deskd 0.1.2
Roadmap P1 — authority as a first-class dimension (#2).
Declaration → enforcement. Wake-plan actions and rollovers carry each role's registry declaration (capabilities + authority); the reference driver maps authority["allowed_tools"] to the session's --allowedTools per role. The global DESKD_WAKE_ALLOWED_TOOLS default now covers only roles that declare nothing. The engine declares; the harness enforces.
Capability-addressed routing. New inbox_route() / deskd inbox route: enqueue to whichever enabled role declares the required capability (fewest un-acked items, name tie-break; presence-independent). A demand no enabled role may take is unroutable — the ladder's overdue state on the authority axis: recorded durably in the new unroutable_demands table (inbox dedup contract, keyed on the capability), surfaced via board().health.unroutable_demands, and re-routed automatically by the first planning tick in which a qualifying role exists.
Schema: new unroutable_demands table, created automatically on connect. No API breaks; plans gain fields (actions[].capabilities/authority, top-level routed), drivers written against 0.1.1 keep working.