@goodandready/dsh-cron 0.3.6 → 0.3.8

package/README.md

@@ -607,6 +607,12 @@ Save LLM tokens and API quotas on watcher tasks by dynamically slowing down exec
 - Multiplies interval by `backoffFactor` up to `maxInterval` after `idleRunsThreshold` silent or unchanged runs.
 - Instantly resets to `minInterval` as soon as real changes or non-silent output are detected.
 
+### 🔄 Session Resumption & GUI Session Naming (#346, GH #9, Added in v0.3.8)
+
+- **Universal Host Resumption (`resumeSessionId`)**: DeepSeek Harness host `0.2.0-rc.2+` specifies `readonly resumeSessionId: SessionId` on `agents.resume()`. The runner now passes both `resumeSessionId` and `sessionId`, guaranteeing seamless session resumption across all DSH core versions without falling back to recreating sessions that already exist.
+- **Enhanced Diagnostics on Failure**: When an existing session cannot be resumed, `dsh-cron` logs an actionable warning and, if recreating the session fails, surfaces the underlying resume error in the task run output.
+- **Automatic GUI Session Naming (`sessionTitle`)**: Executed or resumed sessions now integrate with the host's `sessionTitle` service. Tasks can specify an explicit `sessionTitle` (or begin `task.title` with `[...]`) to automatically label the session in the DeepSeek Harness navigation sidebar instead of leaving it untitled (`cron-exec-...`).
+
 ### 📺 Real-Time Streaming Logs via SSE (#336)
 
 Connect to `GET /dsh-cron/tasks/:id/stream` using Server-Sent Events (SSE) to receive live stdout/stderr chunks and execution completion events with an automatic 500-line ring buffer.

package/lib/index.js

@@ -305,6 +305,10 @@ export function apply(ctx, rawConfig) {
     path: '/dsh-cron/settings',
     handler: async (req, res) => {
       try {
+        const settings = store && typeof store.getSettings === 'function' ? store.getSettings() : {};
+        const apiToken = settings.apiToken;
+        if (rejectCrossOrigin(req, res, { apiToken })) return;
+
         if (req.method === 'GET') {
           const unwrapped = {
             ...unwrapConfig(getContextConfig(ctx, rawConfig)),

package/lib/metrics.js

@@ -1,3 +1,4 @@
+import { rejectCrossOrigin } from './http-utils.js';
 /**
  * Prometheus exposition of the scheduler (#53).
  *
@@ -108,6 +109,10 @@ export function createMetricsHandler({ store, scheduler }) {
       res.end('Method not allowed' + NL);
       return;
     }
+    const settings = store && typeof store.getSettings === 'function' ? store.getSettings() : {};
+    const apiToken = settings.apiToken;
+    if (rejectCrossOrigin(req, res, { apiToken })) return;
+
     const body = renderMetrics({
       tasks: store.list({ status: 'all' }),
       stats: store.getAggregatedStats(),

package/lib/routes.js

@@ -88,6 +88,9 @@ export function registerRoutes(ctx, { store, scheduler, recommendations }) {
     kind: 'exact',
     path: '/dsh-cron/models',
     handler: async (req, res) => {
+      const settings = store && typeof store.getSettings === 'function' ? store.getSettings() : {};
+      const apiToken = settings.apiToken;
+      if (rejectCrossOrigin(req, res, { apiToken })) return;
       await getModelsHandler(ctx, req, res, sendJson);
     }
   }), 'dsh-cron: /models');
@@ -108,6 +111,10 @@ export function registerRoutes(ctx, { store, scheduler, recommendations }) {
     path: '/dsh-cron/analytics',
     handler: async (req, res) => {
       try {
+        const settings = store && typeof store.getSettings === 'function' ? store.getSettings() : {};
+        const apiToken = settings.apiToken;
+        if (rejectCrossOrigin(req, res, { apiToken })) return;
+
         const url = new URL(req.url, 'http://127.0.0.1');
         const path = url.pathname;
 
@@ -211,6 +218,8 @@ export function registerRoutes(ctx, { store, scheduler, recommendations }) {
           return;
         }
         const settings = store.getSettings ? store.getSettings() : {};
+        const apiToken = settings.apiToken;
+        if (rejectCrossOrigin(req, res, { apiToken })) return;
         const categories = recipesByCategory();
         const recipes = listVerifiedRecipes(settings);
         sendJson(res, 200, { ok: true, categories, recipes });
@@ -230,6 +239,10 @@ export function registerRoutes(ctx, { store, scheduler, recommendations }) {
           sendJson(res, 405, { ok: false, error: 'Method not allowed' });
           return;
         }
+        const settings = store.getSettings ? store.getSettings() : {};
+        const apiToken = settings.apiToken;
+        if (rejectCrossOrigin(req, res, { apiToken })) return;
+
         const tasks = store.list({ status: 'active' });
         const lastRuns = tasks.map((t) => t.lastRunAt || 0);
         sendJson(res, 200, {
@@ -319,7 +332,9 @@ export function registerRoutes(ctx, { store, scheduler, recommendations }) {
  * Handler for chain step retries (#319)
  */
 export async function handleChainRoutes(store, scheduler, req, res) {
-  if (req.method === 'POST' && rejectCrossOrigin(req, res)) return;
+  const settings = store && typeof store.getSettings === 'function' ? store.getSettings() : {};
+  const apiToken = settings.apiToken;
+  if (rejectCrossOrigin(req, res, { apiToken })) return;
   const url = new URL(req.url, 'http://localhost');
 
   // GET /dsh-cron/chains/:chainRunId (#334)
@@ -374,6 +389,10 @@ export async function handleRunArtifactRoutes(store, req, res) {
     sendJson(res, 405, { ok: false, error: 'Method not allowed' });
     return;
   }
+  const settings = store && typeof store.getSettings === 'function' ? store.getSettings() : {};
+  const apiToken = settings.apiToken;
+  if (rejectCrossOrigin(req, res, { apiToken })) return;
+
   const [, runId, artifactId, action] = m;
   if (!artifactId) {
     const artifacts = store.getArtifactsForRun(runId);

package/lib/runner.js

@@ -475,11 +475,13 @@ export class SessionRunner {
         }
       } : {};
 
-      // If targetSessionId is set, attempt to resume the existing session (#143)
+      // If targetSessionId is set, attempt to resume the existing session (#143, #346, GH #9)
+      let resumeFailure = null;
       if (prep.targetSessionId && this.ctx.agents && typeof this.ctx.agents.resume === 'function') {
         try {
           handle = await this.ctx.agents.resume({
             sessionId: prep.targetSessionId,
+            resumeSessionId: prep.targetSessionId,
             meta: {
               cwd: prep.cwd,
               ...(preset ? { agentPreset: preset.id } : {})
@@ -490,27 +492,36 @@ export class SessionRunner {
           isResumed = true;
           logger.info(`[dsh-cron] resumed existing persistent session: ${prep.targetSessionId}`);
         } catch (resumeErr) {
-          logger.info(`[dsh-cron] could not resume session ${prep.targetSessionId} (${resumeErr.message}), creating new persistent session`);
+          resumeFailure = resumeErr;
+          logger.warn(`[dsh-cron] could not resume session ${prep.targetSessionId} (${resumeErr.message}), fallback creating new session`);
           handle = null;
         }
       }
 
       // Create new session if not resumed
       if (!handle) {
-        handle = await this.ctx.agents.create({
-          sessionId: prep.mintSessionId(),
-          meta: {
-            cwd: prep.cwd,
-            ephemeral: !prep.targetSessionId,
-            internal: !prep.targetSessionId,
-            ...(preset ? { agentPreset: preset.id } : {})
-          },
-          agentOptions: prep.provider && prep.model ? { provider: prep.provider, model: prep.model } : undefined,
-          ...presetSetup,
-        });
+        try {
+          handle = await this.ctx.agents.create({
+            sessionId: prep.mintSessionId(),
+            meta: {
+              cwd: prep.cwd,
+              ephemeral: !prep.targetSessionId,
+              internal: !prep.targetSessionId,
+              ...(preset ? { agentPreset: preset.id } : {})
+            },
+            agentOptions: prep.provider && prep.model ? { provider: prep.provider, model: prep.model } : undefined,
+            ...presetSetup,
+          });
+        } catch (createErr) {
+          if (resumeFailure) {
+            throw new Error(`could not resume session "${prep.targetSessionId}" (${resumeFailure.message}): ${createErr.message}`);
+          }
+          throw createErr;
+        }
       }
 
       this._applyPermissionPreset(task, handle);
+      this._nameSession(task, handle, isResumed);
       await prep.raceAbort(handle.agent.whenIdle());
 
       // 1. Capture starting sequence before sending user message (#227, #228)
@@ -639,6 +650,27 @@ export class SessionRunner {
     }
   }
 
+  _nameSession(task, handle, isResumed) {
+    if (!handle?.agent?.session) return;
+    const session = handle.agent.session;
+    try {
+      const sessionTitle = this.ctx.get ? this.ctx.get('sessionTitle') : this.ctx.sessionTitle;
+      if (!sessionTitle || typeof sessionTitle.rename !== 'function') return;
+
+      const explicitTitle = task.sessionTitle ? String(task.sessionTitle).trim() : '';
+      const taskTitle = task.title ? String(task.title).trim() : '';
+      const label = explicitTitle || (taskTitle.startsWith('[') ? taskTitle : '');
+
+      if (!label) return;
+      if (isResumed && !explicitTitle) return;
+
+      sessionTitle.rename(session, label);
+      logger.info(`[dsh-cron] assigned session title "${label}" for session ${session.id}`);
+    } catch (titleErr) {
+      logger.debug?.(`[dsh-cron] could not rename session ${session?.id}: ${titleErr.message}`);
+    }
+  }
+
   /** Token usage reported by session events or the handle (#228). */
   _extractUsage(handle, turnEvents = []) {
     const usage = { inputTokens: 0, outputTokens: 0, cacheReadTokens: 0 };

package/lib/task-create.js

@@ -48,6 +48,7 @@ export function executeCreateTask(store, scheduler, args) {
     agentPreset: args.agentPreset ? String(args.agentPreset).trim() : '',
     targetSessionId: args.targetSessionId ? String(args.targetSessionId).trim() : '',
     targetSessionReset: args.targetSessionReset ? String(args.targetSessionReset).trim() : 'never',
+    sessionTitle: args.sessionTitle ? String(args.sessionTitle).trim() : '',
     onSuccess: args.onSuccess ? String(args.onSuccess).trim() : '',
     onFailure: args.onFailure ? String(args.onFailure).trim() : '',
     dependsOn: args.dependsOn !== undefined ? sanitizeDependsOn(args.dependsOn) : undefined,

package/lib/task-transfer.js

@@ -33,6 +33,7 @@ export const PATCHABLE_TASK_FIELDS = [
   'agentPreset',
   'targetSessionId',
   'targetSessionReset',
+  'sessionTitle',
   'env',
   'cwd',
   'workspaceId',

package/lib/validators.js

@@ -128,7 +128,8 @@ export function validateRunResult(task, runInfo, options = {}) {
         // Guard against directory traversal escaping baseDir
         const resolvedPath = path.resolve(baseDir, relPath);
         const resolvedBase = path.resolve(baseDir);
-        if (!resolvedPath.startsWith(resolvedBase)) {
+        const basePrefix = resolvedBase.endsWith(path.sep) ? resolvedBase : resolvedBase + path.sep;
+        if (resolvedPath !== resolvedBase && !resolvedPath.startsWith(basePrefix)) {
           const message = `File path "${relPath}" escapes allowed directory boundary`;
           details.push({ type: 'file', passed: false, message });
           return { ok: false, status: 'failed', error: message, details };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@goodandready/dsh-cron",
-  "version": "0.3.6",
+  "version": "0.3.8",
   "description": "Background automation runner for DSH: isolated agent runs, script/HTTP/SSH/Docker runtimes, cost guard, notifications, heartbeats.",
   "type": "module",
   "main": "lib/index.js",