@rubytech/create-maxy-code 0.1.458 → 0.1.460

package/payload/platform/plugins/voice-mirror/mcp/dist/tools/voice-tag-content.js.map

@@ -1 +1 @@
-{"version":3,"file":"voice-tag-content.js","sourceRoot":"","sources":["../../src/tools/voice-tag-content.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AACH,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAC7C,OAAO,EACL,uBAAuB,EACvB,aAAa,GAEd,MAAM,wBAAwB,CAAC;AAShC,MAAM,CAAC,MAAM,gBAAgB,GAAgC,IAAI,GAAG,CAAC;IACnE,YAAY;IACZ,0BAA0B;IAC1B,0BAA0B;IAC1B,YAAY;IACZ,SAAS;CACV,CAAC,CAAC;AAEH;;;;;;;;;GASG;AACH,MAAM,UAAU,kBAAkB,CAChC,MAA0B,EAC1B,cAA6B;IAE7B,MAAM,QAAQ,GAAG,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IACvC,IAAI,QAAQ;QAAE,OAAO,QAAQ,CAAC;IAC9B,IAAI,cAAc;QAAE,OAAO,cAAc,CAAC;IAC1C,MAAM,IAAI,KAAK,CACb,yFAAyF,CAC1F,CAAC;AACJ,CAAC;AAuBD,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,MAA6B;IAE7B,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,WAAW,EAAE,GAAG,MAAM,CAAC;IAEjE,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;QAChC,MAAM,IAAI,KAAK,CACb,8CAA8C,IAAI,oBAAoB;YACpE,GAAG,gBAAgB;SACpB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CACf,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;IAC9D,CAAC;IACD,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;QAC5C,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;IAC3D,CAAC;IACD,IAAI,CAAE,aAAmC,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;QAC3D,MAAM,IAAI,KAAK,CACb,sCAAsC,MAAM,oBAAoB,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAC3F,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACpD,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,cAAc,EAAE,EAAE,EAAE,CAAC;IACxD,CAAC;IACD,+EAA+E;IAC/E,2EAA2E;IAC3E,yEAAyE;IACzE,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,MAAM,IAAI,KAAK,CACb,6FAA6F,CAC9F,CAAC;IACJ,CAAC;IAED,MAAM,OAAO,GAAG,UAAU,EAAE,CAAC;IAC7B,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACrC,MAAM,cAAc,GAA2B,EAAE,CAAC;IAClD,IAAI,OAAO,GAAG,CAAC,CAAC;IAEhB,IAAI,CAAC;QACH,oEAAoE;QACpE,MAAM,KAAK,GAAG,EAAE,CAAC;QACjB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,IAAI,KAAK,EAAE,CAAC;YAC/C,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,CAAC;YAC1C,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,GAAG;YAC9B,kEAAkE;YAClE,6DAA6D;YAC7D,iEAAiE;YACjE,8DAA8D;YAC9D,8DAA8D;YAC9D,yBAAyB;YACzB;;;;;;;;;;;;mCAY2B,EAC3B;gBACE,GAAG,EAAE,KAAK;gBACV,SAAS;gBACT,IAAI;gBACJ,GAAG;gBACH,MAAM;gBACN,WAAW;gBACX,aAAa,EAAE,CAAC,GAAG,uBAAuB,CAAC;aAC5C,CACF,CAAC;YACF,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAW,CAAC,CAAC,CAAC;YAC1E,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC;YACxB,KAAK,MAAM,EAAE,IAAI,KAAK,EAAE,CAAC;gBACvB,IAAI,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;oBAAE,SAAS;gBAC9B,MAAM,MAAM,GAAG,gCAAgC,CAAC;gBAChD,cAAc,CAAC,MAAM,CAAC,GAAG,CAAC,cAAc,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;YAC7D,CAAC;QACH,CAAC;IACH,CAAC;YAAS,CAAC;QACT,MAAM,OAAO,CAAC,KAAK,EAAE,CAAC;IACxB,CAAC;IAED,6EAA6E;IAC7E,6EAA6E;IAC7E,2EAA2E;IAC3E,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,oBAAoB,IAAI,WAAW,MAAM,0BAA0B,WAAW,cAAc,SAAS,YAAY,OAAO,YACtH,OAAO,CAAC,MAAM,GAAG,OACnB,IAAI,CACL,CAAC;IAEF,OAAO;QACL,OAAO;QACP,OAAO,EAAE,OAAO,CAAC,MAAM,GAAG,OAAO;QACjC,cAAc;KACf,CAAC;AACJ,CAAC"}
+{"version":3,"file":"voice-tag-content.js","sourceRoot":"","sources":["../../src/tools/voice-tag-content.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AACH,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAC7C,OAAO,EAAE,wBAAwB,EAAE,MAAM,sBAAsB,CAAC;AAChE,OAAO,EACL,uBAAuB,EACvB,aAAa,GAEd,MAAM,wBAAwB,CAAC;AAShC,MAAM,CAAC,MAAM,gBAAgB,GAAgC,IAAI,GAAG,CAAC;IACnE,YAAY;IACZ,0BAA0B;IAC1B,0BAA0B;IAC1B,YAAY;IACZ,SAAS;CACV,CAAC,CAAC;AAEH;;;;;;;;;GASG;AACH,MAAM,UAAU,kBAAkB,CAChC,MAA0B,EAC1B,cAA6B;IAE7B,MAAM,QAAQ,GAAG,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IACvC,IAAI,QAAQ;QAAE,OAAO,QAAQ,CAAC;IAC9B,IAAI,cAAc;QAAE,OAAO,cAAc,CAAC;IAC1C,MAAM,IAAI,KAAK,CACb,mFAAmF,CACpF,CAAC;AACJ,CAAC;AAuBD,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,MAA6B;IAE7B,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,WAAW,EAAE,GAAG,MAAM,CAAC;IAEjE,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;QAChC,MAAM,IAAI,KAAK,CACb,8CAA8C,IAAI,oBAAoB;YACpE,GAAG,gBAAgB;SACpB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CACf,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;IAC9D,CAAC;IACD,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;QAC5C,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;IAC3D,CAAC;IACD,IAAI,CAAE,aAAmC,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;QAC3D,MAAM,IAAI,KAAK,CACb,sCAAsC,MAAM,oBAAoB,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAC3F,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACpD,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,cAAc,EAAE,EAAE,EAAE,CAAC;IACxD,CAAC;IACD,+EAA+E;IAC/E,2EAA2E;IAC3E,yEAAyE;IACzE,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,MAAM,IAAI,KAAK,CACb,6FAA6F,CAC9F,CAAC;IACJ,CAAC;IACD,8EAA8E;IAC9E,8EAA8E;IAC9E,0EAA0E;IAC1E,8EAA8E;IAC9E,2EAA2E;IAC3E,0EAA0E;IAC1E,iEAAiE;IACjE,MAAM,wBAAwB,CAAC,mBAAmB,EAAE,WAAW,EAAE,SAAS,CAAC,CAAC;IAE5E,MAAM,OAAO,GAAG,UAAU,EAAE,CAAC;IAC7B,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACrC,MAAM,cAAc,GAA2B,EAAE,CAAC;IAClD,IAAI,OAAO,GAAG,CAAC,CAAC;IAEhB,IAAI,CAAC;QACH,oEAAoE;QACpE,MAAM,KAAK,GAAG,EAAE,CAAC;QACjB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,IAAI,KAAK,EAAE,CAAC;YAC/C,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,CAAC;YAC1C,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,GAAG;YAC9B,kEAAkE;YAClE,6DAA6D;YAC7D,iEAAiE;YACjE,8DAA8D;YAC9D,8DAA8D;YAC9D,yBAAyB;YACzB;;;;;;;;;;;;mCAY2B,EAC3B;gBACE,GAAG,EAAE,KAAK;gBACV,SAAS;gBACT,IAAI;gBACJ,GAAG;gBACH,MAAM;gBACN,WAAW;gBACX,aAAa,EAAE,CAAC,GAAG,uBAAuB,CAAC;aAC5C,CACF,CAAC;YACF,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAW,CAAC,CAAC,CAAC;YAC1E,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC;YACxB,KAAK,MAAM,EAAE,IAAI,KAAK,EAAE,CAAC;gBACvB,IAAI,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;oBAAE,SAAS;gBAC9B,MAAM,MAAM,GAAG,gCAAgC,CAAC;gBAChD,cAAc,CAAC,MAAM,CAAC,GAAG,CAAC,cAAc,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;YAC7D,CAAC;QACH,CAAC;IACH,CAAC;YAAS,CAAC;QACT,MAAM,OAAO,CAAC,KAAK,EAAE,CAAC;IACxB,CAAC;IAED,6EAA6E;IAC7E,6EAA6E;IAC7E,2EAA2E;IAC3E,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,oBAAoB,IAAI,WAAW,MAAM,0BAA0B,WAAW,cAAc,SAAS,YAAY,OAAO,YACtH,OAAO,CAAC,MAAM,GAAG,OACnB,IAAI,CACL,CAAC;IAEF,OAAO;QACL,OAAO;QACP,OAAO,EAAE,OAAO,CAAC,MAAM,GAAG,OAAO;QACjC,cAAc;KACf,CAAC;AACJ,CAAC"}

package/payload/platform/plugins/voice-mirror/mcp/scripts/smoke.mjs

@@ -33,6 +33,7 @@ import { readFileSync } from "node:fs";
 import { join, dirname } from "node:path";
 import { fileURLToPath } from "node:url";
 import { readdirSync } from "node:fs";
+import { spawn } from "node:child_process";
 
 const __dirname = dirname(fileURLToPath(import.meta.url));
 const TOOLS_SRC = join(__dirname, "../src/tools");
@@ -410,6 +411,339 @@ await check(
   },
 );
 
+// ---------------------------------------------------------------------------
+// 12. Boot identity resolution (Task 1699). The server resolves the operator
+//     from USER_ID — the variable the PTY spawn stamps and MCP children
+//     inherit. ADMIN_USER_ID was never emitted by the platform, so every boot
+//     logged userId=null and four of five tools refused.
+//
+//     Spawning the built server is the only faithful test: userId is read at
+//     module scope, and the boot line is the contract the operator diagnoses
+//     from. An empty USER_ID (silent-compaction / recorder / public spawns
+//     legitimately stamp empty) must resolve to null, not "" — an empty string
+//     is truthy enough to reach voiceRetrieveConditioning's `userId` and would
+//     become a profile key.
+// ---------------------------------------------------------------------------
+console.log("\n-- boot identity --");
+
+const DIST_ENTRY = join(__dirname, "../dist/index.js");
+
+function bootUserId(env) {
+  return new Promise((resolve, reject) => {
+    const child = spawn(process.execPath, [DIST_ENTRY], {
+      env: { PATH: process.env.PATH, ACCOUNT_ID: "acct-smoke", ...env },
+      stdio: ["pipe", "pipe", "pipe"],
+    });
+    let stderr = "";
+    const timer = setTimeout(() => {
+      child.kill("SIGKILL");
+      reject(new Error(`no boot line within 10s; stderr=${stderr.slice(0, 300)}`));
+    }, 10_000);
+    child.stderr.on("data", (chunk) => {
+      stderr += chunk.toString();
+      const m = stderr.match(/\[voice-mirror\] boot accountId=(\S+) userId=(\S+)/);
+      if (m) {
+        clearTimeout(timer);
+        child.kill("SIGKILL");
+        resolve({ accountId: m[1], userId: m[2] });
+      }
+    });
+    child.on("error", (err) => {
+      clearTimeout(timer);
+      reject(err);
+    });
+    // A child that dies before printing the boot line would otherwise sit here
+    // until the timeout and report "no boot line", hiding the real cause.
+    child.on("exit", (code, signal) => {
+      if (signal === "SIGKILL") return; // our own kill, after a successful match
+      clearTimeout(timer);
+      reject(new Error(`exited code=${code} before boot line; stderr=${stderr.slice(0, 300)}`));
+    });
+  });
+}
+
+await check("boot resolves userId from USER_ID (the var the platform emits)", async () => {
+  const { accountId, userId } = await bootUserId({ USER_ID: "436fdf2d-cfa7-4836-9ffa-77d91cef15f9" });
+  assert.equal(accountId, "acct-smoke");
+  assert.equal(userId, "436fdf2d-cfa7-4836-9ffa-77d91cef15f9");
+});
+
+await check("boot reports userId=null when USER_ID is absent", async () => {
+  const { userId } = await bootUserId({});
+  assert.equal(userId, "null");
+});
+
+await check("boot reports userId=null when USER_ID is empty (not \"\")", async () => {
+  const { userId } = await bootUserId({ USER_ID: "" });
+  assert.equal(userId, "null");
+});
+
+await check("ADMIN_USER_ID is inert — it is not an identity source", async () => {
+  const { userId } = await bootUserId({ ADMIN_USER_ID: "should-be-ignored" });
+  assert.equal(userId, "null");
+});
+
+// ---------------------------------------------------------------------------
+// 12. Identity gate (Task 1701).
+//     A userId / voiceAuthor that names no :AdminUser on the calling account
+//     must never become a profile key or an author stamp. The reserved org
+//     sentinel legitimately names no :AdminUser and must bypass (Tasks 676, 975).
+// ---------------------------------------------------------------------------
+console.log("\n-- identity gate --");
+
+const adminUserMod = await import("../dist/lib/admin-user.js");
+
+check("unknownAdminUserMessage names the tool, the rejected key and the account", () => {
+  const msg = adminUserMod.unknownAdminUserMessage(
+    "voice-tag-content",
+    "rob-mead",
+    "68b50910",
+  );
+  assert.ok(msg.includes("rob-mead"), `names the rejected key: ${msg}`);
+  assert.ok(msg.includes("68b50910"), `names the account: ${msg}`);
+  assert.ok(msg.includes("voice-tag-content"), `names the tool: ${msg}`);
+});
+
+check("refusal wording does not invite the caller to guess another userId", () => {
+  // The prior text told callers to supply userId explicitly. An agent with no
+  // way to learn a real id supplied a plausible-looking name instead, which is
+  // how `rob-mead` reached a live client account.
+  const msg = adminUserMod.unknownAdminUserMessage(
+    "voice-tag-content",
+    "rob-mead",
+    "68b50910",
+  );
+  assert.ok(
+    !/supply\s+\S*\s*userId|pass\s+\S*\s*userId\s+explicitly|provide\s+a\s+userId/i.test(
+      msg,
+    ),
+    `must not invite the caller to supply a userId: ${msg}`,
+  );
+});
+
+check("VoiceIdentityError carries the rejected key and account", () => {
+  const err = new adminUserMod.VoiceIdentityError(
+    "voice-tag-content",
+    "rob-mead",
+    "68b50910",
+  );
+  assert.ok(err instanceof Error);
+  assert.equal(err.name, "VoiceIdentityError");
+  assert.equal(err.userId, "rob-mead");
+  assert.equal(err.accountId, "68b50910");
+});
+
+await check("ORG_USER_ID bypasses the gate without opening a session", async () => {
+  // With NEO4J_URI unset, getDriver() throws. Returning normally proves the
+  // org sentinel short-circuits before any session is opened, so an org
+  // distil/retrieve still works on a spawn with no personal identity.
+  const saved = process.env.NEO4J_URI;
+  delete process.env.NEO4J_URI;
+  try {
+    await adminUserMod.assertAdminUserOnAccount(
+      "voice-distil-profile",
+      corpusMod.ORG_USER_ID,
+      "acct-1",
+    );
+  } finally {
+    if (saved !== undefined) process.env.NEO4J_URI = saved;
+  }
+});
+
+await check("a non-org key is looked up, never passed through (fail-closed)", async () => {
+  // The converse of the bypass: a real key must reach the lookup. With
+  // NEO4J_URI unset that surfaces as a driver throw. A gate that returned
+  // normally here would be failing open on every unverified key.
+  const saved = process.env.NEO4J_URI;
+  delete process.env.NEO4J_URI;
+  try {
+    await assert.rejects(
+      () =>
+        adminUserMod.assertAdminUserOnAccount(
+          "voice-tag-content",
+          "rob-mead",
+          "68b50910",
+        ),
+      /NEO4J_URI unset/,
+      "must attempt the lookup rather than silently accepting the key",
+    );
+  } finally {
+    if (saved !== undefined) process.env.NEO4J_URI = saved;
+  }
+});
+
+// ---------------------------------------------------------------------------
+// 13. Identity-gate wiring (Task 1701).
+//     The gate's own behaviour is covered above against the helper. These are
+//     structural invariants on the call sites: a live Neo4j is needed to tell
+//     "gate refused" from "write failed" at runtime (both surface as the same
+//     driver error), so ordering and presence are asserted on the source —
+//     the same idiom as the Cypher forbidden-pattern gate above.
+// ---------------------------------------------------------------------------
+console.log("\n-- identity-gate wiring --");
+
+const tagSrc = readFileSync(join(TOOLS_SRC, "voice-tag-content.ts"), "utf-8");
+
+check("voice-tag-content gates the resolved voiceAuthor", () => {
+  assert.ok(
+    /assertAdminUserOnAccount\(/.test(tagSrc),
+    "voice-tag-content must gate voiceAuthor via assertAdminUserOnAccount",
+  );
+});
+
+check("voice-tag-content gates before it stamps voiceAuthor", () => {
+  // The stamp is the write this task exists to stop. A gate ordered after it
+  // would refuse only once the dead data was already on the node.
+  const gateAt = tagSrc.indexOf("assertAdminUserOnAccount(");
+  const writeAt = tagSrc.indexOf("n.voiceAuthor = $voiceAuthor");
+  assert.ok(gateAt > -1, "gate present");
+  assert.ok(writeAt > -1, "voiceAuthor write present");
+  assert.ok(gateAt < writeAt, "identity gate must run before the voiceAuthor write");
+});
+
+await check("voice-tag-content: empty nodeIds stays a no-op (no identity lookup)", async () => {
+  // An empty tag has nothing to attribute, so it must not reach the driver.
+  // Guards the ordering of the early return against the new gate.
+  const saved = process.env.NEO4J_URI;
+  delete process.env.NEO4J_URI;
+  try {
+    const result = await tagMod.voiceTagContent({
+      nodeIds: [],
+      mode: "human-only",
+      accountId: "acct-1",
+      format: "text",
+      voiceAuthor: "rob-mead",
+    });
+    assert.equal(result.updated, 0);
+    assert.equal(result.skipped, 0);
+  } finally {
+    if (saved !== undefined) process.env.NEO4J_URI = saved;
+  }
+});
+
+const distilSrc = readFileSync(join(TOOLS_SRC, "voice-distil-profile.ts"), "utf-8");
+
+check("voice-distil-profile gates the profile key at its single entry point", () => {
+  // Gating the exported entry rather than distilForFormat covers sample, amend,
+  // amend-write and multi-format enumeration with one lookup, instead of one
+  // per format.
+  const entryAt = distilSrc.indexOf("export async function voiceDistilProfile");
+  assert.ok(entryAt > -1, "exported entry present");
+  assert.ok(
+    /assertAdminUserOnAccount\(/.test(distilSrc.slice(entryAt)),
+    "the exported entry must gate the profile key",
+  );
+});
+
+check("voice-distil-profile keeps both structural write anchors", () => {
+  // The anchor MATCH binds `anchor` for MERGE (anchor)-[:HAS_VOICE_PROFILE]->(p).
+  // The entry gate is additive; removing these would drop the edge.
+  const anchors = distilSrc.match(
+    /MATCH \(anchor:AdminUser \{accountId: \$accountId, userId: \$profileUserId\}\)/g,
+  );
+  assert.equal(anchors?.length, 2, "both write-path anchors retained");
+});
+
+const retrieveSrc = readFileSync(
+  join(TOOLS_SRC, "voice-retrieve-conditioning.ts"),
+  "utf-8",
+);
+
+check("voice-retrieve-conditioning does NOT gate identity (it writes nothing)", () => {
+  // Deliberately ungated. Retrieve mutates nothing, so it sits outside the
+  // "validate before any write keyed on it" rule, and gating it broke the
+  // personal->org fallback below. Invented keys are stopped at
+  // voice-tag-content, which is the only path that puts one in the graph.
+  assert.ok(
+    !/assertAdminUserOnAccount\(/.test(retrieveSrc),
+    "retrieve must not gate identity: it regresses the personal->org fallback",
+  );
+});
+
+check("voice-retrieve-conditioning keeps the personal->org fallback", () => {
+  // The regression guard. A personal lookup with no data must borrow the org
+  // (house) voice, not degrade to the default register. A house operator
+  // scoped into a client sub-account has no :AdminUser on that account, so
+  // this fallback is the only thing that puts the client's house card into
+  // their drafts.
+  assert.ok(
+    /const org = await orgLookup\(\);/.test(retrieveSrc),
+    "personal miss must fall back to orgLookup()",
+  );
+  assert.ok(
+    /status = hasData\(org\) \? "fallback-org" : "no-data";/.test(retrieveSrc),
+    "personal miss must report fallback-org when the org voice resolves",
+  );
+});
+
+check("voice-retrieve-conditioning never sets isError", () => {
+  // Match the property assignment, not the word: prose about isError is fine,
+  // setting it is not.
+  assert.ok(
+    !/isError\s*[:=]/.test(retrieveSrc),
+    "retrieve degrades via status, never isError",
+  );
+});
+
+// ---------------------------------------------------------------------------
+// 14. One refusal wording across every gate (Task 1701).
+//     record-feedback and ingest already enforced the rule via an inline
+//     MATCH (a:AdminUser {accountId, userId}). That match is structural — it
+//     binds `a` for the AUTHORED edge — so it stays exactly where it is and
+//     only the wording is shared.
+// ---------------------------------------------------------------------------
+console.log("\n-- shared refusal wording --");
+
+for (const file of [
+  "voice-record-feedback.ts",
+  "voice-ingest-session-text.ts",
+  "voice-distil-profile.ts",
+]) {
+  const src = readFileSync(join(TOOLS_SRC, file), "utf-8");
+  check(`${file} refuses with the shared wording`, () => {
+    assert.ok(
+      /unknownAdminUserMessage\(/.test(src),
+      `${file} must use the shared refusal wording`,
+    );
+  });
+  check(`${file} drops the un-actionable onboarding wording`, () => {
+    // "Onboarding must promote the operator to :AdminUser" names a remedy the
+    // caller cannot perform and never names the account.
+    assert.ok(
+      !/Onboarding must promote the operator/.test(src),
+      `${file} still carries the old onboarding wording`,
+    );
+  });
+}
+
+check("record-feedback keeps its structural AdminUser match (binds the AUTHORED edge)", () => {
+  const fb = readFileSync(join(TOOLS_SRC, "voice-record-feedback.ts"), "utf-8");
+  assert.ok(
+    /MATCH \(a:AdminUser \{accountId: \$accountId, userId: \$userId\}\)/.test(fb),
+    "structural match removed — the AUTHORED edge would be dropped",
+  );
+  assert.ok(/CREATE \(a\)-\[:AUTHORED\]->\(e\)/.test(fb), "AUTHORED edge retained");
+});
+
+check("ingest keeps its structural AdminUser match (binds the AUTHORED edge)", () => {
+  const ing = readFileSync(join(TOOLS_SRC, "voice-ingest-session-text.ts"), "utf-8");
+  assert.ok(
+    /MATCH \(a:AdminUser \{accountId: \$accountId, userId: \$userId\}\)/.test(ing),
+    "structural match removed — the AUTHORED edge would be dropped",
+  );
+  assert.ok(/MERGE \(a\)-\[:AUTHORED\]->\(n\)/.test(ing), "AUTHORED edge retained");
+});
+
+check("distil keeps the :LocalBusiness wording for the org branch", () => {
+  // An org distil failing on a missing business node is a different failure
+  // from an unknown personal key; it must not collapse into the shared wording.
+  const src = readFileSync(join(TOOLS_SRC, "voice-distil-profile.ts"), "utf-8");
+  assert.ok(
+    /:LocalBusiness \{accountId='\$\{accountId\}'\} not found/.test(src),
+    "org branch must keep its own :LocalBusiness message",
+  );
+});
+
 // ---------------------------------------------------------------------------
 // Final summary.
 // ---------------------------------------------------------------------------

package/payload/platform/plugins/voice-mirror/skills/voice-mirror/SKILL.md

@@ -201,6 +201,18 @@ Which voice a draft uses is the `scope` on the retrieval brief: `"my voice"` →
 
 **Single-operator accounts are unchanged.** With author omitted at tag time, the sole operator is the implicit author, so their personal corpus equals the account-wide corpus and personal distillation reproduces the prior single profile. Legacy content carries no `voiceAuthor`; it appears only in the account-wide org walk until re-tagged, and personal drafts fall back to the org voice in the meantime.
 
+## Identity is never guessed
+
+Every `userId` and every `author` is an `:AdminUser` id that already exists on the account being operated. It is never a person's name, and never a slug built from one. `rob-mead` is not an identity.
+
+A value naming no `:AdminUser` on the account is refused, and nothing is written. This is not a formality. A profile keyed on an admin who does not exist cannot be read back by any seat that resolves identity properly, so it becomes dead data that looks like a real operator profile. A `voiceAuthor` stamped the same way attributes writing to somebody who does not exist.
+
+The tools resolve identity from the spawn environment on their own. Pass `author:` only to attribute content to a different operator on a multi-operator account, and only with that operator's real `:AdminUser` id.
+
+If a tool refuses, the id is wrong. Do not retry with a different guess. The account's real admin identity is the operator's to supply.
+
+`__org__` is exempt, because the house voice anchors on the business rather than on a person.
+
 ## Observability
 
 | Tag | When |
@@ -213,6 +225,7 @@ Which voice a draft uses is the `scope` on the retrieval brief: `"my voice"` →
 | `[voice-retrieve] scope=<scope> format=<format> status=<ok\|fallback-org\|no-data\|error> styleCardBytes=<n> exemplarCount=<k> tokenBudget=<n>` | Each retrieval. `status=fallback-org` proves the personal→org fallback fired. |
 | `[voice-record-feedback] scope=<scope> userId=<id\|__org__> format=<format> intent="<haiku-summary>" diffBytes=<n>` | Each feedback write. |
 | `[voice-ingest-session-text] sessionId=<id> adminUser=<id> turns=<n> bytes=<n> skipped=<m>` | On-demand session-text capture. |
+| `[voice-identity] refuse tool=<tool> reason=unknown-admin-user userId=<key> accountId=<account>` | A key naming no `:AdminUser` on the account was refused. Names the rejected key and the account, so an invented key is visible in the logs instead of only in the graph. |
 
 **Confirms working:** `[voice-retrieve] exemplarCount≥1` precedes every drafting-skill prompt assembly when the calling skill has not opted out. `[voice-distil]` appears at least once per 30-day window per active format per operator. `[voice-ingest-session-text] turns≥1` appears when the operator asks to capture a session's voice.
 

package/payload/platform/scripts/logs-read-jsonl.test.sh

@@ -87,6 +87,52 @@ write_parent_with_error() {
   } > "$f"
 }
 
+# Write a parent JSONL carrying BOTH harness rejections and the classes that
+# must NOT be treated as rejections. A rejection is a call the CLI refused to
+# dispatch, so the tool never ran; everything else here either ran and failed or
+# is a different fault. Both InputValidationError sub-classes are covered:
+# unparseable JSON (carries __unparsedToolInput) and schema-valid JSON that
+# failed validation (no such marker, and the majority class in practice).
+write_parent_with_rejections() {
+  local cfg="$1" uuid="$2"
+  local f="$cfg/projects/-fake-cwd/${uuid}.jsonl"
+  {
+    printf '%s\n' '{"type":"user","timestamp":"2026-07-16T15:59:00.000Z","uuid":"r0","message":{"role":"user","content":"send it"}}'
+    # 2 x rejection sub-class A (unparseable JSON) on ONE tool -> census x2
+    printf '%s\n' '{"type":"assistant","timestamp":"2026-07-16T15:59:01.000Z","uuid":"r1","message":{"role":"assistant","content":[{"type":"tool_use","id":"toolu_R1","name":"outlook-mail-send","input":{"__unparsedToolInput":"{\"to\": bare@x.co}"}}]}}'
+    printf '%s\n' '{"type":"user","timestamp":"2026-07-16T15:59:02.000Z","uuid":"r2","message":{"role":"user","content":[{"type":"tool_result","tool_use_id":"toolu_R1","is_error":true,"content":"<tool_use_error>InputValidationError: outlook-mail-send was called with input that could not be parsed as JSON.\nYou sent (first 200 of 670 bytes): {\"to\": bare@x.co} REJECT_A_ONE</tool_use_error>"}]}}'
+    printf '%s\n' '{"type":"assistant","timestamp":"2026-07-16T15:59:03.000Z","uuid":"r3","message":{"role":"assistant","content":[{"type":"tool_use","id":"toolu_R2","name":"outlook-mail-send","input":{"__unparsedToolInput":"{\"to\": bare@x.co}"}}]}}'
+    printf '%s\n' '{"type":"user","timestamp":"2026-07-16T15:59:04.000Z","uuid":"r4","message":{"role":"user","content":[{"type":"tool_result","tool_use_id":"toolu_R2","is_error":true,"content":"<tool_use_error>InputValidationError: outlook-mail-send was called with input that could not be parsed as JSON.\nYou sent (first 200 of 670 bytes): {\"to\": bare@x.co} REJECT_A_TWO</tool_use_error>"}]}}'
+    # rejection sub-class B: JSON parsed fine, schema validation failed
+    printf '%s\n' '{"type":"assistant","timestamp":"2026-07-16T15:59:05.000Z","uuid":"r5","message":{"role":"assistant","content":[{"type":"tool_use","id":"toolu_R3","name":"Read","input":{"offset":"x"}}]}}'
+    printf '%s\n' '{"type":"user","timestamp":"2026-07-16T15:59:06.000Z","uuid":"r6","message":{"role":"user","content":[{"type":"tool_result","tool_use_id":"toolu_R3","is_error":true,"content":"<tool_use_error>InputValidationError: Read failed due to the following issue: The parameter `offset` type is expected as `number` REJECT_B_ONE</tool_use_error>"}]}}'
+    # NOT a rejection: unknown tool (different fault, has its own PostToolUse hook)
+    printf '%s\n' '{"type":"assistant","timestamp":"2026-07-16T15:59:07.000Z","uuid":"r7","message":{"role":"assistant","content":[{"type":"tool_use","id":"toolu_N1","name":"work-create","input":{}}]}}'
+    printf '%s\n' '{"type":"user","timestamp":"2026-07-16T15:59:08.000Z","uuid":"r8","message":{"role":"user","content":[{"type":"tool_result","tool_use_id":"toolu_N1","is_error":true,"content":"<tool_use_error>Error: No such tool available: work-create NOTREJ_NOTOOL</tool_use_error>"}]}}'
+    # NOT a rejection: MCP server-side validation (the call DID reach the server)
+    printf '%s\n' '{"type":"assistant","timestamp":"2026-07-16T15:59:09.000Z","uuid":"r9","message":{"role":"assistant","content":[{"type":"tool_use","id":"toolu_N2","name":"outlook-mail-fetch-body","input":{}}]}}'
+    printf '%s\n' '{"type":"user","timestamp":"2026-07-16T15:59:10.000Z","uuid":"rA","message":{"role":"user","content":[{"type":"tool_result","tool_use_id":"toolu_N2","is_error":true,"content":"MCP error -32602: Input validation error: id: Required NOTREJ_32602"}]}}'
+    # NOT a rejection: built-in tool that RAN and failed its precondition
+    printf '%s\n' '{"type":"assistant","timestamp":"2026-07-16T15:59:11.000Z","uuid":"rB","message":{"role":"assistant","content":[{"type":"tool_use","id":"toolu_N3","name":"Edit","input":{}}]}}'
+    printf '%s\n' '{"type":"user","timestamp":"2026-07-16T15:59:12.000Z","uuid":"rC","message":{"role":"user","content":[{"type":"tool_result","tool_use_id":"toolu_N3","is_error":true,"content":"<tool_use_error>File has not been read yet. Read it first before writing to it. NOTREJ_UNREAD</tool_use_error>"}]}}'
+  } > "$f"
+}
+
+# Write a subagent transcript whose ONLY error is a harness rejection. Used to
+# prove --scan-subagent-errors does not report a rejection-only subagent as an
+# error-carrying one: the subagent did not fail, a call was never dispatched.
+write_subagent_rejection_only() {
+  local cfg="$1" parent_uuid="$2" agent="$3" atype="$4"
+  local d="$cfg/projects/-fake-cwd/${parent_uuid}/subagents"
+  mkdir -p "$d"
+  {
+    printf '%s\n' '{"type":"user","timestamp":"2026-07-16T16:00:00.000Z","uuid":"j1","message":{"role":"user","content":"read it"}}'
+    printf '%s\n' '{"type":"assistant","timestamp":"2026-07-16T16:00:01.000Z","uuid":"j2","message":{"role":"assistant","content":[{"type":"tool_use","id":"toolu_SR","name":"Read","input":{"__unparsedToolInput":"{\"file_path\": /x}"}}]}}'
+    printf '%s\n' '{"type":"user","timestamp":"2026-07-16T16:00:02.000Z","uuid":"j3","message":{"role":"user","content":[{"type":"tool_result","tool_use_id":"toolu_SR","is_error":true,"content":"<tool_use_error>InputValidationError: Read was called with input that could not be parsed as JSON.\nYou sent (first 200 of 30 bytes): {\"file_path\": /x} SUBREJ_ONLY</tool_use_error>"}]}}'
+  } > "$d/${agent}.jsonl"
+  printf '{"agentType":"%s","description":"read a file"}\n' "$atype" > "$d/${agent}.meta.json"
+}
+
 # Write a CLEAN subagent transcript (no errors) + its meta.
 write_subagent_clean() {
   local cfg="$1" parent_uuid="$2" agent="$3" atype="$4"
@@ -248,6 +294,75 @@ case_parent_error_not_subagent() {
   return 0
 }
 
+# --- Case J: harness rejection is distinguished from a tool that RAN and failed ---
+# The 1692 defect: a call the CLI refused to dispatch rendered identically to a
+# tool that ran and returned a failure, so a rejection loop read as "the tool is
+# broken" while the tool was healthy. Only InputValidationError may be relabelled.
+case_rejection_classified_and_counted() {
+  local root="/tmp/maxy-1692-J-$$"; local out
+  out=$(setup_tree "$root"); local script="${out% *}"; local cfg="${out#* }"
+  write_parent_with_rejections "$cfg" "$UUID_A"
+  write_pidfile "$cfg" 4255 "$UUID_A" "$BRIDGE"
+
+  invoke "$script" "$cfg" "session_${BRIDGE}"
+  cleanup_tree "$root"
+
+  [[ $RC -eq 0 ]] || { echo "  expected exit 0, got $RC; err=$ERR"; return 1; }
+
+  # Both InputValidationError sub-classes are rejections (neither dispatched).
+  [[ "$OUT" == *"REJECTED"*"REJECT_A_ONE"* ]] || { echo "  sub-class A (unparseable) not flagged REJECTED"; return 1; }
+  [[ "$OUT" == *"REJECTED"*"REJECT_B_ONE"* ]] || { echo "  sub-class B (schema-invalid) not flagged REJECTED"; return 1; }
+
+  # The exclusions MUST keep the plain tool-error rendering. Widening the
+  # predicate to the bare <tool_use_error> wrapper is the regression this pins.
+  local l
+  for l in NOTREJ_NOTOOL NOTREJ_32602 NOTREJ_UNREAD; do
+    grep -q "tool error.*$l" <<<"$OUT" || { echo "  $l lost its '‼ tool error' rendering"; return 1; }
+    grep -q "REJECTED.*$l"   <<<"$OUT" && { echo "  $l wrongly flagged REJECTED"; return 1; }
+  done
+
+  # Repetition is the diagnostic fact: 2 identical calls on one tool, counted.
+  [[ "$OUT" == *"rejections: 3"* ]]            || { echo "  census missing or miscounted (want 3)"; return 1; }
+  [[ "$OUT" == *"outlook-mail-send x2"* ]]     || { echo "  census does not count the repeat per tool"; return 1; }
+  return 0
+}
+
+# --- Case K: a clean session emits NO census line (non-regression) ---
+case_no_rejections_no_census() {
+  local root="/tmp/maxy-1692-K-$$"; local out
+  out=$(setup_tree "$root"); local script="${out% *}"; local cfg="${out#* }"
+  write_parent_with_error "$cfg" "$UUID_A"
+  write_pidfile "$cfg" 4256 "$UUID_A" "$BRIDGE"
+
+  invoke "$script" "$cfg" "session_${BRIDGE}"
+  cleanup_tree "$root"
+
+  [[ $RC -eq 0 ]]                    || { echo "  expected exit 0, got $RC"; return 1; }
+  [[ "$OUT" != *"rejections:"* ]]    || { echo "  census line emitted for a session with no rejections"; return 1; }
+  [[ "$OUT" != *"REJECTED"* ]]       || { echo "  genuine tool error wrongly flagged REJECTED"; return 1; }
+  return 0
+}
+
+# --- Case L: --scan-subagent-errors does not report a rejection-only subagent ---
+# A rejection is not a subagent failure: the subagent did not fail, a call was
+# never dispatched. Counting it re-creates the 1692 conflation one mode over.
+case_scan_ignores_rejection_only_subagent() {
+  local root="/tmp/maxy-1692-L-$$"; local out
+  out=$(setup_tree "$root"); local script="${out% *}"; local cfg="${out#* }"
+  write_parent "$cfg" "$UUID_A"
+  write_subagent_rejection_only "$cfg" "$UUID_A" "agent-aREJ00001" "content-producer"
+  write_subagent_failed "$cfg" "$UUID_A" "agent-aFAIL0001" "pdf-renderer"
+
+  invoke "$script" "$cfg" --scan-subagent-errors
+  cleanup_tree "$root"
+
+  [[ $RC -eq 0 ]]                    || { echo "  expected exit 0, got $RC; err=$ERR"; return 1; }
+  [[ "$OUT" == *"aFAIL0001"* ]]      || { echo "  genuinely failed subagent missing from scan"; return 1; }
+  [[ "$OUT" != *"SUBREJ_ONLY"* ]]    || { echo "  rejection-only subagent reported as error-carrying"; return 1; }
+  [[ "$OUT" != *"aREJ00001"* ]]      || { echo "  rejection-only subagent listed by scan"; return 1; }
+  return 0
+}
+
 # --- Case I: content-grep resolves a unique body match (last-resort tier) ---
 case_content_grep_single() {
   local root="/tmp/maxy-585-I-$$"; local out
@@ -299,6 +414,9 @@ run_case "parent's own tool error not mislabelled SUBAGENT ERROR"      case_pare
 run_case "content-grep resolves a unique body match"                   case_content_grep_single
 run_case "content-grep refuses an ambiguous (multi) body match"        case_content_grep_ambiguous_refuses
 run_case "unresolvable key → exit 1"                                   case_unresolvable_miss
+run_case "harness rejection classified + counted, exclusions intact"   case_rejection_classified_and_counted
+run_case "no rejections → no census line"                              case_no_rejections_no_census
+run_case "scan ignores a rejection-only subagent"                      case_scan_ignores_rejection_only_subagent
 
 echo ""
 echo "================================================"

package/payload/platform/scripts/logs-read.sh

@@ -627,7 +627,7 @@ tail_mode() {
 # non-interactive SSH PATH. argv[1] selects the mode (timeline|scan); the
 # program is fed via -c so logs-read.sh stays a single self-contained file.
 JSONL_PY=$(cat <<'PY'
-import sys, os, re, json, glob
+import sys, os, re, json, glob, collections
 
 MODE = sys.argv[1] if len(sys.argv) > 1 else ''
 
@@ -776,7 +776,40 @@ def subagent_dir(projects_root, uuid):
 # failure (the task's target, flagged 'SUBAGENT ERROR' and counted) from the
 # parent session's own tool error (shown plainly, never counted as a subagent
 # error). Returns the count of SUBAGENT errors found (0 for the parent).
-def collect_events(path, source, events, is_sub):
+# A harness rejection is a call that NEVER REACHED its tool: the CLI refused the
+# model's arguments, so no MCP dispatch happened and no plugin line exists
+# anywhere (not in server.log, not in mcp-<server>-<sessionId>.log, not in
+# mcp-lifeline). Rendering it as a plain tool error reads as "the tool is broken"
+# when the tool was never called -- the confusion that produced a false
+# customer-facing fault report (task 1692).
+#
+# InputValidationError has two sub-classes and BOTH are rejections, because
+# neither dispatches. The label says 'never dispatched', not 'malformed', because
+# only the first is malformed:
+#   A. "...could not be parsed as JSON" -- args unparseable; the tool_use block
+#      carries __unparsedToolInput. 52 of 170 measured 2026-07-16.
+#   B. "...failed due to the following issue(s)" -- the JSON parsed fine and
+#      violated the schema (wrong type, missing required). No __unparsedToolInput.
+#      118 of 170, so the majority; calling it 'malformed' would be wrong.
+#
+# This is the ONLY class relabelled. Deliberately NOT covered, all of which keep
+# rendering as '‼ tool error':
+#   'Error: No such tool available:' / 'Unknown skill:' -- different fault, and
+#      the missing-tool case already has a PostToolUse hook (mcp-tool-missing.sh)
+#   'MCP error -32602'                -- reached the server; its SDK rejected it
+#   every unwrapped is_error payload  -- the tool ran and returned a failure
+#
+# The <tool_use_error> wrapper alone is NOT a rejection discriminator: measured
+# 2026-07-16 across 733 SiteDesk transcripts it wraps mostly built-in tools that
+# RAN and failed ('File has not been read yet' x60, 'File has been modified
+# since read' x16). Match the error class, not the wrapper.
+def is_rejection(text):
+    if not isinstance(text, str):
+        return False
+    return text.lstrip().startswith('<tool_use_error>InputValidationError:')
+
+
+def collect_events(path, source, events, is_sub, rejects=None):
     rows = load_jsonl(path)
     id2tool = {}
     for r in rows:
@@ -812,10 +845,18 @@ def collect_events(path, source, events, is_sub):
                 for b in content:
                     if isinstance(b, dict) and b.get('type') == 'tool_result' and b.get('is_error'):
                         tool = id2tool.get(b.get('tool_use_id'))
-                        flag = '‼ SUBAGENT ERROR' if is_sub else '‼ tool error'
-                        events.append((ts, source, 'error', '%s  tool=%s  error="%s"' % (flag, tool or '?', clip(result_text(b, r), 200))))
-                        if is_sub:
-                            n_err += 1
+                        body = result_text(b, r)
+                        if is_rejection(body):
+                            # Not a tool failure: the call never ran. Never
+                            # counted as a subagent error for the same reason.
+                            flag = '‼ REJECTED (never dispatched)'
+                            if rejects is not None:
+                                rejects[tool or '?'] += 1
+                        else:
+                            flag = '‼ SUBAGENT ERROR' if is_sub else '‼ tool error'
+                            if is_sub:
+                                n_err += 1
+                        events.append((ts, source, 'error', '%s  tool=%s  error="%s"' % (flag, tool or '?', clip(body, 200))))
             elif isinstance(content, str) and content.strip():
                 events.append((ts, source, 'text', 'user: ' + clip(content, 160)))
     return n_err
@@ -826,18 +867,25 @@ def timeline(projects_root, sessions_dir, key):
         sys.stderr.write('-- trailer: key=%s resolved=no reason=%s\n' % (key, via))
         return 1
     events = []
+    rejects = collections.Counter()
     if parent_path and os.path.exists(parent_path):
-        collect_events(parent_path, 'parent', events, False)
+        collect_events(parent_path, 'parent', events, False, rejects)
     sdir = subagent_dir(projects_root, uuid)
     sub_count = err_count = 0
     if sdir:
         for af in sorted(glob.glob(os.path.join(sdir, 'agent-*.jsonl'))):
             sub_count += 1
-            err_count += collect_events(af, agent_type(af) or os.path.basename(af)[:-6], events, True)
+            err_count += collect_events(af, agent_type(af) or os.path.basename(af)[:-6], events, True, rejects)
     events.sort(key=lambda e: e[0])
     print('# session %s  (resolved via %s)' % (uuid, via))
     print('#   parent:    %s' % (parent_path or '(no parent transcript on disk)'))
     print('#   subagents: %d   subagent-errors: %d' % (sub_count, err_count))
+    # Repetition is the diagnostic fact: one fat-fingered call is a typo, N
+    # identical ones against a single tool is a wedged loop. Counting it here
+    # makes that one greppable line instead of N unrelated ones.
+    if rejects:
+        top = '  '.join('%s x%d' % (t, n) for t, n in rejects.most_common())
+        print('#   rejections: %d  (%s)' % (sum(rejects.values()), top))
     print('')
     for ts, source, _kind, text in events:
         print('%s  [%s] %s' % (ts or ('-' * 24), source, text))
@@ -871,7 +919,13 @@ def scan(projects_root, limit):
             if isinstance(content, list):
                 for b in content:
                     if isinstance(b, dict) and b.get('type') == 'tool_result' and b.get('is_error'):
-                        errs.append((id2tool.get(b.get('tool_use_id')), result_text(b, r)))
+                        body = result_text(b, r)
+                        # A rejection is not a subagent failure: the subagent did
+                        # not fail, a call was never dispatched. Counting it here
+                        # would re-create the conflation the timeline just fixed.
+                        if is_rejection(body):
+                            continue
+                        errs.append((id2tool.get(b.get('tool_use_id')), body))
         if errs:
             parent_uuid = os.path.basename(os.path.dirname(os.path.dirname(af)))
             findings.append((af, agent_type(af), parent_uuid, errs))