@wacando/agent 0.0.0-stage → 2.0.0-rc.1

package/docs/evidence/issue-2/local-check.txt

@@ -0,0 +1,376 @@
+
+> wacando-plugins@1.0.0 check
+> npm run build && npm run check:generated && npm test
+
+
+> wacando-plugins@1.0.0 build
+> node scripts/build.mjs
+
+Built self-contained codex plugin: wacando@1.0.0
+Built self-contained cursor plugin: wacando-cursor@1.0.0
+Built self-contained claude plugin: wacando-claude@1.0.0
+
+> wacando-plugins@1.0.0 check:generated
+> node scripts/check-generated.mjs
+
+Verified exact runtime: wacando
+Verified exact runtime: wacando-cursor
+Verified exact runtime: wacando-claude
+
+> wacando-plugins@1.0.0 test
+> node --test tests/*.test.mjs
+
+TAP version 13
+# Subtest: clean package builds remove deleted sources and preserve the old runtime on preparation failure
+ok 1 - clean package builds remove deleted sources and preserve the old runtime on preparation failure
+  ---
+  duration_ms: 2876.948694
+  type: 'test'
+  ...
+# Subtest: cursor checker requires an affirmative parsed payload even when the wrapper says success
+ok 2 - cursor checker requires an affirmative parsed payload even when the wrapper says success
+  ---
+  duration_ms: 2.023074
+  type: 'test'
+  ...
+# Subtest: cursor checker distinguishes clear revocation from a crash, lock error or false connection
+ok 3 - cursor checker distinguishes clear revocation from a crash, lock error or false connection
+  ---
+  duration_ms: 1.187868
+  type: 'test'
+  ...
+# Subtest: codex checker requires an affirmative parsed payload even when the wrapper says success
+ok 4 - codex checker requires an affirmative parsed payload even when the wrapper says success
+  ---
+  duration_ms: 0.321162
+  type: 'test'
+  ...
+# Subtest: codex checker distinguishes clear revocation from a crash, lock error or false connection
+ok 5 - codex checker distinguishes clear revocation from a crash, lock error or false connection
+  ---
+  duration_ms: 0.322433
+  type: 'test'
+  ...
+# Subtest: checker requires verified:true for installation readiness
+ok 6 - checker requires verified:true for installation readiness
+  ---
+  duration_ms: 0.375223
+  type: 'test'
+  ...
+# Subtest: malformed viewer request targets return 400 without losing MCP events
+ok 7 - malformed viewer request targets return 400 without losing MCP events
+  ---
+  duration_ms: 84.120392
+  type: 'test'
+  ...
+# Subtest: MCP shutdown on EOF closes SSE and unfinished HTTP headers
+ok 8 - MCP shutdown on EOF closes SSE and unfinished HTTP headers
+  ---
+  duration_ms: 339.73003
+  type: 'test'
+  ...
+# Subtest: MCP shutdown on SIGTERM closes SSE and unfinished HTTP headers
+ok 9 - MCP shutdown on SIGTERM closes SSE and unfinished HTTP headers
+  ---
+  duration_ms: 329.629378
+  type: 'test'
+  ...
+# Subtest: HTTP and SSE snapshots use bounded pages and preserve large Unicode events
+ok 10 - HTTP and SSE snapshots use bounded pages and preserve large Unicode events
+  ---
+  duration_ms: 67.807607
+  type: 'test'
+  ...
+# Subtest: SSE client and queue limits isolate slow readers
+ok 11 - SSE client and queue limits isolate slow readers
+  ---
+  duration_ms: 13.783017
+  type: 'test'
+  ...
+# Subtest: legacy negotiation requires valid initialization and the initialized notification
+ok 12 - legacy negotiation requires valid initialization and the initialized notification
+  ---
+  duration_ms: 97.457936
+  type: 'test'
+  ...
+# Subtest: JSON-RPC rejects invalid IDs and parameters without answering responses or notifications
+ok 13 - JSON-RPC rejects invalid IDs and parameters without answering responses or notifications
+  ---
+  duration_ms: 68.859524
+  type: 'test'
+  ...
+# Subtest: tools enforce schemas, preserve Unicode limits, and never claim observed visibility
+ok 14 - tools enforce schemas, preserve Unicode limits, and never claim observed visibility
+  ---
+  duration_ms: 101.768055
+  type: 'test'
+  ...
+# Subtest: event pages obey encoded byte limits and traverse without losing filtered records
+ok 15 - event pages obey encoded byte limits and traverse without losing filtered records
+  ---
+  duration_ms: 15.431858
+  type: 'test'
+  ...
+# Subtest: retention is bounded by bytes as well as event count and reports eviction
+ok 16 - retention is bounded by bytes as well as event count and reports eviction
+  ---
+  duration_ms: 2.999111
+  type: 'test'
+  ...
+# Subtest: stdio framing handles split UTF-8, CRLF and escaped newlines with strict byte bounds
+ok 17 - stdio framing handles split UTF-8, CRLF and escaped newlines with strict byte bounds
+  ---
+  duration_ms: 4.25906
+  type: 'test'
+  ...
+# Subtest: an oversized unfinished frame closes the MCP process promptly
+ok 18 - an oversized unfinished frame closes the MCP process promptly
+  ---
+  duration_ms: 69.221057
+  type: 'test'
+  ...
+# Subtest: SIGTERM exits within a deadline even when the host stops reading stdout
+ok 19 - SIGTERM exits within a deadline even when the host stops reading stdout
+  ---
+  duration_ms: 1132.750787
+  type: 'test'
+  ...
+# Subtest: stdio writes wait for readers and reject stalled or oversized output
+ok 20 - stdio writes wait for readers and reject stalled or oversized output
+  ---
+  duration_ms: 1004.471704
+  type: 'test'
+  ...
+# Subtest: rate limiting admits bursts, rejects excess calls and refills over time
+ok 21 - rate limiting admits bursts, rejects excess calls and refills over time
+  ---
+  duration_ms: 0.468634
+  type: 'test'
+  ...
+# Subtest: MCP tool floods receive actionable rate-limit errors
+ok 22 - MCP tool floods receive actionable rate-limit errors
+  ---
+  duration_ms: 61.424582
+  type: 'test'
+  ...
+# Subtest: live dev API: codex installed runtime verifies, enrolls, publishes OMEMO, restarts and stops on revocation
+ok 23 - live dev API: codex installed runtime verifies, enrolls, publishes OMEMO, restarts and stops on revocation
+  ---
+  duration_ms: 3784.80163
+  type: 'test'
+  ...
+# Subtest: live dev API: cursor installed runtime verifies, enrolls, publishes OMEMO, restarts and stops on revocation
+ok 24 - live dev API: cursor installed runtime verifies, enrolls, publishes OMEMO, restarts and stops on revocation
+  ---
+  duration_ms: 1586.976822
+  type: 'test'
+  ...
+# Subtest: live dev API: claude installed runtime verifies, enrolls, publishes OMEMO, restarts and stops on revocation
+ok 25 - live dev API: claude installed runtime verifies, enrolls, publishes OMEMO, restarts and stops on revocation
+  ---
+  duration_ms: 1548.809503
+  type: 'test'
+  ...
+# cursor: delayed shutdown released session lock; OMEMO snapshot unchanged
+# Subtest: cursor shutdown waits for session cleanup and releases its own lock without changing keys
+ok 26 - cursor shutdown waits for session cleanup and releases its own lock without changing keys
+  ---
+  duration_ms: 2153.758858
+  type: 'test'
+  ...
+# codex: delayed shutdown released session lock; OMEMO snapshot unchanged
+# Subtest: codex shutdown waits for session cleanup and releases its own lock without changing keys
+ok 27 - codex shutdown waits for session cleanup and releases its own lock without changing keys
+  ---
+  duration_ms: 2019.857877
+  type: 'test'
+  ...
+# Subtest: MCP shutdown finishes saving an in-flight verification response before exiting
+ok 28 - MCP shutdown finishes saving an in-flight verification response before exiting
+  ---
+  duration_ms: 1294.428754
+  type: 'test'
+  ...
+# Subtest: enrollment saves durable credential before XMPP, publishes before callback, and resumes without redemption
+ok 29 - enrollment saves durable credential before XMPP, publishes before callback, and resumes without redemption
+  ---
+  duration_ms: 373.662398
+  type: 'test'
+  ...
+# Subtest: origins, host identities and installations cannot be substituted
+ok 30 - origins, host identities and installations cannot be substituted
+  ---
+  duration_ms: 460.532748
+  type: 'test'
+  ...
+# Subtest: expiration, replay, wrong installation and revocation return safe actions
+ok 31 - expiration, replay, wrong installation and revocation return safe actions
+  ---
+  duration_ms: 498.788858
+  type: 'test'
+  ...
+# Subtest: background heartbeats preserve the stream and retry outages with bounded backoff and safe diagnostics
+ok 32 - background heartbeats preserve the stream and retry outages with bounded backoff and safe diagnostics
+  ---
+  duration_ms: 911.763132
+  type: 'test'
+  ...
+# Subtest: failed initial connection recovers in background without another redemption and close cancels retries
+ok 33 - failed initial connection recovers in background without another redemption and close cancels retries
+  ---
+  duration_ms: 682.402009
+  type: 'test'
+  ...
+# Subtest: failed XMPP ping closes only the broken stream and obtains a fresh grant on automatic retry
+ok 34 - failed XMPP ping closes only the broken stream and obtains a fresh grant on automatic retry
+  ---
+  duration_ms: 34.601413
+  type: 'test'
+  ...
+# Subtest: shutdown waits for a background grant request and prevents a new session after closing
+ok 35 - shutdown waits for a background grant request and prevents a new session after closing
+  ---
+  duration_ms: 23.135233
+  type: 'test'
+  ...
+# Subtest: failed OMEMO registration preserves credential, suppresses connected callback, and resumes
+ok 36 - failed OMEMO registration preserves credential, suppresses connected callback, and resumes
+  ---
+  duration_ms: 19.488027
+  type: 'test'
+  ...
+# Subtest: lost redemption and failed persistence never claim success
+ok 37 - lost redemption and failed persistence never claim success
+  ---
+  duration_ms: 16.773288
+  type: 'test'
+  ...
+# Subtest: unsafe permissions, symlinks and concurrent writes fail closed
+ok 38 - unsafe permissions, symlinks and concurrent writes fail closed
+  ---
+  duration_ms: 2.226706
+  type: 'test'
+  ...
+# Subtest: HTTP policy rejects non-loopback cleartext, URL credentials and redirects
+ok 39 - HTTP policy rejects non-loopback cleartext, URL credentials and redirects
+  ---
+  duration_ms: 17.253491
+  type: 'test'
+  ...
+# Subtest: existing Wacando OMEMO identity survives reload; corrupt state is never regenerated
+ok 40 - existing Wacando OMEMO identity survives reload; corrupt state is never regenerated
+  ---
+  duration_ms: 515.791078
+  type: 'test'
+  ...
+# Subtest: installed MCP tools verify via HTTP and never expose response credentials
+ok 41 - installed MCP tools verify via HTTP and never expose response credentials
+  ---
+  duration_ms: 77.224993
+  type: 'test'
+  ...
+# Subtest: cursor packaged MCP rejects a locally revoked identity without crashing or reporting connection
+ok 42 - cursor packaged MCP rejects a locally revoked identity without crashing or reporting connection
+  ---
+  duration_ms: 115.950595
+  type: 'test'
+  ...
+# Subtest: codex packaged MCP rejects a locally revoked identity without crashing or reporting connection
+ok 43 - codex packaged MCP rejects a locally revoked identity without crashing or reporting connection
+  ---
+  duration_ms: 86.042236
+  type: 'test'
+  ...
+# Subtest: release version matches all manifests
+ok 44 - release version matches all manifests
+  ---
+  duration_ms: 7.697715
+  type: 'test'
+  ...
+# Subtest: local npm tarball contains standalone hosts and installer preserves existing installations
+ok 45 - local npm tarball contains standalone hosts and installer preserves existing installations
+  ---
+  duration_ms: 2790.246184
+  type: 'test'
+  ...
+# Subtest: codex package runs relocated without the repository and records its own provider
+ok 46 - codex package runs relocated without the repository and records its own provider
+  ---
+  duration_ms: 513.441491
+  type: 'test'
+  ...
+# Subtest: cursor package runs relocated without the repository and records its own provider
+ok 47 - cursor package runs relocated without the repository and records its own provider
+  ---
+  duration_ms: 105.023188
+  type: 'test'
+  ...
+# Subtest: claude package runs relocated without the repository and records its own provider
+ok 48 - claude package runs relocated without the repository and records its own provider
+  ---
+  duration_ms: 572.99299
+  type: 'test'
+  ...
+# Subtest: Claude, Cursor and Codex MCP processes have independent stores and ports
+ok 49 - Claude, Cursor and Codex MCP processes have independent stores and ports
+  ---
+  duration_ms: 67.315774
+  type: 'test'
+  ...
+# Subtest: Cursor installer copies a real package and refuses to overwrite an existing install
+ok 50 - Cursor installer copies a real package and refuses to overwrite an existing install
+  ---
+  duration_ms: 1036.706251
+  type: 'test'
+  ...
+# Subtest: store validates messages, orders events and bounds retention
+ok 51 - store validates messages, orders events and bounds retention
+  ---
+  duration_ms: 2.420697
+  type: 'test'
+  ...
+# Subtest: loopback viewer serves assets and blocks cross-origin writes and traversal
+ok 52 - loopback viewer serves assets and blocks cross-origin writes and traversal
+  ---
+  duration_ms: 48.452361
+  type: 'test'
+  ...
+# Subtest: SSE delivers snapshot and live message, reconnect recovers snapshot
+ok 53 - SSE delivers snapshot and live message, reconnect recovers snapshot
+  ---
+  duration_ms: 261.803551
+  type: 'test'
+  ...
+# Subtest: MCP starts HTTP, records events and shuts down on stdin EOF
+ok 54 - MCP starts HTTP, records events and shuts down on stdin EOF
+  ---
+  duration_ms: 91.02007
+  type: 'test'
+  ...
+# Subtest: late history pages cannot duplicate live events, resurrect evictions or replace a new connection
+ok 55 - late history pages cannot duplicate live events, resurrect evictions or replace a new connection
+  ---
+  duration_ms: 1.647741
+  type: 'test'
+  ...
+# Subtest: history loading pins the snapshot sequence, follows cursors and respects cancellation
+ok 56 - history loading pins the snapshot sequence, follows cursors and respects cancellation
+  ---
+  duration_ms: 1.131738
+  type: 'test'
+  ...
+# Subtest: rate-limited history loading resumes from the same page instead of restarting the stream
+ok 57 - rate-limited history loading resumes from the same page instead of restarting the stream
+  ---
+  duration_ms: 1002.265869
+  type: 'test'
+  ...
+1..57
+# tests 57
+# suites 0
+# pass 57
+# fail 0
+# cancelled 0
+# skipped 0
+# todo 0
+# duration_ms 6982.870563

package/docs/evidence/issue-2/local-codex-probe.txt

@@ -0,0 +1,3 @@
+WARNING: proceeding, even though we could not create PATH aliases: Read-only file system (os error 30)
+Reading additional input from stdin...
+Error: failed to initialize in-process app-server client: Read-only file system (os error 30)

package/docs/evidence/issue-2/local-codex-probe2.txt

@@ -0,0 +1,3 @@
+WARNING: proceeding, even though we could not create PATH aliases: Read-only file system (os error 30)
+Reading additional input from stdin...
+Error: failed to initialize in-process app-server client: Read-only file system (os error 30)

package/docs/evidence/issue-2/local-codex.txt

@@ -0,0 +1,2 @@
+Host exit=1; protected state partition=a545539c9fb8afa4b2772b93fb81a69abd699b0eee9fa1afbfe0762caf20d1cc; locks=none
+Real codex host did not confirm wacando_verify_installation; exit=1, calls=0. Parsed tool diagnostic: {}. Raw host output suppressed.

package/docs/evidence/issue-2/local-cursor-probe.txt

@@ -0,0 +1 @@
+Error: EROFS: read-only file system, open '/home/kyle/.cursor/sandbox-policies/sandbox-policy-ab97f73e2a601171'

package/docs/evidence/issue-2/local-cursor.txt

@@ -0,0 +1,2 @@
+Host exit=1; protected state partition=573dd65109883105b435723458109f7f8fa6eeff9982b6fac81153ba2410c5cc; locks=none
+Real cursor host did not confirm wacando_verify_installation; exit=1, calls=0. Parsed tool diagnostic: {}. Raw host output suppressed.

package/docs/evidence/issue-2/local-down.txt

@@ -0,0 +1,32 @@
+ Container wacando-agent2-web-1 Stopping 
+ Container wacando-agent2-web-1 Stopped 
+ Container wacando-agent2-web-1 Removing 
+ Container wacando-agent2-web-1 Removed 
+ Container wacando-agent2-api-1 Stopping 
+ Container wacando-agent2-api-1 Stopped 
+ Container wacando-agent2-api-1 Removing 
+ Container wacando-agent2-api-1 Removed 
+ Container wacando-agent2-policy-1 Stopping 
+ Container wacando-agent2-postgres-1 Stopping 
+ Container wacando-agent2-postgres-1 Stopped 
+ Container wacando-agent2-postgres-1 Removing 
+ Container wacando-agent2-policy-1 Stopped 
+ Container wacando-agent2-policy-1 Removing 
+ Container wacando-agent2-postgres-1 Removed 
+ Container wacando-agent2-policy-1 Removed 
+ Container wacando-agent2-ejabberd-1 Stopping 
+ Container wacando-agent2-ejabberd-1 Stopped 
+ Container wacando-agent2-ejabberd-1 Removing 
+ Container wacando-agent2-ejabberd-1 Removed 
+ Volume wacando-agent2_dev-ejabberd-data Removing 
+ Volume wacando-agent2_dev-ejabberd-logs Removing 
+ Volume wacando-agent2_dev-pgdata Removing 
+ Network wacando-agent2_wacando Removing 
+ Volume wacando-agent2_dev-ejabberd-data Removed 
+ Volume wacando-agent2_dev-ejabberd-logs Removed 
+ Volume wacando-agent2_dev-pgdata Removed 
+ Network wacando-agent2_wacando Removed 
+NAME      IMAGE     COMMAND   SERVICE   CREATED   STATUS    PORTS
+DRIVER    VOLUME NAME
+/wacando-issue10-postgres status=running started=2026-10-14T23:30:46.147696329Z restarts=0
+/wacando-issue10-ejabberd status=running started=2026-10-14T23:53:35.168365444Z restarts=0

package/docs/evidence/issue-2/local-health.txt

@@ -0,0 +1 @@
+{"ok":true}Web onboarding HTTP 200

package/docs/evidence/issue-2/local-live.txt

@@ -0,0 +1,28 @@
+TAP version 13
+# Subtest: live dev API: codex installed runtime verifies, enrolls, publishes OMEMO, restarts and stops on revocation
+ok 1 - live dev API: codex installed runtime verifies, enrolls, publishes OMEMO, restarts and stops on revocation
+  ---
+  duration_ms: 2077.400751
+  type: 'test'
+  ...
+# Subtest: live dev API: cursor installed runtime verifies, enrolls, publishes OMEMO, restarts and stops on revocation
+ok 2 - live dev API: cursor installed runtime verifies, enrolls, publishes OMEMO, restarts and stops on revocation
+  ---
+  duration_ms: 2120.705886
+  type: 'test'
+  ...
+# Subtest: live dev API: claude installed runtime verifies, enrolls, publishes OMEMO, restarts and stops on revocation
+ok 3 - live dev API: claude installed runtime verifies, enrolls, publishes OMEMO, restarts and stops on revocation
+  ---
+  duration_ms: 2578.078336
+  type: 'test'
+  ...
+1..3
+# tests 3
+# suites 0
+# pass 3
+# fail 0
+# cancelled 0
+# skipped 0
+# todo 0
+# duration_ms 6896.88793

package/docs/evidence/issue-2/local-seed.txt

@@ -0,0 +1,26 @@
+[ci-up] ejabberd container: 38c417189e555abbfa48361e6f630946e9709ae10297edef9aae70c0d42dfb7a (wacando-agent2-ejabberd-1)
+[ci-up] waiting for stock ejabberd node
+[ci-up] injecting /home/kyle/timon-projects/wacando/agent2-api/infra/ejabberd/ejabberd.ci.yml -> 38c417189e555abbfa48361e6f630946e9709ae10297edef9aae70c0d42dfb7a:/home/ejabberd/conf/ejabberd.yml
+[ci-up] restarting container to load the CI config
+The node ejabberd@localhost is started with status: started
+ejabberd 26.7.0 is running in that node
+[ci-up] ejabberd node is up with the CI config
+[ci-up] registered: admin@wacando.localhost
+[ci-up] registered: agt_a01@wacando.localhost
+[ci-up] registered: agt_b01@wacando.localhost
+[ci-up] registered: agt_c01@wacando.localhost
+[ci-up] registered: usr_a01@wacando.localhost
+[ci-up] registered: usr_b01@wacando.localhost
+[ci-up] registered users on wacando.localhost:
+admin
+agt_a01
+agt_b01
+agt_c01
+usr_a01
+usr_b01
+[ci-up] probing listeners
+[ci-up] admin account reachable via ctl
+[ci-up] 127.0.0.1:25222 open
+[ci-up] 127.0.0.1:25280 open
+[ci-up] 127.0.0.1:25347 open
+[ci-up] done. c2s=127.0.0.1:25222  ws+api=http://127.0.0.1:25280  component=127.0.0.1:25347

package/docs/evidence/issue-2/local-status.txt

@@ -0,0 +1,6 @@
+NAME                        IMAGE                   COMMAND                  SERVICE    CREATED          STATUS                    PORTS
+wacando-agent2-api-1        wacando-agent2-api      "/usr/local/bin/api-…"   api        5 minutes ago    Up 5 minutes (healthy)    127.0.0.1:23001->3001/tcp
+wacando-agent2-ejabberd-1   ejabberd/ecs:26.07      "/sbin/tini -- /home…"   ejabberd   18 minutes ago   Up 18 minutes (healthy)   1880/tcp, 1883/tcp, 4369-4399/tcp, 5210/tcp, 5269/tcp, 5443/tcp, 5478/tcp, 7777/tcp, 50000-50099/tcp, 127.0.0.1:25222->5222/tcp, 127.0.0.1:25280->5280/tcp, 127.0.0.1:25347->5347/tcp
+wacando-agent2-policy-1     wacando-agent2-policy   "docker-entrypoint.s…"   policy     2 minutes ago    Up 2 minutes (healthy)    127.0.0.1:23002->3002/tcp
+wacando-agent2-postgres-1   postgres:17-alpine      "docker-entrypoint.s…"   postgres   18 minutes ago   Up 18 minutes (healthy)   127.0.0.1:25432->5432/tcp
+wacando-agent2-web-1        wacando-agent2-web      "docker-entrypoint.s…"   web        29 seconds ago   Up 19 seconds (healthy)   127.0.0.1:23000->3000/tcp

package/docs/evidence/issue-2/local-up.txt

@@ -0,0 +1,18 @@
+ Container wacando-agent2-ejabberd-1 Running 
+ Container wacando-agent2-policy-1 Running 
+ Container wacando-agent2-postgres-1 Running 
+ Container wacando-agent2-api-1 Running 
+ Container wacando-agent2-web-1 Creating 
+ Container wacando-agent2-web-1 Created 
+ Container wacando-agent2-ejabberd-1 Waiting 
+ Container wacando-agent2-ejabberd-1 Healthy 
+ Container wacando-agent2-policy-1 Waiting 
+ Container wacando-agent2-postgres-1 Waiting 
+ Container wacando-agent2-ejabberd-1 Waiting 
+ Container wacando-agent2-policy-1 Healthy 
+ Container wacando-agent2-postgres-1 Healthy 
+ Container wacando-agent2-ejabberd-1 Healthy 
+ Container wacando-agent2-api-1 Waiting 
+ Container wacando-agent2-api-1 Healthy 
+ Container wacando-agent2-web-1 Starting 
+ Container wacando-agent2-web-1 Started 

package/docs/evidence/issue-2/prepare-local-stack.py

@@ -0,0 +1,67 @@
+"""Reproduce the isolated, ephemeral issue-2 dev target from Wacando main.
+
+Run with the absolute Wacando checkout as the sole argument. Inherited dev
+secrets stay in a mode-0600 /tmp file; do not attach that file as evidence.
+"""
+import json
+from pathlib import Path
+import subprocess
+import sys
+
+repo = Path(sys.argv[1]).resolve(strict=True)
+config = json.loads(subprocess.check_output([
+    "docker", "compose", "-f", str(repo / "docker-compose.dev.yml"),
+    "config", "--format", "json",
+], cwd=repo))
+config["name"] = "wacando-agent2"
+ports = {
+    "postgres": {5432: 25432},
+    "ejabberd": {5222: 25222, 5280: 25280, 5347: 25347},
+    "policy": {3002: 23002},
+    "api": {3001: 23001},
+    "web": {3000: 23000},
+}
+for name, service in config["services"].items():
+    service["restart"] = "no"
+    for port in service.get("ports", []):
+        port["published"] = str(ports[name][port["target"]])
+        port["host_ip"] = "127.0.0.1"
+    if "build" in service:
+        service["build"]["context"] = str(repo)
+for volume in config["volumes"].values():
+    volume.pop("name", None)
+for network in config["networks"].values():
+    network.pop("name", None)
+config["services"]["api"]["environment"].update(
+    BETTER_AUTH_URL="http://localhost:23001",
+    WEB_ORIGIN="http://localhost:23000",
+    WACANDO_PUBLIC_XMPP_SERVICE="ws://localhost:25280/ws",
+)
+web = config["services"]["web"]
+web["build"]["args"].update(
+    NEXT_PUBLIC_API_URL="",
+    NEXT_PUBLIC_XMPP_WS_URL="ws://localhost:25280/ws",
+    NEXT_PUBLIC_XMPP_DOMAIN="wacando.localhost",
+)
+web["environment"] = {"API_PROXY_TARGET": "http://api:3001"}
+target = Path("/tmp/wacando-agent2.compose.json")
+target.write_text(json.dumps(config, indent=2))
+target.chmod(0o600)
+
+# Preserve the official config injection and dev seed, but select ONLY this
+# project's container. The upstream ancestor-image selector could pick issue 10.
+seed = (repo / "infra/ejabberd/ci-up.sh").read_text()
+seed = seed.replace(
+    'REPO_ROOT="$(cd "$(dirname "${BASH_SOURCE[0]}")/../.." && pwd)"',
+    f'REPO_ROOT="{repo}"',
+).replace(
+    'docker ps --filter "ancestor=$IMAGE" --format \'{{.ID}}\' | head -n1',
+    "docker compose -p wacando-agent2 -f /tmp/wacando-agent2.compose.json ps -q ejabberd",
+).replace(
+    "for port in 5222 5280 5347", "for port in 25222 25280 25347",
+).replace(
+    "c2s=127.0.0.1:5222  ws+api=http://127.0.0.1:5280  component=127.0.0.1:5347",
+    "c2s=127.0.0.1:25222  ws+api=http://127.0.0.1:25280  component=127.0.0.1:25347",
+)
+Path("/tmp/wacando-agent2-ci-up.sh").write_text(seed)
+print("Prepared wacando-agent2: loopback-only ports, isolated network and volumes.")

package/docs/evidence/issue-2/qualification-body-validation.txt

@@ -0,0 +1,9 @@
+PASS: PR #9 body PATCH/read-back exact; OPEN+DRAFT; independent follow-up review pending.
+PASS: issue #2 body PATCH/read-back exact; OPEN; three proven-runtime boxes checked, review/merge unchecked; OPEN/in-progress requirement explicit.
+PASS: Wacando #17 body PATCH/read-back exact; OPEN; blocker line and unchecked qualification boxes unchanged.
+PASS: native blocked_by unchanged: repos/lbframe/wacando-agent/issues/2/dependencies/blocked_by = []
+PASS: native blocked_by unchanged: repos/lbframe/wacando/issues/17/dependencies/blocked_by = [3, 4, 12, 16, 40, 37]
+PASS: native blocked_by unchanged: repos/lbframe/wacando/issues/42/dependencies/blocked_by = [40, 37]
+PASS: #42 record/body untouched; #17/#42 retirement references preserved in all edited bodies.
+PASS: immutable abd3e52 link target exists: docs/CURSOR_IDENTITY_RESUME.md
+PASS: immutable abd3e52 link target exists: docs/evidence/issue-2/DOCUMENTARY_FOLLOWUP.md