enh: automation

backend/open_webui/routers/automations.py

@@ -19,6 +19,7 @@ from open_webui.utils.automations import (
     next_run_ns,
     next_n_runs_ns,
     execute_automation,
+    rrule_interval_seconds,
 )
 from open_webui.utils.auth import get_verified_user, get_admin_user
 from open_webui.utils.access_control import has_permission
@@ -60,6 +61,35 @@ def check_automation_access(automation, user):
         )
 
 
+def check_automation_limits(request, user, rrule_str: str, db, is_create: bool = False):
+    """Enforce global automation limits. Admins bypass all checks."""
+    if user.role == 'admin':
+        return
+
+    # Max count (create only)
+    if is_create:
+        max_count = request.app.state.config.AUTOMATION_MAX_COUNT
+        if max_count:
+            max_count = int(max_count)
+            if max_count > 0 and Automations.count_by_user(user.id, db=db) >= max_count:
+                raise HTTPException(
+                    status_code=status.HTTP_403_FORBIDDEN,
+                    detail=f'Automation limit reached ({max_count})',
+                )
+
+    # Min interval (create + update)
+    min_interval = request.app.state.config.AUTOMATION_MIN_INTERVAL
+    if min_interval:
+        min_interval = int(min_interval)
+        if min_interval > 0:
+            interval = rrule_interval_seconds(rrule_str)
+            if interval is not None and interval < min_interval:
+                raise HTTPException(
+                    status_code=status.HTTP_400_BAD_REQUEST,
+                    detail=f'Schedule too frequent. Minimum interval is {min_interval} seconds.',
+                )
+
+
 def enrich_automation(automation: AutomationModel, db: Session, tz: str = None) -> AutomationResponse:
     """Full enrichment for single-item views (includes next_runs computation)."""
     last_run = AutomationRuns.get_latest(automation.id, db=db)
@@ -135,6 +165,8 @@ async def create_new_automation(
             detail=str(e),
         )
 
+    check_automation_limits(request, user, form_data.data.rrule, db, is_create=True)
+
     # Validate terminal server exists if linked
     if form_data.data.terminal and form_data.data.terminal.server_id:
         connections = request.app.state.config.TERMINAL_SERVER_CONNECTIONS or []
@@ -192,6 +224,8 @@ async def update_automation_by_id(
             detail=str(e),
         )
 
+    check_automation_limits(request, user, form_data.data.rrule, db, is_create=False)
+
     # Validate terminal server exists if linked
     if form_data.data.terminal and form_data.data.terminal.server_id:
         connections = request.app.state.config.TERMINAL_SERVER_CONNECTIONS or []