@@ -1,3 +1,5 @@
+import { RegistryContext } from "@effect/atom-react";
+import { Atom, AtomRegistry } from "effect/reactivity";
 import {
   DEFAULT_UNIFIED_SETTINGS,
   EnvironmentId,
@@ -10,7 +12,7 @@ import { describe, expect, it, vi } from "vite-plus/test";
 import { page, userEvent } from "vite-plus/test/browser";
 
 import "~/index.css";
-import { render } from "../../../test/render";
+import { act, render } from "../../../test/render";
 import { ScheduledTasksSettings } from "./ScheduledTasksSettings";
 
 const environmentId = EnvironmentId.make("laptop");
@@ -38,7 +40,23 @@ const task: ScheduledTask = {
   runCount: 0,
 };
 
-const state = vi.hoisted(() => ({ connected: true, tasksLoaded: true }));
+const state = vi.hoisted(() => ({ connected: true, tasksLoaded: true, secondary: false }));
+const secondaryId = EnvironmentId.make("secondary");
+const permissions = new Map<string, Atom.Writable<boolean>>();
+
+function setup() {
+  state.connected = true;
+  state.tasksLoaded = true;
+  state.secondary = false;
+  permissions.clear();
+  permissions.set(environmentId, Atom.make(true));
+  permissions.set(secondaryId, Atom.make(true));
+  permissions.set("", Atom.make(false));
+}
+
+function secondaryEnvironment() {
+  return { ...environment(), environmentId: secondaryId, label: "Secondary" };
+}
 
 function environment() {
   return {
@@ -54,8 +72,12 @@ vi.mock(import("./SettingsScopeContext"), async (original) => {
     const entry = environment();
     return {
       scope: { kind: "all", label: "All", members: [], environmentIds: [environmentId] },
-      environments: [entry],
-      connectedEnvironments: state.connected ? [entry] : [],
+      environments: state.secondary ? [entry, secondaryEnvironment()] : [entry],
+      connectedEnvironments: state.connected
+        ? state.secondary
+          ? [entry, secondaryEnvironment()]
+          : [entry]
+        : [],
       environment: entry,
       target: null,
       targets: [],
@@ -68,15 +90,14 @@ vi.mock(import("./SettingsScopeContext"), async (original) => {
 });
 vi.mock(import("../../state/server"), async (original) => {
   const actual = await original();
-  const { Atom } = await import("effect/reactivity");
-  const allowed = Atom.make(true);
+
   return {
     ...actual,
     serverEnvironment: {
       ...actual.serverEnvironment,
       upsertScheduledTask: {
         ...actual.serverEnvironment.upsertScheduledTask,
-        permissionAtom: () => allowed,
+        permissionAtom: (id: string | null) => permissions.get(id ?? "")!,
       },
     },
   };
@@ -93,7 +114,8 @@ vi.mock(import("../../state/query"), async (original) => ({
 }));
 vi.mock(import("../../state/environments"), async (original) => ({
   ...(await original()),
-  useEnvironment: (() => environment()) as never,
+  useEnvironment: ((id: EnvironmentId) =>
+    id === secondaryId ? secondaryEnvironment() : environment()) as never,
 }));
 vi.mock(import("../../state/entities"), async (original) => ({
   ...(await original()),
@@ -105,9 +127,44 @@ vi.mock(import("../../hooks/useSettings"), async (original) => ({
 }));
 
 describe("ScheduledTasksSettings", () => {
+  it("creates on a permitted secondary and reacts to permission changes", async () => {
+    setup();
+    state.secondary = true;
+    const registry = AtomRegistry.make();
+    using _registry = { [Symbol.dispose]: () => registry.dispose() };
+    registry.set(permissions.get(environmentId)!, false);
+    await using screen = await render(
+      <RegistryContext.Provider value={registry}>
+        <ScheduledTasksSettings />
+      </RegistryContext.Provider>,
+    );
+    const create = screen.getByRole("button", { name: "New task" });
+    await expect.element(create).toBeEnabled();
+    await act(() => registry.set(permissions.get(secondaryId)!, false));
+    await expect.element(create).toBeDisabled();
+    await act(() => registry.set(permissions.get(secondaryId)!, true));
+    await expect.element(create).toBeEnabled();
+    await create.click();
+    await expect.element(page.getByLabelText("Runs on")).toHaveTextContent("Secondary");
+  });
+
+  it("keeps the permitted representative as the creation target", async () => {
+    setup();
+    state.secondary = true;
+    await using screen = await render(<ScheduledTasksSettings />);
+    await screen.getByRole("button", { name: "New task" }).click();
+    await expect.element(page.getByLabelText("Runs on")).toHaveTextContent("Laptop");
+  });
+
+  it("disables creation without a connected target", async () => {
+    setup();
+    state.connected = false;
+    await using screen = await render(<ScheduledTasksSettings />);
+    await expect.element(screen.getByRole("button", { name: "New task" })).toBeDisabled();
+  });
+
   it("keeps a linked task's unsaved edits across a disconnect and reconnect", async () => {
-    state.connected = true;
-    state.tasksLoaded = true;
+    setup();
     await using screen = await render(<ScheduledTasksSettings taskId={task.id} />);
     const name = page.getByRole("dialog").getByRole("textbox", { name: "Name" });
     await expect.element(name).toHaveValue("Review issues");
@@ -124,7 +181,7 @@ describe("ScheduledTasksSettings", () => {
   });
 
   it("keeps an editor the user opened when the linked task loads later", async () => {
-    state.connected = true;
+    setup();
     state.tasksLoaded = false;
     await using screen = await render(<ScheduledTasksSettings taskId={task.id} />);
     await userEvent.click(page.getByRole("button", { name: "New task" }));