@rubytech/create-sitedesk-code 0.1.512 → 0.1.513

package/payload/platform/plugins/cloudflare/PLUGIN.md

@@ -1,7 +1,7 @@
 ---
 name: cloudflare
 description: Cloudflare operations — tunnel setup/reset, DNS, Pages hosting, D1 data capture, and dashboard guidance. Zero agent-facing MCP tools; every operation is the agent invoking `cloudflared` or `wrangler` directly via Bash, calling the Cloudflare API with a reused per-scope narrow token, or quoting a dashboard click-path the operator performs themselves.
-account-owned-files: [{"file": "data-portal.json", "description": "The account's data-portal folder index, written by bin/portal-index-push.mjs on every push."}]
+account-owned-files: [{"file": "data-portal.json", "writtenBy": "agent", "description": "The account's portal config and folder index. Authored by the agent under the data-portal skill, which is also the only path that changes it; bin/portal-index-push.mjs reads it on every push."}]
 tools: []
 mcp-manifest: skip
 ---

package/payload/platform/plugins/cloudflare/bin/schema-exposed-dirs.mjs

@@ -78,7 +78,7 @@ export function resolveExposedDirs(schemaText, exposeFolders = []) {
     collisions: /** @type {string[]} */ ([]),
     exposed: /** @type {string[]} */ ([]),
   }
-  // Fail CLOSED. fs-schema-guard.sh:76-78 fails open on a missing schema so an
+  // Fail CLOSED. fs-schema-guard.sh:77-80 fails open on a missing schema so an
   // unseeded legacy account is not write-blocked; a read surface facing a
   // client must do the opposite. Do not "fix" this to match the guard.
   if (typeof schemaText !== 'string' || schemaText.length === 0) return empty

package/payload/platform/plugins/scheduling/PLUGIN.md

@@ -1,7 +1,7 @@
 ---
 name: scheduling
 description: "Calendar and scheduling — create events, manage appointments, set up recurring triggers."
-account-owned-files: [{"file": "calendar-availability.json", "description": "The booking page's availability config, written by the publish-availability script and read by the live booking page."}]
+account-owned-files: [{"file": "calendar-availability.json", "writtenBy": "agent", "description": "The booking page's availability config. Authored by the agent under the calendar-site skill, which is also the only path that changes it; the publish-availability script reads it to refresh the live booking page."}]
 tools:
   - name: schedule-event
     publicAllowlist: false

package/payload/platform/scripts/__tests__/account-schema-owned-dirs.test.sh

@@ -395,5 +395,31 @@ for _n in e-sign data-portal.json calendar-availability.json wa-channel-bindings
   assert_grep "$_n" "$ALLOWED_SHIP" "ship-allow-$_n"
 done
 
+# --- declared-files fence: one name<TAB>plugin line per declared FILE -------
+# The allowed-top-level fence is a layout list: it says a name may exist at the
+# account root, not that an agent may author it. The write guard needs the file
+# set apart from the bucket set, plus the owning plugin to name in its block
+# message, so the merge emits it as its own fence.
+DECL_SHIP="$(awk '/^```declared-files$/{f=1;next} /^```$/{f=0} f' "$A_SHIP/SCHEMA.md")"
+for _n in wa-channel-bindings.json telegram-channel-bindings.json webchat-channel-bindings.json \
+          canonical-webchat-session.json session-titles.json agents-disabled.json; do
+  assert_grep "$(printf '%s\tadmin' "$_n")" "$DECL_SHIP" "ship-decl-$_n"
+done
+# An agent-written declaration (writtenBy: agent) stays OUT of the fence: the
+# calendar-site and data-portal skills author these two files with Write, so
+# denying them would break the only path that creates them. They remain in the
+# allowed set (asserted above), so the reconcile still never calls them strays.
+assert_nogrep "data-portal.json" "$DECL_SHIP" "ship-decl-excludes-agent-written-portal"
+assert_nogrep "calendar-availability.json" "$DECL_SHIP" "ship-decl-excludes-agent-written-availability"
+# A declared DIR never enters the file fence.
+assert_nogrep "e-sign" "$DECL_SHIP" "ship-decl-excludes-dirs"
+assert_grep "declared-files:start" "$(cat "$A_SHIP/SCHEMA.md")" "ship-decl-marker"
+# Idempotent: a second merge leaves the file byte-identical.
+B_SHIP="$(shasum "$A_SHIP/SCHEMA.md" | awk '{print $1}')"
+merge_owned_dirs_into_schema "$A_SHIP" >/dev/null
+assert_eq "$(shasum "$A_SHIP/SCHEMA.md" | awk '{print $1}')" "$B_SHIP" "ship-decl-idempotent"
+# A brand whose payload declares no owned file emits no region at all.
+assert_nogrep "declared-files:start" "$(cat "$A_MX/SCHEMA.md")" "mx-no-decl-region"
+
 echo "PASS=$PASS FAIL=$FAIL"
 if [ "$FAIL" -ne 0 ]; then printf '%s\n' "${FAILED[@]}"; exit 1; fi

package/payload/platform/scripts/lib/account-schema-owned-dirs.py

@@ -8,6 +8,13 @@ by kind:
     account-owned-dirs:  [{"dir": "quoting", "description": "..."}]
     account-owned-files: [{"file": "data-portal.json", "description": "..."}]
 
+A file entry may add "writtenBy": "agent" to say the agent authors it under a
+skill's instruction rather than platform code writing it whole. Such a file is
+still declared — the reconcile must not call it a stray — but it is left out of
+the declared-files fence the write guard denies on, because denying it would
+block the only path that creates it. Absent or any other value means platform
+code is the writer.
+
 The owned-entry set for a brand is the union declared by every platform plugin
 ($PROJECT_DIR/plugins/*/PLUGIN.md) and every premium sub-plugin of a bundle the
 brand ships ($PREMIUM_ROOT/<bundle>/plugins/*/PLUGIN.md, gated by brand.json
@@ -30,6 +37,8 @@ MARK_START = "<!-- plugin-owned-dirs:start -->"
 MARK_END = "<!-- plugin-owned-dirs:end -->"
 ONT_START = "<!-- ontology-buckets:start -->"
 ONT_END = "<!-- ontology-buckets:end -->"
+DECL_START = "<!-- declared-files:start -->"
+DECL_END = "<!-- declared-files:end -->"
 
 # Base top-level names shipped in the account template plus `.quarantine`. This
 # set is prune-protection only: a reconcile never *adds* a missing seed entry,
@@ -109,7 +118,9 @@ def _read_vertical(project_dir):
 
 
 def _parse_plugin_md(path):
-    """Return (name, [ {name, kind, description} ]) from a PLUGIN.md, or (None, []).
+    """Return (name, [ {name, kind, description, writtenBy} ]) from a PLUGIN.md,
+    or (None, []). `writtenBy` is '' unless the entry states one; 'agent' keeps
+    the name out of the declared-files fence (see the module docstring).
     Two frontmatter keys, one list: `account-owned-dirs` yields kind='dir',
     `account-owned-files` yields kind='file'. A key whose value is not a JSON
     array of objects is skipped WHOLE: entries are staged and committed only once
@@ -145,7 +156,8 @@ def _parse_plugin_md(path):
                 n = (e.get(field) or "").strip()
                 if n and "/" not in n:
                     staged.append({"name": n, "kind": kind,
-                                   "description": (e.get("description") or "").strip()})
+                                   "description": (e.get("description") or "").strip(),
+                                   "writtenBy": (e.get("writtenBy") or "").strip()})
         except Exception:
             continue
         owned.extend(staged)
@@ -190,7 +202,8 @@ def resolve(project_dir):
             if e["name"] in seen:
                 continue
             seen[e["name"]] = {"name": e["name"], "kind": e["kind"],
-                               "description": e["description"], "plugin": name or "unknown"}
+                               "description": e["description"], "plugin": name or "unknown",
+                               "writtenBy": e["writtenBy"]}
             order.append(e["name"])
     return [seen[n] for n in order]
 
@@ -355,9 +368,10 @@ def merge(project_dir, account_dir):
         lines = text.split("\n")
         lines[start + 1:end] = new_entries
         text = "\n".join(lines)
-    # Regenerate both descriptive regions wholesale (idempotent).
+    # Regenerate every generated region wholesale (idempotent).
     text = _strip_region(text, MARK_START, MARK_END)
     text = _strip_region(text, ONT_START, ONT_END)
+    text = _strip_region(text, DECL_START, DECL_END)
     if owned:
         region = [MARK_START, "## Plugin-owned top-level entries", "",
                   "A plugin declares the account-root entries its feature owns. A",
@@ -393,6 +407,28 @@ def merge(project_dir, account_dir):
                           f"(owned by `{b['owner']}`), not a root bucket.")
         region.append(ONT_END)
         text = text.rstrip("\n") + "\n\n" + "\n".join(region) + "\n"
+    # The declared-file set, machine-readable and separate from the
+    # allowed-top-level fence. That fence is a layout list — it says a name may
+    # exist at the account root — and the write guard reads it as its allow-list,
+    # so a name unioned into it becomes agent-writable. This fence carries the
+    # other half the guard needs: which of those names is written whole by
+    # platform code, and which plugin to name when it blocks the write. An
+    # agent-written declaration is excluded: its skill authors it with Write, so
+    # denying it would block the only path that creates it.
+    declared = [e for e in owned if e["kind"] == "file" and e["writtenBy"] != "agent"]
+    if declared:
+        region = [DECL_START, "## Declared files (written by platform code, owned by a plugin)", "",
+                  "Each file below is written whole by platform code and owned by the",
+                  "plugin named beside it. It is control-plane state, not operator data:",
+                  "never hand-edit one, because the next platform write overwrites the",
+                  "edit. The write guard reads this block and blocks a write whose first",
+                  "path segment is one of these names.", "",
+                  "```declared-files"]
+        for e in declared:
+            region.append(f"{e['name']}\t{e['plugin']}")
+        region.append("```")
+        region.append(DECL_END)
+        text = text.rstrip("\n") + "\n\n" + "\n".join(region) + "\n"
     with open(schema_path, "w") as f:
         f.write(text)
     root_dirs = [b["dir"] for b in domain if _is_root(b["owner"])]

package/payload/platform/scripts/logs-read.sh

@@ -26,7 +26,7 @@
 # For per-session types (agent-stream/system/session/error/public): sessionKey
 # is required in the first mode. For platform-scoped types (server/vnc/
 # heartbeat/mem): the id is ignored. chat-attempts is --tail-only:
-# cross-grep of edge.log + server.log for the chat-ingress quartet within
+# cross-grep of edge.log + server.log for the chat-ingress checkpoints within
 # the most recent N minutes.
 #
 # Every invocation writes a one-line trailer describing files searched,
@@ -154,14 +154,17 @@ is_per_conversation_type() {
 SEARCH_TYPES="agent-stream error session public server mcp vnc"
 VALID_TYPES="agent-stream, system, session, error, heartbeat, public, server, mcp, vnc, mem, chat-attempts"
 
-# chat-attempts cross-grep prefixes. One row per chat-ingress
-# checkpoint emitted across edge.log + server.log: edge-side inbound/outcome,
-# admin-auth gate verdict, chat-route handler entry. Absence of a row at any
-# checkpoint localises the failure to one stage of the ingress pipeline.
+# chat-attempts cross-grep prefixes. Four checkpoint patterns across
+# edge.log + server.log: edge-side inbound/outcome, admin-auth gate verdict,
+# chat-route handler entry. Any one chat emits THREE of the four, and which
+# three depends on the surface: the admin webchat (POST /api/webchat/send)
+# carries an admin-auth row and no chat-route row, public chat
+# (POST /api/chat) carries a chat-route row and no admin-auth row. Absence of
+# a row the surface does emit localises the failure to one ingress stage.
 #
 # The `ts=` group is optional and sits between the tag and the keyword because
 # that is where Task 2024 put it: the shipped line is
-# `[edge-admin] ts=<ISO> inbound …` (edge.ts:182, 193; edge-admin.ts:48, 52).
+# `[edge-admin] ts=<ISO> inbound …` (edge.ts:188, 199; edge-admin.ts:48, 52).
 # Requiring tag and keyword adjacent matched zero lines and reported the
 # absence as an edge-side silence (Task 2032). Optional rather than required,
 # so the pattern is not pinned to one format version a second time.
@@ -186,7 +189,7 @@ Usage:
                                               is_error result (silent-failure audit)
   logs-read.sh --tail [type] [lines]          Tail most recent log of type
   logs-read.sh --tail chat-attempts [min]     Cross-grep edge.log + server.log
-                                              for the chat-ingress quartet
+                                              for the chat-ingress checkpoints
   logs-read.sh --grep <sessionKey> [type]     Legacy grep across log files
 
 Types: $VALID_TYPES
@@ -200,9 +203,12 @@ transcript, flagging subagent is_error results inline. An explicit <type>
 keeps the legacy per-account stream-log read.
 Per-session stream-log types (agent-stream, system, session, error, public)
 require sessionKey; platform-scoped types (server, vnc, heartbeat, mem) ignore the id.
-chat-attempts is --tail-only — it aggregates the four ingress checkpoints
+chat-attempts is --tail-only — it aggregates four ingress checkpoint patterns
 ([edge-admin] ts=<ISO> inbound, [admin-auth] outcome, [chat-route] entered,
-[edge-admin] ts=<ISO> outcome) into one timeline.
+[edge-admin] ts=<ISO> outcome) into one timeline. Any one chat emits three of
+them: the admin webchat (POST /api/webchat/send) emits the two edge rows plus
+[admin-auth] outcome and no [chat-route] row; public chat (POST /api/chat)
+emits the two edge rows plus [chat-route] entered and no [admin-auth] row.
 EOF
   exit 2
 }
@@ -216,25 +222,42 @@ validate_type() {
 }
 
 # chat-attempts cross-grep mode. Combines edge.log + server.log
-# lines matching the chat-ingress quartet, filtered to the last N minutes,
+# lines matching the chat-ingress checkpoints, filtered to the last N minutes,
 # sorted chronologically. Default window: 5 minutes (matches the typical
 # "agent doesn't respond" report window — operator sees the silence,
 # screenshots the chat, then runs this within a few minutes).
 #
 # Output preserves source-file prefix so operators can see whether the line
 # came from the edge process (edge.log) or maxy-ui (server.log). On a
-# successful chat POST the timeline reads:
+# successful chat POST the timeline reads THREE rows, and which three depends
+# on the surface.
 #
-#   [edge-admin] ts=… inbound  method=POST path=/api/admin/chat …   (edge.log)
-#   [admin-auth] outcome=accept …                                    (server.log)
-#   [chat-route] entered  route=admin method=POST cacheKey=… …       (server.log)
-#   [edge-admin] ts=… outcome  method=POST path=… status=200 …       (edge.log)
+# admin webchat, POST /api/webchat/send:
+#   [edge-admin] ts=… inbound  method=POST path=/api/webchat/send … (edge.log)
+#   [admin-auth] outcome=accept path=/api/webchat/send cacheKey=…   (server.log)
+#   [edge-admin] ts=… outcome  method=POST path=… status=200 …      (edge.log)
 #
-# Any missing row in that sequence is itself diagnostic. Three-strike rule:
-# zero edge inbound = browser/network problem; inbound present + admin-auth
-# missing = handler unreachable; admin-auth=reject = auth failure; entered
-# missing after accept = Hono routing regression; outcome missing = upstream
-# proxy crash.
+# public chat, POST /api/chat:
+#   [edge-admin] ts=… inbound  method=POST path=/api/chat …         (edge.log)
+#   [chat-route] entered route=public method=POST                   (server.log)
+#   [edge-admin] ts=… outcome  method=POST path=… status=200 …      (edge.log)
+#
+# Nothing emits [chat-route] on the admin surface and nothing emits
+# [admin-auth] on the public one, so the row the OTHER surface would have
+# shown is not evidence of anything. Reading admin against a four-row
+# sequence is what made every healthy admin chat look like a routing
+# regression (Task 2042).
+#
+# A row missing from the surface's OWN sequence is diagnostic.
+# Both surfaces: zero edge inbound = browser/network problem; edge outcome
+# missing = upstream proxy crash.
+# Admin: [admin-auth] outcome is the handler-side checkpoint. Missing against
+# a present inbound = handler unreachable; outcome=reject = auth failure;
+# outcome=accept already proves the route matched, because requireAdminSession
+# is middleware mounted on /send (webchat.ts), so no further handler-side row
+# is expected.
+# Public: [chat-route] entered is the handler-side checkpoint. Missing against
+# a present inbound for /api/chat = public-route routing regression.
 #
 # The two log families are stamped differently and neither is negotiable here:
 # edge.log self-stamps `ts=` inside the line (Task 2024), server.log is stamped
@@ -263,10 +286,10 @@ chat_attempts_mode() {
   # matched line, which is what the previous form spawned on both dialects.
   #
   # Milliseconds are load-bearing, not decoration. Both families emit
-  # `toISOString()`, and the whole ingress quartet normally completes inside
-  # one wall-clock second, so a key truncated to seconds collides on all four
-  # rows and the sort falls back to file-append order — which puts both edge
-  # rows first and reproduces the clustering this mode was fixed to stop.
+  # `toISOString()`, and a chat's three checkpoints normally complete inside
+  # one wall-clock second, so a key truncated to seconds collides on every row
+  # and the sort falls back to file-append order — which puts the edge rows
+  # first and reproduces the clustering this mode was fixed to stop.
   #
   # An undated line reaches $tmp with `-` as its key. It cannot be placed in
   # the window or in the sequence, so it is listed separately below rather

package/payload/platform/scripts/logs-read.test.sh

@@ -197,28 +197,31 @@ iso_minutes_ago() {
     || date -u -d "${m} minutes ago" +%Y-%m-%dT%H:%M:%S 2>/dev/null
 }
 
-# --- Case 6 (Task 2032): all four checkpoints match, interleaved by time ---
-case_chat_attempts_quartet() {
+# --- Case 6 (Task 2032): all four patterns match, interleaved by time ---
+case_chat_attempts_both_surfaces() {
   local root="/tmp/maxy-logs-read-test-6-$$"
   local script
   script=$(setup_install_tree "$root")
   local logs="$HOME/.$(basename "$root")/logs"
-  # Four distinct seconds, all inside the 5-minute window, in ingress order.
-  # Distinct rather than paired so the ordering assertion below is strict and
-  # does not depend on how the sort breaks a tie.
-  local t0 t1 t2 t3
-  t0=$(iso_minutes_ago 4); t1=$(iso_minutes_ago 3)
-  t2=$(iso_minutes_ago 2); t3=$(iso_minutes_ago 1)
-
-  # Shipped shapes: edge.log self-stamps `ts=` after the tag (edge.ts:182,193);
+  # Four checkpoint patterns in one window takes TWO chats, not one: no single
+  # surface emits four (Task 2042). A public chat then an admin chat, three
+  # rows each. Distinct milliseconds inside two minute-slots, so the ordering
+  # assertion below is strict and exercises the millisecond sort key.
+  local tp ta
+  tp=$(iso_minutes_ago 4); ta=$(iso_minutes_ago 2)
+
+  # Shipped shapes: edge.log self-stamps `ts=` after the tag (edge.ts:188,199);
   # server.log is stamped at the line start by server-init-line-stamper.cjs.
+  # Both edge rows fire for any /api/ path (lib/proxy-log-path.ts:28-30).
   {
-    echo "[edge-admin] ts=${t0}.100Z inbound method=POST path=/api/admin/chat token=present allowlist-branch=passthrough"
-    echo "[edge-admin] ts=${t3}.900Z outcome method=POST path=/api/admin/chat status=200 duration_ms=812"
+    echo "[edge-admin] ts=${tp}.100Z inbound method=POST path=/api/chat token=absent allowlist-branch=passthrough"
+    echo "[edge-admin] ts=${tp}.300Z outcome method=POST path=/api/chat status=200 duration_ms=200"
+    echo "[edge-admin] ts=${ta}.100Z inbound method=POST path=/api/webchat/send token=present allowlist-branch=passthrough"
+    echo "[edge-admin] ts=${ta}.300Z outcome method=POST path=/api/webchat/send status=200 duration_ms=200"
   } > "$logs/edge.log"
   {
-    echo "${t1}.200Z [admin-auth] outcome=accept path=/api/admin/chat cacheKey=deadbeef…"
-    echo "${t2}.300Z [chat-route] entered route=admin method=POST cacheKey=deadbeef"
+    echo "${tp}.200Z [chat-route] entered route=public method=POST"
+    echo "${ta}.200Z [admin-auth] outcome=accept path=/api/webchat/send cacheKey=deadbeef…"
   } > "$logs/server.log"
 
   local stdout stderr rc=0
@@ -232,14 +235,15 @@ case_chat_attempts_quartet() {
   if [[ "$stdout" != *"inbound"* ]]; then echo "  timeline missing edge inbound"; return 1; fi
   if [[ "$stdout" != *"[edge-admin]"*"outcome"* ]]; then echo "  timeline missing edge outcome"; return 1; fi
   if [[ "$stdout" != *"[admin-auth] outcome=accept"* ]]; then echo "  timeline missing admin-auth"; return 1; fi
-  if [[ "$stdout" != *"[chat-route] entered"* ]]; then echo "  timeline missing chat-route"; return 1; fi
-  if [[ "$stderr" != *"edge=2"* ]]; then echo "  trailer missing edge=2: $stderr"; return 1; fi
+  if [[ "$stdout" != *"[chat-route] entered route=public"* ]]; then echo "  timeline missing chat-route"; return 1; fi
+  if [[ "$stderr" != *"edge=4"* ]]; then echo "  trailer missing edge=4: $stderr"; return 1; fi
   if [[ "$stderr" != *"server=2"* ]]; then echo "  trailer missing server=2: $stderr"; return 1; fi
   if [[ "$stderr" != *"undated=0"* ]]; then echo "  trailer missing undated=0: $stderr"; return 1; fi
 
-  # Chronological: inbound (t0) precedes the edge outcome (t3), and the
-  # chat-route row sits between them. A fixed-column sort put the two edge
-  # rows adjacent instead, which is the ordering defect this pins.
+  # Chronological across the two log families: the public chat's edge inbound
+  # precedes its chat-route row, which precedes its edge outcome. A fixed-column
+  # sort put the two edge rows adjacent instead, which is the ordering defect
+  # this pins.
   local first mid last
   first=$(echo "$stdout" | grep -n 'inbound' | head -1 | cut -d: -f1)
   mid=$(echo "$stdout" | grep -n '\[chat-route\] entered' | head -1 | cut -d: -f1)
@@ -293,7 +297,7 @@ case_chat_attempts_window() {
   recent=$(iso_minutes_ago 1)
   old=$(iso_minutes_ago 90)
   {
-    echo "[edge-admin] ts=${old}.000Z inbound method=POST path=/api/admin/chat token=present allowlist-branch=passthrough"
+    echo "[edge-admin] ts=${old}.000Z inbound method=POST path=/api/webchat/send token=present allowlist-branch=passthrough"
     echo "[edge-admin] ts=${recent}.000Z inbound method=GET path=/api/admin/version token=absent allowlist-branch=passthrough"
   } > "$logs/edge.log"
   : > "$logs/server.log"
@@ -312,11 +316,13 @@ case_chat_attempts_window() {
   return 0
 }
 
-# --- Case 9 (Task 2032): the whole quartet inside one second still orders ---
-# The four checkpoints of one chat POST normally complete in a few hundred
-# milliseconds, so they share a wall-clock second. A sort key truncated to
-# seconds collides on all four and falls back to file-append order, which puts
-# both edge rows first — the clustering this mode was fixed to stop.
+# --- Case 9 (Task 2032): all four patterns inside one second still order ---
+# A chat POST completes in a few hundred milliseconds, so its checkpoints share
+# a wall-clock second; an admin chat and a public chat overlapping in that same
+# second put all four patterns there at once. A sort key truncated to seconds
+# collides on every row and falls back to file-append order, which puts the edge
+# rows first — the clustering this mode was fixed to stop. Six rows, because no
+# single surface emits four checkpoints (Task 2042).
 case_chat_attempts_subsecond_order() {
   local root="/tmp/maxy-logs-read-test-9-$$"
   local script
@@ -325,11 +331,13 @@ case_chat_attempts_subsecond_order() {
   local s
   s=$(iso_minutes_ago 1)
   {
-    echo "[edge-admin] ts=${s}.010Z inbound method=POST path=/api/admin/chat token=present allowlist-branch=passthrough"
-    echo "[edge-admin] ts=${s}.230Z outcome method=POST path=/api/admin/chat status=200 duration_ms=220"
+    echo "[edge-admin] ts=${s}.010Z inbound method=POST path=/api/webchat/send token=present allowlist-branch=passthrough"
+    echo "[edge-admin] ts=${s}.060Z inbound method=POST path=/api/chat token=absent allowlist-branch=passthrough"
+    echo "[edge-admin] ts=${s}.090Z outcome method=POST path=/api/chat status=200 duration_ms=30"
+    echo "[edge-admin] ts=${s}.230Z outcome method=POST path=/api/webchat/send status=200 duration_ms=220"
   } > "$logs/edge.log"
   {
-    echo "${s}.050Z [admin-auth] outcome=accept path=/api/admin/chat cacheKey=deadbeef"
+    echo "${s}.050Z [admin-auth] outcome=accept path=/api/webchat/send cacheKey=deadbeef"
     echo "${s}.070Z [chat-route] entered route=public method=POST"
   } > "$logs/server.log"
 
@@ -365,7 +373,7 @@ case_chat_attempts_undated_not_silence() {
   local script
   script=$(setup_install_tree "$root")
   local logs="$HOME/.$(basename "$root")/logs"
-  echo "[edge-admin] inbound method=POST path=/api/admin/chat token=present allowlist-branch=passthrough" > "$logs/edge.log"
+  echo "[edge-admin] inbound method=POST path=/api/webchat/send token=present allowlist-branch=passthrough" > "$logs/edge.log"
   : > "$logs/server.log"
 
   local stdout stderr rc=0
@@ -416,17 +424,51 @@ case_chat_attempts_edge_log_absent() {
   return 0
 }
 
+# --- Case 12 (Task 2042): usage names each surface, not four rows per chat ---
+# The mode greps four checkpoint patterns, but no single chat emits four: the
+# admin webchat has no [chat-route] row and public chat has no [admin-auth]
+# row. Usage that promised four made every healthy admin chat read as a
+# routing regression, so the count and both surface paths are pinned here.
+case_usage_checkpoints_per_surface() {
+  local root="/tmp/maxy-logs-read-test-12-$$"
+  local script
+  script=$(setup_install_tree "$root")
+
+  local stderr rc=0
+  "$script" >/dev/null 2>/tmp/maxy-logs-read-stderr-12-$$ || rc=$?
+  stderr=$(cat /tmp/maxy-logs-read-stderr-12-$$)
+  rm -f /tmp/maxy-logs-read-stderr-12-$$
+
+  cleanup_install_tree "$root"
+
+  if [[ $rc -ne 2 ]]; then echo "  expected usage exit 2, got $rc"; return 1; fi
+  if [[ "$stderr" == *"four ingress checkpoints"* ]]; then
+    echo "  usage still claims four checkpoints per chat"; return 1
+  fi
+  if [[ "$stderr" == *"quartet"* ]]; then
+    echo "  usage still calls the checkpoints a quartet"; return 1
+  fi
+  if [[ "$stderr" != *"/api/webchat/send"* ]]; then
+    echo "  usage does not name the admin surface path"; return 1
+  fi
+  if [[ "$stderr" != *"/api/chat"* ]]; then
+    echo "  usage does not name the public surface path"; return 1
+  fi
+  return 0
+}
+
 run_case "sessionKey file present → exit 0" case_file_present
 run_case "no file → exit 1 + missing-on-resolve" case_missing
 run_case "ambiguous prefix → exit 1, refuses to pick" case_ambiguous
 run_case "--tail mem present → exit 0 + sampler lines" case_mem_present
 run_case "--tail mem absent → exit 1 + not-found message" case_mem_absent
-run_case "chat-attempts quartet matches and interleaves" case_chat_attempts_quartet
+run_case "chat-attempts matches both surfaces and interleaves" case_chat_attempts_both_surfaces
 run_case "chat-attempts genuine zero states what it means" case_chat_attempts_genuine_zero
 run_case "chat-attempts window excludes an older line" case_chat_attempts_window
-run_case "chat-attempts orders four rows inside one second" case_chat_attempts_subsecond_order
+run_case "chat-attempts orders all four patterns inside one second" case_chat_attempts_subsecond_order
 run_case "chat-attempts undated match is not edge silence" case_chat_attempts_undated_not_silence
 run_case "chat-attempts absent edge.log is reader blindness" case_chat_attempts_edge_log_absent
+run_case "usage names each surface's checkpoints" case_usage_checkpoints_per_surface
 
 echo ""
 echo "================================================"

package/payload/platform/scripts/provision-worktree.sh

@@ -0,0 +1,80 @@
+#!/usr/bin/env bash
+# The one documented action that makes a fresh worktree able to run the
+# platform/ui suite. Task 2034.
+#
+# A git worktree carries tracked files only. platform/node_modules,
+# platform/ui/node_modules and platform/lib/*/dist are gitignored build output, so
+# a fresh worktree has none of them, and `npm install` inside platform/ui creates
+# neither the hoisted platform/node_modules nor any lib dist. Without this, the
+# suite fails on absent artifacts in a way that reads as flaky tests.
+#
+# Two things here are not obvious and are the reason this is a script:
+#
+#   1. tsc is called as platform/node_modules/.bin/tsc, never bare. platform's
+#      own package.json declares no typescript; it hoists one from 28 workspace
+#      members. Inside an npm script npm prepends node_modules/.bin to PATH and a
+#      bare `tsc` resolves; from a bare shell it does not, and the tsc on PATH is
+#      an unrelated program that refuses to run.
+#
+#   2. The libs are built in a loop, not through `npm run build:lib`. build:lib
+#      chains its 27 compiler runs with &&, and one lib emits its output while
+#      still reporting type errors, which would abort every run after it. So each
+#      lib is built independently and the final gate is artifact presence, not
+#      compiler exit status — the only check that separates "emitted with type
+#      errors" from "emitted nothing".
+
+set -uo pipefail
+
+SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd -P)"
+PLATFORM="$(cd "$SCRIPT_DIR/.." && pwd -P)"
+TSC="$PLATFORM/node_modules/.bin/tsc"
+GATE="$PLATFORM/ui/scripts/check-worktree-provisioned.mjs"
+
+echo "[provision] platform: $PLATFORM"
+
+echo "[provision] stage 1/3: npm install in platform/"
+if ! (cd "$PLATFORM" && npm install); then
+  echo "[provision] FAILED at stage 1: npm install in platform/" >&2
+  exit 1
+fi
+
+echo "[provision] stage 2/3: npm install in platform/ui"
+if ! (cd "$PLATFORM/ui" && npm install); then
+  echo "[provision] FAILED at stage 2: npm install in platform/ui" >&2
+  exit 1
+fi
+
+if [ ! -x "$TSC" ]; then
+  echo "[provision] FAILED: $TSC absent after stage 1." >&2
+  echo "[provision] typescript hoists to platform/node_modules from the workspace" >&2
+  echo "[provision] members; if it is missing, stage 1 did not complete." >&2
+  exit 1
+fi
+
+echo "[provision] stage 3/3: building platform/lib/*/dist"
+emitted_with_errors=()
+for tsconfig in "$PLATFORM"/lib/*/tsconfig.json; do
+  lib="$(basename "$(dirname "$tsconfig")")"
+  if "$TSC" -p "$tsconfig" >/dev/null 2>&1; then
+    printf '  %-32s ok\n' "$lib"
+  elif [ -f "$PLATFORM/lib/$lib/dist/index.js" ]; then
+    printf '  %-32s emitted, with type errors\n' "$lib"
+    emitted_with_errors+=("$lib")
+  else
+    printf '  %-32s FAILED, emitted nothing\n' "$lib"
+  fi
+done
+
+if [ ${#emitted_with_errors[@]} -gt 0 ]; then
+  echo "[provision] ${#emitted_with_errors[@]} lib(s) emitted output while reporting type"
+  echo "[provision] errors: ${emitted_with_errors[*]}. Their dist is present, so the suite"
+  echo "[provision] can run. The type errors themselves are out of scope for provisioning."
+fi
+
+echo "[provision] verifying against the gate"
+if ! node "$GATE"; then
+  echo "[provision] FAILED: the tree is still unprovisioned after all three stages." >&2
+  exit 1
+fi
+
+echo "[provision] done. platform/ui is ready: cd platform/ui && npm test"

package/payload/server/{chunk-2WAXM5N2.js → chunk-S6HYTIU3.js}

@@ -6161,9 +6161,8 @@ async function tryCookieBridgeForConversation(c, cacheKey2, sessionId) {
     console.error(`[session] cookie-bridge-rejected reason=conversation-not-found path=${path} cacheKey=${sk8}\u2026 sessionId=${cid8}\u2026`);
     return { ok: false, reason: "conversation-not-found" };
   }
-  const deviceAccount = resolveAccount();
-  if (!deviceAccount || owner.accountId !== deviceAccount.accountId) {
-    console.error(`[session] cookie-bridge-rejected reason=account-mismatch path=${path} cacheKey=${sk8}\u2026 sessionId=${cid8}\u2026 conversationAccountId=${owner.accountId.slice(0, 8)}\u2026 deviceAccountId=${(deviceAccount?.accountId ?? "none").slice(0, 8)}\u2026`);
+  if (!isValidAccountId(owner.accountId)) {
+    console.error(`[session] cookie-bridge-rejected reason=account-mismatch path=${path} cacheKey=${sk8}\u2026 sessionId=${cid8}\u2026 conversationAccountId=${owner.accountId.slice(0, 8)}\u2026`);
     return { ok: false, reason: "account-mismatch" };
   }
   registerSession(cacheKey2, "admin", owner.accountId, void 0, owner.userId ?? void 0);

package/payload/server/maxy-edge.js

@@ -16,7 +16,7 @@ import {
   sanitizeClientCorrId,
   vncLog,
   websockifyLog
-} from "./chunk-2WAXM5N2.js";
+} from "./chunk-S6HYTIU3.js";
 import "./chunk-PFF6I7KP.js";
 
 // server/edge.ts