feat(workflows): schedule workflows and inspect each occurrence's run

[Igloczek]

Summary

Scheduled tasks can select a saved workflow, and each occurrence links to its exact run.

Host schedule → saved revision at dispatch → existing start service
             → durable occurrence receipt → exact run and snapshot
             → dispatch status + independent workflow outcome

Refs #29 and parent #3. Final layer of #30 → #31 → #34 → #35 → #36. Head 5e21740b47a2b9dc4e82043751699e9f68c94a20 is based on approved #35 edf703c3bb3949c807e29c119b4f13b39616a85a, on main 294aa94c427c2bd9690af172f07374bfc9877a9c.

The generic target contribution provides workflow/project/workspace selection and bounded task input. The host owns timing. Each occurrence resolves the saved revision at dispatch; older runs retain their snapshot. Durable redelivery reuses the same start service and run. Bounded, authorized history preserves exact project/run links and separates dispatch from workflow outcome. Read-only users can open history while mutations remain guarded. Prompt schedules remain usable.

Evidence

• Before: the host offered prompt scheduling; the first read-only workflow-history entry was blocked by the write-gated menu. After: workflow scheduling and read-only history work in the actual client. Original before/after images and recording.
• Fork-only server validation: 105 files, 472 cases passed. Current focused host/client/logic validation: 38 distinct cases have latest passing results; the final grouped run passed 37 and had one RPC ping-timeout failure, followed by an unchanged affected-file rerun passing1. No skipped cases. The original component fails the native-click history regression. Prepared affected types, lint, format and diff checks pass. Unchanged backend bytes reuse the accepted server proof; failed diagnostics remain recorded separately.
• Primary integrated local and HTTPS pass: actual scheduled parallel Graph, Bun checks, three native reviewer threads, reports versus settlement, one repeat, human approval, exact run navigation, revision change, redelivery, restart durability, edit/enable/pause/delete, unavailable plugin, read-only access, narrow history and keyboard navigation.
• Independent GPT-6-Astra/Gilfoyle R2 APPROVED the exact current head; ROOT agrees. R1’s sole material draft-retention finding is resolved. Unsaved task drafts now stay mounted during disconnection; Save/Create remain guarded until the current target catalog is reconciled. Real same-page HTTPS disconnect/reconnect and explicit save passed. Original recovery images and31second recording. Independent R2 passed 12 current repository cases plus the unchanged accepted R1 reproduction. The latest exact-head CI Check passed.

External provider turns/availability and forge input are replay; authorization, registered services, scheduler receipts, SQL, workspaces, actual Bun checks, compiled client and native/gate state are real. No live provider/forge, second physical device, hardware-touch, scale benchmark, uninterrupted automatic reconnect or positive human-comprehension claim. Reopening exact pages recovers after disconnection; HTTP-scope replay restart is distinct from actual provider-process-loss tests.

Merge Danger

Door: two-way. Contributions/UI can be reverted; already dispatched runs retain their authoritative durable history.

Blast Radius: scheduling. Generic target controls, saved workflow starts and bounded occurrence history. No new workflow engine or timing owner.

Implementation: Claude Opus 5.5 / Claude Code and OpenAI GPT-6.1-Sol / Codex. Current orchestration, integration and primary client verification: GPT-6.1-Sol / Codex in T3 Code. Independent current review: GPT-6-Astra / Codex with Gilfoyle, R2 APPROVED 5e21740b47a2b9dc4e82043751699e9f68c94a20.

[Igloczek]

Primary browser evidence for #29 at eae10a9. Parent-client before image is EDF; ordinary scheduling/Graph captures are source-qualified FDD reuse, and corrected read-only captures use the exact tested/committed EAE bytes. External provider turns/forge are replay; auth, services, scheduler receipts, workspaces, actual Bun check and native/gate state remain real. No live provider/forge, second physical device, hardware-touch or uninterrupted reconnect claim.

Before: approved #28 host offered prompt schedules, captured from EDF client.

After: workflow target, project/workspace and task inputs; dispatch-time revision wording.

Accepted3/3 reports with2/3 reviewers settled: scheduled join still waiting.

Scheduled parallel Graph repeated once and reached the actual bounded Human gate.

Dispatch succeeded while workflow awaited a human decision.

Actual HTTPS revision2 occurrence completed after UI approval.

Restored plugin: failed dispatch/no run, completed revision2 and older running revision1.

390CSS history wraps saved revision evidence and exact run links.

Plugin removed: retained schedule with actionable unavailable-target text.

Before permission correction: read-only Actions trigger incorrectly blocked history.

Original24second Run now/dispatched/navigation recording; loaded history is pictured separately.

pr36-run-now-history.mp4

After permission correction: read-only history is available; mutation items are disabled. The normal re-pairing permission notification remains visible.

Corrected read-only history at390CSS: authoritative statuses, revisions and exact links remain accessible.

Implementation: Claude Opus5.5 / Claude Code and GPT-6.1-Sol / Codex. Primary integration, verification and publication: GPT-6.1-Sol / Codex in T3 Code. Independent current review: GPT-6-Astra / Codex with Gilfoyle, R2 APPROVED 5e21740b47a2b9dc4e82043751699e9f68c94a20.

Final approval: independent GPT-6-Astra/Gilfoyle R2 and ROOT approve 5e21740b47a2b9dc4e82043751699e9f68c94a20; latest CI passed. Capture provenance above is preserved. The recovery supplement records the final draft-retention correction.

[Igloczek]

R1 recovery correction at5e21740b47a2b9dc4e82043751699e9f68c94a20. Actual HTTPS Settings dialog, same-page backend disconnect/restart, retained typed task and explicit save. These are original captures on the final tested bytes. Existing full gallery remains source-qualified. Independent R2 APPROVED the exact 5e21740b47a2b9dc4e82043751699e9f68c94a20 head; ROOT agrees.

Edited task:39/4000characters in the real host dialog.

Actual backend offline: the same task stays visible and Save is disabled.

Same-page reconnect: task preserved and Save available after reconciliation.

Original31second recording: physical disconnect/reconnect retains draft, then actual Save.

pr36-draft-reconnect.mp4

Implementation/primary verification/publication: GPT-6.1-Sol / Codex in T3 Code. Independent review: GPT-6-Astra / Codex with Gilfoyle.

Final approval: independent GPT-6-Astra/Gilfoyle R2 and ROOT approve 5e21740b47a2b9dc4e82043751699e9f68c94a20; latest CI passed. Capture provenance above is preserved. The recovery supplement records the final draft-retention correction.