Summary

Re-ports the isolated-only cron feature onto the current SQLite desicool-release base (supersedes #4, which was built on an older, since-force-pushed base).

Cron is narrowed to an isolated agent-turn runner only: sessionTarget:"isolated" + payload.kind:"agentTurn" (drops kind:"every", schedule tz, main/current/session: targets, and systemEvent create/run). Adds: detached openclaw run-cron-job subprocess (gateway is the sole SQLite writer), cross-process scheduler lock, boot-time reconcile of in-flight subprocess jobs, idempotencyKey dedup, cron purge, doctor --fix legacy migrations (every→cron, strip tz, non-isolated→isolated, disable legacy systemEvent jobs), and the bundled weekly-report plugin. Also fixes a plugin regression where scheduled-turn cleanup matched the removed sessionTarget==="session:<key>" instead of sessionKey.

⚠️ Diff size caveat — read the commits, not the file count

desicool-release is a continuously force-pushed fork-overlay branch (the ci: re-apply fork overlay commits) — it was rewritten twice while this work was in progress, so this branch and the base share only a far-back merge-base. GitHub therefore shows a bloated diff (~hundreds of files) that is mostly history-rewrite noise, not real change. The actual cron work is the 5 commits on this branch:

• feat(cron): isolated cron runner — subprocess exec, scheduler lock, boot reconcile
• feat(doctor): cron purge + legacy schema migrations for isolated-only
• feat(weekly-report): add bundled plugin
• fix(plugins): match scheduled-turn cleanup by sessionKey
• test(cron): migrate fixtures and suites to isolated-only runner

This branch cannot be cleanly fast-forward-merged while the overlay keeps rewriting the base; the intent is for whoever runs the overlay pipeline to incorporate these commits (or fold the cron feature into the overlay source).

Verification (green on the base this was built on)

• pnpm tsgo:core 0 errors · pnpm tsgo:core:test 0 errors
• src/cron 957 · doctor/cron 136 · gateway cron: server.cron 36 / server-cron 32 / -lazy 14 / -notifications 2 / server-methods/cron.validation 74 · cron-tool 95 · cron-cli 86 · scheduled-turns.contract 25 · weekly-report 84 · logging 24 · tasks 19

Behavior addressed: cron runs as isolated agent turns, survives gateway restart via subprocess reconcile; legacy stores migrate via doctor --fix; plugin scheduled turns clean up by sessionKey.
Real environment tested: not yet — unit + typecheck only.
Exact steps or command run after this patch: pnpm tsgo:core, pnpm tsgo:core:test, node scripts/run-vitest.mjs src/cron (+ the suites above).
Evidence after fix: all listed suites green; both tsgo lanes 0 errors.
Observed result after fix: green.
What was not tested: pnpm build, check:import-cycles, full pnpm check, extensions typecheck, live restart-survival / doctor --fix repro — deferred to Crabbox/Testbox.

🤖 Generated with Claude Code