@rubytech/create-realagent-code 0.1.574 → 0.1.575

package/payload/platform/plugins/dispatch/skills/dispatch-page/template/planner.js

@@ -0,0 +1,343 @@
+/* The office planner. Dependency-free, no bundler, the same shape as portal.js.
+
+   It draws worker rows against the days of one week from what /api/visits
+   returns. THAT ENDPOINT IS THE GATE. This page re-applies no filter of its
+   own: an own-scoped person already receives only their own rows and their own
+   roster row, and a second filter here would be a second thing to get wrong.
+
+   Nothing an operator can name is in this file. The nouns, the statuses and the
+   timezone all arrive in `meta`, published from the account's own config. */
+(function () {
+  'use strict';
+
+  function metaTag(name) {
+    var el = document.querySelector('meta[name="' + name + '"]');
+    return el ? el.getAttribute('content') || '' : '';
+  }
+
+  var API = metaTag('api-base');
+  var statusEl = document.getElementById('dp-status');
+  var loginEl = document.getElementById('dp-login');
+  var panelEl = document.getElementById('pl-panel');
+  var gridEl = document.getElementById('pl-grid');
+  var rangeEl = document.getElementById('pl-range');
+  var freshEl = document.getElementById('pl-freshness');
+  var unplaceableEl = document.getElementById('pl-unplaceable');
+
+  /* Monday of the week on screen, held as a UTC midnight. The two arrows move
+     it a week at a time and the seven day keys derive from it. */
+  var anchor = mondayOf(new Date());
+  /* The last payload read, so moving the week re-renders without a round trip
+     and a refused write can redraw what is actually on the device. */
+  var latest = null;
+
+  function say(msg) {
+    statusEl.textContent = msg;
+  }
+
+  function api(path, opts) {
+    return fetch(API + path, Object.assign({ credentials: 'same-origin' }, opts || {}));
+  }
+
+  function mondayOf(d) {
+    var u = new Date(Date.UTC(d.getUTCFullYear(), d.getUTCMonth(), d.getUTCDate()));
+    var back = (u.getUTCDay() + 6) % 7;
+    u.setUTCDate(u.getUTCDate() - back);
+    return u;
+  }
+
+  function ymd(d) {
+    return d.toISOString().slice(0, 10);
+  }
+
+  function dayKeys() {
+    var out = [];
+    for (var i = 0; i < 7; i++) {
+      var d = new Date(anchor.getTime());
+      d.setUTCDate(d.getUTCDate() + i);
+      out.push(ymd(d));
+    }
+    return out;
+  }
+
+  /* Which day an instant falls on IN THE ACCOUNT'S ZONE. en-CA formats
+     YYYY-MM-DD, so the result compares directly against dayKeys(). The zone is
+     always passed: a formatter built without one takes the browser's, and a
+     23:30 London visit then lands on tomorrow for somebody in Auckland. */
+  function dayOf(iso, zone) {
+    if (!iso) return '';
+    var t = new Date(iso);
+    if (isNaN(t.getTime())) return '';
+    return new Intl.DateTimeFormat('en-CA', {
+      timeZone: zone,
+      year: 'numeric',
+      month: '2-digit',
+      day: '2-digit',
+    }).format(t);
+  }
+
+  function timeOf(iso, zone) {
+    var t = new Date(iso);
+    if (isNaN(t.getTime())) return '';
+    return new Intl.DateTimeFormat('en-GB', {
+      timeZone: zone,
+      hour: '2-digit',
+      minute: '2-digit',
+    }).format(t);
+  }
+
+  function dayLabel(key, zone) {
+    return new Intl.DateTimeFormat('en-GB', {
+      timeZone: zone,
+      weekday: 'short',
+      day: 'numeric',
+      month: 'short',
+    }).format(new Date(key + 'T12:00:00.000Z'));
+  }
+
+  /* A config noun rendered as a heading. The retired grid printed the raw value
+     beside formatted day names, so one cell read lowercase and the rest did
+     not. */
+  function capitalise(word) {
+    if (!word) return '';
+    return word.charAt(0).toUpperCase() + word.slice(1);
+  }
+
+  function cell(cls, text) {
+    var el = document.createElement('div');
+    el.className = cls;
+    if (text !== undefined) el.textContent = text;
+    return el;
+  }
+
+  /* The keys working hours are declared under, Monday first, matching the
+     column order above. */
+  var HOUR_KEYS = ['mon', 'tue', 'wed', 'thu', 'fri', 'sat', 'sun'];
+
+  /* One visit. Clicking moves it to the next declared status and posts that
+     through the portal's existing write door. Which transitions are legal is
+     Task 2511's; this cycles the declared list. */
+  function visitButton(v, meta, zone) {
+    var b = document.createElement('button');
+    b.type = 'button';
+    b.className = 'pl-visit';
+    b.textContent = [timeOf(v.startDate, zone), v.status, v.purpose].filter(Boolean).join(' · ');
+    b.addEventListener('click', function () {
+      advance(v, meta);
+    });
+    return b;
+  }
+
+  function advance(v, meta) {
+    var names = ((meta && meta.statuses) || []).map(function (s) {
+      return s.name;
+    });
+    if (!names.length) {
+      say('No statuses are configured for this account.');
+      return;
+    }
+    var next = names[(names.indexOf(v.status) + 1) % names.length];
+    say('Saving…');
+    api('/api/visit-status', {
+      method: 'POST',
+      headers: { 'content-type': 'application/json' },
+      body: JSON.stringify({ visitId: v.visitId, status: next }),
+    })
+      .then(function (r) {
+        return r.json().then(function (d) {
+          return { s: r.status, d: d };
+        });
+      })
+      .then(function (res) {
+        if (!res.d.ok) {
+          /* The endpoint answers the same 404 for "no such record" and "not
+             yours", deliberately, so this message says neither. */
+          console.error('[planner] status write refused', { status: res.s, error: res.d.error });
+          say(res.s === 404 ? 'That is not yours to change.' : 'That change was refused.');
+          return;
+        }
+        /* The graph is the authority and the device carries this there within a
+           minute. Showing it now and re-reading on the next poll is what makes
+           the page honest about which of the two it is displaying. */
+        v.status = next;
+        say('Saved. It reaches the office within a minute.');
+        if (latest) render(latest);
+      })
+      .catch(function (err) {
+        console.error('[planner] status write failed', { status: 'network', error: err });
+        say('Could not reach the server.');
+      });
+  }
+
+  function render(data) {
+    var meta = data.meta;
+    /* UTC when the account published no config. Never the browser's: a page
+       that guesses the zone draws a plausible week on the wrong days. */
+    var zone = (meta && meta.zone) || 'UTC';
+    var keys = dayKeys();
+
+    rangeEl.textContent = dayLabel(keys[0], zone) + ' – ' + dayLabel(keys[6], zone);
+    freshEl.textContent =
+      meta && meta.publishedAt ? 'As at ' + timeOf(meta.publishedAt, zone) : 'Never published';
+
+    gridEl.replaceChildren();
+    gridEl.appendChild(
+      cell('pl-corner', capitalise((meta && meta.vocabulary && meta.vocabulary.worker) || '')),
+    );
+    keys.forEach(function (k) {
+      gridEl.appendChild(cell('pl-colhead', dayLabel(k, zone)));
+    });
+
+    /* Visits group onto a row by ownerId, the key both halves of the exchange
+       already use. A visit whose owner matches no roster row gets its own row
+       rather than vanishing, and one with no start date is listed below the
+       grid: a dropped visit is invisible, and invisible is the failure this
+       surface exists to catch. */
+    var byOwner = {};
+    var unplaceable = [];
+    (data.visits || []).forEach(function (v) {
+      var key = dayOf(v.startDate, zone);
+      if (!key) {
+        unplaceable.push(v);
+        return;
+      }
+      if (keys.indexOf(key) === -1) return;
+      var owner = v.ownerId || '';
+      (byOwner[owner] = byOwner[owner] || []).push(v);
+    });
+
+    var rows = (data.roster || []).slice();
+    var known = {};
+    rows.forEach(function (w) {
+      known[w.ownerId] = true;
+    });
+    Object.keys(byOwner).forEach(function (owner) {
+      if (!known[owner]) rows.push({ workerId: '', ownerId: owner, name: '', workingHours: {} });
+    });
+
+    rows.forEach(function (w) {
+      var label = cell('pl-rowlabel', w.name || w.ownerId || 'Unassigned');
+      if (!w.workerId) label.setAttribute('data-unknown', 'true');
+      gridEl.appendChild(label);
+      keys.forEach(function (k, i) {
+        var c = cell('pl-cell');
+        c.setAttribute(
+          'data-off',
+          w.workingHours && w.workingHours[HOUR_KEYS[i]] ? 'false' : 'true',
+        );
+        (byOwner[w.ownerId] || [])
+          .filter(function (v) {
+            return dayOf(v.startDate, zone) === k;
+          })
+          .forEach(function (v) {
+            c.appendChild(visitButton(v, meta, zone));
+          });
+        gridEl.appendChild(c);
+      });
+    });
+
+    if (unplaceable.length) {
+      unplaceableEl.hidden = false;
+      unplaceableEl.textContent =
+        unplaceable.length +
+        ' with no date: ' +
+        unplaceable
+          .map(function (v) {
+            return v.visitId;
+          })
+          .join(', ');
+    } else {
+      unplaceableEl.hidden = true;
+      unplaceableEl.textContent = '';
+    }
+  }
+
+  function refresh() {
+    return api('/api/visits')
+      .then(function (r) {
+        if (r.status === 401) {
+          panelEl.hidden = true;
+          loginEl.hidden = false;
+          return null;
+        }
+        return r.json();
+      })
+      .then(function (d) {
+        if (!d || !d.ok) return;
+        latest = d;
+        loginEl.hidden = true;
+        panelEl.hidden = false;
+        render(d);
+      })
+      .catch(function (err) {
+        console.error('[planner] read failed', { error: err });
+        say('Could not reach the server.');
+      });
+  }
+
+  function authFailureMessage(status) {
+    if (status === 429) return 'Too many attempts. Try again later.';
+    if (status === 400) return 'Enter both your name and your passcode.';
+    if (status === 401) return 'That name and passcode did not match.';
+    return 'Something went wrong. Please try again in a moment.';
+  }
+
+  loginEl.addEventListener('submit', function (e) {
+    e.preventDefault();
+    say('Signing in…');
+    api('/api/auth', {
+      method: 'POST',
+      headers: { 'content-type': 'application/json' },
+      body: JSON.stringify({
+        ownerId: document.getElementById('dp-owner').value.trim(),
+        passcode: document.getElementById('dp-passcode').value,
+      }),
+    })
+      .then(function (r) {
+        return r.json().then(function (d) {
+          return { s: r.status, d: d };
+        });
+      })
+      .then(function (res) {
+        if (!res.d.ok) {
+          /* The server returns one denial for a wrong passcode and an unknown
+             person on purpose, so this message stays single. */
+          console.error('[planner] auth failed', { status: res.s, error: res.d.error });
+          say(authFailureMessage(res.s));
+          return;
+        }
+        document.getElementById('dp-passcode').value = '';
+        say('');
+        return refresh();
+      })
+      .catch(function (err) {
+        console.error('[planner] auth failed', { status: 'network', error: err });
+        say('Could not reach the server. Check your connection and try again.');
+      });
+  });
+
+  document.getElementById('pl-prev').addEventListener('click', function () {
+    anchor.setUTCDate(anchor.getUTCDate() - 7);
+    if (latest) render(latest);
+  });
+
+  document.getElementById('pl-next').addEventListener('click', function () {
+    anchor.setUTCDate(anchor.getUTCDate() + 7);
+    if (latest) render(latest);
+  });
+
+  /* Re-read at the cadence the device publishes at, so a change made on the
+     device appears without anybody clicking. Gated on visibility so a forgotten
+     tab costs nothing, and skipped while a read is in flight so a slow response
+     cannot stack requests. */
+  var polling = false;
+  setInterval(function () {
+    if (document.hidden || panelEl.hidden || polling) return;
+    polling = true;
+    refresh().then(function () {
+      polling = false;
+    });
+  }, 60000);
+
+  refresh();
+})();

package/payload/platform/plugins/dispatch/skills/dispatch-setup/SKILL.md

@@ -58,7 +58,12 @@ exists. Check with `dispatch-job-list` before removing any status, and say what
 
 ## What this skill does not do
 
-It creates no `:Site`, `:Customer`, `:Person:Engineer` or `:Vehicle` node. A `workerId` in the
-roster must have a matching `:Person:Engineer` on the account before `dispatch-allocate` will use
-it, created with `memory-update`. Say this at the end of setup rather than letting the first
-allocation discover it.
+It creates no `:Customer`, `:Person:Engineer` or `:Vehicle` node. A `workerId` in the roster must
+have a matching `:Person:Engineer` on the account before `dispatch-allocate` will use it, created
+with `memory-update`. Say this at the end of setup rather than letting the first allocation discover
+it.
+
+Sites are `dispatch-site-upsert`'s, not this skill's, and a site wants its street and postcode at
+the moment it is created. A site with only a name reaches the worker's card as a name, and he sets
+off without a street to drive to. The same tool adds an address to a site that already exists, so a
+gap found later is one call, not a re-creation.

package/payload/platform/plugins/docs/references/channel-wake-and-prompt.md

@@ -111,33 +111,24 @@ for that door alone.
 census prints every cycle, including when the counts agree: an absent line means
 the census stopped, never that delivery is healthy.
 
-## What a second door actually requires
+## Which door an answer reaches
 
-Reaching a door other than the one the message arrived on needs two facts.
+The door the message arrived on, and no other. A question asked on WhatsApp is
+answered on WhatsApp; one asked on Telegram is answered on Telegram. The browser
+reader is not a door at all: it tails the session record the answer was taken
+from, so it shows the conversation without anything being sent to it.
 
-**The person must be resolvable from the turn's sender.** That resolution reads
-one place: the admin's `users.json` entry. `phone` (E.164) identifies a WhatsApp
-sender; `telegram` (the chat id, matched exactly) identifies a Telegram sender.
-`account.json` `whatsapp.adminPhones` is a different store with a different job:
-it says a number may reach the admin agent, not whose number it is, which is why
-adding a phone there binds nobody. Set the bindings with `admin-bind`, or at
-creation with `admin-add`'s `phone` and `telegram`.
+Answers used to also reach the person's other bound channel. That was removed:
+only the answer text travelled, never the question, so the second app showed a
+reply with nothing above it. The same conversation already follows you to
+another device through WhatsApp Web and Telegram Web, each for its own channel.
 
-**The other door must hold a live target for that person.** `phone` addresses
-WhatsApp when a Telegram turn wants to reach it, and `telegram` addresses
-Telegram from a WhatsApp turn. Two-way reach needs both fields, not one.
-
-The three lines that name each failure:
+The two lines that name a delivery failure:
 
 | Line | Means |
 |---|---|
-| `[whatsapp-native] op=admin-identity senderId=… userId=unbound-empty` | no binding, so no second door is even looked for |
-| `[channel-fanout] op=no-target origin=… reason=no-admin-user` | the same fact, observed at the fan-out |
 | `[channel-fanout] op=no-target origin=… reason=origin-not-live` | the door holds no live target for this key |
-
-A Telegram bot owned by a `role:'client'` sub-account can never resolve an
-admin: both resolvers return null on a client account before reading any chat
-id. No binding fixes that; the bot has to live on the house account.
+| `[channel-fanout] op=no-target origin=telegram key=… accountId=none reason=no-account` | no account on this install owns the bot in that key |
 
 `[whatsapp-account-scope] op=non-uuid-account caller=fan-out` means the fan-out
 was handed a Baileys credential dirname where a platform UUID belongs. That is

package/payload/platform/plugins/docs/references/dispatch.md

@@ -28,22 +28,44 @@ No status, job type, qualification, checklist, SLA target or operator noun appea
 A test walks every source file and fails if any string from either shipped fixture config appears in
 it.
 
-## The ten tools
+## The sixteen tools
 
 | Tool | Does | Refuses when |
 |---|---|---|
 | `dispatch-config-get` | Returns the vocabulary, statuses, transitions, job types, roster, checklists and the config audit | no config |
+| `dispatch-site-upsert` | Creates a site under its customer, or gives an existing site its street, town and postcode | a new site with no `customerId`, `name` or `region`; a customer that does not exist; a region outside East/North/South/West; some but not all three address fields |
+| `dispatch-intake-draft` | Holds an inbound request as a draft, storing the fields that resolved and naming the required ones that did not | neither the site nor the customer exists, so there is nothing to attach the draft to |
+| `dispatch-intake-decide` | Approves a draft into a job through the `dispatch-job-create` path, or rejects it with a reason and keeps it | draft unknown; already decided; rejecting with no reason; approving while a required field is still missing |
+| `dispatch-intake-list` | The undecided queue oldest first, or drafts already decided when a verdict is named | — |
 | `dispatch-job-create` | Raises a job at a site for a customer, in the account's first job status, with `slaTargetAt` computed from the type | unknown job type; site or customer does not exist |
 | `dispatch-job-get` | One job with every visit, its times, who attended and what was recorded | job not on this account |
 | `dispatch-job-list` | Jobs filtered by status, type, worker, date window, or narrowed to never-allocated. `overdue` computed on every read | status not declared |
-| `dispatch-allocate-candidates` | Who could take this job in this window, with clashes shown and exclusions named | job unknown, untyped, or typed to something no longer declared |
+| `dispatch-allocate-candidates` | Who could take this job in this window, with clashes shown, exclusions named, and an estimated travel time from each worker's previous visit that day | job unknown, untyped, or typed to something no longer declared |
 | `dispatch-allocate` | Creates the visit, attends it, moves the job along its own edge, attaches a vehicle | worker not on the roster; worker lacks the qualification; vehicle passed while `vehicles.enabled` is false; no `:Person:Engineer` node for the workerId |
 | `dispatch-visit-status-set` | Moves a visit; closes the job when its last visit reaches a terminal status | status not declared; transition not in the edge list; a required record missing |
 | `dispatch-visit-record` | Note, media reference, fitted part, checklist item, signature, arrival | visit unknown; nothing supplied to record |
 | `dispatch-site-history` | Every visit at one site, newest first, with notes | — |
 | `dispatch-day` | One day: every worker with the visits they hold, plus jobs nobody has been sent to | — |
+| `dispatch-notify-worker` | Sends the worker attending a visit its card: one button per move this account allows from where the visit is now, plus a button opening the job sheet inside Telegram | visit unknown or unallocated; worker not on the roster; worker carries no `telegramUserId`; no bot registered; origin is not https |
+| `dispatch-site-location-set` | Gives a site a latitude and longitude, and optionally its own arrival radius in metres | site not on this account; coordinates out of range; radius zero or negative |
 
-All ten are `adminAllowlist: true`, `publicAllowlist: false`.
+All sixteen are `adminAllowlist: true`, `publicAllowlist: false`.
+
+## A request is a draft before it is a job
+
+An inbound request becomes an `:IntakeDraft`, never a `:Job` with a flag — a draft that is a `:Job`
+shows up in `dispatch-job-list`, in the census `jobs=` count and in the planner. A value that names
+nothing on this account counts as missing exactly like an omitted one, so there is one list of gaps
+to act on rather than two vocabularies to reconcile.
+
+A draft must resolve at least one of its site or its customer, because the graph write path rejects
+a node with no adjacency and this plugin creates neither. A request naming neither is refused with
+both fields named.
+
+Approval runs through the same write path `dispatch-job-create` uses, so the opening status and the
+SLA target come from the account's config and `op=job-create` still appears. A rejection stores its
+reason and keeps the draft. A decision is final; a second one is refused rather than raising a
+duplicate job.
 
 ## Legality is data
 
@@ -65,7 +87,19 @@ Only a missing qualification excludes a worker, and every exclusion is named:
 with the clash shown. Double-booking is the office's decision, and a tool that drops the busy option
 makes that decision for them with no trace.
 
-There is no travel-time estimate.
+## How far each candidate has to come
+
+Every offered candidate carries `travelMinutes` from their previous visit that day to this job's
+site. It is a **straight-line** figure over an assumed road speed, named in `travelProvider`, so it
+is a lower bound on the drive and never a route: an estuary or a one-way system costs minutes it
+cannot see. Set a site's coordinates with `dispatch-site-location-set` to make it measurable.
+
+A candidate with no estimate carries no `travelMinutes` at all, plus a `travelReason` saying why —
+the worker has nothing earlier that day, or a site has no coordinates, named so you know which one
+to fix. There is no zero and no null, because either would read as a measurement.
+
+A provider that fails never shortens the list. The office sees the same people it would have seen,
+each carrying the reason instead of a number.
 
 ## Arrival is two properties
 
@@ -74,18 +108,59 @@ either never clears the other. An observation with no press is stored and flagge
 is what somebody said; an observed one is what was measured, and a single `arrivedAt` cannot show
 them disagreeing.
 
+## The card in the worker's chat
+
+A worker does not have to open anything to move a job along. `dispatch-notify-worker` sends the
+visit as a card in his Telegram chat, carrying one button per move this account allows from where the
+visit is now, and one button that opens the full job sheet inside Telegram. Press a button and the
+visit moves; the card redraws itself with whatever is legal next.
+
+Two things have to be true before a card can go anywhere. The worker's entry in
+`dispatch/config.json` needs his numeric `telegramUserId`, the same one the job sheet signs him in
+with. And the account needs an admin Telegram bot registered, which `telegram-setup` does.
+
+A button that is out of date is refused, not applied. If the office moved the visit on while the
+card sat on his phone, pressing it tells him what the button was for and what the visit is now, and
+redraws the card. Nothing is applied twice and nothing is applied out of order.
+
+If he shares his live location, and the site has coordinates, arriving inside the site's radius
+records the arrival independently of anything he pressed. Both times are kept. That is the whole
+point: what somebody said and what was measured can then disagree, and the disagreement is visible.
+A site gets its coordinates from `dispatch-site-location-set`; without them the geofence cannot fire
+and `sitesWithoutCoords=` counts how many are still unplaced. The radius is the site's own if it has
+one, otherwise the account's `vehicles.defaultGeofenceRadiusM`; with neither, nothing is recorded,
+because a distance with nothing to compare it against cannot say whether anybody arrived.
+
+A voice note becomes that visit's note, transcribed. A photo becomes its media. Both need exactly
+one visit open for that worker: with none, or with more than one, the message stays in the chat and
+he is told which visit to open, because filing a photograph against the wrong job silently is worse
+than asking.
+
 ## The standing checks
 
-Six failure modes emit no event, because no action occurs: a job created and never allocated, a job
-past its SLA target, a status no transition reaches, a job type no worker is qualified for, a worker
-with no qualification, and visits closing hours after the work ended.
+Eight failure modes emit no event, because no action occurs: a draft nobody decided on, a job
+created and never allocated, a job past its SLA target, a status no transition reaches, a job
+type no worker is qualified for, a worker with no qualification, visits closing hours after the
+work ended, and a card sent to a worker's phone that never arrived.
+
+The draft is the sharpest of them. Nothing was created so there are no write logs, nothing was
+refused so there are no rejection logs, and the requester never got an answer. It is byte-identical
+to a quiet morning until the census counts it.
 
 - `[dispatch-census]`, per account, every 15 minutes: `jobs= unallocated= oldestUnallocatedAgeH=
-  overdue= visitsOpen= visitsOpenOver24h=`
+  overdue= visitsOpen= visitsOpenOver24h= intakeUnreviewed= oldestIntakeAgeH=`
 - `[dispatch-config-audit]`, on config load and each tick: `statuses= unreachable= terminal=
   jobTypes= typesWithNoQualifiedWorker= workersWithNoQualification=`
 - `[dispatch-record-census]`, daily: `closedVisits= withNote= withMedia= medianRecordLagS=
   p90RecordLagS=`
+- `[dispatch-tg-census]`, per account, every 15 minutes: `dispatchedToday= acknowledged=
+  unacknowledged= oldestUnackMin= keyboardsLive= keyboardsOnClosedVisits= callbacksToday=
+  callbacksFailed= voiceAwaitingTranscription= sitesWithoutCoords=`
+
+A card that never reached a worker's phone is the seventh failure mode that emits nothing at all.
+Nothing is logged because nothing happened, so only counting cards sent against cards pressed can
+see it. `oldestUnackMin` climbing across ticks is a phone that is off, out of signal, or a worker
+who has stopped looking.
 
 They run in the UI server, not in the plugin, because a plugin only runs when somebody calls it.
 Accounts without a dispatch config are skipped silently.
@@ -112,11 +187,13 @@ Europe/London visit near local midnight for the whole of British Summer Time, so
 derives boundaries in the account's own timezone. And `dispatch-job-list` caps its rows, so the
 planner takes its counts from an aggregate instead of counting what it was given.
 
-It also names a defect it cannot fix. `dispatch-allocate` stores `startDate` exactly as the caller
-passed it (`allocate.ts:186`) while normalising `endDate` (`allocate.ts:51`). The window compare is
-lexical, so a start carrying a non-UTC offset reads correctly under GMT and an hour out under
-British Summer Time. The planner logs `op=nonzulu-start` with the offending visit ids; correcting
-it belongs at the writer.
+The window compare is lexical, so an instant carrying a non-UTC offset reads correctly under GMT and
+an hour out under British Summer Time. It is fixed at the writer, the only place it can be fixed:
+`dispatch-allocate` normalises `startDate` and `endDate` through `platform/lib/canonical-instant`,
+the same definition the scheduling writers use, and refuses a value it cannot convert. Stored rows
+converge on install. The planner still logs `op=nonzulu-start` with the offending visit ids, and
+`[dispatch-census]` carries `nonCanonicalInstants` every sweep, so a regression is visible with or
+without a browser open.
 
 Full detail: [`.docs/dispatch-planner.md`](../../../.docs/dispatch-planner.md).
 
@@ -152,8 +229,10 @@ Full detail: [`.docs/dispatch-field-app.md`](../../../.docs/dispatch-field-app.m
 ## Diagnostic path
 
 ```
-journalctl --user -u <brand>-* | grep -E '\[dispatch\]|\[dispatch-census\]|\[dispatch-config-audit\]|\[dispatch-record-census\]|\[dispatch-field\]|\[dispatch-field-census\]'
+journalctl --user -u <brand>-* | grep -E '\[dispatch\]|\[dispatch-census\]|\[dispatch-config-audit\]|\[dispatch-record-census\]|\[dispatch-field\]|\[dispatch-field-census\]|\[dispatch-tg\]|\[dispatch-tg-census\]'
 ```
 
 Then filter by `jobId=` for one job's lifeline, `op=transition-refused` to audit rejected writes, or
-`exclusions=` to see why allocation offered whom.
+`exclusions=` to see why allocation offered whom. For the card path, `updateId=` follows one press
+end to end, `visitId=` follows one visit's whole field record, and `op=unbound-inbound` finds the
+messages that reached no visit.

package/payload/platform/plugins/memory/mcp/dist/lib/__tests__/dispatch-vertical-coverage.test.js

@@ -202,7 +202,10 @@ test("dispatch owns the visit, cost and note edges", () => {
     const block = patternBlock("schema-dispatch.md");
     for (const edge of [
         "(:Job)-[:HAS_VISIT]->(:Visit)",
-        "(:Visit)-[:ATTENDED_BY]->(:Engineer)",
+        // Two hops since Task 2512: the attendance is the node that carries one
+        // worker's own arrival times.
+        "(:Visit)-[:HAS_ATTENDANCE]->(:Attendance)",
+        "(:Attendance)-[:BY_ENGINEER]->(:Engineer)",
         "(:Job)-[:HAS_COST]->(:JobCost)",
         "(:Note)-[:ABOUT]->(:Job)",
     ]) {

package/payload/platform/plugins/memory/mcp/dist/lib/__tests__/dispatch-vertical-coverage.test.js.map

@@ -1 +1 @@
-{"version":3,"file":"dispatch-vertical-coverage.test.js","sourceRoot":"","sources":["../../../src/lib/__tests__/dispatch-vertical-coverage.test.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AACH,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,MAAM,MAAM,oBAAoB,CAAC;AACxC,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AACpD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAE1C,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,wBAAwB,CAAC,CAAC;AAEpE;;;;;;GAMG;AACH,MAAM,eAAe,GAAG;IACtB,KAAK;IACL,OAAO;IACP,MAAM;IACN,UAAU;IACV,OAAO;IACP,MAAM;IACN,SAAS;IACT,SAAS;IACT,MAAM;CACP,CAAC;AAEF;;;;;;GAMG;AACH,MAAM,kBAAkB,GAAG;IACzB,OAAO;IACP,WAAW;IACX,eAAe;IACf,mBAAmB;IACnB,UAAU;IACV,aAAa;IACb,eAAe;IACf,WAAW;IACX,eAAe;IACf,WAAW;CACZ,CAAC;AAEF;2BAC2B;AAC3B,SAAS,QAAQ,CAAC,IAAY;IAC5B,MAAM,IAAI,GAAG,YAAY,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,CAAC;IACpD,MAAM,GAAG,GAAG,IAAI,GAAG,EAAU,CAAC;IAC9B,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,wCAAwC,CAAC,EAAE,CAAC;QACxE,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAE,CAAC,CAAC;IACjB,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,WAAW;IAClB,OAAO,WAAW,CAAC,IAAI,CAAC;SACrB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;SACxC,IAAI,EAAE,CAAC;AACZ,CAAC;AAED,IAAI,CAAC,sEAAsE,EAAE,GAAG,EAAE;IAChF,KAAK,MAAM,KAAK,IAAI,eAAe,EAAE,CAAC;QACpC,MAAM,cAAc,GAAG,WAAW,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC;QAC3E,MAAM,CAAC,SAAS,CACd,cAAc,EACd,CAAC,oBAAoB,CAAC,EACtB,GAAG,KAAK,uEAAuE,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAC5G,CAAC;IACJ,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,6DAA6D,EAAE,GAAG,EAAE;IACvE,MAAM,YAAY,GAAG,QAAQ,CAAC,wBAAwB,CAAC,CAAC;IACxD,KAAK,MAAM,KAAK,IAAI,kBAAkB,EAAE,CAAC;QACvC,MAAM,CAAC,EAAE,CACP,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,EACvB,GAAG,KAAK,wCAAwC,CACjD,CAAC;IACJ,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,yDAAyD,EAAE,GAAG,EAAE;IACnE,sEAAsE;IACtE,wEAAwE;IACxE,2EAA2E;IAC3E,wBAAwB;IACxB,MAAM,IAAI,GAAG,YAAY,CAAC,IAAI,CAAC,IAAI,EAAE,oBAAoB,CAAC,EAAE,MAAM,CAAC,CAAC;IACpE,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,2BAA2B,CAAC,CAAC;AAClD,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,qEAAqE,EAAE,GAAG,EAAE;IAC/E,MAAM,IAAI,GAAG,YAAY,CAAC,IAAI,CAAC,IAAI,EAAE,oBAAoB,CAAC,EAAE,MAAM,CAAC,CAAC;IACpE,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CACxB,IAAI,CAAC,OAAO,CAAC,yBAAyB,CAAC,EACvC,IAAI,CAAC,OAAO,CAAC,qBAAqB,CAAC,CACpC,CAAC;IACF,KAAK,MAAM,KAAK,IAAI,CAAC,KAAK,EAAE,UAAU,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,EAAE,CAAC;QAC1E,MAAM,CAAC,KAAK,CACV,OAAO,EACP,IAAI,MAAM,CAAC,UAAU,GAAG,KAAK,GAAG,UAAU,CAAC,EAC3C,GAAG,KAAK,uDAAuD,CAChE,CAAC;IACJ,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,+DAA+D,EAAE,GAAG,EAAE;IACzE,MAAM,IAAI,GAAG,YAAY,CAAC,IAAI,CAAC,IAAI,EAAE,oBAAoB,CAAC,EAAE,MAAM,CAAC,CAAC;IACpE,KAAK,MAAM,IAAI,IAAI;QACjB,kBAAkB;QAClB,mBAAmB;QACnB,0BAA0B;KAC3B,EAAE,CAAC;QACF,MAAM,CAAC,KAAK,CACV,IAAI,EACJ,IAAI,MAAM,CAAC,MAAM,IAAI,KAAK,CAAC,EAC3B,GAAG,IAAI,6BAA6B,CACrC,CAAC;IACJ,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,iEAAiE,EAAE,GAAG,EAAE;IAC3E,MAAM,QAAQ,GAAG,QAAQ,CAAC,oBAAoB,CAAC,CAAC;IAChD,MAAM,CAAC,EAAE,CACP,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,EACxB,uEAAuE,CACxE,CAAC;IACF,MAAM,IAAI,GAAG,YAAY,CAAC,IAAI,CAAC,IAAI,EAAE,oBAAoB,CAAC,EAAE,MAAM,CAAC,CAAC;IACpE,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC;IACnC,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,sBAAsB,CAAC,CAAC;AAC7C,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,kDAAkD,EAAE,GAAG,EAAE;IAC5D,0DAA0D;IAC1D,0EAA0E;IAC1E,0EAA0E;IAC1E,gCAAgC;IAChC,MAAM,IAAI,GAAG,YAAY,CAAC,IAAI,CAAC,IAAI,EAAE,oBAAoB,CAAC,EAAE,MAAM,CAAC,CAAC;IACpE,KAAK,MAAM,cAAc,IAAI,CAAC,cAAc,EAAE,gBAAgB,EAAE,eAAe,CAAC,EAAE,CAAC;QACjF,MAAM,CAAC,EAAE,CACP,CAAC,IAAI,CAAC,QAAQ,CAAC,cAAc,CAAC,EAC9B,GAAG,cAAc,+CAA+C,CACjE,CAAC;IACJ,CAAC;IACD,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC;AACrC,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,gEAAgE,EAAE,GAAG,EAAE;IAC1E,MAAM,IAAI,GAAG,YAAY,CAAC,IAAI,CAAC,IAAI,EAAE,wBAAwB,CAAC,EAAE,MAAM,CAAC,CAAC;IACxE,MAAM,CAAC,KAAK,CACV,IAAI,EACJ,iBAAiB,EACjB,6EAA6E,CAC9E,CAAC;AACJ,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,yEAAyE,EAAE,GAAG,EAAE;IACnF,4EAA4E;IAC5E,0EAA0E;IAC1E,wEAAwE;IACxE,yBAAyB;IACzB,MAAM,QAAQ,GAAG,YAAY,CAAC,IAAI,CAAC,IAAI,EAAE,oBAAoB,CAAC,EAAE,MAAM,CAAC,CAAC;IACxE,MAAM,YAAY,GAAG,YAAY,CAAC,IAAI,CAAC,IAAI,EAAE,wBAAwB,CAAC,EAAE,MAAM,CAAC,CAAC;IAChF,MAAM,CAAC,KAAK,CACV,QAAQ,EACR,sCAAsC,EACtC,wDAAwD,CACzD,CAAC;IACF,MAAM,CAAC,EAAE,CACP,CAAC,sCAAsC,CAAC,IAAI,CAAC,YAAY,CAAC,EAC1D,wDAAwD,CACzD,CAAC;AACJ,CAAC,CAAC,CAAC;AAEH;;;;;;GAMG;AACH,SAAS,YAAY,CAAC,IAAY;IAChC,MAAM,IAAI,GAAG,YAAY,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,CAAC;IACpD,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,0BAA0B,CAAC,CAAC;IACzD,MAAM,CAAC,EAAE,CAAC,OAAO,IAAI,CAAC,EAAE,GAAG,IAAI,6CAA6C,CAAC,CAAC;IAC9E,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IAC1C,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,IAAI,GAAG,CAAC,CAAC,CAAC;IAC5C,MAAM,CAAC,EAAE,CAAC,IAAI,IAAI,CAAC,IAAI,KAAK,GAAG,IAAI,EAAE,GAAG,IAAI,kCAAkC,CAAC,CAAC;IAChF,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,GAAG,CAAC,EAAE,KAAK,CAAC,CAAC;AACrC,CAAC;AAED,2EAA2E;AAC3E,SAAS,OAAO,CAAC,IAAY;IAC3B,MAAM,GAAG,GAAgE,EAAE,CAAC;IAC5E,KAAK,MAAM,IAAI,IAAI,YAAY,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;QACrD,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,mCAAmC,CAAC,CAAC;QAC1D,IAAI,CAAC;YAAE,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IAClE,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,IAAI,CAAC,yDAAyD,EAAE,GAAG,EAAE;IACnE,0EAA0E;IAC1E,8EAA8E;IAC9E,6DAA6D;IAC7D,6EAA6E;IAC7E,sDAAsD;IACtD,2EAA2E;IAC3E,mEAAmE;IACnE,EAAE;IACF,wEAAwE;IACxE,6EAA6E;IAC7E,8EAA8E;IAC9E,kDAAkD;IAClD,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,KAAK,CAAC,CAAC,CAAC;IAClE,KAAK,MAAM,CAAC,IAAI,OAAO,CAAC,wBAAwB,CAAC,EAAE,CAAC;QAClD,MAAM,CAAC,EAAE,CACP,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,EACpB,KAAK,CAAC,CAAC,MAAM,OAAO,CAAC,CAAC,QAAQ,QAAQ,CAAC,CAAC,MAAM,wEAAwE,CACvH,CAAC;IACJ,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,mEAAmE,EAAE,GAAG,EAAE;IAC7E,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,eAAe,EAAE,UAAU,EAAE,SAAS,CAAC,CAAC,CAAC;IAC1E,KAAK,MAAM,CAAC,IAAI,OAAO,CAAC,oBAAoB,CAAC,EAAE,CAAC;QAC9C,MAAM,CAAC,EAAE,CACP,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,EACxD,KAAK,CAAC,CAAC,MAAM,OAAO,CAAC,CAAC,QAAQ,QAAQ,CAAC,CAAC,MAAM,6BAA6B,CAC5E,CAAC;IACJ,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,6DAA6D,EAAE,GAAG,EAAE;IACvE,MAAM,KAAK,GAAG,YAAY,CAAC,wBAAwB,CAAC,CAAC;IACrD,KAAK,MAAM,IAAI,IAAI;QACjB,+BAA+B;QAC/B,uCAAuC;QACvC,2CAA2C;QAC3C,uCAAuC;KACxC,EAAE,CAAC;QACF,MAAM,CAAC,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,GAAG,IAAI,sCAAsC,CAAC,CAAC;IACjF,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,8CAA8C,EAAE,GAAG,EAAE;IACxD,MAAM,KAAK,GAAG,YAAY,CAAC,oBAAoB,CAAC,CAAC;IACjD,KAAK,MAAM,IAAI,IAAI;QACjB,+BAA+B;QAC/B,sCAAsC;QACtC,gCAAgC;QAChC,0BAA0B;KAC3B,EAAE,CAAC;QACF,MAAM,CAAC,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,GAAG,IAAI,gCAAgC,CAAC,CAAC;IAC3E,CAAC;AACH,CAAC,CAAC,CAAC"}
+{"version":3,"file":"dispatch-vertical-coverage.test.js","sourceRoot":"","sources":["../../../src/lib/__tests__/dispatch-vertical-coverage.test.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AACH,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,MAAM,MAAM,oBAAoB,CAAC;AACxC,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AACpD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAE1C,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,wBAAwB,CAAC,CAAC;AAEpE;;;;;;GAMG;AACH,MAAM,eAAe,GAAG;IACtB,KAAK;IACL,OAAO;IACP,MAAM;IACN,UAAU;IACV,OAAO;IACP,MAAM;IACN,SAAS;IACT,SAAS;IACT,MAAM;CACP,CAAC;AAEF;;;;;;GAMG;AACH,MAAM,kBAAkB,GAAG;IACzB,OAAO;IACP,WAAW;IACX,eAAe;IACf,mBAAmB;IACnB,UAAU;IACV,aAAa;IACb,eAAe;IACf,WAAW;IACX,eAAe;IACf,WAAW;CACZ,CAAC;AAEF;2BAC2B;AAC3B,SAAS,QAAQ,CAAC,IAAY;IAC5B,MAAM,IAAI,GAAG,YAAY,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,CAAC;IACpD,MAAM,GAAG,GAAG,IAAI,GAAG,EAAU,CAAC;IAC9B,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,wCAAwC,CAAC,EAAE,CAAC;QACxE,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAE,CAAC,CAAC;IACjB,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,WAAW;IAClB,OAAO,WAAW,CAAC,IAAI,CAAC;SACrB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;SACxC,IAAI,EAAE,CAAC;AACZ,CAAC;AAED,IAAI,CAAC,sEAAsE,EAAE,GAAG,EAAE;IAChF,KAAK,MAAM,KAAK,IAAI,eAAe,EAAE,CAAC;QACpC,MAAM,cAAc,GAAG,WAAW,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC;QAC3E,MAAM,CAAC,SAAS,CACd,cAAc,EACd,CAAC,oBAAoB,CAAC,EACtB,GAAG,KAAK,uEAAuE,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAC5G,CAAC;IACJ,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,6DAA6D,EAAE,GAAG,EAAE;IACvE,MAAM,YAAY,GAAG,QAAQ,CAAC,wBAAwB,CAAC,CAAC;IACxD,KAAK,MAAM,KAAK,IAAI,kBAAkB,EAAE,CAAC;QACvC,MAAM,CAAC,EAAE,CACP,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,EACvB,GAAG,KAAK,wCAAwC,CACjD,CAAC;IACJ,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,yDAAyD,EAAE,GAAG,EAAE;IACnE,sEAAsE;IACtE,wEAAwE;IACxE,2EAA2E;IAC3E,wBAAwB;IACxB,MAAM,IAAI,GAAG,YAAY,CAAC,IAAI,CAAC,IAAI,EAAE,oBAAoB,CAAC,EAAE,MAAM,CAAC,CAAC;IACpE,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,2BAA2B,CAAC,CAAC;AAClD,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,qEAAqE,EAAE,GAAG,EAAE;IAC/E,MAAM,IAAI,GAAG,YAAY,CAAC,IAAI,CAAC,IAAI,EAAE,oBAAoB,CAAC,EAAE,MAAM,CAAC,CAAC;IACpE,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CACxB,IAAI,CAAC,OAAO,CAAC,yBAAyB,CAAC,EACvC,IAAI,CAAC,OAAO,CAAC,qBAAqB,CAAC,CACpC,CAAC;IACF,KAAK,MAAM,KAAK,IAAI,CAAC,KAAK,EAAE,UAAU,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,EAAE,CAAC;QAC1E,MAAM,CAAC,KAAK,CACV,OAAO,EACP,IAAI,MAAM,CAAC,UAAU,GAAG,KAAK,GAAG,UAAU,CAAC,EAC3C,GAAG,KAAK,uDAAuD,CAChE,CAAC;IACJ,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,+DAA+D,EAAE,GAAG,EAAE;IACzE,MAAM,IAAI,GAAG,YAAY,CAAC,IAAI,CAAC,IAAI,EAAE,oBAAoB,CAAC,EAAE,MAAM,CAAC,CAAC;IACpE,KAAK,MAAM,IAAI,IAAI;QACjB,kBAAkB;QAClB,mBAAmB;QACnB,0BAA0B;KAC3B,EAAE,CAAC;QACF,MAAM,CAAC,KAAK,CACV,IAAI,EACJ,IAAI,MAAM,CAAC,MAAM,IAAI,KAAK,CAAC,EAC3B,GAAG,IAAI,6BAA6B,CACrC,CAAC;IACJ,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,iEAAiE,EAAE,GAAG,EAAE;IAC3E,MAAM,QAAQ,GAAG,QAAQ,CAAC,oBAAoB,CAAC,CAAC;IAChD,MAAM,CAAC,EAAE,CACP,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,EACxB,uEAAuE,CACxE,CAAC;IACF,MAAM,IAAI,GAAG,YAAY,CAAC,IAAI,CAAC,IAAI,EAAE,oBAAoB,CAAC,EAAE,MAAM,CAAC,CAAC;IACpE,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC;IACnC,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,sBAAsB,CAAC,CAAC;AAC7C,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,kDAAkD,EAAE,GAAG,EAAE;IAC5D,0DAA0D;IAC1D,0EAA0E;IAC1E,0EAA0E;IAC1E,gCAAgC;IAChC,MAAM,IAAI,GAAG,YAAY,CAAC,IAAI,CAAC,IAAI,EAAE,oBAAoB,CAAC,EAAE,MAAM,CAAC,CAAC;IACpE,KAAK,MAAM,cAAc,IAAI,CAAC,cAAc,EAAE,gBAAgB,EAAE,eAAe,CAAC,EAAE,CAAC;QACjF,MAAM,CAAC,EAAE,CACP,CAAC,IAAI,CAAC,QAAQ,CAAC,cAAc,CAAC,EAC9B,GAAG,cAAc,+CAA+C,CACjE,CAAC;IACJ,CAAC;IACD,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC;AACrC,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,gEAAgE,EAAE,GAAG,EAAE;IAC1E,MAAM,IAAI,GAAG,YAAY,CAAC,IAAI,CAAC,IAAI,EAAE,wBAAwB,CAAC,EAAE,MAAM,CAAC,CAAC;IACxE,MAAM,CAAC,KAAK,CACV,IAAI,EACJ,iBAAiB,EACjB,6EAA6E,CAC9E,CAAC;AACJ,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,yEAAyE,EAAE,GAAG,EAAE;IACnF,4EAA4E;IAC5E,0EAA0E;IAC1E,wEAAwE;IACxE,yBAAyB;IACzB,MAAM,QAAQ,GAAG,YAAY,CAAC,IAAI,CAAC,IAAI,EAAE,oBAAoB,CAAC,EAAE,MAAM,CAAC,CAAC;IACxE,MAAM,YAAY,GAAG,YAAY,CAAC,IAAI,CAAC,IAAI,EAAE,wBAAwB,CAAC,EAAE,MAAM,CAAC,CAAC;IAChF,MAAM,CAAC,KAAK,CACV,QAAQ,EACR,sCAAsC,EACtC,wDAAwD,CACzD,CAAC;IACF,MAAM,CAAC,EAAE,CACP,CAAC,sCAAsC,CAAC,IAAI,CAAC,YAAY,CAAC,EAC1D,wDAAwD,CACzD,CAAC;AACJ,CAAC,CAAC,CAAC;AAEH;;;;;;GAMG;AACH,SAAS,YAAY,CAAC,IAAY;IAChC,MAAM,IAAI,GAAG,YAAY,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,CAAC;IACpD,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,0BAA0B,CAAC,CAAC;IACzD,MAAM,CAAC,EAAE,CAAC,OAAO,IAAI,CAAC,EAAE,GAAG,IAAI,6CAA6C,CAAC,CAAC;IAC9E,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IAC1C,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,IAAI,GAAG,CAAC,CAAC,CAAC;IAC5C,MAAM,CAAC,EAAE,CAAC,IAAI,IAAI,CAAC,IAAI,KAAK,GAAG,IAAI,EAAE,GAAG,IAAI,kCAAkC,CAAC,CAAC;IAChF,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,GAAG,CAAC,EAAE,KAAK,CAAC,CAAC;AACrC,CAAC;AAED,2EAA2E;AAC3E,SAAS,OAAO,CAAC,IAAY;IAC3B,MAAM,GAAG,GAAgE,EAAE,CAAC;IAC5E,KAAK,MAAM,IAAI,IAAI,YAAY,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;QACrD,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,mCAAmC,CAAC,CAAC;QAC1D,IAAI,CAAC;YAAE,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IAClE,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,IAAI,CAAC,yDAAyD,EAAE,GAAG,EAAE;IACnE,0EAA0E;IAC1E,8EAA8E;IAC9E,6DAA6D;IAC7D,6EAA6E;IAC7E,sDAAsD;IACtD,2EAA2E;IAC3E,mEAAmE;IACnE,EAAE;IACF,wEAAwE;IACxE,6EAA6E;IAC7E,8EAA8E;IAC9E,kDAAkD;IAClD,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,KAAK,CAAC,CAAC,CAAC;IAClE,KAAK,MAAM,CAAC,IAAI,OAAO,CAAC,wBAAwB,CAAC,EAAE,CAAC;QAClD,MAAM,CAAC,EAAE,CACP,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,EACpB,KAAK,CAAC,CAAC,MAAM,OAAO,CAAC,CAAC,QAAQ,QAAQ,CAAC,CAAC,MAAM,wEAAwE,CACvH,CAAC;IACJ,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,mEAAmE,EAAE,GAAG,EAAE;IAC7E,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,eAAe,EAAE,UAAU,EAAE,SAAS,CAAC,CAAC,CAAC;IAC1E,KAAK,MAAM,CAAC,IAAI,OAAO,CAAC,oBAAoB,CAAC,EAAE,CAAC;QAC9C,MAAM,CAAC,EAAE,CACP,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,EACxD,KAAK,CAAC,CAAC,MAAM,OAAO,CAAC,CAAC,QAAQ,QAAQ,CAAC,CAAC,MAAM,6BAA6B,CAC5E,CAAC;IACJ,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,6DAA6D,EAAE,GAAG,EAAE;IACvE,MAAM,KAAK,GAAG,YAAY,CAAC,wBAAwB,CAAC,CAAC;IACrD,KAAK,MAAM,IAAI,IAAI;QACjB,+BAA+B;QAC/B,uCAAuC;QACvC,2CAA2C;QAC3C,uCAAuC;KACxC,EAAE,CAAC;QACF,MAAM,CAAC,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,GAAG,IAAI,sCAAsC,CAAC,CAAC;IACjF,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,8CAA8C,EAAE,GAAG,EAAE;IACxD,MAAM,KAAK,GAAG,YAAY,CAAC,oBAAoB,CAAC,CAAC;IACjD,KAAK,MAAM,IAAI,IAAI;QACjB,+BAA+B;QAC/B,wEAAwE;QACxE,8BAA8B;QAC9B,2CAA2C;QAC3C,2CAA2C;QAC3C,gCAAgC;QAChC,0BAA0B;KAC3B,EAAE,CAAC;QACF,MAAM,CAAC,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,GAAG,IAAI,gCAAgC,CAAC,CAAC;IAC3E,CAAC;AACH,CAAC,CAAC,CAAC"}

package/payload/platform/plugins/memory/mcp/dist/lib/__tests__/relationship-patterns.test.js

@@ -184,9 +184,32 @@ describe("real schema-dispatch.md (Task 2499)", () => {
         // anchored on :Engineer, so a base :Person write is never newly governed.
         expect(patterns.find((p) => p.source === "Person")).toBeUndefined();
     });
+    it("allows AT_ADDRESS from a Site, so a site address is not drift (Task 2514)", () => {
+        // :Site is already a governed source label via HAS_ASSET, so before this
+        // edge was declared an address write from a site was governed && !allowed
+        // and every one of them was logged as drift.
+        expect(patterns).toContainEqual({
+            source: "Site",
+            edgeType: "AT_ADDRESS",
+            target: "PostalAddress",
+            sourceFile: "schema-dispatch.md",
+        });
+        expect(checkEdgeAgainstPatterns(["Site"], "AT_ADDRESS", patterns)).toEqual({
+            governed: true,
+            allowed: true,
+        });
+    });
     it("governs the visit lifecycle edges", () => {
         expect(checkEdgeAgainstPatterns(["Job"], "HAS_VISIT", patterns).allowed).toBe(true);
-        expect(checkEdgeAgainstPatterns(["Visit"], "ATTENDED_BY", patterns).allowed).toBe(true);
+        // Task 2512 replaced (:Visit)-[:ATTENDED_BY]->(:Engineer) with the two hops
+        // through :Attendance, so the retired edge must now be governed and refused
+        // rather than merely absent — an ungoverned edge would be written silently.
+        expect(checkEdgeAgainstPatterns(["Visit"], "HAS_ATTENDANCE", patterns).allowed).toBe(true);
+        expect(checkEdgeAgainstPatterns(["Attendance"], "BY_ENGINEER", patterns).allowed).toBe(true);
+        expect(checkEdgeAgainstPatterns(["Visit"], "ATTENDED_BY", patterns)).toEqual({
+            governed: true,
+            allowed: false,
+        });
         expect(checkEdgeAgainstPatterns(["Visit"], "USED_VEHICLE", patterns).allowed).toBe(true);
         expect(checkEdgeAgainstPatterns(["Visit"], "INVENTED_EDGE", patterns)).toEqual({
             governed: true,