CHANGELOG.md

@objectstack/plugin-trigger-schedule

15.1.1

Patch Changes

• @objectstack/spec@15.1.1
• @objectstack/core@15.1.1

15.1.0

Patch Changes

• Updated dependencies [f531a26]
• Updated dependencies [f531a26]
• Updated dependencies [f531a26]
• Updated dependencies [f531a26]
• Updated dependencies [f531a26]
• Updated dependencies [f531a26]
• Updated dependencies [3fe9df1]
• Updated dependencies [f531a26]
• Updated dependencies [f531a26]
• Updated dependencies [f531a26]
• Updated dependencies [f531a26]
• Updated dependencies [f531a26]
• Updated dependencies [f531a26]
• Updated dependencies [f531a26]
• Updated dependencies [f531a26]
• Updated dependencies [f531a26]
• Updated dependencies [f531a26]
• Updated dependencies [f531a26]
• Updated dependencies [f531a26]
• Updated dependencies [4109153]
• Updated dependencies [f531a26]
• Updated dependencies [f531a26]
• Updated dependencies [f531a26]
• Updated dependencies [f531a26]
• Updated dependencies [f531a26]
• Updated dependencies [f531a26]
• Updated dependencies [627f225]
• Updated dependencies [f531a26]
• Updated dependencies [f531a26]
• Updated dependencies [f531a26]
  • @objectstack/spec@15.1.0
  • @objectstack/core@15.1.0

15.0.0

Patch Changes

• Updated dependencies [28b7c28]
• Updated dependencies [13749ec]
• Updated dependencies [e62c233]
• Updated dependencies [ed61c9b]
• Updated dependencies [31d04d4]
  • @objectstack/spec@15.0.0
  • @objectstack/core@15.0.0

14.8.0

Patch Changes

• Updated dependencies [16b4bf6]
• Updated dependencies [16b4bf6]
• Updated dependencies [10e8983]
• Updated dependencies [607aaf4]
• Updated dependencies [bb71321]
  • @objectstack/spec@14.8.0
  • @objectstack/core@14.8.0

14.7.0

Patch Changes

• Updated dependencies [d6a72eb]
  • @objectstack/spec@14.7.0
  • @objectstack/core@14.7.0

14.6.0

Patch Changes

• Updated dependencies [609cb13]
• Updated dependencies [ce6d151]
  • @objectstack/spec@14.6.0
  • @objectstack/core@14.6.0

14.5.0

Patch Changes

• Updated dependencies [526805e]
• Updated dependencies [d79ca07]
• Updated dependencies [33ebd34]
• Updated dependencies [c044f08]
• Updated dependencies [01274eb]
  • @objectstack/spec@14.5.0
  • @objectstack/core@14.5.0

14.4.0

Patch Changes

• Updated dependencies [7953832]
• Updated dependencies [82e745e]
• Updated dependencies [f3035bd]
• Updated dependencies [82c0d94]
• Updated dependencies [7449476]
  • @objectstack/spec@14.4.0
  • @objectstack/core@14.4.0

14.3.0

Patch Changes

• Updated dependencies [2a71f48]
• Updated dependencies [02f6af4]
• Updated dependencies [c1064f1]
  • @objectstack/spec@14.3.0
  • @objectstack/core@14.3.0

14.2.0

Patch Changes

• Updated dependencies [ac8f029]
• Updated dependencies [4ab9958]
  • @objectstack/spec@14.2.0
  • @objectstack/core@14.2.0

14.1.0

Patch Changes

• Updated dependencies [5a8465f]
• Updated dependencies [7f8620b]
• Updated dependencies [82ba3a6]
  • @objectstack/spec@14.1.0
  • @objectstack/core@14.1.0

14.0.0

Patch Changes

• Updated dependencies [0a8e685]
• Updated dependencies [afa8115]
• Updated dependencies [80f12ca]
• Updated dependencies [e2fa074]
• Updated dependencies [23c8668]
• Updated dependencies [29f017d]
• Updated dependencies [216fa9a]
• Updated dependencies [6c22b12]
  • @objectstack/spec@14.0.0
  • @objectstack/core@14.0.0

13.0.0

Patch Changes

• Updated dependencies [6d83431]
• Updated dependencies [01917c2]
• Updated dependencies [b271691]
• Updated dependencies [a5a1e41]
• Updated dependencies [466adf6]
• Updated dependencies [5be00c3]
• Updated dependencies [466adf6]
• Updated dependencies [2bee609]
• Updated dependencies [fc7e7f7]
  • @objectstack/spec@13.0.0
  • @objectstack/core@13.0.0

12.6.0

Patch Changes

• Updated dependencies [6cebf22]
• Updated dependencies [21420d9]
  • @objectstack/spec@12.6.0
  • @objectstack/core@12.6.0

12.5.0

Patch Changes

• Updated dependencies [8b3d363]
  • @objectstack/spec@12.5.0
  • @objectstack/core@12.5.0

12.4.0

Patch Changes

• Updated dependencies [60dc3ba]
  • @objectstack/spec@12.4.0
  • @objectstack/core@12.4.0

12.3.0

Patch Changes

• Updated dependencies [e7eceec]
  • @objectstack/spec@12.3.0
  • @objectstack/core@12.3.0

12.2.0

Patch Changes

• Updated dependencies [fce8ff4]
• Updated dependencies [3962023]
• Updated dependencies [2bb193d]
• Updated dependencies [0426d27]
• Updated dependencies [da807f7]
• Updated dependencies [4f5b791]
  • @objectstack/spec@12.2.0
  • @objectstack/core@12.2.0

12.1.0

Patch Changes

• Updated dependencies [93e6d02]
  • @objectstack/spec@12.1.0
  • @objectstack/core@12.1.0

12.0.0

Patch Changes

• Updated dependencies [a8df396]
• Updated dependencies [e695fe0]
• Updated dependencies [7c09621]
• Updated dependencies [7709db4]
• Updated dependencies [2082109]
• Updated dependencies [7c09621]
• Updated dependencies [9860de4]
• Updated dependencies [069c205]
  • @objectstack/spec@12.0.0
  • @objectstack/core@12.0.0

11.10.0

Patch Changes

• Updated dependencies [6a9397e]
• Updated dependencies [c0efe5d]
  • @objectstack/spec@11.10.0
  • @objectstack/core@11.10.0

11.9.0

Patch Changes

• Updated dependencies [d3595d9]
  • @objectstack/spec@11.9.0
  • @objectstack/core@11.9.0

11.8.0

Patch Changes

• @objectstack/spec@11.8.0
• @objectstack/core@11.8.0

11.7.0

Patch Changes

• Updated dependencies [5178906]
  • @objectstack/spec@11.7.0
  • @objectstack/core@11.7.0

11.6.0

Patch Changes

• @objectstack/spec@11.6.0
• @objectstack/core@11.6.0

11.5.0

Patch Changes

• Updated dependencies [6ee4f04]
• Updated dependencies [c1e3a65]
  • @objectstack/spec@11.5.0
  • @objectstack/core@11.5.0

11.4.0

Patch Changes

• Updated dependencies [5821c51]
• Updated dependencies [a0fce3f]
  • @objectstack/spec@11.4.0
  • @objectstack/core@11.4.0

11.3.0

Patch Changes

• Updated dependencies [58e8e31]
• Updated dependencies [b4a5df0]
  • @objectstack/spec@11.3.0
  • @objectstack/core@11.3.0

11.2.0

Patch Changes

• Updated dependencies [d0f4b13]
• Updated dependencies [302bdab]
  • @objectstack/spec@11.2.0
  • @objectstack/core@11.2.0

11.1.0

Patch Changes

• Updated dependencies [ce0b4f6]
• Updated dependencies [9ccfcd6]
• Updated dependencies [ecf193f]
• Updated dependencies [51bec81]
• Updated dependencies [3e593a7]
• Updated dependencies [63d5403]
  • @objectstack/core@11.1.0
  • @objectstack/spec@11.1.0

11.0.0

Patch Changes

• ad143ce: fix(security): surface the schedule/user-less runAs:'user' fail-open (#1888 follow-up)

  With flow.runAs now enforced (#1888), a schedule-triggered flow with the default runAs:'user' has no trigger user. resolveRunDataContext returns undefined for that case, so the CRUD nodes pass no ObjectQL options.context and the security middleware — which skips when there is no identity (it delegates auth to the auth layer) — runs the operation UNSCOPED (effectively elevated). An author who left runAs at the 'user' default expecting a restricted run silently gets an unscoped one — a fail-open footgun (ADR-0049: a security property must not silently do the opposite of what it implies).

  This is the product decision to make that explicit, chosen to keep legitimate scheduled CRUD working (denying outright would break it, and silently elevating would hide the author's intent). Prevention happens where the platform can tell intent apart (author/build time); the runtime stays non-breaking but is no longer silent:

  • Author-time lint (@objectstack/cli, lintFlowPatterns): a new advisory rule flow-schedule-runas-unscoped flags a schedule-triggered flow whose effective runAs is user (explicit or unset) and which performs a data operation — pointing the author at runAs:'system'. Catches the footgun at compile time, before deploy (most flows are AI-authored).
  • Runtime warning (@objectstack/service-automation): the engine now emits a clear one-per-run warning when a user-mode run resolves no trigger identity and the flow touches data — the fail-open is audible rather than silent. Behavior is otherwise unchanged (the run still executes), so scheduled CRUD that relied on this is not broken. New helpers runIsUnscopedUserMode, flowTouchesData, and DATA_NODE_TYPES are exported alongside resolveRunDataContext.
  • Spec describe (@objectstack/spec): FlowSchema.runAs now states that a scheduled run has no user, so under user it runs unscoped — declare system.

  The first-party example apps that tripped the new lint are fixed to declare runAs:'system' explicitly (stale_opportunity_sweep, the app-todo task_reminder / overdue_escalation sweeps) — they read/write across owners and were running unscoped by default.

  Longer term, attributing scheduled runs to a dedicated service principal (so they are scopable + audit-attributable rather than unscoped) is the right enforcement; tracked as M2 follow-up.

  Proven by a service-automation unit test (the engine warns once for a user-less user-mode data run; stays silent for system, for an identified user, and for a data-less flow), an end-to-end test wiring the real ScheduleTrigger to the real engine (@objectstack/trigger-schedule) that fires a job and asserts the user-less identity reaches the engine + trips the warning through the actual cron path, and a dogfood gate (flow-runas-schedule.dogfood.test.ts) that drives user-less runs through the real automation + security + data stack: a runAs:'user' run reads + writes an owner-scoped note a member cannot — audibly — while runAs:'system' is the explicit, warning-free equivalent.

  Refs #1888, ADR-0049.

• Updated dependencies [ab5718a]

• Updated dependencies [4845c12]

• Updated dependencies [c1a754a]

• Updated dependencies [6fbe91f]

• Updated dependencies [715d667]

• Updated dependencies [5eef4cf]

• Updated dependencies [72759e1]

• Updated dependencies [6c4fbd9]

• Updated dependencies [ef3ed67]

• Updated dependencies [cd51229]

• Updated dependencies [7697a0e]

• Updated dependencies [e7e04f1]

• Updated dependencies [cfd5ac4]

• Updated dependencies [2be5c1f]

• Updated dependencies [ad143ce]

• Updated dependencies [5c4a8c8]

• Updated dependencies [3afaeed]

• Updated dependencies [8801c02]

• Updated dependencies [3d04e06]

• Updated dependencies [4a84c98]

• Updated dependencies [c715d25]

• Updated dependencies [aa33b02]

• Updated dependencies [d980f0d]

• Updated dependencies [a658523]

• Updated dependencies [82ff91c]

• Updated dependencies [638f472]

  • @objectstack/spec@11.0.0
  • @objectstack/core@11.0.0

10.3.0

Patch Changes

• @objectstack/spec@10.3.0
• @objectstack/core@10.3.0

10.2.0

Patch Changes

• Updated dependencies [b496498]
  • @objectstack/spec@10.2.0
  • @objectstack/core@10.2.0

10.1.0

Patch Changes

• Updated dependencies [49da36e]
• Updated dependencies [ac79f16]
  • @objectstack/spec@10.1.0
  • @objectstack/core@10.1.0

10.0.0

Patch Changes

• Updated dependencies [d7ff626]
• Updated dependencies [2a1b16b]
• Updated dependencies [e16f2a8]
• Updated dependencies [e411a82]
• Updated dependencies [a581385]
• Updated dependencies [d5f6d29]
• Updated dependencies [220ce5b]
• Updated dependencies [3efe334]
• Updated dependencies [feead7e]
• Updated dependencies [6ca20b3]
• Updated dependencies [5f875fe]
• Updated dependencies [b469950]
  • @objectstack/spec@10.0.0
  • @objectstack/core@10.0.0

9.11.0

Patch Changes

• Updated dependencies [e7f6539]
• Updated dependencies [2365d07]
• Updated dependencies [6595b53]
• Updated dependencies [fa8964d]
• Updated dependencies [36138c7]
• Updated dependencies [a8e4f3b]
• Updated dependencies [4c213c2]
• Updated dependencies [2afb612]
  • @objectstack/spec@9.11.0
  • @objectstack/core@9.11.0

9.10.0

Patch Changes

• Updated dependencies [db02bd5]
• Updated dependencies [641675d]
• Updated dependencies [94e9040]
• Updated dependencies [1f88fd9]
• Updated dependencies [1f88fd9]
  • @objectstack/spec@9.10.0
  • @objectstack/core@9.10.0

9.9.1

Patch Changes

• @objectstack/spec@9.9.1
• @objectstack/core@9.9.1

9.9.0

Patch Changes

• Updated dependencies [84249a4]
• Updated dependencies [11af299]
• Updated dependencies [d5774b5]
• Updated dependencies [134043a]
• Updated dependencies [90108e0]
• Updated dependencies [9afeb2d]
• Updated dependencies [6bec07e]
• Updated dependencies [601cc11]
• Updated dependencies [575448d]
  • @objectstack/spec@9.9.0
  • @objectstack/core@9.9.0

9.8.0

Patch Changes

• Updated dependencies [97c55b3]
• Updated dependencies [1b1f490]
  • @objectstack/spec@9.8.0
  • @objectstack/core@9.8.0

9.7.0

Patch Changes

• @objectstack/spec@9.7.0
• @objectstack/core@9.7.0

9.6.0

Patch Changes

• Updated dependencies [d1e930a]
• Updated dependencies [71578f2]
• Updated dependencies [5e3a301]
• Updated dependencies [5db2742]
  • @objectstack/spec@9.6.0
  • @objectstack/core@9.6.0

9.5.1

Patch Changes

• Updated dependencies [ee72aae]
  • @objectstack/spec@9.5.1
  • @objectstack/core@9.5.1

9.5.0

Patch Changes

• Updated dependencies [d08551c]
• Updated dependencies [707aeed]
• Updated dependencies [7a103d4]
• Updated dependencies [4b01250]
  • @objectstack/spec@9.5.0
  • @objectstack/core@9.5.0

9.4.0

Patch Changes

• Updated dependencies [060467a]
• Updated dependencies [0856476]
• Updated dependencies [b678d8c]
• Updated dependencies [b678d8c]
• Updated dependencies [b678d8c]
  • @objectstack/spec@9.4.0
  • @objectstack/core@9.4.0

9.3.0

Minor Changes

• f15d6f6: ADR-0042 SLA auto-escalation + ADR-0041 mechanical landing. plugin-approvals now owns a jobs-backed escalation scanner (runEscalations, interval job approvals-sla-escalation + boot catch-up): overdue pending requests escalate at most once (the escalate audit row is the idempotency marker, written audit-first) executing the node's escalation.action — notify / reassign-to-escalateTo / auto_approve / auto_reject as the reserved actor system:sla. The trigger packages drop their plugin- prefix (@objectstack/trigger-record-change, @objectstack/trigger-schedule) per ADR-0041, and ActionDescriptor gains an optional maturity: 'ga' | 'beta' | 'reserved' field so designers can grey out contract-ahead-of-runtime surfaces.

Patch Changes

• Updated dependencies [1ada658]
• Updated dependencies [3219191]
• Updated dependencies [290f631]
• Updated dependencies [50b7b47]
• Updated dependencies [f15d6f6]
• Updated dependencies [f8684ea]
• Updated dependencies [b4765be]
  • @objectstack/spec@9.3.0
  • @objectstack/core@9.3.0

9.2.0

Patch Changes

• Updated dependencies [2f57b75]
• Updated dependencies [2f57b75]
  • @objectstack/spec@9.2.0
  • @objectstack/core@9.2.0

9.1.0

Patch Changes

• Updated dependencies [b9062c9]
  • @objectstack/spec@9.1.0
  • @objectstack/core@9.1.0

9.0.1

Patch Changes

• Updated dependencies [1817845]
  • @objectstack/spec@9.0.1
  • @objectstack/core@9.0.1

9.0.0

Patch Changes

• Updated dependencies [4c3f693]
• Updated dependencies [0bf39f1]
• Updated dependencies [f533f42]
• Updated dependencies [1c83ee8]
  • @objectstack/spec@9.0.0
  • @objectstack/core@9.0.0

8.0.1

Patch Changes

• @objectstack/spec@8.0.1
• @objectstack/core@8.0.1

8.0.0

Patch Changes

• Updated dependencies [a46c017]
• Updated dependencies [b990b89]
• Updated dependencies [99111ec]
• Updated dependencies [d5a8161]
• Updated dependencies [5cf1f1b]
• Updated dependencies [9ef89d4]
• Updated dependencies [3306d2f]
• Updated dependencies [c262301]
• Updated dependencies [bc44195]
• Updated dependencies [9e2e229]
  • @objectstack/spec@8.0.0
  • @objectstack/core@8.0.0

7.9.0

Patch Changes

• @objectstack/spec@7.9.0
• @objectstack/core@7.9.0

7.8.0

Patch Changes

• Updated dependencies [06f2bbb]
• Updated dependencies [36719db]
• Updated dependencies [424ab26]
  • @objectstack/spec@7.8.0
  • @objectstack/core@7.8.0

7.7.0

Patch Changes

• Updated dependencies [b391955]
• Updated dependencies [f06b64e]
• Updated dependencies [023bf93]
  • @objectstack/spec@7.7.0
  • @objectstack/core@7.7.0

7.6.0

Patch Changes

• Updated dependencies [955d4c8]
• Updated dependencies [c4a4cbd]
• Updated dependencies [b046ec2]
• Updated dependencies [2170ad9]
• Updated dependencies [02d6359]
• Updated dependencies [7648242]
• Updated dependencies [8fa1e7f]
• Updated dependencies [55866f5]
• Updated dependencies [60f9c45]
  • @objectstack/spec@7.6.0
  • @objectstack/core@7.6.0

7.5.0

Patch Changes

• @objectstack/spec@7.5.0
• @objectstack/core@7.5.0

7.4.1

Patch Changes

• @objectstack/spec@7.4.1
• @objectstack/core@7.4.1

7.4.0

Minor Changes

• 03fd7f0: Schedule flow trigger — auto-launch flows on a cron/interval/once schedule.

  The sibling of @objectstack/plugin-trigger-record-change: it completes the time-based arm of the automation engine's FlowTrigger extension point. The engine already parses a flow's start node into a schedule binding (flow.type === 'schedule' or a start-node config.schedule descriptor); this plugin registers the concrete schedule trigger and delegates timing to the platform IJobService (the 'job' service), so it stays adapter-agnostic — the job service selects a cron-capable adapter (durable DbJobAdapter / CronJobAdapter) for cron schedules and the interval adapter otherwise.

  • normalizeSchedule accepts the canonical JobSchedule plus shorthands (a bare cron string, { cron } / { expression }, { every } / { intervalMs }, { at }).
  • When a job fires, the flow runs with event: 'schedule' and params: { jobId, flowName, schedule }; the engine's start-condition gate still applies.
  • Error-isolated (a flow failure never crashes the job runner); per-flow job name so stop() cancels exactly one flow; the job service is resolved lazily per bind so adapter upgrades are picked up; graceful degrade when the automation or job service is absent.

  No engine change required — the schedule binding shipped with the record-change trigger PR.

Patch Changes

• Updated dependencies [23c7107]
• Updated dependencies [c72daad]
• Updated dependencies [f115182]
• Updated dependencies [2faf9f2]
• Updated dependencies [2faf9f2]
• Updated dependencies [2faf9f2]
• Updated dependencies [58b450b]
• Updated dependencies [82eb6cf]
• Updated dependencies [13d8653]
• Updated dependencies [ff3d006]
• Updated dependencies [5e831de]
  • @objectstack/spec@7.4.0
  • @objectstack/core@7.4.0