@rubytech/create-realagent-code 0.1.567 → 0.1.569

package/payload/platform/scripts/lib/account-settings-reconcile.sh

@@ -0,0 +1,88 @@
+# account-settings-reconcile.sh — converge every account's Claude Code project
+# settings against the shipped template, and state the divergence count.
+#
+# provision_account_dir writes <accountDir>/.claude/settings.json from
+# platform/templates/account-settings.json at provision time only. The upgrade
+# path re-provisions the house account and no other, so an account created
+# before a hook was added runs a stale hook set indefinitely, and nothing says
+# so. A client-quote delivery gate was registered on one of four accounts on a
+# live install for exactly that reason, and the account it was missing from was
+# the one that quotes.
+#
+# Five one-hook backfill libs were written the same way, each after a different
+# hook was found missing on a live account: owned-dirs, askgate,
+# pdf-conformance, mailbox-inject, public-surface. This lib converges the whole
+# set instead, so a hook added to the template reaches every existing account on
+# the next install without a sixth bespoke backfill.
+#
+# Requires jq. Idempotent. Never echoes file contents. Fail-open: an unusable
+# file logs a status and is left untouched, never rewritten from a guess.
+#
+# Sourced by setup-account.sh; also runnable standalone for a manual repair.
+
+# ensure_account_settings <settings_file> <template_file>
+# Returns 0 when the file already matched the template, 1 when it diverged
+# (seeded, updated, unwritable, or unparseable). Logs exactly one
+#   [settings-reconcile] account=<id> status=<already-set|updated|absent-seeded|rewrite-failed|no-template>
+ensure_account_settings() {
+  local f="$1" tpl="$2"
+  local acct
+  acct="$(basename "$(dirname "$(dirname "$f")")")"
+
+  if [ ! -f "$tpl" ]; then
+    echo "[settings-reconcile] account=$acct status=no-template"
+    return 1
+  fi
+
+  if [ ! -f "$f" ]; then
+    mkdir -p "$(dirname "$f")" 2>/dev/null || true
+    if cp "$tpl" "$f" 2>/dev/null; then
+      echo "[settings-reconcile] account=$acct status=absent-seeded"
+    else
+      echo "[settings-reconcile] account=$acct status=rewrite-failed"
+    fi
+    return 1
+  fi
+
+  # Compare canonical forms, so key order and whitespace never read as drift.
+  # An empty result means jq refused the file; that is reported, not repaired —
+  # an unparseable settings file may carry an operator edit worth keeping, and
+  # this pass never destroys what it cannot read.
+  local before after
+  before="$(jq -S . "$f" 2>/dev/null || true)"
+  after="$(jq -S . "$tpl" 2>/dev/null || true)"
+  if [ -z "$before" ] || [ -z "$after" ]; then
+    echo "[settings-reconcile] account=$acct status=rewrite-failed"
+    return 1
+  fi
+  if [ "$before" = "$after" ]; then
+    echo "[settings-reconcile] account=$acct status=already-set"
+    return 0
+  fi
+
+  if cp "$tpl" "$f" 2>/dev/null; then
+    echo "[settings-reconcile] account=$acct status=updated"
+  else
+    echo "[settings-reconcile] account=$acct status=rewrite-failed"
+  fi
+  return 1
+}
+
+# reconcile_all_accounts_settings <accounts_dir>
+# Standing check + durable backfill across every account carrying an
+# account.json. Emits one status line per account plus one summary line on every
+# run, including a zero count — silence is not evidence of convergence.
+reconcile_all_accounts_settings() {
+  local accts="$1"
+  local tpl="${MAXY_ACCOUNT_SETTINGS_TEMPLATE:-${TEMPLATES_DIR:-}/account-settings.json}"
+  local n=0 divergent=0 acct
+  if [ -d "$accts" ]; then
+    for acct in "$accts"/*/; do
+      [ -f "$acct/account.json" ] || continue
+      n=$((n + 1))
+      ensure_account_settings "$acct/.claude/settings.json" "$tpl" || divergent=$((divergent + 1))
+    done
+  fi
+  echo "[settings-reconcile] accounts=$n divergent=$divergent"
+  return 0
+}

package/payload/platform/scripts/lib/provision-account-dir.sh

@@ -70,151 +70,18 @@ provision_account_dir() {
   [ -d "$ACCOUNT_DIR/.git" ] || git init -q "$ACCOUNT_DIR"
 
   # --- project-level .claude/settings.json (hooks; no allowlist) -------------
+  # The hook set is data, not a heredoc: platform/templates/account-settings.json
+  # is copied verbatim (every $PLATFORM_ROOT in it is a literal Claude Code
+  # resolves at hook-run time, so no substitution is needed). Keeping it as a
+  # file is what lets account-settings-reconcile.sh converge accounts that
+  # already exist, which this writer alone never could — it runs at provision
+  # time, and the upgrade path re-provisions the house account and no other.
   local ACCOUNT_SETTINGS="$ACCOUNT_DIR/.claude/settings.json"
-  local HOOKS_PATH="\$PLATFORM_ROOT/plugins/admin/hooks"
-  cat > "$ACCOUNT_SETTINGS" << SETTINGS_EOF
-{
-  "permissions": {
-    "defaultMode": "bypassPermissions",
-    "allow": [],
-    "deny": []
-  },
-  "hooks": {
-    "PreToolUse": [
-      {
-        "matcher": "Write",
-        "hooks": [
-          { "type": "command", "command": "bash $HOOKS_PATH/archive-ingest-surface-gate.sh" },
-          { "type": "command", "command": "bash $HOOKS_PATH/fs-schema-guard.sh" }
-        ]
-      },
-      {
-        "matcher": "Edit",
-        "hooks": [
-          { "type": "command", "command": "bash $HOOKS_PATH/archive-ingest-surface-gate.sh" },
-          { "type": "command", "command": "bash $HOOKS_PATH/fs-schema-guard.sh" }
-        ]
-      },
-      {
-        "matcher": "NotebookEdit",
-        "hooks": [
-          { "type": "command", "command": "bash $HOOKS_PATH/archive-ingest-surface-gate.sh" },
-          { "type": "command", "command": "bash $HOOKS_PATH/fs-schema-guard.sh" }
-        ]
-      },
-      {
-        "matcher": "Bash",
-        "hooks": [
-          { "type": "command", "command": "bash $HOOKS_PATH/archive-ingest-surface-gate.sh" },
-          { "type": "command", "command": "bash $HOOKS_PATH/fs-schema-guard-bash-pre.sh" },
-          { "type": "command", "command": "bash $HOOKS_PATH/quote-engine-gate.sh" }
-        ]
-      },
-      {
-        "hooks": [
-          { "type": "command", "command": "bash $HOOKS_PATH/archive-ingest-surface-gate.sh" },
-          { "type": "command", "command": "bash $HOOKS_PATH/public-tool-surface.sh" }
-        ]
-      },
-      {
-        "matcher": "WebFetch",
-        "hooks": [
-          { "type": "command", "command": "node $HOOKS_PATH/webfetch-preflight.mjs" }
-        ]
-      },
-      {
-        "matcher": "AskUserQuestion",
-        "hooks": [
-          { "type": "command", "command": "bash $HOOKS_PATH/askuserquestion-investigate-gate.sh" },
-          { "type": "command", "command": "bash $HOOKS_PATH/askuserquestion-channel-carrier-gate.sh" }
-        ]
-      },
-      {
-        "matcher": "mcp__plugin_browser_browser__browser-pdf-save",
-        "hooks": [
-          { "type": "command", "command": "bash $HOOKS_PATH/quote-render-gate.sh" }
-        ]
-      },
-      {
-        "matcher": "mcp__plugin_browser_browser__browser-pdf-save",
-        "hooks": [
-          { "type": "command", "command": "bash $HOOKS_PATH/preference-consult-gate.sh" }
-        ]
-      },
-      {
-        "matcher": "mcp__plugin_email_email__email-send|mcp__plugin_email_email__email-reply|mcp__plugin_email_email__email-draft-send|mcp__plugin_outlook_outlook__outlook-mail-send|mcp__plugin_outlook_outlook__outlook-mail-reply|mcp__plugin_outlook_outlook__outlook-draft-send|SendUserFile",
-        "hooks": [
-          { "type": "command", "command": "bash $HOOKS_PATH/preference-consult-gate.sh" }
-        ]
-      }
-    ],
-    "PostToolUse": [
-      {
-        "matcher": "Bash",
-        "hooks": [
-          { "type": "command", "command": "bash $HOOKS_PATH/fs-schema-guard-bash-post.sh" }
-        ]
-      },
-      {
-        "matcher": "Agent",
-        "hooks": [
-          { "type": "command", "command": "bash $HOOKS_PATH/post-tool-use-agent.sh" }
-        ]
-      },
-      {
-        "matcher": "mcp__plugin_browser_browser__browser-pdf-save",
-        "hooks": [
-          { "type": "command", "command": "bash $HOOKS_PATH/quote-render-pdf-conformance.sh" }
-        ]
-      },
-      {
-        "matcher": "mcp__.*__.*-(export|import)-parse$",
-        "hooks": [
-          { "type": "command", "command": "bash $HOOKS_PATH/archive-ingest-surface-gate.sh" }
-        ]
-      },
-      {
-        "matcher": "mcp__.*",
-        "hooks": [
-          { "type": "command", "command": "bash $HOOKS_PATH/mcp-tool-missing.sh" }
-        ]
-      },
-      {
-        "matcher": "Write",
-        "hooks": [
-          { "type": "command", "command": "bash $HOOKS_PATH/admin-authoring-observer.sh" }
-        ]
-      },
-      {
-        "matcher": "Edit",
-        "hooks": [
-          { "type": "command", "command": "bash $HOOKS_PATH/admin-authoring-observer.sh" }
-        ]
-      }
-    ],
-    "UserPromptSubmit": [
-      {
-        "hooks": [
-          { "type": "command", "command": "bash $HOOKS_PATH/archive-ingest-surface-gate.sh" },
-          { "type": "command", "command": "bash $HOOKS_PATH/prompt-optimiser-directive.sh" },
-          { "type": "command", "command": "bash $HOOKS_PATH/datetime-inject.sh" },
-          { "type": "command", "command": "bash $HOOKS_PATH/mailbox-inject.sh" },
-          { "type": "command", "command": "bash $HOOKS_PATH/preference-consult-directive.sh" },
-          { "type": "command", "command": "bash $HOOKS_PATH/public-tool-surface.sh" }
-        ]
-      }
-    ],
-    "Stop": [
-      {
-        "hooks": [
-          { "type": "command", "command": "bash $HOOKS_PATH/prompt-optimiser-compliance.sh" },
-          { "type": "command", "command": "bash $HOOKS_PATH/public-tool-surface.sh" }
-        ]
-      }
-    ]
-  }
-}
-SETTINGS_EOF
+  if [ -f "$TEMPLATES_DIR/account-settings.json" ]; then
+    cp "$TEMPLATES_DIR/account-settings.json" "$ACCOUNT_SETTINGS"
+  else
+    echo "  [acct-settings] WARNING: template missing at $TEMPLATES_DIR/account-settings.json — settings.json not written" >&2
+  fi
 
   # --- agent identities + specialist plugin templates ------------------------
   cp "$TEMPLATES_DIR/agents/admin/IDENTITY.md" "$ACCOUNT_DIR/agents/admin/IDENTITY.md"
@@ -420,8 +287,6 @@ for n in names:
     echo "  op=specialist-orphan-reconcile orphaned=$_orphaned"
   fi
 
-  rm -f "$ACCOUNT_DIR/.claude/agents/"*.md 2>/dev/null || true
-
   # SOUL.md — user-controlled. Only create if missing. Never overwrite.
   if [ -f "$ACCOUNT_DIR/agents/admin/SOUL.md" ]; then
     echo "  agents/admin/SOUL.md preserved ($(wc -c < "$ACCOUNT_DIR/agents/admin/SOUL.md" | tr -d ' ') bytes)"

package/payload/platform/scripts/setup-account.sh

@@ -119,3 +119,16 @@ reconcile_all_accounts_mailbox_inject "$ACCOUNTS_DIR"
 # under a one-tool allowlist. Reconcile every account on every install.
 # Idempotent; logs one [backfill-2339] line per account.
 reconcile_all_accounts_public_surface "$ACCOUNTS_DIR"
+
+# ------------------------------------------------------------------
+# 8. Converge the whole hook set on every account
+# ------------------------------------------------------------------
+# Steps 3 to 7 each retrofit one hook, and each was written after that hook was
+# found missing on a live account. provision_account_dir writes the full set,
+# but only at provision time, and this script re-provisions the house account
+# and no other — so every future hook repeats the same fault. This step
+# converges each account's settings against the shipped template instead, and
+# states the divergence count on every run including zero. A hook added to
+# platform/templates/account-settings.json needs no backfill of its own.
+. "$SCRIPT_DIR/lib/account-settings-reconcile.sh"
+reconcile_all_accounts_settings "$ACCOUNTS_DIR"

package/payload/platform/services/claude-session-manager/dist/account-agent-registry.d.ts

@@ -0,0 +1,39 @@
+/** Two spawns in the same account sync concurrently — an admin session and a
+ *  channel session are routine — and they write identical content. Whoever
+ *  loses a link gets EEXIST on create or ENOENT on remove for work the winner
+ *  has already done. Swallowing exactly those two codes keeps the loser going
+ *  instead of aborting its remaining files and logging a failure that never
+ *  happened, into the one surface this task exists to make trustworthy.
+ *
+ *  Only the named code is swallowed. Every other errno propagates to the
+ *  caller's own catch, which is what still turns a genuine EACCES or ENOTDIR
+ *  into `op=account-agent-registry error`. Exported for its own unit test: the
+ *  propagation half cannot be provoked through the filesystem from outside. */
+export declare function ignoringRaceWith(code: 'EEXIST' | 'ENOENT', act: () => void): void;
+/** What the CLI will be able to dispatch from the registry we just wrote.
+ *
+ *  Task 2469 — the mirror is keyed on filename and dispatch is keyed on the
+ *  frontmatter `name`, so `synced=<N>` cannot answer "can this be reached?".
+ *  A card with no name, and two cards claiming one name, both mirror cleanly
+ *  and neither dispatches; a specialist that is never dispatched never fails,
+ *  so no transition log anywhere carries it. Only a state reconcile sees it.
+ *
+ *  Measured over the registry rather than the source directory, because the
+ *  registry is the directory the CLI reads: where an operator's own regular
+ *  file sits at a card's name, that file is what resolves, and it is that file
+ *  this must report on.
+ *
+ *  Exported for its own unit test and for callers that want the state without
+ *  re-running a sync. */
+export declare function resolveRegistryNames(registryDir: string): {
+    resolvable: number;
+    unnamed: string[];
+    dupeNames: string[];
+};
+/** Mirror `<accountDir>/specialists/agents/*.md` into
+ *  `<accountDir>/.claude/agents/` as symlinks, and remove every registry
+ *  symlink the source no longer has. Emits exactly one line:
+ *  `op=account-agent-registry synced=<N> pruned=<N> collisions=<basenames>`,
+ *  or one `op=account-agent-registry error reason=<msg>` if anything threw. */
+export declare function syncAccountAgentRegistry(accountDir: string, log: (line: string) => void): void;
+//# sourceMappingURL=account-agent-registry.d.ts.map

package/payload/platform/services/claude-session-manager/dist/account-agent-registry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"account-agent-registry.d.ts","sourceRoot":"","sources":["../src/account-agent-registry.ts"],"names":[],"mappings":"AA6BA;;;;;;;;;;+EAU+E;AAC/E,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,QAAQ,GAAG,QAAQ,EAAE,GAAG,EAAE,MAAM,IAAI,GAAG,IAAI,CAOjF;AA6BD;;;;;;;;;;;;;;yBAcyB;AACzB,wBAAgB,oBAAoB,CAAC,WAAW,EAAE,MAAM,GAAG;IACzD,UAAU,EAAE,MAAM,CAAA;IAClB,OAAO,EAAE,MAAM,EAAE,CAAA;IACjB,SAAS,EAAE,MAAM,EAAE,CAAA;CACpB,CAsBA;AAED;;;;+EAI+E;AAC/E,wBAAgB,wBAAwB,CAAC,UAAU,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,GAAG,IAAI,CAgG9F"}

package/payload/platform/services/claude-session-manager/dist/account-agent-registry.js

@@ -0,0 +1,223 @@
+// Task 2460 — the one agent registry per account.
+//
+// Claude Code resolves a subagent name from exactly two directories, both
+// string constants in the shipped binary: `$CLAUDE_CONFIG_DIR/agents/` and
+// `<cwd>/.claude/agents/`. Three directories held agent files and nothing
+// reconciled them, which produced three measured symptoms: an authored
+// specialist was never registered; a retired template stayed registered forever
+// (clare-craig's dangling `archive-ingest-operator.md`); and a specialist
+// disabled on one account stayed resolvable in every account on the install.
+//
+// This module makes `<accountDir>/.claude/agents/` a mirror of
+// `<accountDir>/specialists/agents/` and nothing else. cwd at every spawn is
+// the account dir, so that path is the second constant, and the brand-wide root
+// is cleared by the installer, so it is the only one.
+//
+// Symlinks rather than copies: the source stays the single writable surface, so
+// authoring, disabling and provisioning keep working on it unchanged.
+//
+// It is called at spawn rather than at authoring so an account already in a
+// broken state is repaired by its next session, with no manual step and no
+// second disk writer that can drift from provisioning.
+//
+// It never throws. A registry that cannot be written is a specialist that
+// cannot be dispatched, which is the state before this module existed; a spawn
+// that dies instead is strictly worse.
+import { existsSync, lstatSync, mkdirSync, readdirSync, readFileSync, readlinkSync, symlinkSync, unlinkSync } from 'node:fs';
+import { dirname, join, resolve } from 'node:path';
+/** Two spawns in the same account sync concurrently — an admin session and a
+ *  channel session are routine — and they write identical content. Whoever
+ *  loses a link gets EEXIST on create or ENOENT on remove for work the winner
+ *  has already done. Swallowing exactly those two codes keeps the loser going
+ *  instead of aborting its remaining files and logging a failure that never
+ *  happened, into the one surface this task exists to make trustworthy.
+ *
+ *  Only the named code is swallowed. Every other errno propagates to the
+ *  caller's own catch, which is what still turns a genuine EACCES or ENOTDIR
+ *  into `op=account-agent-registry error`. Exported for its own unit test: the
+ *  propagation half cannot be provoked through the filesystem from outside. */
+export function ignoringRaceWith(code, act) {
+    try {
+        act();
+    }
+    catch (err) {
+        if (err.code === code)
+            return;
+        throw err;
+    }
+}
+/** The `name:` value from a card's frontmatter, or null. CRLF-tolerant and
+ *  quote-stripping, matching the reader in `specialist-roster.ts` and the one
+ *  in the roster census, so every surface agrees on what a card is called. A
+ *  card that cannot be read — a dangling link, a directory at a `.md` path,
+ *  EACCES — yields null rather than throwing, because "we could not tell" and
+ *  "it does not resolve" are the same answer to the dispatcher. */
+function readFrontmatterName(file) {
+    let raw;
+    try {
+        raw = readFileSync(file, 'utf8');
+    }
+    catch {
+        return null;
+    }
+    const fm = raw.match(/^---\r?\n([\s\S]*?)\r?\n---/);
+    if (!fm)
+        return null;
+    const m = fm[1].match(/^name:\s*(.*?)\r?$/m);
+    if (!m)
+        return null;
+    let value = m[1].trim();
+    if ((value.startsWith('"') && value.endsWith('"')) ||
+        (value.startsWith("'") && value.endsWith("'"))) {
+        value = value.slice(1, -1);
+    }
+    return value || null;
+}
+/** What the CLI will be able to dispatch from the registry we just wrote.
+ *
+ *  Task 2469 — the mirror is keyed on filename and dispatch is keyed on the
+ *  frontmatter `name`, so `synced=<N>` cannot answer "can this be reached?".
+ *  A card with no name, and two cards claiming one name, both mirror cleanly
+ *  and neither dispatches; a specialist that is never dispatched never fails,
+ *  so no transition log anywhere carries it. Only a state reconcile sees it.
+ *
+ *  Measured over the registry rather than the source directory, because the
+ *  registry is the directory the CLI reads: where an operator's own regular
+ *  file sits at a card's name, that file is what resolves, and it is that file
+ *  this must report on.
+ *
+ *  Exported for its own unit test and for callers that want the state without
+ *  re-running a sync. */
+export function resolveRegistryNames(registryDir) {
+    let entries;
+    try {
+        entries = readdirSync(registryDir).filter((n) => n.endsWith('.md')).sort();
+    }
+    catch {
+        return { resolvable: 0, unnamed: [], dupeNames: [] };
+    }
+    const claims = new Map();
+    const unnamed = [];
+    for (const file of entries) {
+        const name = readFrontmatterName(join(registryDir, file));
+        if (name === null) {
+            unnamed.push(file);
+            continue;
+        }
+        claims.set(name, (claims.get(name) ?? 0) + 1);
+    }
+    const dupeNames = Array.from(claims.entries())
+        .filter(([, n]) => n > 1)
+        .map(([name]) => name)
+        .sort();
+    return { resolvable: claims.size, unnamed, dupeNames };
+}
+/** Mirror `<accountDir>/specialists/agents/*.md` into
+ *  `<accountDir>/.claude/agents/` as symlinks, and remove every registry
+ *  symlink the source no longer has. Emits exactly one line:
+ *  `op=account-agent-registry synced=<N> pruned=<N> collisions=<basenames>`,
+ *  or one `op=account-agent-registry error reason=<msg>` if anything threw. */
+export function syncAccountAgentRegistry(accountDir, log) {
+    const sourceDir = join(accountDir, 'specialists', 'agents');
+    const registryDir = join(accountDir, '.claude', 'agents');
+    let synced = 0;
+    let pruned = 0;
+    const collisions = [];
+    try {
+        mkdirSync(registryDir, { recursive: true });
+        // An absent source directory is an account with no specialists, not an
+        // error. The prune pass below still runs, so a registry left behind by a
+        // removed source directory is cleared rather than frozen.
+        const sources = existsSync(sourceDir)
+            ? readdirSync(sourceDir).filter((n) => n.endsWith('.md')).sort()
+            : [];
+        for (const file of sources) {
+            const targetAbs = join(sourceDir, file);
+            const linkPath = join(registryDir, file);
+            let stat = null;
+            try {
+                stat = lstatSync(linkPath);
+            }
+            catch (err) {
+                if (err.code !== 'ENOENT')
+                    throw err;
+            }
+            if (stat === null) {
+                // A concurrent sync may have created it between the lstat and here. It
+                // writes the same target, so counting it synced is accurate either way.
+                ignoringRaceWith('EEXIST', () => symlinkSync(targetAbs, linkPath));
+                synced++;
+                continue;
+            }
+            // A regular file here is an operator's own placement. Never overwritten,
+            // never silently ignored: it is named so the operator can resolve it, and
+            // not counted as synced, because that name does not resolve to the
+            // account's specialist.
+            if (!stat.isSymbolicLink()) {
+                collisions.push(file);
+                continue;
+            }
+            let current;
+            try {
+                current = resolve(dirname(linkPath), readlinkSync(linkPath));
+            }
+            catch {
+                current = '';
+            }
+            if (current !== targetAbs) {
+                // Both steps tolerate a concurrent sync doing the same retarget: an
+                // ENOENT unlink means the stale link is already gone, which is exactly
+                // when the create below still has to run, and an EEXIST create means
+                // the other process already wrote this same target.
+                ignoringRaceWith('ENOENT', () => unlinkSync(linkPath));
+                ignoringRaceWith('EEXIST', () => symlinkSync(targetAbs, linkPath));
+            }
+            synced++;
+        }
+        // Set difference, not dangling-target. A link the source no longer has is
+        // removed whether or not its target survives: symptom 2 was exactly a link
+        // that outlived its source, and a dangling-only rule would leave that class
+        // of drift reachable in the new registry. This is the half of the mirror
+        // that makes the registry's basename set equal the source's in both
+        // directions.
+        const sourceSet = new Set(sources);
+        for (const entry of readdirSync(registryDir)) {
+            if (!entry.endsWith('.md'))
+                continue;
+            if (sourceSet.has(entry))
+                continue;
+            const linkPath = join(registryDir, entry);
+            let stat;
+            try {
+                stat = lstatSync(linkPath);
+            }
+            catch {
+                continue;
+            }
+            // A regular file is the operator's, at a name the source does not claim.
+            // Left alone for the same reason as a collision above.
+            if (!stat.isSymbolicLink())
+                continue;
+            // A concurrent sync may have pruned it already; that is the same outcome,
+            // so count it either way rather than aborting the rest of the pass.
+            ignoringRaceWith('ENOENT', () => unlinkSync(linkPath));
+            pruned++;
+        }
+        log(`op=account-agent-registry synced=${synced} pruned=${pruned} collisions=${collisions.join(',')}`);
+        // Task 2469 — a second line, not three more fields on the first. That one
+        // is a transition record: what this spawn changed. This is a state
+        // reconcile: what is reachable now. Emitted every spawn including zero, so
+        // an account with no specialists is distinguishable from a reconcile that
+        // did not run. On the error path below it is deliberately absent — after a
+        // failed sync the reachable set is unknown, and reporting zero would assert
+        // something this never measured.
+        const resolution = resolveRegistryNames(registryDir);
+        log(`op=agent-registry-resolution resolvable=${resolution.resolvable}` +
+            ` unnamed=${resolution.unnamed.join(',')}` +
+            ` dupeNames=${resolution.dupeNames.join(',')}`);
+    }
+    catch (err) {
+        log(`op=account-agent-registry error reason=${err instanceof Error ? err.message : String(err)}`);
+    }
+}
+//# sourceMappingURL=account-agent-registry.js.map

package/payload/platform/services/claude-session-manager/dist/account-agent-registry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"account-agent-registry.js","sourceRoot":"","sources":["../src/account-agent-registry.ts"],"names":[],"mappings":"AAAA,kDAAkD;AAClD,EAAE;AACF,0EAA0E;AAC1E,2EAA2E;AAC3E,0EAA0E;AAC1E,uEAAuE;AACvE,gFAAgF;AAChF,0EAA0E;AAC1E,6EAA6E;AAC7E,EAAE;AACF,+DAA+D;AAC/D,6EAA6E;AAC7E,gFAAgF;AAChF,sDAAsD;AACtD,EAAE;AACF,gFAAgF;AAChF,sEAAsE;AACtE,EAAE;AACF,4EAA4E;AAC5E,2EAA2E;AAC3E,uDAAuD;AACvD,EAAE;AACF,0EAA0E;AAC1E,+EAA+E;AAC/E,uCAAuC;AAEvC,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,SAAS,EAAE,WAAW,EAAE,YAAY,EAAE,YAAY,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,SAAS,CAAA;AAC5H,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AAElD;;;;;;;;;;+EAU+E;AAC/E,MAAM,UAAU,gBAAgB,CAAC,IAAyB,EAAE,GAAe;IACzE,IAAI,CAAC;QACH,GAAG,EAAE,CAAA;IACP,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAK,GAA6B,CAAC,IAAI,KAAK,IAAI;YAAE,OAAM;QACxD,MAAM,GAAG,CAAA;IACX,CAAC;AACH,CAAC;AAED;;;;;mEAKmE;AACnE,SAAS,mBAAmB,CAAC,IAAY;IACvC,IAAI,GAAW,CAAA;IACf,IAAI,CAAC;QACH,GAAG,GAAG,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAA;IAClC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAA;IACb,CAAC;IACD,MAAM,EAAE,GAAG,GAAG,CAAC,KAAK,CAAC,6BAA6B,CAAC,CAAA;IACnD,IAAI,CAAC,EAAE;QAAE,OAAO,IAAI,CAAA;IACpB,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAA;IAC5C,IAAI,CAAC,CAAC;QAAE,OAAO,IAAI,CAAA;IACnB,IAAI,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAA;IACvB,IACE,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;QAC9C,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,EAC9C,CAAC;QACD,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAA;IAC5B,CAAC;IACD,OAAO,KAAK,IAAI,IAAI,CAAA;AACtB,CAAC;AAED;;;;;;;;;;;;;;yBAcyB;AACzB,MAAM,UAAU,oBAAoB,CAAC,WAAmB;IAKtD,IAAI,OAAiB,CAAA;IACrB,IAAI,CAAC;QACH,OAAO,GAAG,WAAW,CAAC,WAAW,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAA;IAC5E,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,UAAU,EAAE,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,CAAA;IACtD,CAAC;IACD,MAAM,MAAM,GAAG,IAAI,GAAG,EAAkB,CAAA;IACxC,MAAM,OAAO,GAAa,EAAE,CAAA;IAC5B,KAAK,MAAM,IAAI,IAAI,OAAO,EAAE,CAAC;QAC3B,MAAM,IAAI,GAAG,mBAAmB,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC,CAAA;QACzD,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;YAClB,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;YAClB,SAAQ;QACV,CAAC;QACD,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAA;IAC/C,CAAC;IACD,MAAM,SAAS,GAAG,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;SAC3C,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC;SACxB,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC;SACrB,IAAI,EAAE,CAAA;IACT,OAAO,EAAE,UAAU,EAAE,MAAM,CAAC,IAAI,EAAE,OAAO,EAAE,SAAS,EAAE,CAAA;AACxD,CAAC;AAED;;;;+EAI+E;AAC/E,MAAM,UAAU,wBAAwB,CAAC,UAAkB,EAAE,GAA2B;IACtF,MAAM,SAAS,GAAG,IAAI,CAAC,UAAU,EAAE,aAAa,EAAE,QAAQ,CAAC,CAAA;IAC3D,MAAM,WAAW,GAAG,IAAI,CAAC,UAAU,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAA;IACzD,IAAI,MAAM,GAAG,CAAC,CAAA;IACd,IAAI,MAAM,GAAG,CAAC,CAAA;IACd,MAAM,UAAU,GAAa,EAAE,CAAA;IAC/B,IAAI,CAAC;QACH,SAAS,CAAC,WAAW,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;QAC3C,uEAAuE;QACvE,yEAAyE;QACzE,0DAA0D;QAC1D,MAAM,OAAO,GAAG,UAAU,CAAC,SAAS,CAAC;YACnC,CAAC,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE;YAChE,CAAC,CAAC,EAAE,CAAA;QACN,KAAK,MAAM,IAAI,IAAI,OAAO,EAAE,CAAC;YAC3B,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,CAAA;YACvC,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,CAAA;YACxC,IAAI,IAAI,GAAwC,IAAI,CAAA;YACpD,IAAI,CAAC;gBACH,IAAI,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAA;YAC5B,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,IAAK,GAA6B,CAAC,IAAI,KAAK,QAAQ;oBAAE,MAAM,GAAG,CAAA;YACjE,CAAC;YACD,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;gBAClB,uEAAuE;gBACvE,wEAAwE;gBACxE,gBAAgB,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,WAAW,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC,CAAA;gBAClE,MAAM,EAAE,CAAA;gBACR,SAAQ;YACV,CAAC;YACD,yEAAyE;YACzE,0EAA0E;YAC1E,mEAAmE;YACnE,wBAAwB;YACxB,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,EAAE,CAAC;gBAC3B,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;gBACrB,SAAQ;YACV,CAAC;YACD,IAAI,OAAe,CAAA;YACnB,IAAI,CAAC;gBACH,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,YAAY,CAAC,QAAQ,CAAC,CAAC,CAAA;YAC9D,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,GAAG,EAAE,CAAA;YACd,CAAC;YACD,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;gBAC1B,oEAAoE;gBACpE,uEAAuE;gBACvE,qEAAqE;gBACrE,oDAAoD;gBACpD,gBAAgB,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAA;gBACtD,gBAAgB,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,WAAW,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC,CAAA;YACpE,CAAC;YACD,MAAM,EAAE,CAAA;QACV,CAAC;QACD,0EAA0E;QAC1E,2EAA2E;QAC3E,4EAA4E;QAC5E,yEAAyE;QACzE,oEAAoE;QACpE,cAAc;QACd,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAA;QAClC,KAAK,MAAM,KAAK,IAAI,WAAW,CAAC,WAAW,CAAC,EAAE,CAAC;YAC7C,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC;gBAAE,SAAQ;YACpC,IAAI,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC;gBAAE,SAAQ;YAClC,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,EAAE,KAAK,CAAC,CAAA;YACzC,IAAI,IAAkC,CAAA;YACtC,IAAI,CAAC;gBACH,IAAI,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAA;YAC5B,CAAC;YAAC,MAAM,CAAC;gBACP,SAAQ;YACV,CAAC;YACD,yEAAyE;YACzE,uDAAuD;YACvD,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE;gBAAE,SAAQ;YACpC,0EAA0E;YAC1E,oEAAoE;YACpE,gBAAgB,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAA;YACtD,MAAM,EAAE,CAAA;QACV,CAAC;QACD,GAAG,CAAC,oCAAoC,MAAM,WAAW,MAAM,eAAe,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;QACrG,0EAA0E;QAC1E,mEAAmE;QACnE,2EAA2E;QAC3E,0EAA0E;QAC1E,2EAA2E;QAC3E,4EAA4E;QAC5E,iCAAiC;QACjC,MAAM,UAAU,GAAG,oBAAoB,CAAC,WAAW,CAAC,CAAA;QACpD,GAAG,CACD,2CAA2C,UAAU,CAAC,UAAU,EAAE;YAClE,YAAY,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE;YAC1C,cAAc,UAAU,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAC/C,CAAA;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,GAAG,CAAC,0CAA0C,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;IACnG,CAAC;AACH,CAAC"}

package/payload/platform/services/claude-session-manager/dist/fs-watcher.d.ts

@@ -190,5 +190,10 @@ export declare function createFsWatcher(opts: {
      *  orphan-stop escalation. Default 5_000 ms (matches the scope's
      *  `TimeoutStopSec`). Tests pass small values to keep run time bounded. */
     killGraceMs?: number;
+    /** Task 2457 — the brand that owns this manager's scopes. REQUIRED, with no
+     *  default: the boot-seed reconciler stops every scope it cannot reattach,
+     *  and a guessed brand would make it stop a co-resident brand's live
+     *  sessions — the exact fault this field exists to close. */
+    brandSlug: string;
 }): FsWatcher;
 //# sourceMappingURL=fs-watcher.d.ts.map

package/payload/platform/services/claude-session-manager/dist/fs-watcher.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"fs-watcher.d.ts","sourceRoot":"","sources":["../src/fs-watcher.ts"],"names":[],"mappings":"AAsCA,OAAO,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,YAAY,CAAA;AAI5D,OAAO,EAML,KAAK,cAAc,EACnB,KAAK,eAAe,EAErB,MAAM,oBAAoB,CAAA;AAsC3B,MAAM,MAAM,QAAQ,GAAG,MAAM,GAAG,OAAO,GAAG,UAAU,CAAA;AACpD;;;;;;;;gCAQgC;AAChC,MAAM,MAAM,SAAS,GAAG,MAAM,GAAG,MAAM,GAAG,MAAM,GAAG,UAAU,CAAA;AAE7D,MAAM,WAAW,UAAU;IACzB;;mDAE+C;IAC/C,SAAS,EAAE,MAAM,CAAA;IACjB,0EAA0E;IAC1E,eAAe,EAAE,MAAM,GAAG,IAAI,CAAA;IAC9B,wEAAwE;IACxE,YAAY,EAAE,MAAM,GAAG,IAAI,CAAA;IAC3B;mEAC+D;IAC/D,KAAK,EAAE,MAAM,GAAG,IAAI,CAAA;IACpB;;;;qCAIiC;IACjC,kBAAkB,EAAE,MAAM,GAAG,IAAI,CAAA;IACjC,GAAG,EAAE,MAAM,GAAG,IAAI,CAAA;IAClB;;;;;2EAKuE;IACvE,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;IACxB,GAAG,EAAE,MAAM,GAAG,IAAI,CAAA;IAClB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAA;IAC1B,KAAK,EAAE,QAAQ,CAAA;IACf,MAAM,EAAE,SAAS,CAAA;IACjB,uEAAuE;IACvE,SAAS,EAAE,MAAM,CAAA;IACjB;;;;;oCAKgC;IAChC,gBAAgB,EAAE,MAAM,CAAA;IACxB;;;;;;;qBAOiB;IACjB,cAAc,EAAE,MAAM,GAAG,IAAI,CAAA;IAW7B,+DAA+D;IAC/D,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAA;IACvB,+DAA+D;IAC/D,IAAI,EAAE,SAAS,GAAG,IAAI,CAAA;IACtB,+DAA+D;IAC/D,OAAO,EAAE,OAAO,GAAG,IAAI,CAAA;IACvB;;;yEAGqE;IACrE,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;IACxB;;6CAEyC;IACzC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAA;IACvB;;;;6CAIyC;IACzC,OAAO,EAAE,OAAO,CAAA;IAChB;;wBAEoB;IACpB,GAAG,EAAE,MAAM,GAAG,IAAI,CAAA;IAClB,2DAA2D;IAC3D,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;IACxB;;oDAEgD;IAChD,cAAc,EAAE,MAAM,GAAG,IAAI,CAAA;IAC7B;;;;;;;mBAOe;IACf,uBAAuB,EAAE,MAAM,GAAG,IAAI,CAAA;IACtC;2BACuB;IACvB,MAAM,EAAE,OAAO,CAAA;IACf;;;;yCAIqC;IACrC,iBAAiB,EAAE,MAAM,GAAG,IAAI,CAAA;CACjC;AAED,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,QAAQ,GAAG,QAAQ,GAAG,QAAQ,CAAA;IACpC,MAAM,EAAE,KAAK,GAAG,OAAO,CAAA;IACvB,GAAG,EAAE,UAAU,GAAG,IAAI,CAAA;IACtB,SAAS,EAAE,MAAM,CAAA;CAClB;AAED,MAAM,MAAM,UAAU,GAAG,CAAC,KAAK,EAAE,YAAY,KAAK,IAAI,CAAA;AAEtD,MAAM,WAAW,SAAS;IACxB,QAAQ,IAAI,IAAI,CAAA;IAChB,GAAG,IAAI,IAAI,CAAA;IACX,SAAS,CAAC,GAAG,EAAE,UAAU,GAAG,MAAM,IAAI,CAAA;IACtC,cAAc,CAAC,EAAE,EAAE,MAAM,GAAG,UAAU,GAAG,SAAS,CAAA;IAClD,oBAAoB,CAAC,EAAE,EAAE,MAAM,GAAG,UAAU,GAAG,SAAS,CAAA;IACxD,iBAAiB,CAAC,MAAM,EAAE,MAAM,GAAG,UAAU,GAAG,SAAS,CAAA;IACzD,QAAQ,CAAC,GAAG,EAAE,MAAM,GAAG,UAAU,GAAG,SAAS,CAAA;IAC7C,GAAG,IAAI,UAAU,EAAE,CAAA;IACnB;;;;;;;+EAO2E;IAC3E,eAAe,CAAC,CAAC,SAAS,EAAE,MAAM,GAAG,UAAU,GAAG,SAAS,CAAA;IAC3D,6EAA6E;IAC7E,UAAU,CAAC,GAAG,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC,CAAA;IAC/D;;;;;;4CAMwC;IACxC,oBAAoB,CAAC,CAAC,GAAG,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;IAC3D;;;;;;;;;mDAS+C;IAC/C,cAAc,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAA;IAC1C,KAAK,IAAI,IAAI,CAAA;IACb;;;;2EAIuE;IACvE,UAAU,EAAE;QACV,gBAAgB,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAA;QACpC,kBAAkB,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAA;KACvC,CAAA;CACF;AA8DD,wBAAgB,eAAe,CAAC,IAAI,EAAE;IACpC,WAAW,EAAE,MAAM,CAAA;IACnB,WAAW,EAAE,MAAM,CAAA;IACnB,MAAM,EAAE,MAAM,CAAA;IACd;;;;sFAIkF;IAClF,eAAe,CAAC,EAAE,MAAM,CAAA;IACxB;;;;6EAIyE;IACzE,YAAY,CAAC,EAAE,eAAe,CAAA;IAC9B;;8EAE0E;IAC1E,cAAc,CAAC,EAAE,cAAc,CAAA;IAC/B;;+EAE2E;IAC3E,WAAW,CAAC,EAAE,MAAM,CAAA;CACrB,GAAG,SAAS,CA63BZ"}
+{"version":3,"file":"fs-watcher.d.ts","sourceRoot":"","sources":["../src/fs-watcher.ts"],"names":[],"mappings":"AAsCA,OAAO,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,YAAY,CAAA;AAI5D,OAAO,EAML,KAAK,cAAc,EACnB,KAAK,eAAe,EAErB,MAAM,oBAAoB,CAAA;AAsC3B,MAAM,MAAM,QAAQ,GAAG,MAAM,GAAG,OAAO,GAAG,UAAU,CAAA;AACpD;;;;;;;;gCAQgC;AAChC,MAAM,MAAM,SAAS,GAAG,MAAM,GAAG,MAAM,GAAG,MAAM,GAAG,UAAU,CAAA;AAE7D,MAAM,WAAW,UAAU;IACzB;;mDAE+C;IAC/C,SAAS,EAAE,MAAM,CAAA;IACjB,0EAA0E;IAC1E,eAAe,EAAE,MAAM,GAAG,IAAI,CAAA;IAC9B,wEAAwE;IACxE,YAAY,EAAE,MAAM,GAAG,IAAI,CAAA;IAC3B;mEAC+D;IAC/D,KAAK,EAAE,MAAM,GAAG,IAAI,CAAA;IACpB;;;;qCAIiC;IACjC,kBAAkB,EAAE,MAAM,GAAG,IAAI,CAAA;IACjC,GAAG,EAAE,MAAM,GAAG,IAAI,CAAA;IAClB;;;;;2EAKuE;IACvE,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;IACxB,GAAG,EAAE,MAAM,GAAG,IAAI,CAAA;IAClB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAA;IAC1B,KAAK,EAAE,QAAQ,CAAA;IACf,MAAM,EAAE,SAAS,CAAA;IACjB,uEAAuE;IACvE,SAAS,EAAE,MAAM,CAAA;IACjB;;;;;oCAKgC;IAChC,gBAAgB,EAAE,MAAM,CAAA;IACxB;;;;;;;qBAOiB;IACjB,cAAc,EAAE,MAAM,GAAG,IAAI,CAAA;IAW7B,+DAA+D;IAC/D,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAA;IACvB,+DAA+D;IAC/D,IAAI,EAAE,SAAS,GAAG,IAAI,CAAA;IACtB,+DAA+D;IAC/D,OAAO,EAAE,OAAO,GAAG,IAAI,CAAA;IACvB;;;yEAGqE;IACrE,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;IACxB;;6CAEyC;IACzC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAA;IACvB;;;;6CAIyC;IACzC,OAAO,EAAE,OAAO,CAAA;IAChB;;wBAEoB;IACpB,GAAG,EAAE,MAAM,GAAG,IAAI,CAAA;IAClB,2DAA2D;IAC3D,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;IACxB;;oDAEgD;IAChD,cAAc,EAAE,MAAM,GAAG,IAAI,CAAA;IAC7B;;;;;;;mBAOe;IACf,uBAAuB,EAAE,MAAM,GAAG,IAAI,CAAA;IACtC;2BACuB;IACvB,MAAM,EAAE,OAAO,CAAA;IACf;;;;yCAIqC;IACrC,iBAAiB,EAAE,MAAM,GAAG,IAAI,CAAA;CACjC;AAED,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,QAAQ,GAAG,QAAQ,GAAG,QAAQ,CAAA;IACpC,MAAM,EAAE,KAAK,GAAG,OAAO,CAAA;IACvB,GAAG,EAAE,UAAU,GAAG,IAAI,CAAA;IACtB,SAAS,EAAE,MAAM,CAAA;CAClB;AAED,MAAM,MAAM,UAAU,GAAG,CAAC,KAAK,EAAE,YAAY,KAAK,IAAI,CAAA;AAEtD,MAAM,WAAW,SAAS;IACxB,QAAQ,IAAI,IAAI,CAAA;IAChB,GAAG,IAAI,IAAI,CAAA;IACX,SAAS,CAAC,GAAG,EAAE,UAAU,GAAG,MAAM,IAAI,CAAA;IACtC,cAAc,CAAC,EAAE,EAAE,MAAM,GAAG,UAAU,GAAG,SAAS,CAAA;IAClD,oBAAoB,CAAC,EAAE,EAAE,MAAM,GAAG,UAAU,GAAG,SAAS,CAAA;IACxD,iBAAiB,CAAC,MAAM,EAAE,MAAM,GAAG,UAAU,GAAG,SAAS,CAAA;IACzD,QAAQ,CAAC,GAAG,EAAE,MAAM,GAAG,UAAU,GAAG,SAAS,CAAA;IAC7C,GAAG,IAAI,UAAU,EAAE,CAAA;IACnB;;;;;;;+EAO2E;IAC3E,eAAe,CAAC,CAAC,SAAS,EAAE,MAAM,GAAG,UAAU,GAAG,SAAS,CAAA;IAC3D,6EAA6E;IAC7E,UAAU,CAAC,GAAG,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC,CAAA;IAC/D;;;;;;4CAMwC;IACxC,oBAAoB,CAAC,CAAC,GAAG,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;IAC3D;;;;;;;;;mDAS+C;IAC/C,cAAc,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAA;IAC1C,KAAK,IAAI,IAAI,CAAA;IACb;;;;2EAIuE;IACvE,UAAU,EAAE;QACV,gBAAgB,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAA;QACpC,kBAAkB,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAA;KACvC,CAAA;CACF;AA8DD,wBAAgB,eAAe,CAAC,IAAI,EAAE;IACpC,WAAW,EAAE,MAAM,CAAA;IACnB,WAAW,EAAE,MAAM,CAAA;IACnB,MAAM,EAAE,MAAM,CAAA;IACd;;;;sFAIkF;IAClF,eAAe,CAAC,EAAE,MAAM,CAAA;IACxB;;;;6EAIyE;IACzE,YAAY,CAAC,EAAE,eAAe,CAAA;IAC9B;;8EAE0E;IAC1E,cAAc,CAAC,EAAE,cAAc,CAAA;IAC/B;;+EAE2E;IAC3E,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB;;;iEAG6D;IAC7D,SAAS,EAAE,MAAM,CAAA;CAClB,GAAG,SAAS,CA63BZ"}

package/payload/platform/services/claude-session-manager/dist/fs-watcher.js

@@ -125,7 +125,7 @@ function parsePidFile(path) {
     return { sessionId, pid, bridgeSessionId, bridgeSuffix, agent, cwd, status, updatedAt, processStartedAt, pidFilePath: path };
 }
 export function createFsWatcher(opts) {
-    const { sessionsDir, projectsDir, logger } = opts;
+    const { sessionsDir, projectsDir, logger, brandSlug } = opts;
     // Task 1433 — resolveFromDisk scans `<claudeConfigDir>/projects/**`. The boot
     // layout is `<cfg>/projects/<slug>`, so the config root is two levels up from
     // projectsDir when not passed explicitly.
@@ -743,7 +743,7 @@ export function createFsWatcher(opts) {
      *  orphaned-stopped=N` even when every count is zero so the operator
      *  can confirm the reconciliation ran. */
     function reconcileSurvivingScopes(scopeRecords) {
-        const { scopes, result } = listSurvivingScopes(runSystemctl);
+        const { scopes, result } = listSurvivingScopes(runSystemctl, brandSlug);
         if (result.exitCode !== 0) {
             logger(`[boot-seed] systemctl-list-units-failed exit-code=${result.exitCode} stderr=${JSON.stringify(result.stderr.slice(-200))} survived-scopes=0 reattached=0 orphaned=0 orphaned-stopped=0`);
             return;
@@ -769,9 +769,9 @@ export function createFsWatcher(opts) {
             // ms when escalation runs and we don't want to serialise boot on it).
             const pidForStop = decision.match === 'orphan-pid-dead'
                 ? null
-                : getScopeMainPid(runSystemctl, scope.unitToken);
+                : getScopeMainPid(runSystemctl, brandSlug, scope.unitToken);
             orphanedStopped += 1;
-            void stopScopeUnit(runSystemctl, scope.unitToken, {
+            void stopScopeUnit(runSystemctl, brandSlug, scope.unitToken, {
                 pid: pidForStop,
                 killGraceMs,
                 signals: processSignals,
@@ -829,7 +829,7 @@ export function createFsWatcher(opts) {
         // rc-spawn survivor's row has pid=null. Fall back to the scope's MainPID,
         // and adopt that pid onto the row so the operator's End and the standing
         // reconciler have a real process to act on.
-        const effectivePid = row.pid ?? getScopeMainPid(runSystemctl, scope.unitToken);
+        const effectivePid = row.pid ?? getScopeMainPid(runSystemctl, brandSlug, scope.unitToken);
         if (effectivePid === null || !processSignals.isAlive(effectivePid)) {
             logger(`[boot-seed] scope-classify unit=${scope.unitName} sessionId=${sessionId.slice(0, 8)} match=orphan-pid-dead reason=pid-already-dead`);
             return { match: 'orphan-pid-dead', reason: 'pid-already-dead' };