@rubytech/create-maxy-code 0.1.568 → 0.1.569

package/payload/platform/scripts/lib/provision-account-dir.sh

@@ -70,151 +70,18 @@ provision_account_dir() {
   [ -d "$ACCOUNT_DIR/.git" ] || git init -q "$ACCOUNT_DIR"
 
   # --- project-level .claude/settings.json (hooks; no allowlist) -------------
+  # The hook set is data, not a heredoc: platform/templates/account-settings.json
+  # is copied verbatim (every $PLATFORM_ROOT in it is a literal Claude Code
+  # resolves at hook-run time, so no substitution is needed). Keeping it as a
+  # file is what lets account-settings-reconcile.sh converge accounts that
+  # already exist, which this writer alone never could — it runs at provision
+  # time, and the upgrade path re-provisions the house account and no other.
   local ACCOUNT_SETTINGS="$ACCOUNT_DIR/.claude/settings.json"
-  local HOOKS_PATH="\$PLATFORM_ROOT/plugins/admin/hooks"
-  cat > "$ACCOUNT_SETTINGS" << SETTINGS_EOF
-{
-  "permissions": {
-    "defaultMode": "bypassPermissions",
-    "allow": [],
-    "deny": []
-  },
-  "hooks": {
-    "PreToolUse": [
-      {
-        "matcher": "Write",
-        "hooks": [
-          { "type": "command", "command": "bash $HOOKS_PATH/archive-ingest-surface-gate.sh" },
-          { "type": "command", "command": "bash $HOOKS_PATH/fs-schema-guard.sh" }
-        ]
-      },
-      {
-        "matcher": "Edit",
-        "hooks": [
-          { "type": "command", "command": "bash $HOOKS_PATH/archive-ingest-surface-gate.sh" },
-          { "type": "command", "command": "bash $HOOKS_PATH/fs-schema-guard.sh" }
-        ]
-      },
-      {
-        "matcher": "NotebookEdit",
-        "hooks": [
-          { "type": "command", "command": "bash $HOOKS_PATH/archive-ingest-surface-gate.sh" },
-          { "type": "command", "command": "bash $HOOKS_PATH/fs-schema-guard.sh" }
-        ]
-      },
-      {
-        "matcher": "Bash",
-        "hooks": [
-          { "type": "command", "command": "bash $HOOKS_PATH/archive-ingest-surface-gate.sh" },
-          { "type": "command", "command": "bash $HOOKS_PATH/fs-schema-guard-bash-pre.sh" },
-          { "type": "command", "command": "bash $HOOKS_PATH/quote-engine-gate.sh" }
-        ]
-      },
-      {
-        "hooks": [
-          { "type": "command", "command": "bash $HOOKS_PATH/archive-ingest-surface-gate.sh" },
-          { "type": "command", "command": "bash $HOOKS_PATH/public-tool-surface.sh" }
-        ]
-      },
-      {
-        "matcher": "WebFetch",
-        "hooks": [
-          { "type": "command", "command": "node $HOOKS_PATH/webfetch-preflight.mjs" }
-        ]
-      },
-      {
-        "matcher": "AskUserQuestion",
-        "hooks": [
-          { "type": "command", "command": "bash $HOOKS_PATH/askuserquestion-investigate-gate.sh" },
-          { "type": "command", "command": "bash $HOOKS_PATH/askuserquestion-channel-carrier-gate.sh" }
-        ]
-      },
-      {
-        "matcher": "mcp__plugin_browser_browser__browser-pdf-save",
-        "hooks": [
-          { "type": "command", "command": "bash $HOOKS_PATH/quote-render-gate.sh" }
-        ]
-      },
-      {
-        "matcher": "mcp__plugin_browser_browser__browser-pdf-save",
-        "hooks": [
-          { "type": "command", "command": "bash $HOOKS_PATH/preference-consult-gate.sh" }
-        ]
-      },
-      {
-        "matcher": "mcp__plugin_email_email__email-send|mcp__plugin_email_email__email-reply|mcp__plugin_email_email__email-draft-send|mcp__plugin_outlook_outlook__outlook-mail-send|mcp__plugin_outlook_outlook__outlook-mail-reply|mcp__plugin_outlook_outlook__outlook-draft-send|SendUserFile",
-        "hooks": [
-          { "type": "command", "command": "bash $HOOKS_PATH/preference-consult-gate.sh" }
-        ]
-      }
-    ],
-    "PostToolUse": [
-      {
-        "matcher": "Bash",
-        "hooks": [
-          { "type": "command", "command": "bash $HOOKS_PATH/fs-schema-guard-bash-post.sh" }
-        ]
-      },
-      {
-        "matcher": "Agent",
-        "hooks": [
-          { "type": "command", "command": "bash $HOOKS_PATH/post-tool-use-agent.sh" }
-        ]
-      },
-      {
-        "matcher": "mcp__plugin_browser_browser__browser-pdf-save",
-        "hooks": [
-          { "type": "command", "command": "bash $HOOKS_PATH/quote-render-pdf-conformance.sh" }
-        ]
-      },
-      {
-        "matcher": "mcp__.*__.*-(export|import)-parse$",
-        "hooks": [
-          { "type": "command", "command": "bash $HOOKS_PATH/archive-ingest-surface-gate.sh" }
-        ]
-      },
-      {
-        "matcher": "mcp__.*",
-        "hooks": [
-          { "type": "command", "command": "bash $HOOKS_PATH/mcp-tool-missing.sh" }
-        ]
-      },
-      {
-        "matcher": "Write",
-        "hooks": [
-          { "type": "command", "command": "bash $HOOKS_PATH/admin-authoring-observer.sh" }
-        ]
-      },
-      {
-        "matcher": "Edit",
-        "hooks": [
-          { "type": "command", "command": "bash $HOOKS_PATH/admin-authoring-observer.sh" }
-        ]
-      }
-    ],
-    "UserPromptSubmit": [
-      {
-        "hooks": [
-          { "type": "command", "command": "bash $HOOKS_PATH/archive-ingest-surface-gate.sh" },
-          { "type": "command", "command": "bash $HOOKS_PATH/prompt-optimiser-directive.sh" },
-          { "type": "command", "command": "bash $HOOKS_PATH/datetime-inject.sh" },
-          { "type": "command", "command": "bash $HOOKS_PATH/mailbox-inject.sh" },
-          { "type": "command", "command": "bash $HOOKS_PATH/preference-consult-directive.sh" },
-          { "type": "command", "command": "bash $HOOKS_PATH/public-tool-surface.sh" }
-        ]
-      }
-    ],
-    "Stop": [
-      {
-        "hooks": [
-          { "type": "command", "command": "bash $HOOKS_PATH/prompt-optimiser-compliance.sh" },
-          { "type": "command", "command": "bash $HOOKS_PATH/public-tool-surface.sh" }
-        ]
-      }
-    ]
-  }
-}
-SETTINGS_EOF
+  if [ -f "$TEMPLATES_DIR/account-settings.json" ]; then
+    cp "$TEMPLATES_DIR/account-settings.json" "$ACCOUNT_SETTINGS"
+  else
+    echo "  [acct-settings] WARNING: template missing at $TEMPLATES_DIR/account-settings.json — settings.json not written" >&2
+  fi
 
   # --- agent identities + specialist plugin templates ------------------------
   cp "$TEMPLATES_DIR/agents/admin/IDENTITY.md" "$ACCOUNT_DIR/agents/admin/IDENTITY.md"

package/payload/platform/scripts/setup-account.sh

@@ -119,3 +119,16 @@ reconcile_all_accounts_mailbox_inject "$ACCOUNTS_DIR"
 # under a one-tool allowlist. Reconcile every account on every install.
 # Idempotent; logs one [backfill-2339] line per account.
 reconcile_all_accounts_public_surface "$ACCOUNTS_DIR"
+
+# ------------------------------------------------------------------
+# 8. Converge the whole hook set on every account
+# ------------------------------------------------------------------
+# Steps 3 to 7 each retrofit one hook, and each was written after that hook was
+# found missing on a live account. provision_account_dir writes the full set,
+# but only at provision time, and this script re-provisions the house account
+# and no other — so every future hook repeats the same fault. This step
+# converges each account's settings against the shipped template instead, and
+# states the divergence count on every run including zero. A hook added to
+# platform/templates/account-settings.json needs no backfill of its own.
+. "$SCRIPT_DIR/lib/account-settings-reconcile.sh"
+reconcile_all_accounts_settings "$ACCOUNTS_DIR"

package/payload/platform/services/claude-session-manager/dist/account-agent-registry.d.ts

@@ -10,6 +10,26 @@
  *  into `op=account-agent-registry error`. Exported for its own unit test: the
  *  propagation half cannot be provoked through the filesystem from outside. */
 export declare function ignoringRaceWith(code: 'EEXIST' | 'ENOENT', act: () => void): void;
+/** What the CLI will be able to dispatch from the registry we just wrote.
+ *
+ *  Task 2469 — the mirror is keyed on filename and dispatch is keyed on the
+ *  frontmatter `name`, so `synced=<N>` cannot answer "can this be reached?".
+ *  A card with no name, and two cards claiming one name, both mirror cleanly
+ *  and neither dispatches; a specialist that is never dispatched never fails,
+ *  so no transition log anywhere carries it. Only a state reconcile sees it.
+ *
+ *  Measured over the registry rather than the source directory, because the
+ *  registry is the directory the CLI reads: where an operator's own regular
+ *  file sits at a card's name, that file is what resolves, and it is that file
+ *  this must report on.
+ *
+ *  Exported for its own unit test and for callers that want the state without
+ *  re-running a sync. */
+export declare function resolveRegistryNames(registryDir: string): {
+    resolvable: number;
+    unnamed: string[];
+    dupeNames: string[];
+};
 /** Mirror `<accountDir>/specialists/agents/*.md` into
  *  `<accountDir>/.claude/agents/` as symlinks, and remove every registry
  *  symlink the source no longer has. Emits exactly one line:

package/payload/platform/services/claude-session-manager/dist/account-agent-registry.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"account-agent-registry.d.ts","sourceRoot":"","sources":["../src/account-agent-registry.ts"],"names":[],"mappings":"AA6BA;;;;;;;;;;+EAU+E;AAC/E,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,QAAQ,GAAG,QAAQ,EAAE,GAAG,EAAE,MAAM,IAAI,GAAG,IAAI,CAOjF;AAED;;;;+EAI+E;AAC/E,wBAAgB,wBAAwB,CAAC,UAAU,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,GAAG,IAAI,CAmF9F"}
+{"version":3,"file":"account-agent-registry.d.ts","sourceRoot":"","sources":["../src/account-agent-registry.ts"],"names":[],"mappings":"AA6BA;;;;;;;;;;+EAU+E;AAC/E,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,QAAQ,GAAG,QAAQ,EAAE,GAAG,EAAE,MAAM,IAAI,GAAG,IAAI,CAOjF;AA6BD;;;;;;;;;;;;;;yBAcyB;AACzB,wBAAgB,oBAAoB,CAAC,WAAW,EAAE,MAAM,GAAG;IACzD,UAAU,EAAE,MAAM,CAAA;IAClB,OAAO,EAAE,MAAM,EAAE,CAAA;IACjB,SAAS,EAAE,MAAM,EAAE,CAAA;CACpB,CAsBA;AAED;;;;+EAI+E;AAC/E,wBAAgB,wBAAwB,CAAC,UAAU,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,GAAG,IAAI,CAgG9F"}

package/payload/platform/services/claude-session-manager/dist/account-agent-registry.js

@@ -23,7 +23,7 @@
 // It never throws. A registry that cannot be written is a specialist that
 // cannot be dispatched, which is the state before this module existed; a spawn
 // that dies instead is strictly worse.
-import { existsSync, lstatSync, mkdirSync, readdirSync, readlinkSync, symlinkSync, unlinkSync } from 'node:fs';
+import { existsSync, lstatSync, mkdirSync, readdirSync, readFileSync, readlinkSync, symlinkSync, unlinkSync } from 'node:fs';
 import { dirname, join, resolve } from 'node:path';
 /** Two spawns in the same account sync concurrently — an admin session and a
  *  channel session are routine — and they write identical content. Whoever
@@ -46,6 +46,72 @@ export function ignoringRaceWith(code, act) {
         throw err;
     }
 }
+/** The `name:` value from a card's frontmatter, or null. CRLF-tolerant and
+ *  quote-stripping, matching the reader in `specialist-roster.ts` and the one
+ *  in the roster census, so every surface agrees on what a card is called. A
+ *  card that cannot be read — a dangling link, a directory at a `.md` path,
+ *  EACCES — yields null rather than throwing, because "we could not tell" and
+ *  "it does not resolve" are the same answer to the dispatcher. */
+function readFrontmatterName(file) {
+    let raw;
+    try {
+        raw = readFileSync(file, 'utf8');
+    }
+    catch {
+        return null;
+    }
+    const fm = raw.match(/^---\r?\n([\s\S]*?)\r?\n---/);
+    if (!fm)
+        return null;
+    const m = fm[1].match(/^name:\s*(.*?)\r?$/m);
+    if (!m)
+        return null;
+    let value = m[1].trim();
+    if ((value.startsWith('"') && value.endsWith('"')) ||
+        (value.startsWith("'") && value.endsWith("'"))) {
+        value = value.slice(1, -1);
+    }
+    return value || null;
+}
+/** What the CLI will be able to dispatch from the registry we just wrote.
+ *
+ *  Task 2469 — the mirror is keyed on filename and dispatch is keyed on the
+ *  frontmatter `name`, so `synced=<N>` cannot answer "can this be reached?".
+ *  A card with no name, and two cards claiming one name, both mirror cleanly
+ *  and neither dispatches; a specialist that is never dispatched never fails,
+ *  so no transition log anywhere carries it. Only a state reconcile sees it.
+ *
+ *  Measured over the registry rather than the source directory, because the
+ *  registry is the directory the CLI reads: where an operator's own regular
+ *  file sits at a card's name, that file is what resolves, and it is that file
+ *  this must report on.
+ *
+ *  Exported for its own unit test and for callers that want the state without
+ *  re-running a sync. */
+export function resolveRegistryNames(registryDir) {
+    let entries;
+    try {
+        entries = readdirSync(registryDir).filter((n) => n.endsWith('.md')).sort();
+    }
+    catch {
+        return { resolvable: 0, unnamed: [], dupeNames: [] };
+    }
+    const claims = new Map();
+    const unnamed = [];
+    for (const file of entries) {
+        const name = readFrontmatterName(join(registryDir, file));
+        if (name === null) {
+            unnamed.push(file);
+            continue;
+        }
+        claims.set(name, (claims.get(name) ?? 0) + 1);
+    }
+    const dupeNames = Array.from(claims.entries())
+        .filter(([, n]) => n > 1)
+        .map(([name]) => name)
+        .sort();
+    return { resolvable: claims.size, unnamed, dupeNames };
+}
 /** Mirror `<accountDir>/specialists/agents/*.md` into
  *  `<accountDir>/.claude/agents/` as symlinks, and remove every registry
  *  symlink the source no longer has. Emits exactly one line:
@@ -138,6 +204,17 @@ export function syncAccountAgentRegistry(accountDir, log) {
             pruned++;
         }
         log(`op=account-agent-registry synced=${synced} pruned=${pruned} collisions=${collisions.join(',')}`);
+        // Task 2469 — a second line, not three more fields on the first. That one
+        // is a transition record: what this spawn changed. This is a state
+        // reconcile: what is reachable now. Emitted every spawn including zero, so
+        // an account with no specialists is distinguishable from a reconcile that
+        // did not run. On the error path below it is deliberately absent — after a
+        // failed sync the reachable set is unknown, and reporting zero would assert
+        // something this never measured.
+        const resolution = resolveRegistryNames(registryDir);
+        log(`op=agent-registry-resolution resolvable=${resolution.resolvable}` +
+            ` unnamed=${resolution.unnamed.join(',')}` +
+            ` dupeNames=${resolution.dupeNames.join(',')}`);
     }
     catch (err) {
         log(`op=account-agent-registry error reason=${err instanceof Error ? err.message : String(err)}`);

package/payload/platform/services/claude-session-manager/dist/account-agent-registry.js.map

@@ -1 +1 @@
-{"version":3,"file":"account-agent-registry.js","sourceRoot":"","sources":["../src/account-agent-registry.ts"],"names":[],"mappings":"AAAA,kDAAkD;AAClD,EAAE;AACF,0EAA0E;AAC1E,2EAA2E;AAC3E,0EAA0E;AAC1E,uEAAuE;AACvE,gFAAgF;AAChF,0EAA0E;AAC1E,6EAA6E;AAC7E,EAAE;AACF,+DAA+D;AAC/D,6EAA6E;AAC7E,gFAAgF;AAChF,sDAAsD;AACtD,EAAE;AACF,gFAAgF;AAChF,sEAAsE;AACtE,EAAE;AACF,4EAA4E;AAC5E,2EAA2E;AAC3E,uDAAuD;AACvD,EAAE;AACF,0EAA0E;AAC1E,+EAA+E;AAC/E,uCAAuC;AAEvC,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,SAAS,EAAE,WAAW,EAAE,YAAY,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,SAAS,CAAA;AAC9G,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AAElD;;;;;;;;;;+EAU+E;AAC/E,MAAM,UAAU,gBAAgB,CAAC,IAAyB,EAAE,GAAe;IACzE,IAAI,CAAC;QACH,GAAG,EAAE,CAAA;IACP,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAK,GAA6B,CAAC,IAAI,KAAK,IAAI;YAAE,OAAM;QACxD,MAAM,GAAG,CAAA;IACX,CAAC;AACH,CAAC;AAED;;;;+EAI+E;AAC/E,MAAM,UAAU,wBAAwB,CAAC,UAAkB,EAAE,GAA2B;IACtF,MAAM,SAAS,GAAG,IAAI,CAAC,UAAU,EAAE,aAAa,EAAE,QAAQ,CAAC,CAAA;IAC3D,MAAM,WAAW,GAAG,IAAI,CAAC,UAAU,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAA;IACzD,IAAI,MAAM,GAAG,CAAC,CAAA;IACd,IAAI,MAAM,GAAG,CAAC,CAAA;IACd,MAAM,UAAU,GAAa,EAAE,CAAA;IAC/B,IAAI,CAAC;QACH,SAAS,CAAC,WAAW,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;QAC3C,uEAAuE;QACvE,yEAAyE;QACzE,0DAA0D;QAC1D,MAAM,OAAO,GAAG,UAAU,CAAC,SAAS,CAAC;YACnC,CAAC,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE;YAChE,CAAC,CAAC,EAAE,CAAA;QACN,KAAK,MAAM,IAAI,IAAI,OAAO,EAAE,CAAC;YAC3B,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,CAAA;YACvC,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,CAAA;YACxC,IAAI,IAAI,GAAwC,IAAI,CAAA;YACpD,IAAI,CAAC;gBACH,IAAI,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAA;YAC5B,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,IAAK,GAA6B,CAAC,IAAI,KAAK,QAAQ;oBAAE,MAAM,GAAG,CAAA;YACjE,CAAC;YACD,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;gBAClB,uEAAuE;gBACvE,wEAAwE;gBACxE,gBAAgB,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,WAAW,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC,CAAA;gBAClE,MAAM,EAAE,CAAA;gBACR,SAAQ;YACV,CAAC;YACD,yEAAyE;YACzE,0EAA0E;YAC1E,mEAAmE;YACnE,wBAAwB;YACxB,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,EAAE,CAAC;gBAC3B,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;gBACrB,SAAQ;YACV,CAAC;YACD,IAAI,OAAe,CAAA;YACnB,IAAI,CAAC;gBACH,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,YAAY,CAAC,QAAQ,CAAC,CAAC,CAAA;YAC9D,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,GAAG,EAAE,CAAA;YACd,CAAC;YACD,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;gBAC1B,oEAAoE;gBACpE,uEAAuE;gBACvE,qEAAqE;gBACrE,oDAAoD;gBACpD,gBAAgB,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAA;gBACtD,gBAAgB,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,WAAW,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC,CAAA;YACpE,CAAC;YACD,MAAM,EAAE,CAAA;QACV,CAAC;QACD,0EAA0E;QAC1E,2EAA2E;QAC3E,4EAA4E;QAC5E,yEAAyE;QACzE,oEAAoE;QACpE,cAAc;QACd,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAA;QAClC,KAAK,MAAM,KAAK,IAAI,WAAW,CAAC,WAAW,CAAC,EAAE,CAAC;YAC7C,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC;gBAAE,SAAQ;YACpC,IAAI,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC;gBAAE,SAAQ;YAClC,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,EAAE,KAAK,CAAC,CAAA;YACzC,IAAI,IAAkC,CAAA;YACtC,IAAI,CAAC;gBACH,IAAI,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAA;YAC5B,CAAC;YAAC,MAAM,CAAC;gBACP,SAAQ;YACV,CAAC;YACD,yEAAyE;YACzE,uDAAuD;YACvD,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE;gBAAE,SAAQ;YACpC,0EAA0E;YAC1E,oEAAoE;YACpE,gBAAgB,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAA;YACtD,MAAM,EAAE,CAAA;QACV,CAAC;QACD,GAAG,CAAC,oCAAoC,MAAM,WAAW,MAAM,eAAe,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;IACvG,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,GAAG,CAAC,0CAA0C,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;IACnG,CAAC;AACH,CAAC"}
+{"version":3,"file":"account-agent-registry.js","sourceRoot":"","sources":["../src/account-agent-registry.ts"],"names":[],"mappings":"AAAA,kDAAkD;AAClD,EAAE;AACF,0EAA0E;AAC1E,2EAA2E;AAC3E,0EAA0E;AAC1E,uEAAuE;AACvE,gFAAgF;AAChF,0EAA0E;AAC1E,6EAA6E;AAC7E,EAAE;AACF,+DAA+D;AAC/D,6EAA6E;AAC7E,gFAAgF;AAChF,sDAAsD;AACtD,EAAE;AACF,gFAAgF;AAChF,sEAAsE;AACtE,EAAE;AACF,4EAA4E;AAC5E,2EAA2E;AAC3E,uDAAuD;AACvD,EAAE;AACF,0EAA0E;AAC1E,+EAA+E;AAC/E,uCAAuC;AAEvC,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,SAAS,EAAE,WAAW,EAAE,YAAY,EAAE,YAAY,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,SAAS,CAAA;AAC5H,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AAElD;;;;;;;;;;+EAU+E;AAC/E,MAAM,UAAU,gBAAgB,CAAC,IAAyB,EAAE,GAAe;IACzE,IAAI,CAAC;QACH,GAAG,EAAE,CAAA;IACP,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAK,GAA6B,CAAC,IAAI,KAAK,IAAI;YAAE,OAAM;QACxD,MAAM,GAAG,CAAA;IACX,CAAC;AACH,CAAC;AAED;;;;;mEAKmE;AACnE,SAAS,mBAAmB,CAAC,IAAY;IACvC,IAAI,GAAW,CAAA;IACf,IAAI,CAAC;QACH,GAAG,GAAG,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAA;IAClC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAA;IACb,CAAC;IACD,MAAM,EAAE,GAAG,GAAG,CAAC,KAAK,CAAC,6BAA6B,CAAC,CAAA;IACnD,IAAI,CAAC,EAAE;QAAE,OAAO,IAAI,CAAA;IACpB,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAA;IAC5C,IAAI,CAAC,CAAC;QAAE,OAAO,IAAI,CAAA;IACnB,IAAI,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAA;IACvB,IACE,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;QAC9C,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,EAC9C,CAAC;QACD,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAA;IAC5B,CAAC;IACD,OAAO,KAAK,IAAI,IAAI,CAAA;AACtB,CAAC;AAED;;;;;;;;;;;;;;yBAcyB;AACzB,MAAM,UAAU,oBAAoB,CAAC,WAAmB;IAKtD,IAAI,OAAiB,CAAA;IACrB,IAAI,CAAC;QACH,OAAO,GAAG,WAAW,CAAC,WAAW,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAA;IAC5E,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,UAAU,EAAE,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,CAAA;IACtD,CAAC;IACD,MAAM,MAAM,GAAG,IAAI,GAAG,EAAkB,CAAA;IACxC,MAAM,OAAO,GAAa,EAAE,CAAA;IAC5B,KAAK,MAAM,IAAI,IAAI,OAAO,EAAE,CAAC;QAC3B,MAAM,IAAI,GAAG,mBAAmB,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC,CAAA;QACzD,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;YAClB,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;YAClB,SAAQ;QACV,CAAC;QACD,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAA;IAC/C,CAAC;IACD,MAAM,SAAS,GAAG,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;SAC3C,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC;SACxB,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC;SACrB,IAAI,EAAE,CAAA;IACT,OAAO,EAAE,UAAU,EAAE,MAAM,CAAC,IAAI,EAAE,OAAO,EAAE,SAAS,EAAE,CAAA;AACxD,CAAC;AAED;;;;+EAI+E;AAC/E,MAAM,UAAU,wBAAwB,CAAC,UAAkB,EAAE,GAA2B;IACtF,MAAM,SAAS,GAAG,IAAI,CAAC,UAAU,EAAE,aAAa,EAAE,QAAQ,CAAC,CAAA;IAC3D,MAAM,WAAW,GAAG,IAAI,CAAC,UAAU,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAA;IACzD,IAAI,MAAM,GAAG,CAAC,CAAA;IACd,IAAI,MAAM,GAAG,CAAC,CAAA;IACd,MAAM,UAAU,GAAa,EAAE,CAAA;IAC/B,IAAI,CAAC;QACH,SAAS,CAAC,WAAW,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;QAC3C,uEAAuE;QACvE,yEAAyE;QACzE,0DAA0D;QAC1D,MAAM,OAAO,GAAG,UAAU,CAAC,SAAS,CAAC;YACnC,CAAC,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE;YAChE,CAAC,CAAC,EAAE,CAAA;QACN,KAAK,MAAM,IAAI,IAAI,OAAO,EAAE,CAAC;YAC3B,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,CAAA;YACvC,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,CAAA;YACxC,IAAI,IAAI,GAAwC,IAAI,CAAA;YACpD,IAAI,CAAC;gBACH,IAAI,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAA;YAC5B,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,IAAK,GAA6B,CAAC,IAAI,KAAK,QAAQ;oBAAE,MAAM,GAAG,CAAA;YACjE,CAAC;YACD,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;gBAClB,uEAAuE;gBACvE,wEAAwE;gBACxE,gBAAgB,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,WAAW,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC,CAAA;gBAClE,MAAM,EAAE,CAAA;gBACR,SAAQ;YACV,CAAC;YACD,yEAAyE;YACzE,0EAA0E;YAC1E,mEAAmE;YACnE,wBAAwB;YACxB,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,EAAE,CAAC;gBAC3B,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;gBACrB,SAAQ;YACV,CAAC;YACD,IAAI,OAAe,CAAA;YACnB,IAAI,CAAC;gBACH,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,YAAY,CAAC,QAAQ,CAAC,CAAC,CAAA;YAC9D,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,GAAG,EAAE,CAAA;YACd,CAAC;YACD,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;gBAC1B,oEAAoE;gBACpE,uEAAuE;gBACvE,qEAAqE;gBACrE,oDAAoD;gBACpD,gBAAgB,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAA;gBACtD,gBAAgB,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,WAAW,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC,CAAA;YACpE,CAAC;YACD,MAAM,EAAE,CAAA;QACV,CAAC;QACD,0EAA0E;QAC1E,2EAA2E;QAC3E,4EAA4E;QAC5E,yEAAyE;QACzE,oEAAoE;QACpE,cAAc;QACd,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAA;QAClC,KAAK,MAAM,KAAK,IAAI,WAAW,CAAC,WAAW,CAAC,EAAE,CAAC;YAC7C,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC;gBAAE,SAAQ;YACpC,IAAI,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC;gBAAE,SAAQ;YAClC,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,EAAE,KAAK,CAAC,CAAA;YACzC,IAAI,IAAkC,CAAA;YACtC,IAAI,CAAC;gBACH,IAAI,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAA;YAC5B,CAAC;YAAC,MAAM,CAAC;gBACP,SAAQ;YACV,CAAC;YACD,yEAAyE;YACzE,uDAAuD;YACvD,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE;gBAAE,SAAQ;YACpC,0EAA0E;YAC1E,oEAAoE;YACpE,gBAAgB,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAA;YACtD,MAAM,EAAE,CAAA;QACV,CAAC;QACD,GAAG,CAAC,oCAAoC,MAAM,WAAW,MAAM,eAAe,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;QACrG,0EAA0E;QAC1E,mEAAmE;QACnE,2EAA2E;QAC3E,0EAA0E;QAC1E,2EAA2E;QAC3E,4EAA4E;QAC5E,iCAAiC;QACjC,MAAM,UAAU,GAAG,oBAAoB,CAAC,WAAW,CAAC,CAAA;QACpD,GAAG,CACD,2CAA2C,UAAU,CAAC,UAAU,EAAE;YAClE,YAAY,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE;YAC1C,cAAc,UAAU,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAC/C,CAAA;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,GAAG,CAAC,0CAA0C,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;IACnG,CAAC;AACH,CAAC"}

package/payload/platform/services/claude-session-manager/dist/index.js

@@ -48,9 +48,11 @@ import { createPassiveIntakeAudit } from './passive-intake-audit.js';
 import { createPassiveDispatchPrune } from './passive-dispatch-prune.js';
 import { createXacctCensus } from './cross-account-census.js';
 import { createAccountDirSchemaReconcile } from './account-dir-schema-reconcile.js';
+import { createQuoteDeliveryReconcile } from './quote-delivery-reconcile.js';
 import { createSessionCapAudit } from './session-cap-audit.js';
 import { createSkillStalenessAudit, collectPlatformSkillMtimes, collectPremiumSkillMtimes, resolveEnabledPlugins, buildLiveSessionRefs, parseProcStartMs, } from './skill-staleness-audit.js';
 import { createPublicSurfaceAudit, parseMcpLogServerName } from './public-surface-audit.js';
+import { createSpecialistPreferenceAudit, readLinesSync } from './specialist-preference-audit.js';
 import { projectsDirForCwd, sessionsDir, jsonlPathForSessionId, slugForExistingJsonl, jsonlPathForSlug, sidecarPathForSlug } from './jsonl-path.js';
 import { readSidecar } from './session-sidecar.js';
 import { runSystemPromptSelfTest, runIdentityDriftAssertion, runIdentityForbiddenTokenCheck } from './system-prompt.js';
@@ -885,6 +887,76 @@ async function main() {
         },
     });
     publicSurfaceAudit.start();
+    // Task 2469 — the second question about a specialist. The registry reconcile
+    // beside the spawn answers whether one CAN be reached; this answers whether
+    // it WAS. Both were needed: four authored clerks owned the works orders,
+    // invoices and client emails on a live account while content-producer
+    // produced all of them, and every reachability signal read green throughout.
+    //
+    // `<projectDir>/<sessionId>/subagents/` is the only surface that ties a write
+    // to a specialist — the parent transcript carries none of a subagent's tool
+    // calls — so the walk is over that directory across every account on the
+    // install. 300s rather than the 60s beside it: this reads transcripts, and
+    // the mtime guard means a steady state costs one stat per file.
+    const preferenceProjectsRoot = dirname(projectsDirForCwd(config.spawnCwd));
+    /** sessionId -> its `subagents/` directory, rebuilt by `listSessions` at the
+     *  top of every tick. Held here rather than in the audit because resolving a
+     *  session id to a path is install layout, which is this file's business. */
+    const subagentDirs = new Map();
+    const specialistPreferenceAudit = createSpecialistPreferenceAudit({
+        intervalMs: 300_000,
+        logger: log,
+        listSessions: () => {
+            subagentDirs.clear();
+            let accountProjectDirs;
+            try {
+                accountProjectDirs = readdirSync(preferenceProjectsRoot);
+            }
+            catch {
+                return [];
+            }
+            for (const projectDir of accountProjectDirs) {
+                const abs = join(preferenceProjectsRoot, projectDir);
+                let sessions;
+                try {
+                    sessions = readdirSync(abs);
+                }
+                catch {
+                    continue;
+                }
+                for (const sessionId of sessions) {
+                    const dir = join(abs, sessionId, 'subagents');
+                    if (existsSync(dir))
+                        subagentDirs.set(sessionId, dir);
+                }
+            }
+            return Array.from(subagentDirs.keys());
+        },
+        listTranscripts: (sessionId) => {
+            const dir = subagentDirs.get(sessionId);
+            if (!dir)
+                return [];
+            // A throw here is caught by the audit, which names the session rather
+            // than losing the whole run to one unreadable directory.
+            return readdirSync(dir)
+                .filter((f) => f.startsWith('agent-') && f.endsWith('.jsonl'))
+                .map((f) => ({
+                jsonl: join(dir, f),
+                meta: join(dir, `${f.slice(0, -'.jsonl'.length)}.meta.json`),
+                mtimeMs: statSync(join(dir, f)).mtimeMs,
+            }));
+        },
+        readMeta: (path) => {
+            try {
+                return readFileSync(path, 'utf8');
+            }
+            catch {
+                return null;
+            }
+        },
+        readLines: (path) => readLinesSync(path),
+    });
+    specialistPreferenceAudit.start();
     // Task 2285 — standing audit for public-agent knowledge curation. A
     // `knowledgeKeywords` subscription nobody asked for is dormant until matching
     // content lands, and a KNOWLEDGE.md that grows after deployment emits nothing
@@ -1053,6 +1125,21 @@ async function main() {
         intervalMs: 300_000,
     });
     schemaReconcile.start();
+    // Task 2467 — standing reconcile of delivered client quotes against their
+    // render receipts. The three PreToolUse quote gates refuse the print, the
+    // Bash conversion and the write, but all three fail open on an uninspectable
+    // envelope and none can see a delivery route nobody enumerated. This pass is
+    // the backstop, and it is the only instrument that can see the failure at
+    // all: on 2026-08-05 a hand-authored client quote was printed and emailed
+    // while the bypass counter for that day sat at zero, so no transition log
+    // could have shown it. Emits one line per unreconciled document plus one
+    // summary per run, zero count included. Purely filesystem — no Neo4j.
+    const quoteReconcile = createQuoteDeliveryReconcile({
+        accountsDir: dirname(config.accountDir),
+        logger: log,
+        intervalMs: 900_000,
+    });
+    quoteReconcile.start();
     // Task 183 — recorder JSONL tail. Posts [recorder-session-init] and
     // [recorder-turn] lines for every database-operator specialist spawn,
     // routed through the platform UI's /api/admin/log-ingest loopback