@wonsukchoi/crondex 0.13.0 → 0.14.0

package/jobs/automotive/estimate-approval-followup-check.yaml

@@ -0,0 +1,36 @@
+id: estimate-approval-followup-check
+version: 1
+name: Repair Estimate Approval Follow-Up Check
+description: >
+  Flags repair estimates sent to a customer that haven't been approved
+  yet, so the car doesn't sit untouched while a text goes unanswered. Use
+  this if a vehicle has ever taken up a bay for days because nobody
+  followed up on an estimate the customer never actually saw or responded
+  to.
+category: automotive
+tags: [automotive, repair-shop, estimate, followup]
+schedule: "0 9,15 * * *"
+timezone: "UTC"
+runner: shell
+command: >
+  today=$(date +%s);
+  awk -F',' -v hours="{{followup_after_hours}}" -v today="$today" '
+    NR==1 {next}
+    $3 == "pending" {
+      cmd = "date -d \"" $2 "\" +%s 2>/dev/null || date -j -f \"%Y-%m-%d %H:%M\" \"" $2 "\" +%s 2>/dev/null";
+      cmd | getline sent_epoch; close(cmd);
+      age_hours = (today - sent_epoch) / 3600;
+      if (age_hours >= hours) {
+        printf "NO RESPONSE: RO %s — estimate sent %s (%d hrs ago)\n", $1, $2, age_hours;
+      }
+    }
+  ' "{{estimates_csv_path}}"
+variables:
+  estimates_csv_path:
+    default: "./repair-estimates.csv"
+    description: "Path to a CSV with columns: ro_number,sent_at (YYYY-MM-DD HH:MM),status (pending/approved/declined)."
+  followup_after_hours:
+    default: 24
+    description: Hours an estimate can sit with no response before it counts as needing a follow-up call.
+compatible_agents: [generic, claude, codex]
+notes: Follow up by phone or text once flagged — this job only surfaces the gap, it doesn't contact the customer.

package/jobs/automotive/vehicle-pickup-reminder.yaml

@@ -0,0 +1,35 @@
+id: vehicle-pickup-reminder
+version: 1
+name: Finished Vehicle Pickup Reminder
+description: >
+  Flags vehicles marked ready for pickup that the customer hasn't
+  collected yet, so the lot doesn't fill up with finished cars nobody's
+  chasing. Use this if a completed car has ever sat in the lot for a week
+  because the "ready" call was made once and then forgotten.
+category: automotive
+tags: [automotive, repair-shop, pickup, customer]
+schedule: "0 9 * * *"
+timezone: "UTC"
+runner: shell
+command: >
+  today=$(date +%s);
+  awk -F',' -v days="{{warn_days_before}}" -v today="$today" '
+    NR==1 {next}
+    $3 == "ready" {
+      cmd = "date -d \"" $2 "\" +%s 2>/dev/null || date -j -f %Y-%m-%d \"" $2 "\" +%s 2>/dev/null";
+      cmd | getline ready_epoch; close(cmd);
+      age_days = (today - ready_epoch) / 86400;
+      if (age_days >= days) {
+        printf "NOT PICKED UP: RO %s — ready since %s (%d days)\n", $1, $2, age_days;
+      }
+    }
+  ' "{{repair_orders_csv_path}}"
+variables:
+  repair_orders_csv_path:
+    default: "./repair-orders-status.csv"
+    description: "Path to a CSV with columns: ro_number,ready_date (YYYY-MM-DD),status (ready/picked-up)."
+  warn_days_before:
+    default: 2
+    description: Days a finished vehicle can sit before it counts as overdue for pickup.
+compatible_agents: [generic, claude, codex]
+notes: A car sitting too long after completion can also mean unpaid storage/labor charges piling up — worth a call, not just a lot walk-through.

package/jobs/childcare/enrollment-waitlist-followup-check.yaml

@@ -0,0 +1,35 @@
+id: enrollment-waitlist-followup-check
+version: 1
+name: Enrollment Waitlist Follow-Up Check
+description: >
+  Flags waitlisted families who haven't been contacted in a while, so a
+  spot doesn't go unfilled because nobody worked down the list. Use this
+  if an opening has ever sat empty for weeks while a waitlisted family who
+  would've taken it never got a call.
+category: childcare
+tags: [childcare, waitlist, enrollment, followup]
+schedule: "0 9 * * 1"
+timezone: "UTC"
+runner: shell
+command: >
+  today=$(date +%s);
+  awk -F',' -v days="{{stale_after_days}}" -v today="$today" '
+    NR==1 {next}
+    $3 == "waiting" {
+      cmd = "date -d \"" $2 "\" +%s 2>/dev/null || date -j -f %Y-%m-%d \"" $2 "\" +%s 2>/dev/null";
+      cmd | getline last_contact_epoch; close(cmd);
+      age_days = (today - last_contact_epoch) / 86400;
+      if (age_days >= days) {
+        printf "STALE: %s — last contacted %s (%d days ago)\n", $1, $2, age_days;
+      }
+    }
+  ' "{{waitlist_csv_path}}"
+variables:
+  waitlist_csv_path:
+    default: "./enrollment-waitlist.csv"
+    description: "Path to a CSV with columns: family_name,last_contacted_date (YYYY-MM-DD),status (waiting/enrolled/withdrawn)."
+  stale_after_days:
+    default: 30
+    description: Days since last contact before a waitlisted family counts as due for a check-in.
+compatible_agents: [generic, claude, codex]
+notes: A family that's gone quiet on a stale waitlist entry may have already enrolled elsewhere — a check-in also keeps the waitlist itself accurate.

package/jobs/childcare/staff-certification-expiry-check.yaml

@@ -0,0 +1,35 @@
+id: staff-certification-expiry-check
+version: 1
+name: Childcare Staff Certification Expiry Check
+description: >
+  Checks staff CPR/first-aid and other required childcare certifications
+  and warns before any expire. Use this if a licensing inspection has ever
+  been the first place a lapsed certification got noticed, instead of
+  catching it with time to renew.
+category: childcare
+tags: [childcare, staff, certification, compliance]
+schedule: "0 8 * * 1"
+timezone: "UTC"
+runner: shell
+command: >
+  awk -F',' -v days="{{warn_days_before}}" '
+    NR==1 {next}
+    {
+      cmd = "date -d \"" $3 "\" +%s 2>/dev/null || date -j -f %Y-%m-%d \"" $3 "\" +%s 2>/dev/null";
+      cmd | getline expiry_epoch; close(cmd);
+      "date +%s" | getline now_epoch; close("date +%s");
+      diff_days = (expiry_epoch - now_epoch) / 86400;
+      if (diff_days <= days) {
+        printf "EXPIRING: %s — %s expires %s (%d days)\n", $1, $2, $3, diff_days;
+      }
+    }
+  ' "{{staff_certs_csv_path}}"
+variables:
+  staff_certs_csv_path:
+    default: "./staff-certifications.csv"
+    description: "Path to a CSV with columns: staff_name,cert_type (e.g. CPR, first-aid, mandated reporter),expiry_date (YYYY-MM-DD)."
+  warn_days_before:
+    default: 45
+    description: How many days before a certification expires to start warning.
+compatible_agents: [generic, claude, codex]
+notes: Required certification types vary by state/licensing body — confirm your jurisdiction's list rather than assuming CPR/first-aid is the whole requirement.

package/jobs/devops/error-rate-spike-watch.yaml

@@ -1,5 +1,5 @@
 id: error-rate-spike-watch
-version: 1
+version: 2
 name: Error Rate Spike Watch
 description: >
   Checks your error tracker's recent error count against a threshold and
@@ -11,7 +11,7 @@ schedule: "*/15 * * * *"
 timezone: "UTC"
 runner: hybrid
 command: >
-  if [ -n "$SENTRY_AUTH_TOKEN" ] && [ -n "{{sentry_project}}" ]; then
+  if [ -n "${SENTRY_AUTH_TOKEN:-}" ] && [ -n "{{sentry_project}}" ]; then
     count=$(curl -s -H "Authorization: Bearer $SENTRY_AUTH_TOKEN" "https://sentry.io/api/0/projects/{{sentry_org}}/{{sentry_project}}/events/?statsPeriod=15m" | grep -o '"id"' | wc -l | tr -d ' ');
     if [ "$count" -ge "{{threshold}}" ]; then echo "WARNING: $count errors in last 15m (threshold {{threshold}})"; exit 1;
     else echo "OK: $count errors in last 15m"; fi

package/jobs/fitness/facility-cleaning-log-check.yaml

@@ -0,0 +1,36 @@
+id: facility-cleaning-log-check
+version: 1
+name: Facility Cleaning Log Check
+description: >
+  Checks that scheduled cleaning tasks (equipment wipe-down, locker rooms,
+  floors) were actually logged as done today. Use this if a cleaning
+  checklist has ever gone unfilled for a shift because it lived on a
+  clipboard nobody was checking.
+category: fitness
+tags: [fitness, cleaning, facility, compliance]
+schedule: "0 21 * * *"
+timezone: "UTC"
+runner: shell
+command: >
+  today=$(date +%Y-%m-%d);
+  missing=$(awk -F',' -v today="$today" -v tasks="{{required_tasks}}" '
+    BEGIN { n = split(tasks, req, ","); }
+    $2 == today { done[$1] = 1 }
+    END {
+      for (i = 1; i <= n; i++) {
+        t = req[i];
+        gsub(/^ +| +$/, "", t);
+        if (!(t in done)) print "NOT LOGGED TODAY: " t;
+      }
+    }
+  ' "{{cleaning_log_csv_path}}");
+  if [ -n "$missing" ]; then echo "$missing"; exit 1; else echo "OK: all required cleaning tasks logged today"; fi
+variables:
+  cleaning_log_csv_path:
+    default: "./cleaning-log.csv"
+    description: "Path to a CSV with columns: task_name,completed_date (YYYY-MM-DD)."
+  required_tasks:
+    default: "equipment wipe-down, locker rooms, floors, restrooms"
+    description: Comma-separated list of tasks that must be logged each day.
+compatible_agents: [generic, claude, codex]
+notes: Only as reliable as whoever fills in the log — pair with a physical walk-through periodically to spot-check that logged-done actually means done.

package/jobs/fitness/trainer-session-package-expiry-check.yaml

@@ -0,0 +1,35 @@
+id: trainer-session-package-expiry-check
+version: 1
+name: Trainer Session Package Expiry Check
+description: >
+  Flags members with a paid personal-training session package that's
+  expiring soon with sessions still unused. Use this if a client has ever
+  paid for ten sessions, used three, and let the rest expire because
+  nobody nudged them to book before the window closed.
+category: fitness
+tags: [fitness, personal-training, sessions, expiry]
+schedule: "0 9 * * 1"
+timezone: "UTC"
+runner: shell
+command: >
+  awk -F',' -v days="{{warn_days_before}}" '
+    NR==1 {next}
+    $4 > 0 {
+      cmd = "date -d \"" $3 "\" +%s 2>/dev/null || date -j -f %Y-%m-%d \"" $3 "\" +%s 2>/dev/null";
+      cmd | getline expiry_epoch; close(cmd);
+      "date +%s" | getline now_epoch; close("date +%s");
+      diff_days = (expiry_epoch - now_epoch) / 86400;
+      if (diff_days <= days && diff_days >= 0) {
+        printf "EXPIRING: %s — %d session(s) left, expires %s (%d days)\n", $1, $4, $3, diff_days;
+      }
+    }
+  ' "{{packages_csv_path}}"
+variables:
+  packages_csv_path:
+    default: "./training-packages.csv"
+    description: "Path to a CSV with columns: member_name,package_size,expiry_date (YYYY-MM-DD),sessions_remaining."
+  warn_days_before:
+    default: 14
+    description: How many days before expiry to start warning, while there's still time to book remaining sessions.
+compatible_agents: [generic, claude, codex]
+notes: An expiring package with several sessions left is also a good moment to offer an extension or renewal, not just a "use it or lose it" notice.

package/jobs/government/budget-appropriation-deadline-check.yaml

@@ -0,0 +1,35 @@
+id: budget-appropriation-deadline-check
+version: 1
+name: Budget Appropriation Submission Deadline Check
+description: >
+  Warns you before an agency's budget appropriation submission is due.
+  Use this if a department has ever missed its window to request funding
+  for the next cycle because the internal deadline snuck up during budget
+  season chaos.
+category: government
+tags: [government, budget, appropriation, deadline]
+schedule: "0 8 * * *"
+timezone: "UTC"
+runner: shell
+command: >
+  awk -F',' -v days="{{warn_days_before}}" '
+    NR==1 {next}
+    {
+      cmd = "date -d \"" $2 "\" +%s 2>/dev/null || date -j -f %Y-%m-%d \"" $2 "\" +%s 2>/dev/null";
+      cmd | getline due_epoch; close(cmd);
+      "date +%s" | getline now_epoch; close("date +%s");
+      diff_days = (due_epoch - now_epoch) / 86400;
+      if (diff_days <= days && diff_days >= 0) {
+        printf "SUBMISSION DUE: %s — due %s (%d days)\n", $1, $2, diff_days;
+      }
+    }
+  ' "{{budget_deadlines_csv_path}}"
+variables:
+  budget_deadlines_csv_path:
+    default: "./budget-deadlines.csv"
+    description: "Path to a CSV with columns: department_name,submission_due_date (YYYY-MM-DD)."
+  warn_days_before:
+    default: 21
+    description: How many days before the submission deadline to start warning.
+compatible_agents: [generic, claude, codex]
+notes: Keep department names distinct if you're tracking multiple agencies' cycles in one CSV — otherwise run one instance of this job per department.

package/jobs/government/public-meeting-notice-compliance-check.yaml

@@ -0,0 +1,39 @@
+id: public-meeting-notice-compliance-check
+version: 1
+name: Public Meeting Notice Compliance Check
+description: >
+  Checks that an upcoming public meeting's notice was posted with enough
+  lead time to meet open-meetings law requirements. Use this if a meeting
+  has ever gotten challenged, or had to be redone, because notice went out
+  a day late.
+category: government
+tags: [government, open-meetings, notice, compliance]
+schedule: "0 8 * * *"
+timezone: "UTC"
+runner: shell
+command: >
+  meeting_epoch=$(date -d "{{meeting_date}}" +%s 2>/dev/null || date -jf "%Y-%m-%d" "{{meeting_date}}" +%s);
+  now_epoch=$(date +%s);
+  days_until=$(( (meeting_epoch - now_epoch) / 86400 ));
+  if [ ! -f "{{notice_posted_marker}}" ]; then
+    if [ "$days_until" -le "{{required_notice_days}}" ]; then
+      echo "COMPLIANCE RISK: meeting on {{meeting_date}} is in $days_until days with no notice-posted marker found (requires {{required_notice_days}} days notice)";
+      exit 1;
+    else
+      echo "OK: meeting is $days_until days out, still within the notice window";
+    fi
+  else
+    echo "OK: notice marker found for meeting on {{meeting_date}}";
+  fi
+variables:
+  meeting_date:
+    default: "YYYY-MM-DD"
+    description: Date of the upcoming public meeting.
+  required_notice_days:
+    default: 3
+    description: Minimum days of advance notice required by your jurisdiction's open-meetings law.
+  notice_posted_marker:
+    default: "./notice-posted.marker"
+    description: Path to a file you create once notice has actually been posted (physically and/or online) — its existence is the "done" signal.
+compatible_agents: [generic, claude, codex]
+notes: Required notice periods and posting locations vary significantly by state/locality — confirm your specific statute rather than relying on the example default.

package/jobs/retail/gift-card-liability-reconciliation-check.yaml

@@ -0,0 +1,36 @@
+id: gift-card-liability-reconciliation-check
+version: 1
+name: Gift Card Liability Reconciliation Check
+description: >
+  Compares your POS's outstanding gift card balance against your
+  accounting ledger and flags a mismatch. Use this if outstanding gift
+  card liability has ever drifted out of sync with your books for months
+  before anyone reconciled it at year-end and found a gap.
+category: retail
+tags: [retail, gift-cards, reconciliation, finance]
+schedule: "0 7 1 * *"
+timezone: "UTC"
+runner: shell
+command: >
+  pos="{{pos_outstanding_balance_usd}}";
+  ledger="{{ledger_outstanding_balance_usd}}";
+  tolerance="{{tolerance_usd}}";
+  diff=$(awk -v p="$pos" -v l="$ledger" 'BEGIN{d=p-l; if (d<0) d=-d; printf "%.2f", d}');
+  if awk -v d="$diff" -v t="$tolerance" 'BEGIN{exit !(d > t)}'; then
+    echo "MISMATCH: POS shows \$$pos outstanding, ledger shows \$$ledger (diff \$$diff)";
+    exit 1;
+  else
+    echo "OK: POS and ledger outstanding gift card balances match within tolerance";
+  fi
+variables:
+  pos_outstanding_balance_usd:
+    default: 0
+    description: Total outstanding gift card balance per your POS system's report.
+  ledger_outstanding_balance_usd:
+    default: 0
+    description: Total outstanding gift card liability per your accounting ledger.
+  tolerance_usd:
+    default: 25.00
+    description: Acceptable discrepancy in dollars before flagging.
+compatible_agents: [generic, claude, codex]
+notes: A growing gap over several months usually points at a systemic sync issue between POS and accounting, not a one-time error — worth escalating rather than just re-running this each month.

package/jobs/retail/return-fraud-pattern-check.yaml

@@ -0,0 +1,39 @@
+id: return-fraud-pattern-check
+version: 1
+name: Return Fraud Pattern Check
+description: >
+  Checks recent returns for patterns that look like abuse — the same
+  customer returning unusually often, or a spike in receiptless returns —
+  instead of treating every return as an isolated, no-questions-asked
+  event. Use this if return fraud has ever quietly eaten margin for
+  months because nobody was looking at returns in aggregate.
+category: retail
+tags: [retail, returns, fraud, loss-prevention]
+schedule: "0 7 * * 1"
+timezone: "UTC"
+runner: shell
+command: >
+  awk -F',' -v max_returns="{{max_returns_per_customer}}" '
+    NR==1 {next}
+    { count[$2]++; if ($3 == "no-receipt") noreceipt++; total++ }
+    END {
+      for (cust in count) {
+        if (count[cust] >= max_returns) {
+          printf "FREQUENT RETURNER: %s — %d returns in the period\n", cust, count[cust];
+        }
+      }
+      if (total > 0) {
+        pct = (noreceipt / total) * 100;
+        printf "no-receipt returns: %.0f%% of %d total\n", pct, total;
+      }
+    }
+  ' "{{returns_csv_path}}"
+variables:
+  returns_csv_path:
+    default: "./returns-log.csv"
+    description: "Path to a CSV with columns: return_id,customer_identifier,receipt_status (receipt/no-receipt) — one row per return in the period."
+  max_returns_per_customer:
+    default: 5
+    description: Number of returns from the same customer in the period that counts as worth a closer look.
+compatible_agents: [generic, claude, codex]
+notes: A flagged pattern is a prompt to look closer, not proof of fraud — plenty of frequent returners are just picky shoppers, not scammers.

package/jobs/veterinary/diagnostic-equipment-calibration-check.yaml

@@ -0,0 +1,35 @@
+id: diagnostic-equipment-calibration-check
+version: 1
+name: Diagnostic Equipment Calibration Check
+description: >
+  Tracks calibration due dates for in-house diagnostic equipment (x-ray,
+  in-house lab analyzers, ultrasound) and warns before any lapse. Use this
+  if a lab result has ever been called into question because equipment
+  calibration had quietly lapsed and nobody noticed until an audit.
+category: veterinary
+tags: [veterinary, equipment, calibration, compliance]
+schedule: "0 7 * * 1"
+timezone: "UTC"
+runner: shell
+command: >
+  awk -F',' -v days="{{warn_days_before}}" '
+    NR==1 {next}
+    {
+      cmd = "date -d \"" $2 "\" +%s 2>/dev/null || date -j -f %Y-%m-%d \"" $2 "\" +%s 2>/dev/null";
+      cmd | getline due_epoch; close(cmd);
+      "date +%s" | getline now_epoch; close("date +%s");
+      diff_days = (due_epoch - now_epoch) / 86400;
+      if (diff_days <= days) {
+        printf "CALIBRATION DUE: %s — due %s (%d days)\n", $1, $2, diff_days;
+      }
+    }
+  ' "{{equipment_csv_path}}"
+variables:
+  equipment_csv_path:
+    default: "./diagnostic-equipment-calibration.csv"
+    description: "Path to a CSV with columns: equipment_name,calibration_due_date (YYYY-MM-DD)."
+  warn_days_before:
+    default: 14
+    description: How many days before calibration is due to start warning.
+compatible_agents: [generic, claude, codex]
+notes: Take equipment out of clinical use once calibration lapses rather than continuing to trust its readings until the service tech arrives.

package/jobs/veterinary/surgery-prep-check.yaml

@@ -0,0 +1,30 @@
+id: surgery-prep-check
+version: 1
+name: Surgery Prep Check
+description: >
+  Checks tomorrow's scheduled surgeries for missing pre-op bloodwork or
+  signed consent forms. Use this if a surgery has ever had to be
+  rescheduled the morning of because consent wasn't signed or bloodwork
+  hadn't been run, and nobody checked the night before.
+category: veterinary
+tags: [veterinary, surgery, pre-op, consent]
+schedule: "0 17 * * *"
+timezone: "UTC"
+runner: shell
+command: >
+  tomorrow=$(date -d "+1 day" +%Y-%m-%d 2>/dev/null || date -v+1d +%Y-%m-%d);
+  awk -F',' -v tomorrow="$tomorrow" '
+    NR==1 {next}
+    $2 == tomorrow {
+      missing = "";
+      if ($3 != "done") missing = missing " bloodwork";
+      if ($4 != "signed") missing = missing " consent";
+      if (missing != "") printf "NOT READY: %s (%s) — missing:%s\n", $1, $5, missing;
+    }
+  ' "{{surgery_schedule_csv_path}}"
+variables:
+  surgery_schedule_csv_path:
+    default: "./surgery-schedule.csv"
+    description: "Path to a CSV with columns: pet_name,surgery_date (YYYY-MM-DD),bloodwork_status (done/pending),consent_status (signed/pending),owner_name."
+compatible_agents: [generic, claude, codex]
+notes: Run this the evening before so there's still time to call the owner and get bloodwork done or consent signed before the surgery slot.

package/jobs/warehousing/cycle-count-schedule-check.yaml

@@ -0,0 +1,35 @@
+id: cycle-count-schedule-check
+version: 1
+name: Cycle Count Schedule Adherence Check
+description: >
+  Checks whether scheduled cycle counts actually happened on time, zone by
+  zone. Use this if a cycle count program has ever quietly stopped
+  happening for a whole section of the warehouse because nobody was
+  tracking adherence to the schedule itself, only the count results.
+category: warehousing
+tags: [warehousing, cycle-count, schedule, inventory]
+schedule: "0 8 * * 1"
+timezone: "UTC"
+runner: shell
+command: >
+  today=$(date +%s);
+  awk -F',' -v days="{{overdue_after_days}}" -v today="$today" '
+    NR==1 {next}
+    {
+      cmd = "date -d \"" $2 "\" +%s 2>/dev/null || date -j -f %Y-%m-%d \"" $2 "\" +%s 2>/dev/null";
+      cmd | getline last_count_epoch; close(cmd);
+      age_days = (today - last_count_epoch) / 86400;
+      if (age_days >= days) {
+        printf "OVERDUE: zone %s — last counted %s (%d days ago)\n", $1, $2, age_days;
+      }
+    }
+  ' "{{cycle_count_log_csv_path}}"
+variables:
+  cycle_count_log_csv_path:
+    default: "./cycle-count-log.csv"
+    description: "Path to a CSV with columns: zone_name,last_count_date (YYYY-MM-DD)."
+  overdue_after_days:
+    default: 30
+    description: Days since the last cycle count before a zone counts as overdue for its next one.
+compatible_agents: [generic, claude, codex]
+notes: This checks schedule adherence only — pair with `inventory-count-discrepancy-check` for what the counts themselves turn up.

package/jobs/warehousing/forklift-inspection-check.yaml

@@ -0,0 +1,36 @@
+id: forklift-inspection-check
+version: 1
+name: Forklift Daily Safety Inspection Check
+description: >
+  Checks that each forklift's required daily pre-use inspection was
+  actually logged today. Use this if a forklift has ever been operated
+  on a shift with no inspection logged, which is exactly what an OSHA
+  audit will ask to see records of.
+category: warehousing
+tags: [warehousing, forklift, safety, compliance]
+schedule: "0 10 * * *"
+timezone: "UTC"
+runner: shell
+command: >
+  today=$(date +%Y-%m-%d);
+  missing=$(awk -F',' -v today="$today" -v fleet="{{forklift_ids}}" '
+    BEGIN { n = split(fleet, ids, ","); }
+    $2 == today { logged[$1] = 1 }
+    END {
+      for (i = 1; i <= n; i++) {
+        id = ids[i];
+        gsub(/^ +| +$/, "", id);
+        if (!(id in logged)) print "NOT INSPECTED TODAY: " id;
+      }
+    }
+  ' "{{inspection_log_csv_path}}");
+  if [ -n "$missing" ]; then echo "$missing"; exit 1; else echo "OK: all forklifts inspected today"; fi
+variables:
+  inspection_log_csv_path:
+    default: "./forklift-inspection-log.csv"
+    description: "Path to a CSV with columns: forklift_id,inspection_date (YYYY-MM-DD)."
+  forklift_ids:
+    default: "FL-1,FL-2"
+    description: Comma-separated list of forklift IDs that must each have a logged inspection today.
+compatible_agents: [generic, claude, codex]
+notes: A forklift with a failed inspection item should be pulled from service immediately — this job only checks that the inspection was logged, not what it found.

package/lib/deploy.js

@@ -0,0 +1,84 @@
+// Turns a resolved crondex job into a deployment artifact — pulled out of
+// bin/crondex.js's `deploy` command so it's unit testable (see test/deploy.test.js).
+
+const PLACEHOLDER_RE = /\{\{\s*(\w+)\s*\}\}/g;
+
+// Merges a job's `variables` defaults with any user-supplied overrides.
+export function resolveVariables(job, overrides = {}) {
+  const values = {};
+  for (const [name, spec] of Object.entries(job.variables ?? {})) {
+    values[name] = name in overrides ? overrides[name] : spec.default;
+  }
+  return values;
+}
+
+// crondex substitutes {{placeholders}} as literal text — this mirrors that exactly,
+// leaving a placeholder untouched if no value was resolved for it (rather than
+// silently dropping it, which would produce a broken script with no warning).
+export function substitutePlaceholders(text, values) {
+  return text.replace(PLACEHOLDER_RE, (match, name) => (name in values ? String(values[name]) : match));
+}
+
+// hybrid jobs support both — shell/agent-prompt jobs only support their one mode.
+export function pickMode(job, requestedMode) {
+  if (job.runner === "shell") return "script";
+  if (job.runner === "agent-prompt") return "prompt";
+  return requestedMode === "prompt" ? "prompt" : "script";
+}
+
+function escapeSingleQuotes(text) {
+  return text.replace(/'/g, `'"'"'`);
+}
+
+// Flattens a (possibly multi-line) resolved command/prompt into one crontab line.
+// isPrompt jobs can't assume any particular agent CLI syntax, so the line defers to
+// a CRONDEX_AGENT_CLI env var the user sets themselves (e.g. `export
+// CRONDEX_AGENT_CLI="claude -p"`) rather than guessing wrong.
+export function buildCrontabLine(job, resolvedText, isPrompt) {
+  const flat = resolvedText.trim().replace(/\s*\n\s*/g, " ");
+  const escaped = escapeSingleQuotes(flat);
+  const body = isPrompt
+    ? `\${CRONDEX_AGENT_CLI:?set CRONDEX_AGENT_CLI to your agent CLI invocation, e.g. "claude -p"} '${escaped}'`
+    : `bash -lc '${escaped}'`;
+  return `${job.schedule} ${body} # crondex:${job.id}`;
+}
+
+// Builds a ready-to-commit GitHub Actions workflow file for the job. GitHub Actions
+// schedules always run in UTC regardless of the `cron:` string's intent, so a
+// non-UTC job gets a visible warning comment rather than silently firing at the
+// wrong hour.
+export function buildGithubActionsWorkflow(job, { command, prompt, mode }) {
+  const lines = [];
+  lines.push(`name: ${job.name}`);
+  lines.push(`# Generated by \`crondex deploy ${job.id} --target github-actions\` from ${job.path}.`);
+  if (job.timezone && job.timezone !== "UTC") {
+    lines.push(`# NOTE: this job's schedule ("${job.schedule}") is defined in ${job.timezone}, but GitHub`);
+    lines.push(`# Actions cron always runs in UTC — adjust the hour field(s) below if timing matters.`);
+  }
+  lines.push("");
+  lines.push("on:");
+  lines.push("  schedule:");
+  lines.push(`    - cron: "${job.schedule}"`);
+  lines.push("  workflow_dispatch: {}");
+  lines.push("");
+  lines.push("jobs:");
+  lines.push("  run:");
+  lines.push("    runs-on: ubuntu-latest");
+  lines.push("    steps:");
+  lines.push("      - uses: actions/checkout@v4");
+  if (mode === "script") {
+    lines.push("      - name: run job");
+    lines.push("        run: |");
+    for (const l of command.trimEnd().split("\n")) lines.push(`          ${l}`);
+  } else {
+    lines.push("      - name: run job (agent-prompt)");
+    lines.push(
+      "        # TODO: wire up your agent CLI/action here — this step only prints the resolved prompt."
+    );
+    lines.push("        run: |");
+    lines.push("          cat <<'CRONDEX_PROMPT'");
+    for (const l of prompt.trimEnd().split("\n")) lines.push(`          ${l}`);
+    lines.push("          CRONDEX_PROMPT");
+  }
+  return lines.join("\n") + "\n";
+}

package/lib/duplicates-allowlist.js

@@ -0,0 +1,18 @@
+// Job pairs that score above the near-duplicate thresholds but were reviewed and
+// confirmed genuinely distinct — recorded here so scripts/check-duplicates.js stops
+// re-flagging (and CI stops failing on) the same reviewed pair every run. Order of
+// ids within a pair doesn't matter.
+//
+// Add an entry only after actually comparing the two jobs — this is a record of a
+// human decision, not a way to silence the check.
+export const ALLOWED_DUPLICATE_PAIRS = [
+  [
+    "food-cost-percentage-watch",
+    "labor-cost-percentage-watch",
+    "Same benchmark-against-sales pattern, different cost categories (food vs. labor) — intentionally parallel jobs, not a copy-paste duplicate.",
+  ],
+];
+
+export function isAllowedPair(idA, idB) {
+  return ALLOWED_DUPLICATE_PAIRS.some(([x, y]) => (x === idA && y === idB) || (x === idB && y === idA));
+}