@rubytech/create-maxy-code 0.1.307 → 0.1.309

package/payload/platform/plugins/admin/skills/platform-architecture/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: platform-architecture
 description: Use when grounding any documented-surface claim about what Maxy ships — plugins, skills, specialists, install/deploy flows, internals. This is the install catalogue, not evidence of what is enabled on the current account. For install state on this account, call `capabilities-here`; for documented surface, cite the `Source:` URL inline.
-content-hash: sha256:24fdd4305e1a509669173cd92e915199878082f69b436987e0a8e89f0cf793c9
+content-hash: sha256:8fd7006bd54f69d5932bc831cf46f9ced8e01318f5fac0963f4285bc1e4b21a0
 brand: maxy-code
 product-name: Maxy
 ---
@@ -2288,7 +2288,7 @@ either is a regression.
 
 **`/chat` Claude-desktop transcript presentation.** The admin webchat keeps the shared `Transcript` shell (stream, follow-tail) but injects a /chat-only item renderer via the component's optional `renderItems` prop: `renderChatTimeline` in `app/chat/transcript-render.tsx`. Presentation: operator turns render as a right-aligned grey bubble with only the message text (no label, no per-turn time); all agent output renders as plain prose (the reply-document filename line stays, as prose); a maximal consecutive run of `tool-call`/`tool-result` turns renders as one collapsed grey one-liner ("Used N tools ›") whose expansion shows every call and result payload — a lone call still gets the one-liner, and prose or a directive row ends a run. The WhatsApp reader (`/whatsapp`) omits the prop and keeps the default `renderTimeline`, so its rendering is unchanged; both presentations are test-pinned (`app/whatsapp/__tests__/Transcript-*.test.tsx` unmodified, `app/chat/__tests__/transcript-render.test.tsx` new).
 
-**maxy title for public sessions.** A `role=public` webchat spawn never produces a useful Claude Code `ai-title` (an anonymous one-line visitor turn), so every public row would otherwise read identically. The webchat route (`chat.ts`) composes a deterministic title — `Web · <senderId[:8]>[ · <personId>] · <UTC YYYY-MM-DD HH:mm>` (personId present only for gated visitors) — and threads it through the bridge (`dispatchOnce` → `managerSpawn`) to the manager `POST /spawn` body as `name`. `/spawn` validates it with `validateUserTitle` and, for `role=public` only, writes it into `UserTitleStore` so it occupies the operator-rename tier and wins over `ai-title`. Admin (`/rc-spawn`) and WhatsApp titling are unchanged. Observability: every public spawn logs `[spawn] role=public … title="…"` (or `title=missing`); the manager's row builder emits `[public-title] sessionId=… unexpected titleSource=<ai|null>` on the next list read for any public row that did not resolve from the user tier.
+**maxy title for public sessions.** A `role=public` webchat spawn never produces a useful Claude Code `ai-title` (an anonymous one-line visitor turn), so every public row would otherwise read identically. The webchat route (`chat.ts`) composes a deterministic title — `Web · <senderId[:8]>[ · <personId>] · <UTC YYYY-MM-DD HH:mm>` (personId present only for gated visitors) — and threads it through the native webchat gateway's public spawn (`handleInbound` → `buildPublicWebchatSpawnRequest` → `managerSpawn`) to the manager `POST /public-spawn` body as `name`. `/spawn` validates it with `validateUserTitle` and, for `role=public` only, writes it into `UserTitleStore` so it occupies the operator-rename tier and wins over `ai-title`. Admin (`/rc-spawn`) and WhatsApp titling are unchanged. Observability: every public spawn logs `[spawn] role=public … title="…"` (or `title=missing`); the manager's row builder emits `[public-title] sessionId=… unexpected titleSource=<ai|null>` on the next list read for any public row that did not resolve from the user tier.
 
 ### Graph
 
@@ -2489,6 +2489,26 @@ authoritative. This section names the surfaces and what backs each.
 > via the same admin-gated reader routes, never the operator's own session. The
 > operator surface is documented in full in the internal doc
 > `maxy-code/.docs/operator-dashboard.md`.
+>
+> **Width.** The operator header, the operator chat column, and the `/data`
+> header+toolbar+body all render in one centred column bounded to
+> `--chat-measure` (48rem). That token is a `:root` design token (beside
+> `--measure`/`--gutter`); the operator-header clamp
+> (`.admin-shell-root:has(> .platform-operator) > .admin-header`), the chat-column
+> clamp (`.platform-operator > .webchat-page`), and the `/data` clamp
+> (`.data-main`) all read it, so logo and burger align to the panel edges on both
+> surfaces. The admin shell carries no `--chat-measure` consumer and stays
+> edge-to-edge; the public webchat (`.public-surface`) inherits the same value.
+>
+> **Conversations item.** The dynamic Conversations burger item appears on
+> **both** the operator chat surface and `/data` whenever ≥1 reviewable
+> conversation exists (the count/channels are fetched per surface from
+> `/whatsapp-reader/conversations` with the operator's session key). On `/data`
+> selecting it renders the same read-only reader in place (the file browser is
+> swapped for it; Back returns). The flyout-open signal
+> `[operator-ui] op=conversations-menu present=<bool> channels=[…] count=<n>`
+> fires on `/data` too — `present=false` there while the chat surface shows the
+> item is the props-not-wired signature.
 
 | Surface | What it does | Backed by |
 |---|---|---|
@@ -3273,7 +3293,7 @@ The `brand-excluded` branch closes the recurring crash-restart loop on brands th
 
 **Per-spawn signals (server.log).** Every spawn emits `pty-spawn-mcp-config servers=<N> tools=<M> bytes=<B> path=<…>` once, plus one `pty-spawn-agents-dir role=<admin|public> path=<…>` per added directory. Specialist spawns additionally emit `pty-spawn-allowlist specialist=<name> count=<N> stripped=<S> sourced-from=agent-frontmatter` where `stripped` is the count of brand-excluded tool names removed before argv emission. The diagnostic one-liner is `grep -E 'pty-spawn-mcp-config|pty-spawn-agents-dir|pty-spawn-allowlist|mcp-config-allowlist-coverage|specialist-tool-strip|boot-failed reason=' ~/.<brand>/logs/server.log | tail -50`.
 
-**Channel follower cold-start retry.** Each channel PTY session (webchat, whatsapp, email) has one JSONL follower ([`platform/ui/app/lib/channel-pty-bridge/follower.ts`](../../../ui/app/lib/channel-pty-bridge/follower.ts)) reading `GET /<sessionId>/log?follow=1` and fanning each assistant `end_turn` out to the awaiting `dispatchOnce`. A freshly-spawned PTY has no JSONL on disk until claude flushes its first line; during that window the manager answers `202 {pending:true}`. The follower retries every `CHANNEL_PTY_FOLLOWER_RETRY_MS` (default 1000) until a 200 stream opens or `CHANNEL_PTY_FOLLOWER_PENDING_MAX_MS` elapses. The follower is shared across channels, so that window defaults to the longest channel turn window (whatsapp's `WHATSAPP_PTY_TURN_TIMEOUT_MS`, 300000 — longer than webchat's 120000) so it never abandons a turn the caller is still awaiting. Because public sessions idle-reap, every webchat greeting is the first turn of a fresh spawn and crosses this window — before the retry, a 202 (which satisfies `res.ok`) was consumed as a single non-event line, the stream ended, and the follower died silently, timing out every public turn. The lifecycle is greppable as `follower-connect status=<code>` → `follower-retry attempt=N reason=pending` → `follower-open` → `outbound bytes=N`; `follower-give-up reason=pending-timeout` marks the JSONL never appearing. A `reject reason=turn-timeout` with no preceding `follower-open` (and no manager `log-follow-open`) for that sessionId is the signature. See `.docs/gated-public-agents.md` "Webchat turn lifecycle" for the full tag list.
+**Channel follower cold-start retry.** Each `dispatchOnce`-based channel PTY session has one JSONL follower ([`platform/ui/app/lib/channel-pty-bridge/follower.ts`](../../../ui/app/lib/channel-pty-bridge/follower.ts)) reading `GET /<sessionId>/log?follow=1` and fanning each assistant `end_turn` out to the awaiting `dispatchOnce`. (WhatsApp and public webchat have since migrated to the native event channel — an MCP notification in, a `reply`-tool call out — and no longer use this follower; the remaining `dispatchOnce` channels are email and telegram. The webchat detail below is the historical record of the bug the retry fixed.) A freshly-spawned PTY has no JSONL on disk until claude flushes its first line; during that window the manager answers `202 {pending:true}`. The follower retries every `CHANNEL_PTY_FOLLOWER_RETRY_MS` (default 1000) until a 200 stream opens or `CHANNEL_PTY_FOLLOWER_PENDING_MAX_MS` elapses. The follower is shared across channels, so that window defaults to the longest channel turn window (whatsapp's `WHATSAPP_PTY_TURN_TIMEOUT_MS`, 300000 — longer than webchat's 120000) so it never abandons a turn the caller is still awaiting. Because public sessions idle-reap, every webchat greeting is the first turn of a fresh spawn and crosses this window — before the retry, a 202 (which satisfies `res.ok`) was consumed as a single non-event line, the stream ended, and the follower died silently, timing out every public turn. The lifecycle is greppable as `follower-connect status=<code>` → `follower-retry attempt=N reason=pending` → `follower-open` → `outbound bytes=N`; `follower-give-up reason=pending-timeout` marks the JSONL never appearing. A `reject reason=turn-timeout` with no preceding `follower-open` (and no manager `log-follow-open`) for that sessionId is the signature. See `.docs/gated-public-agents.md` "Webchat turn lifecycle" for the full tag list.
 
 **Brand-process start counter.** `platform/ui/server-init.cjs` increments a persistent counter at `/tmp/server-init-<accountId>-restart.count` on every fresh start and emits `[server-init] start count=<N> account=<accountId> counter-path=<…>` to `server.log`. /tmp clears on reboot, so a clean reboot starts the count fresh; any value `>1` between operator-observed reboots means the brand process (driven by its `Requires=<brand>-claude-session-manager.service` clause) is restarting. The diagnostic one-liner is `grep '\[server-init\] start' ~/.<brand>/logs/server.log | tail -5` — the trailing `count=` value is the loop depth without counting SIGTERMs.
 

package/payload/platform/plugins/docs/references/admin-ui.md

@@ -57,7 +57,7 @@ either is a regression.
 
 **`/chat` Claude-desktop transcript presentation.** The admin webchat keeps the shared `Transcript` shell (stream, follow-tail) but injects a /chat-only item renderer via the component's optional `renderItems` prop: `renderChatTimeline` in `app/chat/transcript-render.tsx`. Presentation: operator turns render as a right-aligned grey bubble with only the message text (no label, no per-turn time); all agent output renders as plain prose (the reply-document filename line stays, as prose); a maximal consecutive run of `tool-call`/`tool-result` turns renders as one collapsed grey one-liner ("Used N tools ›") whose expansion shows every call and result payload — a lone call still gets the one-liner, and prose or a directive row ends a run. The WhatsApp reader (`/whatsapp`) omits the prop and keeps the default `renderTimeline`, so its rendering is unchanged; both presentations are test-pinned (`app/whatsapp/__tests__/Transcript-*.test.tsx` unmodified, `app/chat/__tests__/transcript-render.test.tsx` new).
 
-**maxy title for public sessions.** A `role=public` webchat spawn never produces a useful Claude Code `ai-title` (an anonymous one-line visitor turn), so every public row would otherwise read identically. The webchat route (`chat.ts`) composes a deterministic title — `Web · <senderId[:8]>[ · <personId>] · <UTC YYYY-MM-DD HH:mm>` (personId present only for gated visitors) — and threads it through the bridge (`dispatchOnce` → `managerSpawn`) to the manager `POST /spawn` body as `name`. `/spawn` validates it with `validateUserTitle` and, for `role=public` only, writes it into `UserTitleStore` so it occupies the operator-rename tier and wins over `ai-title`. Admin (`/rc-spawn`) and WhatsApp titling are unchanged. Observability: every public spawn logs `[spawn] role=public … title="…"` (or `title=missing`); the manager's row builder emits `[public-title] sessionId=… unexpected titleSource=<ai|null>` on the next list read for any public row that did not resolve from the user tier.
+**maxy title for public sessions.** A `role=public` webchat spawn never produces a useful Claude Code `ai-title` (an anonymous one-line visitor turn), so every public row would otherwise read identically. The webchat route (`chat.ts`) composes a deterministic title — `Web · <senderId[:8]>[ · <personId>] · <UTC YYYY-MM-DD HH:mm>` (personId present only for gated visitors) — and threads it through the native webchat gateway's public spawn (`handleInbound` → `buildPublicWebchatSpawnRequest` → `managerSpawn`) to the manager `POST /public-spawn` body as `name`. `/spawn` validates it with `validateUserTitle` and, for `role=public` only, writes it into `UserTitleStore` so it occupies the operator-rename tier and wins over `ai-title`. Admin (`/rc-spawn`) and WhatsApp titling are unchanged. Observability: every public spawn logs `[spawn] role=public … title="…"` (or `title=missing`); the manager's row builder emits `[public-title] sessionId=… unexpected titleSource=<ai|null>` on the next list read for any public row that did not resolve from the user tier.
 
 ### Graph
 
@@ -258,6 +258,26 @@ authoritative. This section names the surfaces and what backs each.
 > via the same admin-gated reader routes, never the operator's own session. The
 > operator surface is documented in full in the internal doc
 > `maxy-code/.docs/operator-dashboard.md`.
+>
+> **Width.** The operator header, the operator chat column, and the `/data`
+> header+toolbar+body all render in one centred column bounded to
+> `--chat-measure` (48rem). That token is a `:root` design token (beside
+> `--measure`/`--gutter`); the operator-header clamp
+> (`.admin-shell-root:has(> .platform-operator) > .admin-header`), the chat-column
+> clamp (`.platform-operator > .webchat-page`), and the `/data` clamp
+> (`.data-main`) all read it, so logo and burger align to the panel edges on both
+> surfaces. The admin shell carries no `--chat-measure` consumer and stays
+> edge-to-edge; the public webchat (`.public-surface`) inherits the same value.
+>
+> **Conversations item.** The dynamic Conversations burger item appears on
+> **both** the operator chat surface and `/data` whenever ≥1 reviewable
+> conversation exists (the count/channels are fetched per surface from
+> `/whatsapp-reader/conversations` with the operator's session key). On `/data`
+> selecting it renders the same read-only reader in place (the file browser is
+> swapped for it; Back returns). The flyout-open signal
+> `[operator-ui] op=conversations-menu present=<bool> channels=[…] count=<n>`
+> fires on `/data` too — `present=false` there while the chat surface shows the
+> item is the props-not-wired signature.
 
 | Surface | What it does | Backed by |
 |---|---|---|

package/payload/platform/plugins/docs/references/internals.md

@@ -477,7 +477,7 @@ The `brand-excluded` branch closes the recurring crash-restart loop on brands th
 
 **Per-spawn signals (server.log).** Every spawn emits `pty-spawn-mcp-config servers=<N> tools=<M> bytes=<B> path=<…>` once, plus one `pty-spawn-agents-dir role=<admin|public> path=<…>` per added directory. Specialist spawns additionally emit `pty-spawn-allowlist specialist=<name> count=<N> stripped=<S> sourced-from=agent-frontmatter` where `stripped` is the count of brand-excluded tool names removed before argv emission. The diagnostic one-liner is `grep -E 'pty-spawn-mcp-config|pty-spawn-agents-dir|pty-spawn-allowlist|mcp-config-allowlist-coverage|specialist-tool-strip|boot-failed reason=' ~/.<brand>/logs/server.log | tail -50`.
 
-**Channel follower cold-start retry.** Each channel PTY session (webchat, whatsapp, email) has one JSONL follower ([`platform/ui/app/lib/channel-pty-bridge/follower.ts`](../../../ui/app/lib/channel-pty-bridge/follower.ts)) reading `GET /<sessionId>/log?follow=1` and fanning each assistant `end_turn` out to the awaiting `dispatchOnce`. A freshly-spawned PTY has no JSONL on disk until claude flushes its first line; during that window the manager answers `202 {pending:true}`. The follower retries every `CHANNEL_PTY_FOLLOWER_RETRY_MS` (default 1000) until a 200 stream opens or `CHANNEL_PTY_FOLLOWER_PENDING_MAX_MS` elapses. The follower is shared across channels, so that window defaults to the longest channel turn window (whatsapp's `WHATSAPP_PTY_TURN_TIMEOUT_MS`, 300000 — longer than webchat's 120000) so it never abandons a turn the caller is still awaiting. Because public sessions idle-reap, every webchat greeting is the first turn of a fresh spawn and crosses this window — before the retry, a 202 (which satisfies `res.ok`) was consumed as a single non-event line, the stream ended, and the follower died silently, timing out every public turn. The lifecycle is greppable as `follower-connect status=<code>` → `follower-retry attempt=N reason=pending` → `follower-open` → `outbound bytes=N`; `follower-give-up reason=pending-timeout` marks the JSONL never appearing. A `reject reason=turn-timeout` with no preceding `follower-open` (and no manager `log-follow-open`) for that sessionId is the signature. See `.docs/gated-public-agents.md` "Webchat turn lifecycle" for the full tag list.
+**Channel follower cold-start retry.** Each `dispatchOnce`-based channel PTY session has one JSONL follower ([`platform/ui/app/lib/channel-pty-bridge/follower.ts`](../../../ui/app/lib/channel-pty-bridge/follower.ts)) reading `GET /<sessionId>/log?follow=1` and fanning each assistant `end_turn` out to the awaiting `dispatchOnce`. (WhatsApp and public webchat have since migrated to the native event channel — an MCP notification in, a `reply`-tool call out — and no longer use this follower; the remaining `dispatchOnce` channels are email and telegram. The webchat detail below is the historical record of the bug the retry fixed.) A freshly-spawned PTY has no JSONL on disk until claude flushes its first line; during that window the manager answers `202 {pending:true}`. The follower retries every `CHANNEL_PTY_FOLLOWER_RETRY_MS` (default 1000) until a 200 stream opens or `CHANNEL_PTY_FOLLOWER_PENDING_MAX_MS` elapses. The follower is shared across channels, so that window defaults to the longest channel turn window (whatsapp's `WHATSAPP_PTY_TURN_TIMEOUT_MS`, 300000 — longer than webchat's 120000) so it never abandons a turn the caller is still awaiting. Because public sessions idle-reap, every webchat greeting is the first turn of a fresh spawn and crosses this window — before the retry, a 202 (which satisfies `res.ok`) was consumed as a single non-event line, the stream ended, and the follower died silently, timing out every public turn. The lifecycle is greppable as `follower-connect status=<code>` → `follower-retry attempt=N reason=pending` → `follower-open` → `outbound bytes=N`; `follower-give-up reason=pending-timeout` marks the JSONL never appearing. A `reject reason=turn-timeout` with no preceding `follower-open` (and no manager `log-follow-open`) for that sessionId is the signature. See `.docs/gated-public-agents.md` "Webchat turn lifecycle" for the full tag list.
 
 **Brand-process start counter.** `platform/ui/server-init.cjs` increments a persistent counter at `/tmp/server-init-<accountId>-restart.count` on every fresh start and emits `[server-init] start count=<N> account=<accountId> counter-path=<…>` to `server.log`. /tmp clears on reboot, so a clean reboot starts the count fresh; any value `>1` between operator-observed reboots means the brand process (driven by its `Requires=<brand>-claude-session-manager.service` clause) is restarting. The diagnostic one-liner is `grep '\[server-init\] start' ~/.<brand>/logs/server.log | tail -5` — the trailing `count=` value is the loop depth without counting SIGTERMs.
 

package/payload/platform/scripts/check-no-esm-require.mjs

@@ -55,6 +55,10 @@ const ALLOWLIST = new Set([
   // before the module's `../paths` mock fires, to redirect MAXY_DIR off the
   // operator's real home config.
   'platform/ui/app/lib/__tests__/operator-domains.test.ts',
+  // Same vi.hoisted pattern: the per-admin remote-auth test builds a tmpdir
+  // before the `../paths` mock fires, to point USERS_FILE/REMOTE_PASSWORD_FILE
+  // at a temp dir off the operator's real home config.
+  'platform/ui/app/lib/__tests__/remote-auth-per-admin.test.ts',
 ])
 
 const REQUIRE_CALL_RE = /\brequire\s*\(/

package/payload/platform/services/claude-session-manager/dist/canonical-tool-names.generated.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"canonical-tool-names.generated.d.ts","sourceRoot":"","sources":["../src/canonical-tool-names.generated.ts"],"names":[],"mappings":"AAQA,+EAA+E;AAC/E,eAAO,MAAM,gBAAgB,EAAE,SAAS,MAAM,EAiB7C,CAAA;AAED,gEAAgE;AAChE,eAAO,MAAM,yBAAyB,EAAE,SAAS,MAAM,EAiLtD,CAAA"}
+{"version":3,"file":"canonical-tool-names.generated.d.ts","sourceRoot":"","sources":["../src/canonical-tool-names.generated.ts"],"names":[],"mappings":"AAQA,+EAA+E;AAC/E,eAAO,MAAM,gBAAgB,EAAE,SAAS,MAAM,EAiB7C,CAAA;AAED,gEAAgE;AAChE,eAAO,MAAM,yBAAyB,EAAE,SAAS,MAAM,EAkLtD,CAAA"}

package/payload/platform/services/claude-session-manager/dist/canonical-tool-names.generated.js

@@ -45,6 +45,7 @@ export const CANONICAL_MAXY_TOOL_NAMES = [
     "mcp__plugin_admin_admin__public-hostname",
     "mcp__plugin_admin_admin__publish-site",
     "mcp__plugin_admin_admin__qr-generate",
+    "mcp__plugin_admin_admin__remote-auth-revoke-password",
     "mcp__plugin_admin_admin__remote-auth-set-password",
     "mcp__plugin_admin_admin__remote-auth-status",
     "mcp__plugin_admin_admin__session-reset",

package/payload/platform/services/claude-session-manager/dist/canonical-tool-names.generated.js.map

@@ -1 +1 @@
-{"version":3,"file":"canonical-tool-names.generated.js","sourceRoot":"","sources":["../src/canonical-tool-names.generated.ts"],"names":[],"mappings":"AAAA,mCAAmC;AACnC,kEAAkE;AAClE,yDAAyD;AACzD,kFAAkF;AAClF,EAAE;AACF,yEAAyE;AACzE,6DAA6D;AAE7D,+EAA+E;AAC/E,MAAM,CAAC,MAAM,gBAAgB,GAAsB;IACjD,OAAO;IACP,KAAK;IACL,SAAS;IACT,UAAU;IACV,OAAO;IACP,OAAO;IACP,cAAc;IACd,QAAQ;IACR,SAAS;IACT,WAAW;IACX,YAAY;IACZ,UAAU;IACV,SAAS;IACT,UAAU;IACV,MAAM;IACN,WAAW;CACZ,CAAA;AAED,gEAAgE;AAChE,MAAM,CAAC,MAAM,yBAAyB,GAAsB;IAC1D,yCAAyC;IACzC,yCAAyC;IACzC,yCAAyC;IACzC,sCAAsC;IACtC,yCAAyC;IACzC,wCAAwC;IACxC,oCAAoC;IACpC,qCAAqC;IACrC,uCAAuC;IACvC,2CAA2C;IAC3C,4CAA4C;IAC5C,qCAAqC;IACrC,yCAAyC;IACzC,4CAA4C;IAC5C,oCAAoC;IACpC,sCAAsC;IACtC,0CAA0C;IAC1C,uCAAuC;IACvC,sCAAsC;IACtC,mDAAmD;IACnD,6CAA6C;IAC7C,wCAAwC;IACxC,yCAAyC;IACzC,qCAAqC;IACrC,uCAAuC;IACvC,sCAAsC;IACtC,wCAAwC;IACxC,+BAA+B;IAC/B,qCAAqC;IACrC,sCAAsC;IACtC,yCAAyC;IACzC,4CAA4C;IAC5C,uDAAuD;IACvD,+CAA+C;IAC/C,2CAA2C;IAC3C,gDAAgD;IAChD,oDAAoD;IACpD,4CAA4C;IAC5C,+CAA+C;IAC/C,+CAA+C;IAC/C,gDAAgD;IAChD,6CAA6C;IAC7C,6CAA6C;IAC7C,iDAAiD;IACjD,oDAAoD;IACpD,+CAA+C;IAC/C,2CAA2C;IAC3C,2CAA2C;IAC3C,+CAA+C;IAC/C,+CAA+C;IAC/C,+CAA+C;IAC/C,8CAA8C;IAC9C,+CAA+C;IAC/C,6CAA6C;IAC7C,+CAA+C;IAC/C,+CAA+C;IAC/C,6CAA6C;IAC7C,6CAA6C;IAC7C,sCAAsC;IACtC,2CAA2C;IAC3C,2CAA2C;IAC3C,sCAAsC;IACtC,4CAA4C;IAC5C,uCAAuC;IACvC,4CAA4C;IAC5C,8CAA8C;IAC9C,qCAAqC;IACrC,sCAAsC;IACtC,uCAAuC;IACvC,qCAAqC;IACrC,sCAAsC;IACtC,uCAAuC;IACvC,qDAAqD;IACrD,sDAAsD;IACtD,uDAAuD;IACvD,wDAAwD;IACxD,iEAAiE;IACjE,kEAAkE;IAClE,6DAA6D;IAC7D,8CAA8C;IAC9C,wDAAwD;IACxD,gDAAgD;IAChD,qDAAqD;IACrD,sDAAsD;IACtD,wDAAwD;IACxD,wCAAwC;IACxC,wCAAwC;IACxC,iDAAiD;IACjD,wDAAwD;IACxD,0DAA0D;IAC1D,0CAA0C;IAC1C,6CAA6C;IAC7C,wCAAwC;IACxC,mDAAmD;IACnD,+CAA+C;IAC/C,mDAAmD;IACnD,0CAA0C;IAC1C,kDAAkD;IAClD,8CAA8C;IAC9C,oDAAoD;IACpD,kDAAkD;IAClD,+CAA+C;IAC/C,mDAAmD;IACnD,2CAA2C;IAC3C,qDAAqD;IACrD,+CAA+C;IAC/C,sDAAsD;IACtD,gDAAgD;IAChD,2CAA2C;IAC3C,gDAAgD;IAChD,0CAA0C;IAC1C,mDAAmD;IACnD,0CAA0C;IAC1C,kDAAkD;IAClD,yCAAyC;IACzC,kDAAkD;IAClD,2CAA2C;IAC3C,yCAAyC;IACzC,2CAA2C;IAC3C,4CAA4C;IAC5C,mDAAmD;IACnD,uDAAuD;IACvD,qDAAqD;IACrD,oDAAoD;IACpD,oDAAoD;IACpD,gDAAgD;IAChD,kDAAkD;IAClD,mDAAmD;IACnD,iDAAiD;IACjD,sDAAsD;IACtD,uDAAuD;IACvD,yDAAyD;IACzD,oDAAoD;IACpD,mDAAmD;IACnD,wDAAwD;IACxD,iDAAiD;IACjD,wDAAwD;IACxD,kDAAkD;IAClD,oDAAoD;IACpD,iDAAiD;IACjD,wCAAwC;IACxC,gDAAgD;IAChD,0DAA0D;IAC1D,sCAAsC;IACtC,kDAAkD;IAClD,gDAAgD;IAChD,kEAAkE;IAClE,uDAAuD;IACvD,oDAAoD;IACpD,oDAAoD;IACpD,qDAAqD;IACrD,oDAAoD;IACpD,kDAAkD;IAClD,gDAAgD;IAChD,yCAAyC;IACzC,uCAAuC;IACvC,oCAAoC;IACpC,qCAAqC;IACrC,uCAAuC;IACvC,qCAAqC;IACrC,qCAAqC;IACrC,sCAAsC;IACtC,oCAAoC;IACpC,iCAAiC;IACjC,kCAAkC;IAClC,mCAAmC;IACnC,oCAAoC;IACpC,oCAAoC;IACpC,kDAAkD;IAClD,kDAAkD;IAClD,mDAAmD;IACnD,+CAA+C;IAC/C,gDAAgD;IAChD,gDAAgD;IAChD,kDAAkD;IAClD,oDAAoD;CACrD,CAAA"}
+{"version":3,"file":"canonical-tool-names.generated.js","sourceRoot":"","sources":["../src/canonical-tool-names.generated.ts"],"names":[],"mappings":"AAAA,mCAAmC;AACnC,kEAAkE;AAClE,yDAAyD;AACzD,kFAAkF;AAClF,EAAE;AACF,yEAAyE;AACzE,6DAA6D;AAE7D,+EAA+E;AAC/E,MAAM,CAAC,MAAM,gBAAgB,GAAsB;IACjD,OAAO;IACP,KAAK;IACL,SAAS;IACT,UAAU;IACV,OAAO;IACP,OAAO;IACP,cAAc;IACd,QAAQ;IACR,SAAS;IACT,WAAW;IACX,YAAY;IACZ,UAAU;IACV,SAAS;IACT,UAAU;IACV,MAAM;IACN,WAAW;CACZ,CAAA;AAED,gEAAgE;AAChE,MAAM,CAAC,MAAM,yBAAyB,GAAsB;IAC1D,yCAAyC;IACzC,yCAAyC;IACzC,yCAAyC;IACzC,sCAAsC;IACtC,yCAAyC;IACzC,wCAAwC;IACxC,oCAAoC;IACpC,qCAAqC;IACrC,uCAAuC;IACvC,2CAA2C;IAC3C,4CAA4C;IAC5C,qCAAqC;IACrC,yCAAyC;IACzC,4CAA4C;IAC5C,oCAAoC;IACpC,sCAAsC;IACtC,0CAA0C;IAC1C,uCAAuC;IACvC,sCAAsC;IACtC,sDAAsD;IACtD,mDAAmD;IACnD,6CAA6C;IAC7C,wCAAwC;IACxC,yCAAyC;IACzC,qCAAqC;IACrC,uCAAuC;IACvC,sCAAsC;IACtC,wCAAwC;IACxC,+BAA+B;IAC/B,qCAAqC;IACrC,sCAAsC;IACtC,yCAAyC;IACzC,4CAA4C;IAC5C,uDAAuD;IACvD,+CAA+C;IAC/C,2CAA2C;IAC3C,gDAAgD;IAChD,oDAAoD;IACpD,4CAA4C;IAC5C,+CAA+C;IAC/C,+CAA+C;IAC/C,gDAAgD;IAChD,6CAA6C;IAC7C,6CAA6C;IAC7C,iDAAiD;IACjD,oDAAoD;IACpD,+CAA+C;IAC/C,2CAA2C;IAC3C,2CAA2C;IAC3C,+CAA+C;IAC/C,+CAA+C;IAC/C,+CAA+C;IAC/C,8CAA8C;IAC9C,+CAA+C;IAC/C,6CAA6C;IAC7C,+CAA+C;IAC/C,+CAA+C;IAC/C,6CAA6C;IAC7C,6CAA6C;IAC7C,sCAAsC;IACtC,2CAA2C;IAC3C,2CAA2C;IAC3C,sCAAsC;IACtC,4CAA4C;IAC5C,uCAAuC;IACvC,4CAA4C;IAC5C,8CAA8C;IAC9C,qCAAqC;IACrC,sCAAsC;IACtC,uCAAuC;IACvC,qCAAqC;IACrC,sCAAsC;IACtC,uCAAuC;IACvC,qDAAqD;IACrD,sDAAsD;IACtD,uDAAuD;IACvD,wDAAwD;IACxD,iEAAiE;IACjE,kEAAkE;IAClE,6DAA6D;IAC7D,8CAA8C;IAC9C,wDAAwD;IACxD,gDAAgD;IAChD,qDAAqD;IACrD,sDAAsD;IACtD,wDAAwD;IACxD,wCAAwC;IACxC,wCAAwC;IACxC,iDAAiD;IACjD,wDAAwD;IACxD,0DAA0D;IAC1D,0CAA0C;IAC1C,6CAA6C;IAC7C,wCAAwC;IACxC,mDAAmD;IACnD,+CAA+C;IAC/C,mDAAmD;IACnD,0CAA0C;IAC1C,kDAAkD;IAClD,8CAA8C;IAC9C,oDAAoD;IACpD,kDAAkD;IAClD,+CAA+C;IAC/C,mDAAmD;IACnD,2CAA2C;IAC3C,qDAAqD;IACrD,+CAA+C;IAC/C,sDAAsD;IACtD,gDAAgD;IAChD,2CAA2C;IAC3C,gDAAgD;IAChD,0CAA0C;IAC1C,mDAAmD;IACnD,0CAA0C;IAC1C,kDAAkD;IAClD,yCAAyC;IACzC,kDAAkD;IAClD,2CAA2C;IAC3C,yCAAyC;IACzC,2CAA2C;IAC3C,4CAA4C;IAC5C,mDAAmD;IACnD,uDAAuD;IACvD,qDAAqD;IACrD,oDAAoD;IACpD,oDAAoD;IACpD,gDAAgD;IAChD,kDAAkD;IAClD,mDAAmD;IACnD,iDAAiD;IACjD,sDAAsD;IACtD,uDAAuD;IACvD,yDAAyD;IACzD,oDAAoD;IACpD,mDAAmD;IACnD,wDAAwD;IACxD,iDAAiD;IACjD,wDAAwD;IACxD,kDAAkD;IAClD,oDAAoD;IACpD,iDAAiD;IACjD,wCAAwC;IACxC,gDAAgD;IAChD,0DAA0D;IAC1D,sCAAsC;IACtC,kDAAkD;IAClD,gDAAgD;IAChD,kEAAkE;IAClE,uDAAuD;IACvD,oDAAoD;IACpD,oDAAoD;IACpD,qDAAqD;IACrD,oDAAoD;IACpD,kDAAkD;IAClD,gDAAgD;IAChD,yCAAyC;IACzC,uCAAuC;IACvC,oCAAoC;IACpC,qCAAqC;IACrC,uCAAuC;IACvC,qCAAqC;IACrC,qCAAqC;IACrC,sCAAsC;IACtC,oCAAoC;IACpC,iCAAiC;IACjC,kCAAkC;IAClC,mCAAmC;IACnC,oCAAoC;IACpC,oCAAoC;IACpC,kDAAkD;IAClD,kDAAkD;IAClD,mDAAmD;IACnD,+CAA+C;IAC/C,gDAAgD;IAChD,gDAAgD;IAChD,kDAAkD;IAClD,oDAAoD;CACrD,CAAA"}

package/payload/platform/services/claude-session-manager/dist/http-server.d.ts

@@ -35,6 +35,10 @@ export interface HttpDeps extends Omit<SpawnDeps, 'onSessionReady' | 'watcher'>
      *  short value to exercise the bind-timeout response without a 60s wait. */
     rcSpawnUrlWaitMs?: number;
 }
+export declare function forkArgvSegment(fromSessionId: string, newSessionId: string, model: string): string[];
+export declare function reseatIdentityPrompt(model: string): string;
+export declare function formatReseatLine(fromModel: string | null, toModel: string, oldSessionId: string, newSessionId: string, observed: string | null): string;
+export declare function firstPostArmAssistantModel(lines: string[], armTimeMs: number): string | null;
 /** Task 189 — Hono instance with the test-only fan-out trigger attached.
  *  The vitest fixture for the `/events` url-capture re-emit drives this
  *  directly (no real PTY spawn in the suite); production callers route

package/payload/platform/services/claude-session-manager/dist/http-server.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"http-server.d.ts","sourceRoot":"","sources":["../src/http-server.ts"],"names":[],"mappings":"AAsBA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAA;AAY3B,OAAO,EAgBL,KAAK,SAAS,EAEf,MAAM,kBAAkB,CAAA;AAqBzB,OAAO,KAAK,EAAE,SAAS,EAAyB,MAAM,iBAAiB,CAAA;AAEvE,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAA;AAC1D,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAA;AAC3D,OAAO,EAAqB,KAAK,cAAc,EAAE,MAAM,uBAAuB,CAAA;AAC9E,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAA;AACtD,OAAO,EAAE,mBAAmB,EAAE,MAAM,4BAA4B,CAAA;AAgFhE,eAAO,MAAM,kBAAkB,QAA2B,CAAA;AAS1D,eAAO,MAAM,4BAA4B,QAAS,CAAA;AAIlD,MAAM,WAAW,QAAS,SAAQ,IAAI,CAAC,SAAS,EAAE,gBAAgB,GAAG,SAAS,CAAC;IAC7E;;qEAEiE;IACjE,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,OAAO,EAAE,SAAS,CAAA;IAClB,WAAW,EAAE,MAAM,CAAA;IACnB,iBAAiB,EAAE,MAAM,CAAA;IACzB,kBAAkB,EAAE,WAAW,CAAA;IAC/B,eAAe,EAAE,aAAa,CAAA;IAC9B;kFAC8E;IAC9E,cAAc,EAAE,cAAc,CAAA;IAC9B;;gFAE4E;IAC5E,cAAc,EAAE,cAAc,CAAA;IAC9B;;;6BAGyB;IACzB,mBAAmB,CAAC,EAAE,mBAAmB,CAAA;IACzC;;gFAE4E;IAC5E,gBAAgB,CAAC,EAAE,MAAM,CAAA;CAC1B;AAoND;;;kEAGkE;AAClE,MAAM,MAAM,OAAO,GAAG,IAAI,GAAG;IAC3B,2BAA2B,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;IACpD;;;+CAG2C;IAC3C,sBAAsB,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;CAChD,CAAA;AAmBD,wBAAgB,YAAY,CAAC,IAAI,EAAE,QAAQ,GAAG,OAAO,CA4gEpD"}
+{"version":3,"file":"http-server.d.ts","sourceRoot":"","sources":["../src/http-server.ts"],"names":[],"mappings":"AAsBA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAA;AAY3B,OAAO,EAgBL,KAAK,SAAS,EAEf,MAAM,kBAAkB,CAAA;AAqBzB,OAAO,KAAK,EAAE,SAAS,EAAyB,MAAM,iBAAiB,CAAA;AAEvE,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAA;AAC1D,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAA;AAC3D,OAAO,EAAqB,KAAK,cAAc,EAAE,MAAM,uBAAuB,CAAA;AAC9E,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAA;AACtD,OAAO,EAAE,mBAAmB,EAAE,MAAM,4BAA4B,CAAA;AAgFhE,eAAO,MAAM,kBAAkB,QAA2B,CAAA;AAS1D,eAAO,MAAM,4BAA4B,QAAS,CAAA;AAIlD,MAAM,WAAW,QAAS,SAAQ,IAAI,CAAC,SAAS,EAAE,gBAAgB,GAAG,SAAS,CAAC;IAC7E;;qEAEiE;IACjE,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,OAAO,EAAE,SAAS,CAAA;IAClB,WAAW,EAAE,MAAM,CAAA;IACnB,iBAAiB,EAAE,MAAM,CAAA;IACzB,kBAAkB,EAAE,WAAW,CAAA;IAC/B,eAAe,EAAE,aAAa,CAAA;IAC9B;kFAC8E;IAC9E,cAAc,EAAE,cAAc,CAAA;IAC9B;;gFAE4E;IAC5E,cAAc,EAAE,cAAc,CAAA;IAC9B;;;6BAGyB;IACzB,mBAAmB,CAAC,EAAE,mBAAmB,CAAA;IACzC;;gFAE4E;IAC5E,gBAAgB,CAAC,EAAE,MAAM,CAAA;CAC1B;AAwGD,wBAAgB,eAAe,CAAC,aAAa,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,EAAE,CAEpG;AAQD,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAE1D;AAMD,wBAAgB,gBAAgB,CAC9B,SAAS,EAAE,MAAM,GAAG,IAAI,EACxB,OAAO,EAAE,MAAM,EACf,YAAY,EAAE,MAAM,EACpB,YAAY,EAAE,MAAM,EACpB,QAAQ,EAAE,MAAM,GAAG,IAAI,GACtB,MAAM,CAER;AAkCD,wBAAgB,0BAA0B,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE,SAAS,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAe5F;AAwJD;;;kEAGkE;AAClE,MAAM,MAAM,OAAO,GAAG,IAAI,GAAG;IAC3B,2BAA2B,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;IACpD;;;+CAG2C;IAC3C,sBAAsB,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;CAChD,CAAA;AAmBD,wBAAgB,YAAY,CAAC,IAAI,EAAE,QAAQ,GAAG,OAAO,CAimEpD"}

package/payload/platform/services/claude-session-manager/dist/http-server.js

@@ -182,6 +182,120 @@ function resolveRow(watcher, id) {
 // auto-archive` lines cover the lifecycle.
 const END_TURN_SIGNATURE = '"stop_reason":"end_turn"';
 const AUTO_ARCHIVE_SPECIALIST = 'database-operator';
+// Task 876 — re-seat (operator-initiated model change for an existing admin
+// webchat session). Fork the source onto a fresh session born on the chosen
+// model: `--resume <old>` seeds history, `--fork-session` mints into the
+// pre-supplied `--session-id <new>`, `--model` pins the fork's first turn.
+// Pure so the argv shape is unit-tested without a spawn.
+export function forkArgvSegment(fromSessionId, newSessionId, model) {
+    return ['--resume', fromSessionId, '--fork-session', '--session-id', newSessionId, '--model', model];
+}
+// Task 879 — the re-seated fork inherits the source's history, including the
+// source's earlier self-identification on the OLD model. The rc-spawn path does
+// not compose --append-system-prompt (only fresh spawnSession does), so the
+// fork alone gets an authoritative current-model line on its argv: the agent
+// answers the live model on the first ask, without being challenged. General
+// self-ID accuracy (absent a re-seat) is out of scope — only the fork gets it.
+export function reseatIdentityPrompt(model) {
+    return `This conversation now runs on the model ${model}. Earlier messages may show you identifying as a different model; that is stale context from before a model change — disregard it and state ${model} as your current model if asked.`;
+}
+// Task 876 — the re-seat post-condition line. Emitted ONLY after a real
+// assistant turn on the fork is read (intention is not logged, per the
+// observability contract): a re-seat that silently lands on the wrong model
+// is visible rather than reported as success. Correlation key: old→new id.
+export function formatReseatLine(fromModel, toModel, oldSessionId, newSessionId, observed) {
+    return `[webchat:reseat] op=reseat from-model=${fromModel ?? 'unknown'} to-model=${toModel} old-session=${oldSessionId} new-session=${newSessionId} first-turn-model=${observed ?? 'unknown'}`;
+}
+// Task 876 — read the most-recent real (non-synthetic) assistant model from a
+// session's JSONL. The source's last answered model is the re-seat's
+// from-model; a stranded session whose only tail is a synthetic error yields
+// null ('unknown'). Bottom-up scan: the latest answered turn wins.
+function lastRealAssistantModel(jsonlPath) {
+    let lines;
+    try {
+        lines = readFileSync(jsonlPath, 'utf8').split('\n').filter((l) => l.length > 0);
+    }
+    catch {
+        return null;
+    }
+    for (let i = lines.length - 1; i >= 0; i--) {
+        try {
+            const rec = JSON.parse(lines[i]);
+            if (rec.type === 'assistant' && typeof rec.message?.model === 'string' && rec.message.model !== '<synthetic>') {
+                return rec.message.model;
+            }
+        }
+        catch {
+            /* a mid-write line — skip it */
+        }
+    }
+    return null;
+}
+// Task 876 — the FORK's first post-reseat assistant model. The fork JSONL
+// opens with the copied history, and `--fork-session` PRESERVES each copied
+// turn's original `timestamp` (verified: only `sessionId` is rewritten), so a
+// post-arm timestamp cleanly discriminates the operator's first new turn from
+// the copied history — independent of WHEN the copy flushes to disk (a
+// line-count baseline would race the flush). Returns the first non-synthetic
+// assistant model whose turn timestamp is strictly after `armTimeMs`, or null
+// when no such turn has landed yet.
+export function firstPostArmAssistantModel(lines, armTimeMs) {
+    for (const line of lines) {
+        if (line.length === 0)
+            continue;
+        try {
+            const rec = JSON.parse(line);
+            if (rec.type !== 'assistant')
+                continue;
+            const model = rec.message?.model;
+            if (typeof model !== 'string' || model === '<synthetic>')
+                continue;
+            const ts = typeof rec.timestamp === 'string' ? Date.parse(rec.timestamp) : NaN;
+            if (Number.isFinite(ts) && ts > armTimeMs)
+                return model;
+        }
+        catch {
+            /* a mid-write line — skip it */
+        }
+    }
+    return null;
+}
+// Task 876 — arm a one-shot reader on the FORK's first post-reseat assistant
+// turn. `armTimeMs` is captured here (after bind); only assistant turns
+// timestamped after it are read, so the copied history (old timestamps) is
+// skipped however late it flushes. Emits the correlation line once a real
+// model is read, then detaches; cleaned up on PTY exit.
+function attachReseatObserve(deps, newSessionId, ctx) {
+    let done = false;
+    const jsonlPath = jsonlPathForSessionId(deps.spawnCwd, newSessionId);
+    const armTimeMs = Date.now();
+    function tryEmit() {
+        if (done)
+            return;
+        let lines;
+        try {
+            lines = readFileSync(jsonlPath, 'utf8').split('\n');
+        }
+        catch {
+            return;
+        }
+        const observed = firstPostArmAssistantModel(lines, armTimeMs);
+        if (observed === null)
+            return;
+        done = true;
+        deps.logger(formatReseatLine(ctx.fromModel, ctx.toModel, ctx.oldSessionId, newSessionId, observed));
+    }
+    const unsubscribe = deps.watcher.subscribe((event) => {
+        if (done)
+            return;
+        if (event.sessionId !== newSessionId)
+            return;
+        if (event.source !== 'jsonl')
+            return;
+        tryEmit();
+    });
+    onPtyExit(newSessionId, () => unsubscribe());
+}
 // One-shot auto-close: once the session's JSONL contains an assistant
 // message with `stop_reason === "end_turn"`, stop the PTY so the session
 // closes after its single turn. Shared by the public-spawn database-operator
@@ -632,6 +746,17 @@ export function buildHttpApp(deps) {
         const personId = typeof body.personId === 'string' && body.personId.length > 0 && body.personId.length <= 128
             ? body.personId
             : undefined;
+        // Task 756 — the per-conversation webchat native channel for a public
+        // spawn. Shape-validated here (all three fields are non-empty strings, the
+        // gateway is loopback http) before it reaches the spawn, which composes it
+        // under the public ringfence (deny-all + reply-only allow + strict mcp).
+        const wc = body.webchatChannel;
+        const webchatChannel = wc && typeof wc === 'object'
+            && typeof wc.key === 'string' && wc.key.length > 0
+            && typeof wc.gatewayUrl === 'string' && wc.gatewayUrl.startsWith('http')
+            && typeof wc.serverPath === 'string' && wc.serverPath.startsWith('/')
+            ? { key: wc.key, gatewayUrl: wc.gatewayUrl, serverPath: wc.serverPath }
+            : undefined;
         // Task 624 — maxy-composed public-session title. Validated by the same
         // validateUserTitle the /:sessionId/rename route uses; persisted only for
         // role=public after the sessionId is minted. An invalid/absent name leaves
@@ -708,6 +833,7 @@ export function buildHttpApp(deps) {
             conversationNodeId,
             sliceToken,
             personId,
+            webchatChannel,
         });
         if (!result.ok) {
             if ('rejected' in result) {
@@ -1618,6 +1744,14 @@ export function buildHttpApp(deps) {
         }
         const sessionId = typeof body.sessionId === 'string' && body.sessionId.length > 0 ? body.sessionId : null;
         const name = typeof body.name === 'string' && body.name.length > 0 ? body.name : null;
+        // Task 876 — re-seat fork. `forkFromSessionId` is the source whose history
+        // is copied; `sessionId` is the caller-pre-minted fork target; `model` is
+        // the chosen model. The UI allowlist (isSelectableModel) is the
+        // authoritative gate; this shape-guard is defence-in-depth so a malformed
+        // value cannot reach the `--model` argv (the manager has no rootDir-clean
+        // path to import the models lib, so it guards on shape, not the exact list).
+        const forkFromSessionId = typeof body.forkFromSessionId === 'string' && UUID_PATTERN.test(body.forkFromSessionId) ? body.forkFromSessionId : null;
+        const reseatModel = typeof body.model === 'string' && /^claude-[a-z0-9.-]+(\[1m\])?$/i.test(body.model) ? body.model : null;
         // Task 626 — per-visitor slice ringfence for the public session-end review
         // rc session. Shape-gated identically to /public-spawn so a body-controlled
         // value cannot reach the child env. Absent on channel-admin / LinkedIn.
@@ -1687,6 +1821,27 @@ export function buildHttpApp(deps) {
             timed(deps.logger, 'POST', '/rc-spawn', 400, Date.now() - start);
             return c.json({ error: 'sessionId must be a v4 UUID' }, 400);
         }
+        // Task 876 — re-seat fork validation. The fork needs a pre-minted target
+        // id that does NOT yet exist, a shape-valid model, and a source whose
+        // transcript exists (history to copy). Any failure → 400, no spawn.
+        if (forkFromSessionId !== null) {
+            if (sessionId === null) {
+                timed(deps.logger, 'POST', '/rc-spawn', 400, Date.now() - start);
+                return c.json({ error: 're-seat requires a pre-minted sessionId' }, 400);
+            }
+            if (reseatModel === null) {
+                timed(deps.logger, 'POST', '/rc-spawn', 400, Date.now() - start);
+                return c.json({ error: 're-seat requires a valid model' }, 400);
+            }
+            if (!findExistingJsonlForSessionId(deps.claudeConfigDir, forkFromSessionId)) {
+                timed(deps.logger, 'POST', '/rc-spawn', 400, Date.now() - start);
+                return c.json({ error: 're-seat source has no transcript' }, 400);
+            }
+            if (findExistingJsonlForSessionId(deps.claudeConfigDir, sessionId)) {
+                timed(deps.logger, 'POST', '/rc-spawn', 400, Date.now() - start);
+                return c.json({ error: 're-seat target id already exists' }, 400);
+            }
+        }
         // Task 702 — never run two processes on one sessionId. If we already own a
         // live PTY for this id, the spawn is a no-op (a bridge that lost its
         // in-memory index after a restart re-asks; the live PTY takes the next
@@ -1728,8 +1883,16 @@ export function buildHttpApp(deps) {
         const argv = ['--remote-control'];
         if (name)
             argv.push(name);
-        if (sessionId)
+        // Task 876 — a re-seat forks the source onto the pre-minted target id; the
+        // ordinary fresh/resume single-id push is replaced by the fork segment.
+        if (forkFromSessionId !== null && reseatModel !== null && sessionId) {
+            argv.push(...forkArgvSegment(forkFromSessionId, sessionId, reseatModel));
+            // Task 879 — authoritative current-model signal for the fork only.
+            argv.push('--append-system-prompt', reseatIdentityPrompt(reseatModel));
+        }
+        else if (sessionId) {
             argv.push(mode === 'resume' ? '--resume' : '--session-id', sessionId);
+        }
         // Task 592 — per-spawn bypass-permissions waiver. The brand settings.json
         // carries `defaultMode: bypassPermissions` (Task 583); without this flag
         // the first-time "WARNING: … 1. No, exit  2. Yes, I accept" disclaimer
@@ -2250,6 +2413,35 @@ export function buildHttpApp(deps) {
         // unit driven by node-pty; the operator-visible spawnMethod marker
         // is kept stable so server.log greps survive the Task 573 cleanup.
         deps.logger(`[sessions-rc-resume] mode=${mode} sessionId=${sessionId ?? 'none'} jsonlPath=${existingJsonlPath ?? 'none'} name=${name ?? 'none'} spawnedPid=${pty.pid} bridgeId=${bridgeSessionId ?? 'pending'} spawnMethod=systemd-scope env.CLAUDE_CONFIG_DIR=${deps.claudeConfigDir}`);
+        // Task 876 — re-seat post-bind. Once the fork is bound: (1) arm the
+        // one-shot observer so the post-condition line emits on the fork's first
+        // real turn, and (2) best-effort stop the source session's live PTY — the
+        // operator has explicitly moved off it (the removed-model case has no live
+        // PTY, so the stop is a no-op there). Neither must fail the response.
+        if (forkFromSessionId !== null && reseatModel !== null && sessionId && outcome === 'bound') {
+            const sourceJsonl = findExistingJsonlForSessionId(deps.claudeConfigDir, forkFromSessionId);
+            const fromModel = sourceJsonl ? lastRealAssistantModel(sourceJsonl) : null;
+            attachReseatObserve(deps, sessionId, { fromModel, toModel: reseatModel, oldSessionId: forkFromSessionId });
+            try {
+                const source = deps.watcher.getBySessionId(forkFromSessionId);
+                if (source && source.scopeUnitToken) {
+                    await stopSession({
+                        killGraceMs: deps.killGraceMs,
+                        logger: deps.logger,
+                        runSystemctl: deps.runSystemctl,
+                        rowScopeUnitToken: source.scopeUnitToken,
+                        rowPid: source.pid,
+                    }, forkFromSessionId);
+                    deps.logger(`[webchat:reseat] op=old-session-stop old-session=${forkFromSessionId} result=stopped`);
+                }
+                else {
+                    deps.logger(`[webchat:reseat] op=old-session-stop old-session=${forkFromSessionId} result=absent`);
+                }
+            }
+            catch (err) {
+                deps.logger(`[webchat:reseat] op=old-session-stop old-session=${forkFromSessionId} result=error err=${JSON.stringify(err instanceof Error ? err.message : String(err))}`);
+            }
+        }
         timed(deps.logger, 'POST', '/rc-spawn', 200, Date.now() - start);
         // `slug` is the Task 648 canonical field the client navigates by;
         // `bridgeSessionId` is the same value, retained so pre-648 consumers and