patchwork-os 1.2.0-beta.3.canary.929 → 1.2.0

package/dist/maintenance/cronHaltGate.d.ts

@@ -0,0 +1,93 @@
+/**
+ * The third `sweep` gate: a scheduled recipe that used to work and now fails.
+ *
+ * On 2026-10-14 the hourly privacy heartbeat on the reference install began
+ * failing every run (the local model it named had been removed) and nothing
+ * surfaced it for 30 hours. `halts` could see it, but `halts` answers a
+ * question somebody has to ask; `sweep` is the verb that runs unasked. Every
+ * one of the 24 runs on the following day was `error`.
+ *
+ * ## The rule, decided and deliberately narrow
+ *
+ * A cron-triggered recipe whose runs were `done` for at least seven
+ * consecutive days and whose most recent six or more runs are all `error`
+ * is FAILING. The gate is healthy when no recipe is in that state. A recipe
+ * with fewer than seven days of history is not eligible — it has no "used to
+ * work" to flip from, and a baseline is not a flip, the same distinction the
+ * sweep itself draws on its first run.
+ *
+ * Why both halves. Six errors alone would fire on a brand-new recipe that
+ * never worked; that is a defect, but it is not THIS defect, and it is already
+ * visible on the run page the moment anyone installs it. Seven clean days
+ * alone would fire on one bad hour. Together they describe the failure that
+ * went unnoticed: something that had earned the right to be ignored, and then
+ * quietly stopped.
+ *
+ * ## Counts in the snapshot, names in the inbox
+ *
+ * The snapshot row is counts only — how many recipes are failing, how many
+ * were eligible — because `sweep_snapshots.jsonl` must never accumulate
+ * operator data. The recipe name and the first failing run time go to ONE
+ * inbox note, written when the gate flips and not again while it stays
+ * failing, because a note per sweep is a note nobody reads.
+ */
+import { type RecipeRun } from "../runLog.js";
+import type { SweepDelta } from "./sweep.js";
+/** Days of consecutive `done` runs a recipe needs before it can flip. */
+export declare const CRON_HALT_MIN_CLEAN_DAYS = 7;
+/** Consecutive `error` runs, most recent first, that constitute the flip. */
+export declare const CRON_HALT_MIN_ERROR_STREAK = 6;
+/** Gate key in the sweep reading. */
+export declare const CRON_HALT_GATE = "cronHalts";
+/** The slice of a run row this gate reads. */
+export type CronRunRow = Pick<RecipeRun, "taskId" | "recipeName" | "trigger" | "status" | "createdAt" | "doneAt">;
+export interface FailingRecipe {
+    recipeName: string;
+    /** `createdAt` of the first run in the trailing error streak. */
+    firstFailureAt: number;
+    /** Length of the trailing error streak. */
+    errorStreak: number;
+    /** Span of the `done` runs immediately before the streak, in ms. */
+    cleanSpanMs: number;
+}
+export interface CronHaltAssessment {
+    /** Cron recipes with at least `CRON_HALT_MIN_CLEAN_DAYS` of clean history. */
+    eligible: number;
+    failing: FailingRecipe[];
+}
+/**
+ * Pure: decide which cron recipes are in the failing state. Rows may arrive in
+ * any order and may include non-cron or non-terminal rows; both are ignored.
+ */
+export declare function assessCronHalts(rows: CronRunRow[], _opts: {
+    now: number;
+}): CronHaltAssessment;
+/**
+ * Terminal cron runs from the run log and its rotation archive, through the
+ * same reader `workers shadow` uses: `RecipeRunLog` dedups by `taskId`
+ * (never `seq`, #1324) and the archive is merged the same way, so a run that
+ * rotated out is still history and a run written twice is still one run.
+ * Replay rows are not runs the scheduler started.
+ *
+ * Returns an empty list when there is no log to read; the caller treats that
+ * as a reading it could not take, not as a healthy gate.
+ */
+export declare function readCronRuns(dir: string): CronRunRow[];
+/** The log exists (live or archive), so a reading can be taken. */
+export declare function cronRunLogPresent(dir: string): boolean;
+/**
+ * Write the inbox note for a flip of the cron-halt gate, and only for a flip:
+ * the previous snapshot carried the gate as healthy and this reading does not.
+ * A first sweep, a gate the previous snapshot never had, and a gate that is
+ * still failing all write nothing. Returns the path written, or undefined.
+ *
+ * The note carries the same run header a recipe's `file.write` to the inbox
+ * gets (`recipe` / `trigger` / `deliveredAt`), so the inbox lists it like any
+ * other delivery. There is no `runSeq`: a sweep is not a run.
+ */
+export declare function noteCronHaltFlip(opts: {
+    delta: SweepDelta;
+    assessment: CronHaltAssessment;
+    inbox: string;
+    now: number;
+}): string | undefined;

package/dist/maintenance/cronHaltGate.js

@@ -0,0 +1,185 @@
+/**
+ * The third `sweep` gate: a scheduled recipe that used to work and now fails.
+ *
+ * On 2026-10-14 the hourly privacy heartbeat on the reference install began
+ * failing every run (the local model it named had been removed) and nothing
+ * surfaced it for 30 hours. `halts` could see it, but `halts` answers a
+ * question somebody has to ask; `sweep` is the verb that runs unasked. Every
+ * one of the 24 runs on the following day was `error`.
+ *
+ * ## The rule, decided and deliberately narrow
+ *
+ * A cron-triggered recipe whose runs were `done` for at least seven
+ * consecutive days and whose most recent six or more runs are all `error`
+ * is FAILING. The gate is healthy when no recipe is in that state. A recipe
+ * with fewer than seven days of history is not eligible — it has no "used to
+ * work" to flip from, and a baseline is not a flip, the same distinction the
+ * sweep itself draws on its first run.
+ *
+ * Why both halves. Six errors alone would fire on a brand-new recipe that
+ * never worked; that is a defect, but it is not THIS defect, and it is already
+ * visible on the run page the moment anyone installs it. Seven clean days
+ * alone would fire on one bad hour. Together they describe the failure that
+ * went unnoticed: something that had earned the right to be ignored, and then
+ * quietly stopped.
+ *
+ * ## Counts in the snapshot, names in the inbox
+ *
+ * The snapshot row is counts only — how many recipes are failing, how many
+ * were eligible — because `sweep_snapshots.jsonl` must never accumulate
+ * operator data. The recipe name and the first failing run time go to ONE
+ * inbox note, written when the gate flips and not again while it stays
+ * failing, because a note per sweep is a note nobody reads.
+ */
+import { existsSync, mkdirSync, writeFileSync } from "node:fs";
+import path from "node:path";
+import { isReplayRun, RecipeRunLog } from "../runLog.js";
+/** Days of consecutive `done` runs a recipe needs before it can flip. */
+export const CRON_HALT_MIN_CLEAN_DAYS = 7;
+/** Consecutive `error` runs, most recent first, that constitute the flip. */
+export const CRON_HALT_MIN_ERROR_STREAK = 6;
+/** Gate key in the sweep reading. */
+export const CRON_HALT_GATE = "cronHalts";
+const DAY_MS = 24 * 60 * 60 * 1000;
+/**
+ * Pure: decide which cron recipes are in the failing state. Rows may arrive in
+ * any order and may include non-cron or non-terminal rows; both are ignored.
+ */
+export function assessCronHalts(rows, _opts) {
+    const byRecipe = new Map();
+    for (const r of rows) {
+        if (r.trigger !== "cron")
+            continue;
+        if (r.status !== "done" && r.status !== "error")
+            continue;
+        const list = byRecipe.get(r.recipeName) ?? [];
+        list.push(r);
+        byRecipe.set(r.recipeName, list);
+    }
+    let eligible = 0;
+    const failing = [];
+    for (const [recipeName, list] of byRecipe) {
+        list.sort((a, b) => a.createdAt - b.createdAt);
+        // Trailing error streak, newest backwards.
+        let i = list.length - 1;
+        let errorStreak = 0;
+        while (i >= 0 && list[i]?.status === "error") {
+            errorStreak++;
+            i--;
+        }
+        // The `done` run immediately before the streak, walking back while done.
+        const lastClean = i;
+        while (i >= 0 && list[i]?.status === "done")
+            i--;
+        const firstClean = i + 1;
+        const cleanSpanMs = lastClean >= firstClean
+            ? list[lastClean].createdAt -
+                list[firstClean].createdAt
+            : 0;
+        if (cleanSpanMs < CRON_HALT_MIN_CLEAN_DAYS * DAY_MS)
+            continue;
+        eligible++;
+        if (errorStreak < CRON_HALT_MIN_ERROR_STREAK)
+            continue;
+        failing.push({
+            recipeName,
+            firstFailureAt: list[lastClean + 1].createdAt,
+            errorStreak,
+            cleanSpanMs,
+        });
+    }
+    failing.sort((a, b) => a.recipeName.localeCompare(b.recipeName));
+    return { eligible, failing };
+}
+/**
+ * Terminal cron runs from the run log and its rotation archive, through the
+ * same reader `workers shadow` uses: `RecipeRunLog` dedups by `taskId`
+ * (never `seq`, #1324) and the archive is merged the same way, so a run that
+ * rotated out is still history and a run written twice is still one run.
+ * Replay rows are not runs the scheduler started.
+ *
+ * Returns an empty list when there is no log to read; the caller treats that
+ * as a reading it could not take, not as a healthy gate.
+ */
+export function readCronRuns(dir) {
+    if (!existsSync(path.join(dir, "runs.jsonl")) &&
+        !existsSync(path.join(dir, "runs.jsonl.1"))) {
+        return [];
+    }
+    // A cap large enough that one busy recipe cannot evict another's history
+    // before it is read; the default (500) is sized for a dashboard ring.
+    const log = new RecipeRunLog({ dir, memoryCap: 50_000 });
+    const merged = new Map();
+    for (const r of [...log.readArchive(), ...log.query({ limit: 500 })]) {
+        merged.set(r.taskId ? `task:${r.taskId}` : `seq:${r.seq}`, r);
+    }
+    // `query` clamps at 500 rows overall; re-query per cron recipe so a busy
+    // install does not truncate the recipe this gate is watching.
+    const names = new Set();
+    for (const r of merged.values())
+        if (r.trigger === "cron")
+            names.add(r.recipeName);
+    for (const recipe of names) {
+        for (const r of log.query({ recipe, trigger: "cron", limit: 500 })) {
+            merged.set(r.taskId ? `task:${r.taskId}` : `seq:${r.seq}`, r);
+        }
+    }
+    const out = [];
+    for (const r of merged.values()) {
+        if (r.trigger !== "cron" || isReplayRun(r))
+            continue;
+        if (r.status !== "done" && r.status !== "error")
+            continue;
+        out.push({
+            taskId: r.taskId,
+            recipeName: r.recipeName,
+            trigger: r.trigger,
+            status: r.status,
+            createdAt: r.createdAt,
+            doneAt: r.doneAt,
+        });
+    }
+    return out;
+}
+/** The log exists (live or archive), so a reading can be taken. */
+export function cronRunLogPresent(dir) {
+    return (existsSync(path.join(dir, "runs.jsonl")) ||
+        existsSync(path.join(dir, "runs.jsonl.1")));
+}
+/**
+ * Write the inbox note for a flip of the cron-halt gate, and only for a flip:
+ * the previous snapshot carried the gate as healthy and this reading does not.
+ * A first sweep, a gate the previous snapshot never had, and a gate that is
+ * still failing all write nothing. Returns the path written, or undefined.
+ *
+ * The note carries the same run header a recipe's `file.write` to the inbox
+ * gets (`recipe` / `trigger` / `deliveredAt`), so the inbox lists it like any
+ * other delivery. There is no `runSeq`: a sweep is not a run.
+ */
+export function noteCronHaltFlip(opts) {
+    const flipped = opts.delta.gates.some((g) => g.key === CRON_HALT_GATE && g.regression);
+    if (!flipped || opts.assessment.failing.length === 0)
+        return undefined;
+    const stamp = new Date(opts.now).toISOString();
+    const lines = [
+        "---",
+        "recipe: sweep",
+        "trigger: manual",
+        `deliveredAt: ${stamp}`,
+        "---",
+        "",
+        "# A scheduled recipe used to work and is now failing",
+        "",
+        `\`patchwork sweep\` found ${opts.assessment.failing.length} cron recipe(s) that ran \`done\` for at least ${CRON_HALT_MIN_CLEAN_DAYS} days and whose latest ${CRON_HALT_MIN_ERROR_STREAK}+ runs are all \`error\`.`,
+        "",
+    ];
+    for (const f of opts.assessment.failing) {
+        lines.push(`- **${f.recipeName}** — first failing run ${new Date(f.firstFailureAt).toISOString()}, ${f.errorStreak} consecutive errors after ${Math.floor(f.cleanSpanMs / DAY_MS)} clean days.`);
+    }
+    lines.push("", "Run `patchwork halts --window 7d --recipe <name>` for the error messages, then `patchwork recipe doctor`.", "");
+    mkdirSync(opts.inbox, { recursive: true, mode: 0o700 });
+    const file = path.join(opts.inbox, `sweep-cron-halt-${stamp.replace(/[:.]/g, "-")}.md`);
+    writeFileSync(file, lines.join("\n"), { mode: 0o600 });
+    return file;
+}
+//# sourceMappingURL=cronHaltGate.js.map

package/dist/maintenance/cronHaltGate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cronHaltGate.js","sourceRoot":"","sources":["../../src/maintenance/cronHaltGate.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AAEH,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAC/D,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,WAAW,EAAkB,YAAY,EAAE,MAAM,cAAc,CAAC;AAGzE,yEAAyE;AACzE,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,CAAC;AAC1C,6EAA6E;AAC7E,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC,CAAC;AAC5C,qCAAqC;AACrC,MAAM,CAAC,MAAM,cAAc,GAAG,WAAW,CAAC;AAE1C,MAAM,MAAM,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAwBnC;;;GAGG;AACH,MAAM,UAAU,eAAe,CAC7B,IAAkB,EAClB,KAAsB;IAEtB,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAwB,CAAC;IACjD,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;QACrB,IAAI,CAAC,CAAC,OAAO,KAAK,MAAM;YAAE,SAAS;QACnC,IAAI,CAAC,CAAC,MAAM,KAAK,MAAM,IAAI,CAAC,CAAC,MAAM,KAAK,OAAO;YAAE,SAAS;QAC1D,MAAM,IAAI,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC;QAC9C,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACb,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;IACnC,CAAC;IACD,IAAI,QAAQ,GAAG,CAAC,CAAC;IACjB,MAAM,OAAO,GAAoB,EAAE,CAAC;IACpC,KAAK,MAAM,CAAC,UAAU,EAAE,IAAI,CAAC,IAAI,QAAQ,EAAE,CAAC;QAC1C,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,GAAG,CAAC,CAAC,SAAS,CAAC,CAAC;QAC/C,2CAA2C;QAC3C,IAAI,CAAC,GAAG,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC;QACxB,IAAI,WAAW,GAAG,CAAC,CAAC;QACpB,OAAO,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,MAAM,KAAK,OAAO,EAAE,CAAC;YAC7C,WAAW,EAAE,CAAC;YACd,CAAC,EAAE,CAAC;QACN,CAAC;QACD,yEAAyE;QACzE,MAAM,SAAS,GAAG,CAAC,CAAC;QACpB,OAAO,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,MAAM,KAAK,MAAM;YAAE,CAAC,EAAE,CAAC;QACjD,MAAM,UAAU,GAAG,CAAC,GAAG,CAAC,CAAC;QACzB,MAAM,WAAW,GACf,SAAS,IAAI,UAAU;YACrB,CAAC,CAAE,IAAI,CAAC,SAAS,CAAgB,CAAC,SAAS;gBACxC,IAAI,CAAC,UAAU,CAAgB,CAAC,SAAS;YAC5C,CAAC,CAAC,CAAC,CAAC;QACR,IAAI,WAAW,GAAG,wBAAwB,GAAG,MAAM;YAAE,SAAS;QAC9D,QAAQ,EAAE,CAAC;QACX,IAAI,WAAW,GAAG,0BAA0B;YAAE,SAAS;QACvD,OAAO,CAAC,IAAI,CAAC;YACX,UAAU;YACV,cAAc,EAAG,IAAI,CAAC,SAAS,GAAG,CAAC,CAAgB,CAAC,SAAS;YAC7D,WAAW;YACX,WAAW;SACZ,CAAC,CAAC;IACL,CAAC;IACD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC;IACjE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC;AAC/B,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,YAAY,CAAC,GAAW;IACtC,IACE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC;QACzC,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC,EAC3C,CAAC;QACD,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,yEAAyE;IACzE,sEAAsE;IACtE,MAAM,GAAG,GAAG,IAAI,YAAY,CAAC,EAAE,GAAG,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC,CAAC;IACzD,MAAM,MAAM,GAAG,IAAI,GAAG,EAAqB,CAAC;IAC5C,KAAK,MAAM,CAAC,IAAI,CAAC,GAAG,GAAG,CAAC,WAAW,EAAE,EAAE,GAAG,GAAG,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC;QACrE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC;IAChE,CAAC;IACD,yEAAyE;IACzE,8DAA8D;IAC9D,MAAM,KAAK,GAAG,IAAI,GAAG,EAAU,CAAC;IAChC,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,MAAM,EAAE;QAC7B,IAAI,CAAC,CAAC,OAAO,KAAK,MAAM;YAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC;IACpD,KAAK,MAAM,MAAM,IAAI,KAAK,EAAE,CAAC;QAC3B,KAAK,MAAM,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC;YACnE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC;QAChE,CAAC;IACH,CAAC;IACD,MAAM,GAAG,GAAiB,EAAE,CAAC;IAC7B,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,MAAM,EAAE,EAAE,CAAC;QAChC,IAAI,CAAC,CAAC,OAAO,KAAK,MAAM,IAAI,WAAW,CAAC,CAAC,CAAC;YAAE,SAAS;QACrD,IAAI,CAAC,CAAC,MAAM,KAAK,MAAM,IAAI,CAAC,CAAC,MAAM,KAAK,OAAO;YAAE,SAAS;QAC1D,GAAG,CAAC,IAAI,CAAC;YACP,MAAM,EAAE,CAAC,CAAC,MAAM;YAChB,UAAU,EAAE,CAAC,CAAC,UAAU;YACxB,OAAO,EAAE,CAAC,CAAC,OAAO;YAClB,MAAM,EAAE,CAAC,CAAC,MAAM;YAChB,SAAS,EAAE,CAAC,CAAC,SAAS;YACtB,MAAM,EAAE,CAAC,CAAC,MAAM;SACjB,CAAC,CAAC;IACL,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,mEAAmE;AACnE,MAAM,UAAU,iBAAiB,CAAC,GAAW;IAC3C,OAAO,CACL,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC;QACxC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC,CAC3C,CAAC;AACJ,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,gBAAgB,CAAC,IAKhC;IACC,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CACnC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK,cAAc,IAAI,CAAC,CAAC,UAAU,CAChD,CAAC;IACF,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IACvE,MAAM,KAAK,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,CAAC;IAC/C,MAAM,KAAK,GAAG;QACZ,KAAK;QACL,eAAe;QACf,iBAAiB;QACjB,gBAAgB,KAAK,EAAE;QACvB,KAAK;QACL,EAAE;QACF,sDAAsD;QACtD,EAAE;QACF,6BAA6B,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,MAAM,kDAAkD,wBAAwB,0BAA0B,0BAA0B,2BAA2B;QACpN,EAAE;KACH,CAAC;IACF,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,CAAC;QACxC,KAAK,CAAC,IAAI,CACR,OAAO,CAAC,CAAC,UAAU,0BAA0B,IAAI,IAAI,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC,WAAW,6BAA6B,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,WAAW,GAAG,MAAM,CAAC,cAAc,CACrL,CAAC;IACJ,CAAC;IACD,KAAK,CAAC,IAAI,CACR,EAAE,EACF,2GAA2G,EAC3G,EAAE,CACH,CAAC;IACF,SAAS,CAAC,IAAI,CAAC,KAAK,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACxD,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CACpB,IAAI,CAAC,KAAK,EACV,mBAAmB,KAAK,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC,KAAK,CACpD,CAAC;IACF,aAAa,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACvD,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/maintenance/sweepCollect.d.ts

@@ -1,5 +1,5 @@
 /**
- * Collect one `SweepReading` from the five read-only verbs.
+ * Collect one `SweepReading` from the five read-only verbs plus the run log.
  *
  * Kept apart from `sweep.ts` so the diff stays a pure function a test can drive.
  * This half touches the filesystem and every subsystem; that half decides what a
@@ -13,6 +13,7 @@
  * is no version of the snapshot that ever held them. A privacy rule enforced by
  * a downstream formatter is one refactor away from being lost.
  */
+import { type CronHaltAssessment } from "./cronHaltGate.js";
 import { type SweepReading } from "./sweep.js";
 export interface CollectOptions {
     /** Ledger directory. Defaults to `$PATCHWORK_HOME`. */
@@ -21,7 +22,18 @@ export interface CollectOptions {
     expectRunning?: number;
     /** ms epoch for the reading. Injected so a test is not at the mercy of a clock. */
     now?: number;
+    /**
+     * A cron-halt assessment already taken (the dispatcher needs the recipe
+     * names for the inbox note, which the reading must not carry). Absent ⇒
+     * taken here.
+     */
+    cronHalts?: CronHaltAssessment;
 }
+/**
+ * Take the cron-halt reading, or undefined when there is no run log to read —
+ * an absent log is a reading that could not be taken, not a healthy gate.
+ */
+export declare function collectCronHalts(dir: string, now: number): CronHaltAssessment | undefined;
 /**
  * Readings that could not be taken are OMITTED, never recorded as zero.
  *

package/dist/maintenance/sweepCollect.js

@@ -1,5 +1,5 @@
 /**
- * Collect one `SweepReading` from the five read-only verbs.
+ * Collect one `SweepReading` from the five read-only verbs plus the run log.
  *
  * Kept apart from `sweep.ts` so the diff stays a pure function a test can drive.
  * This half touches the filesystem and every subsystem; that half decides what a
@@ -19,8 +19,23 @@ import { evidenceCoverage } from "../evidenceCoverage.js";
 import { patchworkHome } from "../patchworkHome.js";
 import { scanRecipeDir } from "../privacy/undeclaredSteps.js";
 import { defaultRecipesDir, defaultWorkersDir, validateWorkers, } from "../workers/workersCli.js";
+import { assessCronHalts, CRON_HALT_GATE, cronRunLogPresent, readCronRuns, } from "./cronHaltGate.js";
 import { readObservations, summarise } from "./prOutcomeLedger.js";
 import { SWEEP_RV } from "./sweep.js";
+/**
+ * Take the cron-halt reading, or undefined when there is no run log to read —
+ * an absent log is a reading that could not be taken, not a healthy gate.
+ */
+export function collectCronHalts(dir, now) {
+    if (!cronRunLogPresent(dir))
+        return undefined;
+    try {
+        return assessCronHalts(readCronRuns(dir), { now });
+    }
+    catch {
+        return undefined;
+    }
+}
 /**
  * Readings that could not be taken are OMITTED, never recorded as zero.
  *
@@ -70,6 +85,15 @@ export function collectSweep(opts = {}) {
     catch {
         // No workers directory is a legitimate install. Omit rather than zero.
     }
+    // --- gate 3: did a scheduled recipe that used to work stop working? ---
+    // Counts only. The names go to an inbox note written by the dispatcher on
+    // the FLIP, never into this row (see cronHaltGate.ts).
+    const halts = opts.cronHalts ?? collectCronHalts(dir, opts.now ?? Date.now());
+    if (halts !== undefined) {
+        gates[CRON_HALT_GATE] = halts.failing.length === 0;
+        counts["cronHalts.eligibleRecipes"] = halts.eligible;
+        counts["cronHalts.failing"] = halts.failing.length;
+    }
     // --- drift: evidence spine ---
     const ev = evidenceCoverage(dir);
     for (const l of ev.ledgers) {

package/dist/maintenance/sweepCollect.js.map

@@ -1 +1 @@
-{"version":3,"file":"sweepCollect.js","sourceRoot":"","sources":["../../src/maintenance/sweepCollect.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EACL,yBAAyB,EACzB,aAAa,EACb,oBAAoB,GACrB,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAC1D,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,EAAE,aAAa,EAAE,MAAM,+BAA+B,CAAC;AAC9D,OAAO,EACL,iBAAiB,EACjB,iBAAiB,EACjB,eAAe,GAChB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAAE,gBAAgB,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AACnE,OAAO,EAAE,QAAQ,EAAqB,MAAM,YAAY,CAAC;AAWzD;;;;;;;GAOG;AACH,MAAM,UAAU,YAAY,CAAC,OAAuB,EAAE;IACpD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,aAAa,EAAE,CAAC;IACxC,MAAM,MAAM,GAA2B,EAAE,CAAC;IAC1C,MAAM,KAAK,GAA4B,EAAE,CAAC;IAE1C,0DAA0D;IAC1D,MAAM,WAAW,GAAG,oBAAoB,EAAE,CAAC;IAC3C,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;QAC9B,MAAM,KAAK,GAAG,yBAAyB,CAAC;YACtC,KAAK,EAAE,aAAa,EAAE;YACtB,WAAW;YACX,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;gBACf,IAAI,CAAC;oBACH,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;oBACrB,OAAO,IAAI,CAAC;gBACd,CAAC;gBAAC,MAAM,CAAC;oBACP,OAAO,KAAK,CAAC;gBACf,CAAC;YACH,CAAC;YACD,GAAG,CAAC,IAAI,CAAC,aAAa,KAAK,SAAS;gBAClC,CAAC,CAAC,EAAE,aAAa,EAAE,IAAI,CAAC,aAAa,EAAE;gBACvC,CAAC,CAAC,EAAE,CAAC;SACR,CAAC,CAAC;QACH,KAAK,CAAC,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC;QACvC,MAAM,CAAC,iBAAiB,CAAC,GAAG,KAAK,CAAC,OAAO,CAAC;QAC1C,MAAM,CAAC,kBAAkB,CAAC,GAAG,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC;IACrD,CAAC;IAED,wEAAwE;IACxE,IAAI,CAAC;QACH,MAAM,CAAC,GAAG,eAAe,CAAC;YACxB,UAAU,EAAE,iBAAiB,EAAE;YAC/B,UAAU,EAAE,iBAAiB,EAAE;SAChC,CAAC,CAAC;QACH,KAAK,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC;QAC7B,MAAM,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC;QAC3C,MAAM,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC;QAC3C,MAAM,CAAC,kBAAkB,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC;IACjD,CAAC;IAAC,MAAM,CAAC;QACP,uEAAuE;IACzE,CAAC;IAED,gCAAgC;IAChC,MAAM,EAAE,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC;IACjC,KAAK,MAAM,CAAC,IAAI,EAAE,CAAC,OAAO,EAAE,CAAC;QAC3B,0EAA0E;QAC1E,wEAAwE;QACxE,2EAA2E;QAC3E,yEAAyE;QACzE,IAAI,CAAC,CAAC,MAAM;YAAE,SAAS;QACvB,MAAM,CAAC,YAAY,CAAC,CAAC,IAAI,OAAO,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;QAC3C,MAAM,CAAC,YAAY,CAAC,CAAC,IAAI,WAAW,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC;IACrD,CAAC;IACD,MAAM,CAAC,kCAAkC,CAAC,GAAG,EAAE,CAAC,uBAAuB,CAAC;IAExE,2EAA2E;IAC3E,IAAI,CAAC;QACH,MAAM,CAAC,GAAG,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC,CAAC;QACnD,MAAM,CAAC,oBAAoB,CAAC,GAAG,CAAC,CAAC,UAAU,CAAC;QAC5C,MAAM,CAAC,kBAAkB,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC;QACxC,MAAM,CAAC,oBAAoB,CAAC,GAAG,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC;QACnD,MAAM,CAAC,2BAA2B,CAAC,GAAG,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC;IAC5D,CAAC;IAAC,MAAM,CAAC;QACP,mDAAmD;IACrD,CAAC;IAED,6CAA6C;IAC7C,MAAM,EAAE,GAAG,SAAS,CAAC,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,mBAAmB,CAAC,CAAC,CAAC,CAAC;IAC5E,MAAM,CAAC,iBAAiB,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC;IACpC,MAAM,CAAC,wBAAwB,CAAC,GAAG,EAAE,CAAC,WAAW,CAAC;IAClD,MAAM,CAAC,wBAAwB,CAAC,GAAG,EAAE,CAAC,cAAc,CAAC;IAErD,OAAO;QACL,EAAE,EAAE,QAAQ;QACZ,OAAO,EAAE,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE;QAC/B,KAAK;QACL,MAAM;KACP,CAAC;AACJ,CAAC"}
+{"version":3,"file":"sweepCollect.js","sourceRoot":"","sources":["../../src/maintenance/sweepCollect.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EACL,yBAAyB,EACzB,aAAa,EACb,oBAAoB,GACrB,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAC1D,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,EAAE,aAAa,EAAE,MAAM,+BAA+B,CAAC;AAC9D,OAAO,EACL,iBAAiB,EACjB,iBAAiB,EACjB,eAAe,GAChB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EACL,eAAe,EACf,cAAc,EAEd,iBAAiB,EACjB,YAAY,GACb,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,gBAAgB,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AACnE,OAAO,EAAE,QAAQ,EAAqB,MAAM,YAAY,CAAC;AAiBzD;;;GAGG;AACH,MAAM,UAAU,gBAAgB,CAC9B,GAAW,EACX,GAAW;IAEX,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC;QAAE,OAAO,SAAS,CAAC;IAC9C,IAAI,CAAC;QACH,OAAO,eAAe,CAAC,YAAY,CAAC,GAAG,CAAC,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;IACrD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,YAAY,CAAC,OAAuB,EAAE;IACpD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,aAAa,EAAE,CAAC;IACxC,MAAM,MAAM,GAA2B,EAAE,CAAC;IAC1C,MAAM,KAAK,GAA4B,EAAE,CAAC;IAE1C,0DAA0D;IAC1D,MAAM,WAAW,GAAG,oBAAoB,EAAE,CAAC;IAC3C,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;QAC9B,MAAM,KAAK,GAAG,yBAAyB,CAAC;YACtC,KAAK,EAAE,aAAa,EAAE;YACtB,WAAW;YACX,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;gBACf,IAAI,CAAC;oBACH,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;oBACrB,OAAO,IAAI,CAAC;gBACd,CAAC;gBAAC,MAAM,CAAC;oBACP,OAAO,KAAK,CAAC;gBACf,CAAC;YACH,CAAC;YACD,GAAG,CAAC,IAAI,CAAC,aAAa,KAAK,SAAS;gBAClC,CAAC,CAAC,EAAE,aAAa,EAAE,IAAI,CAAC,aAAa,EAAE;gBACvC,CAAC,CAAC,EAAE,CAAC;SACR,CAAC,CAAC;QACH,KAAK,CAAC,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC;QACvC,MAAM,CAAC,iBAAiB,CAAC,GAAG,KAAK,CAAC,OAAO,CAAC;QAC1C,MAAM,CAAC,kBAAkB,CAAC,GAAG,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC;IACrD,CAAC;IAED,wEAAwE;IACxE,IAAI,CAAC;QACH,MAAM,CAAC,GAAG,eAAe,CAAC;YACxB,UAAU,EAAE,iBAAiB,EAAE;YAC/B,UAAU,EAAE,iBAAiB,EAAE;SAChC,CAAC,CAAC;QACH,KAAK,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC;QAC7B,MAAM,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC;QAC3C,MAAM,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC;QAC3C,MAAM,CAAC,kBAAkB,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC;IACjD,CAAC;IAAC,MAAM,CAAC;QACP,uEAAuE;IACzE,CAAC;IAED,yEAAyE;IACzE,0EAA0E;IAC1E,uDAAuD;IACvD,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,IAAI,gBAAgB,CAAC,GAAG,EAAE,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;IAC9E,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxB,KAAK,CAAC,cAAc,CAAC,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,CAAC;QACnD,MAAM,CAAC,2BAA2B,CAAC,GAAG,KAAK,CAAC,QAAQ,CAAC;QACrD,MAAM,CAAC,mBAAmB,CAAC,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;IACrD,CAAC;IAED,gCAAgC;IAChC,MAAM,EAAE,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC;IACjC,KAAK,MAAM,CAAC,IAAI,EAAE,CAAC,OAAO,EAAE,CAAC;QAC3B,0EAA0E;QAC1E,wEAAwE;QACxE,2EAA2E;QAC3E,yEAAyE;QACzE,IAAI,CAAC,CAAC,MAAM;YAAE,SAAS;QACvB,MAAM,CAAC,YAAY,CAAC,CAAC,IAAI,OAAO,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;QAC3C,MAAM,CAAC,YAAY,CAAC,CAAC,IAAI,WAAW,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC;IACrD,CAAC;IACD,MAAM,CAAC,kCAAkC,CAAC,GAAG,EAAE,CAAC,uBAAuB,CAAC;IAExE,2EAA2E;IAC3E,IAAI,CAAC;QACH,MAAM,CAAC,GAAG,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC,CAAC;QACnD,MAAM,CAAC,oBAAoB,CAAC,GAAG,CAAC,CAAC,UAAU,CAAC;QAC5C,MAAM,CAAC,kBAAkB,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC;QACxC,MAAM,CAAC,oBAAoB,CAAC,GAAG,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC;QACnD,MAAM,CAAC,2BAA2B,CAAC,GAAG,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC;IAC5D,CAAC;IAAC,MAAM,CAAC;QACP,mDAAmD;IACrD,CAAC;IAED,6CAA6C;IAC7C,MAAM,EAAE,GAAG,SAAS,CAAC,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,mBAAmB,CAAC,CAAC,CAAC,CAAC;IAC5E,MAAM,CAAC,iBAAiB,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC;IACpC,MAAM,CAAC,wBAAwB,CAAC,GAAG,EAAE,CAAC,WAAW,CAAC;IAClD,MAAM,CAAC,wBAAwB,CAAC,GAAG,EAAE,CAAC,cAAc,CAAC;IAErD,OAAO;QACL,EAAE,EAAE,QAAQ;QACZ,OAAO,EAAE,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE;QAC/B,KAAK;QACL,MAAM;KACP,CAAC;AACJ,CAAC"}

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "patchwork-os",
-  "version": "1.2.0-beta.3.canary.929",
-  "description": "Your personal AI runtime, local-first. Patchwork OS gives any AI model a consistent set of tools, YAML recipes, a delegation policy with approval queue, and a durable trace memory — all on your machine, all under your policy.",
+  "version": "1.2.0",
+  "description": "Your personal AI runtime, local-first. Patchwork OS gives any AI model a consistent set of tools, YAML recipes, a delegation policy with approval queue, and a durable trace memory \u2014 all on your machine, all under your policy.",
   "type": "module",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",