@syncended/dsh-automations 0.1.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 syncended
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,128 @@
+# DeepSeek Harness Automations
+
+A DeepSeek Harness plugin for durable, configurable cron jobs. Each occurrence starts a fresh persisted Harness Agent in a selected project with an explicit model route, agent preset, and permission preset.
+
+> **Status:** MVP for `@deepseek-ai/dsh` `0.1.1-rc.2`. The current worker is single-host. Cron admission and run history are durable; an already-started run is deliberately **not** retried after a host crash.
+
+## What works
+
+- Standard five-field cron expressions with `UTC` or IANA timezones.
+- Per-job project directory, provider/model, reasoning effort, agent preset, permission preset, and timeout.
+- Enable/disable, Run now, edit, delete, cancel, and recent run history in **Settings → Automations**.
+- Overlap policies:
+  - `skip` — record and skip an occurrence while the job has queued/running work.
+  - `queue` — serialize occurrences for the same job.
+  - `allow` — permit concurrent occurrences, bounded by the global concurrency limit.
+- Misfire policies:
+  - `skip` — record an overdue occurrence as skipped.
+  - `run-once` — coalesce missed occurrences to the latest due time.
+- Atomic owner-private state under `$DSH_HOME/automations/state.json` by default.
+- Immutable execution snapshots and occurrence keys for replay-safe admission.
+- Extensible executor registry: the MVP ships `agent`; future `workflow` and task-graph executors do not need scheduler changes.
+
+The in-box `@deepseek-ai/dsh-schedule` plugin remains the right tool for reminders attached to one live Session. This plugin owns deployment-level jobs that can start a fresh project Session while no chat is open.
+
+## Install
+
+Requirements: Node.js 22+ and a working `dsh web` profile.
+
+From npm:
+
+```bash
+dsh plugin --profile web add @syncended/dsh-automations
+```
+
+Or from this checkout:
+
+```bash
+pnpm install
+pnpm check
+pnpm build
+
+dsh plugin --profile web add .
+```
+
+The package declares a DSH bundle, so `dsh plugin` appends it to the Web profile automatically. Restart the running Web Harness after the initial install, then refresh the page. Open **Settings → Automations**.
+
+To remove it:
+
+```bash
+dsh plugin --profile web remove @syncended/dsh-automations
+```
+
+## Configure a job
+
+| Field | Meaning |
+|---|---|
+| Name | Human-readable job name. |
+| Cron | Five fields: `minute hour day-of-month month day-of-week`. Example: `0 9 * * 1-5`. |
+| Timezone | `UTC` or an IANA name such as `Europe/Berlin`. DST is handled by `cron-parser`. |
+| Project | Existing absolute directory. Its canonical filesystem identity becomes the Session cwd and `workspace-write` root. |
+| Prompt | The user message sent to a fresh Harness Agent. |
+| Provider / model | Leave both blank to resolve the current Harness default at dispatch time. Set both to pin a route. |
+| Reasoning effort | Optional adapter-owned value. |
+| Agent preset | Leave blank for the current Harness default, or select a specific composition. |
+| Permission preset | Bundles DSH sandbox and approval policies. Default: `workspace-write`. |
+| Timeout | Wall-clock run limit. Cancellation is cooperative through the Agent loop. |
+| Overlap / misfire | Admission behavior described above. |
+
+A disabled job may still be started with **Run now**.
+
+## Plugin configuration
+
+Defaults are suitable for a local Web profile. Override the bundle row in the profile's `cordis.patch.yml` when needed:
+
+```yaml
+- id: automations
+  config:
+    maxConcurrentRuns: 2
+    historyLimit: 1000
+    misfireGraceMs: 60000
+    maxOutputChars: 65536
+    allowedProjectRoots:
+      - /home/me/projects
+    # Optional; otherwise $DSH_HOME/automations/state.json
+    # statePath: /absolute/private/path/state.json
+```
+
+`allowedProjectRoots: []` means the plugin accepts any existing directory the Harness host account can resolve. Configure one or more roots when the Web surface is exposed beyond a trusted local machine.
+
+## Durable semantics
+
+1. The scheduler claims an occurrence and advances its durable `nextRunAt` watermark in the **same atomic state mutation**.
+2. The admitted run pins the complete job version and gets a unique occurrence key.
+3. `queued` runs are dispatched after restart.
+4. A run is marked `running` before any Agent work starts.
+5. On restart, orphaned `running` records become `interrupted` and are not retried automatically, avoiding silent duplicate file/network effects.
+6. Harness Session persistence remains the source of truth for the Agent transcript; the automation state stores orchestration metadata and a bounded final-text summary.
+
+This is not exactly-once execution. Exactly-once external side effects require idempotency in the task itself or in the target system.
+
+## Security
+
+- State files are replaced atomically with mode `0600`; created directories use `0700`.
+- Project paths are resolved through `realpath`; optional allowed roots are checked against that canonical identity.
+- Background work uses a normal DSH permission preset. `workspace-write` cannot silently widen itself; unattended approval failures remain fail-closed.
+- `danger-full-access` is intentionally available only when the job author selects a configured preset that grants it.
+- The management API requires JSON plus a custom same-origin mutation header. It inherits the trust boundary of the DSH Web server, which has no standalone authentication layer.
+- Prompts, run metadata, final summaries, and Session transcripts are local sensitive data.
+
+See [`docs/security.md`](docs/security.md) for the threat model.
+
+## Development
+
+```bash
+pnpm typecheck
+pnpm test
+pnpm check
+```
+
+The Host plugin is TypeScript in `src/`. The browser half is deliberately plain JavaScript in `lib/client.js`, matching the external DSH Client Plugin loader format and avoiding a dependency on monorepo-only frontend build tooling.
+
+## Architecture and roadmap
+
+See [`docs/architecture.md`](docs/architecture.md). In short, cron is only a trigger. Durable runs call an executor selected by `task.kind`; the next implementation stage adds a `workflow` executor over `ctx.workflowEngine`, followed by a persisted task graph with leases, retries, child-agent references, and resumable code steps.
+
+## License
+
+MIT

package/cordis.patch.yml

@@ -0,0 +1,5 @@
+# @syncended/dsh-automations bundle patch.
+# The service resolves its private state under $DSH_HOME/automations by default.
+- insert:
+    - id: automations
+      name: "@syncended/dsh-automations"

package/dist/agent-executor.d.ts

@@ -0,0 +1,15 @@
+import type { Context } from '@deepseek-ai/cordis';
+import { ProjectPolicy } from './project-policy.js';
+import { type AutomationExecutor, type AutomationExecutorContext } from './types.js';
+/** Runs one admitted automation through a fresh, persisted, preset-composed Harness Agent. */
+export declare class HarnessAgentExecutor implements AutomationExecutor {
+    readonly kind = "agent";
+    private readonly ctx;
+    private readonly projectPolicy;
+    constructor(ctx: Context, projectPolicy: ProjectPolicy);
+    execute(context: AutomationExecutorContext): Promise<{
+        sessionId: string;
+        output?: string;
+    }>;
+}
+//# sourceMappingURL=agent-executor.d.ts.map

package/dist/agent-executor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-executor.d.ts","sourceRoot":"","sources":["../src/agent-executor.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAA;AAOlD,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAA;AACnD,OAAO,EAAwB,KAAK,kBAAkB,EAAE,KAAK,yBAAyB,EAAE,MAAM,YAAY,CAAA;AAgF1G,8FAA8F;AAC9F,qBAAa,oBAAqB,YAAW,kBAAkB;IAC7D,QAAQ,CAAC,IAAI,WAAU;IACvB,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAS;IAC7B,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAe;gBAEjC,GAAG,EAAE,OAAO,EAAE,aAAa,EAAE,aAAa;IAKhD,OAAO,CAAC,OAAO,EAAE,yBAAyB,GAAG,OAAO,CAAC;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;CA+EnG"}

package/dist/agent-executor.js

@@ -0,0 +1,173 @@
+import { randomUUID } from 'node:crypto';
+import { realpath, stat } from 'node:fs/promises';
+import { installModelSelection } from '@deepseek-ai/dsh-agent';
+import { createUserMessage, ReasoningEffortId } from '@deepseek-ai/dsh-llm';
+import { SessionId } from '@deepseek-ai/dsh-session';
+import { ProjectPolicy } from './project-policy.js';
+import { AUTOMATION_PLUGIN_ID } from './types.js';
+class AgentRunError extends Error {
+    code;
+    constructor(message, code, options) {
+        super(message, options);
+        this.name = 'AgentRunError';
+        this.code = code;
+    }
+}
+function summarize(events, firstSeq) {
+    let started = false;
+    let text = '';
+    let reason;
+    for (const event of events) {
+        if (event.seq < firstSeq)
+            continue;
+        if (event.type === 'turn/start') {
+            started = true;
+            continue;
+        }
+        if (!started)
+            continue;
+        if (event.type === 'assistant/message') {
+            const joined = event.data.message.content
+                .filter((block) => block.type === 'text')
+                .map((block) => block.text)
+                .join('');
+            if (joined !== '')
+                text = joined;
+        }
+        if (event.type === 'turn/end')
+            reason = event.data.reason;
+    }
+    return reason === undefined ? { text } : { text, reason };
+}
+function failureFromReason(reason) {
+    if (reason === undefined)
+        return new AgentRunError('The agent produced no terminal turn outcome.', 'MISSING_TURN_OUTCOME');
+    if (reason.kind === 'error') {
+        return new AgentRunError(reason.error.message, reason.error.code);
+    }
+    if (reason.kind === 'blocked')
+        return new AgentRunError('The agent turn was blocked.', 'TURN_BLOCKED');
+    if (reason.kind === 'max-tokens')
+        return new AgentRunError('The agent reached its output-token limit.', 'TURN_MAX_TOKENS');
+    if (reason.kind === 'aborted')
+        return new AgentRunError('The agent turn was aborted.', 'TURN_ABORTED');
+    if (reason.kind === 'interrupted')
+        return new AgentRunError('The agent turn was interrupted by a previous host crash.', 'TURN_INTERRUPTED');
+    return new AgentRunError(`The agent ended with unsupported reason "${String(reason.kind)}".`, 'TURN_FAILED');
+}
+async function assertCanonicalDirectory(cwd) {
+    const [metadata, canonical] = await Promise.all([stat(cwd), realpath(cwd)]);
+    if (!metadata.isDirectory())
+        throw new AgentRunError(`Project path is not a directory: ${cwd}`, 'PROJECT_NOT_DIRECTORY');
+    if (canonical !== cwd) {
+        throw new AgentRunError(`Project path no longer resolves to its saved filesystem identity: expected ${cwd}, found ${canonical}`, 'PROJECT_IDENTITY_CHANGED');
+    }
+}
+function resolveSelection(ctx, run) {
+    const execution = run.snapshot.execution;
+    const current = ctx.agentDefaultModel.currentSelection();
+    const provider = execution.provider ?? current.provider;
+    const model = execution.model ?? current.model;
+    const reasoningEffort = execution.reasoningEffort === undefined
+        ? execution.provider === undefined
+            ? current.reasoningEffort
+            : undefined
+        : ReasoningEffortId(execution.reasoningEffort);
+    return {
+        provider,
+        model,
+        ...(reasoningEffort === undefined ? {} : { reasoningEffort }),
+    };
+}
+/** Runs one admitted automation through a fresh, persisted, preset-composed Harness Agent. */
+export class HarnessAgentExecutor {
+    kind = 'agent';
+    ctx;
+    projectPolicy;
+    constructor(ctx, projectPolicy) {
+        this.ctx = ctx;
+        this.projectPolicy = projectPolicy;
+    }
+    async execute(context) {
+        const { run, signal } = context;
+        const execution = run.snapshot.execution;
+        const authorizedCwd = await this.projectPolicy.authorize(execution.cwd);
+        await assertCanonicalDirectory(authorizedCwd);
+        if (signal.aborted)
+            throw signal.reason;
+        const preset = await this.ctx.agentPresets.resolve(execution.agentPreset);
+        if (preset.broken !== undefined) {
+            throw new AgentRunError(`Agent preset "${preset.id}" is broken: ${preset.broken}`, 'BROKEN_AGENT_PRESET');
+        }
+        this.ctx.permissionPresets.resolve(execution.permissionPreset);
+        const selection = resolveSelection(this.ctx, run);
+        const sessionId = SessionId(`session-${randomUUID()}`);
+        const handle = await this.ctx.agents.create({
+            sessionId,
+            meta: {
+                cwd: execution.cwd,
+                agentPreset: preset.id,
+            },
+            agentOptions: {
+                provider: selection.provider,
+                model: selection.model,
+            },
+            signal,
+            setup: async (agentCtx) => {
+                await this.ctx.agentPresets.mount(agentCtx, preset.id);
+                installModelSelection(agentCtx, {
+                    current: selection,
+                    assembled: undefined,
+                });
+                const agent = agentCtx.agent;
+                if (agent === undefined)
+                    throw new AgentRunError('Agent setup context has no agent.', 'AGENT_SETUP_FAILED');
+                this.ctx.permissionPresets.set(agent.session, execution.permissionPreset);
+            },
+        });
+        const { agent } = handle;
+        const cancel = () => {
+            agent.cancel({
+                kind: 'hook',
+                reason: signal.reason instanceof Error ? signal.reason.message : 'automation run aborted',
+            });
+        };
+        signal.addEventListener('abort', cancel, { once: true });
+        try {
+            await context.attachSession(String(sessionId));
+            if (signal.aborted)
+                throw signal.reason;
+            await agent.whenIdle();
+            const firstSeq = agent.session.seq;
+            agent.followup(createUserMessage({
+                content: [
+                    {
+                        type: 'text',
+                        text: run.snapshot.task.prompt,
+                    },
+                ],
+                source: {
+                    kind: 'plugin',
+                    plugin: AUTOMATION_PLUGIN_ID,
+                },
+            }));
+            await agent.whenIdle();
+            if (signal.aborted)
+                throw signal.reason;
+            await this.ctx.sessions.flush(agent.session);
+            const outcome = summarize(agent.session.events, firstSeq);
+            if (outcome.reason?.kind !== 'completed')
+                throw failureFromReason(outcome.reason);
+            return {
+                sessionId: String(sessionId),
+                ...(outcome.text === '' ? {} : { output: outcome.text }),
+            };
+        }
+        finally {
+            signal.removeEventListener('abort', cancel);
+            await this.ctx.sessions.flush(agent.session).catch(() => undefined);
+            await handle.dispose().catch(() => undefined);
+        }
+    }
+}
+//# sourceMappingURL=agent-executor.js.map

package/dist/agent-executor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-executor.js","sourceRoot":"","sources":["../src/agent-executor.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AACxC,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAA;AAKjD,OAAO,EAAE,qBAAqB,EAAuB,MAAM,wBAAwB,CAAA;AACnF,OAAO,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAA;AAC3E,OAAO,EAAE,SAAS,EAAyC,MAAM,0BAA0B,CAAA;AAC3F,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAA;AACnD,OAAO,EAAE,oBAAoB,EAA2D,MAAM,YAAY,CAAA;AAE1G,MAAM,aAAc,SAAQ,KAAK;IACtB,IAAI,CAAQ;IAErB,YAAY,OAAe,EAAE,IAAY,EAAE,OAAsB;QAC/D,KAAK,CAAC,OAAO,EAAE,OAAO,CAAC,CAAA;QACvB,IAAI,CAAC,IAAI,GAAG,eAAe,CAAA;QAC3B,IAAI,CAAC,IAAI,GAAG,IAAI,CAAA;IAClB,CAAC;CACF;AAOD,SAAS,SAAS,CAAC,MAA+B,EAAE,QAAgB;IAClE,IAAI,OAAO,GAAG,KAAK,CAAA;IACnB,IAAI,IAAI,GAAG,EAAE,CAAA;IACb,IAAI,MAAiC,CAAA;IACrC,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,IAAI,KAAK,CAAC,GAAG,GAAG,QAAQ;YAAE,SAAQ;QAClC,IAAI,KAAK,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;YAChC,OAAO,GAAG,IAAI,CAAA;YACd,SAAQ;QACV,CAAC;QACD,IAAI,CAAC,OAAO;YAAE,SAAQ;QACtB,IAAI,KAAK,CAAC,IAAI,KAAK,mBAAmB,EAAE,CAAC;YACvC,MAAM,MAAM,GAAG,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO;iBACtC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,MAAM,CAAC;iBACxC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC;iBAC1B,IAAI,CAAC,EAAE,CAAC,CAAA;YACX,IAAI,MAAM,KAAK,EAAE;gBAAE,IAAI,GAAG,MAAM,CAAA;QAClC,CAAC;QACD,IAAI,KAAK,CAAC,IAAI,KAAK,UAAU;YAAE,MAAM,GAAG,KAAK,CAAC,IAAI,CAAC,MAAM,CAAA;IAC3D,CAAC;IACD,OAAO,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAA;AAC3D,CAAC;AAED,SAAS,iBAAiB,CAAC,MAAiC;IAC1D,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO,IAAI,aAAa,CAAC,8CAA8C,EAAE,sBAAsB,CAAC,CAAA;IAC1H,IAAI,MAAM,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;QAC5B,OAAO,IAAI,aAAa,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;IACnE,CAAC;IACD,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS;QAAE,OAAO,IAAI,aAAa,CAAC,6BAA6B,EAAE,cAAc,CAAC,CAAA;IACtG,IAAI,MAAM,CAAC,IAAI,KAAK,YAAY;QAAE,OAAO,IAAI,aAAa,CAAC,2CAA2C,EAAE,iBAAiB,CAAC,CAAA;IAC1H,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS;QAAE,OAAO,IAAI,aAAa,CAAC,6BAA6B,EAAE,cAAc,CAAC,CAAA;IACtG,IAAI,MAAM,CAAC,IAAI,KAAK,aAAa;QAAE,OAAO,IAAI,aAAa,CAAC,0DAA0D,EAAE,kBAAkB,CAAC,CAAA;IAC3I,OAAO,IAAI,aAAa,CAAC,4CAA4C,MAAM,CAAE,MAA2B,CAAC,IAAI,CAAC,IAAI,EAAE,aAAa,CAAC,CAAA;AACpI,CAAC;AAED,KAAK,UAAU,wBAAwB,CAAC,GAAW;IACjD,MAAM,CAAC,QAAQ,EAAE,SAAS,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAA;IAC3E,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE;QAAE,MAAM,IAAI,aAAa,CAAC,oCAAoC,GAAG,EAAE,EAAE,uBAAuB,CAAC,CAAA;IACxH,IAAI,SAAS,KAAK,GAAG,EAAE,CAAC;QACtB,MAAM,IAAI,aAAa,CACrB,8EAA8E,GAAG,WAAW,SAAS,EAAE,EACvG,0BAA0B,CAC3B,CAAA;IACH,CAAC;AACH,CAAC;AAED,SAAS,gBAAgB,CAAC,GAAY,EAAE,GAAqC;IAC3E,MAAM,SAAS,GAAG,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAA;IACxC,MAAM,OAAO,GAAG,GAAG,CAAC,iBAAiB,CAAC,gBAAgB,EAAE,CAAA;IACxD,MAAM,QAAQ,GAAG,SAAS,CAAC,QAAQ,IAAI,OAAO,CAAC,QAAQ,CAAA;IACvD,MAAM,KAAK,GAAG,SAAS,CAAC,KAAK,IAAI,OAAO,CAAC,KAAK,CAAA;IAC9C,MAAM,eAAe,GAAG,SAAS,CAAC,eAAe,KAAK,SAAS;QAC7D,CAAC,CAAC,SAAS,CAAC,QAAQ,KAAK,SAAS;YAChC,CAAC,CAAC,OAAO,CAAC,eAAe;YACzB,CAAC,CAAC,SAAS;QACb,CAAC,CAAC,iBAAiB,CAAC,SAAS,CAAC,eAAe,CAAC,CAAA;IAChD,OAAO;QACL,QAAQ;QACR,KAAK;QACL,GAAG,CAAC,eAAe,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,CAAC;KAC9D,CAAA;AACH,CAAC;AAED,8FAA8F;AAC9F,MAAM,OAAO,oBAAoB;IACtB,IAAI,GAAG,OAAO,CAAA;IACN,GAAG,CAAS;IACZ,aAAa,CAAe;IAE7C,YAAY,GAAY,EAAE,aAA4B;QACpD,IAAI,CAAC,GAAG,GAAG,GAAG,CAAA;QACd,IAAI,CAAC,aAAa,GAAG,aAAa,CAAA;IACpC,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,OAAkC;QAC9C,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,OAAO,CAAA;QAC/B,MAAM,SAAS,GAAG,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAA;QACxC,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,SAAS,CAAC,SAAS,CAAC,GAAG,CAAC,CAAA;QACvE,MAAM,wBAAwB,CAAC,aAAa,CAAC,CAAA;QAC7C,IAAI,MAAM,CAAC,OAAO;YAAE,MAAM,MAAM,CAAC,MAAM,CAAA;QAEvC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,YAAY,CAAC,OAAO,CAAC,SAAS,CAAC,WAAW,CAAC,CAAA;QACzE,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YAChC,MAAM,IAAI,aAAa,CAAC,iBAAiB,MAAM,CAAC,EAAE,gBAAgB,MAAM,CAAC,MAAM,EAAE,EAAE,qBAAqB,CAAC,CAAA;QAC3G,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,iBAAiB,CAAC,OAAO,CAAC,SAAS,CAAC,gBAAgB,CAAC,CAAA;QAC9D,MAAM,SAAS,GAAG,gBAAgB,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,CAAA;QACjD,MAAM,SAAS,GAAG,SAAS,CAAC,WAAW,UAAU,EAAE,EAAE,CAAC,CAAA;QACtD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC;YAC1C,SAAS;YACT,IAAI,EAAE;gBACJ,GAAG,EAAE,SAAS,CAAC,GAAG;gBAClB,WAAW,EAAE,MAAM,CAAC,EAAE;aACvB;YACD,YAAY,EAAE;gBACZ,QAAQ,EAAE,SAAS,CAAC,QAAQ;gBAC5B,KAAK,EAAE,SAAS,CAAC,KAAK;aACvB;YACD,MAAM;YACN,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE;gBACxB,MAAM,IAAI,CAAC,GAAG,CAAC,YAAY,CAAC,KAAK,CAAC,QAAQ,EAAE,MAAM,CAAC,EAAE,CAAC,CAAA;gBACtD,qBAAqB,CAAC,QAAQ,EAAE;oBAC9B,OAAO,EAAE,SAAS;oBAClB,SAAS,EAAE,SAAS;iBACrB,CAAC,CAAA;gBACF,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAA;gBAC5B,IAAI,KAAK,KAAK,SAAS;oBAAE,MAAM,IAAI,aAAa,CAAC,mCAAmC,EAAE,oBAAoB,CAAC,CAAA;gBAC3G,IAAI,CAAC,GAAG,CAAC,iBAAiB,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,EAAE,SAAS,CAAC,gBAAgB,CAAC,CAAA;YAC3E,CAAC;SACF,CAAC,CAAA;QAEF,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,CAAA;QACxB,MAAM,MAAM,GAAG,GAAG,EAAE;YAClB,KAAK,CAAC,MAAM,CAAC;gBACX,IAAI,EAAE,MAAM;gBACZ,MAAM,EAAE,MAAM,CAAC,MAAM,YAAY,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,wBAAwB;aAC1F,CAAC,CAAA;QACJ,CAAC,CAAA;QACD,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAA;QACxD,IAAI,CAAC;YACH,MAAM,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAA;YAC9C,IAAI,MAAM,CAAC,OAAO;gBAAE,MAAM,MAAM,CAAC,MAAM,CAAA;YACvC,MAAM,KAAK,CAAC,QAAQ,EAAE,CAAA;YACtB,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAA;YAClC,KAAK,CAAC,QAAQ,CACZ,iBAAiB,CAAC;gBAChB,OAAO,EAAE;oBACP;wBACE,IAAI,EAAE,MAAM;wBACZ,IAAI,EAAE,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM;qBAC/B;iBACF;gBACD,MAAM,EAAE;oBACN,IAAI,EAAE,QAAQ;oBACd,MAAM,EAAE,oBAAoB;iBAC7B;aACF,CAAC,CACH,CAAA;YACD,MAAM,KAAK,CAAC,QAAQ,EAAE,CAAA;YACtB,IAAI,MAAM,CAAC,OAAO;gBAAE,MAAM,MAAM,CAAC,MAAM,CAAA;YACvC,MAAM,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,CAAA;YAC5C,MAAM,OAAO,GAAG,SAAS,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAA;YACzD,IAAI,OAAO,CAAC,MAAM,EAAE,IAAI,KAAK,WAAW;gBAAE,MAAM,iBAAiB,CAAC,OAAO,CAAC,MAAM,CAAC,CAAA;YACjF,OAAO;gBACL,SAAS,EAAE,MAAM,CAAC,SAAS,CAAC;gBAC5B,GAAG,CAAC,OAAO,CAAC,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC;aACzD,CAAA;QACH,CAAC;gBAAS,CAAC;YACT,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,MAAM,CAAC,CAAA;YAC3C,MAAM,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAA;YACnE,MAAM,MAAM,CAAC,OAAO,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAA;QAC/C,CAAC;IACH,CAAC;CACF"}

package/dist/cron.d.ts

@@ -0,0 +1,15 @@
+export declare class CronValidationError extends Error {
+    readonly code = "INVALID_CRON";
+    constructor(message: string, options?: ErrorOptions);
+}
+export declare function normalizeTimezone(value: string): string;
+export declare function normalizeCron(value: string): string;
+export declare function validateCron(cronValue: string, timezoneValue: string): {
+    cron: string;
+    timezone: string;
+};
+/** First occurrence strictly after `after`. */
+export declare function nextCronOccurrence(cronValue: string, timezoneValue: string, after: Date): Date;
+/** Latest occurrence at or before `at`; useful for latest-only misfire coalescing. */
+export declare function latestCronOccurrence(cronValue: string, timezoneValue: string, at: Date): Date;
+//# sourceMappingURL=cron.d.ts.map

package/dist/cron.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cron.d.ts","sourceRoot":"","sources":["../src/cron.ts"],"names":[],"mappings":"AAEA,qBAAa,mBAAoB,SAAQ,KAAK;IAC5C,QAAQ,CAAC,IAAI,kBAAiB;gBAElB,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,YAAY;CAIpD;AAED,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAQvD;AAED,wBAAgB,aAAa,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CASnD;AAED,wBAAgB,YAAY,CAAC,SAAS,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,GAAG;IACtE,IAAI,EAAE,MAAM,CAAA;IACZ,QAAQ,EAAE,MAAM,CAAA;CACjB,CAeA;AAED,+CAA+C;AAC/C,wBAAgB,kBAAkB,CAAC,SAAS,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,GAAG,IAAI,CAe9F;AAED,sFAAsF;AACtF,wBAAgB,oBAAoB,CAAC,SAAS,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,EAAE,EAAE,IAAI,GAAG,IAAI,CAe7F"}

package/dist/cron.js

@@ -0,0 +1,74 @@
+import { CronExpressionParser } from 'cron-parser';
+export class CronValidationError extends Error {
+    code = 'INVALID_CRON';
+    constructor(message, options) {
+        super(message, options);
+        this.name = 'CronValidationError';
+    }
+}
+export function normalizeTimezone(value) {
+    const timezone = value.trim();
+    if (timezone === '')
+        throw new CronValidationError('timezone must not be empty');
+    try {
+        return new Intl.DateTimeFormat('en-US', { timeZone: timezone }).resolvedOptions().timeZone;
+    }
+    catch (cause) {
+        throw new CronValidationError(`invalid IANA timezone "${timezone}"`, { cause });
+    }
+}
+export function normalizeCron(value) {
+    const cron = value.trim().replace(/\s+/g, ' ');
+    if (cron.split(' ').length !== 5) {
+        throw new CronValidationError('cron must contain exactly five fields: minute hour day-of-month month day-of-week');
+    }
+    if (/\bH(?:\([^)]*\))?(?:\/\d+)?\b/.test(cron)) {
+        throw new CronValidationError('hashed H expressions are not supported because job schedules must be replay-deterministic');
+    }
+    return cron;
+}
+export function validateCron(cronValue, timezoneValue) {
+    const cron = normalizeCron(cronValue);
+    const timezone = normalizeTimezone(timezoneValue);
+    try {
+        CronExpressionParser.parse(cron, {
+            currentDate: new Date(),
+            tz: timezone,
+        });
+    }
+    catch (cause) {
+        throw new CronValidationError(`invalid cron expression "${cron}": ${cause instanceof Error ? cause.message : String(cause)}`, { cause });
+    }
+    return { cron, timezone };
+}
+/** First occurrence strictly after `after`. */
+export function nextCronOccurrence(cronValue, timezoneValue, after) {
+    const { cron, timezone } = validateCron(cronValue, timezoneValue);
+    try {
+        return CronExpressionParser.parse(cron, {
+            currentDate: after,
+            tz: timezone,
+        })
+            .next()
+            .toDate();
+    }
+    catch (cause) {
+        throw new CronValidationError(`cannot calculate the next occurrence for "${cron}" in ${timezone}: ${cause instanceof Error ? cause.message : String(cause)}`, { cause });
+    }
+}
+/** Latest occurrence at or before `at`; useful for latest-only misfire coalescing. */
+export function latestCronOccurrence(cronValue, timezoneValue, at) {
+    const { cron, timezone } = validateCron(cronValue, timezoneValue);
+    try {
+        return CronExpressionParser.parse(cron, {
+            currentDate: new Date(at.getTime() + 1),
+            tz: timezone,
+        })
+            .prev()
+            .toDate();
+    }
+    catch (cause) {
+        throw new CronValidationError(`cannot calculate the previous occurrence for "${cron}" in ${timezone}: ${cause instanceof Error ? cause.message : String(cause)}`, { cause });
+    }
+}
+//# sourceMappingURL=cron.js.map

package/dist/cron.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cron.js","sourceRoot":"","sources":["../src/cron.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAA;AAElD,MAAM,OAAO,mBAAoB,SAAQ,KAAK;IACnC,IAAI,GAAG,cAAc,CAAA;IAE9B,YAAY,OAAe,EAAE,OAAsB;QACjD,KAAK,CAAC,OAAO,EAAE,OAAO,CAAC,CAAA;QACvB,IAAI,CAAC,IAAI,GAAG,qBAAqB,CAAA;IACnC,CAAC;CACF;AAED,MAAM,UAAU,iBAAiB,CAAC,KAAa;IAC7C,MAAM,QAAQ,GAAG,KAAK,CAAC,IAAI,EAAE,CAAA;IAC7B,IAAI,QAAQ,KAAK,EAAE;QAAE,MAAM,IAAI,mBAAmB,CAAC,4BAA4B,CAAC,CAAA;IAChF,IAAI,CAAC;QACH,OAAO,IAAI,IAAI,CAAC,cAAc,CAAC,OAAO,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC,CAAC,eAAe,EAAE,CAAC,QAAQ,CAAA;IAC5F,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,mBAAmB,CAAC,0BAA0B,QAAQ,GAAG,EAAE,EAAE,KAAK,EAAE,CAAC,CAAA;IACjF,CAAC;AACH,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,KAAa;IACzC,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;IAC9C,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACjC,MAAM,IAAI,mBAAmB,CAAC,mFAAmF,CAAC,CAAA;IACpH,CAAC;IACD,IAAI,+BAA+B,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QAC/C,MAAM,IAAI,mBAAmB,CAAC,2FAA2F,CAAC,CAAA;IAC5H,CAAC;IACD,OAAO,IAAI,CAAA;AACb,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,SAAiB,EAAE,aAAqB;IAInE,MAAM,IAAI,GAAG,aAAa,CAAC,SAAS,CAAC,CAAA;IACrC,MAAM,QAAQ,GAAG,iBAAiB,CAAC,aAAa,CAAC,CAAA;IACjD,IAAI,CAAC;QACH,oBAAoB,CAAC,KAAK,CAAC,IAAI,EAAE;YAC/B,WAAW,EAAE,IAAI,IAAI,EAAE;YACvB,EAAE,EAAE,QAAQ;SACb,CAAC,CAAA;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,mBAAmB,CAC3B,4BAA4B,IAAI,MAAM,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,EAC9F,EAAE,KAAK,EAAE,CACV,CAAA;IACH,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAA;AAC3B,CAAC;AAED,+CAA+C;AAC/C,MAAM,UAAU,kBAAkB,CAAC,SAAiB,EAAE,aAAqB,EAAE,KAAW;IACtF,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,YAAY,CAAC,SAAS,EAAE,aAAa,CAAC,CAAA;IACjE,IAAI,CAAC;QACH,OAAO,oBAAoB,CAAC,KAAK,CAAC,IAAI,EAAE;YACtC,WAAW,EAAE,KAAK;YAClB,EAAE,EAAE,QAAQ;SACb,CAAC;aACC,IAAI,EAAE;aACN,MAAM,EAAE,CAAA;IACb,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,mBAAmB,CAC3B,6CAA6C,IAAI,QAAQ,QAAQ,KAAK,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,EAC9H,EAAE,KAAK,EAAE,CACV,CAAA;IACH,CAAC;AACH,CAAC;AAED,sFAAsF;AACtF,MAAM,UAAU,oBAAoB,CAAC,SAAiB,EAAE,aAAqB,EAAE,EAAQ;IACrF,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,YAAY,CAAC,SAAS,EAAE,aAAa,CAAC,CAAA;IACjE,IAAI,CAAC;QACH,OAAO,oBAAoB,CAAC,KAAK,CAAC,IAAI,EAAE;YACtC,WAAW,EAAE,IAAI,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;YACvC,EAAE,EAAE,QAAQ;SACb,CAAC;aACC,IAAI,EAAE;aACN,MAAM,EAAE,CAAA;IACb,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,mBAAmB,CAC3B,iDAAiD,IAAI,QAAQ,QAAQ,KAAK,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,EAClI,EAAE,KAAK,EAAE,CACV,CAAA;IACH,CAAC;AACH,CAAC"}

package/dist/http.d.ts

@@ -0,0 +1,8 @@
+import type { IncomingMessage, ServerResponse } from 'node:http';
+import type { AutomationServiceApi } from './types.js';
+interface HttpLogger {
+    warn(message: string, ...args: unknown[]): void;
+}
+export declare function createAutomationHttpHandler(service: AutomationServiceApi, prefix: string, logger: HttpLogger): (request: IncomingMessage, response: ServerResponse) => Promise<void>;
+export {};
+//# sourceMappingURL=http.d.ts.map

package/dist/http.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"http.d.ts","sourceRoot":"","sources":["../src/http.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,WAAW,CAAA;AAEhE,OAAO,KAAK,EAAiB,oBAAoB,EAAE,MAAM,YAAY,CAAA;AAIrE,UAAU,UAAU;IAClB,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,GAAG,IAAI,CAAA;CAChD;AA6FD,wBAAgB,2BAA2B,CACzC,OAAO,EAAE,oBAAoB,EAC7B,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,UAAU,GACjB,CAAC,OAAO,EAAE,eAAe,EAAE,QAAQ,EAAE,cAAc,KAAK,OAAO,CAAC,IAAI,CAAC,CAsGvE"}