waterplane 0.0.1 → 0.1.6

package/packages/host/dist/routes/work/workintent.js

@@ -0,0 +1,167 @@
+/**
+ * Work routes — intent slice of `routes/work.ts` (see that file for the whole picture).
+ */
+import { containPayloadCwd, postClientDraft } from "../../agentintents.js";
+const OUTSIDE = "that folder is outside the configured root";
+function refuseOutside(a, intentId) {
+    a.c.send(a.ws, { t: "toast", text: `intent: ${OUTSIDE}` });
+    return { ok: false, reason: OUTSIDE, intentId };
+}
+const onIntentList = (a) => {
+    a.c.send(a.ws, a.c.intentSnapshot());
+};
+/**
+ * Take ownership of a piece of work.
+ *
+ * The receipt means more here than it does anywhere else on this wire: `ok`
+ * is not sent until the row is on disk (`IntentManager.post` persists
+ * synchronously and the dispatcher acks afterwards), because "the phone may now
+ * forget these words" is the entire promise.
+ */
+const onIntentPost = {
+    durable: true,
+    run: async (a) => {
+        // The ONE client path into the store (`agentintents.ts`'s
+        // `postClientDraft`): the cwd contained by hand — `contain` names a
+        // top-level string and this one is nested — the naming authors forced to
+        // `hand`, the budget fields and the agent mark stripped. The agent's HTTP
+        // route calls the same function, so the two cannot drift.
+        const posted = await postClientDraft(a.c, a.msg.intent);
+        if (!posted.ok) {
+            a.c.send(a.ws, { t: "toast", text: posted.refusedCwd ? "that folder is outside the configured root — nothing was written down" : `not queued: ${posted.reason}` });
+            return { ok: false, reason: posted.reason };
+        }
+        // A replayed intent id past the ledger's TTL lands here and gets the SAME
+        // row back — the second at-most-once guard, and the one that makes the
+        // phone's 30-minute expiry deletable.
+        return { ok: true, intentId: posted.intent.id, launchId: posted.intent.trigger.kind === "files" ? posted.intent.id : undefined };
+    },
+};
+/** Run it now, whatever the trigger says. Durable: "run it now" delivered twice
+ *  is the sweep running twice. */
+const onIntentRun = {
+    durable: true,
+    run: (a) => a.c.intents.runNow(a.msg.id).then((r) => {
+        if (!r.ok)
+            a.c.send(a.ws, { t: "toast", text: `intent: ${r.reason}` });
+        return { ok: r.ok, reason: r.reason, intentId: a.msg.id };
+    }),
+};
+/**
+ * Put a failed row back in the queue — the row's own tap, and the hand half of
+ * what an assessment's *still wanted* does.
+ *
+ * Durable for `intent.run`'s reason and one more: a re-queue delivered twice
+ * would otherwise write a second history entry saying a person asked twice,
+ * which is a sentence on the row that nobody said. At-most-once by ackId makes
+ * the replay a re-ack that writes nothing.
+ *
+ * And a re-queue delivered an HOUR late is safe — the case `intent.cancel` is
+ * deliberately not durable for — because the manager re-asks the live state:
+ * a row that ran in the meantime is refused in words rather than revived.
+ *
+ * ── …except that "still failed" is not the same failure ──────────────────────
+ *
+ * The state guard is what makes a late delivery safe, and on its own it is not
+ * enough. `failed` is a STATE, not an event: in the hour this op spent in an
+ * outbox the row can have been put back by hand or by an assessment, run, and
+ * failed again on something completely different. The manager's re-ask says
+ * "yes, failed" to that and revives it — starting the work over on the strength
+ * of a failure nobody has read, and quietly retiring the one that is actually
+ * on the row.
+ *
+ * So the phone sends WHICH failure it was looking at (`failedAt`) and it is
+ * compared with the row's own `settledAt` here. Equal, or absent — an older
+ * client, a row with no stamp — proceeds on the existing guard, which is
+ * `expectPrompt`'s posture on absence and the behaviour every build before this
+ * field had. Different ⇒ refused in words that say the row has failed again, so
+ * the person looks at the new failure and taps again if they still mean it.
+ * `by: "hand"` and not `"run"`: this tap puts the row back to wait its turn and
+ * fires nothing.
+ */
+const onIntentRequeue = {
+    durable: true,
+    run: (a) => {
+        const row = a.c.intents.get(a.msg.id);
+        if (a.msg.failedAt != null && row?.settledAt != null && row.settledAt !== a.msg.failedAt) {
+            const reason = "it has failed again since you looked — open it and read the new failure, then put it back if you still want it";
+            a.c.send(a.ws, { t: "toast", text: `intent: ${reason}` });
+            return { ok: false, reason, intentId: a.msg.id };
+        }
+        const r = a.c.intents.requeueFailed(a.msg.id, { kind: "hand" });
+        if (!r.ok)
+            a.c.send(a.ws, { t: "toast", text: `intent: ${r.reason}` });
+        return { ok: r.ok, reason: r.reason, intentId: a.msg.id };
+    },
+};
+const onIntentUpdate = {
+    durable: true,
+    run: async (a) => {
+        // Same gate as `intent.post`: wire directories are contained, never raw.
+        const patch = { ...a.msg.patch };
+        if (patch.cwd !== undefined) {
+            const cwd = await a.c.containRepoDir(patch.cwd);
+            if (!cwd)
+                return refuseOutside(a, a.msg.id);
+            patch.cwd = cwd;
+        }
+        if (patch.payload !== undefined) {
+            const payload = await containPayloadCwd(a.c, patch.payload);
+            if (!payload)
+                return refuseOutside(a, a.msg.id);
+            patch.payload = payload;
+        }
+        const r = a.c.intents.update(a.msg.id, patch);
+        if (!r.ok)
+            a.c.send(a.ws, { t: "toast", text: `intent: ${r.reason}` });
+        return { ok: r.ok, reason: r.reason, intentId: a.msg.id };
+    },
+};
+// Lifts ONE rung (the budget) for one row — never a fire. Durable like
+// `intent.update`: a replayed waiver sets the same flag again.
+const onIntentWaive = {
+    durable: true,
+    run: (a) => {
+        const r = a.c.intents.waive(a.msg.id, a.msg.rung, a.msg.on);
+        if (!r.ok)
+            a.c.send(a.ws, { t: "toast", text: `intent: ${r.reason}` });
+        return { ok: r.ok, reason: r.reason, intentId: a.msg.id };
+    },
+};
+const onIntentRetarget = {
+    durable: true,
+    run: async (a) => {
+        let cwd = a.msg.cwd;
+        if (cwd !== undefined) {
+            const inside = await a.c.containRepoDir(cwd);
+            if (!inside)
+                return refuseOutside(a, a.msg.id);
+            cwd = inside;
+        }
+        const r = a.c.intents.retarget(a.msg.id, a.msg.target, cwd);
+        if (!r.ok)
+            a.c.send(a.ws, { t: "toast", text: `intent: ${r.reason}` });
+        return { ok: r.ok, reason: r.reason, intentId: a.msg.id };
+    },
+};
+const onIntentCancel = (a) => {
+    // Deliberately not durable and never queued offline: a cancel delivered an
+    // hour late calls off work that has since run.
+    if (!a.c.intents.cancel(a.msg.id))
+        a.c.send(a.ws, { t: "toast", text: "that one has already been settled" });
+};
+const onIntentDismiss = (a) => {
+    a.c.intents.dismiss(a.msg.id);
+};
+export const workintentRoutes = {
+    "intent.list": onIntentList,
+    "intent.post": onIntentPost,
+    "intent.run": onIntentRun,
+    "intent.requeue": onIntentRequeue,
+    "intent.update": onIntentUpdate,
+    "intent.waive": onIntentWaive,
+    "intent.retarget": onIntentRetarget,
+    "intent.cancel": onIntentCancel,
+    "intent.dismiss": onIntentDismiss,
+};
+//# sourceMappingURL=workintent.js.map

package/packages/host/dist/routes/work/workintent.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"workintent.js","sourceRoot":"","sources":["../../../src/routes/work/workintent.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,OAAO,EAAE,iBAAiB,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAG3E,MAAM,OAAO,GAAG,4CAA4C,CAAC;AAC7D,SAAS,aAAa,CAAC,CAAkD,EAAE,QAAgB;IACzF,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,WAAW,OAAO,EAAE,EAAE,CAAC,CAAC;IAC3D,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC;AAClD,CAAC;AAED,MAAM,YAAY,GAAyB,CAAC,CAAC,EAAE,EAAE;IAC7C,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,cAAc,EAAE,CAAC,CAAC;AACzC,CAAC,CAAC;AAEF;;;;;;;GAOG;AACH,MAAM,YAAY,GAA6B;IAC7C,OAAO,EAAE,IAAI;IACb,GAAG,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACf,0DAA0D;QAC1D,oEAAoE;QACpE,yEAAyE;QACzE,0EAA0E;QAC1E,0DAA0D;QAC1D,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACxD,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;YACf,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,uEAAuE,CAAC,CAAC,CAAC,eAAe,MAAM,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;YACnK,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC;QAC9C,CAAC;QACD,0EAA0E;QAC1E,uEAAuE;QACvE,sCAAsC;QACtC,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,EAAE,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC;IACnI,CAAC;CACF,CAAC;AAEF;kCACkC;AAClC,MAAM,WAAW,GAA4B;IAC3C,OAAO,EAAE,IAAI;IACb,GAAG,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE;QAClD,IAAI,CAAC,CAAC,CAAC,EAAE;YAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,WAAW,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QACvE,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;IAC5D,CAAC,CAAC;CACH,CAAC;AAEF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AACH,MAAM,eAAe,GAAgC;IACnD,OAAO,EAAE,IAAI;IACb,GAAG,EAAE,CAAC,CAAC,EAAE,EAAE;QACT,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACtC,IAAI,CAAC,CAAC,GAAG,CAAC,QAAQ,IAAI,IAAI,IAAI,GAAG,EAAE,SAAS,IAAI,IAAI,IAAI,GAAG,CAAC,SAAS,KAAK,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC;YACzF,MAAM,MAAM,GAAG,gHAAgH,CAAC;YAChI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,WAAW,MAAM,EAAE,EAAE,CAAC,CAAC;YAC1D,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QACnD,CAAC;QACD,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;QAChE,IAAI,CAAC,CAAC,CAAC,EAAE;YAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,WAAW,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QACvE,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;IAC5D,CAAC;CACF,CAAC;AAEF,MAAM,cAAc,GAA+B;IACjD,OAAO,EAAE,IAAI;IACb,GAAG,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACf,yEAAyE;QACzE,MAAM,KAAK,GAAG,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC;QACjC,IAAI,KAAK,CAAC,GAAG,KAAK,SAAS,EAAE,CAAC;YAC5B,MAAM,GAAG,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YAChD,IAAI,CAAC,GAAG;gBAAE,OAAO,aAAa,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAC5C,KAAK,CAAC,GAAG,GAAG,GAAG,CAAC;QAClB,CAAC;QACD,IAAI,KAAK,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;YAChC,MAAM,OAAO,GAAG,MAAM,iBAAiB,CAAC,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;YAC5D,IAAI,CAAC,OAAO;gBAAE,OAAO,aAAa,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAChD,KAAK,CAAC,OAAO,GAAG,OAAO,CAAC;QAC1B,CAAC;QACD,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;QAC9C,IAAI,CAAC,CAAC,CAAC,EAAE;YAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,WAAW,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QACvE,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;IAC5D,CAAC;CACF,CAAC;AAEF,uEAAuE;AACvE,+DAA+D;AAC/D,MAAM,aAAa,GAA8B;IAC/C,OAAO,EAAE,IAAI;IACb,GAAG,EAAE,CAAC,CAAC,EAAE,EAAE;QACT,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC5D,IAAI,CAAC,CAAC,CAAC,EAAE;YAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,WAAW,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QACvE,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;IAC5D,CAAC;CACF,CAAC;AAEF,MAAM,gBAAgB,GAAiC;IACrD,OAAO,EAAE,IAAI;IACb,GAAG,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACf,IAAI,GAAG,GAAG,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;QACpB,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;YACtB,MAAM,MAAM,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC;YAC7C,IAAI,CAAC,MAAM;gBAAE,OAAO,aAAa,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAC/C,GAAG,GAAG,MAAM,CAAC;QACf,CAAC;QACD,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;QAC5D,IAAI,CAAC,CAAC,CAAC,EAAE;YAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,WAAW,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QACvE,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;IAC5D,CAAC;CACF,CAAC;AAEF,MAAM,cAAc,GAA2B,CAAC,CAAC,EAAE,EAAE;IACjD,2EAA2E;IAC3E,+CAA+C;IAC/C,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;QAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,mCAAmC,EAAE,CAAC,CAAC;AACjH,CAAC,CAAC;AAEF,MAAM,eAAe,GAA4B,CAAC,CAAC,EAAE,EAAE;IACnD,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;AAClC,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,gBAAgB,GAAe;IAC1C,aAAa,EAAE,YAAY;IAC3B,aAAa,EAAE,YAAY;IAC3B,YAAY,EAAE,WAAW;IACzB,gBAAgB,EAAE,eAAe;IACjC,eAAe,EAAE,cAAc;IAC/B,cAAc,EAAE,aAAa;IAC7B,iBAAiB,EAAE,gBAAgB;IACnC,eAAe,EAAE,cAAc;IAC/B,gBAAgB,EAAE,eAAe;CAClC,CAAC"}

package/packages/host/dist/routes/work/workschedule.d.ts

@@ -0,0 +1,2 @@
+import type { RouteTable } from "../types.js";
+export declare const workscheduleRoutes: RouteTable;

package/packages/host/dist/routes/work/workschedule.js

@@ -0,0 +1,131 @@
+/**
+ * Work routes — schedule slice of `routes/work.ts` (see that file for the whole picture).
+ */
+import { scheduleToIntent } from "../../intents/adapters.js";
+import { fmtOffset, windowRuleRefusal } from "@waterplane/shared";
+/**
+ * ── The launch and schedule messages, spoken by the intent store ───────────
+ *
+ * `LaunchManager` and `ScheduleManager` are gone; `intents/adapters.ts` renders
+ * the same two DTOs out of the one store. Every handler below is therefore an
+ * adapter, kept rather than retired because the APK shell can pin an old bundle
+ * for weeks and because the e2e scripts that pin these behaviours are the
+ * evidence that folding the two managers together changed nothing a user sees.
+ */
+const onLaunchList = (a) => {
+    a.c.send(a.ws, a.c.launchSnapshot());
+};
+const onLaunchCancel = (a) => {
+    // Not durable, like every other destructive command here: a cancel
+    // delivered an hour late would call off a session that has since opened
+    // and been worked in.
+    if (!a.c.intents.cancel(a.msg.id))
+        a.c.send(a.ws, { t: "toast", text: "that launch has already been settled" });
+    a.c.broadcast(a.c.launchSnapshot());
+};
+const onLaunchRun = (a) => {
+    // "The picture is not coming — run it anyway." The row keeps naming the
+    // files it went without, because the prompt in that session still refers
+    // to them.
+    void a.c.intents.runNow(a.msg.id).then((r) => {
+        if (!r.ok)
+            a.c.send(a.ws, { t: "toast", text: `launch: ${r.reason}` });
+        a.c.broadcast(a.c.launchSnapshot());
+    });
+};
+const onScheduleList = (a) => {
+    a.c.send(a.ws, a.c.scheduleSnapshot());
+};
+const onScheduleSave = (a) => {
+    // Upsert by the client-minted id, which is what makes a re-send of the
+    // same edit safe: a second copy of "every Thursday" would fire the sweep
+    // twice, so the id has to be the identity. The ackId is on top of that,
+    // for the phone's send queue — a schedule written offline is queued like a
+    // prompt, and a replay lands on the same row.
+    const entry = a.msg.entry;
+    a.c.durableOp(a.ws, a.msg.ackId, () => {
+        // A `window` rule on a rolling period has no edge to anchor to: refused in
+        // words, never saved to wait for ever (`windowRuleRefusal`). `ok:false` is
+        // remembered, so a replayed ack answers the same sentence.
+        const refusal = entry.rule?.kind === "window" ? windowRuleRefusal(entry.rule.periodId, a.c.budget.get().periods) : null;
+        if (refusal) {
+            a.c.send(a.ws, { t: "toast", text: `schedule: not saved — ${refusal}` });
+            return { ok: false, reason: refusal };
+        }
+        const draft = scheduleToIntent(entry, Date.now());
+        const saved = draft ? a.c.intents.upsert(draft) : null;
+        a.c.broadcast(a.c.scheduleSnapshot());
+        // Read-only, or a write that did not reach the disk (`upsert` took the
+        // row back out of memory): the store's own sentence, never "saved".
+        const writeErr = a.c.intents.lastWriteError();
+        const why = a.c.intents.readOnly() ?? (draft && writeErr ? `could not save to disk: ${writeErr}` : null);
+        if (!saved && why) {
+            a.c.send(a.ws, { t: "toast", text: `schedule: not saved — ${why}` });
+            return { ok: false, reason: why };
+        }
+        if (!saved) {
+            a.c.send(a.ws, { t: "toast", text: "schedule: nothing to run (pick repos and write a prompt)" });
+            return { ok: false, reason: "nothing to run" };
+        }
+        // RELATIVE, never a wall clock: this string is formatted on the desktop
+        // and read on a phone, and `toLocaleString()` answers in the desktop's
+        // locale — the same instant then appears twice on one screen in two
+        // notations (the schedule row prints `nextAt` in the reader's own). A
+        // duration reads the same everywhere, and the list the broadcast below
+        // refreshes carries the instant itself.
+        a.c.send(a.ws, { t: "toast", text: `saved · ${saved.nextAt ? `next run in ${fmtOffset(Math.max(0, Math.round((saved.nextAt - Date.now()) / 60_000)))}` : "nothing armed (disabled)"}` });
+        return { ok: true, intentId: saved.id };
+    }, a.msg);
+};
+const onScheduleRemove = (a) => {
+    // An explicit delete, which is the one way a row leaves this store other
+    // than compaction — and it is archived on the way out, because the words
+    // were still the user's.
+    a.c.intents.remove(a.msg.id);
+    a.c.broadcast(a.c.scheduleSnapshot());
+};
+const onScheduleSetEnabled = (a) => {
+    a.c.intents.setArmed(a.msg.id, a.msg.enabled);
+    a.c.broadcast(a.c.scheduleSnapshot());
+};
+/** Sit out the next occurrence. Not durable and never queued offline, for
+ *  `intent.cancel`'s reason: a skip delivered an hour late would spend an
+ *  occurrence that has already run. */
+const onScheduleSkipNext = (a) => {
+    const r = a.c.intents.skipNext(a.msg.id);
+    a.c.send(a.ws, {
+        t: "toast",
+        // Same rule as the save toast above: a duration, not this desktop's date.
+        text: r.ok
+            ? `skipped · ${r.nextAt ? `next run in ${fmtOffset(Math.max(0, Math.round((r.nextAt - Date.now()) / 60_000)))}` : "nothing armed after it"}`
+            : `schedule: ${r.reason}`,
+    });
+    a.c.broadcast(a.c.scheduleSnapshot());
+};
+/**
+ * A manual fire is a real sweep — durable for the same reason `fanout.run` is:
+ * a phone that never saw the receipt must not spawn it a second time. It does
+ * NOT consume the next scheduled occurrence (see `IntentManager.runNow`).
+ */
+const onScheduleRun = {
+    durable: true,
+    run: (a) => a.c.intents.runNow(a.msg.id).then((r) => {
+        if (!r.ok)
+            a.c.send(a.ws, { t: "toast", text: `schedule: ${r.reason}` });
+        a.c.broadcast(a.c.scheduleSnapshot());
+        return { ok: r.ok, reason: r.reason };
+    }),
+};
+// ── The durable Intent ──────────────────────────────────────────────────────
+export const workscheduleRoutes = {
+    "launch.list": onLaunchList,
+    "launch.cancel": onLaunchCancel,
+    "launch.run": onLaunchRun,
+    "schedule.list": onScheduleList,
+    "schedule.save": onScheduleSave,
+    "schedule.remove": onScheduleRemove,
+    "schedule.setEnabled": onScheduleSetEnabled,
+    "schedule.run": onScheduleRun,
+    "schedule.skipNext": onScheduleSkipNext,
+};
+//# sourceMappingURL=workschedule.js.map

package/packages/host/dist/routes/work/workschedule.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"workschedule.js","sourceRoot":"","sources":["../../../src/routes/work/workschedule.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,OAAO,EAAE,gBAAgB,EAAE,MAAM,2BAA2B,CAAC;AAC7D,OAAO,EAAE,SAAS,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AAGlE;;;;;;;;GAQG;AACH,MAAM,YAAY,GAAyB,CAAC,CAAC,EAAE,EAAE;IAC7C,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,cAAc,EAAE,CAAC,CAAC;AACzC,CAAC,CAAC;AAEF,MAAM,cAAc,GAA2B,CAAC,CAAC,EAAE,EAAE;IACjD,mEAAmE;IACnE,wEAAwE;IACxE,sBAAsB;IACtB,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;QAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,sCAAsC,EAAE,CAAC,CAAC;IAChH,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,cAAc,EAAE,CAAC,CAAC;AACxC,CAAC,CAAC;AAEF,MAAM,WAAW,GAAwB,CAAC,CAAC,EAAE,EAAE;IAC3C,wEAAwE;IACxE,yEAAyE;IACzE,WAAW;IACX,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE;QAC3C,IAAI,CAAC,CAAC,CAAC,EAAE;YAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,WAAW,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QACvE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,cAAc,EAAE,CAAC,CAAC;IACtC,CAAC,CAAC,CAAC;AACP,CAAC,CAAC;AAEF,MAAM,cAAc,GAA2B,CAAC,CAAC,EAAE,EAAE;IACjD,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,gBAAgB,EAAE,CAAC,CAAC;AAC3C,CAAC,CAAC;AAEF,MAAM,cAAc,GAA2B,CAAC,CAAC,EAAE,EAAE;IACjD,uEAAuE;IACvE,yEAAyE;IACzE,wEAAwE;IACxE,2EAA2E;IAC3E,8CAA8C;IAC9C,MAAM,KAAK,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC;IAC1B,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,EAAE;QACpC,2EAA2E;QAC3E,2EAA2E;QAC3E,2DAA2D;QAC3D,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,iBAAiB,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QACxH,IAAI,OAAO,EAAE,CAAC;YACZ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,yBAAyB,OAAO,EAAE,EAAE,CAAC,CAAC;YACzE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;QACxC,CAAC;QACD,MAAM,KAAK,GAAG,gBAAgB,CAAC,KAAK,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;QAClD,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QACvD,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,gBAAgB,EAAE,CAAC,CAAC;QACtC,uEAAuE;QACvE,oEAAoE;QACpE,MAAM,QAAQ,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,cAAc,EAAE,CAAC;QAC9C,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,EAAE,IAAI,CAAC,KAAK,IAAI,QAAQ,CAAC,CAAC,CAAC,2BAA2B,QAAQ,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QACzG,IAAI,CAAC,KAAK,IAAI,GAAG,EAAE,CAAC;YAClB,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,yBAAyB,GAAG,EAAE,EAAE,CAAC,CAAC;YACrE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;QACpC,CAAC;QACD,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,0DAA0D,EAAE,CAAC,CAAC;YACjG,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,gBAAgB,EAAE,CAAC;QACjD,CAAC;QACD,wEAAwE;QACxE,uEAAuE;QACvE,oEAAoE;QACpE,sEAAsE;QACtE,uEAAuE;QACvE,wCAAwC;QACxC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,WAAW,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,eAAe,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,MAAM,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,0BAA0B,EAAE,EAAE,CAAC,CAAC;QACzL,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC;IAC1C,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC;AACd,CAAC,CAAC;AAEF,MAAM,gBAAgB,GAA6B,CAAC,CAAC,EAAE,EAAE;IACrD,yEAAyE;IACzE,yEAAyE;IACzE,yBAAyB;IACzB,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAC7B,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,gBAAgB,EAAE,CAAC,CAAC;AAC1C,CAAC,CAAC;AAEF,MAAM,oBAAoB,GAAiC,CAAC,CAAC,EAAE,EAAE;IAC7D,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IAC9C,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,gBAAgB,EAAE,CAAC,CAAC;AAC1C,CAAC,CAAC;AAEF;;uCAEuC;AACvC,MAAM,kBAAkB,GAA+B,CAAC,CAAC,EAAE,EAAE;IACzD,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IACzC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE;QACb,CAAC,EAAE,OAAO;QACV,0EAA0E;QAC1E,IAAI,EAAE,CAAC,CAAC,EAAE;YACR,CAAC,CAAC,aAAa,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,eAAe,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,wBAAwB,EAAE;YAC5I,CAAC,CAAC,aAAa,CAAC,CAAC,MAAM,EAAE;KAC5B,CAAC,CAAC;IACH,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,gBAAgB,EAAE,CAAC,CAAC;AAC1C,CAAC,CAAC;AAEF;;;;GAIG;AACH,MAAM,aAAa,GAA8B;IAC/C,OAAO,EAAE,IAAI;IACb,GAAG,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE;QAClD,IAAI,CAAC,CAAC,CAAC,EAAE;YAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,aAAa,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QACzE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,gBAAgB,EAAE,CAAC,CAAC;QACtC,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;IACxC,CAAC,CAAC;CACH,CAAC;AAEF,+EAA+E;AAE/E,MAAM,CAAC,MAAM,kBAAkB,GAAe;IAC5C,aAAa,EAAE,YAAY;IAC3B,eAAe,EAAE,cAAc;IAC/B,YAAY,EAAE,WAAW;IACzB,eAAe,EAAE,cAAc;IAC/B,eAAe,EAAE,cAAc;IAC/B,iBAAiB,EAAE,gBAAgB;IACnC,qBAAqB,EAAE,oBAAoB;IAC3C,cAAc,EAAE,aAAa;IAC7B,mBAAmB,EAAE,kBAAkB;CACxC,CAAC"}

package/packages/host/dist/routes/work.d.ts

@@ -0,0 +1,10 @@
+/**
+ * Routes about work the host does on the user's behalf — the backlog, fan-out
+ * sweeps, builds, downloads, scheduled runs, and the launches it is holding.
+ *
+ * A barrel: the handlers live in `routes/work/` by subject (backlog + fan-out,
+ * builds + artifacts + capture, assess + pull, launch + schedule, intents), and
+ * the table below is their union in the order the single table always had.
+ */
+import type { RouteTable } from "./types.js";
+export declare const workRoutes: RouteTable;

package/packages/host/dist/routes/work.js

@@ -0,0 +1,13 @@
+import { workbacklogRoutes } from "./work/workbacklog.js";
+import { workbuildRoutes } from "./work/workbuild.js";
+import { workassessRoutes } from "./work/workassess.js";
+import { workscheduleRoutes } from "./work/workschedule.js";
+import { workintentRoutes } from "./work/workintent.js";
+export const workRoutes = {
+    ...workbacklogRoutes,
+    ...workbuildRoutes,
+    ...workassessRoutes,
+    ...workscheduleRoutes,
+    ...workintentRoutes,
+};
+//# sourceMappingURL=work.js.map

package/packages/host/dist/routes/work.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"work.js","sourceRoot":"","sources":["../../src/routes/work.ts"],"names":[],"mappings":"AASA,OAAO,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAC1D,OAAO,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AACtD,OAAO,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AACxD,OAAO,EAAE,kBAAkB,EAAE,MAAM,wBAAwB,CAAC;AAC5D,OAAO,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AAExD,MAAM,CAAC,MAAM,UAAU,GAAe;IACpC,GAAG,iBAAiB;IACpB,GAAG,eAAe;IAClB,GAAG,gBAAgB;IACnB,GAAG,kBAAkB;IACrB,GAAG,gBAAgB;CACpB,CAAC"}

package/packages/host/dist/scaffold.d.ts

@@ -0,0 +1,104 @@
+export { inRoot, realResolve } from "./paths.js";
+export declare function newFolder(root: string, parent: string, name: string): Promise<{
+    path: string;
+} | {
+    error: string;
+}>;
+export interface NewRepoOpts {
+    /**
+     * Seed the waterplane working conventions (gitignore, README, CLAUDE.md, the
+     * inbox/outbox drops). Default true — a repo created FROM the phone is by
+     * definition going to be driven from the phone. Pass false for a bare
+     * `git init` (the old behaviour).
+     */
+    setup?: boolean;
+    /** One-line description; goes into the seeded README/CLAUDE.md. */
+    description?: string;
+    /**
+     * Seed a runnable starter from `packages/host/templates/<template>/` instead of
+     * the bare conventions (first-app plan, WP1). The name must then be usable as an
+     * app id (see `templateName`). An unknown template is an error, never a path.
+     */
+    template?: TemplateId;
+}
+export declare const TEMPLATES: readonly ["android-hello", "web-hello"];
+export type TemplateId = (typeof TEMPLATES)[number];
+/**
+ * A name a template can be built around: starts with a letter, lower-case letters,
+ * digits and single hyphens, at most 40. Lower-cased rather than refused (a phone's
+ * keyboard capitalises the first letter). Anything else is an error in words —
+ * the name becomes a folder AND an Android package segment, so it is not repaired.
+ */
+export declare function templateName(raw: string): {
+    name: string;
+} | {
+    error: string;
+};
+/** `dev.<brand>.app.<name>` with the hyphens dropped (a package segment has none). */
+export declare function packageId(name: string): string;
+export interface NewRepoResult {
+    path: string;
+    branch: string;
+    /** Repo-relative paths written by the scaffold (empty when `waterplane: false`). */
+    files: string[];
+    /** Non-fatal problem worth showing (e.g. no git identity configured). */
+    warning?: string;
+}
+/**
+ * A repo created from the phone starts life ready for the phone: the paths the
+ * daemon and the agent both rely on (`.claude/outbox`, `.claude/inbox`,
+ * `.waterplane`) exist and are ignored, and CLAUDE.md tells the agent that dropping
+ * a file into the outbox is how you show something to a human holding a phone.
+ * Without this every new project starts with an agent printing 200 lines of
+ * terminal output nobody can read on a 6" screen.
+ */
+export declare function newRepo(root: string, parent: string, name: string, opts?: NewRepoOpts): Promise<NewRepoResult | {
+    error: string;
+}>;
+export declare function newWorktree(root: string, repoDir: string, branch: string, basePath?: string): Promise<{
+    path: string;
+    branch: string;
+} | {
+    error: string;
+}>;
+/**
+ * A remote the phone may ask this desktop to clone, or why not. The URL is typed
+ * on a phone and handed to `git`, so it is held to the three shapes a person
+ * actually pastes — `https://`, `ssh://` and scp-like `user@host:path` — and
+ * everything git would ALSO accept is refused: `ext::` (runs a command),
+ * `file://` and bare local paths (reads outside the root), `http://` (cleartext),
+ * a leading `-` (an option, not a URL). `cloneRepo` backs this with
+ * `protocol.allow=never`, so a shape that slips past here still cannot reach a
+ * transport git was not told to allow.
+ */
+export declare function cloneUrl(raw: string): {
+    url: string;
+    name: string;
+} | {
+    error: string;
+};
+export interface CloneResult {
+    path: string;
+    branch: string;
+    /** Non-fatal problem worth showing. */
+    warning?: string;
+}
+/** `git clone` runner — injectable so the argv and refusals are testable without a network. */
+export type CloneRun = (args: string[], opts: {
+    cwd: string;
+    env: NodeJS.ProcessEnv;
+    timeout: number;
+}) => Promise<unknown>;
+/**
+ * Clone a remote into a new folder under `parent` (inside `root`) — the "I have no
+ * repo for this yet" start. Same containment as `newRepo`: the folder is named by
+ * `name` or the URL's last segment, must resolve inside the root, and must not
+ * exist. Nothing is fetched beyond the default branch's checkout (no submodules),
+ * nothing prompts (no terminal on a phone: a credential or host-key question is a
+ * failure in words), and the cloned project is never edited — the phone's
+ * transport dirs are excluded through `.git/info/exclude`, which is local to this
+ * checkout, so the clone has no diff the person did not make.
+ */
+export declare function cloneRepo(root: string, parent: string, rawUrl: string, name?: string, run?: CloneRun): Promise<CloneResult | {
+    error: string;
+}>;