@rubytech/create-sitedesk-code 0.1.532 → 0.1.534

package/payload/platform/services/claude-session-manager/dist/http-server.js

@@ -47,7 +47,8 @@ import { emitRcLife } from './rc-life.js';
 import { createRcChildLog } from './rc-child-log.js';
 // Task 1214 — the admin voice-section reader, injected into the rc-spawn
 // --append-system-prompt for channel-bound admin sessions.
-import { extractVoiceSection } from './system-prompt.js';
+import { extractVoiceSection, renderSpecialistDomains } from './system-prompt.js';
+import { readSpecialistRoster } from './specialist-roster.js';
 import { readJsonlSession, readJsonlSessionAtPath } from './jsonl-enumerator.js';
 import { computeMetering } from './session-metering.js';
 import { collectActivity } from './activity-rows.js';
@@ -2503,6 +2504,12 @@ export function buildHttpApp(deps) {
         const personId = typeof body.personId === 'string' && body.personId.length > 0 && body.personId.length <= 128
             ? body.personId
             : undefined;
+        // Task 2234 — the registered-party label. Re-checked here against the same
+        // pattern the write path enforces: this body is reachable from the UI
+        // process, so the manager shape-gates it exactly as it does personId and
+        // sliceToken rather than trusting an upstream validation. A value failing
+        // the pattern yields undefined, so the var is simply not stamped.
+        const senderParty = typeof body.party === 'string' && /^[a-z0-9-]{1,64}$/.test(body.party) ? body.party : undefined;
         // Task 865 — the authenticated admin's AdminUser.userId, threaded by the UI
         // from the validated PIN session (never message content). Shape-validated
         // the same way as personId; written into the classification sidecar so the
@@ -3072,6 +3079,30 @@ export function buildHttpApp(deps) {
             }
             deps.logger(`[rc-spawn] op=voice-injected bytes=${voiceBytes}`);
         }
+        // Task 2237 — the account's authored specialists. `/public-spawn` receives a
+        // pre-resolved manifest in its body and composes it; this handler never did,
+        // so no channel spawn had ever named a specialist and the admin agent
+        // produced their deliverables inline (472 direct email-draft calls against 0
+        // Task dispatches on account 2078cb54, whose four clerks were invisible).
+        // Read here rather than plumbed through the request body so every rc-spawn
+        // caller is covered and none can forget it. Same `adminBinding && channelBound`
+        // gate as the voice segment above: a non-admin or channel-less rc-spawn is
+        // unchanged. This runs on resume too, so authoring a specialist takes effect
+        // on the next turn of a live session rather than needing a re-spawn.
+        // `count=0` on an account whose specialists/agents holds files is the failure
+        // signature, and its absence is what hid this for three days.
+        let specialistCount = 0;
+        let specialistBytes = 0;
+        if (adminBinding && channelBound) {
+            const roster = readSpecialistRoster(deps.perAccountSpecialistsDir);
+            const rendered = renderSpecialistDomains(roster);
+            if (rendered.body !== null) {
+                appendSegments.push(`<specialist-domains>\n${rendered.body}\n</specialist-domains>`);
+                specialistCount = roster.length;
+                specialistBytes = rendered.bytes;
+            }
+            deps.logger(`[rc-spawn] op=specialists-injected count=${specialistCount} bytes=${specialistBytes}`);
+        }
         // Task 1573 — the authenticated admin identity, resolved from the body
         // (validated PIN session) or the persisted sidecar. This, not the
         // owner-defaulting overrideUserId, is the source of the child USER_ID.
@@ -3156,6 +3187,9 @@ export function buildHttpApp(deps) {
             // (and thus its installed-plugin MCP children); null on non-house / public
             // / specialist spawns leaves the var unset.
             houseAdminScope: rcHouseAdminScope,
+            // Task 2234 — the registered-party label as WA_SENDER_PARTY. Shape-gated
+            // above; undefined leaves the var unset, which is every non-party spawn.
+            senderParty,
             // Task 1406 — surface this child's darwin host-creds resolution (op=spawn-hostcreds).
             logger: deps.logger,
         });