@rubytech/create-sitedesk-code 0.1.521 → 0.1.523

package/payload/platform/lib/routine-templates/src/roster.ts

@@ -0,0 +1,206 @@
+/**
+ * Task 2130 — the shipped routine roster.
+ *
+ * A fresh install used to ship zero routines, so the only working examples
+ * lived in one customer's graph and every operator wrote the prompts from
+ * scratch. These eleven are the catalogue that ships with the platform instead.
+ *
+ * Two properties make a routine shippable, and both are load-bearing:
+ *
+ *   1. It resolves its own surfaces at run time. Every prompt opens on
+ *      `capabilities-here`, which reports the account's live install set, and
+ *      ends the turn without replying when the surface it needs is absent. That
+ *      is what makes the same eleven rows correct on an estate agency, a web studio
+ *      and a field-service install rather than a template someone must edit.
+ *
+ *   2. It names nobody. No prompt carries a person's name, an email address, a
+ *      phone number, a hostname or a database name. `scripts/check-routine-
+ *      templates-generic.sh` is the standing control for that; a review pass is
+ *      not, because the failure is silent and the routine still works.
+ *
+ * The `recurrence` on each row is a PROPOSAL, not a schedule. Seeded rows carry
+ * `eventStatus:'suspended'` and `nextRun:NULL`, so nothing here fires until an
+ * operator enables it and supplies the cron and zone they actually want (see
+ * `.docs/routine-roster.md` for why the enable path takes all four arguments).
+ *
+ * Every tool name cited in a prompt exists in
+ * `platform/services/claude-session-manager/src/canonical-tool-names.generated.ts`.
+ * The roster test asserts that, so a renamed tool breaks the build rather than
+ * shipping a prompt that reaches for a tool no install serves.
+ */
+
+/** Bumped whenever any prompt in the roster changes. The seed refreshes a
+ *  routine's prompt only when the stored `routineTemplateVersion` is BELOW this
+ *  and no operator has edited the row, so an unbumped edit ships to new installs
+ *  and never reaches existing ones — bump it in the same commit as the edit. */
+export const ROUTINE_TEMPLATE_VERSION = 1;
+
+export interface RoutineTemplate {
+  /** Stable identity. Half of the MERGE key `(accountId, routineTemplate)`, so
+   *  it is never renamed: a renamed key seeds a duplicate row and orphans the
+   *  original, which the operator then has to delete by hand. */
+  readonly key: string;
+  /** The title shown on `/routines`. */
+  readonly name: string;
+  /** The proposed cron. Written ON CREATE only, never refreshed, so an operator
+   *  who retimes a routine keeps their expression across upgrades. */
+  readonly recurrence: string;
+  /** The injected turn. Refreshed on a version bump when the row is unedited. */
+  readonly prompt: string;
+}
+
+const START_OF_DAY = `Prepare the operator's morning briefing and reply with it as a single message.
+
+Call capabilities-here first and work only with the plugins it reports as enabled. Nothing below is mandatory: each part is included when its surface is present and skipped in silence when it is not.
+
+Mail: read today's unread and overnight messages with email-read, or outlook-mail-list when the mailbox is on the Microsoft side. Report what actually needs the operator, not a count.
+Diary: list today's appointments with outlook-calendar-list or google-calendar-list, plus schedule-list for anything booked in the graph rather than a provider calendar.
+Work: list what is open and due today or overdue with work-list.
+Connected systems: if a connector is registered, call connector-call for whatever it treats as today's queue.
+
+Write it the way a colleague would say it out loud: what needs a decision, what is time-bound, what changed overnight. Lead with the thing that will cost the most if it is missed. No headings, no counts for their own sake, no restating the sections above.
+
+If every surface is absent, or every surface is present and there is genuinely nothing worth saying, end the turn without replying. A silent morning is a correct result and is better than a message that says there is nothing to report.`;
+
+const INBOUND_CHECK = `Triage inbound messages that arrived since the last check and prepare replies for the operator to approve. Never send anything.
+
+Call capabilities-here first. If no mail plugin is enabled, end the turn without replying.
+
+Search for messages received since the previous run with email-search, or outlook-mail-search on the Microsoft side. Ignore anything already answered, anything automated, and anything the operator has clearly seen.
+
+For each message that genuinely needs a human reply, write a draft with email-draft or outlook-draft. Drafts only: this routine has no authority to send, and a sent message it should not have sent cannot be recalled. Match the operator's usual register from the surrounding thread rather than a house style.
+
+When a message commits the business to doing something rather than to saying something, record it with work-create so the obligation survives the inbox.
+
+Reply with one short message naming what you drafted and what you deliberately left alone, so the operator can open the drafts and send them. If there was nothing new that needed a reply, end the turn without replying.`;
+
+const END_OF_DAY = `Close the operator's day and reply with a single message.
+
+Call capabilities-here first and include only the parts whose surface is enabled.
+
+Waiting on the operator: list unsent drafts with email-draft-list. A draft written today and still unsent is the single most common thing that falls through, so name each one.
+Overdue: list work that is past due or due today and still open with work-list.
+Tomorrow: list tomorrow's appointments with outlook-calendar-list or google-calendar-list, and schedule-list for anything booked in the graph.
+
+Say what is unfinished and what tomorrow looks like, in that order, in plain sentences. Do not congratulate, do not summarise the day back, do not pad the message to look thorough.
+
+If nothing is waiting, nothing is overdue and tomorrow is empty, end the turn without replying.`;
+
+const APPOINTMENT_REMINDER = `Remind the people attending an appointment that is coming up, so nobody is reminded twice and nobody is missed.
+
+Call capabilities-here first. If neither a mail plugin nor a messaging channel is enabled, end the turn without replying.
+
+Find appointments starting within the next reminder window with schedule-list, and read each one's attendees. Resolve each attendee to a person and a contact route with contact-lookup. An attendee you cannot resolve to a route is not a failure to work around: leave them, and say so at the end.
+
+Send each attendee one reminder on the route they are already reachable on: email-send for a mailbox, whatsapp-reply or the Telegram message tool for a messaging thread that already exists. Carry the time, the place and what the appointment is about. Do not open a new conversation with someone who has never messaged the business.
+
+Send at most one reminder per attendee per appointment. Before sending, check the appointment's notes for a reminder already recorded, and record the one you send there.
+
+Reply with one line naming who was reminded and who could not be reached. If no appointment falls in the window, end the turn without replying.`;
+
+const COMMITMENT_CHASE = `Find the promises the business has made and not kept, and the promises made to it that nobody has kept.
+
+Call capabilities-here first and use only the surfaces it reports.
+
+Outbound: search sent mail with email-search for messages where the business undertook to do something, and check whether the thing happened. A promise with a date attached and no follow-up is the case worth surfacing.
+Inbound: find threads where the business asked for something and received no reply. Age matters more than volume; a three-week silence is worth naming and a two-day one is not.
+Work: list items past their due date with work-list.
+Context: check memory-search for what was previously agreed before deciding something has been dropped, so a commitment already met elsewhere is not chased again.
+
+Reply with the short list, each item saying what was promised, by whom, and how long it has been outstanding. Judgement is the point here, not coverage: three real items beat thirty possible ones.
+
+If nothing has been dropped, end the turn without replying.`;
+
+const CALENDAR_RECONCILE = `Reconcile the provider calendars against the appointments held in the graph, so the operator's diary and the agent's view of it are the same diary.
+
+Call capabilities-here first. If no calendar surface is enabled, end the turn without replying.
+
+Read the provider side with outlook-calendar-list or google-calendar-list, and the graph side with schedule-list, over the same window. Compare them.
+
+An appointment on the provider calendar with no counterpart in the graph is invisible to every other routine: write it with schedule-event. An appointment in the graph that has been cancelled provider-side should be marked cancelled, not deleted, so its history survives. Where the two disagree on time or attendees, the provider calendar is authoritative, because that is the one the operator edits.
+
+If the account has a busy-time sync configured, run schedule-connector-busy-sync so availability reflects what was just reconciled.
+
+Reply only when something was actually changed, naming what and why. A clean reconcile ends the turn without replying, every time. This routine runs often, so a message on every clean run trains the operator to ignore it.`;
+
+const CONTACT_RECONCILE = `Reconcile the people the business actually deals with against the people it has recorded.
+
+Call capabilities-here first. If neither a mail plugin nor the contacts plugin is enabled, end the turn without replying.
+
+Find the counterparties in recent correspondence with email-graph-query, and on the Microsoft side read the address book with outlook-contacts-list. Read the recorded people with contact-list.
+
+Someone corresponded with repeatedly and never recorded should be created with contact-create. Someone recorded with a stale route, a changed employer or a missing name should be updated with contact-update, taking the newer value from the correspondence.
+
+Two rules keep this from making the graph worse. A single inbound message is not a relationship, so do not create a contact from one. And two records that look like the same person may be two people, so surface the possible duplicate rather than merging it.
+
+Reply only when records were created or updated, naming the counts and anything ambiguous you left alone. A clean reconcile ends the turn without replying.`;
+
+const CRM_RECONCILE = `Reconcile whatever operational system this business runs against the graph, so the agent answers from the same records the operator works in.
+
+Call capabilities-here first and read the registered connectors with connector-register. If none is registered, end the turn without replying. This routine is deliberately unopinionated about which system that is: read what the connector actually exposes rather than assuming a shape.
+
+Pull the records that changed since the last run with connector-call. For each, decide whether the graph already holds it. Write what is genuinely new or genuinely changed with memory-write, and leave the rest alone.
+
+The connector is the system of record. Where the graph disagrees, the graph is stale and the connector wins. Never write back to the connector from here: this routine reads.
+
+Reply only when something changed, in one or two lines. A run with nothing to bring across ends the turn without replying.`;
+
+const FINANCE_RECONCILE = `Reconcile the accounting system against the ledger held in the graph.
+
+Call capabilities-here first. If no accounting connector is enabled, end the turn without replying.
+
+Read the accounting side with quickbooks-query over the period since the last run. Reconcile it against the internal ledger with ledger-reconcile, then read the resulting position with ledger-balance.
+
+Report only what an operator would act on: entries present on one side and not the other, amounts that disagree, and anything unreconciled long enough to be a problem rather than a timing difference. A difference explained by a payment still clearing is not a discrepancy.
+
+Never adjust an entry to make the two sides agree. An unexplained difference is the finding; silencing it destroys the only evidence that something is wrong.
+
+Reply with the discrepancies and the closing position. If everything reconciles, end the turn without replying.`;
+
+const WEEKLY_DIGEST = `Write the week in review and reply with it as a single message.
+
+Call capabilities-here first and cover only the surfaces that are enabled.
+
+Correspondence: what came in and what went out that mattered, from email-search or outlook-mail-search across the week.
+Diary: what happened and what is coming, from outlook-calendar-list, google-calendar-list and schedule-list.
+Work: what was completed, what slipped, what is still open, from work-list.
+Systems: if a connector is registered, what changed in it over the week, from connector-call.
+Context: check memory-search for what was said last week, so the digest reports movement rather than restating a standing position.
+
+This is the one routine written for a person with a few minutes, not for completeness. Say what changed, what is stuck, and what next week turns on. Three paragraphs at most. No section headings, no counts presented as achievements, no restating the categories above.
+
+If the week was genuinely empty, end the turn without replying.`;
+
+const CHANNEL_LINK_CHECK = `Check whether the business's messaging links are still up, and speak only when one is down.
+
+Call capabilities-here first. If no messaging channel is enabled, end the turn without replying.
+
+Read the link state with whatsapp-status. It reports, per link, whether it is connected, the number it is paired to, how many reconnect attempts it has made, and the error it last failed on.
+
+If every link is connected, end the turn without replying. A message on a healthy check is what trains an operator to ignore this routine, and an ignored check is worth less than no check.
+
+When a link is down, reply with one message naming the number it is paired to, the exact error it last reported, and how long it has been down. Say plainly whether the platform is still retrying it or has stopped. A link that was logged out, or replaced by another device, will not come back on its own: re-pairing needs someone holding the phone, so say that rather than implying it will recover by itself.
+
+Never disconnect a link and never begin a re-pair from here. This routine reports; the remedy is a person's decision.`;
+
+/** The eleven. Order is the display order on `/routines` before the operator
+ *  retimes anything: the daily rhythm first, then the reconciles, then the
+ *  weekly, then the standing check. */
+export const ROUTINE_ROSTER: readonly RoutineTemplate[] = [
+  { key: "start-of-day", name: "Start of day briefing", recurrence: "30 7 * * 1-5", prompt: START_OF_DAY },
+  { key: "inbound-check", name: "Working-hours inbound check", recurrence: "*/30 9-17 * * 1-5", prompt: INBOUND_CHECK },
+  { key: "end-of-day", name: "End of day wrap-up", recurrence: "0 18 * * 1-5", prompt: END_OF_DAY },
+  { key: "appointment-reminder", name: "Appointment reminders", recurrence: "0 * * * *", prompt: APPOINTMENT_REMINDER },
+  { key: "commitment-chase", name: "Commitment chase", recurrence: "0 10 * * 2", prompt: COMMITMENT_CHASE },
+  { key: "calendar-reconcile", name: "Calendar reconcile", recurrence: "15 */4 * * *", prompt: CALENDAR_RECONCILE },
+  { key: "contact-reconcile", name: "Contact reconcile", recurrence: "45 6 * * 1-5", prompt: CONTACT_RECONCILE },
+  { key: "crm-reconcile", name: "Operational system reconcile", recurrence: "0 3 * * *", prompt: CRM_RECONCILE },
+  { key: "finance-reconcile", name: "Finance reconcile", recurrence: "0 4 * * 1", prompt: FINANCE_RECONCILE },
+  { key: "weekly-digest", name: "Weekly digest", recurrence: "0 16 * * 5", prompt: WEEKLY_DIGEST },
+  { key: "channel-link-check", name: "Channel link check", recurrence: "*/15 * * * *", prompt: CHANNEL_LINK_CHECK },
+];
+
+/** Every roster key, in roster order. The scheduling heartbeat's `op=roster`
+ *  drift check reconciles this expected set against what is actually in the
+ *  graph, so it is exported rather than re-derived there. */
+export const ROUTINE_ROSTER_KEYS: readonly string[] = ROUTINE_ROSTER.map((r) => r.key);

package/payload/platform/lib/routine-templates/src/seed-cli.ts

@@ -0,0 +1,65 @@
+/**
+ * Task 2130 — the install/upgrade entry point for the routine-roster seed.
+ *
+ * `platform/scripts/seed-neo4j.sh` is bash driving cypher-shell and cannot
+ * import the roster, so it invokes this instead. Everything about the seed —
+ * the MERGE, the classification, the whole `[routine-seed]` lifecycle — lives
+ * in `index.ts` and is shared verbatim with the sub-account path in the admin
+ * plugin. This file is only the process boundary: read the environment,
+ * connect, call the seed, decide the exit code.
+ *
+ * This runs on every install AND every upgrade, which is what carries the
+ * roster to the existing fleet rather than to new installs alone.
+ *
+ *   NEO4J_URI=… NEO4J_PASSWORD=… ROUTINE_SEED_ACCOUNT_ID=… node dist/seed-cli.js
+ *
+ * Exit codes:
+ *   0  the roster is present and complete (`expected === actual`)
+ *   1  a required variable is missing, Neo4j refused, or the post-condition
+ *      read came back short
+ */
+import neo4j from "neo4j-driver";
+import { acctTag, seedRoutineRoster } from "./index.js";
+
+function requireEnv(name: string): string {
+  const value = process.env[name];
+  if (!value || value.trim() === "") {
+    process.stderr.write(`[routine-seed] op=abort reason=missing-env var=${name}\n`);
+    process.exit(1);
+  }
+  return value;
+}
+
+async function main(): Promise<void> {
+  const uri = requireEnv("NEO4J_URI");
+  const password = requireEnv("NEO4J_PASSWORD");
+  const accountId = requireEnv("ROUTINE_SEED_ACCOUNT_ID");
+  const user = process.env.NEO4J_USER ?? "neo4j";
+
+  const driver = neo4j.driver(uri, neo4j.auth.basic(user, password));
+  const session = driver.session();
+  try {
+    const report = await seedRoutineRoster({ session, accountId });
+    // The read-back is the gate, not the fact that the statements ran. A seed
+    // that issued ten MERGEs and left nine rows in the graph has failed, and
+    // the install must say so here rather than leave a short roster to be
+    // noticed later by the heartbeat's op=roster drift check.
+    if (report.verify.actual < report.verify.expected) {
+      process.stderr.write(
+        `[routine-seed] op=abort acct=${acctTag(accountId)} reason=short-roster ` +
+          `expected=${report.verify.expected} actual=${report.verify.actual}\n`,
+      );
+      process.exitCode = 1;
+    }
+  } finally {
+    await session.close();
+    await driver.close();
+  }
+}
+
+main().catch((err) => {
+  process.stderr.write(
+    `[routine-seed] op=abort reason=error detail=${err instanceof Error ? err.message : String(err)}\n`,
+  );
+  process.exit(1);
+});

package/payload/platform/lib/routine-templates/tsconfig.json

@@ -0,0 +1,9 @@
+{
+  "extends": "../../tsconfig.base.json",
+  "compilerOptions": {
+    "outDir": "dist",
+    "rootDir": "src"
+  },
+  "include": ["src"],
+  "exclude": ["src/__tests__"]
+}

package/payload/platform/lib/routine-templates/vitest.config.ts

@@ -0,0 +1,9 @@
+import { defineConfig } from "vitest/config";
+
+export default defineConfig({
+  test: {
+    environment: "node",
+    globals: false,
+    include: ["src/__tests__/**/*.test.ts"],
+  },
+});

package/payload/platform/neo4j/edge-annotations.json

@@ -33,8 +33,8 @@
       "note": "Workflow composition."
     },
     "RUN_OF": {
-      "direction": "(WorkflowRun)-[:RUN_OF]->(Workflow)",
-      "note": "Workflow execution instance."
+      "direction": "(WorkflowRun)-[:RUN_OF]->(Workflow) | (RoutineRun)-[:RUN_OF]->(Event)",
+      "note": "Execution instance. Two shapes: a workflow run against its workflow, and a routine run against its scheduled event (Task 2136)."
     },
     "HAS_SECTION": {
       "direction": "(KnowledgeDocument)-[:HAS_SECTION]->(Section)",

package/payload/platform/neo4j/schema.cypher

@@ -409,6 +409,7 @@ OPTIONS {
 //     UserMessage, AssistantMessage, ToolCall
 //   - Tasks/projects/events: Task, Project, Event, Meeting, Attachment
 //   - Workflows: Workflow, WorkflowStep, WorkflowRun, StepResult
+//   - Routine runs (Task 2136): RoutineRun
 //   - Email: EmailAccount (config node only — email threads land on
 //     :ConversationArchive {source:'email'} since Task 426)
 //   - CV/career sublabels: Position, Credential
@@ -472,7 +473,7 @@ FOR (n:LocalBusiness|Service|PriceSpecification|OpeningHoursSpecification|Organi
     |KnowledgeDocument|ConversationArchive|Section|Chunk|DigitalDocument|CreativeWork|Question|FAQPage|DefinedTerm|Review|ImageObject
     |Conversation|AdminConversation|PublicConversation|Message|UserMessage|AssistantMessage|ToolCall
     |Task|Project|Event|Meeting|Attachment
-    |Workflow|WorkflowStep|WorkflowRun|StepResult
+    |Workflow|WorkflowStep|WorkflowRun|StepResult|RoutineRun
     |EmailAccount
     |Position|Credential|Agent|Idea|Concept
     |VoiceProfile|VoiceEdit|SocialPost|AEOAudit|Page
@@ -775,6 +776,29 @@ FOR (r:WorkflowRun) ON (r.accountId);
 CREATE INDEX step_result_run IF NOT EXISTS
 FOR (sr:StepResult) ON (sr.runId);
 
+// ----------------------------------------------------------
+// RoutineRun — execution history for one routine fire (Task 2136).
+// Linked (r:RoutineRun)-[:RUN_OF]->(e:Event), the same shape
+// WorkflowRun uses against Workflow. Before this label a fire
+// wrote five last-write-wins scalars onto the Event itself, so
+// firing N+1 destroyed firing N and no surface could show what
+// a run produced.
+// `startedAt` is indexed because the 30-day retention sweep and
+// the run-census both range over it every 120 s.
+// ----------------------------------------------------------
+
+CREATE CONSTRAINT routine_run_id_unique IF NOT EXISTS
+FOR (r:RoutineRun) REQUIRE r.runId IS UNIQUE;
+
+CREATE INDEX routine_run_event IF NOT EXISTS
+FOR (r:RoutineRun) ON (r.eventId);
+
+CREATE INDEX routine_run_account IF NOT EXISTS
+FOR (r:RoutineRun) ON (r.accountId);
+
+CREATE INDEX routine_run_started IF NOT EXISTS
+FOR (r:RoutineRun) ON (r.startedAt);
+
 // ----------------------------------------------------------
 // UserProfile node — structured knowledge about the business owner
 // Platform-native (no Schema.org equivalent). One per (accountId, userId).

package/payload/platform/package.json

@@ -6,11 +6,12 @@
     "services/*"
   ],
   "dependencies": {
+    "neo4j-driver": "^5.28.1",
     "pdf-lib": "^1.17.1"
   },
   "scripts": {
-    "build": "tsc -p lib/account-schema-regions/tsconfig.json && tsc -p lib/models/tsconfig.json && tsc -p lib/mcp-spawn-tee/tsconfig.json && tsc -p lib/mcp-lifeline/tsconfig.json && tsc -p lib/mcp-eager/tsconfig.json && tsc -p lib/account-enumeration/tsconfig.json && tsc -p lib/account-scope/tsconfig.json && tsc -p lib/graph-write/tsconfig.json && tsc -p lib/ledger-core/tsconfig.json && tsc -p lib/embed-client/tsconfig.json && tsc -p lib/graph-mcp/tsconfig.json && tsc -p lib/graph-trash/tsconfig.json && tsc -p lib/active-rules/tsconfig.json && tsc -p lib/admin-conversation-purge/tsconfig.json && tsc -p lib/graph-search/tsconfig.json && tsc -p lib/graph-style/tsconfig.json && tsc -p lib/device-url/tsconfig.json && tsc -p lib/brand-templating/tsconfig.json && tsc -p lib/entitlement/tsconfig.json && tsc -p lib/task-secrets/tsconfig.json && tsc -p lib/admins-write/tsconfig.json && tsc -p lib/admin-access-password/tsconfig.json && tsc -p lib/persistent-components/tsconfig.json && tsc -p lib/require-port-env/tsconfig.json && tsc -p lib/aeo-llms-txt-writer/tsconfig.json && tsc -p lib/obsidian-parser/tsconfig.json && tsc -p lib/storage-broker/tsconfig.json && tsc -p services/claude-session-manager/tsconfig.json && tsc -p services/whatsapp-channel/tsconfig.json && tsc -p services/webchat-channel/tsconfig.json && tsc -p services/telegram-channel/tsconfig.json && NODE_OPTIONS='--max-old-space-size=8192' tsc -b plugins/*/mcp/tsconfig.json",
-    "build:lib": "tsc -p lib/account-schema-regions/tsconfig.json && tsc -p lib/models/tsconfig.json && tsc -p lib/mcp-spawn-tee/tsconfig.json && tsc -p lib/mcp-lifeline/tsconfig.json && tsc -p lib/mcp-eager/tsconfig.json && tsc -p lib/account-enumeration/tsconfig.json && tsc -p lib/account-scope/tsconfig.json && tsc -p lib/graph-write/tsconfig.json && tsc -p lib/ledger-core/tsconfig.json && tsc -p lib/embed-client/tsconfig.json && tsc -p lib/graph-mcp/tsconfig.json && tsc -p lib/graph-trash/tsconfig.json && tsc -p lib/active-rules/tsconfig.json && tsc -p lib/admin-conversation-purge/tsconfig.json && tsc -p lib/graph-search/tsconfig.json && tsc -p lib/graph-style/tsconfig.json && tsc -p lib/device-url/tsconfig.json && tsc -p lib/brand-templating/tsconfig.json && tsc -p lib/entitlement/tsconfig.json && tsc -p lib/task-secrets/tsconfig.json && tsc -p lib/admins-write/tsconfig.json && tsc -p lib/admin-access-password/tsconfig.json && tsc -p lib/persistent-components/tsconfig.json && tsc -p lib/require-port-env/tsconfig.json && tsc -p lib/aeo-llms-txt-writer/tsconfig.json && tsc -p lib/obsidian-parser/tsconfig.json && tsc -p lib/storage-broker/tsconfig.json",
+    "build": "tsc -p lib/account-schema-regions/tsconfig.json && tsc -p lib/models/tsconfig.json && tsc -p lib/mcp-spawn-tee/tsconfig.json && tsc -p lib/mcp-lifeline/tsconfig.json && tsc -p lib/mcp-eager/tsconfig.json && tsc -p lib/account-enumeration/tsconfig.json && tsc -p lib/account-scope/tsconfig.json && tsc -p lib/graph-write/tsconfig.json && tsc -p lib/ledger-core/tsconfig.json && tsc -p lib/embed-client/tsconfig.json && tsc -p lib/graph-mcp/tsconfig.json && tsc -p lib/graph-trash/tsconfig.json && tsc -p lib/active-rules/tsconfig.json && tsc -p lib/admin-conversation-purge/tsconfig.json && tsc -p lib/graph-search/tsconfig.json && tsc -p lib/graph-style/tsconfig.json && tsc -p lib/device-url/tsconfig.json && tsc -p lib/brand-templating/tsconfig.json && tsc -p lib/entitlement/tsconfig.json && tsc -p lib/task-secrets/tsconfig.json && tsc -p lib/admins-write/tsconfig.json && tsc -p lib/admin-access-password/tsconfig.json && tsc -p lib/persistent-components/tsconfig.json && tsc -p lib/require-port-env/tsconfig.json && tsc -p lib/aeo-llms-txt-writer/tsconfig.json && tsc -p lib/obsidian-parser/tsconfig.json && tsc -p lib/storage-broker/tsconfig.json && tsc -p lib/routine-templates/tsconfig.json && tsc -p services/claude-session-manager/tsconfig.json && tsc -p services/whatsapp-channel/tsconfig.json && tsc -p services/webchat-channel/tsconfig.json && tsc -p services/telegram-channel/tsconfig.json && NODE_OPTIONS='--max-old-space-size=8192' tsc -b plugins/*/mcp/tsconfig.json",
+    "build:lib": "tsc -p lib/account-schema-regions/tsconfig.json && tsc -p lib/models/tsconfig.json && tsc -p lib/mcp-spawn-tee/tsconfig.json && tsc -p lib/mcp-lifeline/tsconfig.json && tsc -p lib/mcp-eager/tsconfig.json && tsc -p lib/account-enumeration/tsconfig.json && tsc -p lib/account-scope/tsconfig.json && tsc -p lib/graph-write/tsconfig.json && tsc -p lib/ledger-core/tsconfig.json && tsc -p lib/embed-client/tsconfig.json && tsc -p lib/graph-mcp/tsconfig.json && tsc -p lib/graph-trash/tsconfig.json && tsc -p lib/active-rules/tsconfig.json && tsc -p lib/admin-conversation-purge/tsconfig.json && tsc -p lib/graph-search/tsconfig.json && tsc -p lib/graph-style/tsconfig.json && tsc -p lib/device-url/tsconfig.json && tsc -p lib/brand-templating/tsconfig.json && tsc -p lib/entitlement/tsconfig.json && tsc -p lib/task-secrets/tsconfig.json && tsc -p lib/admins-write/tsconfig.json && tsc -p lib/admin-access-password/tsconfig.json && tsc -p lib/persistent-components/tsconfig.json && tsc -p lib/require-port-env/tsconfig.json && tsc -p lib/aeo-llms-txt-writer/tsconfig.json && tsc -p lib/obsidian-parser/tsconfig.json && tsc -p lib/storage-broker/tsconfig.json && tsc -p lib/routine-templates/tsconfig.json",
     "gen:canonical-tools": "node scripts/generate-canonical-tool-names.mjs",
     "build:memory": "tsc -p plugins/memory/mcp/tsconfig.json",
     "build:contacts": "tsc -p plugins/contacts/mcp/tsconfig.json",

package/payload/platform/plugins/admin/PLUGIN.md

@@ -14,7 +14,7 @@ tools:
     riskClass: read
   - name: admin-hostname
     publicAllowlist: false
-    adminAllowlist: false
+    adminAllowlist: true
     riskClass: read
   - name: publish-site
     publicAllowlist: false
@@ -30,7 +30,7 @@ tools:
     riskClass: write_local
   - name: capabilities-here
     publicAllowlist: false
-    adminAllowlist: false
+    adminAllowlist: true
     riskClass: read
   - name: account-update
     publicAllowlist: false

package/payload/platform/plugins/admin/mcp/dist/index.js

@@ -29,6 +29,10 @@ import { resolveCapabilitiesHere } from "./tools/capabilities-here.js";
 import { startCpuTriage, readCpuTriage } from "./tools/cpu-triage.js";
 import { runCatalogueCensus } from "./lib/catalogue-census.js";
 import { lifelineTool } from "../../../../lib/mcp-lifeline/dist/index.js";
+// Task 2130 — the same roster and the same MERGE seed-neo4j.sh runs for the
+// house account. Shared rather than reimplemented: two copies would drift, and
+// the drift would surface only as "the sub-accounts have different routines".
+import { seedRoutineRoster } from "../../../../lib/routine-templates/dist/index.js";
 import { listAccountsFromDir, isHouseAccount, archiveAccountDir, provisionClientAccount, findHouseAccount, getChannelRoutingAccountId, setChannelRoutingAccountId, seedAccountGraphRoot, isPlaceholderOwnerName, isBlankBusinessName, isValidTimeZone, refuseClientAdminAdd, readHouseAdminUserIds, setManagingAdmin, findClientAccountsManagedBy, reassignManagingAdmin, ACCOUNT_NODE_COUNT_CYPHER, ACCOUNT_PURGE_CYPHER, classifyManagingAdmin, ownerNameStatus, readManagingAdminUserId, setOwnerName, } from "./tools/account-lifecycle.js";
 function refusalGuidance(kind) {
     switch (kind) {
@@ -3544,7 +3548,41 @@ eagerTool(server, "account_create", "Provision a new CLIENT sub-account on this
         const managedNote = managingAdminUserId
             ? `managed by admin ${managingAdminUserId}`
             : `with no managing admin (its passive-intake tasks route to the primary admin; use account_reassign_admin to assign one)`;
-        return { content: [{ type: "text", text: `Created client sub-account ${newId}, ${managedNote}. Switch to it from the sub-account picker to work in its data.` }] };
+        // Task 2130 — seed the routine roster onto the new sub-account. Without
+        // this a client sub-account ships with a blank /routines page while the
+        // house account has ten, because seed-neo4j.sh only ever reaches the one
+        // account its resolver returns.
+        //
+        // Last, and never a create failure. At this point the account exists, is
+        // rooted and carries its managing admin, so reporting a generic failure
+        // would push the operator to retry and orphan a second account. It also
+        // runs after seedAccountGraphRoot on purpose: the seed resolves the
+        // timezone by reading back the owner :UserProfile that seed just wrote.
+        // A shortfall is reported in the success text and on stderr, where the
+        // heartbeat's op=roster drift check will keep reporting it every tick
+        // until it is fixed.
+        let rosterNote = "";
+        const rosterSession = getSession();
+        try {
+            const roster = await seedRoutineRoster({ session: rosterSession, accountId: newId });
+            if (roster.verify.actual < roster.verify.expected) {
+                process.stderr.write(`[account-lifecycle] op=create-roster accountId=${newId} result=short ` +
+                    `expected=${roster.verify.expected} actual=${roster.verify.actual}\n`);
+                rosterNote = ` Its Routines page is incomplete (${roster.verify.actual} of ${roster.verify.expected} seeded) — re-running the installer re-seeds every account.`;
+            }
+            else {
+                process.stderr.write(`[account-lifecycle] op=create-roster accountId=${newId} result=ok routines=${roster.verify.actual}\n`);
+            }
+        }
+        catch (err) {
+            const msg = err instanceof Error ? err.message : String(err);
+            process.stderr.write(`[account-lifecycle] op=create-roster accountId=${newId} result=failed error=${msg}\n`);
+            rosterNote = ` Its Routines page is empty — the routine seed failed (${msg}). Re-running the installer re-seeds every account.`;
+        }
+        finally {
+            await rosterSession.close();
+        }
+        return { content: [{ type: "text", text: `Created client sub-account ${newId}, ${managedNote}. Switch to it from the sub-account picker to work in its data.${rosterNote}` }] };
     }
     catch (err) {
         const msg = err instanceof Error ? err.message : String(err);