agentbox-app 0.1.11 → 0.1.13

package/main/store/home.mjs

@@ -15,7 +15,10 @@
 // and repeat rules all sat in it.
 //
 // So this is the same convention, one name over: a dot-folder in her home
-// named after this app.
+// named after this app. On Linux a fresh install does not get that dot-folder,
+// and it does not get a visible folder of the app's name in $HOME. Application
+// data belongs in $XDG_DATA_HOME (see defaultStoreRoot). An existing dot-folder
+// is still read, so a store already on disk is not orphaned.
 //
 // WHAT MOVES AND WHAT DOES NOT, because the line is not "everything of ours".
 // The app's own RECORDS move: the work item ledger, session traces, run
@@ -37,7 +40,7 @@ import fs from 'node:fs';
 import os from 'node:os';
 import path from 'node:path';
 import crypto from 'node:crypto';
-import { WAS, envNames, nameSlug, readEnv } from '../../shared/product-name.mjs';
+import { Name, WAS, envNames, nameSlug, readEnv } from '../../shared/product-name.mjs';
 
 const isDir = (dir) => { try { return fs.statSync(dir).isDirectory(); } catch { return false; } };
 
@@ -61,6 +64,25 @@ export function storeRootEnv(storeRoot) {
   return env;
 }
 
+// Where a config that names no store keeps the inbox.
+//
+// macOS, and anything that is not Linux: a folder of the app's name in the
+// home directory. That is the folder this app has used since 2026-09-22.
+// Linux: $XDG_DATA_HOME/<slug>, or ~/.local/share/<slug> when the variable is
+// unset, blank, or not an absolute path. A visible directory in $HOME is not
+// where an application writes. Measured 2026-10-07: a config that named no
+// store created one.
+//
+// The home and the environment are arguments so a test can ask about another
+// machine. A caller that passes a stand-in home must pass an environment that
+// belongs to it. This function does not decide that; it uses the env it is given.
+export function defaultStoreRoot({ home = os.homedir(), platform = process.platform, env = process.env } = {}) {
+  if (platform !== 'linux') return path.join(home, Name);
+  const given = typeof env?.XDG_DATA_HOME === 'string' ? env.XDG_DATA_HOME.trim() : '';
+  const base = given && path.isAbsolute(given) ? given : path.join(home, '.local', 'share');
+  return path.join(base, nameSlug);
+}
+
 // One env var, for tests and for anyone who keeps their home somewhere else.
 // Read at call time rather than captured, because a test sets it per case.
 //
@@ -74,9 +96,10 @@ export function storeRootEnv(storeRoot) {
 // store goes missing on the release that renames the app.
 // `homeDir` is injected so a test can ask what this answers on a machine with
 // an old dot-folder on it, without one having to exist on the machine running
-// the test. Production never passes it.
-export function appHome(homeDir = os.homedir()) {
-  const override = readEnv('HOME');
+// the test. `platform` and `env` are the same kind of injection: this suite
+// runs on a Mac and still has to answer a Linux home. Production passes neither.
+export function appHome(homeDir = os.homedir(), { platform = process.platform, env } = {}) {
+  const override = readEnv('HOME', env);
   if (override) return override;
   const here = path.join(homeDir, `.${nameSlug}`);
   if (isDir(here)) return here;
@@ -84,6 +107,15 @@ export function appHome(homeDir = os.homedir()) {
     const older = path.join(homeDir, `.${was.toLowerCase()}`);
     if (isDir(older)) return older;
   }
+  // A fresh Linux directory has nothing of ours on disk yet. The answer has to
+  // be the same path loadConfig opens, or the desktop and this lookup write two
+  // stores. The machine's own XDG_DATA_HOME is an absolute path in the real
+  // home; applying it to a stand-in home writes that stand-in's store there.
+  // A caller that passes `env` is asking about that environment, not this one.
+  if (platform === 'linux') {
+    const real = env === undefined && path.resolve(homeDir) === path.resolve(os.homedir());
+    return defaultStoreRoot({ home: homeDir, platform: 'linux', env: real ? process.env : (env ?? {}) });
+  }
   return here;
 }
 

package/main/store/project.mjs

@@ -4,34 +4,30 @@
 
 import fs from 'node:fs';
 import path from 'node:path';
-import os from 'node:os';
 import crypto from 'node:crypto';
 import { SCHEMA_VERSION, validateCreation, creationText, TEXT_CREATION_KINDS } from '../../shared/contracts.mjs';
 import { assertInside, assertCreationDir, deniesGitOrEnvPath } from './paths.mjs';
 import { migrateIndex } from './migrate.mjs';
 import { withProjectLockSync } from './project-lock.mjs';
-import { Name, readEnv } from '../../shared/product-name.mjs';
-
-// The machine-wide root: ASTRAL_HOME, else the folder named below. This is
-// where device-local files live (settings.json, ui-state.json, usage.json,
-// .runtime-pids, ...) and where a founder's PRE-account projects sit until they
-// are migrated into an account space. It is NEVER account-scoped: those files
-// stay global (Phase 1).
+import { readEnv } from '../../shared/product-name.mjs';
+import { defaultStoreRoot } from './home.mjs';
+
+// The machine-wide root: the store-home variable, else the same default
+// loadConfig uses when a config names no store. This is where device-local
+// files live (settings.json, ui-state.json, usage.json, .runtime-pids, ...)
+// and where a founder's PRE-account projects sit until they are migrated into
+// an account space. It is NEVER account-scoped: those files stay global
+// (Phase 1).
 //
-// THE FALLBACK IS THE APP'S OWN NAME NOW, where it used to be an older
-// product's folder.
+// THE FALLBACK IS defaultStoreRoot. On macOS that is a folder of the app's
+// name. On Linux it is the XDG data directory. A visible folder in $HOME was
+// the fallback until 2026-10-07, and a config that named no store created one.
 //
-// NOTHING WAS DELETED AND NOTHING MOVED. That folder is still on disk exactly
-// as it was. What changed is that this app stops reaching for it by default.
 // Her live store is named in zero.config.json and handed to every worker as
-// the app's own home variable, so this line was never the path she runs on; it
-// was only ever
-// the answer for an install carrying no config at all.
-//
-// An older product's HOME env var used to sit between these two. It is gone:
-// nothing sets it any more now that the store server carries the app's own name.
+// the app's own home variable, so this line is only ever the answer for an
+// install carrying no config and no store-home variable.
 export function legacyRoot() {
-  return readEnv('HOME') || path.join(os.homedir(), Name);
+  return readEnv('HOME') || defaultStoreRoot();
 }
 
 // The account currently signed in, if any. Set once at boot and re-resolved on

package/main/store.mjs

@@ -471,10 +471,7 @@ export class Store {
   // app restart, a reboot, and a store restored onto another machine, and so no
   // agent line can quietly move a time she set. 0 clears it.
   //
-  // This is the one write behind both gestures: deferring an agent's proposal
-  // out of the inbox and scheduling her own work to start at six. They were
-  // separate mechanisms before, and only the first existed: the old snooze was
-  // a renderer localStorage map that hid a row and deferred no work at all.
+  // Execution scheduling only. Inbox reminders use snoozeItem instead.
   scheduleItem(slug, id, runAt) {
     const { workItemsDisk } = this.modules;
     return workItemsDisk.updateWorkItem(
@@ -482,6 +479,15 @@ export class Store {
     );
   }
 
+  // Put the existing thread back in the person's inbox later. This never
+  // changes its execution schedule, answer, status, claim or delivery marks.
+  snoozeItem(slug, id, snoozedUntil) {
+    if (!Number.isFinite(snoozedUntil)) throw new Error('Later needs a valid time');
+    return this.modules.workItemsDisk.updateWorkItem(
+      this.productDir(slug), id, { snoozedUntil: Math.max(0, Math.trunc(snoozedUntil)) }, { source: 'founder' },
+    );
+  }
+
   // WHO A SHARED ROW IS WITH, changed by a person: handed to an agent, kept,
   // handed back, or passed on by a reply. Only the team fields, on the
   // person's own authority, so an agent writing afterwards cannot undo it.