@rubytech/create-maxy 1.0.805 → 1.0.806

package/payload/server/client-pool-CD7WHZIK.js

@@ -0,0 +1,31 @@
+import {
+  _evictAllForTest,
+  _poolSnapshotForTest,
+  acquireClient,
+  acquireOneShotClient,
+  evictClient,
+  getActiveClient,
+  interruptClient,
+  pushUserMessage,
+  recordCachedTokens,
+  recordCrash,
+  setInflight,
+  startIdleEvictTick,
+  stopIdleEvictTick
+} from "./chunk-LTIWPCUF.js";
+import "./chunk-JSBRDJBE.js";
+export {
+  _evictAllForTest,
+  _poolSnapshotForTest,
+  acquireClient,
+  acquireOneShotClient,
+  evictClient,
+  getActiveClient,
+  interruptClient,
+  pushUserMessage,
+  recordCachedTokens,
+  recordCrash,
+  setInflight,
+  startIdleEvictTick,
+  stopIdleEvictTick
+};

package/payload/server/maxy-edge.js

@@ -16,8 +16,8 @@ import {
   sanitizeClientCorrId,
   streamActionEvents,
   vncLog
-} from "./chunk-OH4OLVBN.js";
-import "./chunk-5ABJJQ5K.js";
+} from "./chunk-SC3ZSD7N.js";
+import "./chunk-LTIWPCUF.js";
 import "./chunk-JSBRDJBE.js";
 
 // server/edge.ts

package/payload/server/server.js

@@ -50,7 +50,7 @@ import {
   vncLog,
   waitForExit,
   writeChromiumWrapper
-} from "./chunk-OH4OLVBN.js";
+} from "./chunk-SC3ZSD7N.js";
 import {
   ACCOUNTS_DIR,
   GREETING_DIRECTIVE,
@@ -113,7 +113,7 @@ import {
   verifyAndGetConversationUpdatedAt,
   verifyConversationOwnership,
   writeAdminUserAndPerson
-} from "./chunk-5ABJJQ5K.js";
+} from "./chunk-LTIWPCUF.js";
 import {
   __commonJS,
   __toESM
@@ -923,6 +923,27 @@ function defaultRules() {
       // this rule it was written but never read (the review-detector had no
       // rule coverage for it). A single ERR line is worth surfacing; the
       // tee'd output is typically noise-free.
+      // Task 862: setup-tunnel.sh emits `[script:setup-tunnel]
+      // step=onboarding-persist result=skipped reason=no-account-dir` via
+      // phase_line when ACCOUNT_DIR is unset. Pre-Task-862, the form-driven
+      // action runner threaded STREAM_LOG_PATH but not ACCOUNT_DIR, so the
+      // line landed in the agent's stream log (system source) and the user
+      // looped on currentStep=6 indefinitely.
+      // The agent-via-Bash path also threads STREAM_LOG_PATH; operator-SSH
+      // does not — that's the disambiguator. If this pattern reappears in
+      // a system log, a future invocation surface forgot to declare
+      // ACCOUNT_DIR. Fix at action-runner.ts WHITELIST['cloudflare-setup'],
+      // not in the script.
+      id: "cloudflare-setup-account-dir-missing",
+      name: "cloudflare-setup ran without ACCOUNT_DIR \u2014 onboarding step-7 will not persist",
+      type: "silent-catch",
+      logSource: "system",
+      pattern: "\\[script:setup-tunnel\\] step=onboarding-persist result=skipped reason=no-account-dir",
+      thresholdCount: 0,
+      thresholdWindowMinutes: 0,
+      suggestedAction: "An invocation surface for setup-tunnel.sh failed to declare ACCOUNT_DIR. Without it the script's step-7 persist block (Task 562) skips, leaving OnboardingState.currentStep=6 forever. Inspect platform/ui/server/lib/action-runner.ts WHITELIST['cloudflare-setup'].build (Task 862 thread) and platform/ui/app/lib/claude-agent/spawn-env.ts buildSpawnEnv (Task 562 thread) \u2014 confirm ACCOUNT_DIR is in the env map for whichever surface the action-id prefix indicates. Do NOT change setup-tunnel.sh; the skipped branch is correct for operator-SSH reconfigure flows."
+    },
+    {
       id: "cloudflared-edge-errors",
       name: "cloudflared edge connectivity errors",
       type: "silent-catch",
@@ -8525,7 +8546,7 @@ var app11 = new Hono();
 app11.post("/cancel", requireAdminSession, async (c) => {
   const session_key = c.var.sessionKey;
   try {
-    const { interruptClient: interruptClient2 } = await import("./client-pool-S4UZCYDJ.js");
+    const { interruptClient: interruptClient2 } = await import("./client-pool-CD7WHZIK.js");
     await interruptClient2(session_key);
     return c.json({ ok: true });
   } catch (err) {
@@ -10067,6 +10088,14 @@ app21.post("/setup", requireAdminSession, async (c) => {
   const publicFqdn = body.publicLabel ? `${body.publicLabel}.${body.publicDomain}` : void 0;
   const apex = body.apex && body.apex.length > 0 ? body.apex : void 0;
   log(`phase=submit-received admin=${adminFqdn} public=${publicFqdn ?? "absent"} apex=${apex ?? "absent"}`);
+  const account = resolveAccount();
+  if (!account) {
+    return err("script", "No account on disk for this device \u2014 re-run installer.");
+  }
+  if (account.accountId !== accountId) {
+    return err("script", `Session/device account drift: session=${accountId.slice(0, 8)} device=${account.accountId.slice(0, 8)}`);
+  }
+  const accountDir = account.accountDir;
   try {
     await setRemotePassword(body.password);
     log(`phase=password-set`);
@@ -10092,7 +10121,7 @@ app21.post("/setup", requireAdminSession, async (c) => {
   let actionId;
   let unit;
   try {
-    const launched = await launchAction("cloudflare-setup", { positional: args, streamLogPath });
+    const launched = await launchAction("cloudflare-setup", { positional: args, streamLogPath, accountDir });
     actionId = launched.actionId;
     unit = launched.unit;
   } catch (e) {