@rubytech/create-maxy-code 0.1.419 → 0.1.423

package/payload/platform/services/claude-session-manager/dist/http-server.js

@@ -1036,7 +1036,12 @@ export function buildHttpApp(deps) {
             timed(deps.logger, 'POST', '/public-spawn', 400, Date.now() - start);
             return c.json({ error: 'invalid-arguments', detail: { senderId: !!senderId, role, channel } }, 400);
         }
-        if (role === 'public') {
+        // Task 1489 — a passive intake spawn rides role:'public' on this path but is
+        // a trusted, sub-account-bound account manager, not an anonymous visitor. It
+        // is exempt from the anonymous-visitor limiter: `!passive` keeps a manager's
+        // requirement burst from being throttled, and keeps that burst from consuming
+        // (or being throttled by) the shared per-sender/global anonymous budget.
+        if (role === 'public' && !passive) {
             const decision = deps.publicSpawnLimiter.admit(senderId, channel);
             if (!decision.admitted) {
                 deps.logger(`spawn-rate-limited senderId=${senderId} channel=${channel} scope=${decision.scope} window=${decision.windowMs} cap=${decision.cap}`);
@@ -1065,8 +1070,33 @@ export function buildHttpApp(deps) {
             : body.tunnelUrl === null
                 ? null
                 : undefined;
+        // Task 1490 — scope a passive intake session's whole surface (JSONL
+        // transcript, sidecar, permission-mode log, PTY cwd) to the sub-account it
+        // manages, mirroring /rc-spawn's effectiveAccountDir. Without this only the
+        // work MCP env was sub-scoped (Task 1483); the session artifacts landed
+        // under the house, splitting intake activity from the :Task it produces.
+        // accountId/accountDir stay house: the passive identity is an
+        // account-agnostic template read from the house, and the graph is already
+        // sub-scoped via the work server's ACCOUNT_ID. A present-but-unregistered
+        // target is rejected (fail-closed, never silently house-scoped) — the same
+        // rule /rc-spawn enforces (Task 983). The gate matches pty-spawner's
+        // `isPassiveSpawn` invariant exactly (passive ALWAYS rides role:'public',
+        // never a specialist); a passive flag on any other role/specialist is
+        // ignored here too, so the transcript scope can never diverge from the
+        // work-MCP graph scope (which only sub-scopes under the same invariant).
+        let spawnCwd = deps.spawnCwd;
+        if (passive && role === 'public' && !specialist && targetAccountId) {
+            const accountsRoot = join(dirname(deps.platformRoot), 'data', 'accounts');
+            if (!existsSync(join(accountsRoot, targetAccountId, 'account.json'))) {
+                deps.logger(`[spawn] op=passive-account-reject target=${targetAccountId} reason=not-in-registry`);
+                timed(deps.logger, 'POST', '/public-spawn', 400, Date.now() - start);
+                return c.json({ error: 'targetAccountId not in this install registry' }, 400);
+            }
+            spawnCwd = join(accountsRoot, targetAccountId);
+        }
         const result = await spawnClaudeSession({
             ...deps,
+            spawnCwd,
             watcher: deps.watcher,
             onSessionReady: (tracker) => {
                 // Task 1483 — a passive intake rides role:'public' but is NOT a public
@@ -1140,7 +1170,11 @@ export function buildHttpApp(deps) {
         // field so a dropped name is visible without reproducing.
         if (role === 'public') {
             if (publicTitle) {
-                deps.titleStores.forSessionCwd(deps.spawnCwd).set(result.session.sessionId, publicTitle);
+                // Task 1490 — the title store is per-cwd; a passive session's cwd is the
+                // sub-account (spawnCwd override above), so persist under the same cwd
+                // the row is read from, not the house deps.spawnCwd. Identical to house
+                // for every non-passive public spawn.
+                deps.titleStores.forSessionCwd(spawnCwd).set(result.session.sessionId, publicTitle);
                 deps.logger(`[spawn] role=public senderId=${senderId} sessionId=${result.session.sessionId.slice(0, 8)} title="${publicTitle}"`);
             }
             else {