@rubytech/create-maxy-code 0.1.604 → 0.1.606

package/dist/__tests__/claude-trust-seed.test.js

@@ -0,0 +1,125 @@
+import test from "node:test";
+import assert from "node:assert/strict";
+import { seedClaudeTrust, formatTrustSeedLine } from "../claude-trust-seed.js";
+const ROOT = "/home/neo/maxy-code/data/accounts";
+const A = `${ROOT}/aaa`;
+const B = `${ROOT}/bbb`;
+test("seeds every account directory that exists, alongside $HOME", () => {
+    const r = seedClaudeTrust({
+        state: {},
+        homeWorkspace: "/home/neo",
+        accountsRoot: ROOT,
+        accountDirs: [A, B],
+    });
+    const projects = r.state.projects;
+    assert.equal(projects["/home/neo"].hasTrustDialogAccepted, true);
+    assert.equal(projects[A].hasTrustDialogAccepted, true);
+    assert.equal(projects[B].hasTrustDialogAccepted, true);
+    assert.equal(r.state.hasCompletedOnboarding, true);
+    assert.deepEqual({ accounts: r.accounts, seeded: r.seeded, alreadyTrusted: r.alreadyTrusted, stale: r.stale }, { accounts: 2, seeded: 2, alreadyTrusted: 0, stale: 0 });
+});
+test("preserves other keys on an account entry and counts an existing true as already-set", () => {
+    const r = seedClaudeTrust({
+        state: {
+            numStartups: 519,
+            projects: {
+                [A]: { hasTrustDialogAccepted: true, exampleFilesGenerated: true },
+                [B]: { hasTrustDialogAccepted: false, lastCost: 1.5 },
+            },
+        },
+        homeWorkspace: "/home/neo",
+        accountsRoot: ROOT,
+        accountDirs: [A, B],
+    });
+    const projects = r.state.projects;
+    assert.equal(r.state.numStartups, 519);
+    assert.equal(projects[A].exampleFilesGenerated, true);
+    assert.equal(projects[B].lastCost, 1.5);
+    assert.equal(projects[B].hasTrustDialogAccepted, true);
+    assert.equal(r.alreadyTrusted, 1);
+    assert.equal(r.seeded, 1);
+});
+test("an entry whose directory is gone keeps its value and counts as stale", () => {
+    const gone = `${ROOT}/deleted`;
+    const r = seedClaudeTrust({
+        state: { projects: { [gone]: { hasTrustDialogAccepted: false } } },
+        homeWorkspace: "/home/neo",
+        accountsRoot: ROOT,
+        accountDirs: [A],
+    });
+    const projects = r.state.projects;
+    assert.equal(projects[gone].hasTrustDialogAccepted, false);
+    assert.equal(r.stale, 1);
+    assert.equal(r.accounts, 1);
+});
+// The CLI records an entry for any directory a session ran in, so an account's
+// own subdirectories sit under the accounts root too. Counting them as stale
+// accounts would inflate the field for every operator who worked inside one.
+test("a subdirectory of a live account is not counted as a stale account", () => {
+    const r = seedClaudeTrust({
+        state: {
+            projects: {
+                [A]: { hasTrustDialogAccepted: true },
+                [`${A}/sites/portal`]: { hasTrustDialogAccepted: true },
+            },
+        },
+        homeWorkspace: "/home/neo",
+        accountsRoot: ROOT,
+        accountDirs: [A],
+    });
+    assert.equal(r.stale, 0);
+});
+test("no account directories is accounts=0, not a throw", () => {
+    const r = seedClaudeTrust({
+        state: {},
+        homeWorkspace: "/home/neo",
+        accountsRoot: ROOT,
+        accountDirs: [],
+    });
+    assert.equal(r.accounts, 0);
+    assert.equal(r.state.projects["/home/neo"] !== undefined, true);
+});
+// deployPayload() runs before setupAccount(), so on a FRESH install the first
+// pass sees no accounts directory at all and the account that setupAccount
+// then creates would never be trusted. The installer therefore primes twice;
+// this pins the shape that second pass depends on.
+test("fresh-install shape: an empty first pass then a second pass seeds the new account", () => {
+    const first = seedClaudeTrust({
+        state: {},
+        homeWorkspace: "/home/neo",
+        accountsRoot: ROOT,
+        accountDirs: [],
+    });
+    assert.equal(first.accounts, 0);
+    assert.equal(first.seeded, 0);
+    const second = seedClaudeTrust({
+        state: first.state,
+        homeWorkspace: "/home/neo",
+        accountsRoot: ROOT,
+        accountDirs: [A],
+    });
+    const projects = second.state.projects;
+    assert.equal(projects[A].hasTrustDialogAccepted, true);
+    assert.equal(second.accounts, 1);
+    assert.equal(second.seeded, 1);
+    assert.equal(projects["/home/neo"].hasTrustDialogAccepted, true);
+});
+test("the install line names which pass ran", () => {
+    const r = seedClaudeTrust({
+        state: {},
+        homeWorkspace: "/home/neo",
+        accountsRoot: ROOT,
+        accountDirs: [A],
+    });
+    const line = formatTrustSeedLine("/cfg/.claude.json", "/home/neo", r, "none", "post-account");
+    assert.equal(line, "  [install] op=claude-trust-seed phase=post-account file=/cfg/.claude.json home=/home/neo" +
+        " accounts=1 seeded=1 alreadyTrusted=0 stale=0 error=none");
+});
+test("second run over the first run's output is byte-identical", () => {
+    const input = { state: {}, homeWorkspace: "/home/neo", accountsRoot: ROOT, accountDirs: [A, B] };
+    const first = seedClaudeTrust(input);
+    const second = seedClaudeTrust({ ...input, state: first.state });
+    assert.equal(JSON.stringify(second.state), JSON.stringify(first.state));
+    assert.equal(second.seeded, 0);
+    assert.equal(second.alreadyTrusted, 2);
+});

package/dist/claude-trust-seed.js

@@ -0,0 +1,52 @@
+// Task 2720 — Claude Code scopes folder trust to the git repository root, and
+// provision-account-dir.sh gives every account directory its own repo, so
+// trusting $HOME does not reach them. An untrusted workspace halts the
+// PTY-spawned `claude --remote-control` on the folder-trust dialog before it
+// binds, which reads downstream as `op=bind-signal-absent … pidFileSeen=false`
+// and, because /rc-spawn answers 200, reaches the operator as silence.
+//
+// Pure so the counts and the preservation invariant are testable without a
+// filesystem; the caller owns the read and the write.
+export function seedClaudeTrust(input) {
+    const state = input.state;
+    state.hasCompletedOnboarding = true;
+    state.theme = state.theme ?? "auto";
+    const projects = (state.projects ?? {});
+    const homeEntry = projects[input.homeWorkspace] ?? {};
+    homeEntry.hasTrustDialogAccepted = true;
+    projects[input.homeWorkspace] = homeEntry;
+    let seeded = 0;
+    let alreadyTrusted = 0;
+    for (const dir of input.accountDirs) {
+        const entry = projects[dir] ?? {};
+        if (entry.hasTrustDialogAccepted === true) {
+            alreadyTrusted += 1;
+        }
+        else {
+            entry.hasTrustDialogAccepted = true;
+            seeded += 1;
+        }
+        projects[dir] = entry;
+    }
+    // A deleted account cannot be spawned into, so its entry is left exactly as
+    // the CLI wrote it. Counting it separately keeps the install line's
+    // `seeded + alreadyTrusted === accounts` invariant meaningful.
+    //
+    // Direct children only. The CLI records an entry for ANY directory a session
+    // ran in, so an account's own subdirectory (a `sites/<project>` tree, say)
+    // also sits under this prefix; counting those as stale accounts would inflate
+    // the field every time somebody worked inside an account.
+    const onDisk = new Set(input.accountDirs);
+    const prefix = `${input.accountsRoot}/`;
+    const stale = Object.keys(projects).filter((k) => k.startsWith(prefix) && !k.slice(prefix.length).includes("/") && !onDisk.has(k)).length;
+    state.projects = projects;
+    return { state, accounts: input.accountDirs.length, seeded, alreadyTrusted, stale };
+}
+/** `phase` distinguishes the two passes: `deploy` seeds an upgrade's existing
+ *  accounts, `post-account` seeds the directory a fresh install just created.
+ *  Without it the two lines are byte-identical and the operator cannot tell
+ *  which pass did the work. */
+export function formatTrustSeedLine(file, home, r, error, phase) {
+    return (`  [install] op=claude-trust-seed phase=${phase} file=${file} home=${home} accounts=${r.accounts}` +
+        ` seeded=${r.seeded} alreadyTrusted=${r.alreadyTrusted} stale=${r.stale} error=${error}`);
+}

package/dist/index.js

@@ -27,6 +27,7 @@ import { parseSwVers, isSupportedMacosVersion } from "./macos-version.js";
 import { decideChromiumAction, isSnapConfinedPath } from "./snap-chromium.js";
 import { classifyPortHolder } from "./preflight-port-classifier.js";
 import { memoryControllerMissing, cmdlineAlreadyPatched, patchCmdline } from "./cgroup-memory-controller.js";
+import { seedClaudeTrust, formatTrustSeedLine } from "./claude-trust-seed.js";
 import { parsePluginList, computeInstallActions, parseExternalPlugins, findUnregisteredResyncs, discoverMarketplaceCandidateDirs, } from "./lib/plugin-install.js";
 import { findPremiumMcpDirs } from "./lib/premium-mcp-discover.js";
 import { pickBindDecision, pickEdgeBindDecision, formatEdgeBindDecision, pickWebsockifyBind, formatWebsockifyBindFile, mergeSmbConf, formatSambaMarker, SAMBA_ENABLE_UNITS, } from "./samba-provision.js";
@@ -2488,6 +2489,67 @@ function runInstallInvariantCheck(usersFile, accountsDir) {
     }
     console.log(`  ${TAG} check complete divergences=${divergences}`);
 }
+// pre-populate the brand `.claude.json` so the manager's PTY-spawned
+// `claude --verbose --remote-control` boots straight into the session URL
+// without stopping at the first-run theme picker or the workspace-trust
+// dialog. Both prompts ate the manager's 30 s url-capture window on
+// 0.1.6 / 0.1.8 installs (Pi 192.168.88.16 verified). The markers required:
+//   - hasCompletedOnboarding: true       (suppresses theme picker)
+//   - projects[<dir>].hasTrustDialogAccepted: true, for $HOME AND for every
+//     account directory (Task 2720). Claude Code scopes folder trust to the
+//     git repository root, and provision-account-dir.sh gives each account
+//     directory its own repo, so $HOME's trust does not reach them. Seeding
+//     $HOME alone left every spawn halted on the trust dialog.
+// Existing fields (firstStartTime, oauthAccount, migrationVersion, …) are
+// preserved so a brand re-install does not clobber state written by claude
+// during the previous run.
+//
+// Called TWICE, and both calls are load-bearing. `deploy` runs inside
+// deployPayload, which is where an upgrade's already-existing account
+// directories are seeded; `post-account` runs after setupAccount(), which is
+// the only point a FRESH install has an account directory on disk at all.
+// Running deploy alone would leave every fresh install untrusted and hang its
+// first session. The transform is idempotent, so the second pass rewrites
+// nothing the first already did (`seeded=0` when there was nothing new).
+function primeClaudeState(phase) {
+    const persistentDir = resolve(process.env.HOME ?? "/root", BRAND.configDir);
+    const persistentClaudeDir = join(persistentDir, ".claude");
+    mkdirSync(persistentClaudeDir, { recursive: true });
+    const claudeStateFile = join(persistentClaudeDir, ".claude.json");
+    const homeWorkspace = process.env.HOME ?? "/root";
+    let claudeState = {};
+    if (existsSync(claudeStateFile)) {
+        try {
+            claudeState = JSON.parse(readFileSync(claudeStateFile, "utf-8"));
+        }
+        catch {
+            claudeState = {};
+        }
+    }
+    // An absent accounts directory is a first install, not an error; a listing
+    // that throws is reported on the line rather than aborting the install.
+    const accountsRoot = join(INSTALL_DIR, "data/accounts");
+    let accountDirs = [];
+    let seedError = "none";
+    try {
+        if (existsSync(accountsRoot)) {
+            accountDirs = readdirSync(accountsRoot, { withFileTypes: true })
+                .filter((e) => e.isDirectory())
+                .map((e) => join(accountsRoot, e.name));
+        }
+    }
+    catch (err) {
+        seedError = err instanceof Error ? err.message : String(err);
+    }
+    const seedResult = seedClaudeTrust({
+        state: claudeState,
+        homeWorkspace,
+        accountsRoot,
+        accountDirs,
+    });
+    writeFileSync(claudeStateFile, JSON.stringify(seedResult.state, null, 2) + "\n", { mode: 0o600 });
+    console.log(formatTrustSeedLine(claudeStateFile, homeWorkspace, seedResult, seedError, phase));
+}
 function deployPayload() {
     log("8", TOTAL, `Deploying ${BRAND.productName}...`);
     if (!existsSync(PAYLOAD_DIR)) {
@@ -2511,39 +2573,8 @@ function deployPayload() {
     // `claude` SDK subprocess and admin server read from there via the
     // Environment=CLAUDE_CONFIG_DIR= block in port-resolution.ts. Fresh
     // installs prompt the operator to run `claude /login`.
-    const persistentClaudeDir = join(persistentDir, ".claude");
-    mkdirSync(persistentClaudeDir, { recursive: true });
-    // pre-populate the brand `.claude.json` so the manager's
-    // PTY-spawned `claude --verbose --remote-control` boots straight into the
-    // session URL without stopping at the first-run theme picker or the
-    // workspace-trust dialog. Both prompts ate the manager's 30 s url-capture
-    // window on 0.1.6 / 0.1.8 installs (Pi 192.168.88.16 verified). The two
-    // markers required are:
-    //   - hasCompletedOnboarding: true       (suppresses theme picker)
-    //   - projects[$HOME].hasTrustDialogAccepted: true
-    // Existing fields (firstStartTime, oauthAccount, migrationVersion, …) are
-    // preserved so a brand re-install does not clobber state written by claude
-    // during the previous run.
-    const claudeStateFile = join(persistentClaudeDir, ".claude.json");
-    const homeWorkspace = process.env.HOME ?? "/root";
-    let claudeState = {};
-    if (existsSync(claudeStateFile)) {
-        try {
-            claudeState = JSON.parse(readFileSync(claudeStateFile, "utf-8"));
-        }
-        catch {
-            claudeState = {};
-        }
-    }
-    claudeState.hasCompletedOnboarding = true;
-    claudeState.theme = claudeState.theme ?? "auto";
-    const projects = (claudeState.projects ?? {});
-    const homeEntry = projects[homeWorkspace] ?? {};
-    homeEntry.hasTrustDialogAccepted = true;
-    projects[homeWorkspace] = homeEntry;
-    claudeState.projects = projects;
-    writeFileSync(claudeStateFile, JSON.stringify(claudeState, null, 2) + "\n", { mode: 0o600 });
-    console.log(`  [install] claude-state primed: ${claudeStateFile} hasCompletedOnboarding=true trustedWorkspace=${homeWorkspace}`);
+    // primeClaudeState creates that directory, so there is no separate mkdir here.
+    primeClaudeState("deploy");
     // Brand isolation: installer does not read ~/.maxy/, ~/.cloudflared/, or
     // ~/.cloudflare/ on non-default brands. These are peer-brand or
     // shared-singleton paths.
@@ -5458,6 +5489,10 @@ try {
     registerLocalAndExternalPlugins(); // install-time plugin registration
     setupVncViewer();
     setupAccount();
+    // Task 2720 — the account directory only exists from here on a fresh
+    // install, and provision-account-dir.sh has just made it a git repo root,
+    // so this is the pass that trusts it. Idempotent on the upgrade path.
+    primeClaudeState("post-account");
     if (ENTITLEMENT_PAYLOAD) {
         writeEntitlementFromFlag(ENTITLEMENT_PAYLOAD);
     }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@rubytech/create-maxy-code",
-  "version": "0.1.604",
+  "version": "0.1.606",
   "description": "Install Maxy — AI for Productive People",
   "bin": {
     "create-maxy-code": "./dist/index.js"

package/payload/platform/lib/routine-templates/dist/roster.d.ts

@@ -34,7 +34,7 @@
  *  routine's prompt only when the stored `routineTemplateVersion` is BELOW this
  *  and no operator has edited the row, so an unbumped edit ships to new installs
  *  and never reaches existing ones — bump it in the same commit as the edit. */
-export declare const ROUTINE_TEMPLATE_VERSION = 6;
+export declare const ROUTINE_TEMPLATE_VERSION = 10;
 /**
  * Task 2379 — the check shapes a shipped template may name.
  *
@@ -92,7 +92,35 @@ export interface RoutineGraphUnflaggedCheck {
     readonly type: "graph-unflagged";
     readonly label: "ConversationArchive" | "Section";
 }
-export type RoutineGateCheck = RoutineMailCheck | RoutineD1Check | RoutineWhatsappCheck | RoutineCalendarCheck | RoutineTelegramCheck | RoutineGraphCheck | RoutineGraphUnflaggedCheck;
+/** Task 2689 — the memory sweep's own state: its two review queues, and whether
+ *  it has stopped running. No fields, because an account has exactly one sweep
+ *  and one of each queue. What is compared is a digest, so the routine wakes
+ *  when a queue moves or the sweep goes silent, never merely because the sweep
+ *  ran again — it runs hourly and this routine is weekly. */
+/** Task 2688 — records changed in a connector this account registered, since
+ *  the routine last woke.
+ *
+ *  `scope` is a KIND of connector, never a name: the account describes the
+ *  queue once, on the connector's own registry record, and the template names
+ *  only which kind it watches. That is what lets a shipped template gate on a
+ *  third-party system at all, since it can carry no per-account value (Task
+ *  2389). A connector that is not registered, or whose credential is refused,
+ *  answers quiet, so the routine no-ops rather than erroring every fire. */
+export interface RoutineConnectorCheck {
+    readonly type: "connector";
+    readonly scope: "operational" | "accounting";
+}
+export interface RoutineSweepCheck {
+    readonly type: "sweep";
+}
+/** Task 2689 — growth under the account's own directory since the last accepted
+ *  wake. `minGrowthBytes` is a size rather than per-account data, so a shipped
+ *  template may name it and still be correct on every install. */
+export interface RoutineFilesystemCheck {
+    readonly type: "filesystem";
+    readonly minGrowthBytes?: number;
+}
+export type RoutineGateCheck = RoutineMailCheck | RoutineD1Check | RoutineWhatsappCheck | RoutineCalendarCheck | RoutineTelegramCheck | RoutineGraphCheck | RoutineGraphUnflaggedCheck | RoutineConnectorCheck | RoutineSweepCheck | RoutineFilesystemCheck;
 /** The plugin and the tool are constants for every roster gate, so a template
  *  carries neither. `hasWork` is true when ANY check is true. */
 export interface RoutineGate {

package/payload/platform/lib/routine-templates/dist/roster.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"roster.d.ts","sourceRoot":"","sources":["../src/roster.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AAEH;;;gFAGgF;AAChF,eAAO,MAAM,wBAAwB,IAAI,CAAC;AAE1C;;;;;;;;;GASG;AACH,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,eAAe,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CAC9C;AACD,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC;IACpB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;CACtB;AACD,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;IAC1B,QAAQ,CAAC,KAAK,EAAE,SAAS,GAAG,QAAQ,CAAC;CACtC;AACD,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;IAC1B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B;AACD;iDACiD;AACjD,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;IAC1B,QAAQ,CAAC,KAAK,EAAE,SAAS,CAAC;CAC3B;AACD;2EAC2E;AAC3E,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;IACvB,QAAQ,CAAC,KAAK,EAAE,cAAc,CAAC;CAChC;AACD;;;;;;;;;;;6DAW6D;AAC7D,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,IAAI,EAAE,iBAAiB,CAAC;IACjC,QAAQ,CAAC,KAAK,EAAE,qBAAqB,GAAG,SAAS,CAAC;CACnD;AACD,MAAM,MAAM,gBAAgB,GACxB,gBAAgB,GAChB,cAAc,GACd,oBAAoB,GACpB,oBAAoB,GACpB,oBAAoB,GACpB,iBAAiB,GACjB,0BAA0B,CAAC;AAE/B;iEACiE;AACjE,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,MAAM,EAAE,SAAS,gBAAgB,EAAE,CAAC;CAC9C;AAWD;;;;;;;;;;;4DAW4D;AAC5D,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,gBAAgB,GAAG,OAAO,CAkBnE;AAED,wBAAgB,eAAe,CAAC,IAAI,EAAE,WAAW,GAAG,OAAO,CAE1D;AAED,MAAM,WAAW,eAAe;IAC9B;;mEAE+D;IAC/D,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,sCAAsC;IACtC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB;;;6EAGyE;IACzE,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B;wEACoE;IACpE,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,+EAA+E;IAC/E,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB;;;;2CAIuC;IACvC,QAAQ,CAAC,IAAI,CAAC,EAAE,WAAW,CAAC;IAC5B;;;+DAG2D;IAC3D,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;CAC5B;AAED;;;;;;;2BAO2B;AAC3B,wBAAgB,YAAY,CAAC,QAAQ,EAAE,eAAe,GAAG,OAAO,CAI/D;AA8KD;;;;;;;;iFAQiF;AACjF,eAAO,MAAM,cAAc,EAAE,SAAS,eAAe,EAiIpD,CAAC;AAEF;;6DAE6D;AAC7D,eAAO,MAAM,mBAAmB,EAAE,SAAS,MAAM,EAAqC,CAAC"}
+{"version":3,"file":"roster.d.ts","sourceRoot":"","sources":["../src/roster.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AAEH;;;gFAGgF;AAChF,eAAO,MAAM,wBAAwB,KAAK,CAAC;AAE3C;;;;;;;;;GASG;AACH,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,eAAe,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CAC9C;AACD,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC;IACpB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;CACtB;AACD,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;IAC1B,QAAQ,CAAC,KAAK,EAAE,SAAS,GAAG,QAAQ,CAAC;CACtC;AACD,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;IAC1B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B;AACD;iDACiD;AACjD,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;IAC1B,QAAQ,CAAC,KAAK,EAAE,SAAS,CAAC;CAC3B;AACD;2EAC2E;AAC3E,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;IACvB,QAAQ,CAAC,KAAK,EAAE,cAAc,CAAC;CAChC;AACD;;;;;;;;;;;6DAW6D;AAC7D,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,IAAI,EAAE,iBAAiB,CAAC;IACjC,QAAQ,CAAC,KAAK,EAAE,qBAAqB,GAAG,SAAS,CAAC;CACnD;AACD;;;;6DAI6D;AAC7D;;;;;;;;4EAQ4E;AAC5E,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC;IAC3B,QAAQ,CAAC,KAAK,EAAE,aAAa,GAAG,YAAY,CAAC;CAC9C;AACD,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;CACxB;AACD;;kEAEkE;AAClE,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,IAAI,EAAE,YAAY,CAAC;IAC5B,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;CAClC;AACD,MAAM,MAAM,gBAAgB,GACxB,gBAAgB,GAChB,cAAc,GACd,oBAAoB,GACpB,oBAAoB,GACpB,oBAAoB,GACpB,iBAAiB,GACjB,0BAA0B,GAC1B,qBAAqB,GACrB,iBAAiB,GACjB,sBAAsB,CAAC;AAE3B;iEACiE;AACjE,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,MAAM,EAAE,SAAS,gBAAgB,EAAE,CAAC;CAC9C;AAWD;;;;;;;;;;;4DAW4D;AAC5D,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,gBAAgB,GAAG,OAAO,CA+BnE;AAED,wBAAgB,eAAe,CAAC,IAAI,EAAE,WAAW,GAAG,OAAO,CAE1D;AAED,MAAM,WAAW,eAAe;IAC9B;;mEAE+D;IAC/D,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,sCAAsC;IACtC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB;;;6EAGyE;IACzE,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B;wEACoE;IACpE,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,+EAA+E;IAC/E,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB;;;;2CAIuC;IACvC,QAAQ,CAAC,IAAI,CAAC,EAAE,WAAW,CAAC;IAC5B;;;+DAG2D;IAC3D,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;CAC5B;AAED;;;;;;;2BAO2B;AAC3B,wBAAgB,YAAY,CAAC,QAAQ,EAAE,eAAe,GAAG,OAAO,CAI/D;AAkKD;;;;;;;;iFAQiF;AACjF,eAAO,MAAM,cAAc,EAAE,SAAS,eAAe,EA0KpD,CAAC;AAEF;;6DAE6D;AAC7D,eAAO,MAAM,mBAAmB,EAAE,SAAS,MAAM,EAAqC,CAAC"}

package/payload/platform/lib/routine-templates/dist/roster.js

@@ -40,7 +40,7 @@ exports.isClassified = isClassified;
  *  routine's prompt only when the stored `routineTemplateVersion` is BELOW this
  *  and no operator has edited the row, so an unbumped edit ships to new installs
  *  and never reaches existing ones — bump it in the same commit as the edit. */
-exports.ROUTINE_TEMPLATE_VERSION = 6;
+exports.ROUTINE_TEMPLATE_VERSION = 10;
 // Task 2663 — `GATE_COMMIT_TOKEN` is deleted. It stood in for a
 // `scheduling-gate` call the routine's own turn made to advance its watermark,
 // and the whole reason it had to be a token was that a template cannot write the
@@ -74,10 +74,23 @@ function isWatermarkedCheck(check) {
     //
     // Task 2681 — `graph` compares an ISO `updatedAt` against a stored one, so a
     // commitless graph gate reports work on every fire exactly as a mail one does.
+    //
+    // Task 2688 — `connector` holds one position PER registered connector, and
+    // compares each against the instant that connector's queue was last read, so
+    // it is watermarked for the same reason.
+    //
+    // Task 2689 — `sweep` compares a digest and `filesystem` compares a byte
+    // count, both against a stored value, so both belong here for the same
+    // reason. Their positions are promoted by the dispatcher on an accepted wake,
+    // which is what makes "since the last report" literal rather than "since the
+    // last fire".
     return (check.type === "mail" ||
         check.type === "calendar" ||
         check.type === "telegram" ||
-        check.type === "graph");
+        check.type === "graph" ||
+        check.type === "connector" ||
+        check.type === "sweep" ||
+        check.type === "filesystem");
 }
 function gateNeedsCommit(gate) {
     return gate.checks.some(isWatermarkedCheck);
@@ -142,17 +155,6 @@ Tomorrow: list tomorrow's appointments with outlook-calendar-list or google-cale
 Say what is unfinished and what tomorrow looks like, in that order, in plain sentences. Do not congratulate, do not summarise the day back, do not pad the message to look thorough.
 
 If nothing is waiting, nothing is overdue and tomorrow is empty, end the turn without replying.`;
-const APPOINTMENT_REMINDER = `Remind the people attending an appointment that is coming up, so nobody is reminded twice and nobody is missed.
-
-Call capabilities-here first. If neither a mail plugin nor a messaging channel is enabled, end the turn without replying.
-
-Find appointments starting within the next reminder window with schedule-list, and read each one's attendees. Resolve each attendee to a person and a contact route with contact-lookup. An attendee you cannot resolve to a route is not a failure to work around: leave them, and say so at the end.
-
-Send each attendee one reminder on the route they are already reachable on: email-send for a mailbox, whatsapp-reply or the Telegram message tool for a messaging thread that already exists. Carry the time, the place and what the appointment is about. Do not open a new conversation with someone who has never messaged the business.
-
-Send at most one reminder per attendee per appointment. Before sending, check the appointment's notes for a reminder already recorded, and record the one you send there.
-
-Reply with one line naming who was reminded and who could not be reached. If no appointment falls in the window, end the turn without replying.`;
 const COMMITMENT_CHASE = `Find the promises the business has made and not kept, and the promises made to it that nobody has kept.
 
 Call capabilities-here first and use only the surfaces it reports.
@@ -269,7 +271,20 @@ exports.ROUTINE_ROSTER = [
         description: "Sends one morning message covering what needs a decision, what is time-bound and what changed overnight; stays silent when there is nothing worth saying.",
         recurrence: "30 7 * * 1-5",
         prompt: START_OF_DAY,
-        gateless: "A morning briefing is judgement every fire, so a gate would either always pass or suppress the briefing.",
+        // Task 2686 — the briefing's two gateable arms. `Section` rather than
+        // `ConversationArchive` on every email-driven row here: sections are written
+        // per ingest, so a reply into a thread this routine already flagged arrives
+        // as a fresh unflagged node, while the archive is MERGEd per thread and
+        // would stay flagged — muting the routine on the traffic it exists to read.
+        // The check names a label and not a source, so any ingested content wakes
+        // these rows, which over-wakes and never mutes. The briefing's third arm,
+        // open and overdue work, has no check type: Task 2714.
+        gate: {
+            checks: [
+                { type: "graph-unflagged", label: "Section" },
+                { type: "graph", scope: "appointments" },
+            ],
+        },
     },
     {
         key: "inbound-check",
@@ -277,7 +292,10 @@ exports.ROUTINE_ROSTER = [
         description: "Triages mail that arrived since the last check and writes replies for you to approve; it never sends anything itself.",
         recurrence: "*/30 9-17 * * 1-5",
         prompt: INBOUND_CHECK,
-        gateless: "Conditional on new mail, but the mail check matches an exact mailbox address and no shipped template can name one (Task 2389).",
+        // Task 2686 — the mail check still cannot name a mailbox, but the sampler
+        // puts every inbound message in the graph, so the unflagged-section check
+        // reaches the same mail without per-account data.
+        gate: { checks: [{ type: "graph-unflagged", label: "Section" }] },
     },
     {
         key: "telegram-inbound-check",
@@ -290,18 +308,18 @@ exports.ROUTINE_ROSTER = [
     {
         key: "end-of-day",
         name: "End of day wrap-up",
-        description: "Closes the day with your unsent drafts, overdue work and tomorrow's diary; says nothing when all three are empty.",
+        description: "Closes the day with your unsent drafts, overdue work and tomorrow's diary, once new mail or a diary change has woken it.",
         recurrence: "0 18 * * 1-5",
         prompt: END_OF_DAY,
-        gateless: "A wrap-up is judgement every fire, so no cheap check stands in for reading the three surfaces it reports.",
-    },
-    {
-        key: "appointment-reminder",
-        name: "Appointment reminders",
-        description: "Reminds each attendee once before a booked appointment, on a route they already use; it never opens a conversation with a stranger.",
-        recurrence: "0 * * * *",
-        prompt: APPOINTMENT_REMINDER,
-        gateless: "Conditional on an appointment falling in the window, but no check type reads appointments held in the graph (Task 2389).",
+        // Task 2686 — the wrap-up wakes on new mail or a diary change. Its other two
+        // surfaces, unsent drafts and overdue work, have no check type, so a day
+        // whose only outstanding item is one of those is silent until Task 2714.
+        gate: {
+            checks: [
+                { type: "graph-unflagged", label: "Section" },
+                { type: "graph", scope: "appointments" },
+            ],
+        },
     },
     {
         key: "commitment-chase",
@@ -309,7 +327,11 @@ exports.ROUTINE_ROSTER = [
         description: "Surfaces promises the business made and did not keep, and promises made to it that nobody kept; it reports them rather than chasing them.",
         recurrence: "0 10 * * 2",
         prompt: COMMITMENT_CHASE,
-        gateless: "Whether a promise has been dropped is the judgement itself, so no check can answer it more cheaply.",
+        // Task 2686 — a dropped promise is a judgement, but the correspondence it
+        // judges is not: this wakes when inbound mail it has not read is in the
+        // graph. Its outbound arm reads sent mail, which the sampler does not ingest
+        // and no shipped template can name a mailbox for: Task 2715.
+        gate: { checks: [{ type: "graph-unflagged", label: "Section" }] },
     },
     {
         key: "calendar-reconcile",
@@ -327,7 +349,9 @@ exports.ROUTINE_ROSTER = [
         description: "Reconciles the people you correspond with against the people on record, creating and updating contacts; it never merges two records that might be two people.",
         recurrence: "45 6 * * 1-5",
         prompt: CONTACT_RECONCILE,
-        gateless: "Conditional on new correspondence, but no check type reads correspondence (Task 2389).",
+        // Task 2686 — correspondence is readable now: the sampler writes it and the
+        // unflagged-section check counts what this routine has not reconciled.
+        gate: { checks: [{ type: "graph-unflagged", label: "Section" }] },
     },
     {
         key: "crm-reconcile",
@@ -335,7 +359,9 @@ exports.ROUTINE_ROSTER = [
         description: "Brings across what changed in whichever operational system this business runs; it reads only and never writes back to that system.",
         recurrence: "0 3 * * *",
         prompt: CRM_RECONCILE,
-        gateless: "Conditional on connector movement, but no check type reads a connector queue (Task 2389).",
+        // Task 2688 — wakes when a connector the account registered as its
+        // operational system holds records changed since the last accepted wake.
+        gate: { checks: [{ type: "connector", scope: "operational" }] },
     },
     {
         key: "finance-reconcile",
@@ -343,7 +369,10 @@ exports.ROUTINE_ROSTER = [
         description: "Reconciles the accounting system against the internal ledger and reports what does not agree; it never adjusts an entry to make the two sides match.",
         recurrence: "0 4 * * 1",
         prompt: FINANCE_RECONCILE,
-        gateless: "Conditional on accounting movement, but no check type reads an accounting ledger (Task 2389).",
+        // Task 2688 — wakes on movement in the connector the account registered as
+        // its accounting system. A connector that is absent or whose credential is
+        // refused answers quiet, so this no-ops rather than erroring every fire.
+        gate: { checks: [{ type: "connector", scope: "accounting" }] },
     },
     {
         key: "weekly-digest",
@@ -351,7 +380,15 @@ exports.ROUTINE_ROSTER = [
         description: "Writes the week in three paragraphs at most: what changed, what is stuck, and what next week turns on.",
         recurrence: "0 16 * * 5",
         prompt: WEEKLY_DIGEST,
-        gateless: "A digest is judgement every fire, and a gate would suppress the report it exists to send.",
+        // Task 2686 — a week with no correspondence and no diary movement has
+        // nothing to report movement on, so the digest is silent rather than
+        // writing three paragraphs about a week in which nothing happened.
+        gate: {
+            checks: [
+                { type: "graph-unflagged", label: "Section" },
+                { type: "graph", scope: "appointments" },
+            ],
+        },
     },
     {
         key: "channel-link-check",
@@ -367,7 +404,11 @@ exports.ROUTINE_ROSTER = [
         description: "Reports what the hourly graph sweep last did and what is waiting for review; it reads only and never runs the sweep itself.",
         recurrence: "0 9 * * 1",
         prompt: GRAPH_HEALTH,
-        gateless: "Reports the sweep's state every fire by design, so there is nothing conditional to check.",
+        // Task 2689 — the sweep's state IS the delta. The digest carries the two
+        // review-queue counts and whether the sweep has stopped writing reports,
+        // never the newest report's identity: the sweep runs hourly, so a digest
+        // that moved on every run would make this weekly routine wake every fire.
+        gate: { checks: [{ type: "sweep" }] },
     },
     {
         key: "filesystem-health",
@@ -375,7 +416,10 @@ exports.ROUTINE_ROSTER = [
         description: "Reports what has grown under the account directory and which paths are worth attention; it deletes nothing.",
         recurrence: "0 9 * * 1",
         prompt: FILESYSTEM_HEALTH,
-        gateless: "Reports what has grown every fire by design, so there is nothing conditional to check.",
+        // Task 2689 — 64 MiB of growth under the account directory since the last
+        // report. What has ACCUMULATED is the question, so an account that is large
+        // and stable has nothing new to say and the routine stays silent.
+        gate: { checks: [{ type: "filesystem", minGrowthBytes: 67108864 }] },
     },
 ];
 /** Every roster key, in roster order. The scheduling heartbeat's `op=roster`

package/payload/platform/lib/routine-templates/dist/roster.js.map

@@ -1 +1 @@
-{"version":3,"file":"roster.js","sourceRoot":"","sources":["../src/roster.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;;;AAqGH,gDAkBC;AAED,0CAEC;AAwCD,oCAIC;AArKD;;;gFAGgF;AACnE,QAAA,wBAAwB,GAAG,CAAC,CAAC;AA0E1C,gEAAgE;AAChE,+EAA+E;AAC/E,iFAAiF;AACjF,wEAAwE;AACxE,+EAA+E;AAC/E,oEAAoE;AACpE,iFAAiF;AACjF,gDAAgD;AAEhD;;;;;;;;;;;4DAW4D;AAC5D,SAAgB,kBAAkB,CAAC,KAAuB;IACxD,IAAI,KAAK,CAAC,IAAI,KAAK,UAAU;QAAE,OAAO,KAAK,CAAC,KAAK,KAAK,SAAS,CAAC;IAChE,8EAA8E;IAC9E,+EAA+E;IAC/E,uEAAuE;IACvE,6EAA6E;IAC7E,0EAA0E;IAC1E,8EAA8E;IAC9E,0BAA0B;IAC1B,EAAE;IACF,6EAA6E;IAC7E,+EAA+E;IAC/E,OAAO,CACL,KAAK,CAAC,IAAI,KAAK,MAAM;QACrB,KAAK,CAAC,IAAI,KAAK,UAAU;QACzB,KAAK,CAAC,IAAI,KAAK,UAAU;QACzB,KAAK,CAAC,IAAI,KAAK,OAAO,CACvB,CAAC;AACJ,CAAC;AAED,SAAgB,eAAe,CAAC,IAAiB;IAC/C,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;AAC9C,CAAC;AAgCD;;;;;;;2BAO2B;AAC3B,SAAgB,YAAY,CAAC,QAAyB;IACpD,MAAM,KAAK,GAAG,QAAQ,CAAC,IAAI,IAAI,IAAI,CAAC;IACpC,MAAM,gBAAgB,GAAG,OAAO,QAAQ,CAAC,QAAQ,KAAK,QAAQ,IAAI,QAAQ,CAAC,QAAQ,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC;IAClG,OAAO,KAAK,KAAK,gBAAgB,CAAC;AACpC,CAAC;AAED,MAAM,YAAY,GAAG;;;;;;;;;;;4OAWuN,CAAC;AAE7O,MAAM,aAAa,GAAG;;;;;;;;;;2NAUqM,CAAC;AAE5N,MAAM,uBAAuB,GAAG;;;;;;;;;;;;sFAYsD,CAAC;AAEvF,MAAM,UAAU,GAAG;;;;;;;;;;gGAU6E,CAAC;AAEjG,MAAM,oBAAoB,GAAG;;;;;;;;;;gJAUmH,CAAC;AAEjJ,MAAM,gBAAgB,GAAG;;;;;;;;;;;4DAWmC,CAAC;AAE7D,MAAM,kBAAkB,GAAG;;;;;;;;;;8NAUmM,CAAC;AAE/N,MAAM,iBAAiB,GAAG;;;;;;;;;;4JAUkI,CAAC;AAE7J,MAAM,aAAa,GAAG;;;;;;;;2HAQqG,CAAC;AAE5H,MAAM,iBAAiB,GAAG;;;;;;;;;;gHAUsF,CAAC;AAEjH,MAAM,aAAa,GAAG;;;;;;;;;;;;gEAY0C,CAAC;AAEjE,MAAM,kBAAkB,GAAG;;;;;;;;;;sHAU2F,CAAC;AAEvH,MAAM,YAAY,GAAG;;;;;;;;;;gJAU2H,CAAC;AAEjJ,MAAM,iBAAiB,GAAG;;;;;;;;;;mFAUyD,CAAC;AAEpF;;;;;;;;iFAQiF;AACpE,QAAA,cAAc,GAA+B;IACxD;QACE,GAAG,EAAE,cAAc;QACnB,IAAI,EAAE,uBAAuB;QAC7B,WAAW,EACT,2JAA2J;QAC7J,UAAU,EAAE,cAAc;QAC1B,MAAM,EAAE,YAAY;QACpB,QAAQ,EAAE,0GAA0G;KACrH;IACD;QACE,GAAG,EAAE,eAAe;QACpB,IAAI,EAAE,6BAA6B;QACnC,WAAW,EACT,uHAAuH;QACzH,UAAU,EAAE,mBAAmB;QAC/B,MAAM,EAAE,aAAa;QACrB,QAAQ,EAAE,gIAAgI;KAC3I;IACD;QACE,GAAG,EAAE,wBAAwB;QAC7B,IAAI,EAAE,yBAAyB;QAC/B,WAAW,EACT,gKAAgK;QAClK,UAAU,EAAE,mBAAmB;QAC/B,MAAM,EAAE,uBAAuB;QAC/B,IAAI,EAAE,EAAE,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,EAAE;KAC3D;IACD;QACE,GAAG,EAAE,YAAY;QACjB,IAAI,EAAE,oBAAoB;QAC1B,WAAW,EACT,mHAAmH;QACrH,UAAU,EAAE,cAAc;QAC1B,MAAM,EAAE,UAAU;QAClB,QAAQ,EAAE,2GAA2G;KACtH;IACD;QACE,GAAG,EAAE,sBAAsB;QAC3B,IAAI,EAAE,uBAAuB;QAC7B,WAAW,EACT,qIAAqI;QACvI,UAAU,EAAE,WAAW;QACvB,MAAM,EAAE,oBAAoB;QAC5B,QAAQ,EAAE,0HAA0H;KACrI;IACD;QACE,GAAG,EAAE,kBAAkB;QACvB,IAAI,EAAE,kBAAkB;QACxB,WAAW,EACT,2IAA2I;QAC7I,UAAU,EAAE,YAAY;QACxB,MAAM,EAAE,gBAAgB;QACxB,QAAQ,EAAE,qGAAqG;KAChH;IACD;QACE,GAAG,EAAE,oBAAoB;QACzB,IAAI,EAAE,oBAAoB;QAC1B,WAAW,EACT,gKAAgK;QAClK,UAAU,EAAE,cAAc;QAC1B,MAAM,EAAE,kBAAkB;QAC1B,0EAA0E;QAC1E,iEAAiE;QACjE,IAAI,EAAE,EAAE,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,SAAS,EAAE,SAAS,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,EAAE;KACzG;IACD;QACE,GAAG,EAAE,mBAAmB;QACxB,IAAI,EAAE,mBAAmB;QACzB,WAAW,EACT,+JAA+J;QACjK,UAAU,EAAE,cAAc;QAC1B,MAAM,EAAE,iBAAiB;QACzB,QAAQ,EAAE,wFAAwF;KACnG;IACD;QACE,GAAG,EAAE,eAAe;QACpB,IAAI,EAAE,8BAA8B;QACpC,WAAW,EACT,oIAAoI;QACtI,UAAU,EAAE,WAAW;QACvB,MAAM,EAAE,aAAa;QACrB,QAAQ,EAAE,2FAA2F;KACtG;IACD;QACE,GAAG,EAAE,mBAAmB;QACxB,IAAI,EAAE,mBAAmB;QACzB,WAAW,EACT,sJAAsJ;QACxJ,UAAU,EAAE,WAAW;QACvB,MAAM,EAAE,iBAAiB;QACzB,QAAQ,EAAE,+FAA+F;KAC1G;IACD;QACE,GAAG,EAAE,eAAe;QACpB,IAAI,EAAE,eAAe;QACrB,WAAW,EACT,wGAAwG;QAC1G,UAAU,EAAE,YAAY;QACxB,MAAM,EAAE,aAAa;QACrB,QAAQ,EAAE,2FAA2F;KACtG;IACD;QACE,GAAG,EAAE,oBAAoB;QACzB,IAAI,EAAE,oBAAoB;QAC1B,WAAW,EACT,qIAAqI;QACvI,UAAU,EAAE,cAAc;QAC1B,MAAM,EAAE,kBAAkB;QAC1B,IAAI,EAAE,EAAE,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,EAAE;KAC1D;IACD;QACE,GAAG,EAAE,cAAc;QACnB,IAAI,EAAE,qBAAqB;QAC3B,WAAW,EACT,6HAA6H;QAC/H,UAAU,EAAE,WAAW;QACvB,MAAM,EAAE,YAAY;QACpB,QAAQ,EAAE,2FAA2F;KACtG;IACD;QACE,GAAG,EAAE,mBAAmB;QACxB,IAAI,EAAE,0BAA0B;QAChC,WAAW,EACT,6GAA6G;QAC/G,UAAU,EAAE,WAAW;QACvB,MAAM,EAAE,iBAAiB;QACzB,QAAQ,EAAE,wFAAwF;KACnG;CACF,CAAC;AAEF;;6DAE6D;AAChD,QAAA,mBAAmB,GAAsB,sBAAc,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC"}
+{"version":3,"file":"roster.js","sourceRoot":"","sources":["../src/roster.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;;;AAoIH,gDA+BC;AAED,0CAEC;AAwCD,oCAIC;AAjND;;;gFAGgF;AACnE,QAAA,wBAAwB,GAAG,EAAE,CAAC;AAyG3C,gEAAgE;AAChE,+EAA+E;AAC/E,iFAAiF;AACjF,wEAAwE;AACxE,+EAA+E;AAC/E,oEAAoE;AACpE,iFAAiF;AACjF,gDAAgD;AAEhD;;;;;;;;;;;4DAW4D;AAC5D,SAAgB,kBAAkB,CAAC,KAAuB;IACxD,IAAI,KAAK,CAAC,IAAI,KAAK,UAAU;QAAE,OAAO,KAAK,CAAC,KAAK,KAAK,SAAS,CAAC;IAChE,8EAA8E;IAC9E,+EAA+E;IAC/E,uEAAuE;IACvE,6EAA6E;IAC7E,0EAA0E;IAC1E,8EAA8E;IAC9E,0BAA0B;IAC1B,EAAE;IACF,6EAA6E;IAC7E,+EAA+E;IAC/E,EAAE;IACF,2EAA2E;IAC3E,6EAA6E;IAC7E,yCAAyC;IACzC,EAAE;IACF,yEAAyE;IACzE,uEAAuE;IACvE,8EAA8E;IAC9E,6EAA6E;IAC7E,cAAc;IACd,OAAO,CACL,KAAK,CAAC,IAAI,KAAK,MAAM;QACrB,KAAK,CAAC,IAAI,KAAK,UAAU;QACzB,KAAK,CAAC,IAAI,KAAK,UAAU;QACzB,KAAK,CAAC,IAAI,KAAK,OAAO;QACtB,KAAK,CAAC,IAAI,KAAK,WAAW;QAC1B,KAAK,CAAC,IAAI,KAAK,OAAO;QACtB,KAAK,CAAC,IAAI,KAAK,YAAY,CAC5B,CAAC;AACJ,CAAC;AAED,SAAgB,eAAe,CAAC,IAAiB;IAC/C,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;AAC9C,CAAC;AAgCD;;;;;;;2BAO2B;AAC3B,SAAgB,YAAY,CAAC,QAAyB;IACpD,MAAM,KAAK,GAAG,QAAQ,CAAC,IAAI,IAAI,IAAI,CAAC;IACpC,MAAM,gBAAgB,GAAG,OAAO,QAAQ,CAAC,QAAQ,KAAK,QAAQ,IAAI,QAAQ,CAAC,QAAQ,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC;IAClG,OAAO,KAAK,KAAK,gBAAgB,CAAC;AACpC,CAAC;AAED,MAAM,YAAY,GAAG;;;;;;;;;;;4OAWuN,CAAC;AAE7O,MAAM,aAAa,GAAG;;;;;;;;;;2NAUqM,CAAC;AAE5N,MAAM,uBAAuB,GAAG;;;;;;;;;;;;sFAYsD,CAAC;AAEvF,MAAM,UAAU,GAAG;;;;;;;;;;gGAU6E,CAAC;AAEjG,MAAM,gBAAgB,GAAG;;;;;;;;;;;4DAWmC,CAAC;AAE7D,MAAM,kBAAkB,GAAG;;;;;;;;;;8NAUmM,CAAC;AAE/N,MAAM,iBAAiB,GAAG;;;;;;;;;;4JAUkI,CAAC;AAE7J,MAAM,aAAa,GAAG;;;;;;;;2HAQqG,CAAC;AAE5H,MAAM,iBAAiB,GAAG;;;;;;;;;;gHAUsF,CAAC;AAEjH,MAAM,aAAa,GAAG;;;;;;;;;;;;gEAY0C,CAAC;AAEjE,MAAM,kBAAkB,GAAG;;;;;;;;;;sHAU2F,CAAC;AAEvH,MAAM,YAAY,GAAG;;;;;;;;;;gJAU2H,CAAC;AAEjJ,MAAM,iBAAiB,GAAG;;;;;;;;;;mFAUyD,CAAC;AAEpF;;;;;;;;iFAQiF;AACpE,QAAA,cAAc,GAA+B;IACxD;QACE,GAAG,EAAE,cAAc;QACnB,IAAI,EAAE,uBAAuB;QAC7B,WAAW,EACT,2JAA2J;QAC7J,UAAU,EAAE,cAAc;QAC1B,MAAM,EAAE,YAAY;QACpB,sEAAsE;QACtE,6EAA6E;QAC7E,4EAA4E;QAC5E,wEAAwE;QACxE,4EAA4E;QAC5E,0EAA0E;QAC1E,0EAA0E;QAC1E,uDAAuD;QACvD,IAAI,EAAE;YACJ,MAAM,EAAE;gBACN,EAAE,IAAI,EAAE,iBAAiB,EAAE,KAAK,EAAE,SAAS,EAAE;gBAC7C,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,cAAc,EAAE;aACzC;SACF;KACF;IACD;QACE,GAAG,EAAE,eAAe;QACpB,IAAI,EAAE,6BAA6B;QACnC,WAAW,EACT,uHAAuH;QACzH,UAAU,EAAE,mBAAmB;QAC/B,MAAM,EAAE,aAAa;QACrB,0EAA0E;QAC1E,0EAA0E;QAC1E,kDAAkD;QAClD,IAAI,EAAE,EAAE,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,iBAAiB,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,EAAE;KAClE;IACD;QACE,GAAG,EAAE,wBAAwB;QAC7B,IAAI,EAAE,yBAAyB;QAC/B,WAAW,EACT,gKAAgK;QAClK,UAAU,EAAE,mBAAmB;QAC/B,MAAM,EAAE,uBAAuB;QAC/B,IAAI,EAAE,EAAE,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,EAAE;KAC3D;IACD;QACE,GAAG,EAAE,YAAY;QACjB,IAAI,EAAE,oBAAoB;QAC1B,WAAW,EACT,0HAA0H;QAC5H,UAAU,EAAE,cAAc;QAC1B,MAAM,EAAE,UAAU;QAClB,6EAA6E;QAC7E,yEAAyE;QACzE,yEAAyE;QACzE,IAAI,EAAE;YACJ,MAAM,EAAE;gBACN,EAAE,IAAI,EAAE,iBAAiB,EAAE,KAAK,EAAE,SAAS,EAAE;gBAC7C,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,cAAc,EAAE;aACzC;SACF;KACF;IACD;QACE,GAAG,EAAE,kBAAkB;QACvB,IAAI,EAAE,kBAAkB;QACxB,WAAW,EACT,2IAA2I;QAC7I,UAAU,EAAE,YAAY;QACxB,MAAM,EAAE,gBAAgB;QACxB,0EAA0E;QAC1E,wEAAwE;QACxE,6EAA6E;QAC7E,6DAA6D;QAC7D,IAAI,EAAE,EAAE,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,iBAAiB,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,EAAE;KAClE;IACD;QACE,GAAG,EAAE,oBAAoB;QACzB,IAAI,EAAE,oBAAoB;QAC1B,WAAW,EACT,gKAAgK;QAClK,UAAU,EAAE,cAAc;QAC1B,MAAM,EAAE,kBAAkB;QAC1B,0EAA0E;QAC1E,iEAAiE;QACjE,IAAI,EAAE,EAAE,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,SAAS,EAAE,SAAS,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,EAAE;KACzG;IACD;QACE,GAAG,EAAE,mBAAmB;QACxB,IAAI,EAAE,mBAAmB;QACzB,WAAW,EACT,+JAA+J;QACjK,UAAU,EAAE,cAAc;QAC1B,MAAM,EAAE,iBAAiB;QACzB,4EAA4E;QAC5E,uEAAuE;QACvE,IAAI,EAAE,EAAE,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,iBAAiB,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,EAAE;KAClE;IACD;QACE,GAAG,EAAE,eAAe;QACpB,IAAI,EAAE,8BAA8B;QACpC,WAAW,EACT,oIAAoI;QACtI,UAAU,EAAE,WAAW;QACvB,MAAM,EAAE,aAAa;QACrB,mEAAmE;QACnE,yEAAyE;QACzE,IAAI,EAAE,EAAE,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,KAAK,EAAE,aAAa,EAAE,CAAC,EAAE;KAChE;IACD;QACE,GAAG,EAAE,mBAAmB;QACxB,IAAI,EAAE,mBAAmB;QACzB,WAAW,EACT,sJAAsJ;QACxJ,UAAU,EAAE,WAAW;QACvB,MAAM,EAAE,iBAAiB;QACzB,2EAA2E;QAC3E,2EAA2E;QAC3E,yEAAyE;QACzE,IAAI,EAAE,EAAE,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,KAAK,EAAE,YAAY,EAAE,CAAC,EAAE;KAC/D;IACD;QACE,GAAG,EAAE,eAAe;QACpB,IAAI,EAAE,eAAe;QACrB,WAAW,EACT,wGAAwG;QAC1G,UAAU,EAAE,YAAY;QACxB,MAAM,EAAE,aAAa;QACrB,sEAAsE;QACtE,qEAAqE;QACrE,mEAAmE;QACnE,IAAI,EAAE;YACJ,MAAM,EAAE;gBACN,EAAE,IAAI,EAAE,iBAAiB,EAAE,KAAK,EAAE,SAAS,EAAE;gBAC7C,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,cAAc,EAAE;aACzC;SACF;KACF;IACD;QACE,GAAG,EAAE,oBAAoB;QACzB,IAAI,EAAE,oBAAoB;QAC1B,WAAW,EACT,qIAAqI;QACvI,UAAU,EAAE,cAAc;QAC1B,MAAM,EAAE,kBAAkB;QAC1B,IAAI,EAAE,EAAE,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,EAAE;KAC1D;IACD;QACE,GAAG,EAAE,cAAc;QACnB,IAAI,EAAE,qBAAqB;QAC3B,WAAW,EACT,6HAA6H;QAC/H,UAAU,EAAE,WAAW;QACvB,MAAM,EAAE,YAAY;QACpB,yEAAyE;QACzE,yEAAyE;QACzE,yEAAyE;QACzE,0EAA0E;QAC1E,IAAI,EAAE,EAAE,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,EAAE;KACtC;IACD;QACE,GAAG,EAAE,mBAAmB;QACxB,IAAI,EAAE,0BAA0B;QAChC,WAAW,EACT,6GAA6G;QAC/G,UAAU,EAAE,WAAW;QACvB,MAAM,EAAE,iBAAiB;QACzB,0EAA0E;QAC1E,4EAA4E;QAC5E,kEAAkE;QAClE,IAAI,EAAE,EAAE,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,cAAc,EAAE,QAAQ,EAAE,CAAC,EAAE;KACrE;CACF,CAAC;AAEF;;6DAE6D;AAChD,QAAA,mBAAmB,GAAsB,sBAAc,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC"}

package/payload/platform/lib/routine-templates/src/__tests__/seed.test.ts

@@ -415,7 +415,28 @@ describe("gate seeding", () => {
     expect(byKey.get("channel-link-check")).toBe('[{"type":"whatsapp","scope":"status"}]');
     expect(byKey.get("calendar-reconcile")).toBe('[{"type":"calendar","connector":"account"},{"type":"graph","scope":"appointments"}]');
     expect(byKey.get("telegram-inbound-check")).toBe('[{"type":"telegram","scope":"inbound"}]');
-    expect(byKey.get("weekly-digest")).toBeNull();
+    // Task 2686 — weekly-digest is gated now, so the null example moved to a row
+    // that is still gateless, and the digest's own two checks are asserted here.
+    expect(byKey.get("weekly-digest")).toBe(
+      '[{"type":"graph-unflagged","label":"Section"},{"type":"graph","scope":"appointments"}]',
+    );
+    expect(byKey.get("inbound-check")).toBe('[{"type":"graph-unflagged","label":"Section"}]');
+    // Task 2689 — the gateless example is DERIVED rather than named. 2686 gated
+    // six rows and moved this assertion onto `graph-health`; 2689 gated
+    // `graph-health` and `filesystem-health`, so it moved again. Every row still
+    // carrying a reason is a target of 2687 or 2688, so naming one would break
+    // on their landing too. When 2691 removes the field, the `!` here throws and
+    // points at the assertion that has to go with it.
+    // Task 2688 — there is no gateless row left to sample. 2686 gated six rows
+    // and moved this assertion onto `graph-health`; 2689 gated `graph-health`
+    // and `filesystem-health`, so it moved again; 2687 withdrew
+    // `appointment-reminder` and 2688 gated the last two, which leaves the
+    // shipped roster carrying no `gateless` reason at all. The seed's null arm
+    // is now unreachable from this roster and dies with the field in Task 2691,
+    // so what is asserted here is the fact that replaced it: every shipped row
+    // seeds serialised checks, and none seeds null.
+    expect(ROUTINE_ROSTER.filter((r) => r.gate == null)).toEqual([]);
+    expect([...byKey.values()].filter((v) => v === null)).toEqual([]);
   });
 
   it("serialises the checks in exactly one place", () => {