Digital Receptionist: build handoff

Reuse everything that exists, add one table and three routes, widen three projections

5.1 What exists (verified, file:line in ripple-receptionist-worker/src)

5.2 The one new table (Wave 1): call_followups

Migration file src/db/YYYYMMDDHHMMSS-call-followups.sql claimed with pnpm make:migration "call followups" (scripts/make-migration.mjs; numeric prefixes are frozen at 685, INVARIANTS.md:56-58). One CREATE TABLE per table (INVARIANT #2), never edited after apply (INVARIANT #3, migration-immutability-check.yml). contractor_id TEXT NOT NULL REFERENCES contractors(id) as DOCS/architecture/ADDING_A_FEATURE.md:111-113 prescribes. Every mutation goes through appendAuditLog(env, contractorId, 'call_followups', id, row) (services/audit-log.ts).

CREATE TABLE IF NOT EXISTS call_followups (
  id                     TEXT PRIMARY KEY,
  contractor_id          TEXT NOT NULL REFERENCES contractors(id),
  call_id                TEXT NOT NULL UNIQUE REFERENCES calls(id),
  state                  TEXT NOT NULL DEFAULT 'open' CHECK (state IN ('open','closed')),
  owner_team_member_id   TEXT,                       -- team_members.id; NULL = unassigned (shows for the owner)
  due_at                 TEXT,                       -- ISO 8601; NULL = end-of-business-day rule on read
  outcome                TEXT CHECK (outcome IN ('reached','left_message','no_answer','booked','nothing_owed','handed')),
  note                   TEXT,                       -- latest "what happened?" text
  flags                  TEXT,                       -- JSON array of the six slip checkboxes
  handed_by_user_id      TEXT, handed_at TEXT,       -- last hand-off (Clerk user id)
  closed_by_user_id      TEXT, closed_at TEXT,       -- the human stamp; never written by the agent
  reopened_by_user_id    TEXT, reopened_at TEXT,
  attempts               TEXT NOT NULL DEFAULT '[]', -- JSON [{at, by, outcome, note}] so "called 1:15, no answer" survives
  created_at             TEXT NOT NULL,
  updated_at             TEXT NOT NULL
);
CREATE INDEX IF NOT EXISTS idx_call_followups_open ON call_followups (contractor_id, state, owner_team_member_id, due_at);

CI to expect: add the new route dir entries to regression-map.json and tests/perf/smoke-all-features.js (regression-sync.yml), refresh scripts/schema-baseline-migrations.json, run scripts/preflight-migration-sync.mjs, and rebase right before pushing (the immutability check diffs against main's tip). Update DOCS/business-rules/receptionist.md (the tab strip paragraph is now wrong) and DOCS/architecture/SCHEMA.md.

5.3 Wave 2: extraction, commitments, drafted answers

CREATE TABLE IF NOT EXISTS call_commitments (
  id TEXT PRIMARY KEY, contractor_id TEXT NOT NULL REFERENCES contractors(id), call_id TEXT NOT NULL REFERENCES calls(id),
  kind TEXT NOT NULL CHECK (kind IN ('promise','statement')),
  text TEXT NOT NULL,                       -- the sentence as spoken
  due_at TEXT,                              -- parsed deterministically from the due phrase, business time zone; NULL for statements
  state TEXT NOT NULL DEFAULT 'open' CHECK (state IN ('open','kept','kept_late','released','scheduled')),
  kept_by_user_id TEXT, kept_at TEXT,
  source_kind TEXT CHECK (source_kind IN ('knowledge','calendar','rule','improvised')),
  source_ref TEXT,                          -- knowledge_base.id, rule key, or receptionist_appointments.id
  transcript_offset_ms INTEGER,             -- for Hear it
  corrections TEXT NOT NULL DEFAULT '[]',   -- append only: [{at, by, text, action}]
  created_at TEXT NOT NULL
);

• Where the extraction runs: next to the only post-call model call that exists today, analyzeCallSentiment(...) at durable-objects/CallBridge.ts:1225 (defined services/sentiment.ts:125, model resolved by callLLM(env, 'receptionist.sentiment.analyze', ...) at sentiment.ts:134). Add a sibling extractCallOutcome under a new use-case key (for example receptionist.call.extract, swappable on /admin/models) that returns: a one-line "what they wanted", the list of what she did, the next step, and every sentence Bella spoke that commits the business (promise) or states a fact (statement), each with a due phrase and the knowledge article or rule it came from when the agent used one. Write the first three onto calls (new columns wanted, did_json, next_step) and the rest into call_commitments. Deterministic code parses the due phrase and marks improvised when no source was cited.
• Kept is written by the Done flow: closing a message with outcome reached marks its open promises kept (kept_late when due_at has passed). Never by the agent.
• Drafted answers: when saveQuestion writes an unanswered row, also draft a body from the nearest published article (same use-case key) into draft_answer. Publishing (PUT /knowledge-base/:id with status answered) sets published_by / published_at. The gate in elevenlabs.ts:478 increments use_count and sets last_used_call_id for each article it loads, so the next message can say "answered from your approved answer, Sep 15".
• Repeat caller: add prior_call_count_30d to the calls list projection (a correlated count on caller_number) or a GET /calls?number= filter.
• Bounce-back and nudge: a scheduled worker reassigns handed messages past due to handed_by, and (optional, gated by send_sms and the budget) texts the caller a hold-the-line message when a promise passes due with nobody assigned.

5.4 Cross-cutting

Regroup the existing pages, add four files, keep every endpoint call

6.1 Routes and nav

6.2 Receptionist feature files (app/features/receptionist/)

6.3 Rollups

Every string, as decided. Plain English, no em dashes, no invented words.

The prototype's day is the seed. The prototype's checks are the acceptance test.

Acceptance checks, Wave 1 (each maps to a prototype step)

Open questions to settle in the first build session