neuralos 3.2.16 → 3.2.18

package/bin/gybackend.cjs

@@ -255452,6 +255452,256 @@ var require_pdf_parse2 = __commonJS({
   }
 });
 
+// ../../packages/backend/src/services/automation/templateEngine.ts
+var templateEngine_exports = {};
+__export(templateEngine_exports, {
+  diffStrings: () => diffStrings,
+  renderTemplate: () => renderTemplate2
+});
+function resolve(expr, scope) {
+  const parts = expr.trim().split(".");
+  let cur = scope;
+  for (const p of parts) {
+    if (cur == null) return void 0;
+    if (typeof cur === "object") {
+      cur = cur[p];
+    } else {
+      return void 0;
+    }
+  }
+  return cur;
+}
+function applyFilters(value, filters, scope) {
+  let v = value;
+  for (const f of filters) {
+    const m2 = f.match(/^(\w+)\s*(?:\((.*)\))?$/);
+    if (!m2) continue;
+    const name = m2[1];
+    const argRaw = m2[2] ?? "";
+    const arg = argRaw.replace(/^['"]|['"]$/g, "");
+    switch (name) {
+      case "default":
+        if (v === void 0 || v === null || v === "") {
+          v = arg in scope ? resolve(arg, scope) : arg;
+        }
+        break;
+      case "upper":
+        v = String(v ?? "").toUpperCase();
+        break;
+      case "lower":
+        v = String(v ?? "").toLowerCase();
+        break;
+      case "length":
+        if (Array.isArray(v)) v = v.length;
+        else if (typeof v === "string") v = v.length;
+        else v = 0;
+        break;
+      default:
+        break;
+    }
+  }
+  return v;
+}
+function evalExpr(expr, scope) {
+  const parts = expr.split("|").map((p) => p.trim());
+  const varExpr = parts[0];
+  const filters = parts.slice(1);
+  let val = resolve(varExpr, scope);
+  val = applyFilters(val, filters, scope);
+  if (val === void 0 || val === null) return "";
+  if (Array.isArray(val)) return val.join(", ");
+  if (typeof val === "object") return JSON.stringify(val);
+  return String(val);
+}
+function evalCond(expr, scope) {
+  const e = expr.trim();
+  const eq = e.match(/^(.+?)\s*(==|!=)\s*(.+)$/);
+  if (eq) {
+    const left = resolve(eq[1].trim(), scope);
+    const rightRaw = eq[3].trim();
+    let right;
+    if (/^['"].*['"]$/.test(rightRaw)) right = rightRaw.replace(/^['"]|['"]$/g, "");
+    else if (/^-?\d+$/.test(rightRaw)) right = parseInt(rightRaw, 10);
+    else right = resolve(rightRaw, scope);
+    if (eq[2] === "==") return left == right;
+    return left != right;
+  }
+  const v = resolve(e, scope);
+  if (Array.isArray(v)) return v.length > 0;
+  if (typeof v === "string") return v.length > 0;
+  return Boolean(v);
+}
+function cleanTag(inner) {
+  return inner.replace(/^-|\s-$/g, "").trim();
+}
+function tokenize3(tpl) {
+  const tokenRe = /(\{%[\s\S]*?%\}|\{\{[\s\S]*?\}\})/g;
+  let lastIndex = 0;
+  const tokens = [];
+  let m2;
+  while ((m2 = tokenRe.exec(tpl)) !== null) {
+    if (m2.index > lastIndex) tokens.push({ type: "text", value: tpl.slice(lastIndex, m2.index) });
+    const tok = m2[0];
+    if (tok.startsWith("{%")) tokens.push({ type: "tag", value: cleanTag(tok.slice(2, -2)) });
+    else tokens.push({ type: "expr", value: tok.slice(2, -2).trim() });
+    lastIndex = m2.index + tok.length;
+  }
+  if (lastIndex < tpl.length) tokens.push({ type: "text", value: tpl.slice(lastIndex) });
+  return tokens;
+}
+function findMatchingEnd(toks, start, open, close) {
+  let depth = 1;
+  for (let j = start + 1; j < toks.length; j++) {
+    if (toks[j].type !== "tag") continue;
+    const f = toks[j].value.split(/\s+/)[0];
+    if (f === open) depth++;
+    else if (f === close) {
+      depth--;
+      if (depth === 0) return j;
+    }
+  }
+  throw new Error(`Unbalanced {% ${open} %}: missing {% ${close} %}`);
+}
+function findMatchingEndIf(toks, start) {
+  let depth = 1;
+  for (let j = start + 1; j < toks.length; j++) {
+    if (toks[j].type !== "tag") continue;
+    const f = toks[j].value.split(/\s+/)[0];
+    if (f === "if") depth++;
+    else if (f === "endif") {
+      depth--;
+      if (depth === 0) return j;
+    }
+  }
+  throw new Error("Unbalanced {% if %}: missing {% endif %}");
+}
+function splitIfElse(body) {
+  const ifBody = [];
+  const elseBody = [];
+  const elifs = [];
+  let cur = ifBody;
+  let curElif = null;
+  let depth = 0;
+  for (const t of body) {
+    if (t.type === "tag") {
+      const f = t.value.split(/\s+/)[0];
+      if (f === "if") depth++;
+      if (f === "endif") depth = Math.max(0, depth - 1);
+      if (depth === 0 && f === "elif") {
+        const cond = t.value.replace(/^elif\s+/, "");
+        curElif = { cond, body: [] };
+        elifs.push(curElif);
+        cur = curElif.body;
+        continue;
+      }
+      if (depth === 0 && f === "else") {
+        cur = elseBody;
+        continue;
+      }
+    }
+    cur.push(t);
+  }
+  return { ifBody, elseBody, elifs };
+}
+function renderTemplate2(tpl, vars = {}) {
+  const tokens = tokenize3(tpl);
+  function renderTokens2(toks, scope) {
+    let s = "";
+    let idx = 0;
+    while (idx < toks.length) {
+      const t = toks[idx];
+      if (t.type === "text") {
+        s += t.value;
+        idx++;
+        continue;
+      }
+      if (t.type === "expr") {
+        s += evalExpr(t.value, scope);
+        idx++;
+        continue;
+      }
+      const tag = t.value;
+      const first = tag.split(/\s+/)[0];
+      if (first === "for") {
+        const fm = tag.match(/^for\s+(\w+)\s+in\s+(.+)$/);
+        const fk = tag.match(/^for\s+(\w+)\s*,\s*(\w+)\s+in\s+(.+?)\.items\(\)$/);
+        const bodyEnd = findMatchingEnd(toks, idx, "for", "endfor");
+        const body = toks.slice(idx + 1, bodyEnd);
+        idx = bodyEnd + 1;
+        if (fk) {
+          const kName = fk[1];
+          const vName = fk[2];
+          const obj = resolve(fk[3], scope);
+          if (obj && typeof obj === "object") {
+            for (const [k, v] of Object.entries(obj)) {
+              s += renderTokens2(body, { ...scope, [kName]: k, [vName]: v });
+            }
+          }
+        } else if (fm) {
+          const name = fm[1];
+          const list = resolve(fm[2], scope);
+          if (Array.isArray(list)) {
+            for (const item of list) s += renderTokens2(body, { ...scope, [name]: item });
+          } else if (typeof list === "string") {
+            for (const ch of list) s += renderTokens2(body, { ...scope, [name]: ch });
+          } else if (list && typeof list === "object") {
+            for (const [k, v] of Object.entries(list)) {
+              s += renderTokens2(body, { ...scope, [name]: { key: k, value: v } });
+            }
+          }
+        }
+        continue;
+      }
+      if (first === "if") {
+        const cond = tag.replace(/^if\s+/, "");
+        const bodyEnd = findMatchingEndIf(toks, idx);
+        const { ifBody, elseBody, elifs } = splitIfElse(toks.slice(idx + 1, bodyEnd));
+        idx = bodyEnd + 1;
+        let rendered = false;
+        if (evalCond(cond, scope)) {
+          s += renderTokens2(ifBody, scope);
+          rendered = true;
+        } else {
+          for (const e of elifs) {
+            if (evalCond(e.cond, scope)) {
+              s += renderTokens2(e.body, scope);
+              rendered = true;
+              break;
+            }
+          }
+          if (!rendered && elseBody.length) s += renderTokens2(elseBody, scope);
+        }
+        continue;
+      }
+      idx++;
+    }
+    return s;
+  }
+  return renderTokens2(tokens, vars);
+}
+function diffStrings(a, b) {
+  const aLines = a.split("\n");
+  const bLines = b.split("\n");
+  const lines = [];
+  const max = Math.max(aLines.length, bLines.length);
+  for (let i = 0; i < max; i++) {
+    const al = aLines[i];
+    const bl = bLines[i];
+    if (al === bl) {
+      if (al !== void 0) lines.push(`  ${al}`);
+    } else {
+      if (al !== void 0) lines.push(`- ${al}`);
+      if (bl !== void 0) lines.push(`+ ${bl}`);
+    }
+  }
+  return lines.join("\n");
+}
+var init_templateEngine = __esm({
+  "../../packages/backend/src/services/automation/templateEngine.ts"() {
+    "use strict";
+  }
+});
+
 // ../../packages/backend/src/services/automation/schedulerService.ts
 var schedulerService_exports = {};
 __export(schedulerService_exports, {
@@ -256465,14 +256715,18 @@ var init_scheduledTaskRunner = __esm({
 // ../../packages/backend/src/services/automation/playbookRunner.ts
 var playbookRunner_exports = {};
 __export(playbookRunner_exports, {
+  buildEnvPrefix: () => buildEnvPrefix,
+  buildPlaybookDryRunPlan: () => buildPlaybookDryRunPlan,
   clearPlaybookRuns: () => clearPlaybookRuns,
+  evaluateWhen: () => evaluateWhen,
   executePlaybook: () => executePlaybook,
   getPlaybookRun: () => getPlaybookRun,
   listPlaybookRuns: () => listPlaybookRuns,
   matchExpectation: () => matchExpectation,
   resolvePlaybookStepCommand: () => resolvePlaybookStepCommand,
   resolveRollbackCommand: () => resolveRollbackCommand,
-  resolveValidationCommand: () => resolveValidationCommand
+  resolveValidationCommand: () => resolveValidationCommand,
+  runCommandWithTimeout: () => runCommandWithTimeout
 });
 function listPlaybookRuns() {
   return runHistory;
@@ -256485,6 +256739,9 @@ function clearPlaybookRuns() {
 }
 function resolvePlaybookStepCommand(step, automationManager) {
   if (step.kind === "wait") return null;
+  if (step.kind === "template") return null;
+  if (step.kind === "playbook") return null;
+  if (step.kind === "healthCheck") return null;
   if (step.kind === "command") {
     const cmd2 = (step.command ?? "").trim();
     if (!cmd2) throw new Error(`Step "${step.name ?? step.id}": empty command`);
@@ -256498,6 +256755,96 @@ function resolvePlaybookStepCommand(step, automationManager) {
   if (!cmd) throw new Error(`Step "${step.name ?? step.id}" script "${script.name}" has an empty command`);
   return cmd;
 }
+async function runCommandWithTimeout(deps, terminalId, command, timeoutSeconds) {
+  if (!timeoutSeconds || timeoutSeconds <= 0) {
+    const r = await deps.terminalService.runCommandAndWait(terminalId, command);
+    return { exitCode: r.exitCode, stdoutDelta: r.stdoutDelta ?? "", timedOut: false };
+  }
+  return await new Promise((resolve2) => {
+    let settled = false;
+    const settle = (v) => {
+      if (settled) return;
+      settled = true;
+      clearTimeout(timer);
+      resolve2(v);
+    };
+    const timer = setTimeout(() => {
+      settle({ exitCode: -1, stdoutDelta: "", timedOut: true });
+    }, timeoutSeconds * 1e3);
+    deps.terminalService.runCommandAndWait(terminalId, command).then((r) => settle({ exitCode: r.exitCode, stdoutDelta: r.stdoutDelta ?? "", timedOut: false })).catch(() => settle({ exitCode: -1, stdoutDelta: "", timedOut: false }));
+  });
+}
+function evaluateWhen(when, paramValues) {
+  const exprMatch = when.match(/^\{\{\s*([\w.]+)\s*\}\}\s*(==|!=)\s*(.+)$/);
+  if (exprMatch) {
+    const [, varName, op, rawValue2] = exprMatch;
+    const actual = paramValues[varName] ?? "";
+    const expected = rawValue2.trim().replace(/^['"]|['"]$/g, "");
+    return { mode: "expression", result: op === "==" ? actual === expected : actual !== expected };
+  }
+  return { mode: "command", result: false, command: when };
+}
+function buildEnvPrefix(env, paramValues) {
+  if (!env || Object.keys(env).length === 0) return "";
+  const exports2 = Object.entries(env).map(([k, v]) => {
+    const value = v.replace(/\{\{\s*([\w.]+)\s*\}\}/g, (_, name) => paramValues[name] ?? "");
+    const safe = value.replace(/'/g, "'\\''");
+    return `export ${k}='${safe}'`;
+  });
+  return exports2.join(" && ") + " && ";
+}
+function buildPlaybookDryRunPlan(deps, playbook) {
+  const settings = deps.getSettings();
+  const scope = { groupId: playbook.groupId, tags: playbook.tags, targets: playbook.targets };
+  const targets = resolveScheduledTaskTargets(scope, settings);
+  const notes = [];
+  const steps = [];
+  playbook.steps.forEach((step, i) => {
+    const entry = {
+      index: i,
+      name: step.name,
+      kind: step.kind,
+      timeoutSeconds: step.timeoutSeconds ?? playbook.defaultStepTimeoutSeconds,
+      retryAttempts: step.retryAttempts ?? playbook.defaultStepRetryAttempts,
+      when: step.when
+    };
+    try {
+      if (step.kind === "wait") {
+        entry.command = `# wait ${step.waitSeconds ?? 0}s`;
+      } else if (step.kind === "template") {
+        entry.command = `# render template ${step.templateId} \u2192 ${step.templateTargetPath ?? "(no path)"}`;
+        if (!step.templateId) notes.push(`Step ${i + 1}: template step missing templateId`);
+        if (!step.templateTargetPath) notes.push(`Step ${i + 1}: template step missing templateTargetPath`);
+      } else if (step.kind === "playbook") {
+        entry.command = `# sub-playbook ${step.playbookId}`;
+        if (!step.playbookId) notes.push(`Step ${i + 1}: playbook step missing playbookId`);
+      } else if (step.kind === "healthCheck") {
+        entry.command = `# healthCheck ${step.healthUrl} expect ${step.healthExpectStatus ?? 200}`;
+        if (!step.healthUrl) notes.push(`Step ${i + 1}: healthCheck step missing healthUrl`);
+      } else {
+        const cmd = resolvePlaybookStepCommand(step, deps.automationManager);
+        entry.command = cmd ?? void 0;
+      }
+    } catch (e) {
+      entry.command = `# ERROR: ${e instanceof Error ? e.message : String(e)}`;
+      notes.push(`Step ${i + 1}: ${e instanceof Error ? e.message : String(e)}`);
+    }
+    steps.push(entry);
+  });
+  if (playbook.maxParallelTargets && playbook.maxParallelTargets > 1) {
+    notes.push(`Targets run in parallel (max ${playbook.maxParallelTargets}).`);
+  }
+  if (playbook.maxRuntimeMinutes) {
+    notes.push(`Circuit breaker: aborts after ${playbook.maxRuntimeMinutes} minutes.`);
+  }
+  return {
+    playbookId: playbook.id,
+    playbookName: playbook.name,
+    targets: targets.length === 0 ? [{ name: "local", kind: "local" }] : targets.map((t) => ({ name: t.name, kind: t.kind })),
+    steps,
+    notes
+  };
+}
 function resolveValidationCommand(validate7, automationManager) {
   if ((validate7.command ?? "").trim()) return validate7.command.trim();
   const script = automationManager.listScripts().find((s) => s.id === validate7.scriptId);
@@ -256634,13 +256981,111 @@ async function executePlaybook(deps, playbook) {
             await sleep3(Math.max(0, (step.waitSeconds ?? 0) * 1e3));
             continue;
           }
-          const command = resolvePlaybookStepCommand(step, deps.automationManager);
+          if (step.when) {
+            const cond = evaluateWhen(step.when, {});
+            if (cond.mode === "expression") {
+              if (!cond.result) {
+                log(`[playbook] "${playbook.name}" @ ${name}: step ${i + 1} skipped (when: ${step.when})`);
+                stepOutcome.output = `# skipped (when: ${step.when})`;
+                continue;
+              }
+            } else if (cond.command) {
+              const check2 = await deps.terminalService.runCommandAndWait(terminalId, cond.command);
+              if (check2.exitCode !== 0 && check2.exitCode !== void 0) {
+                log(`[playbook] "${playbook.name}" @ ${name}: step ${i + 1} skipped (when-check exit ${check2.exitCode})`);
+                stepOutcome.output = `# skipped (when-check exit ${check2.exitCode})`;
+                continue;
+              }
+            }
+          }
+          if (step.kind === "template") {
+            const template = deps.automationManager.listTemplates().find((t) => t.id === step.templateId);
+            if (!template) throw new Error(`template step references missing template "${step.templateId}"`);
+            if (!step.templateTargetPath) throw new Error("template step missing templateTargetPath");
+            const { renderTemplate: renderTemplate3 } = await Promise.resolve().then(() => (init_templateEngine(), templateEngine_exports));
+            const rendered = renderTemplate3(template.body, step.templateValues ?? {});
+            const encoded = Buffer.from(rendered, "utf8").toString("base64");
+            const writeCmd = `echo '${encoded}' | base64 -d > ${step.templateTargetPath}`;
+            log(`[playbook] "${playbook.name}" @ ${name}: step ${i + 1} (template \u2192 ${step.templateTargetPath})`);
+            const result2 = await runCommandWithTimeout(deps, terminalId, writeCmd, step.timeoutSeconds ?? playbook.defaultStepTimeoutSeconds);
+            stepOutcome.exitCode = result2.exitCode;
+            stepOutcome.output = `# wrote ${rendered.length} bytes to ${step.templateTargetPath}`;
+            stepOutcome.ok = result2.exitCode === 0 || result2.exitCode === void 0;
+            if (!stepOutcome.ok) stepOutcome.error = result2.timedOut ? "template write timed out" : `exit code ${result2.exitCode}`;
+            recordLedger(name, stepOutcome, "execute", stepOutcome.ok, stepOutcome.output);
+            if (!stepOutcome.ok) throw new Error(stepOutcome.error);
+            continue;
+          }
+          if (step.kind === "healthCheck") {
+            if (!step.healthUrl) throw new Error("healthCheck step missing healthUrl");
+            const expectStatus = step.healthExpectStatus ?? 200;
+            const timeoutSec2 = step.healthTimeoutSeconds ?? 60;
+            const intervalSec = step.healthIntervalSeconds ?? 5;
+            const deadline2 = Date.now() + timeoutSec2 * 1e3;
+            log(`[playbook] "${playbook.name}" @ ${name}: step ${i + 1} (healthCheck ${step.healthUrl})`);
+            let healthy = false;
+            let lastStatus = 0;
+            while (Date.now() < deadline2) {
+              const checkCmd = `curl -s -o /dev/null -w '%{http_code}' ${step.healthUrl.replace(/'/g, "'\\''")}`;
+              const r = await deps.terminalService.runCommandAndWait(terminalId, checkCmd);
+              lastStatus = Number((r.stdoutDelta ?? "").trim()) || 0;
+              if (lastStatus === expectStatus) {
+                healthy = true;
+                break;
+              }
+              await sleep3(intervalSec * 1e3);
+            }
+            stepOutcome.ok = healthy;
+            stepOutcome.output = `# healthCheck ${step.healthUrl} \u2192 HTTP ${lastStatus} (expected ${expectStatus})`;
+            if (!healthy) stepOutcome.error = `healthCheck failed: HTTP ${lastStatus} != ${expectStatus} after ${timeoutSec2}s`;
+            recordLedger(name, stepOutcome, "execute", healthy, stepOutcome.output);
+            if (!healthy) throw new Error(stepOutcome.error);
+            continue;
+          }
+          if (step.kind === "playbook") {
+            if (!step.playbookId) throw new Error("playbook step missing playbookId");
+            const sub = deps.automationManager.listPlaybooks().find((p) => p.id === step.playbookId || p.name === step.playbookId);
+            if (!sub) throw new Error(`playbook step references missing playbook "${step.playbookId}"`);
+            log(`[playbook] "${playbook.name}" @ ${name}: step ${i + 1} (sub-playbook "${sub.name}")`);
+            const subRecord = await executePlaybook(
+              { ...deps, onLog: log },
+              { ...sub, targets: playbook.targets, tags: playbook.tags, groupId: playbook.groupId }
+            );
+            stepOutcome.ok = subRecord.ok;
+            stepOutcome.output = `# sub-playbook "${sub.name}" ${subRecord.ok ? "ok" : "FAILED"} on ${subRecord.targets.length} target(s)`;
+            if (!subRecord.ok) {
+              const failed = subRecord.targets.filter((t) => !t.ok).map((t) => t.target);
+              stepOutcome.error = `sub-playbook "${sub.name}" failed on: ${failed.join(", ")}`;
+            }
+            recordLedger(name, stepOutcome, "execute", stepOutcome.ok, stepOutcome.output);
+            if (!stepOutcome.ok) throw new Error(stepOutcome.error);
+            continue;
+          }
+          const rawCommand = resolvePlaybookStepCommand(step, deps.automationManager);
+          const command = buildEnvPrefix(step.env, {}) + rawCommand;
           log(`[playbook] "${playbook.name}" @ ${name}: step ${i + 1}/${playbook.steps.length}${step.name ? ` (${step.name})` : ""}`);
-          const result = await deps.terminalService.runCommandAndWait(terminalId, command);
-          stepOutcome.exitCode = result.exitCode;
-          stepOutcome.output = tail3(result.stdoutDelta ?? "");
-          stepOutcome.ok = result.exitCode === 0 || result.exitCode === void 0;
-          if (!stepOutcome.ok) stepOutcome.error = `exit code ${result.exitCode}`;
+          const maxAttempts = 1 + Math.max(0, step.retryAttempts ?? playbook.defaultStepRetryAttempts ?? 0);
+          const retryDelay = Math.max(0, step.retryDelaySeconds ?? 30);
+          const timeoutSec = step.timeoutSeconds ?? playbook.defaultStepTimeoutSeconds;
+          let attempt = 0;
+          let result = null;
+          while (attempt < maxAttempts) {
+            attempt++;
+            result = await runCommandWithTimeout(deps, terminalId, command, timeoutSec);
+            const ok = result.exitCode === 0 || result.exitCode === void 0;
+            if (ok) break;
+            if (attempt < maxAttempts) {
+              log(`[playbook] "${playbook.name}" @ ${name}: step ${i + 1} attempt ${attempt}/${maxAttempts} failed (${result.timedOut ? "timeout" : `exit ${result.exitCode}`}) \u2014 retrying in ${retryDelay}s`);
+              await sleep3(retryDelay * 1e3);
+            }
+          }
+          const finalResult = result;
+          stepOutcome.exitCode = finalResult.exitCode;
+          stepOutcome.output = step.outputCapture === "full" ? finalResult.stdoutDelta : tail3(finalResult.stdoutDelta);
+          stepOutcome.ok = finalResult.exitCode === 0 || finalResult.exitCode === void 0;
+          if (!stepOutcome.ok) {
+            stepOutcome.error = finalResult.timedOut ? `timed out after ${timeoutSec}s` : `exit code ${finalResult.exitCode}`;
+          }
           recordLedger(name, stepOutcome, "execute", stepOutcome.ok, stepOutcome.ok ? stepOutcome.output : stepOutcome.error);
           if (stepOutcome.ok && step.validate) {
             try {
@@ -256708,10 +257153,43 @@ async function executePlaybook(deps, playbook) {
       })
     );
   } else {
-    for (const target of targets) {
+    const maxParallel = Math.max(1, playbook.maxParallelTargets ?? 1);
+    const onTargetError = playbook.onTargetError ?? "stop";
+    const runtimeDeadline = playbook.maxRuntimeMinutes ? Date.now() + playbook.maxRuntimeMinutes * 6e4 : Number.POSITIVE_INFINITY;
+    const configs = targets.map((target) => {
       log(`[playbook] "${playbook.name}" \u2192 ${target.kind}://${target.name}`);
       const config2 = target.kind === "ssh" ? sshEntryToConfig(target.ssh, settings) : target.kind === "winrm" ? winrmEntryToConfig(target.winrm) : serialEntryToConfig(target.serial);
-      record2.targets.push(await runTarget(target.name, config2));
+      return { name: target.name, config: config2 };
+    });
+    if (maxParallel <= 1) {
+      for (const { name, config: config2 } of configs) {
+        if (Date.now() > runtimeDeadline) {
+          log(`[playbook] "${playbook.name}": maxRuntimeMinutes exceeded \u2014 aborting remaining targets`);
+          record2.targets.push({ target: name, ok: false, steps: [], error: "playbook runtime limit exceeded" });
+          if (onTargetError === "stop") break;
+          continue;
+        }
+        const t = await runTarget(name, config2);
+        record2.targets.push(t);
+        if (!t.ok && onTargetError === "stop") {
+          log(`[playbook] "${playbook.name}": target ${name} failed \u2014 stopping remaining targets (onTargetError=stop)`);
+          break;
+        }
+      }
+    } else {
+      for (let i = 0; i < configs.length; i += maxParallel) {
+        if (Date.now() > runtimeDeadline) {
+          log(`[playbook] "${playbook.name}": maxRuntimeMinutes exceeded \u2014 aborting remaining targets`);
+          break;
+        }
+        const batch = configs.slice(i, i + maxParallel);
+        const results = await Promise.all(batch.map(({ name, config: config2 }) => runTarget(name, config2)));
+        results.forEach((t) => record2.targets.push(t));
+        if (onTargetError === "stop" && results.some((t) => !t.ok)) {
+          log(`[playbook] "${playbook.name}": a target in this batch failed \u2014 stopping remaining targets (onTargetError=stop)`);
+          break;
+        }
+      }
     }
   }
   record2.ok = record2.targets.every((t) => t.ok);
@@ -256910,6 +257388,34 @@ async function runPlaybook(args, context2) {
     emit6(context2, "run_playbook", args, msg2);
     return msg2;
   }
+  if (args.dryRun) {
+    const { buildPlaybookDryRunPlan: buildPlaybookDryRunPlan2 } = await Promise.resolve().then(() => (init_playbookRunner(), playbookRunner_exports));
+    const plan = buildPlaybookDryRunPlan2(
+      { automationManager: m2, getSettings: () => settings },
+      playbook
+    );
+    const targetList = plan.targets.map((t) => `${t.kind}://${t.name}`).join(", ");
+    const stepList = plan.steps.map((s) => {
+      const bits = [
+        s.command ?? "(no command)",
+        s.timeoutSeconds ? `timeout=${s.timeoutSeconds}s` : "",
+        s.retryAttempts ? `retry=${s.retryAttempts}` : "",
+        s.when ? `when=${s.when}` : ""
+      ].filter(Boolean).join(" ");
+      return `  ${s.index + 1}. [${s.kind}]${s.name ? ` ${s.name}:` : ""} ${bits}`;
+    }).join("\n");
+    const notes = plan.notes.length ? `
+Notes:
+${plan.notes.map((n2) => `  \u26A0 ${n2}`).join("\n")}` : "";
+    const msg2 = `Dry-run plan for "${playbook.name}" (NOTHING EXECUTED):
+
+Targets (${plan.targets.length}): ${targetList}
+
+Steps (${plan.steps.length}):
+${stepList}${notes}`;
+    emit6(context2, "run_playbook", args, msg2);
+    return msg2;
+  }
   const settings = {
     connections: {
       ssh: context2.savedSshConnections ?? [],
@@ -257007,7 +257513,8 @@ var init_playbook_tools = __esm({
     runPlaybookSchema = external_exports.object({
       id: external_exports.string().optional().describe("Playbook id to run."),
       name: external_exports.string().optional().describe("Playbook name to run (when id is not given)."),
-      paramValues: external_exports.record(external_exports.string(), external_exports.string()).optional().describe("Run-time values for the playbook's declared params (Advanced Automation).")
+      paramValues: external_exports.record(external_exports.string(), external_exports.string()).optional().describe("Run-time values for the playbook's declared params (Advanced Automation)."),
+      dryRun: external_exports.boolean().optional().describe("v3.2.17: resolve targets + commands and return the plan WITHOUT executing anything. Use before a MOP change to preview what will happen.")
     });
   }
 });
@@ -352676,246 +353183,7 @@ ${truncateForFleet(banner, 1500)}
 
 // ../../packages/backend/src/services/AgentHelper/tools/automation_tools.ts
 init_zod();
-
-// ../../packages/backend/src/services/automation/templateEngine.ts
-function resolve(expr, scope) {
-  const parts = expr.trim().split(".");
-  let cur = scope;
-  for (const p of parts) {
-    if (cur == null) return void 0;
-    if (typeof cur === "object") {
-      cur = cur[p];
-    } else {
-      return void 0;
-    }
-  }
-  return cur;
-}
-function applyFilters(value, filters, scope) {
-  let v = value;
-  for (const f of filters) {
-    const m2 = f.match(/^(\w+)\s*(?:\((.*)\))?$/);
-    if (!m2) continue;
-    const name = m2[1];
-    const argRaw = m2[2] ?? "";
-    const arg = argRaw.replace(/^['"]|['"]$/g, "");
-    switch (name) {
-      case "default":
-        if (v === void 0 || v === null || v === "") {
-          v = arg in scope ? resolve(arg, scope) : arg;
-        }
-        break;
-      case "upper":
-        v = String(v ?? "").toUpperCase();
-        break;
-      case "lower":
-        v = String(v ?? "").toLowerCase();
-        break;
-      case "length":
-        if (Array.isArray(v)) v = v.length;
-        else if (typeof v === "string") v = v.length;
-        else v = 0;
-        break;
-      default:
-        break;
-    }
-  }
-  return v;
-}
-function evalExpr(expr, scope) {
-  const parts = expr.split("|").map((p) => p.trim());
-  const varExpr = parts[0];
-  const filters = parts.slice(1);
-  let val = resolve(varExpr, scope);
-  val = applyFilters(val, filters, scope);
-  if (val === void 0 || val === null) return "";
-  if (Array.isArray(val)) return val.join(", ");
-  if (typeof val === "object") return JSON.stringify(val);
-  return String(val);
-}
-function evalCond(expr, scope) {
-  const e = expr.trim();
-  const eq = e.match(/^(.+?)\s*(==|!=)\s*(.+)$/);
-  if (eq) {
-    const left = resolve(eq[1].trim(), scope);
-    const rightRaw = eq[3].trim();
-    let right;
-    if (/^['"].*['"]$/.test(rightRaw)) right = rightRaw.replace(/^['"]|['"]$/g, "");
-    else if (/^-?\d+$/.test(rightRaw)) right = parseInt(rightRaw, 10);
-    else right = resolve(rightRaw, scope);
-    if (eq[2] === "==") return left == right;
-    return left != right;
-  }
-  const v = resolve(e, scope);
-  if (Array.isArray(v)) return v.length > 0;
-  if (typeof v === "string") return v.length > 0;
-  return Boolean(v);
-}
-function cleanTag(inner) {
-  return inner.replace(/^-|\s-$/g, "").trim();
-}
-function tokenize3(tpl) {
-  const tokenRe = /(\{%[\s\S]*?%\}|\{\{[\s\S]*?\}\})/g;
-  let lastIndex = 0;
-  const tokens = [];
-  let m2;
-  while ((m2 = tokenRe.exec(tpl)) !== null) {
-    if (m2.index > lastIndex) tokens.push({ type: "text", value: tpl.slice(lastIndex, m2.index) });
-    const tok = m2[0];
-    if (tok.startsWith("{%")) tokens.push({ type: "tag", value: cleanTag(tok.slice(2, -2)) });
-    else tokens.push({ type: "expr", value: tok.slice(2, -2).trim() });
-    lastIndex = m2.index + tok.length;
-  }
-  if (lastIndex < tpl.length) tokens.push({ type: "text", value: tpl.slice(lastIndex) });
-  return tokens;
-}
-function findMatchingEnd(toks, start, open, close) {
-  let depth = 1;
-  for (let j = start + 1; j < toks.length; j++) {
-    if (toks[j].type !== "tag") continue;
-    const f = toks[j].value.split(/\s+/)[0];
-    if (f === open) depth++;
-    else if (f === close) {
-      depth--;
-      if (depth === 0) return j;
-    }
-  }
-  throw new Error(`Unbalanced {% ${open} %}: missing {% ${close} %}`);
-}
-function findMatchingEndIf(toks, start) {
-  let depth = 1;
-  for (let j = start + 1; j < toks.length; j++) {
-    if (toks[j].type !== "tag") continue;
-    const f = toks[j].value.split(/\s+/)[0];
-    if (f === "if") depth++;
-    else if (f === "endif") {
-      depth--;
-      if (depth === 0) return j;
-    }
-  }
-  throw new Error("Unbalanced {% if %}: missing {% endif %}");
-}
-function splitIfElse(body) {
-  const ifBody = [];
-  const elseBody = [];
-  const elifs = [];
-  let cur = ifBody;
-  let curElif = null;
-  let depth = 0;
-  for (const t of body) {
-    if (t.type === "tag") {
-      const f = t.value.split(/\s+/)[0];
-      if (f === "if") depth++;
-      if (f === "endif") depth = Math.max(0, depth - 1);
-      if (depth === 0 && f === "elif") {
-        const cond = t.value.replace(/^elif\s+/, "");
-        curElif = { cond, body: [] };
-        elifs.push(curElif);
-        cur = curElif.body;
-        continue;
-      }
-      if (depth === 0 && f === "else") {
-        cur = elseBody;
-        continue;
-      }
-    }
-    cur.push(t);
-  }
-  return { ifBody, elseBody, elifs };
-}
-function renderTemplate2(tpl, vars = {}) {
-  const tokens = tokenize3(tpl);
-  function renderTokens2(toks, scope) {
-    let s = "";
-    let idx = 0;
-    while (idx < toks.length) {
-      const t = toks[idx];
-      if (t.type === "text") {
-        s += t.value;
-        idx++;
-        continue;
-      }
-      if (t.type === "expr") {
-        s += evalExpr(t.value, scope);
-        idx++;
-        continue;
-      }
-      const tag = t.value;
-      const first = tag.split(/\s+/)[0];
-      if (first === "for") {
-        const fm = tag.match(/^for\s+(\w+)\s+in\s+(.+)$/);
-        const fk = tag.match(/^for\s+(\w+)\s*,\s*(\w+)\s+in\s+(.+?)\.items\(\)$/);
-        const bodyEnd = findMatchingEnd(toks, idx, "for", "endfor");
-        const body = toks.slice(idx + 1, bodyEnd);
-        idx = bodyEnd + 1;
-        if (fk) {
-          const kName = fk[1];
-          const vName = fk[2];
-          const obj = resolve(fk[3], scope);
-          if (obj && typeof obj === "object") {
-            for (const [k, v] of Object.entries(obj)) {
-              s += renderTokens2(body, { ...scope, [kName]: k, [vName]: v });
-            }
-          }
-        } else if (fm) {
-          const name = fm[1];
-          const list = resolve(fm[2], scope);
-          if (Array.isArray(list)) {
-            for (const item of list) s += renderTokens2(body, { ...scope, [name]: item });
-          } else if (typeof list === "string") {
-            for (const ch of list) s += renderTokens2(body, { ...scope, [name]: ch });
-          } else if (list && typeof list === "object") {
-            for (const [k, v] of Object.entries(list)) {
-              s += renderTokens2(body, { ...scope, [name]: { key: k, value: v } });
-            }
-          }
-        }
-        continue;
-      }
-      if (first === "if") {
-        const cond = tag.replace(/^if\s+/, "");
-        const bodyEnd = findMatchingEndIf(toks, idx);
-        const { ifBody, elseBody, elifs } = splitIfElse(toks.slice(idx + 1, bodyEnd));
-        idx = bodyEnd + 1;
-        let rendered = false;
-        if (evalCond(cond, scope)) {
-          s += renderTokens2(ifBody, scope);
-          rendered = true;
-        } else {
-          for (const e of elifs) {
-            if (evalCond(e.cond, scope)) {
-              s += renderTokens2(e.body, scope);
-              rendered = true;
-              break;
-            }
-          }
-          if (!rendered && elseBody.length) s += renderTokens2(elseBody, scope);
-        }
-        continue;
-      }
-      idx++;
-    }
-    return s;
-  }
-  return renderTokens2(tokens, vars);
-}
-function diffStrings(a, b) {
-  const aLines = a.split("\n");
-  const bLines = b.split("\n");
-  const lines = [];
-  const max = Math.max(aLines.length, bLines.length);
-  for (let i = 0; i < max; i++) {
-    const al = aLines[i];
-    const bl = bLines[i];
-    if (al === bl) {
-      if (al !== void 0) lines.push(`  ${al}`);
-    } else {
-      if (al !== void 0) lines.push(`- ${al}`);
-      if (bl !== void 0) lines.push(`+ ${bl}`);
-    }
-  }
-  return lines.join("\n");
-}
+init_templateEngine();
 
 // ../../packages/backend/src/services/automation/puttyImport.ts
 function decodeSessionName(name) {

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "neuralos",
-  "version": "3.2.16",
-  "description": "Headless AI-native backend for RTerm / neuralOS — v3.2.16: scheduled-task (cron) overhaul — timezone-aware evaluation, overlap guard, pause windows, catch-up opt-in, cron validation, run-now, run history + success rates, failure-streak alerting, task→playbook binding, onSuccess/onFailure chaining, drift detection, retry wiring. Model-settings Base URL prefill. 14 plugins, 61 plugin tools.",
+  "version": "3.2.18",
+  "description": "Headless AI-native backend for RTerm / neuralOS — v3.2.18: cross-session history search, model failover, sub-agent delegation, REST API layer, gateway rate limiting, settings backup/restore, idle terminal timeout. 14 plugins, 61 plugin tools, parallel tool execution, captureStatus.",
   "main": "bin/gybackend.cjs",
   "bin": { "gybackend": "bin/gybackend.cjs" },
   "license": "MIT",