@rubytech/create-maxy-code 0.1.411 → 0.1.414

package/payload/platform/services/claude-session-manager/dist/cross-account-census.d.ts

@@ -0,0 +1,34 @@
+/** The census line. `violation-ids=-` (not empty) marks "no offenders" so the
+ *  field is always present and greppable. `plugins-adopted=n/target` reads the
+ *  ledger's adopted count; `n<target` is the coverage-regression alarm. */
+export declare function formatXacctCensus(input: {
+    sessions: number;
+    houseScoped: number;
+    violations: string[];
+    pluginsAdopted: number;
+    pluginsTarget: number;
+}): string;
+export interface XacctCensusDeps {
+    /** Directory holding live `<sessionId>.meta.json` sidecars. */
+    projectsDir: string;
+    /** Parent-of-`platform` install dir passthrough for `isHouseAccount`. */
+    platformRoot: string;
+    /** Ledger adopted-count and target (both 0 at foundation). */
+    adopted: number;
+    target: number;
+    logger: (line: string) => void;
+}
+/** Read every live sidecar and assert `houseAdminScope != null ⟹ the account is
+ *  currently house`. Best-effort: an unreadable projects dir degrades to a zero
+ *  line rather than throwing (the manager may census before the dir exists). */
+export declare function emitXacctCensus(deps: XacctCensusDeps): void;
+export interface XacctCensus {
+    start(): void;
+    stop(): void;
+}
+/** Standing periodic audit. Unref'd interval so it never holds the process
+ *  open; each tick re-emits the census best-effort. */
+export declare function createXacctCensus(deps: XacctCensusDeps & {
+    intervalMs: number;
+}): XacctCensus;
+//# sourceMappingURL=cross-account-census.d.ts.map

package/payload/platform/services/claude-session-manager/dist/cross-account-census.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cross-account-census.d.ts","sourceRoot":"","sources":["../src/cross-account-census.ts"],"names":[],"mappings":"AA8BA;;2EAE2E;AAC3E,wBAAgB,iBAAiB,CAAC,KAAK,EAAE;IACvC,QAAQ,EAAE,MAAM,CAAA;IAChB,WAAW,EAAE,MAAM,CAAA;IACnB,UAAU,EAAE,MAAM,EAAE,CAAA;IACpB,cAAc,EAAE,MAAM,CAAA;IACtB,aAAa,EAAE,MAAM,CAAA;CACtB,GAAG,MAAM,CAGT;AAED,MAAM,WAAW,eAAe;IAC9B,+DAA+D;IAC/D,WAAW,EAAE,MAAM,CAAA;IACnB,yEAAyE;IACzE,YAAY,EAAE,MAAM,CAAA;IACpB,8DAA8D;IAC9D,OAAO,EAAE,MAAM,CAAA;IACf,MAAM,EAAE,MAAM,CAAA;IACd,MAAM,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAA;CAC/B;AAED;;gFAEgF;AAChF,wBAAgB,eAAe,CAAC,IAAI,EAAE,eAAe,GAAG,IAAI,CAoC3D;AAED,MAAM,WAAW,WAAW;IAC1B,KAAK,IAAI,IAAI,CAAA;IACb,IAAI,IAAI,IAAI,CAAA;CACb;AAED;uDACuD;AACvD,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,eAAe,GAAG;IAAE,UAAU,EAAE,MAAM,CAAA;CAAE,GAAG,WAAW,CAmB7F"}

package/payload/platform/services/claude-session-manager/dist/cross-account-census.js

@@ -0,0 +1,98 @@
+// Task 1440 — standing cross-account census. A role:"admin" session that carries
+// HOUSE_ADMIN_SCOPE but whose account is no longer role:"house" holds
+// cross-account authority it must not have (the escalation precursor). That
+// state emits no event and no error — the account role is runtime-mutable via
+// the lifecycle tools, so a session scoped when its account was house keeps its
+// env after the account is demoted. An independent periodic audit over the
+// on-disk sidecars is the only signal. Shape mirrors rootless-client-audit.ts: a
+// pure formatter (unit-tested) + an impure collector (best-effort, never throws)
+// + a start/stop factory whose setInterval is unref'd.
+//
+// Two coverage bounds are deferred to Task 1457 (census hardening):
+//   1. It scans one projects dir (the boot house account's). A runtime house
+//      handover WITHOUT a manager restart could land a new house-admin session
+//      under a different account's projects dir this tick never scans. The
+//      common case (single house, no live re-designation) is fully covered
+//      because every house-scoped session runs on the boot house account.
+//   2. It reads every non-archived sidecar, not only live PTYs. A house-admin
+//      session that exited without being archived is still counted; it only
+//      becomes a false *violation* after a subsequent house demotion. Counts
+//      (sessions/house-scoped) may over-report until such rows are archived.
+// Both bias toward over-reporting (fail-loud), never toward missing a live
+// escalation in the common single-house case.
+import { readdirSync } from 'node:fs';
+import { join, basename } from 'node:path';
+import { readSidecar } from './session-sidecar.js';
+import { resolveAccountDir } from './config.js';
+const TAG = '[xacct-census]';
+/** The census line. `violation-ids=-` (not empty) marks "no offenders" so the
+ *  field is always present and greppable. `plugins-adopted=n/target` reads the
+ *  ledger's adopted count; `n<target` is the coverage-regression alarm. */
+export function formatXacctCensus(input) {
+    const ids = input.violations.length ? input.violations.join(',') : '-';
+    return `${TAG} sessions=${input.sessions} house-scoped=${input.houseScoped} violations=${input.violations.length} violation-ids=${ids} plugins-adopted=${input.pluginsAdopted}/${input.pluginsTarget}`;
+}
+/** Read every live sidecar and assert `houseAdminScope != null ⟹ the account is
+ *  currently house`. Best-effort: an unreadable projects dir degrades to a zero
+ *  line rather than throwing (the manager may census before the dir exists). */
+export function emitXacctCensus(deps) {
+    let entries;
+    try {
+        entries = readdirSync(deps.projectsDir).filter((n) => n.endsWith('.meta.json'));
+    }
+    catch {
+        deps.logger(`${TAG} sessions=0 house-scoped=0 violations=0 violation-ids=- plugins-adopted=${deps.adopted}/${deps.target} reason=no-projects-dir`);
+        return;
+    }
+    // Resolve the current house account once per tick (the invariant is constant
+    // across the scan); null on genuine registry drift (zero/multiple houses),
+    // which makes every explicit-accountId house-scoped session read as a
+    // violation — the correct fail-loud response to a broken house registry.
+    const houseDir = resolveAccountDir(deps.platformRoot);
+    const houseId = houseDir ? basename(houseDir) : null;
+    let sessions = 0;
+    let houseScoped = 0;
+    const violations = [];
+    for (const name of entries) {
+        const { sidecar } = readSidecar(join(deps.projectsDir, name), () => { });
+        if (!sidecar)
+            continue;
+        sessions++;
+        if (!sidecar.houseAdminScope)
+            continue;
+        houseScoped++;
+        // A null accountId is the house-default sidecar: the session runs on the
+        // current house account by definition, so it can never drift out of house
+        // and is never a violation. Only an explicit accountId that is no longer the
+        // house account is the escalation precursor.
+        if (sidecar.accountId && sidecar.accountId !== houseId) {
+            violations.push(basename(name).replace(/\.meta\.json$/, '').slice(0, 8));
+        }
+    }
+    deps.logger(formatXacctCensus({ sessions, houseScoped, violations, pluginsAdopted: deps.adopted, pluginsTarget: deps.target }));
+}
+/** Standing periodic audit. Unref'd interval so it never holds the process
+ *  open; each tick re-emits the census best-effort. */
+export function createXacctCensus(deps) {
+    let timer = null;
+    return {
+        start() {
+            if (timer)
+                return;
+            // Emit once at boot (like the rootless audit) so the standing signal has a
+            // baseline immediately and an install that flaps inside the interval still
+            // produces at least one line.
+            emitXacctCensus(deps);
+            timer = setInterval(() => emitXacctCensus(deps), deps.intervalMs);
+            if (typeof timer.unref === 'function')
+                timer.unref();
+        },
+        stop() {
+            if (timer) {
+                clearInterval(timer);
+                timer = null;
+            }
+        },
+    };
+}
+//# sourceMappingURL=cross-account-census.js.map

package/payload/platform/services/claude-session-manager/dist/cross-account-census.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cross-account-census.js","sourceRoot":"","sources":["../src/cross-account-census.ts"],"names":[],"mappings":"AAAA,iFAAiF;AACjF,sEAAsE;AACtE,4EAA4E;AAC5E,8EAA8E;AAC9E,gFAAgF;AAChF,2EAA2E;AAC3E,iFAAiF;AACjF,iFAAiF;AACjF,uDAAuD;AACvD,EAAE;AACF,oEAAoE;AACpE,6EAA6E;AAC7E,+EAA+E;AAC/E,2EAA2E;AAC3E,2EAA2E;AAC3E,0EAA0E;AAC1E,8EAA8E;AAC9E,4EAA4E;AAC5E,6EAA6E;AAC7E,6EAA6E;AAC7E,2EAA2E;AAC3E,8CAA8C;AAE9C,OAAO,EAAE,WAAW,EAAE,MAAM,SAAS,CAAA;AACrC,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAA;AAC1C,OAAO,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAA;AAClD,OAAO,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAA;AAE/C,MAAM,GAAG,GAAG,gBAAgB,CAAA;AAE5B;;2EAE2E;AAC3E,MAAM,UAAU,iBAAiB,CAAC,KAMjC;IACC,MAAM,GAAG,GAAG,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAA;IACtE,OAAO,GAAG,GAAG,aAAa,KAAK,CAAC,QAAQ,iBAAiB,KAAK,CAAC,WAAW,eAAe,KAAK,CAAC,UAAU,CAAC,MAAM,kBAAkB,GAAG,oBAAoB,KAAK,CAAC,cAAc,IAAI,KAAK,CAAC,aAAa,EAAE,CAAA;AACxM,CAAC;AAaD;;gFAEgF;AAChF,MAAM,UAAU,eAAe,CAAC,IAAqB;IACnD,IAAI,OAAiB,CAAA;IACrB,IAAI,CAAC;QACH,OAAO,GAAG,WAAW,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC,CAAA;IACjF,CAAC;IAAC,MAAM,CAAC;QACP,IAAI,CAAC,MAAM,CACT,GAAG,GAAG,2EAA2E,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,MAAM,yBAAyB,CACtI,CAAA;QACD,OAAM;IACR,CAAC;IACD,6EAA6E;IAC7E,2EAA2E;IAC3E,sEAAsE;IACtE,yEAAyE;IACzE,MAAM,QAAQ,GAAG,iBAAiB,CAAC,IAAI,CAAC,YAAY,CAAC,CAAA;IACrD,MAAM,OAAO,GAAG,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;IACpD,IAAI,QAAQ,GAAG,CAAC,CAAA;IAChB,IAAI,WAAW,GAAG,CAAC,CAAA;IACnB,MAAM,UAAU,GAAa,EAAE,CAAA;IAC/B,KAAK,MAAM,IAAI,IAAI,OAAO,EAAE,CAAC;QAC3B,MAAM,EAAE,OAAO,EAAE,GAAG,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,EAAE,GAAG,EAAE,GAAE,CAAC,CAAC,CAAA;QACvE,IAAI,CAAC,OAAO;YAAE,SAAQ;QACtB,QAAQ,EAAE,CAAA;QACV,IAAI,CAAC,OAAO,CAAC,eAAe;YAAE,SAAQ;QACtC,WAAW,EAAE,CAAA;QACb,yEAAyE;QACzE,0EAA0E;QAC1E,6EAA6E;QAC7E,6CAA6C;QAC7C,IAAI,OAAO,CAAC,SAAS,IAAI,OAAO,CAAC,SAAS,KAAK,OAAO,EAAE,CAAC;YACvD,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,eAAe,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAA;QAC1E,CAAC;IACH,CAAC;IACD,IAAI,CAAC,MAAM,CACT,iBAAiB,CAAC,EAAE,QAAQ,EAAE,WAAW,EAAE,UAAU,EAAE,cAAc,EAAE,IAAI,CAAC,OAAO,EAAE,aAAa,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CACnH,CAAA;AACH,CAAC;AAOD;uDACuD;AACvD,MAAM,UAAU,iBAAiB,CAAC,IAA8C;IAC9E,IAAI,KAAK,GAA0B,IAAI,CAAA;IACvC,OAAO;QACL,KAAK;YACH,IAAI,KAAK;gBAAE,OAAM;YACjB,2EAA2E;YAC3E,2EAA2E;YAC3E,8BAA8B;YAC9B,eAAe,CAAC,IAAI,CAAC,CAAA;YACrB,KAAK,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC,eAAe,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,UAAU,CAAC,CAAA;YACjE,IAAI,OAAO,KAAK,CAAC,KAAK,KAAK,UAAU;gBAAE,KAAK,CAAC,KAAK,EAAE,CAAA;QACtD,CAAC;QACD,IAAI;YACF,IAAI,KAAK,EAAE,CAAC;gBACV,aAAa,CAAC,KAAK,CAAC,CAAA;gBACpB,KAAK,GAAG,IAAI,CAAA;YACd,CAAC;QACH,CAAC;KACF,CAAA;AACH,CAAC"}

package/payload/platform/services/claude-session-manager/dist/http-server.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"http-server.d.ts","sourceRoot":"","sources":["../src/http-server.ts"],"names":[],"mappings":"AAqBA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAA;AAe3B,OAAO,EAkBL,KAAK,SAAS,EAEf,MAAM,kBAAkB,CAAA;AA8BzB,OAAO,KAAK,EAAE,SAAS,EAAyB,MAAM,iBAAiB,CAAA;AAEvE,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAA;AAC1D,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAA;AAE3D,OAAO,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAA;AAC9D,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAA;AACtD,OAAO,EAAE,mBAAmB,EAAE,MAAM,4BAA4B,CAAA;AAChE,OAAO,EAAE,oBAAoB,EAAE,MAAM,6BAA6B,CAAA;AAyFlE,eAAO,MAAM,kBAAkB,QAA2B,CAAA;AAS1D,eAAO,MAAM,4BAA4B,QAAS,CAAA;AAIlD,MAAM,WAAW,QAAS,SAAQ,IAAI,CAAC,SAAS,EAAE,gBAAgB,GAAG,SAAS,CAAC;IAC7E;;qEAEiE;IACjE,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,OAAO,EAAE,SAAS,CAAA;IAClB,WAAW,EAAE,MAAM,CAAA;IACnB,iBAAiB,EAAE,MAAM,CAAA;IACzB,kBAAkB,EAAE,WAAW,CAAA;IAC/B,eAAe,EAAE,aAAa,CAAA;IAC9B;kFAC8E;IAC9E,WAAW,EAAE,kBAAkB,CAAA;IAC/B;;gFAE4E;IAC5E,cAAc,EAAE,cAAc,CAAA;IAC9B;;;6BAGyB;IACzB,mBAAmB,CAAC,EAAE,mBAAmB,CAAA;IACzC;;;sCAGkC;IAClC,oBAAoB,CAAC,EAAE,oBAAoB,CAAA;IAC3C;;gFAE4E;IAC5E,gBAAgB,CAAC,EAAE,MAAM,CAAA;CAC1B;AAsFD;;;;;;mEAMmE;AACnE,wBAAgB,kBAAkB,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,EAAE,CAiC9D;AAMD;;;;;;iBAMiB;AACjB,wBAAgB,yBAAyB,CAAC,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAmCvF;AAID;;;;;;yBAMyB;AACzB,wBAAgB,cAAc,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAiCzD;AAkCD,wBAAgB,eAAe,CAAC,aAAa,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,EAAE,CAEpG;AAgBD,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAE1D;AAUD,wBAAgB,2BAA2B,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,GAAG,MAAM,CAMvE;AAMD,wBAAgB,gBAAgB,CAC9B,SAAS,EAAE,MAAM,GAAG,IAAI,EACxB,OAAO,EAAE,MAAM,EACf,YAAY,EAAE,MAAM,EACpB,YAAY,EAAE,MAAM,EACpB,QAAQ,EAAE,MAAM,GAAG,IAAI,GACtB,MAAM,CAER;AAkCD,wBAAgB,0BAA0B,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE,SAAS,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAe5F;AAwJD;;;kEAGkE;AAClE,MAAM,MAAM,OAAO,GAAG,IAAI,GAAG;IAC3B,2BAA2B,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;IACpD;;;+CAG2C;IAC3C,sBAAsB,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;CAChD,CAAA;AA8CD,wBAAgB,YAAY,CAAC,IAAI,EAAE,QAAQ,GAAG,OAAO,CAoyFpD"}
+{"version":3,"file":"http-server.d.ts","sourceRoot":"","sources":["../src/http-server.ts"],"names":[],"mappings":"AAqBA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAA;AAe3B,OAAO,EAkBL,KAAK,SAAS,EAEf,MAAM,kBAAkB,CAAA;AA+BzB,OAAO,KAAK,EAAE,SAAS,EAAyB,MAAM,iBAAiB,CAAA;AAEvE,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAA;AAC1D,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAA;AAE3D,OAAO,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAA;AAC9D,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAA;AACtD,OAAO,EAAE,mBAAmB,EAAE,MAAM,4BAA4B,CAAA;AAChE,OAAO,EAAE,oBAAoB,EAAE,MAAM,6BAA6B,CAAA;AAyFlE,eAAO,MAAM,kBAAkB,QAA2B,CAAA;AAS1D,eAAO,MAAM,4BAA4B,QAAS,CAAA;AAIlD,MAAM,WAAW,QAAS,SAAQ,IAAI,CAAC,SAAS,EAAE,gBAAgB,GAAG,SAAS,CAAC;IAC7E;;qEAEiE;IACjE,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,OAAO,EAAE,SAAS,CAAA;IAClB,WAAW,EAAE,MAAM,CAAA;IACnB,iBAAiB,EAAE,MAAM,CAAA;IACzB,kBAAkB,EAAE,WAAW,CAAA;IAC/B,eAAe,EAAE,aAAa,CAAA;IAC9B;kFAC8E;IAC9E,WAAW,EAAE,kBAAkB,CAAA;IAC/B;;gFAE4E;IAC5E,cAAc,EAAE,cAAc,CAAA;IAC9B;;;6BAGyB;IACzB,mBAAmB,CAAC,EAAE,mBAAmB,CAAA;IACzC;;;sCAGkC;IAClC,oBAAoB,CAAC,EAAE,oBAAoB,CAAA;IAC3C;;gFAE4E;IAC5E,gBAAgB,CAAC,EAAE,MAAM,CAAA;CAC1B;AAsFD;;;;;;mEAMmE;AACnE,wBAAgB,kBAAkB,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,EAAE,CAiC9D;AAMD;;;;;;iBAMiB;AACjB,wBAAgB,yBAAyB,CAAC,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAmCvF;AAID;;;;;;yBAMyB;AACzB,wBAAgB,cAAc,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAiCzD;AAkCD,wBAAgB,eAAe,CAAC,aAAa,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,EAAE,CAEpG;AAgBD,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAE1D;AAUD,wBAAgB,2BAA2B,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,GAAG,MAAM,CAMvE;AAMD,wBAAgB,gBAAgB,CAC9B,SAAS,EAAE,MAAM,GAAG,IAAI,EACxB,OAAO,EAAE,MAAM,EACf,YAAY,EAAE,MAAM,EACpB,YAAY,EAAE,MAAM,EACpB,QAAQ,EAAE,MAAM,GAAG,IAAI,GACtB,MAAM,CAER;AAkCD,wBAAgB,0BAA0B,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE,SAAS,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAe5F;AAwJD;;;kEAGkE;AAClE,MAAM,MAAM,OAAO,GAAG,IAAI,GAAG;IAC3B,2BAA2B,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;IACpD;;;+CAG2C;IAC3C,sBAAsB,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;CAChD,CAAA;AA8CD,wBAAgB,YAAY,CAAC,IAAI,EAAE,QAAQ,GAAG,OAAO,CA6yFpD"}

package/payload/platform/services/claude-session-manager/dist/http-server.js

@@ -37,6 +37,7 @@ import { writeScopeRecord, removeScopeRecord, readAllScopeRecords } from './scop
 import { writeReseatMarker, resolveReseatChain, clearReseatMarker } from './reseat-ledger.js';
 import { getScopeMainPid, defaultProcessSignals, defaultSystemctlRunner } from './systemd-scope.js';
 import { readSidecar, updateSidecar, appendBridgeId, writeSidecar } from './session-sidecar.js';
+import { houseAdminScopeFor, isHouseAccount } from './config.js';
 import { resolveSettingsPermissionMode, resolveSettingsModel, resolveSettingsEffort } from './settings-permission-mode.js';
 import { emitRcLife } from './rc-life.js';
 import { createRcChildLog } from './rc-child-log.js';
@@ -2997,6 +2998,15 @@ export function buildHttpApp(deps) {
                         // Task 983 — scope this session to the resolved account so the
                         // admin shell's switcher can filter the session list by account.
                         accountId: effectiveAccountId,
+                        // Task 1440 — mirror the spawn-time house-scope decision (same
+                        // function the env injection uses) for the cross-account census.
+                        // rc-spawn sessions are never specialists.
+                        houseAdminScope: houseAdminScopeFor({
+                            role: rcRole,
+                            accountId: effectiveAccountId,
+                            isHouse: isHouseAccount(deps.platformRoot, effectiveAccountId),
+                            isSpecialist: false,
+                        }),
                     }, deps.logger);
                     deps.watcher.refreshSidecar?.(sessionId);
                 }