Bulk, natural-language-shaped service operations (ACL-enforced like every other
op, so agent tools inherit permissions for free):
- ops.go: Region + NamedRegion (nw/ne/sw/se corners, north/south/east/west and
  top/bottom/left/right halves, "all"; -y is north in the local frame).
  FillRegion hex-packs plops at 2×radius pitch (radius = #15's max(1.5·spacing,
  15cm)) clipped to the region, skipping any candidate that would sit entirely
  inside an existing active plop. ClearObject soft-removes all active plops in one
  UPDATE. DescribeGarden returns a structured summary (dims, objects+version,
  plantings with plant/effective-count/rough compass location).
- store/plantings.go: ListActivePlantingsForObject + ClearObjectPlantings.

Agent toolbox (internal/agent), deliberately isolated:
- doc.go (untagged) keeps the package in the default build; tools.go is behind
  the `majordomo` build tag and NOT in go.mod, so `go build/test ./...` and the
  server binary carry no majordomo/LLM deps. Built + tested locally against real
  majordomo (go test -tags majordomo ./internal/agent/).
- NewToolbox(svc, actorID) exposes list_gardens, describe_garden, create_object,
  move_object, place_planting, fill_region, clear_object as llm.DefineTool
  wrappers — thin typed adapters over the service, each running as the bound
  actor.

Tests: NamedRegion for all names + unknown→ErrInvalidInput; deterministic
hex-packing count (60×60 bed → 4 plops) + re-fill skips covered; rotated bed
fills the correct LOCAL corner; ClearObject; viewer→ErrForbidden on fill/clear
but can describe; and the DESIGN corner/half scenario (garlic NE, basil NW, beans
south) verified via DescribeGarden. A tagged demo drives the same scenario
through the toolbox (JSON args → tool → service) and confirms a viewer is refused.

GOWORK=off go build/vet/test ./internal/... green (majordomo-free).

Co-Authored-By: Claude Opus 4.8 (1M context) <[email protected]>
Claude-Session: https://claude.ai/code/session_01JdQpdYYsTgtkJBxbcpAszi

@@ -0,0 +51,4 @@
+	if err != nil {
+		t.Fatalf("garden: %v", err)
+	}
+	garlic, _ := svc.CreatePlant(ctx, owner.ID, service.PlantInput{Name: "Garlic", Category: "vegetable", SpacingCM: 15, Color: "#d9d2c5", Icon: "🧄"})

@@ -0,0 +115,4 @@
+
+	// ACL: a viewer's fill_region is refused (the toolbox runs as that actor).
+	viewerUser, _ := svc.Register(ctx, service.RegisterInput{Email: "[email protected]", DisplayName: "V", Password: "password123"})
+	if _, err := svc.AddShare(ctx, owner.ID, g.ID, "[email protected]", "viewer"); err != nil {

@@ -0,0 +127,4 @@
+	}
+}
+
+func mustJSON(v any) json.RawMessage {

@@ -0,0 +17,4 @@
+
+// Region is an area in an object's local frame: an axis-aligned rectangle, or a
+// circle when Circle is set. NamedRegion produces the common ones.
+type Region struct {

@@ -0,0 +43,4 @@
+// A trailing "corner"/"half" word is ignored ("NE corner", "south half"). North
+// is -y (see the file header). Unknown names return ErrInvalidInput.
+func NamedRegion(o *domain.GardenObject, name string) (Region, error) {
+	hw, hh := o.WidthCM/2, o.HeightCM/2

@@ -0,0 +49,4 @@
+	key = strings.TrimSpace(strings.TrimSuffix(key, "half"))
+
+	switch key {
+	case "all", "":

@@ -0,0 +72,4 @@
+	}
+}
+
+// defaultPlopRadius is #15's formula for a placed plop's radius: max(1.5×spacing,

@@ -0,0 +103,4 @@
+		}
+		spacing = *spacingOverride
+	}
+	radius := defaultPlopRadius(spacing)

@@ -0,0 +113,4 @@
+	today := s.now().UTC().Format(dateLayout)
+	halfW, halfH := o.WidthCM/2, o.HeightCM/2
+	created := []domain.Planting{}
+	for _, c := range hexCenters(region, radius) {

@@ -0,0 +135,4 @@
+	return created, nil
+}
+
+type localPoint struct{ x, y float64 }

@@ -0,0 +141,4 @@
+// Rows are spaced radius·√3 apart and every other row is offset by radius, the
+// standard hexagonal packing at a 2×radius pitch. The lattice is anchored one
+// radius inside the region's min corner so the first plop sits inside it.
+func hexCenters(r Region, radius float64) []localPoint {

@@ -0,0 +167,4 @@
+
+// coveredByExisting reports whether a new plop (center, radius) would sit
+// entirely inside some existing active plop.
+func coveredByExisting(x, y, radius float64, existing []domain.Planting) bool {

@@ -0,0 +179,4 @@
+// FillNamedRegion is FillRegion addressed by a compass name ("ne", "south half")
+// instead of a resolved Region — the ergonomic form for agent tools, which don't
+// hold the object's geometry. It resolves the name against the object, then fills.
+func (s *Service) FillNamedRegion(ctx context.Context, actorID, objectID int64, regionName string, plantID int64, spacingOverride *float64) ([]domain.Planting, error) {

@@ -0,0 +193,4 @@
+
+// ClearObject soft-removes every active plop in an object the actor can edit (one
+// UPDATE), returning how many were cleared. Distinct from deleting the object.
+func (s *Service) ClearObject(ctx context.Context, actorID, objectID int64) (int, error) {

@@ -0,0 +277,4 @@
+			}
+			do.Plantings = append(do.Plantings, DescribePlanting{
+				PlantID:  pl.PlantID,
+				Plant:    plantByID[pl.PlantID].Name,

@@ -0,0 +290,4 @@
+
+// describeLocation reverse-maps a local point to a rough compass location — the
+// inverse of NamedRegion's quarters/halves ("NE corner", "south", "center").
+func describeLocation(x, y float64) string {

@@ -0,0 +53,4 @@
+}
+
+// seedFillBed makes a plantable bed of the given size centered in a big garden.
+func seedFillBed(t *testing.T, s *Service, owner, gardenID int64, w, h float64) *domain.GardenObject {

@@ -0,0 +68,4 @@
+	ctx := context.Background()
+	s := newTestService(t, openConfig())
+	owner := seedUser(t, s, "[email protected]")
+	g, err := s.CreateGarden(ctx, owner, GardenInput{Name: "Big", WidthCM: 2000, HeightCM: 2000})

@@ -0,0 +245,4 @@
+}
+
+// seedNamedPlant creates a custom plant with a specific name + spacing.
+func seedNamedPlant(t *testing.T, s *Service, owner int64, name string, spacingCM float64) *domain.Plant {

@@ -59,0 +61,4 @@
+// stacking new plops inside existing ones.
+func (d *DB) ListActivePlantingsForObject(ctx context.Context, objectID int64) ([]domain.Planting, error) {
+	rows, err := d.sql.QueryContext(ctx,
+		`SELECT `+plantingColumns+` FROM plantings WHERE object_id = ? AND removed_at IS NULL ORDER BY id`,