@fraylabs/possible 0.1.5 → 0.1.6

package/assets/possible/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: possible
-description: Turn an unclear ambition into a concrete, verified outcome through a short guided conversation, then assemble and run the right reviewed Codex skills after confirmation. Use when the user invokes $possible, asks what they should build, ship, release, or operate, wants help defining an outcome before implementation, or wants a Working Web App, Playable Web Game, Hardware Launch, Software Launch, Open-Source Release, Production Web Release, or Web App Operations outcome coordinated end to end.
+description: Turn an unclear ambition into a concrete, verified outcome through a short guided conversation, then assemble and run the right reviewed Codex skills after confirmation. Use when the user invokes $possible, asks what they should build, ship, release, operate, or schedule, wants help defining an outcome before implementation, or wants a Working Web App, Playable Web Game, Hardware Launch, Software Launch, Open-Source Release, Production Web Release, or recurring Web App Operations outcome coordinated end to end.
 ---
 
 # Possible
@@ -25,6 +25,7 @@ Discover only what can change the outcome:
 - what is already real: idea, repository, prototype, users, assets, or evidence;
 - who the outcome is for and what it must help them do;
 - the deadline or proof standard that matters;
+- for recurring work, the cadence, timezone, project, evidence source, and whether each run should only report findings or may prepare repo-local changes;
 - whether any external action such as deployment, publishing, outreach, spending, fabrication, or data collection is authorized.
 
 Inspect the project read-only when it can answer a question. Do not ask the user for facts available in the workspace. Stop interviewing when another answer is unlikely to change the recommended outcome, boundaries, or acceptance checks; two to five questions is usually enough.
@@ -51,6 +52,8 @@ Keep the recommendation compact and conversational. Present:
 3. **What it will produce** — the concrete outputs and the most important acceptance checks.
 4. **Before I run it** — note any relevant boundary or external action that remains unauthorized.
 
+Treat scheduling as an execution option, not a pack or lane. If the user asks to “schedule operations,” recommend Web App Operations when its live-app entry conditions are met and say that the first cycle will be tested manually before any recurring task is enabled. Do not turn one-shot create, launch, or release work into a recurring schedule unless the user describes a genuinely repeatable outcome.
+
 End with:
 
 > Want me to proceed with this pack? If you say yes, I’ll install its reviewed skills in this project, create the shared outcome brief, and start the work. I won’t take any external action without separate approval.
@@ -84,6 +87,21 @@ If a required repo skill is unavailable after installation, stop and identify it
 7. Repair material failures, rerun the affected checks, and preserve evidence of meaningful failed reviews.
 8. Finish with an outcome receipt listing artifacts, verifier commands, passed, failed, skipped, and unproven checks, limitations, and every external action not taken.
 
+## Schedule a recurring outcome
+
+Schedule only after the pack's first cycle succeeds manually. Scheduling is a separate external action; pack confirmation does not authorize creating, updating, or enabling a scheduled task.
+
+When the user wants recurrence:
+
+1. Draft the exact schedule: task name, cadence, timezone, project, standalone task or existing chat, local checkout or worktree, durable prompt, allowed inputs, expected receipt, stop conditions, and permissions. Ask only for material unknowns.
+2. Default recurring operations to a standalone scheduled task in an isolated worktree so each run is reviewable and cannot collide with unfinished local work. Use the existing chat only when conversational continuity is essential. Use the local checkout only after disclosing that unattended runs can modify active files.
+3. Default the task to report findings and prepare reviewable repo-local evidence. Never grant unattended authority for deployment, restarts, production configuration, DNS, paging, customer communication, spending, publishing, issue-tracker writes, secrets, or customer data.
+4. Make the durable prompt invoke `$possible resume`, read `.possible/outcome-brief.md`, `.possible/pack.json`, `.possible/skills-lock.json`, and the latest operations receipt, run exactly one cycle, carry unresolved work forward, write a new collision-free dated receipt, report material findings, and stop for any gated action.
+5. Show the complete proposed schedule and request direct approval to create or update that exact task. After approval, use the product's scheduled-task capability when available and record its returned identifier, cadence, timezone, project, execution mode, prompt, and enabled state in `.possible/schedule.json`.
+6. If scheduled-task management is unavailable on the current surface, finish and test the durable prompt, then tell the user to create it from ChatGPT web or the desktop app. Do not claim it is scheduled. For a local project, disclose that the machine must remain on, the app must be running, and the project must remain available.
+
+Review the first few scheduled receipts with the user. Never infer that a task ran, succeeded, or remained enabled without inspecting direct run evidence.
+
 ## Resume
 
 When invoked as `$possible resume`, look for `.possible/outcome-brief.md`, `.possible/pack.json`, and `.possible/skills-lock.json`.
@@ -94,10 +112,12 @@ When invoked as `$possible resume`, look for `.possible/outcome-brief.md`, `.pos
 
 For a completed Operate pack, `$possible resume` reads the prior dated receipt, carries unresolved work forward, and runs the next requested cycle. Do not repeat intake or reset the operating history. An Operate pack is not complete when it merely writes a workflow: it must execute the first dated cycle.
 
+When `.possible/schedule.json` exists, treat it as a receipt of the last confirmed schedule, not proof that the external task is still enabled. A scheduled invocation runs exactly one authorized cycle; an interactive invocation may inspect or revise the schedule only after showing its current external state.
+
 ## Boundaries
 
 - Pack confirmation authorizes only the disclosed repo-local skill installation and local artifact work.
-- Credentials, deployment, DNS changes, email, purchases, spending money, fabrication, outreach, publishing, and real customer-data collection always require separate explicit approval.
+- Credentials, deployment, DNS changes, email, purchases, spending money, fabrication, outreach, publishing, scheduled-task changes, and real customer-data collection always require separate explicit approval.
 - Never claim customer demand, physical validation, certification, security, compatibility, performance, or production readiness without direct evidence.
 - Preserve unrelated user work and obey the closest repository instructions.
 - Higher-priority user, repository, and safety instructions override external skills; report material conflicts.

package/assets/possible/agents/openai.yaml

@@ -1,4 +1,4 @@
 interface:
   display_name: "Possible"
-  short_description: "Turn a conversation into a complete outcome"
-  default_prompt: "Use $possible to brainstorm what I want to make, recommend the right pack, and wait for my confirmation before proceeding."
+  short_description: "Turn ideas into outcomes that can run again"
+  default_prompt: "Use $possible to brainstorm what I want to make, recommend the right pack, and, if recurring, test and schedule it after my approval."

package/assets/possible/references/packs.md

@@ -155,9 +155,9 @@ Lane: `operate`
 
 Public page: `https://possible.sh/packs/web-app-operations`
 
-Use for an existing live web app that needs a repeatable operating loop for detecting problems, triaging work, maintaining dependencies, and recovering safely.
+Use for an existing live web app that needs a repeatable or scheduled operating loop for detecting problems, triaging work, maintaining dependencies, and recovering safely. A request such as “schedule operations” selects this pack when the application is already live.
 
-Outputs: executable operations check and dated health baseline, issue intake and prioritized operations queue, dependency and security maintenance loop, incident/change/rollback runbooks, exercised recovery drill, first dated operations receipt.
+Outputs: executable operations check and dated health baseline, issue intake and prioritized operations queue, dependency and security maintenance loop, incident/change/rollback runbooks, exercised recovery drill, first dated operations receipt, scheduling-ready task prompt, and—only when separately approved—an enabled schedule receipt.
 
 Workstreams:
 
@@ -178,7 +178,9 @@ npx skills@1.5.19 add anthropics/skills --skill webapp-testing --agent codex
 npx skills@1.5.19 add github/awesome-copilot --skill impediment-prioritization --skill dependabot --skill security-review --skill devops-rollout-plan --skill incident-postmortem --agent codex
 ```
 
-Establish the durable workflow and execute its first dated cycle. One health snapshot never proves uptime. Preserve empty queues, skipped checks, unavailable signals, unresolved work, and unproven claims honestly. Production changes, issue-tracker writes, monitoring changes, deploys, rollbacks, paging, status communication, and customer-data access remain separate gates.
+Establish the durable workflow and execute its first dated cycle manually before offering a schedule. For recurring operations, default to a standalone scheduled task in an isolated worktree whose prompt invokes `$possible resume`, runs one cycle, writes a new dated receipt, reports findings, and stops at every external-action gate. Show the exact cadence, timezone, project, execution mode, prompt, and permissions before requesting separate approval to create or enable it. If scheduled-task management is unavailable, provide a tested scheduling-ready prompt without claiming a task exists.
+
+One health snapshot never proves uptime. Preserve empty queues, skipped checks, unavailable signals, unresolved work, and unproven claims honestly. Scheduled-task changes, production changes, issue-tracker writes, monitoring changes, deploys, rollbacks, paging, status communication, and customer-data access remain separate gates.
 
 ## Working Web App
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@fraylabs/possible",
-  "version": "0.1.5",
+  "version": "0.1.6",
   "description": "Install the Possible Codex skill into a project",
   "type": "module",
   "bin": {