@rubytech/create-sitedesk-code 0.1.523 → 0.1.525

package/payload/platform/plugins/scheduling/mcp/dist/tools/schedule-update.js

@@ -6,6 +6,60 @@ import { computeEmbedding } from "../lib/embedding.js";
 import cronParser from "cron-parser";
 const { parseExpression } = cronParser;
 import { validateAgentDispatch } from "../lib/agent-dispatch.js";
+/**
+ * Task 2134 — the status vocabulary, in one place.
+ *
+ * `suspended` is the reversible stop: the sweep selects `eventStatus =
+ * 'scheduled'` by equality in all four of its predicates
+ * (check-due-events.ts:502, :567, :704, :768), so a suspended row is excluded by
+ * construction and restoring `scheduled` re-arms it. It is the same literal Task
+ * 2106's dashboard controls write and the shipped routine roster seeds with; a
+ * second name would be a defect, not a synonym.
+ *
+ * `cancelled` is the terminal stop and belongs to `schedule-cancel`. The two are
+ * different intents and this list is what keeps them apart.
+ *
+ * The tool schema in index.ts is built from this array, so the enum the agent
+ * sees and the enum the library enforces cannot drift.
+ */
+export const EVENT_STATUSES = ["scheduled", "due", "completed", "cancelled", "suspended"];
+export function planResume(row, now) {
+    if (row.recurrence) {
+        // The event's own timezone governs, never the server's.
+        try {
+            const interval = parseExpression(row.recurrence, { currentDate: now, tz: row.timezone ?? undefined });
+            return { ok: true, nextRun: interval.next().toISOString() };
+        }
+        catch (err) {
+            const reason = err instanceof Error ? err.message : String(err);
+            return {
+                ok: false,
+                reason: "invalid-cron",
+                message: `Cannot resume: the schedule is no longer valid (${reason}). Change the recurrence first.`,
+            };
+        }
+    }
+    // A one-time routine has no cron to advance, and the sweep fires it on
+    // `e.startDate <= $now`. Resuming one whose date has passed dispatches it
+    // within the tick, so it is refused with the date named rather than run for a
+    // window the operator did not choose.
+    //
+    // The comparison is deliberately the SWEEP's, not an instant comparison.
+    // `startDate` is stored verbatim and can carry a non-UTC offset, and Cypher
+    // compares two strings lexically against a `$now` that is always
+    // `new Date().toISOString()`. `Date.parse` would disagree on exactly those
+    // rows: `2026-07-28T23:00:00-05:00` is a later INSTANT than a 03:00Z now but
+    // an earlier STRING, so an instant comparison would resume it and the next
+    // tick would dispatch it — the missed window this refusal exists to prevent.
+    if (row.startDate && row.startDate <= now.toISOString()) {
+        return {
+            ok: false,
+            reason: "past-one-time",
+            message: `Cannot resume: this one-time routine was due at ${row.startDate}, so resuming it would run it now. Cancel it, or set a new date.`,
+        };
+    }
+    return { ok: true, nextRun: null };
+}
 export async function scheduleUpdate(params) {
     const { accountId, eventId, note, skipNext, action, agentDispatch, ...updates } = params;
     // Task 1378 — an event carries EITHER an action OR an agent dispatch. Reject a
@@ -59,6 +113,79 @@ export async function scheduleUpdate(params) {
             await checkSession.close();
         }
     }
+    // Task 2134 — one read serving two callers. A status change needs the row's
+    // current status and its forward schedule; a recurrence change needs the
+    // row's stored timezone, which the recompute below used to ignore. Only these
+    // two cases pay for the read; every other update keeps its single round trip.
+    const ids = { eventId: eventId.slice(0, 8), acct: accountId.slice(0, 8) };
+    let stored = null;
+    if (updates.eventStatus !== undefined || updates.recurrence !== undefined) {
+        const readSession = getSession();
+        try {
+            const read = await readSession.run(`MATCH (e:Event {eventId: $eventId, accountId: $accountId})
+         RETURN e.eventStatus AS eventStatus, e.recurrence AS recurrence,
+                e.timezone AS timezone, e.startDate AS startDate`, { eventId, accountId });
+            if (read.records.length > 0) {
+                const r = read.records[0];
+                stored = {
+                    eventStatus: (r.get("eventStatus") ?? null),
+                    recurrence: (r.get("recurrence") ?? null),
+                    timezone: (r.get("timezone") ?? null),
+                    startDate: (r.get("startDate") ?? null),
+                };
+            }
+        }
+        finally {
+            await readSession.close();
+        }
+    }
+    // The zone the cron recompute runs in: what the caller supplied, else what
+    // the routine stores. Passing `undefined` here recomputes in the server's
+    // zone, which is what made a re-arm land on the wrong occurrence.
+    const effectiveTimezone = updates.timezone !== undefined ? updates.timezone : stored?.timezone ?? null;
+    let statusPlan = null;
+    if (updates.eventStatus !== undefined) {
+        const target = updates.eventStatus;
+        // An event created before the property existed carries no status. The list
+        // surface reads that as 'scheduled' (index.ts:227); so does this gate.
+        const current = stored?.eventStatus ?? "scheduled";
+        const head = `[schedule-update] op=status eventId=${ids.eventId} acct=${ids.acct} from=${current} to=${target}`;
+        const refuse = (reason, message) => {
+            console.error(`${head} outcome=refused reason=${reason}`);
+            throw new Error(message);
+        };
+        if (!EVENT_STATUSES.includes(target)) {
+            refuse("out-of-enum", `Invalid eventStatus "${target}" — permitted values are ${EVENT_STATUSES.join(", ")}.`);
+        }
+        if (stored === null) {
+            // The id matched no :Event. eventStatus has no meeting equivalent, so the
+            // call falls through to the meeting path below and fails there with the
+            // message that names what the id actually is.
+            console.error(`${head} outcome=refused reason=no-event`);
+        }
+        else if (current === target) {
+            refuse(`already-${target}`, `No change: this routine is already ${target}.`);
+        }
+        else if (current === "scheduled" && target === "suspended") {
+            statusPlan = { kind: "suspend" };
+        }
+        else if (current === "suspended" && target === "scheduled") {
+            const plan = planResume({
+                recurrence: updates.recurrence !== undefined ? updates.recurrence : stored.recurrence,
+                timezone: effectiveTimezone,
+                startDate: stored.startDate,
+            }, new Date());
+            if (!plan.ok)
+                refuse(plan.reason, plan.message);
+            statusPlan = { kind: "resume", nextRun: plan.nextRun };
+        }
+        else if (target === "cancelled") {
+            refuse("use-schedule-cancel", "schedule-update cannot cancel a routine — use schedule-cancel, which ends the series. schedule-update moves eventStatus only between \"scheduled\" (running) and \"suspended\" (paused, reversible).");
+        }
+        else {
+            refuse("unsupported-transition", `Cannot change eventStatus from "${current}" to "${target}" — schedule-update moves it only between "scheduled" (running) and "suspended" (paused, reversible). A ${current} routine cannot be re-armed.`);
+        }
+    }
     // Build SET clause from provided updates
     const setClauses = ["e.updatedAt = $now"];
     const queryParams = {
@@ -86,27 +213,42 @@ export async function scheduleUpdate(params) {
         setClauses.push("e.location = $location");
         queryParams.location = updates.location;
     }
-    if (updates.eventStatus !== undefined) {
+    // Task 2134 — the status write happens only through the gate above, so a
+    // refused transition never reaches the SET clause.
+    if (statusPlan) {
         setClauses.push("e.eventStatus = $eventStatus");
         queryParams.eventStatus = updates.eventStatus;
+        // Task 2106's resume-all selects `suspended AND suspendedInBulk = true`, so
+        // a routine paused or resumed one at a time must carry no marker. Same
+        // write as the dashboard's single-routine controls (routines.ts:441, :497).
+        setClauses.push("e.suspendedInBulk = null");
     }
+    let recurrenceSetNextRun = false;
     if (updates.recurrence !== undefined) {
         // Validate new cron expression
         try {
             const interval = parseExpression(updates.recurrence, {
                 currentDate: new Date(),
-                tz: updates.timezone ?? undefined,
+                tz: effectiveTimezone ?? undefined,
             });
             const newNextRun = interval.next().toISOString();
             setClauses.push("e.recurrence = $recurrence");
             setClauses.push("e.nextRun = $newNextRun");
             queryParams.recurrence = updates.recurrence;
             queryParams.newNextRun = newNextRun;
+            recurrenceSetNextRun = true;
         }
         catch (err) {
             throw new Error(`Invalid recurrence expression: "${updates.recurrence}" — ${err instanceof Error ? err.message : String(err)}`);
         }
     }
+    // One writer per property. When the cron branch has already recomputed
+    // nextRun from the same effective recurrence and zone, a second SET clause on
+    // e.nextRun would silently win over the first.
+    if (statusPlan?.kind === "resume" && statusPlan.nextRun !== null && !recurrenceSetNextRun) {
+        setClauses.push("e.nextRun = $resumeNextRun");
+        queryParams.resumeNextRun = statusPlan.nextRun;
+    }
     if (updates.timezone !== undefined) {
         setClauses.push("e.timezone = $timezone");
         queryParams.timezone = updates.timezone;
@@ -179,9 +321,18 @@ export async function scheduleUpdate(params) {
         setClauses.push("e.actionTool = null");
         setClauses.push("e.actionArgs = null");
     }
-    if (note) {
+    // One append, however many lines it carries. Two appendNotesCapped clauses in
+    // the same SET both write e.notes, and the later would drop the earlier.
+    const noteLines = [];
+    if (statusPlan?.kind === "suspend")
+        noteLines.push("Suspended from chat");
+    if (statusPlan?.kind === "resume")
+        noteLines.push("Resumed from chat");
+    if (note)
+        noteLines.push(note);
+    if (noteLines.length > 0) {
         setClauses.push(appendNotesCapped("e", "noteEntry"));
-        queryParams.noteEntry = `\n[${queryParams.now}] ${note}`;
+        queryParams.noteEntry = noteLines.map((line) => `\n[${queryParams.now}] ${line}`).join("");
     }
     // Recompute embedding if name or description changed
     if (updates.name !== undefined || updates.description !== undefined) {
@@ -197,6 +348,23 @@ export async function scheduleUpdate(params) {
         const result = await neo4jSession.run(`MATCH (e:Event {eventId: $eventId, accountId: $accountId})
        SET ${setClauses.join(", ")}
        RETURN e`, queryParams);
+        // Task 2134 — logged after the write lands, so an applied line is never
+        // emitted for a transition the database refused. Refusals log at the
+        // decision, before anything is written.
+        if (result.records.length > 0 && statusPlan) {
+            console.error(`[schedule-update] op=status eventId=${ids.eventId} acct=${ids.acct} ` +
+                `from=${stored?.eventStatus ?? "scheduled"} to=${updates.eventStatus} outcome=applied`);
+            if (statusPlan.kind === "resume") {
+                // aheadMin is the measured distance from now to the moment the sweep
+                // will next select this row: the recomputed nextRun for a recurring
+                // routine, the untouched startDate for a one-time one. At or below zero
+                // is the replay signature, caught here rather than at the next tick.
+                const fires = statusPlan.nextRun ?? stored?.startDate ?? null;
+                const aheadMin = fires ? String(Math.round((Date.parse(fires) - Date.now()) / 60_000)) : "unknown";
+                console.error(`[schedule-update] op=resume eventId=${ids.eventId} acct=${ids.acct} ` +
+                    `tz=${effectiveTimezone ?? "null"} nextRun=${statusPlan.nextRun ?? "unchanged"} aheadMin=${aheadMin}`);
+            }
+        }
         if (result.records.length === 0) {
             // Task 2100 — the id may be a meeting uid. A :Meeting carries only
             // title/startsAt/endsAt/location as editable fields, and its uid is the

package/payload/platform/plugins/scheduling/mcp/dist/tools/schedule-update.js.map

@@ -1 +1 @@
-{"version":3,"file":"schedule-update.js","sourceRoot":"","sources":["../../src/tools/schedule-update.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAC7C,OAAO,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AACxD,OAAO,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AACvD,OAAO,UAAU,MAAM,aAAa,CAAC;AACrC,MAAM,EAAE,eAAe,EAAE,GAAG,UAAU,CAAC;AAGvC,OAAO,EAAE,qBAAqB,EAAE,MAAM,0BAA0B,CAAC;AAmBjE,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,MAA4B;IAC/D,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,aAAa,EAAE,GAAG,OAAO,EAAE,GAAG,MAAM,CAAC;IAEzF,+EAA+E;IAC/E,gFAAgF;IAChF,yEAAyE;IACzE,IAAI,MAAM,IAAI,IAAI,IAAI,aAAa,IAAI,IAAI,EAAE,CAAC;QAC5C,MAAM,IAAI,KAAK,CAAC,kFAAkF,CAAC,CAAC;IACtG,CAAC;IAED,sDAAsD;IACtD,IAAI,QAAQ,EAAE,CAAC;QACb,MAAM,YAAY,GAAG,UAAU,EAAE,CAAC;QAClC,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,MAAM,YAAY,CAAC,GAAG,CAClC;yFACiF,EACjF,EAAE,OAAO,EAAE,SAAS,EAAE,CACvB,CAAC;YACF,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAC/B,MAAM,IAAI,KAAK,CAAC,oBAAoB,OAAO,EAAE,CAAC,CAAC;YACjD,CAAC;YACD,MAAM,GAAG,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;YAC/C,IAAI,CAAC,GAAG,EAAE,CAAC;gBACT,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;YACnE,CAAC;YAED,yCAAyC;YACzC,MAAM,cAAc,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,CAAW,CAAC;YACjE,MAAM,EAAE,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,UAAU,CAAkB,CAAC;YAC7D,MAAM,QAAQ,GAAG,eAAe,CAAC,GAAG,EAAE;gBACpC,WAAW,EAAE,IAAI,IAAI,CAAC,cAAc,CAAC;gBACrC,EAAE,EAAE,EAAE,IAAI,SAAS;aACpB,CAAC,CAAC;YACH,MAAM,UAAU,GAAG,QAAQ,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;YACjD,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;YAErC,MAAM,WAAW,GAAG,UAAU,EAAE,CAAC;YACjC,IAAI,CAAC;gBACH,MAAM,WAAW,CAAC,GAAG,CACnB;;;;iBAIO,iBAAiB,CAAC,GAAG,EAAE,WAAW,CAAC,EAAE,EAC5C;oBACE,OAAO;oBACP,SAAS;oBACT,UAAU;oBACV,GAAG;oBACH,SAAS,EAAE,MAAM,GAAG,kCAAkC,cAAc,SAAS,UAAU,GAAG;iBAC3F,CACF,CAAC;YACJ,CAAC;oBAAS,CAAC;gBACT,MAAM,WAAW,CAAC,KAAK,EAAE,CAAC;YAC5B,CAAC;YACD,OAAO;QACT,CAAC;gBAAS,CAAC;YACT,MAAM,YAAY,CAAC,KAAK,EAAE,CAAC;QAC7B,CAAC;IACH,CAAC;IAED,yCAAyC;IACzC,MAAM,UAAU,GAAa,CAAC,oBAAoB,CAAC,CAAC;IACpD,MAAM,WAAW,GAA4B;QAC3C,OAAO;QACP,SAAS;QACT,GAAG,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;KAC9B,CAAC;IAEF,IAAI,OAAO,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QAC/B,UAAU,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;QAClC,WAAW,CAAC,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;IAClC,CAAC;IACD,IAAI,OAAO,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;QACtC,UAAU,CAAC,IAAI,CAAC,8BAA8B,CAAC,CAAC;QAChD,WAAW,CAAC,WAAW,GAAG,OAAO,CAAC,WAAW,CAAC;IAChD,CAAC;IACD,IAAI,OAAO,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;QACpC,UAAU,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC;QAC5C,WAAW,CAAC,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC;IAC5C,CAAC;IACD,IAAI,OAAO,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;QAClC,UAAU,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;QACxC,WAAW,CAAC,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;IACxC,CAAC;IACD,IAAI,OAAO,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;QACnC,UAAU,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC;QAC1C,WAAW,CAAC,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC;IAC1C,CAAC;IACD,IAAI,OAAO,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;QACtC,UAAU,CAAC,IAAI,CAAC,8BAA8B,CAAC,CAAC;QAChD,WAAW,CAAC,WAAW,GAAG,OAAO,CAAC,WAAW,CAAC;IAChD,CAAC;IACD,IAAI,OAAO,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;QACrC,+BAA+B;QAC/B,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,eAAe,CAAC,OAAO,CAAC,UAAU,EAAE;gBACnD,WAAW,EAAE,IAAI,IAAI,EAAE;gBACvB,EAAE,EAAE,OAAO,CAAC,QAAQ,IAAI,SAAS;aAClC,CAAC,CAAC;YACH,MAAM,UAAU,GAAG,QAAQ,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;YACjD,UAAU,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAC;YAC9C,UAAU,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC;YAC3C,WAAW,CAAC,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC;YAC5C,WAAW,CAAC,UAAU,GAAG,UAAU,CAAC;QACtC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,IAAI,KAAK,CACb,mCAAmC,OAAO,CAAC,UAAU,OAAO,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAC/G,CAAC;QACJ,CAAC;IACH,CAAC;IACD,IAAI,OAAO,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;QACnC,UAAU,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC;QAC1C,WAAW,CAAC,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC;IAC1C,CAAC;IAED,iCAAiC;IACjC,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;QACpB,mCAAmC;QACnC,UAAU,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC;QACzC,UAAU,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC;QACvC,UAAU,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC;IACzC,CAAC;SAAM,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QAChC,IAAI,CAAC,MAAM,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;YACnC,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;QACrE,CAAC;QACD,MAAM,YAAY,GAAG,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC;QAC/C,IAAI,CAAC,YAAY,EAAE,CAAC;YAClB,MAAM,IAAI,KAAK,CAAC,0EAA0E,CAAC,CAAC;QAC9F,CAAC;QACD,MAAM,WAAW,GAAG,OAAO,CAAC,YAAY,EAAE,SAAS,CAAC,CAAC;QACrD,MAAM,SAAS,GAAG,OAAO,CAAC,WAAW,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;QACtD,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,WAAW,GAAG,GAAG,CAAC,EAAE,CAAC;YAC7C,MAAM,IAAI,KAAK,CAAC,+BAA+B,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;QAClE,CAAC;QACD,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;YAC3B,MAAM,IAAI,KAAK,CAAC,sCAAsC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;QACzE,CAAC;QACD,UAAU,CAAC,IAAI,CAAC,gCAAgC,CAAC,CAAC;QAClD,UAAU,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAC;QAC9C,WAAW,CAAC,YAAY,GAAG,MAAM,CAAC,MAAM,CAAC;QACzC,WAAW,CAAC,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC;QACrC,IAAI,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACvD,UAAU,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAC;YAC9C,WAAW,CAAC,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACvD,CAAC;aAAM,CAAC;YACN,UAAU,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC;QACzC,CAAC;QACD,0EAA0E;QAC1E,6BAA6B;QAC7B,UAAU,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC;QACzC,UAAU,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC;QAC7C,UAAU,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;IAC1C,CAAC;IAED,iFAAiF;IACjF,IAAI,aAAa,KAAK,IAAI,EAAE,CAAC;QAC3B,UAAU,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC;QACzC,UAAU,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC;QAC7C,UAAU,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;IAC1C,CAAC;SAAM,IAAI,aAAa,KAAK,SAAS,EAAE,CAAC;QACvC,qBAAqB,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC;QAChD,UAAU,CAAC,IAAI,CAAC,gCAAgC,CAAC,CAAC;QAClD,UAAU,CAAC,IAAI,CAAC,wCAAwC,CAAC,CAAC;QAC1D,UAAU,CAAC,IAAI,CAAC,8BAA8B,CAAC,CAAC;QAChD,WAAW,CAAC,YAAY,GAAG,aAAa,CAAC,OAAO,CAAC;QACjD,WAAW,CAAC,gBAAgB,GAAG,aAAa,CAAC,WAAW,CAAC;QACzD,WAAW,CAAC,WAAW,GAAG,aAAa,CAAC,MAAM,CAAC;QAC/C,sEAAsE;QACtE,yEAAyE;QACzE,yEAAyE;QACzE,2EAA2E;QAC3E,wEAAwE;QACxE,wEAAwE;QACxE,kEAAkE;QAClE,wDAAwD;QACxD,UAAU,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC;QAC3C,0DAA0D;QAC1D,UAAU,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC;QACzC,UAAU,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC;QACvC,UAAU,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC;IACzC,CAAC;IAED,IAAI,IAAI,EAAE,CAAC;QACT,UAAU,CAAC,IAAI,CAAC,iBAAiB,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC,CAAC;QACrD,WAAW,CAAC,SAAS,GAAG,MAAM,WAAW,CAAC,GAAG,KAAK,IAAI,EAAE,CAAC;IAC3D,CAAC;IAED,qDAAqD;IACrD,IAAI,OAAO,CAAC,IAAI,KAAK,SAAS,IAAI,OAAO,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;QACpE,MAAM,KAAK,GAAG,CAAC,UAAU,OAAO,CAAC,IAAI,IAAI,EAAE,EAAE,EAAE,OAAO,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAC1F,MAAM,SAAS,GAAG,MAAM,gBAAgB,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;QAC5D,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACzB,UAAU,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC;YAC5C,WAAW,CAAC,SAAS,GAAG,SAAS,CAAC;QACpC,CAAC;IACH,CAAC;IAED,MAAM,YAAY,GAAG,UAAU,EAAE,CAAC;IAClC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,GAAG,CACnC;aACO,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC;gBAClB,EACV,WAAW,CACZ,CAAC;QAEF,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAChC,mEAAmE;YACnE,wEAAwE;YACxE,0EAA0E;YAC1E,2EAA2E;YAC3E,0EAA0E;YAC1E,oCAAoC;YACpC,MAAM,WAAW,GAAa,EAAE,CAAC;YACjC,MAAM,aAAa,GAA4B,EAAE,EAAE,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC;YAC1E,IAAI,OAAO,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;gBAC/B,WAAW,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;gBACrC,aAAa,CAAC,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC;YACrC,CAAC;YACD,IAAI,OAAO,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;gBACpC,WAAW,CAAC,IAAI,CAAC,kCAAkC,CAAC,CAAC;gBACrD,aAAa,CAAC,QAAQ,GAAG,OAAO,CAAC,SAAS,CAAC;YAC7C,CAAC;YACD,IAAI,OAAO,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;gBAClC,WAAW,CAAC,IAAI,CAAC,8BAA8B,CAAC,CAAC;gBACjD,aAAa,CAAC,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;YACzC,CAAC;YACD,IAAI,OAAO,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;gBACnC,WAAW,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC;gBAC3C,aAAa,CAAC,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC;YAC5C,CAAC;YACD,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAC7B,uEAAuE;gBACvE,oEAAoE;gBACpE,sEAAsE;gBACtE,yDAAyD;gBACzD,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,GAAG,CACnC,yEAAyE,EACzE,EAAE,EAAE,EAAE,OAAO,EAAE,SAAS,EAAE,CAC3B,CAAC;gBACF,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBAC9B,MAAM,IAAI,KAAK,CACb,GAAG,OAAO,iFAAiF,CAC5F,CAAC;gBACJ,CAAC;gBACD,MAAM,IAAI,KAAK,CAAC,oBAAoB,OAAO,EAAE,CAAC,CAAC;YACjD,CAAC;YACD,WAAW,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC;YAE7C,MAAM,aAAa,GAAG,MAAM,YAAY,CAAC,GAAG,CAC1C;eACO,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC;6BACR,EACrB,aAAa,CACd,CAAC;YACF,IAAI,aAAa,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACvC,MAAM,IAAI,KAAK,CAAC,oBAAoB,OAAO,EAAE,CAAC,CAAC;YACjD,CAAC;YACD,OAAO,CAAC,KAAK,CAAC,yCAAyC,OAAO,WAAW,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,CAAC;QACrG,CAAC;IACH,CAAC;YAAS,CAAC;QACT,MAAM,YAAY,CAAC,KAAK,EAAE,CAAC;IAC7B,CAAC;AACH,CAAC"}
+{"version":3,"file":"schedule-update.js","sourceRoot":"","sources":["../../src/tools/schedule-update.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAC7C,OAAO,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AACxD,OAAO,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AACvD,OAAO,UAAU,MAAM,aAAa,CAAC;AACrC,MAAM,EAAE,eAAe,EAAE,GAAG,UAAU,CAAC;AAGvC,OAAO,EAAE,qBAAqB,EAAE,MAAM,0BAA0B,CAAC;AAEjE;;;;;;;;;;;;;;;GAeG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,WAAW,EAAE,KAAK,EAAE,WAAW,EAAE,WAAW,EAAE,WAAW,CAAU,CAAC;AAuCnG,MAAM,UAAU,UAAU,CACxB,GAAqF,EACrF,GAAS;IAET,IAAI,GAAG,CAAC,UAAU,EAAE,CAAC;QACnB,wDAAwD;QACxD,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,eAAe,CAAC,GAAG,CAAC,UAAU,EAAE,EAAE,WAAW,EAAE,GAAG,EAAE,EAAE,EAAE,GAAG,CAAC,QAAQ,IAAI,SAAS,EAAE,CAAC,CAAC;YACtG,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC;QAC9D,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,MAAM,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAChE,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,MAAM,EAAE,cAAc;gBACtB,OAAO,EAAE,mDAAmD,MAAM,iCAAiC;aACpG,CAAC;QACJ,CAAC;IACH,CAAC;IACD,uEAAuE;IACvE,0EAA0E;IAC1E,8EAA8E;IAC9E,sCAAsC;IACtC,EAAE;IACF,yEAAyE;IACzE,4EAA4E;IAC5E,iEAAiE;IACjE,2EAA2E;IAC3E,6EAA6E;IAC7E,2EAA2E;IAC3E,6EAA6E;IAC7E,IAAI,GAAG,CAAC,SAAS,IAAI,GAAG,CAAC,SAAS,IAAI,GAAG,CAAC,WAAW,EAAE,EAAE,CAAC;QACxD,OAAO;YACL,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,eAAe;YACvB,OAAO,EAAE,mDAAmD,GAAG,CAAC,SAAS,kEAAkE;SAC5I,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;AACrC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,MAA4B;IAC/D,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,aAAa,EAAE,GAAG,OAAO,EAAE,GAAG,MAAM,CAAC;IAEzF,+EAA+E;IAC/E,gFAAgF;IAChF,yEAAyE;IACzE,IAAI,MAAM,IAAI,IAAI,IAAI,aAAa,IAAI,IAAI,EAAE,CAAC;QAC5C,MAAM,IAAI,KAAK,CAAC,kFAAkF,CAAC,CAAC;IACtG,CAAC;IAED,sDAAsD;IACtD,IAAI,QAAQ,EAAE,CAAC;QACb,MAAM,YAAY,GAAG,UAAU,EAAE,CAAC;QAClC,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,MAAM,YAAY,CAAC,GAAG,CAClC;yFACiF,EACjF,EAAE,OAAO,EAAE,SAAS,EAAE,CACvB,CAAC;YACF,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAC/B,MAAM,IAAI,KAAK,CAAC,oBAAoB,OAAO,EAAE,CAAC,CAAC;YACjD,CAAC;YACD,MAAM,GAAG,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;YAC/C,IAAI,CAAC,GAAG,EAAE,CAAC;gBACT,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;YACnE,CAAC;YAED,yCAAyC;YACzC,MAAM,cAAc,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,CAAW,CAAC;YACjE,MAAM,EAAE,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,UAAU,CAAkB,CAAC;YAC7D,MAAM,QAAQ,GAAG,eAAe,CAAC,GAAG,EAAE;gBACpC,WAAW,EAAE,IAAI,IAAI,CAAC,cAAc,CAAC;gBACrC,EAAE,EAAE,EAAE,IAAI,SAAS;aACpB,CAAC,CAAC;YACH,MAAM,UAAU,GAAG,QAAQ,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;YACjD,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;YAErC,MAAM,WAAW,GAAG,UAAU,EAAE,CAAC;YACjC,IAAI,CAAC;gBACH,MAAM,WAAW,CAAC,GAAG,CACnB;;;;iBAIO,iBAAiB,CAAC,GAAG,EAAE,WAAW,CAAC,EAAE,EAC5C;oBACE,OAAO;oBACP,SAAS;oBACT,UAAU;oBACV,GAAG;oBACH,SAAS,EAAE,MAAM,GAAG,kCAAkC,cAAc,SAAS,UAAU,GAAG;iBAC3F,CACF,CAAC;YACJ,CAAC;oBAAS,CAAC;gBACT,MAAM,WAAW,CAAC,KAAK,EAAE,CAAC;YAC5B,CAAC;YACD,OAAO;QACT,CAAC;gBAAS,CAAC;YACT,MAAM,YAAY,CAAC,KAAK,EAAE,CAAC;QAC7B,CAAC;IACH,CAAC;IAED,4EAA4E;IAC5E,yEAAyE;IACzE,8EAA8E;IAC9E,8EAA8E;IAC9E,MAAM,GAAG,GAAG,EAAE,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;IAC1E,IAAI,MAAM,GACR,IAAI,CAAC;IACP,IAAI,OAAO,CAAC,WAAW,KAAK,SAAS,IAAI,OAAO,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;QAC1E,MAAM,WAAW,GAAG,UAAU,EAAE,CAAC;QACjC,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,WAAW,CAAC,GAAG,CAChC;;iEAEyD,EACzD,EAAE,OAAO,EAAE,SAAS,EAAE,CACvB,CAAC;YACF,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC5B,MAAM,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;gBAC1B,MAAM,GAAG;oBACP,WAAW,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,aAAa,CAAC,IAAI,IAAI,CAAkB;oBAC5D,UAAU,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,YAAY,CAAC,IAAI,IAAI,CAAkB;oBAC1D,QAAQ,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,IAAI,CAAkB;oBACtD,SAAS,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,IAAI,CAAkB;iBACzD,CAAC;YACJ,CAAC;QACH,CAAC;gBAAS,CAAC;YACT,MAAM,WAAW,CAAC,KAAK,EAAE,CAAC;QAC5B,CAAC;IACH,CAAC;IAED,2EAA2E;IAC3E,0EAA0E;IAC1E,kEAAkE;IAClE,MAAM,iBAAiB,GAAG,OAAO,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,QAAQ,IAAI,IAAI,CAAC;IAQvG,IAAI,UAAU,GAAsB,IAAI,CAAC;IACzC,IAAI,OAAO,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;QACtC,MAAM,MAAM,GAAG,OAAO,CAAC,WAAqB,CAAC;QAC7C,2EAA2E;QAC3E,uEAAuE;QACvE,MAAM,OAAO,GAAG,MAAM,EAAE,WAAW,IAAI,WAAW,CAAC;QACnD,MAAM,IAAI,GAAG,uCAAuC,GAAG,CAAC,OAAO,SAAS,GAAG,CAAC,IAAI,SAAS,OAAO,OAAO,MAAM,EAAE,CAAC;QAChH,MAAM,MAAM,GAAG,CAAC,MAAc,EAAE,OAAe,EAAS,EAAE;YACxD,OAAO,CAAC,KAAK,CAAC,GAAG,IAAI,2BAA2B,MAAM,EAAE,CAAC,CAAC;YAC1D,MAAM,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC;QAC3B,CAAC,CAAC;QAEF,IAAI,CAAE,cAAoC,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;YAC5D,MAAM,CACJ,aAAa,EACb,wBAAwB,MAAM,4BAA4B,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CACvF,CAAC;QACJ,CAAC;QACD,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;YACpB,0EAA0E;YAC1E,wEAAwE;YACxE,8CAA8C;YAC9C,OAAO,CAAC,KAAK,CAAC,GAAG,IAAI,kCAAkC,CAAC,CAAC;QAC3D,CAAC;aAAM,IAAI,OAAO,KAAK,MAAM,EAAE,CAAC;YAC9B,MAAM,CAAC,WAAW,MAAM,EAAE,EAAE,sCAAsC,MAAM,GAAG,CAAC,CAAC;QAC/E,CAAC;aAAM,IAAI,OAAO,KAAK,WAAW,IAAI,MAAM,KAAK,WAAW,EAAE,CAAC;YAC7D,UAAU,GAAG,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;QACnC,CAAC;aAAM,IAAI,OAAO,KAAK,WAAW,IAAI,MAAM,KAAK,WAAW,EAAE,CAAC;YAC7D,MAAM,IAAI,GAAG,UAAU,CACrB;gBACE,UAAU,EAAE,OAAO,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,UAAU;gBACrF,QAAQ,EAAE,iBAAiB;gBAC3B,SAAS,EAAE,MAAM,CAAC,SAAS;aAC5B,EACD,IAAI,IAAI,EAAE,CACX,CAAC;YACF,IAAI,CAAC,IAAI,CAAC,EAAE;gBAAE,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;YAChD,UAAU,GAAG,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAG,IAA6C,CAAC,OAAO,EAAE,CAAC;QACnG,CAAC;aAAM,IAAI,MAAM,KAAK,WAAW,EAAE,CAAC;YAClC,MAAM,CACJ,qBAAqB,EACrB,sMAAsM,CACvM,CAAC;QACJ,CAAC;aAAM,CAAC;YACN,MAAM,CACJ,wBAAwB,EACxB,mCAAmC,OAAO,SAAS,MAAM,2GAA2G,OAAO,8BAA8B,CAC1M,CAAC;QACJ,CAAC;IACH,CAAC;IAED,yCAAyC;IACzC,MAAM,UAAU,GAAa,CAAC,oBAAoB,CAAC,CAAC;IACpD,MAAM,WAAW,GAA4B;QAC3C,OAAO;QACP,SAAS;QACT,GAAG,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;KAC9B,CAAC;IAEF,IAAI,OAAO,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QAC/B,UAAU,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;QAClC,WAAW,CAAC,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;IAClC,CAAC;IACD,IAAI,OAAO,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;QACtC,UAAU,CAAC,IAAI,CAAC,8BAA8B,CAAC,CAAC;QAChD,WAAW,CAAC,WAAW,GAAG,OAAO,CAAC,WAAW,CAAC;IAChD,CAAC;IACD,IAAI,OAAO,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;QACpC,UAAU,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC;QAC5C,WAAW,CAAC,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC;IAC5C,CAAC;IACD,IAAI,OAAO,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;QAClC,UAAU,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;QACxC,WAAW,CAAC,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;IACxC,CAAC;IACD,IAAI,OAAO,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;QACnC,UAAU,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC;QAC1C,WAAW,CAAC,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC;IAC1C,CAAC;IACD,yEAAyE;IACzE,mDAAmD;IACnD,IAAI,UAAU,EAAE,CAAC;QACf,UAAU,CAAC,IAAI,CAAC,8BAA8B,CAAC,CAAC;QAChD,WAAW,CAAC,WAAW,GAAG,OAAO,CAAC,WAAW,CAAC;QAC9C,4EAA4E;QAC5E,uEAAuE;QACvE,4EAA4E;QAC5E,UAAU,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC;IAC9C,CAAC;IACD,IAAI,oBAAoB,GAAG,KAAK,CAAC;IACjC,IAAI,OAAO,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;QACrC,+BAA+B;QAC/B,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,eAAe,CAAC,OAAO,CAAC,UAAU,EAAE;gBACnD,WAAW,EAAE,IAAI,IAAI,EAAE;gBACvB,EAAE,EAAE,iBAAiB,IAAI,SAAS;aACnC,CAAC,CAAC;YACH,MAAM,UAAU,GAAG,QAAQ,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;YACjD,UAAU,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAC;YAC9C,UAAU,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC;YAC3C,WAAW,CAAC,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC;YAC5C,WAAW,CAAC,UAAU,GAAG,UAAU,CAAC;YACpC,oBAAoB,GAAG,IAAI,CAAC;QAC9B,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,IAAI,KAAK,CACb,mCAAmC,OAAO,CAAC,UAAU,OAAO,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAC/G,CAAC;QACJ,CAAC;IACH,CAAC;IACD,uEAAuE;IACvE,8EAA8E;IAC9E,+CAA+C;IAC/C,IAAI,UAAU,EAAE,IAAI,KAAK,QAAQ,IAAI,UAAU,CAAC,OAAO,KAAK,IAAI,IAAI,CAAC,oBAAoB,EAAE,CAAC;QAC1F,UAAU,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAC;QAC9C,WAAW,CAAC,aAAa,GAAG,UAAU,CAAC,OAAO,CAAC;IACjD,CAAC;IACD,IAAI,OAAO,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;QACnC,UAAU,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC;QAC1C,WAAW,CAAC,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC;IAC1C,CAAC;IAED,iCAAiC;IACjC,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;QACpB,mCAAmC;QACnC,UAAU,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC;QACzC,UAAU,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC;QACvC,UAAU,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC;IACzC,CAAC;SAAM,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QAChC,IAAI,CAAC,MAAM,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;YACnC,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;QACrE,CAAC;QACD,MAAM,YAAY,GAAG,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC;QAC/C,IAAI,CAAC,YAAY,EAAE,CAAC;YAClB,MAAM,IAAI,KAAK,CAAC,0EAA0E,CAAC,CAAC;QAC9F,CAAC;QACD,MAAM,WAAW,GAAG,OAAO,CAAC,YAAY,EAAE,SAAS,CAAC,CAAC;QACrD,MAAM,SAAS,GAAG,OAAO,CAAC,WAAW,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;QACtD,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,WAAW,GAAG,GAAG,CAAC,EAAE,CAAC;YAC7C,MAAM,IAAI,KAAK,CAAC,+BAA+B,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;QAClE,CAAC;QACD,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;YAC3B,MAAM,IAAI,KAAK,CAAC,sCAAsC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;QACzE,CAAC;QACD,UAAU,CAAC,IAAI,CAAC,gCAAgC,CAAC,CAAC;QAClD,UAAU,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAC;QAC9C,WAAW,CAAC,YAAY,GAAG,MAAM,CAAC,MAAM,CAAC;QACzC,WAAW,CAAC,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC;QACrC,IAAI,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACvD,UAAU,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAC;YAC9C,WAAW,CAAC,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACvD,CAAC;aAAM,CAAC;YACN,UAAU,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC;QACzC,CAAC;QACD,0EAA0E;QAC1E,6BAA6B;QAC7B,UAAU,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC;QACzC,UAAU,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC;QAC7C,UAAU,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;IAC1C,CAAC;IAED,iFAAiF;IACjF,IAAI,aAAa,KAAK,IAAI,EAAE,CAAC;QAC3B,UAAU,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC;QACzC,UAAU,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC;QAC7C,UAAU,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;IAC1C,CAAC;SAAM,IAAI,aAAa,KAAK,SAAS,EAAE,CAAC;QACvC,qBAAqB,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC;QAChD,UAAU,CAAC,IAAI,CAAC,gCAAgC,CAAC,CAAC;QAClD,UAAU,CAAC,IAAI,CAAC,wCAAwC,CAAC,CAAC;QAC1D,UAAU,CAAC,IAAI,CAAC,8BAA8B,CAAC,CAAC;QAChD,WAAW,CAAC,YAAY,GAAG,aAAa,CAAC,OAAO,CAAC;QACjD,WAAW,CAAC,gBAAgB,GAAG,aAAa,CAAC,WAAW,CAAC;QACzD,WAAW,CAAC,WAAW,GAAG,aAAa,CAAC,MAAM,CAAC;QAC/C,sEAAsE;QACtE,yEAAyE;QACzE,yEAAyE;QACzE,2EAA2E;QAC3E,wEAAwE;QACxE,wEAAwE;QACxE,kEAAkE;QAClE,wDAAwD;QACxD,UAAU,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC;QAC3C,0DAA0D;QAC1D,UAAU,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC;QACzC,UAAU,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC;QACvC,UAAU,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC;IACzC,CAAC;IAED,8EAA8E;IAC9E,yEAAyE;IACzE,MAAM,SAAS,GAAa,EAAE,CAAC;IAC/B,IAAI,UAAU,EAAE,IAAI,KAAK,SAAS;QAAE,SAAS,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC;IAC1E,IAAI,UAAU,EAAE,IAAI,KAAK,QAAQ;QAAE,SAAS,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;IACvE,IAAI,IAAI;QAAE,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC/B,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACzB,UAAU,CAAC,IAAI,CAAC,iBAAiB,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC,CAAC;QACrD,WAAW,CAAC,SAAS,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,WAAW,CAAC,GAAG,KAAK,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC7F,CAAC;IAED,qDAAqD;IACrD,IAAI,OAAO,CAAC,IAAI,KAAK,SAAS,IAAI,OAAO,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;QACpE,MAAM,KAAK,GAAG,CAAC,UAAU,OAAO,CAAC,IAAI,IAAI,EAAE,EAAE,EAAE,OAAO,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAC1F,MAAM,SAAS,GAAG,MAAM,gBAAgB,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;QAC5D,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACzB,UAAU,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC;YAC5C,WAAW,CAAC,SAAS,GAAG,SAAS,CAAC;QACpC,CAAC;IACH,CAAC;IAED,MAAM,YAAY,GAAG,UAAU,EAAE,CAAC;IAClC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,GAAG,CACnC;aACO,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC;gBAClB,EACV,WAAW,CACZ,CAAC;QAEF,wEAAwE;QACxE,qEAAqE;QACrE,wCAAwC;QACxC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,UAAU,EAAE,CAAC;YAC5C,OAAO,CAAC,KAAK,CACX,uCAAuC,GAAG,CAAC,OAAO,SAAS,GAAG,CAAC,IAAI,GAAG;gBACpE,QAAQ,MAAM,EAAE,WAAW,IAAI,WAAW,OAAO,OAAO,CAAC,WAAW,kBAAkB,CACzF,CAAC;YACF,IAAI,UAAU,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;gBACjC,qEAAqE;gBACrE,oEAAoE;gBACpE,wEAAwE;gBACxE,qEAAqE;gBACrE,MAAM,KAAK,GAAG,UAAU,CAAC,OAAO,IAAI,MAAM,EAAE,SAAS,IAAI,IAAI,CAAC;gBAC9D,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;gBACnG,OAAO,CAAC,KAAK,CACX,uCAAuC,GAAG,CAAC,OAAO,SAAS,GAAG,CAAC,IAAI,GAAG;oBACpE,MAAM,iBAAiB,IAAI,MAAM,YAAY,UAAU,CAAC,OAAO,IAAI,WAAW,aAAa,QAAQ,EAAE,CACxG,CAAC;YACJ,CAAC;QACH,CAAC;QAED,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAChC,mEAAmE;YACnE,wEAAwE;YACxE,0EAA0E;YAC1E,2EAA2E;YAC3E,0EAA0E;YAC1E,oCAAoC;YACpC,MAAM,WAAW,GAAa,EAAE,CAAC;YACjC,MAAM,aAAa,GAA4B,EAAE,EAAE,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC;YAC1E,IAAI,OAAO,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;gBAC/B,WAAW,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;gBACrC,aAAa,CAAC,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC;YACrC,CAAC;YACD,IAAI,OAAO,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;gBACpC,WAAW,CAAC,IAAI,CAAC,kCAAkC,CAAC,CAAC;gBACrD,aAAa,CAAC,QAAQ,GAAG,OAAO,CAAC,SAAS,CAAC;YAC7C,CAAC;YACD,IAAI,OAAO,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;gBAClC,WAAW,CAAC,IAAI,CAAC,8BAA8B,CAAC,CAAC;gBACjD,aAAa,CAAC,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;YACzC,CAAC;YACD,IAAI,OAAO,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;gBACnC,WAAW,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC;gBAC3C,aAAa,CAAC,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC;YAC5C,CAAC;YACD,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAC7B,uEAAuE;gBACvE,oEAAoE;gBACpE,sEAAsE;gBACtE,yDAAyD;gBACzD,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,GAAG,CACnC,yEAAyE,EACzE,EAAE,EAAE,EAAE,OAAO,EAAE,SAAS,EAAE,CAC3B,CAAC;gBACF,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBAC9B,MAAM,IAAI,KAAK,CACb,GAAG,OAAO,iFAAiF,CAC5F,CAAC;gBACJ,CAAC;gBACD,MAAM,IAAI,KAAK,CAAC,oBAAoB,OAAO,EAAE,CAAC,CAAC;YACjD,CAAC;YACD,WAAW,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC;YAE7C,MAAM,aAAa,GAAG,MAAM,YAAY,CAAC,GAAG,CAC1C;eACO,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC;6BACR,EACrB,aAAa,CACd,CAAC;YACF,IAAI,aAAa,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACvC,MAAM,IAAI,KAAK,CAAC,oBAAoB,OAAO,EAAE,CAAC,CAAC;YACjD,CAAC;YACD,OAAO,CAAC,KAAK,CAAC,yCAAyC,OAAO,WAAW,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,CAAC;QACrG,CAAC;IACH,CAAC;YAAS,CAAC;QACT,MAAM,YAAY,CAAC,KAAK,EAAE,CAAC;IAC7B,CAAC;AACH,CAAC"}

package/payload/platform/plugins/scheduling/skills/routine-control/SKILL.md

@@ -0,0 +1,48 @@
+---
+name: routine-control
+description: "Turns any one of the owner's routines on or off from chat, reversibly, and reports which routines are currently running. Triggers on 'pause the morning routine', 'stop the daily briefing', 'disable that routine', 'turn off the email sweep', 'turn the start-of-day routine back on', 'resume it', 'enable that routine', 'which routines are running', and 'is anything scheduled'. Pausing is reversible and is not cancelling; cancelling a routine ends it for good and is a different request."
+---
+
+# Routine control
+
+A routine is a scheduled trigger the owner set up: a recurring briefing, a mailbox sweep, an agent turn that fires on a cron. Turning one off for a while and ending it for good are different intents, and this skill exists because collapsing them loses the owner's routine permanently.
+
+## What the owner is asking for
+
+| They say | They mean |
+|---|---|
+| pause, stop, disable, turn off, switch off, hold, snooze it | Pause. Reversible. The routine survives. |
+| resume, turn back on, re-enable, start it again, unpause | Resume. |
+| skip tomorrow, not this once, skip the next one | Skip one occurrence. The routine keeps running after that. |
+| cancel, delete, remove, get rid of it, I don't want it any more | End the series permanently. |
+
+When the wording is genuinely ambiguous between pausing and cancelling — "get rid of the morning briefing" could be either — ask which they mean before acting. Pausing the wrong routine is undone in one call; cancelling it is not.
+
+## Pausing and resuming
+
+Both are `schedule-update` on the routine's event id.
+
+- Pause: `eventStatus: "suspended"`. The routine stops firing. Its schedule, prompt, destination and history are untouched.
+- Resume: `eventStatus: "scheduled"`. The routine fires again at its next natural occurrence, computed forward from now in the routine's own timezone. It never fires immediately on resume, and it never replays the occurrences it missed while paused.
+
+Find the id with `schedule-list` first. A paused routine reads as `SUSPENDED — <name>`; a running one reads as `SCHEDULED — <name>`; an ended one reads as `CANCELLED — <name>` and cannot be resumed.
+
+Every shipped routine ships paused. Enabling one for the first time and resuming one the owner paused are the same call.
+
+## When a resume is refused
+
+Two refusals are real answers, not errors to work around.
+
+A one-time routine whose date has already passed is refused, because resuming it would fire it within the minute for a moment the owner did not choose. Tell them the date it was due and offer a new one.
+
+A routine whose recurrence no longer parses is refused. Tell them the schedule is broken and fix the recurrence with the same tool before resuming.
+
+Do not reach for `schedule-cancel` when a resume is refused. Cancelling is not a repair.
+
+## What not to do
+
+`schedule-update` refuses to write `cancelled`. That is deliberate: ending a series is `schedule-cancel`, which is irreversible, and it should be reached only when the owner asked to end the routine.
+
+Never cancel a routine and recreate it to achieve a pause. That loses the run history and the event id the owner and the dashboard both refer to.
+
+Never report a routine as off without having seen the write succeed. If the call was refused, say what it said.

package/payload/platform/plugins/sweep/skills/email-graph-sweep/SKILL.md

@@ -57,9 +57,17 @@ admin or manager, or it is registered under a different account), and stop. Do n
 a new tool to enumerate registered destinations; the creation-time preflight is the gate.
 
 First guard against a double-enable. `schedule-event` always creates a fresh event and never merges on the
-event name, so calling it twice would arm two identical series. Before arming, call `schedule-list` and check
-whether an event named `Email→graph sweep` is already `scheduled` for this account. If one is, the routine is
-already on: tell the operator so, do not create a second, and stop.
+event name, so calling it twice would arm two identical series. Before arming, call `schedule-list` and look for
+an event named `Email→graph sweep` on this account **at any status**, not only `scheduled`. Disable pauses the
+series rather than ending it, so a previously-disabled routine is sitting there as `SUSPENDED` and a check that
+looked only for `scheduled` would miss it and arm a duplicate.
+
+- Already `scheduled`: the routine is on. Tell the operator so, create nothing, and stop.
+- `suspended`: this is a re-enable, not a fresh arm. Run both gates as normal, then call `schedule-update` with
+  `eventStatus: "scheduled"` on each suspended match and stop. The stored schedule, prompt and destination are
+  still correct, and the resume recomputes the next fire forward so the sweep does not run for the window it was
+  off. Emit `op=enable` with `reason=ok`.
+- `cancelled`, or nothing at all: arm a fresh series as below.
 
 With both gates passed and no existing series, call `schedule-event` once with:
 
@@ -117,10 +125,16 @@ operator already rejected does not re-surface. There is no separate read cursor.
 ## Disable
 
 Call `schedule-list`, find every `scheduled` event whose `name` is exactly `Email→graph sweep` (the list
-returns the title in the `name` field), and `schedule-cancel` each one by its id. Cancelling a recurring event
-kills the whole series. Cancel all matches, not just the first, because a past double-enable can leave more than
-one armed. Emit `op=disable` with `reason=ok`. If no event with that name is armed, tell the operator the routine
-was not enabled and stop.
+returns the title in the `name` field), and pause each one by its id with `schedule-update` and
+`eventStatus: "suspended"`. Pause all matches, not just the first, because a past double-enable can leave more
+than one armed. Emit `op=disable` with `reason=ok`. If no event with that name is armed, tell the operator the
+routine was not enabled and stop.
+
+Pausing, not cancelling. The routine keeps its schedule, its prompt and its destination, so re-enabling it later
+is one call rather than a rebuild that has to pass both gates again. Re-enable by setting `eventStatus` back to
+`"scheduled"`; that recomputes the next fire forward, so the sweep does not run for the window it was off. Reach
+for `schedule-cancel` only when the operator asks to remove the routine for good, and say that it cannot be
+undone before you do.
 
 ## Refusal discipline
 

package/payload/platform/scripts/__tests__/check-canonical-tool-names.test.sh

@@ -0,0 +1,162 @@
+#!/usr/bin/env bash
+# Standing guard for the PLUGIN.md tool-field validation (Task 2126). An invalid
+# riskClass or a non-boolean allowlist flag makes loadToolSurface throw on the
+# first bad entry, which empties the tool surface for every plugin at once. If a
+# fixture below stops failing, that class of defect can reach main again.
+#
+# The fixtures drive the lib's two pure functions rather than the gate binary:
+# MAXY_CODE_ROOT also drives the gate's artifact diff and instruction scan, so a
+# fixture-root override would break those, and a mode switch that skips checks is
+# the fail-open shape this gate exists to prevent. Case 10 runs the real gate
+# against the real tree, so the wiring is covered too.
+set -u
+SCRIPTS="$(cd "$(dirname "$0")/.." && pwd)"
+LIB="$SCRIPTS/lib/canonical-tool-names.mjs"
+GATE="$SCRIPTS/check-canonical-tool-names.mjs"
+TS="$(cd "$SCRIPTS/../.." && pwd)/platform/services/claude-session-manager/src/tool-surface.ts"
+[[ -f "$LIB" ]] || { echo "FAIL: $LIB missing" >&2; exit 1; }
+[[ -f "$GATE" ]] || { echo "FAIL: $GATE missing" >&2; exit 1; }
+[[ -f "$TS" ]] || { echo "FAIL: $TS missing" >&2; exit 1; }
+PASS=0; FAIL=0
+
+ROOT=$(mktemp -d)
+trap 'rm -rf "$ROOT"' EXIT
+mkdir -p "$ROOT/plugins/demo"
+
+cat > "$ROOT/harness.mjs" <<'HARNESS'
+const [libPath, pluginsRoot, tsPath] = process.argv.slice(2)
+const lib = await import(libPath)
+let riskClasses
+try {
+  riskClasses = lib.readRiskClasses(tsPath)
+} catch (err) {
+  console.log(`riskclass-source-error: ${err.message}`)
+  process.exit(2)
+}
+const violations = lib.validateToolEntries(lib.computeToolEntries(pluginsRoot), riskClasses)
+for (const v of violations) console.log(`${v.plugin}/${v.name} — ${v.message}`)
+process.exit(violations.length === 0 ? 0 : 1)
+HARNESS
+
+# $1 = frontmatter body (between the --- delimiters)
+manifest() { printf -- '---\n%s\n---\n\n# Demo\n' "$1" > "$ROOT/plugins/demo/PLUGIN.md"; }
+run() { node "$ROOT/harness.mjs" "$LIB" "$ROOT/plugins" "${1:-$TS}" 2>&1; }
+
+check() { # $1 = label, $2 = expected rc, $3 = grep pattern ('' = none), $4 = actual rc, $5 = output
+  if [[ "$4" -eq "$2" ]] && { [[ -z "$3" ]] || printf '%s' "$5" | grep -q "$3"; }; then
+    echo "PASS: $1"; PASS=$((PASS+1))
+  else
+    echo "FAIL: $1 (rc=$4, wanted $2): $5" >&2; FAIL=$((FAIL+1))
+  fi
+}
+
+# 1. A fully-declared tools entry -> clean.
+manifest 'name: demo
+tools:
+  - name: demo-tool
+    publicAllowlist: false
+    adminAllowlist: false
+    riskClass: read'
+out=$(run); check "valid tools entry is clean" 0 '' "$?" "$out"
+
+# 2. riskClass outside the set -> violation naming the tool and the value.
+manifest 'name: demo
+tools:
+  - name: demo-tool
+    publicAllowlist: false
+    adminAllowlist: false
+    riskClass: write'
+out=$(run); check "riskClass: write is rejected" 1 'demo/demo-tool — riskClass must be one of .* got "write"' "$?" "$out"
+
+# 3. riskClass line absent -> violation.
+manifest 'name: demo
+tools:
+  - name: demo-tool
+    publicAllowlist: false
+    adminAllowlist: false'
+out=$(run); check "missing riskClass is rejected" 1 'demo/demo-tool — every tool must declare riskClass' "$?" "$out"
+
+# 4. Non-boolean publicAllowlist -> violation.
+manifest 'name: demo
+tools:
+  - name: demo-tool
+    publicAllowlist: yes
+    adminAllowlist: false
+    riskClass: read'
+out=$(run); check "publicAllowlist: yes is rejected" 1 'publicAllowlist must be true or false, got "yes"' "$?" "$out"
+
+# 5. publicAllowlist: false is a valid boolean, not a falsy miss.
+manifest 'name: demo
+tools:
+  - name: demo-tool
+    publicAllowlist: false
+    adminAllowlist: true
+    riskClass: exec'
+out=$(run); check "publicAllowlist: false is accepted" 0 '' "$?" "$out"
+
+# 6. adminAllowlist line absent -> violation.
+manifest 'name: demo
+tools:
+  - name: demo-tool
+    publicAllowlist: false
+    riskClass: read'
+out=$(run); check "missing adminAllowlist is rejected" 1 'every tool must declare adminAllowlist' "$?" "$out"
+
+# 7. hidden entry with an invalid riskClass -> violation. Same blast radius as a
+#    tools entry: loadToolSurface throws on it identically.
+manifest 'name: demo
+hidden:
+  - name: demo-hidden
+    riskClass: write'
+out=$(run); check "hidden riskClass: write is rejected" 1 'demo/demo-hidden — riskClass must be one of' "$?" "$out"
+
+# 8. hidden entry with no allowlist flags -> clean. Hidden means "served by the
+#    MCP server, absent from both allowlists", so declaring them is meaningless.
+manifest 'name: demo
+hidden:
+  - name: demo-hidden
+    riskClass: read'
+out=$(run); check "hidden entry needs no allowlists" 0 '' "$?" "$out"
+
+# 9. A tool-surface source with no RISK_CLASSES declaration -> hard error, not an
+#    empty set. An empty set would accept every value, which is the fail-open
+#    shape this gate exists to close.
+manifest 'name: demo
+tools:
+  - name: demo-tool
+    publicAllowlist: false
+    adminAllowlist: false
+    riskClass: read'
+printf 'export const SOMETHING_ELSE = 1\n' > "$ROOT/no-risk-classes.ts"
+out=$(run "$ROOT/no-risk-classes.ts"); check "unreadable RISK_CLASSES is a hard error" 2 'riskclass-source-error: .*RISK_CLASSES' "$?" "$out"
+
+# 10. A tools list item with no name field -> violation. loadToolSurface throws
+#     tool-name-missing on this shape, so a gate that dropped it silently would
+#     still let the tool surface die at boot.
+manifest 'name: demo
+tools:
+  - name: good-tool
+    publicAllowlist: false
+    adminAllowlist: false
+    riskClass: read
+  - publicAllowlist: false
+    adminAllowlist: false
+    riskClass: read'
+out=$(run); check "nameless tools item is rejected" 1 'demo/<unnamed> — tool entry has no name' "$?" "$out"
+
+# 11. A hidden entry written as a bare string -> violation. Same reasoning:
+#     loadToolSurface throws hidden-tool-name-missing on it.
+manifest 'name: demo
+hidden:
+  - session-compact
+  - name: real-hidden
+    riskClass: read'
+out=$(run); check "bare hidden name is rejected" 1 'demo/<unnamed> — tool entry has no name' "$?" "$out"
+
+# 12. The real gate against the real tree -> exit 0. Catches a manifest change
+#     that breaks the gate, not just a regression in the pure functions.
+out=$(cd "$SCRIPTS/../.." && node "$GATE" 2>&1); rc=$?
+check "real gate passes on the real tree" 0 'manifest entries validated' "$rc" "$out"
+
+echo "----"; echo "PASS=$PASS FAIL=$FAIL"
+[[ "$FAIL" -eq 0 ]]

package/payload/platform/scripts/__tests__/check-no-task-id-leaks.test.sh

@@ -13,6 +13,9 @@ ROOT=$(mktemp -d)
 trap 'rm -rf "$ROOT"' EXIT
 mkdir -p "$ROOT/platform/plugins/demo/skills/demo" \
          "$ROOT/platform/templates/specialists" \
+         "$ROOT/platform/knowledge" \
+         "$ROOT/platform/ui/docs/superpowers/plans" \
+         "$ROOT/platform/docs/superpowers/plans" \
          "$ROOT/premium-plugins/demo-bundle/skills/demo" \
          "$ROOT/.docs"
 
@@ -149,5 +152,55 @@ else
   echo "FAIL: .docs citation wrongly tripped gate (rc=$rc): $out" >&2; FAIL=$((FAIL+1))
 fi
 
+# 7. A markdown tree under platform/ that no list names is scanned anyway,
+#    because bundle.js copies all of platform/ into the payload. This is the
+#    property platform/docs violated: it shipped for months while the gate's
+#    three named roots looked elsewhere.
+printf 'Task 999 changed the routing.\n' > "$ROOT/platform/knowledge/NOTES.md"
+out=$(TASK_ID_LEAK_ROOT="$ROOT" node "$GATE" 2>&1); rc=$?
+if [[ "$rc" -ne 0 ]] \
+   && printf '%s' "$out" | grep -q '\[task-id-leak\] file=platform/knowledge/NOTES.md'; then
+  echo "PASS: citation in an unlisted platform/ tree fails the gate"; PASS=$((PASS+1))
+else
+  echo "FAIL: unlisted shipped tree not scanned (rc=$rc): $out" >&2; FAIL=$((FAIL+1))
+fi
+rm -f "$ROOT/platform/knowledge/NOTES.md"
+
+# 8. platform/ui does NOT ship as source (bundle.js excludes UI_DIR), so its
+#    markdown is not client-loadable and keeps its citations.
+printf 'Task 999 changed the routing.\n' > "$ROOT/platform/ui/docs/superpowers/plans/plan.md"
+out=$(TASK_ID_LEAK_ROOT="$ROOT" node "$GATE" 2>&1); rc=$?
+if [[ "$rc" -eq 0 ]]; then
+  echo "PASS: citation under platform/ui is exempt (not shipped)"; PASS=$((PASS+1))
+else
+  echo "FAIL: platform/ui scanned despite not shipping (rc=$rc): $out" >&2; FAIL=$((FAIL+1))
+fi
+rm -f "$ROOT/platform/ui/docs/superpowers/plans/plan.md"
+
+# 9. platform/docs does not ship either (bundle.js excludes DOCS_DIR), so a
+#    recreated one is exempt rather than silently shipped-and-unscanned.
+printf 'Task 999 changed the routing.\n' > "$ROOT/platform/docs/superpowers/plans/plan.md"
+out=$(TASK_ID_LEAK_ROOT="$ROOT" node "$GATE" 2>&1); rc=$?
+if [[ "$rc" -eq 0 ]]; then
+  echo "PASS: citation under platform/docs is exempt (not shipped)"; PASS=$((PASS+1))
+else
+  echo "FAIL: platform/docs scanned despite not shipping (rc=$rc): $out" >&2; FAIL=$((FAIL+1))
+fi
+rm -f "$ROOT/platform/docs/superpowers/plans/plan.md"
+
+# 10. Live account data does not ship, so the gate must not read it. An account
+#     directory holds real markdown (SCHEMA.md, AGENTS.md); without the
+#     exclusion the gate would refuse a commit over a citation in a client's own
+#     file that no payload carries.
+mkdir -p "$ROOT/platform/data/accounts/20028fb5"
+printf '# Account schema\n\nSeeded during Task 999.\n' > "$ROOT/platform/data/accounts/20028fb5/SCHEMA.md"
+out=$(TASK_ID_LEAK_ROOT="$ROOT" node "$GATE" 2>&1); rc=$?
+if [[ "$rc" -eq 0 ]]; then
+  echo "PASS: citation in live account data is exempt (not shipped)"; PASS=$((PASS+1))
+else
+  echo "FAIL: account data scanned despite not shipping (rc=$rc): $out" >&2; FAIL=$((FAIL+1))
+fi
+rm -rf "$ROOT/platform/data"
+
 echo "----"; echo "PASS=$PASS FAIL=$FAIL"
 [[ "$FAIL" -eq 0 ]]