatedBy,
+            securityDenials: scheduleContext.securityDenials,
+            success: acceptedPartial || (!guarded.error && validation.valid),
+            outputLength: output.length,
+            outputStripped: validation.stripped,
+            error,
+        });
+        await this.auditLogger.write(audit);
+        return {
+            success: audit.success,
+            output,
+            durationMs,
+            toolsUsed: guarded.toolCalls,
+            tokenUsage: guarded.tokenUsage,
+            error: audit.error,
+            audit,
+        };
+    }
+}
+//# sourceMappingURL=execution-domain.js.map

package/lib/schedule-domain/execution-domain.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"execution-domain.js","sourceRoot":"","sources":["../../src/schedule-domain/execution-domain.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAMzC,OAAO,EAAE,cAAc,EAAE,MAAM,kCAAkC,CAAC;AAClE,OAAO,EAAE,WAAW,EAAgC,MAAM,mBAAmB,CAAC;AAC9E,OAAO,EACL,wBAAwB,EACxB,yBAAyB,GAG1B,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,sBAAsB,EAAE,MAAM,uBAAuB,CAAC;AAC/D,OAAO,EAAE,6BAA6B,EAAE,MAAM,uBAAuB,CAAC;AAuCtE,SAAS,gBAAgB,CAAC,QAAyB;IACjD,OAAO,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE;QAC5B,IAAI,OAAO,CAAC,IAAI,KAAK,MAAM;YAAE,OAAO,OAAO,CAAC,OAAO,IAAI,EAAE,CAAC;QAC1D,IAAI,OAAO,CAAC,IAAI,KAAK,OAAO;YAAE,OAAO,eAAe,OAAO,CAAC,GAAG,KAAK,CAAC;QACrE,OAAO,EAAE,CAAC;IACZ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC;AACvB,CAAC;AAED,SAAS,aAAa,CAAC,MAAiC,EAAE,GAAgB;IACxE,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,EAAE,MAAM,IAAI,cAAc,CAAC,QAAQ,EAAE,MAAM,IAAI,EAAE,CAAC;IAChF,OAAO;QACL,SAAS,EAAE,GAAG,CAAC,MAAM,EAAE,SAAS,IAAI,MAAM,CAAC,SAAS,IAAI,MAAM;QAC9D,YAAY,EAAE,GAAG,CAAC,MAAM,EAAE,YAAY,IAAI,MAAM,CAAC,YAAY,IAAI,EAAE;QACnE,SAAS,EAAE,GAAG,CAAC,MAAM,EAAE,SAAS,IAAI,MAAM,CAAC,SAAS,IAAI,OAAO;KAChE,CAAC;AACJ,CAAC;AAED,SAAS,gBAAgB,CAAC,MAA4D;IACpF,IAAI,MAAM,KAAK,aAAa;QAAE,OAAO,YAAY,CAAC;IAClD,IAAI,MAAM,KAAK,YAAY;QAAE,OAAO,UAAU,CAAC;IAC/C,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,OAAO,2BAA2B;IAIT;IAHZ,WAAW,CAAsB;IACjC,GAAG,CAAe;IAEnC,YAA6B,IAAiC;QAAjC,SAAI,GAAJ,IAAI,CAA6B;QAC5D,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,WAAW,IAAI,IAAI,wBAAwB,EAAE,CAAC;QACtE,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC;IAClC,CAAC;IAED,KAAK,CAAC,OAAO,CACX,GAAgB,EAChB,OAAgB,EAChB,UAAoC,EAAE;QAEtC,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC7B,MAAM,WAAW,GAAG,UAAU,EAAE,CAAC;QACjC,MAAM,MAAM,GAAG,GAAG,CAAC,aAAa,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;QAC7E,MAAM,eAAe,GAAgE;YACnF,KAAK,EAAE,GAAG,CAAC,EAAE;YACb,OAAO,EAAE,OAAO,CAAC,OAAO,IAAI,SAAS;YACrC,aAAa,EAAE,GAAG,CAAC,aAAa;YAChC,SAAS,EAAE,GAAG,CAAC,SAAS;YACxB,gBAAgB,EAAE,GAAG,CAAC,gBAAgB;YACtC,QAAQ,EAAE,6BAA6B,CACrC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,EAAE,QAAQ,EAAE,UAAU,IAAI,UAAU,EACnE,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,EAAE,QAAQ,EAAE,cAAc,IAAI,EAAE,CAChE;YACD,eAAe,EAAE,EAAE;SACpB,CAAC;QACF,MAAM,KAAK,GAAG,IAAI,WAAW,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC;QAC1E,IAAI,QAAQ,GAAG,EAAE,CAAC;QAClB,IAAI,SAAS,GAAG,KAAK,CAAC;QACtB,IAAI,eAAe,GAAG,EAAE,KAAK,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC;QAE9C,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,KAAK,EAAC,MAAM,EAAC,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC;YACxE,OAAO,EAAE,MAAM;YACf,OAAO;YACP,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,eAAe;YACf,wBAAwB,EAAE,KAAK;YAC/B,OAAO,EAAE,CAAC,MAAM,EAAE,IAAI,EAAE,EAAE,GAAG,QAAQ,GAAG,IAAI,CAAC,CAAC,CAAC;YAC/C,WAAW,EAAE,CAAC,KAAgB,EAAE,EAAE;gBAChC,IAAI,KAAK,CAAC,IAAI,KAAK,WAAW;oBAAE,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;gBAClE,IAAI,KAAK,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;oBAC3B,SAAS,GAAG,IAAI,CAAC;oBACjB,eAAe,GAAG;wBAChB,KAAK,EAAE,eAAe,CAAC,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,YAAY;wBACvD,MAAM,EAAE,eAAe,CAAC,MAAM,GAAG,KAAK,CAAC,KAAK,CAAC,gBAAgB;qBAC9D,CAAC;oBACF,MAAM,CAAC,OAAO,CAAC,eAAe,CAAC,KAAK,EAAE,eAAe,CAAC,MAAM,CAAC,CAAC;gBAChE,CAAC;qBAAM,IAAI,KAAK,CAAC,IAAI,KAAK,UAAU,IAAI,CAAC,SAAS,EAAE,CAAC;oBACnD,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,YAAY,EAAE,KAAK,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC;gBACzE,CAAC;YACH,CAAC;SACJ,CAAC,CAAC,CAAC;QACJ,MAAM,GAAG,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,gBAAgB,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;QACvE,MAAM,UAAU,GAAG,sBAAsB,CAAC,GAAG,CAAC,CAAC;QAC/C,MAAM,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,WAAW,gBAAgB,CAAC,OAAO,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;QACnG,MAAM,MAAM,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,UAAU,CAAC,OAAO,GAAG,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACxE,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;QAC1C,MAAM,UAAU,GAAG,eAAe,CAAC,cAAc,IAAI;YACnD,KAAK,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,UAAU,EAAE,UAAmB,EAAE,YAAY,EAAE,EAAE,EAAE,aAAa,EAAE,EAAE;SAC5F,CAAC;QACF,MAAM,eAAe,GAAG,OAAO,CAAC,OAAO,CAAC,YAAY,IAAI,UAAU,CAAC,KAAK,CAAC,CAAC;QAC1E,MAAM,KAAK,GAAG,eAAe;YAC3B,CAAC,CAAC,SAAS;YACX,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,2CAA2C,CAAC,CAAC;QAC3G,MAAM,KAAK,GAAG,yBAAyB,CAAC;YACtC,KAAK,EAAE,GAAG,CAAC,EAAE;YACb,WAAW;YACX,SAAS,EAAE,SAAS;YACpB,SAAS,EAAE,GAAG,CAAC,SAAS;YACxB,MAAM;YACN,aAAa,EAAE,UAAU,CAAC,KAAK;YAC/B,eAAe,EAAE,UAAU,CAAC,UAAU;YACtC,cAAc,EAAE,UAAU,CAAC,MAAM;YACjC,YAAY,EAAE,UAAU,CAAC,YAAY;YACrC,aAAa,EAAE,UAAU,CAAC,aAAa;YACvC,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,UAAU,EAAE,OAAO,CAAC,UAAU;YAC9B,UAAU;YACV,gBAAgB,EAAE,OAAO,CAAC,YAAY;YACtC,eAAe,EAAE,eAAe,CAAC,eAAe;YAChD,OAAO,EAAE,eAAe,IAAI,CAAC,CAAC,OAAO,CAAC,KAAK,IAAI,UAAU,CAAC,KAAK,CAAC;YAChE,YAAY,EAAE,MAAM,CAAC,MAAM;YAC3B,cAAc,EAAE,UAAU,CAAC,QAAQ;YACnC,KAAK;SACN,CAAC,CAAC;QACH,MAAM,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QACpC,OAAO;YACL,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,MAAM;YACN,UAAU;YACV,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,UAAU,EAAE,OAAO,CAAC,UAAU;YAC9B,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,KAAK;SACN,CAAC;IACJ,CAAC;CACF"}

package/lib/schedule-domain/index.d.ts

@@ -0,0 +1,8 @@
+export * from './audit-logger.js';
+export * from './budget-guard.js';
+export * from './execution-domain.js';
+export * from './output-validator.js';
+export * from './prompt-assembler.js';
+export * from './security-harness.js';
+export * from './tool-resolver.js';
+//# sourceMappingURL=index.d.ts.map

package/lib/schedule-domain/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/schedule-domain/index.ts"],"names":[],"mappings":"AAAA,cAAc,mBAAmB,CAAC;AAClC,cAAc,mBAAmB,CAAC;AAClC,cAAc,uBAAuB,CAAC;AACtC,cAAc,uBAAuB,CAAC;AACtC,cAAc,uBAAuB,CAAC;AACtC,cAAc,uBAAuB,CAAC;AACtC,cAAc,oBAAoB,CAAC"}

package/lib/schedule-domain/index.js

@@ -0,0 +1,8 @@
+export * from './audit-logger.js';
+export * from './budget-guard.js';
+export * from './execution-domain.js';
+export * from './output-validator.js';
+export * from './prompt-assembler.js';
+export * from './security-harness.js';
+export * from './tool-resolver.js';
+//# sourceMappingURL=index.js.map

package/lib/schedule-domain/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/schedule-domain/index.ts"],"names":[],"mappings":"AAAA,cAAc,mBAAmB,CAAC;AAClC,cAAc,mBAAmB,CAAC;AAClC,cAAc,uBAAuB,CAAC;AACtC,cAAc,uBAAuB,CAAC;AACtC,cAAc,uBAAuB,CAAC;AACtC,cAAc,uBAAuB,CAAC;AACtC,cAAc,oBAAoB,CAAC"}

package/lib/schedule-domain/output-validator.d.ts

@@ -0,0 +1,7 @@
+export interface OutputValidation {
+    valid: boolean;
+    cleaned: string;
+    stripped: string[];
+}
+export declare function validateScheduleOutput(output: string): OutputValidation;
+//# sourceMappingURL=output-validator.d.ts.map

package/lib/schedule-domain/output-validator.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"output-validator.d.ts","sourceRoot":"","sources":["../../src/schedule-domain/output-validator.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,gBAAgB;IAC/B,KAAK,EAAE,OAAO,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,EAAE,CAAC;CACpB;AAMD,wBAAgB,sBAAsB,CAAC,MAAM,EAAE,MAAM,GAAG,gBAAgB,CA+BvE"}

package/lib/schedule-domain/output-validator.js

@@ -0,0 +1,36 @@
+const LEADING_META = /^(收到|好的|好[，,。!！]|没问题|正在|已完成|为您|帮你|我(?:来|会|将))/u;
+const TRAILING_META = /^(?:如果.*(?:可以|请|告诉)|还有.*需要|希望.*帮助)/u;
+const SYSTEM_MARKER = /^\s*\[(?:系统|任务|调度|schedule)\]\s*/iu;
+export function validateScheduleOutput(output) {
+    const stripped = [];
+    const paragraphs = output
+        .replace(/\r\n?/g, '\n')
+        .split(/\n\s*\n|\n/)
+        .map(part => part.trim())
+        .map(part => {
+        if (!SYSTEM_MARKER.test(part))
+            return part;
+        const cleaned = part.replace(SYSTEM_MARKER, '').trim();
+        if (!cleaned || LEADING_META.test(cleaned)) {
+            stripped.push(part);
+            return '';
+        }
+        stripped.push(part.slice(0, part.length - cleaned.length));
+        return cleaned;
+    })
+        .filter(Boolean);
+    while (paragraphs.length > 0) {
+        const first = paragraphs[0];
+        if (LEADING_META.test(first)) {
+            stripped.push(paragraphs.shift());
+            continue;
+        }
+        break;
+    }
+    while (paragraphs.length > 0 && TRAILING_META.test(paragraphs[paragraphs.length - 1])) {
+        stripped.push(paragraphs.pop());
+    }
+    const cleaned = paragraphs.join('\n\n').trim();
+    return { valid: cleaned.length > 0, cleaned, stripped };
+}
+//# sourceMappingURL=output-validator.js.map

package/lib/schedule-domain/output-validator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"output-validator.js","sourceRoot":"","sources":["../../src/schedule-domain/output-validator.ts"],"names":[],"mappings":"AAMA,MAAM,YAAY,GAAG,gDAAgD,CAAC;AACtE,MAAM,aAAa,GAAG,qCAAqC,CAAC;AAC5D,MAAM,aAAa,GAAG,oCAAoC,CAAC;AAE3D,MAAM,UAAU,sBAAsB,CAAC,MAAc;IACnD,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,MAAM,UAAU,GAAG,MAAM;SACtB,OAAO,CAAC,QAAQ,EAAE,IAAI,CAAC;SACvB,KAAK,CAAC,YAAY,CAAC;SACnB,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;SACxB,GAAG,CAAC,IAAI,CAAC,EAAE;QACV,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,OAAO,IAAI,CAAC;QAC3C,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,aAAa,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QACvD,IAAI,CAAC,OAAO,IAAI,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YAC3C,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACpB,OAAO,EAAE,CAAC;QACZ,CAAC;QACD,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC;QAC3D,OAAO,OAAO,CAAC;IACjB,CAAC,CAAC;SACD,MAAM,CAAC,OAAO,CAAC,CAAC;IACnB,OAAO,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC7B,MAAM,KAAK,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC;QAC5B,IAAI,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;YAC7B,QAAQ,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,EAAG,CAAC,CAAC;YACnC,SAAS;QACX,CAAC;QACD,MAAM;IACR,CAAC;IACD,OAAO,UAAU,CAAC,MAAM,GAAG,CAAC,IAAI,aAAa,CAAC,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;QACtF,QAAQ,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,EAAG,CAAC,CAAC;IACnC,CAAC;IAED,MAAM,OAAO,GAAG,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;IAC/C,OAAO,EAAE,KAAK,EAAE,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC;AAC1D,CAAC"}

package/lib/schedule-domain/prompt-assembler.d.ts

@@ -0,0 +1,22 @@
+import type { ScheduleJobCreator } from '../assistant/types.js';
+import type { ZhinAgentPrivate } from '../internal/agent-host.js';
+import type { HostScheduleSecurityContext } from '../internal/host-types.js';
+export interface SchedulePromptAssemblerInput {
+    jobId: string;
+    prompt: string;
+    createdBy?: ScheduleJobCreator;
+    now?: Date;
+    timeZone?: string;
+    platformContext?: string;
+    memoryContext?: string;
+    skillContext?: string;
+    bootstrapContext?: string;
+    security?: Readonly<Pick<HostScheduleSecurityContext, 'execPreset'>>;
+}
+export interface SchedulePromptAssembly {
+    systemPrompt: string;
+    userPrompt: string;
+}
+export declare function assembleSchedulePrompt(input: SchedulePromptAssemblerInput): SchedulePromptAssembly;
+export declare function loadScheduleSkillContext(host: ZhinAgentPrivate, skillNames: string[]): Promise<string>;
+//# sourceMappingURL=prompt-assembler.d.ts.map

package/lib/schedule-domain/prompt-assembler.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"prompt-assembler.d.ts","sourceRoot":"","sources":["../../src/schedule-domain/prompt-assembler.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAGhE,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,2BAA2B,CAAC;AAClE,OAAO,KAAK,EAAE,2BAA2B,EAAE,MAAM,2BAA2B,CAAC;AAE7E,MAAM,WAAW,4BAA4B;IAC3C,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,kBAAkB,CAAC;IAC/B,GAAG,CAAC,EAAE,IAAI,CAAC;IACX,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,EAAE,QAAQ,CAAC,IAAI,CAAC,2BAA2B,EAAE,YAAY,CAAC,CAAC,CAAC;CACtE;AAED,MAAM,WAAW,sBAAsB;IACrC,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,MAAM,CAAC;CACpB;AAqBD,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,4BAA4B,GAAG,sBAAsB,CAyClG;AAED,wBAAsB,wBAAwB,CAC5C,IAAI,EAAE,gBAAgB,EACtB,UAAU,EAAE,MAAM,EAAE,GACnB,OAAO,CAAC,MAAM,CAAC,CAUjB"}

package/lib/schedule-domain/prompt-assembler.js

@@ -0,0 +1,75 @@
+import { readSkillInstructions } from '../builtin/load-skill-tool.js';
+import { buildSkillLoadOptsForAgent } from '../skill/skill-load-opts.js';
+function formatTime(now, timeZone) {
+    return new Intl.DateTimeFormat('zh-CN', {
+        timeZone,
+        year: 'numeric',
+        month: '2-digit',
+        day: '2-digit',
+        hour: '2-digit',
+        minute: '2-digit',
+        second: '2-digit',
+        weekday: 'long',
+        hour12: false,
+    }).format(now);
+}
+function section(title, content) {
+    const value = content?.trim();
+    return value ? `# ${title}\n${value}` : null;
+}
+export function assembleSchedulePrompt(input) {
+    const creator = input.createdBy
+        ? `${input.createdBy.name ?? input.createdBy.userId} (${input.createdBy.roles.join(', ') || 'readonly'})`
+        : 'system (readonly)';
+    const identity = [
+        '# 执行身份与约束',
+        '你是一个定时任务执行引擎。直接完成任务并输出最终结果。',
+        '禁止确认语、进度报告、寒暄、元评论和对话式措辞。',
+        '不得请求用户确认，不得派生子任务。工具或权限不足时明确失败，不得虚构结果。',
+    ].join('\n');
+    const runtime = [
+        '# 执行上下文',
+        `当前时间: ${formatTime(input.now ?? new Date(), input.timeZone)}`,
+        `任务 ID: ${input.jobId}`,
+        `创建者: ${creator}`,
+    ].join('\n');
+    const execPreset = input.security?.execPreset ?? 'readonly';
+    const safety = [
+        '# 安全约束',
+        '- 文件访问仅限 workspace。',
+        `- Shell 仅允许 ${execPreset} preset；无人值守审批一律拒绝。`,
+        '- 网络访问仅允许 HTTPS 且必须通过既有域名白名单。',
+    ].join('\n');
+    const output = [
+        '# 输出格式',
+        '只输出最终内容，不包含前缀、后缀、系统标记或执行元信息。',
+    ].join('\n');
+    return {
+        systemPrompt: [
+            identity,
+            runtime,
+            section('平台上下文', input.platformContext),
+            safety,
+            section('技能指令', input.skillContext),
+            section('记忆', input.memoryContext),
+            section('Workspace 指令', input.bootstrapContext),
+            output,
+        ].filter((value) => Boolean(value)).join('\n\n'),
+        userPrompt: input.prompt.trim(),
+    };
+}
+export async function loadScheduleSkillContext(host, skillNames) {
+    if (!host.skillRegistry || skillNames.length === 0)
+        return '';
+    const options = buildSkillLoadOptsForAgent(host);
+    const instructions = [];
+    for (const name of skillNames) {
+        if (!host.skillRegistry.getByName(name))
+            continue;
+        const content = await readSkillInstructions(name, options);
+        if (!content.startsWith(`Skill '${name}' not found`))
+            instructions.push(content);
+    }
+    return instructions.join('\n\n');
+}
+//# sourceMappingURL=prompt-assembler.js.map

package/lib/schedule-domain/prompt-assembler.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"prompt-assembler.js","sourceRoot":"","sources":["../../src/schedule-domain/prompt-assembler.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,qBAAqB,EAAE,MAAM,+BAA+B,CAAC;AACtE,OAAO,EAAE,0BAA0B,EAAE,MAAM,6BAA6B,CAAC;AAsBzE,SAAS,UAAU,CAAC,GAAS,EAAE,QAAiB;IAC9C,OAAO,IAAI,IAAI,CAAC,cAAc,CAAC,OAAO,EAAE;QACtC,QAAQ;QACR,IAAI,EAAE,SAAS;QACf,KAAK,EAAE,SAAS;QAChB,GAAG,EAAE,SAAS;QACd,IAAI,EAAE,SAAS;QACf,MAAM,EAAE,SAAS;QACjB,MAAM,EAAE,SAAS;QACjB,OAAO,EAAE,MAAM;QACf,MAAM,EAAE,KAAK;KACd,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;AACjB,CAAC;AAED,SAAS,OAAO,CAAC,KAAa,EAAE,OAAgB;IAC9C,MAAM,KAAK,GAAG,OAAO,EAAE,IAAI,EAAE,CAAC;IAC9B,OAAO,KAAK,CAAC,CAAC,CAAC,KAAK,KAAK,KAAK,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AAC/C,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,KAAmC;IACxE,MAAM,OAAO,GAAG,KAAK,CAAC,SAAS;QAC7B,CAAC,CAAC,GAAG,KAAK,CAAC,SAAS,CAAC,IAAI,IAAI,KAAK,CAAC,SAAS,CAAC,MAAM,KAAK,KAAK,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,UAAU,GAAG;QACzG,CAAC,CAAC,mBAAmB,CAAC;IACxB,MAAM,QAAQ,GAAG;QACf,WAAW;QACX,6BAA6B;QAC7B,0BAA0B;QAC1B,uCAAuC;KACxC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACb,MAAM,OAAO,GAAG;QACd,SAAS;QACT,SAAS,UAAU,CAAC,KAAK,CAAC,GAAG,IAAI,IAAI,IAAI,EAAE,EAAE,KAAK,CAAC,QAAQ,CAAC,EAAE;QAC9D,UAAU,KAAK,CAAC,KAAK,EAAE;QACvB,QAAQ,OAAO,EAAE;KAClB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACb,MAAM,UAAU,GAAG,KAAK,CAAC,QAAQ,EAAE,UAAU,IAAI,UAAU,CAAC;IAC5D,MAAM,MAAM,GAAG;QACb,QAAQ;QACR,qBAAqB;QACrB,eAAe,UAAU,qBAAqB;QAC9C,+BAA+B;KAChC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACb,MAAM,MAAM,GAAG;QACb,QAAQ;QACR,8BAA8B;KAC/B,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAEb,OAAO;QACL,YAAY,EAAE;YACZ,QAAQ;YACR,OAAO;YACP,OAAO,CAAC,OAAO,EAAE,KAAK,CAAC,eAAe,CAAC;YACvC,MAAM;YACN,OAAO,CAAC,MAAM,EAAE,KAAK,CAAC,YAAY,CAAC;YACnC,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,aAAa,CAAC;YAClC,OAAO,CAAC,cAAc,EAAE,KAAK,CAAC,gBAAgB,CAAC;YAC/C,MAAM;SACP,CAAC,MAAM,CAAC,CAAC,KAAK,EAAmB,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC;QACjE,UAAU,EAAE,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE;KAChC,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAC5C,IAAsB,EACtB,UAAoB;IAEpB,IAAI,CAAC,IAAI,CAAC,aAAa,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAC9D,MAAM,OAAO,GAAG,0BAA0B,CAAC,IAAI,CAAC,CAAC;IACjD,MAAM,YAAY,GAAa,EAAE,CAAC;IAClC,KAAK,MAAM,IAAI,IAAI,UAAU,EAAE,CAAC;QAC9B,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,SAAS,CAAC,IAAI,CAAC;YAAE,SAAS;QAClD,MAAM,OAAO,GAAG,MAAM,qBAAqB,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QAC3D,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,UAAU,IAAI,aAAa,CAAC;YAAE,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACnF,CAAC;IACD,OAAO,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;AACnC,CAAC"}

package/lib/schedule-domain/security-harness.d.ts

@@ -0,0 +1,19 @@
+import type { ScheduleJobCreator } from '../assistant/types.js';
+import { type ToolPolicyInput } from '../security/policy-facade.js';
+import type { AgentTool } from '@zhin.js/ai';
+import type { Message } from '@zhin.js/core';
+import type { ZhinAgentConfig } from '../config/zhin-agent-config.js';
+import type { HostScheduleSecurityContext as ScheduleSecurityContext, HostScheduleSecurityDenial as ScheduleSecurityDenial } from '../internal/host-types.js';
+export type { ScheduleSecurityContext, ScheduleSecurityDenial };
+export declare function createScheduleSecurityContext(execPreset?: ScheduleSecurityContext['execPreset'], allowedDomains?: string[]): ScheduleSecurityContext;
+export declare function demoteScheduleCreator(creator: ScheduleJobCreator): ScheduleJobCreator;
+export declare function hardenSchedulePolicyInput(input: ToolPolicyInput, context: ScheduleSecurityContext): ToolPolicyInput;
+export interface SecureScheduleToolsInput {
+    tools: AgentTool[];
+    message: Message;
+    config: Required<ZhinAgentConfig>;
+    context: ScheduleSecurityContext;
+    onDenial?: (denial: ScheduleSecurityDenial) => void;
+}
+export declare function secureScheduleTools(input: SecureScheduleToolsInput): AgentTool[];
+//# sourceMappingURL=security-harness.d.ts.map

package/lib/schedule-domain/security-harness.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"security-harness.d.ts","sourceRoot":"","sources":["../../src/schedule-domain/security-harness.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAChE,OAAO,EAAmB,KAAK,eAAe,EAAE,MAAM,8BAA8B,CAAC;AACrF,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAC7C,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AAC7C,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,gCAAgC,CAAC;AACtE,OAAO,KAAK,EACV,2BAA2B,IAAI,uBAAuB,EACtD,0BAA0B,IAAI,sBAAsB,EACrD,MAAM,2BAA2B,CAAC;AAInC,YAAY,EAAE,uBAAuB,EAAE,sBAAsB,EAAE,CAAC;AAEhE,wBAAgB,6BAA6B,CAC3C,UAAU,GAAE,uBAAuB,CAAC,YAAY,CAAc,EAC9D,cAAc,GAAE,MAAM,EAAO,GAC5B,uBAAuB,CAEzB;AAED,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,kBAAkB,GAAG,kBAAkB,CAOrF;AAED,wBAAgB,yBAAyB,CACvC,KAAK,EAAE,eAAe,EACtB,OAAO,EAAE,uBAAuB,GAC/B,eAAe,CAYjB;AAED,MAAM,WAAW,wBAAwB;IACvC,KAAK,EAAE,SAAS,EAAE,CAAC;IACnB,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,EAAE,QAAQ,CAAC,eAAe,CAAC,CAAC;IAClC,OAAO,EAAE,uBAAuB,CAAC;IACjC,QAAQ,CAAC,EAAE,CAAC,MAAM,EAAE,sBAAsB,KAAK,IAAI,CAAC;CACrD;AASD,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,wBAAwB,GAAG,SAAS,EAAE,CAuDhF"}

package/lib/schedule-domain/security-harness.js

@@ -0,0 +1,89 @@
+import { runToolPolicies } from '../security/policy-facade.js';
+import { runWithToolNetworkPolicy } from '../security/network-policy-context.js';
+import { extractUrlsFromCommand } from '../security/network-policy.js';
+export function createScheduleSecurityContext(execPreset = 'readonly', allowedDomains = []) {
+    return { execPreset, rejectOwnerApproval: true, allowedDomains: [...allowedDomains] };
+}
+export function demoteScheduleCreator(creator) {
+    const roles = creator.roles.includes('master')
+        ? ['trusted']
+        : creator.roles.includes('trusted')
+            ? ['user']
+            : [];
+    return { ...creator, roles };
+}
+export function hardenSchedulePolicyInput(input, context) {
+    return {
+        ...input,
+        config: input.config
+            ? {
+                ...input.config,
+                execSecurity: 'allowlist',
+                execPreset: context.execPreset,
+                execApprovalMode: context.rejectOwnerApproval ? 'deny' : input.config.execApprovalMode,
+            }
+            : undefined,
+    };
+}
+function pathArgument(args) {
+    const value = args.path ?? args.file_path ?? args.filePath ?? args.cwd;
+    return typeof value === 'string' ? value : undefined;
+}
+const NETWORK_COMMAND = /(?:^|[;&|]\s*)(curl|wget|ping|dig|nslookup|host)\b/i;
+export function secureScheduleTools(input) {
+    const networkPolicy = {
+        httpsOnly: true,
+        allowedDomains: input.context.allowedDomains,
+    };
+    return input.tools.map(tool => ({
+        ...tool,
+        execute: async (args) => {
+            const command = tool.name === 'bash' ? String(args.command ?? '') : undefined;
+            const filePath = pathArgument(args);
+            const networkUrls = [
+                ...(typeof args.url === 'string' ? [args.url] : []),
+                ...(command ? extractUrlsFromCommand(command) : []),
+            ];
+            if (command && NETWORK_COMMAND.test(command) && networkUrls.length === 0) {
+                const denial = {
+                    tool: tool.name,
+                    policy: 'network-access',
+                    reason: '无人值守网络命令必须包含可校验的绝对 HTTPS URL',
+                };
+                input.onDenial?.(denial);
+                return `Error: ${denial.reason}`;
+            }
+            for (const networkUrl of networkUrls) {
+                const decision = runToolPolicies({ toolName: tool.name, networkUrl, networkPolicy });
+                if (!decision.allowed) {
+                    const denial = {
+                        tool: tool.name,
+                        policy: decision.deniedBy ?? 'network-access',
+                        reason: decision.reason ?? '网络访问被拒绝',
+                    };
+                    input.onDenial?.(denial);
+                    return `Error: ${denial.reason}`;
+                }
+            }
+            const policy = runToolPolicies(hardenSchedulePolicyInput({
+                toolName: tool.name,
+                command,
+                filePath,
+                rawFilePath: filePath,
+                commMessage: input.message,
+                config: input.config,
+            }, input.context));
+            if (!policy.allowed || policy.needsOwnerApproval) {
+                const denial = {
+                    tool: tool.name,
+                    policy: policy.deniedBy ?? 'schedule-security',
+                    reason: policy.reason ?? '无人值守执行不允许审批或越权操作',
+                };
+                input.onDenial?.(denial);
+                return `Error: ${denial.reason}`;
+            }
+            return runWithToolNetworkPolicy(networkPolicy, () => tool.execute(args));
+        },
+    }));
+}
+//# sourceMappingURL=security-harness.js.map

package/lib/schedule-domain/security-harness.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"security-harness.js","sourceRoot":"","sources":["../../src/schedule-domain/security-harness.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,eAAe,EAAwB,MAAM,8BAA8B,CAAC;AAQrF,OAAO,EAAE,wBAAwB,EAA0B,MAAM,uCAAuC,CAAC;AACzG,OAAO,EAAE,sBAAsB,EAAE,MAAM,+BAA+B,CAAC;AAIvE,MAAM,UAAU,6BAA6B,CAC3C,aAAoD,UAAU,EAC9D,iBAA2B,EAAE;IAE7B,OAAO,EAAE,UAAU,EAAE,mBAAmB,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC,GAAG,cAAc,CAAC,EAAE,CAAC;AACxF,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,OAA2B;IAC/D,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAC5C,CAAC,CAAC,CAAC,SAAS,CAAU;QACtB,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC;YACjC,CAAC,CAAC,CAAC,MAAM,CAAU;YACnB,CAAC,CAAC,EAAE,CAAC;IACT,OAAO,EAAE,GAAG,OAAO,EAAE,KAAK,EAAE,CAAC;AAC/B,CAAC;AAED,MAAM,UAAU,yBAAyB,CACvC,KAAsB,EACtB,OAAgC;IAEhC,OAAO;QACL,GAAG,KAAK;QACR,MAAM,EAAE,KAAK,CAAC,MAAM;YAClB,CAAC,CAAC;gBACE,GAAG,KAAK,CAAC,MAAM;gBACf,YAAY,EAAE,WAAW;gBACzB,UAAU,EAAE,OAAO,CAAC,UAAU;gBAC9B,gBAAgB,EAAE,OAAO,CAAC,mBAAmB,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,gBAAgB;aACvF;YACH,CAAC,CAAC,SAAS;KACd,CAAC;AACJ,CAAC;AAUD,SAAS,YAAY,CAAC,IAA6B;IACjD,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,GAAG,CAAC;IACvE,OAAO,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;AACvD,CAAC;AAED,MAAM,eAAe,GAAG,qDAAqD,CAAC;AAE9E,MAAM,UAAU,mBAAmB,CAAC,KAA+B;IACjE,MAAM,aAAa,GAAsB;QACvC,SAAS,EAAE,IAAI;QACf,cAAc,EAAE,KAAK,CAAC,OAAO,CAAC,cAAc;KAC7C,CAAC;IACF,OAAO,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC9B,GAAG,IAAI;QACP,OAAO,EAAE,KAAK,EAAE,IAA6B,EAAE,EAAE;YAC/C,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9E,MAAM,QAAQ,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;YACpC,MAAM,WAAW,GAAG;gBAClB,GAAG,CAAC,OAAO,IAAI,CAAC,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;gBACnD,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,sBAAsB,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;aACpD,CAAC;YACF,IAAI,OAAO,IAAI,eAAe,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACzE,MAAM,MAAM,GAAG;oBACb,IAAI,EAAE,IAAI,CAAC,IAAI;oBACf,MAAM,EAAE,gBAAgB;oBACxB,MAAM,EAAE,8BAA8B;iBACvC,CAAC;gBACF,KAAK,CAAC,QAAQ,EAAE,CAAC,MAAM,CAAC,CAAC;gBACzB,OAAO,UAAU,MAAM,CAAC,MAAM,EAAE,CAAC;YACnC,CAAC;YACD,KAAK,MAAM,UAAU,IAAI,WAAW,EAAE,CAAC;gBACrC,MAAM,QAAQ,GAAG,eAAe,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,IAAI,EAAE,UAAU,EAAE,aAAa,EAAE,CAAC,CAAC;gBACrF,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC;oBACtB,MAAM,MAAM,GAAG;wBACb,IAAI,EAAE,IAAI,CAAC,IAAI;wBACf,MAAM,EAAE,QAAQ,CAAC,QAAQ,IAAI,gBAAgB;wBAC7C,MAAM,EAAE,QAAQ,CAAC,MAAM,IAAI,SAAS;qBACrC,CAAC;oBACF,KAAK,CAAC,QAAQ,EAAE,CAAC,MAAM,CAAC,CAAC;oBACzB,OAAO,UAAU,MAAM,CAAC,MAAM,EAAE,CAAC;gBACnC,CAAC;YACH,CAAC;YACD,MAAM,MAAM,GAAG,eAAe,CAAC,yBAAyB,CAAC;gBACvD,QAAQ,EAAE,IAAI,CAAC,IAAI;gBACnB,OAAO;gBACP,QAAQ;gBACR,WAAW,EAAE,QAAQ;gBACrB,WAAW,EAAE,KAAK,CAAC,OAAO;gBAC1B,MAAM,EAAE,KAAK,CAAC,MAAM;aACrB,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;YACnB,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,kBAAkB,EAAE,CAAC;gBACjD,MAAM,MAAM,GAAG;oBACb,IAAI,EAAE,IAAI,CAAC,IAAI;oBACf,MAAM,EAAE,MAAM,CAAC,QAAQ,IAAI,mBAAmB;oBAC9C,MAAM,EAAE,MAAM,CAAC,MAAM,IAAI,kBAAkB;iBAC5C,CAAC;gBACF,KAAK,CAAC,QAAQ,EAAE,CAAC,MAAM,CAAC,CAAC;gBACzB,OAAO,UAAU,MAAM,CAAC,MAAM,EAAE,CAAC;YACnC,CAAC;YACD,OAAO,wBAAwB,CAAC,aAAa,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;QAC3E,CAAC;KACF,CAAC,CAAC,CAAC;AACN,CAAC"}

package/lib/schedule-domain/tool-resolver.d.ts

@@ -0,0 +1,20 @@
+import { type AgentTool } from '@zhin.js/ai';
+import type { SkillRegistry } from '../orchestrator/skill-registry.js';
+import type { ScheduleJobExecutionPlan } from '../assistant/types.js';
+declare const UNATTENDED_FORBIDDEN_TOOLS: Set<string>;
+export interface ScheduleToolResolverInput {
+    prompt: string;
+    executionPlan?: ScheduleJobExecutionPlan;
+    tools: AgentTool[];
+    skillRegistry: SkillRegistry | null;
+}
+export interface ScheduleToolResolverOutput {
+    tools: AgentTool[];
+    skills: string[];
+    resolvedBy: 'execution-plan' | 'affinity';
+    missingTools: string[];
+    missingSkills: string[];
+}
+export declare function resolveScheduleTools(input: ScheduleToolResolverInput): ScheduleToolResolverOutput;
+export { UNATTENDED_FORBIDDEN_TOOLS };
+//# sourceMappingURL=tool-resolver.d.ts.map

package/lib/schedule-domain/tool-resolver.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tool-resolver.d.ts","sourceRoot":"","sources":["../../src/schedule-domain/tool-resolver.ts"],"names":[],"mappings":"AAAA,OAAO,EAAe,KAAK,SAAS,EAAE,MAAM,aAAa,CAAC;AAC1D,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,mCAAmC,CAAC;AACvE,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,uBAAuB,CAAC;AAEtE,QAAA,MAAM,0BAA0B,aAM9B,CAAC;AAEH,MAAM,WAAW,yBAAyB;IACxC,MAAM,EAAE,MAAM,CAAC;IACf,aAAa,CAAC,EAAE,wBAAwB,CAAC;IACzC,KAAK,EAAE,SAAS,EAAE,CAAC;IACnB,aAAa,EAAE,aAAa,GAAG,IAAI,CAAC;CACrC;AAED,MAAM,WAAW,0BAA0B;IACzC,KAAK,EAAE,SAAS,EAAE,CAAC;IACnB,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,UAAU,EAAE,gBAAgB,GAAG,UAAU,CAAC;IAC1C,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,aAAa,EAAE,MAAM,EAAE,CAAC;CACzB;AAMD,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,yBAAyB,GAAG,0BAA0B,CAuEjG;AAED,OAAO,EAAE,0BAA0B,EAAE,CAAC"}

package/lib/schedule-domain/tool-resolver.js

@@ -0,0 +1,80 @@
+import { filterTools } from '@zhin.js/ai';
+const UNATTENDED_FORBIDDEN_TOOLS = new Set([
+    'discover',
+    'load_tool',
+    'load_skill',
+    'ask_user',
+    'spawn_task',
+]);
+function eligibleTools(tools) {
+    return tools.filter(tool => !UNATTENDED_FORBIDDEN_TOOLS.has(tool.name));
+}
+export function resolveScheduleTools(input) {
+    const pool = eligibleTools(input.tools);
+    const byName = new Map(pool.map(tool => [tool.name, tool]));
+    const plan = input.executionPlan;
+    if (plan) {
+        const selected = [];
+        const selectedNames = new Set();
+        const missingTools = [];
+        const missingSkills = [];
+        const skills = [];
+        for (const name of plan.tools ?? []) {
+            const tool = byName.get(name);
+            if (!tool) {
+                missingTools.push(name);
+            }
+            else if (!selectedNames.has(name)) {
+                selected.push(tool);
+                selectedNames.add(name);
+            }
+        }
+        for (const name of plan.skills ?? []) {
+            const skill = input.skillRegistry?.getByName(name);
+            if (!skill) {
+                missingSkills.push(name);
+                continue;
+            }
+            skills.push(name);
+            for (const skillTool of skill.tools) {
+                const tool = byName.get(skillTool.name);
+                if (tool && !selectedNames.has(tool.name)) {
+                    selected.push(tool);
+                    selectedNames.add(tool.name);
+                }
+            }
+        }
+        return {
+            tools: selected,
+            skills,
+            resolvedBy: 'execution-plan',
+            missingTools,
+            missingSkills,
+        };
+    }
+    const matchedSkills = input.skillRegistry?.searchScored(input.prompt, {
+        maxResults: 20,
+        minScore: 0.05,
+    }).map(result => result.skill.name) ?? [];
+    const affinityTools = filterTools(input.prompt, pool, { maxTools: 20, minScore: 0.05 });
+    const affinityNames = new Set(affinityTools.map(tool => tool.name));
+    for (const skillName of matchedSkills) {
+        const skill = input.skillRegistry?.getByName(skillName);
+        for (const skillTool of skill?.tools ?? []) {
+            const tool = byName.get(skillTool.name);
+            if (tool && !affinityNames.has(tool.name) && affinityTools.length < 20) {
+                affinityTools.push(tool);
+                affinityNames.add(tool.name);
+            }
+        }
+    }
+    return {
+        tools: affinityTools,
+        skills: matchedSkills,
+        resolvedBy: 'affinity',
+        missingTools: [],
+        missingSkills: [],
+    };
+}
+export { UNATTENDED_FORBIDDEN_TOOLS };
+//# sourceMappingURL=tool-resolver.js.map

package/lib/schedule-domain/tool-resolver.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tool-resolver.js","sourceRoot":"","sources":["../../src/schedule-domain/tool-resolver.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAkB,MAAM,aAAa,CAAC;AAI1D,MAAM,0BAA0B,GAAG,IAAI,GAAG,CAAC;IACzC,UAAU;IACV,WAAW;IACX,YAAY;IACZ,UAAU;IACV,YAAY;CACb,CAAC,CAAC;AAiBH,SAAS,aAAa,CAAC,KAAkB;IACvC,OAAO,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,0BAA0B,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;AAC1E,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,KAAgC;IACnE,MAAM,IAAI,GAAG,aAAa,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACxC,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;IAC5D,MAAM,IAAI,GAAG,KAAK,CAAC,aAAa,CAAC;IAEjC,IAAI,IAAI,EAAE,CAAC;QACT,MAAM,QAAQ,GAAgB,EAAE,CAAC;QACjC,MAAM,aAAa,GAAG,IAAI,GAAG,EAAU,CAAC;QACxC,MAAM,YAAY,GAAa,EAAE,CAAC;QAClC,MAAM,aAAa,GAAa,EAAE,CAAC;QACnC,MAAM,MAAM,GAAa,EAAE,CAAC;QAE5B,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,IAAI,EAAE,EAAE,CAAC;YACpC,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YAC9B,IAAI,CAAC,IAAI,EAAE,CAAC;gBACV,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC1B,CAAC;iBAAM,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;gBACpC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBACpB,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YAC1B,CAAC;QACH,CAAC;QAED,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,MAAM,IAAI,EAAE,EAAE,CAAC;YACrC,MAAM,KAAK,GAAG,KAAK,CAAC,aAAa,EAAE,SAAS,CAAC,IAAI,CAAC,CAAC;YACnD,IAAI,CAAC,KAAK,EAAE,CAAC;gBACX,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBACzB,SAAS;YACX,CAAC;YACD,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAClB,KAAK,MAAM,SAAS,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;gBACpC,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;gBACxC,IAAI,IAAI,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;oBAC1C,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;oBACpB,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBAC/B,CAAC;YACH,CAAC;QACH,CAAC;QAED,OAAO;YACL,KAAK,EAAE,QAAQ;YACf,MAAM;YACN,UAAU,EAAE,gBAAgB;YAC5B,YAAY;YACZ,aAAa;SACd,CAAC;IACJ,CAAC;IAED,MAAM,aAAa,GAAG,KAAK,CAAC,aAAa,EAAE,YAAY,CAAC,KAAK,CAAC,MAAM,EAAE;QACpE,UAAU,EAAE,EAAE;QACd,QAAQ,EAAE,IAAI;KACf,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;IAC1C,MAAM,aAAa,GAAG,WAAW,CAAC,KAAK,CAAC,MAAM,EAAE,IAAI,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;IACxF,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IACpE,KAAK,MAAM,SAAS,IAAI,aAAa,EAAE,CAAC;QACtC,MAAM,KAAK,GAAG,KAAK,CAAC,aAAa,EAAE,SAAS,CAAC,SAAS,CAAC,CAAC;QACxD,KAAK,MAAM,SAAS,IAAI,KAAK,EAAE,KAAK,IAAI,EAAE,EAAE,CAAC;YAC3C,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;YACxC,IAAI,IAAI,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,aAAa,CAAC,MAAM,GAAG,EAAE,EAAE,CAAC;gBACvE,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBACzB,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC/B,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO;QACL,KAAK,EAAE,aAAa;QACpB,MAAM,EAAE,aAAa;QACrB,UAAU,EAAE,UAAU;QACtB,YAAY,EAAE,EAAE;QAChB,aAAa,EAAE,EAAE;KAClB,CAAC;AACJ,CAAC;AAED,OAAO,EAAE,0BAA0B,EAAE,CAAC"}

package/lib/schedule-domain/turn-context.d.ts

@@ -0,0 +1,9 @@
+import type { HostScheduleTurnContext } from '../internal/host-types.js';
+import type { TurnContextView } from '../context/turn-envelope.js';
+import type { AgentPromptProfile } from '../prompt/turn-prompt-profile.js';
+/** Native Schedule Turn identity. It never fabricates an IM platform or endpoint. */
+export declare function scheduleTurnContextView(context: HostScheduleTurnContext): TurnContextView;
+export declare function schedulePromptProfile(context: HostScheduleTurnContext, prompt: string): Extract<AgentPromptProfile, {
+    kind: 'schedule';
+}>;
+//# sourceMappingURL=turn-context.d.ts.map

package/lib/schedule-domain/turn-context.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"turn-context.d.ts","sourceRoot":"","sources":["../../src/schedule-domain/turn-context.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,2BAA2B,CAAC;AACzE,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,6BAA6B,CAAC;AACnE,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,kCAAkC,CAAC;AAE3E,qFAAqF;AACrF,wBAAgB,uBAAuB,CAAC,OAAO,EAAE,uBAAuB,GAAG,eAAe,CAazF;AAED,wBAAgB,qBAAqB,CACnC,OAAO,EAAE,uBAAuB,EAChC,MAAM,EAAE,MAAM,GACb,OAAO,CAAC,kBAAkB,EAAE;IAAE,IAAI,EAAE,UAAU,CAAA;CAAE,CAAC,CAgBnD"}

package/lib/schedule-domain/turn-context.js

@@ -0,0 +1,36 @@
+import { demoteScheduleCreator } from './security-harness.js';
+/** Native Schedule Turn identity. It never fabricates an IM platform or endpoint. */
+export function scheduleTurnContextView(context) {
+    const jobId = context.jobId?.trim();
+    if (!jobId)
+        throw new TypeError('Schedule Turn requires a jobId');
+    const creator = context.createdBy ? demoteScheduleCreator(context.createdBy) : undefined;
+    return Object.freeze({
+        origin: Object.freeze({ kind: 'schedule', jobId }),
+        principal: Object.freeze({
+            subjectId: creator?.userId ?? 'schedule',
+            ...(creator?.name ? { displayName: creator.name } : {}),
+            roles: Object.freeze([...(creator?.roles ?? [])]),
+        }),
+        session: Object.freeze({ key: `schedule:${jobId}` }),
+    });
+}
+export function schedulePromptProfile(context, prompt) {
+    const jobId = context.jobId?.trim();
+    if (!jobId)
+        throw new TypeError('Schedule Turn requires a jobId');
+    return Object.freeze({
+        kind: 'schedule',
+        jobId,
+        prompt,
+        createdBy: context.createdBy
+            ? Object.freeze({ ...context.createdBy, roles: Object.freeze([...context.createdBy.roles]) })
+            : undefined,
+        security: Object.freeze({
+            execPreset: context.security.execPreset,
+            rejectOwnerApproval: true,
+            allowedDomains: Object.freeze([...context.security.allowedDomains]),
+        }),
+    });
+}
+//# sourceMappingURL=turn-context.js.map

package/lib/schedule-domain/turn-context.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"turn-context.js","sourceRoot":"","sources":["../../src/schedule-domain/turn-context.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,qBAAqB,EAAE,MAAM,uBAAuB,CAAC;AAK9D,qFAAqF;AACrF,MAAM,UAAU,uBAAuB,CAAC,OAAgC;IACtE,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC;IACpC,IAAI,CAAC,KAAK;QAAE,MAAM,IAAI,SAAS,CAAC,gCAAgC,CAAC,CAAC;IAClE,MAAM,OAAO,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,qBAAqB,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACzF,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC;QAClD,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC;YACvB,SAAS,EAAE,OAAO,EAAE,MAAM,IAAI,UAAU;YACxC,GAAG,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACvD,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,CAAC;SAClD,CAAC;QACF,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,YAAY,KAAK,EAAE,EAAE,CAAC;KACrD,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,qBAAqB,CACnC,OAAgC,EAChC,MAAc;IAEd,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC;IACpC,IAAI,CAAC,KAAK;QAAE,MAAM,IAAI,SAAS,CAAC,gCAAgC,CAAC,CAAC;IAClE,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,IAAI,EAAE,UAAU;QAChB,KAAK;QACL,MAAM;QACN,SAAS,EAAE,OAAO,CAAC,SAAS;YAC1B,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,OAAO,CAAC,SAAS,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,OAAO,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;YAC7F,CAAC,CAAC,SAAS;QACb,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC;YACtB,UAAU,EAAE,OAAO,CAAC,QAAQ,CAAC,UAAU;YACvC,mBAAmB,EAAE,IAAa;YAClC,cAAc,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC;SACpE,CAAC;KACH,CAAC,CAAC;AACL,CAAC"}