@rubytech/create-realagent-code 0.1.575 → 0.1.577

package/dist/__tests__/preserve-house-cloudflare.test.js

@@ -6,10 +6,10 @@
 // Runs under `node --test dist/__tests__/*`.
 import test from "node:test";
 import assert from "node:assert/strict";
-import { mkdtempSync, mkdirSync, writeFileSync, readFileSync, existsSync, rmSync, statSync } from "node:fs";
+import { mkdtempSync, mkdirSync, writeFileSync, readFileSync, existsSync, rmSync } from "node:fs";
 import { tmpdir } from "node:os";
 import { join } from "node:path";
-import { backupHouseCloudflare, restoreHouseCloudflare, migrateHouseCredentialFromAccount, } from "../preserve-house-cloudflare.js";
+import { backupHouseCloudflare, restoreHouseCloudflare, } from "../preserve-house-cloudflare.js";
 function makeDirs() {
     const root = mkdtempSync(join(tmpdir(), "house-1664-"));
     const installDir = join(root, "install");
@@ -66,73 +66,3 @@ function acctSecrets(installDir, id, contents) {
     writeFileSync(p, contents);
     return p;
 }
-test("relocates a per-account master into the house file, mode 600, account untouched", () => {
-    const { root, installDir } = makeDirs();
-    try {
-        const acct = acctSecrets(installDir, "acc-1", "CLOUDFLARE_API_TOKEN=cfat_minter\nCLOUDFLARE_ACCOUNT_ID=deadbeef\nCF_PAGES_D1_TOKEN=stale\n");
-        const before = readFileSync(acct, "utf-8");
-        const r = migrateHouseCredentialFromAccount(installDir);
-        assert.equal(r.result, "relocated");
-        assert.equal(r.source, "acc-1");
-        const house = join(installDir, "platform/config", "cloudflare-house.env");
-        assert.equal(readFileSync(house, "utf-8"), "CLOUDFLARE_API_TOKEN=cfat_minter\nCLOUDFLARE_ACCOUNT_ID=deadbeef\n", "only the two master keys are relocated, no stale scoped token");
-        assert.equal(statSync(house).mode & 0o777, 0o600, "house file is mode 600");
-        assert.equal(readFileSync(acct, "utf-8"), before, "account file untouched");
-    }
-    finally {
-        rmSync(root, { recursive: true, force: true });
-    }
-});
-test("no-op when the house file already exists (never overwrites)", () => {
-    const { root, installDir, configDir } = makeDirs();
-    try {
-        const house = join(configDir, "cloudflare-house.env");
-        writeFileSync(house, "CLOUDFLARE_API_TOKEN=existing\nCLOUDFLARE_ACCOUNT_ID=xyz\n");
-        acctSecrets(installDir, "acc-1", "CLOUDFLARE_API_TOKEN=other\nCLOUDFLARE_ACCOUNT_ID=zzz\n");
-        const r = migrateHouseCredentialFromAccount(installDir);
-        assert.equal(r.result, "noop");
-        assert.equal(readFileSync(house, "utf-8"), "CLOUDFLARE_API_TOKEN=existing\nCLOUDFLARE_ACCOUNT_ID=xyz\n", "existing house file is untouched");
-    }
-    finally {
-        rmSync(root, { recursive: true, force: true });
-    }
-});
-test("absent when no account carries a master (no house file, no error)", () => {
-    const { root, installDir } = makeDirs();
-    try {
-        acctSecrets(installDir, "acc-1", "CF_PAGES_D1_TOKEN=scoped_only\n");
-        const r = migrateHouseCredentialFromAccount(installDir);
-        assert.equal(r.result, "absent");
-        assert.ok(!existsSync(join(installDir, "platform/config", "cloudflare-house.env")));
-    }
-    finally {
-        rmSync(root, { recursive: true, force: true });
-    }
-});
-test("deterministic pick — lexicographically-first account id wins", () => {
-    const { root, installDir } = makeDirs();
-    try {
-        acctSecrets(installDir, "bbb", "CLOUDFLARE_API_TOKEN=tok_b\nCLOUDFLARE_ACCOUNT_ID=idb\n");
-        acctSecrets(installDir, "aaa", "CLOUDFLARE_API_TOKEN=tok_a\nCLOUDFLARE_ACCOUNT_ID=ida\n");
-        const r = migrateHouseCredentialFromAccount(installDir);
-        assert.equal(r.source, "aaa");
-        assert.match(readFileSync(join(installDir, "platform/config", "cloudflare-house.env"), "utf-8"), /tok_a/);
-    }
-    finally {
-        rmSync(root, { recursive: true, force: true });
-    }
-});
-test("full upgrade path: pre-1631 relocates, second run is a no-op", () => {
-    const { root, installDir, persistentDir } = makeDirs();
-    try {
-        // Pre-1631 upgrade: no house file survives the wipe/restore (nothing saved).
-        simulateUpgrade(installDir, persistentDir);
-        assert.ok(!existsSync(join(installDir, "platform/config", "cloudflare-house.env")));
-        acctSecrets(installDir, "acc-1", "CLOUDFLARE_API_TOKEN=cfat_minter\nCLOUDFLARE_ACCOUNT_ID=deadbeef\n");
-        assert.equal(migrateHouseCredentialFromAccount(installDir).result, "relocated");
-        assert.equal(migrateHouseCredentialFromAccount(installDir).result, "noop", "second run is idempotent");
-    }
-    finally {
-        rmSync(root, { recursive: true, force: true });
-    }
-});

package/dist/index.js

@@ -10,9 +10,8 @@ import { buildBrandCronBlock, mergeBrandCronBlock } from "./cron-registration.js
 import { validateTierFlag, validateEntitlementBase64, applyTierToAccountConfig, entitlementPath } from "./tier-flag.js";
 import { parseOsRelease, isUbuntuLike as isUbuntuLikePure, parseAptCacheCandidate, decideAptResolution, } from "./apt-resolve.js";
 import { findPeerBrandOnDefaultNeo4jPort } from "./peer-brand-detect.js";
-import { removeClientAdminsKey } from "./converge-client-admins.js";
 import { seedPublicInstructionFiles } from "./public-instruction-seed.js";
-import { backupHouseCloudflare, restoreHouseCloudflare, migrateHouseCredentialFromAccount, } from "./preserve-house-cloudflare.js";
+import { backupHouseCloudflare, restoreHouseCloudflare, } from "./preserve-house-cloudflare.js";
 import { resolveNeo4jPidfileScrub } from "./neo4j-pidfile-scrub.js";
 import { runInitLogging } from "./init-logging.js";
 import { requireSupportedPlatform, detectPlatform } from "./platform-detect.js";
@@ -2650,15 +2649,6 @@ function deployPayload() {
     if (restoreHouseCloudflare(INSTALL_DIR, persistentDir)) {
         console.log("  Restored Cloudflare house credential (cloudflare-house.env preserved).");
     }
-    // Task 1671 — a pre-1631 install crossing the 0.1.449 boundary has no house
-    // credential yet, but its per-account secrets still carry the account-wide
-    // master (a minter, Task 1670). Relocate it into the house file so the broker
-    // and calendar find it where the 1631 readers expect it, with zero manual
-    // step. Idempotent: no-op once the house file exists (fresh install → absent).
-    {
-        const mig = migrateHouseCredentialFromAccount(INSTALL_DIR);
-        console.log(`  [install] op=house-cred-migrate result=${mig.result}${mig.source ? ` source=${mig.source}` : ""}`);
-    }
     // users.json is read directly from persistentDir by both
     // platform/ui/app/lib/paths.ts (USERS_FILE = MAXY_DIR/users.json) and the
     // admin MCP plugin (USERS_FILE = CONFIG_DIR/users.json). No copy into the
@@ -2690,13 +2680,6 @@ function deployPayload() {
     // installer is its own npm package and doesn't bundle the platform lib.
     // Mirrors checkAdminAuthInvariant() in platform/lib/admins-write/src/index.ts;
     // future divergence between the two should be caught by the test suite.
-    // Task 1623 — converge existing client account.json to drop the vestigial
-    // admins[] key before the invariant check reads them. House untouched.
-    for (const r of removeClientAdminsKey(join(INSTALL_DIR, "data", "accounts"))) {
-        if (r.action === "removed" || r.action === "unreadable" || r.action === "write-failed") {
-            console.log(`  [converge-1623] account=${r.accountId.slice(0, 8)} admins=${r.action}`);
-        }
-    }
     runInstallInvariantCheck(persistentUsersFile, join(INSTALL_DIR, "data", "accounts"));
     // The version marker is NOT written here. It is stamped at the very end of a
     // fully-successful install (after plugin registration and every throwing
@@ -3392,47 +3375,13 @@ function setupAccount() {
         logFile(`  [neo4j] passing NEO4J_URI=${neo4jUri} to seed`);
         shell("bash", [seedScript], { cwd: INSTALL_DIR, env: neo4jEnv });
     }
-    // Task 2213 — converge :Event.startDate onto canonical UTC. The dispatcher
-    // compares startDate to new Date().toISOString() LEXICALLY, so a row storing
-    // a +01:00 offset fires 60 minutes late under BST. Runs after the seed so the
-    // schema exists, with the same Neo4j env, and needs PLATFORM_ROOT to scope
-    // itself to this install's accounts on a shared Neo4j. Idempotent: a converged
-    // install rewrites nothing and prints op=done rewritten=0.
-    const convergeStartDate = join(INSTALL_DIR, "platform/plugins/scheduling/mcp/dist/scripts/converge-startdate-utc.js");
-    if (existsSync(convergeStartDate)) {
-        shell("node", [convergeStartDate], {
-            cwd: INSTALL_DIR,
-            env: { ...neo4jEnv, PLATFORM_ROOT: join(INSTALL_DIR, "platform") },
-        });
-    }
-    // Task 2361 — collapse the two routine description properties onto
-    // `:Event.description`, preferring whichever value the operator or the agent
-    // wrote. Runs after the seed for the same reasons the convergence above does:
-    // the schema exists by then, and the same Neo4j env is already built. Scoped to
-    // this install's accounts via PLATFORM_ROOT, so a co-resident brand sharing one
-    // Neo4j is untouched. Idempotent: a converged install matches nothing and
-    // prints converged=0.
-    const convergeRoutineDescription = join(INSTALL_DIR, "platform/plugins/scheduling/mcp/dist/scripts/converge-routine-description.js");
-    if (existsSync(convergeRoutineDescription)) {
-        shell("node", [convergeRoutineDescription], {
-            cwd: INSTALL_DIR,
-            env: { ...neo4jEnv, PLATFORM_ROOT: join(INSTALL_DIR, "platform") },
-        });
-    }
-    // Task 2513 — converge :Visit.startDate and :Visit.endDate onto canonical
-    // UTC. The planner window compares startDate to Z-suffixed bounds LEXICALLY,
-    // so a row storing a +01:00 offset lands in the wrong day under BST. Runs
-    // after the seed for the same reasons the two convergences above do, and is
-    // scoped to this install's accounts so a co-resident brand sharing one Neo4j
-    // is untouched. Idempotent: a converged install rewrites nothing and prints
-    // op=start-migration rewritten=0.
-    const convergeVisitInstants = join(INSTALL_DIR, "platform/plugins/dispatch/mcp/dist/scripts/converge-visit-instants.js");
-    if (existsSync(convergeVisitInstants)) {
-        shell("node", [convergeVisitInstants], {
-            cwd: INSTALL_DIR,
-            env: { ...neo4jEnv, PLATFORM_ROOT: join(INSTALL_DIR, "platform") },
-        });
-    }
+    // Install-time data migrations were removed on 2026-08-08 by operator
+    // decision. Three convergences ran here (Tasks 2213, 2361, 2513). Every
+    // device in the fleet is past the state each one existed to repair, so on
+    // every install they scanned and rewrote nothing while adding a Neo4j
+    // round-trip and a way to fail: 2513's script leaked its driver and hung
+    // the installer after printing scanned=0. A future migration belongs in a
+    // one-shot the operator runs deliberately, not on the upgrade path.
     // Task 2460 — clear the brand-wide agent root this step used to write.
     // Every bundled specialist now reaches a session through the per-account
     // registry that `syncAccountAgentRegistry` mirrors at spawn from

package/dist/preserve-house-cloudflare.js

@@ -6,8 +6,8 @@
 // calendar reconcile/publish scripts) fails with "house credential not found"
 // until an operator re-mints the token by hand. The persistent copy lives in
 // the brand's persistent config dir so even a full reinstall restores it.
-import { existsSync, cpSync, chmodSync, readdirSync, readFileSync, writeFileSync, mkdirSync } from "node:fs";
-import { join, dirname } from "node:path";
+import { existsSync, cpSync, chmodSync } from "node:fs";
+import { join } from "node:path";
 const HOUSE_CRED_FILE = "cloudflare-house.env";
 /**
  * Copy the live house credential (if any) into the persistent store before the
@@ -35,50 +35,3 @@ export function restoreHouseCloudflare(installDir, persistentDir) {
     chmodSync(dest, 0o600);
     return true;
 }
-/**
- * Task 1671 — on upgrade, if no house credential exists yet, relocate an
- * existing per-account master (CLOUDFLARE_API_TOKEN + CLOUDFLARE_ACCOUNT_ID)
- * into the house file (mode 600). This lets a pre-1631 install cross the 0.1.449
- * boundary with zero manual step: the broker/calendar (Task 1670) then mint
- * their scoped tokens from the relocated minter where the 1631 readers expect it.
- *
- * Fail-safe and idempotent:
- * - never overwrites an existing house file (returns "noop");
- * - never guesses a token (both master keys required);
- * - deterministic: scans accounts sorted by id, takes the first with a master;
- * - relocates only the two master keys, so no per-account scoped token leaks
- *   house-side.
- *
- * The relocated file is preserved on subsequent upgrades by backupHouseCloudflare
- * (Task 1664), which runs before the wipe on the next install.
- */
-export function migrateHouseCredentialFromAccount(installDir) {
-    const house = join(installDir, "platform/config", HOUSE_CRED_FILE);
-    if (existsSync(house))
-        return { result: "noop" };
-    const accountsDir = join(installDir, "data/accounts");
-    if (!existsSync(accountsDir))
-        return { result: "absent" };
-    for (const id of readdirSync(accountsDir).sort()) {
-        const secrets = join(accountsDir, id, "secrets", "cloudflare.env");
-        if (!existsSync(secrets))
-            continue;
-        const env = {};
-        for (const line of readFileSync(secrets, "utf8").split("\n")) {
-            const m = line.match(/^\s*([A-Za-z_][A-Za-z0-9_]*)=(.*)$/);
-            if (m)
-                env[m[1]] = m[2].trim();
-        }
-        const apiToken = env.CLOUDFLARE_API_TOKEN;
-        const accountId = env.CLOUDFLARE_ACCOUNT_ID;
-        if (!apiToken || !accountId)
-            continue;
-        mkdirSync(dirname(house), { recursive: true });
-        writeFileSync(house, `CLOUDFLARE_API_TOKEN=${apiToken}\nCLOUDFLARE_ACCOUNT_ID=${accountId}\n`, {
-            mode: 0o600,
-        });
-        chmodSync(house, 0o600);
-        return { result: "relocated", source: id };
-    }
-    return { result: "absent" };
-}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@rubytech/create-realagent-code",
-  "version": "0.1.575",
+  "version": "0.1.577",
   "description": "Install Real Agent — Built for agents. By agents.",
   "bin": {
     "create-realagent-code": "./dist/index.js"

package/payload/platform/lib/active-rules/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAUA,eAAO,MAAM,mBAAmB,OAAO,CAAC;AACxC,eAAO,MAAM,sBAAsB,MAAM,CAAC;AAE1C,MAAM,WAAW,aAAa;IAC5B,YAAY,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,MAAM,CAAC;IACjB,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC;CAC5B;AAED,MAAM,WAAW,UAAU;IACzB,YAAY,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,MAAM,CAAC;IACjB,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;CACpB;AAKD,wBAAgB,wBAAwB,CAAC,KAAK,EAAE,UAAU,EAAE,GAAG,MAAM,CAIpE;AAED,UAAU,cAAc;IACtB,GAAG,EAAE,CACH,CAAC,EAAE,MAAM,EACT,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KACvB,OAAO,CAAC;QAAE,OAAO,EAAE,KAAK,CAAC;YAAE,GAAG,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,CAAA;SAAE,CAAC,CAAA;KAAE,CAAC,CAAC;CAC/D;AAMD,MAAM,MAAM,gBAAgB,GAAG,OAAO,GAAG,UAAU,GAAG,aAAa,CAAC;AACpE,MAAM,MAAM,eAAe,GAAG,gBAAgB,GAAG,aAAa,CAAC;AAE/D,MAAM,WAAW,oBAAoB;IACnC,KAAK,EAAE,UAAU,EAAE,CAAC;IACpB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,MAAM,EAAE,gBAAgB,CAAC;CAC1B;AAID,MAAM,WAAW,sBAAsB;IACrC,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,MAAM,EAAE,eAAe,CAAC;CACzB;AAOD,wBAAsB,kBAAkB,CACtC,OAAO,EAAE,cAAc,EACvB,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAaxB;AAgED,wBAAsB,yBAAyB,CAC7C,OAAO,EAAE,cAAc,EACvB,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,aAAa,EAAE,CAAC,CAE1B;AAKD,wBAAsB,kBAAkB,CACtC,OAAO,EAAE,cAAc,EACvB,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,oBAAoB,CAAC,CAI/B;AAID,wBAAsB,aAAa,CACjC,OAAO,EAAE,cAAc,EACvB,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,UAAU,EAAE,CAAC,CAEvB"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAUA,eAAO,MAAM,mBAAmB,OAAO,CAAC;AACxC,eAAO,MAAM,sBAAsB,MAAM,CAAC;AAE1C,MAAM,WAAW,aAAa;IAC5B,YAAY,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,MAAM,CAAC;IACjB,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC;CAC5B;AAED,MAAM,WAAW,UAAU;IACzB,YAAY,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,MAAM,CAAC;IACjB,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;CACpB;AAgCD,wBAAgB,wBAAwB,CAAC,KAAK,EAAE,UAAU,EAAE,GAAG,MAAM,CAUpE;AAED,UAAU,cAAc;IACtB,GAAG,EAAE,CACH,CAAC,EAAE,MAAM,EACT,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KACvB,OAAO,CAAC;QAAE,OAAO,EAAE,KAAK,CAAC;YAAE,GAAG,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,CAAA;SAAE,CAAC,CAAA;KAAE,CAAC,CAAC;CAC/D;AAMD,MAAM,MAAM,gBAAgB,GAAG,OAAO,GAAG,UAAU,GAAG,aAAa,CAAC;AACpE,MAAM,MAAM,eAAe,GAAG,gBAAgB,GAAG,aAAa,CAAC;AAE/D,MAAM,WAAW,oBAAoB;IACnC,KAAK,EAAE,UAAU,EAAE,CAAC;IACpB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,MAAM,EAAE,gBAAgB,CAAC;CAC1B;AAKD,MAAM,WAAW,sBAAsB;IACrC,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,MAAM,EAAE,eAAe,CAAC;CACzB;AAOD,wBAAsB,kBAAkB,CACtC,OAAO,EAAE,cAAc,EACvB,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAaxB;AAgED,wBAAsB,yBAAyB,CAC7C,OAAO,EAAE,cAAc,EACvB,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,aAAa,EAAE,CAAC,CAE1B;AAKD,wBAAsB,kBAAkB,CACtC,OAAO,EAAE,cAAc,EACvB,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,oBAAoB,CAAC,CAI/B;AAID,wBAAsB,aAAa,CACjC,OAAO,EAAE,cAAc,EACvB,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,UAAU,EAAE,CAAC,CAEvB"}

package/payload/platform/lib/active-rules/dist/index.js

@@ -20,11 +20,42 @@ exports.ACTIVE_CANDIDATE_FLOOR = 0.4;
 // Render every rule verbatim. Injection has no cap (Task 1951): concision is
 // enforced at write time by the conversational-memory skill so each stored
 // value is already short, not by truncating the block here.
+//
+// Task 2562 — the header names the owner and the block forbids reading a
+// speaker out of it. Selection is owner-only (resolveOwnerUserId then
+// queryOwnerCandidates below), so every rule here belongs to one identity the
+// header never used to name, and a rule written in the third person about the
+// owner read as a statement about whoever was typing: on sitedesk-code nine
+// owner rules reached a second admin, who was then greeted by the owner's name.
+//
+// The block deliberately does NOT claim a sender is named elsewhere. The same
+// block feeds all three doors and only WhatsApp carries an inbound provenance
+// preamble today (whatsapp-channel/src/notification.ts composeInboundProvenance);
+// webchat has none and Telegram has none until Task 2561 lands. Pointing the
+// agent at a block that is absent is worse than saying nothing about it.
+//
+// Copy constraints, all load-bearing. No apostrophe anywhere in the block:
+// plugins/admin/hooks/prompt-optimiser-compliance.sh holds its whole python
+// program inside a single-quoted `python3 -c '...'` and its rules fixtures are
+// single-quoted bash strings. No blank line: both strip regexes are non-greedy
+// up to the blank line before `## Context`, so the body has to be one physical
+// line. Operator-clean otherwise (no task numbers, repo paths or em-dashes) so
+// the outbound redactor never trips on it.
+//
+// The header is an exact-match anchor in three places that must move with it:
+// COMPOSED_ADMIN_FRAME (ui/app/lib/reader/parse-transcript.ts), the strip in
+// plugins/admin/hooks/prompt-optimiser-compliance.sh, and that hook's test
+// fixtures. Nothing logs when either strip stops matching, so the verbatim
+// assertions in index.test.ts are the whole reconciliation.
 function formatStandingRulesBlock(rules) {
     if (rules.length === 0)
         return "";
     const lines = rules.map((r) => `- ${r.value}`);
-    return `## Standing rules\n${lines.join("\n")}`;
+    return (`## Standing rules (account owner)\n` +
+        `These standing rules belong to the account owner. ` +
+        `Some of them may name the account owner in the third person. ` +
+        `None of them says who sent this turn, so do not infer from them who is speaking.\n` +
+        lines.join("\n"));
 }
 // The account's owner identity (Task 1461). One `AdminUser {role:'owner'}` is
 // seeded per account (Task 1359); `null` when absent (a pre-seeding legacy

package/payload/platform/lib/active-rules/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AAAA,uEAAuE;AACvE,sEAAsE;AACtE,gFAAgF;AAChF,8EAA8E;AAC9E,cAAc;;;AA+Bd,4DAIC;AAmCD,gDAgBC;AAgED,8DAKC;AAKD,gDAOC;AAID,sCAKC;AA9KD,8EAA8E;AAC9E,gFAAgF;AAChF,4EAA4E;AAC5E,2EAA2E;AAC9D,QAAA,mBAAmB,GAAG,IAAI,CAAC;AAC3B,QAAA,sBAAsB,GAAG,GAAG,CAAC;AAqB1C,6EAA6E;AAC7E,2EAA2E;AAC3E,4DAA4D;AAC5D,SAAgB,wBAAwB,CAAC,KAAmB;IAC1D,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAClC,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;IAC/C,OAAO,sBAAsB,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;AAClD,CAAC;AA8BD,8EAA8E;AAC9E,2EAA2E;AAC3E,6EAA6E;AAC7E,yEAAyE;AACzE,4EAA4E;AACrE,KAAK,UAAU,kBAAkB,CACtC,OAAuB,EACvB,SAAiB;IAEjB,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,GAAG,CAC3B;;;;;KAKC,EACD,EAAE,SAAS,EAAE,CACd,CAAC;IACF,MAAM,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;IAC3B,MAAM,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC9C,OAAO,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC;AACzE,CAAC;AAED,mEAAmE;AACnE,8EAA8E;AAC9E,6EAA6E;AAC7E,8EAA8E;AAC9E,+EAA+E;AAC/E,gFAAgF;AAChF,KAAK,UAAU,oBAAoB,CACjC,OAAuB,EACvB,SAAiB,EACjB,WAAmB;IAEnB,yEAAyE;IACzE,8EAA8E;IAC9E,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,GAAG,CAC9B;;;;;;;;;KASC,EACD,EAAE,SAAS,EAAE,WAAW,EAAE,KAAK,EAAE,8BAAsB,EAAE,CAC1D,CAAC;IACF,OAAO,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAChC,YAAY,EAAE,CAAC,CAAC,GAAG,CAAC,cAAc,CAAW;QAC7C,QAAQ,EAAE,CAAC,CAAC,GAAG,CAAC,UAAU,CAAW;QACrC,GAAG,EAAE,CAAC,CAAC,GAAG,CAAC,KAAK,CAAW;QAC3B,KAAK,EAAE,CAAC,CAAC,GAAG,CAAC,OAAO,CAAW;QAC/B,UAAU,EAAE,CAAC,CAAC,GAAG,CAAC,YAAY,CAAW;QACzC,UAAU,EAAG,CAAC,CAAC,GAAG,CAAC,YAAY,CAAY,IAAI,EAAE;QACjD,SAAS,EAAG,CAAC,CAAC,GAAG,CAAC,WAAW,CAAqB,IAAI,IAAI;KAC3D,CAAC,CAAC,CAAC;AACN,CAAC;AAED,gFAAgF;AAChF,8EAA8E;AAC9E,6EAA6E;AAC7E,+DAA+D;AAC/D,KAAK,UAAU,iBAAiB,CAC9B,OAAuB,EACvB,SAAiB;IAMjB,IAAI,WAA0B,CAAC;IAC/B,IAAI,CAAC;QACH,WAAW,GAAG,MAAM,kBAAkB,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;IAC7D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,UAAU,EAAE,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC;IACtE,CAAC;IACD,IAAI,CAAC,WAAW;QAAE,OAAO,EAAE,UAAU,EAAE,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;IACnF,MAAM,UAAU,GAAG,MAAM,oBAAoB,CAAC,OAAO,EAAE,SAAS,EAAE,WAAW,CAAC,CAAC;IAC/E,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;AACtD,CAAC;AAED,2EAA2E;AAC3E,uEAAuE;AAChE,KAAK,UAAU,yBAAyB,CAC7C,OAAuB,EACvB,SAAiB;IAEjB,OAAO,CAAC,MAAM,iBAAiB,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC,CAAC,UAAU,CAAC;AAClE,CAAC;AAED,8EAA8E;AAC9E,8EAA8E;AAC9E,2EAA2E;AACpE,KAAK,UAAU,kBAAkB,CACtC,OAAuB,EACvB,SAAiB;IAEjB,MAAM,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,EAAE,GAAG,MAAM,iBAAiB,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;IACxF,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC,EAAE,SAAS,EAAE,UAAU,EAAE,GAAG,IAAI,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC;IAC3E,OAAO,EAAE,KAAK,EAAE,WAAW,EAAE,MAAM,EAAE,CAAC;AACxC,CAAC;AAED,8EAA8E;AAC9E,+BAA+B;AACxB,KAAK,UAAU,aAAa,CACjC,OAAuB,EACvB,SAAiB;IAEjB,OAAO,CAAC,MAAM,kBAAkB,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC;AAC9D,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AAAA,uEAAuE;AACvE,sEAAsE;AACtE,gFAAgF;AAChF,8EAA8E;AAC9E,cAAc;;;AA0Dd,4DAUC;AAoCD,gDAgBC;AAgED,8DAKC;AAKD,gDAOC;AAID,sCAKC;AAhND,8EAA8E;AAC9E,gFAAgF;AAChF,4EAA4E;AAC5E,2EAA2E;AAC9D,QAAA,mBAAmB,GAAG,IAAI,CAAC;AAC3B,QAAA,sBAAsB,GAAG,GAAG,CAAC;AAqB1C,6EAA6E;AAC7E,2EAA2E;AAC3E,4DAA4D;AAC5D,EAAE;AACF,yEAAyE;AACzE,sEAAsE;AACtE,8EAA8E;AAC9E,8EAA8E;AAC9E,4EAA4E;AAC5E,gFAAgF;AAChF,EAAE;AACF,8EAA8E;AAC9E,8EAA8E;AAC9E,kFAAkF;AAClF,6EAA6E;AAC7E,yEAAyE;AACzE,EAAE;AACF,2EAA2E;AAC3E,4EAA4E;AAC5E,+EAA+E;AAC/E,+EAA+E;AAC/E,+EAA+E;AAC/E,+EAA+E;AAC/E,2CAA2C;AAC3C,EAAE;AACF,8EAA8E;AAC9E,6EAA6E;AAC7E,2EAA2E;AAC3E,2EAA2E;AAC3E,4DAA4D;AAC5D,SAAgB,wBAAwB,CAAC,KAAmB;IAC1D,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAClC,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;IAC/C,OAAO,CACL,qCAAqC;QACrC,oDAAoD;QACpD,+DAA+D;QAC/D,oFAAoF;QACpF,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CACjB,CAAC;AACJ,CAAC;AA+BD,8EAA8E;AAC9E,2EAA2E;AAC3E,6EAA6E;AAC7E,yEAAyE;AACzE,4EAA4E;AACrE,KAAK,UAAU,kBAAkB,CACtC,OAAuB,EACvB,SAAiB;IAEjB,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,GAAG,CAC3B;;;;;KAKC,EACD,EAAE,SAAS,EAAE,CACd,CAAC;IACF,MAAM,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;IAC3B,MAAM,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC9C,OAAO,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC;AACzE,CAAC;AAED,mEAAmE;AACnE,8EAA8E;AAC9E,6EAA6E;AAC7E,8EAA8E;AAC9E,+EAA+E;AAC/E,gFAAgF;AAChF,KAAK,UAAU,oBAAoB,CACjC,OAAuB,EACvB,SAAiB,EACjB,WAAmB;IAEnB,yEAAyE;IACzE,8EAA8E;IAC9E,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,GAAG,CAC9B;;;;;;;;;KASC,EACD,EAAE,SAAS,EAAE,WAAW,EAAE,KAAK,EAAE,8BAAsB,EAAE,CAC1D,CAAC;IACF,OAAO,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAChC,YAAY,EAAE,CAAC,CAAC,GAAG,CAAC,cAAc,CAAW;QAC7C,QAAQ,EAAE,CAAC,CAAC,GAAG,CAAC,UAAU,CAAW;QACrC,GAAG,EAAE,CAAC,CAAC,GAAG,CAAC,KAAK,CAAW;QAC3B,KAAK,EAAE,CAAC,CAAC,GAAG,CAAC,OAAO,CAAW;QAC/B,UAAU,EAAE,CAAC,CAAC,GAAG,CAAC,YAAY,CAAW;QACzC,UAAU,EAAG,CAAC,CAAC,GAAG,CAAC,YAAY,CAAY,IAAI,EAAE;QACjD,SAAS,EAAG,CAAC,CAAC,GAAG,CAAC,WAAW,CAAqB,IAAI,IAAI;KAC3D,CAAC,CAAC,CAAC;AACN,CAAC;AAED,gFAAgF;AAChF,8EAA8E;AAC9E,6EAA6E;AAC7E,+DAA+D;AAC/D,KAAK,UAAU,iBAAiB,CAC9B,OAAuB,EACvB,SAAiB;IAMjB,IAAI,WAA0B,CAAC;IAC/B,IAAI,CAAC;QACH,WAAW,GAAG,MAAM,kBAAkB,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;IAC7D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,UAAU,EAAE,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC;IACtE,CAAC;IACD,IAAI,CAAC,WAAW;QAAE,OAAO,EAAE,UAAU,EAAE,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;IACnF,MAAM,UAAU,GAAG,MAAM,oBAAoB,CAAC,OAAO,EAAE,SAAS,EAAE,WAAW,CAAC,CAAC;IAC/E,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;AACtD,CAAC;AAED,2EAA2E;AAC3E,uEAAuE;AAChE,KAAK,UAAU,yBAAyB,CAC7C,OAAuB,EACvB,SAAiB;IAEjB,OAAO,CAAC,MAAM,iBAAiB,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC,CAAC,UAAU,CAAC;AAClE,CAAC;AAED,8EAA8E;AAC9E,8EAA8E;AAC9E,2EAA2E;AACpE,KAAK,UAAU,kBAAkB,CACtC,OAAuB,EACvB,SAAiB;IAEjB,MAAM,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,EAAE,GAAG,MAAM,iBAAiB,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;IACxF,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC,EAAE,SAAS,EAAE,UAAU,EAAE,GAAG,IAAI,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC;IAC3E,OAAO,EAAE,KAAK,EAAE,WAAW,EAAE,MAAM,EAAE,CAAC;AACxC,CAAC;AAED,8EAA8E;AAC9E,+BAA+B;AACxB,KAAK,UAAU,aAAa,CACjC,OAAuB,EACvB,SAAiB;IAEjB,OAAO,CAAC,MAAM,kBAAkB,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC;AAC9D,CAAC"}

package/payload/platform/lib/active-rules/src/index.test.ts

@@ -141,11 +141,60 @@ describe("resolveActiveRules — owner-scoped, uncapped, verbatim", () => {
 });
 
 describe("formatStandingRulesBlock", () => {
+  // Task 2562 — the header and the do-not-infer line are asserted verbatim
+  // because the same header string is an exact-match anchor in
+  // parse-transcript.ts (COMPOSED_ADMIN_FRAME) and in
+  // plugins/admin/hooks/prompt-optimiser-compliance.sh. Neither logs anything
+  // when it stops matching, so this assertion is the only thing standing
+  // between a copy edit and a silently broken strip.
+  const HEADER = "## Standing rules (account owner)";
+  const BODY =
+    "These standing rules belong to the account owner. Some of them may name the account owner in the third person. None of them says who sent this turn, so do not infer from them who is speaking.";
+
+  const oneRule = () => [
+    {
+      preferenceId: "p1",
+      category: "communication",
+      key: "k1",
+      value: "use British spelling",
+      confidence: 0.9,
+      observedAt: "2026-07-01T00:00:00Z",
+    },
+  ];
+
   it("returns empty string for no rules", () => {
     expect(formatStandingRulesBlock([])).toBe("");
   });
 
-  it("renders every rule, with no cap", () => {
+  it("opens with the attributed header and the do-not-infer line", () => {
+    expect(formatStandingRulesBlock(oneRule())).toBe(
+      `${HEADER}\n${BODY}\n- use British spelling`,
+    );
+  });
+
+  it("carries no apostrophe, so the hook and its shell fixtures keep quoting", () => {
+    // The rule VALUES are operator data and may contain anything; only the two
+    // lines of platform copy are constrained.
+    const platformCopy = formatStandingRulesBlock(oneRule())
+      .split("\n")
+      .slice(0, 2)
+      .join("\n");
+    expect(platformCopy).not.toContain("'");
+  });
+
+  it("contains no blank line, so both strip regexes still terminate at ## Context", () => {
+    const rules = Array.from({ length: 3 }, (_, i) => ({
+      preferenceId: `p${i}`,
+      category: "communication",
+      key: `k${i}`,
+      value: `rule ${i}`,
+      confidence: 1 - i * 0.01,
+      observedAt: "2026-07-01T00:00:00Z",
+    }));
+    expect(formatStandingRulesBlock(rules)).not.toContain("\n\n");
+  });
+
+  it("renders every rule, with no cap, in resolution order", () => {
     const rules = Array.from({ length: 20 }, (_, i) => ({
       preferenceId: `p${i}`,
       category: "communication",
@@ -155,7 +204,7 @@ describe("formatStandingRulesBlock", () => {
       observedAt: "2026-07-01T00:00:00Z",
     }));
     const block = formatStandingRulesBlock(rules);
-    expect(block).toContain("## Standing rules");
-    expect((block.match(/^- /gm) ?? []).length).toBe(20);
+    expect(block.startsWith(`${HEADER}\n${BODY}\n`)).toBe(true);
+    expect(block.split("\n").slice(2)).toEqual(rules.map((r) => `- ${r.value}`));
   });
 });

package/payload/platform/lib/active-rules/src/index.ts

@@ -33,10 +33,43 @@ export interface ActiveRule {
 // Render every rule verbatim. Injection has no cap (Task 1951): concision is
 // enforced at write time by the conversational-memory skill so each stored
 // value is already short, not by truncating the block here.
+//
+// Task 2562 — the header names the owner and the block forbids reading a
+// speaker out of it. Selection is owner-only (resolveOwnerUserId then
+// queryOwnerCandidates below), so every rule here belongs to one identity the
+// header never used to name, and a rule written in the third person about the
+// owner read as a statement about whoever was typing: on sitedesk-code nine
+// owner rules reached a second admin, who was then greeted by the owner's name.
+//
+// The block deliberately does NOT claim a sender is named elsewhere. The same
+// block feeds all three doors and only WhatsApp carries an inbound provenance
+// preamble today (whatsapp-channel/src/notification.ts composeInboundProvenance);
+// webchat has none and Telegram has none until Task 2561 lands. Pointing the
+// agent at a block that is absent is worse than saying nothing about it.
+//
+// Copy constraints, all load-bearing. No apostrophe anywhere in the block:
+// plugins/admin/hooks/prompt-optimiser-compliance.sh holds its whole python
+// program inside a single-quoted `python3 -c '...'` and its rules fixtures are
+// single-quoted bash strings. No blank line: both strip regexes are non-greedy
+// up to the blank line before `## Context`, so the body has to be one physical
+// line. Operator-clean otherwise (no task numbers, repo paths or em-dashes) so
+// the outbound redactor never trips on it.
+//
+// The header is an exact-match anchor in three places that must move with it:
+// COMPOSED_ADMIN_FRAME (ui/app/lib/reader/parse-transcript.ts), the strip in
+// plugins/admin/hooks/prompt-optimiser-compliance.sh, and that hook's test
+// fixtures. Nothing logs when either strip stops matching, so the verbatim
+// assertions in index.test.ts are the whole reconciliation.
 export function formatStandingRulesBlock(rules: ActiveRule[]): string {
   if (rules.length === 0) return "";
   const lines = rules.map((r) => `- ${r.value}`);
-  return `## Standing rules\n${lines.join("\n")}`;
+  return (
+    `## Standing rules (account owner)\n` +
+    `These standing rules belong to the account owner. ` +
+    `Some of them may name the account owner in the third person. ` +
+    `None of them says who sent this turn, so do not infer from them who is speaking.\n` +
+    lines.join("\n")
+  );
 }
 
 interface MinimalSession {
@@ -60,7 +93,8 @@ export interface ActiveRuleResolution {
 }
 
 // The per-turn injection payload the UI hands each channel gateway: the
-// formatted `## Standing rules` block plus the provenance the gateway logs.
+// formatted `## Standing rules (account owner)` block plus the provenance the
+// gateway logs.
 export interface StandingRulesInjection {
   block: string;
   ownerUserId: string | null;

package/payload/platform/lib/dispatch-read/dist/allocate.d.ts

@@ -0,0 +1,57 @@
+/**
+ * Who can be sent to this job, and why the others cannot.
+ *
+ * The rule that matters: **a qualified worker who is already committed in the
+ * window is offered WITH the conflict shown, never dropped.** The office
+ * routinely double-books on purpose — a job runs short, a customer is on the
+ * way home, an engineer volunteers. A tool that silently removes the busy
+ * option makes that decision for them and gives no way to see it was made.
+ *
+ * Only a missing qualification excludes, and every exclusion is named with its
+ * worker and its reason, because `offered=0` with no explanation is the shape a
+ * quiet day and an unstaffable job type share.
+ *
+ * It lives in this shared lib rather than in the dispatch plugin because the
+ * portal visits push runs in `platform/ui` and cannot import a plugin's build
+ * output, and a second implementation of qualification and clash is the defect
+ * `functions/api/visits.ts:33-36` names: a gate written once per client is a
+ * gate got wrong once per client. Task 2510 moved `buildVisitKeyboard` here for
+ * the same reason. The dispatch plugin re-exports both from
+ * `mcp/src/lib/allocate.ts`, which is the import site its tools and tests
+ * already name.
+ */
+import type { DispatchConfig } from "./types.js";
+import type { Commitment } from "./read.js";
+export type { Commitment };
+export interface Candidate {
+    readonly workerId: string;
+    readonly name: string;
+    /** Commitments overlapping the requested window. Empty means free. */
+    readonly conflicts: readonly Commitment[];
+}
+export interface Exclusion {
+    readonly workerId: string;
+    readonly reason: "missing-qualification";
+}
+export interface SelectCandidatesParams {
+    readonly jobType: string;
+    readonly cfg: DispatchConfig;
+    /** Committed visits per workerId, already narrowed to the window. */
+    readonly commitments: ReadonlyMap<string, readonly Commitment[]>;
+}
+export interface CandidateSelection {
+    readonly offered: readonly Candidate[];
+    readonly excluded: readonly Exclusion[];
+    /** The qualification the job type demands, echoed for the log line. */
+    readonly required: string;
+}
+export declare function selectCandidates(params: SelectCandidatesParams): CandidateSelection;
+/** `[a, b)` overlap. Touching endpoints do not overlap. */
+export declare function overlaps(a: {
+    start: string;
+    end: string;
+}, b: {
+    start: string;
+    end: string;
+}): boolean;
+//# sourceMappingURL=allocate.d.ts.map

package/payload/platform/lib/dispatch-read/dist/allocate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"allocate.d.ts","sourceRoot":"","sources":["../src/allocate.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAKjD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AAE5C,YAAY,EAAE,UAAU,EAAE,CAAC;AAE3B,MAAM,WAAW,SAAS;IACxB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,sEAAsE;IACtE,QAAQ,CAAC,SAAS,EAAE,SAAS,UAAU,EAAE,CAAC;CAC3C;AAED,MAAM,WAAW,SAAS;IACxB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,MAAM,EAAE,uBAAuB,CAAC;CAC1C;AAED,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,GAAG,EAAE,cAAc,CAAC;IAC7B,qEAAqE;IACrE,QAAQ,CAAC,WAAW,EAAE,WAAW,CAAC,MAAM,EAAE,SAAS,UAAU,EAAE,CAAC,CAAC;CAClE;AAED,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,OAAO,EAAE,SAAS,SAAS,EAAE,CAAC;IACvC,QAAQ,CAAC,QAAQ,EAAE,SAAS,SAAS,EAAE,CAAC;IACxC,uEAAuE;IACvE,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;CAC3B;AAED,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,sBAAsB,GAAG,kBAAkB,CAuBnF;AAED,2DAA2D;AAC3D,wBAAgB,QAAQ,CACtB,CAAC,EAAE;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,EACjC,CAAC,EAAE;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,GAChC,OAAO,CAET"}

package/payload/platform/lib/dispatch-read/dist/allocate.js

@@ -0,0 +1,33 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.selectCandidates = selectCandidates;
+exports.overlaps = overlaps;
+function selectCandidates(params) {
+    const { jobType, cfg, commitments } = params;
+    const type = cfg.jobTypes.find((t) => t.name === jobType);
+    if (!type) {
+        // An unknown job type is the caller's error, not a staffing outcome. Every
+        // worker is excluded for a reason that would be a lie, so none are: the
+        // caller checks the type before asking.
+        return { offered: [], excluded: [], required: "" };
+    }
+    const offered = [];
+    const excluded = [];
+    for (const worker of cfg.workers) {
+        if (!worker.qualifications.includes(type.requiredQualification)) {
+            excluded.push({ workerId: worker.workerId, reason: "missing-qualification" });
+            continue;
+        }
+        offered.push({
+            workerId: worker.workerId,
+            name: worker.name,
+            conflicts: commitments.get(worker.workerId) ?? [],
+        });
+    }
+    return { offered, excluded, required: type.requiredQualification };
+}
+/** `[a, b)` overlap. Touching endpoints do not overlap. */
+function overlaps(a, b) {
+    return a.start < b.end && b.start < a.end;
+}
+//# sourceMappingURL=allocate.js.map

package/payload/platform/lib/dispatch-read/dist/allocate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"allocate.js","sourceRoot":"","sources":["../src/allocate.ts"],"names":[],"mappings":";;AAyDA,4CAuBC;AAGD,4BAKC;AA/BD,SAAgB,gBAAgB,CAAC,MAA8B;IAC7D,MAAM,EAAE,OAAO,EAAE,GAAG,EAAE,WAAW,EAAE,GAAG,MAAM,CAAC;IAC7C,MAAM,IAAI,GAAG,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC;IAC1D,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,2EAA2E;QAC3E,wEAAwE;QACxE,wCAAwC;QACxC,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;IACrD,CAAC;IACD,MAAM,OAAO,GAAgB,EAAE,CAAC;IAChC,MAAM,QAAQ,GAAgB,EAAE,CAAC;IACjC,KAAK,MAAM,MAAM,IAAI,GAAG,CAAC,OAAO,EAAE,CAAC;QACjC,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC,QAAQ,CAAC,IAAI,CAAC,qBAAqB,CAAC,EAAE,CAAC;YAChE,QAAQ,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,MAAM,EAAE,uBAAuB,EAAE,CAAC,CAAC;YAC9E,SAAS;QACX,CAAC;QACD,OAAO,CAAC,IAAI,CAAC;YACX,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,SAAS,EAAE,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,EAAE;SAClD,CAAC,CAAC;IACL,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,CAAC,qBAAqB,EAAE,CAAC;AACrE,CAAC;AAED,2DAA2D;AAC3D,SAAgB,QAAQ,CACtB,CAAiC,EACjC,CAAiC;IAEjC,OAAO,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,GAAG,CAAC;AAC5C,CAAC"}

package/payload/platform/lib/dispatch-read/dist/index.d.ts

@@ -14,6 +14,8 @@ export { RECORDABLE_FIELDS, loadDispatchConfig, terminalJobStatuses, terminalVis
 export type { RecordableField } from "./config.js";
 export { CALLBACK_DATA_MAX_BYTES, buildVisitKeyboard, dispatchCallbackData, parseDispatchCallback, } from "./keyboard.js";
 export type { DispatchButton, VisitKeyboard } from "./keyboard.js";
+export { overlaps, selectCandidates } from "./allocate.js";
+export type { Candidate, CandidateSelection, Exclusion, SelectCandidatesParams, } from "./allocate.js";
 export { withSession } from "./session.js";
 export { resolveAccountZone } from "./zone.js";
 export { MAX_RANGE_DAYS, addDaysYmd, currentWeekYmd, daysBetween, minutesIntoDay, ymdInZone, zonedDayStartUtc, zonedRangeBounds, } from "./window.js";

package/payload/platform/lib/dispatch-read/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AACH,OAAO,EACL,iBAAiB,EACjB,kBAAkB,EAClB,mBAAmB,EACnB,qBAAqB,EACrB,qBAAqB,GACtB,MAAM,aAAa,CAAC;AACrB,YAAY,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAKnD,OAAO,EACL,uBAAuB,EACvB,kBAAkB,EAClB,oBAAoB,EACpB,qBAAqB,GACtB,MAAM,eAAe,CAAC;AACvB,YAAY,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAEnE,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAC3C,OAAO,EAAE,kBAAkB,EAAE,MAAM,WAAW,CAAC;AAC/C,OAAO,EACL,cAAc,EACd,UAAU,EACV,cAAc,EACd,WAAW,EACX,cAAc,EACd,SAAS,EACT,gBAAgB,EAChB,gBAAgB,GACjB,MAAM,aAAa,CAAC;AAGrB,OAAO,EACL,iBAAiB,EACjB,iBAAiB,EACjB,UAAU,EACV,YAAY,EACZ,eAAe,EACf,SAAS,EACT,UAAU,EACV,cAAc,EACd,OAAO,EACP,QAAQ,EACR,UAAU,EACV,uBAAuB,EACvB,kBAAkB,EAClB,eAAe,EACf,gBAAgB,EAChB,SAAS,EACT,oBAAoB,EACpB,gBAAgB,EAChB,kBAAkB,GACnB,MAAM,WAAW,CAAC;AAInB,OAAO,EAAE,SAAS,EAAE,eAAe,EAAE,MAAM,UAAU,CAAC;AACtD,YAAY,EAAE,eAAe,EAAE,MAAM,UAAU,CAAC;AAGhD,OAAO,EAAE,aAAa,EAAE,UAAU,EAAE,OAAO,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,WAAW,CAAC;AAE3F,YAAY,EAAE,UAAU,EAAE,QAAQ,EAAE,aAAa,EAAE,gBAAgB,EAAE,MAAM,WAAW,CAAC;AACvF,mBAAmB,YAAY,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AACH,OAAO,EACL,iBAAiB,EACjB,kBAAkB,EAClB,mBAAmB,EACnB,qBAAqB,EACrB,qBAAqB,GACtB,MAAM,aAAa,CAAC;AACrB,YAAY,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAKnD,OAAO,EACL,uBAAuB,EACvB,kBAAkB,EAClB,oBAAoB,EACpB,qBAAqB,GACtB,MAAM,eAAe,CAAC;AACvB,YAAY,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAQnE,OAAO,EAAE,QAAQ,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AAC3D,YAAY,EACV,SAAS,EACT,kBAAkB,EAClB,SAAS,EACT,sBAAsB,GACvB,MAAM,eAAe,CAAC;AAEvB,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAC3C,OAAO,EAAE,kBAAkB,EAAE,MAAM,WAAW,CAAC;AAC/C,OAAO,EACL,cAAc,EACd,UAAU,EACV,cAAc,EACd,WAAW,EACX,cAAc,EACd,SAAS,EACT,gBAAgB,EAChB,gBAAgB,GACjB,MAAM,aAAa,CAAC;AAGrB,OAAO,EACL,iBAAiB,EACjB,iBAAiB,EACjB,UAAU,EACV,YAAY,EACZ,eAAe,EACf,SAAS,EACT,UAAU,EACV,cAAc,EACd,OAAO,EACP,QAAQ,EACR,UAAU,EACV,uBAAuB,EACvB,kBAAkB,EAClB,eAAe,EACf,gBAAgB,EAChB,SAAS,EACT,oBAAoB,EACpB,gBAAgB,EAChB,kBAAkB,GACnB,MAAM,WAAW,CAAC;AAInB,OAAO,EAAE,SAAS,EAAE,eAAe,EAAE,MAAM,UAAU,CAAC;AACtD,YAAY,EAAE,eAAe,EAAE,MAAM,UAAU,CAAC;AAGhD,OAAO,EAAE,aAAa,EAAE,UAAU,EAAE,OAAO,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,WAAW,CAAC;AAE3F,YAAY,EAAE,UAAU,EAAE,QAAQ,EAAE,aAAa,EAAE,gBAAgB,EAAE,MAAM,WAAW,CAAC;AACvF,mBAAmB,YAAY,CAAC"}

package/payload/platform/lib/dispatch-read/dist/index.js

@@ -1,6 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.readWorkerDay = exports.readJobList = exports.readDay = exports.readCounts = exports.nonZuluStarts = exports.geofenceVerdict = exports.distanceM = exports.readVisitsInWindow = exports.readVisitsForJob = exports.readVisitRecordState = exports.readVisit = exports.readSiteLocation = exports.readSiteHistory = exports.readPreviousVisits = exports.readOpenVisitsForWorker = exports.readNodeId = exports.readJobs = exports.readJob = exports.readFieldVisit = exports.readDrafts = exports.readDraft = exports.readCommitments = exports.projectVisit = exports.projectJob = exports.projectFieldVisit = exports.buildJobListQuery = exports.zonedRangeBounds = exports.zonedDayStartUtc = exports.ymdInZone = exports.minutesIntoDay = exports.daysBetween = exports.currentWeekYmd = exports.addDaysYmd = exports.MAX_RANGE_DAYS = exports.resolveAccountZone = exports.withSession = exports.parseDispatchCallback = exports.dispatchCallbackData = exports.buildVisitKeyboard = exports.CALLBACK_DATA_MAX_BYTES = exports.workerForTelegramUser = exports.terminalVisitStatuses = exports.terminalJobStatuses = exports.loadDispatchConfig = exports.RECORDABLE_FIELDS = void 0;
+exports.readWorkerDay = exports.readJobList = exports.readDay = exports.readCounts = exports.nonZuluStarts = exports.geofenceVerdict = exports.distanceM = exports.readVisitsInWindow = exports.readVisitsForJob = exports.readVisitRecordState = exports.readVisit = exports.readSiteLocation = exports.readSiteHistory = exports.readPreviousVisits = exports.readOpenVisitsForWorker = exports.readNodeId = exports.readJobs = exports.readJob = exports.readFieldVisit = exports.readDrafts = exports.readDraft = exports.readCommitments = exports.projectVisit = exports.projectJob = exports.projectFieldVisit = exports.buildJobListQuery = exports.zonedRangeBounds = exports.zonedDayStartUtc = exports.ymdInZone = exports.minutesIntoDay = exports.daysBetween = exports.currentWeekYmd = exports.addDaysYmd = exports.MAX_RANGE_DAYS = exports.resolveAccountZone = exports.withSession = exports.selectCandidates = exports.overlaps = exports.parseDispatchCallback = exports.dispatchCallbackData = exports.buildVisitKeyboard = exports.CALLBACK_DATA_MAX_BYTES = exports.workerForTelegramUser = exports.terminalVisitStatuses = exports.terminalJobStatuses = exports.loadDispatchConfig = exports.RECORDABLE_FIELDS = void 0;
 /**
  * Dispatch reads, shared by the MCP tools and the office planner.
  *
@@ -27,6 +27,15 @@ Object.defineProperty(exports, "CALLBACK_DATA_MAX_BYTES", { enumerable: true, ge
 Object.defineProperty(exports, "buildVisitKeyboard", { enumerable: true, get: function () { return keyboard_js_1.buildVisitKeyboard; } });
 Object.defineProperty(exports, "dispatchCallbackData", { enumerable: true, get: function () { return keyboard_js_1.dispatchCallbackData; } });
 Object.defineProperty(exports, "parseDispatchCallback", { enumerable: true, get: function () { return keyboard_js_1.parseDispatchCallback; } });
+// Task 2511 — qualification and clash, shared by the dispatch tools and the
+// portal visits push. One implementation, for the reason allocate.ts states:
+// the push runs in platform/ui and cannot import a plugin's build output, and a
+// second copy of these rules is a gate got wrong once per client.
+// `Commitment` is NOT re-exported here: it is `readCommitments`'s own shape,
+// declared once in read.ts and already exported below.
+var allocate_js_1 = require("./allocate.js");
+Object.defineProperty(exports, "overlaps", { enumerable: true, get: function () { return allocate_js_1.overlaps; } });
+Object.defineProperty(exports, "selectCandidates", { enumerable: true, get: function () { return allocate_js_1.selectCandidates; } });
 var session_js_1 = require("./session.js");
 Object.defineProperty(exports, "withSession", { enumerable: true, get: function () { return session_js_1.withSession; } });
 var zone_js_1 = require("./zone.js");

package/payload/platform/lib/dispatch-read/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";;;AAAA;;;;;;;;;;;GAWG;AACH,yCAMqB;AALnB,8GAAA,iBAAiB,OAAA;AACjB,+GAAA,kBAAkB,OAAA;AAClB,gHAAA,mBAAmB,OAAA;AACnB,kHAAA,qBAAqB,OAAA;AACrB,kHAAA,qBAAqB,OAAA;AAIvB,6EAA6E;AAC7E,6EAA6E;AAC7E,oEAAoE;AACpE,6CAKuB;AAJrB,sHAAA,uBAAuB,OAAA;AACvB,iHAAA,kBAAkB,OAAA;AAClB,mHAAA,oBAAoB,OAAA;AACpB,oHAAA,qBAAqB,OAAA;AAIvB,2CAA2C;AAAlC,yGAAA,WAAW,OAAA;AACpB,qCAA+C;AAAtC,6GAAA,kBAAkB,OAAA;AAC3B,yCASqB;AARnB,2GAAA,cAAc,OAAA;AACd,uGAAA,UAAU,OAAA;AACV,2GAAA,cAAc,OAAA;AACd,wGAAA,WAAW,OAAA;AACX,2GAAA,cAAc,OAAA;AACd,sGAAA,SAAS,OAAA;AACT,6GAAA,gBAAgB,OAAA;AAChB,6GAAA,gBAAgB,OAAA;AAGlB,qEAAqE;AACrE,qCAoBmB;AAnBjB,4GAAA,iBAAiB,OAAA;AACjB,4GAAA,iBAAiB,OAAA;AACjB,qGAAA,UAAU,OAAA;AACV,uGAAA,YAAY,OAAA;AACZ,0GAAA,eAAe,OAAA;AACf,oGAAA,SAAS,OAAA;AACT,qGAAA,UAAU,OAAA;AACV,yGAAA,cAAc,OAAA;AACd,kGAAA,OAAO,OAAA;AACP,mGAAA,QAAQ,OAAA;AACR,qGAAA,UAAU,OAAA;AACV,kHAAA,uBAAuB,OAAA;AACvB,6GAAA,kBAAkB,OAAA;AAClB,0GAAA,eAAe,OAAA;AACf,2GAAA,gBAAgB,OAAA;AAChB,oGAAA,SAAS,OAAA;AACT,+GAAA,oBAAoB,OAAA;AACpB,2GAAA,gBAAgB,OAAA;AAChB,6GAAA,kBAAkB,OAAA;AAGpB,uEAAuE;AACvE,kDAAkD;AAClD,mCAAsD;AAA7C,mGAAA,SAAS,OAAA;AAAE,yGAAA,eAAe,OAAA;AAGnC,yEAAyE;AACzE,qCAA2F;AAAlF,wGAAA,aAAa,OAAA;AAAE,qGAAA,UAAU,OAAA;AAAE,kGAAA,OAAO,OAAA;AAAE,sGAAA,WAAW,OAAA;AAAE,wGAAA,aAAa,OAAA"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";;;AAAA;;;;;;;;;;;GAWG;AACH,yCAMqB;AALnB,8GAAA,iBAAiB,OAAA;AACjB,+GAAA,kBAAkB,OAAA;AAClB,gHAAA,mBAAmB,OAAA;AACnB,kHAAA,qBAAqB,OAAA;AACrB,kHAAA,qBAAqB,OAAA;AAIvB,6EAA6E;AAC7E,6EAA6E;AAC7E,oEAAoE;AACpE,6CAKuB;AAJrB,sHAAA,uBAAuB,OAAA;AACvB,iHAAA,kBAAkB,OAAA;AAClB,mHAAA,oBAAoB,OAAA;AACpB,oHAAA,qBAAqB,OAAA;AAIvB,4EAA4E;AAC5E,6EAA6E;AAC7E,gFAAgF;AAChF,kEAAkE;AAClE,6EAA6E;AAC7E,uDAAuD;AACvD,6CAA2D;AAAlD,uGAAA,QAAQ,OAAA;AAAE,+GAAA,gBAAgB,OAAA;AAQnC,2CAA2C;AAAlC,yGAAA,WAAW,OAAA;AACpB,qCAA+C;AAAtC,6GAAA,kBAAkB,OAAA;AAC3B,yCASqB;AARnB,2GAAA,cAAc,OAAA;AACd,uGAAA,UAAU,OAAA;AACV,2GAAA,cAAc,OAAA;AACd,wGAAA,WAAW,OAAA;AACX,2GAAA,cAAc,OAAA;AACd,sGAAA,SAAS,OAAA;AACT,6GAAA,gBAAgB,OAAA;AAChB,6GAAA,gBAAgB,OAAA;AAGlB,qEAAqE;AACrE,qCAoBmB;AAnBjB,4GAAA,iBAAiB,OAAA;AACjB,4GAAA,iBAAiB,OAAA;AACjB,qGAAA,UAAU,OAAA;AACV,uGAAA,YAAY,OAAA;AACZ,0GAAA,eAAe,OAAA;AACf,oGAAA,SAAS,OAAA;AACT,qGAAA,UAAU,OAAA;AACV,yGAAA,cAAc,OAAA;AACd,kGAAA,OAAO,OAAA;AACP,mGAAA,QAAQ,OAAA;AACR,qGAAA,UAAU,OAAA;AACV,kHAAA,uBAAuB,OAAA;AACvB,6GAAA,kBAAkB,OAAA;AAClB,0GAAA,eAAe,OAAA;AACf,2GAAA,gBAAgB,OAAA;AAChB,oGAAA,SAAS,OAAA;AACT,+GAAA,oBAAoB,OAAA;AACpB,2GAAA,gBAAgB,OAAA;AAChB,6GAAA,kBAAkB,OAAA;AAGpB,uEAAuE;AACvE,kDAAkD;AAClD,mCAAsD;AAA7C,mGAAA,SAAS,OAAA;AAAE,yGAAA,eAAe,OAAA;AAGnC,yEAAyE;AACzE,qCAA2F;AAAlF,wGAAA,aAAa,OAAA;AAAE,qGAAA,UAAU,OAAA;AAAE,kGAAA,OAAO,OAAA;AAAE,sGAAA,WAAW,OAAA;AAAE,wGAAA,aAAa,OAAA"}