hansjone/dsh-ops-cron
1
0
Fork 0
mirror of https://github.com/hansjone/dsh-ops-cron.git synced 2026-10-09 00:43:22 +08:00
Code Issues Projects Releases Packages Wiki Activity Actions

Isolate IM cron tools and trust-gate read APIs.

Browse source 
Scope list/pause/delete to the calling chat, bind IM delivery to that peer, ignore client job ids, require trusted Host for GETs, and wrap mirrored summaries as system reminders.

Co-authored-by: Cursor <cursoragent@cursor.com>
This commit is contained in:
oliver 2026-09-06 14:45:37 +08:00
parent 29d946f3dd
commit 67238d746e
7 changed files with 222 additions and 29 deletions
Download patch file Download diff file Expand all files Collapse all files

24
test/host.test.js
View file

@ -237,6 +237,30 @@ test('shipped HTTP handler: create, list, run-now, history', async (t) => {
assert.deepEqual(visible.body.visible, ['other'])
})
test('createJob ignores client-supplied id to prevent overwrite', async (t) => {
const dir = await mkdtemp(join(tmpdir(), 'dsh-ops-cron-'))
t.after(() => rm(dir, { recursive: true, force: true }))
const service = createHostService({
filePath: join(dir, 'store.json'),
now: () => Date.parse('2026-08-24T01:00:00.000Z'),
})
const first = await service.createJob({
name: 'keep-me',
prompt: 'first',
schedule: { kind: 'cron', expr: '0 9 * * *', timezone: 'Asia/Shanghai' },
})
const second = await service.createJob({
id: first.id,
name: 'attacker',
prompt: 'overwrite?',
schedule: { kind: 'cron', expr: '0 10 * * *', timezone: 'Asia/Shanghai' },
})
assert.notEqual(second.id, first.id)
const listed = await service.listJobs()
assert.equal(listed.find((job) => job.id === first.id)?.name, 'keep-me')
assert.equal(listed.find((job) => job.id === second.id)?.name, 'attacker')
})
test('POST /runs/:id/open reveals the run session id', async (t) => {
const dir = await mkdtemp(join(tmpdir(), 'dsh-ops-cron-'))
t.after(() => rm(dir, { recursive: true, force: true }))