@danieltmn/tamnora 0.13.0 → 0.14.0

package/CHANGELOG.md

@@ -5,6 +5,37 @@ Todos los cambios relevantes de este proyecto se documentan en este archivo.
 El formato sigue [Keep a Changelog](https://keepachangelog.com/es-ES/1.1.0/)
 y el proyecto usa [Versionado Semantico](https://semver.org/lang/es/).
 
+## [0.14.0] - 2026-10-10
+
+### Agregado
+
+- **Fase 3 del roadmap del server (automatización y seguridad)**:
+  - **Tareas programadas**: `every N m|h`, `hourly`, `daily HH:MM` y un subconjunto
+    de cron. El scheduler corre un tick cada 30 s y dispara tareas `agent` (turno
+    headless que reusa el historial y avisa por los canales) o `shell` (con la
+    allowlist de procesos). CRUD en `/api/schedules` y pestaña **Tareas**.
+  - **Deshacer (checkpoints/rewind)**: se guarda la versión previa de los archivos
+    que `write`/`edit` tocan y `POST /api/sessions/:id/rewind` restaura los
+    archivos y borra el turno del historial. Acción **deshacer cambios** en el menú
+    de cada mensaje del asistente.
+
+### Cambios
+
+- Consola: el botón de tema muestra el icono del tema al que se va a cambiar
+  (en claro, luna; en oscuro, sol). Igual en la landing.
+- Consola: el fondo del chat pasa a un color sólido; la imagen queda solo en la
+  landing.
+- Consola: los botones de los paneles (p. ej. cerrar/refrescar) ya no se recortan
+  al angostar: las pestañas se comprimen y hacen scroll.
+
+## [0.13.1] - 2026-10-10
+
+### Arreglado
+
+- El test de permisos ya no es flaky: verifica que el `askId` resuelto no
+  reaparezca (antes asumía que no quedaba ninguno pendiente, lo que fallaba por
+  carrera cuando el agente ya pedía el siguiente permiso).
+
 ## [0.13.0] - 2026-10-10
 
 ### Agregado

package/harness/packages/core/src/index.js

@@ -123,6 +123,7 @@ export {
   buildStaticRulesBlock,
   buildPathRulesBlock,
 } from './rules/index.js';
+export { parseScheduleSpec, parseCronFields, nextRun, nextRunFor } from './schedule/cron.js';
 export {
   searchMcpRegistry,
   getMcpRegistryServer,

package/harness/packages/core/src/schedule/cron.js

@@ -0,0 +1,124 @@
+// Especificaciones de programación (puro, sin dependencias): `every N m|h`,
+// `hourly`, `daily HH:MM`, `HH:MM` y un subconjunto de cron (5 campos:
+// minuto hora dia-mes mes dia-semana) con `*`, listas, rangos y pasos.
+
+const MINUTE = 60_000;
+
+function parseField(text, min, max) {
+  const out = new Set();
+  for (const part of String(text).split(',')) {
+    const token = part.trim();
+    if (!token) return null;
+    const [rangePart, stepPart] = token.split('/');
+    const step = stepPart === undefined ? 1 : Number(stepPart);
+    if (!Number.isInteger(step) || step <= 0) return null;
+    let start;
+    let end;
+    if (rangePart === '*') {
+      start = min;
+      end = max;
+    } else {
+      const range = rangePart.split('-');
+      start = Number(range[0]);
+      end = range.length > 1 ? Number(range[1]) : start;
+      if (!Number.isInteger(start) || !Number.isInteger(end)) return null;
+    }
+    if (start < min || end > max || start > end) return null;
+    for (let v = start; v <= end; v += step) out.add(v);
+  }
+  return out;
+}
+
+/** Parsea los 5 campos de cron. Devuelve null si es inválido. */
+export function parseCronFields(parts) {
+  const [minute, hour, dom, month, dow] = parts;
+  const fields = {
+    minute: parseField(minute, 0, 59),
+    hour: parseField(hour, 0, 23),
+    dom: parseField(dom, 1, 31),
+    month: parseField(month, 1, 12),
+    dow: parseField(dow, 0, 6),
+  };
+  if (Object.values(fields).some((set) => !set)) return null;
+  fields.domStar = dom.trim() === '*';
+  fields.dowStar = dow.trim() === '*';
+  return fields;
+}
+
+/**
+ * Normaliza una especificación a `{ type, ... }` o null:
+ *  - `{ type: 'every', minutes }`
+ *  - `{ type: 'daily', hour, minute }`
+ *  - `{ type: 'cron', fields }`
+ */
+export function parseScheduleSpec(spec) {
+  const text = String(spec ?? '').trim().toLowerCase();
+  if (!text) return null;
+
+  const every = text.match(/^every\s+(\d+)\s*(m|min|mins|minute|minutes|h|hr|hour|hours)$/);
+  if (every) {
+    const n = Number(every[1]);
+    if (n <= 0) return null;
+    return { type: 'every', minutes: every[2].startsWith('h') ? n * 60 : n, spec: text };
+  }
+  if (/^(every\s+hour|hourly)$/.test(text)) return { type: 'every', minutes: 60, spec: text };
+
+  const time = text.match(/^(?:daily\s+)?(\d{1,2}):(\d{2})$/);
+  if (time) {
+    const hour = Number(time[1]);
+    const minute = Number(time[2]);
+    if (hour > 23 || minute > 59) return null;
+    return { type: 'daily', hour, minute, spec: text };
+  }
+
+  const parts = text.split(/\s+/);
+  if (parts.length === 5) {
+    const fields = parseCronFields(parts);
+    if (!fields) return null;
+    return { type: 'cron', fields, spec: text };
+  }
+  return null;
+}
+
+function cronMatches(fields, date) {
+  if (!fields.minute.has(date.getMinutes())) return false;
+  if (!fields.hour.has(date.getHours())) return false;
+  if (!fields.month.has(date.getMonth() + 1)) return false;
+  const domMatch = fields.dom.has(date.getDate());
+  const dowMatch = fields.dow.has(date.getDay());
+  if (fields.domStar && fields.dowStar) return true;
+  if (fields.domStar) return dowMatch;
+  if (fields.dowStar) return domMatch;
+  return domMatch || dowMatch;
+}
+
+/** Próximo instante (ms) en que corre, estrictamente después de `from`. */
+export function nextRun(parsed, from = Date.now()) {
+  if (!parsed) return null;
+  if (parsed.type === 'every') {
+    const ms = parsed.minutes * MINUTE;
+    return Math.floor(from / ms) * ms + ms;
+  }
+  if (parsed.type === 'daily') {
+    const next = new Date(from);
+    next.setSeconds(0, 0);
+    next.setHours(parsed.hour, parsed.minute, 0, 0);
+    if (next.getTime() <= from) next.setDate(next.getDate() + 1);
+    return next.getTime();
+  }
+  const limit = from + 366 * 24 * 60 * MINUTE;
+  const cursor = new Date(from);
+  cursor.setSeconds(0, 0);
+  cursor.setMinutes(cursor.getMinutes() + 1);
+  while (cursor.getTime() <= limit) {
+    if (cronMatches(parsed.fields, cursor)) return cursor.getTime();
+    cursor.setMinutes(cursor.getMinutes() + 1);
+  }
+  return null;
+}
+
+/** `parse + nextRun` en un paso. */
+export function nextRunFor(spec, from = Date.now()) {
+  const parsed = parseScheduleSpec(spec);
+  return parsed ? nextRun(parsed, from) : null;
+}

package/harness/packages/core/src/storage/sqlite.js

@@ -115,6 +115,21 @@ CREATE TABLE IF NOT EXISTS settings (
   key TEXT PRIMARY KEY,
   value TEXT
 );
+
+CREATE TABLE IF NOT EXISTS schedules (
+  id TEXT PRIMARY KEY,
+  name TEXT,
+  type TEXT,
+  spec TEXT,
+  payload TEXT,
+  cwd TEXT,
+  enabled INTEGER,
+  last_run INTEGER,
+  last_status TEXT,
+  next_run INTEGER,
+  created_at INTEGER,
+  updated_at INTEGER
+);
 `;
 
 /** Open (creating if needed) a SQLite database with the harness schema. */
@@ -533,8 +548,71 @@ export class Store {
     this.db.prepare(`DELETE FROM providers WHERE id = ?`).run(id);
   }
 
-  // --- Settings (key/value) ----------------------------------------------
+  // --- Schedules (tareas programadas) ------------------------------------
+
+  listSchedules() {
+    return this.db
+      .prepare(`SELECT * FROM schedules ORDER BY created_at ASC`)
+      .all()
+      .map(toSchedule);
+  }
+
+  getSchedule(id) {
+    const row = this.db.prepare(`SELECT * FROM schedules WHERE id = ?`).get(id);
+    return row ? toSchedule(row) : null;
+  }
 
+  saveSchedule(schedule) {
+    const ts = now();
+    const existing = this.getSchedule(schedule.id);
+    this.db
+      .prepare(
+        `INSERT INTO schedules (id, name, type, spec, payload, cwd, enabled, last_run, last_status, next_run, created_at, updated_at)
+         VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)
+         ON CONFLICT(id) DO UPDATE SET
+           name = excluded.name, type = excluded.type, spec = excluded.spec, payload = excluded.payload,
+           cwd = excluded.cwd, enabled = excluded.enabled, next_run = excluded.next_run, updated_at = excluded.updated_at`
+      )
+      .run(
+        schedule.id,
+        schedule.name ?? schedule.id,
+        schedule.type ?? 'agent',
+        schedule.spec ?? '',
+        json(schedule.payload ?? {}),
+        schedule.cwd ?? null,
+        schedule.enabled === false ? 0 : 1,
+        schedule.lastRun ?? existing?.lastRun ?? null,
+        schedule.lastStatus ?? existing?.lastStatus ?? null,
+        schedule.nextRun ?? null,
+        existing?.createdAt ?? ts,
+        ts
+      );
+    return this.getSchedule(schedule.id);
+  }
+
+  deleteSchedule(id) {
+    this.db.prepare(`DELETE FROM schedules WHERE id = ?`).run(id);
+  }
+
+  setScheduleEnabled(id, enabled) {
+    this.db.prepare(`UPDATE schedules SET enabled = ?, updated_at = ? WHERE id = ?`).run(enabled ? 1 : 0, now(), id);
+  }
+
+  markScheduleRun(id, { status, nextRun } = {}) {
+    this.db
+      .prepare(`UPDATE schedules SET last_run = ?, last_status = ?, next_run = ?, updated_at = ? WHERE id = ?`)
+      .run(now(), status ?? null, nextRun ?? null, now(), id);
+  }
+
+  /** Tareas habilitadas cuyo `next_run` ya venció. */
+  dueSchedules(at = Date.now()) {
+    return this.db
+      .prepare(`SELECT * FROM schedules WHERE enabled = 1 AND next_run IS NOT NULL AND next_run <= ? ORDER BY next_run ASC`)
+      .all(at)
+      .map(toSchedule);
+  }
+
+  // --- Settings (key/value) ----------------------------------------------
   getSetting(key, fallback = null) {
     const row = this.db.prepare(`SELECT value FROM settings WHERE key = ?`).get(key);
     return row ? parseJson(row.value) : fallback;
@@ -574,6 +652,23 @@ function toAgent(row) {
   };
 }
 
+function toSchedule(row) {
+  return {
+    id: row.id,
+    name: row.name ?? row.id,
+    type: row.type ?? 'agent',
+    spec: row.spec ?? '',
+    payload: parseJson(row.payload) ?? {},
+    cwd: row.cwd ?? null,
+    enabled: row.enabled === 0 ? false : true,
+    lastRun: row.last_run ?? null,
+    lastStatus: row.last_status ?? null,
+    nextRun: row.next_run ?? null,
+    createdAt: row.created_at,
+    updatedAt: row.updated_at,
+  };
+}
+
 function toProvider(row) {
   return {
     id: row.id,

package/harness/packages/core/test/cron.test.js

@@ -0,0 +1,46 @@
+import { test } from 'node:test';
+import assert from 'node:assert/strict';
+import { parseScheduleSpec, nextRun, nextRunFor } from '../src/schedule/cron.js';
+
+test('parseScheduleSpec accepts every / hourly / daily / time', () => {
+  assert.deepEqual(parseScheduleSpec('every 15 m'), { type: 'every', minutes: 15, spec: 'every 15 m' });
+  assert.equal(parseScheduleSpec('every 2 h').minutes, 120);
+  assert.equal(parseScheduleSpec('hourly').minutes, 60);
+  assert.deepEqual(parseScheduleSpec('daily 09:30'), { type: 'daily', hour: 9, minute: 30, spec: 'daily 09:30' });
+  assert.equal(parseScheduleSpec('08:05').type, 'daily');
+  assert.equal(parseScheduleSpec('bogus'), null);
+  assert.equal(parseScheduleSpec('every 0 m'), null);
+});
+
+test('nextRun for every aligns to the interval', () => {
+  const from = new Date('2026-01-01T10:07:00').getTime();
+  const next = new Date(nextRun(parseScheduleSpec('every 15 m'), from));
+  assert.equal(next.getHours(), 10);
+  assert.equal(next.getMinutes(), 15);
+});
+
+test('nextRun for daily picks today or tomorrow', () => {
+  const spec = parseScheduleSpec('daily 09:00');
+  const before = new Date('2026-01-01T08:00:00').getTime();
+  assert.equal(new Date(nextRun(spec, before)).getDate(), 1);
+  const after = new Date('2026-01-01T10:00:00').getTime();
+  assert.equal(new Date(nextRun(spec, after)).getDate(), 2);
+});
+
+test('nextRun for a cron subset', () => {
+  const from = new Date('2026-01-01T10:00:00').getTime();
+  const next = new Date(nextRun(parseScheduleSpec('30 14 * * *'), from));
+  assert.equal(next.getHours(), 14);
+  assert.equal(next.getMinutes(), 30);
+});
+
+test('nextRun for weekday cron skips to the right day', () => {
+  const from = new Date('2026-01-01T00:00:00').getTime(); // Thursday
+  const next = new Date(nextRun(parseScheduleSpec('0 6 * * 1'), from)); // Monday 06:00
+  assert.equal(next.getDay(), 1);
+  assert.equal(next.getHours(), 6);
+});
+
+test('nextRunFor returns null for invalid spec', () => {
+  assert.equal(nextRunFor('nope'), null);
+});

package/harness/packages/server/public/app.js

@@ -72,6 +72,7 @@ const ICON_PATHS = {
   'folder-open': ['m6 14 1.45-2.9A2 2 0 0 1 9.24 10H20a2 2 0 0 1 1.94 2.5l-1.55 6a2 2 0 0 1-1.94 1.5H4a2 2 0 0 1-2-2V5a2 2 0 0 1 2-2h3.9a2 2 0 0 1 1.69.9l.81 1.2a2 2 0 0 0 1.67.9H18a2 2 0 0 1 2 2v2'],
   file: ['M15 2H6a2 2 0 0 0-2 2v16a2 2 0 0 0 2 2h12a2 2 0 0 0 2-2V7Z', 'M14 2v4a2 2 0 0 0 2 2h4'],
   'refresh-cw': ['M3 12a9 9 0 0 1 9-9 9.75 9.75 0 0 1 6.74 2.74L21 8', 'M21 3v5h-5', 'M21 12a9 9 0 0 1-9 9 9.75 9.75 0 0 1-6.74-2.74L3 16', 'M8 16H3v5'],
+  undo: ['M3 7v6h6', 'M3 13a9 9 0 1 1 2.64 6.36'],
   trash: ['M3 6h18', 'M19 6v14a2 2 0 0 1-2 2H7a2 2 0 0 1-2-2V6', 'M8 6V4a2 2 0 0 1 2-2h4a2 2 0 0 1 2 2v2', 'M10 11v6', 'M14 11v6'],
   'dots-vertical': ['M12 5h.01', 'M12 12h.01', 'M12 19h.01'],
   'dots-horizontal': ['M5 12h.01', 'M12 12h.01', 'M19 12h.01'],
@@ -195,7 +196,7 @@ function activateTab(name) {
   hideMoreMenu();
   if (name === 'runs') refreshRuns();
   if (name === 'providers') refreshProviders();
-  if (name === 'ajustes') { refreshMcp(); refreshSkills(); refreshMemory(); refreshChannels(); refreshLimits(); refreshVoz(); refreshAsesor(); refreshTranscribe(); refreshProfile(); }
+  if (name === 'ajustes') { refreshMcp(); refreshSkills(); refreshMemory(); refreshSchedules(); refreshChannels(); refreshLimits(); refreshVoz(); refreshAsesor(); refreshTranscribe(); refreshProfile(); }
 }
 
 document.querySelectorAll('.tab[data-tab]').forEach((t) =>
@@ -980,6 +981,7 @@ function addMessageActions(message) {
   };
   addItem('copiar', () => copyMessage(message), 'copy');
   if (message.role === 'assistant') addItem('regenerar', () => regenerate(message), 'refresh-cw');
+  if (message.role === 'assistant') addItem('deshacer cambios', () => undoTurn(message), 'undo');
   if (message.role === 'user') addItem('editar', () => editMessage(message), 'pencil');
   menu.appendChild(el('div', 'msg-menu-sep'));
   addItem('borrar desde acá', () => deleteFrom(message), 'trash', 'msg-act danger');
@@ -1042,8 +1044,27 @@ async function regenerate(message) {
   await sendMessage();
 }
 
-function editMessage(message) {
-  const id = messageId(message);
+async function undoTurn(message) {
+  const id = message?.wrap?.closest('.messages')?.dataset.session || state.sessionId;
+  if (!id || state.panes.get(id)?.working) return;
+  const detail = await api(`/api/sessions/${id}`).catch(() => null);
+  if (!detail) return;
+  const messages = detail.messages || [];
+  const at = messages.findIndex((m) => m.id === messageId(message));
+  let turn = null;
+  for (let i = at >= 0 ? at : messages.length - 1; i >= 0; i--) {
+    if (messages[i].role === 'user') {
+      turn = messages[i];
+      break;
+    }
+  }
+  if (!turn) return;
+  if (!window.confirm('¿Deshacer este turno? Se restauran los archivos a como estaban y se borra el turno del historial.')) return;
+  await api(`/api/sessions/${id}/rewind`, { method: 'POST', body: { turn: turn.id } }).catch(() => {});
+  await reloadPane(id);
+}
+
+function editMessage(message) {  const id = messageId(message);
   chatInput.value = message.textEl.textContent;
   chatInput.focus();
   state.pendingEdit = id ? { fromId: id } : null;
@@ -3705,6 +3726,9 @@ const memoryListEl = $('#memory-list');
 const memoryIndexEl = $('#memory-index');
 const memoryModal = $('#memory-modal');
 const memoryForm = $('#memory-form');
+const scheduleListEl = $('#schedule-list');
+const scheduleModal = $('#schedule-modal');
+const scheduleForm = $('#schedule-form');
 const tgTokenEl = $('#tg-token');
 const tgChatsEl = $('#tg-chats');
 const tgTranscribeEl = $('#tg-transcribe');
@@ -4075,6 +4099,157 @@ async function saveMemoryIndex() {
   refreshMemory();
 }
 
+/* --- ajustes: Tareas programadas ----------------------------------------- */
+
+function fmtWhen(ms) {
+  try {
+    return new Date(ms).toLocaleString();
+  } catch {
+    return '';
+  }
+}
+
+function scheduleTypeFields() {
+  const type = $('#sc-type').value;
+  const agent = type === 'agent';
+  $('#sc-agent-prompt-row').hidden = !agent;
+  $('#sc-agent-mode-row').hidden = !agent;
+  $('#sc-shell-cmd-row').hidden = agent;
+  $('#sc-shell-args-row').hidden = agent;
+}
+
+async function refreshSchedules() {
+  if (!scheduleListEl) return;
+  const data = await api('/api/schedules').catch(() => null);
+  if (!data) return;
+  clear(scheduleListEl);
+  if (!data.schedules.length) {
+    scheduleListEl.appendChild(el('li', 'muted', 'sin tareas todavía'));
+    return;
+  }
+  for (const s of data.schedules) {
+    const li = el('li', s.enabled ? 'active' : '');
+    li.appendChild(el('span', `pdot${s.enabled ? ' on' : ''}`));
+    const main = el('div', 'grow');
+    const meta = [s.type, s.spec];
+    if (s.nextRun) meta.push(`próxima ${fmtWhen(s.nextRun)}`);
+    if (s.lastStatus) meta.push(s.lastStatus);
+    main.append(el('div', '', s.name || s.id), el('div', 'pmeta', meta.join(' · ')));
+    li.appendChild(main);
+    const actions = el('div', 'pactions');
+    actions.appendChild(button('correr', (event) => { event.stopPropagation(); runSchedule(s.id); }));
+    actions.appendChild(button(s.enabled ? 'pausar' : 'activar', (event) => { event.stopPropagation(); toggleSchedule(s.id); }));
+    actions.appendChild(button('editar', (event) => { event.stopPropagation(); openScheduleForm(s.id); }));
+    actions.appendChild(button('borrar', (event) => { event.stopPropagation(); removeSchedule(s.id); }, 'btn danger'));
+    li.appendChild(actions);
+    li.addEventListener('click', () => openScheduleForm(s.id));
+    scheduleListEl.appendChild(li);
+  }
+}
+
+async function openScheduleForm(id = null) {
+  $('#schedule-title').textContent = id ? `editar ${id}` : 'nueva tarea';
+  $('#sc-id').value = id ?? '';
+  $('#sc-id').readOnly = Boolean(id);
+  $('#sc-name').value = '';
+  $('#sc-type').value = 'agent';
+  $('#sc-spec').value = '';
+  $('#sc-prompt').value = '';
+  $('#sc-mode').value = 'agent';
+  $('#sc-command').value = '';
+  $('#sc-args').value = '';
+  $('#sc-cwd').value = '';
+  $('#sc-enabled').checked = true;
+  setStatus('#sc-status', '');
+  if (id) {
+    const data = await api('/api/schedules').catch(() => null);
+    const s = data?.schedules?.find((item) => item.id === id);
+    if (s) {
+      $('#sc-name').value = s.name ?? '';
+      $('#sc-type').value = s.type ?? 'agent';
+      $('#sc-spec').value = s.spec ?? '';
+      $('#sc-cwd').value = s.cwd ?? '';
+      $('#sc-enabled').checked = s.enabled !== false;
+      const payload = s.payload ?? {};
+      if (s.type === 'shell') {
+        $('#sc-command').value = payload.command ?? '';
+        $('#sc-args').value = Array.isArray(payload.args) ? payload.args.join(' ') : payload.args ?? '';
+      } else {
+        $('#sc-prompt').value = payload.prompt ?? '';
+        $('#sc-mode').value = payload.mode ?? 'agent';
+      }
+    }
+  }
+  scheduleTypeFields();
+  scheduleModal.showModal();
+  if (!id) $('#sc-id').focus();
+}
+
+function closeScheduleForm() {
+  if (scheduleModal.open) scheduleModal.close();
+}
+
+async function submitSchedule(event) {
+  event.preventDefault();
+  const id = $('#sc-id').value.trim();
+  if (!id) return setStatus('#sc-status', 'Falta el id.', 'err');
+  const type = $('#sc-type').value;
+  const body = {
+    id,
+    name: $('#sc-name').value.trim() || id,
+    type,
+    spec: $('#sc-spec').value.trim(),
+    cwd: $('#sc-cwd').value.trim() || undefined,
+    enabled: $('#sc-enabled').checked,
+  };
+  if (type === 'shell') {
+    body.command = $('#sc-command').value.trim();
+    body.args = $('#sc-args').value.trim();
+  } else {
+    body.prompt = $('#sc-prompt').value.trim();
+    body.mode = $('#sc-mode').value;
+  }
+  try {
+    const exists = $('#sc-id').readOnly;
+    await api(exists ? `/api/schedules/${encodeURIComponent(id)}` : '/api/schedules', {
+      method: exists ? 'PUT' : 'POST',
+      body,
+    });
+  } catch (error) {
+    return setStatus('#sc-status', error.message, 'err');
+  }
+  closeScheduleForm();
+  refreshSchedules();
+}
+
+async function toggleSchedule(id) {
+  await toggleEntity(`/api/schedules/${encodeURIComponent(id)}/toggle`, {
+    method: 'POST',
+    errorLabel: 'cambiar la tarea',
+    refresh: refreshSchedules,
+  });
+}
+
+async function removeSchedule(id) {
+  await deleteEntity(`/api/schedules/${encodeURIComponent(id)}`, {
+    confirmText: `¿Eliminar la tarea "${id}"?`,
+    refresh: refreshSchedules,
+  });
+}
+
+async function runSchedule(id) {
+  setStatus('#schedule-status', `corriendo ${id}…`);
+  try {
+    await api(`/api/schedules/${encodeURIComponent(id)}/run`, { method: 'POST' });
+  } catch (error) {
+    setStatus('#schedule-status', error.message, 'err');
+    refreshSchedules();
+    return;
+  }
+  setStatus('#schedule-status', `${id}: listo`, 'ok');
+  refreshSchedules();
+}
+
 async function refreshChannels() {
   if (!tgStatusEl) return;
   const data = await api('/api/channels').catch(() => null);
@@ -4760,6 +4935,15 @@ $('#asesor-test')?.addEventListener('click', testAsesor);
   memoryModal?.addEventListener('click', (event) => {
     if (event.target === memoryModal) closeMemoryForm();
   });
+
+  $('#sc-type')?.addEventListener('change', scheduleTypeFields);
+  $('#schedule-new')?.addEventListener('click', () => openScheduleForm());
+  $('#schedule-close')?.addEventListener('click', closeScheduleForm);
+  $('#sc-cancel')?.addEventListener('click', closeScheduleForm);
+  scheduleForm?.addEventListener('submit', submitSchedule);
+  scheduleModal?.addEventListener('click', (event) => {
+    if (event.target === scheduleModal) closeScheduleForm();
+  });
 }
 
 /* --- eval ---------------------------------------------------------------- */

package/harness/packages/server/public/index.html

@@ -37,7 +37,7 @@
   </head>
   <body>
     <header class="topbar">
-      <div class="brand"><span class="logo"><img src="/icons/logo.png" alt="Tamnora" /></span> <span id="topbar-section" class="topbar-section">chat</span> <span class="ver">v0.13.0</span></div>
+      <div class="brand"><span class="logo"><img src="/icons/logo.png" alt="Tamnora" /></span> <span id="topbar-section" class="topbar-section">chat</span> <span class="ver">v0.14.0</span></div>
       <nav class="tabs">
         <button class="tab active" data-tab="chat">chat</button>
         <button class="tab" data-tab="providers">proveedores</button>
@@ -462,6 +462,7 @@
             <button type="button" class="ajustes-tab" data-panel="mcp" role="tab">MCP</button>
             <button type="button" class="ajustes-tab" data-panel="skills" role="tab">Skills</button>
             <button type="button" class="ajustes-tab" data-panel="memoria" role="tab">Memoria</button>
+            <button type="button" class="ajustes-tab" data-panel="tareas" role="tab">Tareas</button>
             <button type="button" class="ajustes-tab" data-panel="telegram" role="tab">Telegram</button>
           <button type="button" class="ajustes-tab" data-panel="voz" role="tab">Voz</button>
           <button type="button" class="ajustes-tab" data-panel="asesor" role="tab">Asesor</button>
@@ -603,6 +604,19 @@
           <ul id="memory-list" class="providers"></ul>
         </div>
 
+        <div class="panel ajustes-panel" data-panel="tareas">
+          <div class="row between">
+            <h2>Tareas</h2>
+            <button id="schedule-new" class="btn">+ tarea</button>
+          </div>
+          <p class="muted verify-line">
+            Trabajos recurrentes que corren solos mientras el server está vivo. <code>agent</code> corre un turno
+            (con las tools y permisos configurados); <code>shell</code> ejecuta un comando permitido.
+          </p>
+          <div id="schedule-status" class="summary"></div>
+          <ul id="schedule-list" class="providers"></ul>
+        </div>
+
         <div class="panel ajustes-panel" data-panel="telegram">
           <div class="row between">
             <h2>Telegram</h2>
@@ -1001,6 +1015,58 @@
       </form>
     </dialog>
 
+    <dialog id="schedule-modal" class="modal">
+      <form id="schedule-form" class="modal-card">
+        <div class="row between">
+          <h3 id="schedule-title">nueva tarea</h3>
+          <button type="button" id="schedule-close" class="btn icon" title="cerrar" aria-label="cerrar">
+            <svg viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="1.8" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true">
+              <path d="M18 6 6 18M6 6l12 12" />
+            </svg>
+          </button>
+        </div>
+        <div class="row">
+          <label class="field"><span>id</span><input id="sc-id" spellcheck="false" placeholder="resumen-diario" /></label>
+          <label class="field grow"><span>nombre</span><input id="sc-name" spellcheck="false" placeholder="Resumen diario" /></label>
+        </div>
+        <div class="row">
+          <label class="field"><span>tipo</span>
+            <select id="sc-type">
+              <option value="agent">agent</option>
+              <option value="shell">shell</option>
+            </select>
+          </label>
+          <label class="field grow"><span>cuándo</span>
+            <input id="sc-spec" spellcheck="false" placeholder="every 30 m · daily 09:00 · 0 6 * * 1" />
+          </label>
+        </div>
+        <label class="field" id="sc-agent-prompt-row"><span>prompt (agent)</span>
+          <textarea id="sc-prompt" rows="4" spellcheck="false" placeholder="Qué tiene que hacer el agente…"></textarea>
+        </label>
+        <label class="field" id="sc-agent-mode-row"><span>modo (agent)</span>
+          <select id="sc-mode">
+            <option value="agent">agent</option>
+            <option value="plan">plan</option>
+          </select>
+        </label>
+        <label class="field" id="sc-shell-cmd-row"><span>comando (shell)</span>
+          <input id="sc-command" spellcheck="false" placeholder="node · npm · pnpm" />
+        </label>
+        <label class="field" id="sc-shell-args-row"><span>argumentos (shell)</span>
+          <input id="sc-args" spellcheck="false" placeholder="run build" />
+        </label>
+        <label class="field"><span>carpeta (opcional)</span>
+          <input id="sc-cwd" spellcheck="false" placeholder="por defecto: la carpeta del server" />
+        </label>
+        <label class="check"><input id="sc-enabled" type="checkbox" checked /> activa</label>
+        <div class="row between settings-actions">
+          <button type="button" id="sc-cancel" class="btn">cancelar</button>
+          <button type="submit" class="btn primary">guardar</button>
+        </div>
+        <div id="sc-status" class="summary"></div>
+      </form>
+    </dialog>
+
     <dialog id="palette-modal" class="modal palette-modal">
       <div class="palette">
         <div class="palette-row">