chore: move scheduled jobs to github actions (#45)

Author: MaxLinCode

.github/workflows/reconcile-google-calendar.yml

@@ -0,0 +1,23 @@
+name: Reconcile Google Calendar
+
+on:
+  schedule:
+    - cron: "*/30 * * * *"
+  workflow_dispatch:
+
+jobs:
+  reconcile-google-calendar:
+    runs-on: ubuntu-latest
+    timeout-minutes: 5
+    steps:
+      - name: Trigger protected reconciliation route
+        env:
+          APP_BASE_URL: ${{ secrets.APP_BASE_URL }}
+          CRON_SECRET: ${{ secrets.CRON_SECRET }}
+        run: |
+          test -n "$APP_BASE_URL"
+          test -n "$CRON_SECRET"
+          curl --fail-with-body --silent --show-error \
+            -X POST \
+            -H "authorization: Bearer $CRON_SECRET" \
+            "$APP_BASE_URL/api/cron/reconcile-google-calendar"

.github/workflows/send-followups.yml

@@ -0,0 +1,23 @@
+name: Send Follow-Ups
+
+on:
+  schedule:
+    - cron: "*/15 * * * *"
+  workflow_dispatch:
+
+jobs:
+  send-followups:
+    runs-on: ubuntu-latest
+    timeout-minutes: 5
+    steps:
+      - name: Trigger protected follow-up route
+        env:
+          APP_BASE_URL: ${{ secrets.APP_BASE_URL }}
+          CRON_SECRET: ${{ secrets.CRON_SECRET }}
+        run: |
+          test -n "$APP_BASE_URL"
+          test -n "$CRON_SECRET"
+          curl --fail-with-body --silent --show-error \
+            -X POST \
+            -H "authorization: Bearer $CRON_SECRET" \
+            "$APP_BASE_URL/api/cron/send-followups"

README.md

@@ -106,7 +106,11 @@ Atlas no longer exposes public planner/debug mutation routes. The intended exter
 - `GET /api/google-calendar/oauth/callback`
 - protected cron routes that require `Authorization: Bearer $CRON_SECRET`
 
-The production deployment schedules follow-up dispatch on Vercel every 10 minutes via `GET /api/cron/send-followups`.
+The production deployment serves protected cron routes from Vercel, but GitHub Actions owns the schedules:
+- [send-followups.yml](/Users/maxlin/Code/Atlas/.github/workflows/send-followups.yml) calls `POST /api/cron/send-followups` every 15 minutes
+- [reconcile-google-calendar.yml](/Users/maxlin/Code/Atlas/.github/workflows/reconcile-google-calendar.yml) calls `POST /api/cron/reconcile-google-calendar` every 30 minutes
+
+Both workflows use the `APP_BASE_URL` and `CRON_SECRET` repository secrets.
 
 ## How We Work
 

docs/workflows/production-deploy-checklist.md

@@ -109,11 +109,13 @@ curl "https://api.telegram.org/bot$TELEGRAM_BOT_TOKEN/getWebhookInfo"
 
 ### Cron protection
 
-1. Confirm Vercel Cron Jobs includes `/api/cron/send-followups` on the production deployment.
-2. Call the follow-up cron route without `Authorization: Bearer $CRON_SECRET` and confirm it is rejected.
-3. Call the follow-up cron route with the correct bearer token and confirm it succeeds.
-4. Call the reconcile route without `Authorization: Bearer $CRON_SECRET` and confirm it is rejected.
-5. Call the reconcile route with the correct bearer token and confirm it succeeds.
+1. Confirm the GitHub Actions workflows [`.github/workflows/send-followups.yml`](/Users/maxlin/Code/Atlas/.github/workflows/send-followups.yml) and [`.github/workflows/reconcile-google-calendar.yml`](/Users/maxlin/Code/Atlas/.github/workflows/reconcile-google-calendar.yml) are enabled with `APP_BASE_URL` and `CRON_SECRET` repository secrets.
+2. Confirm `send-followups.yml` runs every 15 minutes and `reconcile-google-calendar.yml` runs every 30 minutes.
+3. Confirm both workflows expose manual `workflow_dispatch` for smoke tests.
+4. Call the follow-up cron route without `Authorization: Bearer $CRON_SECRET` and confirm it is rejected.
+5. Call the follow-up cron route with the correct bearer token and confirm it succeeds.
+6. Call the reconcile route without `Authorization: Bearer $CRON_SECRET` and confirm it is rejected.
+7. Call the reconcile route with the correct bearer token and confirm it succeeds.
 
 ### Basic safety checks
 

docs/workflows/vercel-telegram-webhook.md

@@ -72,6 +72,7 @@ curl "https://api.telegram.org/bot$TELEGRAM_BOT_TOKEN/getWebhookInfo"
 
 ## Notes
 
+- Vercel only hosts the protected cron endpoints. Scheduled follow-up dispatch and Google Calendar reconciliation now come from GitHub Actions via [`.github/workflows/send-followups.yml`](/Users/maxlin/Code/Atlas/.github/workflows/send-followups.yml) and [`.github/workflows/reconcile-google-calendar.yml`](/Users/maxlin/Code/Atlas/.github/workflows/reconcile-google-calendar.yml), not from Vercel Cron Jobs.
 - Do not log the webhook secret in Vercel function logs or error output.
 - Keep the route handler thin and continue moving persistence and planning behavior into workspace packages.
 - After the first Vercel smoke test, the next backend milestone is replacing the `processInboxItem` stub with planner-owned persistence that reads canonical `inbox_items`, creates validated `tasks`, and records `planner_runs` as operational audit state.

packages/db/src/planner.ts

@@ -2,7 +2,7 @@ import { randomUUID } from "node:crypto";
 
 import type { InboxItem, ScheduleBlock, Task, UserProfile } from "@atlas/core";
 import { buildDefaultUserProfile, buildScheduleBlocksFromTasks } from "@atlas/core";
-import { eq } from "drizzle-orm";
+import { and, eq, isNotNull, isNull, lte } from "drizzle-orm";
 import { drizzle } from "drizzle-orm/postgres-js";
 import postgres from "postgres";
 
@@ -160,6 +160,8 @@ export interface FollowUpRuntimeStore {
   markFollowUpReminderSent(taskIds: string[], sentAt: string): Promise<void>;
 }
 
+const FOLLOWUP_REMINDER_DELAY_MS = 2 * 60 * 60 * 1000;
+
 type StoredInboxItem = InboxItem;
 
 type StoredTask = Omit<Task, "createdAt"> & {
@@ -598,7 +600,7 @@ class InMemoryInboxProcessingStore implements InboxProcessingStore, FollowUpRunt
         task.lifecycleState === "awaiting_followup" &&
         task.lastFollowupAt &&
         !task.followupReminderSentAt &&
-        Date.parse(task.lastFollowupAt) + 2 * 60 * 60 * 1000 <= Date.parse(now)
+        Date.parse(task.lastFollowupAt) + FOLLOWUP_REMINDER_DELAY_MS <= Date.parse(now)
       ) {
         due.push({ ...task, dueType: "reminder" });
       }
@@ -1310,59 +1312,36 @@ export class PostgresInboxProcessingStore implements InboxProcessingStore, Follo
   }
 
   async listDueFollowUpTasks(now = new Date().toISOString()): Promise<FollowUpDueTask[]> {
-    const taskRows = await this.db
+    const initialRows = await this.db
       .select()
       .from(tasks)
-      .where(eq(tasks.lifecycleState, "scheduled"));
+      .where(
+        and(
+          eq(tasks.lifecycleState, "scheduled"),
+          lte(tasks.scheduledEndAt, new Date(now))
+        )
+      );
 
-    const awaitingRows = await this.db
+    const reminderRows = await this.db
       .select()
       .from(tasks)
-      .where(eq(tasks.lifecycleState, "awaiting_followup"));
+      .where(
+        and(
+          eq(tasks.lifecycleState, "awaiting_followup"),
+          isNull(tasks.followupReminderSentAt),
+          isNotNull(tasks.lastFollowupAt),
+          lte(tasks.lastFollowupAt, new Date(Date.parse(now) - FOLLOWUP_REMINDER_DELAY_MS))
+        )
+      );
 
     const due: FollowUpDueTask[] = [];
 
-    for (const task of [...taskRows, ...awaitingRows]) {
-        const parsedTask = {
-          id: task.id,
-          userId: task.userId,
-          sourceInboxItemId: task.sourceInboxItemId,
-          lastInboxItemId: task.lastInboxItemId,
-          title: task.title,
-          lifecycleState: task.lifecycleState as Task["lifecycleState"],
-          externalCalendarEventId: task.externalCalendarEventId,
-          externalCalendarId: task.externalCalendarId,
-          scheduledStartAt: task.scheduledStartAt?.toISOString() ?? null,
-          scheduledEndAt: task.scheduledEndAt?.toISOString() ?? null,
-          calendarSyncStatus: task.calendarSyncStatus as Task["calendarSyncStatus"],
-          calendarSyncUpdatedAt: task.calendarSyncUpdatedAt?.toISOString() ?? null,
-          rescheduleCount: task.rescheduleCount,
-          lastFollowupAt: task.lastFollowupAt?.toISOString() ?? null,
-          followupReminderSentAt: task.followupReminderSentAt?.toISOString() ?? null,
-          completedAt: task.completedAt?.toISOString() ?? null,
-          archivedAt: task.archivedAt?.toISOString() ?? null,
-          priority: task.priority as Task["priority"],
-          urgency: task.urgency as Task["urgency"],
-          createdAt: task.createdAt.toISOString()
-        };
-
-      if (
-        parsedTask.lifecycleState === "scheduled" &&
-        parsedTask.scheduledEndAt !== null &&
-        Date.parse(parsedTask.scheduledEndAt) <= Date.parse(now)
-      ) {
-        due.push({ ...parsedTask, dueType: "initial" });
-        continue;
-      }
+    for (const task of initialRows) {
+      due.push({ ...toPersistedTask(task), dueType: "initial" });
+    }
 
-      if (
-        parsedTask.lifecycleState === "awaiting_followup" &&
-        parsedTask.lastFollowupAt !== null &&
-        parsedTask.followupReminderSentAt === null &&
-        Date.parse(parsedTask.lastFollowupAt) + 2 * 60 * 60 * 1000 <= Date.parse(now)
-      ) {
-        due.push({ ...parsedTask, dueType: "reminder" });
-      }
+    for (const task of reminderRows) {
+      due.push({ ...toPersistedTask(task), dueType: "reminder" });
     }
 
     return due.sort((left, right) => {
@@ -1376,32 +1355,16 @@ export class PostgresInboxProcessingStore implements InboxProcessingStore, Follo
     const taskRows = await this.db
       .select()
       .from(tasks)
-      .where(eq(tasks.userId, userId));
+      .where(
+        and(
+          eq(tasks.userId, userId),
+          eq(tasks.lifecycleState, "awaiting_followup"),
+          isNotNull(tasks.lastFollowupAt)
+        )
+      );
 
     return taskRows
-      .filter((task) => task.lifecycleState === "awaiting_followup" && task.lastFollowupAt !== null)
-      .map((task) => ({
-        id: task.id,
-        userId: task.userId,
-        sourceInboxItemId: task.sourceInboxItemId,
-        lastInboxItemId: task.lastInboxItemId,
-        title: task.title,
-        lifecycleState: task.lifecycleState as Task["lifecycleState"],
-        externalCalendarEventId: task.externalCalendarEventId,
-        externalCalendarId: task.externalCalendarId,
-        scheduledStartAt: task.scheduledStartAt?.toISOString() ?? null,
-        scheduledEndAt: task.scheduledEndAt?.toISOString() ?? null,
-        calendarSyncStatus: task.calendarSyncStatus as Task["calendarSyncStatus"],
-        calendarSyncUpdatedAt: task.calendarSyncUpdatedAt?.toISOString() ?? null,
-        rescheduleCount: task.rescheduleCount,
-        lastFollowupAt: task.lastFollowupAt?.toISOString() ?? null,
-        followupReminderSentAt: task.followupReminderSentAt?.toISOString() ?? null,
-        completedAt: task.completedAt?.toISOString() ?? null,
-        archivedAt: task.archivedAt?.toISOString() ?? null,
-        priority: task.priority as Task["priority"],
-        urgency: task.urgency as Task["urgency"],
-        createdAt: task.createdAt.toISOString()
-      }))
+      .map((task) => toPersistedTask(task))
       .sort(
         (left, right) =>
           Date.parse(left.lastFollowupAt ?? left.scheduledEndAt ?? new Date(0).toISOString()) -
@@ -1499,6 +1462,31 @@ export class PostgresInboxProcessingStore implements InboxProcessingStore, Follo
   }
 }
 
+function toPersistedTask(task: typeof tasks.$inferSelect): Task {
+  return {
+    id: task.id,
+    userId: task.userId,
+    sourceInboxItemId: task.sourceInboxItemId,
+    lastInboxItemId: task.lastInboxItemId,
+    title: task.title,
+    lifecycleState: task.lifecycleState as Task["lifecycleState"],
+    externalCalendarEventId: task.externalCalendarEventId,
+    externalCalendarId: task.externalCalendarId,
+    scheduledStartAt: task.scheduledStartAt?.toISOString() ?? null,
+    scheduledEndAt: task.scheduledEndAt?.toISOString() ?? null,
+    calendarSyncStatus: task.calendarSyncStatus as Task["calendarSyncStatus"],
+    calendarSyncUpdatedAt: task.calendarSyncUpdatedAt?.toISOString() ?? null,
+    rescheduleCount: task.rescheduleCount,
+    lastFollowupAt: task.lastFollowupAt?.toISOString() ?? null,
+    followupReminderSentAt: task.followupReminderSentAt?.toISOString() ?? null,
+    completedAt: task.completedAt?.toISOString() ?? null,
+    archivedAt: task.archivedAt?.toISOString() ?? null,
+    priority: task.priority as Task["priority"],
+    urgency: task.urgency as Task["urgency"],
+    createdAt: task.createdAt.toISOString()
+  };
+}
+
 const defaultInMemoryStore = new InMemoryInboxProcessingStore();
 attachGoogleCalendarConnectionStoreToTasks({
   getTasks: () => defaultInMemoryStore.listTasks(),

vercel.json

@@ -1,11 +1,5 @@
 {
   "$schema": "https://openapi.vercel.sh/vercel.json",
-  "crons": [
-    {
-      "path": "/api/cron/send-followups",
-      "schedule": "*/10 * * * *"
-    }
-  ],
   "buildCommand": "pnpm build",
   "installCommand": "pnpm install --frozen-lockfile"
 }