@rubytech/create-sitedesk-code 0.1.568 → 0.1.570

package/payload/platform/services/claude-session-manager/dist/specialist-preference-audit.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"specialist-preference-audit.d.ts","sourceRoot":"","sources":["../src/specialist-preference-audit.ts"],"names":[],"mappings":"AA8BA,MAAM,MAAM,MAAM,GAAG,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAA;AAE3C;;;;;;;0BAO0B;AAC1B,wBAAiB,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,UAAU,SAAU,GAAG,SAAS,CAAC,MAAM,CAAC,CAkBpF;AAID;;;;;;;;;;;kCAWkC;AAClC,eAAO,MAAM,WAAW,EAAE,aAAa,CAAC;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAKzE,CAAA;AAED;;;mEAGmE;AACnE,wBAAgB,YAAY,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAS5D;AAED;;yCAEyC;AACzC,wBAAgB,cAAc,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,GAAG,MAAM,GAAG,IAAI,CASrE;AAED;;iEAEiE;AACjE,wBAAgB,YAAY,CAAC,cAAc,EAAE,MAAM,GAAG,MAAM,EAAE,CAmB7D;AAED,MAAM,WAAW,QAAQ;IACvB,OAAO,EAAE,MAAM,CAAA;IACf,KAAK,EAAE,MAAM,CAAA;IACb,KAAK,EAAE,MAAM,CAAA;IACb,IAAI,EAAE,MAAM,CAAA;CACb;AAED,MAAM,WAAW,eAAe;IAC9B,eAAe,EAAE,MAAM,CAAA;IACvB,YAAY,EAAE,MAAM,CAAA;IACpB,SAAS,EAAE,QAAQ,EAAE,CAAA;CACtB;AAED;;;;;;eAMe;AACf,wBAAgB,eAAe,CAAC,CAAC,EAAE;IACjC,OAAO,EAAE,MAAM,CAAA;IACf,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;IACxB,KAAK,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAA;CACxB,GAAG,eAAe,CAmBlB;AAED;sDACsD;AACtD,wBAAgB,uBAAuB,CAAC,CAAC,EAAE;IACzC,eAAe,EAAE,MAAM,CAAA;IACvB,kBAAkB,EAAE,MAAM,CAAA;IAC1B,eAAe,EAAE,MAAM,CAAA;IACvB,SAAS,EAAE,MAAM,CAAA;IACjB,YAAY,EAAE,MAAM,CAAA;CACrB,GAAG,MAAM,CAKT;AAED;;;;;;;0DAO0D;AAC1D,wBAAgB,cAAc,CAAC,CAAC,EAAE,QAAQ,GAAG,MAAM,CAGlD;AAED,MAAM,WAAW,aAAa;IAC5B,gDAAgD;IAChD,KAAK,EAAE,MAAM,CAAA;IACb,gEAAgE;IAChE,IAAI,EAAE,MAAM,CAAA;IACZ,OAAO,EAAE,MAAM,CAAA;CAChB;AAED,MAAM,WAAW,6BAA6B;IAC5C,UAAU,EAAE,MAAM,CAAA;IAClB,MAAM,EAAE,MAAM,CAAA;IACd,8EAA8E;IAC9E,YAAY,IAAI,SAAS,MAAM,EAAE,CAAA;IACjC;oFACgF;IAChF,eAAe,CAAC,SAAS,EAAE,MAAM,GAAG,SAAS,aAAa,EAAE,CAAA;IAC5D,0DAA0D;IAC1D,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAAA;IACrC;sCACkC;IAClC,SAAS,CAAC,IAAI,EAAE,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAA;CAC1C;AAED,MAAM,WAAW,yBAAyB;IACxC,KAAK,IAAI,IAAI,CAAA;IACb,IAAI,IAAI,IAAI,CAAA;IACZ,QAAQ,IAAI,IAAI,CAAA;CACjB;AAED,wBAAgB,+BAA+B,CAC7C,IAAI,EAAE,6BAA6B,GAClC,yBAAyB,CAyG3B"}

package/payload/platform/services/claude-session-manager/dist/specialist-preference-audit.js

@@ -0,0 +1,299 @@
+// Task 2469 — a specialist that CAN be reached is not a specialist that WAS.
+//
+// The registry reconcile in account-agent-registry.ts answers the first
+// question and emits `op=agent-registry-resolution`. It was green on the
+// account that filed this, and would have stayed green through the whole
+// incident, because every clerk was reachable and none was reached: four
+// authored clerks owned the works orders, invoices and client emails while
+// content-producer produced all of them. The two questions are deliberately
+// separate signals, because one cannot answer the other.
+//
+// Keyed on the written path rather than on the dispatch prose. A dispatch
+// description is the model's own account of what it is doing, and the incident
+// this closes had twelve descriptions that each read as reasonable. A path is
+// a fact, and it is the same fact a write gate enforces on, so enforcement and
+// audit cannot drift apart.
+//
+// The input is `<projectDir>/<sessionId>/subagents/agent-<agentId>.jsonl` with
+// its sibling `.meta.json`. That directory is the ONLY surface that ties a
+// write to a specialist: the parent transcript records every record as
+// `isSidechain: false`, carries none of the subagent's tool calls, and its
+// `toolUseResult.toolStats` gives aggregate counts with no paths.
+//
+// Shape mirrors public-surface-audit.ts: PURE parsers, selector and formatters
+// plus an impure factory whose setInterval is unref'd and whose readers are
+// injected.
+import { closeSync, openSync, readSync } from 'node:fs';
+import { StringDecoder } from 'node:string_decoder';
+const TAG = '[specialist-preference]';
+/** Lines of a file, read in bounded chunks rather than into one string.
+ *
+ *  One session's `subagents/` directory measured 473 MB, so reading a
+ *  transcript with `readFileSync` would put the whole thing on the heap to look
+ *  at one field per line. A `StringDecoder` carries partial multi-byte
+ *  characters across chunk boundaries: splitting one would corrupt the line,
+ *  `JSON.parse` would reject it, and the write it carried would vanish from
+ *  the audit silently. */
+export function* readLinesSync(path, chunkBytes = 1 << 20) {
+    const fd = openSync(path, 'r');
+    try {
+        const buf = Buffer.allocUnsafe(chunkBytes);
+        const decoder = new StringDecoder('utf8');
+        let carry = '';
+        for (;;) {
+            const n = readSync(fd, buf, 0, chunkBytes, null);
+            if (n === 0)
+                break;
+            const parts = (carry + decoder.write(buf.subarray(0, n))).split('\n');
+            carry = parts.pop() ?? '';
+            for (const p of parts)
+                if (p.length > 0)
+                    yield p;
+        }
+        carry += decoder.end();
+        if (carry.length > 0)
+            yield carry;
+    }
+    finally {
+        closeSync(fd);
+    }
+}
+const WRITE_TOOLS = new Set(['Write', 'Edit', 'MultiEdit', 'NotebookEdit']);
+/** Artefact directory to the specialist that owns it.
+ *
+ *  Every entry is a directory measured in the live job tree: `quote` (17 jobs),
+ *  `Quotations` (5), `orders` (8), `invoices` (1). There is no valuation
+ *  directory anywhere in that tree, so valuation-clerk deliberately has no
+ *  entry — a guessed owner produces misroute lines nobody can act on.
+ *
+ *  Two exclusions are deliberate. `pricing/` holds the internal priced
+ *  breakdown rather than a client-facing artefact. `Suppliers Invoices` is the
+ *  supplier's invoice to the business, not the client invoice the
+ *  invoice-clerk issues, and the match is exact-segment so it cannot be swept
+ *  in by the `invoices` entry. */
+export const OWNED_PATHS = [
+    { segment: 'quote', owner: 'sitedesk:quoter' },
+    { segment: 'Quotations', owner: 'sitedesk:quoter' },
+    { segment: 'orders', owner: 'order-clerk' },
+    { segment: 'invoices', owner: 'invoice-clerk' },
+];
+/** The specialist that owns a written path, or null when the path is not an
+ *  owned artefact. Anchored on `jobs/<jobId>/<segment>/`, so a same-named
+ *  directory elsewhere in the account is not swept in and a file sitting
+ *  directly in a job directory belongs to nobody in particular. */
+export function ownerForPath(filePath) {
+    const seg = filePath.split('/');
+    for (let i = 0; i + 3 < seg.length; i++) {
+        if (seg[i] !== 'jobs')
+            continue;
+        const bucket = seg[i + 2];
+        const hit = OWNED_PATHS.find((o) => o.segment === bucket);
+        if (hit)
+            return hit.owner;
+    }
+    return null;
+}
+/** `agentType` from a subagent's sibling meta file, or null when the file is
+ *  unreadable, unparseable, or carries no type. Null is never read as
+ *  compliance: see `auditTranscript`. */
+export function parseAgentType(metaJson) {
+    if (metaJson === null)
+        return null;
+    try {
+        const d = JSON.parse(metaJson);
+        const t = d?.agentType;
+        return typeof t === 'string' && t.length > 0 ? t : null;
+    }
+    catch {
+        return null;
+    }
+}
+/** Written paths in one transcript line. A line that will not parse yields
+ *  nothing rather than throwing: the corpus carries partial trailing writes,
+ *  and one bad line must not abort the transcript it sits in. */
+export function selectWrites(transcriptLine) {
+    let d;
+    try {
+        d = JSON.parse(transcriptLine);
+    }
+    catch {
+        return [];
+    }
+    const content = d?.message?.content;
+    if (!Array.isArray(content))
+        return [];
+    const out = [];
+    for (const b of content) {
+        if (!b || typeof b !== 'object')
+            continue;
+        const blk = b;
+        if (blk.type !== 'tool_use')
+            continue;
+        if (typeof blk.name !== 'string' || !WRITE_TOOLS.has(blk.name))
+            continue;
+        const fp = blk.input?.file_path;
+        if (typeof fp === 'string' && fp.length > 0)
+            out.push(fp);
+    }
+    return out;
+}
+/** One subagent run.
+ *
+ *  `agentType` null means the meta file was missing or unreadable. Its
+ *  owned-path writes are counted as unattributed rather than as compliant:
+ *  "we could not tell who wrote this" is not "the right specialist wrote it",
+ *  and folding the two together is how a broken reader reads as a clean
+ *  account. */
+export function auditTranscript(p) {
+    let ownedPathWrites = 0;
+    let unattributed = 0;
+    const misroutes = [];
+    for (const line of p.lines) {
+        for (const path of selectWrites(line)) {
+            const owner = ownerForPath(path);
+            if (owner === null)
+                continue;
+            ownedPathWrites++;
+            if (p.agentType === null) {
+                unattributed++;
+                continue;
+            }
+            if (p.agentType !== owner) {
+                misroutes.push({ session: p.session, agent: p.agentType, owner, path });
+            }
+        }
+    }
+    return { ownedPathWrites, unattributed, misroutes };
+}
+/** The every-tick line. Emitted including zero, so a run that found nothing is
+ *  distinguishable from a run that did not happen. */
+export function formatPreferenceSummary(p) {
+    return `${TAG} op=audit sessionsScanned=${p.sessionsScanned}` +
+        ` transcriptsScanned=${p.transcriptsScanned}` +
+        ` ownedPathWrites=${p.ownedPathWrites}` +
+        ` misrouted=${p.misrouted} unattributed=${p.unattributed}`;
+}
+/** One line per misroute, naming the subagent, the owner it displaced and the
+ *  path. The displaced owner is the actionable half: "content-producer wrote
+ *  this" says less than "content-producer wrote this instead of the quoter".
+ *
+ *  The path is JSON-quoted because these paths contain spaces — the document
+ *  that prompted this task is `Q 1879 - Woolgrove School - Yellow Class
+ *  Kitchenette.html` — and a bare value would split into four tokens under any
+ *  `key=value` reader, including `grep -o 'path=\S*'`. */
+export function formatMisroute(p) {
+    return `${TAG} op=misroute session=${p.session} agent=${p.agent}` +
+        ` owner=${p.owner} path=${JSON.stringify(p.path)}`;
+}
+export function createSpecialistPreferenceAudit(deps) {
+    /** jsonl path -> the result of reading it at `mtimeMs`.
+     *
+     *  The emitted counts are a STATE — the totals across every transcript
+     *  currently known — not a per-tick delta. A transcript still being appended
+     *  to is re-read when its mtime moves and its entry is REPLACED, so its
+     *  earlier writes are counted once, not once per tick. A delta counter over
+     *  a growing file would inflate every total it reported. */
+    const seen = new Map();
+    /** Misroutes already named, so a steady state does not re-log every tick. */
+    const logged = new Set();
+    let timer = null;
+    function tickOnce() {
+        let sessionsScanned = 0;
+        const live = new Set();
+        for (const session of deps.listSessions()) {
+            sessionsScanned++;
+            let transcripts;
+            try {
+                transcripts = deps.listTranscripts(session);
+            }
+            catch (err) {
+                // A directory that cannot be listed is named and skipped. Silence here
+                // would read as a session with no subagent activity, which is the one
+                // reading this audit must never produce by accident.
+                deps.logger(`${TAG} op=session-unreadable session=${session}` +
+                    ` reason=${err instanceof Error ? err.message : String(err)}`);
+                continue;
+            }
+            for (const t of transcripts) {
+                live.add(t.jsonl);
+                const prior = seen.get(t.jsonl);
+                if (prior && prior.mtimeMs === t.mtimeMs)
+                    continue;
+                const agentType = parseAgentType(deps.readMeta(t.meta));
+                let audit;
+                try {
+                    audit = auditTranscript({ session, agentType, lines: deps.readLines(t.jsonl) });
+                }
+                catch (err) {
+                    deps.logger(`${TAG} op=transcript-unreadable path=${t.jsonl}` +
+                        ` reason=${err instanceof Error ? err.message : String(err)}`);
+                    continue;
+                }
+                seen.set(t.jsonl, { mtimeMs: t.mtimeMs, audit });
+                for (const m of audit.misroutes) {
+                    const key = `${m.session}|${m.agent}|${m.path}`;
+                    if (logged.has(key))
+                        continue;
+                    deps.logger(formatMisroute(m));
+                    logged.add(key);
+                }
+            }
+        }
+        // Drop transcripts that have gone, so the totals describe what is on disk
+        // now rather than accumulating across the process's whole lifetime. The
+        // logged-misroute keys go with them: this process runs for weeks, and a set
+        // that only ever grew would hold every path of every session the install
+        // has ever archived.
+        for (const path of Array.from(seen.keys()))
+            if (!live.has(path))
+                seen.delete(path);
+        const liveKeys = new Set();
+        for (const { audit } of seen.values()) {
+            for (const m of audit.misroutes)
+                liveKeys.add(`${m.session}|${m.agent}|${m.path}`);
+        }
+        for (const key of Array.from(logged))
+            if (!liveKeys.has(key))
+                logged.delete(key);
+        let ownedPathWrites = 0;
+        let misrouted = 0;
+        let unattributed = 0;
+        for (const { audit } of seen.values()) {
+            ownedPathWrites += audit.ownedPathWrites;
+            misrouted += audit.misroutes.length;
+            unattributed += audit.unattributed;
+        }
+        deps.logger(formatPreferenceSummary({
+            sessionsScanned,
+            transcriptsScanned: seen.size,
+            ownedPathWrites,
+            misrouted,
+            unattributed,
+        }));
+    }
+    return {
+        tickOnce,
+        start() {
+            if (timer)
+                return;
+            timer = setInterval(() => {
+                try {
+                    tickOnce();
+                }
+                catch (err) {
+                    deps.logger(`${TAG} op=audit-tick-failed message=${err instanceof Error ? err.message : String(err)}`);
+                }
+            }, deps.intervalMs);
+            if (typeof timer.unref === 'function')
+                timer.unref();
+            deps.logger(`${TAG} op=audit-started intervalMs=${deps.intervalMs}`);
+        },
+        stop() {
+            if (timer) {
+                clearInterval(timer);
+                timer = null;
+            }
+        },
+    };
+}
+//# sourceMappingURL=specialist-preference-audit.js.map

package/payload/platform/services/claude-session-manager/dist/specialist-preference-audit.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"specialist-preference-audit.js","sourceRoot":"","sources":["../src/specialist-preference-audit.ts"],"names":[],"mappings":"AAAA,6EAA6E;AAC7E,EAAE;AACF,wEAAwE;AACxE,yEAAyE;AACzE,yEAAyE;AACzE,yEAAyE;AACzE,2EAA2E;AAC3E,4EAA4E;AAC5E,yDAAyD;AACzD,EAAE;AACF,0EAA0E;AAC1E,+EAA+E;AAC/E,8EAA8E;AAC9E,+EAA+E;AAC/E,4BAA4B;AAC5B,EAAE;AACF,+EAA+E;AAC/E,2EAA2E;AAC3E,uEAAuE;AACvE,2EAA2E;AAC3E,kEAAkE;AAClE,EAAE;AACF,+EAA+E;AAC/E,4EAA4E;AAC5E,YAAY;AAEZ,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAA;AACvD,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAA;AAEnD,MAAM,GAAG,GAAG,yBAAyB,CAAA;AAGrC;;;;;;;0BAO0B;AAC1B,MAAM,SAAS,CAAC,CAAC,aAAa,CAAC,IAAY,EAAE,UAAU,GAAG,CAAC,IAAI,EAAE;IAC/D,MAAM,EAAE,GAAG,QAAQ,CAAC,IAAI,EAAE,GAAG,CAAC,CAAA;IAC9B,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,CAAC,WAAW,CAAC,UAAU,CAAC,CAAA;QAC1C,MAAM,OAAO,GAAG,IAAI,aAAa,CAAC,MAAM,CAAC,CAAA;QACzC,IAAI,KAAK,GAAG,EAAE,CAAA;QACd,SAAS,CAAC;YACR,MAAM,CAAC,GAAG,QAAQ,CAAC,EAAE,EAAE,GAAG,EAAE,CAAC,EAAE,UAAU,EAAE,IAAI,CAAC,CAAA;YAChD,IAAI,CAAC,KAAK,CAAC;gBAAE,MAAK;YAClB,MAAM,KAAK,GAAG,CAAC,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;YACrE,KAAK,GAAG,KAAK,CAAC,GAAG,EAAE,IAAI,EAAE,CAAA;YACzB,KAAK,MAAM,CAAC,IAAI,KAAK;gBAAE,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC;oBAAE,MAAM,CAAC,CAAA;QAClD,CAAC;QACD,KAAK,IAAI,OAAO,CAAC,GAAG,EAAE,CAAA;QACtB,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;YAAE,MAAM,KAAK,CAAA;IACnC,CAAC;YAAS,CAAC;QACT,SAAS,CAAC,EAAE,CAAC,CAAA;IACf,CAAC;AACH,CAAC;AAED,MAAM,WAAW,GAAwB,IAAI,GAAG,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,cAAc,CAAC,CAAC,CAAA;AAEhG;;;;;;;;;;;kCAWkC;AAClC,MAAM,CAAC,MAAM,WAAW,GAAsD;IAC5E,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,iBAAiB,EAAE;IAC9C,EAAE,OAAO,EAAE,YAAY,EAAE,KAAK,EAAE,iBAAiB,EAAE;IACnD,EAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,aAAa,EAAE;IAC3C,EAAE,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,eAAe,EAAE;CAChD,CAAA;AAED;;;mEAGmE;AACnE,MAAM,UAAU,YAAY,CAAC,QAAgB;IAC3C,MAAM,GAAG,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;IAC/B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACxC,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,MAAM;YAAE,SAAQ;QAC/B,MAAM,MAAM,GAAG,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAA;QACzB,MAAM,GAAG,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,MAAM,CAAC,CAAA;QACzD,IAAI,GAAG;YAAE,OAAO,GAAG,CAAC,KAAK,CAAA;IAC3B,CAAC;IACD,OAAO,IAAI,CAAA;AACb,CAAC;AAED;;yCAEyC;AACzC,MAAM,UAAU,cAAc,CAAC,QAAuB;IACpD,IAAI,QAAQ,KAAK,IAAI;QAAE,OAAO,IAAI,CAAA;IAClC,IAAI,CAAC;QACH,MAAM,CAAC,GAAY,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAA;QACvC,MAAM,CAAC,GAAI,CAA6B,EAAE,SAAS,CAAA;QACnD,OAAO,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;IACzD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAA;IACb,CAAC;AACH,CAAC;AAED;;iEAEiE;AACjE,MAAM,UAAU,YAAY,CAAC,cAAsB;IACjD,IAAI,CAAU,CAAA;IACd,IAAI,CAAC;QACH,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,CAAA;IAChC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAA;IACX,CAAC;IACD,MAAM,OAAO,GAAI,CAAyC,EAAE,OAAO,EAAE,OAAO,CAAA;IAC5E,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC;QAAE,OAAO,EAAE,CAAA;IACtC,MAAM,GAAG,GAAa,EAAE,CAAA;IACxB,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;QACxB,IAAI,CAAC,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ;YAAE,SAAQ;QACzC,MAAM,GAAG,GAAG,CAAsE,CAAA;QAClF,IAAI,GAAG,CAAC,IAAI,KAAK,UAAU;YAAE,SAAQ;QACrC,IAAI,OAAO,GAAG,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,SAAQ;QACxE,MAAM,EAAE,GAAG,GAAG,CAAC,KAAK,EAAE,SAAS,CAAA;QAC/B,IAAI,OAAO,EAAE,KAAK,QAAQ,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC;YAAE,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;IAC3D,CAAC;IACD,OAAO,GAAG,CAAA;AACZ,CAAC;AAeD;;;;;;eAMe;AACf,MAAM,UAAU,eAAe,CAAC,CAI/B;IACC,IAAI,eAAe,GAAG,CAAC,CAAA;IACvB,IAAI,YAAY,GAAG,CAAC,CAAA;IACpB,MAAM,SAAS,GAAe,EAAE,CAAA;IAChC,KAAK,MAAM,IAAI,IAAI,CAAC,CAAC,KAAK,EAAE,CAAC;QAC3B,KAAK,MAAM,IAAI,IAAI,YAAY,CAAC,IAAI,CAAC,EAAE,CAAC;YACtC,MAAM,KAAK,GAAG,YAAY,CAAC,IAAI,CAAC,CAAA;YAChC,IAAI,KAAK,KAAK,IAAI;gBAAE,SAAQ;YAC5B,eAAe,EAAE,CAAA;YACjB,IAAI,CAAC,CAAC,SAAS,KAAK,IAAI,EAAE,CAAC;gBACzB,YAAY,EAAE,CAAA;gBACd,SAAQ;YACV,CAAC;YACD,IAAI,CAAC,CAAC,SAAS,KAAK,KAAK,EAAE,CAAC;gBAC1B,SAAS,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC,SAAS,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;YACzE,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,EAAE,eAAe,EAAE,YAAY,EAAE,SAAS,EAAE,CAAA;AACrD,CAAC;AAED;sDACsD;AACtD,MAAM,UAAU,uBAAuB,CAAC,CAMvC;IACC,OAAO,GAAG,GAAG,6BAA6B,CAAC,CAAC,eAAe,EAAE;QAC3D,uBAAuB,CAAC,CAAC,kBAAkB,EAAE;QAC7C,oBAAoB,CAAC,CAAC,eAAe,EAAE;QACvC,cAAc,CAAC,CAAC,SAAS,iBAAiB,CAAC,CAAC,YAAY,EAAE,CAAA;AAC9D,CAAC;AAED;;;;;;;0DAO0D;AAC1D,MAAM,UAAU,cAAc,CAAC,CAAW;IACxC,OAAO,GAAG,GAAG,wBAAwB,CAAC,CAAC,OAAO,UAAU,CAAC,CAAC,KAAK,EAAE;QAC/D,UAAU,CAAC,CAAC,KAAK,SAAS,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAA;AACtD,CAAC;AA+BD,MAAM,UAAU,+BAA+B,CAC7C,IAAmC;IAEnC;;;;;;gEAM4D;IAC5D,MAAM,IAAI,GAAG,IAAI,GAAG,EAAuD,CAAA;IAC3E,6EAA6E;IAC7E,MAAM,MAAM,GAAG,IAAI,GAAG,EAAU,CAAA;IAChC,IAAI,KAAK,GAA0B,IAAI,CAAA;IAEvC,SAAS,QAAQ;QACf,IAAI,eAAe,GAAG,CAAC,CAAA;QACvB,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAA;QAC9B,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,YAAY,EAAE,EAAE,CAAC;YAC1C,eAAe,EAAE,CAAA;YACjB,IAAI,WAAqC,CAAA;YACzC,IAAI,CAAC;gBACH,WAAW,GAAG,IAAI,CAAC,eAAe,CAAC,OAAO,CAAC,CAAA;YAC7C,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,uEAAuE;gBACvE,sEAAsE;gBACtE,qDAAqD;gBACrD,IAAI,CAAC,MAAM,CACT,GAAG,GAAG,kCAAkC,OAAO,EAAE;oBACjD,WAAW,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAC9D,CAAA;gBACD,SAAQ;YACV,CAAC;YACD,KAAK,MAAM,CAAC,IAAI,WAAW,EAAE,CAAC;gBAC5B,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAA;gBACjB,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAA;gBAC/B,IAAI,KAAK,IAAI,KAAK,CAAC,OAAO,KAAK,CAAC,CAAC,OAAO;oBAAE,SAAQ;gBAClD,MAAM,SAAS,GAAG,cAAc,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAA;gBACvD,IAAI,KAAsB,CAAA;gBAC1B,IAAI,CAAC;oBACH,KAAK,GAAG,eAAe,CAAC,EAAE,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,CAAA;gBACjF,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,IAAI,CAAC,MAAM,CACT,GAAG,GAAG,kCAAkC,CAAC,CAAC,KAAK,EAAE;wBACjD,WAAW,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAC9D,CAAA;oBACD,SAAQ;gBACV,CAAC;gBACD,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,KAAK,EAAE,CAAC,CAAA;gBAChD,KAAK,MAAM,CAAC,IAAI,KAAK,CAAC,SAAS,EAAE,CAAC;oBAChC,MAAM,GAAG,GAAG,GAAG,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,IAAI,EAAE,CAAA;oBAC/C,IAAI,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC;wBAAE,SAAQ;oBAC7B,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,CAAA;oBAC9B,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;gBACjB,CAAC;YACH,CAAC;QACH,CAAC;QACD,0EAA0E;QAC1E,wEAAwE;QACxE,4EAA4E;QAC5E,yEAAyE;QACzE,qBAAqB;QACrB,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;YAAE,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC;gBAAE,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;QAClF,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAU,CAAA;QAClC,KAAK,MAAM,EAAE,KAAK,EAAE,IAAI,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC;YACtC,KAAK,MAAM,CAAC,IAAI,KAAK,CAAC,SAAS;gBAAE,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC,CAAA;QACpF,CAAC;QACD,KAAK,MAAM,GAAG,IAAI,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC;YAAE,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC;gBAAE,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAA;QAEhF,IAAI,eAAe,GAAG,CAAC,CAAA;QACvB,IAAI,SAAS,GAAG,CAAC,CAAA;QACjB,IAAI,YAAY,GAAG,CAAC,CAAA;QACpB,KAAK,MAAM,EAAE,KAAK,EAAE,IAAI,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC;YACtC,eAAe,IAAI,KAAK,CAAC,eAAe,CAAA;YACxC,SAAS,IAAI,KAAK,CAAC,SAAS,CAAC,MAAM,CAAA;YACnC,YAAY,IAAI,KAAK,CAAC,YAAY,CAAA;QACpC,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,uBAAuB,CAAC;YAClC,eAAe;YACf,kBAAkB,EAAE,IAAI,CAAC,IAAI;YAC7B,eAAe;YACf,SAAS;YACT,YAAY;SACb,CAAC,CAAC,CAAA;IACL,CAAC;IAED,OAAO;QACL,QAAQ;QACR,KAAK;YACH,IAAI,KAAK;gBAAE,OAAM;YACjB,KAAK,GAAG,WAAW,CAAC,GAAG,EAAE;gBACvB,IAAI,CAAC;oBACH,QAAQ,EAAE,CAAA;gBACZ,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,IAAI,CAAC,MAAM,CAAC,GAAG,GAAG,iCAAiC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;gBACxG,CAAC;YACH,CAAC,EAAE,IAAI,CAAC,UAAU,CAAC,CAAA;YACnB,IAAI,OAAO,KAAK,CAAC,KAAK,KAAK,UAAU;gBAAE,KAAK,CAAC,KAAK,EAAE,CAAA;YACpD,IAAI,CAAC,MAAM,CAAC,GAAG,GAAG,gCAAgC,IAAI,CAAC,UAAU,EAAE,CAAC,CAAA;QACtE,CAAC;QACD,IAAI;YACF,IAAI,KAAK,EAAE,CAAC;gBACV,aAAa,CAAC,KAAK,CAAC,CAAA;gBACpB,KAAK,GAAG,IAAI,CAAA;YACd,CAAC;QACH,CAAC;KACF,CAAA;AACH,CAAC"}

package/payload/platform/templates/account-settings.json

@@ -0,0 +1,159 @@
+{
+  "permissions": {
+    "defaultMode": "bypassPermissions",
+    "allow": [],
+    "deny": []
+  },
+  "hooks": {
+    "PreToolUse": [
+      {
+        "matcher": "Write",
+        "hooks": [
+          { "type": "command", "command": "bash $PLATFORM_ROOT/plugins/admin/hooks/archive-ingest-surface-gate.sh" },
+          { "type": "command", "command": "bash $PLATFORM_ROOT/plugins/admin/hooks/fs-schema-guard.sh" },
+          { "type": "command", "command": "bash $PLATFORM_ROOT/plugins/admin/hooks/quote-path-write-gate.sh" }
+        ]
+      },
+      {
+        "matcher": "Edit",
+        "hooks": [
+          { "type": "command", "command": "bash $PLATFORM_ROOT/plugins/admin/hooks/archive-ingest-surface-gate.sh" },
+          { "type": "command", "command": "bash $PLATFORM_ROOT/plugins/admin/hooks/fs-schema-guard.sh" },
+          { "type": "command", "command": "bash $PLATFORM_ROOT/plugins/admin/hooks/quote-path-write-gate.sh" }
+        ]
+      },
+      {
+        "matcher": "MultiEdit",
+        "hooks": [
+          { "type": "command", "command": "bash $PLATFORM_ROOT/plugins/admin/hooks/archive-ingest-surface-gate.sh" },
+          { "type": "command", "command": "bash $PLATFORM_ROOT/plugins/admin/hooks/fs-schema-guard.sh" },
+          { "type": "command", "command": "bash $PLATFORM_ROOT/plugins/admin/hooks/quote-path-write-gate.sh" }
+        ]
+      },
+      {
+        "matcher": "NotebookEdit",
+        "hooks": [
+          { "type": "command", "command": "bash $PLATFORM_ROOT/plugins/admin/hooks/archive-ingest-surface-gate.sh" },
+          { "type": "command", "command": "bash $PLATFORM_ROOT/plugins/admin/hooks/fs-schema-guard.sh" },
+          { "type": "command", "command": "bash $PLATFORM_ROOT/plugins/admin/hooks/quote-path-write-gate.sh" }
+        ]
+      },
+      {
+        "matcher": "Bash",
+        "hooks": [
+          { "type": "command", "command": "bash $PLATFORM_ROOT/plugins/admin/hooks/archive-ingest-surface-gate.sh" },
+          { "type": "command", "command": "bash $PLATFORM_ROOT/plugins/admin/hooks/fs-schema-guard-bash-pre.sh" },
+          { "type": "command", "command": "bash $PLATFORM_ROOT/plugins/admin/hooks/quote-engine-gate.sh" },
+          { "type": "command", "command": "bash $PLATFORM_ROOT/plugins/admin/hooks/quote-pdf-bash-gate.sh" }
+        ]
+      },
+      {
+        "hooks": [
+          { "type": "command", "command": "bash $PLATFORM_ROOT/plugins/admin/hooks/archive-ingest-surface-gate.sh" },
+          { "type": "command", "command": "bash $PLATFORM_ROOT/plugins/admin/hooks/public-tool-surface.sh" }
+        ]
+      },
+      {
+        "matcher": "WebFetch",
+        "hooks": [
+          { "type": "command", "command": "node $PLATFORM_ROOT/plugins/admin/hooks/webfetch-preflight.mjs" }
+        ]
+      },
+      {
+        "matcher": "AskUserQuestion",
+        "hooks": [
+          { "type": "command", "command": "bash $PLATFORM_ROOT/plugins/admin/hooks/askuserquestion-investigate-gate.sh" },
+          { "type": "command", "command": "bash $PLATFORM_ROOT/plugins/admin/hooks/askuserquestion-channel-carrier-gate.sh" }
+        ]
+      },
+      {
+        "matcher": "mcp__plugin_browser_browser__browser-pdf-save",
+        "hooks": [
+          { "type": "command", "command": "bash $PLATFORM_ROOT/plugins/admin/hooks/quote-render-gate.sh" }
+        ]
+      },
+      {
+        "matcher": "mcp__plugin_browser_browser__browser-pdf-save",
+        "hooks": [
+          { "type": "command", "command": "bash $PLATFORM_ROOT/plugins/admin/hooks/preference-consult-gate.sh" }
+        ]
+      },
+      {
+        "matcher": "mcp__plugin_email_email__email-send|mcp__plugin_email_email__email-reply|mcp__plugin_email_email__email-draft-send|mcp__plugin_outlook_outlook__outlook-mail-send|mcp__plugin_outlook_outlook__outlook-mail-reply|mcp__plugin_outlook_outlook__outlook-draft-send|SendUserFile",
+        "hooks": [
+          { "type": "command", "command": "bash $PLATFORM_ROOT/plugins/admin/hooks/preference-consult-gate.sh" }
+        ]
+      }
+    ],
+    "PostToolUse": [
+      {
+        "matcher": "Bash",
+        "hooks": [
+          { "type": "command", "command": "bash $PLATFORM_ROOT/plugins/admin/hooks/fs-schema-guard-bash-post.sh" }
+        ]
+      },
+      {
+        "matcher": "Agent",
+        "hooks": [
+          { "type": "command", "command": "bash $PLATFORM_ROOT/plugins/admin/hooks/post-tool-use-agent.sh" }
+        ]
+      },
+      {
+        "matcher": "mcp__plugin_browser_browser__browser-pdf-save",
+        "hooks": [
+          { "type": "command", "command": "bash $PLATFORM_ROOT/plugins/admin/hooks/quote-render-pdf-conformance.sh" }
+        ]
+      },
+      {
+        "matcher": "mcp__.*__.*-(export|import)-parse$",
+        "hooks": [
+          { "type": "command", "command": "bash $PLATFORM_ROOT/plugins/admin/hooks/archive-ingest-surface-gate.sh" }
+        ]
+      },
+      {
+        "matcher": "mcp__.*",
+        "hooks": [
+          { "type": "command", "command": "bash $PLATFORM_ROOT/plugins/admin/hooks/mcp-tool-missing.sh" }
+        ]
+      },
+      {
+        "matcher": "Write",
+        "hooks": [
+          { "type": "command", "command": "bash $PLATFORM_ROOT/plugins/admin/hooks/admin-authoring-observer.sh" }
+        ]
+      },
+      {
+        "matcher": "Edit",
+        "hooks": [
+          { "type": "command", "command": "bash $PLATFORM_ROOT/plugins/admin/hooks/admin-authoring-observer.sh" }
+        ]
+      },
+      {
+        "matcher": "Read",
+        "hooks": [
+          { "type": "command", "command": "bash $PLATFORM_ROOT/plugins/admin/hooks/pdf-text-layer-inject.sh" }
+        ]
+      }
+    ],
+    "UserPromptSubmit": [
+      {
+        "hooks": [
+          { "type": "command", "command": "bash $PLATFORM_ROOT/plugins/admin/hooks/archive-ingest-surface-gate.sh" },
+          { "type": "command", "command": "bash $PLATFORM_ROOT/plugins/admin/hooks/prompt-optimiser-directive.sh" },
+          { "type": "command", "command": "bash $PLATFORM_ROOT/plugins/admin/hooks/datetime-inject.sh" },
+          { "type": "command", "command": "bash $PLATFORM_ROOT/plugins/admin/hooks/mailbox-inject.sh" },
+          { "type": "command", "command": "bash $PLATFORM_ROOT/plugins/admin/hooks/preference-consult-directive.sh" },
+          { "type": "command", "command": "bash $PLATFORM_ROOT/plugins/admin/hooks/public-tool-surface.sh" }
+        ]
+      }
+    ],
+    "Stop": [
+      {
+        "hooks": [
+          { "type": "command", "command": "bash $PLATFORM_ROOT/plugins/admin/hooks/prompt-optimiser-compliance.sh" },
+          { "type": "command", "command": "bash $PLATFORM_ROOT/plugins/admin/hooks/public-tool-surface.sh" }
+        ]
+      }
+    ]
+  }
+}

package/payload/premium-plugins/sitedesk/agents/sitedesk--quoter.md

@@ -1,6 +1,6 @@
 ---
 name: quoter
-description: "SiteDesk quoter. Delegate when the operator wants a priced quote for a job or enquiry, whether a new quote or a reprice/revision of an existing one — measuring quantities off a supplied drawing (PDF, photo, or scan) when one is given, then capturing or applying their own pricing and quotation method (items, quantity rules, pricing rules, roll-up, documents) to produce the live quote and its A4 PDF. Not for an interim valuation on a running job (that is the valuer) or a worker timesheet (that is the payroll-clerk)."
+description: "SiteDesk quoter. Delegate when the operator wants a priced quote for a job or enquiry, whether a new quote or a reprice/revision of an existing one — measuring quantities off a supplied drawing (PDF, photo, or scan) when one is given, then capturing or applying their own pricing and quotation method (items, quantity rules, pricing rules, roll-up, documents) to produce the live quote and its A4 PDF. Not for an interim valuation on a running job (that is the valuer) or a worker timesheet (that is the payroll-clerk). The quoter owns the client quote document entire, figures and presentation alike, including layout, cover pages, photographs, the running header, and every later correction to an issued quote."
 summary: "Your quoter — measures a drawing into quantities, then turns the operator's own pricing method into a live priced quote and its PDF, for a new quote or a reprice."
 model: claude-sonnet-5
 tools: Skill, Read, Write, Edit, Bash, Glob, Grep, mcp__plugin_sitedesk-job_sitedesk-job__quote-engine-run, mcp__plugin_sitedesk-job_sitedesk-job__quote-render, mcp__plugin_browser_browser__browser-navigate, mcp__plugin_browser_browser__browser-pdf-save, mcp__plugin_email_email__email-send
@@ -15,7 +15,7 @@ Never run uncommanded git writes. `git init`, `git commit`, `git add`, `git stas
 
 A message from the agent that dispatched you arrives on the platform's own dispatcher channel, and it carries the same authority as the brief that dispatched you. Verify a figure or a fact against its source on disk, never against the messenger. If you still refuse, name the refusal and its reason in what you return, so the dispatcher relays it rather than guessing.
 
-You are the SiteDesk quoter — the owner of quote work for an independent service business (a building contractor and the like): a new priced quote, and repricing or revising an existing one. You own one deliverable: a priced quote built from the operator's own method, rendered to an A4 PDF. A reprice re-runs the same method against the job's updated payload; it is your work, not a document edit for another agent. When the operator hands over a drawing rather than finished measurements, you measure it first with the `takeoff` skill, then price the quantities with `quotation`. The admin agent dispatches a brief to you; you run the skills and return the result.
+You are the SiteDesk quoter — the owner of quote work for an independent service business (a building contractor and the like): a new priced quote, and repricing or revising an existing one. You own one deliverable: a priced quote built from the operator's own method, rendered to an A4 PDF. A reprice re-runs the same method against the job's updated payload. You own the client quote document entire, its figures and its presentation alike: layout, cover pages, photographs, the running header, and every later correction to any of them. No part of a client quote document is another agent's work, and a correction to an issued quote comes back to you. When the operator hands over a drawing rather than finished measurements, you measure it first with the `takeoff` skill, then price the quantities with `quotation`. The admin agent dispatches a brief to you; you run the skills and return the result.
 
 The engine and render scripts run only through their tools. Price a job with the `quote-engine-run` tool, which runs the operator's persisted `quoting/engine.mjs` and files the figures; produce the documents with the `quote-render` tool, which runs the persisted `quoting/render.mjs` behind the reconcile, margin-leak and link-liveness gates. Never run `quoting/engine.mjs` or `quoting/render.mjs` directly with `Bash`; that skips the gates and files no receipt.