@rubytech/create-maxy-code 0.1.573 → 0.1.574

package/payload/platform/services/claude-session-manager/dist/authored-specialist-tools.js

@@ -0,0 +1,144 @@
+// Task 2244 — which specialists are the ACCOUNT's own, and which tools are
+// theirs.
+//
+// Task 2244 defined both its deliverables against every card under
+// `<accountDir>/specialists/agents/`. Measured against the tree, that rule
+// refuses the admin nearly its whole surface: `provision-account-dir.sh:179-181`
+// copies every shipped template into each account, and `personal-assistant.md`
+// alone declares roughly 130 tools including the entire email, WhatsApp,
+// calendar and browser surfaces, while `content-producer.md` and
+// `sitedesk--quoter.md` declare Bash, Read, Edit and Write. So the set is
+// narrowed on two axes, both settled with the operator before implementation.
+//
+// Card axis — a card is the account's own when its filename appears in none of
+// the shipped roots. `<accountDir>/plugins/*/agents/` is deliberately NOT one of
+// those: that is where `store-skill` files an authored agent's durable copy, so
+// a card found there is still the account's own. These are the same roots
+// `runRosterCensus` takes as `durableDirs` and `durablePluginRoots`, used here as
+// a set difference so no new registry is introduced — the failure this tree has
+// already hit twice, in Task 2460's three unreconciled agent directories and
+// Task 2467's provision-time-only hook set.
+//
+// Tool axis — native tools are subtracted. Gating Bash or Read would refuse the
+// admin its own seat, and every authored card declares some of them.
+import { existsSync, readFileSync, readdirSync } from 'node:fs';
+import { join } from 'node:path';
+import { CC_NATIVE_TOOLS } from './specialist-drift.js';
+/** `*.md` entries directly in `dir`, for a SHIPPED root. An absent or unreadable
+ *  one contributes nothing: not every install carries premium-plugins, and an
+ *  unreadable platform tree must not cost an account its census line. The
+ *  consequence of swallowing here is a card wrongly counted as the account's
+ *  own, which is a visible over-count rather than a silent zero. */
+function markdownIn(dir) {
+    if (!existsSync(dir))
+        return [];
+    try {
+        return readdirSync(dir).filter((entry) => entry.endsWith('.md'));
+    }
+    catch {
+        return [];
+    }
+}
+/** `*.md` entries in the ACCOUNT's own specialists directory.
+ *
+ *  Absent means an account with no specialists, which is normal and yields
+ *  nothing. Present-but-unreadable is a measurement failure and THROWS, because
+ *  the two must not collapse: returning nothing there would report `declared=0`,
+ *  the unmeasured zero the census is forbidden to assert, and it would be
+ *  indistinguishable from an account that genuinely has none. The gate throws on
+ *  the same fault, so swallowing it here would leave the two surfaces disagreeing
+ *  about one account. */
+function accountMarkdownIn(dir) {
+    if (!existsSync(dir))
+        return [];
+    return readdirSync(dir).filter((entry) => entry.endsWith('.md'));
+}
+function subdirs(dir) {
+    if (!existsSync(dir))
+        return [];
+    try {
+        return readdirSync(dir, { withFileTypes: true })
+            .filter((entry) => entry.isDirectory())
+            .map((entry) => entry.name);
+    }
+    catch {
+        return [];
+    }
+}
+/** One frontmatter scalar, CRLF-tolerant and quote-stripping — the same idiom
+ *  `specialist-roster.ts` and `roster-census.ts` use, so all three agree on what
+ *  a card is called and what it declares. */
+function frontmatterField(raw, field) {
+    const fm = raw.match(/^---\r?\n([\s\S]*?)\r?\n---/);
+    if (!fm)
+        return null;
+    const m = fm[1].match(new RegExp(`^${field}:\\s*(.*?)\\r?$`, 'm'));
+    if (!m)
+        return null;
+    let value = m[1].trim();
+    if ((value.startsWith('"') && value.endsWith('"')) ||
+        (value.startsWith("'") && value.endsWith("'"))) {
+        value = value.slice(1, -1);
+    }
+    return value || null;
+}
+/** Every card in the account's specialists directory that no shipped root
+ *  delivers, sorted by filename so the derived tool map is stable across ticks.
+ *
+ *  A card missing `name` is skipped rather than throwing — the same tolerance
+ *  `readSpecialistRoster` applies, because one malformed file must not cost the
+ *  account its whole set. A card with no `tools` declares none, which is a real
+ *  state (an authored card can own a domain through prose alone) and not an
+ *  error. */
+export function readAuthoredCards(input) {
+    const shipped = new Set();
+    for (const dir of input.shippedDirs) {
+        for (const filename of markdownIn(dir))
+            shipped.add(filename);
+    }
+    for (const root of input.shippedPluginRoots) {
+        for (const plugin of subdirs(root)) {
+            for (const filename of markdownIn(join(root, plugin, 'agents')))
+                shipped.add(filename);
+        }
+    }
+    const out = [];
+    for (const filename of accountMarkdownIn(input.specialistsAgentsDir).sort()) {
+        if (shipped.has(filename))
+            continue;
+        let raw;
+        try {
+            raw = readFileSync(join(input.specialistsAgentsDir, filename), 'utf8');
+        }
+        catch {
+            continue;
+        }
+        const name = frontmatterField(raw, 'name');
+        if (!name)
+            continue;
+        const tools = (frontmatterField(raw, 'tools') ?? '')
+            .split(',')
+            .map((tool) => tool.trim())
+            .filter((tool) => tool.length > 0);
+        out.push({ filename, name, tools });
+    }
+    return out;
+}
+/** Tool name to the authored specialist that owns it, native tools removed.
+ *
+ *  First declarer wins when two cards name the same tool. The refusal names one
+ *  specialist, and an account that split a tool across two of its own clerks has
+ *  a roster problem that this gate is not the place to report. */
+export function gatedToolMap(cards) {
+    const map = new Map();
+    for (const card of cards) {
+        for (const tool of card.tools) {
+            if (CC_NATIVE_TOOLS.has(tool))
+                continue;
+            if (!map.has(tool))
+                map.set(tool, card.name);
+        }
+    }
+    return map;
+}
+//# sourceMappingURL=authored-specialist-tools.js.map

package/payload/platform/services/claude-session-manager/dist/authored-specialist-tools.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"authored-specialist-tools.js","sourceRoot":"","sources":["../src/authored-specialist-tools.ts"],"names":[],"mappings":"AAAA,2EAA2E;AAC3E,UAAU;AACV,EAAE;AACF,mEAAmE;AACnE,2EAA2E;AAC3E,iFAAiF;AACjF,+EAA+E;AAC/E,yEAAyE;AACzE,iEAAiE;AACjE,0EAA0E;AAC1E,8EAA8E;AAC9E,EAAE;AACF,+EAA+E;AAC/E,iFAAiF;AACjF,gFAAgF;AAChF,0EAA0E;AAC1E,kFAAkF;AAClF,gFAAgF;AAChF,6EAA6E;AAC7E,4CAA4C;AAC5C,EAAE;AACF,gFAAgF;AAChF,qEAAqE;AAErE,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,SAAS,CAAA;AAC/D,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAChC,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAA;AAoBvD;;;;oEAIoE;AACpE,SAAS,UAAU,CAAC,GAAW;IAC7B,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,EAAE,CAAA;IAC/B,IAAI,CAAC;QACH,OAAO,WAAW,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAA;IAClE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAA;IACX,CAAC;AACH,CAAC;AAED;;;;;;;;yBAQyB;AACzB,SAAS,iBAAiB,CAAC,GAAW;IACpC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,EAAE,CAAA;IAC/B,OAAO,WAAW,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAA;AAClE,CAAC;AAED,SAAS,OAAO,CAAC,GAAW;IAC1B,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,EAAE,CAAA;IAC/B,IAAI,CAAC;QACH,OAAO,WAAW,CAAC,GAAG,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC;aAC7C,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC;aACtC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;IAC/B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAA;IACX,CAAC;AACH,CAAC;AAED;;6CAE6C;AAC7C,SAAS,gBAAgB,CAAC,GAAW,EAAE,KAAa;IAClD,MAAM,EAAE,GAAG,GAAG,CAAC,KAAK,CAAC,6BAA6B,CAAC,CAAA;IACnD,IAAI,CAAC,EAAE;QAAE,OAAO,IAAI,CAAA;IACpB,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,IAAI,KAAK,iBAAiB,EAAE,GAAG,CAAC,CAAC,CAAA;IAClE,IAAI,CAAC,CAAC;QAAE,OAAO,IAAI,CAAA;IACnB,IAAI,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAA;IACvB,IACE,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;QAC9C,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,EAC9C,CAAC;QACD,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAA;IAC5B,CAAC;IACD,OAAO,KAAK,IAAI,IAAI,CAAA;AACtB,CAAC;AAED;;;;;;;aAOa;AACb,MAAM,UAAU,iBAAiB,CAAC,KAAyB;IACzD,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAA;IACjC,KAAK,MAAM,GAAG,IAAI,KAAK,CAAC,WAAW,EAAE,CAAC;QACpC,KAAK,MAAM,QAAQ,IAAI,UAAU,CAAC,GAAG,CAAC;YAAE,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAA;IAC/D,CAAC;IACD,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,kBAAkB,EAAE,CAAC;QAC5C,KAAK,MAAM,MAAM,IAAI,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;YACnC,KAAK,MAAM,QAAQ,IAAI,UAAU,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC;gBAAE,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAA;QACxF,CAAC;IACH,CAAC;IAED,MAAM,GAAG,GAAmB,EAAE,CAAA;IAC9B,KAAK,MAAM,QAAQ,IAAI,iBAAiB,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;QAC5E,IAAI,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC;YAAE,SAAQ;QACnC,IAAI,GAAW,CAAA;QACf,IAAI,CAAC;YACH,GAAG,GAAG,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,oBAAoB,EAAE,QAAQ,CAAC,EAAE,MAAM,CAAC,CAAA;QACxE,CAAC;QAAC,MAAM,CAAC;YACP,SAAQ;QACV,CAAC;QACD,MAAM,IAAI,GAAG,gBAAgB,CAAC,GAAG,EAAE,MAAM,CAAC,CAAA;QAC1C,IAAI,CAAC,IAAI;YAAE,SAAQ;QACnB,MAAM,KAAK,GAAG,CAAC,gBAAgB,CAAC,GAAG,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC;aACjD,KAAK,CAAC,GAAG,CAAC;aACV,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;aAC1B,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAA;QACpC,GAAG,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAA;IACrC,CAAC;IACD,OAAO,GAAG,CAAA;AACZ,CAAC;AAED;;;;kEAIkE;AAClE,MAAM,UAAU,YAAY,CAAC,KAA8B;IACzD,MAAM,GAAG,GAAG,IAAI,GAAG,EAAkB,CAAA;IACrC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YAC9B,IAAI,eAAe,CAAC,GAAG,CAAC,IAAI,CAAC;gBAAE,SAAQ;YACvC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC;gBAAE,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,CAAA;QAC9C,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAA;AACZ,CAAC"}

package/payload/platform/services/claude-session-manager/dist/canonical-tool-names.generated.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"canonical-tool-names.generated.d.ts","sourceRoot":"","sources":["../src/canonical-tool-names.generated.ts"],"names":[],"mappings":"AAQA,+EAA+E;AAC/E,eAAO,MAAM,gBAAgB,EAAE,SAAS,MAAM,EA2B7C,CAAA;AAED,gEAAgE;AAChE,eAAO,MAAM,yBAAyB,EAAE,SAAS,MAAM,EAsWtD,CAAA"}
+{"version":3,"file":"canonical-tool-names.generated.d.ts","sourceRoot":"","sources":["../src/canonical-tool-names.generated.ts"],"names":[],"mappings":"AAQA,+EAA+E;AAC/E,eAAO,MAAM,gBAAgB,EAAE,SAAS,MAAM,EA2B7C,CAAA;AAED,gEAAgE;AAChE,eAAO,MAAM,yBAAyB,EAAE,SAAS,MAAM,EAuWtD,CAAA"}

package/payload/platform/services/claude-session-manager/dist/canonical-tool-names.generated.js

@@ -52,6 +52,7 @@ export const CANONICAL_MAXY_TOOL_NAMES = [
     "mcp__plugin_admin_admin__action-pending",
     "mcp__plugin_admin_admin__action-reject",
     "mcp__plugin_admin_admin__admin-add",
+    "mcp__plugin_admin_admin__admin-bind",
     "mcp__plugin_admin_admin__admin-hostname",
     "mcp__plugin_admin_admin__admin-list",
     "mcp__plugin_admin_admin__admin-remove",

package/payload/platform/services/claude-session-manager/dist/canonical-tool-names.generated.js.map

@@ -1 +1 @@
-{"version":3,"file":"canonical-tool-names.generated.js","sourceRoot":"","sources":["../src/canonical-tool-names.generated.ts"],"names":[],"mappings":"AAAA,mCAAmC;AACnC,kEAAkE;AAClE,yDAAyD;AACzD,kFAAkF;AAClF,EAAE;AACF,yEAAyE;AACzE,6DAA6D;AAE7D,+EAA+E;AAC/E,MAAM,CAAC,MAAM,gBAAgB,GAAsB;IACjD,OAAO;IACP,KAAK;IACL,SAAS;IACT,WAAW;IACX,UAAU;IACV,UAAU;IACV,OAAO;IACP,YAAY;IACZ,QAAQ;IACR,OAAO;IACP,cAAc;IACd,WAAW;IACX,UAAU;IACV,QAAQ;IACR,QAAQ;IACR,SAAS;IACT,YAAY;IACZ,WAAW;IACX,YAAY;IACZ,gBAAgB;IAChB,UAAU;IACV,SAAS;IACT,cAAc;IACd,UAAU;IACV,MAAM;IACN,WAAW;CACZ,CAAA;AAED,gEAAgE;AAChE,MAAM,CAAC,MAAM,yBAAyB,GAAsB;IAC1D,yCAAyC;IACzC,yCAAyC;IACzC,kDAAkD;IAClD,sDAAsD;IACtD,yCAAyC;IACzC,yCAAyC;IACzC,uCAAuC;IACvC,wCAAwC;IACxC,iDAAiD;IACjD,yCAAyC;IACzC,iDAAiD;IACjD,yCAAyC;IACzC,sCAAsC;IACtC,yCAAyC;IACzC,wCAAwC;IACxC,oCAAoC;IACpC,yCAAyC;IACzC,qCAAqC;IACrC,uCAAuC;IACvC,2CAA2C;IAC3C,4CAA4C;IAC5C,uCAAuC;IACvC,uCAAuC;IACvC,sCAAsC;IACtC,qCAAqC;IACrC,uCAAuC;IACvC,yCAAyC;IACzC,4CAA4C;IAC5C,0CAA0C;IAC1C,2CAA2C;IAC3C,gDAAgD;IAChD,oCAAoC;IACpC,sCAAsC;IACtC,gDAAgD;IAChD,0CAA0C;IAC1C,uCAAuC;IACvC,0CAA0C;IAC1C,uCAAuC;IACvC,sCAAsC;IACtC,sDAAsD;IACtD,mDAAmD;IACnD,6CAA6C;IAC7C,wCAAwC;IACxC,yCAAyC;IACzC,qCAAqC;IACrC,qCAAqC;IACrC,uCAAuC;IACvC,sCAAsC;IACtC,wCAAwC;IACxC,+BAA+B;IAC/B,qCAAqC;IACrC,sCAAsC;IACtC,yCAAyC;IACzC,4CAA4C;IAC5C,uDAAuD;IACvD,+CAA+C;IAC/C,2CAA2C;IAC3C,gDAAgD;IAChD,oDAAoD;IACpD,4CAA4C;IAC5C,+CAA+C;IAC/C,+CAA+C;IAC/C,gDAAgD;IAChD,6CAA6C;IAC7C,6CAA6C;IAC7C,iDAAiD;IACjD,oDAAoD;IACpD,+CAA+C;IAC/C,2CAA2C;IAC3C,2CAA2C;IAC3C,+CAA+C;IAC/C,iDAAiD;IACjD,uDAAuD;IACvD,iDAAiD;IACjD,qDAAqD;IACrD,+CAA+C;IAC/C,+CAA+C;IAC/C,8CAA8C;IAC9C,+CAA+C;IAC/C,6CAA6C;IAC7C,+CAA+C;IAC/C,+CAA+C;IAC/C,6CAA6C;IAC7C,6CAA6C;IAC7C,kDAAkD;IAClD,6DAA6D;IAC7D,oDAAoD;IACpD,6CAA6C;IAC7C,oDAAoD;IACpD,iDAAiD;IACjD,kDAAkD;IAClD,sDAAsD;IACtD,sDAAsD;IACtD,0DAA0D;IAC1D,uCAAuC;IACvC,sCAAsC;IACtC,2CAA2C;IAC3C,2CAA2C;IAC3C,2CAA2C;IAC3C,sCAAsC;IACtC,iDAAiD;IACjD,2CAA2C;IAC3C,4CAA4C;IAC5C,uCAAuC;IACvC,4CAA4C;IAC5C,8CAA8C;IAC9C,qCAAqC;IACrC,sCAAsC;IACtC,uCAAuC;IACvC,qCAAqC;IACrC,qDAAqD;IACrD,sCAAsC;IACtC,8CAA8C;IAC9C,uCAAuC;IACvC,8CAA8C;IAC9C,8CAA8C;IAC9C,8CAA8C;IAC9C,8CAA8C;IAC9C,8CAA8C;IAC9C,+CAA+C;IAC/C,gDAAgD;IAChD,gDAAgD;IAChD,oDAAoD;IACpD,yDAAyD;IACzD,2DAA2D;IAC3D,mDAAmD;IACnD,mDAAmD;IACnD,kDAAkD;IAClD,qDAAqD;IACrD,iDAAiD;IACjD,oDAAoD;IACpD,mDAAmD;IACnD,qDAAqD;IACrD,sDAAsD;IACtD,uDAAuD;IACvD,wDAAwD;IACxD,0DAA0D;IAC1D,qDAAqD;IACrD,uDAAuD;IACvD,kEAAkE;IAClE,2DAA2D;IAC3D,yDAAyD;IACzD,+DAA+D;IAC/D,sDAAsD;IACtD,mDAAmD;IACnD,oDAAoD;IACpD,sDAAsD;IACtD,iEAAiE;IACjE,2DAA2D;IAC3D,yDAAyD;IACzD,yDAAyD;IACzD,sDAAsD;IACtD,uDAAuD;IACvD,yDAAyD;IACzD,sDAAsD;IACtD,uDAAuD;IACvD,2DAA2D;IAC3D,0DAA0D;IAC1D,wDAAwD;IACxD,qDAAqD;IACrD,sDAAsD;IACtD,gEAAgE;IAChE,qDAAqD;IACrD,oDAAoD;IACpD,iDAAiD;IACjD,kDAAkD;IAClD,wDAAwD;IACxD,oDAAoD;IACpD,wDAAwD;IACxD,wDAAwD;IACxD,qDAAqD;IACrD,uDAAuD;IACvD,sDAAsD;IACtD,mDAAmD;IACnD,oDAAoD;IACpD,qDAAqD;IACrD,kDAAkD;IAClD,mDAAmD;IACnD,qDAAqD;IACrD,0DAA0D;IAC1D,wDAAwD;IACxD,0DAA0D;IAC1D,sDAAsD;IACtD,sDAAsD;IACtD,sDAAsD;IACtD,mDAAmD;IACnD,8DAA8D;IAC9D,sDAAsD;IACtD,2CAA2C;IAC3C,+CAA+C;IAC/C,iDAAiD;IACjD,kDAAkD;IAClD,kDAAkD;IAClD,6CAA6C;IAC7C,6CAA6C;IAC7C,iEAAiE;IACjE,kEAAkE;IAClE,6DAA6D;IAC7D,8CAA8C;IAC9C,wDAAwD;IACxD,gDAAgD;IAChD,qDAAqD;IACrD,sDAAsD;IACtD,wDAAwD;IACxD,wCAAwC;IACxC,wCAAwC;IACxC,6CAA6C;IAC7C,6CAA6C;IAC7C,2CAA2C;IAC3C,iDAAiD;IACjD,wDAAwD;IACxD,0DAA0D;IAC1D,0CAA0C;IAC1C,6CAA6C;IAC7C,wCAAwC;IACxC,mDAAmD;IACnD,+CAA+C;IAC/C,mDAAmD;IACnD,0CAA0C;IAC1C,kDAAkD;IAClD,8CAA8C;IAC9C,oDAAoD;IACpD,kDAAkD;IAClD,+CAA+C;IAC/C,mDAAmD;IACnD,2CAA2C;IAC3C,qDAAqD;IACrD,+CAA+C;IAC/C,sDAAsD;IACtD,gDAAgD;IAChD,2CAA2C;IAC3C,gDAAgD;IAChD,0CAA0C;IAC1C,0CAA0C;IAC1C,kDAAkD;IAClD,yCAAyC;IACzC,kDAAkD;IAClD,2CAA2C;IAC3C,yCAAyC;IACzC,2CAA2C;IAC3C,4CAA4C;IAC5C,mDAAmD;IACnD,uDAAuD;IACvD,4DAA4D;IAC5D,sDAAsD;IACtD,sDAAsD;IACtD,qDAAqD;IACrD,wDAAwD;IACxD,oDAAoD;IACpD,uDAAuD;IACvD,sDAAsD;IACtD,oDAAoD;IACpD,4CAA4C;IAC5C,iDAAiD;IACjD,iDAAiD;IACjD,sDAAsD;IACtD,kDAAkD;IAClD,sDAAsD;IACtD,kDAAkD;IAClD,gDAAgD;IAChD,uDAAuD;IACvD,iDAAiD;IACjD,kDAAkD;IAClD,gDAAgD;IAChD,mDAAmD;IACnD,mDAAmD;IACnD,yDAAyD;IACzD,4DAA4D;IAC5D,6DAA6D;IAC7D,2DAA2D;IAC3D,2DAA2D;IAC3D,+DAA+D;IAC/D,+DAA+D;IAC/D,+DAA+D;IAC/D,0DAA0D;IAC1D,6DAA6D;IAC7D,6DAA6D;IAC7D,8DAA8D;IAC9D,8DAA8D;IAC9D,8DAA8D;IAC9D,qDAAqD;IACrD,sDAAsD;IACtD,2DAA2D;IAC3D,iDAAiD;IACjD,sDAAsD;IACtD,uDAAuD;IACvD,yDAAyD;IACzD,oDAAoD;IACpD,iEAAiE;IACjE,mDAAmD;IACnD,wDAAwD;IACxD,iDAAiD;IACjD,wDAAwD;IACxD,kDAAkD;IAClD,kDAAkD;IAClD,oDAAoD;IACpD,oDAAoD;IACpD,iDAAiD;IACjD,8DAA8D;IAC9D,4DAA4D;IAC5D,6DAA6D;IAC7D,gEAAgE;IAChE,iEAAiE;IACjE,iEAAiE;IACjE,qEAAqE;IACrE,mEAAmE;IACnE,qEAAqE;IACrE,kEAAkE;IAClE,mEAAmE;IACnE,kEAAkE;IAClE,wCAAwC;IACxC,gDAAgD;IAChD,6CAA6C;IAC7C,oDAAoD;IACpD,qDAAqD;IACrD,0DAA0D;IAC1D,sCAAsC;IACtC,6DAA6D;IAC7D,kEAAkE;IAClE,8DAA8D;IAC9D,oEAAoE;IACpE,0DAA0D;IAC1D,kDAAkD;IAClD,gDAAgD;IAChD,kEAAkE;IAClE,uDAAuD;IACvD,oDAAoD;IACpD,oDAAoD;IACpD,qDAAqD;IACrD,oDAAoD;IACpD,kDAAkD;IAClD,+CAA+C;IAC/C,oDAAoD;IACpD,gDAAgD;IAChD,yCAAyC;IACzC,uCAAuC;IACvC,oCAAoC;IACpC,qCAAqC;IACrC,uCAAuC;IACvC,qCAAqC;IACrC,yCAAyC;IACzC,qCAAqC;IACrC,sCAAsC;IACtC,oCAAoC;IACpC,iCAAiC;IACjC,kCAAkC;IAClC,mCAAmC;IACnC,oCAAoC;IACpC,oCAAoC;IACpC,kDAAkD;IAClD,kDAAkD;IAClD,mDAAmD;IACnD,+CAA+C;IAC/C,gDAAgD;IAChD,gDAAgD;IAChD,kDAAkD;IAClD,oDAAoD;CACrD,CAAA"}
+{"version":3,"file":"canonical-tool-names.generated.js","sourceRoot":"","sources":["../src/canonical-tool-names.generated.ts"],"names":[],"mappings":"AAAA,mCAAmC;AACnC,kEAAkE;AAClE,yDAAyD;AACzD,kFAAkF;AAClF,EAAE;AACF,yEAAyE;AACzE,6DAA6D;AAE7D,+EAA+E;AAC/E,MAAM,CAAC,MAAM,gBAAgB,GAAsB;IACjD,OAAO;IACP,KAAK;IACL,SAAS;IACT,WAAW;IACX,UAAU;IACV,UAAU;IACV,OAAO;IACP,YAAY;IACZ,QAAQ;IACR,OAAO;IACP,cAAc;IACd,WAAW;IACX,UAAU;IACV,QAAQ;IACR,QAAQ;IACR,SAAS;IACT,YAAY;IACZ,WAAW;IACX,YAAY;IACZ,gBAAgB;IAChB,UAAU;IACV,SAAS;IACT,cAAc;IACd,UAAU;IACV,MAAM;IACN,WAAW;CACZ,CAAA;AAED,gEAAgE;AAChE,MAAM,CAAC,MAAM,yBAAyB,GAAsB;IAC1D,yCAAyC;IACzC,yCAAyC;IACzC,kDAAkD;IAClD,sDAAsD;IACtD,yCAAyC;IACzC,yCAAyC;IACzC,uCAAuC;IACvC,wCAAwC;IACxC,iDAAiD;IACjD,yCAAyC;IACzC,iDAAiD;IACjD,yCAAyC;IACzC,sCAAsC;IACtC,yCAAyC;IACzC,wCAAwC;IACxC,oCAAoC;IACpC,qCAAqC;IACrC,yCAAyC;IACzC,qCAAqC;IACrC,uCAAuC;IACvC,2CAA2C;IAC3C,4CAA4C;IAC5C,uCAAuC;IACvC,uCAAuC;IACvC,sCAAsC;IACtC,qCAAqC;IACrC,uCAAuC;IACvC,yCAAyC;IACzC,4CAA4C;IAC5C,0CAA0C;IAC1C,2CAA2C;IAC3C,gDAAgD;IAChD,oCAAoC;IACpC,sCAAsC;IACtC,gDAAgD;IAChD,0CAA0C;IAC1C,uCAAuC;IACvC,0CAA0C;IAC1C,uCAAuC;IACvC,sCAAsC;IACtC,sDAAsD;IACtD,mDAAmD;IACnD,6CAA6C;IAC7C,wCAAwC;IACxC,yCAAyC;IACzC,qCAAqC;IACrC,qCAAqC;IACrC,uCAAuC;IACvC,sCAAsC;IACtC,wCAAwC;IACxC,+BAA+B;IAC/B,qCAAqC;IACrC,sCAAsC;IACtC,yCAAyC;IACzC,4CAA4C;IAC5C,uDAAuD;IACvD,+CAA+C;IAC/C,2CAA2C;IAC3C,gDAAgD;IAChD,oDAAoD;IACpD,4CAA4C;IAC5C,+CAA+C;IAC/C,+CAA+C;IAC/C,gDAAgD;IAChD,6CAA6C;IAC7C,6CAA6C;IAC7C,iDAAiD;IACjD,oDAAoD;IACpD,+CAA+C;IAC/C,2CAA2C;IAC3C,2CAA2C;IAC3C,+CAA+C;IAC/C,iDAAiD;IACjD,uDAAuD;IACvD,iDAAiD;IACjD,qDAAqD;IACrD,+CAA+C;IAC/C,+CAA+C;IAC/C,8CAA8C;IAC9C,+CAA+C;IAC/C,6CAA6C;IAC7C,+CAA+C;IAC/C,+CAA+C;IAC/C,6CAA6C;IAC7C,6CAA6C;IAC7C,kDAAkD;IAClD,6DAA6D;IAC7D,oDAAoD;IACpD,6CAA6C;IAC7C,oDAAoD;IACpD,iDAAiD;IACjD,kDAAkD;IAClD,sDAAsD;IACtD,sDAAsD;IACtD,0DAA0D;IAC1D,uCAAuC;IACvC,sCAAsC;IACtC,2CAA2C;IAC3C,2CAA2C;IAC3C,2CAA2C;IAC3C,sCAAsC;IACtC,iDAAiD;IACjD,2CAA2C;IAC3C,4CAA4C;IAC5C,uCAAuC;IACvC,4CAA4C;IAC5C,8CAA8C;IAC9C,qCAAqC;IACrC,sCAAsC;IACtC,uCAAuC;IACvC,qCAAqC;IACrC,qDAAqD;IACrD,sCAAsC;IACtC,8CAA8C;IAC9C,uCAAuC;IACvC,8CAA8C;IAC9C,8CAA8C;IAC9C,8CAA8C;IAC9C,8CAA8C;IAC9C,8CAA8C;IAC9C,+CAA+C;IAC/C,gDAAgD;IAChD,gDAAgD;IAChD,oDAAoD;IACpD,yDAAyD;IACzD,2DAA2D;IAC3D,mDAAmD;IACnD,mDAAmD;IACnD,kDAAkD;IAClD,qDAAqD;IACrD,iDAAiD;IACjD,oDAAoD;IACpD,mDAAmD;IACnD,qDAAqD;IACrD,sDAAsD;IACtD,uDAAuD;IACvD,wDAAwD;IACxD,0DAA0D;IAC1D,qDAAqD;IACrD,uDAAuD;IACvD,kEAAkE;IAClE,2DAA2D;IAC3D,yDAAyD;IACzD,+DAA+D;IAC/D,sDAAsD;IACtD,mDAAmD;IACnD,oDAAoD;IACpD,sDAAsD;IACtD,iEAAiE;IACjE,2DAA2D;IAC3D,yDAAyD;IACzD,yDAAyD;IACzD,sDAAsD;IACtD,uDAAuD;IACvD,yDAAyD;IACzD,sDAAsD;IACtD,uDAAuD;IACvD,2DAA2D;IAC3D,0DAA0D;IAC1D,wDAAwD;IACxD,qDAAqD;IACrD,sDAAsD;IACtD,gEAAgE;IAChE,qDAAqD;IACrD,oDAAoD;IACpD,iDAAiD;IACjD,kDAAkD;IAClD,wDAAwD;IACxD,oDAAoD;IACpD,wDAAwD;IACxD,wDAAwD;IACxD,qDAAqD;IACrD,uDAAuD;IACvD,sDAAsD;IACtD,mDAAmD;IACnD,oDAAoD;IACpD,qDAAqD;IACrD,kDAAkD;IAClD,mDAAmD;IACnD,qDAAqD;IACrD,0DAA0D;IAC1D,wDAAwD;IACxD,0DAA0D;IAC1D,sDAAsD;IACtD,sDAAsD;IACtD,sDAAsD;IACtD,mDAAmD;IACnD,8DAA8D;IAC9D,sDAAsD;IACtD,2CAA2C;IAC3C,+CAA+C;IAC/C,iDAAiD;IACjD,kDAAkD;IAClD,kDAAkD;IAClD,6CAA6C;IAC7C,6CAA6C;IAC7C,iEAAiE;IACjE,kEAAkE;IAClE,6DAA6D;IAC7D,8CAA8C;IAC9C,wDAAwD;IACxD,gDAAgD;IAChD,qDAAqD;IACrD,sDAAsD;IACtD,wDAAwD;IACxD,wCAAwC;IACxC,wCAAwC;IACxC,6CAA6C;IAC7C,6CAA6C;IAC7C,2CAA2C;IAC3C,iDAAiD;IACjD,wDAAwD;IACxD,0DAA0D;IAC1D,0CAA0C;IAC1C,6CAA6C;IAC7C,wCAAwC;IACxC,mDAAmD;IACnD,+CAA+C;IAC/C,mDAAmD;IACnD,0CAA0C;IAC1C,kDAAkD;IAClD,8CAA8C;IAC9C,oDAAoD;IACpD,kDAAkD;IAClD,+CAA+C;IAC/C,mDAAmD;IACnD,2CAA2C;IAC3C,qDAAqD;IACrD,+CAA+C;IAC/C,sDAAsD;IACtD,gDAAgD;IAChD,2CAA2C;IAC3C,gDAAgD;IAChD,0CAA0C;IAC1C,0CAA0C;IAC1C,kDAAkD;IAClD,yCAAyC;IACzC,kDAAkD;IAClD,2CAA2C;IAC3C,yCAAyC;IACzC,2CAA2C;IAC3C,4CAA4C;IAC5C,mDAAmD;IACnD,uDAAuD;IACvD,4DAA4D;IAC5D,sDAAsD;IACtD,sDAAsD;IACtD,qDAAqD;IACrD,wDAAwD;IACxD,oDAAoD;IACpD,uDAAuD;IACvD,sDAAsD;IACtD,oDAAoD;IACpD,4CAA4C;IAC5C,iDAAiD;IACjD,iDAAiD;IACjD,sDAAsD;IACtD,kDAAkD;IAClD,sDAAsD;IACtD,kDAAkD;IAClD,gDAAgD;IAChD,uDAAuD;IACvD,iDAAiD;IACjD,kDAAkD;IAClD,gDAAgD;IAChD,mDAAmD;IACnD,mDAAmD;IACnD,yDAAyD;IACzD,4DAA4D;IAC5D,6DAA6D;IAC7D,2DAA2D;IAC3D,2DAA2D;IAC3D,+DAA+D;IAC/D,+DAA+D;IAC/D,+DAA+D;IAC/D,0DAA0D;IAC1D,6DAA6D;IAC7D,6DAA6D;IAC7D,8DAA8D;IAC9D,8DAA8D;IAC9D,8DAA8D;IAC9D,qDAAqD;IACrD,sDAAsD;IACtD,2DAA2D;IAC3D,iDAAiD;IACjD,sDAAsD;IACtD,uDAAuD;IACvD,yDAAyD;IACzD,oDAAoD;IACpD,iEAAiE;IACjE,mDAAmD;IACnD,wDAAwD;IACxD,iDAAiD;IACjD,wDAAwD;IACxD,kDAAkD;IAClD,kDAAkD;IAClD,oDAAoD;IACpD,oDAAoD;IACpD,iDAAiD;IACjD,8DAA8D;IAC9D,4DAA4D;IAC5D,6DAA6D;IAC7D,gEAAgE;IAChE,iEAAiE;IACjE,iEAAiE;IACjE,qEAAqE;IACrE,mEAAmE;IACnE,qEAAqE;IACrE,kEAAkE;IAClE,mEAAmE;IACnE,kEAAkE;IAClE,wCAAwC;IACxC,gDAAgD;IAChD,6CAA6C;IAC7C,oDAAoD;IACpD,qDAAqD;IACrD,0DAA0D;IAC1D,sCAAsC;IACtC,6DAA6D;IAC7D,kEAAkE;IAClE,8DAA8D;IAC9D,oEAAoE;IACpE,0DAA0D;IAC1D,kDAAkD;IAClD,gDAAgD;IAChD,kEAAkE;IAClE,uDAAuD;IACvD,oDAAoD;IACpD,oDAAoD;IACpD,qDAAqD;IACrD,oDAAoD;IACpD,kDAAkD;IAClD,+CAA+C;IAC/C,oDAAoD;IACpD,gDAAgD;IAChD,yCAAyC;IACzC,uCAAuC;IACvC,oCAAoC;IACpC,qCAAqC;IACrC,uCAAuC;IACvC,qCAAqC;IACrC,yCAAyC;IACzC,qCAAqC;IACrC,sCAAsC;IACtC,oCAAoC;IACpC,iCAAiC;IACjC,kCAAkC;IAClC,mCAAmC;IACnC,oCAAoC;IACpC,oCAAoC;IACpC,kDAAkD;IAClD,kDAAkD;IAClD,mDAAmD;IACnD,+CAA+C;IAC/C,gDAAgD;IAChD,gDAAgD;IAChD,kDAAkD;IAClD,oDAAoD;CACrD,CAAA"}

package/payload/platform/services/claude-session-manager/dist/html-structure-census.d.ts

@@ -0,0 +1,44 @@
+export interface HtmlStructureFinding {
+    accountId: string;
+    /** Path of the malformed document, relative to the account dir. */
+    path: string;
+    /** Line of the nested or unmatched <style> opener. */
+    line: number;
+}
+export interface HtmlStructureResult {
+    /** HTML documents walked on this account. */
+    documents: number;
+    findings: HtmlStructureFinding[];
+}
+/** One line per run, emitted with a zero count as well — silence is a broken
+ *  walk, not a clean install. */
+export declare function formatHtmlStructureCensusSummary(accounts: number, documents: number, malformed: number): string;
+/** One line per malformed document. The path is JSON-quoted because these
+ *  filenames carry spaces and a bare key=value line truncates at the first one. */
+export declare function formatHtmlStructureFinding(f: HtmlStructureFinding): string;
+/** Line of the first nested or unmatched <style> opener in `source`, else null.
+ *
+ *  HTML comments are stripped first, each replaced by its own newlines, so a
+ *  <style> inside <!-- … --> is not scanned and line numbers do not shift. That
+ *  case is real: two account templates carry one and are clean, and a
+ *  comment-blind detector reports both.
+ *
+ *  A CSS comment protects an OPENER but never a CLOSER, and the asymmetry is the
+ *  browser's, not a convenience. Style content is raw text to the HTML parser, so
+ *  `</style>` terminates the element wherever it appears, comment or not. An
+ *  opener, by contrast, is never a parse event inside a stylesheet — it is text
+ *  the CSS parser reads as an invalid selector, which is what eats the rule after
+ *  it. Inside a comment the CSS parser discards it and nothing is eaten: the
+ *  shipped property-brochure template documents its override slot exactly that
+ *  way and is correct. */
+export declare function htmlStyleFaultLine(source: string): number | null;
+/** Walk one account's HTML documents and report every malformed one. */
+export declare function collectAccountHtmlFindings(accountDir: string, accountId: string): HtmlStructureResult;
+export interface HtmlStructureCensusDeps {
+    /** <installDir>/data/accounts */
+    accountsDir: string;
+    logger: (line: string) => void;
+}
+/** One pass over every account. Called from the [quote-reconcile] tick. */
+export declare function runHtmlStructureCensus(deps: HtmlStructureCensusDeps): void;
+//# sourceMappingURL=html-structure-census.d.ts.map

package/payload/platform/services/claude-session-manager/dist/html-structure-census.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"html-structure-census.d.ts","sourceRoot":"","sources":["../src/html-structure-census.ts"],"names":[],"mappings":"AAmCA,MAAM,WAAW,oBAAoB;IACnC,SAAS,EAAE,MAAM,CAAA;IACjB,mEAAmE;IACnE,IAAI,EAAE,MAAM,CAAA;IACZ,sDAAsD;IACtD,IAAI,EAAE,MAAM,CAAA;CACb;AAED,MAAM,WAAW,mBAAmB;IAClC,6CAA6C;IAC7C,SAAS,EAAE,MAAM,CAAA;IACjB,QAAQ,EAAE,oBAAoB,EAAE,CAAA;CACjC;AAED;iCACiC;AACjC,wBAAgB,gCAAgC,CAC9C,QAAQ,EAAE,MAAM,EAChB,SAAS,EAAE,MAAM,EACjB,SAAS,EAAE,MAAM,GAChB,MAAM,CAER;AAED;mFACmF;AACnF,wBAAgB,0BAA0B,CAAC,CAAC,EAAE,oBAAoB,GAAG,MAAM,CAE1E;AAWD;;;;;;;;;;;;;;0BAc0B;AAC1B,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAqBhE;AA+CD,wEAAwE;AACxE,wBAAgB,0BAA0B,CACxC,UAAU,EAAE,MAAM,EAClB,SAAS,EAAE,MAAM,GAChB,mBAAmB,CAkBrB;AAED,MAAM,WAAW,uBAAuB;IACtC,iCAAiC;IACjC,WAAW,EAAE,MAAM,CAAA;IACnB,MAAM,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAA;CAC/B;AAED,2EAA2E;AAC3E,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,uBAAuB,GAAG,IAAI,CAoB1E"}

package/payload/platform/services/claude-session-manager/dist/html-structure-census.js

@@ -0,0 +1,185 @@
+// Standing census of malformed <style> nesting across every account's HTML.
+//
+// A second <style> opener inside an open <style> element is not cosmetic. HTML
+// parses style content as raw text, so the FIRST </style> closes the outer
+// element: everything after it becomes body content and renders as visible text,
+// and the rule immediately after the stray opener is eaten as part of an invalid
+// selector. One fault, two symptoms — and on 2026-08-07 both were reported on a
+// client quotation that had been live since 2026-07-24.
+//
+// The write gate (plugins/admin/hooks/html-structure-gate.sh) refuses the write.
+// It cannot close the fault on its own: it cannot see what is already on disk,
+// and a Bash heredoc writes a file without passing a Write gate at all. This
+// pass is the backstop, and it is the only instrument that can see the state —
+// the failure emits no event and re-running the render surfaces nothing.
+//
+// The detector is the same three rules as the hook: comments stripped first,
+// then a depth-tracking walk of <style…>/</style…>, then an openers-equal-closers
+// check at end of input.
+//
+// Shape mirrors the standing-audit family (quote-delivery-reconcile.ts): pure
+// formatters that are unit-tested, an impure per-account collector, and a
+// one-pass entry point. It carries no timer of its own — the pass is called from
+// the [quote-reconcile] tick, so one timer drives both audits. Filesystem only:
+// no Neo4j, no writes, no deletes. A per-account error is caught so one bad
+// account never aborts the run.
+import { existsSync, readFileSync, readdirSync, statSync } from 'node:fs';
+import { join, relative } from 'node:path';
+const TAG = '[html-structure-census]';
+/** Directories whose HTML is not a client document: vendored packages, build
+ *  scratch, tool state and the account's own trash. */
+const EXCLUDED = new Set(['node_modules', '.wrangler', '.tool', '.trash']);
+/** One line per run, emitted with a zero count as well — silence is a broken
+ *  walk, not a clean install. */
+export function formatHtmlStructureCensusSummary(accounts, documents, malformed) {
+    return `${TAG} accounts=${accounts} documents=${documents} malformed=${malformed}`;
+}
+/** One line per malformed document. The path is JSON-quoted because these
+ *  filenames carry spaces and a bare key=value line truncates at the first one. */
+export function formatHtmlStructureFinding(f) {
+    return `${TAG} op=malformed account=${f.accountId} file=${JSON.stringify(f.path)} line=${f.line}`;
+}
+/** Spans of `/* … *​/` in `source`, as [start, end) index pairs. */
+function cssCommentSpans(source) {
+    const spans = [];
+    const re = /\/\*[\s\S]*?\*\//g;
+    let m;
+    while ((m = re.exec(source)) !== null)
+        spans.push([m.index, m.index + m[0].length]);
+    return spans;
+}
+/** Line of the first nested or unmatched <style> opener in `source`, else null.
+ *
+ *  HTML comments are stripped first, each replaced by its own newlines, so a
+ *  <style> inside <!-- … --> is not scanned and line numbers do not shift. That
+ *  case is real: two account templates carry one and are clean, and a
+ *  comment-blind detector reports both.
+ *
+ *  A CSS comment protects an OPENER but never a CLOSER, and the asymmetry is the
+ *  browser's, not a convenience. Style content is raw text to the HTML parser, so
+ *  `</style>` terminates the element wherever it appears, comment or not. An
+ *  opener, by contrast, is never a parse event inside a stylesheet — it is text
+ *  the CSS parser reads as an invalid selector, which is what eats the rule after
+ *  it. Inside a comment the CSS parser discards it and nothing is eaten: the
+ *  shipped property-brochure template documents its override slot exactly that
+ *  way and is correct. */
+export function htmlStyleFaultLine(source) {
+    const stripped = source.replace(/<!--[\s\S]*?-->/g, (m) => '\n'.repeat((m.match(/\n/g) ?? []).length));
+    const comments = cssCommentSpans(stripped);
+    const inComment = (i) => comments.some(([s, e]) => i >= s && i < e);
+    const re = /<\s*(\/)?\s*style\b[^>]*>/gi;
+    let depth = 0;
+    let openLine = 0;
+    let m;
+    while ((m = re.exec(stripped)) !== null) {
+        const line = stripped.slice(0, m.index).split('\n').length;
+        if (m[1]) {
+            if (depth > 0)
+                depth -= 1;
+        }
+        else if (depth > 0) {
+            if (inComment(m.index))
+                continue;
+            return line;
+        }
+        else {
+            depth = 1;
+            openLine = line;
+        }
+    }
+    return depth > 0 ? openLine : null;
+}
+/** Every .html/.htm under `dir` at any depth, skipping the excluded directories.
+ *  Scope is the whole account with an exclusion list, never a bucket list: a
+ *  bucket list is what let the live document through, since it sat under
+ *  sites/<project>/public/, which no quote bucket covers. */
+function listHtmlDeep(dir) {
+    const out = [];
+    let entries;
+    try {
+        entries = readdirSync(dir);
+    }
+    catch {
+        return out;
+    }
+    for (const name of entries) {
+        const p = join(dir, name);
+        try {
+            const st = statSync(p);
+            if (st.isDirectory()) {
+                if (!EXCLUDED.has(name))
+                    out.push(...listHtmlDeep(p));
+            }
+            else if (st.isFile()) {
+                const lower = name.toLowerCase();
+                if (lower.endsWith('.html') || lower.endsWith('.htm'))
+                    out.push(p);
+            }
+        }
+        catch {
+            // An entry that vanished mid-walk is not a finding.
+        }
+    }
+    return out;
+}
+function listDirs(dir) {
+    try {
+        return readdirSync(dir)
+            .map((n) => join(dir, n))
+            .filter((p) => {
+            try {
+                return statSync(p).isDirectory();
+            }
+            catch {
+                return false;
+            }
+        });
+    }
+    catch {
+        return [];
+    }
+}
+/** Walk one account's HTML documents and report every malformed one. */
+export function collectAccountHtmlFindings(accountDir, accountId) {
+    const findings = [];
+    let documents = 0;
+    for (const f of listHtmlDeep(accountDir)) {
+        documents += 1;
+        let source;
+        try {
+            source = readFileSync(f, 'utf8');
+        }
+        catch {
+            // An unreadable document is not evidence of a fault.
+            continue;
+        }
+        const line = htmlStyleFaultLine(source);
+        if (line !== null)
+            findings.push({ accountId, path: relative(accountDir, f), line });
+    }
+    return { documents, findings };
+}
+/** One pass over every account. Called from the [quote-reconcile] tick. */
+export function runHtmlStructureCensus(deps) {
+    let accounts = 0;
+    let documents = 0;
+    const findings = [];
+    for (const accountDir of listDirs(deps.accountsDir)) {
+        if (!existsSync(join(accountDir, 'account.json')))
+            continue;
+        accounts += 1;
+        const accountId = accountDir.slice(accountDir.lastIndexOf('/') + 1);
+        try {
+            const r = collectAccountHtmlFindings(accountDir, accountId);
+            documents += r.documents;
+            findings.push(...r.findings);
+        }
+        catch {
+            // One unreadable account never aborts the run.
+        }
+    }
+    for (const f of findings)
+        deps.logger(formatHtmlStructureFinding(f));
+    deps.logger(formatHtmlStructureCensusSummary(accounts, documents, findings.length));
+}
+//# sourceMappingURL=html-structure-census.js.map

package/payload/platform/services/claude-session-manager/dist/html-structure-census.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"html-structure-census.js","sourceRoot":"","sources":["../src/html-structure-census.ts"],"names":[],"mappings":"AAAA,4EAA4E;AAC5E,EAAE;AACF,+EAA+E;AAC/E,2EAA2E;AAC3E,iFAAiF;AACjF,iFAAiF;AACjF,gFAAgF;AAChF,wDAAwD;AACxD,EAAE;AACF,iFAAiF;AACjF,+EAA+E;AAC/E,6EAA6E;AAC7E,+EAA+E;AAC/E,yEAAyE;AACzE,EAAE;AACF,6EAA6E;AAC7E,kFAAkF;AAClF,yBAAyB;AACzB,EAAE;AACF,8EAA8E;AAC9E,0EAA0E;AAC1E,iFAAiF;AACjF,gFAAgF;AAChF,4EAA4E;AAC5E,gCAAgC;AAEhC,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAA;AACzE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAA;AAE1C,MAAM,GAAG,GAAG,yBAAyB,CAAA;AAErC;uDACuD;AACvD,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,CAAC,cAAc,EAAE,WAAW,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAA;AAgB1E;iCACiC;AACjC,MAAM,UAAU,gCAAgC,CAC9C,QAAgB,EAChB,SAAiB,EACjB,SAAiB;IAEjB,OAAO,GAAG,GAAG,aAAa,QAAQ,cAAc,SAAS,cAAc,SAAS,EAAE,CAAA;AACpF,CAAC;AAED;mFACmF;AACnF,MAAM,UAAU,0BAA0B,CAAC,CAAuB;IAChE,OAAO,GAAG,GAAG,yBAAyB,CAAC,CAAC,SAAS,SAAS,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,IAAI,EAAE,CAAA;AACnG,CAAC;AAED,oEAAoE;AACpE,SAAS,eAAe,CAAC,MAAc;IACrC,MAAM,KAAK,GAA4B,EAAE,CAAA;IACzC,MAAM,EAAE,GAAG,mBAAmB,CAAA;IAC9B,IAAI,CAAyB,CAAA;IAC7B,OAAO,CAAC,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,KAAK,IAAI;QAAE,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAA;IACnF,OAAO,KAAK,CAAA;AACd,CAAC;AAED;;;;;;;;;;;;;;0BAc0B;AAC1B,MAAM,UAAU,kBAAkB,CAAC,MAAc;IAC/C,MAAM,QAAQ,GAAG,MAAM,CAAC,OAAO,CAAC,kBAAkB,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAA;IACtG,MAAM,QAAQ,GAAG,eAAe,CAAC,QAAQ,CAAC,CAAA;IAC1C,MAAM,SAAS,GAAG,CAAC,CAAS,EAAW,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAA;IACpF,MAAM,EAAE,GAAG,6BAA6B,CAAA;IACxC,IAAI,KAAK,GAAG,CAAC,CAAA;IACb,IAAI,QAAQ,GAAG,CAAC,CAAA;IAChB,IAAI,CAAyB,CAAA;IAC7B,OAAO,CAAC,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;QACxC,MAAM,IAAI,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAA;QAC1D,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YACT,IAAI,KAAK,GAAG,CAAC;gBAAE,KAAK,IAAI,CAAC,CAAA;QAC3B,CAAC;aAAM,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;YACrB,IAAI,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC;gBAAE,SAAQ;YAChC,OAAO,IAAI,CAAA;QACb,CAAC;aAAM,CAAC;YACN,KAAK,GAAG,CAAC,CAAA;YACT,QAAQ,GAAG,IAAI,CAAA;QACjB,CAAC;IACH,CAAC;IACD,OAAO,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAA;AACpC,CAAC;AAED;;;6DAG6D;AAC7D,SAAS,YAAY,CAAC,GAAW;IAC/B,MAAM,GAAG,GAAa,EAAE,CAAA;IACxB,IAAI,OAAiB,CAAA;IACrB,IAAI,CAAC;QACH,OAAO,GAAG,WAAW,CAAC,GAAG,CAAC,CAAA;IAC5B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,GAAG,CAAA;IACZ,CAAC;IACD,KAAK,MAAM,IAAI,IAAI,OAAO,EAAE,CAAC;QAC3B,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAA;QACzB,IAAI,CAAC;YACH,MAAM,EAAE,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAA;YACtB,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC;gBACrB,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC;oBAAE,GAAG,CAAC,IAAI,CAAC,GAAG,YAAY,CAAC,CAAC,CAAC,CAAC,CAAA;YACvD,CAAC;iBAAM,IAAI,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC;gBACvB,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,EAAE,CAAA;gBAChC,IAAI,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC;oBAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;YACpE,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,oDAAoD;QACtD,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAA;AACZ,CAAC;AAED,SAAS,QAAQ,CAAC,GAAW;IAC3B,IAAI,CAAC;QACH,OAAO,WAAW,CAAC,GAAG,CAAC;aACpB,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;aACxB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE;YACZ,IAAI,CAAC;gBACH,OAAO,QAAQ,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAA;YAClC,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,KAAK,CAAA;YACd,CAAC;QACH,CAAC,CAAC,CAAA;IACN,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAA;IACX,CAAC;AACH,CAAC;AAED,wEAAwE;AACxE,MAAM,UAAU,0BAA0B,CACxC,UAAkB,EAClB,SAAiB;IAEjB,MAAM,QAAQ,GAA2B,EAAE,CAAA;IAC3C,IAAI,SAAS,GAAG,CAAC,CAAA;IAEjB,KAAK,MAAM,CAAC,IAAI,YAAY,CAAC,UAAU,CAAC,EAAE,CAAC;QACzC,SAAS,IAAI,CAAC,CAAA;QACd,IAAI,MAAc,CAAA;QAClB,IAAI,CAAC;YACH,MAAM,GAAG,YAAY,CAAC,CAAC,EAAE,MAAM,CAAC,CAAA;QAClC,CAAC;QAAC,MAAM,CAAC;YACP,qDAAqD;YACrD,SAAQ;QACV,CAAC;QACD,MAAM,IAAI,GAAG,kBAAkB,CAAC,MAAM,CAAC,CAAA;QACvC,IAAI,IAAI,KAAK,IAAI;YAAE,QAAQ,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,QAAQ,CAAC,UAAU,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAA;IACtF,CAAC;IAED,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAA;AAChC,CAAC;AAQD,2EAA2E;AAC3E,MAAM,UAAU,sBAAsB,CAAC,IAA6B;IAClE,IAAI,QAAQ,GAAG,CAAC,CAAA;IAChB,IAAI,SAAS,GAAG,CAAC,CAAA;IACjB,MAAM,QAAQ,GAA2B,EAAE,CAAA;IAE3C,KAAK,MAAM,UAAU,IAAI,QAAQ,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC;QACpD,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,UAAU,EAAE,cAAc,CAAC,CAAC;YAAE,SAAQ;QAC3D,QAAQ,IAAI,CAAC,CAAA;QACb,MAAM,SAAS,GAAG,UAAU,CAAC,KAAK,CAAC,UAAU,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAA;QACnE,IAAI,CAAC;YACH,MAAM,CAAC,GAAG,0BAA0B,CAAC,UAAU,EAAE,SAAS,CAAC,CAAA;YAC3D,SAAS,IAAI,CAAC,CAAC,SAAS,CAAA;YACxB,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAA;QAC9B,CAAC;QAAC,MAAM,CAAC;YACP,+CAA+C;QACjD,CAAC;IACH,CAAC;IAED,KAAK,MAAM,CAAC,IAAI,QAAQ;QAAE,IAAI,CAAC,MAAM,CAAC,0BAA0B,CAAC,CAAC,CAAC,CAAC,CAAA;IACpE,IAAI,CAAC,MAAM,CAAC,gCAAgC,CAAC,QAAQ,EAAE,SAAS,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAA;AACrF,CAAC"}

package/payload/platform/services/claude-session-manager/dist/index.js

@@ -42,6 +42,7 @@ import { createPtyCensus } from './pty-census.js';
 import { createBlockedToolCensus, postBlockedNotifyViaFetch } from './blocked-tool-census.js';
 import { createSliceMemoryPolicy } from './slice-memory-policy.js';
 import { emitRootlessCensus, createRootlessAudit } from './rootless-client-audit.js';
+import { createPrintCensus } from './quote-print-census.js';
 import { createPreferenceAudit } from './preference-reconciliation-audit.js';
 import { createIdentityAudit } from './identity-audit.js';
 import { createRedundantOperatorSeatAudit } from './redundant-operator-seat-audit.js';
@@ -54,6 +55,8 @@ import { createSessionCapAudit } from './session-cap-audit.js';
 import { createSkillStalenessAudit, collectPlatformSkillMtimes, collectPremiumSkillMtimes, resolveEnabledPlugins, buildLiveSessionRefs, parseProcStartMs, } from './skill-staleness-audit.js';
 import { createPublicSurfaceAudit, parseMcpLogServerName } from './public-surface-audit.js';
 import { createSpecialistPreferenceAudit, readLinesSync } from './specialist-preference-audit.js';
+import { createSpecialistCensus } from './specialist-census.js';
+import { gatedToolMap, readAuthoredCards } from './authored-specialist-tools.js';
 import { projectsDirForCwd, sessionsDir, jsonlPathForSessionId, slugForExistingJsonl, jsonlPathForSlug, sidecarPathForSlug } from './jsonl-path.js';
 import { readSidecar } from './session-sidecar.js';
 import { runSystemPromptSelfTest, runIdentityDriftAssertion, runIdentityForbiddenTokenCheck } from './system-prompt.js';
@@ -958,6 +961,100 @@ async function main() {
         readLines: (path) => readLinesSync(path),
     });
     specialistPreferenceAudit.start();
+    // Task 2244 — the fourth specialist signal, and the only one that counts a
+    // dispatch. The registry reconcile says a specialist CAN be reached, the
+    // roster census says it is advertised, and the preference audit above says the
+    // right one wrote an owned artefact. None of them sees the state that ran
+    // undetected for three days on a live account: four authored clerks present
+    // and resolvable, zero dispatches, 472 inline drafts. Skipped delegation
+    // writes no record, so only a check that reports on a QUIET account can see it
+    // — hence a line per account every tick, including all-zero.
+    //
+    // Authored cards only, native tools subtracted. Provisioning copies every
+    // shipped template into each account and one of them declares roughly 130
+    // tools, so counting every card's `tools:` would make `bypassed7d` count
+    // almost every call the admin makes.
+    //
+    // 300s and the mtime cache, matching the audit beside it: this reads parent
+    // transcripts, and a steady state costs one stat per file.
+    const specialistCensus = createSpecialistCensus({
+        intervalMs: 300_000,
+        logger: log,
+        now: () => Date.now(),
+        listAccounts: () => provisionedAccountDirs(),
+        resolveGated: (accountDir) => {
+            const cards = readAuthoredCards({
+                specialistsAgentsDir: join(accountDir, 'specialists', 'agents'),
+                shippedDirs: [join(platformRoot, 'templates', 'specialists', 'agents')],
+                // The ACCOUNT's own plugin root is deliberately absent: a card filed
+                // under <accountDir>/plugins/<x>/agents/ is that account's own durable
+                // copy, not something we ship, and treating it as shipped would drop
+                // exactly the cards this census exists to count.
+                shippedPluginRoots: [premiumPluginsRoot, pluginsRoot],
+            });
+            return {
+                declared: cards.length,
+                authoredNames: new Set(cards.map((card) => card.name)),
+                gated: new Set(gatedToolMap(cards).keys()),
+            };
+        },
+        listTranscripts: (accountDir) => {
+            const dir = projectsDirForCwd(accountDir);
+            const out = [];
+            // Both the live directory and `archive/`. The user-initiated archive route
+            // `mv`s a JSONL between the two, and a dispatch inside a session the
+            // operator later archived still happened — dropping it would manufacture
+            // the very `declared>0 dispatched7d=0` alarm this census exists to raise.
+            // The subagent meta files stay beside the session id in either case.
+            for (const root of [dir, join(dir, 'archive')]) {
+                if (!existsSync(root))
+                    continue;
+                for (const file of readdirSync(root)) {
+                    if (!file.endsWith('.jsonl'))
+                        continue;
+                    const path = join(root, file);
+                    let mtimeMs;
+                    try {
+                        mtimeMs = statSync(path).mtimeMs;
+                    }
+                    catch {
+                        // Archived or purged between the readdir and the stat. Skipping it
+                        // costs one transcript this tick; letting it throw would cost the
+                        // account its whole line and report a degradation that never was.
+                        continue;
+                    }
+                    out.push({ path, sessionId: file.slice(0, -'.jsonl'.length), mtimeMs });
+                }
+            }
+            return out;
+        },
+        readLines: (path) => readLinesSync(path),
+        readAgentTypes: (accountDir, sessionId) => {
+            // `agent-<id>.meta.json` is the only surface tying a subagent run to its
+            // type, and its `toolUseId` is the parent's own tool-use id, which is what
+            // makes the join to the parent transcript exact rather than by timestamp.
+            const dir = join(projectsDirForCwd(accountDir), sessionId, 'subagents');
+            const out = new Map();
+            if (!existsSync(dir))
+                return out;
+            for (const file of readdirSync(dir)) {
+                if (!file.endsWith('.meta.json'))
+                    continue;
+                try {
+                    const meta = JSON.parse(readFileSync(join(dir, file), 'utf8'));
+                    if (typeof meta.agentType === 'string' && typeof meta.toolUseId === 'string') {
+                        out.set(meta.toolUseId, meta.agentType);
+                    }
+                }
+                catch {
+                    // An unreadable meta leaves its dispatch unresolved, and countWindow
+                    // declines to count an unresolved dispatch. Never read as a success.
+                }
+            }
+            return out;
+        },
+    });
+    specialistCensus.start();
     // Task 2285 — standing audit for public-agent knowledge curation. A
     // `knowledgeKeywords` subscription nobody asked for is dormant until matching
     // content lands, and a KNOWLEDGE.md that grows after deployment emits nothing
@@ -1135,6 +1232,14 @@ async function main() {
     // while the bypass counter for that day sat at zero, so no transition log
     // could have shown it. Emits one line per unreconciled document plus one
     // summary per run, zero count included. Purely filesystem — no Neo4j.
+    //
+    // The same tick also runs the HTML structure census, which reports every
+    // client document holding a <style> element opened inside another one. That
+    // fault renders the rest of the stylesheet as visible text and discards the
+    // rule after the stray opener; the write gate refuses it at the write, but a
+    // gate cannot see what is already on disk and a Bash heredoc writes a file
+    // without passing one. Emits one line per malformed document plus one summary
+    // per run, zero count included.
     const quoteReconcile = createQuoteDeliveryReconcile({
         accountsDir: dirname(config.accountDir),
         logger: log,
@@ -1182,6 +1287,26 @@ async function main() {
         notify: postBlockedNotifyViaFetch({ uiPort: uiPortForTail || '0', logger: log }),
     });
     blockedToolCensus.start();
+    // Task 2446 — standing census over printed client documents. The PostToolUse
+    // conformance gate only fires on a print, so four of the six ways a document
+    // goes out with broken page chrome emit nothing at all and do not reproduce on
+    // demand: the gate passing a defective PDF, the gate never matching the path
+    // (account settings are written at provision time and never reconciled), a
+    // template drifting back to a full-resolution asset, and a stale document never
+    // re-rendered. Hourly rather than 60s because it spawns poppler per PDF and
+    // nothing it watches changes faster than a print.
+    const printCensusPlatformRoot = process.env.PLATFORM_ROOT ?? process.env.MAXY_PLATFORM_ROOT;
+    if (printCensusPlatformRoot) {
+        createPrintCensus({
+            accountsRoot: dirname(config.accountDir),
+            hookPath: join(printCensusPlatformRoot, 'plugins', 'admin', 'hooks', 'quote-render-pdf-conformance.sh'),
+            intervalMs: 3_600_000,
+            logger: log,
+        }).start();
+    }
+    else {
+        log('[quote-print-census] op=skip reason=no-platform-root');
+    }
     // Task 278 — derives effectivePermissionMode from the per-session
     // auto-mode debug capture. http-server's jsonl-event subscriber drives it.
     const permissionModeTail = createPermissionModeTail({ logger: log });