toolroll 0.9.51 → 0.9.53

package/dist/surface.js

@@ -13,7 +13,7 @@ import { FLOWS_DESCRIPTORS } from "./flows-cli.js";
  * What the tests DO hold to the code: every root here is a routed verb
  * and every routed verb appears here; every declared flag lives in the
  * parser's global vocabulary with the declared arity; the subcommand
- * inventories for task/publish/config/approver/routine/contest match the
+ * inventories for task/publish/config/approver match the
  * exported action lists their dispatchers consult; keyed mutations
  * declare --key; notableReasons come from DOCUMENTED_REASONS. What they
  * CANNOT prove — that a given flag is read by a given handler — is why
@@ -243,7 +243,7 @@ const GUIDE_ROWS = [
     { invocation: "task block", synopsis: "make one task wait for another", audience: "agent", agentMayInvoke: true, mutation: "keyed",
         positionals: [{ name: "id", required: true, meaning: "the waiting task" }],
         flags: [jsonFlag, dbFlag, keyFlag, { name: "on", takesValue: true, meaning: "the blocker's id" }],
-        notableReasons: ["unknown-task", "contest-open"] },
+        notableReasons: ["unknown-task"] },
     { invocation: "task unblock", synopsis: "stop waiting", audience: "agent", agentMayInvoke: true, mutation: "keyed",
         positionals: [{ name: "id", required: true, meaning: "the waiting task" }],
         flags: [jsonFlag, dbFlag, keyFlag, { name: "on", takesValue: true, meaning: "the blocker's id" }],
@@ -251,7 +251,7 @@ const GUIDE_ROWS = [
     { invocation: "task next", synopsis: "move a task to the front of ITS queue (scheduling only; approval still required)", audience: "agent", agentMayInvoke: true, mutation: "keyed",
         positionals: [{ name: "id", required: true, meaning: "the task" }],
         flags: [jsonFlag, dbFlag, keyFlag, { name: "undo", takesValue: false, meaning: "back to filing order" }],
-        notableReasons: ["unknown-task", "claimed", "contest-open"] },
+        notableReasons: ["unknown-task", "claimed"] },
     operator("task steer", "one credentialed note read before the task's next attempt — steering speaks with the operator's voice"),
     { invocation: "task assign", synopsis: "reserve a task for one worker, or return it to the shared queue", audience: "agent", agentMayInvoke: true, mutation: "keyed",
         positionals: [{ name: "id", required: true, meaning: "the task" }],
@@ -265,9 +265,8 @@ const GUIDE_ROWS = [
             { name: "goal", takesValue: true, meaning: "what success is" },
             { name: "not", takesValue: true, meaning: "explicitly out of scope" },
             { name: "touches", takesValue: true, meaning: "comma-separated paths this may change" },
-            { name: "budget-usd", takesValue: true, meaning: "spend ceiling for the build" },
-            { name: "risk", takesValue: true, meaning: "declared risk: routine, elevated, or high — the route reads it" }],
-        notableReasons: ["unknown-task", "contest-open"] },
+            { name: "budget-usd", takesValue: true, meaning: "spend ceiling for the build" }],
+        notableReasons: ["unknown-task"] },
     { invocation: "task plan", synopsis: "ask for a plan document (a planning session drafts; a person approves)", audience: "agent", agentMayInvoke: true, mutation: "keyed",
         positionals: [{ name: "id", required: true, meaning: "the task" }],
         flags: [jsonFlag, dbFlag, keyFlag,
@@ -300,7 +299,7 @@ const GUIDE_ROWS = [
         notableReasons: ["usage", "unauthenticated", "not-found"] },
     operator("task accept", "record an explicit acceptance with limitations; does not change checks or prove deployment"),
     operator("task repair", "inspect or approve an existing historical repair draft; use task revise for new feedback"),
-    operator("task route", "which configured agents plan, build and repair this task; phase and risk changes require renewed approval"),
+    operator("task route", "which configured agents plan, build and repair this task; phase and size changes require renewed approval"),
     operator("task reopen", "resume external work its tracker closed and has been SEEN open again"),
     operator("task stop", "stop ONE exact live attempt (--run <id>): durable before any process is signalled, answers 'stopping' until its own processes are established gone; work, branch, and evidence preserved; no strike, no retry"),
     operator("run settle", "last resort for a finished run whose process witness can't be proven either way: records your --why in the ledger; refuses while any of the run's processes is alive"),
@@ -312,7 +311,7 @@ const GUIDE_ROWS = [
             { name: "runner", takesValue: true, meaning: "your registered worker name" },
             { name: "token", takesValue: true, meaning: "the worker's token" },
             { name: "ttl", takesValue: true, meaning: "lease seconds" }],
-        notableReasons: ["held", "fenced", "unapproved", "reserved", "external", "contest-open", "claimed", "not-ready"] },
+        notableReasons: ["held", "fenced", "unapproved", "reserved", "external", "claimed", "not-ready"] },
     { invocation: "heartbeat", synopsis: "still working; extends the lease", audience: "agent", agentMayInvoke: true, mutation: "identity-idempotent",
         positionals: [{ name: "lease", required: true, meaning: "the lease id" }],
         flags: [jsonFlag, dbFlag], notableReasons: ["not-leased", "fenced"] },
@@ -338,9 +337,6 @@ const GUIDE_ROWS = [
     { invocation: "cap list", synopsis: "recorded capabilities", audience: "agent", agentMayInvoke: true, mutation: "none", flags: [jsonFlag, dbFlag, repoFlag] },
     { invocation: "outbox list", synopsis: "queued notifications", audience: "agent", agentMayInvoke: true, mutation: "none", flags: [jsonFlag, dbFlag] },
     { invocation: "incident list", synopsis: "open incidents", audience: "agent", agentMayInvoke: true, mutation: "none", flags: [jsonFlag, dbFlag] },
-    { invocation: "routine list", synopsis: "scheduled routines", audience: "agent", agentMayInvoke: true, mutation: "none", flags: [jsonFlag, dbFlag] },
-    { invocation: "routine show", synopsis: "one routine in full", audience: "agent", agentMayInvoke: true, mutation: "none",
-        positionals: [{ name: "id", required: true, meaning: "the routine" }], flags: [jsonFlag, dbFlag] },
     { invocation: "config show", synopsis: "phase and spend configuration", audience: "agent", agentMayInvoke: true, mutation: "none", flags: [jsonFlag, dbFlag, repoFlag] },
     { invocation: "setup show", synopsis: "installation setup", audience: "agent", agentMayInvoke: true, mutation: "none", flags: [jsonFlag, dbFlag] },
     { invocation: "verify show", synopsis: "the repository's check level, its approved full and quick commands, and a suggested quick command", audience: "agent", agentMayInvoke: true, mutation: "none", flags: [jsonFlag, dbFlag, repoFlag] },
@@ -350,11 +346,9 @@ const GUIDE_ROWS = [
             { name: "report", takesValue: false, meaning: "record readiness observations under --runner" },
             { name: "runner", takesValue: true, meaning: "the registered worker name reporting" },
             { name: "token", takesValue: true, meaning: "that worker's token" }] },
-    { invocation: "template list", synopsis: "routine templates", audience: "agent", agentMayInvoke: true, mutation: "none", flags: [jsonFlag, dbFlag] },
+    { invocation: "template list", synopsis: "work templates: tasks and scheduled flows", audience: "agent", agentMayInvoke: true, mutation: "none", flags: [jsonFlag, dbFlag] },
     { invocation: "template show", synopsis: "one template", audience: "agent", agentMayInvoke: true, mutation: "none",
         positionals: [{ name: "name", required: true, meaning: "the template" }], flags: [jsonFlag, dbFlag] },
-    { invocation: "contest show", synopsis: "a tournament's state and results", audience: "agent", agentMayInvoke: true, mutation: "none",
-        positionals: [{ name: "id", required: true, meaning: "the contest" }], flags: [jsonFlag, dbFlag] },
     { invocation: "webhook status", synopsis: "connected messaging services", audience: "agent", agentMayInvoke: true, mutation: "none", flags: [jsonFlag, dbFlag] },
     { invocation: "publish status", synopsis: "publication and merge-grant state", audience: "agent", agentMayInvoke: true, mutation: "none", flags: [jsonFlag, dbFlag] },
     // ---- operator ceremonies and infrastructure (listed, detail-free) ----
@@ -373,12 +367,6 @@ const GUIDE_ROWS = [
     operator("peek", "watch live agents in the terminal — one pane per open run; --tmux opens a window per run"),
     operator("incident resolve", "resolve an incident"),
     operator("decide", "read and ANSWER parked decisions — answering is a person's act"),
-    operator("routine add", "file a standing order"),
-    operator("routine approve", "approve a standing order"),
-    operator("routine refresh", "re-resolve the agents a standing order freezes from today's configuration — approves nothing; approve it again afterwards"),
-    operator("routine pause", "pause a standing order"),
-    operator("routine resume", "resume a standing order"),
-    operator("routine run-now", "run a standing order immediately"),
     operatorRead("keys status", "which provider API keys are stored — never the values"),
     operator("keys set", "store a provider's API key as a private file — piped or --key-file, never on the command line"),
     operator("keys clear", "remove a stored provider key (kept only as a fallback; a subscription-mode provider is unaffected)"),
@@ -414,9 +402,7 @@ const GUIDE_ROWS = [
     operator("intake preview", "preview what intake would file"),
     operator("intake pr-comments", "intake review comments from a pull request"),
     operator("intake clear", "clear intake configuration"),
-    operator("contest exclude", "exclude a contestant from a tournament"),
     operator("webhook primary", "choose which service receives alerts"),
-    operator("webhook test", "send a test message"),
     operator("bridge", "the Telegram bridge (pairing, tokens, the follower)"),
     operator("enroll", "grant a repository authority (backends, dispatch) — its own explicit yes"),
     operator("revoke", "take an authority grant back"),
@@ -465,7 +451,7 @@ const REMOTE_NO = [
     "memory propose",
 ];
 const REMOTE_STEP_UP = [
-    "proposals", "decide", "task regate", "task approve", "task accept", "task merge", "run settle", "routine approve", "knowledge apply", "memory apply",
+    "proposals", "decide", "task regate", "task approve", "task accept", "task merge", "run settle", "knowledge apply", "memory apply",
     "flows card approve", "flows card send-back", "flows script approve",
     "approver list", "approver add", "people list", "people invite", "people projects", "people revoke",
     // A person's own API tokens: a password step-up on the server's machine, or the console. Never with a token.
@@ -479,9 +465,8 @@ const REMOTE_YES = [
     "task state", "task block", "task unblock", "task next", "task steer", "task assign", "task scope", "task plan", "task hold", "task unhold", "task require",
     "task requeue", "task review", "task repair", "task route", "task reopen", "task stop", "task resume",
     "runner list", "coordinator list", "cap list", "cap add", "outbox list", "incident list", "incident resolve",
-    "routine list", "routine show", "routine add", "routine refresh", "routine pause", "routine resume", "routine run-now",
     "config show", "verify show", "intake show", "intake run", "intake preview", "intake pr-comments", "template list", "template show",
-    "contest show", "contest exclude", "webhook status", "webhook test", "review show", "chat-approval show", "chat-approval off",
+    "webhook status", "review show", "chat-approval show", "chat-approval off",
     "knowledge search", "knowledge impact", "knowledge refresh",
     "memory search", "memory decisions", "memory show", "memory decide", "memory retire", "memory review", "memory status",
     "flows list", "flows show", "flows export", "flows create", "flows edit", "flows trigger add", "flows trigger pause", "flows trigger resume",

package/dist/task-composer.d.ts

@@ -1,5 +1,5 @@
 /** UI choices translate into the same digest-bound schedules as the CLI. */
-import { type Schedule } from "./routine.js";
+import { type Schedule } from "./flow-schedule.js";
 export declare function composerSchedule(fields: URLSearchParams): {
     ok: true;
     schedule: string | null;

package/dist/task-composer.js

@@ -1,5 +1,5 @@
 /** UI choices translate into the same digest-bound schedules as the CLI. */
-import { parseSchedule, scheduleText, validTimezone } from "./routine.js";
+import { parseSchedule, scheduleText, validTimezone } from "./flow-schedule.js";
 export function composerSchedule(fields) {
     const repeat = fields.get("repeat") ?? "once";
     if (repeat === "once")

package/dist/task-control.d.ts

@@ -16,7 +16,7 @@
  * the preserved draft with fresh proof.
  *
  * Nothing here is a second engine: the stop rides the existing run, claim,
- * hold, recovery, invocation-gateway, and held-session machinery. This
+ * hold, recovery, and invocation-gateway machinery. This
  * module only names the door and the fence.
  */
 import { type DispatchDiagnosis } from "./dispatch.js";
@@ -60,13 +60,6 @@ export type StopRequest = {
     runId: number;
     by: string;
     via: "cli" | "web" | "telegram" | "slack" | "discord" | "teams";
-    /** The held-session supervisor in this process, when there is one: a
-     * held attempt is fenced through its own handle the moment the request
-     * is durable (the lapse interval would take the same road within
-     * seconds for a request filed elsewhere). */
-    held?: {
-        stop(runId: number): Promise<void>;
-    } | undefined;
     /** A composing confirmation transaction runs this effect only after it commits. */
     deferSignal?: ((signal: () => void) => void) | undefined;
 };
@@ -78,13 +71,13 @@ export type StopOutcome = {
     taskId: string;
 } | {
     ok: false;
-    reason: "no-task" | "no-run" | "wrong-task" | "finished" | "not-live" | "tournament" | "publication";
+    reason: "no-task" | "no-run" | "wrong-task" | "finished" | "not-live" | "publication";
     detail: string;
 };
 /**
  * The shared stop door. Records the durable request first (one fenced
  * transaction: exact run, still open, this task's current claim, no
- * tournament, no admitted publication), THEN signals every child this
+ * admitted publication), THEN signals every child this
  * process holds for the attempt. A worker in another process observes the
  * same row through its stop watch within STOP_WATCH_MS.
  */

package/dist/task-control.js

@@ -16,7 +16,7 @@
  * the preserved draft with fresh proof.
  *
  * Nothing here is a second engine: the stop rides the existing run, claim,
- * hold, recovery, invocation-gateway, and held-session machinery. This
+ * hold, recovery, and invocation-gateway machinery. This
  * module only names the door and the fence.
  */
 import { ownedProcessCount, runOwnerTag, terminateOwnedProcesses } from "./exec.js";
@@ -108,7 +108,7 @@ export async function underStopWatch(store, runId, body, options = {}) {
 /**
  * The shared stop door. Records the durable request first (one fenced
  * transaction: exact run, still open, this task's current claim, no
- * tournament, no admitted publication), THEN signals every child this
+ * admitted publication), THEN signals every child this
  * process holds for the attempt. A worker in another process observes the
  * same row through its stop watch within STOP_WATCH_MS.
  */
@@ -123,11 +123,6 @@ export function requestTaskStop(store, request, now) {
     let terminated = 0;
     const signal = () => {
         terminated = terminateStoppedAttempt(store, request.runId);
-        if (request.held !== undefined && store.heldSessionOf(request.runId) !== null) {
-            void request.held.stop(request.runId).catch(() => {
-                // The lapse interval retries the same fence; the durable row stands.
-            });
-        }
     };
     if (request.deferSignal)
         request.deferSignal(signal);

package/dist/teammate-desk.js

@@ -13,7 +13,7 @@
 import { flowCardHref, flowDefinitionOf } from "./flow-engine.js";
 import { flowFromSteps } from "./flows.js";
 import { addFlowTriggerTo, removeFlowTrigger, runScheduleNow, scheduleFromWords, triggerConfigOf } from "./flow-triggers.js";
-import { describeSchedule, parseSchedule } from "./routine.js";
+import { describeSchedule, parseSchedule } from "./flow-schedule.js";
 import { labelOf, nameOf } from "./teammate-admin.js";
 /** The zone on a desk where the teammate handles what it's asked. */
 export const DESK_ZONE = "handle";

package/dist/teammates-ui.js

@@ -5,7 +5,7 @@ import { callWords, defaultRule, numberFields, receiptWords } from "./teammate-t
 import { MEMORY_CHARS, searchMemories } from "./teammate-memory.js";
 import { deskOf, localZone, routinesOf } from "./teammate-desk.js";
 import { weekOf, weekWords } from "./teammate-week.js";
-import { describeSchedule, parseSchedule } from "./routine.js";
+import { describeSchedule, parseSchedule } from "./flow-schedule.js";
 /** v94: the Tools section's rule rows; a limit's fields show only while "Up to a limit" is chosen. */
 export const TEAMMATE_CSS = `.teammate-tools .tool-grant{border-top:1px solid var(--so-line);padding-top:12px;margin-top:12px}.teammate-tools .tool-grant:first-of-type{border-top:0;margin-top:0;padding-top:0}.teammate-tools h3{font-size:1rem;margin:0 0 4px}.teammate-tools .tool-rule{display:grid;gap:6px;padding:10px 0;border-bottom:1px solid var(--so-line)}.teammate-tools .tool-rule:last-of-type{border-bottom:0}.teammate-tools .tool-rule .meta{display:block}.teammate-tools select,.teammate-tools input{max-width:100%;box-sizing:border-box}.teammate-tools .tool-limit{display:none;flex-wrap:wrap;align-items:center;gap:6px}.teammate-tools .tool-rule:has(option[value="limit"]:checked) .tool-limit{display:flex}.teammate-tools .tool-rule>select{width:auto;min-width:16em}.teammate-tools .tool-limit select{width:auto}.teammate-tools .tool-limit input{width:7em}.teammate-tools .tool-buttons{display:flex;flex-wrap:wrap;gap:8px;margin-top:8px}.teammate-tools button{min-height:44px}.teammate-activity li{overflow-wrap:anywhere}.teammate-memory .memory-tell,.teammate-memory .memory-search{display:flex;flex-wrap:wrap;gap:8px;align-items:flex-end;margin:0 0 12px}.teammate-memory .memory-tell textarea{flex:1 1 280px}.teammate-memory .memory-search input{flex:1 1 220px}.teammate-memory button{min-height:44px}.teammate-memories{list-style:none;padding:0;margin:0}.teammate-memories li{padding:10px 0;border-top:1px solid var(--so-line);overflow-wrap:anywhere}.teammate-memories li:first-child{border-top:0}.teammate-memories .meta{display:block;font-size:.85rem}.teammate-memories details.memory-edit{border:0;padding:0;margin:2px 0 0;background:transparent;box-shadow:none}.memory-edit summary{cursor:pointer;min-height:32px;display:inline-flex;align-items:center;font-size:.85rem;font-weight:400;color:var(--so-muted)}.tool-undo{border:0;padding:0;margin:8px 0;background:transparent;box-shadow:none}.tool-undo summary{cursor:pointer;min-height:36px;display:inline-flex;align-items:center;font-size:.9rem}.tool-undo-row{display:flex;flex-wrap:wrap;gap:6px;align-items:center;margin:6px 0}.tool-undo-row select{width:auto}.teammate-overrides,.teammate-undo{padding-left:18px}.teammate-undo li{margin:6px 0}.teammate-undo form{display:inline}.teammate-week h3{font-size:1rem;margin:14px 0 4px}.teammate-week button{min-height:44px}.teammate-routines{list-style:none;padding:0;margin:8px 0}.teammate-routines li{display:grid;gap:4px;padding:10px 0;border-top:1px solid var(--so-line)}.teammate-routines li:first-child{border-top:0}.routine-buttons{display:flex;flex-wrap:wrap;gap:8px}.routine-buttons button,.routine-add button{min-height:44px}.routine-add{display:flex;flex-wrap:wrap;gap:8px;align-items:flex-end;margin:8px 0}.routine-add label{display:grid;gap:4px;flex:1 1 200px}.routine-add label:first-of-type{flex:0 1 180px}.teammate-actions,.question-options{display:flex;flex-wrap:wrap;gap:8px;margin:8px 0}.teammate-actions form,.question-options form{margin:0}.memory-edit form{display:grid;gap:8px;margin-top:6px}.memory-buttons{display:flex;flex-wrap:wrap;gap:8px}@media(max-width:600px){.teammate-tools select,.teammate-tools input{font-size:16px}}`;
 const USES = [["free", "Do it"], ["limit", "Do it, up to a limit"], ["ask", "Ask first"], ["never", "Never"]];

package/dist/telegram-mate.d.ts

@@ -1,6 +1,5 @@
 import { type PhoneLink } from "./chat-channel.js";
 export { channelRepos as telegramConversationRepos, resolveChannelMate as resolveTelegramMate, tooLongText, whichTaskText, replyContextFor, NO_PHONE_LINK, NO_TASK_LINK, proposalLink, confirmedLink, proposalPreview, proposalOutcomeText, handoffCardText, confirmedCardText, CHAT_ACTION_PARITY as TELEGRAM_ACTION_PARITY, parityGaps, type PhoneLink, type ResolvedMate, type ParitySupport } from "./chat-channel.js";
-import { type DoorOptions } from "./mate-doors.js";
 import { type MateAsk, type Store, type TelegramBinding } from "./store.js";
 import type { SubscriptionMateRunner } from "./subscription-chat.js";
 import type { TelegramTransport } from "./telegram.js";
@@ -20,8 +19,6 @@ export type TelegramConversationOptions = {
     evidenceRoot: string;
     /** Injected by tests; production invokes the isolated local harness. */
     subscriptionRunner?: SubscriptionMateRunner;
-    /** The held-session supervisor in this process, when there is one (a stop fences through it). */
-    held?: DoorOptions["held"];
     /**
      * The https origin a phone link may open, read again on EVERY call (a
      * card is linked immediately before it is sent or edited, never from a

package/dist/telegram-mate.js

@@ -277,7 +277,6 @@ export function applyProposalTap(store, binding, token, message, repos, options,
         via: "telegram",
         evidenceRoot: options.evidenceRoot,
         confirm: action.phase === "yes",
-        ...(options.held === undefined ? {} : { held: options.held }),
         deferSignal: signal => effects.push({ kind: "signal", run: signal }),
     });
     if (!outcome.ok && outcome.reason === "needs-confirm") {

package/dist/templates.d.ts

@@ -1,6 +1,6 @@
 /**
- * The template library (adoption track, step 2) — common standing orders
- * shipped as STATIC DATA that renders into editable, UNAPPROVED drafts.
+ * The template library (adoption track, step 2) — common work shipped as
+ * STATIC DATA that renders into editable, UNAPPROVED drafts.
  *
  * What a template is: a pre-filled form. What it is not: automation with
  * authority. Applying one produces exactly the rows a manual filing
@@ -9,7 +9,10 @@
  * capitals, because `--file` must never read as a yes.
  *
  * The Codex adoption review (finding 10) drew the v1 line: templates may
- * express ONLY what a task or routine proposal can carry today. The two
+ * express ONLY what a task proposal or a scheduled flow can carry today. A
+ * repeating template (v115: what a routine template was) makes a scheduled
+ * flow whose schedule starts paused, and whose every firing waits for
+ * approval under the project's rules. The two
  * use cases that imply separate authenticated authority — GitHub issue
  * intake (a grant) and CI babysitting (publish + the repair button) —
  * ship as RECIPES: they display the existing ceremonies, and cannot be
@@ -35,11 +38,12 @@ export type TaskTemplate = {
     /** The fields most installations change — shown in `show` and preview. */
     edit: string[];
 };
-export type RoutineTemplate = {
-    kind: "routine";
+export type ScheduledTemplate = {
+    kind: "scheduled";
     name: string;
     purpose: string;
-    routineName: string;
+    /** The flow's name. */
+    title: string;
     goal: string;
     outOfScope: string | null;
     touches: string[];
@@ -60,6 +64,6 @@ export type RecipeTemplate = {
         run: string;
     }[];
 };
-export type Template = TaskTemplate | RoutineTemplate | RecipeTemplate;
+export type Template = TaskTemplate | ScheduledTemplate | RecipeTemplate;
 export declare const TEMPLATES: readonly Template[];
 export declare function templateByName(name: string): Template | null;

package/dist/templates.js

@@ -1,6 +1,6 @@
 /**
- * The template library (adoption track, step 2) — common standing orders
- * shipped as STATIC DATA that renders into editable, UNAPPROVED drafts.
+ * The template library (adoption track, step 2) — common work shipped as
+ * STATIC DATA that renders into editable, UNAPPROVED drafts.
  *
  * What a template is: a pre-filled form. What it is not: automation with
  * authority. Applying one produces exactly the rows a manual filing
@@ -9,7 +9,10 @@
  * capitals, because `--file` must never read as a yes.
  *
  * The Codex adoption review (finding 10) drew the v1 line: templates may
- * express ONLY what a task or routine proposal can carry today. The two
+ * express ONLY what a task proposal or a scheduled flow can carry today. A
+ * repeating template (v115: what a routine template was) makes a scheduled
+ * flow whose schedule starts paused, and whose every firing waits for
+ * approval under the project's rules. The two
  * use cases that imply separate authenticated authority — GitHub issue
  * intake (a grant) and CI babysitting (publish + the repair button) —
  * ship as RECIPES: they display the existing ceremonies, and cannot be
@@ -21,10 +24,10 @@
  */
 export const TEMPLATES = [
     {
-        kind: "routine",
+        kind: "scheduled",
         name: "nightly-deps",
         purpose: "keep dependencies fresh without surprise majors",
-        routineName: "nightly-deps",
+        title: "Keep dependencies current",
         goal: "Update dependencies conservatively: refresh the lockfile within existing semver ranges, run the full test suite, and summarize what moved in the handoff — plus anything notable you saw (majors now available, security advisories, packages that look abandoned). If the suite fails after the refresh, park with the failure rather than pinning things until it passes.",
         outOfScope: "No major version bumps. No edits to application code beyond what the lockfile refresh itself forces. No changes to CI configuration.",
         touches: [],
@@ -37,10 +40,10 @@ export const TEMPLATES = [
         edit: ["schedule", "goal (name your package manager if it is unusual)", "ceiling (a weekly dollar cap)"],
     },
     {
-        kind: "routine",
+        kind: "scheduled",
         name: "test-coverage",
         purpose: "grow the test suite one module at a time",
-        routineName: "test-coverage",
+        title: "Test one overlooked module",
         goal: "Pick ONE module that is under-tested — no tests at all beats thin tests — and write focused tests for its observable behavior: inputs, outputs, and failure paths, not implementation details. One module per firing, then stop. If the module cannot be tested without refactoring it, do not refactor: park with a note naming the obstacle so a human can decide.",
         outOfScope: "No refactoring of the code under test. No snapshot tests. No changes outside the chosen module's test file(s).",
         touches: [],
@@ -53,10 +56,10 @@ export const TEMPLATES = [
         edit: ["schedule", "touches (pin the test directory layout if yours is unusual)"],
     },
     {
-        kind: "routine",
+        kind: "scheduled",
         name: "docs-drift",
         purpose: "keep the README and docs telling the truth weekly",
-        routineName: "docs-drift",
+        title: "Keep documentation accurate",
         goal: "Read the README and any docs/ pages against the code as it is today. Fix what has drifted: commands that moved, flags that changed, features that shipped undocumented, claims that stopped being true. Prefer deleting a stale claim over guessing a new one. Summarize every correction in the handoff.",
         outOfScope: "No restructuring or rewriting for style. No new documentation pages. No changes to code.",
         touches: ["README.md", "docs/"],

package/dist/toolroll-update.d.ts

@@ -103,14 +103,35 @@ export declare function releaseNotes(changelog: string, version: string): string
  * by its directory), and the directory after, so a crash never leaves a torn
  * database, catalog or command. */
 export declare function durableRename(temp: string, target: string): void;
-type TableDigest = {
+/** The tables a migration may remove whole (v115's removed features). */
+export declare const RETIRED_TABLES: readonly string[];
+/** A saved routine, as its move into a scheduled flow must account for it. */
+type RoutineDigest = {
+    id: number;
+    repo: string;
+    name: string;
+    live: boolean;
+};
+export type TableDigest = {
     name: string;
     columns: string[];
+    rowid: boolean;
     count: number;
-    hash: string;
+    last: number;
+    hash?: string;
+    summed?: number;
+    nonNull?: Record<string, number>;
+    carry?: number;
+    received?: {
+        count: number;
+        nonNull: Record<string, number>;
+    };
+    routines?: RoutineDigest[];
 };
-/** Every historical row, table by table (deploy-browser's rehearsal check). */
+/** Each saved table's columns, row count and last rowid; the append-only ones hashed (deploy-browser's rehearsal check).
+ * Bounded: only the ledger and small tables are read row by row. */
 export declare function historySnapshot(db: DatabaseSync): TableDigest[];
+/** The tables whose saved history the migration changed beyond what HISTORY_RULES declares. */
 export declare function changedHistory(db: DatabaseSync, before: TableDigest[]): string[];
 export type StartOptions = {
     stateDir: string;