@rubytech/create-maxy-code 0.1.543 → 0.1.544

package/dist/__tests__/public-instruction-seed.test.js

@@ -0,0 +1,102 @@
+// Task 2342 — a public agent owns the `## Instruction` block of the turns it
+// answers. install-defaults runs on upgrade, so this pass is what gives every
+// agent created before the file existed a file of its own. Filesystem fixtures
+// under a tmp dir; no installer side effects. Runs under `node --test dist/__tests__/*`.
+import test from "node:test";
+import assert from "node:assert/strict";
+import { mkdtempSync, mkdirSync, writeFileSync, readFileSync, existsSync, rmSync, statSync, chmodSync } from "node:fs";
+import { tmpdir } from "node:os";
+import { join } from "node:path";
+import { seedPublicInstructionFiles } from "../public-instruction-seed.js";
+function makeAccount() {
+    const dir = mkdtempSync(join(tmpdir(), "pub-instr-2342-"));
+    mkdirSync(join(dir, "agents"), { recursive: true });
+    return dir;
+}
+function agent(accountDir, slug, files) {
+    const d = join(accountDir, "agents", slug);
+    mkdirSync(d, { recursive: true });
+    for (const [name, body] of Object.entries(files))
+        writeFileSync(join(d, name), body);
+}
+test("creates a zero-byte INSTRUCTION.md for an agent that has none", () => {
+    const acct = makeAccount();
+    try {
+        agent(acct, "beagle", { "config.json": "{}", "SOUL.md": "s" });
+        const out = seedPublicInstructionFiles(acct);
+        assert.deepEqual(out.map((r) => [r.slug, r.action, r.bytes]), [["beagle", "created", 0]]);
+        const p = join(acct, "agents", "beagle", "INSTRUCTION.md");
+        assert.equal(existsSync(p), true);
+        assert.equal(statSync(p).size, 0);
+    }
+    finally {
+        rmSync(acct, { recursive: true, force: true });
+    }
+});
+test("never overwrites an operator's file, and reports its size", () => {
+    const acct = makeAccount();
+    try {
+        agent(acct, "beagle", { "config.json": "{}", "INSTRUCTION.md": "Ask for the trip.\n" });
+        const out = seedPublicInstructionFiles(acct);
+        assert.deepEqual(out.map((r) => [r.slug, r.action]), [["beagle", "preserved"]]);
+        assert.equal(readFileSync(join(acct, "agents", "beagle", "INSTRUCTION.md"), "utf-8"), "Ask for the trip.\n");
+        assert.equal(out[0].bytes, 18);
+    }
+    finally {
+        rmSync(acct, { recursive: true, force: true });
+    }
+});
+// installDefaults seeds agents/admin/INSTRUCTION.md from its own template
+// immediately before this pass runs; reaching it here would report a file this
+// pass did not handle.
+test("skips admin, and skips a directory with no config.json", () => {
+    const acct = makeAccount();
+    try {
+        agent(acct, "admin", { "config.json": "{}", "IDENTITY.md": "i" });
+        agent(acct, "public", { "IDENTITY.md": "i" });
+        const out = seedPublicInstructionFiles(acct);
+        assert.deepEqual(out, []);
+        assert.equal(existsSync(join(acct, "agents", "admin", "INSTRUCTION.md")), false);
+        assert.equal(existsSync(join(acct, "agents", "public", "INSTRUCTION.md")), false);
+    }
+    finally {
+        rmSync(acct, { recursive: true, force: true });
+    }
+});
+// writeInstallDefaults runs on every upgrade. One unwritable agent directory
+// must not abort the install, and must not pass as done either.
+test("reports write-failed instead of throwing when the agent dir is read-only", () => {
+    const acct = makeAccount();
+    try {
+        agent(acct, "beagle", { "config.json": "{}" });
+        agent(acct, "clerk", { "config.json": "{}" });
+        chmodSync(join(acct, "agents", "beagle"), 0o500);
+        const out = seedPublicInstructionFiles(acct).sort((a, b) => a.slug.localeCompare(b.slug));
+        assert.deepEqual(out.map((r) => [r.slug, r.action]), [["beagle", "write-failed"], ["clerk", "created"]]);
+        // The pass continued past the failure: the later agent still got its file.
+        assert.equal(existsSync(join(acct, "agents", "clerk", "INSTRUCTION.md")), true);
+    }
+    finally {
+        chmodSync(join(acct, "agents", "beagle"), 0o700);
+        rmSync(acct, { recursive: true, force: true });
+    }
+});
+test("handles several agents in one pass and returns [] for an account with no agents dir", () => {
+    const acct = makeAccount();
+    try {
+        agent(acct, "beagle", { "config.json": "{}" });
+        agent(acct, "clerk", { "config.json": "{}", "INSTRUCTION.md": "x" });
+        const out = seedPublicInstructionFiles(acct).sort((a, b) => a.slug.localeCompare(b.slug));
+        assert.deepEqual(out.map((r) => [r.slug, r.action]), [["beagle", "created"], ["clerk", "preserved"]]);
+    }
+    finally {
+        rmSync(acct, { recursive: true, force: true });
+    }
+    const bare = mkdtempSync(join(tmpdir(), "pub-instr-bare-"));
+    try {
+        assert.deepEqual(seedPublicInstructionFiles(bare), []);
+    }
+    finally {
+        rmSync(bare, { recursive: true, force: true });
+    }
+});

package/dist/index.js

@@ -11,6 +11,7 @@ import { validateTierFlag, validateEntitlementBase64, applyTierToAccountConfig,
 import { parseOsRelease, isUbuntuLike as isUbuntuLikePure, parseAptCacheCandidate, decideAptResolution, } from "./apt-resolve.js";
 import { findPeerBrandOnDefaultNeo4jPort } from "./peer-brand-detect.js";
 import { removeClientAdminsKey } from "./converge-client-admins.js";
+import { seedPublicInstructionFiles } from "./public-instruction-seed.js";
 import { backupHouseCloudflare, restoreHouseCloudflare, migrateHouseCredentialFromAccount, } from "./preserve-house-cloudflare.js";
 import { resolveNeo4jPidfileScrub } from "./neo4j-pidfile-scrub.js";
 import { runInitLogging } from "./init-logging.js";
@@ -3554,6 +3555,15 @@ function writeInstallDefaults(accountId) {
     }
     console.log(`  [install-defaults] public-identity path=${publicIdentityDst}`);
     logFile(`  [install-defaults] public-identity path=${publicIdentityDst}`);
+    // Task 2342 — each public agent's own INSTRUCTION.md, created empty and never
+    // overwritten. install-defaults runs on upgrade, which is what backfills the
+    // agents created before this file existed. Placed after the public-identity
+    // block so the log reads in the same order the files are made.
+    for (const seeded of seedPublicInstructionFiles(accountDir)) {
+        const line = `  [install-defaults] public-instruction-md ${seeded.action} path=${seeded.path} bytes=${seeded.bytes}`;
+        console.log(line);
+        logFile(line);
+    }
 }
 /**
  * Commercial-mode entitlement delivery (Task 240). Writes the decoded payload

package/dist/public-instruction-seed.js

@@ -0,0 +1,70 @@
+// Task 2342 — every public agent owns the `## Instruction` block of the channel
+// turns it answers, at agents/<slug>/INSTRUCTION.md. Before 2342 that block was
+// read from agents/admin/INSTRUCTION.md whoever the turn woke, so a visitor's
+// turn carried the operator's own operating doctrine.
+//
+// The file is created EMPTY. An empty file resolves 'absent' at the resolver and
+// refuses the turn, which is the intended closed state for an agent whose
+// per-turn behaviour nobody has written; seeding any text would make that text
+// the instruction on every account that never edits it, which is the
+// arrangement 2342 removes. It is never overwritten, so an operator's own file
+// survives every upgrade.
+//
+// A public agent is a directory holding a config.json. `agents/public/` is the
+// template holder installDefaults writes IDENTITY.md into and has no
+// config.json, so it is skipped without needing to be named. `admin` is named
+// because it does carry one on some installs, and installDefaults seeds its
+// file from a template directly before calling this.
+import { existsSync, readdirSync, statSync, writeFileSync } from "node:fs";
+import { join } from "node:path";
+export function seedPublicInstructionFiles(accountDir) {
+    const out = [];
+    const agentsDir = join(accountDir, "agents");
+    let entries = [];
+    try {
+        entries = readdirSync(agentsDir);
+    }
+    catch {
+        return out;
+    }
+    for (const slug of entries) {
+        if (slug.startsWith(".") || slug === "admin")
+            continue;
+        const dir = join(agentsDir, slug);
+        try {
+            if (!statSync(dir).isDirectory())
+                continue;
+        }
+        catch {
+            continue;
+        }
+        if (!existsSync(join(dir, "config.json")))
+            continue;
+        const path = join(dir, "INSTRUCTION.md");
+        if (existsSync(path)) {
+            let bytes = 0;
+            try {
+                bytes = statSync(path).size;
+            }
+            catch {
+                bytes = 0;
+            }
+            out.push({ slug, action: "preserved", path, bytes });
+            continue;
+        }
+        // Guarded like the two reads above, and for the same reason: this runs
+        // inside writeInstallDefaults on every upgrade, and one agent directory the
+        // installer cannot write must not abort the install part-way. The sibling
+        // admin-instruction block does the same. The failure is reported rather
+        // than skipped, so it reaches the install log instead of passing as done.
+        try {
+            writeFileSync(path, "");
+        }
+        catch {
+            out.push({ slug, action: "write-failed", path, bytes: 0 });
+            continue;
+        }
+        out.push({ slug, action: "created", path, bytes: 0 });
+    }
+    return out;
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@rubytech/create-maxy-code",
-  "version": "0.1.543",
+  "version": "0.1.544",
   "description": "Install Maxy — AI for Productive People",
   "bin": {
     "create-maxy-code": "./dist/index.js"

package/payload/platform/plugins/admin/PLUGIN.md

@@ -256,6 +256,7 @@ Tools are available via the `admin` MCP server.
 | Compose a business document | User asks to write or draft a proposal, report (market / analysis / strategic), brief, memo, white paper, plan (non-fundraise), or case study | `skills/professional-document/SKILL.md` |
 | Manage admin users | User asks to add, remove, or list admins on this account, or change an admin PIN | `skills/admin-user-management/SKILL.md` |
 | Session reset / continue / resume | User asks to clear the session, start fresh, continue the last session, or pick up where they left off | `skills/session-management/SKILL.md` |
+| Set up channel message handling | Owner asks to set up or change what the agent does with incoming channel messages, asks why an incoming message got no answer, or reports the agent replying to someone it should not have | `skills/channel-instruction/SKILL.md` |
 | Show or download a file | User asks to view, attach, or download a file or document, or the current turn produces a document the owner needs to review | `skills/file-presentation/SKILL.md` |
 | Upgrade Maxy | User asks to upgrade, update, install the latest version, or accepts an upgrade offer | `skills/upgrade/SKILL.md` |
 | Run a structured sprint without `gstack` | User asks to run a sprint, execute a `.tasks/NNN-*.md`, or invokes "superpowers sprint" / "sprint without gstack" | `skills/superpowers-sprint/SKILL.md` |
@@ -273,6 +274,7 @@ Tools are available via the `admin` MCP server.
 - `hooks/webfetch-preflight.mjs` — short-circuits WebFetch on JS-SPA shells with a structured `WEBFETCH_CANNOT_READ_JS_SPA` error so the agent surfaces a loud failure to the owner instead of paying the 60s extraction timeout. Fail-open on any internal error.
 - `hooks/askuserquestion-investigate-gate.sh` — PreToolUse matcher=`AskUserQuestion`. Blocks the question (exit 2) when no read-only investigation tool has fired since the latest real user turn in the session JSONL. The structural fix for the failure class where the agent fabricates a menu before evidence-gathering (session `c085ec2c-46fb-4b73-8865-68cf85866ea8` 2026-05-22 — "change remote access password" → invented options "Admin PIN / Cloudflare tunnel / WiFi password" with zero prior tool_use; post-correction the agent immediately fired `remote-auth-status` → `ToolSearch` → `remote-auth-set-password`, proving it knew the moves). **Allowlist** (exact, with trailing `__<tool>` suffix-match for namespaced `mcp__plugin_<plugin>_<server>__<tool>` aliases): `ToolSearch`, `Grep`, `Glob`, `Read`, `LS`, `NotebookRead`, `Bash`, `WebFetch`, `WebSearch`, plus the read-only admin / memory MCP tools (`*-status`, `*-list`, `*-read`, `skill-find`, `memory-find-candidates`, `profile-read`, `conversation-list`, `memory-list-attachments`, `memory-read-attachment`). **Block message:** `Blocked: AskUserQuestion requires at least one investigation tool (ToolSearch, Grep, Read, *-list, *-status, *-read, skill-find, ...) earlier in this turn. Search the operator's literal phrase first.` **Log line** (stderr, one per call): `[ask-gate] decision=<allow|block> sessionId=<id8> seen=<csv|-> reason=<allowlist-hit|no-investigation|fail-open-no-transcript|fail-open-parse-error>`. **Fail-open** on missing transcript or parse error — nudges, never bricks the UI.
 - `hooks/askuserquestion-channel-carrier-gate.sh` — PreToolUse matcher=`AskUserQuestion`, registered as a **second command on the same matcher** as the investigate-gate (either exit 2 blocks; the two guard different conditions). Blocks the question (exit 2) when the session has a native channel attached, because the Claude Code channel protocol carries only the two permission methods — there is no carrier for the `AskUserQuestion` elicitation, so on an rc-spawn channel (webchat/WhatsApp/Telegram) session the harness would block the turn awaiting a selection that can never arrive and the reader renders only delivered replies, wedging the turn (live SiteDesk incident session `1a085718` 2026-07-11: `/chat` stalled on the delivered "On it…" ack with no card). **Signal:** the rc-spawn writes the channel MCP registration as a config file in `os.tmpdir()` keyed by session id (`maxy-channel-<sid>.json` / `maxy-webchat-channel-<sid>.json` / `maxy-wa-channel-<sid>.json` / `maxy-telegram-channel-<sid>.json`, `sid` sanitized `[^A-Za-z0-9_-]→_` exactly as the writers do); its presence at tool-call time is the authoritative "channel attached to this session" marker. The hook resolves the tmpdir the way Node's `os.tmpdir()` does (`${TMPDIR:-/tmp}`, trailing slash stripped). Correct in both readings of the claude.ai/code scoping question: a Pi channel process sees the tmpfile (block); a claude.ai/code process on another host never sees the Pi tmpfile (fail-open → allow, that surface can answer the card). **Block message:** `Blocked: this is a native-channel session and AskUserQuestion cannot be delivered over a channel (the channel protocol carries no elicitation card, so the turn would wedge). Ask the same question as prose in your channel reply tool and wait for the operator's next message.` **Log line** (stderr, one per decisive call): `[ask-channel] decision=<allow|block> sessionId=<id8> channel=<attached|none> reason=<channel-attached|no-channel|fail-open-no-envelope|fail-open-no-session>`. **Fail-open** on no envelope, blank session id, or absent channel file — nudges, never bricks the UI. The complementary standing check (`interactive-wedge` in the session manager) catches any un-carried interactive tool_use that slips past this hook; it scans every account's project-slug (not just the boot slug), so a client sub-account channel wedge is covered too. **Reach on upgrade:** `provision-account-dir.sh` writes this matcher only at account-provision time, and the upgrade path re-provisions only the house account — so an account provisioned before this gate landed keeps a stale matcher and re-wedges (live SiteDesk recurrence session `d39a22b0`, account `2078cb54`, 2026-07-15). `setup-account.sh` runs `reconcile_all_accounts_askgate` (`platform/scripts/lib/account-settings-askgate.sh`) on every install to retrofit the carrier gate onto every existing account's `settings.json` — idempotent surgical jq patch of the `AskUserQuestion` matcher, one `[backfill-1683] file=<f> status=<absent|no-hooks|already-set|updated|rewrite-failed>` line per account, contents never echoed.
+- `hooks/public-tool-surface.sh` — **PreToolUse matcher-less (every tool) + UserPromptSubmit + Stop.** Records the tool surface a `role='public'` spawn REALISES, which nothing recorded before: `tool-allowlist` records the surface a spawn was given, and `[public-surface] op=audit` reconciles MCP server names from spawn-tee filenames, so it is blind to `Read`, `Bash`, `Skill` and `ToolSearch` (no MCP child, no tee file). On 2026-08-01 five such tools ran in a session spawned with `--allowed-tools mcp__whatsapp-channel__reply --strict-mcp-config --permission-mode dontAsk` and produced no line. **Input:** `MAXY_PUBLIC_ALLOWED_TOOLS`, stamped by both spawn paths (`http-server.ts` rc-spawn, `pty-spawner.ts`) for `role='public'` only, carrying that spawn's final `--allowed-tools` argv set comma-joined. Absent means not a public spawn: the hook exits 0 in silence. **Log lines** (server.log only — a visitor's PTY gains no output): `[public-surface] op=tool-realised sessionId=<id8> tool=<name> allowed=<y|n>` per call, `allowed` being exact membership of the stamped set; `[public-surface] op=realised-census sessionId=<id8> calls=<n> disallowed=<n>` at Stop, emitted including zero so a session with no disallowed call is distinguishable from one the hook never saw. Per-call tallies are appends to `<logdir>/public-surface/<sanitised-session-id>`, removed by the census, so no counter mutex is needed. The `UserPromptSubmit` registration is the turn-start reset and emits nothing: the stuck-turn recycler kills a wedged PTY and resumes the SAME session id, so that turn's `Stop` never fires and its tally would otherwise be counted into the next turn's census (measured: three calls in a killed turn plus one call in the next reported `calls=4 disallowed=3`). **Never blocks:** exit 0 on every path, including unparseable stdin, absent `session_id`, missing `python3` and an unwritable log. **Reach on upgrade:** `provision-account-dir.sh` writes both entries only at account-provision time, so `setup-account.sh` runs `reconcile_all_accounts_public_surface` (`platform/scripts/lib/account-settings-public-surface.sh`) on every install to retrofit them onto every existing account, one `[backfill-2339] file=<f> status=<absent|no-hooks|already-set|updated|rewrite-failed>` line per account, contents never echoed.
 - `hooks/mcp-tool-missing.sh` — **PostToolUse hook on `mcp__.*` (directive 3).** Defence-in-depth for the `No such tool available: mcp__…` failure class that the name-binding is built to eliminate. Fires on any MCP tool call; no-op unless the `tool_response` carries `No such tool available` AND the qualified name resolves to a maxy plugin (read from the generated `hooks/lib/maxy-mcp-plugins.txt`). On a maxy match it logs one deterministic `[mcp-tool-missing] server=<server> tool=<tool>` line and exits 2 with a fixed envelope on stderr, so the agent relays a named server-unavailable failure instead of narrating "warming up" or blind-retrying. A missing non-maxy bridge tool (Playwright etc., upstream-owned) passes through (exit 0). The maxy-plugin list is regenerated and gate-diffed by `platform/scripts/check-canonical-tool-names.mjs`.
 - `hooks/post-tool-use-agent.sh` — **PostToolUse hook on `Agent`.** Drains any subagent hook-decision buffers under `~/.maxy-code/logs/hook-decisions/` modified since this parent's previous PostToolUse-Agent fire (cursor file keyed by parent session id), prints one `[hook-propagate]` line per record to stdout — Claude Code attaches the stdout as a `hook_success` attachment on the parent JSONL, making the records grep-queryable from the parent session alone. Rotates consumed buffers to `consumed/`. Emits one `[hook-propagate-census] parentSession=<…> subagentHooksObserved=<N> attachmentsEmitted=<M>` line per fire to stdout and server.log; `N != M` is the propagation regression signal. The companion emitter library `hooks/lib/hook-emit.sh` is sourced by `post-tool-use-agent.sh` and any other hook that records a block decision (4 KB stderr truncation, `truncated=true` set on the record).
 - `hooks/admin-authoring-observer.sh` — **PostToolUse hook on Write and Edit.** Observation only — never blocks; exits 0 on every path. Fires when the admin agent (not a specialist subagent — gated by `MAXY_SPECIALIST` env) writes or edits a file under `<accountDir>/output/`. Walks the session transcript from the latest real-user turn forward to detect any prior `Task` `tool_use` whose `subagent_type` starts with `specialists:`. Emits one stderr line `[admin-authoring] inline-write path=<rel> priorSpecialistSpawnInTurn=<true|false|unknown>`. A `false` value on a long-form prose file is the regression signal this hook was designed to make visible — the BioSymm proposal session (admin authored a customer-facing proposal inline despite content-producer being installed) is the failure mode this surfaces mechanically. Mechanical enforcement (refuse the write, force a re-spawn) is deferred per the task spec.

package/payload/platform/plugins/admin/hooks/__tests__/public-tool-surface.test.sh

@@ -0,0 +1,173 @@
+#!/usr/bin/env bash
+# Regression test for public-tool-surface.sh (Task 2339).
+#
+# The hook records the tool surface a public spawn REALISES: one line per tool
+# call classified against that spawn's own --allowed-tools set, and a per-turn
+# census. It is observability only and must never block, so every case here
+# asserts exit 0 as well as the emitted line.
+
+set -u
+
+HOOK="$(cd "$(dirname "$0")/.." && pwd)/public-tool-surface.sh"
+if [[ ! -x "$HOOK" ]]; then
+  echo "FAIL: $HOOK not executable" >&2
+  exit 1
+fi
+
+PASS=0
+FAIL=0
+ok()  { echo "PASS: $1"; PASS=$((PASS+1)); }
+bad() { echo "FAIL: $1" >&2; FAIL=$((FAIL+1)); }
+
+SID=aa11bb22-cccc-dddd-eeee-ffff00001111
+ALLOW='mcp__whatsapp-channel__reply'
+
+# newlog -> prints a fresh LOG_DIR
+newlog() { local d; d=$(mktemp -d); printf '%s' "$d"; }
+
+# fire <logdir> <env-allowlist|-> <stdin-json> -> prints exit code; log at $1/server.log
+fire() {
+  local d="$1" allow="$2" input="$3" rc
+  if [[ "$allow" == "-" ]]; then
+    printf '%s' "$input" | env -u MAXY_PUBLIC_ALLOWED_TOOLS LOG_DIR="$d" bash "$HOOK" >/dev/null 2>&1
+  else
+    printf '%s' "$input" | env MAXY_PUBLIC_ALLOWED_TOOLS="$allow" LOG_DIR="$d" bash "$HOOK" >/dev/null 2>&1
+  fi
+  rc=$?
+  printf '%s' "$rc"
+}
+
+pre()  { printf '{"hook_event_name":"PreToolUse","tool_name":"%s","session_id":"%s"}' "$1" "$SID"; }
+stop() { printf '{"hook_event_name":"Stop","session_id":"%s"}' "$SID"; }
+ups()  { printf '{"hook_event_name":"UserPromptSubmit","session_id":"%s","prompt":"hi"}' "$SID"; }
+
+# --- 1. allowed tool -------------------------------------------------------
+D=$(newlog)
+RC=$(fire "$D" "$ALLOW" "$(pre "$ALLOW")")
+if [[ "$RC" == "0" ]]; then ok "allowed tool exits 0"; else bad "allowed tool exit $RC"; fi
+if /usr/bin/grep -qF "[public-surface] op=tool-realised sessionId=aa11bb22 tool=$ALLOW allowed=y" "$D/server.log"; then
+  ok "allowed tool logs allowed=y"
+else
+  bad "allowed=y line absent"
+fi
+
+# --- 2. disallowed native tool ---------------------------------------------
+D=$(newlog)
+RC=$(fire "$D" "$ALLOW" "$(pre Bash)")
+if [[ "$RC" == "0" ]]; then ok "disallowed tool exits 0"; else bad "disallowed tool exit $RC"; fi
+if /usr/bin/grep -qF "[public-surface] op=tool-realised sessionId=aa11bb22 tool=Bash allowed=n" "$D/server.log"; then
+  ok "disallowed tool logs allowed=n"
+else
+  bad "allowed=n line absent"
+fi
+
+# --- 3. no env stamp -> silent ---------------------------------------------
+D=$(newlog)
+RC=$(fire "$D" "-" "$(pre Bash)")
+if [[ "$RC" == "0" ]]; then ok "unstamped session exits 0"; else bad "unstamped exit $RC"; fi
+if [[ ! -f "$D/server.log" ]]; then ok "unstamped session writes nothing"; else bad "unstamped session wrote a log"; fi
+
+# --- 4. census with zero calls ---------------------------------------------
+D=$(newlog)
+RC=$(fire "$D" "$ALLOW" "$(stop)")
+if [[ "$RC" == "0" ]]; then ok "zero-call census exits 0"; else bad "zero-call census exit $RC"; fi
+if /usr/bin/grep -qF "[public-surface] op=realised-census sessionId=aa11bb22 calls=0 disallowed=0" "$D/server.log"; then
+  ok "census is emitted at zero"
+else
+  bad "zero census absent"
+fi
+
+# --- 5. census after one allowed and one disallowed call -------------------
+D=$(newlog)
+fire "$D" "$ALLOW" "$(pre "$ALLOW")" >/dev/null
+fire "$D" "$ALLOW" "$(pre Bash)" >/dev/null
+fire "$D" "$ALLOW" "$(stop)" >/dev/null
+if /usr/bin/grep -qF "[public-surface] op=realised-census sessionId=aa11bb22 calls=2 disallowed=1" "$D/server.log"; then
+  ok "census counts calls and disallowed"
+else
+  bad "census counts wrong"
+fi
+if [[ -z "$(ls -A "$D/public-surface" 2>/dev/null)" ]]; then
+  ok "census removes the tally"
+else
+  bad "tally survived the census"
+fi
+
+# --- 6. a second turn starts from zero -------------------------------------
+D=$(newlog)
+fire "$D" "$ALLOW" "$(pre Bash)" >/dev/null
+fire "$D" "$ALLOW" "$(stop)" >/dev/null
+fire "$D" "$ALLOW" "$(stop)" >/dev/null
+if [[ "$(/usr/bin/grep -cF 'op=realised-census sessionId=aa11bb22 calls=0 disallowed=0' "$D/server.log")" == "1" ]]; then
+  ok "the turn after a census starts from zero"
+else
+  bad "second census did not reset"
+fi
+
+# --- 7. unparseable stdin --------------------------------------------------
+D=$(newlog)
+RC=$(fire "$D" "$ALLOW" 'not json at all')
+if [[ "$RC" == "0" ]]; then ok "unparseable stdin exits 0"; else bad "unparseable stdin exit $RC"; fi
+if [[ ! -f "$D/server.log" ]]; then ok "unparseable stdin writes nothing"; else bad "unparseable stdin wrote a log"; fi
+
+# --- 8. a tool name containing a glob is compared literally -----------------
+D=$(newlog)
+RC=$(fire "$D" "$ALLOW" "$(pre '*')")
+if /usr/bin/grep -qF "tool=* allowed=n" "$D/server.log"; then
+  ok "a glob tool name is compared literally, not expanded"
+else
+  bad "glob tool name mishandled"
+fi
+
+# --- 9. multi-entry allowlist ----------------------------------------------
+D=$(newlog)
+fire "$D" "Read,$ALLOW" "$(pre Read)" >/dev/null
+if /usr/bin/grep -qF "tool=Read allowed=y" "$D/server.log"; then
+  ok "membership matches any entry of a multi-entry allowlist"
+else
+  bad "multi-entry allowlist mismatch"
+fi
+
+# --- 10. absent session_id still emits -------------------------------------
+D=$(newlog)
+fire "$D" "$ALLOW" '{"hook_event_name":"PreToolUse","tool_name":"Bash"}' >/dev/null
+if /usr/bin/grep -qF "sessionId=none tool=Bash allowed=n" "$D/server.log"; then
+  ok "a call with no session_id is still recorded"
+else
+  bad "no-session call was silent"
+fi
+
+# --- 11. a killed turn leaves no residue in the next turn's census ---------
+# The stuck-turn recycler kills a wedged PTY and resumes the SAME sessionId, so
+# the killed turn's Stop never fires. Without a turn-start reset its tally is
+# inherited and the next census over-counts, which is exactly the number the
+# task's verification asserts against that turn's tool_use count.
+D=$(newlog)
+for t in Bash Read ToolSearch; do fire "$D" "$ALLOW" "$(pre "$t")" >/dev/null; done
+# no Stop: the turn was killed here.
+fire "$D" "$ALLOW" "$(ups)" >/dev/null
+fire "$D" "$ALLOW" "$(pre "$ALLOW")" >/dev/null
+fire "$D" "$ALLOW" "$(stop)" >/dev/null
+if /usr/bin/grep -qF "op=realised-census sessionId=aa11bb22 calls=1 disallowed=0" "$D/server.log"; then
+  ok "a killed turn's tally does not leak into the next turn's census"
+else
+  bad "census inherited a killed turn's tally"
+fi
+
+# --- 12. the turn-start reset is silent and never blocks --------------------
+D=$(newlog)
+RC=$(fire "$D" "$ALLOW" "$(ups)")
+if [[ "$RC" == "0" ]]; then ok "turn-start reset exits 0"; else bad "turn-start reset exit $RC"; fi
+if [[ ! -f "$D/server.log" ]]; then ok "turn-start reset writes no log line"; else bad "turn-start reset wrote a log line"; fi
+
+echo "----"
+echo "PASS=$PASS FAIL=$FAIL"
+# The count is asserted, not just the failures: a case that stops running leaves
+# a green suite that tested less than it claims, and .husky/pre-commit reads only
+# the exit status.
+EXPECTED=19
+if [[ $((PASS+FAIL)) -ne "$EXPECTED" ]]; then
+  echo "FAIL: expected $EXPECTED cases, ran $((PASS+FAIL))" >&2
+  exit 1
+fi
+[[ "$FAIL" -eq 0 ]]

package/payload/platform/plugins/admin/hooks/public-tool-surface.sh

@@ -0,0 +1,123 @@
+#!/usr/bin/env bash
+# public-tool-surface.sh — Task 2339. Records the tool surface a public spawn
+# REALISES: one line per tool call, plus a per-turn census.
+#
+# `tool-allowlist` (rc-public-lockdown.ts, pty-spawner.ts) records the surface a
+# spawn was GIVEN. `[public-surface] op=audit` (public-surface-audit.ts)
+# reconciles MCP server names from spawn-tee filenames, so it is structurally
+# blind to Read, Bash, Skill and ToolSearch: those spawn no MCP child and write
+# no tee file. On 2026-08-01 five such tools ran in a session spawned with a
+# one-tool allowlist and produced no log line at all.
+#
+# Registered on the matcher-less PreToolUse entry (which matches every tool,
+# native and MCP alike) and on the Stop entry. Fires only when
+# MAXY_PUBLIC_ALLOWED_TOOLS is set, which both spawn paths stamp for
+# role='public' only.
+#
+# Observability only: never blocks, exits 0 on every path, and writes to
+# server.log alone — a public visitor's PTY gains no new output.
+
+set -uo pipefail
+
+# No stamp means this is not a public spawn. Silent, and the common case.
+[ -n "${MAXY_PUBLIC_ALLOWED_TOOLS:-}" ] || exit 0
+
+# Log destination. LOG_DIR is stamped on the rc-spawn path and is brand-correct;
+# MAXY_HOOK_SERVER_LOG is the override post-tool-use-agent.sh already honours;
+# the literal is that hook's own default.
+if [ -n "${LOG_DIR:-}" ]; then
+  : "${MAXY_HOOK_SERVER_LOG:=$LOG_DIR/server.log}"
+fi
+: "${MAXY_HOOK_SERVER_LOG:=$HOME/.maxy-code/logs/server.log}"
+TALLY_DIR="$(dirname "$MAXY_HOOK_SERVER_LOG")/public-surface"
+
+emit() {
+  mkdir -p "$(dirname "$MAXY_HOOK_SERVER_LOG")" 2>/dev/null || true
+  printf '%s\n' "$1" >>"$MAXY_HOOK_SERVER_LOG" 2>/dev/null || true
+}
+
+# No stdin (tty) — no call to classify. Fail-open.
+[ -t 0 ] && exit 0
+INPUT=$(cat)
+[ -n "$INPUT" ] || exit 0
+
+PARSED=$(printf '%s' "$INPUT" | python3 -c '
+import sys, json
+try:
+    d = json.load(sys.stdin)
+except Exception:
+    sys.exit(1)
+if not isinstance(d, dict):
+    sys.exit(1)
+def s(k):
+    v = d.get(k)
+    return v if isinstance(v, str) else ""
+print(s("hook_event_name"))
+print(s("tool_name"))
+print(s("session_id"))
+' 2>/dev/null) || exit 0
+
+{ IFS= read -r EVENT; IFS= read -r TOOL; IFS= read -r SID; } <<EOF
+$PARSED
+EOF
+EVENT="${EVENT:-}"
+TOOL="${TOOL:-}"
+SID="${SID:-}"
+
+# The 8-character form used by every other session-scoped line. An envelope with
+# no session_id still emits: a public session must never be silent, and `none`
+# is visibly not an id.
+SID8="${SID:0:8}"
+[ -n "$SID8" ] || SID8=none
+# Tally filename. Sanitised the way the rc-spawn channel-config writers sanitise
+# theirs, so no session id can escape the directory.
+KEY=$(printf '%s' "${SID:-none}" | tr -c 'A-Za-z0-9_-' '_')
+
+if [ "$EVENT" = "UserPromptSubmit" ]; then
+  # Turn start. Drop any tally left by a turn that never reached Stop — the
+  # stuck-turn recycler kills a wedged PTY and resumes the SAME sessionId, so
+  # that turn's Stop never fires and its tally would otherwise be counted into
+  # the next turn's census. Silent: the reset is not itself an observation.
+  rm -f "$TALLY_DIR/$KEY" 2>/dev/null || true
+  exit 0
+fi
+
+if [ "$EVENT" = "PreToolUse" ]; then
+  [ -n "$TOOL" ] || exit 0
+  ALLOWED=n
+  # -f so a tool name or allowlist entry containing a glob character is compared
+  # literally rather than expanded against the cwd.
+  set -f
+  OLDIFS=$IFS
+  IFS=','
+  for t in $MAXY_PUBLIC_ALLOWED_TOOLS; do
+    if [ "$t" = "$TOOL" ]; then ALLOWED=y; break; fi
+  done
+  IFS=$OLDIFS
+  set +f
+  emit "[public-surface] op=tool-realised sessionId=$SID8 tool=$TOOL allowed=$ALLOWED"
+  # Append one line per call rather than read-modify-writing a counter: an
+  # append needs no mutex, a counter would need the one hook-emit.sh carries.
+  mkdir -p "$TALLY_DIR" 2>/dev/null || true
+  printf '%s\n' "$ALLOWED" >>"$TALLY_DIR/$KEY" 2>/dev/null || true
+  exit 0
+fi
+
+if [ "$EVENT" = "Stop" ]; then
+  CALLS=0
+  DIS=0
+  if [ -f "$TALLY_DIR/$KEY" ]; then
+    while IFS= read -r v || [ -n "$v" ]; do
+      [ -n "$v" ] || continue
+      CALLS=$((CALLS+1))
+      if [ "$v" = "n" ]; then DIS=$((DIS+1)); fi
+    done <"$TALLY_DIR/$KEY"
+    rm -f "$TALLY_DIR/$KEY" 2>/dev/null || true
+  fi
+  # Emitted including zero, so a public session with no disallowed call is
+  # distinguishable from one this hook never saw.
+  emit "[public-surface] op=realised-census sessionId=$SID8 calls=$CALLS disallowed=$DIS"
+  exit 0
+fi
+
+exit 0

package/payload/platform/plugins/admin/mcp/dist/tools/agent-write.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"agent-write.d.ts","sourceRoot":"","sources":["../../src/tools/agent-write.ts"],"names":[],"mappings":"AAiBA,MAAM,MAAM,iBAAiB,GACzB,aAAa,GACb,gBAAgB,GAChB,iBAAiB,GACjB,QAAQ,GACR,WAAW,CAAC;AAEhB,MAAM,MAAM,gBAAgB,GACxB;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,YAAY,EAAE,MAAM,EAAE,CAAA;CAAE,GAClD;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,iBAAiB,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAE7D,MAAM,WAAW,eAAe;IAC9B,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,EAAE,MAAM,CAAC;IACrB,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;IAClB,iBAAiB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC7B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,aAAa,CAAC,EAAE,OAAO,GAAG,MAAM,CAAC;IACjC,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,eAAe;IAC9B,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,iBAAiB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC7B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,aAAa,CAAC,EAAE,OAAO,GAAG,MAAM,CAAC;IACjC,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AA8BD,wBAAgB,WAAW,CAAC,IAAI,EAAE,eAAe,GAAG,gBAAgB,CAsDnE;AAED,wBAAgB,WAAW,CAAC,IAAI,EAAE,eAAe,GAAG,gBAAgB,CA4CnE;AAED,MAAM,WAAW,WAAW;IAC1B,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,MAAM,CAAC;IACb,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,iFAAiF;IACjF,SAAS,CAAC,EAAE,OAAO,KAAK,CAAC;CAC1B;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAsB,uBAAuB,CAAC,IAAI,EAAE,WAAW,GAAG,OAAO,CAAC;IAAE,SAAS,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,CAmB/G"}
+{"version":3,"file":"agent-write.d.ts","sourceRoot":"","sources":["../../src/tools/agent-write.ts"],"names":[],"mappings":"AAiBA,MAAM,MAAM,iBAAiB,GACzB,aAAa,GACb,gBAAgB,GAChB,iBAAiB,GACjB,QAAQ,GACR,WAAW,CAAC;AAEhB,MAAM,MAAM,gBAAgB,GACxB;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,YAAY,EAAE,MAAM,EAAE,CAAA;CAAE,GAClD;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,iBAAiB,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAE7D,MAAM,WAAW,eAAe;IAC9B,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,EAAE,MAAM,CAAC;IACrB,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;IAClB,iBAAiB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC7B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,aAAa,CAAC,EAAE,OAAO,GAAG,MAAM,CAAC;IACjC,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,eAAe;IAC9B,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,iBAAiB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC7B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,aAAa,CAAC,EAAE,OAAO,GAAG,MAAM,CAAC;IACjC,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AA8BD,wBAAgB,WAAW,CAAC,IAAI,EAAE,eAAe,GAAG,gBAAgB,CAkEnE;AAED,wBAAgB,WAAW,CAAC,IAAI,EAAE,eAAe,GAAG,gBAAgB,CA4CnE;AAED,MAAM,WAAW,WAAW;IAC1B,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,MAAM,CAAC;IACb,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,iFAAiF;IACjF,SAAS,CAAC,EAAE,OAAO,KAAK,CAAC;CAC1B;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAsB,uBAAuB,CAAC,IAAI,EAAE,WAAW,GAAG,OAAO,CAAC;IAAE,SAAS,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,CAmB/G"}

package/payload/platform/plugins/admin/mcp/dist/tools/agent-write.js

@@ -62,6 +62,14 @@ export function createAgent(args) {
         writeFileSync(resolve(dir, "SOUL.md"), args.soul);
         writeFileSync(resolve(dir, "KNOWLEDGE.md"), args.knowledge);
         writeFileSync(resolve(dir, "config.json"), `${JSON.stringify(config, null, 2)}\n`);
+        // Task 2342 — the agent's own turn instruction, created empty. Its whole
+        // body becomes the `## Instruction` block of every channel turn this agent
+        // answers. Empty resolves 'absent' at the resolver and refuses the turn,
+        // which is the correct closed state for an agent whose per-turn behaviour
+        // nobody has written yet; before 2342 such a turn silently borrowed
+        // agents/admin/INSTRUCTION.md. Written inside this try with the others so
+        // the rollback below still leaves no half-made agent.
+        writeFileSync(resolve(dir, "INSTRUCTION.md"), "");
     }
     catch (err) {
         // The directory did not exist before this call, so removing it restores the
@@ -70,7 +78,11 @@ export function createAgent(args) {
         rmSync(dir, { recursive: true, force: true });
         throw err;
     }
-    return { ok: true, slug: args.slug, filesWritten: ["IDENTITY.md", "SOUL.md", "KNOWLEDGE.md", "config.json"] };
+    return {
+        ok: true,
+        slug: args.slug,
+        filesWritten: ["IDENTITY.md", "SOUL.md", "KNOWLEDGE.md", "config.json", "INSTRUCTION.md"],
+    };
 }
 export function updateAgent(args) {
     const verdict = checkAgentSlug(args.slug);

package/payload/platform/plugins/admin/mcp/dist/tools/agent-write.js.map

@@ -1 +1 @@
-{"version":3,"file":"agent-write.js","sourceRoot":"","sources":["../../src/tools/agent-write.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACrF,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,cAAc,EAAE,MAAM,6CAA6C,CAAC;AAC7E,OAAO,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AAoD/D,SAAS,UAAU,CAAC,UAAkB,EAAE,IAAY;IAClD,OAAO,OAAO,CAAC,UAAU,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAC;AAC7C,CAAC;AAED;;mCAEmC;AACnC,SAAS,WAAW,CAClB,IAA6B,EAC7B,IAOC;IAED,MAAM,IAAI,GAAG,EAAE,GAAG,IAAI,EAAE,CAAC;IACzB,IAAI,IAAI,CAAC,WAAW,KAAK,SAAS;QAAE,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,WAAW,CAAC;IACxE,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS;QAAE,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC;IACtD,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS;QAAE,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;IACzD,IAAI,IAAI,CAAC,iBAAiB,KAAK,SAAS;QAAE,IAAI,CAAC,iBAAiB,GAAG,IAAI,CAAC,iBAAiB,CAAC;IAC1F,IAAI,IAAI,CAAC,aAAa,KAAK,SAAS;QAAE,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC,aAAa,CAAC;IAC9E,IAAI,IAAI,CAAC,UAAU,KAAK,SAAS;QAAE,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,UAAU,CAAC;IACrE,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,IAAqB;IAC/C,MAAM,OAAO,GAAG,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC1C,IAAI,CAAC,OAAO,CAAC,EAAE;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC;IAErF,MAAM,GAAG,GAAG,UAAU,CAAC,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;IACnD,IAAI,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACpB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,UAAU,IAAI,CAAC,IAAI,kBAAkB,EAAE,CAAC;IACxF,CAAC;IAED,IAAI,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QACjC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,iBAAiB,EAAE,MAAM,EAAE,6BAA6B,EAAE,CAAC;IACzF,CAAC;IAED,MAAM,MAAM,GAAG,WAAW,CACxB,EAAE,EACF;QACE,WAAW,EAAE,IAAI,CAAC,WAAW;QAC7B,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,MAAM,EAAE,IAAI,CAAC,MAAM,IAAI,QAAQ;QAC/B,iBAAiB,EAAE,IAAI,CAAC,iBAAiB;QACzC,aAAa,EAAE,IAAI,CAAC,aAAa;QACjC,UAAU,EAAE,IAAI,CAAC,UAAU;KAC5B,CACF,CAAC;IACF,MAAM,aAAa,GAAG,mBAAmB,CAAC,MAAM,CAAC,CAAC;IAClD,IAAI,CAAC,aAAa,CAAC,EAAE,EAAE,CAAC;QACtB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,gBAAgB,EAAE,MAAM,EAAE,aAAa,CAAC,KAAK,EAAE,CAAC;IAC9E,CAAC;IAED,sEAAsE;IACtE,4EAA4E;IAC5E,4EAA4E;IAC5E,uEAAuE;IACvE,MAAM,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,YAAY,EAAE,WAAW,EAAE,QAAQ,EAAE,QAAQ,EAAE,aAAa,CAAC,CAAC;IAChG,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;QAC9B,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,gCAAgC,YAAY,EAAE,EAAE,CAAC;IACpG,CAAC;IACD,MAAM,QAAQ,GAAG,YAAY,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC;IAErD,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACpC,IAAI,CAAC;QACH,aAAa,CAAC,OAAO,CAAC,GAAG,EAAE,aAAa,CAAC,EAAE,QAAQ,CAAC,CAAC;QACrD,aAAa,CAAC,OAAO,CAAC,GAAG,EAAE,SAAS,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;QAClD,aAAa,CAAC,OAAO,CAAC,GAAG,EAAE,cAAc,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;QAC5D,aAAa,CAAC,OAAO,CAAC,GAAG,EAAE,aAAa,CAAC,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;IACrF,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,4EAA4E;QAC5E,4EAA4E;QAC5E,wCAAwC;QACxC,MAAM,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAC9C,MAAM,GAAG,CAAC;IACZ,CAAC;IAED,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,YAAY,EAAE,CAAC,aAAa,EAAE,SAAS,EAAE,cAAc,EAAE,aAAa,CAAC,EAAE,CAAC;AAChH,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,IAAqB;IAC/C,MAAM,OAAO,GAAG,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC1C,IAAI,CAAC,OAAO,CAAC,EAAE;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC;IAErF,MAAM,GAAG,GAAG,UAAU,CAAC,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;IACnD,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,EAAE,aAAa,CAAC,CAAC;IAC/C,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QAC5B,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,4BAA4B,IAAI,CAAC,IAAI,GAAG,EAAE,CAAC;IAC9F,CAAC;IAED,IAAI,IAAI,CAAC,SAAS,KAAK,SAAS,IAAI,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QACjE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,iBAAiB,EAAE,MAAM,EAAE,6BAA6B,EAAE,CAAC;IACzF,CAAC;IAED,IAAI,IAA6B,CAAC;IAClC,IAAI,CAAC;QACH,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,UAAU,EAAE,OAAO,CAAC,CAA4B,CAAC;IAClF,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO;YACL,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,gBAAgB;YACxB,MAAM,EAAE,2CAA2C,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE;SACtG,CAAC;IACJ,CAAC;IAED,MAAM,MAAM,GAAG,WAAW,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IACvC,MAAM,aAAa,GAAG,mBAAmB,CAAC,MAAM,CAAC,CAAC;IAClD,IAAI,CAAC,aAAa,CAAC,EAAE,EAAE,CAAC;QACtB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,gBAAgB,EAAE,MAAM,EAAE,aAAa,CAAC,KAAK,EAAE,CAAC;IAC9E,CAAC;IAED,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QAC5B,aAAa,CAAC,OAAO,CAAC,GAAG,EAAE,SAAS,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;QAClD,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAC1B,CAAC;IACD,IAAI,IAAI,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;QACjC,aAAa,CAAC,OAAO,CAAC,GAAG,EAAE,cAAc,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;QAC5D,OAAO,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;IAC/B,CAAC;IACD,aAAa,CAAC,UAAU,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;IAClE,OAAO,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;IAE5B,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,YAAY,EAAE,OAAO,EAAE,CAAC;AAC9D,CAAC;AAWD;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAAC,IAAiB;IAC7D,MAAM,OAAO,GAA2B;QACtC,cAAc,EAAE,kBAAkB;QAClC,uBAAuB,EAAE,IAAI,CAAC,SAAS;KACxC,CAAC;IACF,IAAI,IAAI,CAAC,eAAe;QAAE,OAAO,CAAC,0BAA0B,CAAC,GAAG,IAAI,CAAC,eAAe,CAAC;IAErF,MAAM,GAAG,GAAG,oBAAoB,IAAI,CAAC,YAAY,qBAAqB,IAAI,CAAC,IAAI,sBAAsB,IAAI,CAAC,SAAS,EAAE,CAAC;IACtH,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,IAAI,KAAK,CAAC;IACxC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC/F,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACZ,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;YAC9C,OAAO,EAAE,SAAS,EAAE,CAAC,EAAE,KAAK,EAAE,6BAA6B,GAAG,CAAC,MAAM,IAAI,IAAI,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC;QAC3F,CAAC;QACD,OAAO,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC;IAC1B,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,EAAE,SAAS,EAAE,CAAC,EAAE,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;IACnF,CAAC;AACH,CAAC"}
+{"version":3,"file":"agent-write.js","sourceRoot":"","sources":["../../src/tools/agent-write.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACrF,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,cAAc,EAAE,MAAM,6CAA6C,CAAC;AAC7E,OAAO,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AAoD/D,SAAS,UAAU,CAAC,UAAkB,EAAE,IAAY;IAClD,OAAO,OAAO,CAAC,UAAU,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAC;AAC7C,CAAC;AAED;;mCAEmC;AACnC,SAAS,WAAW,CAClB,IAA6B,EAC7B,IAOC;IAED,MAAM,IAAI,GAAG,EAAE,GAAG,IAAI,EAAE,CAAC;IACzB,IAAI,IAAI,CAAC,WAAW,KAAK,SAAS;QAAE,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,WAAW,CAAC;IACxE,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS;QAAE,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC;IACtD,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS;QAAE,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;IACzD,IAAI,IAAI,CAAC,iBAAiB,KAAK,SAAS;QAAE,IAAI,CAAC,iBAAiB,GAAG,IAAI,CAAC,iBAAiB,CAAC;IAC1F,IAAI,IAAI,CAAC,aAAa,KAAK,SAAS;QAAE,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC,aAAa,CAAC;IAC9E,IAAI,IAAI,CAAC,UAAU,KAAK,SAAS;QAAE,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,UAAU,CAAC;IACrE,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,IAAqB;IAC/C,MAAM,OAAO,GAAG,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC1C,IAAI,CAAC,OAAO,CAAC,EAAE;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC;IAErF,MAAM,GAAG,GAAG,UAAU,CAAC,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;IACnD,IAAI,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACpB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,UAAU,IAAI,CAAC,IAAI,kBAAkB,EAAE,CAAC;IACxF,CAAC;IAED,IAAI,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QACjC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,iBAAiB,EAAE,MAAM,EAAE,6BAA6B,EAAE,CAAC;IACzF,CAAC;IAED,MAAM,MAAM,GAAG,WAAW,CACxB,EAAE,EACF;QACE,WAAW,EAAE,IAAI,CAAC,WAAW;QAC7B,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,MAAM,EAAE,IAAI,CAAC,MAAM,IAAI,QAAQ;QAC/B,iBAAiB,EAAE,IAAI,CAAC,iBAAiB;QACzC,aAAa,EAAE,IAAI,CAAC,aAAa;QACjC,UAAU,EAAE,IAAI,CAAC,UAAU;KAC5B,CACF,CAAC;IACF,MAAM,aAAa,GAAG,mBAAmB,CAAC,MAAM,CAAC,CAAC;IAClD,IAAI,CAAC,aAAa,CAAC,EAAE,EAAE,CAAC;QACtB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,gBAAgB,EAAE,MAAM,EAAE,aAAa,CAAC,KAAK,EAAE,CAAC;IAC9E,CAAC;IAED,sEAAsE;IACtE,4EAA4E;IAC5E,4EAA4E;IAC5E,uEAAuE;IACvE,MAAM,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,YAAY,EAAE,WAAW,EAAE,QAAQ,EAAE,QAAQ,EAAE,aAAa,CAAC,CAAC;IAChG,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;QAC9B,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,gCAAgC,YAAY,EAAE,EAAE,CAAC;IACpG,CAAC;IACD,MAAM,QAAQ,GAAG,YAAY,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC;IAErD,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACpC,IAAI,CAAC;QACH,aAAa,CAAC,OAAO,CAAC,GAAG,EAAE,aAAa,CAAC,EAAE,QAAQ,CAAC,CAAC;QACrD,aAAa,CAAC,OAAO,CAAC,GAAG,EAAE,SAAS,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;QAClD,aAAa,CAAC,OAAO,CAAC,GAAG,EAAE,cAAc,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;QAC5D,aAAa,CAAC,OAAO,CAAC,GAAG,EAAE,aAAa,CAAC,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;QACnF,yEAAyE;QACzE,2EAA2E;QAC3E,yEAAyE;QACzE,0EAA0E;QAC1E,oEAAoE;QACpE,0EAA0E;QAC1E,sDAAsD;QACtD,aAAa,CAAC,OAAO,CAAC,GAAG,EAAE,gBAAgB,CAAC,EAAE,EAAE,CAAC,CAAC;IACpD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,4EAA4E;QAC5E,4EAA4E;QAC5E,wCAAwC;QACxC,MAAM,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAC9C,MAAM,GAAG,CAAC;IACZ,CAAC;IAED,OAAO;QACL,EAAE,EAAE,IAAI;QACR,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,YAAY,EAAE,CAAC,aAAa,EAAE,SAAS,EAAE,cAAc,EAAE,aAAa,EAAE,gBAAgB,CAAC;KAC1F,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,IAAqB;IAC/C,MAAM,OAAO,GAAG,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC1C,IAAI,CAAC,OAAO,CAAC,EAAE;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC;IAErF,MAAM,GAAG,GAAG,UAAU,CAAC,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;IACnD,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,EAAE,aAAa,CAAC,CAAC;IAC/C,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QAC5B,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,4BAA4B,IAAI,CAAC,IAAI,GAAG,EAAE,CAAC;IAC9F,CAAC;IAED,IAAI,IAAI,CAAC,SAAS,KAAK,SAAS,IAAI,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QACjE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,iBAAiB,EAAE,MAAM,EAAE,6BAA6B,EAAE,CAAC;IACzF,CAAC;IAED,IAAI,IAA6B,CAAC;IAClC,IAAI,CAAC;QACH,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,UAAU,EAAE,OAAO,CAAC,CAA4B,CAAC;IAClF,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO;YACL,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,gBAAgB;YACxB,MAAM,EAAE,2CAA2C,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE;SACtG,CAAC;IACJ,CAAC;IAED,MAAM,MAAM,GAAG,WAAW,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IACvC,MAAM,aAAa,GAAG,mBAAmB,CAAC,MAAM,CAAC,CAAC;IAClD,IAAI,CAAC,aAAa,CAAC,EAAE,EAAE,CAAC;QACtB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,gBAAgB,EAAE,MAAM,EAAE,aAAa,CAAC,KAAK,EAAE,CAAC;IAC9E,CAAC;IAED,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QAC5B,aAAa,CAAC,OAAO,CAAC,GAAG,EAAE,SAAS,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;QAClD,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAC1B,CAAC;IACD,IAAI,IAAI,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;QACjC,aAAa,CAAC,OAAO,CAAC,GAAG,EAAE,cAAc,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;QAC5D,OAAO,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;IAC/B,CAAC;IACD,aAAa,CAAC,UAAU,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;IAClE,OAAO,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;IAE5B,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,YAAY,EAAE,OAAO,EAAE,CAAC;AAC9D,CAAC;AAWD;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAAC,IAAiB;IAC7D,MAAM,OAAO,GAA2B;QACtC,cAAc,EAAE,kBAAkB;QAClC,uBAAuB,EAAE,IAAI,CAAC,SAAS;KACxC,CAAC;IACF,IAAI,IAAI,CAAC,eAAe;QAAE,OAAO,CAAC,0BAA0B,CAAC,GAAG,IAAI,CAAC,eAAe,CAAC;IAErF,MAAM,GAAG,GAAG,oBAAoB,IAAI,CAAC,YAAY,qBAAqB,IAAI,CAAC,IAAI,sBAAsB,IAAI,CAAC,SAAS,EAAE,CAAC;IACtH,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,IAAI,KAAK,CAAC;IACxC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC/F,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACZ,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;YAC9C,OAAO,EAAE,SAAS,EAAE,CAAC,EAAE,KAAK,EAAE,6BAA6B,GAAG,CAAC,MAAM,IAAI,IAAI,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC;QAC3F,CAAC;QACD,OAAO,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC;IAC1B,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,EAAE,SAAS,EAAE,CAAC,EAAE,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;IACnF,CAAC;AACH,CAAC"}