toolroll 0.9.52 → 0.9.53

package/dist/surface.js

@@ -13,7 +13,7 @@ import { FLOWS_DESCRIPTORS } from "./flows-cli.js";
  * What the tests DO hold to the code: every root here is a routed verb
  * and every routed verb appears here; every declared flag lives in the
  * parser's global vocabulary with the declared arity; the subcommand
- * inventories for task/publish/config/approver/routine/contest match the
+ * inventories for task/publish/config/approver match the
  * exported action lists their dispatchers consult; keyed mutations
  * declare --key; notableReasons come from DOCUMENTED_REASONS. What they
  * CANNOT prove — that a given flag is read by a given handler — is why
@@ -243,7 +243,7 @@ const GUIDE_ROWS = [
     { invocation: "task block", synopsis: "make one task wait for another", audience: "agent", agentMayInvoke: true, mutation: "keyed",
         positionals: [{ name: "id", required: true, meaning: "the waiting task" }],
         flags: [jsonFlag, dbFlag, keyFlag, { name: "on", takesValue: true, meaning: "the blocker's id" }],
-        notableReasons: ["unknown-task", "contest-open"] },
+        notableReasons: ["unknown-task"] },
     { invocation: "task unblock", synopsis: "stop waiting", audience: "agent", agentMayInvoke: true, mutation: "keyed",
         positionals: [{ name: "id", required: true, meaning: "the waiting task" }],
         flags: [jsonFlag, dbFlag, keyFlag, { name: "on", takesValue: true, meaning: "the blocker's id" }],
@@ -251,7 +251,7 @@ const GUIDE_ROWS = [
     { invocation: "task next", synopsis: "move a task to the front of ITS queue (scheduling only; approval still required)", audience: "agent", agentMayInvoke: true, mutation: "keyed",
         positionals: [{ name: "id", required: true, meaning: "the task" }],
         flags: [jsonFlag, dbFlag, keyFlag, { name: "undo", takesValue: false, meaning: "back to filing order" }],
-        notableReasons: ["unknown-task", "claimed", "contest-open"] },
+        notableReasons: ["unknown-task", "claimed"] },
     operator("task steer", "one credentialed note read before the task's next attempt — steering speaks with the operator's voice"),
     { invocation: "task assign", synopsis: "reserve a task for one worker, or return it to the shared queue", audience: "agent", agentMayInvoke: true, mutation: "keyed",
         positionals: [{ name: "id", required: true, meaning: "the task" }],
@@ -265,9 +265,8 @@ const GUIDE_ROWS = [
             { name: "goal", takesValue: true, meaning: "what success is" },
             { name: "not", takesValue: true, meaning: "explicitly out of scope" },
             { name: "touches", takesValue: true, meaning: "comma-separated paths this may change" },
-            { name: "budget-usd", takesValue: true, meaning: "spend ceiling for the build" },
-            { name: "risk", takesValue: true, meaning: "declared risk: routine, elevated, or high — the route reads it" }],
-        notableReasons: ["unknown-task", "contest-open"] },
+            { name: "budget-usd", takesValue: true, meaning: "spend ceiling for the build" }],
+        notableReasons: ["unknown-task"] },
     { invocation: "task plan", synopsis: "ask for a plan document (a planning session drafts; a person approves)", audience: "agent", agentMayInvoke: true, mutation: "keyed",
         positionals: [{ name: "id", required: true, meaning: "the task" }],
         flags: [jsonFlag, dbFlag, keyFlag,
@@ -300,7 +299,7 @@ const GUIDE_ROWS = [
         notableReasons: ["usage", "unauthenticated", "not-found"] },
     operator("task accept", "record an explicit acceptance with limitations; does not change checks or prove deployment"),
     operator("task repair", "inspect or approve an existing historical repair draft; use task revise for new feedback"),
-    operator("task route", "which configured agents plan, build and repair this task; phase and risk changes require renewed approval"),
+    operator("task route", "which configured agents plan, build and repair this task; phase and size changes require renewed approval"),
     operator("task reopen", "resume external work its tracker closed and has been SEEN open again"),
     operator("task stop", "stop ONE exact live attempt (--run <id>): durable before any process is signalled, answers 'stopping' until its own processes are established gone; work, branch, and evidence preserved; no strike, no retry"),
     operator("run settle", "last resort for a finished run whose process witness can't be proven either way: records your --why in the ledger; refuses while any of the run's processes is alive"),
@@ -312,7 +311,7 @@ const GUIDE_ROWS = [
             { name: "runner", takesValue: true, meaning: "your registered worker name" },
             { name: "token", takesValue: true, meaning: "the worker's token" },
             { name: "ttl", takesValue: true, meaning: "lease seconds" }],
-        notableReasons: ["held", "fenced", "unapproved", "reserved", "external", "contest-open", "claimed", "not-ready"] },
+        notableReasons: ["held", "fenced", "unapproved", "reserved", "external", "claimed", "not-ready"] },
     { invocation: "heartbeat", synopsis: "still working; extends the lease", audience: "agent", agentMayInvoke: true, mutation: "identity-idempotent",
         positionals: [{ name: "lease", required: true, meaning: "the lease id" }],
         flags: [jsonFlag, dbFlag], notableReasons: ["not-leased", "fenced"] },
@@ -338,9 +337,6 @@ const GUIDE_ROWS = [
     { invocation: "cap list", synopsis: "recorded capabilities", audience: "agent", agentMayInvoke: true, mutation: "none", flags: [jsonFlag, dbFlag, repoFlag] },
     { invocation: "outbox list", synopsis: "queued notifications", audience: "agent", agentMayInvoke: true, mutation: "none", flags: [jsonFlag, dbFlag] },
     { invocation: "incident list", synopsis: "open incidents", audience: "agent", agentMayInvoke: true, mutation: "none", flags: [jsonFlag, dbFlag] },
-    { invocation: "routine list", synopsis: "scheduled routines", audience: "agent", agentMayInvoke: true, mutation: "none", flags: [jsonFlag, dbFlag] },
-    { invocation: "routine show", synopsis: "one routine in full", audience: "agent", agentMayInvoke: true, mutation: "none",
-        positionals: [{ name: "id", required: true, meaning: "the routine" }], flags: [jsonFlag, dbFlag] },
     { invocation: "config show", synopsis: "phase and spend configuration", audience: "agent", agentMayInvoke: true, mutation: "none", flags: [jsonFlag, dbFlag, repoFlag] },
     { invocation: "setup show", synopsis: "installation setup", audience: "agent", agentMayInvoke: true, mutation: "none", flags: [jsonFlag, dbFlag] },
     { invocation: "verify show", synopsis: "the repository's check level, its approved full and quick commands, and a suggested quick command", audience: "agent", agentMayInvoke: true, mutation: "none", flags: [jsonFlag, dbFlag, repoFlag] },
@@ -350,11 +346,9 @@ const GUIDE_ROWS = [
             { name: "report", takesValue: false, meaning: "record readiness observations under --runner" },
             { name: "runner", takesValue: true, meaning: "the registered worker name reporting" },
             { name: "token", takesValue: true, meaning: "that worker's token" }] },
-    { invocation: "template list", synopsis: "routine templates", audience: "agent", agentMayInvoke: true, mutation: "none", flags: [jsonFlag, dbFlag] },
+    { invocation: "template list", synopsis: "work templates: tasks and scheduled flows", audience: "agent", agentMayInvoke: true, mutation: "none", flags: [jsonFlag, dbFlag] },
     { invocation: "template show", synopsis: "one template", audience: "agent", agentMayInvoke: true, mutation: "none",
         positionals: [{ name: "name", required: true, meaning: "the template" }], flags: [jsonFlag, dbFlag] },
-    { invocation: "contest show", synopsis: "a tournament's state and results", audience: "agent", agentMayInvoke: true, mutation: "none",
-        positionals: [{ name: "id", required: true, meaning: "the contest" }], flags: [jsonFlag, dbFlag] },
     { invocation: "webhook status", synopsis: "connected messaging services", audience: "agent", agentMayInvoke: true, mutation: "none", flags: [jsonFlag, dbFlag] },
     { invocation: "publish status", synopsis: "publication and merge-grant state", audience: "agent", agentMayInvoke: true, mutation: "none", flags: [jsonFlag, dbFlag] },
     // ---- operator ceremonies and infrastructure (listed, detail-free) ----
@@ -373,12 +367,6 @@ const GUIDE_ROWS = [
     operator("peek", "watch live agents in the terminal — one pane per open run; --tmux opens a window per run"),
     operator("incident resolve", "resolve an incident"),
     operator("decide", "read and ANSWER parked decisions — answering is a person's act"),
-    operator("routine add", "file a standing order"),
-    operator("routine approve", "approve a standing order"),
-    operator("routine refresh", "re-resolve the agents a standing order freezes from today's configuration — approves nothing; approve it again afterwards"),
-    operator("routine pause", "pause a standing order"),
-    operator("routine resume", "resume a standing order"),
-    operator("routine run-now", "run a standing order immediately"),
     operatorRead("keys status", "which provider API keys are stored — never the values"),
     operator("keys set", "store a provider's API key as a private file — piped or --key-file, never on the command line"),
     operator("keys clear", "remove a stored provider key (kept only as a fallback; a subscription-mode provider is unaffected)"),
@@ -414,7 +402,6 @@ const GUIDE_ROWS = [
     operator("intake preview", "preview what intake would file"),
     operator("intake pr-comments", "intake review comments from a pull request"),
     operator("intake clear", "clear intake configuration"),
-    operator("contest exclude", "exclude a contestant from a tournament"),
     operator("webhook primary", "choose which service receives alerts"),
     operator("bridge", "the Telegram bridge (pairing, tokens, the follower)"),
     operator("enroll", "grant a repository authority (backends, dispatch) — its own explicit yes"),
@@ -464,7 +451,7 @@ const REMOTE_NO = [
     "memory propose",
 ];
 const REMOTE_STEP_UP = [
-    "proposals", "decide", "task regate", "task approve", "task accept", "task merge", "run settle", "routine approve", "knowledge apply", "memory apply",
+    "proposals", "decide", "task regate", "task approve", "task accept", "task merge", "run settle", "knowledge apply", "memory apply",
     "flows card approve", "flows card send-back", "flows script approve",
     "approver list", "approver add", "people list", "people invite", "people projects", "people revoke",
     // A person's own API tokens: a password step-up on the server's machine, or the console. Never with a token.
@@ -478,9 +465,8 @@ const REMOTE_YES = [
     "task state", "task block", "task unblock", "task next", "task steer", "task assign", "task scope", "task plan", "task hold", "task unhold", "task require",
     "task requeue", "task review", "task repair", "task route", "task reopen", "task stop", "task resume",
     "runner list", "coordinator list", "cap list", "cap add", "outbox list", "incident list", "incident resolve",
-    "routine list", "routine show", "routine add", "routine refresh", "routine pause", "routine resume", "routine run-now",
     "config show", "verify show", "intake show", "intake run", "intake preview", "intake pr-comments", "template list", "template show",
-    "contest show", "contest exclude", "webhook status", "review show", "chat-approval show", "chat-approval off",
+    "webhook status", "review show", "chat-approval show", "chat-approval off",
     "knowledge search", "knowledge impact", "knowledge refresh",
     "memory search", "memory decisions", "memory show", "memory decide", "memory retire", "memory review", "memory status",
     "flows list", "flows show", "flows export", "flows create", "flows edit", "flows trigger add", "flows trigger pause", "flows trigger resume",

package/dist/task-composer.d.ts

@@ -1,5 +1,5 @@
 /** UI choices translate into the same digest-bound schedules as the CLI. */
-import { type Schedule } from "./routine.js";
+import { type Schedule } from "./flow-schedule.js";
 export declare function composerSchedule(fields: URLSearchParams): {
     ok: true;
     schedule: string | null;

package/dist/task-composer.js

@@ -1,5 +1,5 @@
 /** UI choices translate into the same digest-bound schedules as the CLI. */
-import { parseSchedule, scheduleText, validTimezone } from "./routine.js";
+import { parseSchedule, scheduleText, validTimezone } from "./flow-schedule.js";
 export function composerSchedule(fields) {
     const repeat = fields.get("repeat") ?? "once";
     if (repeat === "once")

package/dist/task-control.d.ts

@@ -16,7 +16,7 @@
  * the preserved draft with fresh proof.
  *
  * Nothing here is a second engine: the stop rides the existing run, claim,
- * hold, recovery, invocation-gateway, and held-session machinery. This
+ * hold, recovery, and invocation-gateway machinery. This
  * module only names the door and the fence.
  */
 import { type DispatchDiagnosis } from "./dispatch.js";
@@ -60,13 +60,6 @@ export type StopRequest = {
     runId: number;
     by: string;
     via: "cli" | "web" | "telegram" | "slack" | "discord" | "teams";
-    /** The held-session supervisor in this process, when there is one: a
-     * held attempt is fenced through its own handle the moment the request
-     * is durable (the lapse interval would take the same road within
-     * seconds for a request filed elsewhere). */
-    held?: {
-        stop(runId: number): Promise<void>;
-    } | undefined;
     /** A composing confirmation transaction runs this effect only after it commits. */
     deferSignal?: ((signal: () => void) => void) | undefined;
 };
@@ -78,13 +71,13 @@ export type StopOutcome = {
     taskId: string;
 } | {
     ok: false;
-    reason: "no-task" | "no-run" | "wrong-task" | "finished" | "not-live" | "tournament" | "publication";
+    reason: "no-task" | "no-run" | "wrong-task" | "finished" | "not-live" | "publication";
     detail: string;
 };
 /**
  * The shared stop door. Records the durable request first (one fenced
  * transaction: exact run, still open, this task's current claim, no
- * tournament, no admitted publication), THEN signals every child this
+ * admitted publication), THEN signals every child this
  * process holds for the attempt. A worker in another process observes the
  * same row through its stop watch within STOP_WATCH_MS.
  */

package/dist/task-control.js

@@ -16,7 +16,7 @@
  * the preserved draft with fresh proof.
  *
  * Nothing here is a second engine: the stop rides the existing run, claim,
- * hold, recovery, invocation-gateway, and held-session machinery. This
+ * hold, recovery, and invocation-gateway machinery. This
  * module only names the door and the fence.
  */
 import { ownedProcessCount, runOwnerTag, terminateOwnedProcesses } from "./exec.js";
@@ -108,7 +108,7 @@ export async function underStopWatch(store, runId, body, options = {}) {
 /**
  * The shared stop door. Records the durable request first (one fenced
  * transaction: exact run, still open, this task's current claim, no
- * tournament, no admitted publication), THEN signals every child this
+ * admitted publication), THEN signals every child this
  * process holds for the attempt. A worker in another process observes the
  * same row through its stop watch within STOP_WATCH_MS.
  */
@@ -123,11 +123,6 @@ export function requestTaskStop(store, request, now) {
     let terminated = 0;
     const signal = () => {
         terminated = terminateStoppedAttempt(store, request.runId);
-        if (request.held !== undefined && store.heldSessionOf(request.runId) !== null) {
-            void request.held.stop(request.runId).catch(() => {
-                // The lapse interval retries the same fence; the durable row stands.
-            });
-        }
     };
     if (request.deferSignal)
         request.deferSignal(signal);

package/dist/teammate-desk.js

@@ -13,7 +13,7 @@
 import { flowCardHref, flowDefinitionOf } from "./flow-engine.js";
 import { flowFromSteps } from "./flows.js";
 import { addFlowTriggerTo, removeFlowTrigger, runScheduleNow, scheduleFromWords, triggerConfigOf } from "./flow-triggers.js";
-import { describeSchedule, parseSchedule } from "./routine.js";
+import { describeSchedule, parseSchedule } from "./flow-schedule.js";
 import { labelOf, nameOf } from "./teammate-admin.js";
 /** The zone on a desk where the teammate handles what it's asked. */
 export const DESK_ZONE = "handle";

package/dist/teammates-ui.js

@@ -5,7 +5,7 @@ import { callWords, defaultRule, numberFields, receiptWords } from "./teammate-t
 import { MEMORY_CHARS, searchMemories } from "./teammate-memory.js";
 import { deskOf, localZone, routinesOf } from "./teammate-desk.js";
 import { weekOf, weekWords } from "./teammate-week.js";
-import { describeSchedule, parseSchedule } from "./routine.js";
+import { describeSchedule, parseSchedule } from "./flow-schedule.js";
 /** v94: the Tools section's rule rows; a limit's fields show only while "Up to a limit" is chosen. */
 export const TEAMMATE_CSS = `.teammate-tools .tool-grant{border-top:1px solid var(--so-line);padding-top:12px;margin-top:12px}.teammate-tools .tool-grant:first-of-type{border-top:0;margin-top:0;padding-top:0}.teammate-tools h3{font-size:1rem;margin:0 0 4px}.teammate-tools .tool-rule{display:grid;gap:6px;padding:10px 0;border-bottom:1px solid var(--so-line)}.teammate-tools .tool-rule:last-of-type{border-bottom:0}.teammate-tools .tool-rule .meta{display:block}.teammate-tools select,.teammate-tools input{max-width:100%;box-sizing:border-box}.teammate-tools .tool-limit{display:none;flex-wrap:wrap;align-items:center;gap:6px}.teammate-tools .tool-rule:has(option[value="limit"]:checked) .tool-limit{display:flex}.teammate-tools .tool-rule>select{width:auto;min-width:16em}.teammate-tools .tool-limit select{width:auto}.teammate-tools .tool-limit input{width:7em}.teammate-tools .tool-buttons{display:flex;flex-wrap:wrap;gap:8px;margin-top:8px}.teammate-tools button{min-height:44px}.teammate-activity li{overflow-wrap:anywhere}.teammate-memory .memory-tell,.teammate-memory .memory-search{display:flex;flex-wrap:wrap;gap:8px;align-items:flex-end;margin:0 0 12px}.teammate-memory .memory-tell textarea{flex:1 1 280px}.teammate-memory .memory-search input{flex:1 1 220px}.teammate-memory button{min-height:44px}.teammate-memories{list-style:none;padding:0;margin:0}.teammate-memories li{padding:10px 0;border-top:1px solid var(--so-line);overflow-wrap:anywhere}.teammate-memories li:first-child{border-top:0}.teammate-memories .meta{display:block;font-size:.85rem}.teammate-memories details.memory-edit{border:0;padding:0;margin:2px 0 0;background:transparent;box-shadow:none}.memory-edit summary{cursor:pointer;min-height:32px;display:inline-flex;align-items:center;font-size:.85rem;font-weight:400;color:var(--so-muted)}.tool-undo{border:0;padding:0;margin:8px 0;background:transparent;box-shadow:none}.tool-undo summary{cursor:pointer;min-height:36px;display:inline-flex;align-items:center;font-size:.9rem}.tool-undo-row{display:flex;flex-wrap:wrap;gap:6px;align-items:center;margin:6px 0}.tool-undo-row select{width:auto}.teammate-overrides,.teammate-undo{padding-left:18px}.teammate-undo li{margin:6px 0}.teammate-undo form{display:inline}.teammate-week h3{font-size:1rem;margin:14px 0 4px}.teammate-week button{min-height:44px}.teammate-routines{list-style:none;padding:0;margin:8px 0}.teammate-routines li{display:grid;gap:4px;padding:10px 0;border-top:1px solid var(--so-line)}.teammate-routines li:first-child{border-top:0}.routine-buttons{display:flex;flex-wrap:wrap;gap:8px}.routine-buttons button,.routine-add button{min-height:44px}.routine-add{display:flex;flex-wrap:wrap;gap:8px;align-items:flex-end;margin:8px 0}.routine-add label{display:grid;gap:4px;flex:1 1 200px}.routine-add label:first-of-type{flex:0 1 180px}.teammate-actions,.question-options{display:flex;flex-wrap:wrap;gap:8px;margin:8px 0}.teammate-actions form,.question-options form{margin:0}.memory-edit form{display:grid;gap:8px;margin-top:6px}.memory-buttons{display:flex;flex-wrap:wrap;gap:8px}@media(max-width:600px){.teammate-tools select,.teammate-tools input{font-size:16px}}`;
 const USES = [["free", "Do it"], ["limit", "Do it, up to a limit"], ["ask", "Ask first"], ["never", "Never"]];

package/dist/telegram-mate.d.ts

@@ -1,6 +1,5 @@
 import { type PhoneLink } from "./chat-channel.js";
 export { channelRepos as telegramConversationRepos, resolveChannelMate as resolveTelegramMate, tooLongText, whichTaskText, replyContextFor, NO_PHONE_LINK, NO_TASK_LINK, proposalLink, confirmedLink, proposalPreview, proposalOutcomeText, handoffCardText, confirmedCardText, CHAT_ACTION_PARITY as TELEGRAM_ACTION_PARITY, parityGaps, type PhoneLink, type ResolvedMate, type ParitySupport } from "./chat-channel.js";
-import { type DoorOptions } from "./mate-doors.js";
 import { type MateAsk, type Store, type TelegramBinding } from "./store.js";
 import type { SubscriptionMateRunner } from "./subscription-chat.js";
 import type { TelegramTransport } from "./telegram.js";
@@ -20,8 +19,6 @@ export type TelegramConversationOptions = {
     evidenceRoot: string;
     /** Injected by tests; production invokes the isolated local harness. */
     subscriptionRunner?: SubscriptionMateRunner;
-    /** The held-session supervisor in this process, when there is one (a stop fences through it). */
-    held?: DoorOptions["held"];
     /**
      * The https origin a phone link may open, read again on EVERY call (a
      * card is linked immediately before it is sent or edited, never from a

package/dist/telegram-mate.js

@@ -277,7 +277,6 @@ export function applyProposalTap(store, binding, token, message, repos, options,
         via: "telegram",
         evidenceRoot: options.evidenceRoot,
         confirm: action.phase === "yes",
-        ...(options.held === undefined ? {} : { held: options.held }),
         deferSignal: signal => effects.push({ kind: "signal", run: signal }),
     });
     if (!outcome.ok && outcome.reason === "needs-confirm") {

package/dist/templates.d.ts

@@ -1,6 +1,6 @@
 /**
- * The template library (adoption track, step 2) — common standing orders
- * shipped as STATIC DATA that renders into editable, UNAPPROVED drafts.
+ * The template library (adoption track, step 2) — common work shipped as
+ * STATIC DATA that renders into editable, UNAPPROVED drafts.
  *
  * What a template is: a pre-filled form. What it is not: automation with
  * authority. Applying one produces exactly the rows a manual filing
@@ -9,7 +9,10 @@
  * capitals, because `--file` must never read as a yes.
  *
  * The Codex adoption review (finding 10) drew the v1 line: templates may
- * express ONLY what a task or routine proposal can carry today. The two
+ * express ONLY what a task proposal or a scheduled flow can carry today. A
+ * repeating template (v115: what a routine template was) makes a scheduled
+ * flow whose schedule starts paused, and whose every firing waits for
+ * approval under the project's rules. The two
  * use cases that imply separate authenticated authority — GitHub issue
  * intake (a grant) and CI babysitting (publish + the repair button) —
  * ship as RECIPES: they display the existing ceremonies, and cannot be
@@ -35,11 +38,12 @@ export type TaskTemplate = {
     /** The fields most installations change — shown in `show` and preview. */
     edit: string[];
 };
-export type RoutineTemplate = {
-    kind: "routine";
+export type ScheduledTemplate = {
+    kind: "scheduled";
     name: string;
     purpose: string;
-    routineName: string;
+    /** The flow's name. */
+    title: string;
     goal: string;
     outOfScope: string | null;
     touches: string[];
@@ -60,6 +64,6 @@ export type RecipeTemplate = {
         run: string;
     }[];
 };
-export type Template = TaskTemplate | RoutineTemplate | RecipeTemplate;
+export type Template = TaskTemplate | ScheduledTemplate | RecipeTemplate;
 export declare const TEMPLATES: readonly Template[];
 export declare function templateByName(name: string): Template | null;

package/dist/templates.js

@@ -1,6 +1,6 @@
 /**
- * The template library (adoption track, step 2) — common standing orders
- * shipped as STATIC DATA that renders into editable, UNAPPROVED drafts.
+ * The template library (adoption track, step 2) — common work shipped as
+ * STATIC DATA that renders into editable, UNAPPROVED drafts.
  *
  * What a template is: a pre-filled form. What it is not: automation with
  * authority. Applying one produces exactly the rows a manual filing
@@ -9,7 +9,10 @@
  * capitals, because `--file` must never read as a yes.
  *
  * The Codex adoption review (finding 10) drew the v1 line: templates may
- * express ONLY what a task or routine proposal can carry today. The two
+ * express ONLY what a task proposal or a scheduled flow can carry today. A
+ * repeating template (v115: what a routine template was) makes a scheduled
+ * flow whose schedule starts paused, and whose every firing waits for
+ * approval under the project's rules. The two
  * use cases that imply separate authenticated authority — GitHub issue
  * intake (a grant) and CI babysitting (publish + the repair button) —
  * ship as RECIPES: they display the existing ceremonies, and cannot be
@@ -21,10 +24,10 @@
  */
 export const TEMPLATES = [
     {
-        kind: "routine",
+        kind: "scheduled",
         name: "nightly-deps",
         purpose: "keep dependencies fresh without surprise majors",
-        routineName: "nightly-deps",
+        title: "Keep dependencies current",
         goal: "Update dependencies conservatively: refresh the lockfile within existing semver ranges, run the full test suite, and summarize what moved in the handoff — plus anything notable you saw (majors now available, security advisories, packages that look abandoned). If the suite fails after the refresh, park with the failure rather than pinning things until it passes.",
         outOfScope: "No major version bumps. No edits to application code beyond what the lockfile refresh itself forces. No changes to CI configuration.",
         touches: [],
@@ -37,10 +40,10 @@ export const TEMPLATES = [
         edit: ["schedule", "goal (name your package manager if it is unusual)", "ceiling (a weekly dollar cap)"],
     },
     {
-        kind: "routine",
+        kind: "scheduled",
         name: "test-coverage",
         purpose: "grow the test suite one module at a time",
-        routineName: "test-coverage",
+        title: "Test one overlooked module",
         goal: "Pick ONE module that is under-tested — no tests at all beats thin tests — and write focused tests for its observable behavior: inputs, outputs, and failure paths, not implementation details. One module per firing, then stop. If the module cannot be tested without refactoring it, do not refactor: park with a note naming the obstacle so a human can decide.",
         outOfScope: "No refactoring of the code under test. No snapshot tests. No changes outside the chosen module's test file(s).",
         touches: [],
@@ -53,10 +56,10 @@ export const TEMPLATES = [
         edit: ["schedule", "touches (pin the test directory layout if yours is unusual)"],
     },
     {
-        kind: "routine",
+        kind: "scheduled",
         name: "docs-drift",
         purpose: "keep the README and docs telling the truth weekly",
-        routineName: "docs-drift",
+        title: "Keep documentation accurate",
         goal: "Read the README and any docs/ pages against the code as it is today. Fix what has drifted: commands that moved, flags that changed, features that shipped undocumented, claims that stopped being true. Prefer deleting a stale claim over guessing a new one. Summarize every correction in the handoff.",
         outOfScope: "No restructuring or rewriting for style. No new documentation pages. No changes to code.",
         touches: ["README.md", "docs/"],

package/dist/toolroll-update.d.ts

@@ -103,6 +103,15 @@ export declare function releaseNotes(changelog: string, version: string): string
  * by its directory), and the directory after, so a crash never leaves a torn
  * database, catalog or command. */
 export declare function durableRename(temp: string, target: string): void;
+/** The tables a migration may remove whole (v115's removed features). */
+export declare const RETIRED_TABLES: readonly string[];
+/** A saved routine, as its move into a scheduled flow must account for it. */
+type RoutineDigest = {
+    id: number;
+    repo: string;
+    name: string;
+    live: boolean;
+};
 export type TableDigest = {
     name: string;
     columns: string[];
@@ -117,6 +126,7 @@ export type TableDigest = {
         count: number;
         nonNull: Record<string, number>;
     };
+    routines?: RoutineDigest[];
 };
 /** Each saved table's columns, row count and last rowid; the append-only ones hashed (deploy-browser's rehearsal check).
  * Bounded: only the ledger and small tables are read row by row. */

package/dist/toolroll-update.js

@@ -166,7 +166,7 @@ export function runningWorkWords(db) {
     const runs = db.prepare("SELECT tr.external_id id, COALESCE(t.title, tr.external_id) title FROM run r JOIN task_ref tr ON tr.id = r.task_ref LEFT JOIN task t ON t.id = tr.external_id WHERE r.outcome IS NULL ORDER BY r.id LIMIT 3").all()
         .map(row => `${String(row["id"])} (${String(row["title"]).slice(0, 60)})`);
     const more = Number(active["runs"] ?? 0) - runs.length;
-    const other = Object.entries(active).filter(([key, n]) => key !== "runs" && n > 0).map(([key, n]) => `${n} ${key === "claims" ? "claimed task" : key === "conversations" ? "chat request" : key === "sessions" ? "held session" : key === "stopping" ? "run still stopping" : key === "codingDeliveries" ? "unconfirmed coding message" : "coding session"}${n === 1 ? "" : "s"}`);
+    const other = Object.entries(active).filter(([key, n]) => key !== "runs" && n > 0).map(([key, n]) => `${n} ${key === "claims" ? "claimed task" : key === "conversations" ? "chat request" : key === "stopping" ? "run still stopping" : key === "codingDeliveries" ? "unconfirmed coding message" : "coding session"}${n === 1 ? "" : "s"}`);
     const parts = [...(runs.length ? [`running ${runs.join(", ")}${more > 0 ? ` and ${more} more` : ""}`] : []), ...other];
     return parts.join("; ");
 }
@@ -322,7 +322,9 @@ export function durableRename(temp, target) {
  * only when every saved value is null, or, with `carried`, when the receiving table gained exactly one receipt under
  * that destination per row holding a value, and as many non-null values per column as the dropped columns held.
  * `receives`: the only rows the table may gain are those receipts. `compacted`: rows may go only into summary rows,
- * whose `sum` grows by exactly as many. */
+ * whose `sum` grows by exactly as many. `retired`: a removed feature's table, which may go whole. `fromRoutines`: rows
+ * kept as they were, and the only rows the table may gain are one per saved routine, moved into a scheduled flow (its
+ * flow, or its schedule trigger naming that routine) — on only when the routine was approved and running. */
 const LEGACY_DESTINATION = "legacy:single-destination";
 const HISTORY_RULES = {
     action_ledger: { appendOnly: true }, ledger_seal: { appendOnly: true }, ledger_checkpoint: { appendOnly: true },
@@ -331,7 +333,16 @@ const HISTORY_RULES = {
     // v114: single-destination delivery columns may be dropped only once their values are legacy receipts.
     notification: { dropped: ["attempts", "last_attempt_at", "last_error", "delivered_at", "receipt", "claim_owner", "claim_expires_at"], carried: { into: "notification_delivery", destination: LEGACY_DESTINATION } },
     notification_delivery: { receives: LEGACY_DESTINATION },
+    // v115: contests, held sessions, fallback chains and routines are removed; their tables go whole.
+    tournament_terms: { retired: true }, contest: { retired: true }, contestant: { retired: true },
+    routine: { retired: true }, routine_fire: { retired: true },
+    attended_authorization: { retired: true }, session_turn: { retired: true }, held_session: { retired: true },
+    fallback_config: { retired: true }, fallback_cycle: { retired: true }, fallback_transition: { retired: true },
+    // v115: each routine becomes one scheduled flow and its schedule trigger.
+    flow: { fromRoutines: "flow" }, flow_trigger: { fromRoutines: "trigger" },
 };
+/** The tables a migration may remove whole (v115's removed features). */
+export const RETIRED_TABLES = Object.freeze(Object.keys(HISTORY_RULES).filter(name => HISTORY_RULES[name].retired));
 const tableColumns = (db, name) => db.prepare("PRAGMA table_info(" + quote(name) + ")").all().map(r => String(r["name"]));
 const plainValue = (_, v) => v instanceof Uint8Array ? Buffer.from(v).toString("hex") : typeof v === "bigint" ? String(v) : v;
 /** Rows streamed into a sha256, never held together: through a rowid in rowid order, or a WITHOUT ROWID table whole. */
@@ -371,13 +382,50 @@ export function historySnapshot(db) {
         }
         if (rule?.receives)
             t.received = receipts(db, name, rule.receives, columns.filter(column => column !== "notification" && column !== "destination"));
-        if (rule?.appendOnly)
+        if (rule?.appendOnly || rule?.fromRoutines)
             t.hash = rowsHash(db, name, columns, t.last).hash;
         if (rule?.compacted)
             t.summed = summed(db, rule.compacted);
+        if (rule?.fromRoutines)
+            t.routines = savedRoutines(db);
         return t;
     });
 }
+/** Each saved routine (none when the table is gone or was never made), and whether it was approved and running. */
+function savedRoutines(db) {
+    if (!db.prepare("SELECT 1 FROM sqlite_master WHERE type='table' AND name='routine'").get())
+        return [];
+    const columns = new Set(tableColumns(db, "routine"));
+    const live = ["approved_at", "approved_digest", "digest", "paused", "approved_profile_json", "approved_route_json"].every(c => columns.has(c))
+        ? "(approved_at IS NOT NULL AND approved_digest = digest AND approved_profile_json IS NOT NULL AND approved_route_json IS NOT NULL AND paused = 0)" : "0";
+    return db.prepare("SELECT id, repo, name, " + live + " AS live FROM routine ORDER BY id").all()
+        .map(r => ({ id: Number(r["id"]), repo: String(r["repo"]), name: String(r["name"]), live: Number(r["live"]) === 1 }));
+}
+/** Whether a table's rows past its saved last rowid are exactly the flows (or schedule triggers) its saved routines became. */
+function movedRoutines(db, t, before) {
+    const routines = t.routines ?? [];
+    if (HISTORY_RULES[t.name].fromRoutines === "flow") {
+        const added = db.prepare("SELECT repo, name, state FROM flow WHERE rowid > ? ORDER BY rowid").all(t.last);
+        const key = (repo, name) => JSON.stringify([String(repo), String(name)]);
+        return added.length === routines.length && added.every(r => r["state"] === "active")
+            && JSON.stringify(added.map(r => key(r["repo"], r["name"])).sort()) === JSON.stringify(routines.map(r => key(r.repo, r.name)).sort());
+    }
+    // A trigger names its routine in its order, and belongs to a flow the move added for that same routine.
+    const flows = before.find(one => one.name === "flow");
+    if (flows === undefined)
+        return false;
+    const added = db.prepare(`SELECT t.kind, t.state, json_extract(t.config_json, '$.order.routine') AS routine, f.id AS flow, f.repo, f.name FROM flow_trigger t
+    LEFT JOIN flow f ON f.id = t.flow AND f.rowid > ? WHERE t.rowid > ? ORDER BY t.rowid`).all(flows.last, t.last);
+    const byId = new Map(routines.map(r => [r.id, r]));
+    const seen = new Set();
+    return added.length === routines.length && added.every(r => {
+        const routine = byId.get(Number(r["routine"]));
+        if (r["kind"] !== "schedule" || routine === undefined || seen.has(routine.id) || r["flow"] === null)
+            return false;
+        seen.add(routine.id);
+        return r["repo"] === routine.repo && r["name"] === routine.name && (r["state"] === "paused" || (r["state"] === "active" && routine.live));
+    });
+}
 /** The tables whose saved history the migration changed beyond what HISTORY_RULES declares. */
 export function changedHistory(db, before) {
     const tables = new Set(db.prepare("SELECT name FROM sqlite_master WHERE type='table'").all().map(r => String(r["name"])));
@@ -403,7 +451,7 @@ export function changedHistory(db, before) {
     };
     return before.filter(t => {
         if (!tables.has(t.name))
-            return true;
+            return HISTORY_RULES[t.name]?.retired !== true;
         const rule = HISTORY_RULES[t.name], present = new Set(tableColumns(db, t.name));
         if (t.columns.some(c => !present.has(c) && (!rule?.dropped?.includes(c) || (t.nonNull?.[c] !== 0 && !accounted(rule, t)))))
             return true;
@@ -412,6 +460,10 @@ export function changedHistory(db, before) {
             const after = rowsHash(db, t.name, columns);
             return after.count !== t.count || after.hash !== t.hash;
         }
+        if (rule?.fromRoutines) {
+            const kept = rowsHash(db, t.name, columns, t.last);
+            return kept.count !== t.count || kept.hash !== t.hash || !movedRoutines(db, t, before);
+        }
         if (rule?.appendOnly) {
             const after = rowsHash(db, t.name, columns, t.last);
             return after.count !== t.count || after.hash !== t.hash;

package/dist/work-index.js

@@ -72,8 +72,6 @@ const PROJECTION = `WITH RECURSIVE admitted AS MATERIALIZED (
   JOIN run r ON r.id=d.run JOIN admitted a ON a.ref_id=r.task_ref
   WHERE d.state<>'answered' AND d.answered_at IS NULL GROUP BY r.task_ref
 ), custody AS MATERIALIZED (
-  SELECT r.task_ref FROM held_session h JOIN run r ON r.id=h.run JOIN admitted a ON a.ref_id=r.task_ref WHERE h.ended_at IS NULL
-  UNION
   SELECT r.task_ref FROM run r INDEXED BY work_spawned_run JOIN admitted a ON a.ref_id=r.task_ref
     WHERE r.provider_started_at IS NOT NULL AND NOT EXISTS(SELECT 1 FROM run_process p WHERE p.run=r.id) AND NOT EXISTS(SELECT 1 FROM run_process_summary s WHERE s.run=r.id)
   UNION
@@ -110,8 +108,7 @@ const PROJECTION = `WITH RECURSIVE admitted AS MATERIALIZED (
 ), workers AS MATERIALIZED (
   SELECT r.name,r.capacity,r.heartbeat_at,j.value repo,
     (SELECT COUNT(*) FROM claim c WHERE c.runner=r.name AND c.released_at IS NULL AND c.expires_at>$now
-      AND c.lease_generation=(SELECT MAX(newest.lease_generation) FROM claim newest WHERE newest.task_ref=c.task_ref)
-      AND c.lease_id NOT IN (SELECT lease_id FROM held_session WHERE ended_at IS NULL)) occupied
+      AND c.lease_generation=(SELECT MAX(newest.lease_generation) FROM claim newest WHERE newest.task_ref=c.task_ref)) occupied
   FROM runner r,json_each(CASE WHEN json_valid(r.repos) THEN r.repos ELSE '[]' END) j WHERE r.retired_at IS NULL
 ), facts AS MATERIALIZED (
   SELECT c.*,f.version_count,f.family_updated,f.earlier_active,f.earlier_id,f.family_running,f.question_id,
@@ -289,8 +286,7 @@ function registerValidators(store) {
  * `workspace`: a finished task whose last build's workspace note is still
  * there, which only the store can read (a held or unreadable workspace). */
 function custodyReadings(store) {
-    const refs = store.handle.prepare(`SELECT r.task_ref FROM held_session h JOIN run r ON r.id=h.run WHERE h.ended_at IS NULL
-    UNION SELECT r.task_ref FROM run r WHERE r.provider_started_at IS NOT NULL AND NOT EXISTS(SELECT 1 FROM run_process p WHERE p.run=r.id) AND NOT EXISTS(SELECT 1 FROM run_process_summary s WHERE s.run=r.id)
+    const refs = store.handle.prepare(`SELECT r.task_ref FROM run r WHERE r.provider_started_at IS NOT NULL AND NOT EXISTS(SELECT 1 FROM run_process p WHERE p.run=r.id) AND NOT EXISTS(SELECT 1 FROM run_process_summary s WHERE s.run=r.id)
     UNION SELECT r.task_ref FROM run_process p JOIN run r ON r.id=p.run WHERE p.exited_at IS NULL AND p.container_empty_at IS NULL`).all().map(row => Number(row['task_ref']));
     const noted = store.handle.prepare(`SELECT r.task_ref,r.worktree FROM task t JOIN task_ref tr ON tr.external_id=t.id
     JOIN run r ON r.id=(SELECT MAX(id) FROM run WHERE task_ref=tr.id AND role IN ('builder','scout') AND finished_at IS NOT NULL)

package/dist/workspace-ui.js

@@ -506,7 +506,7 @@ export function workCounts(rows) {
 export function compareWorkRows(a, b) {
     return a.rank - b.rank || (a.updatedAt < b.updatedAt ? 1 : a.updatedAt > b.updatedAt ? -1 : 0);
 }
-const WORK_KEYS = new Set(["inbox", "board", "queue", "work", "done", "activity", "review", "tasks", "runs", "workbench", "routines", "recipes", "ledger"]);
+const WORK_KEYS = new Set(["inbox", "board", "queue", "work", "done", "activity", "review", "tasks", "runs", "workbench", "recipes", "ledger"]);
 const SETTINGS_KEYS = new Set(["fleet", "caps", "people", "mode", "system", "settings"]);
 export function primaryDestinationOf(active) {
     if (active === "chat")

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "toolroll",
-  "version": "0.9.52",
+  "version": "0.9.53",
   "description": "A control plane for unattended coding agents — queue tasks, walk away, come back to pull requests. Agents build in leased worktrees, never touch your default branch, and interrupt you only for decisions that need a human.",
   "directories": {
     "doc": "docs"

package/scripts/recovery-canary.mjs

@@ -27,7 +27,7 @@ for (let index = 2; index < process.argv.length; index++) {
 assert(Number.isSafeInteger(rounds) && rounds > 0 && rounds <= 1000, "rounds must be an integer from 1 to 1000");
 const { openStore } = await import(pathToFileURL(join(root, "dist/store.js")));
 const { register, recoverDead, DEFAULT_LIVENESS_MS } = await import(pathToFileURL(join(root, "dist/runner.js")));
-const { acquire, completeFenced } = await import(pathToFileURL(join(root, "dist/claim.js")));
+const { acquire, finalize } = await import(pathToFileURL(join(root, "dist/claim.js")));
 const { WorktreePool } = await import(pathToFileURL(join(root, "dist/worktree.js")));
 const { run } = await import(pathToFileURL(join(root, "dist/exec.js")));
 const { HANDOFF_PREFIX } = await import(pathToFileURL(join(root, "dist/evidence.js")));
@@ -101,7 +101,7 @@ try {
       const blocked = await pool.lease(request);
       assert.equal(blocked.ok, false);
       assert.equal(blocked.reason, "in-use");
-      assert.equal(completeFenced(store, "old-lease", "done", expired).ok, false);
+      assert.equal(finalize(store, "old-lease", { kind: "complete", state: "done", now: expired }).ok, false);
       assert.notEqual(store.getTask("work").state, "done");
       writer.kill("SIGKILL");
       await exited;
@@ -114,7 +114,7 @@ try {
       assert.equal(await readFile(join(path, "draft.txt"), "utf8"), draft);
       assert.equal(await git(path, ["rev-parse", "HEAD"]), head);
       assert((await readFile(resumed.reclaimed, "utf8")).includes(draft.trim()));
-      assert.equal(completeFenced(store, "new-lease", "failed", expired).ok, true);
+      assert.equal(finalize(store, "new-lease", { kind: "complete", state: "failed", now: expired }).ok, true);
       await pool.release(path, expired);
       cases.push({ round: index + 1, scenario, passed: true, oldCompletion: "fenced", liveWriter: "refused-reuse", draft: "preserved", commit: "preserved" });
     } finally {