@rubytech/create-maxy-code 0.1.568 → 0.1.570

package/payload/platform/services/claude-session-manager/dist/blocked-tool-census.js

@@ -0,0 +1,344 @@
+// Task 2476 — standing blocked-tool census.
+//
+// Claude Code raises a permission card for `dangerousRemoval` even under
+// `permissionMode=bypassPermissions`: that entry in its safety table is
+// `bypassImmune: true`, so no allow rule and no mode pre-approves it. When the
+// card is raised inside a BACKGROUND SUBAGENT, its only prompt surface is the
+// parent session's UI. A WhatsApp or Telegram operator cannot see it, so the
+// session simply stops with the PTY alive.
+//
+// Nothing anywhere records that state. Measured 2026-08-06 on 192.168.88.10:
+// `server.log` returns zero matches for `permission-request`,
+// `permission-prompt`, `awaiting-permission`, `op=permission` and `waitingFor`,
+// and the session-manager tree contains no `waitingFor` at all. No event exists
+// and the failure does not reproduce on demand, so it cannot be detected by a
+// log hung on an action — only by an independent periodic check that
+// reconciles against live on-disk state. Same rationale, and the same module
+// shape, as pty-census.ts (Task 627).
+//
+// The detection primitive is transcript-intrinsic and needs no cooperation from
+// the binary: an assistant record carries `tool_use` blocks with ids, and the
+// following user record carries `tool_result` blocks whose `tool_use_id` names
+// the call it answers. A `tool_use` with no matching `tool_result` is a call
+// that has not returned. That alone does not mean blocked — a call in flight
+// looks identical — so the second condition is that the transcript has not
+// advanced for `staleMs`. Verified against a real subagent transcript:
+// 14 `tool_use`, 14 `tool_result`, zero unmatched.
+//
+// `blockedForMs` is the age of the transcript's last record, not a timer on the
+// call. That is the quantity actually measurable from disk, and it is the one
+// reported, so the line never claims precision it does not have.
+import { existsSync, readdirSync, openSync, closeSync, readSync, statSync } from 'node:fs';
+import { basename, dirname, join } from 'node:path';
+import { forEachLivePty } from './pty-spawner.js';
+import { findExistingJsonlForSessionId } from './jsonl-path.js';
+export const TAG = '[blocked-tool]';
+function parseRecord(line) {
+    const trimmed = line.trim();
+    if (trimmed.length === 0)
+        return null;
+    try {
+        const obj = JSON.parse(trimmed);
+        return obj && typeof obj === 'object' && !Array.isArray(obj) ? obj : null;
+    }
+    catch {
+        return null;
+    }
+}
+function contentBlocks(rec) {
+    const msg = rec.message;
+    if (!msg || typeof msg !== 'object')
+        return [];
+    const content = msg.content;
+    if (!Array.isArray(content))
+        return [];
+    return content.filter((b) => !!b && typeof b === 'object' && !Array.isArray(b));
+}
+/** PURE. Every `tool_use` id in these lines with no matching `tool_result`.
+ *  Order is first-sighting order. Malformed lines are skipped, not thrown on:
+ *  a JSONL read can land mid-append. A `tool_use` carrying no `name` is
+ *  reported as `unknown` rather than dropped — an unnamed blocked call is
+ *  still a blocked call. */
+export function unmatchedToolUses(lines) {
+    const uses = [];
+    const seenUseIds = new Set();
+    const results = new Set();
+    for (const line of lines) {
+        const rec = parseRecord(line);
+        if (!rec)
+            continue;
+        for (const block of contentBlocks(rec)) {
+            if (block.type === 'tool_use' && typeof block.id === 'string') {
+                if (seenUseIds.has(block.id))
+                    continue;
+                seenUseIds.add(block.id);
+                uses.push({ id: block.id, name: typeof block.name === 'string' ? block.name : 'unknown' });
+            }
+            else if (block.type === 'tool_result' && typeof block.tool_use_id === 'string') {
+                results.add(block.tool_use_id);
+            }
+        }
+    }
+    return uses.filter((u) => !results.has(u.id));
+}
+/** PURE. Which unmatched calls are blocked. Blocked means unmatched AND the
+ *  transcript has not advanced for `staleMs`. Without the staleness term every
+ *  in-flight call would be reported, which would make the signal useless. */
+export function blockedFromScans(sessionId, scans, nowMs, staleMs) {
+    const out = [];
+    for (const scan of scans) {
+        const age = nowMs - scan.mtimeMs;
+        if (age < staleMs)
+            continue;
+        for (const u of scan.unmatched) {
+            out.push({ sessionId, agentId: scan.agentId, toolUseId: u.id, tool: u.name, blockedForMs: age });
+        }
+    }
+    return out;
+}
+function short(sessionId) {
+    return sessionId.slice(0, 8);
+}
+/** PURE. Emitted every tick INCLUDING zero, so a census that stopped ticking is
+ *  distinguishable from one that found nothing. `sessions` is separate from
+ *  `scanned` on purpose: `sessions=3 scanned=0` is a census that could not
+ *  resolve a transcript for any live session, which without the first field
+ *  reads exactly like a quiet box. */
+export function formatBlockedCensus(s) {
+    return `${TAG} op=census sessions=${s.liveSessionIds.length} scanned=${s.scanned} blocked=${s.blocked.length}`;
+}
+/** PURE. */
+export function formatBlocked(c) {
+    return `${TAG} op=blocked sessionId=${short(c.sessionId)} agentId=${c.agentId} toolUseId=${c.toolUseId} tool=${c.tool} blockedForMs=${c.blockedForMs}`;
+}
+/** PURE. Same ids as its `op=blocked` twin, so the pair is greppable. Emitted
+ *  ONLY when the session is still live and the result landed. */
+export function formatCleared(c) {
+    return `${TAG} op=cleared sessionId=${short(c.sessionId)} agentId=${c.agentId} toolUseId=${c.toolUseId} tool=${c.tool} blockedForMs=${c.blockedForMs}`;
+}
+/** PURE. The other way a blocked call leaves the reported set: its session
+ *  stopped being live. The call did NOT resolve, and saying `op=cleared` here
+ *  would tell the operator the block lifted when the session actually went
+ *  away with the card still unanswered. */
+export function formatSessionGone(c) {
+    return `${TAG} op=session-gone sessionId=${short(c.sessionId)} agentId=${c.agentId} toolUseId=${c.toolUseId} tool=${c.tool} blockedForMs=${c.blockedForMs}`;
+}
+export const DEFAULT_STALE_MS = 120_000;
+export const DEFAULT_NOTIFY_AFTER_MS = 180_000;
+/** A `tool_result` always follows its `tool_use` in the same file, so a
+ *  contiguous tail containing the use contains its result too — unless one
+ *  result exceeds this window, in which case that one call reads as unmatched.
+ *  1 MB is a chosen bound, not a measured one; the failure mode it admits is a
+ *  false `op=blocked` on a call whose result was larger than the window. */
+export const TAIL_BYTES = 1024 * 1024;
+/** IMPURE. `scanned` counts transcripts actually READ, so a session whose
+ *  files vanished does not inflate the count into looking like coverage. */
+export function collectBlockedCensus(io, staleMs, tailBytes) {
+    let scanned = 0;
+    const blocked = [];
+    const liveSessionIds = io.listSessionIds();
+    for (const sessionId of liveSessionIds) {
+        const scans = [];
+        for (const t of io.listTranscripts(sessionId)) {
+            const tail = io.readTail(t.path, tailBytes);
+            if (!tail)
+                continue;
+            scanned += 1;
+            scans.push({
+                agentId: t.agentId,
+                path: t.path,
+                mtimeMs: tail.mtimeMs,
+                unmatched: unmatchedToolUses(tail.lines),
+            });
+        }
+        blocked.push(...blockedFromScans(sessionId, scans, io.now(), staleMs));
+    }
+    return { scanned, blocked, liveSessionIds };
+}
+/** `claudeConfigDir` is the state root (`CLAUDE_CONFIG_DIR`), NOT a spawn cwd.
+ *  Task 1490 re-points the manager's `spawnCwd` per sub-account spawn, so a
+ *  client session's transcript is filed under a slug derived from the
+ *  sub-account directory rather than the house cwd (http-server.ts:815 states
+ *  this: reading `deps.spawnCwd` "would always miss the file"). Keying this
+ *  census on one cwd would make it blind to exactly the sub-account sessions it
+ *  was written for, so it resolves each session through the all-slug scan
+ *  instead. */
+export function defaultBlockedCensusIo(claudeConfigDir) {
+    return {
+        listSessionIds() {
+            const out = [];
+            forEachLivePty((t) => {
+                if (!t.exited)
+                    out.push(t.sessionId);
+            });
+            return out;
+        },
+        listTranscripts(sessionId) {
+            const rows = [];
+            const own = findExistingJsonlForSessionId(claudeConfigDir, sessionId);
+            if (!own)
+                return rows;
+            rows.push({ agentId: '—', path: own });
+            // Verified on disk: subagent transcripts live in a directory NAMED for
+            // the session, sibling to `<sessionId>.jsonl`, not inside it.
+            const subDir = join(dirname(own), sessionId, 'subagents');
+            if (!existsSync(subDir))
+                return rows;
+            let names;
+            try {
+                names = readdirSync(subDir);
+            }
+            catch {
+                return rows;
+            }
+            for (const n of names) {
+                if (!n.startsWith('agent-') || !n.endsWith('.jsonl'))
+                    continue;
+                rows.push({ agentId: basename(n, '.jsonl'), path: join(subDir, n) });
+            }
+            return rows;
+        },
+        readTail(path, maxBytes) {
+            let fd = null;
+            try {
+                const st = statSync(path);
+                const start = st.size > maxBytes ? st.size - maxBytes : 0;
+                const length = st.size - start;
+                if (length === 0)
+                    return { lines: [], mtimeMs: st.mtimeMs };
+                fd = openSync(path, 'r');
+                const buf = Buffer.allocUnsafe(length);
+                // The file can be truncated (rotation) between statSync and readSync,
+                // so honour bytesRead: allocUnsafe leaves the unwritten tail as
+                // uninitialised memory, and decoding that would inject garbage lines.
+                const bytesRead = readSync(fd, buf, 0, length, start);
+                const text = buf.subarray(0, bytesRead).toString('utf8');
+                const lines = text.split('\n');
+                // A non-zero start almost certainly lands mid-record; that fragment is
+                // not parseable and must not be mistaken for a malformed transcript.
+                if (start > 0)
+                    lines.shift();
+                return { lines, mtimeMs: st.mtimeMs };
+            }
+            catch {
+                return null;
+            }
+            finally {
+                if (fd !== null)
+                    closeSync(fd);
+            }
+        },
+        now: () => Date.now(),
+    };
+}
+/** A blocked call's identity across ticks. */
+function callKey(c) {
+    return `${c.sessionId} ${c.toolUseId}`;
+}
+export function createBlockedToolCensus(deps) {
+    const staleMs = deps.staleMs ?? DEFAULT_STALE_MS;
+    const notifyAfterMs = deps.notifyAfterMs ?? DEFAULT_NOTIFY_AFTER_MS;
+    const io = deps.io ?? defaultBlockedCensusIo(deps.claudeConfigDir);
+    let timer = null;
+    let lastSnapshot = null;
+    /** Reported blocked and not yet cleared. Held here, not at module scope, so
+     *  two censuses in one process (tests) cannot cross-contaminate. */
+    const reported = new Map();
+    /** Notified once. In-memory by design: after a manager restart nothing else
+     *  records that the call is blocked, so re-notifying once is correct. */
+    const notified = new Set();
+    function tickOnce() {
+        const snapshot = collectBlockedCensus(io, staleMs, TAIL_BYTES);
+        lastSnapshot = snapshot;
+        deps.logger(formatBlockedCensus(snapshot));
+        const live = new Set(snapshot.blocked.map(callKey));
+        for (const call of snapshot.blocked) {
+            const key = callKey(call);
+            if (!reported.has(key))
+                deps.logger(formatBlocked(call));
+            reported.set(key, call);
+            if (call.blockedForMs >= notifyAfterMs && !notified.has(key)) {
+                notified.add(key);
+                const notify = deps.notify;
+                if (notify) {
+                    void notify(call)
+                        .then((r) => deps.logger(`${TAG} op=blocked-notify channel=${r.channel} delivered=${r.delivered}`))
+                        .catch((err) => deps.logger(`${TAG} op=blocked-notify channel=none delivered=false error=${err instanceof Error ? err.message : String(err)}`));
+                }
+            }
+        }
+        const liveSessions = new Set(snapshot.liveSessionIds);
+        for (const [key, call] of reported) {
+            if (live.has(key))
+                continue;
+            // Two distinct exits from the reported set, never conflated: the result
+            // landed on a still-live session (cleared), or the session stopped being
+            // live with the card still unanswered (gone).
+            deps.logger(liveSessions.has(call.sessionId) ? formatCleared(call) : formatSessionGone(call));
+            reported.delete(key);
+            notified.delete(key);
+        }
+        return snapshot;
+    }
+    return {
+        tickOnce,
+        latest: () => lastSnapshot,
+        start() {
+            if (timer)
+                return;
+            timer = setInterval(() => {
+                try {
+                    tickOnce();
+                }
+                catch (err) {
+                    deps.logger(`${TAG} op=census-tick-failed message=${err instanceof Error ? err.message : String(err)}`);
+                }
+            }, deps.intervalMs);
+            if (typeof timer.unref === 'function')
+                timer.unref();
+            deps.logger(`${TAG} op=census-started intervalMs=${deps.intervalMs} staleMs=${staleMs} notifyAfterMs=${notifyAfterMs}`);
+        },
+        stop() {
+            if (timer) {
+                clearInterval(timer);
+                timer = null;
+            }
+        },
+    };
+}
+/** Production notifier. POSTs to the brand UI's loopback route, the same
+ *  transport `postLogLineViaFetch` uses. A throw or a non-200 resolves to
+ *  `delivered:false` rather than rejecting: the census logs the outcome either
+ *  way, and a send that failed silently is the blind spot this task closes. */
+export function postBlockedNotifyViaFetch(opts) {
+    const url = `http://127.0.0.1:${opts.uiPort}/api/admin/session-blocked`;
+    return async (c) => {
+        try {
+            const res = await fetch(url, {
+                method: 'POST',
+                headers: { 'content-type': 'application/json' },
+                body: JSON.stringify({
+                    sessionId: c.sessionId,
+                    agentId: c.agentId,
+                    toolUseId: c.toolUseId,
+                    tool: c.tool,
+                    blockedForMs: c.blockedForMs,
+                }),
+            });
+            if (!res.ok) {
+                opts.logger(`${TAG} op=notify-post-rejected status=${res.status}`);
+                return { delivered: false, channel: 'none' };
+            }
+            const json = (await res.json());
+            return {
+                delivered: json.delivered === true,
+                channel: typeof json.channel === 'string' ? json.channel : 'none',
+            };
+        }
+        catch (err) {
+            opts.logger(`${TAG} op=notify-post-failed error=${JSON.stringify(err instanceof Error ? err.message : String(err))}`);
+            return { delivered: false, channel: 'none' };
+        }
+    };
+}
+//# sourceMappingURL=blocked-tool-census.js.map

package/payload/platform/services/claude-session-manager/dist/blocked-tool-census.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"blocked-tool-census.js","sourceRoot":"","sources":["../src/blocked-tool-census.ts"],"names":[],"mappings":"AAAA,4CAA4C;AAC5C,EAAE;AACF,yEAAyE;AACzE,wEAAwE;AACxE,+EAA+E;AAC/E,8EAA8E;AAC9E,6EAA6E;AAC7E,2CAA2C;AAC3C,EAAE;AACF,6EAA6E;AAC7E,8DAA8D;AAC9D,gFAAgF;AAChF,gFAAgF;AAChF,8EAA8E;AAC9E,qEAAqE;AACrE,6EAA6E;AAC7E,sCAAsC;AACtC,EAAE;AACF,gFAAgF;AAChF,8EAA8E;AAC9E,+EAA+E;AAC/E,6EAA6E;AAC7E,6EAA6E;AAC7E,2EAA2E;AAC3E,uEAAuE;AACvE,mDAAmD;AACnD,EAAE;AACF,gFAAgF;AAChF,8EAA8E;AAC9E,iEAAiE;AAEjE,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAA;AAC1F,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAEnD,OAAO,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAA;AACjD,OAAO,EAAE,6BAA6B,EAAE,MAAM,iBAAiB,CAAA;AAE/D,MAAM,CAAC,MAAM,GAAG,GAAG,gBAAgB,CAAA;AAmCnC,SAAS,WAAW,CAAC,IAAY;IAC/B,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAA;IAC3B,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAA;IACrC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAA;QAC/B,OAAO,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAE,GAA+B,CAAC,CAAC,CAAC,IAAI,CAAA;IACxG,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAA;IACb,CAAC;AACH,CAAC;AAED,SAAS,aAAa,CAAC,GAA4B;IACjD,MAAM,GAAG,GAAG,GAAG,CAAC,OAAO,CAAA;IACvB,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,OAAO,EAAE,CAAA;IAC9C,MAAM,OAAO,GAAI,GAA+B,CAAC,OAAO,CAAA;IACxD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC;QAAE,OAAO,EAAE,CAAA;IACtC,OAAO,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAgC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAA;AAC/G,CAAC;AAED;;;;4BAI4B;AAC5B,MAAM,UAAU,iBAAiB,CAAC,KAAwB;IACxD,MAAM,IAAI,GAAoB,EAAE,CAAA;IAChC,MAAM,UAAU,GAAG,IAAI,GAAG,EAAU,CAAA;IACpC,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAA;IACjC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,GAAG,GAAG,WAAW,CAAC,IAAI,CAAC,CAAA;QAC7B,IAAI,CAAC,GAAG;YAAE,SAAQ;QAClB,KAAK,MAAM,KAAK,IAAI,aAAa,CAAC,GAAG,CAAC,EAAE,CAAC;YACvC,IAAI,KAAK,CAAC,IAAI,KAAK,UAAU,IAAI,OAAO,KAAK,CAAC,EAAE,KAAK,QAAQ,EAAE,CAAC;gBAC9D,IAAI,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;oBAAE,SAAQ;gBACtC,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAA;gBACxB,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,KAAK,CAAC,EAAE,EAAE,IAAI,EAAE,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC,CAAA;YAC5F,CAAC;iBAAM,IAAI,KAAK,CAAC,IAAI,KAAK,aAAa,IAAI,OAAO,KAAK,CAAC,WAAW,KAAK,QAAQ,EAAE,CAAC;gBACjF,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,CAAA;YAChC,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;AAC/C,CAAC;AAED;;6EAE6E;AAC7E,MAAM,UAAU,gBAAgB,CAC9B,SAAiB,EACjB,KAAgC,EAChC,KAAa,EACb,OAAe;IAEf,MAAM,GAAG,GAAkB,EAAE,CAAA;IAC7B,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,GAAG,GAAG,KAAK,GAAG,IAAI,CAAC,OAAO,CAAA;QAChC,IAAI,GAAG,GAAG,OAAO;YAAE,SAAQ;QAC3B,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YAC/B,GAAG,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,SAAS,EAAE,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,YAAY,EAAE,GAAG,EAAE,CAAC,CAAA;QAClG,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAA;AACZ,CAAC;AAED,SAAS,KAAK,CAAC,SAAiB;IAC9B,OAAO,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;AAC9B,CAAC;AAED;;;;sCAIsC;AACtC,MAAM,UAAU,mBAAmB,CAAC,CAAwB;IAC1D,OAAO,GAAG,GAAG,uBAAuB,CAAC,CAAC,cAAc,CAAC,MAAM,YAAY,CAAC,CAAC,OAAO,YAAY,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,CAAA;AAChH,CAAC;AAED,YAAY;AACZ,MAAM,UAAU,aAAa,CAAC,CAAc;IAC1C,OAAO,GAAG,GAAG,yBAAyB,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC,OAAO,cAAc,CAAC,CAAC,SAAS,SAAS,CAAC,CAAC,IAAI,iBAAiB,CAAC,CAAC,YAAY,EAAE,CAAA;AACxJ,CAAC;AAED;iEACiE;AACjE,MAAM,UAAU,aAAa,CAAC,CAAc;IAC1C,OAAO,GAAG,GAAG,yBAAyB,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC,OAAO,cAAc,CAAC,CAAC,SAAS,SAAS,CAAC,CAAC,IAAI,iBAAiB,CAAC,CAAC,YAAY,EAAE,CAAA;AACxJ,CAAC;AAED;;;2CAG2C;AAC3C,MAAM,UAAU,iBAAiB,CAAC,CAAc;IAC9C,OAAO,GAAG,GAAG,8BAA8B,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC,OAAO,cAAc,CAAC,CAAC,SAAS,SAAS,CAAC,CAAC,IAAI,iBAAiB,CAAC,CAAC,YAAY,EAAE,CAAA;AAC7J,CAAC;AAED,MAAM,CAAC,MAAM,gBAAgB,GAAG,OAAO,CAAA;AACvC,MAAM,CAAC,MAAM,uBAAuB,GAAG,OAAO,CAAA;AAC9C;;;;4EAI4E;AAC5E,MAAM,CAAC,MAAM,UAAU,GAAG,IAAI,GAAG,IAAI,CAAA;AAcrC;4EAC4E;AAC5E,MAAM,UAAU,oBAAoB,CAClC,EAAmB,EACnB,OAAe,EACf,SAAiB;IAEjB,IAAI,OAAO,GAAG,CAAC,CAAA;IACf,MAAM,OAAO,GAAkB,EAAE,CAAA;IACjC,MAAM,cAAc,GAAG,EAAE,CAAC,cAAc,EAAE,CAAA;IAC1C,KAAK,MAAM,SAAS,IAAI,cAAc,EAAE,CAAC;QACvC,MAAM,KAAK,GAAqB,EAAE,CAAA;QAClC,KAAK,MAAM,CAAC,IAAI,EAAE,CAAC,eAAe,CAAC,SAAS,CAAC,EAAE,CAAC;YAC9C,MAAM,IAAI,GAAG,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,EAAE,SAAS,CAAC,CAAA;YAC3C,IAAI,CAAC,IAAI;gBAAE,SAAQ;YACnB,OAAO,IAAI,CAAC,CAAA;YACZ,KAAK,CAAC,IAAI,CAAC;gBACT,OAAO,EAAE,CAAC,CAAC,OAAO;gBAClB,IAAI,EAAE,CAAC,CAAC,IAAI;gBACZ,OAAO,EAAE,IAAI,CAAC,OAAO;gBACrB,SAAS,EAAE,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC;aACzC,CAAC,CAAA;QACJ,CAAC;QACD,OAAO,CAAC,IAAI,CAAC,GAAG,gBAAgB,CAAC,SAAS,EAAE,KAAK,EAAE,EAAE,CAAC,GAAG,EAAE,EAAE,OAAO,CAAC,CAAC,CAAA;IACxE,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,cAAc,EAAE,CAAA;AAC7C,CAAC;AAED;;;;;;;eAOe;AACf,MAAM,UAAU,sBAAsB,CAAC,eAAuB;IAC5D,OAAO;QACL,cAAc;YACZ,MAAM,GAAG,GAAa,EAAE,CAAA;YACxB,cAAc,CAAC,CAAC,CAAC,EAAE,EAAE;gBACnB,IAAI,CAAC,CAAC,CAAC,MAAM;oBAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAA;YACtC,CAAC,CAAC,CAAA;YACF,OAAO,GAAG,CAAA;QACZ,CAAC;QACD,eAAe,CAAC,SAAS;YACvB,MAAM,IAAI,GAA6C,EAAE,CAAA;YACzD,MAAM,GAAG,GAAG,6BAA6B,CAAC,eAAe,EAAE,SAAS,CAAC,CAAA;YACrE,IAAI,CAAC,GAAG;gBAAE,OAAO,IAAI,CAAA;YACrB,IAAI,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,CAAA;YACtC,uEAAuE;YACvE,8DAA8D;YAC9D,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,SAAS,EAAE,WAAW,CAAC,CAAA;YACzD,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC;gBAAE,OAAO,IAAI,CAAA;YACpC,IAAI,KAAe,CAAA;YACnB,IAAI,CAAC;gBACH,KAAK,GAAG,WAAW,CAAC,MAAM,CAAC,CAAA;YAC7B,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,IAAI,CAAA;YACb,CAAC;YACD,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;gBACtB,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC;oBAAE,SAAQ;gBAC9D,IAAI,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC,EAAE,QAAQ,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,EAAE,CAAC,CAAA;YACtE,CAAC;YACD,OAAO,IAAI,CAAA;QACb,CAAC;QACD,QAAQ,CAAC,IAAI,EAAE,QAAQ;YACrB,IAAI,EAAE,GAAkB,IAAI,CAAA;YAC5B,IAAI,CAAC;gBACH,MAAM,EAAE,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAA;gBACzB,MAAM,KAAK,GAAG,EAAE,CAAC,IAAI,GAAG,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAA;gBACzD,MAAM,MAAM,GAAG,EAAE,CAAC,IAAI,GAAG,KAAK,CAAA;gBAC9B,IAAI,MAAM,KAAK,CAAC;oBAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,CAAC,OAAO,EAAE,CAAA;gBAC3D,EAAE,GAAG,QAAQ,CAAC,IAAI,EAAE,GAAG,CAAC,CAAA;gBACxB,MAAM,GAAG,GAAG,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,CAAA;gBACtC,sEAAsE;gBACtE,gEAAgE;gBAChE,sEAAsE;gBACtE,MAAM,SAAS,GAAG,QAAQ,CAAC,EAAE,EAAE,GAAG,EAAE,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,CAAA;gBACrD,MAAM,IAAI,GAAG,GAAG,CAAC,QAAQ,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAA;gBACxD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;gBAC9B,uEAAuE;gBACvE,qEAAqE;gBACrE,IAAI,KAAK,GAAG,CAAC;oBAAE,KAAK,CAAC,KAAK,EAAE,CAAA;gBAC5B,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,CAAC,OAAO,EAAE,CAAA;YACvC,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,IAAI,CAAA;YACb,CAAC;oBAAS,CAAC;gBACT,IAAI,EAAE,KAAK,IAAI;oBAAE,SAAS,CAAC,EAAE,CAAC,CAAA;YAChC,CAAC;QACH,CAAC;QACD,GAAG,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE;KACtB,CAAA;AACH,CAAC;AAuBD,8CAA8C;AAC9C,SAAS,OAAO,CAAC,CAAc;IAC7B,OAAO,GAAG,CAAC,CAAC,SAAS,IAAI,CAAC,CAAC,SAAS,EAAE,CAAA;AACxC,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,IAA2B;IACjE,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,gBAAgB,CAAA;IAChD,MAAM,aAAa,GAAG,IAAI,CAAC,aAAa,IAAI,uBAAuB,CAAA;IACnE,MAAM,EAAE,GAAG,IAAI,CAAC,EAAE,IAAI,sBAAsB,CAAC,IAAI,CAAC,eAAe,CAAC,CAAA;IAClE,IAAI,KAAK,GAA0B,IAAI,CAAA;IACvC,IAAI,YAAY,GAAiC,IAAI,CAAA;IACrD;wEACoE;IACpE,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAuB,CAAA;IAC/C;6EACyE;IACzE,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAU,CAAA;IAElC,SAAS,QAAQ;QACf,MAAM,QAAQ,GAAG,oBAAoB,CAAC,EAAE,EAAE,OAAO,EAAE,UAAU,CAAC,CAAA;QAC9D,YAAY,GAAG,QAAQ,CAAA;QACvB,IAAI,CAAC,MAAM,CAAC,mBAAmB,CAAC,QAAQ,CAAC,CAAC,CAAA;QAE1C,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAA;QACnD,KAAK,MAAM,IAAI,IAAI,QAAQ,CAAC,OAAO,EAAE,CAAC;YACpC,MAAM,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;YACzB,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC;gBAAE,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,CAAA;YACxD,QAAQ,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,CAAA;YACvB,IAAI,IAAI,CAAC,YAAY,IAAI,aAAa,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC7D,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;gBACjB,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAA;gBAC1B,IAAI,MAAM,EAAE,CAAC;oBACX,KAAK,MAAM,CAAC,IAAI,CAAC;yBACd,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,GAAG,8BAA8B,CAAC,CAAC,OAAO,cAAc,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC;yBAClG,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CACb,IAAI,CAAC,MAAM,CACT,GAAG,GAAG,yDAAyD,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAClH,CACF,CAAA;gBACL,CAAC;YACH,CAAC;QACH,CAAC;QACD,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAA;QACrD,KAAK,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,QAAQ,EAAE,CAAC;YACnC,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;gBAAE,SAAQ;YAC3B,wEAAwE;YACxE,yEAAyE;YACzE,8CAA8C;YAC9C,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAA;YAC7F,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAA;YACpB,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAA;QACtB,CAAC;QACD,OAAO,QAAQ,CAAA;IACjB,CAAC;IAED,OAAO;QACL,QAAQ;QACR,MAAM,EAAE,GAAG,EAAE,CAAC,YAAY;QAC1B,KAAK;YACH,IAAI,KAAK;gBAAE,OAAM;YACjB,KAAK,GAAG,WAAW,CAAC,GAAG,EAAE;gBACvB,IAAI,CAAC;oBACH,QAAQ,EAAE,CAAA;gBACZ,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,IAAI,CAAC,MAAM,CACT,GAAG,GAAG,kCAAkC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAC3F,CAAA;gBACH,CAAC;YACH,CAAC,EAAE,IAAI,CAAC,UAAU,CAAC,CAAA;YACnB,IAAI,OAAO,KAAK,CAAC,KAAK,KAAK,UAAU;gBAAE,KAAK,CAAC,KAAK,EAAE,CAAA;YACpD,IAAI,CAAC,MAAM,CACT,GAAG,GAAG,iCAAiC,IAAI,CAAC,UAAU,YAAY,OAAO,kBAAkB,aAAa,EAAE,CAC3G,CAAA;QACH,CAAC;QACD,IAAI;YACF,IAAI,KAAK,EAAE,CAAC;gBACV,aAAa,CAAC,KAAK,CAAC,CAAA;gBACpB,KAAK,GAAG,IAAI,CAAA;YACd,CAAC;QACH,CAAC;KACF,CAAA;AACH,CAAC;AAED;;;+EAG+E;AAC/E,MAAM,UAAU,yBAAyB,CAAC,IAGzC;IACC,MAAM,GAAG,GAAG,oBAAoB,IAAI,CAAC,MAAM,4BAA4B,CAAA;IACvE,OAAO,KAAK,EAAE,CAAC,EAAE,EAAE;QACjB,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;gBAC3B,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;gBAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;oBACnB,SAAS,EAAE,CAAC,CAAC,SAAS;oBACtB,OAAO,EAAE,CAAC,CAAC,OAAO;oBAClB,SAAS,EAAE,CAAC,CAAC,SAAS;oBACtB,IAAI,EAAE,CAAC,CAAC,IAAI;oBACZ,YAAY,EAAE,CAAC,CAAC,YAAY;iBAC7B,CAAC;aACH,CAAC,CAAA;YACF,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;gBACZ,IAAI,CAAC,MAAM,CAAC,GAAG,GAAG,mCAAmC,GAAG,CAAC,MAAM,EAAE,CAAC,CAAA;gBAClE,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,CAAA;YAC9C,CAAC;YACD,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAA+C,CAAA;YAC7E,OAAO;gBACL,SAAS,EAAE,IAAI,CAAC,SAAS,KAAK,IAAI;gBAClC,OAAO,EAAE,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM;aAClE,CAAA;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,MAAM,CACT,GAAG,GAAG,gCAAgC,IAAI,CAAC,SAAS,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,EAAE,CACzG,CAAA;YACD,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,CAAA;QAC9C,CAAC;IACH,CAAC,CAAA;AACH,CAAC"}

package/payload/platform/services/claude-session-manager/dist/index.js

@@ -39,6 +39,7 @@ import { createRoleCensus } from './role-census.js';
 import { createPublicPromptSurfaceCensus } from './public-prompt-surface.js';
 import { createPublicKnowledgeAudit, readPublicAgentKnowledge } from './public-knowledge-audit.js';
 import { createPtyCensus } from './pty-census.js';
+import { createBlockedToolCensus, postBlockedNotifyViaFetch } from './blocked-tool-census.js';
 import { createSliceMemoryPolicy } from './slice-memory-policy.js';
 import { emitRootlessCensus, createRootlessAudit } from './rootless-client-audit.js';
 import { createPreferenceAudit } from './preference-reconciliation-audit.js';
@@ -48,9 +49,11 @@ import { createPassiveIntakeAudit } from './passive-intake-audit.js';
 import { createPassiveDispatchPrune } from './passive-dispatch-prune.js';
 import { createXacctCensus } from './cross-account-census.js';
 import { createAccountDirSchemaReconcile } from './account-dir-schema-reconcile.js';
+import { createQuoteDeliveryReconcile } from './quote-delivery-reconcile.js';
 import { createSessionCapAudit } from './session-cap-audit.js';
 import { createSkillStalenessAudit, collectPlatformSkillMtimes, collectPremiumSkillMtimes, resolveEnabledPlugins, buildLiveSessionRefs, parseProcStartMs, } from './skill-staleness-audit.js';
 import { createPublicSurfaceAudit, parseMcpLogServerName } from './public-surface-audit.js';
+import { createSpecialistPreferenceAudit, readLinesSync } from './specialist-preference-audit.js';
 import { projectsDirForCwd, sessionsDir, jsonlPathForSessionId, slugForExistingJsonl, jsonlPathForSlug, sidecarPathForSlug } from './jsonl-path.js';
 import { readSidecar } from './session-sidecar.js';
 import { runSystemPromptSelfTest, runIdentityDriftAssertion, runIdentityForbiddenTokenCheck } from './system-prompt.js';
@@ -885,6 +888,76 @@ async function main() {
         },
     });
     publicSurfaceAudit.start();
+    // Task 2469 — the second question about a specialist. The registry reconcile
+    // beside the spawn answers whether one CAN be reached; this answers whether
+    // it WAS. Both were needed: four authored clerks owned the works orders,
+    // invoices and client emails on a live account while content-producer
+    // produced all of them, and every reachability signal read green throughout.
+    //
+    // `<projectDir>/<sessionId>/subagents/` is the only surface that ties a write
+    // to a specialist — the parent transcript carries none of a subagent's tool
+    // calls — so the walk is over that directory across every account on the
+    // install. 300s rather than the 60s beside it: this reads transcripts, and
+    // the mtime guard means a steady state costs one stat per file.
+    const preferenceProjectsRoot = dirname(projectsDirForCwd(config.spawnCwd));
+    /** sessionId -> its `subagents/` directory, rebuilt by `listSessions` at the
+     *  top of every tick. Held here rather than in the audit because resolving a
+     *  session id to a path is install layout, which is this file's business. */
+    const subagentDirs = new Map();
+    const specialistPreferenceAudit = createSpecialistPreferenceAudit({
+        intervalMs: 300_000,
+        logger: log,
+        listSessions: () => {
+            subagentDirs.clear();
+            let accountProjectDirs;
+            try {
+                accountProjectDirs = readdirSync(preferenceProjectsRoot);
+            }
+            catch {
+                return [];
+            }
+            for (const projectDir of accountProjectDirs) {
+                const abs = join(preferenceProjectsRoot, projectDir);
+                let sessions;
+                try {
+                    sessions = readdirSync(abs);
+                }
+                catch {
+                    continue;
+                }
+                for (const sessionId of sessions) {
+                    const dir = join(abs, sessionId, 'subagents');
+                    if (existsSync(dir))
+                        subagentDirs.set(sessionId, dir);
+                }
+            }
+            return Array.from(subagentDirs.keys());
+        },
+        listTranscripts: (sessionId) => {
+            const dir = subagentDirs.get(sessionId);
+            if (!dir)
+                return [];
+            // A throw here is caught by the audit, which names the session rather
+            // than losing the whole run to one unreadable directory.
+            return readdirSync(dir)
+                .filter((f) => f.startsWith('agent-') && f.endsWith('.jsonl'))
+                .map((f) => ({
+                jsonl: join(dir, f),
+                meta: join(dir, `${f.slice(0, -'.jsonl'.length)}.meta.json`),
+                mtimeMs: statSync(join(dir, f)).mtimeMs,
+            }));
+        },
+        readMeta: (path) => {
+            try {
+                return readFileSync(path, 'utf8');
+            }
+            catch {
+                return null;
+            }
+        },
+        readLines: (path) => readLinesSync(path),
+    });
+    specialistPreferenceAudit.start();
     // Task 2285 — standing audit for public-agent knowledge curation. A
     // `knowledgeKeywords` subscription nobody asked for is dormant until matching
     // content lands, and a KNOWLEDGE.md that grows after deployment emits nothing
@@ -1053,6 +1126,21 @@ async function main() {
         intervalMs: 300_000,
     });
     schemaReconcile.start();
+    // Task 2467 — standing reconcile of delivered client quotes against their
+    // render receipts. The three PreToolUse quote gates refuse the print, the
+    // Bash conversion and the write, but all three fail open on an uninspectable
+    // envelope and none can see a delivery route nobody enumerated. This pass is
+    // the backstop, and it is the only instrument that can see the failure at
+    // all: on 2026-08-05 a hand-authored client quote was printed and emailed
+    // while the bypass counter for that day sat at zero, so no transition log
+    // could have shown it. Emits one line per unreconciled document plus one
+    // summary per run, zero count included. Purely filesystem — no Neo4j.
+    const quoteReconcile = createQuoteDeliveryReconcile({
+        accountsDir: dirname(config.accountDir),
+        logger: log,
+        intervalMs: 900_000,
+    });
+    quoteReconcile.start();
     // Task 183 — recorder JSONL tail. Posts [recorder-session-init] and
     // [recorder-turn] lines for every database-operator specialist spawn,
     // routed through the platform UI's /api/admin/log-ingest loopback
@@ -1075,6 +1163,25 @@ async function main() {
         postLogLine: postLogLineViaFetch({ uiPort: uiPortForTail || '0', logger: log }),
         logger: log,
     });
+    // Task 2476 — standing blocked-tool census. A `dangerousRemoval` card is
+    // raised even under bypassPermissions (that entry is `bypassImmune: true`),
+    // and when it is raised inside a background subagent its only prompt surface
+    // is the parent session UI, which a channel operator cannot reach. Nothing
+    // emits an event for that state and it does not reproduce on demand, so it is
+    // detected by reconciling unmatched `tool_use` against `tool_result` across
+    // each live session's transcripts every 60s — never by a log hung on an
+    // action. Registered here rather than beside the other 60s censuses above
+    // because it shares the recorder's `uiPortForTail`, declared just above.
+    const blockedToolCensus = createBlockedToolCensus({
+        // The STATE ROOT, not a spawn cwd: Task 1490 re-points spawnCwd per
+        // sub-account spawn, so a cwd-keyed census would be blind to every client
+        // session (http-server.ts:815).
+        claudeConfigDir: claudeConfigDirResolved,
+        intervalMs: 60_000,
+        logger: log,
+        notify: postBlockedNotifyViaFetch({ uiPort: uiPortForTail || '0', logger: log }),
+    });
+    blockedToolCensus.start();
     // Task 278 — derives effectivePermissionMode from the per-session
     // auto-mode debug capture. http-server's jsonl-event subscriber drives it.
     const permissionModeTail = createPermissionModeTail({ logger: log });