@rubytech/create-maxy-code 0.1.569 → 0.1.570

package/payload/platform/scripts/__tests__/mailbox-inject-registered.test.sh

@@ -1,32 +1,26 @@
 #!/usr/bin/env bash
-# Task 2157 — the hook must be registered in BOTH writers, with the SAME resolved
-# command string. The provision-time heredoc is a frequent merge-conflict site,
-# and the backfill lib is the only thing that reaches client sub-accounts, so
-# losing either is silent. Drift between the two is worse than losing one: the
-# backfill would not recognise what provision wrote, and would append a second
-# copy to every house account on every install.
+# Task 2157 — the hook must be registered in the account-settings template, in
+# the UserPromptSubmit event, with a fully resolved command path. The template
+# is the single writer since Task 2467, and Task 2475 retired the backfill lib
+# that used to be the second one, so losing the entry here loses it everywhere.
 #
-# Substring greps are deliberately avoided for the command itself: the lib's own
-# filename contains "mailbox-inject.sh", so a bare grep for that is satisfied by
-# a comment and proves nothing about what the lib would write.
+# Substring greps are deliberately avoided for the command itself: a bare grep
+# for "mailbox-inject.sh" is satisfied by a comment and proves nothing about
+# what would be written.
 set -uo pipefail
 DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
 PROV="$DIR/../../templates/account-settings.json"
-BACKFILL="$DIR/../lib/account-settings-mailbox-inject.sh"
-SETUP="$DIR/../setup-account.sh"
 PASS=0; FAIL=0
 
 ok()  { echo "PASS: $1"; PASS=$((PASS+1)); }
 bad() { echo "FAIL: $1" >&2; FAIL=$((FAIL+1)); }
 
-# What provision-account-dir.sh writes into the settings heredoc. HOOKS_PATH is
-# assigned there as the literal string $PLATFORM_ROOT/plugins/admin/hooks, so the
-# resolved command is the same string the backfill lib holds.
+# The exact line the template must carry. $PLATFORM_ROOT is a literal in the
+# settings file, resolved by Claude Code at hook-run time.
 PROV_LINE='{ "type": "command", "command": "bash $PLATFORM_ROOT/plugins/admin/hooks/mailbox-inject.sh" }'
-RESOLVED='bash $PLATFORM_ROOT/plugins/admin/hooks/mailbox-inject.sh'
 
 if /usr/bin/grep -qF "$PROV_LINE" "$PROV"; then
-  ok "provision-account-dir.sh writes the hook into a UserPromptSubmit entry"
+  ok "the template writes the hook into a UserPromptSubmit entry"
 else
   bad "exact provision command line absent from $PROV"
 fi
@@ -44,36 +38,18 @@ else
   bad "mailbox-inject.sh is not inside the UserPromptSubmit array in $PROV"
 fi
 
-# The backfill lib must hold the RESOLVED form of that same command.
-if /usr/bin/grep -qF "_MBXINJECT_CMD='$RESOLVED'" "$BACKFILL"; then
-  ok "the backfill lib writes the same resolved command string"
-else
-  bad "backfill _MBXINJECT_CMD is not '$RESOLVED' in $BACKFILL"
-fi
-
-# HOOKS_PATH must still resolve to the path the backfill lib assumes; if someone
-# repoints it, the two writers silently disagree and every account gets two hooks.
+# The command must be fully resolved in the template. An unresolved HOOKS_PATH
+# indirection would leave the path to be expanded by whoever copies the file,
+# and the account would carry a hook command that resolves to nothing.
 if ! /usr/bin/grep -q 'HOOKS_PATH' "$PROV"; then
   ok "the template carries no unresolved hook-path indirection"
 else
-  bad "$PROV still carries a HOOKS_PATH indirection, so the two writers can drift"
-fi
-
-if /usr/bin/grep -qF 'account-settings-mailbox-inject.sh' "$SETUP"; then
-  ok "backfill lib sourced by setup-account.sh"
-else
-  bad "backfill lib not sourced by $SETUP"
-fi
-
-if /usr/bin/grep -qE '^reconcile_all_accounts_mailbox_inject "\$ACCOUNTS_DIR"' "$SETUP"; then
-  ok "backfill invoked over every account by setup-account.sh"
-else
-  bad "reconcile_all_accounts_mailbox_inject not invoked in $SETUP"
+  bad "$PROV still carries a HOOKS_PATH indirection, so the written command would not resolve"
 fi
 
 echo "----"
 echo "PASS=$PASS FAIL=$FAIL"
-if [ $((PASS+FAIL)) -ne 6 ]; then
+if [ $((PASS+FAIL)) -ne 3 ]; then
   echo "FAIL: expected 6 checks, ran $((PASS+FAIL))" >&2
   exit 1
 fi

package/payload/platform/scripts/__tests__/public-prompt-gate-registered.test.sh

@@ -4,12 +4,12 @@
 # event and does not reproduce on demand: the only symptom is a stranger being
 # told something about the operator.
 #
-# Both writers are scanned. provision-account-dir.sh writes the array at account
-# creation; the account-settings-*.sh libs patch it onto accounts that already
-# exist, which is the only path that reaches client sub-accounts. Of the four
-# libs only mailbox-inject and public-surface touch this event — askgate patches
-# PreToolUse and pdf-conformance patches PostToolUse, so the filter skipping
-# them is correct rather than a broken parser.
+# The template is the single writer: provision-account-dir.sh copies
+# platform/templates/account-settings.json at account-creation time, and
+# setup-account.sh's reconcile_all_accounts_settings converges every existing
+# account against the same file on every install. Task 2475 retired the four
+# one-hook backfill libs that used to patch this array, so the template is the
+# only place a UserPromptSubmit hook can be registered.
 #
 # The guard is matched as a fixed string, never as a mention of the variable: a
 # hook that merely READS MAXY_PUBLIC_ALLOWED_TOOLS is not gated by it, and
@@ -17,6 +17,7 @@
 set -uo pipefail
 DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
 PROV="$DIR/../lib/provision-account-dir.sh"
+TPL="$DIR/../../templates/account-settings.json"
 HOOKS_DIR="$DIR/../../plugins/admin/hooks"
 GUARD='[ -n "${MAXY_PUBLIC_ALLOWED_TOOLS:-}" ]'
 INERT="archive-ingest-surface-gate.sh public-tool-surface.sh"
@@ -25,44 +26,28 @@ PASS=0; FAIL=0
 ok()  { echo "PASS: $1"; PASS=$((PASS+1)); }
 bad() { echo "FAIL: $1" >&2; FAIL=$((FAIL+1)); }
 
-# Every hook script named inside the provision heredoc's UserPromptSubmit array.
-# The script name is taken from the END of each `"command"` string, not from a
-# `hooks/` prefix: provision writes `bash $HOOKS_PATH/<name>.sh`, so the literal
-# directory never appears there and a prefix anchor silently matches nothing.
-PROV_HOOKS=$(python3 - "$PROV" <<'PY'
-import re, sys
-src = open(sys.argv[1], encoding="utf-8").read()
-m = re.search(r'"UserPromptSubmit"\s*:\s*\[(.*?)\n    \]', src, re.S)
-if not m:
-    print("")
-    sys.exit(0)
-cmds = re.findall(r'"command"\s*:\s*"([^"]*)"', m.group(1))
-names = [n.group(1) for n in (re.search(r'([A-Za-z0-9_.-]+\.sh)\s*$', c.strip()) for c in cmds) if n]
+# Every hook script named inside the template's UserPromptSubmit array. The
+# script name is taken from the END of each `"command"` string, not from a
+# `hooks/` prefix: the template writes `bash $PLATFORM_ROOT/plugins/admin/hooks/
+# <name>.sh`, and anchoring on a literal directory would break the first time
+# that prefix is spelled differently.
+TPL_HOOKS=$(python3 - "$TPL" <<'PY'
+import json, re, sys
+doc = json.load(open(sys.argv[1], encoding="utf-8"))
+cmds = [h.get("command", "")
+        for entry in doc.get("hooks", {}).get("UserPromptSubmit", [])
+        for h in entry.get("hooks", [])]
+names = [m.group(1) for m in (re.search(r'([A-Za-z0-9_.-]+\.sh)\s*$', c.strip()) for c in cmds) if m]
 print("\n".join(sorted(set(names))))
 PY
 )
 
-# Every hook script named by a backfill lib that patches the same array. Read
-# only from the `_<NAME>_CMD=` constant each lib registers, not from every `.sh`
-# in the file: these libs name their siblings in prose, and a bare `.sh` sweep
-# turns those comments into phantom registrations.
-BACKFILL_HOOKS=""
-for lib in "$DIR"/../lib/account-settings-*.sh; do
-  grep -q 'hooks\.UserPromptSubmit' "$lib" || continue
-  cmd_names=$(grep -oE "^_[A-Z0-9_]+_CMD='[^']*'" "$lib" | grep -oE "[A-Za-z0-9_.-]+\.sh'$" | tr -d "'")
-  if [ -z "$cmd_names" ]; then
-    bad "$(basename "$lib") patches UserPromptSubmit but names no _<NAME>_CMD script — the parser cannot see what it registers"
-  fi
-  BACKFILL_HOOKS="$BACKFILL_HOOKS
-$cmd_names"
-done
-
-ALL=$(printf '%s\n%s\n' "$PROV_HOOKS" "$BACKFILL_HOOKS" | grep -v '^$' | sort -u)
+ALL=$(printf '%s\n' "$TPL_HOOKS" | grep -v '^$' | sort -u)
 
 if [ -z "$ALL" ]; then
-  bad "no UserPromptSubmit hooks found in either writer — the parser is broken, not the tree"
+  bad "no UserPromptSubmit hooks found in the template — the parser is broken, not the tree"
 else
-  ok "found $(printf '%s\n' "$ALL" | wc -l | tr -d ' ') registered UserPromptSubmit hooks across both writers"
+  ok "found $(printf '%s\n' "$ALL" | wc -l | tr -d ' ') registered UserPromptSubmit hooks in the template"
 fi
 
 for h in $ALL; do

package/payload/platform/scripts/__tests__/public-surface-registered.test.sh

@@ -1,25 +1,20 @@
 #!/usr/bin/env bash
-# Task 2339 — the hook must be registered in BOTH writers, on BOTH events, with
-# the SAME resolved command string. The provision-time heredoc is a frequent
-# merge-conflict site and the backfill lib is the only thing that reaches client
-# sub-accounts, so losing either is silent. Drift between them is worse than
-# losing one: the backfill would not recognise what provision wrote and would
-# append a second copy to every house account on every install.
+# Task 2339 — the hook must be registered in the account-settings template, on
+# all three events, with a fully resolved command path. The template is the
+# single writer since Task 2467, and Task 2475 retired the backfill lib that
+# used to be the second one, so losing an entry here loses it everywhere.
 set -uo pipefail
 DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
 PROV="$DIR/../../templates/account-settings.json"
-BACKFILL="$DIR/../lib/account-settings-public-surface.sh"
-SETUP="$DIR/../setup-account.sh"
 PASS=0; FAIL=0
 
 ok()  { echo "PASS: $1"; PASS=$((PASS+1)); }
 bad() { echo "FAIL: $1" >&2; FAIL=$((FAIL+1)); }
 
 PROV_LINE='{ "type": "command", "command": "bash $PLATFORM_ROOT/plugins/admin/hooks/public-tool-surface.sh" }'
-RESOLVED='bash $PLATFORM_ROOT/plugins/admin/hooks/public-tool-surface.sh'
 
 if [ "$(/usr/bin/grep -cF "$PROV_LINE" "$PROV")" = "3" ]; then
-  ok "provision-account-dir.sh writes the hook exactly three times"
+  ok "the template writes the hook exactly three times"
 else
   bad "expected 3 provision command lines in $PROV"
 fi
@@ -69,34 +64,16 @@ else
   bad "public-tool-surface.sh is not inside the UserPromptSubmit array in $PROV"
 fi
 
-if /usr/bin/grep -qF "_PUBSURFACE_CMD='$RESOLVED'" "$BACKFILL"; then
-  ok "the backfill lib writes the same resolved command string"
-else
-  bad "backfill _PUBSURFACE_CMD is not '$RESOLVED' in $BACKFILL"
-fi
-
 if ! /usr/bin/grep -q 'HOOKS_PATH' "$PROV"; then
   ok "the template carries no unresolved hook-path indirection"
 else
-  bad "$PROV still carries a HOOKS_PATH indirection, so the two writers can drift"
-fi
-
-if /usr/bin/grep -qF 'account-settings-public-surface.sh' "$SETUP"; then
-  ok "backfill lib sourced by setup-account.sh"
-else
-  bad "backfill lib not sourced by $SETUP"
-fi
-
-if /usr/bin/grep -qE '^reconcile_all_accounts_public_surface "\$ACCOUNTS_DIR"' "$SETUP"; then
-  ok "backfill invoked over every account by setup-account.sh"
-else
-  bad "reconcile_all_accounts_public_surface not invoked in $SETUP"
+  bad "$PROV still carries a HOOKS_PATH indirection, so the written command would not resolve"
 fi
 
 echo "----"
 echo "PASS=$PASS FAIL=$FAIL"
-if [ $((PASS+FAIL)) -ne 8 ]; then
-  echo "FAIL: expected 8 checks, ran $((PASS+FAIL))" >&2
+if [ $((PASS+FAIL)) -ne 5 ]; then
+  echo "FAIL: expected 5 checks, ran $((PASS+FAIL))" >&2
   exit 1
 fi
 [ "$FAIL" -eq 0 ]

package/payload/platform/scripts/setup-account.sh

@@ -34,14 +34,6 @@ ACCOUNTS_DIR="$INSTALL_DIR/data/accounts"
 . "$SCRIPT_DIR/lib/resolve-account-dir.sh"
 # shellcheck source=lib/provision-account-dir.sh
 . "$SCRIPT_DIR/lib/provision-account-dir.sh"
-# shellcheck source=lib/account-settings-askgate.sh
-. "$SCRIPT_DIR/lib/account-settings-askgate.sh"
-# shellcheck source=lib/account-settings-pdf-conformance.sh
-. "$SCRIPT_DIR/lib/account-settings-pdf-conformance.sh"
-# shellcheck source=lib/account-settings-mailbox-inject.sh
-. "$SCRIPT_DIR/lib/account-settings-mailbox-inject.sh"
-# shellcheck source=lib/account-settings-public-surface.sh
-. "$SCRIPT_DIR/lib/account-settings-public-surface.sh"
 # shellcheck source=lib/read-brand-json.sh
 . "$SCRIPT_DIR/lib/read-brand-json.sh"
 # Resolve brand-aware persistent users.json path before the resolver runs.
@@ -73,62 +65,15 @@ provision_account_dir "$ACCOUNT_DIR" "$ACCOUNT_ID" "house"
 reconcile_all_accounts_owned_dirs "$ACCOUNTS_DIR"
 
 # ------------------------------------------------------------------
-# 4. Retrofit the AskUserQuestion carrier gate onto every existing account
+# 4. Converge the whole hook set on every account
 # ------------------------------------------------------------------
-# Standing check + durable backfill (Task 1683): provision_account_dir writes the
-# AskUserQuestion PreToolUse matcher (both gates) only at provision time, and this
-# script re-provisions only the house account — so a client sub-account created
-# before Task 1552 keeps a stale matcher with no channel-carrier gate and
-# re-wedges on a channel AskUserQuestion. Reconcile every account on every install
-# so the gate reaches pre-1552 accounts. Idempotent; logs one [backfill-1683] line
-# per account.
-reconcile_all_accounts_askgate "$ACCOUNTS_DIR"
-
-# ------------------------------------------------------------------
-# 5. Retrofit the quote-render PDF-conformance matcher onto every account
-# ------------------------------------------------------------------
-# Standing check + durable backfill (Task 1929): provision_account_dir writes the
-# PostToolUse browser-pdf-save matcher (quote-render-pdf-conformance.sh) only at
-# provision time, and this script re-provisions only the house account. An
-# account created before Task 1922 keeps a settings.json without the matcher and
-# never runs the PDF gate. Reconcile every account on every install so the gate
-# reaches pre-1922 accounts. Idempotent; logs one [backfill-1929] line per account.
-reconcile_all_accounts_pdf_conformance "$ACCOUNTS_DIR"
-
-# ------------------------------------------------------------------
-# 6. Retrofit the per-turn <mailboxes> injection hook onto every account
-# ------------------------------------------------------------------
-# Standing check + durable backfill (Task 2157): provision_account_dir writes the
-# UserPromptSubmit array only at provision time, and this script re-provisions
-# only the house account. A client sub-account created by the account-lifecycle
-# tool keeps a settings.json without mailbox-inject.sh and never gets the
-# standing mailbox list, so its sessions go on learning attachment state by
-# polling one mail plugin and reading that plugin's miss as an account-wide fact.
-# Reconcile every account on every install. Idempotent; logs one [backfill-2157]
-# line per account.
-reconcile_all_accounts_mailbox_inject "$ACCOUNTS_DIR"
-
-# ------------------------------------------------------------------
-# 7. Retrofit the realised-public-tool-surface hook onto every account
-# ------------------------------------------------------------------
-# Standing check + durable backfill (Task 2339): provision_account_dir writes the
-# matcher-less PreToolUse entry and the Stop entry only at provision time, and
-# this script re-provisions only the house account. Without this, the hook that
-# records what a public spawn's tools actually did would reach house accounts
-# only — including not reaching the account where five tools were seen running
-# under a one-tool allowlist. Reconcile every account on every install.
-# Idempotent; logs one [backfill-2339] line per account.
-reconcile_all_accounts_public_surface "$ACCOUNTS_DIR"
-
-# ------------------------------------------------------------------
-# 8. Converge the whole hook set on every account
-# ------------------------------------------------------------------
-# Steps 3 to 7 each retrofit one hook, and each was written after that hook was
-# found missing on a live account. provision_account_dir writes the full set,
-# but only at provision time, and this script re-provisions the house account
-# and no other — so every future hook repeats the same fault. This step
+# provision_account_dir writes the full hook set, but only at provision time,
+# and this script re-provisions the house account and no other — so an account
+# created before a hook landed would run a stale set indefinitely. This step
 # converges each account's settings against the shipped template instead, and
-# states the divergence count on every run including zero. A hook added to
+# states the divergence count on every run including zero. It is the single
+# writer of account settings: a hook added to
 # platform/templates/account-settings.json needs no backfill of its own.
+# (Task 2475 retired the four one-hook backfill libs this replaced.)
 . "$SCRIPT_DIR/lib/account-settings-reconcile.sh"
 reconcile_all_accounts_settings "$ACCOUNTS_DIR"

package/payload/platform/services/claude-session-manager/dist/blocked-tool-census.d.ts

@@ -0,0 +1,129 @@
+import type { Logger } from './types.js';
+export declare const TAG = "[blocked-tool]";
+export interface ToolUseRecord {
+    id: string;
+    name: string;
+}
+/** One transcript's scan result. `agentId` is `—` for the session's own
+ *  transcript and `agent-<id>` for a subagent's — the field that distinguishes
+ *  a card the operator CAN see in the session UI from one they cannot. */
+export interface TranscriptScan {
+    agentId: string;
+    path: string;
+    mtimeMs: number;
+    unmatched: ToolUseRecord[];
+}
+export interface BlockedCall {
+    sessionId: string;
+    agentId: string;
+    toolUseId: string;
+    tool: string;
+    blockedForMs: number;
+}
+export interface BlockedCensusSnapshot {
+    /** Transcripts read this tick, across every live session. */
+    scanned: number;
+    blocked: BlockedCall[];
+    /** The session ids that were live this tick. A previously-blocked call whose
+     *  session is no longer here did not resolve — the session went away — and
+     *  reporting that as `op=cleared` would tell the operator the block lifted. */
+    liveSessionIds: string[];
+}
+/** PURE. Every `tool_use` id in these lines with no matching `tool_result`.
+ *  Order is first-sighting order. Malformed lines are skipped, not thrown on:
+ *  a JSONL read can land mid-append. A `tool_use` carrying no `name` is
+ *  reported as `unknown` rather than dropped — an unnamed blocked call is
+ *  still a blocked call. */
+export declare function unmatchedToolUses(lines: readonly string[]): ToolUseRecord[];
+/** PURE. Which unmatched calls are blocked. Blocked means unmatched AND the
+ *  transcript has not advanced for `staleMs`. Without the staleness term every
+ *  in-flight call would be reported, which would make the signal useless. */
+export declare function blockedFromScans(sessionId: string, scans: readonly TranscriptScan[], nowMs: number, staleMs: number): BlockedCall[];
+/** PURE. Emitted every tick INCLUDING zero, so a census that stopped ticking is
+ *  distinguishable from one that found nothing. `sessions` is separate from
+ *  `scanned` on purpose: `sessions=3 scanned=0` is a census that could not
+ *  resolve a transcript for any live session, which without the first field
+ *  reads exactly like a quiet box. */
+export declare function formatBlockedCensus(s: BlockedCensusSnapshot): string;
+/** PURE. */
+export declare function formatBlocked(c: BlockedCall): string;
+/** PURE. Same ids as its `op=blocked` twin, so the pair is greppable. Emitted
+ *  ONLY when the session is still live and the result landed. */
+export declare function formatCleared(c: BlockedCall): string;
+/** PURE. The other way a blocked call leaves the reported set: its session
+ *  stopped being live. The call did NOT resolve, and saying `op=cleared` here
+ *  would tell the operator the block lifted when the session actually went
+ *  away with the card still unanswered. */
+export declare function formatSessionGone(c: BlockedCall): string;
+export declare const DEFAULT_STALE_MS = 120000;
+export declare const DEFAULT_NOTIFY_AFTER_MS = 180000;
+/** A `tool_result` always follows its `tool_use` in the same file, so a
+ *  contiguous tail containing the use contains its result too — unless one
+ *  result exceeds this window, in which case that one call reads as unmatched.
+ *  1 MB is a chosen bound, not a measured one; the failure mode it admits is a
+ *  false `op=blocked` on a call whose result was larger than the window. */
+export declare const TAIL_BYTES: number;
+export interface BlockedCensusIo {
+    listSessionIds(): string[];
+    /** The session's own transcript (`agentId: '—'`) followed by every
+     *  `<sessionId>/subagents/agent-*.jsonl`. */
+    listTranscripts(sessionId: string): Array<{
+        agentId: string;
+        path: string;
+    }>;
+    /** Last `maxBytes` of the file split into lines, plus its mtime. Null when
+     *  the file cannot be read. The first line is dropped when the read started
+     *  mid-record. */
+    readTail(path: string, maxBytes: number): {
+        lines: string[];
+        mtimeMs: number;
+    } | null;
+    now(): number;
+}
+/** IMPURE. `scanned` counts transcripts actually READ, so a session whose
+ *  files vanished does not inflate the count into looking like coverage. */
+export declare function collectBlockedCensus(io: BlockedCensusIo, staleMs: number, tailBytes: number): BlockedCensusSnapshot;
+/** `claudeConfigDir` is the state root (`CLAUDE_CONFIG_DIR`), NOT a spawn cwd.
+ *  Task 1490 re-points the manager's `spawnCwd` per sub-account spawn, so a
+ *  client session's transcript is filed under a slug derived from the
+ *  sub-account directory rather than the house cwd (http-server.ts:815 states
+ *  this: reading `deps.spawnCwd` "would always miss the file"). Keying this
+ *  census on one cwd would make it blind to exactly the sub-account sessions it
+ *  was written for, so it resolves each session through the all-slug scan
+ *  instead. */
+export declare function defaultBlockedCensusIo(claudeConfigDir: string): BlockedCensusIo;
+export interface BlockedToolCensusDeps {
+    /** State root (`CLAUDE_CONFIG_DIR`), not a spawn cwd. See
+     *  defaultBlockedCensusIo for why a cwd cannot be used here. */
+    claudeConfigDir: string;
+    intervalMs: number;
+    staleMs?: number;
+    notifyAfterMs?: number;
+    logger: Logger;
+    /** Injected in tests; production uses defaultBlockedCensusIo(claudeConfigDir). */
+    io?: BlockedCensusIo;
+    /** The loopback POST to the UI's notification route. Absent means log-only. */
+    notify?: (c: BlockedCall) => Promise<{
+        delivered: boolean;
+        channel: string;
+    }>;
+}
+export interface BlockedToolCensus {
+    tickOnce(): BlockedCensusSnapshot;
+    latest(): BlockedCensusSnapshot | null;
+    start(): void;
+    stop(): void;
+}
+export declare function createBlockedToolCensus(deps: BlockedToolCensusDeps): BlockedToolCensus;
+/** Production notifier. POSTs to the brand UI's loopback route, the same
+ *  transport `postLogLineViaFetch` uses. A throw or a non-200 resolves to
+ *  `delivered:false` rather than rejecting: the census logs the outcome either
+ *  way, and a send that failed silently is the blind spot this task closes. */
+export declare function postBlockedNotifyViaFetch(opts: {
+    uiPort: string;
+    logger: Logger;
+}): (c: BlockedCall) => Promise<{
+    delivered: boolean;
+    channel: string;
+}>;
+//# sourceMappingURL=blocked-tool-census.d.ts.map

package/payload/platform/services/claude-session-manager/dist/blocked-tool-census.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"blocked-tool-census.d.ts","sourceRoot":"","sources":["../src/blocked-tool-census.ts"],"names":[],"mappings":"AAiCA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,YAAY,CAAA;AAIxC,eAAO,MAAM,GAAG,mBAAmB,CAAA;AAEnC,MAAM,WAAW,aAAa;IAC5B,EAAE,EAAE,MAAM,CAAA;IACV,IAAI,EAAE,MAAM,CAAA;CACb;AAED;;0EAE0E;AAC1E,MAAM,WAAW,cAAc;IAC7B,OAAO,EAAE,MAAM,CAAA;IACf,IAAI,EAAE,MAAM,CAAA;IACZ,OAAO,EAAE,MAAM,CAAA;IACf,SAAS,EAAE,aAAa,EAAE,CAAA;CAC3B;AAED,MAAM,WAAW,WAAW;IAC1B,SAAS,EAAE,MAAM,CAAA;IACjB,OAAO,EAAE,MAAM,CAAA;IACf,SAAS,EAAE,MAAM,CAAA;IACjB,IAAI,EAAE,MAAM,CAAA;IACZ,YAAY,EAAE,MAAM,CAAA;CACrB;AAED,MAAM,WAAW,qBAAqB;IACpC,6DAA6D;IAC7D,OAAO,EAAE,MAAM,CAAA;IACf,OAAO,EAAE,WAAW,EAAE,CAAA;IACtB;;mFAE+E;IAC/E,cAAc,EAAE,MAAM,EAAE,CAAA;CACzB;AAqBD;;;;4BAI4B;AAC5B,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,GAAG,aAAa,EAAE,CAkB3E;AAED;;6EAE6E;AAC7E,wBAAgB,gBAAgB,CAC9B,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE,SAAS,cAAc,EAAE,EAChC,KAAK,EAAE,MAAM,EACb,OAAO,EAAE,MAAM,GACd,WAAW,EAAE,CAUf;AAMD;;;;sCAIsC;AACtC,wBAAgB,mBAAmB,CAAC,CAAC,EAAE,qBAAqB,GAAG,MAAM,CAEpE;AAED,YAAY;AACZ,wBAAgB,aAAa,CAAC,CAAC,EAAE,WAAW,GAAG,MAAM,CAEpD;AAED;iEACiE;AACjE,wBAAgB,aAAa,CAAC,CAAC,EAAE,WAAW,GAAG,MAAM,CAEpD;AAED;;;2CAG2C;AAC3C,wBAAgB,iBAAiB,CAAC,CAAC,EAAE,WAAW,GAAG,MAAM,CAExD;AAED,eAAO,MAAM,gBAAgB,SAAU,CAAA;AACvC,eAAO,MAAM,uBAAuB,SAAU,CAAA;AAC9C;;;;4EAI4E;AAC5E,eAAO,MAAM,UAAU,QAAc,CAAA;AAErC,MAAM,WAAW,eAAe;IAC9B,cAAc,IAAI,MAAM,EAAE,CAAA;IAC1B;iDAC6C;IAC7C,eAAe,CAAC,SAAS,EAAE,MAAM,GAAG,KAAK,CAAC;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;IAC5E;;sBAEkB;IAClB,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG;QAAE,KAAK,EAAE,MAAM,EAAE,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAA;IACrF,GAAG,IAAI,MAAM,CAAA;CACd;AAED;4EAC4E;AAC5E,wBAAgB,oBAAoB,CAClC,EAAE,EAAE,eAAe,EACnB,OAAO,EAAE,MAAM,EACf,SAAS,EAAE,MAAM,GAChB,qBAAqB,CAoBvB;AAED;;;;;;;eAOe;AACf,wBAAgB,sBAAsB,CAAC,eAAe,EAAE,MAAM,GAAG,eAAe,CAyD/E;AAED,MAAM,WAAW,qBAAqB;IACpC;oEACgE;IAChE,eAAe,EAAE,MAAM,CAAA;IACvB,UAAU,EAAE,MAAM,CAAA;IAClB,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB,MAAM,EAAE,MAAM,CAAA;IACd,kFAAkF;IAClF,EAAE,CAAC,EAAE,eAAe,CAAA;IACpB,+EAA+E;IAC/E,MAAM,CAAC,EAAE,CAAC,CAAC,EAAE,WAAW,KAAK,OAAO,CAAC;QAAE,SAAS,EAAE,OAAO,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;CAC9E;AAED,MAAM,WAAW,iBAAiB;IAChC,QAAQ,IAAI,qBAAqB,CAAA;IACjC,MAAM,IAAI,qBAAqB,GAAG,IAAI,CAAA;IACtC,KAAK,IAAI,IAAI,CAAA;IACb,IAAI,IAAI,IAAI,CAAA;CACb;AAOD,wBAAgB,uBAAuB,CAAC,IAAI,EAAE,qBAAqB,GAAG,iBAAiB,CA4EtF;AAED;;;+EAG+E;AAC/E,wBAAgB,yBAAyB,CAAC,IAAI,EAAE;IAC9C,MAAM,EAAE,MAAM,CAAA;IACd,MAAM,EAAE,MAAM,CAAA;CACf,GAAG,CAAC,CAAC,EAAE,WAAW,KAAK,OAAO,CAAC;IAAE,SAAS,EAAE,OAAO,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC,CA+BvE"}