GeezerVison

Every coderd instance now scans for due schedule automations at start
and every 30 seconds. The scan reads due rows without locks, decides
the chat-automations experiment once per owner, and treats occurrences
older than a 60 second grace window as missed: it moves the cursor to
the next cron time and publishes nothing. Other occurrences are
published with the observed schedule revision and cursor. The admission
callback rechecks both under the chat and automation locks, reads the
clock after the locks, and moves the cursor in the same transaction, so
exactly one instance accepts each occurrence.

Refusals (busy chat with skip, full queue or automation share, hook
denial, lost permission, experiment off, expired occurrence) skip the
occurrence with the same conditional cursor write; other errors retry
within the grace window. Publish now checks the experiment for every
publisher, and new chats of schedule automations are titled in the
schedule's time zone.

Part of CODAGT-1211.

The schedule loop's guarded cursor write is now authorized like other
object writes: the dbauthz wrapper loads the automation and requires
update on it. The chatd subject gains update on chat_automation (read
already existed); owner-only changes stay in the chatd automation
service, and chatd still cannot create or delete automations.

The cursor now only moves forward, and a comment explains why clock
skew between instances cannot accept an occurrence twice or replay one.
The schedule tests run their servers through dbauthz, so they exercise
the chatd subject's real permissions.

---
_Generated with [`xum`](https://github.com/coder/xum) • Model: `anthropic:claude-opus-5-5` • Thinking: `high`_

…chat' into tk/codagt-1211-automations-schedules

# Conflicts:
#	coderd/x/chatd/automations_publish.go

…chat' into tk/codagt-1211-automations-schedules

A chat created through the chat API or by a webhook event records an
audit entry. A chat that a new_chat schedule creates now records one
too, as created by the automation owner, with the automation and input
ids in the additional fields.

---
_Generated with [`xum`](https://github.com/coder/xum) • Model: `anthropic:claude-opus-5-5` • Thinking: `high`_

chatgpt-codex-connector Bot left a comment

…refusals

The scan read one page of 500 due schedules per tick. Rows that stay
due, such as those of owners with the experiment off, stayed first in
every page and could hide all other schedules, and a large burst could
wait past the grace window. The scan now pages by (cursor, id) until a
page comes back short.

A Publish refusal because the experiment is off for the owner no longer
skips the occurrence: the evaluator also reports a failed read as off,
so the cursor stays for a retry within the grace window, and the next
scan drops an owner whose experiment really is off.

---
_Generated with [`xum`](https://github.com/coder/xum) • Model: `anthropic:claude-opus-5-5` • Thinking: `high`_

chatgpt-codex-connector Bot left a comment

A scan published due occurrences one at a time, so an occurrence that
waited for a chat lock or a slow hook held back every later schedule,
which could then expire past the grace window. The scan now publishes
up to eight occurrences at once and returns when all are done.

A chat that a new_chat schedule creates is now titled with its
occurrence's scheduled time, which does not depend on how long hooks
and locks take before acceptance.

---
_Generated with [`xum`](https://github.com/coder/xum) • Model: `anthropic:claude-opus-5-5` • Thinking: `high`_

GitHub created no pull_request runs for the last two pushes while the
PR mergeability stayed unknown. This commit changes no files.

---
_Generated with [`xum`](https://github.com/coder/xum) • Model: `anthropic:claude-opus-5-5` • Thinking: `high`_

…agt-1211-automations-schedules

No conflicts. make gen produced no diff.

---
_Generated with [`xum`](https://github.com/coder/xum) • Model: `anthropic:claude-opus-5-5` • Thinking: `high`_

…agt-1211-automations-schedules

No conflicts. make gen produced no diff.

---
_Generated with [`xum`](https://github.com/coder/xum) • Model: `anthropic:claude-opus-5-5` • Thinking: `high`_

ibetitsmike left a comment

…agt-1211-automations-schedules

Resolved two conflicts. ARCHITECTURE.md: kept main's new auto-archive
paragraphs under the Auto-archive loop heading and this layer's
Automation schedule loop section after them. options.go: kept this
layer's AutomationScheduleInterval and main's HeartbeatRenewalTimeout and
HeartbeatLockTimeout. make gen produced no diff.

---
_Generated with [`xum`](https://github.com/coder/xum) • Model: `anthropic:claude-opus-5-5` • Thinking: `high`_

…option

Replace the scanAutomationSchedules batch-size wrapper with a worker
option, AutomationScheduleBatchSize, defaulting to 500, and attach the
checkAutomationOccurrence doc comment to its function.

---
_Generated with [`xum`](https://github.com/coder/xum) • Model: `anthropic:claude-opus-5-5` • Thinking: `high`_

ibetitsmike left a comment

…agt-1211-automations-schedules

No conflicts. make gen produced no diff.

---
_Generated with [`xum`](https://github.com/coder/xum) • Model: `anthropic:claude-opus-5-5` • Thinking: `high`_

…ule scan test

The _internal_test.go suffix already exempts the file from testpackage,
and .claude/docs/TESTING.md prohibits the per-file directive.

---
_Generated with [`xum`](https://github.com/coder/xum) • Model: `anthropic:claude-opus-5-5` • Thinking: `high`_

ibetitsmike left a comment

…agt-1211-automations-schedules

No conflicts. make gen produced no diff.

---
_Generated with [`xum`](https://github.com/coder/xum) • Model: `anthropic:claude-opus-5-5` • Thinking: `high`_

…agt-1211-automations-schedules

No conflicts. make gen produced no diff.

---
_Generated with [`xum`](https://github.com/coder/xum) • Model: `anthropic:claude-opus-5-5` • Thinking: `high`_

…agt-1211-automations-schedules

No conflicts. make gen produced no diff.

---
_Generated with [`xum`](https://github.com/coder/xum) • Model: `anthropic:claude-opus-5-5` • Thinking: `high`_

…tions-schedules

Brings main ff158c0 into this layer. No conflicts.

---
_Generated with [`xum`](https://github.com/coder/xum) • Model: `anthropic:claude-opus-5-5` • Thinking: `high`_

…tions-schedules

Brings the new_chat automation title source fix from #30134. Resolved
automations_publish.go: this layer's automationNewChatTitle call keeps
the new TitleSource line.

---
_Generated with [`xum`](https://github.com/coder/xum) • Model: `anthropic:claude-opus-5-5` • Thinking: `high`_

ibetitsmike left a comment