@rubytech/create-realagent-code 0.1.574 → 0.1.575

package/payload/platform/plugins/dispatch/mcp/dist/tools/site-upsert.js

@@ -0,0 +1,139 @@
+import { newReqId } from "../lib/ids.js";
+import { readNodeId } from "../lib/read.js";
+import { toolText, toolError } from "./result.js";
+/** `Site.region` is one of these four (`schema-dispatch.md`). */
+const REGIONS = ["East", "North", "South", "West"];
+/** The customer already on this site's `HAS_SITE` edge, or null. */
+async function readSiteCustomerNodeId(session, accountId, siteId) {
+    const r = await session.run(`MATCH (c:Customer {accountId: $accountId})-[:HAS_SITE]->(:Site {accountId: $accountId, siteId: $siteId})
+     RETURN elementId(c) AS id LIMIT 1`, { accountId, siteId });
+    return r.records.length === 0 ? null : String(r.records[0].get("id"));
+}
+export async function siteUpsert(p) {
+    const reqId = newReqId();
+    // Refusals say "site", not an operator noun. `vocabulary` declares words for
+    // the job, the visit and the worker and nothing for the place; borrowing the
+    // job's word here would put a contractor's "Job site" in front of a taxi
+    // firm and would conflate two distinct nouns. The result still carries
+    // `vocabulary` so the agent phrases its own sentence.
+    // Which of the three address properties arrived. Named before anything is
+    // written, so a partial address refuses without having created a site.
+    const addressParts = {
+        streetAddress: p.streetAddress,
+        addressLocality: p.addressLocality,
+        postalCode: p.postalCode,
+    };
+    // `missing` is the complement of `supplied`, not the undefined keys: an empty
+    // string is not supplied either, and computing the two independently left the
+    // refusal naming nothing when a caller passed `streetAddress: ""`.
+    const supplied = Object.entries(addressParts).filter(([, v]) => v !== undefined && v !== "");
+    const suppliedKeys = new Set(supplied.map(([k]) => k));
+    const missing = Object.keys(addressParts).filter((k) => !suppliedKeys.has(k));
+    if (supplied.length > 0 && supplied.length < 3) {
+        return toolError(`An address needs all three of streetAddress, addressLocality and postalCode. ` +
+            `Missing: ${missing.join(", ")}. A part of an address on a card reads as a whole one, ` +
+            `and the site would be counted as addressed when nobody could find it.`);
+    }
+    const writesAddress = supplied.length === 3;
+    const siteNodeIdBefore = await readNodeId(p.session, p.accountId, "Site", "siteId", p.siteId);
+    const created = siteNodeIdBefore === null;
+    if (created) {
+        const absent = [
+            p.name === undefined ? "name" : null,
+            p.region === undefined ? "region" : null,
+        ].filter(Boolean);
+        if (absent.length > 0) {
+            return toolError(`No site can be created: "${p.siteId}" does not exist on this account and ` +
+                `${absent.join(" and ")} ${absent.length === 1 ? "was" : "were"} not supplied.`);
+        }
+    }
+    if (p.region !== undefined && !REGIONS.includes(p.region)) {
+        return toolError(`region "${p.region}" is not one this ontology declares. It is one of: ${REGIONS.join(", ")}.`);
+    }
+    // The customer, in the order that gives the more useful refusal: a named one
+    // that does not exist is a mistake worth naming, and only then the fallback.
+    let customerNodeId = null;
+    if (p.customerId !== undefined) {
+        customerNodeId = await readNodeId(p.session, p.accountId, "Customer", "customerId", p.customerId);
+        if (!customerNodeId) {
+            return toolError(`No site can be written: customer "${p.customerId}" does not exist on this account. ` +
+                `Create the customer first.`);
+        }
+        // Moving a site to another customer is refused, not performed. MERGE adds
+        // the new edge and leaves the old one, so the site would belong to two
+        // customers at once and every read that joins through one would disagree
+        // with every read that joins through the other.
+        if (!created) {
+            const existing = await readSiteCustomerNodeId(p.session, p.accountId, p.siteId);
+            if (existing !== null && existing !== customerNodeId) {
+                return toolError(`Site "${p.siteId}" already belongs to a different customer. This tool will not move a ` +
+                    `site between customers: omit customerId to write against the customer it has.`);
+            }
+        }
+    }
+    else if (!created) {
+        customerNodeId = await readSiteCustomerNodeId(p.session, p.accountId, p.siteId);
+    }
+    if (!customerNodeId) {
+        return toolError(`No site can be written: a site must hang off its customer, and no customerId was ` +
+            `supplied${created ? "" : ` and site "${p.siteId}" has no customer edge`}. ` +
+            `Pass customerId.`);
+    }
+    // Only what the caller supplied. An omitted property is not written, so an
+    // address edit cannot blank the name the office typed last month.
+    const siteWrite = await p.write({
+        session: p.session,
+        labels: ["Site"],
+        props: {
+            accountId: p.accountId,
+            siteId: p.siteId,
+            ...(p.name === undefined ? {} : { name: p.name }),
+            ...(p.region === undefined ? {} : { region: p.region }),
+        },
+        relationships: [{ type: "HAS_SITE", direction: "incoming", targetNodeId: customerNodeId }],
+        createdBy: p.createdBy,
+        mergeOn: ["siteId"],
+    });
+    if (writesAddress) {
+        // A site has ONE address. Correcting a postcode writes a new PostalAddress
+        // — the merge key is the street and the postcode, so a corrected one is a
+        // different node — and MERGE never removes the edge to the old one. Without
+        // this clear, the site would end up with two, and the worker's day would
+        // list the same visit twice, once per address.
+        //
+        // The edge goes, not the node: an address node may be shared with another
+        // site on this account, and deleting it would take that site's address with
+        // it. An address left with no edges is noise for the prune to collect, not
+        // something to remove from underneath a second owner.
+        await p.session.run(`MATCH (s:Site {accountId: $accountId, siteId: $siteId})-[r:AT_ADDRESS]->(:PostalAddress)
+       DELETE r`, { accountId: p.accountId, siteId: p.siteId });
+        // `accountId` is stamped and part of the merge key. `schema-base.md`
+        // exempts PostalAddress from carrying it so two entities can share one
+        // address node; that sharing is within an account, and a node shared across
+        // accounts would be an edge out of this account's data.
+        await p.write({
+            session: p.session,
+            labels: ["PostalAddress"],
+            props: {
+                accountId: p.accountId,
+                streetAddress: p.streetAddress,
+                addressLocality: p.addressLocality,
+                postalCode: p.postalCode,
+            },
+            relationships: [
+                { type: "AT_ADDRESS", direction: "incoming", targetNodeId: siteWrite.nodeId },
+            ],
+            createdBy: p.createdBy,
+            mergeOn: ["streetAddress", "postalCode"],
+        });
+    }
+    p.emit(`[dispatch] op=site-upsert reqId=${reqId} siteId=${p.siteId} created=${created} ` +
+        `address=${writesAddress ? "set" : "none"}`);
+    return toolText(JSON.stringify({
+        siteId: p.siteId,
+        created,
+        address: writesAddress ? addressParts : null,
+        vocabulary: p.cfg.vocabulary,
+    }, null, 2));
+}
+//# sourceMappingURL=site-upsert.js.map

package/payload/platform/plugins/dispatch/mcp/dist/tools/site-upsert.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"site-upsert.js","sourceRoot":"","sources":["../../src/tools/site-upsert.ts"],"names":[],"mappings":"AAyBA,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AACzC,OAAO,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AAC5C,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAmB,MAAM,aAAa,CAAC;AAEnE,iEAAiE;AACjE,MAAM,OAAO,GAAG,CAAC,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,CAAU,CAAC;AAkB5D,oEAAoE;AACpE,KAAK,UAAU,sBAAsB,CACnC,OAAgB,EAChB,SAAiB,EACjB,MAAc;IAEd,MAAM,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CACzB;uCACmC,EACnC,EAAE,SAAS,EAAE,MAAM,EAAE,CACtB,CAAC;IACF,OAAO,CAAC,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;AACxE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,CAAmB;IAClD,MAAM,KAAK,GAAG,QAAQ,EAAE,CAAC;IAEzB,6EAA6E;IAC7E,6EAA6E;IAC7E,yEAAyE;IACzE,uEAAuE;IACvE,sDAAsD;IAEtD,0EAA0E;IAC1E,uEAAuE;IACvE,MAAM,YAAY,GAAG;QACnB,aAAa,EAAE,CAAC,CAAC,aAAa;QAC9B,eAAe,EAAE,CAAC,CAAC,eAAe;QAClC,UAAU,EAAE,CAAC,CAAC,UAAU;KACzB,CAAC;IACF,8EAA8E;IAC9E,8EAA8E;IAC9E,mEAAmE;IACnE,MAAM,QAAQ,GAAG,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,SAAS,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;IAC7F,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IACvD,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IAC9E,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC/C,OAAO,SAAS,CACd,+EAA+E;YAC7E,YAAY,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,yDAAyD;YACvF,uEAAuE,CAC1E,CAAC;IACJ,CAAC;IACD,MAAM,aAAa,GAAG,QAAQ,CAAC,MAAM,KAAK,CAAC,CAAC;IAE5C,MAAM,gBAAgB,GAAG,MAAM,UAAU,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC;IAC9F,MAAM,OAAO,GAAG,gBAAgB,KAAK,IAAI,CAAC;IAE1C,IAAI,OAAO,EAAE,CAAC;QACZ,MAAM,MAAM,GAAG;YACb,CAAC,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI;YACpC,CAAC,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI;SACzC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAClB,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACtB,OAAO,SAAS,CACd,4BAA4B,CAAC,CAAC,MAAM,uCAAuC;gBACzE,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,gBAAgB,CAClF,CAAC;QACJ,CAAC;IACH,CAAC;IAED,IAAI,CAAC,CAAC,MAAM,KAAK,SAAS,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAkC,CAAC,EAAE,CAAC;QACtF,OAAO,SAAS,CACd,WAAW,CAAC,CAAC,MAAM,sDAAsD,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAC/F,CAAC;IACJ,CAAC;IAED,6EAA6E;IAC7E,6EAA6E;IAC7E,IAAI,cAAc,GAAkB,IAAI,CAAC;IACzC,IAAI,CAAC,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;QAC/B,cAAc,GAAG,MAAM,UAAU,CAC/B,CAAC,CAAC,OAAO,EACT,CAAC,CAAC,SAAS,EACX,UAAU,EACV,YAAY,EACZ,CAAC,CAAC,UAAU,CACb,CAAC;QACF,IAAI,CAAC,cAAc,EAAE,CAAC;YACpB,OAAO,SAAS,CACd,qCAAqC,CAAC,CAAC,UAAU,oCAAoC;gBACnF,4BAA4B,CAC/B,CAAC;QACJ,CAAC;QACD,0EAA0E;QAC1E,uEAAuE;QACvE,yEAAyE;QACzE,gDAAgD;QAChD,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,QAAQ,GAAG,MAAM,sBAAsB,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC;YAChF,IAAI,QAAQ,KAAK,IAAI,IAAI,QAAQ,KAAK,cAAc,EAAE,CAAC;gBACrD,OAAO,SAAS,CACd,SAAS,CAAC,CAAC,MAAM,uEAAuE;oBACtF,+EAA+E,CAClF,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;SAAM,IAAI,CAAC,OAAO,EAAE,CAAC;QACpB,cAAc,GAAG,MAAM,sBAAsB,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC;IAClF,CAAC;IACD,IAAI,CAAC,cAAc,EAAE,CAAC;QACpB,OAAO,SAAS,CACd,mFAAmF;YACjF,WAAW,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,MAAM,wBAAwB,IAAI;YAC5E,kBAAkB,CACrB,CAAC;IACJ,CAAC;IAED,2EAA2E;IAC3E,kEAAkE;IAClE,MAAM,SAAS,GAAG,MAAM,CAAC,CAAC,KAAK,CAAC;QAC9B,OAAO,EAAE,CAAC,CAAC,OAAO;QAClB,MAAM,EAAE,CAAC,MAAM,CAAC;QAChB,KAAK,EAAE;YACL,SAAS,EAAE,CAAC,CAAC,SAAS;YACtB,MAAM,EAAE,CAAC,CAAC,MAAM;YAChB,GAAG,CAAC,CAAC,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;YACjD,GAAG,CAAC,CAAC,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;SACxD;QACD,aAAa,EAAE,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,SAAS,EAAE,UAAU,EAAE,YAAY,EAAE,cAAc,EAAE,CAAC;QAC1F,SAAS,EAAE,CAAC,CAAC,SAAS;QACtB,OAAO,EAAE,CAAC,QAAQ,CAAC;KACpB,CAAC,CAAC;IAEH,IAAI,aAAa,EAAE,CAAC;QAClB,2EAA2E;QAC3E,0EAA0E;QAC1E,4EAA4E;QAC5E,yEAAyE;QACzE,+CAA+C;QAC/C,EAAE;QACF,0EAA0E;QAC1E,4EAA4E;QAC5E,2EAA2E;QAC3E,sDAAsD;QACtD,MAAM,CAAC,CAAC,OAAO,CAAC,GAAG,CACjB;gBACU,EACV,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAC7C,CAAC;QAEF,qEAAqE;QACrE,uEAAuE;QACvE,4EAA4E;QAC5E,wDAAwD;QACxD,MAAM,CAAC,CAAC,KAAK,CAAC;YACZ,OAAO,EAAE,CAAC,CAAC,OAAO;YAClB,MAAM,EAAE,CAAC,eAAe,CAAC;YACzB,KAAK,EAAE;gBACL,SAAS,EAAE,CAAC,CAAC,SAAS;gBACtB,aAAa,EAAE,CAAC,CAAC,aAAa;gBAC9B,eAAe,EAAE,CAAC,CAAC,eAAe;gBAClC,UAAU,EAAE,CAAC,CAAC,UAAU;aACzB;YACD,aAAa,EAAE;gBACb,EAAE,IAAI,EAAE,YAAY,EAAE,SAAS,EAAE,UAAU,EAAE,YAAY,EAAE,SAAS,CAAC,MAAM,EAAE;aAC9E;YACD,SAAS,EAAE,CAAC,CAAC,SAAS;YACtB,OAAO,EAAE,CAAC,eAAe,EAAE,YAAY,CAAC;SACzC,CAAC,CAAC;IACL,CAAC;IAED,CAAC,CAAC,IAAI,CACJ,mCAAmC,KAAK,WAAW,CAAC,CAAC,MAAM,YAAY,OAAO,GAAG;QAC/E,WAAW,aAAa,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAC9C,CAAC;IAEF,OAAO,QAAQ,CACb,IAAI,CAAC,SAAS,CACZ;QACE,MAAM,EAAE,CAAC,CAAC,MAAM;QAChB,OAAO;QACP,OAAO,EAAE,aAAa,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI;QAC5C,UAAU,EAAE,CAAC,CAAC,GAAG,CAAC,UAAU;KAC7B,EACD,IAAI,EACJ,CAAC,CACF,CACF,CAAC;AACJ,CAAC"}

package/payload/platform/plugins/dispatch/skills/dispatch-page/SKILL.md

@@ -0,0 +1,85 @@
+---
+name: dispatch-page
+description: "Use when an account wants its week planner on its own domain: the office sees every worker's week, a field worker sees only their own, both signed in with the passcode they already have. Triggers include 'put the planner on their site', 'the office needs to see the week', 'somewhere Sam can check her jobs', 'give them a dispatch page', and any request to show allocated work outside the admin dashboard."
+---
+
+# Dispatch page
+
+Put this account's week planner on the domain its people already sign in to. This is an outcome
+contract, not a copy of the Pages mechanics: the deploy, the custom domain and the token discipline
+belong to `cloudflare:site-deploy`, and the store, the passcodes and the scope gate belong to
+`cloudflare:data-portal`. Read those with `plugin-read` before issuing their commands.
+
+## Where the planner lives, and why it is not its own site
+
+The planner is a page **inside the account's existing data portal**, served at
+`https://<portalDomain>/planner`. It is not a second Pages project and it has no domain of its own.
+
+Everything it needs already exists there. The people, their passcodes, their sessions and the scope
+that decides what each of them may read are rows in the one shared portal database, and a session
+cookie belongs to one origin. On a second domain the same office person would sign in twice with the
+same passcode, and the tree would carry a second copy of the endpoint that decides who sees what — a
+gate written twice is a gate got wrong twice.
+
+## What must already be true
+
+- The account has a **deployed data portal**: `<accountDir>/data-portal.json` carrying
+  `portalDomain`, and a tree at `<accountDir>/sites/<project>/`. Without it there is no session, no
+  gate and nowhere to serve from. Provision that first with `cloudflare:data-portal`.
+- The account has a **dispatch config**: `<accountDir>/dispatch/config.json`. Its roster, nouns and
+  statuses are what the page renders itself from, so a planner without one draws an empty week with
+  no worker rows. Author it first with `dispatch-setup`.
+- Each **worker who should appear** carries `portalOwnerId` on their `:Engineer` node, matching the
+  `ownerId` they were enrolled under. That property is the only binding between a configured worker
+  and a portal person; it is never a name match, because two people share a first name and a silent
+  cross-assignment shows one worker another's day.
+
+## Who sees what
+
+Enrolment decides it, and enrolment alone:
+
+- `portal-enrol.mjs --record-scope account` — the office person who schedules. Every worker's row,
+  every visit for the account.
+- `portal-enrol.mjs --record-scope own` — a field worker. Their own visits and their own roster row,
+  and nothing about anybody else.
+
+`functions/api/visits.ts` is the only reader of that scope and the only place the filter is written.
+This skill re-implements none of it, and neither does the page: it renders what the endpoint returns.
+
+## What this skill produces
+
+`planner.html`, `planner.js` and `planner.css` from `template/`, copied into the account's existing
+`<accountDir>/sites/<project>/` beside `index.html`, then republished by handing that same tree to
+`cloudflare:site-deploy`. The Pages project, the bindings and the domain are unchanged; this is a
+redeploy of a site that gained a page, not a new site.
+
+Nothing else is copied. The endpoint, the session library and the schema are the portal's and are
+already deployed with it.
+
+## What it does not do
+
+It does not allocate, re-time or re-assign. Clicking a visit moves it to the next status the account
+declared, through the portal's existing `/api/visit-status` door, and the device carries that into
+the graph within a minute. Enforcing which transitions are legal, and acting on a day rather than
+recording it, are not built here.
+
+It does not show a job list, counts of unallocated or past-target work, or the pressed-against-observed
+arrival panel. None of those is on this page today.
+
+## Done-gate
+
+The page is not done until all five hold on the live domain:
+
+1. `https://<portalDomain>/planner` returns `HTTP/2 200`.
+2. A person enrolled `--record-scope account` signs in and sees a row for **every** configured
+   worker, including one with nothing on that week.
+3. A person enrolled `--record-scope own` signs in and sees exactly one row: their own.
+4. `grep '\[portal-visits-push\]' server.log` shows `op=push` for this account with `roster=` equal
+   to the number of configured workers and `workers-unresolved=0`. A non-zero `workers-unresolved`
+   names how many workers carry no `portalOwnerId`; those people see an empty week they cannot tell
+   from a day off.
+5. Clicking a visit changes its status on screen, and `grep '\[portal-visits-pull\]' server.log`
+   carries `op=applied visitId=` for it within one minute.
+
+The freshness line in the page header states the age of what is on screen. "Never published" there
+means this account has never completed a push, not that the week is empty.

package/payload/platform/plugins/dispatch/skills/dispatch-page/template/planner.css

@@ -0,0 +1,97 @@
+/* The office planner (Task 2539). Loaded after portal.css, which owns the
+   palette and the card chrome; everything here is grid geometry.
+
+   The seven day columns are fractions of the card, never fixed widths. The
+   retired first-party grid used a 9rem row label plus seven 11rem cells, about
+   1376px, and therefore scrolled sideways on every seven-day range it drew. */
+
+.pl-card {
+  max-width: 72rem;
+}
+
+.pl-head {
+  display: flex;
+  align-items: center;
+  gap: 0.6rem;
+  margin-bottom: 0.75rem;
+}
+
+.pl-range {
+  font-weight: 600;
+}
+
+.pl-freshness {
+  margin-left: auto;
+  font-size: 0.78rem;
+  opacity: 0.7;
+}
+
+.pl-grid {
+  display: grid;
+  grid-template-columns: minmax(0, 0.9fr) repeat(7, minmax(0, 1fr));
+  gap: 1px;
+  width: 100%;
+}
+
+.pl-corner,
+.pl-colhead,
+.pl-rowlabel,
+.pl-cell {
+  padding: 0.4rem 0.5rem;
+  /* Without this a long site name sets the column's minimum width and the
+     fractions above stop being fractions. */
+  min-width: 0;
+  overflow-wrap: anywhere;
+}
+
+.pl-corner,
+.pl-colhead {
+  font-size: 0.78rem;
+  font-weight: 600;
+  text-align: left;
+}
+
+.pl-rowlabel {
+  font-size: 0.82rem;
+}
+
+/* A day the worker does not work is dimmed rather than hidden: a visit booked
+   into it must still be visible, and in its real column. */
+.pl-cell[data-off='true'] {
+  opacity: 0.45;
+}
+
+.pl-visit {
+  display: block;
+  width: 100%;
+  text-align: left;
+  font: inherit;
+  font-size: 0.76rem;
+  border: 1px solid currentColor;
+  border-radius: 0.3rem;
+  background: none;
+  color: inherit;
+  padding: 0.2rem 0.3rem;
+  margin-bottom: 0.2rem;
+  cursor: pointer;
+}
+
+/* A row for visits whose owner matches no configured worker. Dimming would read
+   as "not working"; this is "nobody knows who this is". */
+.pl-rowlabel[data-unknown='true'] {
+  font-style: italic;
+  opacity: 0.8;
+}
+
+.pl-unplaceable {
+  font-size: 0.8rem;
+}
+
+@media (max-width: 720px) {
+  /* Seven readable columns that scroll, rather than seven unreadable slivers
+     that do not. The scroll is the GRID's, never the page's. */
+  .pl-grid {
+    grid-template-columns: minmax(0, 1fr) repeat(7, minmax(6rem, 1fr));
+    overflow-x: auto;
+  }
+}

package/payload/platform/plugins/dispatch/skills/dispatch-page/template/planner.html

@@ -0,0 +1,59 @@
+<!doctype html>
+<html lang="en">
+  <head>
+    <meta charset="utf-8" />
+    <meta name="viewport" content="width=device-width, initial-scale=1" />
+    <title>Planner</title>
+    <!-- Same-origin: the API is this project's own Pages Functions, so
+         api-base is deliberately empty, the convention index.html already
+         follows. -->
+    <meta name="api-base" content="" />
+    <!-- portal.css first: it carries the one :root block portal-brand-css.mjs
+         rewrites, so this page takes the install's brand with no second
+         stylesheet for that script to know about. planner.css adds grid
+         geometry and nothing else. -->
+    <link rel="stylesheet" href="/portal.css" />
+    <link rel="stylesheet" href="/planner.css" />
+  </head>
+  <body>
+    <main class="dp-card pl-card">
+      <h1 class="dp-title">Planner</h1>
+      <p id="dp-status" class="dp-status" role="status"></p>
+
+      <!-- The same two fields the file drop signs in with, posting to the same
+           /api/auth. No second gate, no second session, no second passcode. -->
+      <form id="dp-login" class="dp-login" hidden>
+        <label class="dp-label" for="dp-owner">Your name</label>
+        <input class="dp-input" id="dp-owner" name="owner" autocomplete="username" required />
+        <label class="dp-label" for="dp-passcode">Passcode</label>
+        <input
+          class="dp-input"
+          id="dp-passcode"
+          name="passcode"
+          type="password"
+          autocomplete="current-password"
+          required
+        />
+        <button class="dp-btn" type="submit">Sign in</button>
+      </form>
+
+      <section id="pl-panel" class="pl-panel" hidden>
+        <header class="pl-head">
+          <button class="dp-iconbtn" id="pl-prev" type="button" aria-label="Previous week">
+            &#8592;
+          </button>
+          <span class="pl-range" id="pl-range"></span>
+          <button class="dp-iconbtn" id="pl-next" type="button" aria-label="Next week">
+            &#8594;
+          </button>
+          <!-- The age of what is on screen. A mirror that stopped refreshing is
+               otherwise identical to a week in which nothing changed. -->
+          <span class="pl-freshness" id="pl-freshness"></span>
+        </header>
+        <div class="pl-grid" id="pl-grid"></div>
+        <p class="pl-unplaceable" id="pl-unplaceable" hidden></p>
+      </section>
+    </main>
+    <script src="/planner.js"></script>
+  </body>
+</html>