@rubytech/create-sitedesk-code 0.1.522 → 0.1.523

package/payload/platform/plugins/scheduling/mcp/dist/tools/schedule-runs.d.ts

@@ -0,0 +1,33 @@
+export interface RunRow {
+    runId: string;
+    eventId: string;
+    /** Which dispatch loop opened it: `recurring` or `one-time`. */
+    kind: string;
+    /** The resolved dispatch mode: `agent`, `action` or `none`. */
+    mode: string;
+    /** `open` | `accepted` | `started` | `finished` | `failed` | `no-destination`. */
+    status: string;
+    /** `<channel>:<destination>`, `<plugin>.<tool>`, or `-`. */
+    target: string;
+    scheduledFor: string;
+    startedAt: string;
+    endedAt: string | null;
+    finishedAt: string | null;
+    ranMs: number | null;
+    httpStatus: number | null;
+    dispatchResult: string | null;
+    sessionKey: string | null;
+    transcriptOffset: number | null;
+    /** False when the record cannot name where in the shared transcript its output starts. */
+    bounded: boolean;
+    error: string | null;
+}
+export interface ScheduleRunsParams {
+    accountId: string;
+    eventId: string;
+    limit?: number;
+}
+/** Project a `:RoutineRun` node's properties into a RunRow. */
+export declare function mapRunRow(p: Record<string, unknown>): RunRow;
+export declare function scheduleRuns(params: ScheduleRunsParams): Promise<RunRow[]>;
+//# sourceMappingURL=schedule-runs.d.ts.map

package/payload/platform/plugins/scheduling/mcp/dist/tools/schedule-runs.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"schedule-runs.d.ts","sourceRoot":"","sources":["../../src/tools/schedule-runs.ts"],"names":[],"mappings":"AAYA,MAAM,WAAW,MAAM;IACrB,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,gEAAgE;IAChE,IAAI,EAAE,MAAM,CAAC;IACb,+DAA+D;IAC/D,IAAI,EAAE,MAAM,CAAC;IACb,kFAAkF;IAClF,MAAM,EAAE,MAAM,CAAC;IACf,4DAA4D;IAC5D,MAAM,EAAE,MAAM,CAAC;IACf,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,0FAA0F;IAC1F,OAAO,EAAE,OAAO,CAAC;IACjB,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;CACtB;AAED,MAAM,WAAW,kBAAkB;IACjC,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,+DAA+D;AAC/D,wBAAgB,SAAS,CAAC,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,CAsB5D;AAED,wBAAsB,YAAY,CAAC,MAAM,EAAE,kBAAkB,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAgBhF"}

package/payload/platform/plugins/scheduling/mcp/dist/tools/schedule-runs.js

@@ -0,0 +1,51 @@
+/**
+ * Task 2136 — one routine's run history.
+ *
+ * Mirrors `workflow-runs` (workflows/mcp/src/tools/workflow-runs.ts) so the two
+ * histories read the same way. Account-scoped at both ends — on the run node's
+ * own `accountId` AND through the routine it hangs off — so a foreign eventId
+ * returns nothing rather than another account's runs.
+ */
+import { int } from "neo4j-driver";
+import { getSession } from "../lib/neo4j.js";
+import { toNumber } from "../lib/routine-run.js";
+/** Project a `:RoutineRun` node's properties into a RunRow. */
+export function mapRunRow(p) {
+    return {
+        runId: p.runId,
+        eventId: p.eventId,
+        kind: p.kind,
+        mode: p.mode,
+        status: p.status,
+        target: p.target ?? "-",
+        scheduledFor: p.scheduledFor,
+        startedAt: p.startedAt,
+        endedAt: p.endedAt ?? null,
+        finishedAt: p.finishedAt ?? null,
+        ranMs: toNumber(p.ranMs),
+        httpStatus: toNumber(p.httpStatus),
+        dispatchResult: p.dispatchResult ?? null,
+        sessionKey: p.sessionKey ?? null,
+        transcriptOffset: toNumber(p.transcriptOffset),
+        // Strict identity, not truthiness: an absent or null `bounded` means the
+        // boundary was never established, which is exactly the false case.
+        bounded: p.bounded === true,
+        error: p.error ?? null,
+    };
+}
+export async function scheduleRuns(params) {
+    const { accountId, eventId, limit = 20 } = params;
+    const session = getSession();
+    try {
+        const res = await session.run(`MATCH (r:RoutineRun)-[:RUN_OF]->(e:Event {eventId: $eventId, accountId: $accountId})
+       WHERE r.accountId = $accountId
+       RETURN r
+       ORDER BY r.startedAt DESC
+       LIMIT $limit`, { accountId, eventId, limit: int(limit) });
+        return res.records.map((rec) => mapRunRow(rec.get("r").properties));
+    }
+    finally {
+        await session.close();
+    }
+}
+//# sourceMappingURL=schedule-runs.js.map

package/payload/platform/plugins/scheduling/mcp/dist/tools/schedule-runs.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"schedule-runs.js","sourceRoot":"","sources":["../../src/tools/schedule-runs.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,OAAO,EAAE,GAAG,EAAE,MAAM,cAAc,CAAC;AACnC,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAC7C,OAAO,EAAE,QAAQ,EAAE,MAAM,uBAAuB,CAAC;AAiCjD,+DAA+D;AAC/D,MAAM,UAAU,SAAS,CAAC,CAA0B;IAClD,OAAO;QACL,KAAK,EAAE,CAAC,CAAC,KAAe;QACxB,OAAO,EAAE,CAAC,CAAC,OAAiB;QAC5B,IAAI,EAAE,CAAC,CAAC,IAAc;QACtB,IAAI,EAAE,CAAC,CAAC,IAAc;QACtB,MAAM,EAAE,CAAC,CAAC,MAAgB;QAC1B,MAAM,EAAG,CAAC,CAAC,MAAiB,IAAI,GAAG;QACnC,YAAY,EAAE,CAAC,CAAC,YAAsB;QACtC,SAAS,EAAE,CAAC,CAAC,SAAmB;QAChC,OAAO,EAAG,CAAC,CAAC,OAAyB,IAAI,IAAI;QAC7C,UAAU,EAAG,CAAC,CAAC,UAA4B,IAAI,IAAI;QACnD,KAAK,EAAE,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC;QACxB,UAAU,EAAE,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC;QAClC,cAAc,EAAG,CAAC,CAAC,cAAgC,IAAI,IAAI;QAC3D,UAAU,EAAG,CAAC,CAAC,UAA4B,IAAI,IAAI;QACnD,gBAAgB,EAAE,QAAQ,CAAC,CAAC,CAAC,gBAAgB,CAAC;QAC9C,yEAAyE;QACzE,mEAAmE;QACnE,OAAO,EAAE,CAAC,CAAC,OAAO,KAAK,IAAI;QAC3B,KAAK,EAAG,CAAC,CAAC,KAAuB,IAAI,IAAI;KAC1C,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,MAA0B;IAC3D,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,KAAK,GAAG,EAAE,EAAE,GAAG,MAAM,CAAC;IAClD,MAAM,OAAO,GAAG,UAAU,EAAE,CAAC;IAC7B,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,GAAG,CAC3B;;;;oBAIc,EACd,EAAE,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,CAAC,EAAE,CAC1C,CAAC;QACF,OAAO,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC;IACtE,CAAC;YAAS,CAAC;QACT,MAAM,OAAO,CAAC,KAAK,EAAE,CAAC;IACxB,CAAC;AACH,CAAC"}

package/payload/platform/plugins/scheduling/mcp/dist/tools/schedule-update.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"schedule-update.d.ts","sourceRoot":"","sources":["../../src/tools/schedule-update.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAGtE,MAAM,WAAW,oBAAoB;IACnC,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,WAAW,GAAG,IAAI,CAAC;IAC5B,aAAa,CAAC,EAAE,aAAa,GAAG,IAAI,CAAC;CACtC;AAED,wBAAsB,cAAc,CAAC,MAAM,EAAE,oBAAoB,GAAG,OAAO,CAAC,IAAI,CAAC,CAgQhF"}
+{"version":3,"file":"schedule-update.d.ts","sourceRoot":"","sources":["../../src/tools/schedule-update.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAGtE,MAAM,WAAW,oBAAoB;IACnC,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,WAAW,GAAG,IAAI,CAAC;IAC5B,aAAa,CAAC,EAAE,aAAa,GAAG,IAAI,CAAC;CACtC;AAED,wBAAsB,cAAc,CAAC,MAAM,EAAE,oBAAoB,GAAG,OAAO,CAAC,IAAI,CAAC,CAyQhF"}

package/payload/platform/plugins/scheduling/mcp/dist/tools/schedule-update.js

@@ -1,6 +1,7 @@
 import { existsSync } from "node:fs";
 import { resolve } from "node:path";
 import { getSession } from "../lib/neo4j.js";
+import { appendNotesCapped } from "../lib/notes-cap.js";
 import { computeEmbedding } from "../lib/embedding.js";
 import cronParser from "cron-parser";
 const { parseExpression } = cronParser;
@@ -41,7 +42,7 @@ export async function scheduleUpdate(params) {
            SET e.nextRun = $newNextRun,
                e.skipNext = false,
                e.updatedAt = $now,
-               e.notes = COALESCE(e.notes, '') + $noteEntry`, {
+               ${appendNotesCapped("e", "noteEntry")}`, {
                     eventId,
                     accountId,
                     newNextRun,
@@ -164,13 +165,22 @@ export async function scheduleUpdate(params) {
         queryParams.agentChannel = agentDispatch.channel;
         queryParams.agentDestination = agentDispatch.destination;
         queryParams.agentPrompt = agentDispatch.prompt;
+        // Task 2130 — stamp the prompt as operator-owned. The shipped routine
+        // roster re-seeds on every upgrade and rewrites a template's prompt when
+        // its stored version is behind, UNLESS the row carries this. Without the
+        // stamp the guard reads a property nothing ever sets, so the first version
+        // bump would silently overwrite an operator's customised prompt and the
+        // only evidence would be the prompt itself changing. Only the prompt is
+        // stamped: the seed never rewrites recurrence, status, channel or
+        // destination, so an edit to those needs no protection.
+        setClauses.push("e.operatorEdited = $now");
         // Invariant: setting an agent dispatch clears any action.
         setClauses.push("e.actionPlugin = null");
         setClauses.push("e.actionTool = null");
         setClauses.push("e.actionArgs = null");
     }
     if (note) {
-        setClauses.push("e.notes = COALESCE(e.notes, '') + $noteEntry");
+        setClauses.push(appendNotesCapped("e", "noteEntry"));
         queryParams.noteEntry = `\n[${queryParams.now}] ${note}`;
     }
     // Recompute embedding if name or description changed

package/payload/platform/plugins/scheduling/mcp/dist/tools/schedule-update.js.map

@@ -1 +1 @@
-{"version":3,"file":"schedule-update.js","sourceRoot":"","sources":["../../src/tools/schedule-update.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAC7C,OAAO,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AACvD,OAAO,UAAU,MAAM,aAAa,CAAC;AACrC,MAAM,EAAE,eAAe,EAAE,GAAG,UAAU,CAAC;AAGvC,OAAO,EAAE,qBAAqB,EAAE,MAAM,0BAA0B,CAAC;AAmBjE,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,MAA4B;IAC/D,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,aAAa,EAAE,GAAG,OAAO,EAAE,GAAG,MAAM,CAAC;IAEzF,+EAA+E;IAC/E,gFAAgF;IAChF,yEAAyE;IACzE,IAAI,MAAM,IAAI,IAAI,IAAI,aAAa,IAAI,IAAI,EAAE,CAAC;QAC5C,MAAM,IAAI,KAAK,CAAC,kFAAkF,CAAC,CAAC;IACtG,CAAC;IAED,sDAAsD;IACtD,IAAI,QAAQ,EAAE,CAAC;QACb,MAAM,YAAY,GAAG,UAAU,EAAE,CAAC;QAClC,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,MAAM,YAAY,CAAC,GAAG,CAClC;yFACiF,EACjF,EAAE,OAAO,EAAE,SAAS,EAAE,CACvB,CAAC;YACF,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAC/B,MAAM,IAAI,KAAK,CAAC,oBAAoB,OAAO,EAAE,CAAC,CAAC;YACjD,CAAC;YACD,MAAM,GAAG,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;YAC/C,IAAI,CAAC,GAAG,EAAE,CAAC;gBACT,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;YACnE,CAAC;YAED,yCAAyC;YACzC,MAAM,cAAc,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,CAAW,CAAC;YACjE,MAAM,EAAE,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,UAAU,CAAkB,CAAC;YAC7D,MAAM,QAAQ,GAAG,eAAe,CAAC,GAAG,EAAE;gBACpC,WAAW,EAAE,IAAI,IAAI,CAAC,cAAc,CAAC;gBACrC,EAAE,EAAE,EAAE,IAAI,SAAS;aACpB,CAAC,CAAC;YACH,MAAM,UAAU,GAAG,QAAQ,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;YACjD,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;YAErC,MAAM,WAAW,GAAG,UAAU,EAAE,CAAC;YACjC,IAAI,CAAC;gBACH,MAAM,WAAW,CAAC,GAAG,CACnB;;;;4DAIkD,EAClD;oBACE,OAAO;oBACP,SAAS;oBACT,UAAU;oBACV,GAAG;oBACH,SAAS,EAAE,MAAM,GAAG,kCAAkC,cAAc,SAAS,UAAU,GAAG;iBAC3F,CACF,CAAC;YACJ,CAAC;oBAAS,CAAC;gBACT,MAAM,WAAW,CAAC,KAAK,EAAE,CAAC;YAC5B,CAAC;YACD,OAAO;QACT,CAAC;gBAAS,CAAC;YACT,MAAM,YAAY,CAAC,KAAK,EAAE,CAAC;QAC7B,CAAC;IACH,CAAC;IAED,yCAAyC;IACzC,MAAM,UAAU,GAAa,CAAC,oBAAoB,CAAC,CAAC;IACpD,MAAM,WAAW,GAA4B;QAC3C,OAAO;QACP,SAAS;QACT,GAAG,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;KAC9B,CAAC;IAEF,IAAI,OAAO,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QAC/B,UAAU,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;QAClC,WAAW,CAAC,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;IAClC,CAAC;IACD,IAAI,OAAO,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;QACtC,UAAU,CAAC,IAAI,CAAC,8BAA8B,CAAC,CAAC;QAChD,WAAW,CAAC,WAAW,GAAG,OAAO,CAAC,WAAW,CAAC;IAChD,CAAC;IACD,IAAI,OAAO,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;QACpC,UAAU,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC;QAC5C,WAAW,CAAC,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC;IAC5C,CAAC;IACD,IAAI,OAAO,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;QAClC,UAAU,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;QACxC,WAAW,CAAC,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;IACxC,CAAC;IACD,IAAI,OAAO,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;QACnC,UAAU,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC;QAC1C,WAAW,CAAC,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC;IAC1C,CAAC;IACD,IAAI,OAAO,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;QACtC,UAAU,CAAC,IAAI,CAAC,8BAA8B,CAAC,CAAC;QAChD,WAAW,CAAC,WAAW,GAAG,OAAO,CAAC,WAAW,CAAC;IAChD,CAAC;IACD,IAAI,OAAO,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;QACrC,+BAA+B;QAC/B,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,eAAe,CAAC,OAAO,CAAC,UAAU,EAAE;gBACnD,WAAW,EAAE,IAAI,IAAI,EAAE;gBACvB,EAAE,EAAE,OAAO,CAAC,QAAQ,IAAI,SAAS;aAClC,CAAC,CAAC;YACH,MAAM,UAAU,GAAG,QAAQ,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;YACjD,UAAU,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAC;YAC9C,UAAU,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC;YAC3C,WAAW,CAAC,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC;YAC5C,WAAW,CAAC,UAAU,GAAG,UAAU,CAAC;QACtC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,IAAI,KAAK,CACb,mCAAmC,OAAO,CAAC,UAAU,OAAO,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAC/G,CAAC;QACJ,CAAC;IACH,CAAC;IACD,IAAI,OAAO,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;QACnC,UAAU,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC;QAC1C,WAAW,CAAC,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC;IAC1C,CAAC;IAED,iCAAiC;IACjC,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;QACpB,mCAAmC;QACnC,UAAU,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC;QACzC,UAAU,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC;QACvC,UAAU,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC;IACzC,CAAC;SAAM,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QAChC,IAAI,CAAC,MAAM,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;YACnC,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;QACrE,CAAC;QACD,MAAM,YAAY,GAAG,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC;QAC/C,IAAI,CAAC,YAAY,EAAE,CAAC;YAClB,MAAM,IAAI,KAAK,CAAC,0EAA0E,CAAC,CAAC;QAC9F,CAAC;QACD,MAAM,WAAW,GAAG,OAAO,CAAC,YAAY,EAAE,SAAS,CAAC,CAAC;QACrD,MAAM,SAAS,GAAG,OAAO,CAAC,WAAW,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;QACtD,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,WAAW,GAAG,GAAG,CAAC,EAAE,CAAC;YAC7C,MAAM,IAAI,KAAK,CAAC,+BAA+B,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;QAClE,CAAC;QACD,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;YAC3B,MAAM,IAAI,KAAK,CAAC,sCAAsC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;QACzE,CAAC;QACD,UAAU,CAAC,IAAI,CAAC,gCAAgC,CAAC,CAAC;QAClD,UAAU,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAC;QAC9C,WAAW,CAAC,YAAY,GAAG,MAAM,CAAC,MAAM,CAAC;QACzC,WAAW,CAAC,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC;QACrC,IAAI,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACvD,UAAU,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAC;YAC9C,WAAW,CAAC,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACvD,CAAC;aAAM,CAAC;YACN,UAAU,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC;QACzC,CAAC;QACD,0EAA0E;QAC1E,6BAA6B;QAC7B,UAAU,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC;QACzC,UAAU,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC;QAC7C,UAAU,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;IAC1C,CAAC;IAED,iFAAiF;IACjF,IAAI,aAAa,KAAK,IAAI,EAAE,CAAC;QAC3B,UAAU,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC;QACzC,UAAU,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC;QAC7C,UAAU,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;IAC1C,CAAC;SAAM,IAAI,aAAa,KAAK,SAAS,EAAE,CAAC;QACvC,qBAAqB,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC;QAChD,UAAU,CAAC,IAAI,CAAC,gCAAgC,CAAC,CAAC;QAClD,UAAU,CAAC,IAAI,CAAC,wCAAwC,CAAC,CAAC;QAC1D,UAAU,CAAC,IAAI,CAAC,8BAA8B,CAAC,CAAC;QAChD,WAAW,CAAC,YAAY,GAAG,aAAa,CAAC,OAAO,CAAC;QACjD,WAAW,CAAC,gBAAgB,GAAG,aAAa,CAAC,WAAW,CAAC;QACzD,WAAW,CAAC,WAAW,GAAG,aAAa,CAAC,MAAM,CAAC;QAC/C,0DAA0D;QAC1D,UAAU,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC;QACzC,UAAU,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC;QACvC,UAAU,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC;IACzC,CAAC;IAED,IAAI,IAAI,EAAE,CAAC;QACT,UAAU,CAAC,IAAI,CAAC,8CAA8C,CAAC,CAAC;QAChE,WAAW,CAAC,SAAS,GAAG,MAAM,WAAW,CAAC,GAAG,KAAK,IAAI,EAAE,CAAC;IAC3D,CAAC;IAED,qDAAqD;IACrD,IAAI,OAAO,CAAC,IAAI,KAAK,SAAS,IAAI,OAAO,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;QACpE,MAAM,KAAK,GAAG,CAAC,UAAU,OAAO,CAAC,IAAI,IAAI,EAAE,EAAE,EAAE,OAAO,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAC1F,MAAM,SAAS,GAAG,MAAM,gBAAgB,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;QAC5D,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACzB,UAAU,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC;YAC5C,WAAW,CAAC,SAAS,GAAG,SAAS,CAAC;QACpC,CAAC;IACH,CAAC;IAED,MAAM,YAAY,GAAG,UAAU,EAAE,CAAC;IAClC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,GAAG,CACnC;aACO,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC;gBAClB,EACV,WAAW,CACZ,CAAC;QAEF,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAChC,mEAAmE;YACnE,wEAAwE;YACxE,0EAA0E;YAC1E,2EAA2E;YAC3E,0EAA0E;YAC1E,oCAAoC;YACpC,MAAM,WAAW,GAAa,EAAE,CAAC;YACjC,MAAM,aAAa,GAA4B,EAAE,EAAE,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC;YAC1E,IAAI,OAAO,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;gBAC/B,WAAW,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;gBACrC,aAAa,CAAC,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC;YACrC,CAAC;YACD,IAAI,OAAO,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;gBACpC,WAAW,CAAC,IAAI,CAAC,kCAAkC,CAAC,CAAC;gBACrD,aAAa,CAAC,QAAQ,GAAG,OAAO,CAAC,SAAS,CAAC;YAC7C,CAAC;YACD,IAAI,OAAO,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;gBAClC,WAAW,CAAC,IAAI,CAAC,8BAA8B,CAAC,CAAC;gBACjD,aAAa,CAAC,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;YACzC,CAAC;YACD,IAAI,OAAO,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;gBACnC,WAAW,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC;gBAC3C,aAAa,CAAC,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC;YAC5C,CAAC;YACD,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAC7B,uEAAuE;gBACvE,oEAAoE;gBACpE,sEAAsE;gBACtE,yDAAyD;gBACzD,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,GAAG,CACnC,yEAAyE,EACzE,EAAE,EAAE,EAAE,OAAO,EAAE,SAAS,EAAE,CAC3B,CAAC;gBACF,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBAC9B,MAAM,IAAI,KAAK,CACb,GAAG,OAAO,iFAAiF,CAC5F,CAAC;gBACJ,CAAC;gBACD,MAAM,IAAI,KAAK,CAAC,oBAAoB,OAAO,EAAE,CAAC,CAAC;YACjD,CAAC;YACD,WAAW,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC;YAE7C,MAAM,aAAa,GAAG,MAAM,YAAY,CAAC,GAAG,CAC1C;eACO,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC;6BACR,EACrB,aAAa,CACd,CAAC;YACF,IAAI,aAAa,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACvC,MAAM,IAAI,KAAK,CAAC,oBAAoB,OAAO,EAAE,CAAC,CAAC;YACjD,CAAC;YACD,OAAO,CAAC,KAAK,CAAC,yCAAyC,OAAO,WAAW,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,CAAC;QACrG,CAAC;IACH,CAAC;YAAS,CAAC;QACT,MAAM,YAAY,CAAC,KAAK,EAAE,CAAC;IAC7B,CAAC;AACH,CAAC"}
+{"version":3,"file":"schedule-update.js","sourceRoot":"","sources":["../../src/tools/schedule-update.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAC7C,OAAO,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AACxD,OAAO,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AACvD,OAAO,UAAU,MAAM,aAAa,CAAC;AACrC,MAAM,EAAE,eAAe,EAAE,GAAG,UAAU,CAAC;AAGvC,OAAO,EAAE,qBAAqB,EAAE,MAAM,0BAA0B,CAAC;AAmBjE,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,MAA4B;IAC/D,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,aAAa,EAAE,GAAG,OAAO,EAAE,GAAG,MAAM,CAAC;IAEzF,+EAA+E;IAC/E,gFAAgF;IAChF,yEAAyE;IACzE,IAAI,MAAM,IAAI,IAAI,IAAI,aAAa,IAAI,IAAI,EAAE,CAAC;QAC5C,MAAM,IAAI,KAAK,CAAC,kFAAkF,CAAC,CAAC;IACtG,CAAC;IAED,sDAAsD;IACtD,IAAI,QAAQ,EAAE,CAAC;QACb,MAAM,YAAY,GAAG,UAAU,EAAE,CAAC;QAClC,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,MAAM,YAAY,CAAC,GAAG,CAClC;yFACiF,EACjF,EAAE,OAAO,EAAE,SAAS,EAAE,CACvB,CAAC;YACF,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAC/B,MAAM,IAAI,KAAK,CAAC,oBAAoB,OAAO,EAAE,CAAC,CAAC;YACjD,CAAC;YACD,MAAM,GAAG,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;YAC/C,IAAI,CAAC,GAAG,EAAE,CAAC;gBACT,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;YACnE,CAAC;YAED,yCAAyC;YACzC,MAAM,cAAc,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,CAAW,CAAC;YACjE,MAAM,EAAE,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,UAAU,CAAkB,CAAC;YAC7D,MAAM,QAAQ,GAAG,eAAe,CAAC,GAAG,EAAE;gBACpC,WAAW,EAAE,IAAI,IAAI,CAAC,cAAc,CAAC;gBACrC,EAAE,EAAE,EAAE,IAAI,SAAS;aACpB,CAAC,CAAC;YACH,MAAM,UAAU,GAAG,QAAQ,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;YACjD,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;YAErC,MAAM,WAAW,GAAG,UAAU,EAAE,CAAC;YACjC,IAAI,CAAC;gBACH,MAAM,WAAW,CAAC,GAAG,CACnB;;;;iBAIO,iBAAiB,CAAC,GAAG,EAAE,WAAW,CAAC,EAAE,EAC5C;oBACE,OAAO;oBACP,SAAS;oBACT,UAAU;oBACV,GAAG;oBACH,SAAS,EAAE,MAAM,GAAG,kCAAkC,cAAc,SAAS,UAAU,GAAG;iBAC3F,CACF,CAAC;YACJ,CAAC;oBAAS,CAAC;gBACT,MAAM,WAAW,CAAC,KAAK,EAAE,CAAC;YAC5B,CAAC;YACD,OAAO;QACT,CAAC;gBAAS,CAAC;YACT,MAAM,YAAY,CAAC,KAAK,EAAE,CAAC;QAC7B,CAAC;IACH,CAAC;IAED,yCAAyC;IACzC,MAAM,UAAU,GAAa,CAAC,oBAAoB,CAAC,CAAC;IACpD,MAAM,WAAW,GAA4B;QAC3C,OAAO;QACP,SAAS;QACT,GAAG,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;KAC9B,CAAC;IAEF,IAAI,OAAO,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QAC/B,UAAU,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;QAClC,WAAW,CAAC,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;IAClC,CAAC;IACD,IAAI,OAAO,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;QACtC,UAAU,CAAC,IAAI,CAAC,8BAA8B,CAAC,CAAC;QAChD,WAAW,CAAC,WAAW,GAAG,OAAO,CAAC,WAAW,CAAC;IAChD,CAAC;IACD,IAAI,OAAO,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;QACpC,UAAU,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC;QAC5C,WAAW,CAAC,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC;IAC5C,CAAC;IACD,IAAI,OAAO,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;QAClC,UAAU,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;QACxC,WAAW,CAAC,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;IACxC,CAAC;IACD,IAAI,OAAO,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;QACnC,UAAU,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC;QAC1C,WAAW,CAAC,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC;IAC1C,CAAC;IACD,IAAI,OAAO,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;QACtC,UAAU,CAAC,IAAI,CAAC,8BAA8B,CAAC,CAAC;QAChD,WAAW,CAAC,WAAW,GAAG,OAAO,CAAC,WAAW,CAAC;IAChD,CAAC;IACD,IAAI,OAAO,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;QACrC,+BAA+B;QAC/B,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,eAAe,CAAC,OAAO,CAAC,UAAU,EAAE;gBACnD,WAAW,EAAE,IAAI,IAAI,EAAE;gBACvB,EAAE,EAAE,OAAO,CAAC,QAAQ,IAAI,SAAS;aAClC,CAAC,CAAC;YACH,MAAM,UAAU,GAAG,QAAQ,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;YACjD,UAAU,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAC;YAC9C,UAAU,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC;YAC3C,WAAW,CAAC,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC;YAC5C,WAAW,CAAC,UAAU,GAAG,UAAU,CAAC;QACtC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,IAAI,KAAK,CACb,mCAAmC,OAAO,CAAC,UAAU,OAAO,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAC/G,CAAC;QACJ,CAAC;IACH,CAAC;IACD,IAAI,OAAO,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;QACnC,UAAU,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC;QAC1C,WAAW,CAAC,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC;IAC1C,CAAC;IAED,iCAAiC;IACjC,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;QACpB,mCAAmC;QACnC,UAAU,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC;QACzC,UAAU,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC;QACvC,UAAU,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC;IACzC,CAAC;SAAM,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QAChC,IAAI,CAAC,MAAM,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;YACnC,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;QACrE,CAAC;QACD,MAAM,YAAY,GAAG,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC;QAC/C,IAAI,CAAC,YAAY,EAAE,CAAC;YAClB,MAAM,IAAI,KAAK,CAAC,0EAA0E,CAAC,CAAC;QAC9F,CAAC;QACD,MAAM,WAAW,GAAG,OAAO,CAAC,YAAY,EAAE,SAAS,CAAC,CAAC;QACrD,MAAM,SAAS,GAAG,OAAO,CAAC,WAAW,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;QACtD,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,WAAW,GAAG,GAAG,CAAC,EAAE,CAAC;YAC7C,MAAM,IAAI,KAAK,CAAC,+BAA+B,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;QAClE,CAAC;QACD,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;YAC3B,MAAM,IAAI,KAAK,CAAC,sCAAsC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;QACzE,CAAC;QACD,UAAU,CAAC,IAAI,CAAC,gCAAgC,CAAC,CAAC;QAClD,UAAU,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAC;QAC9C,WAAW,CAAC,YAAY,GAAG,MAAM,CAAC,MAAM,CAAC;QACzC,WAAW,CAAC,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC;QACrC,IAAI,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACvD,UAAU,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAC;YAC9C,WAAW,CAAC,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACvD,CAAC;aAAM,CAAC;YACN,UAAU,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC;QACzC,CAAC;QACD,0EAA0E;QAC1E,6BAA6B;QAC7B,UAAU,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC;QACzC,UAAU,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC;QAC7C,UAAU,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;IAC1C,CAAC;IAED,iFAAiF;IACjF,IAAI,aAAa,KAAK,IAAI,EAAE,CAAC;QAC3B,UAAU,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC;QACzC,UAAU,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC;QAC7C,UAAU,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;IAC1C,CAAC;SAAM,IAAI,aAAa,KAAK,SAAS,EAAE,CAAC;QACvC,qBAAqB,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC;QAChD,UAAU,CAAC,IAAI,CAAC,gCAAgC,CAAC,CAAC;QAClD,UAAU,CAAC,IAAI,CAAC,wCAAwC,CAAC,CAAC;QAC1D,UAAU,CAAC,IAAI,CAAC,8BAA8B,CAAC,CAAC;QAChD,WAAW,CAAC,YAAY,GAAG,aAAa,CAAC,OAAO,CAAC;QACjD,WAAW,CAAC,gBAAgB,GAAG,aAAa,CAAC,WAAW,CAAC;QACzD,WAAW,CAAC,WAAW,GAAG,aAAa,CAAC,MAAM,CAAC;QAC/C,sEAAsE;QACtE,yEAAyE;QACzE,yEAAyE;QACzE,2EAA2E;QAC3E,wEAAwE;QACxE,wEAAwE;QACxE,kEAAkE;QAClE,wDAAwD;QACxD,UAAU,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC;QAC3C,0DAA0D;QAC1D,UAAU,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC;QACzC,UAAU,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC;QACvC,UAAU,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC;IACzC,CAAC;IAED,IAAI,IAAI,EAAE,CAAC;QACT,UAAU,CAAC,IAAI,CAAC,iBAAiB,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC,CAAC;QACrD,WAAW,CAAC,SAAS,GAAG,MAAM,WAAW,CAAC,GAAG,KAAK,IAAI,EAAE,CAAC;IAC3D,CAAC;IAED,qDAAqD;IACrD,IAAI,OAAO,CAAC,IAAI,KAAK,SAAS,IAAI,OAAO,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;QACpE,MAAM,KAAK,GAAG,CAAC,UAAU,OAAO,CAAC,IAAI,IAAI,EAAE,EAAE,EAAE,OAAO,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAC1F,MAAM,SAAS,GAAG,MAAM,gBAAgB,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;QAC5D,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACzB,UAAU,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC;YAC5C,WAAW,CAAC,SAAS,GAAG,SAAS,CAAC;QACpC,CAAC;IACH,CAAC;IAED,MAAM,YAAY,GAAG,UAAU,EAAE,CAAC;IAClC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,GAAG,CACnC;aACO,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC;gBAClB,EACV,WAAW,CACZ,CAAC;QAEF,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAChC,mEAAmE;YACnE,wEAAwE;YACxE,0EAA0E;YAC1E,2EAA2E;YAC3E,0EAA0E;YAC1E,oCAAoC;YACpC,MAAM,WAAW,GAAa,EAAE,CAAC;YACjC,MAAM,aAAa,GAA4B,EAAE,EAAE,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC;YAC1E,IAAI,OAAO,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;gBAC/B,WAAW,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;gBACrC,aAAa,CAAC,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC;YACrC,CAAC;YACD,IAAI,OAAO,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;gBACpC,WAAW,CAAC,IAAI,CAAC,kCAAkC,CAAC,CAAC;gBACrD,aAAa,CAAC,QAAQ,GAAG,OAAO,CAAC,SAAS,CAAC;YAC7C,CAAC;YACD,IAAI,OAAO,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;gBAClC,WAAW,CAAC,IAAI,CAAC,8BAA8B,CAAC,CAAC;gBACjD,aAAa,CAAC,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;YACzC,CAAC;YACD,IAAI,OAAO,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;gBACnC,WAAW,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC;gBAC3C,aAAa,CAAC,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC;YAC5C,CAAC;YACD,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAC7B,uEAAuE;gBACvE,oEAAoE;gBACpE,sEAAsE;gBACtE,yDAAyD;gBACzD,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,GAAG,CACnC,yEAAyE,EACzE,EAAE,EAAE,EAAE,OAAO,EAAE,SAAS,EAAE,CAC3B,CAAC;gBACF,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBAC9B,MAAM,IAAI,KAAK,CACb,GAAG,OAAO,iFAAiF,CAC5F,CAAC;gBACJ,CAAC;gBACD,MAAM,IAAI,KAAK,CAAC,oBAAoB,OAAO,EAAE,CAAC,CAAC;YACjD,CAAC;YACD,WAAW,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC;YAE7C,MAAM,aAAa,GAAG,MAAM,YAAY,CAAC,GAAG,CAC1C;eACO,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC;6BACR,EACrB,aAAa,CACd,CAAC;YACF,IAAI,aAAa,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACvC,MAAM,IAAI,KAAK,CAAC,oBAAoB,OAAO,EAAE,CAAC,CAAC;YACjD,CAAC;YACD,OAAO,CAAC,KAAK,CAAC,yCAAyC,OAAO,WAAW,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,CAAC;QACrG,CAAC;IACH,CAAC;YAAS,CAAC;QACT,MAAM,YAAY,CAAC,KAAK,EAAE,CAAC;IAC7B,CAAC;AACH,CAAC"}

package/payload/platform/plugins/whatsapp/references/channels-whatsapp.md

@@ -297,7 +297,7 @@ When a pairing attempt fails — the phone accepts the code and shows "Continue
 grep -aE '\[whatsapp:(login|session|reconcile)\]' <server log> | grep 'cid=<id>'
 ```
 
-The single decision point is whether an `op=pair-success` line appears between `op=code-issued` and `op=close`. Absent + `op=close … kind=qr-refs-ended-408` → the completion signal never returned (beyond the Pi). When no account signature is captured, the login now terminates on `op=pairing-incomplete … reason=no-account-signature` rather than reconnecting a half-registered credential into a `401`; the operator sees an actionable message ("WhatsApp accepted the code but did not finish linking … open WhatsApp, Linked Devices, remove existing devices, then ask for a new code") that points at the phone's linked-device limit or a stale companion — the account-side cause a reconnect cannot fix. A dirty `op=creds-pre registered=true hasAccount=false` → Pi-side. A half-registered credential folder (pairing requested, never completed) is reconciled on each `/status` pass: an in-flight or freshly-written one is preserved and logged `[whatsapp:reconcile] op=half-registered … inFlight=<bool>`, while an aged, abandoned one (no live login, creds untouched past the 5-minute pairing window) is deleted once, logged `op=discard-half-registered`, so the next pairing starts from an empty folder.
+The single decision point is whether an `op=pair-success` line appears between `op=code-issued` and `op=close`. Absent + `op=close … kind=qr-refs-ended-408` → the completion signal never returned (beyond the Pi). When no account signature is captured, the login terminates rather than reconnecting a half-registered credential into a `401`, and which of three terminals fires is decided by `op=companion-reg cid=… stage=… parseable=…`, emitted once per `link_code_companion_reg` notification received. A notification with no `primary_identity_pub` gives `op=pairing-declined … reason=companion-reg-unparseable` within seconds instead of at the ~160s ref cap, and the operator is told the phone was asked to approve and the approval did not complete, so they should clear any warning prompt the phone shows and request a new code. No notification at all gives `op=pairing-incomplete … reason=code-not-submitted`, meaning the code was never entered. Only a notification that parsed and still produced no signature gives `op=pairing-incomplete … reason=no-account-signature`, the linked-device-limit or stale-companion case; that advice used to be given for all three and misdirected an investigation on a brand-new number with no linked devices. `op=terminal` carries `companionRegSeen`, and `outcome=connected companionRegSeen=false` means the observer never bound. A dirty `op=creds-pre registered=true hasAccount=false` → Pi-side. A half-registered credential folder (pairing requested, never completed) is reconciled on each `/status` pass: an in-flight or freshly-written one is preserved and logged `[whatsapp:reconcile] op=half-registered … inFlight=<bool>`, while an aged, abandoned one (no live login, creds untouched past the 5-minute pairing window) is deleted once, logged `op=discard-half-registered`, so the next pairing starts from an empty folder.
 
 Full grammar, success/failure signatures, and the `kind` table: [`.docs/whatsapp-pairing-lifeline.md`](../../../../.docs/whatsapp-pairing-lifeline.md).
 
@@ -329,9 +329,37 @@ The dead state is reported at two surfaces so it is visible without a reply havi
 
 What is NOT handled here: the end user who triggered the reply receives no delivery-failure notice over WhatsApp, and there is no outbound retry queue — a dropped reply on a dead link is lost (the agent is made aware of the failure, but the sender is not). That is a separate concern; file a task if it is wanted.
 
+## Giving Up Is Temporary: the Re-arm
+
+Ten consecutive cycles shorter than `STABLE_UPTIME_MS` (30s) make `computeReconnectNextState` return `abort`. That branch used to `return` out of the reconnect loop, and nothing called back in: on 2026-07-28 three co-resident installs made **zero** socket attempts across 8h22m and only a manual QR re-pair recovered them.
+
+The abort now waits `REARM_INTERVAL_MS` (15 minutes, flat, uncapped) and continues the loop. `reconnectAttempts` is deliberately not written in that branch, so it stays at the value the abort fired on — one below `MAX_RECONNECT_ATTEMPTS`, since the decision aborts when `reconnectAttempts + 1 >= maxAttempts`. The next short-lived cycle therefore aborts again and lands back on the same wait: **exactly one socket attempt per fifteen minutes, for as long as the link stays down**. The storm the bound exists to stop ran ten attempts in thirteen minutes, so the re-armed rate is about a fortieth of it. There is no cap, because any cap reinstates the same permanently-dead state at a later hour.
+
+Two rules bound the re-arm, and both matter:
+
+- **A stuck link clears once the reconnect has HELD 30 seconds**, on a timer armed at connect — not when the recovered session later ends. Clearing at socket-open would be too early (a link that opens and dies in two seconds has proven nothing); clearing after the session ends would be far too late, and would report a link that came back and stayed up as stuck for its whole life. The attempt counter is untouched by that clear: the bound is enforced by `reconnectAttempts`, which the stable-reset decision still resets when the cycle ends.
+- **A `terminalReason` link is never re-armed.** A 401 `loggedOut` or a 409 `conflict` returns before the abort branch is reached, so re-arming cannot apply. When a *re-armed* attempt comes back terminal the loop ends and writes `outcome=skipped-terminal`, which is what makes the exclusion observable rather than merely coded. Retrying a revoked credential risks the number; re-pairing is the only remedy.
+
+## Standing Link Census
+
+Every other WhatsApp log line is a transition, so a link that died at 22:00 and a link that stayed up all night leave identical logs. Two standing lines close that, both on a 15-minute `registerLoop` tick, both written on healthy ticks too:
+
+```
+[whatsapp-health] op=link-census account=<id> connected=<bool> stuck=<bool> downMs=<n|unknown> lastError=<msg|none>
+[whatsapp-health] op=rearm account=<id> attempt=<n> sinceStuckMs=<n> outcome=<connected|failed|skipped-terminal>
+```
+
+- `op=link-census` prints when the link is up as well as down, and prints `accounts=0` on an install with no WhatsApp connections at all. A census that speaks only when something is wrong cannot be told apart from a census that has stopped running.
+- `downMs` is milliseconds since the link last reported `connected`, and is `unknown` — never `0` — for a link that has never connected. It is the one field that makes an 8h22m outage legible rather than reconstructable from an absence of lines.
+- `op=rearm` is written when an attempt **resolves**, carrying what it resolved to. "Scheduled a re-arm" is not evidence a socket was attempted.
+
+Triage a suspected dead link with `grep '\[whatsapp-health\]' ~/.<brand>/logs/server.log | tail -20`.
+
+`/api/health` still publishes `whatsapp.any_stuck` and `whatsapp.any_terminal`, and still has no UI consumer. That is deliberate: a banner needs an open browser tab, and the census and the re-arm do not.
+
 ## Reconnection: Setup Failures vs Runtime Disconnects
 
-> **Authoritative source:** The current runtime connection lifecycle — including reconnect bounding (`STABLE_UPTIME_MS`, `MAX_RECONNECT_ATTEMPTS`), platform-side init queries (fetchBlocklist, fetchPrivacySettings, intentional fetchProps skip), and the `/api/health` WhatsApp field — is documented in [`.docs/whatsapp.md`](../../../../.docs/whatsapp.md) under "Connection Lifecycle", "Init Query Visibility", and "Reconnect Bounding and Escape". The content below describes the historical disconnect-reason mapping which still applies; for anything about how the loop retries, aborts, or runs its init sequence, read the `.docs` file first.
+> **Where the lifecycle lives:** reconnect bounding (`STABLE_UPTIME_MS`, `MAX_RECONNECT_ATTEMPTS`, `REARM_INTERVAL_MS`) and the platform-side init queries are in `platform/ui/app/lib/whatsapp/reconnect.ts` and `manager.ts`; the two sections above describe the current behaviour. The content below describes the historical disconnect-reason mapping, which still applies.
 
 The reconnection loop in `monitorWebChannel` handles two distinct failure modes:
 

package/payload/platform/plugins/whatsapp/skills/connect-whatsapp/SKILL.md

@@ -25,7 +25,7 @@ Call `whatsapp-status` first to check the current state. If already connected, t
 
 2. **Initiate pairing** — call `whatsapp-login-start` with `phone` set to that number. If the account is already linked and the user didn't say "relink", inform them and skip to Phase 2.
 
-3. **Give the operator the code** — the tool returns an 8-character pairing code. Show it and tell the user: "On the phone with that number, open WhatsApp → Settings → Linked Devices → Link a Device → tap 'Link with phone number instead', then enter this code: {code}."
+3. **Give the operator the code** — the tool returns an 8-character pairing code. Show it and tell the user: "On the phone with that number, open WhatsApp → Settings → Linked Devices → Link a Device → tap 'Link with phone number instead', then enter this code: {code}. If the phone shows a warning asking whether someone else asked you to link a device, clear that prompt and approve the link, otherwise the link will not complete."
 
 4. **Wait for the link** — call `whatsapp-login-wait`. It polls for up to 60 seconds. The code stays valid and the connection stays alive across polls, so if it returns still-waiting, call it again — do not generate a new code unless the operator asks. While waiting, tell the user you're watching for the link.
 

package/payload/platform/scripts/check-specialist-tool-surface.mjs

@@ -67,25 +67,39 @@ function qualifyShortToolName(plugin, tool) {
 }
 
 // Frontmatter walker for PLUGIN.md tools: + hidden: blocks. Returns
-// {tools: [string], hidden: [string], hasTools: boolean}. Names only;
-// the gate does not consult allowlist booleans because every declared
-// tool contributes to the `all` surface.
+// {tools, hidden, hasTools, specialistOnly}. The drift check needs names
+// only — every declared tool contributes to the `all` surface regardless of
+// allowlist. `specialistOnly` (Task 2132) additionally carries the names
+// declared unreachable from both the admin and public surfaces, which the
+// reachability check below resolves against the specialist grants.
 function parsePluginManifest(rawManifest) {
   const fmMatch = rawManifest.match(/^---\r?\n([\s\S]*?)\r?\n---/);
-  if (!fmMatch) return { tools: [], hidden: [], hasTools: false };
+  if (!fmMatch) return { tools: [], hidden: [], hasTools: false, specialistOnly: [], manifestName: null };
   const lines = fmMatch[1].split(/\r?\n/);
+  // The MCP server namespace is the manifest's own `name:`, which for a nested
+  // premium sub-plugin differs from its directory: premium-plugins/real-agent/
+  // plugins/loop/PLUGIN.md declares `name: real-agent-loop`, and the agents
+  // that hold its tools name them `mcp__plugin_real-agent-loop_real-agent-loop__*`.
+  // Used for the reachability set only, so the drift classifier's directory-keyed
+  // `all` set keeps its existing behaviour (Task 2132).
+  const nameMatch = fmMatch[1].match(/^name:\s*(\S+)\s*$/m);
+  const manifestName = nameMatch ? nameMatch[1] : null;
   const tools = [];
   const hidden = [];
+  const flags = {};
   let mode = null; // 'tools' | 'hidden' | null
+  let cur = null;
   let hasTools = false;
   for (const line of lines) {
-    if (/^tools:\s*\[\s*\]\s*$/.test(line)) { mode = null; continue; }
-    if (/^tools:\s*$/.test(line)) { mode = 'tools'; hasTools = true; continue; }
-    if (/^hidden:\s*$/.test(line)) { mode = 'hidden'; continue; }
-    if (/^[A-Za-z_]/.test(line)) { mode = null; continue; }
+    if (/^tools:\s*\[\s*\]\s*$/.test(line)) { mode = null; cur = null; continue; }
+    if (/^tools:\s*$/.test(line)) { mode = 'tools'; hasTools = true; cur = null; continue; }
+    if (/^hidden:\s*$/.test(line)) { mode = 'hidden'; cur = null; continue; }
+    if (/^[A-Za-z_]/.test(line)) { mode = null; cur = null; continue; }
     if (mode === 'tools') {
       const nameLine = line.match(/^\s+-\s+name:\s*(.+?)\s*$/);
-      if (nameLine) { tools.push(nameLine[1]); continue; }
+      if (nameLine) { cur = nameLine[1]; tools.push(cur); flags[cur] = {}; continue; }
+      const flagLine = line.match(/^\s+(adminAllowlist|publicAllowlist):\s*(true|false)\s*$/);
+      if (flagLine && cur) { flags[cur][flagLine[1]] = flagLine[2] === 'true'; continue; }
     }
     if (mode === 'hidden') {
       // Task 1998 — hidden entries carry the same `- name:` + `riskClass:`
@@ -95,7 +109,10 @@ function parsePluginManifest(rawManifest) {
       if (nameLine) hidden.push(nameLine[1]);
     }
   }
-  return { tools, hidden, hasTools };
+  const specialistOnly = tools.filter(
+    (t) => flags[t]?.adminAllowlist === false && flags[t]?.publicAllowlist === false,
+  );
+  return { tools, hidden, hasTools, specialistOnly, manifestName };
 }
 
 // Per-brand tool surface: walk platform/plugins (minus excludedPlugins) +
@@ -109,15 +126,17 @@ export function loadBrandToolSurface(maxyCodeRoot, excludedPlugins, shippedPremi
   const { PLATFORM_PLUGINS, PREMIUM_ROOT } = rootsFor(maxyCodeRoot);
   const all = new Set();
   const maxyPluginSet = new Set();
+  const specialistOnlyAll = new Set();
   const visit = (root, name) => {
     if (excludedPlugins.has(name)) return;
     const manifestPath = join(root, name, 'PLUGIN.md');
     if (!existsSync(manifestPath)) return;
-    const { tools, hidden, hasTools } = parsePluginManifest(readFileSync(manifestPath, 'utf-8'));
+    const { tools, hidden, hasTools, specialistOnly, manifestName } = parsePluginManifest(readFileSync(manifestPath, 'utf-8'));
     if (!hasTools && hidden.length === 0) return;
     maxyPluginSet.add(name);
     for (const t of tools) all.add(canonicalToolName(name, t));
     for (const h of hidden) all.add(canonicalToolName(name, h));
+    for (const s of specialistOnly) specialistOnlyAll.add(canonicalToolName(manifestName ?? name, s));
   };
   if (existsSync(PLATFORM_PLUGINS)) {
     for (const name of readdirSync(PLATFORM_PLUGINS).sort()) {
@@ -138,7 +157,53 @@ export function loadBrandToolSurface(maxyCodeRoot, excludedPlugins, shippedPremi
       }
     }
   }
-  return { all, maxyPluginSet };
+  return { all, maxyPluginSet, specialistOnlyAll };
+}
+
+// Task 2132 — the inverse of the drift check. A tool declared
+// `adminAllowlist: false` + `publicAllowlist: false` is reachable only
+// through a specialist's frontmatter `tools:` list. When no agent names it,
+// the tool can never be called: no error, no log line, no failed run. That is
+// a no-event failure, so it needs a standing check rather than an event.
+// `maxy-graph-write_neo4j_cypher` sat unreachable from Task 081 until 2132,
+// taking conversation-archive-enrich's wire step down with it.
+export function collectGrantedTools(agentDirs) {
+  const granted = new Set();
+  for (const dir of agentDirs) {
+    let entries;
+    try { entries = readdirSync(dir); } catch { continue; }
+    for (const entry of entries) {
+      if (!entry.endsWith('.md')) continue;
+      if (SKIP_AGENT_BASENAMES.has(basename(entry, '.md').toUpperCase())) continue;
+      const fm = readFileSync(join(dir, entry), 'utf-8').match(/^---\r?\n([\s\S]*?)\r?\n---/);
+      if (!fm) continue;
+      const toolsLine = parseSpecialistToolsLine(fm[1]);
+      if (!toolsLine) continue;
+      for (const t of splitToolList(toolsLine)) granted.add(t);
+    }
+  }
+  return granted;
+}
+
+// Tools deliberately reachable by no agent, each with the reason it is not a
+// mistake. Empty by construction: every tool that would have sat here was
+// fixed in Task 2132 — fourteen admin-called ones moved onto the admin
+// surface, the graph write tool onto the librarian. An entry added later must
+// name why the tool is deliberately callable by nobody, and an entry whose
+// tool has since been granted is itself reported, because a suppression that
+// outlives its cause re-creates the blind spot.
+const REACHABILITY_EXCEPTIONS = new Map([]);
+
+export function findUnreachableTools(specialistOnlyAll, granted) {
+  const unreachable = [];
+  const staleExceptions = [];
+  for (const tool of [...specialistOnlyAll].sort()) {
+    const isGranted = granted.has(tool);
+    const excepted = REACHABILITY_EXCEPTIONS.has(tool);
+    if (!isGranted && !excepted) unreachable.push(tool);
+    if (isGranted && excepted) staleExceptions.push(tool);
+  }
+  return { unreachable, staleExceptions };
 }
 
 // Per-brand specialist-agent dirs: platform templates ship with every brand;
@@ -277,12 +342,16 @@ export function runForBrand(maxyCodeRoot, brandName) {
     throw err;
   }
   const shippedSet = new Set(shipped);
-  const { all, maxyPluginSet } = loadBrandToolSurface(maxyCodeRoot, excludedPlugins, shippedSet);
+  const { all, maxyPluginSet, specialistOnlyAll } = loadBrandToolSurface(maxyCodeRoot, excludedPlugins, shippedSet);
   const agentDirs = collectSpecialistDirs(maxyCodeRoot, shippedSet);
   const { defects, inspected } = assertSpecialistDrift(agentDirs, all, maxyPluginSet, excludedPlugins);
   const blocking = defects.filter(d => d.reason !== 'brand-excluded-plugin');
   const stripList = defects.filter(d => d.reason === 'brand-excluded-plugin');
-  return { blocking, stripList, inspected };
+  const { unreachable, staleExceptions } = findUnreachableTools(
+    specialistOnlyAll,
+    collectGrantedTools(agentDirs),
+  );
+  return { blocking, stripList, inspected, unreachable, staleExceptions };
 }
 
 function main(maxyCodeRoot) {
@@ -306,14 +375,21 @@ function main(maxyCodeRoot) {
         : d.specialistPath;
       console.error(`[specialist-tool-surface] specialist=${rel} tool=${d.tool} reason=${d.reason} brand=${brandName}`);
     }
-    totalBlocking += result.blocking.length;
-    if (result.blocking.length === 0) {
+    for (const tool of result.unreachable) {
+      console.error(`[specialist-tool-surface] unreachable-tool=${tool} reason=granted-by-no-agent brand=${brandName}`);
+    }
+    for (const tool of result.staleExceptions) {
+      console.error(`[specialist-tool-surface] stale-reachability-exception=${tool} reason=now-granted brand=${brandName}`);
+    }
+    totalBlocking += result.blocking.length + result.unreachable.length + result.staleExceptions.length;
+    if (result.blocking.length === 0 && result.unreachable.length === 0 && result.staleExceptions.length === 0) {
       console.log(`[specialist-tool-surface] ok brand=${brandName} inspected=${result.inspected}`);
     }
   }
   if (totalBlocking > 0) {
     console.error(`[specialist-tool-surface] FAIL: ${totalBlocking} defect(s) across ${brands.length} brand(s).`);
     console.error(`  Rename the tool in the listed file to a registered namespace, or move the plugin off the brand's plugins.excluded list.`);
+    console.error(`  An unreachable-tool is declared adminAllowlist:false + publicAllowlist:false and named by no agent: grant it to the specialist that needs it, put it on the admin surface, or remove the declaration.`);
     process.exit(1);
   }
 }

package/payload/platform/scripts/seed-neo4j.sh

@@ -369,4 +369,45 @@ IDENT_DROPPED=$("$CYPHER_SHELL" -u "$NEO4J_USER" -p "$NEO4J_PASSWORD" -a "$NEO4J
     "MATCH (au:AdminUser) WHERE au.name IS NOT NULL REMOVE au.name RETURN count(au)" 2>/dev/null | tail -1 | tr -d ' \r')
 echo "  [identity-reconcile] namedExisting=${IDENT_NAMED:-0} createdOwned=${IDENT_CREATED:-0} droppedAuName=${IDENT_DROPPED:-0}"
 
+# ------------------------------------------------------------------
+# 8. Routine roster (Task 2130)
+# ------------------------------------------------------------------
+# Ten generic routines, seeded eventStatus='suspended' with nextRun NULL and no
+# channel or destination, so a fresh install has a catalogue to enable instead
+# of a blank /routines page. Running here rather than only at account creation
+# is what carries the roster to the EXISTING fleet: this script runs on every
+# upgrade, not just the first install.
+#
+# The roster, the MERGE and the whole [routine-seed] lifecycle live in
+# platform/lib/routine-templates so the sub-account path in the admin plugin
+# shares them verbatim. This script only supplies the process boundary; it logs
+# nothing itself.
+#
+# Never install-blocking, matching sections 5-7 above. An account with no
+# routines is degraded, not broken: the graph, the agent and every channel work,
+# and only /routines is empty. Aborting here would take down an install or a
+# whole-fleet upgrade over a transient Neo4j hiccup, after the schema, the root
+# :LocalBusiness and the owner :AdminUser had all already succeeded — and the
+# installer's shell() throws on any non-zero exit, so a failure here is not
+# recoverable further up.
+#
+# What makes that safe is that this change also ships the control: the
+# heartbeat's [schedule-audit] op=roster reconciles the expected roster against
+# what each account actually holds, every tick, naming the missing keys. A short
+# seed is loud whether or not it aborts the install, so blocking buys nothing
+# and costs a bricked upgrade.
+ROUTINE_SEED_CLI="$PROJECT_DIR/lib/routine-templates/dist/seed-cli.js"
+if [ ! -f "$ROUTINE_SEED_CLI" ]; then
+  echo "  [routine-seed] op=skipped reason=cli-missing path=$ROUTINE_SEED_CLI — platform/lib/routine-templates was not built before the payload was bundled; run 'npm run build:lib' in platform/ and re-bundle. /routines will be empty and [schedule-audit] op=roster will report every key missing." >&2
+elif ! command -v node &> /dev/null; then
+  echo "  [routine-seed] op=skipped reason=no-node — node is required by the routine-roster seed. /routines will be empty and [schedule-audit] op=roster will report every key missing." >&2
+else
+  NEO4J_URI="$NEO4J_URI" \
+  NEO4J_USER="$NEO4J_USER" \
+  NEO4J_PASSWORD="$NEO4J_PASSWORD" \
+  ROUTINE_SEED_ACCOUNT_ID="$ACCOUNT_ID" \
+    node "$ROUTINE_SEED_CLI" \
+    || echo "  [routine-seed] op=skipped reason=seed-failed — the routine roster did not seed; the account is otherwise fully provisioned. [schedule-audit] op=roster names the missing keys every tick, and the next upgrade re-seeds." >&2
+fi
+
 echo "  Done."

package/payload/platform/scripts/verify-skill-tool-surface.sh

@@ -58,6 +58,20 @@ EXPLICIT_OWNERSHIP = {
     "memory/document-ingest": "librarian",
     "memory/conversation-archive": "librarian",
     "memory/conversation-archive-enrich": "librarian",
+    # publish-site/SKILL.md:10 — "Invoked from `specialists:content-producer`".
+    # The admin plugin declares no `specialist:` field, so without this entry
+    # the skill defaults to admin-owned and its two tools resolve against the
+    # wrong surface (Task 2132).
+    "admin/publish-site": "content-producer",
+}
+
+# Generated catalogue skills. platform-architecture is assembled from the docs
+# mirror by scripts/assemble-architecture-skill.mjs and describes the whole
+# platform, so it names tools it never calls — a token there is documentation,
+# not a prescription. Token resolution does not apply; the forbidden-token rule
+# still does (Task 2132).
+CATALOGUE_SKILLS = {
+    "admin/platform-architecture",
 }
 
 # Skills that are explicitly admin-owned (loaded via plugin-read by the admin
@@ -138,6 +152,49 @@ def specialist_tools(specialist: str) -> set[str] | None:
     return {t for t in items if t}
 
 
+def scan_manifest_allowlists() -> tuple[set[str], set[str]]:
+    """Long-prefix names of (every declared tool, those declared
+    `adminAllowlist: true`).
+
+    The admin agent's surface is NOT the union of all enabled plugins: a tool
+    declared `adminAllowlist: false` is excluded from the admin spawn by
+    tool-surface.ts, so an admin-owned skill naming one prescribes a call its
+    own agent cannot make. That premise left fourteen tools unreachable and
+    invisible to this gate until Task 2132 — capabilities-here/SKILL.md names
+    its tool in the required backtick form and still passed.
+    """
+    declared: set[str] = set()
+    admin: set[str] = set()
+    for plugin in sorted(os.listdir(PLUGINS_DIR)):
+        manifest = os.path.join(PLUGINS_DIR, plugin, "PLUGIN.md")
+        if not os.path.exists(manifest):
+            continue
+        m = re.match(r"^---\n(.*?)\n---", open(manifest, encoding="utf-8").read(), re.S)
+        if not m:
+            continue
+        cur = None
+        in_tools = False
+        for line in m.group(1).split("\n"):
+            if re.match(r"^tools:\s*$", line):
+                in_tools = True
+                continue
+            if re.match(r"^[A-Za-z_]", line):
+                in_tools = False
+                cur = None
+                continue
+            if not in_tools:
+                continue
+            nm = re.match(r"^\s+-\s+name:\s*(.+?)\s*$", line)
+            if nm:
+                cur = nm.group(1)
+                declared.add(f"mcp__plugin_{plugin}_{plugin}__{cur}")
+                continue
+            aa = re.match(r"^\s+adminAllowlist:\s*(true|false)\s*$", line)
+            if aa and cur and aa.group(1) == "true":
+                admin.add(f"mcp__plugin_{plugin}_{plugin}__{cur}")
+    return declared, admin
+
+
 def extract_prescribed_tokens(text: str) -> set[str]:
     return set(TOKEN_RE.findall(text))
 
@@ -255,6 +312,7 @@ def main() -> int:
     summary: list[str] = []
     errors: list[str] = []
     pairs_checked = 0
+    all_declared_tools, admin_surface = scan_manifest_allowlists()
 
     for plugin in sorted(os.listdir(PLUGINS_DIR)):
         pdir = os.path.join(PLUGINS_DIR, plugin)
@@ -288,7 +346,24 @@ def main() -> int:
                 )
 
             if specialist is None:
-                # Admin-owned: only enforce forbidden-token rule.
+                # Admin-owned: forbidden-token rule, plus the admin surface.
+                # A prescribed tool that some manifest declares must also be
+                # `adminAllowlist: true`, or the admin cannot call it. Tokens
+                # no manifest declares are upstream bridges (Playwright and
+                # friends) and are left to the drift gate (Task 2132).
+                unresolved_admin = (
+                    []
+                    if ownership_key in CATALOGUE_SKILLS
+                    else sorted(
+                        t for t in prescribed
+                        if t in all_declared_tools and t not in admin_surface
+                    )
+                )
+                for tok in unresolved_admin:
+                    errors.append(
+                        f"[verify] skill={ownership_key} specialist=admin "
+                        f"unresolved={tok} reason=not-admin-allowlisted"
+                    )
                 for tok, ctx in forbidden:
                     errors.append(
                         f"[verify] skill={ownership_key} specialist=admin "
@@ -296,7 +371,8 @@ def main() -> int:
                     )
                 summary.append(
                     f"[verify] skill={ownership_key} specialist=admin (admin-owned) "
-                    f"tokens={len(prescribed)} forbidden={len(forbidden)}"
+                    f"tokens={len(prescribed)} unresolved={len(unresolved_admin)} "
+                    f"forbidden={len(forbidden)}"
                 )
                 continue
 
@@ -314,6 +390,19 @@ def main() -> int:
                     f"[verify] skill={ownership_key} specialist={specialist} "
                     f"unresolved={tok}"
                 )
+            # A skill that instructs execution of a tool-emitted `mergeCypher`
+            # must name the tool that executes it. The token rule above is
+            # name-based, so prose like "Run the `mergeCypher`" resolves
+            # nothing and passes — the blind spot that left
+            # conversation-archive-enrich's wire step unexecutable while this
+            # gate reported resolved=5/5 (Task 2132).
+            if "mergeCypher" in text and not any(
+                tok.endswith("write_neo4j_cypher") for tok in prescribed
+            ):
+                errors.append(
+                    f"[verify] skill={ownership_key} specialist={specialist} "
+                    f"mergecypher-unexecutable=no-write-cypher-tool-prescribed"
+                )
             for tok, ctx in forbidden:
                 errors.append(
                     f"[verify] skill={ownership_key} specialist={specialist} "

package/payload/platform/services/claude-session-manager/dist/canonical-tool-names.generated.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"canonical-tool-names.generated.d.ts","sourceRoot":"","sources":["../src/canonical-tool-names.generated.ts"],"names":[],"mappings":"AAQA,+EAA+E;AAC/E,eAAO,MAAM,gBAAgB,EAAE,SAAS,MAAM,EAyB7C,CAAA;AAED,gEAAgE;AAChE,eAAO,MAAM,yBAAyB,EAAE,SAAS,MAAM,EAmUtD,CAAA"}
+{"version":3,"file":"canonical-tool-names.generated.d.ts","sourceRoot":"","sources":["../src/canonical-tool-names.generated.ts"],"names":[],"mappings":"AAQA,+EAA+E;AAC/E,eAAO,MAAM,gBAAgB,EAAE,SAAS,MAAM,EAyB7C,CAAA;AAED,gEAAgE;AAChE,eAAO,MAAM,yBAAyB,EAAE,SAAS,MAAM,EAoUtD,CAAA"}

package/payload/platform/services/claude-session-manager/dist/canonical-tool-names.generated.js

@@ -298,6 +298,7 @@ export const CANONICAL_MAXY_TOOL_NAMES = [
     "mcp__plugin_scheduling_scheduling__schedule-get",
     "mcp__plugin_scheduling_scheduling__schedule-import-ics",
     "mcp__plugin_scheduling_scheduling__schedule-list",
+    "mcp__plugin_scheduling_scheduling__schedule-runs",
     "mcp__plugin_scheduling_scheduling__schedule-update",
     "mcp__plugin_scheduling_scheduling__time-resolve",
     "mcp__plugin_storage-broker_storage-broker__storage-d1-create",