will

// Scheduled ZAI canary (non-deploying). Manual-only until ZAI_API_KEY is
// configured as a Luci secret; flip to a schedule "..." trigger then.
job "canary" {
  image "docker.io/library/node:26-slim"
  secret "ZAI_API_KEY" env="ZAI_API_KEY"
  cache "npm" {
    path ".npm-cache"
    key {
      file "package-lock.json"
    }
  }
  run "export NPM_CONFIG_CACHE=\"$PWD/.npm-cache\""
  run "npm ci --prefer-offline"
  run "npm run canary"
}