@rubytech/create-sitedesk-code 0.1.528 → 0.1.529

package/payload/platform/plugins/admin/mcp/dist/tools/linkedin-ingest-token.d.ts

@@ -0,0 +1,10 @@
+export type IngestTokenAction = "show" | "rotate";
+export interface IngestTokenResult {
+    token: string;
+    /** True only when this call created the token. */
+    minted: boolean;
+    /** True only when this call replaced an existing token. */
+    rotated: boolean;
+}
+export declare function resolveIngestToken(accountsDir: string, accountId: string, action: IngestTokenAction): IngestTokenResult;
+//# sourceMappingURL=linkedin-ingest-token.d.ts.map

package/payload/platform/plugins/admin/mcp/dist/tools/linkedin-ingest-token.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"linkedin-ingest-token.d.ts","sourceRoot":"","sources":["../../src/tools/linkedin-ingest-token.ts"],"names":[],"mappings":"AAkBA,MAAM,MAAM,iBAAiB,GAAG,MAAM,GAAG,QAAQ,CAAC;AAElD,MAAM,WAAW,iBAAiB;IAChC,KAAK,EAAE,MAAM,CAAC;IACd,kDAAkD;IAClD,MAAM,EAAE,OAAO,CAAC;IAChB,2DAA2D;IAC3D,OAAO,EAAE,OAAO,CAAC;CAClB;AAED,wBAAgB,kBAAkB,CAChC,WAAW,EAAE,MAAM,EACnB,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,iBAAiB,GACxB,iBAAiB,CAMnB"}

package/payload/platform/plugins/admin/mcp/dist/tools/linkedin-ingest-token.js

@@ -0,0 +1,22 @@
+/**
+ * linkedin-ingest-token — hand the operator the LinkedIn extension's durable
+ * credential (Task 2208).
+ *
+ * The agent walks the operator through side-loading the extension and then has
+ * to supply a credential. Before this tool the docs pointed at a `session_key`
+ * cookie that is never minted, so the operator pasted conversation session keys
+ * and every capture came back 401. This is the deterministic source of the one
+ * value the extension needs.
+ *
+ * IDENTITY.md forbids the agent editing account.json directly, so the write
+ * goes through here rather than through Edit.
+ */
+import { ensureIngestToken, rotateIngestToken, } from "../../../../../lib/account-ingest-token/dist/index.js";
+export function resolveIngestToken(accountsDir, accountId, action) {
+    if (action === "rotate") {
+        return { token: rotateIngestToken(accountsDir, accountId), minted: false, rotated: true };
+    }
+    const { token, minted } = ensureIngestToken(accountsDir, accountId);
+    return { token, minted, rotated: false };
+}
+//# sourceMappingURL=linkedin-ingest-token.js.map

package/payload/platform/plugins/admin/mcp/dist/tools/linkedin-ingest-token.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"linkedin-ingest-token.js","sourceRoot":"","sources":["../../src/tools/linkedin-ingest-token.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AACH,OAAO,EACL,iBAAiB,EACjB,iBAAiB,GAClB,MAAM,uDAAuD,CAAC;AAY/D,MAAM,UAAU,kBAAkB,CAChC,WAAmB,EACnB,SAAiB,EACjB,MAAyB;IAEzB,IAAI,MAAM,KAAK,QAAQ,EAAE,CAAC;QACxB,OAAO,EAAE,KAAK,EAAE,iBAAiB,CAAC,WAAW,EAAE,SAAS,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC5F,CAAC;IACD,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,iBAAiB,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC;IACpE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;AAC3C,CAAC"}

package/payload/platform/plugins/admin/skills/platform-architecture/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: platform-architecture
 description: Use when grounding any documented-surface claim about what SiteDesk ships — plugins, skills, specialists, install/deploy flows, internals. This is the install catalogue, not evidence of what is enabled on the current account. For install state on this account, call `capabilities-here`; for documented surface, cite the `Source:` URL inline.
-content-hash: sha256:7106e5166b451f13c373e48b7eb6057846d8e385002c774fa6ba4db1b05aef6e
+content-hash: sha256:a4d904a0b258e267d582d5bd8e968e1de3734c6e60863c401ea5e1b185bccba5
 brand: sitedesk-code
 product-name: SiteDesk
 ---
@@ -2854,7 +2854,7 @@ Capture a LinkedIn profile or DM thread to your SiteDesk graph with one click. T
 5. Click the puzzle icon → pin **SiteDesk LinkedIn Ingest** → open its options.
 6. Paste two values:
    - **Admin host** — your tunnel URL, e.g. `https://your-tunnel.example.com`.
-   - **Session key** — open your admin browser, copy the value of `session_key` from the cookie. (Same key the admin uses to authenticate every other admin request.)
+   - **Ingest token** — ask your SiteDesk agent for the ingest token. It mints one on request and hands it to you in the chat. The same value keeps working: it survives restarts and new chat sessions, and it does not expire. This is not a conversation session key, and not the admin browser's `session_key`; the route accepts neither.
 7. Save. The pill is now armed.
 
 ## Use
@@ -2879,7 +2879,7 @@ The plugin will never create `:Communication`, `:ConversationArchive` rows (i.e.
 
 ## When the pill turns amber
 
-The pill shows **Sign in to SiteDesk** when your session key has expired. Click it to open the options page; paste a fresh `session_key` from your admin browser; save. The next click on the LinkedIn pill will succeed.
+The pill shows **Paste SiteDesk token** when the ingest token is missing or was refused. Click it to open the options page, ask your SiteDesk agent for the ingest token, paste it, and save. The next click on the LinkedIn pill will succeed. There is no sign-in step: the token is the whole credential, and the only way it stops working is if someone rotates it.
 
 ## When the pill turns red
 
@@ -3363,7 +3363,7 @@ The route (`server/routes/admin/routines.ts`) is account-scoped like `calendar.t
 | `GET /api/admin/routines/:eventId/runs` | One routine's `:RoutineRun` history, newest first. `limit` clamps to 1..500 and defaults to 50, so a caller that wants the full page must ask for it. |
 | `GET /api/admin/routines/:eventId/runs.csv` | The same projection as a `text/csv` attachment with `Content-Disposition`, and **no** limit, so it is not the same row set as a clamped `/runs` call. Re-parses its own output and returns 500 rather than serving a document with fewer rows than the query returned. Zero rows is 404, not a header-only file: the query cannot tell a routine with no runs from an `eventId` on another account. |
 | `PATCH /api/admin/routines/:eventId` | Edits `agentPrompt`, `recurrence`, and the `agentChannel`/`agentDestination` pair. Cron validation and the timezone-aware `nextRun` recompute copy the scheduling plugin's `schedule-update` tool. The binding is revalidated against the same house-authority rule, shared as `platform/lib/agent-dispatch-rule`; it is refused `partial-binding`, `invalid-channel`, `no-prompt`, `not-registered`, `cross-account`, `action-routine` (a routine that runs a tool keeps it — an agent binding outranks the action at fire time) or `clear-would-orphan` (clearing the only field holding a one-time routine inside the automation filter would hide it from every routines surface), and no refusal writes. Both fields as `null` clears the binding. An invalid cron is rejected 400 with no write. Only creation and deletion stay agent-only (`schedule-event`/`schedule-cancel`). |
-| `GET /api/admin/dispatch-destinations` | Every destination the session's account may bind a routine to, across both channels, each labelled by the authoritative list it came from (`House admin`, `Account manager`, `Telegram admin`). Computed from the same lists the validator reads and filtered by the same rule, so the picker cannot offer what the save refuses. |
+| `GET /api/admin/dispatch-destinations` | Every destination the session's account may bind a routine to, across both channels, each labelled by the authoritative list it came from (`House admin`, `Account manager`, `Telegram admin`), plus an optional `name`: a display-only person name resolved from `:Person` in the row's own account scope — the house for a `House admin` row, the managed sub-account for an `Account manager` row, and never for Telegram, whose destinations are chat ids. Computed from the same lists the validator reads and filtered by the same rule, so the picker cannot offer what the save refuses; `name` is never part of what Save posts, and a graph outage returns an unnamed roster rather than an error. |
 | `POST /api/admin/routines/:eventId/suspend` | Writes `eventStatus = 'suspended'` on a routine currently `'scheduled'`. 404s otherwise, so a second suspend is not a silent no-op. |
 | `POST /api/admin/routines/:eventId/resume` | Returns a suspended routine to `'scheduled'`. 404s if it is not suspended, 409s if it cannot be resumed. |
 | `POST /api/admin/routines/suspend-all` | Suspends every routine currently `'scheduled'` and marks each one. Returns the count. |
@@ -3397,6 +3397,18 @@ rows — a routine suspended one at a time carries no mark and stays suspended,
 which is what makes resume-all safe to press. The seeded roster is unmarked by
 construction, so resume-all never enables it.
 
+**The modal states why a routine is in the state it is in.** Every trigger,
+dispatch, suspend and resume appends one `[<iso>] <text>` line to the routine's
+own `notes`, and the detail modal lists that trail newest first under
+`History (<n> entries)`. So a suspended routine names its reason, the path that
+suspended it (`Suspended from chat`, `Suspended from the routines dashboard`,
+`Suspended by a suspend-all from the routines dashboard`) and the time, without
+reading the graph. Entries render as stored and none is dropped; the box scrolls.
+A routine with no trail says `No history recorded.`, which is the true state of a
+seeded roster routine that has never run. This is not the run history: a
+`:RoutineRun` node records a fire, and a status change is not a fire, so a
+suspension appears only here.
+
 Observability rides `[admin:routines]`: `op=list accountId=<8> count=<n>`,
 `op=get id=<8> found=<bool>`, `op=patch id=<8> fields=<…> outcome=ok|rejected
 reason=<invalid-cron|not-found> nextRun=<…> cron=<serialized>`, and
@@ -3406,6 +3418,15 @@ past-one-time|invalid-cron>`. A `count=0` while routines exist for the account i
 the account-scope-miss signature; the logged `cron=` on `outcome=ok` confirms the
 persisted expression without opening the graph.
 
+The panel can only show a reason that was written, and a suspend path that wrote
+no note emits no event of its own. The scheduling sweep's standing census closes
+that: `[schedule-audit] op=suspension-census` carries `unattributed=<n>`, the
+count of suspended routines whose notes never record the suspension, on every
+tick including zero. It sits outside the `other=` arithmetic, which reconciles
+status buckets against the row count rather than attribution. A routine seeded
+suspended and never touched carries no notes and is excluded, having nothing to
+attribute.
+
 Two scheduler-side lines close the loop, because a suspend that the sweep ignores
 looks identical to a healthy routine until it fires. `[schedule-sweep]
 op=skip-suspended account=<8> count=<n>` is emitted every sweep for every local

package/payload/platform/plugins/admin/skills/whats-new/SKILL.md

@@ -9,6 +9,12 @@ Invoked by the admin agent directly.
 
 This is the platform's release timeline, newest first. Each entry shows the date it shipped and the version it shipped in, so you can tell the operator how current their install is. To compare, read the installed version from `capabilities-here` and match it against the versions below. Keep answers high level and in plain English; this is a summary, not a full commit log.
 
+## 2026-07-30 (0.1.529)
+
+- The LinkedIn browser extension now signs in with its own long-lived key, handed to you by an admin tool, instead of borrowing a chat session's key. It keeps working when the session it was set up from ends.
+- The routine editing window has been fixed properly. It is sized to its contents, its dropdowns are styled like the rest of the product, it lists the real places a routine can send its result, and it builds every kind of schedule it offers instead of dropping you into a raw timing expression.
+- A suspended routine now shows why it was suspended, who did it and when, with the most recent entry first. Routines suspended without any reason recorded are counted so they can be found.
+
 ## 2026-07-30 (0.1.528)
 
 - Where two or more accounts share one device, the assistant can no longer edit or write files belonging to a different account. Every account is now checked for that protection being in place.

package/payload/platform/plugins/docs/references/admin-ui.md

@@ -136,7 +136,7 @@ The route (`server/routes/admin/routines.ts`) is account-scoped like `calendar.t
 | `GET /api/admin/routines/:eventId/runs` | One routine's `:RoutineRun` history, newest first. `limit` clamps to 1..500 and defaults to 50, so a caller that wants the full page must ask for it. |
 | `GET /api/admin/routines/:eventId/runs.csv` | The same projection as a `text/csv` attachment with `Content-Disposition`, and **no** limit, so it is not the same row set as a clamped `/runs` call. Re-parses its own output and returns 500 rather than serving a document with fewer rows than the query returned. Zero rows is 404, not a header-only file: the query cannot tell a routine with no runs from an `eventId` on another account. |
 | `PATCH /api/admin/routines/:eventId` | Edits `agentPrompt`, `recurrence`, and the `agentChannel`/`agentDestination` pair. Cron validation and the timezone-aware `nextRun` recompute copy the scheduling plugin's `schedule-update` tool. The binding is revalidated against the same house-authority rule, shared as `platform/lib/agent-dispatch-rule`; it is refused `partial-binding`, `invalid-channel`, `no-prompt`, `not-registered`, `cross-account`, `action-routine` (a routine that runs a tool keeps it — an agent binding outranks the action at fire time) or `clear-would-orphan` (clearing the only field holding a one-time routine inside the automation filter would hide it from every routines surface), and no refusal writes. Both fields as `null` clears the binding. An invalid cron is rejected 400 with no write. Only creation and deletion stay agent-only (`schedule-event`/`schedule-cancel`). |
-| `GET /api/admin/dispatch-destinations` | Every destination the session's account may bind a routine to, across both channels, each labelled by the authoritative list it came from (`House admin`, `Account manager`, `Telegram admin`). Computed from the same lists the validator reads and filtered by the same rule, so the picker cannot offer what the save refuses. |
+| `GET /api/admin/dispatch-destinations` | Every destination the session's account may bind a routine to, across both channels, each labelled by the authoritative list it came from (`House admin`, `Account manager`, `Telegram admin`), plus an optional `name`: a display-only person name resolved from `:Person` in the row's own account scope — the house for a `House admin` row, the managed sub-account for an `Account manager` row, and never for Telegram, whose destinations are chat ids. Computed from the same lists the validator reads and filtered by the same rule, so the picker cannot offer what the save refuses; `name` is never part of what Save posts, and a graph outage returns an unnamed roster rather than an error. |
 | `POST /api/admin/routines/:eventId/suspend` | Writes `eventStatus = 'suspended'` on a routine currently `'scheduled'`. 404s otherwise, so a second suspend is not a silent no-op. |
 | `POST /api/admin/routines/:eventId/resume` | Returns a suspended routine to `'scheduled'`. 404s if it is not suspended, 409s if it cannot be resumed. |
 | `POST /api/admin/routines/suspend-all` | Suspends every routine currently `'scheduled'` and marks each one. Returns the count. |
@@ -170,6 +170,18 @@ rows — a routine suspended one at a time carries no mark and stays suspended,
 which is what makes resume-all safe to press. The seeded roster is unmarked by
 construction, so resume-all never enables it.
 
+**The modal states why a routine is in the state it is in.** Every trigger,
+dispatch, suspend and resume appends one `[<iso>] <text>` line to the routine's
+own `notes`, and the detail modal lists that trail newest first under
+`History (<n> entries)`. So a suspended routine names its reason, the path that
+suspended it (`Suspended from chat`, `Suspended from the routines dashboard`,
+`Suspended by a suspend-all from the routines dashboard`) and the time, without
+reading the graph. Entries render as stored and none is dropped; the box scrolls.
+A routine with no trail says `No history recorded.`, which is the true state of a
+seeded roster routine that has never run. This is not the run history: a
+`:RoutineRun` node records a fire, and a status change is not a fire, so a
+suspension appears only here.
+
 Observability rides `[admin:routines]`: `op=list accountId=<8> count=<n>`,
 `op=get id=<8> found=<bool>`, `op=patch id=<8> fields=<…> outcome=ok|rejected
 reason=<invalid-cron|not-found> nextRun=<…> cron=<serialized>`, and
@@ -179,6 +191,15 @@ past-one-time|invalid-cron>`. A `count=0` while routines exist for the account i
 the account-scope-miss signature; the logged `cron=` on `outcome=ok` confirms the
 persisted expression without opening the graph.
 
+The panel can only show a reason that was written, and a suspend path that wrote
+no note emits no event of its own. The scheduling sweep's standing census closes
+that: `[schedule-audit] op=suspension-census` carries `unattributed=<n>`, the
+count of suspended routines whose notes never record the suspension, on every
+tick including zero. It sits outside the `other=` arithmetic, which reconciles
+status buckets against the row count rather than attribution. A routine seeded
+suspended and never touched carries no notes and is excluded, having nothing to
+attribute.
+
 Two scheduler-side lines close the loop, because a suspend that the sweep ignores
 looks identical to a healthy routine until it fires. `[schedule-sweep]
 op=skip-suspended account=<8> count=<n>` is emitted every sweep for every local

package/payload/platform/plugins/docs/references/linkedin-extension.md

@@ -11,7 +11,7 @@ Capture a LinkedIn profile or DM thread to your SiteDesk graph with one click. T
 5. Click the puzzle icon → pin **SiteDesk LinkedIn Ingest** → open its options.
 6. Paste two values:
    - **Admin host** — your tunnel URL, e.g. `https://your-tunnel.example.com`.
-   - **Session key** — open your admin browser, copy the value of `session_key` from the cookie. (Same key the admin uses to authenticate every other admin request.)
+   - **Ingest token** — ask your SiteDesk agent for the ingest token. It mints one on request and hands it to you in the chat. The same value keeps working: it survives restarts and new chat sessions, and it does not expire. This is not a conversation session key, and not the admin browser's `session_key`; the route accepts neither.
 7. Save. The pill is now armed.
 
 ## Use
@@ -36,7 +36,7 @@ The plugin will never create `:Communication`, `:ConversationArchive` rows (i.e.
 
 ## When the pill turns amber
 
-The pill shows **Sign in to SiteDesk** when your session key has expired. Click it to open the options page; paste a fresh `session_key` from your admin browser; save. The next click on the LinkedIn pill will succeed.
+The pill shows **Paste SiteDesk token** when the ingest token is missing or was refused. Click it to open the options page, ask your SiteDesk agent for the ingest token, paste it, and save. The next click on the LinkedIn pill will succeed. There is no sign-in step: the token is the whole credential, and the only way it stops working is if someone rotates it.
 
 ## When the pill turns red
 

package/payload/platform/plugins/linkedin-extension/extension/README.md

@@ -8,7 +8,7 @@ Unpacked-extension dev build. No Chrome Web Store publication.
 2. Enable **Developer mode** (top right).
 3. **Load unpacked** → select this `extension/` directory.
 4. Click the new puzzle icon → open **SiteDesk LinkedIn Ingest** options.
-5. Paste your admin host (e.g. `https://your-tunnel.example.com`) and your admin **session key** (the value of `session_key` on the cookie or query in your admin browser). Save.
+5. Paste your admin host (e.g. `https://your-tunnel.example.com`) and your **ingest token**. Ask your SiteDesk agent for the ingest token; it mints one on request and gives it to you in the chat. The token is stable, so this is a one-time paste unless someone rotates it. Save.
 6. Chrome asks you to allow the extension to talk to that host. **Allow it.** The pill cannot post without it, so declining saves nothing.
 
 ## Use
@@ -21,7 +21,7 @@ The pill tells you which thing is wrong:
 
 | Pill | Meaning | Fix |
 |---|---|---|
-| **Sign in to SiteDesk** (amber) | the session key expired | open options, paste a fresh key |
+| **Paste SiteDesk token** (amber) | the ingest token is missing or was refused | ask the agent for the ingest token, paste it in options |
 | **Grant access** (amber) | the admin host was never allowed, so the post never left the browser | open options, Save, allow the prompt |
 | **SiteDesk unreachable** (red) | the host was allowed but did not answer | check the tunnel and the admin server |
 | **Capture failed** (red) | the admin rejected the payload, or the extension's own service worker did not answer | read the service-worker console: `reason=extract` is a rejected payload, `reason=worker-unreachable` is the worker |
@@ -35,7 +35,7 @@ The pill tells you which thing is wrong:
 | `content/profile.js` | Profile pill + click handler. |
 | `content/thread.js` | Thread pill + click handler. |
 | `background/sw.js` | Service worker. Checks the admin-host grant, then POSTs envelopes to the admin route. |
-| `options/options.html` + `options/options.js` | Admin host + session-key entry. |
+| `options/options.html` + `options/options.js` | Admin host + ingest-token entry. |
 | `assets/pill.css` | Pill styling. |
 | `__tests__/` | jsdom unit tests for the extractors, run via vitest from `platform/ui`. |
 

package/payload/platform/plugins/linkedin-extension/extension/background/sw.js

@@ -1,5 +1,5 @@
 // Service worker. Receives envelopes from content scripts, POSTs them
-// to the admin host with the session key stored in extension options.
+// to the admin host with the ingest token stored in extension options.
 //
 // Task 2185 — the manifest's static host_permissions cover linkedin.com only,
 // so the admin host has to be granted at runtime from the options page before
@@ -14,11 +14,16 @@
 
 const TAG = '[linkedin-ext-post]'
 
+// Task 2208 — the credential is the account's durable ingest token, minted by
+// the linkedin-ingest-token admin tool and pasted in on the options page. The
+// admin browser's session_key it replaced could neither be obtained as
+// documented nor stay valid: in-memory, 24h TTL, wiped by restart, rotated on
+// every new chat session.
 async function getConfig() {
-  const stored = await chrome.storage.local.get(['adminHost', 'sessionKey'])
+  const stored = await chrome.storage.local.get(['adminHost', 'ingestToken'])
   return {
     adminHost: typeof stored.adminHost === 'string' ? stored.adminHost.replace(/\/+$/, '') : '',
-    sessionKey: typeof stored.sessionKey === 'string' ? stored.sessionKey : '',
+    ingestToken: typeof stored.ingestToken === 'string' ? stored.ingestToken : '',
   }
 }
 
@@ -28,9 +33,9 @@ function originPattern(adminHost) {
 }
 
 async function postEnvelope(envelope) {
-  const { adminHost, sessionKey } = await getConfig()
+  const { adminHost, ingestToken } = await getConfig()
   if (!adminHost) return { ok: false, reason: 'auth', detail: 'admin-host-missing' }
-  if (!sessionKey) return { ok: false, reason: 'auth', detail: 'session-key-missing' }
+  if (!ingestToken) return { ok: false, reason: 'auth', detail: 'ingest-token-missing' }
 
   let origin
   try {
@@ -53,7 +58,7 @@ async function postEnvelope(envelope) {
     res = await fetch(url, {
       method: 'POST',
       headers: { 'content-type': 'application/json' },
-      body: JSON.stringify({ ...envelope, session_key: sessionKey }),
+      body: JSON.stringify({ ...envelope, ingest_token: ingestToken }),
     })
   } catch (err) {
     console.error(
@@ -66,7 +71,7 @@ async function postEnvelope(envelope) {
   const ms = Date.now() - started
   console.log(TAG + ' op=fetch dispatchId=' + envelope.dispatchId + ' status=' + res.status + ' ms=' + ms)
 
-  if (res.status === 401) return { ok: false, reason: 'auth', detail: 'session-rejected' }
+  if (res.status === 401) return { ok: false, reason: 'auth', detail: 'token-rejected' }
   if (res.status >= 500) return { ok: false, reason: 'server', detail: 'http-' + res.status }
   if (!res.ok) {
     let body = ''

package/payload/platform/plugins/linkedin-extension/extension/content/profile.js

@@ -51,8 +51,11 @@
       const reason = (reply && reply.reason) || 'worker-unreachable'
       const detail = (reply && reply.detail) || ''
       console.error(TAG_ERROR + ' reason=' + reason + ' detail=' + detail)
+      // Task 2208 — the ingest token is missing or was refused. There is no
+      // sign-in to perform: the operator asks the SiteDesk agent for the token and
+      // pastes it on the options page.
       if (reason === 'auth') {
-        setState(pill, 'auth', 'Sign in to SiteDesk')
+        setState(pill, 'auth', 'Paste SiteDesk token')
         pill.onclick = function () { chrome.runtime.openOptionsPage() }
         return
       }

package/payload/platform/plugins/linkedin-extension/extension/content/thread.js

@@ -53,8 +53,11 @@
       const reason = (reply && reply.reason) || 'worker-unreachable'
       const detail = (reply && reply.detail) || ''
       console.error(TAG_ERROR + ' reason=' + reason + ' detail=' + detail)
+      // Task 2208 — the ingest token is missing or was refused. There is no
+      // sign-in to perform: the operator asks the SiteDesk agent for the token and
+      // pastes it on the options page.
       if (reason === 'auth') {
-        setState(pill, 'auth', 'Sign in to SiteDesk')
+        setState(pill, 'auth', 'Paste SiteDesk token')
         pill.onclick = function () { chrome.runtime.openOptionsPage() }
         return
       }

package/payload/platform/plugins/linkedin-extension/extension/options/options.html

@@ -17,14 +17,14 @@
   </head>
   <body>
     <h1>SiteDesk LinkedIn Ingest</h1>
-    <p>Point the extension at your SiteDesk admin host and paste your admin session key. The pill on LinkedIn will then post one-click captures to your admin.</p>
+    <p>Point the extension at your SiteDesk admin host and paste your ingest token. Ask your SiteDesk agent for the token and it will give you one. The pill on LinkedIn will then post one-click captures to your admin.</p>
     <p>On Save, Chrome asks you to allow this extension to talk to that host. The capture pill cannot post without it, so declining leaves the extension unconfigured.</p>
 
     <label for="admin-host">Admin host</label>
     <input id="admin-host" type="url" placeholder="https://your-tunnel.example.com" />
 
-    <label for="session-key">Session key</label>
-    <input id="session-key" type="password" placeholder="paste the value of session_key from your admin browser" />
+    <label for="ingest-token">Ingest token</label>
+    <input id="ingest-token" type="password" placeholder="paste the token your SiteDesk agent gives you" />
 
     <button id="save">Save</button>
     <div id="status" class="status"></div>

package/payload/platform/plugins/linkedin-extension/extension/options/options.js

@@ -6,9 +6,16 @@
 // request that Chrome preflights and the admin route never answers. The
 // runtime grant requested here is what makes that fetch permission-exempt.
 // Without it every capture dies in the browser and the server sees nothing.
+//
+// Task 2208 — the credential is the account's durable ingest token, obtained by
+// asking the SiteDesk agent, which calls the linkedin-ingest-token admin tool. It is
+// NOT the admin browser's session_key: that lived in an in-memory map with a 24h
+// TTL, every restart wiped it and every new chat session rotated it, and no
+// cookie ever carried it, so the previous instruction to copy it from a cookie
+// named something that does not exist.
 
 const $host = document.getElementById('admin-host')
-const $key = document.getElementById('session-key')
+const $token = document.getElementById('ingest-token')
 const $btn = document.getElementById('save')
 const $status = document.getElementById('status')
 
@@ -28,26 +35,27 @@ function originPattern(adminHost) {
 // console; this page says what actually went wrong in plain words.
 const PROBE_COPY = {
   unreachable: 'that host did not answer',
-  auth: 'that host rejected the session key',
+  auth: 'that host rejected the ingest token',
   server: 'that host answered with an unexpected status',
 }
 
-// Config-time probe. The body carries none of the five envelope fields, so
-// the route answers 400 {error:'schema', reason:'envelope', missing:[all
-// five]} — a signature no real capture can produce, because both content
-// scripts always set all five. Nothing is dispatched and nothing is written.
-async function probe(adminHost, sessionKey) {
+// Config-time probe. The body carries the token but none of the five envelope
+// fields, so the route answers 400 {error:'schema', reason:'envelope', missing:
+// [all five]} — a signature no real capture can produce, because both content
+// scripts always set all five. Nothing is dispatched and nothing is written. A
+// 401 here means the token itself was refused.
+async function probe(adminHost, ingestToken) {
   let res
   try {
     res = await fetch(adminHost + '/api/admin/linkedin-ingest', {
       method: 'POST',
       headers: { 'content-type': 'application/json' },
-      body: JSON.stringify({ session_key: sessionKey }),
+      body: JSON.stringify({ ingest_token: ingestToken }),
     })
   } catch (err) {
     return { ok: false, reason: 'unreachable', detail: err && err.message ? err.message : String(err) }
   }
-  if (res.status === 401) return { ok: false, reason: 'auth', detail: 'session-rejected' }
+  if (res.status === 401) return { ok: false, reason: 'auth', detail: 'token-rejected' }
   let body = null
   try { body = await res.json() } catch { /* non-JSON body */ }
   if (res.status === 400 && body && body.error === 'schema') return { ok: true }
@@ -55,17 +63,17 @@ async function probe(adminHost, sessionKey) {
 }
 
 async function load() {
-  const stored = await chrome.storage.local.get(['adminHost', 'sessionKey'])
+  const stored = await chrome.storage.local.get(['adminHost', 'ingestToken'])
   if (typeof stored.adminHost === 'string') $host.value = stored.adminHost
-  if (typeof stored.sessionKey === 'string') $key.value = stored.sessionKey
+  if (typeof stored.ingestToken === 'string') $token.value = stored.ingestToken
 }
 
 async function save() {
   const adminHost = $host.value.trim().replace(/\/+$/, '')
-  const sessionKey = $key.value.trim()
+  const ingestToken = $token.value.trim()
   if (!adminHost) return setStatus('Admin host is required.', true)
   if (!/^https?:\/\//.test(adminHost)) return setStatus('Admin host must start with http(s)://.', true)
-  if (!sessionKey) return setStatus('Session key is required.', true)
+  if (!ingestToken) return setStatus('Ingest token is required. Ask your SiteDesk agent for it.', true)
 
   let origin
   try {
@@ -93,10 +101,10 @@ async function save() {
     )
   }
 
-  const reachable = await probe(adminHost, sessionKey)
-  await chrome.storage.local.set({ adminHost: adminHost, sessionKey: sessionKey })
+  const reachable = await probe(adminHost, ingestToken)
+  await chrome.storage.local.set({ adminHost: adminHost, ingestToken: ingestToken })
   if (reachable.ok) {
-    return setStatus('Saved. The admin host is reachable and accepted the session key.', false)
+    return setStatus('Saved. The admin host is reachable and accepted the ingest token.', false)
   }
   setStatus('Saved, but ' + PROBE_COPY[reachable.reason] + ' (' + reachable.detail + ')', true)
 }

package/payload/platform/plugins/scheduling/mcp/dist/scripts/__tests__/suspension-census.test.js

@@ -32,14 +32,14 @@ describe("auditSuspensionCensus", () => {
     it("emits a line for an account with no routines at all, so silence is never healthy", async () => {
         await auditSuspensionCensus(driverReturning([]), [ACCT]);
         expect(censusLines()).toEqual([
-            "[schedule-audit] op=suspension-census acct=aaaaaaaa routines=0 dispatchable=0 suspended=0 due=0 cancelled=0 completed=0 other=0",
+            "[schedule-audit] op=suspension-census acct=aaaaaaaa routines=0 dispatchable=0 suspended=0 due=0 cancelled=0 completed=0 other=0 unattributed=0",
         ]);
     });
     it("reports each status and leaves other at zero when they account for every row", async () => {
         await auditSuspensionCensus(driverReturning([
             { accountId: ACCT, routines: 10, dispatchable: 4, suspended: 3, due: 2, cancelled: 1 },
         ]), [ACCT]);
-        expect(censusLines()[0]).toBe("[schedule-audit] op=suspension-census acct=aaaaaaaa routines=10 dispatchable=4 suspended=3 due=2 cancelled=1 completed=0 other=0");
+        expect(censusLines()[0]).toBe("[schedule-audit] op=suspension-census acct=aaaaaaaa routines=10 dispatchable=4 suspended=3 due=2 cancelled=1 completed=0 other=0 unattributed=0");
     });
     // The standing check. dispatchable + suspended + due + cancelled + other =
     // routines holds by construction, so a non-zero `other` is the only signal
@@ -79,6 +79,49 @@ describe("auditSuspensionCensus", () => {
         ]), [ACCT]);
         expect(censusLines()[0]).toContain("completed=1 other=0");
     });
+    // Task 2209 — the detail-modal history panel can only show a reason that was
+    // written. A suspend path that appended no note leaves the panel blank with
+    // nothing to say why, and no log line exists for a note that was never
+    // written, so this count is the only signal. These cases stub the driver, so
+    // they prove the field plumbing and the emitted line, not the Cypher
+    // predicate; that is the publish-gated device check in Task 2209.
+    it("counts a suspended row whose notes never record the suspension", async () => {
+        await auditSuspensionCensus(driverReturning([
+            { accountId: ACCT, routines: 2, dispatchable: 1, suspended: 1, due: 0, cancelled: 0, completed: 0, unattributed: 1 },
+        ]), [ACCT]);
+        expect(censusLines()[0]).toContain("other=0 unattributed=1");
+    });
+    it("reports unattributed at zero rather than omitting the field, so a healthy account and a dead audit do not read alike", async () => {
+        await auditSuspensionCensus(driverReturning([
+            { accountId: ACCT, routines: 2, dispatchable: 1, suspended: 1, due: 0, cancelled: 0, completed: 0, unattributed: 0 },
+        ]), [ACCT]);
+        expect(censusLines()[0]).toContain("unattributed=0");
+    });
+    it("carries unattributed=0 for an account the query returned no row for", async () => {
+        await auditSuspensionCensus(driverReturning([]), [ACCT]);
+        expect(censusLines()[0]).toContain("unattributed=0");
+    });
+    // `other` reconciles status buckets against the row count; `unattributed`
+    // reconciles a suspended row against whether anything recorded why. Folding
+    // one into the other would make a missing note look like an unknown status.
+    it("keeps unattributed out of the other arithmetic", async () => {
+        await auditSuspensionCensus(driverReturning([
+            { accountId: ACCT, routines: 3, dispatchable: 1, suspended: 2, due: 0, cancelled: 0, completed: 0, unattributed: 2 },
+        ]), [ACCT]);
+        expect(censusLines()[0]).toContain("other=0 unattributed=2");
+    });
+    it("unwraps a neo4j integer for unattributed too", async () => {
+        await auditSuspensionCensus(driverReturning([
+            {
+                accountId: ACCT,
+                routines: { toNumber: () => 1 }, dispatchable: { toNumber: () => 0 },
+                suspended: { toNumber: () => 1 }, due: { toNumber: () => 0 },
+                cancelled: { toNumber: () => 0 }, completed: { toNumber: () => 0 },
+                unattributed: { toNumber: () => 1 },
+            },
+        ]), [ACCT]);
+        expect(censusLines()[0]).toContain("unattributed=1");
+    });
     it("never throws, so a census failure cannot take the sweep down", async () => {
         const driver = {
             session: () => ({

package/payload/platform/plugins/scheduling/mcp/dist/scripts/__tests__/suspension-census.test.js.map

@@ -1 +1 @@
-{"version":3,"file":"suspension-census.test.js","sourceRoot":"","sources":["../../../src/scripts/__tests__/suspension-census.test.ts"],"names":[],"mappings":"AAAA,2BAA2B;AAC3B,gFAAgF;AAChF,+EAA+E;AAC/E,8EAA8E;AAC9E,oBAAoB;AACpB,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAC;AACzE,OAAO,EAAE,qBAAqB,EAAE,MAAM,2BAA2B,CAAC;AAElE,MAAM,IAAI,GAAG,sCAAsC,CAAC;AAEpD,SAAS,eAAe,CAAC,IAA+B;IACtD,OAAO;QACL,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC;YACd,GAAG,EAAE,EAAE,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;gBACtB,OAAO,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,CAAS,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;aACzD,CAAC,CAAC;YACH,KAAK,EAAE,EAAE,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,GAAE,CAAC,CAAC;SAC7B,CAAC;KACH,CAAC;AACJ,CAAC;AAED,IAAI,MAAmC,CAAC;AACxC,SAAS,WAAW;IAClB,OAAO,MAAM,CAAC,IAAI,CAAC,KAAK;SACrB,GAAG,CAAC,CAAC,CAAY,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;SACnC,MAAM,CAAC,CAAC,CAAS,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,sBAAsB,CAAC,CAAC,CAAC;AAC/D,CAAC;AAED,UAAU,CAAC,GAAG,EAAE;IACd,MAAM,GAAG,EAAE,CAAC,KAAK,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,kBAAkB,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;AACnE,CAAC,CAAC,CAAC;AACH,SAAS,CAAC,GAAG,EAAE;IACb,MAAM,CAAC,WAAW,EAAE,CAAC;AACvB,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,uBAAuB,EAAE,GAAG,EAAE;IACrC,EAAE,CAAC,kFAAkF,EAAE,KAAK,IAAI,EAAE;QAChG,MAAM,qBAAqB,CAAC,eAAe,CAAC,EAAE,CAAU,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC;QAClE,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC,OAAO,CAAC;YAC5B,iIAAiI;SAClI,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8EAA8E,EAAE,KAAK,IAAI,EAAE;QAC5F,MAAM,qBAAqB,CACzB,eAAe,CAAC;YACd,EAAE,SAAS,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,YAAY,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE;SACvF,CAAU,EACX,CAAC,IAAI,CAAC,CACP,CAAC;QACF,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAC3B,kIAAkI,CACnI,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,2EAA2E;IAC3E,2EAA2E;IAC3E,mEAAmE;IACnE,EAAE,CAAC,6EAA6E,EAAE,KAAK,IAAI,EAAE;QAC3F,MAAM,qBAAqB,CACzB,eAAe,CAAC;YACd,EAAE,SAAS,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,EAAE,YAAY,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE;SACpG,CAAU,EACX,CAAC,IAAI,CAAC,CACP,CAAC;QACF,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;IAChD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8DAA8D,EAAE,KAAK,IAAI,EAAE;QAC5E,MAAM,qBAAqB,CACzB,eAAe,CAAC;YACd;gBACE,SAAS,EAAE,IAAI;gBACf,QAAQ,EAAE,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE;gBAC/B,YAAY,EAAE,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE;gBACnC,SAAS,EAAE,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE;gBAChC,GAAG,EAAE,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE;gBAC1B,SAAS,EAAE,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,EAAE,SAAS,EAAE,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE;aACnE;SACF,CAAU,EACX,CAAC,IAAI,CAAC,CACP,CAAC;QACF,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,2BAA2B,CAAC,CAAC;IAClE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4EAA4E,EAAE,KAAK,IAAI,EAAE;QAC1F,MAAM,KAAK,GAAG,sCAAsC,CAAC;QACrD,MAAM,qBAAqB,CACzB,eAAe,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,EAAE,YAAY,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC,CAAU,EACjH,CAAC,IAAI,EAAE,KAAK,CAAC,CACd,CAAC;QACF,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QACtC,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,0BAA0B,CAAC,CAAC;IACjE,CAAC,CAAC,CAAC;IAEH,8EAA8E;IAC9E,4EAA4E;IAC5E,6EAA6E;IAC7E,8BAA8B;IAC9B,EAAE,CAAC,uEAAuE,EAAE,KAAK,IAAI,EAAE;QACrF,MAAM,qBAAqB,CACzB,eAAe,CAAC;YACd,EAAE,SAAS,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,EAAE,YAAY,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE;SACpG,CAAU,EACX,CAAC,IAAI,CAAC,CACP,CAAC;QACF,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,qBAAqB,CAAC,CAAC;IAC5D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8DAA8D,EAAE,KAAK,IAAI,EAAE;QAC5E,MAAM,MAAM,GAAG;YACb,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC;gBACd,GAAG,EAAE,KAAK,IAAI,EAAE;oBACd,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,CAAC;gBAC1B,CAAC;gBACD,KAAK,EAAE,KAAK,IAAI,EAAE,GAAE,CAAC;aACtB,CAAC;SACH,CAAC;QACF,MAAM,MAAM,CAAC,qBAAqB,CAAC,MAAe,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,aAAa,EAAE,CAAC;QACtF,MAAM,CACJ,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAY,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,4BAA4B,CAAC,CAAC,CAC9F,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACf,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}
+{"version":3,"file":"suspension-census.test.js","sourceRoot":"","sources":["../../../src/scripts/__tests__/suspension-census.test.ts"],"names":[],"mappings":"AAAA,2BAA2B;AAC3B,gFAAgF;AAChF,+EAA+E;AAC/E,8EAA8E;AAC9E,oBAAoB;AACpB,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAC;AACzE,OAAO,EAAE,qBAAqB,EAAE,MAAM,2BAA2B,CAAC;AAElE,MAAM,IAAI,GAAG,sCAAsC,CAAC;AAEpD,SAAS,eAAe,CAAC,IAA+B;IACtD,OAAO;QACL,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC;YACd,GAAG,EAAE,EAAE,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;gBACtB,OAAO,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,CAAS,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;aACzD,CAAC,CAAC;YACH,KAAK,EAAE,EAAE,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,GAAE,CAAC,CAAC;SAC7B,CAAC;KACH,CAAC;AACJ,CAAC;AAED,IAAI,MAAmC,CAAC;AACxC,SAAS,WAAW;IAClB,OAAO,MAAM,CAAC,IAAI,CAAC,KAAK;SACrB,GAAG,CAAC,CAAC,CAAY,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;SACnC,MAAM,CAAC,CAAC,CAAS,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,sBAAsB,CAAC,CAAC,CAAC;AAC/D,CAAC;AAED,UAAU,CAAC,GAAG,EAAE;IACd,MAAM,GAAG,EAAE,CAAC,KAAK,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,kBAAkB,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;AACnE,CAAC,CAAC,CAAC;AACH,SAAS,CAAC,GAAG,EAAE;IACb,MAAM,CAAC,WAAW,EAAE,CAAC;AACvB,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,uBAAuB,EAAE,GAAG,EAAE;IACrC,EAAE,CAAC,kFAAkF,EAAE,KAAK,IAAI,EAAE;QAChG,MAAM,qBAAqB,CAAC,eAAe,CAAC,EAAE,CAAU,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC;QAClE,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC,OAAO,CAAC;YAC5B,gJAAgJ;SACjJ,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8EAA8E,EAAE,KAAK,IAAI,EAAE;QAC5F,MAAM,qBAAqB,CACzB,eAAe,CAAC;YACd,EAAE,SAAS,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,YAAY,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE;SACvF,CAAU,EACX,CAAC,IAAI,CAAC,CACP,CAAC;QACF,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAC3B,iJAAiJ,CAClJ,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,2EAA2E;IAC3E,2EAA2E;IAC3E,mEAAmE;IACnE,EAAE,CAAC,6EAA6E,EAAE,KAAK,IAAI,EAAE;QAC3F,MAAM,qBAAqB,CACzB,eAAe,CAAC;YACd,EAAE,SAAS,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,EAAE,YAAY,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE;SACpG,CAAU,EACX,CAAC,IAAI,CAAC,CACP,CAAC;QACF,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;IAChD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8DAA8D,EAAE,KAAK,IAAI,EAAE;QAC5E,MAAM,qBAAqB,CACzB,eAAe,CAAC;YACd;gBACE,SAAS,EAAE,IAAI;gBACf,QAAQ,EAAE,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE;gBAC/B,YAAY,EAAE,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE;gBACnC,SAAS,EAAE,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE;gBAChC,GAAG,EAAE,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE;gBAC1B,SAAS,EAAE,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,EAAE,SAAS,EAAE,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE;aACnE;SACF,CAAU,EACX,CAAC,IAAI,CAAC,CACP,CAAC;QACF,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,2BAA2B,CAAC,CAAC;IAClE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4EAA4E,EAAE,KAAK,IAAI,EAAE;QAC1F,MAAM,KAAK,GAAG,sCAAsC,CAAC;QACrD,MAAM,qBAAqB,CACzB,eAAe,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,EAAE,YAAY,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC,CAAU,EACjH,CAAC,IAAI,EAAE,KAAK,CAAC,CACd,CAAC;QACF,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QACtC,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,0BAA0B,CAAC,CAAC;IACjE,CAAC,CAAC,CAAC;IAEH,8EAA8E;IAC9E,4EAA4E;IAC5E,6EAA6E;IAC7E,8BAA8B;IAC9B,EAAE,CAAC,uEAAuE,EAAE,KAAK,IAAI,EAAE;QACrF,MAAM,qBAAqB,CACzB,eAAe,CAAC;YACd,EAAE,SAAS,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,EAAE,YAAY,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE;SACpG,CAAU,EACX,CAAC,IAAI,CAAC,CACP,CAAC;QACF,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,qBAAqB,CAAC,CAAC;IAC5D,CAAC,CAAC,CAAC;IAEH,6EAA6E;IAC7E,4EAA4E;IAC5E,uEAAuE;IACvE,6EAA6E;IAC7E,qEAAqE;IACrE,kEAAkE;IAClE,EAAE,CAAC,gEAAgE,EAAE,KAAK,IAAI,EAAE;QAC9E,MAAM,qBAAqB,CACzB,eAAe,CAAC;YACd,EAAE,SAAS,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,EAAE,YAAY,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,YAAY,EAAE,CAAC,EAAE;SACrH,CAAU,EACX,CAAC,IAAI,CAAC,CACP,CAAC;QACF,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,wBAAwB,CAAC,CAAC;IAC/D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sHAAsH,EAAE,KAAK,IAAI,EAAE;QACpI,MAAM,qBAAqB,CACzB,eAAe,CAAC;YACd,EAAE,SAAS,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,EAAE,YAAY,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,YAAY,EAAE,CAAC,EAAE;SACrH,CAAU,EACX,CAAC,IAAI,CAAC,CACP,CAAC;QACF,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,gBAAgB,CAAC,CAAC;IACvD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qEAAqE,EAAE,KAAK,IAAI,EAAE;QACnF,MAAM,qBAAqB,CAAC,eAAe,CAAC,EAAE,CAAU,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC;QAClE,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,gBAAgB,CAAC,CAAC;IACvD,CAAC,CAAC,CAAC;IAEH,0EAA0E;IAC1E,4EAA4E;IAC5E,4EAA4E;IAC5E,EAAE,CAAC,gDAAgD,EAAE,KAAK,IAAI,EAAE;QAC9D,MAAM,qBAAqB,CACzB,eAAe,CAAC;YACd,EAAE,SAAS,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,EAAE,YAAY,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,YAAY,EAAE,CAAC,EAAE;SACrH,CAAU,EACX,CAAC,IAAI,CAAC,CACP,CAAC;QACF,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,wBAAwB,CAAC,CAAC;IAC/D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8CAA8C,EAAE,KAAK,IAAI,EAAE;QAC5D,MAAM,qBAAqB,CACzB,eAAe,CAAC;YACd;gBACE,SAAS,EAAE,IAAI;gBACf,QAAQ,EAAE,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,EAAE,YAAY,EAAE,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE;gBACpE,SAAS,EAAE,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,EAAE,GAAG,EAAE,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE;gBAC5D,SAAS,EAAE,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,EAAE,SAAS,EAAE,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE;gBAClE,YAAY,EAAE,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE;aACpC;SACF,CAAU,EACX,CAAC,IAAI,CAAC,CACP,CAAC;QACF,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,gBAAgB,CAAC,CAAC;IACvD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8DAA8D,EAAE,KAAK,IAAI,EAAE;QAC5E,MAAM,MAAM,GAAG;YACb,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC;gBACd,GAAG,EAAE,KAAK,IAAI,EAAE;oBACd,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,CAAC;gBAC1B,CAAC;gBACD,KAAK,EAAE,KAAK,IAAI,EAAE,GAAE,CAAC;aACtB,CAAC;SACH,CAAC;QACF,MAAM,MAAM,CAAC,qBAAqB,CAAC,MAAe,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,aAAa,EAAE,CAAC;QACtF,MAAM,CACJ,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAY,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,4BAA4B,CAAC,CAAC,CAC9F,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACf,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/payload/platform/plugins/scheduling/mcp/dist/scripts/agent-turn-dispatch.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"agent-turn-dispatch.d.ts","sourceRoot":"","sources":["../../src/scripts/agent-turn-dispatch.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,OAAO,EAAE,KAAK,MAAM,EAAE,MAAM,cAAc,CAAC;AAmB3C,MAAM,MAAM,YAAY,GACpB;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GACvE;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,GACrE;IAAE,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC;AAErB;;;;GAIG;AACH,wBAAgB,kBAAkB,CAAC,MAAM,EAAE;IACzC,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;CAC3B,GAAG,YAAY,CAaf;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,UAAU,CAAC,OAAO,kBAAkB,CAAC,CAAC,CAAC,CAAC,GAAG,MAAM,CAY1F;AAED;;;;;;;;;GASG;AACH,wBAAgB,QAAQ,CAAC,IAAI,EAAE,YAAY,GAAG,MAAM,CAInD;AAED;;;;;;;;;;GAUG;AACH,wBAAsB,iBAAiB,CACrC,OAAO,EAAE,MAAM,EACf,OAAO,EAAE,MAAM,EACf,WAAW,EAAE,MAAM,EACnB,MAAM,EAAE,MAAM,EACd,cAAc,EAAE,MAAM,EACtB,OAAO,EAAE,MAAM,GAAG,IAAI,EACtB,aAAa,EAAE,MAAM,GAAG,IAAI,EAC5B,WAAW,EAAE,MAAM,EACnB,MAAM,EAAE,MAAM,EAId,KAAK,EAAE,MAAM,GAAG,IAAI,GACnB,OAAO,CAAC,IAAI,CAAC,CA+Gf;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAsB,gBAAgB,CACpC,MAAM,EAAE,MAAM,EACd,eAAe,EAAE,MAAM,EAAE,EACzB,WAAW,EAAE,MAAM,GAClB,OAAO,CAAC,IAAI,CAAC,CA8Ef;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAsB,kBAAkB,CACtC,MAAM,EAAE,MAAM,EACd,eAAe,EAAE,MAAM,EAAE,EACzB,YAAY,GAAE,SAAS,MAAM,EAAwB,GACpD,OAAO,CAAC,IAAI,CAAC,CAsCf;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAsB,qBAAqB,CAAC,MAAM,EAAE,MAAM,EAAE,eAAe,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAiDpG;AAED;;;;;;;;;;;GAWG;AACH,wBAAsB,iBAAiB,CAAC,MAAM,EAAE,MAAM,EAAE,eAAe,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAwChG;AAgCD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoCG;AACH,wBAAsB,wBAAwB,CAAC,MAAM,EAAE,MAAM,EAAE,eAAe,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAsDvG;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AACH,wBAAsB,uBAAuB,CAAC,MAAM,EAAE,MAAM,EAAE,eAAe,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CA8CtG;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,wBAAsB,qBAAqB,CACzC,MAAM,EAAE,MAAM,EACd,eAAe,EAAE,MAAM,EAAE,GACxB,OAAO,CAAC,IAAI,CAAC,CA8Df;AAED;;;;;;;;;;;GAWG;AACH,wBAAsB,gBAAgB,CACpC,MAAM,EAAE,MAAM,EACd,eAAe,EAAE,MAAM,EAAE,EACzB,KAAK,EAAE,MAAM,GACZ,OAAO,CAAC,IAAI,CAAC,CAiCf"}
+{"version":3,"file":"agent-turn-dispatch.d.ts","sourceRoot":"","sources":["../../src/scripts/agent-turn-dispatch.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,OAAO,EAAE,KAAK,MAAM,EAAE,MAAM,cAAc,CAAC;AAmB3C,MAAM,MAAM,YAAY,GACpB;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GACvE;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,GACrE;IAAE,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC;AAErB;;;;GAIG;AACH,wBAAgB,kBAAkB,CAAC,MAAM,EAAE;IACzC,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;CAC3B,GAAG,YAAY,CAaf;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,UAAU,CAAC,OAAO,kBAAkB,CAAC,CAAC,CAAC,CAAC,GAAG,MAAM,CAY1F;AAED;;;;;;;;;GASG;AACH,wBAAgB,QAAQ,CAAC,IAAI,EAAE,YAAY,GAAG,MAAM,CAInD;AAED;;;;;;;;;;GAUG;AACH,wBAAsB,iBAAiB,CACrC,OAAO,EAAE,MAAM,EACf,OAAO,EAAE,MAAM,EACf,WAAW,EAAE,MAAM,EACnB,MAAM,EAAE,MAAM,EACd,cAAc,EAAE,MAAM,EACtB,OAAO,EAAE,MAAM,GAAG,IAAI,EACtB,aAAa,EAAE,MAAM,GAAG,IAAI,EAC5B,WAAW,EAAE,MAAM,EACnB,MAAM,EAAE,MAAM,EAId,KAAK,EAAE,MAAM,GAAG,IAAI,GACnB,OAAO,CAAC,IAAI,CAAC,CA+Gf;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAsB,gBAAgB,CACpC,MAAM,EAAE,MAAM,EACd,eAAe,EAAE,MAAM,EAAE,EACzB,WAAW,EAAE,MAAM,GAClB,OAAO,CAAC,IAAI,CAAC,CA8Ef;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAsB,kBAAkB,CACtC,MAAM,EAAE,MAAM,EACd,eAAe,EAAE,MAAM,EAAE,EACzB,YAAY,GAAE,SAAS,MAAM,EAAwB,GACpD,OAAO,CAAC,IAAI,CAAC,CAsCf;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAsB,qBAAqB,CAAC,MAAM,EAAE,MAAM,EAAE,eAAe,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAiDpG;AAED;;;;;;;;;;;GAWG;AACH,wBAAsB,iBAAiB,CAAC,MAAM,EAAE,MAAM,EAAE,eAAe,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAwChG;AAgCD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoCG;AACH,wBAAsB,wBAAwB,CAAC,MAAM,EAAE,MAAM,EAAE,eAAe,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAsDvG;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AACH,wBAAsB,uBAAuB,CAAC,MAAM,EAAE,MAAM,EAAE,eAAe,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CA8CtG;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,wBAAsB,qBAAqB,CACzC,MAAM,EAAE,MAAM,EACd,eAAe,EAAE,MAAM,EAAE,GACxB,OAAO,CAAC,IAAI,CAAC,CA2Ef;AAED;;;;;;;;;;;GAWG;AACH,wBAAsB,gBAAgB,CACpC,MAAM,EAAE,MAAM,EACd,eAAe,EAAE,MAAM,EAAE,EACzB,KAAK,EAAE,MAAM,GACZ,OAAO,CAAC,IAAI,CAAC,CAiCf"}

package/payload/platform/plugins/scheduling/mcp/dist/scripts/agent-turn-dispatch.js

@@ -670,7 +670,11 @@ export async function auditSuspensionCensus(driver, localAccountIds) {
               sum(CASE WHEN e.eventStatus = 'suspended' THEN 1 ELSE 0 END) AS suspended,
               sum(CASE WHEN e.eventStatus = 'due' THEN 1 ELSE 0 END) AS due,
               sum(CASE WHEN e.eventStatus = 'cancelled' THEN 1 ELSE 0 END) AS cancelled,
-              sum(CASE WHEN e.eventStatus = 'completed' THEN 1 ELSE 0 END) AS completed`, { localAccountIds });
+              sum(CASE WHEN e.eventStatus = 'completed' THEN 1 ELSE 0 END) AS completed,
+              sum(CASE WHEN e.eventStatus = 'suspended'
+                        AND ( (e.notes IS NULL AND e.routineTemplate IS NULL)
+                           OR (e.notes IS NOT NULL AND NOT e.notes CONTAINS 'Suspended') )
+                       THEN 1 ELSE 0 END) AS unattributed`, { localAccountIds });
         const num = (raw) => typeof raw === "number"
             ? raw
             : raw && typeof raw.toNumber === "function"
@@ -685,6 +689,7 @@ export async function auditSuspensionCensus(driver, localAccountIds) {
                 due: num(rec.get("due")),
                 cancelled: num(rec.get("cancelled")),
                 completed: num(rec.get("completed")),
+                unattributed: num(rec.get("unattributed")),
             });
         }
         // Driven by localAccountIds, not by the result rows: an account with no
@@ -693,11 +698,19 @@ export async function auditSuspensionCensus(driver, localAccountIds) {
         for (const accountId of localAccountIds) {
             const c = byAccount.get(accountId) ?? {
                 routines: 0, dispatchable: 0, suspended: 0, due: 0, cancelled: 0, completed: 0,
+                unattributed: 0,
             };
             const other = c.routines - c.dispatchable - c.suspended - c.due - c.cancelled - c.completed;
+            // Task 2209 — `unattributed` is appended after `other` and deliberately
+            // outside its arithmetic: `other` reconciles status buckets against the
+            // row count, while this reconciles a suspended row against whether
+            // anything recorded why it stopped. The detail modal can only show a
+            // reason that was written, and a suspend path that appended no note emits
+            // no event of its own, so this count is the only control that reveals it.
             console.error(`[schedule-audit] op=suspension-census acct=${accountId.slice(0, 8)} ` +
                 `routines=${c.routines} dispatchable=${c.dispatchable} suspended=${c.suspended} ` +
-                `due=${c.due} cancelled=${c.cancelled} completed=${c.completed} other=${other}`);
+                `due=${c.due} cancelled=${c.cancelled} completed=${c.completed} other=${other} ` +
+                `unattributed=${c.unattributed}`);
         }
     }
     catch (err) {