bareloop 0.41.0 → 0.43.0

package/types/runlist.d.ts

@@ -67,6 +67,26 @@ export function appendRun(row: RunRow, opts?: {
 export function appendRunEvent(event: RunEvent, opts?: {
     home?: string;
 }): void;
+/**
+ * RULED 2026-10-15 ("Remove from Needs you"): the person took a stopped run's card out of the Needs-you list. ONE row
+ * `{runid, type:'needs-removed', at}` appended beside the run rows; it is not a run, a claim or an event ({@link readRunList}
+ * ignores it, so the monthly limit, the run counter and the scheduler never see it). Nothing is rewritten.
+ * @param {string} runid
+ * @param {{ home?: string, now?: () => number }} [opts]
+ * @returns {string} the `at` written
+ */
+export function appendNeedsRemoved(runid: string, opts?: {
+    home?: string;
+    now?: () => number;
+}): string;
+/**
+ * The newest `needs-removed` time (ms) per run id. An absent file is an empty map; a row with no readable time is not a removal.
+ * @param {{ home?: string }} [opts]
+ * @returns {Map<string, number>}
+ */
+export function readNeedsRemovals(opts?: {
+    home?: string;
+}): Map<string, number>;
 /**
  * @typedef {{ type: 'leg-start', runid: string, leg: number, pid?: number, capUsd?: number, at: string }} LegStart
  * A resumed run's NEW claim (P5-R, hamr 2026-10-02: one run, one id, one row): appended beside the run's row

package/types/schedulewords.d.ts

@@ -0,0 +1,135 @@
+/**
+ * What starts the job, in words. `null` (by hand) has no sentence.
+ * @param {Trigger|null|undefined} t @param {string} [home]
+ * @returns {string|null}
+ */
+export function scheduledWords(t: Trigger | null | undefined, home?: string): string | null;
+/** "Mon 13 Oct, 09:00" — local time, fixed English names (never the machine's locale). @param {number} ms */
+export function slotWords(ms: number): string;
+/**
+ * The Scheduled card's first line: "today 17:00", "tomorrow 09:00", else the date the NEXT line already says
+ * ("Tue 20 Oct, 09:05"). Local time, by calendar day. @param {number} ms the next run @param {number} now
+ */
+export function nextTimeWords(ms: number, now: number): string;
+/** "next in 20m" / "next in 3h" / "next in 3d" (whole units, rounded down, never "0m"). @param {number} ms @param {number} now */
+export function nextInWords(ms: number, now: number): string;
+/**
+ * NEXT of a scheduled job: one sentence, first match wins.
+ *  1. a run of this job is waiting for the person's Accept (the next scheduled run does NOT wait for it, T7);
+ *  2. the latest outcome this month is `monthly-exhausted` (amounts from the row), RED;
+ *  3. a clock kind with a next slot; 4. a file kind that is armed; 5. not armed yet.
+ * A last outcome of `refused` goes in front of 3-5, so a trigger that cannot start is never silent.
+ * `red` is the typed flag for "the person must act": the page paints it and never guesses from the text.
+ * @param {{trigger: Trigger, armed: boolean, nextSlotMs: number|null, lastOutcome: any, waitingRunNo: number|null, now: number, retryInMs?: number|null, gaveUp?: any}} f
+ *   `lastOutcome` = the newest outcome row of the CURRENT signing (`kind`, `at` in ms, `why`, `leftUsd`, `needUsd`, `atLeast`)
+ * @returns {{text: string, red: boolean}}
+ */
+export function scheduledNextFor(f: {
+    trigger: Trigger;
+    armed: boolean;
+    nextSlotMs: number | null;
+    lastOutcome: any;
+    waitingRunNo: number | null;
+    now: number;
+    retryInMs?: number | null;
+    gaveUp?: any;
+}): {
+    text: string;
+    red: boolean;
+};
+/** Is `atMs` in the same local calendar month as `nowMs`? A non-number is never. @param {unknown} atMs @param {number} nowMs */
+export function sameMonthAs(atMs: unknown, nowMs: number): boolean;
+/** RULED 2026-10-15: the red NEXT of a schedule that gave up. @param {unknown} why the refusal's own words */
+export function gaveUpNextWords(why: unknown): string;
+/** The give-up date on the Needs-you card, local `MM/DD HH:MM`. @param {number} ms */
+export function gaveUpDateWords(ms: number): string;
+/** RULED 2026-10-15: after an install-needed refusal, the wait that is left, in whole minutes rounded up; '' when no wait. @param {number|null|undefined} ms */
+export function retryWords(ms: number | null | undefined): string;
+/** The fixed catch-up sentence from a run's `trigger.json`. @param {any} rec */
+export function catchUpWords(rec: any): "This run was a catch-up: it started more than 2 minutes after its set time (the panel was off)." | null;
+/**
+ * A spawn error AFTER the consuming row: `tries` releases so far, `max` the bound. Under the bound it will be tried again;
+ * at the bound it stays consumed and says so. @param {string} why @param {number} tries @param {number} max
+ */
+export function lateRefusalWords(why: string, tries: number, max: number): string;
+/** "Thu 10/16 08:15" — local time, fixed English day names. @param {number} ms */
+export function nextSlotShort(ms: number): string;
+/**
+ * Job tab, "Started": how the run began, then its local start time. `rec` = the run's `trigger.json` (null on a hand run).
+ * @param {any} rec @param {number|null} atMs the run's start
+ */
+export function startedWords(rec: any, atMs: number | null): string;
+/**
+ * Audit, first row of a run a schedule started. @param {any} rec `trigger.json` @param {number|null} originNo the origin run's number
+ */
+export function startedAuditWords(rec: any, originNo: number | null): string;
+/**
+ * A fire that started nothing, in plain words. `short` = the SCHEDULE row's `last` reason; else the Audit group's line.
+ * @param {any} row a ledger row (`busy` | `monthly-exhausted` | `refused` | `gave-up`) @param {boolean} [short]
+ */
+export function skippedWords(row: any, short?: boolean): string;
+/**
+ * Job tab, "Schedule": the job's schedule NOW and what it is bound to. The first part IS the Run tab's line ({@link scheduledWords}),
+ * first letter lowered, so the two can never disagree.
+ * @param {{trigger: Trigger|null, originNo: number|null, model: string|null, destination: string|null, home?: string}} f
+ */
+export function jobScheduleWords(f: {
+    trigger: Trigger | null;
+    originNo: number | null;
+    model: string | null;
+    destination: string | null;
+    home?: string;
+}): string;
+/** RULED 2026-10-15: the SCHEDULE row's `next` while an install-needed refusal is waiting to be tried again. @param {number} ms */
+export function retryNextWords(ms: number): string;
+/**
+ * RULED 2026-10-15: the sign on the head of the Audit's `schedule` section. ONE small rule (hamr may still adjust it): [▶] only while a
+ * run of the job is running (as everywhere in the panel), [✗] when the SCHEDULE row is red, else [·] (on, waiting).
+ * @param {{running: boolean, red: boolean}} f @returns {{sign: string}}
+ */
+export function scheduleSignFor(f: {
+    running: boolean;
+    red: boolean;
+}): {
+    sign: string;
+};
+/** Audit schedule section, the `this run` words of a run the schedule started (the head already says which schedule and from where). @param {any} rec `trigger.json` */
+export function sectionThisRunWords(rec: any): string;
+/** Audit schedule section, folded tail: `1 try started nothing` / `N tries started nothing`; '' for none. @param {number} n */
+export function triesTailWords(n: number): string;
+/**
+ * Every schedule button/word the page shows lives here, so a reword is ONE edit (hamr will reword on his walk).
+ * The server sends this table with the run detail and the schedule card; the page reads every label from it.
+ */
+export const SCHEDULE_WORDS: Readonly<{
+    byHand: "By hand";
+    cancelSchedule: "Cancel schedule";
+    cancelWords: "Cancel schedule";
+    scheduleRun: "Schedule run";
+    cancelModify: "Cancel / modify schedule";
+    signSchedule: "Sign schedule";
+    nothingChanged: "Nothing changed yet. This card only sets or adjusts the schedule; it never runs the job.";
+    confirmPrefix: "Confirm: ";
+    whenLabel: "When";
+    nowPrefix: "Now: ";
+    scheduledLabel: "SCHEDULE";
+    nextLabel: "NEXT";
+    options: Readonly<{
+        hand: "By hand";
+        daily: "Every day at HH:MM";
+        weekdays: "Weekdays at HH:MM";
+        weekly: "Every <day> at HH:MM";
+        'file-updated': "When <file> is updated";
+        'new-file': "When a new file arrives in <folder>";
+    }>;
+    gaveUpPill: "Check";
+    problemNext: "next: fix it in Cancel / modify schedule";
+    monthNext: "next: raise the limit in Settings, or it starts on the 1st";
+    acceptWaiting: "waiting for your Accept (the next run does not wait)";
+    scheduleGroup: "schedule";
+    notGreen: "This job has not had a good run yet. Run it by hand and get it right first; then you can set when it runs. A rubric job also needs your Accept once. Nothing was changed.";
+    stale: "What you were shown is not what is on the card now. Nothing was signed. Look again, then sign.";
+}>;
+export function dateTimeWords(ms: number): string;
+export function lowerFirst(s: string): string;
+export type Trigger = import("./trigger.js").Trigger;

package/types/source.d.ts

@@ -330,6 +330,100 @@ export function proveInputFiles(inputs: {
     ok: false;
     error: string;
 }>;
+/**
+ * Does this source manifest belong to a rubric job on local files (`proveRubricInputs` wrote it)? One spelling for both
+ * doors (the panel session and the CLI author run): a non-repo source that froze numbered, labelled input files.
+ * @param {Record<string, any>|null|undefined} manifest
+ * @returns {boolean}
+ */
+export function isRubricFilesManifest(manifest: Record<string, any> | null | undefined): boolean;
+/**
+ * PART 1a (docs/product/ITEM33-BUILD.md, "Addendum 2026-10-12"): the front door for a RUBRIC job whose inputs are the
+ * person's own LOCAL FILES, not a repo. Each numbered `label: /absolute/file` line is proven at $0 and frozen into the
+ * same hidden-git tree a plain folder gets (`prepareSource`, which also refuses a secret shape, an environment file
+ * and a symlink), under `input/`; the manifest then also records `inputs: [{label, rel, sha256}]` — the bytes the
+ * rubric's `cited` check will search a quote in, hashed once, here. A line that is a web address is fetched ONCE with
+ * barebrowse (PART 1c, read only) and its text frozen under `input/` like a file (the manifest row also records its `url`,
+ * so run start can fetch it again); a `search:` line is a named refusal (a later build); so is a relative path, a missing file, a folder, a file over
+ * {@link RUBRIC_INPUT_MAX_BYTES}, and text that is not valid UTF-8. Every refusal is plain words naming the line and
+ * ends "Nothing spent." — nothing here touches a model.
+ * @param {{inputs: {n: number, label: string, value: string}[], into: string, destination?: string, fetchUrl?: (url: string) => Promise<{ok: true, text: string, url: string}|{ok: false, error: string}>}} o `fetchUrl` - how a web address is read (default barebrowse via `fetchPageText`; a test injects a stub, never the network)
+ * @returns {Promise<{ok: true, prep: {stop: null, into: string, tree: string, manifestPath: string, manifest: Record<string, any>}}|{ok: false, error: string, code: string}>}
+ */
+export function proveRubricInputs({ inputs, into, destination, fetchUrl }: {
+    inputs: {
+        n: number;
+        label: string;
+        value: string;
+    }[];
+    into: string;
+    destination?: string;
+    fetchUrl?: (url: string) => Promise<{
+        ok: true;
+        text: string;
+        url: string;
+    } | {
+        ok: false;
+        error: string;
+    }>;
+}): Promise<{
+    ok: true;
+    prep: {
+        stop: null;
+        into: string;
+        tree: string;
+        manifestPath: string;
+        manifest: Record<string, any>;
+    };
+} | {
+    ok: false;
+    error: string;
+    code: string;
+}>;
+/**
+ * Is this Inputs value a path to an existing regular FILE on this machine (not a repo folder, not a web address, not a
+ * missing path)? The $0 peek that tells a rubric job on local files from a rubric job on a repo before a session exists;
+ * `proveRubricInputs` makes the authoritative, line-by-line proof.
+ * @param {string} value
+ * @returns {boolean}
+ */
+export function looksLikeLocalFile(value: string): boolean;
+/**
+ * Is this Inputs value one a rubric job can work on without a repo: a regular FILE on this machine, or a web address (PART 1c)?
+ * @param {string} value
+ * @returns {boolean}
+ */
+export function looksLikeRubricInput(value: string): boolean;
+/**
+ * RUN START for a rubric job with web inputs (PART 1c, RF22): fetch every web input AGAIN and make that text the run's frozen input
+ * BEFORE the worker starts. The drafting copy was only for the look (prices change); the close grades, and the worker reads, THIS
+ * copy. It is written into the prepared tree, committed as the new seed (so the page is never read as a worker write), and
+ * `source.json` is rewritten (new sha256 per input, new seed, `draftSha256` keeps what the look saw). Nothing but the text of a
+ * recorded web address is ever refetched; a job with only file inputs returns at once and changes nothing.
+ * @param {{into: string, fetchUrl?: (url: string) => Promise<{ok: true, text: string, url: string}|{ok: false, error: string}>}} o `into` - the prepared copy (source.json + tree/)
+ * @returns {Promise<{ok: true, refreshed: string[], seed: string|null}|{ok: false, error: string}>}
+ */
+export function refreezeUrlInputs({ into, fetchUrl }: {
+    into: string;
+    fetchUrl?: (url: string) => Promise<{
+        ok: true;
+        text: string;
+        url: string;
+    } | {
+        ok: false;
+        error: string;
+    }>;
+}): Promise<{
+    ok: true;
+    refreshed: string[];
+    seed: string | null;
+} | {
+    ok: false;
+    error: string;
+}>;
+/** the per-file ceiling for a rubric input: bareguard's `cited` check searches a quote in a source only up to this size
+ * (its `quoteSourceMaxBytes`); a bigger file could never be cited from, so the door refuses it at $0 */
+export const RUBRIC_INPUT_MAX_BYTES: number;
 /**
  * a named, non-throwing stop
  */

package/types/trigger.d.ts

@@ -0,0 +1,37 @@
+/**
+ * The only way a trigger enters the system. Returns the typed trigger, or says what to fix (and which field).
+ * @param {unknown} t
+ * @returns {{ok: true, trigger: Trigger} | {ok: false, say: string, code: 'invalid-value'|'unknown-field', path: string}}
+ */
+export function validateTrigger(t: unknown): {
+    ok: true;
+    trigger: Trigger;
+} | {
+    ok: false;
+    say: string;
+    code: "invalid-value" | "unknown-field";
+    path: string;
+};
+/** @typedef {import('./triggerclock.js').Schedule | {kind:'new-file', folder:string} | {kind:'file-updated', path:string}} Trigger */
+export const TRIGGER_KINDS: readonly string[];
+export const CLOCK_KINDS: readonly string[];
+export const FILE_KINDS: readonly string[];
+export function isClockTrigger(t: unknown): t is {
+    kind: "daily" | "weekdays" | "weekly";
+    hour: number;
+    minute: number;
+};
+export function isFileTrigger(t: unknown): t is {
+    kind: "new-file";
+    folder: string;
+} | {
+    kind: "file-updated";
+    path: string;
+};
+export type Trigger = import("./triggerclock.js").Schedule | {
+    kind: "new-file";
+    folder: string;
+} | {
+    kind: "file-updated";
+    path: string;
+};

package/types/triggerclock.d.ts

@@ -0,0 +1,52 @@
+/**
+ * The only way a clock schedule enters the system. Refuses anything else, naming the field.
+ * @param {unknown} s
+ * @returns {Schedule}
+ */
+export function validateSchedule(s: unknown): Schedule;
+/**
+ * Is a run due at `now`? Slots missed (panel off) collapse to ONE fire, for the latest slot, marked catch-up.
+ * Catch-up = more than one slot was missed, or the latest slot is more than GRACE_MS old.
+ * @param {Schedule} schedule
+ * @param {ClockRow[]} rows
+ * @param {number} now epoch ms
+ * @returns {Due}
+ */
+export function due(schedule: Schedule, rows: ClockRow[], now: number): Due;
+/**
+ * The next slot time strictly after `afterMs` (epoch ms). Words are the caller's (schedulewords.js).
+ * @param {Schedule} schedule
+ * @param {number} afterMs
+ * @returns {number}
+ */
+export function nextSlot(schedule: Schedule, afterMs: number): number;
+/** The trigger was set at `now` under signature `sig`: no slot before this ever fires. @param {string} file @param {number} now @param {string} sig */
+export function armTrigger(file: string, now: number, sig: string): void;
+/**
+ * Record that the run for this due slot is starting (the consuming row). Write-once per slot.
+ * @param {string} file @param {Due} d the result of `due` with fire true @param {number} now @param {string} sig
+ */
+export function recordFire(file: string, d: Due, now: number, sig: string): void;
+/** @typedef {{kind:'daily'|'weekdays', hour:number, minute:number} | {kind:'weekly', day:string, hour:number, minute:number}} Schedule */
+/** @typedef {import('./triggerledger.js').LedgerRow} ClockRow */
+/** @typedef {{fire:boolean, catchUp:boolean, missed:number, slot?:number}} Due */
+/** A slot seen MORE than this after its set time is a catch-up. Exactly this late is on time. */
+export const GRACE_MS: 120000;
+export const DAYS: string[];
+export type Schedule = {
+    kind: "daily" | "weekdays";
+    hour: number;
+    minute: number;
+} | {
+    kind: "weekly";
+    day: string;
+    hour: number;
+    minute: number;
+};
+export type ClockRow = import("./triggerledger.js").LedgerRow;
+export type Due = {
+    fire: boolean;
+    catchUp: boolean;
+    missed: number;
+    slot?: number;
+};

package/types/triggerfiles.d.ts

@@ -0,0 +1,93 @@
+/** The file-kind rows of the job's ledger that still count (a released `ran` does not). @param {string} file @returns {SeenRow[]} */
+export function readSeen(file: string): SeenRow[];
+/** Arrived rows are never overwritten: the 2nd arrival of a sha (after a drop) gets its own id. @param {string} ledger @param {ToRun & {name?:string}} item @param {number} at the scheduler's clock, never the file's mtime @param {string} sig */
+export function recordArrived(ledger: string, item: ToRun & {
+    name?: string;
+}, at: number, sig: string): boolean;
+/** `of` = the arrived row it cancels (item.id when a queue row is passed). @param {string} ledger @param {{sha:string, path:string, size:number, id?:string}} item @param {string} why a plain reason: deleted, changed, schedule-changed, schedule-cancelled @param {number} at @param {string} sig */
+export function recordDropped(ledger: string, item: {
+    sha: string;
+    path: string;
+    size: number;
+    id?: string;
+}, why: string, at: number, sig: string): boolean;
+/**
+ * The queue: arrived and neither ran nor dropped, oldest arrival first. Identical arrival times: by name, then by sha (deterministic).
+ * @param {SeenRow[]} rows @returns {(SeenRow & {path:string})[]}
+ */
+export function queueOf(rows: SeenRow[]): (SeenRow & {
+    path: string;
+})[];
+/**
+ * At a queued file's turn, look at it again, at use time: lstat (no symlink, a regular file), realpath of its folder, re-hash.
+ * @param {{path:string, sha:string}} item
+ * @returns {{state:'ok', path:string, sha:string, size:number} | {state:'deleted', say:string} | {state:'changed', sha:string}}
+ */
+export function recheck(item: {
+    path: string;
+    sha: string;
+}): {
+    state: "ok";
+    path: string;
+    sha: string;
+    size: number;
+} | {
+    state: "deleted";
+    say: string;
+} | {
+    state: "changed";
+    sha: string;
+};
+/**
+ * The target is usable NOW, or an Error naming why: a file that is not a symlink and not something else (a file that does not exist yet
+ * is allowed: it may arrive), a folder that exists, resolved with realpathSync. The one rule `arm` and a door's set-time check share.
+ * @param {'new'|'updated'} mode @param {string} target
+ */
+export function checkTarget(mode: "new" | "updated", target: string): void;
+/**
+ * @param {{mode:'new'|'updated', target:string, ledger:string, sig:string, now?:() => number}} opts target = folder (new) or file (updated)
+ */
+export function createFileTrigger({ mode, target, ledger, sig, now }: {
+    mode: "new" | "updated";
+    target: string;
+    ledger: string;
+    sig: string;
+    now?: () => number;
+}): {
+    arm: () => void;
+    poll: () => {
+        arrived: ToRun[];
+        refused: Refused[];
+    };
+};
+/** @typedef {{id:string, kind:'baseline'|'arrived'|'ran'|'dropped', sha:string, name:string, size:number, at:number, sig?:string, path?:string, why?:string, of?:string}} SeenRow */
+/** @typedef {{path:string, sha:string, size:number}} ToRun */
+/** @typedef {{path:string, why:string}} Refused */
+/** Consecutive polls with the same size and mtime before a file is taken. (Two matches in a row = taken on the third sighting.) */
+export const STABLE_POLLS: 2;
+export function recordRan(ledger: string, item: {
+    sha: string;
+    path: string;
+    size: number;
+}, at: number, sig: string): boolean;
+export type SeenRow = {
+    id: string;
+    kind: "baseline" | "arrived" | "ran" | "dropped";
+    sha: string;
+    name: string;
+    size: number;
+    at: number;
+    sig?: string;
+    path?: string;
+    why?: string;
+    of?: string;
+};
+export type ToRun = {
+    path: string;
+    sha: string;
+    size: number;
+};
+export type Refused = {
+    path: string;
+    why: string;
+};

package/types/triggerledger.d.ts

@@ -0,0 +1,35 @@
+/** @typedef {{id?: string, kind: string, sig?: string, at?: number, [k: string]: unknown}} LedgerRow */
+/**
+ * Every row that parses, oldest first, and how many lines did not. A missing file is no rows.
+ * @param {string} file
+ * @returns {{rows: LedgerRow[], skipped: number}}
+ */
+export function readLedger(file: string): {
+    rows: LedgerRow[];
+    skipped: number;
+};
+/**
+ * Append one row (dir 0700, file 0600). A torn tail gets a newline first. `once` refuses a row whose `id` is
+ * already on disk (write-once ids), by throwing.
+ * @param {string} file
+ * @param {LedgerRow} row
+ * @param {{once?: boolean}} [opts]
+ */
+export function appendRow(file: string, row: LedgerRow, opts?: {
+    once?: boolean;
+}): void;
+/**
+ * Walk the rows in order: a `released` row (`of` = an id) cancels the latest earlier live row with that id, and
+ * is itself dropped. A released `fire` or `ran` is not consumed, so its slot or file is retryable (Part 4) and
+ * the same id may be written again.
+ * @param {LedgerRow[]} rows
+ * @returns {LedgerRow[]}
+ */
+export function withoutReleased(rows: LedgerRow[]): LedgerRow[];
+export type LedgerRow = {
+    id?: string;
+    kind: string;
+    sig?: string;
+    at?: number;
+    [k: string]: unknown;
+};

package/types/userrun.d.ts

@@ -61,6 +61,17 @@ export type Deps = {
      */
     provider?: any;
     providerFor?: ((tier: string) => any) | undefined;
+    /**
+     * PART 1c - a test seam: how a web input is read at run start (production: barebrowse)
+     */
+    fetchUrl?: ((url: string) => Promise<{
+        ok: true;
+        text: string;
+        url: string;
+    } | {
+        ok: false;
+        error: string;
+    }>) | undefined;
     judgeProvider?: any;
     /**
      * F196 — a test seam for `appendRun`'s