Five copies of formatRelativeTime had drifted across apps/web into three
different output vocabularies, so the same timestamp read differently
depending on which surface rendered it. lib/utils.ts is now the single
implementation.
Deletes the private copies in task-item, automations/format-utils,
commit-detail-panel, and kanban/graph2-task-pipeline; commit-detail-panel
adopts the shared short form rather than keeping its long-form wording.
Adds bucket-boundary unit tests for the shared function.
* feat: add automation system with triggers, backend-driven metadata, and PR association
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
* feat(automations): execution_mode + flat /settings/automations
Layered on top of #406's automation subsystem:
- Add execution_mode to Automation (task | run, default task). Run-mode
firings create an ephemeral kanban-hidden task tagged with
origin=automation_run. The session pipeline still runs against it, but
users surface them through the AutomationRun history instead of the
kanban. Pragmatic shim while AutomationRun-as-true-session-owner is
deferred to a follow-up.
- Thread IsEphemeral + Origin through ReviewTaskRequest +
reviewTaskCreatorAdapter so the orchestrator can create the hidden
task in one call.
- Run-mode always auto-starts (the user never sees the task to drag).
- Flat /settings/automations route replaces the per-workspace sidebar
entry. Picks the only workspace, shows a picker for many, or shows
a CTA for zero workspaces.
- Editor exposes execution mode + table shows it as a badge column.
Spec at docs/specs/office/automations-settings.md documents the design,
deferred items, and scenarios.
* feat(automations): per-automation repository picker
Adds a repository_id field on Automation so users can pin scheduled and
webhook automations to a specific workspace repository instead of always
falling through to "first repo". github_pr triggers ignore the field and
keep using the PR's own repo — the editor disables the picker with a
hint when a PR trigger is selected.
Backend:
- repository_id column folded into the canonical CREATE TABLE (no
migration needed — PR #406 introduces the table).
- RepositoryID threaded through model, DTOs, store INSERT/UPDATE, and
service.CreateAutomation.
- resolveAutomationRepository prefers the explicit ID, falls back to
workspace-first on empty.
Frontend:
- repository_id on the Automation TS type + Create/Update payloads.
- Repository SelectField in ConfigSection backed by useRepositories;
"Auto" sentinel represents the empty/fallback choice.
- Disabled with help-text for github_pr triggers.
* feat(automations): repo picker shows discovered repos too
Matches the task-creation dialog's UX: the editor's repository picker
now lists registered workspace repos AND filesystem-discovered repos
under the workspace's roots. Picking a discovered repo registers it
with the workspace at save time (via createRepositoryAction), captures
the new id, and writes it onto the automation. After the first save
the picker selection is promoted from "discovered" to "registered" so
re-saving doesn't re-register.
Form state holds a RepositorySelection union (auto | registered |
discovered) rather than a plain id string so the picker can carry the
metadata needed to register.
github_pr triggers still disable the picker — PR events always override
any configured repo with the PR's own.
* fix(automations): add idempotent ALTERs for in-branch columns
The canonical CREATE TABLE covers fresh installs, but `CREATE TABLE
IF NOT EXISTS` is a no-op for DBs already initialised from an earlier
commit on this branch (PR #406's original schema). Without these
ALTERs, dev DBs created before execution_mode + repository_id existed
on the row hit "no such column" errors.
Three idempotent ALTERs: task_title_template, execution_mode,
repository_id. SQLite returns a duplicate-column error when the column
already exists; we swallow it.
* fix(automations): use generateUUID in non-secure contexts
crypto.randomUUID is only defined in secure contexts (HTTPS or
localhost). PR #406's editor used it directly, which throws "crypto.
randomUUID is not a function" when the app is reached via a plain
hostname like nova:58204. Switch to lib/utils.generateUUID, which
falls back to a Math.random-based implementation when crypto isn't
available.
* fix(automations): polish run-mode lifecycle, validation, and editor UX
Run-mode automations were partly broken end-to-end:
- workflow_id was sent for ephemeral tasks (rejected by task service)
and was required by the editor + automation service, so "Create
Automation" was always disabled and silently failed
- a permission_request hanging the agent left the run pinned at
task_created forever; nothing reaped the ephemeral worktree
- trigger config inputs (cron, branches, authors) did not re-sync
with the loaded automation on page reload
- runs row never linked back to the underlying task for task-mode
automations, and the table header highlighted on hover
Backend
- skip workflow fields in CreateReviewTask / StartTask for run-mode
- relax automation.Service.CreateAutomation: workflow only required
for task-mode
- auto-reject permission prompts on ephemeral automation tasks and
mark the AutomationRun failed with the requested action
- on agent completion / failure for ephemeral automation tasks,
flip the run to succeeded/failed and remove the worktree + branch
immediately (new RunStatusSucceeded + MarkRunSucceededByTaskID)
- wire worktree.Manager into the orchestrator service
Frontend
- show Execution Mode first; hide Workflow / Workflow Step in run-mode
- canSave no longer requires workflow in run-mode
- surface save errors via toast instead of silent failure
- sync trigger-config local input state with loaded prop value
- runs table: clickable row → /tasks/<id> for task-mode runs,
non-clickable in run-mode; suppress header hover
* fix(automations): address PR review feedback
Backend
- automation/scheduler.go: parseCronFields returns an error for
unsupported expressions instead of silently defaulting to hourly
- automation/webhook.go: constant-time secret compare, header-only
(no more ?secret= query param), reject with 409 when no enabled
webhook trigger exists
- automation/service.go: enforce max_concurrent_runs in FireTrigger
via maybeSkipForConcurrencyCap (records a skipped run when capped)
- cmd/kandev/e2e_reset.go: surface automation delete errors as 500
instead of swallowing them
- orchestrator/event_handlers_git.go: auto-reject permission with
cancelled=true so the message status is "rejected" and the session
isn't flipped back to running
- orchestrator/event_handlers_agent.go: finalizeAutomationRunIfEphemeral
now runs at the top of handleAgentFailed, before the resume/recoverable
early returns, so session-backed run-mode failures get cleaned up
Frontend
- state/slices/automations/automations-slice.ts: declare _get/_api so
the call site's arity matches and CodeQL stops flagging ignored
trailing arguments
- automations/schedule-selector.tsx: clearing the input now propagates
""; cron is trimmed before validation+save
- automations/triggers-section.tsx: switching to webhook mode deletes
the existing scheduled/condition triggers so they don't keep firing
hidden in the background
- automations/trigger-configs/github-ci-config.tsx: useEffect re-sync
for checkNames, matching the other trigger configs
- hooks/domains/settings/use-automations.ts: per-workspace fetch via
loadedWorkspaceRef + render-safe loadedWorkspaceId state;
inFlightWorkspaceRef discards stale responses after workspace switch
---------
Co-authored-by: Carlos Florêncio <carlosmflorencio@gmail.com>
Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com>
Co-authored-by: Kandev Agent <agent@kandev.dev>
Carlos Florêncio