@rubytech/create-maxy-code 0.1.559 → 0.1.561

package/payload/platform/plugins/admin/mcp/dist/lib/roster-census.d.ts

@@ -3,12 +3,37 @@ export interface RosterCensusInput {
     agentsMdPath: string;
     /** `<accountDir>/specialists/agents` — the directory spawn-context reads. */
     specialistsAgentsDir: string;
+    /** Directories whose own `*.md` files are durable copies. Today just
+     *  `$PLATFORM_ROOT/templates/specialists/agents`. Required, not optional:
+     *  a caller that omitted them would report every live specialist as
+     *  undurable. */
+    durableDirs: string[];
+    /** Plugin-tree roots. For each, every `<root>/<plugin>/agents/*.md` is a
+     *  durable copy: the account tree (`store-skill`'s home for authored
+     *  agents), the platform tree, and premium-plugins. A premium agent's only
+     *  copy lives in its bundle and a reinstall re-delivers it, so omitting that
+     *  root would report five standing false positives on beacons alone. */
+    durablePluginRoots: string[];
+    /** `<installRoot>/premium-plugins`. Omitted, missing, or holding no bundle
+     *  directory yields an empty `bundleOrphans`: none of those states is
+     *  evidence that the account's whole premium set is orphaned. */
+    premiumPluginsDir?: string;
 }
 export interface RosterCensusResult {
     declared: number;
     dispatchable: number;
     /** Declared names with no `<name>.md` in the dispatch directory. */
     orphaned: string[];
+    /** Live specialist filenames, `.md` included, absent from every durable
+     *  root. Filenames rather than roster names because the durable copy is
+     *  stored under the filename, and a `--` agent's two differ. */
+    undurable: string[];
+    /** Task 2418 — basenames of `*--*.md` in the dispatch directory with no file
+     *  of that name under `<premiumPluginsDir>/<bundle>/agents/`. Dispatchable
+     *  today, with no bundle behind them. Walks the directory rather than the
+     *  roster, because dispatchability is a property of the directory
+     *  `spawn-context.ts` reads, not of what AGENTS.md advertises. */
+    bundleOrphans: string[];
 }
 export declare function runRosterCensus(input: RosterCensusInput): RosterCensusResult;
 //# sourceMappingURL=roster-census.d.ts.map

package/payload/platform/plugins/admin/mcp/dist/lib/roster-census.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"roster-census.d.ts","sourceRoot":"","sources":["../../src/lib/roster-census.ts"],"names":[],"mappings":"AAkBA,MAAM,WAAW,iBAAiB;IAChC,yEAAyE;IACzE,YAAY,EAAE,MAAM,CAAC;IACrB,6EAA6E;IAC7E,oBAAoB,EAAE,MAAM,CAAC;CAC9B;AAED,MAAM,WAAW,kBAAkB;IACjC,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,MAAM,CAAC;IACrB,oEAAoE;IACpE,QAAQ,EAAE,MAAM,EAAE,CAAC;CACpB;AAED,wBAAgB,eAAe,CAAC,KAAK,EAAE,iBAAiB,GAAG,kBAAkB,CAgB5E"}
+{"version":3,"file":"roster-census.d.ts","sourceRoot":"","sources":["../../src/lib/roster-census.ts"],"names":[],"mappings":"AAgCA,MAAM,WAAW,iBAAiB;IAChC,yEAAyE;IACzE,YAAY,EAAE,MAAM,CAAC;IACrB,6EAA6E;IAC7E,oBAAoB,EAAE,MAAM,CAAC;IAC7B;;;qBAGiB;IACjB,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB;;;;4EAIwE;IACxE,kBAAkB,EAAE,MAAM,EAAE,CAAC;IAC7B;;qEAEiE;IACjE,iBAAiB,CAAC,EAAE,MAAM,CAAC;CAC5B;AAED,MAAM,WAAW,kBAAkB;IACjC,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,MAAM,CAAC;IACrB,oEAAoE;IACpE,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB;;oEAEgE;IAChE,SAAS,EAAE,MAAM,EAAE,CAAC;IACpB;;;;sEAIkE;IAClE,aAAa,EAAE,MAAM,EAAE,CAAC;CACzB;AAyCD,wBAAgB,eAAe,CAAC,KAAK,EAAE,iBAAiB,GAAG,kBAAkB,CAgC5E"}

package/payload/platform/plugins/admin/mcp/dist/lib/roster-census.js

@@ -1,5 +1,40 @@
-import { existsSync, readFileSync } from "node:fs";
+import { existsSync, readFileSync, readdirSync } from "node:fs";
 import { join } from "node:path";
+/** `*.md` entries directly in `dir`. A missing directory is normal — not every
+ *  install carries premium-plugins — and contributes nothing. An unreadable one
+ *  is not: the throw propagates to the emit point, which reports
+ *  `[roster-census] error` rather than a short durable set, because a partial
+ *  set would name durable specialists as undurable. */
+function markdownIn(dir) {
+    if (!existsSync(dir))
+        return [];
+    return readdirSync(dir).filter((entry) => entry.endsWith(".md"));
+}
+function subdirs(dir) {
+    if (!existsSync(dir))
+        return [];
+    return readdirSync(dir, { withFileTypes: true })
+        .filter((entry) => entry.isDirectory())
+        .map((entry) => entry.name);
+}
+function findBundleOrphans(specialistsAgentsDir, premiumPluginsDir) {
+    if (!premiumPluginsDir)
+        return [];
+    const bundles = subdirs(premiumPluginsDir);
+    // No bundle resolvable, whether the root is missing or merely empty, is not
+    // evidence of a fleet of orphans: both are indistinguishable from a brand
+    // that legitimately ships none (paths.ts bundleMode defaults to 'none').
+    // Provisioning applies the identical guard, so the two surfaces never
+    // disagree. An unreadable root throws, the same doctrine as markdownIn.
+    if (bundles.length === 0)
+        return [];
+    // Any bundle's agents/ dir: `--` names are already bundle-unique, so this
+    // asks the same question as parsing the prefix without deriving meaning from
+    // a filename.
+    return markdownIn(specialistsAgentsDir)
+        .filter((file) => file.includes("--"))
+        .filter((file) => !bundles.some((b) => existsSync(join(premiumPluginsDir, b, "agents", file))));
+}
 export function runRosterCensus(input) {
     const body = existsSync(input.agentsMdPath)
         ? readFileSync(input.agentsMdPath, "utf8")
@@ -9,10 +44,24 @@ export function runRosterCensus(input) {
         declared.push(match[1]);
     }
     const orphaned = declared.filter((name) => !existsSync(join(input.specialistsAgentsDir, `${name}.md`)));
+    const durable = new Set();
+    for (const dir of input.durableDirs) {
+        for (const filename of markdownIn(dir))
+            durable.add(filename);
+    }
+    for (const root of input.durablePluginRoots) {
+        for (const plugin of subdirs(root)) {
+            for (const filename of markdownIn(join(root, plugin, "agents")))
+                durable.add(filename);
+        }
+    }
+    const undurable = markdownIn(input.specialistsAgentsDir).filter((filename) => !durable.has(filename));
     return {
         declared: declared.length,
         dispatchable: declared.length - orphaned.length,
         orphaned,
+        undurable,
+        bundleOrphans: findBundleOrphans(input.specialistsAgentsDir, input.premiumPluginsDir),
     };
 }
 //# sourceMappingURL=roster-census.js.map

package/payload/platform/plugins/admin/mcp/dist/lib/roster-census.js.map

@@ -1 +1 @@
-{"version":3,"file":"roster-census.js","sourceRoot":"","sources":["../../src/lib/roster-census.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AA+BjC,MAAM,UAAU,eAAe,CAAC,KAAwB;IACtD,MAAM,IAAI,GAAG,UAAU,CAAC,KAAK,CAAC,YAAY,CAAC;QACzC,CAAC,CAAC,YAAY,CAAC,KAAK,CAAC,YAAY,EAAE,MAAM,CAAC;QAC1C,CAAC,CAAC,EAAE,CAAC;IACP,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,QAAQ,CAAC,mCAAmC,CAAC,EAAE,CAAC;QACvE,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAC1B,CAAC;IACD,MAAM,QAAQ,GAAG,QAAQ,CAAC,MAAM,CAC9B,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,oBAAoB,EAAE,GAAG,IAAI,KAAK,CAAC,CAAC,CACtE,CAAC;IACF,OAAO;QACL,QAAQ,EAAE,QAAQ,CAAC,MAAM;QACzB,YAAY,EAAE,QAAQ,CAAC,MAAM,GAAG,QAAQ,CAAC,MAAM;QAC/C,QAAQ;KACT,CAAC;AACJ,CAAC"}
+{"version":3,"file":"roster-census.js","sourceRoot":"","sources":["../../src/lib/roster-census.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AAChE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAsEjC;;;;uDAIuD;AACvD,SAAS,UAAU,CAAC,GAAW;IAC7B,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,EAAE,CAAC;IAChC,OAAO,WAAW,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC;AACnE,CAAC;AAED,SAAS,OAAO,CAAC,GAAW;IAC1B,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,EAAE,CAAC;IAChC,OAAO,WAAW,CAAC,GAAG,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC;SAC7C,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC;SACtC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;AAChC,CAAC;AAED,SAAS,iBAAiB,CACxB,oBAA4B,EAC5B,iBAA0B;IAE1B,IAAI,CAAC,iBAAiB;QAAE,OAAO,EAAE,CAAC;IAClC,MAAM,OAAO,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAAC;IAC3C,4EAA4E;IAC5E,0EAA0E;IAC1E,yEAAyE;IACzE,sEAAsE;IACtE,wEAAwE;IACxE,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IACpC,0EAA0E;IAC1E,6EAA6E;IAC7E,cAAc;IACd,OAAO,UAAU,CAAC,oBAAoB,CAAC;SACpC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;SACrC,MAAM,CACL,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,iBAAiB,EAAE,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC,CACvF,CAAC;AACN,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,KAAwB;IACtD,MAAM,IAAI,GAAG,UAAU,CAAC,KAAK,CAAC,YAAY,CAAC;QACzC,CAAC,CAAC,YAAY,CAAC,KAAK,CAAC,YAAY,EAAE,MAAM,CAAC;QAC1C,CAAC,CAAC,EAAE,CAAC;IACP,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,QAAQ,CAAC,mCAAmC,CAAC,EAAE,CAAC;QACvE,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAC1B,CAAC;IACD,MAAM,QAAQ,GAAG,QAAQ,CAAC,MAAM,CAC9B,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,oBAAoB,EAAE,GAAG,IAAI,KAAK,CAAC,CAAC,CACtE,CAAC;IAEF,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;IAClC,KAAK,MAAM,GAAG,IAAI,KAAK,CAAC,WAAW,EAAE,CAAC;QACpC,KAAK,MAAM,QAAQ,IAAI,UAAU,CAAC,GAAG,CAAC;YAAE,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAChE,CAAC;IACD,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,kBAAkB,EAAE,CAAC;QAC5C,KAAK,MAAM,MAAM,IAAI,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;YACnC,KAAK,MAAM,QAAQ,IAAI,UAAU,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC;gBAAE,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACzF,CAAC;IACH,CAAC;IACD,MAAM,SAAS,GAAG,UAAU,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC,MAAM,CAC7D,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CACrC,CAAC;IAEF,OAAO;QACL,QAAQ,EAAE,QAAQ,CAAC,MAAM;QACzB,YAAY,EAAE,QAAQ,CAAC,MAAM,GAAG,QAAQ,CAAC,MAAM;QAC/C,QAAQ;QACR,SAAS;QACT,aAAa,EAAE,iBAAiB,CAAC,KAAK,CAAC,oBAAoB,EAAE,KAAK,CAAC,iBAAiB,CAAC;KACtF,CAAC;AACJ,CAAC"}

package/payload/platform/plugins/admin/skills/agent-builder/SKILL.md

@@ -96,18 +96,23 @@ Show the operator the complete file and ask them to review.
 ## Step 6: Install through specialist-management
 
 The agent persists as part of an admin-managed plugin: the same durable home `store-skill` uses,
-so it survives a reinstall and the agent and its skills stay together. `store-skill` already
-created that plugin when you built the agent's skills (canonical under the account, mirrored
-under the platform plugins tree). Write the composed file, named `{plugin}--{name}.md`, into the
-plugin's `agents/` directory in both places, so it is durable under the account and immediately
-visible in the platform mirror that `specialist-management` reads. Then follow
-`specialist-management`'s "Activate premium plugin agents" path to copy it into
-`specialists/agents/` and append the `- **specialists:{name}**: {description}` line to the admin
-`AGENTS.md`. Do not invent install logic; drive that existing path. If the agent bundles only
-existing skills, so no plugin was created, scaffold the plugin first the way `store-skill` does
-(a `PLUGIN.md` and the `.user-mirror` marker in both the account and mirror trees) before
+so it survives a reinstall and the agent and its skills stay together. That home is the account's
+own plugin tree, and it is the only one: operator plugins never live under
+`$PLATFORM_ROOT/plugins`, which is immutable.
+
+Write the composed file to `plugins/{plugin}/agents/{plugin}--{name}.md`. That copy is the
+durable one, and the live copy is only ever made by copying it, so no order of operations leaves
+a dispatchable agent that nothing can restore. `store-skill` already created the plugin when you
+built the agent's skills; if the agent bundles only existing skills, so no plugin was created,
+scaffold it first the way `store-skill` does — a `PLUGIN.md` under `plugins/{plugin}/` — before
 writing the agent file.
 
+Then follow `specialist-management`'s "Install an account-authored agent" path, which copies the
+durable file into `specialists/agents/` and appends the `- **specialists:{name}**: {description}`
+line to the admin `AGENTS.md`. Do not invent install logic, and never write an agent file
+straight into `specialists/agents/`: a live file with no durable copy behind it is exactly what
+this step exists to prevent.
+
 ## Step 7: Confirm
 
 Tell the operator:

package/payload/platform/plugins/admin/skills/agent-builder/references/agent-pattern.md

@@ -16,9 +16,12 @@ The roster splits along one line: what an agent is *for*.
   writing, data, coding. It owns a capability surface, not a single artefact. These ship in
   `platform/templates/specialists/agents/` and resolve as `specialists:<name>`.
 - **Vertical bundle agent.** A job title that owns one deliverable and the skills that produce
-  it: a negotiator owns the buyer-pipeline package, a quoter owns the priced quote. These ship
-  inside a premium plugin's `agents/` directory, named `{plugin}--{agent}.md`, and resolve as
-  `specialists:<name>`.
+  it: a negotiator owns the buyer-pipeline package, a quoter owns the priced quote. Named
+  `{plugin}--{agent}.md` and resolving as `specialists:<name>`, these have two homes. A
+  bundle-shipped one lives in its premium plugin's `agents/` directory. An operator-authored one
+  lives in the account's own `plugins/{plugin}/agents/`, the durable home `store-skill` uses;
+  that copy is what a reinstall preserves and what the live copy in `specialists/agents/` is
+  made from.
 
 `agent-builder` authors vertical bundle agents. The forcing question is "what one thing does
 this agent hand back?" If the honest answer is "several unrelated things", that is several

package/payload/platform/plugins/admin/skills/specialist-management/SKILL.md

@@ -9,6 +9,11 @@ Invoked by the admin agent directly.
 
 Manage specialist subagents at any time via conversation.
 
+Authoring a *new* agent from scratch is `agent-builder`, not this skill. That skill decides the
+deliverable, the model, the skills it owns and its tool allowlist, composes the file, and writes
+the durable copy; it then hands the finished agent back here to install. This skill installs,
+removes, and activates agents whose files already exist.
+
 ## Install a specialist
 
 1. Use Bash: `cp $PLATFORM_ROOT/templates/specialists/agents/{name}.md specialists/agents/{name}.md`
@@ -45,3 +50,24 @@ For each `.md` file in `$PLATFORM_ROOT/plugins/{plugin-name}/agents/`:
 4. Confirm removal to the user.
 
 Core specialists (files without `--` in the name) are never affected by premium plugin operations.
+
+## Account-authored plugin agents
+
+An agent authored through `agent-builder` lives in the account's own plugin tree at
+`plugins/{plugin-name}/agents/{plugin-name}--{agent-name}.md`. That copy is the durable one: it
+is what survives a reinstall, and it is the only source the live copy is made from. A file in
+`specialists/agents/` with nothing behind it in a durable tree cannot be restored by anything —
+the boot-time `[roster-census]` line names those in its `undurable=` field.
+
+### Install an account-authored agent
+
+For each `.md` file in `plugins/{plugin-name}/agents/`:
+
+1. Check whether `specialists/agents/{filename}` already exists — skip if so (idempotent).
+2. Use Bash: `cp plugins/{plugin-name}/agents/{filename} specialists/agents/{filename}`
+3. Extract the `name` and `description` fields from the copied file's YAML frontmatter.
+4. Read `agents/admin/AGENTS.md`. If it already contains `specialists:{name}`, skip. Otherwise append: `- **specialists:{name}**: {description}` using Edit.
+5. Confirm each installed specialist to the user — active from next session start.
+
+The copy source is always the durable file. Never compose an agent directly into
+`specialists/agents/`: that produces a dispatchable agent nothing can restore.

package/payload/platform/plugins/admin/skills/whats-new/SKILL.md

@@ -9,6 +9,16 @@ Invoked by the admin agent directly.
 
 This is the platform's release timeline, newest first. Each entry shows the date it shipped and the version it shipped in, so you can tell the operator how current their install is. To compare, read the installed version from `capabilities-here` and match it against the versions below. Keep answers high level and in plain English; this is a summary, not a full commit log.
 
+## 2026-08-04 (0.1.561)
+
+- A public Telegram bot now answers. Messages were arriving and the conversation staying alive, but nothing the visitor sent ever became a turn, so a public bot received everything and replied to nothing. Public bots now open through the same locked-down path the platform already uses elsewhere: the ordinary setup with only the reply tool available.
+
+## 2026-08-04 (0.1.560)
+
+- A specialist you wrote is no longer lost if it is deleted. Authoring now always leaves a durable copy in the plugin that owns it, and the boot-time check names any live specialist that has no such copy.
+- A specialist whose plugin has been removed no longer stays dispatchable forever. Upgrades now re-check those files instead of skipping them unconditionally, and the boot-time check names any that can still be dispatched with nothing behind them.
+- A message sent to a public conversation now becomes a turn. A connection the platform needs in order to hand an incoming message to the assistant had been removed from public conversations as unnecessary; without it the message arrived and was never acted on.
+
 ## 2026-08-04 (0.1.559)
 
 - Upgrading no longer deletes specialists. Every upgrade was removing any specialist that did not ship with the install, including ones written for you, and never putting them back. An upgrade now only replaces what it actually ships, and reports at boot any specialist the roster cannot dispatch.

package/payload/platform/scripts/__tests__/authored-agent-durable-copy.test.sh

@@ -0,0 +1,78 @@
+#!/usr/bin/env bash
+# Task 2417 — the two admin skills that document specialist authoring must
+# never document a live copy that is not made from a durable one.
+#
+# Task 1962 (ba626832b) dropped the platform mirror. agent-builder was never
+# updated: it kept telling the agent to write the composed file "in both
+# places" and to scaffold a `.user-mirror` marker in a mirror tree that no
+# longer exists, then handed install to a specialist-management flow sourcing
+# from $PLATFORM_ROOT/plugins/{plugin}/agents/ — a root an account-authored
+# plugin never occupies. Every documented step after "compose the file" named a
+# directory that was not there, so the agent improvised a bare Write into
+# specialists/agents/ and the durable copy was never made. These are the four
+# checkable shapes of that regression.
+set -u
+ROOT="$(cd "$(dirname "$0")/../../.." && pwd)"
+AB="$ROOT/platform/plugins/admin/skills/agent-builder/SKILL.md"
+SM="$ROOT/platform/plugins/admin/skills/specialist-management/SKILL.md"
+# agent-builder Step 0 declares this reference authoritative and forbids
+# paraphrasing it, so a wrong home here overrides Step 6 rather than merely
+# duplicating it.
+AP="$ROOT/platform/plugins/admin/skills/agent-builder/references/agent-pattern.md"
+PASS=0; FAIL=0
+
+for f in "$AB" "$SM" "$AP"; do
+  [[ -f "$f" ]] || { echo "FAIL: missing $f" >&2; exit 1; }
+done
+
+# 1. Every documented `cp` into specialists/agents/ sources from a durable root.
+bad=$(grep -hoE 'cp [^`]*specialists/agents/[^`]*' "$AB" "$SM" "$AP" \
+      | grep -vE 'cp \$PLATFORM_ROOT/templates/specialists/agents/' \
+      | grep -vE 'cp \$PLATFORM_ROOT/plugins/\{plugin-name\}/agents/' \
+      | grep -vE 'cp plugins/\{plugin-name\}/agents/' || true)
+if [[ -z "$bad" ]]; then
+  echo "PASS: every documented cp into specialists/agents/ sources from a durable root"; PASS=$((PASS+1))
+else
+  echo "FAIL: cp into specialists/agents/ from a non-durable source:" >&2
+  printf '  %s\n' "$bad" >&2; FAIL=$((FAIL+1))
+fi
+
+# 2. The account-authored install flow exists. Without this, check 1 passes
+#    vacuously once the flow is deleted.
+if grep -qE 'cp plugins/\{plugin-name\}/agents/' "$SM"; then
+  echo "PASS: specialist-management documents the account-authored install flow"; PASS=$((PASS+1))
+else
+  echo "FAIL: specialist-management has no cp from plugins/{plugin-name}/agents/" >&2; FAIL=$((FAIL+1))
+fi
+
+# 3. No platform mirror. 1962 removed it; a reference to it here is stale by
+#    construction and sends the agent to a tree that is not there. Matched by
+#    the three shapes the stale text actually used, not by the bare word:
+#    "mirrors the reference agent.yaml" is ordinary English and must pass.
+MIRROR='\.user-mirror|platform mirror|mirror tree|mirrored under'
+if ! grep -qiE "$MIRROR" "$AB" "$SM" "$AP"; then
+  echo "PASS: no skill in the authoring path references a platform mirror"; PASS=$((PASS+1))
+else
+  echo "FAIL: a platform-mirror reference survives (1962 removed the mirror):" >&2
+  grep -inE "$MIRROR" "$AB" "$SM" "$AP" >&2; FAIL=$((FAIL+1))
+fi
+
+# 4. agent-builder names the account plugin tree as the durable home.
+if grep -qE 'plugins/\{plugin\}/agents/' "$AB"; then
+  echo "PASS: agent-builder names the account plugin tree as the durable home"; PASS=$((PASS+1))
+else
+  echo "FAIL: agent-builder does not name plugins/{plugin}/agents/ as the durable home" >&2; FAIL=$((FAIL+1))
+fi
+
+# 5. So does the reference Step 0 defers to. Without this, agent-pattern.md can
+#    say an authored agent lives in a premium bundle — a tree the account cannot
+#    write — and that overrides Step 6, because Step 0 forbids paraphrasing it.
+if grep -qE 'plugins/\{plugin\}/agents/' "$AP"; then
+  echo "PASS: agent-pattern names the account plugin tree for an authored agent"; PASS=$((PASS+1))
+else
+  echo "FAIL: agent-pattern does not name plugins/{plugin}/agents/ as an authored agent's home" >&2; FAIL=$((FAIL+1))
+fi
+
+echo "---"
+echo "authored-agent-durable-copy: $PASS passed, $FAIL failed"
+[[ $FAIL -eq 0 ]]

package/payload/platform/scripts/__tests__/provision-bundle-orphan.test.sh

@@ -0,0 +1,132 @@
+#!/usr/bin/env bash
+# Task 2418 — a `--` agent whose premium bundle is no longer on the install tree
+# stays dispatchable forever.
+#
+# 2415's retirement loop deletes only what its manifest claims, and the manifest
+# names only files copied from $TEMPLATES_DIR, so a premium `--` file is never in
+# it. Nothing noticed when the bundle behind it left the tree: on beacons,
+# writer-craft--manuscript-reviewer.md was dispatchable from May 13 onward with
+# no writer-craft bundle under premium-plugins/.
+set -uo pipefail
+SCRIPT_DIR_T="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+PLAT_SCRIPTS="$SCRIPT_DIR_T/.."
+REAL_PROJECT="$(cd "$PLAT_SCRIPTS/.." && pwd)"
+PASS=0; FAIL=0; FAILED=()
+assert_absent()  { if [ ! -e "$1" ]; then PASS=$((PASS+1)); else FAIL=$((FAIL+1)); FAILED+=("$2: expected absent [$1]"); fi; }
+assert_present() { if [ -e "$1" ];   then PASS=$((PASS+1)); else FAIL=$((FAIL+1)); FAILED+=("$2: expected present [$1]"); fi; }
+assert_eq()      { if [ "$1" = "$2" ]; then PASS=$((PASS+1)); else FAIL=$((FAIL+1)); FAILED+=("$3: expected [$2] got [$1]"); fi; }
+
+. "$PLAT_SCRIPTS/lib/provision-account-dir.sh"
+export SCRIPT_DIR="$PLAT_SCRIPTS"
+export USERS_FILE="/nonexistent/users.json"
+
+# A temp platform/ whose sibling premium-plugins/ this test controls. plugins and
+# config are symlinked: provisioning reads both, and neither is under test here.
+T=$(mktemp -d)
+mkdir -p "$T/platform" "$T/premium-plugins/present-bundle/agents"
+cp -R "$REAL_PROJECT/templates" "$T/platform/templates"
+ln -s "$REAL_PROJECT/plugins" "$T/platform/plugins"
+ln -s "$REAL_PROJECT/config"  "$T/platform/config"
+export PROJECT_DIR="$T/platform"
+export TEMPLATES_DIR="$T/platform/templates"
+
+ACCT="$T/acct"
+ACCT_ID="24182418-2418-2418-2418-241824182418"
+ORPHANED="$ACCT/specialists/agents-orphaned"
+
+# One `--` agent whose bundle ships it, one whose bundle is gone.
+mkdir -p "$ACCT/specialists/agents"
+printf -- '---\nname: keeper\n---\nShipped by a bundle that is still installed.\n' \
+  > "$T/premium-plugins/present-bundle/agents/present-bundle--keeper.md"
+cp "$T/premium-plugins/present-bundle/agents/present-bundle--keeper.md" \
+   "$ACCT/specialists/agents/present-bundle--keeper.md"
+printf -- '---\nname: orphan\n---\nIts bundle is no longer on the tree.\n' \
+  > "$ACCT/specialists/agents/gone-bundle--orphan.md"
+
+# --- Run 1 — the orphan is reconciled, the keeper is not. --------------------
+OUT1="$(provision_account_dir "$ACCT" "$ACCT_ID" "house" 2>&1)"
+
+assert_present "$ACCT/specialists/agents/present-bundle--keeper.md" "run1:bundle-present-survives"
+assert_absent  "$ACCT/specialists/agents/gone-bundle--orphan.md"    "run1:orphan-undispatchable"
+assert_present "$ORPHANED/gone-bundle--orphan.md"                   "run1:orphan-preserved"
+assert_absent  "$ACCT/specialists/agents-disabled/gone-bundle--orphan.md" "run1:not-in-disable-quarantine"
+assert_eq "$(printf '%s' "$OUT1" | grep -c 'op=specialist-orphaned name=gone-bundle--orphan.md reason=bundle-absent')" "1" "run1:orphan-named"
+assert_eq "$(printf '%s' "$OUT1" | grep -c 'op=specialist-orphan-reconcile orphaned=1')" "1" "run1:count-one"
+
+# --- Run 2 — nothing left to reconcile: zero is still logged. ----------------
+OUT2="$(provision_account_dir "$ACCT" "$ACCT_ID" "house" 2>&1)"
+assert_eq "$(printf '%s' "$OUT2" | grep -c 'op=specialist-orphan-reconcile orphaned=0')" "1" "run2:zero-count-logged"
+assert_eq "$(printf '%s' "$OUT2" | grep -c 'op=specialist-orphaned name=')" "0" "run2:nothing-reconciled"
+assert_present "$ACCT/specialists/agents/present-bundle--keeper.md" "run2:keeper-still-dispatchable"
+
+# --- An orphan of a name already quarantined replaces it. -------------------
+# The copy leaving the dispatch directory is the one that was live, so it is the
+# copy worth keeping. Pinned because a later change to `mv -n` would silently
+# keep the stale one and contradict the contract doc.
+printf -- '---\nname: orphan\n---\nSTALE QUARANTINED COPY\n' > "$ORPHANED/gone-bundle--orphan.md"
+printf -- '---\nname: orphan\n---\nLIVE COPY\n' \
+  > "$ACCT/specialists/agents/gone-bundle--orphan.md"
+provision_account_dir "$ACCT" "$ACCT_ID" "house" >/dev/null 2>&1
+assert_eq "$(grep -c 'LIVE COPY' "$ORPHANED/gone-bundle--orphan.md")"  "1" "requarantine:live-copy-kept"
+assert_eq "$(grep -c 'STALE' "$ORPHANED/gone-bundle--orphan.md")"      "0" "requarantine:stale-copy-replaced"
+
+# --- Run 3 — premium root present but holding no bundles. -------------------
+# Indistinguishable from a brand that ships none (paths.ts bundleMode defaults
+# to 'none') and from a partial install. Reconciling here would strip the whole
+# premium set off the account, so it reconciles nothing, exactly as 2415 refuses
+# to read zero templates as twelve simultaneous retirements.
+rm -rf "$T/premium-plugins/present-bundle"
+OUT3="$(provision_account_dir "$ACCT" "$ACCT_ID" "house" 2>&1)"
+assert_present "$ACCT/specialists/agents/present-bundle--keeper.md" "run3:empty-premium-root-moves-nothing"
+assert_eq "$(printf '%s' "$OUT3" | grep -c 'op=specialist-orphan-reconcile orphaned=0 reason=no-premium-bundles')" "1" "run3:loud-line"
+assert_eq "$(printf '%s' "$OUT3" | grep -c 'op=specialist-orphaned name=')" "0" "run3:no-reconciliations"
+
+# --- Run 4 — premium root missing entirely. Same answer, same reason. --------
+rm -rf "$T/premium-plugins"
+OUT4="$(provision_account_dir "$ACCT" "$ACCT_ID" "house" 2>&1)"
+assert_present "$ACCT/specialists/agents/present-bundle--keeper.md" "run4:no-premium-root-moves-nothing"
+assert_eq "$(printf '%s' "$OUT4" | grep -c 'op=specialist-orphan-reconcile orphaned=0 reason=no-premium-bundles')" "1" "run4:loud-line"
+assert_eq "$(printf '%s' "$OUT4" | grep -c 'op=specialist-orphaned name=')" "0" "run4:no-reconciliations"
+
+rm -rf "$T"
+
+# --- The install path runs under `set -euo pipefail`; this suite does not. ---
+# setup-account.sh:17 sets all three and calls provision_account_dir at :63, so
+# an `&&` list whose test fails could abort a real install where it cannot abort
+# here. Both new branches end in one: the `[ -d "$_b" ]` bundle count and the
+# `[ "$_found" = 1 ] && continue` miss. A subshell running the real options is
+# the only place that difference is visible.
+set_e_case() {
+  local premium_state="$1" expect_moved="$2" label="$3"
+  local out rc
+  out="$(
+    set -euo pipefail
+    . "$PLAT_SCRIPTS/lib/provision-account-dir.sh"
+    export SCRIPT_DIR="$PLAT_SCRIPTS" USERS_FILE="/nonexistent/users.json"
+    S=$(mktemp -d)
+    mkdir -p "$S/platform"
+    cp -R "$REAL_PROJECT/templates" "$S/platform/templates"
+    ln -s "$REAL_PROJECT/plugins" "$S/platform/plugins"
+    ln -s "$REAL_PROJECT/config"  "$S/platform/config"
+    export PROJECT_DIR="$S/platform" TEMPLATES_DIR="$S/platform/templates"
+    [ "$premium_state" = "with-bundle" ] && {
+      mkdir -p "$S/premium-plugins/present-bundle/agents"
+      printf -- '---\n' > "$S/premium-plugins/present-bundle/agents/present-bundle--keeper.md"
+    }
+    A="$S/acct"; mkdir -p "$A/specialists/agents"
+    printf -- '---\nname: orphan\n---\n' > "$A/specialists/agents/gone-bundle--orphan.md"
+    provision_account_dir "$A" "24182418-2418-2418-2418-241824182418" "house" >/dev/null 2>&1
+    [ -f "$A/specialists/agents-orphaned/gone-bundle--orphan.md" ] && printf 'moved' || printf 'kept'
+    rm -rf "$S"
+  )"; rc=$?
+  assert_eq "$rc"  "0"              "$label:no-set-e-abort"
+  assert_eq "$out" "$expect_moved"  "$label:outcome"
+}
+
+# No premium root: the guard branch, where the bundle count test never matches.
+set_e_case "bare"        "kept"  "set-e:no-premium-root"
+# A bundle present but not shipping this file: the `_found=0` reconcile branch.
+set_e_case "with-bundle" "moved" "set-e:orphan-moved"
+
+echo "PASS=$PASS FAIL=$FAIL"
+if [ "$FAIL" -gt 0 ]; then printf '%s\n' "${FAILED[@]}"; exit 1; fi

package/payload/platform/scripts/lib/provision-account-dir.sh

@@ -373,6 +373,53 @@ for n in names:
     fi
   fi
 
+  # Task 2418 — a `--` agent whose bundle has left the install tree stays
+  # dispatchable forever. The retirement loop above deletes only what the
+  # manifest claims, and the manifest names only files copied from
+  # $TEMPLATES_DIR, so a premium `--` file is never in it and nothing notices
+  # when its bundle goes. Measured on beacons: writer-craft--manuscript-reviewer
+  # dispatchable since May 13 with no writer-craft bundle under premium-plugins/.
+  #
+  # MOVE, never delete. The bundle is gone, so unlike a retired template there is
+  # nothing to restore from and this may be the only copy on the machine. It does
+  # NOT go to agents-disabled/: that directory is paired with agents-disabled.json
+  # and a file there with no store entry is exactly the drift described above.
+  #
+  # Runs AFTER the disabled block so that in the drift state (store names it,
+  # file still live) the disable wins and the store and its directory agree.
+  local _premium_root="$PROJECT_DIR/../premium-plugins"
+  local _bundle_count=0 _b
+  for _b in "$_premium_root"/*/; do
+    [ -d "$_b" ] && _bundle_count=$((_bundle_count + 1))
+  done
+  if [ "$_bundle_count" -eq 0 ]; then
+    # No bundle resolvable, whether the root is missing or merely empty. Both
+    # make every `--` file test as orphaned, and both are indistinguishable from
+    # a brand that legitimately ships none (paths.ts bundleMode defaults to
+    # 'none'). Acting would strip the account's whole premium set. Same doctrine
+    # as no-templates-on-disk above.
+    echo "  op=specialist-orphan-reconcile orphaned=0 reason=no-premium-bundles"
+  else
+    local _orphaned=0 _cand _base _twin _found
+    for _cand in "$ACCOUNT_DIR/specialists/agents/"*--*.md; do
+      [ -f "$_cand" ] || continue
+      _base="$(basename "$_cand")"
+      # Any bundle's agents/ dir. `--` names are already bundle-unique, so this
+      # answers the same question as parsing the prefix, without reintroducing a
+      # filename-derived predicate.
+      _found=0
+      for _twin in "$_premium_root"/*/agents/"$_base"; do
+        [ -f "$_twin" ] && { _found=1; break; }
+      done
+      [ "$_found" = 1 ] && continue
+      mkdir -p "$ACCOUNT_DIR/specialists/agents-orphaned"
+      mv -f "$_cand" "$ACCOUNT_DIR/specialists/agents-orphaned/$_base"
+      echo "  op=specialist-orphaned name=$_base reason=bundle-absent"
+      _orphaned=$((_orphaned + 1))
+    done
+    echo "  op=specialist-orphan-reconcile orphaned=$_orphaned"
+  fi
+
   rm -f "$ACCOUNT_DIR/.claude/agents/"*.md 2>/dev/null || true
 
   # SOUL.md — user-controlled. Only create if missing. Never overwrite.

package/payload/platform/services/claude-session-manager/dist/http-server.d.ts

@@ -15,10 +15,14 @@ import { TelegramChannelStore } from './telegram-channel-store.js';
  *  widened this position to allow `undefined` because rc-spawn's role was
  *  absent for a non-admin/non-public request; null now means "the body named
  *  none", and the handler resolves it against the prior sidecar before
- *  deciding whether that is an error. `passive` is not accepted here:
- *  rc-spawn composes no persona at all (its --append-system-prompt segments
- *  are reseat / voice / specialist-domains / authenticated-identity
- *  fragments, never composeAppendSystemPrompt). */
+ *  deciding whether that is an error. `passive` is not accepted here: it is a
+ *  /public-spawn persona role, resolved at that boundary from role:'public'
+ *  plus the passive flag, and no client may POST it.
+ *
+ *  Task 2423 — rc-spawn DOES compose a persona now, for role:'public' only: the
+ *  named agent's IDENTITY/SOUL/KNOWLEDGE via composeAppendSystemPrompt, the same
+ *  composer /public-spawn uses. An admin spawn is unchanged and still composes
+ *  only reseat / voice / specialist-domains / authenticated-identity fragments. */
 export declare function parseRcSpawnRole(body: {
     role?: unknown;
 }): Extract<AgentRole, 'admin' | 'public'> | null;

package/payload/platform/services/claude-session-manager/dist/http-server.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"http-server.d.ts","sourceRoot":"","sources":["../src/http-server.ts"],"names":[],"mappings":"AAqBA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAA;AAoB3B,OAAO,KAAK,EAAU,SAAS,EAAW,MAAM,YAAY,CAAA;AAK5D,OAAO,EAkBL,KAAK,SAAS,EAEf,MAAM,kBAAkB,CAAA;AAqBzB,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAA;AACxD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAA;AAoBlD,OAAO,KAAK,EAAE,SAAS,EAAyB,MAAM,iBAAiB,CAAA;AACvE,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,8BAA8B,CAAA;AAEzE,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAA;AAC1D,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAA;AAE3D,OAAO,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAA;AAC9D,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAA;AACtD,OAAO,EAAE,mBAAmB,EAAE,MAAM,4BAA4B,CAAA;AAChE,OAAO,EAAE,oBAAoB,EAAE,MAAM,6BAA6B,CAAA;AAQlE;;;;;;;mDAOmD;AACnD,wBAAgB,gBAAgB,CAC9B,IAAI,EAAE;IAAE,IAAI,CAAC,EAAE,OAAO,CAAA;CAAE,GACvB,OAAO,CAAC,SAAS,EAAE,OAAO,GAAG,QAAQ,CAAC,GAAG,IAAI,CAE/C;AAED;;;;;;;;;;2EAU2E;AAC3E,wBAAgB,cAAc,CAC5B,IAAI,EAAE;IAAE,IAAI,CAAC,EAAE,OAAO,CAAC;IAAC,OAAO,CAAC,EAAE,OAAO,CAAA;CAAE,EAC3C,UAAU,EAAE,MAAM,GAAG,SAAS,GAC7B;IAAE,IAAI,EAAE,SAAS,CAAC;IAAC,SAAS,EAAE,SAAS,CAAA;CAAE,GAAG,IAAI,CAOlD;AAsFD,eAAO,MAAM,kBAAkB,QAA2B,CAAA;AAS1D,eAAO,MAAM,4BAA4B,QAAS,CAAA;AAIlD,MAAM,WAAW,QAAS,SAAQ,IAAI,CAAC,SAAS,EAAE,gBAAgB,GAAG,SAAS,CAAC;IAC7E;;qEAEiE;IACjE,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,OAAO,EAAE,SAAS,CAAA;IAClB;;oEAEgE;IAChE,qBAAqB,CAAC,EAAE,qBAAqB,CAAA;IAC7C,WAAW,EAAE,MAAM,CAAA;IACnB,iBAAiB,EAAE,MAAM,CAAA;IACzB,kBAAkB,EAAE,WAAW,CAAA;IAC/B,eAAe,EAAE,aAAa,CAAA;IAC9B;kFAC8E;IAC9E,WAAW,EAAE,kBAAkB,CAAA;IAC/B;;gFAE4E;IAC5E,cAAc,EAAE,cAAc,CAAA;IAC9B;;;6BAGyB;IACzB,mBAAmB,CAAC,EAAE,mBAAmB,CAAA;IACzC;;sBAEkB;IAClB,UAAU,CAAC,EAAE,UAAU,CAAA;IACvB;;;sCAGkC;IAClC,oBAAoB,CAAC,EAAE,oBAAoB,CAAA;IAC3C;;gFAE4E;IAC5E,gBAAgB,CAAC,EAAE,MAAM,CAAA;IACzB;;;4EAGwE;IACxE,YAAY,CAAC,EAAE,MAAM,iBAAiB,GAAG,IAAI,CAAA;CAC9C;AAsFD;;;;;;mEAMmE;AACnE,wBAAgB,kBAAkB,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,EAAE,CAiC9D;AAMD;;;;;;iBAMiB;AACjB,wBAAgB,yBAAyB,CAAC,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAmCvF;AAID;;;;;;yBAMyB;AACzB,wBAAgB,cAAc,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAiCzD;AAwCD,wBAAgB,eAAe,CAAC,aAAa,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,EAAE,CAEpG;AAgBD,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAE1D;AAUD,wBAAgB,2BAA2B,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,GAAG,MAAM,CAMvE;AAMD,wBAAgB,gBAAgB,CAC9B,SAAS,EAAE,MAAM,GAAG,IAAI,EACxB,OAAO,EAAE,MAAM,EACf,YAAY,EAAE,MAAM,EACpB,YAAY,EAAE,MAAM,EACpB,QAAQ,EAAE,MAAM,GAAG,IAAI,GACtB,MAAM,CAER;AAkCD,wBAAgB,0BAA0B,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE,SAAS,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAe5F;AAiGD,wBAAgB,6BAA6B,CAAC,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,GAAG,IAAI,CASvG;AAUD,wBAAgB,6BAA6B,CAC3C,IAAI,EAAE,QAAQ,EACd,QAAQ,EAAE,MAAM,EAChB,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,OAAO,EAChB,gBAAgB,EAAE,OAAO,GACxB,IAAI,CA4BN;AAkED;;;kEAGkE;AAClE,MAAM,MAAM,OAAO,GAAG,IAAI,GAAG;IAC3B,2BAA2B,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;IACpD;;;+CAG2C;IAC3C,sBAAsB,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;CAChD,CAAA;AA8CD,wBAAgB,YAAY,CAAC,IAAI,EAAE,QAAQ,GAAG,OAAO,CAokHpD"}
+{"version":3,"file":"http-server.d.ts","sourceRoot":"","sources":["../src/http-server.ts"],"names":[],"mappings":"AAqBA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAA;AAoB3B,OAAO,KAAK,EAAU,SAAS,EAAW,MAAM,YAAY,CAAA;AAK5D,OAAO,EAkBL,KAAK,SAAS,EAEf,MAAM,kBAAkB,CAAA;AAqBzB,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAA;AACxD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAA;AAoBlD,OAAO,KAAK,EAAE,SAAS,EAAyB,MAAM,iBAAiB,CAAA;AACvE,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,8BAA8B,CAAA;AAEzE,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAA;AAC1D,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAA;AAE3D,OAAO,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAA;AAC9D,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAA;AACtD,OAAO,EAAE,mBAAmB,EAAE,MAAM,4BAA4B,CAAA;AAChE,OAAO,EAAE,oBAAoB,EAAE,MAAM,6BAA6B,CAAA;AAQlE;;;;;;;;;;;mFAWmF;AACnF,wBAAgB,gBAAgB,CAC9B,IAAI,EAAE;IAAE,IAAI,CAAC,EAAE,OAAO,CAAA;CAAE,GACvB,OAAO,CAAC,SAAS,EAAE,OAAO,GAAG,QAAQ,CAAC,GAAG,IAAI,CAE/C;AAED;;;;;;;;;;2EAU2E;AAC3E,wBAAgB,cAAc,CAC5B,IAAI,EAAE;IAAE,IAAI,CAAC,EAAE,OAAO,CAAC;IAAC,OAAO,CAAC,EAAE,OAAO,CAAA;CAAE,EAC3C,UAAU,EAAE,MAAM,GAAG,SAAS,GAC7B;IAAE,IAAI,EAAE,SAAS,CAAC;IAAC,SAAS,EAAE,SAAS,CAAA;CAAE,GAAG,IAAI,CAOlD;AAsFD,eAAO,MAAM,kBAAkB,QAA2B,CAAA;AAS1D,eAAO,MAAM,4BAA4B,QAAS,CAAA;AAIlD,MAAM,WAAW,QAAS,SAAQ,IAAI,CAAC,SAAS,EAAE,gBAAgB,GAAG,SAAS,CAAC;IAC7E;;qEAEiE;IACjE,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,OAAO,EAAE,SAAS,CAAA;IAClB;;oEAEgE;IAChE,qBAAqB,CAAC,EAAE,qBAAqB,CAAA;IAC7C,WAAW,EAAE,MAAM,CAAA;IACnB,iBAAiB,EAAE,MAAM,CAAA;IACzB,kBAAkB,EAAE,WAAW,CAAA;IAC/B,eAAe,EAAE,aAAa,CAAA;IAC9B;kFAC8E;IAC9E,WAAW,EAAE,kBAAkB,CAAA;IAC/B;;gFAE4E;IAC5E,cAAc,EAAE,cAAc,CAAA;IAC9B;;;6BAGyB;IACzB,mBAAmB,CAAC,EAAE,mBAAmB,CAAA;IACzC;;sBAEkB;IAClB,UAAU,CAAC,EAAE,UAAU,CAAA;IACvB;;;sCAGkC;IAClC,oBAAoB,CAAC,EAAE,oBAAoB,CAAA;IAC3C;;gFAE4E;IAC5E,gBAAgB,CAAC,EAAE,MAAM,CAAA;IACzB;;;4EAGwE;IACxE,YAAY,CAAC,EAAE,MAAM,iBAAiB,GAAG,IAAI,CAAA;CAC9C;AAsFD;;;;;;mEAMmE;AACnE,wBAAgB,kBAAkB,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,EAAE,CAiC9D;AAMD;;;;;;iBAMiB;AACjB,wBAAgB,yBAAyB,CAAC,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAmCvF;AAID;;;;;;yBAMyB;AACzB,wBAAgB,cAAc,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAiCzD;AAwCD,wBAAgB,eAAe,CAAC,aAAa,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,EAAE,CAEpG;AAgBD,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAE1D;AAUD,wBAAgB,2BAA2B,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,GAAG,MAAM,CAMvE;AAMD,wBAAgB,gBAAgB,CAC9B,SAAS,EAAE,MAAM,GAAG,IAAI,EACxB,OAAO,EAAE,MAAM,EACf,YAAY,EAAE,MAAM,EACpB,YAAY,EAAE,MAAM,EACpB,QAAQ,EAAE,MAAM,GAAG,IAAI,GACtB,MAAM,CAER;AAkCD,wBAAgB,0BAA0B,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE,SAAS,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAe5F;AAiGD,wBAAgB,6BAA6B,CAAC,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,GAAG,IAAI,CASvG;AAUD,wBAAgB,6BAA6B,CAC3C,IAAI,EAAE,QAAQ,EACd,QAAQ,EAAE,MAAM,EAChB,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,OAAO,EAChB,gBAAgB,EAAE,OAAO,GACxB,IAAI,CA4BN;AAkED;;;kEAGkE;AAClE,MAAM,MAAM,OAAO,GAAG,IAAI,GAAG;IAC3B,2BAA2B,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;IACpD;;;+CAG2C;IAC3C,sBAAsB,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;CAChD,CAAA;AA8CD,wBAAgB,YAAY,CAAC,IAAI,EAAE,QAAQ,GAAG,OAAO,CA2mHpD"}

package/payload/platform/services/claude-session-manager/dist/http-server.js

@@ -50,7 +50,7 @@ import { emitRcLife } from './rc-life.js';
 import { createRcChildLog } from './rc-child-log.js';
 // Task 1214 — the admin voice-section reader, injected into the rc-spawn
 // --append-system-prompt for channel-bound admin sessions.
-import { extractVoiceSection, renderSpecialistDomains } from './system-prompt.js';
+import { extractVoiceSection, renderSpecialistDomains, composeAppendSystemPrompt } from './system-prompt.js';
 import { readSpecialistRoster } from './specialist-roster.js';
 import { readJsonlSession, readJsonlSessionAtPath } from './jsonl-enumerator.js';
 import { computeMetering } from './session-metering.js';
@@ -68,10 +68,14 @@ const ROLES = ['admin', 'public'];
  *  widened this position to allow `undefined` because rc-spawn's role was
  *  absent for a non-admin/non-public request; null now means "the body named
  *  none", and the handler resolves it against the prior sidecar before
- *  deciding whether that is an error. `passive` is not accepted here:
- *  rc-spawn composes no persona at all (its --append-system-prompt segments
- *  are reseat / voice / specialist-domains / authenticated-identity
- *  fragments, never composeAppendSystemPrompt). */
+ *  deciding whether that is an error. `passive` is not accepted here: it is a
+ *  /public-spawn persona role, resolved at that boundary from role:'public'
+ *  plus the passive flag, and no client may POST it.
+ *
+ *  Task 2423 — rc-spawn DOES compose a persona now, for role:'public' only: the
+ *  named agent's IDENTITY/SOUL/KNOWLEDGE via composeAppendSystemPrompt, the same
+ *  composer /public-spawn uses. An admin spawn is unchanged and still composes
+ *  only reseat / voice / specialist-domains / authenticated-identity fragments. */
 export function parseRcSpawnRole(body) {
     return body.role === 'admin' || body.role === 'public' ? body.role : null;
 }
@@ -2798,6 +2802,11 @@ export function buildHttpApp(deps) {
         // sidecar, so the refusal is not here; it is where both sources have been
         // consulted, just below `priorSidecar`.
         const rcRole = parseRcSpawnRole(body);
+        // Task 2423 — the agent a public bot answers as. Same validation
+        // /public-spawn applies, so one grammar governs both doors.
+        const rcAgentSlug = typeof body.agentSlug === 'string' && /^[A-Za-z0-9_-]{1,64}$/.test(body.agentSlug)
+            ? body.agentSlug
+            : null;
         const adminChannel = typeof body.channel === 'string' && CHANNELS.includes(body.channel)
             ? body.channel
             : undefined;
@@ -3470,6 +3479,31 @@ export function buildHttpApp(deps) {
             appendSegments.push(authenticatedIdentityPrompt(resolvedName));
             deps.logger(`[rc-spawn] op=identity-injected userId=${resolvedAdminUserId ? resolvedAdminUserId.slice(0, 8) : 'none'} resolved=${resolvedName ? 1 : 0} source=${identitySource}`);
         }
+        // Task 2423 — a public rc spawn composes its named agent's persona. This is
+        // the one thing Task 2368 moved public Telegram off this door for, and it is
+        // why that path landed on /public-spawn, which does not deliver at all
+        // (Task 2420: a hand-spawn reproducing its argv AND all 60 env vars replies;
+        // only spawnClaudeSession does not). The composer is the same one
+        // /public-spawn uses, so the two doors cannot disagree about what a public
+        // agent's prompt is. Refuses rather than answering personaless: a visitor
+        // met by an agent with no identity is worse than one met by silence, and the
+        // 503 matches the shape the other pre-spawn refusals on this door return.
+        //
+        // Gated on the slug being SUPPLIED, not on the role alone. A public WhatsApp
+        // spawn also reaches this door with role:'public' and no slug, and has
+        // always composed no persona here; refusing those would be a regression in
+        // a path this task does not touch. Three cases, not four: slug present and
+        // resolves, compose; slug present and does not resolve, refuse; slug absent,
+        // unchanged.
+        if (effectiveRcRole === 'public' && rcAgentSlug) {
+            const composed = composeAppendSystemPrompt(deps.host, { role: 'public', agentSlug: rcAgentSlug, accountDir: effectiveAccountDir }, {});
+            if (!composed.ok) {
+                deps.logger(`[rc-spawn] op=public-persona-refused reason=${composed.reason} slug=${rcAgentSlug} detail=${composed.detail}`);
+                return c.json({ error: 'spawn-failed', reason: composed.reason }, 503);
+            }
+            appendSegments.push(composed.block);
+            deps.logger(`[rc-spawn] op=public-persona-composed slug=${rcAgentSlug} identityBytes=${composed.identityBytes} soulBytes=${composed.soulBytes} knowledgeBytes=${composed.knowledgeBytes}`);
+        }
         if (appendSegments.length > 0) {
             argv.push('--append-system-prompt', appendSegments.join('\n\n'));
         }