@agent-native/core 0.134.0 → 0.135.0

package/dist/client/settings/index.js

@@ -4,5 +4,6 @@ export { SettingsTabsPage, } from "./SettingsTabsPage.js";
 export { AccountSettingsCard, AccountSettingsForm, } from "./AccountSettingsCard.js";
 export { openBuilderConnectPopup, useBuilderConnectFlow, useBuilderStatus, withBuilderConnectTrackingParams, } from "./useBuilderStatus.js";
 export { SecretsSection } from "./SecretsSection.js";
+export { SettingsGroup, SettingsRow, } from "./SettingsRow.js";
 export { normalizeSettingsSection, settingsSectionDomId, useSettingsPanelController, } from "./useSettingsPanelController.js";
 //# sourceMappingURL=index.js.map

package/dist/client/settings/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/client/settings/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,oBAAoB,EACpB,2BAA2B,EAC3B,aAAa,EACb,oBAAoB,GAGrB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACL,0BAA0B,GAE3B,MAAM,4BAA4B,CAAC;AACpC,OAAO,EACL,gBAAgB,GAIjB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,mBAAmB,EACnB,mBAAmB,GAGpB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EACL,uBAAuB,EACvB,qBAAqB,EACrB,gBAAgB,EAChB,gCAAgC,GAMjC,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,cAAc,EAA4B,MAAM,qBAAqB,CAAC;AAC/E,OAAO,EACL,wBAAwB,EACxB,oBAAoB,EACpB,0BAA0B,GAG3B,MAAM,iCAAiC,CAAC","sourcesContent":["export {\n  AgentSettingsContent,\n  areExtensionSettingsEnabled,\n  SettingsPanel,\n  useAgentSettingsTabs,\n  type AgentSettingsTabsOptions,\n  type SettingsPanelProps,\n} from \"./SettingsPanel.js\";\nexport {\n  getAgentSettingsSearchTabs,\n  type AgentSettingsSearchTab,\n} from \"./agent-settings-search.js\";\nexport {\n  SettingsTabsPage,\n  type SettingsSearchEntry,\n  type SettingsTabItem,\n  type SettingsTabsPageProps,\n} from \"./SettingsTabsPage.js\";\nexport {\n  AccountSettingsCard,\n  AccountSettingsForm,\n  type AccountSettingsCardProps,\n  type AccountSettingsFormProps,\n} from \"./AccountSettingsCard.js\";\nexport {\n  openBuilderConnectPopup,\n  useBuilderConnectFlow,\n  useBuilderStatus,\n  withBuilderConnectTrackingParams,\n  type BuilderConnectFlow,\n  type BuilderConnectFlowOptions,\n  type BuilderConnectStartOptions,\n  type BuilderStatus,\n  type OpenBuilderConnectPopupOptions,\n} from \"./useBuilderStatus.js\";\nexport { SecretsSection, type SecretsSectionProps } from \"./SecretsSection.js\";\nexport {\n  normalizeSettingsSection,\n  settingsSectionDomId,\n  useSettingsPanelController,\n  type SettingsPanelController,\n  type SettingsPanelControllerOptions,\n} from \"./useSettingsPanelController.js\";\n"]}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/client/settings/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,oBAAoB,EACpB,2BAA2B,EAC3B,aAAa,EACb,oBAAoB,GAGrB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACL,0BAA0B,GAE3B,MAAM,4BAA4B,CAAC;AACpC,OAAO,EACL,gBAAgB,GAIjB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,mBAAmB,EACnB,mBAAmB,GAGpB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EACL,uBAAuB,EACvB,qBAAqB,EACrB,gBAAgB,EAChB,gCAAgC,GAMjC,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,cAAc,EAA4B,MAAM,qBAAqB,CAAC;AAC/E,OAAO,EACL,aAAa,EACb,WAAW,GAGZ,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EACL,wBAAwB,EACxB,oBAAoB,EACpB,0BAA0B,GAG3B,MAAM,iCAAiC,CAAC","sourcesContent":["export {\n  AgentSettingsContent,\n  areExtensionSettingsEnabled,\n  SettingsPanel,\n  useAgentSettingsTabs,\n  type AgentSettingsTabsOptions,\n  type SettingsPanelProps,\n} from \"./SettingsPanel.js\";\nexport {\n  getAgentSettingsSearchTabs,\n  type AgentSettingsSearchTab,\n} from \"./agent-settings-search.js\";\nexport {\n  SettingsTabsPage,\n  type SettingsSearchEntry,\n  type SettingsTabItem,\n  type SettingsTabsPageProps,\n} from \"./SettingsTabsPage.js\";\nexport {\n  AccountSettingsCard,\n  AccountSettingsForm,\n  type AccountSettingsCardProps,\n  type AccountSettingsFormProps,\n} from \"./AccountSettingsCard.js\";\nexport {\n  openBuilderConnectPopup,\n  useBuilderConnectFlow,\n  useBuilderStatus,\n  withBuilderConnectTrackingParams,\n  type BuilderConnectFlow,\n  type BuilderConnectFlowOptions,\n  type BuilderConnectStartOptions,\n  type BuilderStatus,\n  type OpenBuilderConnectPopupOptions,\n} from \"./useBuilderStatus.js\";\nexport { SecretsSection, type SecretsSectionProps } from \"./SecretsSection.js\";\nexport {\n  SettingsGroup,\n  SettingsRow,\n  type SettingsGroupProps,\n  type SettingsRowProps,\n} from \"./SettingsRow.js\";\nexport {\n  normalizeSettingsSection,\n  settingsSectionDomId,\n  useSettingsPanelController,\n  type SettingsPanelController,\n  type SettingsPanelControllerOptions,\n} from \"./useSettingsPanelController.js\";\n"]}

package/dist/collab/struct-routes.d.ts

@@ -13,8 +13,8 @@
  * Body: { json: any, fieldName?: string, type?: "map"|"array", requestSource?: string }
  */
 export declare const postCollabJson: import("h3").EventHandlerWithFetch<import("h3").EventHandlerRequest, Promise<{
-    ok?: undefined;
     error: string;
+    ok?: undefined;
 } | {
     error?: undefined;
     ok: boolean;

package/dist/file-upload/actions/upload-image.d.ts

@@ -17,12 +17,12 @@ declare const _default: import("../../action.js").ActionDefinition<{
     id?: undefined;
     provider?: undefined;
 } | {
+    error?: undefined;
     configured?: undefined;
     connectPath?: undefined;
     url: string;
     id: string;
     provider: string;
-    error?: undefined;
 }>;
 export default _default;
 //# sourceMappingURL=upload-image.d.ts.map

package/dist/integrations/identity.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"identity.d.ts","sourceRoot":"","sources":["../../src/integrations/identity.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,eAAe,EAAE,2BAA2B,EAAE,MAAM,YAAY,CAAC;AAE/E,MAAM,MAAM,gCAAgC,GACxC,YAAY,GACZ,OAAO,GACP,oBAAoB,GACpB,yBAAyB,CAAC;AAE9B;;;;;GAKG;AACH,qBAAa,gCAAiC,SAAQ,KAAK;IACzD,QAAQ,CAAC,MAAM,EAAE,gCAAgC,CAAC;IAClD,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC;IAEnC,YACE,MAAM,EAAE,gCAAgC,EACxC,OAAO,EAAE,MAAM,EACf,iBAAiB,EAAE,MAAM,EAM1B;CACF;AAmDD;;;;;;;;;;;;GAYG;AACH,wBAAsB,yCAAyC,CAC7D,QAAQ,EAAE,eAAe,GACxB,OAAO,CAAC,2BAA2B,CAAC,CA8FtC"}
+{"version":3,"file":"identity.d.ts","sourceRoot":"","sources":["../../src/integrations/identity.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,eAAe,EAAE,2BAA2B,EAAE,MAAM,YAAY,CAAC;AAE/E,MAAM,MAAM,gCAAgC,GACxC,YAAY,GACZ,OAAO,GACP,oBAAoB,GACpB,yBAAyB,CAAC;AAE9B;;;;;GAKG;AACH,qBAAa,gCAAiC,SAAQ,KAAK;IACzD,QAAQ,CAAC,MAAM,EAAE,gCAAgC,CAAC;IAClD,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC;IAEnC,YACE,MAAM,EAAE,gCAAgC,EACxC,OAAO,EAAE,MAAM,EACf,iBAAiB,EAAE,MAAM,EAM1B;CACF;AAyCD;;;;;;;;;;;;GAYG;AACH,wBAAsB,yCAAyC,CAC7D,QAAQ,EAAE,eAAe,GACxB,OAAO,CAAC,2BAA2B,CAAC,CA8FtC"}

package/dist/integrations/identity.js

@@ -1,4 +1,4 @@
-import { getDbExec } from "../db/client.js";
+import { isOrgMember as isMemberOfOrg } from "../org/membership.js";
 import { upsertVerifiedIntegrationIdentity } from "./identity-links-store.js";
 import { getActiveIntegrationInstallationByKey, getActiveIntegrationInstallationForTenant, } from "./installations-store.js";
 import { slackInstallationKey } from "./slack-oauth.js";
@@ -48,15 +48,6 @@ async function resolveSlackInstallation(incoming) {
         ? getActiveIntegrationInstallationForTenant("slack", teamId ?? enterpriseId)
         : null;
 }
-async function isMemberOfOrg(email, orgId) {
-    const { rows } = await getDbExec().execute({
-        sql: `SELECT 1 FROM org_members
-        WHERE org_id = ? AND LOWER(email) = ?
-        LIMIT 1`,
-        args: [orgId, email],
-    });
-    return rows.length > 0;
-}
 /**
  * Resolve the default integration principal.
  *
@@ -101,7 +92,7 @@ export async function resolveDefaultIntegrationExecutionContext(incoming) {
         incoming.senderId &&
         incoming.tenantId) {
         try {
-            isOrgMember = await isMemberOfOrg(email, installation.orgId);
+            isOrgMember = await isMemberOfOrg(installation.orgId, email);
         }
         catch {
             // A membership-store outage is not evidence that the sender is merely

package/dist/integrations/identity.js.map

@@ -1 +1 @@
-{"version":3,"file":"identity.js","sourceRoot":"","sources":["../../src/integrations/identity.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAC5C,OAAO,EAAE,iCAAiC,EAAE,MAAM,2BAA2B,CAAC;AAC9E,OAAO,EACL,qCAAqC,EACrC,yCAAyC,GAC1C,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAAE,oBAAoB,EAAE,MAAM,kBAAkB,CAAC;AASxD;;;;;GAKG;AACH,MAAM,OAAO,gCAAiC,SAAQ,KAAK;IAChD,MAAM,CAAmC;IACzC,iBAAiB,CAAS;IAEnC,YACE,MAAwC,EACxC,OAAe,EACf,iBAAyB;QAEzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,kCAAkC,CAAC;QAC/C,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,iBAAiB,GAAG,iBAAiB,CAAC;IAC7C,CAAC;CACF;AAED,SAAS,YAAY,CAAC,QAAgB;IACpC,OAAO,eAAe,QAAQ,EAAE,CAAC;AACnC,CAAC;AAED,SAAS,eAAe,CAAC,KAAc;IACrC,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC3C,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACzC,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IACtE,OAAO,KAAK,CAAC;AACf,CAAC;AAED,KAAK,UAAU,wBAAwB,CAAC,QAAyB;IAC/D,MAAM,MAAM,GACV,OAAO,QAAQ,CAAC,eAAe,CAAC,MAAM,KAAK,QAAQ;QACjD,CAAC,CAAC,QAAQ,CAAC,eAAe,CAAC,MAAM;QACjC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC;IACxB,MAAM,YAAY,GAChB,OAAO,QAAQ,CAAC,eAAe,CAAC,YAAY,KAAK,QAAQ;QACvD,CAAC,CAAC,QAAQ,CAAC,eAAe,CAAC,YAAY;QACvC,CAAC,CAAC,SAAS,CAAC;IAChB,MAAM,QAAQ,GACZ,OAAO,QAAQ,CAAC,eAAe,CAAC,QAAQ,KAAK,QAAQ;QACnD,CAAC,CAAC,QAAQ,CAAC,eAAe,CAAC,QAAQ;QACnC,CAAC,CAAC,SAAS,CAAC;IAChB,IAAI,QAAQ,IAAI,CAAC,MAAM,IAAI,YAAY,CAAC,EAAE,CAAC;QACzC,MAAM,KAAK,GAAG,MAAM,qCAAqC,CACvD,OAAO,EACP,oBAAoB,CAAC,EAAE,MAAM,EAAE,YAAY,EAAE,QAAQ,EAAE,CAAC,CACzD,CAAC;QACF,IAAI,KAAK;YAAE,OAAO,KAAK,CAAC;IAC1B,CAAC;IACD,OAAO,MAAM,IAAI,YAAY;QAC3B,CAAC,CAAC,yCAAyC,CACvC,OAAO,EACP,MAAM,IAAI,YAAa,CACxB;QACH,CAAC,CAAC,IAAI,CAAC;AACX,CAAC;AAED,KAAK,UAAU,aAAa,CAAC,KAAa,EAAE,KAAa;IACvD,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,SAAS,EAAE,CAAC,OAAO,CAAC;QACzC,GAAG,EAAE;;gBAEO;QACZ,IAAI,EAAE,CAAC,KAAK,EAAE,KAAK,CAAC;KACrB,CAAC,CAAC;IACH,OAAO,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC;AACzB,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,KAAK,UAAU,yCAAyC,CAC7D,QAAyB;IAEzB,MAAM,YAAY,GAChB,QAAQ,CAAC,QAAQ,KAAK,OAAO;QAC3B,CAAC,CAAC,MAAM,wBAAwB,CAAC,QAAQ,CAAC;QAC1C,CAAC,CAAC,IAAI,CAAC;IAEX,IAAI,QAAQ,CAAC,QAAQ,KAAK,OAAO,IAAI,QAAQ,CAAC,gBAAgB,KAAK,IAAI,EAAE,CAAC;QACxE,OAAO;YACL,UAAU,EAAE,YAAY,CAAC,QAAQ,CAAC,QAAQ,CAAC;YAC3C,KAAK,EAAE,YAAY,EAAE,KAAK,IAAI,IAAI;YAClC,aAAa,EAAE,SAAS;YACxB,GAAG,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,YAAY,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACjE,CAAC;IACJ,CAAC;IAED,yEAAyE;IACzE,oEAAoE;IACpE,IAAI,QAAQ,CAAC,UAAU,EAAE,QAAQ,KAAK,IAAI,EAAE,CAAC;QAC3C,MAAM,IAAI,gCAAgC,CACxC,YAAY,EACZ,4FAA4F,EAC5F,4GAA4G,CAC7G,CAAC;IACJ,CAAC;IACD,IACE,QAAQ,CAAC,UAAU,CAAC,UAAU,KAAK,OAAO;QAC1C,QAAQ,CAAC,UAAU,CAAC,UAAU,KAAK,UAAU,EAC7C,CAAC;QACD,MAAM,IAAI,gCAAgC,CACxC,OAAO,EACP,8DAA8D,EAC9D,+EAA+E,CAChF,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,YAAY,EAAE,KAAK,EAAE,CAAC;QACzB,MAAM,IAAI,gCAAgC,CACxC,oBAAoB,EACpB,mEAAmE,EACnE,8DAA8D,CAC/D,CAAC;IACJ,CAAC;IAED,MAAM,KAAK,GAAG,eAAe,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IACpD,IAAI,WAAW,GAAG,KAAK,CAAC;IACxB,IACE,KAAK;QACL,QAAQ,CAAC,cAAc,KAAK,IAAI;QAChC,QAAQ,CAAC,QAAQ;QACjB,QAAQ,CAAC,QAAQ,EACjB,CAAC;QACD,IAAI,CAAC;YACH,WAAW,GAAG,MAAM,aAAa,CAAC,KAAK,EAAE,YAAY,CAAC,KAAK,CAAC,CAAC;QAC/D,CAAC;QAAC,MAAM,CAAC;YACP,sEAAsE;YACtE,qEAAqE;YACrE,MAAM,IAAI,gCAAgC,CACxC,yBAAyB,EACzB,yDAAyD,EACzD,qHAAqH,CACtH,CAAC;QACJ,CAAC;IACH,CAAC;IACD,IAAI,WAAW,IAAI,KAAK,IAAI,QAAQ,CAAC,QAAQ,IAAI,QAAQ,CAAC,QAAQ,EAAE,CAAC;QACnE,MAAM,IAAI,GAAG,MAAM,iCAAiC,CAAC;YACnD,QAAQ,EAAE,QAAQ,CAAC,QAAQ;YAC3B,QAAQ,EAAE,QAAQ,CAAC,QAAQ;YAC3B,cAAc,EAAE,QAAQ,CAAC,QAAQ;YACjC,SAAS,EAAE,KAAK;YAChB,KAAK,EAAE,YAAY,CAAC,KAAK;SAC1B,CAAC,CAAC;QACH,OAAO;YACL,UAAU,EAAE,IAAI,CAAC,SAAS;YAC1B,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,aAAa,EAAE,MAAM;YACrB,cAAc,EAAE,YAAY,CAAC,EAAE;SAChC,CAAC;IACJ,CAAC;IAED,qEAAqE;IACrE,2EAA2E;IAC3E,6EAA6E;IAC7E,mEAAmE;IACnE,0EAA0E;IAC1E,kCAAkC;IAClC,OAAO,CAAC,IAAI,CACV,gEAAgE,QAAQ,CAAC,QAAQ,WAAW,QAAQ,CAAC,QAAQ,IAAI,SAAS,iBAAiB,OAAO,CAAC,KAAK,CAAC,eAAe,QAAQ,CAAC,UAAU,CAAC,UAAU,EAAE,CACzM,CAAC;IACF,OAAO;QACL,UAAU,EAAE,YAAY,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAC3C,KAAK,EAAE,YAAY,CAAC,KAAK;QACzB,aAAa,EAAE,SAAS;QACxB,cAAc,EAAE,YAAY,CAAC,EAAE;QAC/B,eAAe,EAAE,IAAI;KACtB,CAAC;AACJ,CAAC","sourcesContent":["import { getDbExec } from \"../db/client.js\";\nimport { upsertVerifiedIntegrationIdentity } from \"./identity-links-store.js\";\nimport {\n  getActiveIntegrationInstallationByKey,\n  getActiveIntegrationInstallationForTenant,\n} from \"./installations-store.js\";\nimport { slackInstallationKey } from \"./slack-oauth.js\";\nimport type { IncomingMessage, IntegrationExecutionContext } from \"./types.js\";\n\nexport type IntegrationIdentityDeclineReason =\n  | \"unverified\"\n  | \"guest\"\n  | \"unlinked-workspace\"\n  | \"membership-check-failed\";\n\n/**\n * Thrown when the default Slack DM identity ladder declines to run a message.\n * `reason` is a stable machine-readable discriminator (used e.g. to dedupe\n * decline replies); `userFacingMessage` is safe to send back to the sender as\n * a polite reply; `message` stays log-only.\n */\nexport class IntegrationIdentityDeclinedError extends Error {\n  readonly reason: IntegrationIdentityDeclineReason;\n  readonly userFacingMessage: string;\n\n  constructor(\n    reason: IntegrationIdentityDeclineReason,\n    message: string,\n    userFacingMessage: string,\n  ) {\n    super(message);\n    this.name = \"IntegrationIdentityDeclinedError\";\n    this.reason = reason;\n    this.userFacingMessage = userFacingMessage;\n  }\n}\n\nfunction serviceOwner(platform: string): string {\n  return `integration@${platform}`;\n}\n\nfunction normalizedEmail(value: unknown): string | null {\n  if (typeof value !== \"string\") return null;\n  const email = value.trim().toLowerCase();\n  if (!email || email.length > 320 || !email.includes(\"@\")) return null;\n  return email;\n}\n\nasync function resolveSlackInstallation(incoming: IncomingMessage) {\n  const teamId =\n    typeof incoming.platformContext.teamId === \"string\"\n      ? incoming.platformContext.teamId\n      : incoming.tenantId;\n  const enterpriseId =\n    typeof incoming.platformContext.enterpriseId === \"string\"\n      ? incoming.platformContext.enterpriseId\n      : undefined;\n  const apiAppId =\n    typeof incoming.platformContext.apiAppId === \"string\"\n      ? incoming.platformContext.apiAppId\n      : undefined;\n  if (apiAppId && (teamId || enterpriseId)) {\n    const byKey = await getActiveIntegrationInstallationByKey(\n      \"slack\",\n      slackInstallationKey({ teamId, enterpriseId, apiAppId }),\n    );\n    if (byKey) return byKey;\n  }\n  return teamId || enterpriseId\n    ? getActiveIntegrationInstallationForTenant(\n        \"slack\",\n        teamId ?? enterpriseId!,\n      )\n    : null;\n}\n\nasync function isMemberOfOrg(email: string, orgId: string): Promise<boolean> {\n  const { rows } = await getDbExec().execute({\n    sql: `SELECT 1 FROM org_members\n        WHERE org_id = ? AND LOWER(email) = ?\n        LIMIT 1`,\n    args: [orgId, email],\n  });\n  return rows.length > 0;\n}\n\n/**\n * Resolve the default integration principal.\n *\n * Slack DMs become a user principal only after the adapter has verified the\n * sender email and the email is already a member of the managed installation's\n * Agent Native organization. Hydrated full workspace members whose email is\n * missing, unverified, or not an organization member run as an anonymous\n * org-scoped service principal instead — the same visibility shared channels\n * get. Hydration failures, guests/external members, and workspaces without a\n * connected organization are declined with a user-facing message. Shared\n * channels deliberately stay service-scoped so a channel message cannot borrow\n * one participant's private permissions.\n */\nexport async function resolveDefaultIntegrationExecutionContext(\n  incoming: IncomingMessage,\n): Promise<IntegrationExecutionContext> {\n  const installation =\n    incoming.platform === \"slack\"\n      ? await resolveSlackInstallation(incoming)\n      : null;\n\n  if (incoming.platform !== \"slack\" || incoming.conversationType !== \"dm\") {\n    return {\n      ownerEmail: serviceOwner(incoming.platform),\n      orgId: installation?.orgId ?? null,\n      principalType: \"service\",\n      ...(installation?.id ? { installationId: installation.id } : {}),\n    };\n  }\n\n  // Hydration check first: a transient users.info failure must land on the\n  // retry decline here, never on the anonymous org-scoped tier below.\n  if (incoming.actorTrust?.verified !== true) {\n    throw new IntegrationIdentityDeclinedError(\n      \"unverified\",\n      \"Slack DM sender identity could not be hydrated; declining instead of guessing a principal.\",\n      \"I couldn't verify your Slack identity just now, so I can't run this request. Please try again in a moment.\",\n    );\n  }\n  if (\n    incoming.actorTrust.memberType === \"guest\" ||\n    incoming.actorTrust.memberType === \"external\"\n  ) {\n    throw new IntegrationIdentityDeclinedError(\n      \"guest\",\n      \"External or guest Slack members cannot use this integration.\",\n      \"This assistant is only available to members of this workspace's organization.\",\n    );\n  }\n  if (!installation?.orgId) {\n    throw new IntegrationIdentityDeclinedError(\n      \"unlinked-workspace\",\n      \"Slack workspace is not connected to an Agent Native organization.\",\n      \"This Slack workspace isn't connected to an organization yet.\",\n    );\n  }\n\n  const email = normalizedEmail(incoming.senderEmail);\n  let isOrgMember = false;\n  if (\n    email &&\n    incoming.senderVerified === true &&\n    incoming.senderId &&\n    incoming.tenantId\n  ) {\n    try {\n      isOrgMember = await isMemberOfOrg(email, installation.orgId);\n    } catch {\n      // A membership-store outage is not evidence that the sender is merely\n      // unlinked. Fail closed instead of widening them to org-wide access.\n      throw new IntegrationIdentityDeclinedError(\n        \"membership-check-failed\",\n        \"Slack DM organization membership could not be verified.\",\n        \"I couldn't verify your organization membership just now, so I can't run this request. Please try again in a moment.\",\n      );\n    }\n  }\n  if (isOrgMember && email && incoming.senderId && incoming.tenantId) {\n    const link = await upsertVerifiedIntegrationIdentity({\n      platform: incoming.platform,\n      tenantId: incoming.tenantId,\n      externalUserId: incoming.senderId,\n      userEmail: email,\n      orgId: installation.orgId,\n    });\n    return {\n      ownerEmail: link.userEmail,\n      orgId: link.orgId,\n      principalType: \"user\",\n      installationId: installation.id,\n    };\n  }\n\n  // Hydrated full workspace member (member/admin/owner) whose email is\n  // unverified, missing (legacy install without users:read.email), or not an\n  // organization member: run with the anonymous org-scoped service principal —\n  // the same visibility shared channels get. Nothing user-private is\n  // accessible. One structured line keeps 100%-anonymous workspaces (legacy\n  // scope missing) visible in logs.\n  console.warn(\n    `[integrations] anonymous org-scoped principal used: platform=${incoming.platform} teamId=${incoming.tenantId ?? \"unknown\"} emailPresent=${Boolean(email)} memberType=${incoming.actorTrust.memberType}`,\n  );\n  return {\n    ownerEmail: serviceOwner(incoming.platform),\n    orgId: installation.orgId,\n    principalType: \"service\",\n    installationId: installation.id,\n    anonymousMember: true,\n  };\n}\n"]}
+{"version":3,"file":"identity.js","sourceRoot":"","sources":["../../src/integrations/identity.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,IAAI,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACpE,OAAO,EAAE,iCAAiC,EAAE,MAAM,2BAA2B,CAAC;AAC9E,OAAO,EACL,qCAAqC,EACrC,yCAAyC,GAC1C,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAAE,oBAAoB,EAAE,MAAM,kBAAkB,CAAC;AASxD;;;;;GAKG;AACH,MAAM,OAAO,gCAAiC,SAAQ,KAAK;IAChD,MAAM,CAAmC;IACzC,iBAAiB,CAAS;IAEnC,YACE,MAAwC,EACxC,OAAe,EACf,iBAAyB;QAEzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,kCAAkC,CAAC;QAC/C,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,iBAAiB,GAAG,iBAAiB,CAAC;IAC7C,CAAC;CACF;AAED,SAAS,YAAY,CAAC,QAAgB;IACpC,OAAO,eAAe,QAAQ,EAAE,CAAC;AACnC,CAAC;AAED,SAAS,eAAe,CAAC,KAAc;IACrC,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC3C,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACzC,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IACtE,OAAO,KAAK,CAAC;AACf,CAAC;AAED,KAAK,UAAU,wBAAwB,CAAC,QAAyB;IAC/D,MAAM,MAAM,GACV,OAAO,QAAQ,CAAC,eAAe,CAAC,MAAM,KAAK,QAAQ;QACjD,CAAC,CAAC,QAAQ,CAAC,eAAe,CAAC,MAAM;QACjC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC;IACxB,MAAM,YAAY,GAChB,OAAO,QAAQ,CAAC,eAAe,CAAC,YAAY,KAAK,QAAQ;QACvD,CAAC,CAAC,QAAQ,CAAC,eAAe,CAAC,YAAY;QACvC,CAAC,CAAC,SAAS,CAAC;IAChB,MAAM,QAAQ,GACZ,OAAO,QAAQ,CAAC,eAAe,CAAC,QAAQ,KAAK,QAAQ;QACnD,CAAC,CAAC,QAAQ,CAAC,eAAe,CAAC,QAAQ;QACnC,CAAC,CAAC,SAAS,CAAC;IAChB,IAAI,QAAQ,IAAI,CAAC,MAAM,IAAI,YAAY,CAAC,EAAE,CAAC;QACzC,MAAM,KAAK,GAAG,MAAM,qCAAqC,CACvD,OAAO,EACP,oBAAoB,CAAC,EAAE,MAAM,EAAE,YAAY,EAAE,QAAQ,EAAE,CAAC,CACzD,CAAC;QACF,IAAI,KAAK;YAAE,OAAO,KAAK,CAAC;IAC1B,CAAC;IACD,OAAO,MAAM,IAAI,YAAY;QAC3B,CAAC,CAAC,yCAAyC,CACvC,OAAO,EACP,MAAM,IAAI,YAAa,CACxB;QACH,CAAC,CAAC,IAAI,CAAC;AACX,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,KAAK,UAAU,yCAAyC,CAC7D,QAAyB;IAEzB,MAAM,YAAY,GAChB,QAAQ,CAAC,QAAQ,KAAK,OAAO;QAC3B,CAAC,CAAC,MAAM,wBAAwB,CAAC,QAAQ,CAAC;QAC1C,CAAC,CAAC,IAAI,CAAC;IAEX,IAAI,QAAQ,CAAC,QAAQ,KAAK,OAAO,IAAI,QAAQ,CAAC,gBAAgB,KAAK,IAAI,EAAE,CAAC;QACxE,OAAO;YACL,UAAU,EAAE,YAAY,CAAC,QAAQ,CAAC,QAAQ,CAAC;YAC3C,KAAK,EAAE,YAAY,EAAE,KAAK,IAAI,IAAI;YAClC,aAAa,EAAE,SAAS;YACxB,GAAG,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,YAAY,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACjE,CAAC;IACJ,CAAC;IAED,yEAAyE;IACzE,oEAAoE;IACpE,IAAI,QAAQ,CAAC,UAAU,EAAE,QAAQ,KAAK,IAAI,EAAE,CAAC;QAC3C,MAAM,IAAI,gCAAgC,CACxC,YAAY,EACZ,4FAA4F,EAC5F,4GAA4G,CAC7G,CAAC;IACJ,CAAC;IACD,IACE,QAAQ,CAAC,UAAU,CAAC,UAAU,KAAK,OAAO;QAC1C,QAAQ,CAAC,UAAU,CAAC,UAAU,KAAK,UAAU,EAC7C,CAAC;QACD,MAAM,IAAI,gCAAgC,CACxC,OAAO,EACP,8DAA8D,EAC9D,+EAA+E,CAChF,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,YAAY,EAAE,KAAK,EAAE,CAAC;QACzB,MAAM,IAAI,gCAAgC,CACxC,oBAAoB,EACpB,mEAAmE,EACnE,8DAA8D,CAC/D,CAAC;IACJ,CAAC;IAED,MAAM,KAAK,GAAG,eAAe,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IACpD,IAAI,WAAW,GAAG,KAAK,CAAC;IACxB,IACE,KAAK;QACL,QAAQ,CAAC,cAAc,KAAK,IAAI;QAChC,QAAQ,CAAC,QAAQ;QACjB,QAAQ,CAAC,QAAQ,EACjB,CAAC;QACD,IAAI,CAAC;YACH,WAAW,GAAG,MAAM,aAAa,CAAC,YAAY,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;QAC/D,CAAC;QAAC,MAAM,CAAC;YACP,sEAAsE;YACtE,qEAAqE;YACrE,MAAM,IAAI,gCAAgC,CACxC,yBAAyB,EACzB,yDAAyD,EACzD,qHAAqH,CACtH,CAAC;QACJ,CAAC;IACH,CAAC;IACD,IAAI,WAAW,IAAI,KAAK,IAAI,QAAQ,CAAC,QAAQ,IAAI,QAAQ,CAAC,QAAQ,EAAE,CAAC;QACnE,MAAM,IAAI,GAAG,MAAM,iCAAiC,CAAC;YACnD,QAAQ,EAAE,QAAQ,CAAC,QAAQ;YAC3B,QAAQ,EAAE,QAAQ,CAAC,QAAQ;YAC3B,cAAc,EAAE,QAAQ,CAAC,QAAQ;YACjC,SAAS,EAAE,KAAK;YAChB,KAAK,EAAE,YAAY,CAAC,KAAK;SAC1B,CAAC,CAAC;QACH,OAAO;YACL,UAAU,EAAE,IAAI,CAAC,SAAS;YAC1B,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,aAAa,EAAE,MAAM;YACrB,cAAc,EAAE,YAAY,CAAC,EAAE;SAChC,CAAC;IACJ,CAAC;IAED,qEAAqE;IACrE,2EAA2E;IAC3E,6EAA6E;IAC7E,mEAAmE;IACnE,0EAA0E;IAC1E,kCAAkC;IAClC,OAAO,CAAC,IAAI,CACV,gEAAgE,QAAQ,CAAC,QAAQ,WAAW,QAAQ,CAAC,QAAQ,IAAI,SAAS,iBAAiB,OAAO,CAAC,KAAK,CAAC,eAAe,QAAQ,CAAC,UAAU,CAAC,UAAU,EAAE,CACzM,CAAC;IACF,OAAO;QACL,UAAU,EAAE,YAAY,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAC3C,KAAK,EAAE,YAAY,CAAC,KAAK;QACzB,aAAa,EAAE,SAAS;QACxB,cAAc,EAAE,YAAY,CAAC,EAAE;QAC/B,eAAe,EAAE,IAAI;KACtB,CAAC;AACJ,CAAC","sourcesContent":["import { isOrgMember as isMemberOfOrg } from \"../org/membership.js\";\nimport { upsertVerifiedIntegrationIdentity } from \"./identity-links-store.js\";\nimport {\n  getActiveIntegrationInstallationByKey,\n  getActiveIntegrationInstallationForTenant,\n} from \"./installations-store.js\";\nimport { slackInstallationKey } from \"./slack-oauth.js\";\nimport type { IncomingMessage, IntegrationExecutionContext } from \"./types.js\";\n\nexport type IntegrationIdentityDeclineReason =\n  | \"unverified\"\n  | \"guest\"\n  | \"unlinked-workspace\"\n  | \"membership-check-failed\";\n\n/**\n * Thrown when the default Slack DM identity ladder declines to run a message.\n * `reason` is a stable machine-readable discriminator (used e.g. to dedupe\n * decline replies); `userFacingMessage` is safe to send back to the sender as\n * a polite reply; `message` stays log-only.\n */\nexport class IntegrationIdentityDeclinedError extends Error {\n  readonly reason: IntegrationIdentityDeclineReason;\n  readonly userFacingMessage: string;\n\n  constructor(\n    reason: IntegrationIdentityDeclineReason,\n    message: string,\n    userFacingMessage: string,\n  ) {\n    super(message);\n    this.name = \"IntegrationIdentityDeclinedError\";\n    this.reason = reason;\n    this.userFacingMessage = userFacingMessage;\n  }\n}\n\nfunction serviceOwner(platform: string): string {\n  return `integration@${platform}`;\n}\n\nfunction normalizedEmail(value: unknown): string | null {\n  if (typeof value !== \"string\") return null;\n  const email = value.trim().toLowerCase();\n  if (!email || email.length > 320 || !email.includes(\"@\")) return null;\n  return email;\n}\n\nasync function resolveSlackInstallation(incoming: IncomingMessage) {\n  const teamId =\n    typeof incoming.platformContext.teamId === \"string\"\n      ? incoming.platformContext.teamId\n      : incoming.tenantId;\n  const enterpriseId =\n    typeof incoming.platformContext.enterpriseId === \"string\"\n      ? incoming.platformContext.enterpriseId\n      : undefined;\n  const apiAppId =\n    typeof incoming.platformContext.apiAppId === \"string\"\n      ? incoming.platformContext.apiAppId\n      : undefined;\n  if (apiAppId && (teamId || enterpriseId)) {\n    const byKey = await getActiveIntegrationInstallationByKey(\n      \"slack\",\n      slackInstallationKey({ teamId, enterpriseId, apiAppId }),\n    );\n    if (byKey) return byKey;\n  }\n  return teamId || enterpriseId\n    ? getActiveIntegrationInstallationForTenant(\n        \"slack\",\n        teamId ?? enterpriseId!,\n      )\n    : null;\n}\n\n/**\n * Resolve the default integration principal.\n *\n * Slack DMs become a user principal only after the adapter has verified the\n * sender email and the email is already a member of the managed installation's\n * Agent Native organization. Hydrated full workspace members whose email is\n * missing, unverified, or not an organization member run as an anonymous\n * org-scoped service principal instead — the same visibility shared channels\n * get. Hydration failures, guests/external members, and workspaces without a\n * connected organization are declined with a user-facing message. Shared\n * channels deliberately stay service-scoped so a channel message cannot borrow\n * one participant's private permissions.\n */\nexport async function resolveDefaultIntegrationExecutionContext(\n  incoming: IncomingMessage,\n): Promise<IntegrationExecutionContext> {\n  const installation =\n    incoming.platform === \"slack\"\n      ? await resolveSlackInstallation(incoming)\n      : null;\n\n  if (incoming.platform !== \"slack\" || incoming.conversationType !== \"dm\") {\n    return {\n      ownerEmail: serviceOwner(incoming.platform),\n      orgId: installation?.orgId ?? null,\n      principalType: \"service\",\n      ...(installation?.id ? { installationId: installation.id } : {}),\n    };\n  }\n\n  // Hydration check first: a transient users.info failure must land on the\n  // retry decline here, never on the anonymous org-scoped tier below.\n  if (incoming.actorTrust?.verified !== true) {\n    throw new IntegrationIdentityDeclinedError(\n      \"unverified\",\n      \"Slack DM sender identity could not be hydrated; declining instead of guessing a principal.\",\n      \"I couldn't verify your Slack identity just now, so I can't run this request. Please try again in a moment.\",\n    );\n  }\n  if (\n    incoming.actorTrust.memberType === \"guest\" ||\n    incoming.actorTrust.memberType === \"external\"\n  ) {\n    throw new IntegrationIdentityDeclinedError(\n      \"guest\",\n      \"External or guest Slack members cannot use this integration.\",\n      \"This assistant is only available to members of this workspace's organization.\",\n    );\n  }\n  if (!installation?.orgId) {\n    throw new IntegrationIdentityDeclinedError(\n      \"unlinked-workspace\",\n      \"Slack workspace is not connected to an Agent Native organization.\",\n      \"This Slack workspace isn't connected to an organization yet.\",\n    );\n  }\n\n  const email = normalizedEmail(incoming.senderEmail);\n  let isOrgMember = false;\n  if (\n    email &&\n    incoming.senderVerified === true &&\n    incoming.senderId &&\n    incoming.tenantId\n  ) {\n    try {\n      isOrgMember = await isMemberOfOrg(installation.orgId, email);\n    } catch {\n      // A membership-store outage is not evidence that the sender is merely\n      // unlinked. Fail closed instead of widening them to org-wide access.\n      throw new IntegrationIdentityDeclinedError(\n        \"membership-check-failed\",\n        \"Slack DM organization membership could not be verified.\",\n        \"I couldn't verify your organization membership just now, so I can't run this request. Please try again in a moment.\",\n      );\n    }\n  }\n  if (isOrgMember && email && incoming.senderId && incoming.tenantId) {\n    const link = await upsertVerifiedIntegrationIdentity({\n      platform: incoming.platform,\n      tenantId: incoming.tenantId,\n      externalUserId: incoming.senderId,\n      userEmail: email,\n      orgId: installation.orgId,\n    });\n    return {\n      ownerEmail: link.userEmail,\n      orgId: link.orgId,\n      principalType: \"user\",\n      installationId: installation.id,\n    };\n  }\n\n  // Hydrated full workspace member (member/admin/owner) whose email is\n  // unverified, missing (legacy install without users:read.email), or not an\n  // organization member: run with the anonymous org-scoped service principal —\n  // the same visibility shared channels get. Nothing user-private is\n  // accessible. One structured line keeps 100%-anonymous workspaces (legacy\n  // scope missing) visible in logs.\n  console.warn(\n    `[integrations] anonymous org-scoped principal used: platform=${incoming.platform} teamId=${incoming.tenantId ?? \"unknown\"} emailPresent=${Boolean(email)} memberType=${incoming.actorTrust.memberType}`,\n  );\n  return {\n    ownerEmail: serviceOwner(incoming.platform),\n    orgId: installation.orgId,\n    principalType: \"service\",\n    installationId: installation.id,\n    anonymousMember: true,\n  };\n}\n"]}

package/dist/jobs/actions/list-automation-runs.d.ts

@@ -0,0 +1,8 @@
+import { type AutomationRun } from "../run-history.js";
+declare const _default: import("../../action.js").ActionDefinition<{
+    name: string;
+    scope?: "organization" | "personal";
+    limit?: number;
+}, AutomationRun[]>;
+export default _default;
+//# sourceMappingURL=list-automation-runs.d.ts.map

package/dist/jobs/actions/list-automation-runs.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"list-automation-runs.d.ts","sourceRoot":"","sources":["../../../src/jobs/actions/list-automation-runs.ts"],"names":[],"mappings":"AAIA,OAAO,EAAsB,KAAK,aAAa,EAAE,MAAM,mBAAmB,CAAC"}

package/dist/jobs/actions/list-automation-runs.js

@@ -0,0 +1,29 @@
+import { z } from "zod";
+import { defineAction } from "../../action.js";
+import { organizationResourceOwner } from "../../resources/store.js";
+import { listAutomationRuns } from "../run-history.js";
+const scopeSchema = z.enum(["personal", "organization"]);
+export default defineAction({
+    description: "List past execution records for one automation or recurring job in the selected scope.",
+    agentTool: false,
+    schema: z.object({
+        name: z.string().min(1),
+        scope: scopeSchema.default("personal"),
+        limit: z.number().int().min(1).max(100).optional(),
+    }),
+    http: { method: "GET" },
+    readOnly: true,
+    parallelSafe: true,
+    run: async ({ name, scope, limit }, ctx) => {
+        const userEmail = ctx?.userEmail;
+        if (!userEmail)
+            throw new Error("Not authenticated.");
+        if (scope === "organization" && !ctx?.orgId)
+            return [];
+        const owner = scope === "organization"
+            ? organizationResourceOwner(ctx.orgId)
+            : userEmail;
+        return listAutomationRuns({ owners: [owner], automation: name, limit });
+    },
+});
+//# sourceMappingURL=list-automation-runs.js.map

package/dist/jobs/actions/list-automation-runs.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"list-automation-runs.js","sourceRoot":"","sources":["../../../src/jobs/actions/list-automation-runs.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAC/C,OAAO,EAAE,yBAAyB,EAAE,MAAM,0BAA0B,CAAC;AACrE,OAAO,EAAE,kBAAkB,EAAsB,MAAM,mBAAmB,CAAC;AAE3E,MAAM,WAAW,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,cAAc,CAAC,CAAC,CAAC;AAEzD,eAAe,YAAY,CAAC;IAC1B,WAAW,EACT,wFAAwF;IAC1F,SAAS,EAAE,KAAK;IAChB,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC;QACf,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QACvB,KAAK,EAAE,WAAW,CAAC,OAAO,CAAC,UAAU,CAAC;QACtC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;KACnD,CAAC;IACF,IAAI,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE;IACvB,QAAQ,EAAE,IAAI;IACd,YAAY,EAAE,IAAI;IAClB,GAAG,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,GAAG,EAA4B,EAAE;QACnE,MAAM,SAAS,GAAG,GAAG,EAAE,SAAS,CAAC;QACjC,IAAI,CAAC,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAC;QACtD,IAAI,KAAK,KAAK,cAAc,IAAI,CAAC,GAAG,EAAE,KAAK;YAAE,OAAO,EAAE,CAAC;QAEvD,MAAM,KAAK,GACT,KAAK,KAAK,cAAc;YACtB,CAAC,CAAC,yBAAyB,CAAC,GAAG,CAAC,KAAe,CAAC;YAChD,CAAC,CAAC,SAAS,CAAC;QAEhB,OAAO,kBAAkB,CAAC,EAAE,MAAM,EAAE,CAAC,KAAK,CAAC,EAAE,UAAU,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC1E,CAAC;CACF,CAAC,CAAC","sourcesContent":["import { z } from \"zod\";\n\nimport { defineAction } from \"../../action.js\";\nimport { organizationResourceOwner } from \"../../resources/store.js\";\nimport { listAutomationRuns, type AutomationRun } from \"../run-history.js\";\n\nconst scopeSchema = z.enum([\"personal\", \"organization\"]);\n\nexport default defineAction({\n  description:\n    \"List past execution records for one automation or recurring job in the selected scope.\",\n  agentTool: false,\n  schema: z.object({\n    name: z.string().min(1),\n    scope: scopeSchema.default(\"personal\"),\n    limit: z.number().int().min(1).max(100).optional(),\n  }),\n  http: { method: \"GET\" },\n  readOnly: true,\n  parallelSafe: true,\n  run: async ({ name, scope, limit }, ctx): Promise<AutomationRun[]> => {\n    const userEmail = ctx?.userEmail;\n    if (!userEmail) throw new Error(\"Not authenticated.\");\n    if (scope === \"organization\" && !ctx?.orgId) return [];\n\n    const owner =\n      scope === \"organization\"\n        ? organizationResourceOwner(ctx.orgId as string)\n        : userEmail;\n\n    return listAutomationRuns({ owners: [owner], automation: name, limit });\n  },\n});\n"]}

package/dist/jobs/actions/list-recurring-jobs.d.ts

@@ -4,10 +4,12 @@ export interface RecurringJobActionItem {
     path: string;
     scope: "personal" | "organization";
     schedule: string;
+    timezone: string;
     scheduleDescription: string;
     instructions: string;
     enabled: boolean;
     lastRun: string | null;
+    lastCheck: string | null;
     lastStatus: string | null;
     lastError: string | null;
     nextRun: string | null;

package/dist/jobs/actions/list-recurring-jobs.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"list-recurring-jobs.d.ts","sourceRoot":"","sources":["../../../src/jobs/actions/list-recurring-jobs.ts"],"names":[],"mappings":"AA8BA,MAAM,WAAW,sBAAsB;IACrC,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,UAAU,GAAG,cAAc,CAAC;IACnC,QAAQ,EAAE,MAAM,CAAC;IACjB,mBAAmB,EAAE,MAAM,CAAC;IAC5B,YAAY,EAAE,MAAM,CAAC;IACrB,OAAO,EAAE,OAAO,CAAC;IACjB,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,SAAS,EAAE,OAAO,CAAC;CACpB"}
+{"version":3,"file":"list-recurring-jobs.d.ts","sourceRoot":"","sources":["../../../src/jobs/actions/list-recurring-jobs.ts"],"names":[],"mappings":"AA6CA,MAAM,WAAW,sBAAsB;IACrC,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,UAAU,GAAG,cAAc,CAAC;IACnC,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,mBAAmB,EAAE,MAAM,CAAC;IAC5B,YAAY,EAAE,MAAM,CAAC;IACrB,OAAO,EAAE,OAAO,CAAC;IACjB,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,SAAS,EAAE,OAAO,CAAC;CACpB"}

package/dist/jobs/actions/list-recurring-jobs.js

@@ -1,7 +1,7 @@
 import { z } from "zod";
 import { defineAction } from "../../action.js";
 import { organizationResourceOwner, resourceGetByPath, resourceList, } from "../../resources/store.js";
-import { describeCron, isValidCron, nextOccurrence } from "../cron.js";
+import { describeCron, effectiveTimezone, isValidCron, nextOccurrence, } from "../cron.js";
 import { classifyJobResource } from "../frontmatter.js";
 import { parseJobFrontmatter } from "../scheduler.js";
 import { authorizeJobMutation } from "../tools.js";
@@ -9,15 +9,24 @@ const scopeSchema = z.enum(["personal", "organization"]);
 function jobName(path) {
     return path.replace(/^jobs\//, "").replace(/\.md$/, "");
 }
+/**
+ * A stored `nextRun` in the past means the scheduler kept declining to run the
+ * job, not that it is due two days ago. Report the real next occurrence and
+ * let `lastError` carry the reason it keeps being passed over.
+ */
 function nextRun(meta) {
     if (!meta.enabled)
         return null;
-    if (meta.nextRun)
-        return meta.nextRun;
-    if (meta.schedule && isValidCron(meta.schedule)) {
-        return nextOccurrence(meta.schedule).toISOString();
+    const scheduled = Boolean(meta.schedule && isValidCron(meta.schedule));
+    if (meta.nextRun) {
+        const stored = new Date(meta.nextRun).getTime();
+        if (!Number.isFinite(stored) || stored > Date.now() || !scheduled) {
+            return meta.nextRun;
+        }
     }
-    return null;
+    return scheduled
+        ? nextOccurrence(meta.schedule, undefined, meta.timezone).toISOString()
+        : null;
 }
 export default defineAction({
     description: "List legacy recurring cron jobs visible in the selected personal or organization scope. This compatibility read surface is used by the Agent Automations page.",
@@ -55,10 +64,14 @@ export default defineAction({
                 path: full.path,
                 scope,
                 schedule: meta.schedule,
-                scheduleDescription: meta.schedule ? describeCron(meta.schedule) : "",
+                timezone: effectiveTimezone(meta.timezone),
+                scheduleDescription: meta.schedule
+                    ? describeCron(meta.schedule, effectiveTimezone(meta.timezone))
+                    : "",
                 instructions: body,
                 enabled: meta.enabled,
                 lastRun: meta.lastRun ?? null,
+                lastCheck: meta.lastCheck ?? null,
                 lastStatus: meta.lastStatus ?? null,
                 lastError: meta.lastError ?? null,
                 nextRun: nextRun(meta),

package/dist/jobs/actions/list-recurring-jobs.js.map

@@ -1 +1 @@
-{"version":3,"file":"list-recurring-jobs.js","sourceRoot":"","sources":["../../../src/jobs/actions/list-recurring-jobs.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAC/C,OAAO,EACL,yBAAyB,EACzB,iBAAiB,EACjB,YAAY,GACb,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AACvE,OAAO,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AACxD,OAAO,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAC;AACtD,OAAO,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAC;AAEnD,MAAM,WAAW,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,cAAc,CAAC,CAAC,CAAC;AAEzD,SAAS,OAAO,CAAC,IAAY;IAC3B,OAAO,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;AAC1D,CAAC;AAED,SAAS,OAAO,CACd,IAAoD;IAEpD,IAAI,CAAC,IAAI,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IAC/B,IAAI,IAAI,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC,OAAO,CAAC;IACtC,IAAI,IAAI,CAAC,QAAQ,IAAI,WAAW,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;QAChD,OAAO,cAAc,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,WAAW,EAAE,CAAC;IACrD,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAoBD,eAAe,YAAY,CAAC;IAC1B,WAAW,EACT,gKAAgK;IAClK,SAAS,EAAE,KAAK;IAChB,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC;QACf,KAAK,EAAE,WAAW,CAAC,OAAO,CAAC,UAAU,CAAC;KACvC,CAAC;IACF,IAAI,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE;IACvB,QAAQ,EAAE,IAAI;IACd,YAAY,EAAE,IAAI;IAClB,GAAG,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,EAAE,GAAG,EAAqC,EAAE;QAC/D,MAAM,SAAS,GAAG,GAAG,EAAE,SAAS,CAAC;QACjC,IAAI,CAAC,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAC;QAEtD,IAAI,KAAK,KAAK,cAAc,IAAI,CAAC,GAAG,EAAE,KAAK;YAAE,OAAO,EAAE,CAAC;QAEvD,MAAM,KAAK,GACT,KAAK,KAAK,cAAc;YACtB,CAAC,CAAC,yBAAyB,CAAC,GAAG,CAAC,KAAe,CAAC;YAChD,CAAC,CAAC,SAAS,CAAC;QAChB,MAAM,SAAS,GAAG,MAAM,YAAY,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;QACrD,MAAM,IAAI,GAA6B,EAAE,CAAC;QAE1C,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;YACjC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;gBACtE,SAAS;YACX,CAAC;YACD,MAAM,IAAI,GAAG,MAAM,iBAAiB,CAAC,KAAK,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC;YAC3D,IAAI,CAAC,IAAI,IAAI,mBAAmB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;gBACrE,SAAS;YACX,CAAC;YAED,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,mBAAmB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YACzD,MAAM,SAAS,GACb,KAAK,KAAK,UAAU,IAAI,CAAC,CAAC,MAAM,oBAAoB,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC;YACrE,IAAI,CAAC,IAAI,CAAC;gBACR,EAAE,EAAE,IAAI,CAAC,EAAE;gBACX,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC;gBACxB,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,KAAK;gBACL,QAAQ,EAAE,IAAI,CAAC,QAAQ;gBACvB,mBAAmB,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE;gBACrE,YAAY,EAAE,IAAI;gBAClB,OAAO,EAAE,IAAI,CAAC,OAAO;gBACrB,OAAO,EAAE,IAAI,CAAC,OAAO,IAAI,IAAI;gBAC7B,UAAU,EAAE,IAAI,CAAC,UAAU,IAAI,IAAI;gBACnC,SAAS,EAAE,IAAI,CAAC,SAAS,IAAI,IAAI;gBACjC,OAAO,EAAE,OAAO,CAAC,IAAI,CAAC;gBACtB,SAAS,EAAE,IAAI,CAAC,SAAS,IAAI,IAAI;gBACjC,QAAQ,EAAE,IAAI,CAAC,QAAQ,IAAI,EAAE;gBAC7B,SAAS;aACV,CAAC,CAAC;QACL,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;CACF,CAAC,CAAC","sourcesContent":["import { z } from \"zod\";\n\nimport { defineAction } from \"../../action.js\";\nimport {\n  organizationResourceOwner,\n  resourceGetByPath,\n  resourceList,\n} from \"../../resources/store.js\";\nimport { describeCron, isValidCron, nextOccurrence } from \"../cron.js\";\nimport { classifyJobResource } from \"../frontmatter.js\";\nimport { parseJobFrontmatter } from \"../scheduler.js\";\nimport { authorizeJobMutation } from \"../tools.js\";\n\nconst scopeSchema = z.enum([\"personal\", \"organization\"]);\n\nfunction jobName(path: string): string {\n  return path.replace(/^jobs\\//, \"\").replace(/\\.md$/, \"\");\n}\n\nfunction nextRun(\n  meta: ReturnType<typeof parseJobFrontmatter>[\"meta\"],\n): string | null {\n  if (!meta.enabled) return null;\n  if (meta.nextRun) return meta.nextRun;\n  if (meta.schedule && isValidCron(meta.schedule)) {\n    return nextOccurrence(meta.schedule).toISOString();\n  }\n  return null;\n}\n\nexport interface RecurringJobActionItem {\n  id: string;\n  name: string;\n  path: string;\n  scope: \"personal\" | \"organization\";\n  schedule: string;\n  scheduleDescription: string;\n  instructions: string;\n  enabled: boolean;\n  lastRun: string | null;\n  lastStatus: string | null;\n  lastError: string | null;\n  nextRun: string | null;\n  createdBy: string | null;\n  mcpTools: string[];\n  canUpdate: boolean;\n}\n\nexport default defineAction({\n  description:\n    \"List legacy recurring cron jobs visible in the selected personal or organization scope. This compatibility read surface is used by the Agent Automations page.\",\n  agentTool: false,\n  schema: z.object({\n    scope: scopeSchema.default(\"personal\"),\n  }),\n  http: { method: \"GET\" },\n  readOnly: true,\n  parallelSafe: true,\n  run: async ({ scope }, ctx): Promise<RecurringJobActionItem[]> => {\n    const userEmail = ctx?.userEmail;\n    if (!userEmail) throw new Error(\"Not authenticated.\");\n\n    if (scope === \"organization\" && !ctx?.orgId) return [];\n\n    const owner =\n      scope === \"organization\"\n        ? organizationResourceOwner(ctx.orgId as string)\n        : userEmail;\n    const resources = await resourceList(owner, \"jobs/\");\n    const jobs: RecurringJobActionItem[] = [];\n\n    for (const resource of resources) {\n      if (!resource.path.endsWith(\".md\") || resource.path.endsWith(\".keep\")) {\n        continue;\n      }\n      const full = await resourceGetByPath(owner, resource.path);\n      if (!full || classifyJobResource(full.content).kind === \"automation\") {\n        continue;\n      }\n\n      const { meta, body } = parseJobFrontmatter(full.content);\n      const canUpdate =\n        scope === \"personal\" || !(await authorizeJobMutation(owner, meta));\n      jobs.push({\n        id: full.id,\n        name: jobName(full.path),\n        path: full.path,\n        scope,\n        schedule: meta.schedule,\n        scheduleDescription: meta.schedule ? describeCron(meta.schedule) : \"\",\n        instructions: body,\n        enabled: meta.enabled,\n        lastRun: meta.lastRun ?? null,\n        lastStatus: meta.lastStatus ?? null,\n        lastError: meta.lastError ?? null,\n        nextRun: nextRun(meta),\n        createdBy: meta.createdBy ?? null,\n        mcpTools: meta.mcpTools ?? [],\n        canUpdate,\n      });\n    }\n\n    return jobs;\n  },\n});\n"]}
+{"version":3,"file":"list-recurring-jobs.js","sourceRoot":"","sources":["../../../src/jobs/actions/list-recurring-jobs.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAC/C,OAAO,EACL,yBAAyB,EACzB,iBAAiB,EACjB,YAAY,GACb,MAAM,0BAA0B,CAAC;AAClC,OAAO,EACL,YAAY,EACZ,iBAAiB,EACjB,WAAW,EACX,cAAc,GACf,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AACxD,OAAO,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAC;AACtD,OAAO,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAC;AAEnD,MAAM,WAAW,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,cAAc,CAAC,CAAC,CAAC;AAEzD,SAAS,OAAO,CAAC,IAAY;IAC3B,OAAO,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;AAC1D,CAAC;AAED;;;;GAIG;AACH,SAAS,OAAO,CACd,IAAoD;IAEpD,IAAI,CAAC,IAAI,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IAC/B,MAAM,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC,QAAQ,IAAI,WAAW,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC;IACvE,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;QACjB,MAAM,MAAM,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,CAAC;QAChD,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,MAAM,GAAG,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC;YAClE,OAAO,IAAI,CAAC,OAAO,CAAC;QACtB,CAAC;IACH,CAAC;IACD,OAAO,SAAS;QACd,CAAC,CAAC,cAAc,CAAC,IAAI,CAAC,QAAQ,EAAE,SAAS,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC,WAAW,EAAE;QACvE,CAAC,CAAC,IAAI,CAAC;AACX,CAAC;AAsBD,eAAe,YAAY,CAAC;IAC1B,WAAW,EACT,gKAAgK;IAClK,SAAS,EAAE,KAAK;IAChB,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC;QACf,KAAK,EAAE,WAAW,CAAC,OAAO,CAAC,UAAU,CAAC;KACvC,CAAC;IACF,IAAI,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE;IACvB,QAAQ,EAAE,IAAI;IACd,YAAY,EAAE,IAAI;IAClB,GAAG,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,EAAE,GAAG,EAAqC,EAAE;QAC/D,MAAM,SAAS,GAAG,GAAG,EAAE,SAAS,CAAC;QACjC,IAAI,CAAC,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAC;QAEtD,IAAI,KAAK,KAAK,cAAc,IAAI,CAAC,GAAG,EAAE,KAAK;YAAE,OAAO,EAAE,CAAC;QAEvD,MAAM,KAAK,GACT,KAAK,KAAK,cAAc;YACtB,CAAC,CAAC,yBAAyB,CAAC,GAAG,CAAC,KAAe,CAAC;YAChD,CAAC,CAAC,SAAS,CAAC;QAChB,MAAM,SAAS,GAAG,MAAM,YAAY,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;QACrD,MAAM,IAAI,GAA6B,EAAE,CAAC;QAE1C,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;YACjC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;gBACtE,SAAS;YACX,CAAC;YACD,MAAM,IAAI,GAAG,MAAM,iBAAiB,CAAC,KAAK,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC;YAC3D,IAAI,CAAC,IAAI,IAAI,mBAAmB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;gBACrE,SAAS;YACX,CAAC;YAED,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,mBAAmB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YACzD,MAAM,SAAS,GACb,KAAK,KAAK,UAAU,IAAI,CAAC,CAAC,MAAM,oBAAoB,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC;YACrE,IAAI,CAAC,IAAI,CAAC;gBACR,EAAE,EAAE,IAAI,CAAC,EAAE;gBACX,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC;gBACxB,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,KAAK;gBACL,QAAQ,EAAE,IAAI,CAAC,QAAQ;gBACvB,QAAQ,EAAE,iBAAiB,CAAC,IAAI,CAAC,QAAQ,CAAC;gBAC1C,mBAAmB,EAAE,IAAI,CAAC,QAAQ;oBAChC,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC,QAAQ,EAAE,iBAAiB,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;oBAC/D,CAAC,CAAC,EAAE;gBACN,YAAY,EAAE,IAAI;gBAClB,OAAO,EAAE,IAAI,CAAC,OAAO;gBACrB,OAAO,EAAE,IAAI,CAAC,OAAO,IAAI,IAAI;gBAC7B,SAAS,EAAE,IAAI,CAAC,SAAS,IAAI,IAAI;gBACjC,UAAU,EAAE,IAAI,CAAC,UAAU,IAAI,IAAI;gBACnC,SAAS,EAAE,IAAI,CAAC,SAAS,IAAI,IAAI;gBACjC,OAAO,EAAE,OAAO,CAAC,IAAI,CAAC;gBACtB,SAAS,EAAE,IAAI,CAAC,SAAS,IAAI,IAAI;gBACjC,QAAQ,EAAE,IAAI,CAAC,QAAQ,IAAI,EAAE;gBAC7B,SAAS;aACV,CAAC,CAAC;QACL,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;CACF,CAAC,CAAC","sourcesContent":["import { z } from \"zod\";\n\nimport { defineAction } from \"../../action.js\";\nimport {\n  organizationResourceOwner,\n  resourceGetByPath,\n  resourceList,\n} from \"../../resources/store.js\";\nimport {\n  describeCron,\n  effectiveTimezone,\n  isValidCron,\n  nextOccurrence,\n} from \"../cron.js\";\nimport { classifyJobResource } from \"../frontmatter.js\";\nimport { parseJobFrontmatter } from \"../scheduler.js\";\nimport { authorizeJobMutation } from \"../tools.js\";\n\nconst scopeSchema = z.enum([\"personal\", \"organization\"]);\n\nfunction jobName(path: string): string {\n  return path.replace(/^jobs\\//, \"\").replace(/\\.md$/, \"\");\n}\n\n/**\n * A stored `nextRun` in the past means the scheduler kept declining to run the\n * job, not that it is due two days ago. Report the real next occurrence and\n * let `lastError` carry the reason it keeps being passed over.\n */\nfunction nextRun(\n  meta: ReturnType<typeof parseJobFrontmatter>[\"meta\"],\n): string | null {\n  if (!meta.enabled) return null;\n  const scheduled = Boolean(meta.schedule && isValidCron(meta.schedule));\n  if (meta.nextRun) {\n    const stored = new Date(meta.nextRun).getTime();\n    if (!Number.isFinite(stored) || stored > Date.now() || !scheduled) {\n      return meta.nextRun;\n    }\n  }\n  return scheduled\n    ? nextOccurrence(meta.schedule, undefined, meta.timezone).toISOString()\n    : null;\n}\n\nexport interface RecurringJobActionItem {\n  id: string;\n  name: string;\n  path: string;\n  scope: \"personal\" | \"organization\";\n  schedule: string;\n  timezone: string;\n  scheduleDescription: string;\n  instructions: string;\n  enabled: boolean;\n  lastRun: string | null;\n  lastCheck: string | null;\n  lastStatus: string | null;\n  lastError: string | null;\n  nextRun: string | null;\n  createdBy: string | null;\n  mcpTools: string[];\n  canUpdate: boolean;\n}\n\nexport default defineAction({\n  description:\n    \"List legacy recurring cron jobs visible in the selected personal or organization scope. This compatibility read surface is used by the Agent Automations page.\",\n  agentTool: false,\n  schema: z.object({\n    scope: scopeSchema.default(\"personal\"),\n  }),\n  http: { method: \"GET\" },\n  readOnly: true,\n  parallelSafe: true,\n  run: async ({ scope }, ctx): Promise<RecurringJobActionItem[]> => {\n    const userEmail = ctx?.userEmail;\n    if (!userEmail) throw new Error(\"Not authenticated.\");\n\n    if (scope === \"organization\" && !ctx?.orgId) return [];\n\n    const owner =\n      scope === \"organization\"\n        ? organizationResourceOwner(ctx.orgId as string)\n        : userEmail;\n    const resources = await resourceList(owner, \"jobs/\");\n    const jobs: RecurringJobActionItem[] = [];\n\n    for (const resource of resources) {\n      if (!resource.path.endsWith(\".md\") || resource.path.endsWith(\".keep\")) {\n        continue;\n      }\n      const full = await resourceGetByPath(owner, resource.path);\n      if (!full || classifyJobResource(full.content).kind === \"automation\") {\n        continue;\n      }\n\n      const { meta, body } = parseJobFrontmatter(full.content);\n      const canUpdate =\n        scope === \"personal\" || !(await authorizeJobMutation(owner, meta));\n      jobs.push({\n        id: full.id,\n        name: jobName(full.path),\n        path: full.path,\n        scope,\n        schedule: meta.schedule,\n        timezone: effectiveTimezone(meta.timezone),\n        scheduleDescription: meta.schedule\n          ? describeCron(meta.schedule, effectiveTimezone(meta.timezone))\n          : \"\",\n        instructions: body,\n        enabled: meta.enabled,\n        lastRun: meta.lastRun ?? null,\n        lastCheck: meta.lastCheck ?? null,\n        lastStatus: meta.lastStatus ?? null,\n        lastError: meta.lastError ?? null,\n        nextRun: nextRun(meta),\n        createdBy: meta.createdBy ?? null,\n        mcpTools: meta.mcpTools ?? [],\n        canUpdate,\n      });\n    }\n\n    return jobs;\n  },\n});\n"]}

package/dist/jobs/actions/manage-recurring-job.d.ts

@@ -3,6 +3,8 @@ declare const _default: import("../../action.js").ActionDefinition<{
     name: string;
     scope?: "organization" | "personal";
     enabled?: boolean;
+    schedule?: string;
+    timezone?: string;
 }, {
     deleted: boolean;
     name: string;

package/dist/jobs/actions/manage-recurring-job.js

@@ -1,8 +1,9 @@
 import { z } from "zod";
 import { defineAction } from "../../action.js";
 import { organizationResourceOwner, resourceDelete, resourceGetByPath, resourcePut, } from "../../resources/store.js";
-import { isValidCron, nextOccurrence } from "../cron.js";
+import { isValidCron, isValidTimezone, nextOccurrence } from "../cron.js";
 import { classifyJobResource } from "../frontmatter.js";
+import { deleteAutomationRuns } from "../run-history.js";
 import { buildJobContent, parseJobFrontmatter } from "../scheduler.js";
 import { authorizeJobMutation } from "../tools.js";
 const scopeSchema = z.enum(["personal", "organization"]);
@@ -14,8 +15,10 @@ export default defineAction({
         name: z.string().min(1),
         scope: scopeSchema.default("personal"),
         enabled: z.boolean().optional(),
+        schedule: z.string().min(1).optional(),
+        timezone: z.string().min(1).optional(),
     }),
-    run: async ({ operation, name, scope, enabled }, ctx) => {
+    run: async ({ operation, name, scope, enabled, schedule, timezone }, ctx) => {
         const userEmail = ctx?.userEmail;
         if (!userEmail)
             throw new Error("Not authenticated.");
@@ -43,16 +46,34 @@ export default defineAction({
             throw Object.assign(new Error(denied), { statusCode: 403 });
         if (operation === "delete") {
             await resourceDelete(resource.id);
+            // Names are reusable; history left behind would surface as the run
+            // history of whatever job is next created under this name.
+            await deleteAutomationRuns(resource.owner, name);
             return { deleted: true, name };
         }
-        if (enabled === undefined) {
-            throw Object.assign(new Error("enabled is required for update."), {
-                statusCode: 400,
-            });
+        if (timezone !== undefined) {
+            if (!isValidTimezone(timezone)) {
+                throw Object.assign(new Error(`Unknown timezone "${timezone}".`), {
+                    statusCode: 400,
+                });
+            }
+            meta.timezone = timezone;
+        }
+        if (enabled === undefined &&
+            schedule === undefined &&
+            timezone === undefined) {
+            throw Object.assign(new Error("enabled, schedule, or timezone is required for update."), { statusCode: 400 });
+        }
+        if (schedule !== undefined) {
+            if (!isValidCron(schedule)) {
+                throw Object.assign(new Error(`Invalid cron expression "${schedule}".`), { statusCode: 400 });
+            }
+            meta.schedule = schedule;
         }
-        meta.enabled = enabled;
-        if (enabled && meta.schedule && isValidCron(meta.schedule)) {
-            meta.nextRun = nextOccurrence(meta.schedule).toISOString();
+        if (enabled !== undefined)
+            meta.enabled = enabled;
+        if (meta.enabled && meta.schedule && isValidCron(meta.schedule)) {
+            meta.nextRun = nextOccurrence(meta.schedule, undefined, meta.timezone).toISOString();
         }
         await resourcePut(resource.owner, resource.path, buildJobContent(meta, body));
         return {

package/dist/jobs/actions/manage-recurring-job.js.map

@@ -1 +1 @@
-{"version":3,"file":"manage-recurring-job.js","sourceRoot":"","sources":["../../../src/jobs/actions/manage-recurring-job.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAC/C,OAAO,EACL,yBAAyB,EACzB,cAAc,EACd,iBAAiB,EACjB,WAAW,GACZ,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AACzD,OAAO,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AACxD,OAAO,EAAE,eAAe,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAC;AACvE,OAAO,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAC;AAEnD,MAAM,WAAW,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,cAAc,CAAC,CAAC,CAAC;AAEzD,eAAe,YAAY,CAAC;IAC1B,WAAW,EACT,yFAAyF;IAC3F,SAAS,EAAE,KAAK;IAChB,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC;QACf,SAAS,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;QACvC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QACvB,KAAK,EAAE,WAAW,CAAC,OAAO,CAAC,UAAU,CAAC;QACtC,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;KAChC,CAAC;IACF,GAAG,EAAE,KAAK,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,GAAG,EAAE,EAAE;QACtD,MAAM,SAAS,GAAG,GAAG,EAAE,SAAS,CAAC;QACjC,IAAI,CAAC,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAC;QACtD,IAAI,KAAK,KAAK,cAAc,IAAI,CAAC,GAAG,EAAE,KAAK,EAAE,CAAC;YAC5C,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;QACxE,CAAC;QAED,MAAM,KAAK,GACT,KAAK,KAAK,cAAc;YACtB,CAAC,CAAC,yBAAyB,CAAC,GAAG,CAAC,KAAe,CAAC;YAChD,CAAC,CAAC,SAAS,CAAC;QAChB,MAAM,IAAI,GAAG,QAAQ,IAAI,KAAK,CAAC;QAC/B,MAAM,QAAQ,GAAG,MAAM,iBAAiB,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;QACtD,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,QAAQ,IAAI,cAAc,CAAC,EAAE;gBACzD,UAAU,EAAE,GAAG;aAChB,CAAC,CAAC;QACL,CAAC;QAED,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,mBAAmB,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QAC7D,IAAI,mBAAmB,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;YAChE,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,QAAQ,IAAI,qBAAqB,CAAC,EAAE;gBAChE,UAAU,EAAE,GAAG;aAChB,CAAC,CAAC;QACL,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,oBAAoB,CAAC,QAAQ,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;QAChE,IAAI,MAAM;YAAE,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,EAAE,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC,CAAC;QAExE,IAAI,SAAS,KAAK,QAAQ,EAAE,CAAC;YAC3B,MAAM,cAAc,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;YAClC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;QACjC,CAAC;QAED,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;YAC1B,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,iCAAiC,CAAC,EAAE;gBAChE,UAAU,EAAE,GAAG;aAChB,CAAC,CAAC;QACL,CAAC;QACD,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACvB,IAAI,OAAO,IAAI,IAAI,CAAC,QAAQ,IAAI,WAAW,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC3D,IAAI,CAAC,OAAO,GAAG,cAAc,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,WAAW,EAAE,CAAC;QAC7D,CAAC;QACD,MAAM,WAAW,CACf,QAAQ,CAAC,KAAK,EACd,QAAQ,CAAC,IAAI,EACb,eAAe,CAAC,IAAI,EAAE,IAAI,CAAC,CAC5B,CAAC;QAEF,OAAO;YACL,IAAI;YACJ,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,OAAO,EAAE,IAAI,CAAC,OAAO,IAAI,IAAI;SAC9B,CAAC;IACJ,CAAC;CACF,CAAC,CAAC","sourcesContent":["import { z } from \"zod\";\n\nimport { defineAction } from \"../../action.js\";\nimport {\n  organizationResourceOwner,\n  resourceDelete,\n  resourceGetByPath,\n  resourcePut,\n} from \"../../resources/store.js\";\nimport { isValidCron, nextOccurrence } from \"../cron.js\";\nimport { classifyJobResource } from \"../frontmatter.js\";\nimport { buildJobContent, parseJobFrontmatter } from \"../scheduler.js\";\nimport { authorizeJobMutation } from \"../tools.js\";\n\nconst scopeSchema = z.enum([\"personal\", \"organization\"]);\n\nexport default defineAction({\n  description:\n    \"Enable, pause, or delete one legacy recurring cron job from the Agent Automations page.\",\n  agentTool: false,\n  schema: z.object({\n    operation: z.enum([\"update\", \"delete\"]),\n    name: z.string().min(1),\n    scope: scopeSchema.default(\"personal\"),\n    enabled: z.boolean().optional(),\n  }),\n  run: async ({ operation, name, scope, enabled }, ctx) => {\n    const userEmail = ctx?.userEmail;\n    if (!userEmail) throw new Error(\"Not authenticated.\");\n    if (scope === \"organization\" && !ctx?.orgId) {\n      throw new Error(\"An organization is required for organization jobs.\");\n    }\n\n    const owner =\n      scope === \"organization\"\n        ? organizationResourceOwner(ctx.orgId as string)\n        : userEmail;\n    const path = `jobs/${name}.md`;\n    const resource = await resourceGetByPath(owner, path);\n    if (!resource) {\n      throw Object.assign(new Error(`Job \"${name}\" not found.`), {\n        statusCode: 404,\n      });\n    }\n\n    const { meta, body } = parseJobFrontmatter(resource.content);\n    if (classifyJobResource(resource.content).kind === \"automation\") {\n      throw Object.assign(new Error(`Job \"${name}\" is an automation.`), {\n        statusCode: 400,\n      });\n    }\n    const denied = await authorizeJobMutation(resource.owner, meta);\n    if (denied) throw Object.assign(new Error(denied), { statusCode: 403 });\n\n    if (operation === \"delete\") {\n      await resourceDelete(resource.id);\n      return { deleted: true, name };\n    }\n\n    if (enabled === undefined) {\n      throw Object.assign(new Error(\"enabled is required for update.\"), {\n        statusCode: 400,\n      });\n    }\n    meta.enabled = enabled;\n    if (enabled && meta.schedule && isValidCron(meta.schedule)) {\n      meta.nextRun = nextOccurrence(meta.schedule).toISOString();\n    }\n    await resourcePut(\n      resource.owner,\n      resource.path,\n      buildJobContent(meta, body),\n    );\n\n    return {\n      name,\n      enabled: meta.enabled,\n      nextRun: meta.nextRun ?? null,\n    };\n  },\n});\n"]}
+{"version":3,"file":"manage-recurring-job.js","sourceRoot":"","sources":["../../../src/jobs/actions/manage-recurring-job.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAC/C,OAAO,EACL,yBAAyB,EACzB,cAAc,EACd,iBAAiB,EACjB,WAAW,GACZ,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAAE,WAAW,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAC1E,OAAO,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AACxD,OAAO,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAC;AACzD,OAAO,EAAE,eAAe,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAC;AACvE,OAAO,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAC;AAEnD,MAAM,WAAW,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,cAAc,CAAC,CAAC,CAAC;AAEzD,eAAe,YAAY,CAAC;IAC1B,WAAW,EACT,yFAAyF;IAC3F,SAAS,EAAE,KAAK;IAChB,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC;QACf,SAAS,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;QACvC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QACvB,KAAK,EAAE,WAAW,CAAC,OAAO,CAAC,UAAU,CAAC;QACtC,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;QAC/B,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;QACtC,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;KACvC,CAAC;IACF,GAAG,EAAE,KAAK,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,EAAE,GAAG,EAAE,EAAE;QAC1E,MAAM,SAAS,GAAG,GAAG,EAAE,SAAS,CAAC;QACjC,IAAI,CAAC,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAC;QACtD,IAAI,KAAK,KAAK,cAAc,IAAI,CAAC,GAAG,EAAE,KAAK,EAAE,CAAC;YAC5C,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;QACxE,CAAC;QAED,MAAM,KAAK,GACT,KAAK,KAAK,cAAc;YACtB,CAAC,CAAC,yBAAyB,CAAC,GAAG,CAAC,KAAe,CAAC;YAChD,CAAC,CAAC,SAAS,CAAC;QAChB,MAAM,IAAI,GAAG,QAAQ,IAAI,KAAK,CAAC;QAC/B,MAAM,QAAQ,GAAG,MAAM,iBAAiB,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;QACtD,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,QAAQ,IAAI,cAAc,CAAC,EAAE;gBACzD,UAAU,EAAE,GAAG;aAChB,CAAC,CAAC;QACL,CAAC;QAED,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,mBAAmB,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QAC7D,IAAI,mBAAmB,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;YAChE,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,QAAQ,IAAI,qBAAqB,CAAC,EAAE;gBAChE,UAAU,EAAE,GAAG;aAChB,CAAC,CAAC;QACL,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,oBAAoB,CAAC,QAAQ,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;QAChE,IAAI,MAAM;YAAE,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,EAAE,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC,CAAC;QAExE,IAAI,SAAS,KAAK,QAAQ,EAAE,CAAC;YAC3B,MAAM,cAAc,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;YAClC,mEAAmE;YACnE,2DAA2D;YAC3D,MAAM,oBAAoB,CAAC,QAAQ,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;YACjD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;QACjC,CAAC;QAED,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YAC3B,IAAI,CAAC,eAAe,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAC/B,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,qBAAqB,QAAQ,IAAI,CAAC,EAAE;oBAChE,UAAU,EAAE,GAAG;iBAChB,CAAC,CAAC;YACL,CAAC;YACD,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;QAC3B,CAAC;QACD,IACE,OAAO,KAAK,SAAS;YACrB,QAAQ,KAAK,SAAS;YACtB,QAAQ,KAAK,SAAS,EACtB,CAAC;YACD,MAAM,MAAM,CAAC,MAAM,CACjB,IAAI,KAAK,CAAC,wDAAwD,CAAC,EACnE,EAAE,UAAU,EAAE,GAAG,EAAE,CACpB,CAAC;QACJ,CAAC;QACD,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YAC3B,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAC3B,MAAM,MAAM,CAAC,MAAM,CACjB,IAAI,KAAK,CAAC,4BAA4B,QAAQ,IAAI,CAAC,EACnD,EAAE,UAAU,EAAE,GAAG,EAAE,CACpB,CAAC;YACJ,CAAC;YACD,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;QAC3B,CAAC;QACD,IAAI,OAAO,KAAK,SAAS;YAAE,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QAClD,IAAI,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,QAAQ,IAAI,WAAW,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;YAChE,IAAI,CAAC,OAAO,GAAG,cAAc,CAC3B,IAAI,CAAC,QAAQ,EACb,SAAS,EACT,IAAI,CAAC,QAAQ,CACd,CAAC,WAAW,EAAE,CAAC;QAClB,CAAC;QACD,MAAM,WAAW,CACf,QAAQ,CAAC,KAAK,EACd,QAAQ,CAAC,IAAI,EACb,eAAe,CAAC,IAAI,EAAE,IAAI,CAAC,CAC5B,CAAC;QAEF,OAAO;YACL,IAAI;YACJ,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,OAAO,EAAE,IAAI,CAAC,OAAO,IAAI,IAAI;SAC9B,CAAC;IACJ,CAAC;CACF,CAAC,CAAC","sourcesContent":["import { z } from \"zod\";\n\nimport { defineAction } from \"../../action.js\";\nimport {\n  organizationResourceOwner,\n  resourceDelete,\n  resourceGetByPath,\n  resourcePut,\n} from \"../../resources/store.js\";\nimport { isValidCron, isValidTimezone, nextOccurrence } from \"../cron.js\";\nimport { classifyJobResource } from \"../frontmatter.js\";\nimport { deleteAutomationRuns } from \"../run-history.js\";\nimport { buildJobContent, parseJobFrontmatter } from \"../scheduler.js\";\nimport { authorizeJobMutation } from \"../tools.js\";\n\nconst scopeSchema = z.enum([\"personal\", \"organization\"]);\n\nexport default defineAction({\n  description:\n    \"Enable, pause, or delete one legacy recurring cron job from the Agent Automations page.\",\n  agentTool: false,\n  schema: z.object({\n    operation: z.enum([\"update\", \"delete\"]),\n    name: z.string().min(1),\n    scope: scopeSchema.default(\"personal\"),\n    enabled: z.boolean().optional(),\n    schedule: z.string().min(1).optional(),\n    timezone: z.string().min(1).optional(),\n  }),\n  run: async ({ operation, name, scope, enabled, schedule, timezone }, ctx) => {\n    const userEmail = ctx?.userEmail;\n    if (!userEmail) throw new Error(\"Not authenticated.\");\n    if (scope === \"organization\" && !ctx?.orgId) {\n      throw new Error(\"An organization is required for organization jobs.\");\n    }\n\n    const owner =\n      scope === \"organization\"\n        ? organizationResourceOwner(ctx.orgId as string)\n        : userEmail;\n    const path = `jobs/${name}.md`;\n    const resource = await resourceGetByPath(owner, path);\n    if (!resource) {\n      throw Object.assign(new Error(`Job \"${name}\" not found.`), {\n        statusCode: 404,\n      });\n    }\n\n    const { meta, body } = parseJobFrontmatter(resource.content);\n    if (classifyJobResource(resource.content).kind === \"automation\") {\n      throw Object.assign(new Error(`Job \"${name}\" is an automation.`), {\n        statusCode: 400,\n      });\n    }\n    const denied = await authorizeJobMutation(resource.owner, meta);\n    if (denied) throw Object.assign(new Error(denied), { statusCode: 403 });\n\n    if (operation === \"delete\") {\n      await resourceDelete(resource.id);\n      // Names are reusable; history left behind would surface as the run\n      // history of whatever job is next created under this name.\n      await deleteAutomationRuns(resource.owner, name);\n      return { deleted: true, name };\n    }\n\n    if (timezone !== undefined) {\n      if (!isValidTimezone(timezone)) {\n        throw Object.assign(new Error(`Unknown timezone \"${timezone}\".`), {\n          statusCode: 400,\n        });\n      }\n      meta.timezone = timezone;\n    }\n    if (\n      enabled === undefined &&\n      schedule === undefined &&\n      timezone === undefined\n    ) {\n      throw Object.assign(\n        new Error(\"enabled, schedule, or timezone is required for update.\"),\n        { statusCode: 400 },\n      );\n    }\n    if (schedule !== undefined) {\n      if (!isValidCron(schedule)) {\n        throw Object.assign(\n          new Error(`Invalid cron expression \"${schedule}\".`),\n          { statusCode: 400 },\n        );\n      }\n      meta.schedule = schedule;\n    }\n    if (enabled !== undefined) meta.enabled = enabled;\n    if (meta.enabled && meta.schedule && isValidCron(meta.schedule)) {\n      meta.nextRun = nextOccurrence(\n        meta.schedule,\n        undefined,\n        meta.timezone,\n      ).toISOString();\n    }\n    await resourcePut(\n      resource.owner,\n      resource.path,\n      buildJobContent(meta, body),\n    );\n\n    return {\n      name,\n      enabled: meta.enabled,\n      nextRun: meta.nextRun ?? null,\n    };\n  },\n});\n"]}

package/dist/jobs/background-automation-runner.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"background-automation-runner.d.ts","sourceRoot":"","sources":["../../src/jobs/background-automation-runner.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,uBAAuB,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAM1E,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AAC5D,OAAO,EAKL,KAAK,WAAW,EACjB,MAAM,8BAA8B,CAAC;AAKtC,OAAO,EAEL,KAAK,2BAA2B,EACjC,MAAM,2BAA2B,CAAC;AAGnC,OAAO,EAEL,KAAK,QAAQ,EACd,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAEL,KAAK,cAAc,EACpB,MAAM,8BAA8B,CAAC;AACtC,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAKvD,MAAM,WAAW,2BAA2B;IAC1C,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,cAAc,CAAC;IACrB,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,QAAQ,CAAC;CACpB;AAED,MAAM,WAAW,wBAAwB;IACvC,UAAU,EAAE,CACV,UAAU,CAAC,EAAE,2BAA2B,KACrC,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;IACjC,eAAe,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;IACpD,mBAAmB,CAAC,EAAE,CACpB,UAAU,CAAC,EAAE,2BAA2B,KACrC,MAAM,EAAE,GAAG,SAAS,CAAC;IAC1B,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,8BAA8B;IAC7C,UAAU,EAAE,2BAA2B,CAAC;IACxC,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,cAAc,CAAC,EAAE,IAAI,CAAC,cAAc,EAAE,WAAW,GAAG,OAAO,CAAC,CAAC;IAC7D,YAAY,CAAC,EAAE,YAAY,CAAC;IAC5B,gBAAgB,CAAC,EAAE,uBAAuB,CAAC;CAC5C;AAED,MAAM,WAAW,6BAA6B;IAC5C,YAAY,EAAE,MAAM,CAAC;IACrB,KAAK,EAAE,MAAM,CAAC;CACf;AAED,MAAM,MAAM,4BAA4B,GACpC;IAAE,EAAE,EAAE,IAAI,CAAA;CAAE,GACZ;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAElC,MAAM,MAAM,kCAAkC,GAC1C;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,QAAQ,EAAE,2BAA2B,CAAA;CAAE,GACnD;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAElC;;;;;GAKG;AACH,wBAAsB,6BAA6B,CACjD,UAAU,EAAE,MAAM,EAClB,KAAK,CAAC,EAAE,MAAM,GACb,OAAO,CAAC,4BAA4B,CAAC,CA0DvC;AAED,wBAAsB,mCAAmC,CACvD,UAAU,EAAE,2BAA2B,GACtC,OAAO,CAAC,kCAAkC,CAAC,CAgC7C;AAED,wBAAgB,+BAA+B,CAC7C,IAAI,EAAE,IAAI,CAAC,cAAc,EAAE,SAAS,GAAG,YAAY,CAAC,EACpD,GAAG,OAAa,GACf,OAAO,CAQT;AAED;;;;GAIG;AACH,wBAAgB,yBAAyB,CAAC,GAAG,EAAE;IAC7C,MAAM,CAAC,EAAE,SAAS;QAAE,KAAK,EAAE;YAAE,IAAI,EAAE,MAAM,CAAC;YAAC,MAAM,CAAC,EAAE,MAAM,CAAA;SAAE,CAAA;KAAE,EAAE,CAAC;CAClE,GAAG,MAAM,GAAG,IAAI,CAYhB;AAwBD,wBAAsB,uBAAuB,CAC3C,OAAO,EAAE,8BAA8B,EACvC,IAAI,EAAE,wBAAwB,GAC7B,OAAO,CAAC,6BAA6B,CAAC,CA+NxC"}
+{"version":3,"file":"background-automation-runner.d.ts","sourceRoot":"","sources":["../../src/jobs/background-automation-runner.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,uBAAuB,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAM1E,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AAC5D,OAAO,EAKL,KAAK,WAAW,EACjB,MAAM,8BAA8B,CAAC;AAKtC,OAAO,EAEL,KAAK,2BAA2B,EACjC,MAAM,2BAA2B,CAAC;AAGnC,OAAO,EAEL,KAAK,QAAQ,EACd,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAEL,KAAK,cAAc,EACpB,MAAM,8BAA8B,CAAC;AACtC,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAUvD,MAAM,WAAW,2BAA2B;IAC1C,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,cAAc,CAAC;IACrB,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,QAAQ,CAAC;CACpB;AAED,MAAM,WAAW,wBAAwB;IACvC,UAAU,EAAE,CACV,UAAU,CAAC,EAAE,2BAA2B,KACrC,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;IACjC,eAAe,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;IACpD,mBAAmB,CAAC,EAAE,CACpB,UAAU,CAAC,EAAE,2BAA2B,KACrC,MAAM,EAAE,GAAG,SAAS,CAAC;IAC1B,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,8BAA8B;IAC7C,UAAU,EAAE,2BAA2B,CAAC;IACxC,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,cAAc,CAAC,EAAE,IAAI,CAAC,cAAc,EAAE,WAAW,GAAG,OAAO,CAAC,CAAC;IAC7D,YAAY,CAAC,EAAE,YAAY,CAAC;IAC5B,gBAAgB,CAAC,EAAE,uBAAuB,CAAC;CAC5C;AAED,MAAM,WAAW,6BAA6B;IAC5C,YAAY,EAAE,MAAM,CAAC;IACrB,KAAK,EAAE,MAAM,CAAC;CACf;AAED,MAAM,MAAM,4BAA4B,GACpC;IAAE,EAAE,EAAE,IAAI,CAAA;CAAE,GACZ;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAElC,MAAM,MAAM,kCAAkC,GAC1C;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,QAAQ,EAAE,2BAA2B,CAAA;CAAE,GACnD;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAElC;;;;;GAKG;AACH,wBAAsB,6BAA6B,CACjD,UAAU,EAAE,MAAM,EAClB,KAAK,CAAC,EAAE,MAAM,GACb,OAAO,CAAC,4BAA4B,CAAC,CA0DvC;AAED,wBAAsB,mCAAmC,CACvD,UAAU,EAAE,2BAA2B,GACtC,OAAO,CAAC,kCAAkC,CAAC,CAgC7C;AAED,wBAAgB,+BAA+B,CAC7C,IAAI,EAAE,IAAI,CAAC,cAAc,EAAE,SAAS,GAAG,YAAY,CAAC,EACpD,GAAG,OAAa,GACf,OAAO,CAQT;AAED;;;;GAIG;AACH,wBAAgB,yBAAyB,CAAC,GAAG,EAAE;IAC7C,MAAM,CAAC,EAAE,SAAS;QAAE,KAAK,EAAE;YAAE,IAAI,EAAE,MAAM,CAAC;YAAC,MAAM,CAAC,EAAE,MAAM,CAAA;SAAE,CAAA;KAAE,EAAE,CAAC;CAClE,GAAG,MAAM,GAAG,IAAI,CAYhB;AAwBD,wBAAsB,uBAAuB,CAC3C,OAAO,EAAE,8BAA8B,EACvC,IAAI,EAAE,wBAAwB,GAC7B,OAAO,CAAC,6BAA6B,CAAC,CAsCxC"}

package/dist/jobs/background-automation-runner.js

@@ -10,6 +10,7 @@ import { createThread } from "../chat-threads/store.js";
 import { queryOrgMembers } from "../org/context.js";
 import { organizationIdFromResourceOwner, } from "../resources/store.js";
 import { runWithRequestContext, } from "../server/request-context.js";
+import { attachAutomationRunThread, finishAutomationRun, startAutomationRun, } from "./run-history.js";
 const BACKGROUND_RUN_STUCK_MS = 10 * 60_000;
 const BACKGROUND_RUN_HARD_TIMEOUT_MS = 5 * 60_000;
 /**
@@ -146,6 +147,64 @@ function createRunId(prefix) {
     return `${safePrefix}-${Date.now()}-${Math.random().toString(36).slice(2, 6)}`;
 }
 export async function runBackgroundAutomation(options, deps) {
+    const { automation } = options;
+    // Bookkeeping, so it must not gate the work it describes: a history table
+    // that cannot be written should cost us the record, not the automation.
+    // Everything downstream tolerates a null id by skipping its own write.
+    let historyId = null;
+    try {
+        historyId = await startAutomationRun({
+            owner: automation.resource.owner,
+            automation: automation.name,
+            path: automation.resource.path,
+            scope: organizationIdFromResourceOwner(automation.resource.owner)
+                ? "organization"
+                : "personal",
+            orgId: options.orgId ?? null,
+        });
+    }
+    catch (err) {
+        console.error(`[automations] Could not open a history record for "${automation.name}"; running anyway:`, err);
+    }
+    let result;
+    try {
+        result = await executeBackgroundAutomation(options, deps, historyId);
+    }
+    catch (err) {
+        await recordRunOutcome(historyId, "error", err instanceof Error ? err.message : String(err));
+        throw err;
+    }
+    // Outside the try: history is bookkeeping about the run, so a failure to
+    // write it must not turn a completed automation into a reported failure.
+    await recordRunOutcome(historyId, "success");
+    return result;
+}
+/**
+ * Link the run to its agent thread. Bookkeeping again: the automation is
+ * already executing by this point, so a failed write costs the cross-reference
+ * in the history view, not the run.
+ */
+async function recordRunThread(historyId, threadId, runId) {
+    if (!historyId)
+        return;
+    try {
+        await attachAutomationRunThread(historyId, threadId, runId);
+    }
+    catch (err) {
+        console.error(`[automations] Could not attach thread ${threadId} to run ${historyId}:`, err);
+    }
+}
+async function recordRunOutcome(historyId, status, error) {
+    if (!historyId)
+        return;
+    try {
+        await finishAutomationRun(historyId, status, error);
+    }
+    catch (err) {
+        console.error(`[automations] Could not record run ${historyId} as ${status}:`, err);
+    }
+}
+async function executeBackgroundAutomation(options, deps, historyId) {
     const { automation, ownerEmail, orgId, prompt, threadTitle, usageLabel } = options;
     return runWithRequestContext({
         ...options.requestContext,
@@ -180,6 +239,7 @@ export async function runBackgroundAutomation(options, deps) {
         const systemPrompt = await deps.getSystemPrompt(ownerEmail);
         const thread = await createThread(ownerEmail, { title: threadTitle });
         const runId = createRunId(options.runIdPrefix);
+        await recordRunThread(historyId, thread.id, runId);
         // Scheduled work is background work: it has no synchronous serverless
         // caller waiting on it, so it must not inherit the interactive clamp
         // (40s soft timeout, a 30s no-progress backstop at 0.75x that, and 6