@subbly/plugin-lint 0.0.7 → 0.0.9

package/CHANGELOG.md

@@ -1,5 +1,17 @@
 # @subbly/plugin-lint
 
+## 0.0.9
+
+### Patch Changes
+
+- A plugin workflow is now a folder, as in the builder: `co.subbly.builder/workflows/<slug>/` holds `workflow.json`, `nodes/<id>.js` for each code node, and optional `fixtures/<name>.json`. The folder is the declaration, so a manifest that still lists `workflows` fails rule `manifest/namespace-unknown-key`, and a `<slug>.md` file fails `workflow/stray-file`. New rules check the folder name (`workflow/folder-slug`, `workflow/slug-length`), the definition file (`workflow/missing-file`, `workflow/parse`, `workflow/package-json`, `workflow/code-file`), and the keys a node names (`workflow/env`, `workflow/credential`). The cron rules and the `schedule` and `model` checks are gone with the old declaration. The linter does not run the builder's full workflow check, so a clean lint is not yet a release.
+
+## 0.0.8
+
+### Patch Changes
+
+- Plugin automations are now workflows, as in the builder. The manifest key is `extensions["co.subbly.builder"].workflows` and the instruction files live in `co.subbly.builder/workflows/<slug>.md`. The rule ids `automation/*` are now `workflow/*`. A manifest that still declares `automations` fails rule `manifest/namespace-unknown-key`, as the builder refresh rejects it.
+
 ## 0.0.7
 
 ### Patch Changes

package/README.md

@@ -58,7 +58,7 @@ export default [
 ]
 ```
 
-The gate is cross-file: whether a `plugin.json` is valid depends on `marketplace.json`, and a missing `automations/<slug>.md` is a defect in a file that does not exist. ESLint visits one existing file at a time, so the engine runs once per invocation and hands each file the findings that belong to it. Every rule reaches the editor, absence checks included.
+The gate is cross-file: whether a `plugin.json` is valid depends on `marketplace.json`, and a missing `workflows/<slug>/workflow.json` is a defect in a file that does not exist. ESLint visits one existing file at a time, so the engine runs once per invocation and hands each file the findings that belong to it. Every rule reaches the editor, absence checks included.
 
 ## Library
 
@@ -74,7 +74,7 @@ console.log(report.errors.length)
 
 ## What it checks
 
-`marketplace.json` and every plugin manifest, `mcp.json` servers, skill and agent frontmatter, automation declarations against their files, cron floors, script lockfiles, plugin layout, and sandbox paths written in prose. Run `subbly-plugin-lint --rules` for the full list.
+`marketplace.json` and every plugin manifest, `mcp.json` servers, skill and agent frontmatter, workflow folders and the keys their nodes name, script lockfiles, plugin layout, and sandbox paths written in prose. Run `subbly-plugin-lint --rules` for the full list.
 
 ## Two severities
 

package/index.mjs

@@ -8,4 +8,3 @@
 
 export { lint, envVarName, PLUGIN_SCHEMA_URL, MCP_SCHEMA_URL, NAMESPACE, AGENT_TOOLS, DEFAULT_ENV_KEYS, CURRENT_LINK } from './src/rules.mjs'
 export { RULES, FORMATTERS, Report } from './src/report.mjs'
-export { SCHEDULE_FLOOR_MINUTES, parseCron, meetsFloor, CronUnsupported } from './src/cron.mjs'

package/package.json

@@ -1,9 +1,9 @@
 {
   "name": "@subbly/plugin-lint",
-  "version": "0.0.7",
+  "version": "0.0.9",
   "private": false,
   "type": "module",
-  "description": "The Subbly marketplace release gate, offline. Lints marketplace.json, plugin manifests, mcp.json, skills, agents and automations.",
+  "description": "The Subbly marketplace release gate, offline. Lints marketplace.json, plugin manifests, mcp.json, skills, agents and workflows.",
   "license": "MIT",
   "author": "Subbly LTD <oleg@subbly.co> (https://www.subbly.co)",
   "publishConfig": {

package/src/eslint-plugin.mjs

@@ -1,7 +1,7 @@
 // ESLint bridge.
 //
 // The release gate is cross-file: whether plugin.json is valid depends on
-// marketplace.json, and a missing automations/<slug>.md is a defect in a file
+// marketplace.json, and a missing workflows/<slug>.md is a defect in a file
 // that does not exist. ESLint visits one existing file at a time, so rules
 // cannot be written that way directly.
 //

package/src/report.mjs

@@ -50,18 +50,16 @@ export const RULES = {
   'field/default-required': 'a default plugin cannot declare required fields',
   'field/reserved-key': 'a field key must not restate the PLUGIN_ prefix the builder adds',
 
-  // automations
-  'automation/key-slug': 'automation keys must be valid slugs',
-  'automation/unknown-key': 'a declaration holds exactly name, schedule and model',
-  'automation/name': 'name is required, 1-100 characters',
-  'automation/schedule-syntax': 'schedule must be a cron expression the builder can parse',
-  'automation/schedule-floor': 'schedule must fire at most every 15 minutes',
-  'automation/schedule-unverified': 'this cron syntax cannot be checked offline',
-  'automation/model': 'model must be normal or intelligent-high',
-  'automation/missing-file': 'every declared automation needs its markdown file',
-  'automation/orphan-file': 'every automation file needs a declaration',
-  'automation/empty-file': 'an automation file must not be empty',
-  'automation/frontmatter': 'automation frontmatter is not stripped and leaks into the instruction',
+  // workflows
+  'workflow/folder-slug': 'a workflow folder is named by a valid slug',
+  'workflow/slug-length': '<plugin-slug>__<slug> must be at most 64 characters',
+  'workflow/stray-file': 'the workflows folder holds only workflow folders',
+  'workflow/missing-file': 'a workflow folder needs workflow.json',
+  'workflow/parse': 'workflow.json must be a JSON object',
+  'workflow/package-json': 'a workflow folder has no package.json',
+  'workflow/env': 'a code node reads only the config fields of its own plugin',
+  'workflow/credential': "a node names only a credential of the plugin's own connectors",
+  'workflow/code-file': 'a code node needs its file',
   'setup/missing-install-skill': 'setup: true requires a skills/install skill',
 
   // connectors and mcp.json

package/src/rules.mjs

@@ -3,7 +3,6 @@
 // Mirrors subbly-builder branch feat/plugins-mcp:
 //   packages/plugins/src/marketplace/{marketplace-manifest,plugin-manifest,mcp-config}.ts
 //   packages/core/src/types/plugin-manifest.ts
-//   packages/core/src/lib/automations/schedule.ts
 //
 // error = the refresh throws, so NO plugin in the marketplace releases.
 // warn  = the builder accepts it, but it is wrong, dead, or broken at runtime.
@@ -15,7 +14,6 @@ import { execFileSync } from 'node:child_process'
 import { Report } from './report.mjs'
 import { parseJsonSource, locator } from './json-source.mjs'
 import { readFrontmatter, lineOf, colOf } from './frontmatter.mjs'
-import { parseCron, meetsFloor, CronUnsupported, SCHEDULE_FLOOR_MINUTES } from './cron.mjs'
 
 // --- constants lifted verbatim from the builder -----------------------------
 
@@ -34,10 +32,9 @@ const CONNECTOR_NAME_PATTERN = /^[a-z][a-z0-9_-]{0,49}$/
 const CONTENT_NAME_PATTERN = /^[a-z0-9][a-z0-9_-]*$/i
 
 const MANIFEST_KEYS = ['$schema', 'name', 'version', 'description', 'author', 'homepage', 'repository', 'license', 'keywords', 'extensions']
-const NAMESPACE_KEYS = ['displayName', 'image', 'default', 'fields', 'automations', 'setup', 'connectors']
+const NAMESPACE_KEYS = ['displayName', 'image', 'default', 'fields', 'setup', 'connectors']
 const FIELD_KEYS = ['key', 'label', 'description', 'type', 'required', 'secret', 'public', 'pattern', 'options']
-const AUTOMATION_KEYS = ['name', 'schedule', 'model']
-const AUTOMATION_MODELS = ['normal', 'intelligent-high']
+const WORKFLOW_SLUG_MAX = 64
 const SERVER_KEYS = ['type', 'url', 'headers']
 
 export const AGENT_TOOLS = ['read_file', 'write_file', 'edit_file', 'apply_patch', 'execute_command', 'get_stock_image', 'web_fetch', 'web_search', 'generate_image', 'restart_preview', 'apply_to_preview', 'tool_run', 'tool_search', 'tool_describe', 'skill']
@@ -53,7 +50,7 @@ export const DEFAULT_ENV_KEYS = [
 
 const RESERVED_SLUG = 'custom'
 
-const MISPLACED = ['agents', 'automations', 'scripts', 'instructions.md']
+const MISPLACED = ['agents', 'workflows', 'scripts', 'instructions.md']
 
 // The builder-maintained symlink to the installed version, the only stable
 // segment prose may use in a sandbox path.
@@ -409,7 +406,6 @@ function lintPluginManifest(root, entry, report) {
   check.boolean('manifest/boolean', `${ns}.setup`, ext.setup)
 
   const fields = lintFields(report, file, at, check, ns, ext, entry.slug)
-  const automations = lintAutomationDeclarations(report, file, at, check, ns, ext)
   const connectors = lintConnectors(report, file, at, check, ns, ext)
 
   if (ext.default === true && fields.some((f) => f.required === true)) {
@@ -421,7 +417,7 @@ function lintPluginManifest(root, entry, report) {
     )
   }
 
-  return { fieldKeys: fields.map((f) => f.key).filter(Boolean), automations, connectors, setup: ext.setup === true }
+  return { fields, fieldKeys: fields.map((f) => f.key).filter(Boolean), connectors, setup: ext.setup === true }
 }
 
 function lintFields(report, file, at, check, ns, ext, slug) {
@@ -510,67 +506,6 @@ function lintFields(report, file, at, check, ns, ext, slug) {
   return ext.fields.filter(isObject)
 }
 
-function lintAutomationDeclarations(report, file, at, check, ns, ext) {
-  if (ext.automations === undefined) return []
-  if (!isObject(ext.automations)) {
-    report.error('automation/key-slug', file, `${ns}.automations: expected object keyed by slug, received ${typeOf(ext.automations)}`, at(`${ns}.automations`))
-    return []
-  }
-
-  const slugs = []
-  for (const [slug, decl] of Object.entries(ext.automations)) {
-    const p = `${ns}.automations.${slug}`
-    const label = `automations["${slug}"]`
-
-    if (slug.length < 1 || slug.length > 64 || !SLUG_PATTERN.test(slug)) {
-      report.error('automation/key-slug', file, `${label}: key ${SLUG_MESSAGE}`, at(p, { key: true }))
-      continue
-    }
-    if (!isObject(decl)) {
-      report.error('automation/unknown-key', file, `${label}: expected object, received ${typeOf(decl)}`, at(p))
-      continue
-    }
-
-    check.strictKeys('automation/unknown-key', p, decl, AUTOMATION_KEYS, label)
-    check.string('automation/name', `${p}.name`, decl.name, { min: 1, max: 100, trim: true, required: true, label: `${label}.name` })
-
-    if (check.string('automation/schedule-syntax', `${p}.schedule`, decl.schedule, { min: 1, max: 100, required: true, label: `${label}.schedule` })) {
-      lintSchedule(report, file, at(`${p}.schedule`), label, decl.schedule)
-    }
-
-    if (!AUTOMATION_MODELS.includes(decl.model)) {
-      report.error(
-        'automation/model',
-        file,
-        `${label}.model: expected ${AUTOMATION_MODELS.join(' | ')}, received ${JSON.stringify(decl.model)}`,
-        at(`${p}.model`)
-      )
-    }
-    slugs.push(slug)
-  }
-  return slugs
-}
-
-function lintSchedule(report, file, pos, label, schedule) {
-  let cron
-  try {
-    cron = parseCron(schedule)
-  } catch (e) {
-    if (e instanceof CronUnsupported) {
-      report.warn('automation/schedule-unverified', file, `${label}.schedule contains "${e.message}", which cannot be checked offline`, {
-        ...pos,
-        hint: 'the builder may accept it; confirm the 15-minute floor by hand',
-      })
-      return
-    }
-    report.error('automation/schedule-syntax', file, `${label}.schedule: invalid cron expression (${e.message})`, pos)
-    return
-  }
-  if (!meetsFloor(cron)) {
-    report.error('automation/schedule-floor', file, `${label}.schedule must fire at most every ${SCHEDULE_FLOOR_MINUTES} minutes`, pos)
-  }
-}
-
 function lintConnectors(report, file, at, check, ns, ext) {
   if (ext.connectors === undefined) return []
   if (!isObject(ext.connectors)) {
@@ -976,50 +911,101 @@ function lintAgents(root, entry, report) {
   }
 }
 
-// --- automations -----------------------------------------------------------
+// --- workflows -----------------------------------------------------------
 
-function lintAutomationFiles(root, entry, declared, report) {
-  const dir = join(entry.dir, NAMESPACE, 'automations')
-  const present = new Set()
+function lintWorkflowFiles(root, entry, manifest, report) {
+  const dir = join(entry.dir, NAMESPACE, 'workflows')
+  const entries = listDir(dir)
+  const folders = entries.filter((dirent) => dirent.isDirectory()).map((dirent) => dirent.name)
 
-  for (const dirent of listDir(dir)) {
-    if (!dirent.isFile() || !dirent.name.endsWith('.md')) continue
-    present.add(dirent.name.slice(0, -3))
+  for (const dirent of entries.filter((dirent) => !dirent.isDirectory())) {
+    report.error('workflow/stray-file', relative(root, join(dir, dirent.name)), `Invalid workflows of ${entry.slug}: the workflows folder holds one folder per workflow, and ${dirent.name} is not a folder`, {
+      line: 1,
+      hint: `move it into ${NAMESPACE}/workflows/<slug>/, or delete it`,
+    })
   }
 
-  // The builder reports orphans first, so a real run can surface only this one.
-  const orphans = [...present].filter((s) => !declared.includes(s))
-  for (const orphan of orphans) {
-    report.error(
-      'automation/orphan-file',
-      relative(root, join(dir, `${orphan}.md`)),
-      `Invalid automations of ${entry.slug}: files without a manifest declaration: ${orphans.join(', ')}`,
-      { line: 1, hint: `declare it in plugin.json under extensions["${NAMESPACE}"].automations, or delete it` }
-    )
-  }
+  // A shop marketplace stores its plugins as shop-<slug>, so its keys carry that prefix.
+  const slugs = [entry.slug, `shop-${entry.slug}`]
+  const servers = Object.keys(parseJsonSource(readIfExists(join(entry.dir, 'mcp.json')) ?? '{}').value?.mcpServers ?? {})
+  const envKeys = slugs.flatMap((slug) => (manifest?.fields ?? []).map((field) => envVarName(slug, field.key, field.public === true)))
+  const credentials = slugs.flatMap((slug) => servers.map((server) => `${slug}__${server}`))
 
-  for (const slug of declared) {
-    const path = join(dir, `${slug}.md`)
-    if (!present.has(slug)) {
-      report.error(
-        'automation/missing-file',
-        relative(root, join(entry.dir, 'plugin.json')),
-        `Invalid automations of ${entry.slug}: missing automations/${slug}.md`,
-        { hint: `create ${NAMESPACE}/automations/${slug}.md` }
-      )
+  for (const slug of folders) {
+    const folder = join(dir, slug)
+    if (slug.length > 64 || !SLUG_PATTERN.test(slug)) {
+      report.error('workflow/folder-slug', relative(root, folder), `Invalid workflow ${slug} of ${entry.slug}: the folder name is the workflow slug, and it ${SLUG_MESSAGE}`, { line: 1 })
       continue
     }
-    const text = readIfExists(path) ?? ''
-    if (text.trim() === '') {
-      report.error('automation/empty-file', relative(root, path), `Invalid automations of ${entry.slug}: automations/${slug}.md is empty`, { line: 1 })
+    const full = `${entry.slug}__${slug}`
+    if (full.length > WORKFLOW_SLUG_MAX) {
+      report.error('workflow/slug-length', relative(root, folder), `Invalid workflow ${slug} of ${entry.slug}: the workflow slug ${full} is longer than ${WORKFLOW_SLUG_MAX} characters`, { line: 1 })
     }
-    if (text.trimStart().startsWith('---')) {
-      report.warn('automation/frontmatter', relative(root, path), 'frontmatter here is not parsed or stripped, so it lands verbatim in the agent instruction', {
-        line: 1,
-        hint: 'name, schedule and model belong in plugin.json',
+    if (existsSync(join(folder, 'package.json'))) {
+      report.error('workflow/package-json', relative(root, join(folder, 'package.json')), 'a workflow folder has no package.json; code nodes use fetch and the platform libraries only', { line: 1 })
+    }
+
+    const file = relative(root, join(folder, 'workflow.json'))
+    const doc = readJson(join(folder, 'workflow.json'), file, report, 'workflow/parse', `workflow.json of ${entry.slug}/${slug}`)
+    if (doc.missing) {
+      report.error('workflow/missing-file', file, `Invalid workflow ${slug} of ${entry.slug}: workflow.json is missing`, { line: 1 })
+      continue
+    }
+    if (doc.invalid) continue
+    if (!isObject(doc.value)) {
+      report.error('workflow/parse', file, `expected object, received ${typeOf(doc.value)}`, doc.at(''))
+      continue
+    }
+
+    lintWorkflowDefinition(report, file, doc, { folder, envKeys, credentials })
+  }
+}
+
+function lintWorkflowDefinition(report, file, { value, at }, { folder, envKeys, credentials }) {
+  if (value.credentials !== undefined) {
+    report.error('workflow/credential', file, "a plugin workflow declares no credentials: its keys come from the fields in plugin.json and the plugin's own connectors", at('credentials', { key: true }))
+  }
+
+  const nodes = isObject(value.trigger) ? [{ node: value.trigger, p: 'trigger' }] : []
+  const collect = (list, p) => {
+    if (!Array.isArray(list)) return
+    list.forEach((node, index) => {
+      if (!isObject(node)) return
+      nodes.push({ node, p: `${p}.${index}` })
+      collect(node.body?.nodes, `${p}.${index}.body.nodes`)
+    })
+  }
+  collect(value.nodes, 'nodes')
+
+  const key = value.trigger?.input?.verification?.key
+  const named = [
+    ...nodes.map(({ node, p }) => ({ credential: node.credential, p: `${p}.credential` })),
+    { credential: isObject(key) && key.field !== undefined ? key.credential : undefined, p: 'trigger.input.verification.key.credential' },
+  ]
+  for (const { credential, p } of named) {
+    if (typeof credential === 'string' && credential.includes('__') && !credentials.includes(credential)) {
+      report.error('workflow/credential', file, `credential ${credential} is not a credential of this plugin's own connectors`, {
+        ...at(p),
+        hint: credentials.length > 0 ? `the plugin's own are ${credentials.join(', ')}` : 'the plugin has no mcp.json server to name',
       })
     }
   }
+
+  for (const { node, p } of nodes) {
+    const env = Array.isArray(node.env) ? node.env : []
+    env.forEach((envKey, index) => {
+      if (!envKeys.includes(envKey)) {
+        report.error('workflow/env', file, `code node ${node.id} lists ${envKey} in env, but plugin.json declares no field for it`, {
+          ...at(`${p}.env.${index}`),
+          hint: envKeys.length > 0 ? `the plugin's keys are ${envKeys.join(', ')}` : 'declare a field in plugin.json first',
+        })
+      }
+    })
+    const codeFile = typeof node.file === 'string' ? node.file : `nodes/${node.id}.js`
+    if (node.type === 'code' && !existsSync(join(folder, codeFile))) {
+      report.error('workflow/code-file', file, `code node ${node.id} has no file at ${codeFile}`, at(typeof node.file === 'string' ? `${p}.file` : p))
+    }
+  }
 }
 
 function lintSetup(root, entry, manifest, report) {
@@ -1179,7 +1165,7 @@ export function lint(root, { git = true } = {}) {
     lintMcp(root, entry, manifest, report)
     lintSkills(root, entry, report)
     lintAgents(root, entry, report)
-    lintAutomationFiles(root, entry, manifest?.automations ?? [], report)
+    lintWorkflowFiles(root, entry, manifest, report)
     lintSetup(root, entry, manifest, report)
     lintLayout(root, entry, report)
   }

package/src/cron.mjs

@@ -1,131 +0,0 @@
-// Cron parsing and the builder 15-minute schedule floor.
-//
-// Mirrors packages/core/src/lib/automations/schedule.ts: 101 firings sampled
-// from 2026-01-01T00:00:00Z, rejected if any gap falls under the floor.
-
-export const SCHEDULE_FLOOR_MINUTES = 15
-
-const CRON_ALIASES = {
-  '@hourly': '0 * * * *',
-  '@daily': '0 0 * * *',
-  '@weekly': '0 0 * * 0',
-  '@monthly': '0 0 1 * *',
-  '@yearly': '0 0 1 1 *',
-}
-const MONTHS = ['jan', 'feb', 'mar', 'apr', 'may', 'jun', 'jul', 'aug', 'sep', 'oct', 'nov', 'dec']
-const DAYS = ['sun', 'mon', 'tue', 'wed', 'thu', 'fri', 'sat']
-
-export class CronUnsupported extends Error {}
-
-function expandField(spec, min, max, names) {
-  const out = new Set()
-  for (const part of spec.split(',')) {
-    const piece = part.trim()
-    if (piece === '') throw new Error('empty field element')
-    if (/[LW#?]/i.test(piece)) throw new CronUnsupported(piece)
-
-    const [rangePart, stepPart] = piece.split('/')
-    const step = stepPart === undefined ? 1 : Number(stepPart)
-    if (!Number.isInteger(step) || step < 1) throw new Error(`bad step "${stepPart}"`)
-
-    let lo
-    let hi
-    if (rangePart === '*') {
-      lo = min
-      hi = max
-    } else if (rangePart.includes('-')) {
-      const [a, b] = rangePart.split('-')
-      lo = toNumber(a, names)
-      hi = toNumber(b, names)
-    } else {
-      lo = toNumber(rangePart, names)
-      hi = stepPart === undefined ? lo : max
-    }
-    if (lo < min || hi > max || lo > hi) throw new Error(`value out of range in "${piece}"`)
-    for (let v = lo; v <= hi; v += step) out.add(v)
-  }
-  return out
-}
-
-function toNumber(token, names) {
-  const t = token.trim()
-  if (/^\d+$/.test(t)) return Number(t)
-  if (names) {
-    const i = names.indexOf(t.toLowerCase().slice(0, 3))
-    if (i !== -1) return i
-  }
-  throw new Error(`unrecognized value "${t}"`)
-}
-
-/** Returns {fields} or throws. Mirrors what cron-parser accepts, minus L/W/#. */
-export function parseCron(expression) {
-  const expr = (CRON_ALIASES[expression.trim().toLowerCase()] ?? expression).trim()
-  const parts = expr.split(/\s+/)
-  if (parts.length !== 5 && parts.length !== 6) {
-    throw new Error(`expected 5 or 6 fields, got ${parts.length}`)
-  }
-  const [sec, min, hour, dom, mon, dow] = parts.length === 6 ? parts : ['0', ...parts]
-  const dowSet = expandField(dow, 0, 7, DAYS)
-  if (dowSet.has(7)) dowSet.add(0)
-  return {
-    seconds: expandField(sec, 0, 59),
-    minutes: expandField(min, 0, 59),
-    hours: expandField(hour, 0, 23),
-    dom: expandField(dom, 1, 31),
-    months: expandField(mon, 1, 12, MONTHS),
-    dow: dowSet,
-    domRestricted: dom.trim() !== '*',
-    dowRestricted: dow.trim() !== '*',
-  }
-}
-
-/**
- * Replicates scheduleMeetsFloor: 101 firings from 2026-01-01T00:00:00Z, reject
- * if any gap is under 15 minutes. Iterates by day so a yearly cron stays cheap.
- */
-export function meetsFloor(cron) {
-  if (cron.seconds.size > 1) return false // sub-minute firings
-
-  const minutesOfDay = []
-  for (const h of [...cron.hours].sort((a, b) => a - b)) {
-    for (const m of [...cron.minutes].sort((a, b) => a - b)) minutesOfDay.push(h * 60 + m)
-  }
-  minutesOfDay.sort((a, b) => a - b)
-  if (minutesOfDay.length === 0) return true
-
-  // A same-day gap under the floor fails regardless of which days match.
-  for (let i = 1; i < minutesOfDay.length; i++) {
-    if (minutesOfDay[i] - minutesOfDay[i - 1] < SCHEDULE_FLOOR_MINUTES) return false
-  }
-
-  // Then walk real days for the wrap-around gap between consecutive fire days.
-  const start = Date.UTC(2026, 0, 1)
-  let firings = 0
-  let previousDayIndex = null
-  const DAY_LIMIT = 366 * 120
-
-  for (let day = 0; day < DAY_LIMIT && firings <= 101; day++) {
-    const date = new Date(start + day * 86400000)
-    if (!dayMatches(cron, date)) continue
-
-    if (previousDayIndex !== null) {
-      const dayGap = (day - previousDayIndex) * 1440
-      const wrap = dayGap - minutesOfDay[minutesOfDay.length - 1] + minutesOfDay[0]
-      if (wrap < SCHEDULE_FLOOR_MINUTES) return false
-    }
-    previousDayIndex = day
-    firings += minutesOfDay.length
-  }
-  return true
-}
-
-function dayMatches(cron, date) {
-  if (!cron.months.has(date.getUTCMonth() + 1)) return false
-  const domHit = cron.dom.has(date.getUTCDate())
-  const dowHit = cron.dow.has(date.getUTCDay())
-  // Standard cron: when both are restricted the match is OR, not AND.
-  if (cron.domRestricted && cron.dowRestricted) return domHit || dowHit
-  if (cron.domRestricted) return domHit
-  if (cron.dowRestricted) return dowHit
-  return true
-}