@rubytech/create-realagent-code 0.1.581 → 0.1.583

package/payload/platform/services/claude-session-manager/dist/http-server.js

@@ -2888,6 +2888,20 @@ export function buildHttpApp(deps) {
         const rcAgentSlug = typeof body.agentSlug === 'string' && /^[A-Za-z0-9_-]{1,64}$/.test(body.agentSlug)
             ? body.agentSlug
             : null;
+        // Task 2619 — the specialist card this spawn runs as, a FILE BASENAME under
+        // the account's `specialists/agents/`. Same grammar /public-spawn applies to
+        // its own `specialist` (:1338), so one shape rule governs both doors. The
+        // value reaches `--agent` and the child env, so a malformed one is dropped
+        // here rather than sanitised downstream.
+        //
+        // The card set is NOT re-checked here. The webhook validates the binding
+        // against the account's cards before it spawns, and the plugin validates it
+        // at registration; a third validator would be a third authority for one
+        // fact. An unresolvable name reaching this point starts a session claude
+        // itself refuses, which is loud.
+        const rcSpecialist = typeof body.specialist === 'string' && /^[A-Za-z0-9_-]{1,64}$/.test(body.specialist)
+            ? body.specialist
+            : null;
         const adminChannel = typeof body.channel === 'string' && CHANNELS.includes(body.channel)
             ? body.channel
             : undefined;
@@ -3204,6 +3218,13 @@ export function buildHttpApp(deps) {
             else if (freshAdminLevers && reseatModel)
                 argv.push('--model', reseatModel);
         }
+        // Task 2619 — the card is the persona. Pushed after the session flag and
+        // outside the branch above so a fork carries it too, mirroring
+        // pty-spawner.ts:1907-1919, where `--agent` already rides alongside
+        // `--resume`. A persistent Telegram conversation resumes on every message,
+        // so a card pushed only on the cold spawn would be lost by the second turn.
+        if (rcSpecialist)
+            argv.push('--agent', rcSpecialist);
         // Task 592 — per-spawn bypass-permissions waiver. The brand settings.json
         // carries `defaultMode: bypassPermissions` (Task 583); without this flag
         // the first-time "WARNING: … 1. No, exit  2. Yes, I accept" disclaimer
@@ -3574,8 +3595,14 @@ export function buildHttpApp(deps) {
         // Task 2267 — `channelBound` was declared here; it is now resolved once,
         // beside the role resolution above, because the public lockdown gate needs
         // the same value earlier. Same expression, same meaning.
+        // Task 2619 — never for a specialist spawn, here or at the specialists
+        // manifest below. A specialist bot sends role:'admin', so `adminBinding` is
+        // true and both segments would fire, handing the card the operator's voice
+        // contract and the delegation manifest it exists to bypass.
+        // pty-spawner.ts:1904 already refuses to compose a system prompt for a
+        // specialist spawn, for the same reason: the card is the prompt.
         let voiceBytes = 0;
-        if (adminBinding && channelBound) {
+        if (adminBinding && channelBound && rcSpecialist === null) {
             let voice = null;
             try {
                 const identityPath = join(deps.accountDir, 'agents', 'admin', 'IDENTITY.md');
@@ -3602,9 +3629,11 @@ export function buildHttpApp(deps) {
         // on the next turn of a live session rather than needing a re-spawn.
         // `count=0` on an account whose specialists/agents holds files is the failure
         // signature, and its absence is what hid this for three days.
+        // Task 2619 — see the voice gate above. A specialist spawn IS one of these
+        // specialists; handing it the roster would tell it to delegate to itself.
         let specialistCount = 0;
         let specialistBytes = 0;
-        if (adminBinding && channelBound) {
+        if (adminBinding && channelBound && rcSpecialist === null) {
             // Task 2442 — the SESSION's account, not the manager's boot account. This
             // used to read `deps.perAccountSpecialistsDir`, fixed at boot to the house
             // (index.ts), while dispatch resolves `specialists:{name}` from the spawn
@@ -3711,7 +3740,12 @@ export function buildHttpApp(deps) {
             role: effectiveRcRole,
             accountId: effectiveAccountId,
             isHouse: acctIsHouse,
-            isSpecialist: false,
+            // Task 2619 — was hardcoded false, with the comment "rc-spawn sessions are
+            // never specialists". They can be now. A specialist bot sends
+            // role:'admin', so leaving this false would hand a card cross-account
+            // house-admin authority nobody granted it, on the strength of a role it
+            // carries only because there is no third MAXY_SESSION_ROLE value.
+            isSpecialist: rcSpecialist !== null,
         });
         // Per-spawn decision lifeline, matching the pty-spawner `[xacct]` line so a
         // grep on one sessionId shows the delivered decision on BOTH spawn paths.
@@ -3745,6 +3779,10 @@ export function buildHttpApp(deps) {
             accountId: effectiveAccountId,
             userId: childUserId,
             sessionId: sessionId ?? undefined,
+            // Task 2619 — MAXY_SPECIALIST. Paired with the MAXY_SESSION_ROLE=admin
+            // this env already stamps, it is the shape `isAdminSeat` distinguishes
+            // from the bare operator seat.
+            specialist: rcSpecialist ?? undefined,
             uiPort: process.env.MAXY_UI_INTERNAL_PORT ?? '',
             platformRoot: deps.platformRoot,
             claudeConfigDir: deps.claudeConfigDir,
@@ -3893,7 +3931,7 @@ export function buildHttpApp(deps) {
         if (publicModel) {
             deps.logger(`[rc-spawn] op=public-model-assert sessionId=${sessionId ? sessionId.slice(0, 8) : 'new'} resolved=${publicModel.model ?? 'none'} argvHasModel=${argv.includes('--model')}`);
         }
-        deps.logger(`[rc-spawn] op=argv unitToken=${unitToken} cwd=${effectiveAccountDir} permissionMode=${effectiveRcPermissionMode} model=${effectiveRcModel ?? 'unset'} effort=${effectiveRcEffort ?? 'unset'} positionalBytes=${positionalBytes} voiceBytes=${voiceBytes} argv=${JSON.stringify([deps.claudeBin, ...argv])}`);
+        deps.logger(`[rc-spawn] op=argv unitToken=${unitToken} cwd=${effectiveAccountDir} permissionMode=${effectiveRcPermissionMode} model=${effectiveRcModel ?? 'unset'} effort=${effectiveRcEffort ?? 'unset'} specialist=${rcSpecialist ?? 'none'} positionalBytes=${positionalBytes} voiceBytes=${voiceBytes} argv=${JSON.stringify([deps.claudeBin, ...argv])}`);
         emitRcLife(deps.logger, 'argv', 'rc-spawn', 'node-pty', rcLifeMode, unitToken, {
             cwd: effectiveAccountDir,
             argv: JSON.stringify([deps.claudeBin, ...argv]),