@wacando/agent 0.0.0-stage → 2.0.0-rc.1

package/docs/evidence/issue-8/review-fixes/check.txt

@@ -0,0 +1,484 @@
+$ npm ci && npm run check
+added 83 packages in 1s
+
+> wacando-agent@2.0.0 check
+> node scripts/check-deps.mjs && npm run check:notices && npm test
+
+Verified 3 pinned Wacando archives from https://github.com/lbframe/wacando @ 5f0f0a1f0ccc20c47383fed6f8e072aca5302486
+
+> wacando-agent@2.0.0 check:notices
+> node scripts/notices.mjs --check
+
+Verified notices and provenance for 83 runtime packages
+
+> wacando-agent@2.0.0 test
+> node --test tests/*.test.mjs
+
+TAP version 13
+# Subtest: the ciphertext goes to the other agent and both owners, never to an unrelated party
+ok 1 - the ciphertext goes to the other agent and both owners, never to an unrelated party
+  ---
+  duration_ms: 1.913064
+  type: 'test'
+  ...
+# Subtest: a deleted side is not an encryption target and a stranger cannot view
+ok 2 - a deleted side is not an encryption target and a stranger cannot view
+  ---
+  duration_ms: 0.553594
+  type: 'test'
+  ...
+# Subtest: only an activated conversation counts as accepted, including after STOP
+ok 3 - only an activated conversation counts as accepted, including after STOP
+  ---
+  duration_ms: 0.204582
+  type: 'test'
+  ...
+# Subtest: the public summary never exposes owner identifiers
+ok 4 - the public summary never exposes owner identifiers
+  ---
+  duration_ms: 0.452813
+  type: 'test'
+  ...
+# Subtest: API refusals become explicit, content-free messages
+ok 5 - API refusals become explicit, content-free messages
+  ---
+  duration_ms: 0.362502
+  type: 'test'
+  ...
+# Subtest: recipient discovery returns both agents and every owner installation
+ok 6 - recipient discovery returns both agents and every owner installation
+  ---
+  duration_ms: 1.32376
+  type: 'test'
+  ...
+# Subtest: malformed or foreign recipient discovery fails closed
+ok 7 - malformed or foreign recipient discovery fails closed
+  ---
+  duration_ms: 0.363403
+  type: 'test'
+  ...
+# Subtest: discovery missing an owner or naming another agent fails closed
+ok 8 - discovery missing an owner or naming another agent fails closed
+  ---
+  duration_ms: 0.239362
+  type: 'test'
+  ...
+# Subtest: a server without recipient discovery is refused: never a usr_ fallback
+ok 9 - a server without recipient discovery is refused: never a usr_ fallback
+  ---
+  duration_ms: 0.931067
+  type: 'test'
+  ...
+# Subtest: cursor checker requires an affirmative parsed payload even when the wrapper says success
+ok 10 - cursor checker requires an affirmative parsed payload even when the wrapper says success
+  ---
+  duration_ms: 2.700059
+  type: 'test'
+  ...
+# Subtest: cursor checker distinguishes clear revocation from a crash, lock error or false connection
+ok 11 - cursor checker distinguishes clear revocation from a crash, lock error or false connection
+  ---
+  duration_ms: 1.671892
+  type: 'test'
+  ...
+# Subtest: codex checker requires an affirmative parsed payload even when the wrapper says success
+ok 12 - codex checker requires an affirmative parsed payload even when the wrapper says success
+  ---
+  duration_ms: 0.462614
+  type: 'test'
+  ...
+# Subtest: codex checker distinguishes clear revocation from a crash, lock error or false connection
+ok 13 - codex checker distinguishes clear revocation from a crash, lock error or false connection
+  ---
+  duration_ms: 0.376373
+  type: 'test'
+  ...
+# Subtest: checker requires verified:true for installation readiness
+ok 14 - checker requires verified:true for installation readiness
+  ---
+  duration_ms: 0.413213
+  type: 'test'
+  ...
+# Subtest: malformed viewer request targets return 400 without losing MCP events
+ok 15 - malformed viewer request targets return 400 without losing MCP events
+  ---
+  duration_ms: 218.267741
+  type: 'test'
+  ...
+# Subtest: MCP shutdown on EOF closes SSE and unfinished HTTP headers
+ok 16 - MCP shutdown on EOF closes SSE and unfinished HTTP headers
+  ---
+  duration_ms: 431.85532
+  type: 'test'
+  ...
+# Subtest: MCP shutdown on SIGTERM closes SSE and unfinished HTTP headers
+ok 17 - MCP shutdown on SIGTERM closes SSE and unfinished HTTP headers
+  ---
+  duration_ms: 427.484819
+  type: 'test'
+  ...
+# Subtest: HTTP and SSE snapshots use bounded pages and preserve large Unicode events
+ok 18 - HTTP and SSE snapshots use bounded pages and preserve large Unicode events
+  ---
+  duration_ms: 64.884598
+  type: 'test'
+  ...
+# Subtest: SSE client and queue limits isolate slow readers
+ok 19 - SSE client and queue limits isolate slow readers
+  ---
+  duration_ms: 13.218613
+  type: 'test'
+  ...
+# Subtest: legacy negotiation requires valid initialization and the initialized notification
+ok 20 - legacy negotiation requires valid initialization and the initialized notification
+  ---
+  duration_ms: 223.541398
+  type: 'test'
+  ...
+# Subtest: JSON-RPC rejects invalid IDs and parameters without answering responses or notifications
+ok 21 - JSON-RPC rejects invalid IDs and parameters without answering responses or notifications
+  ---
+  duration_ms: 189.556199
+  type: 'test'
+  ...
+# Subtest: tools enforce schemas, preserve Unicode limits, and never claim observed visibility
+ok 22 - tools enforce schemas, preserve Unicode limits, and never claim observed visibility
+  ---
+  duration_ms: 165.101046
+  type: 'test'
+  ...
+# Subtest: event pages obey encoded byte limits and traverse without losing filtered records
+ok 23 - event pages obey encoded byte limits and traverse without losing filtered records
+  ---
+  duration_ms: 13.076422
+  type: 'test'
+  ...
+# Subtest: retention is bounded by bytes as well as event count and reports eviction
+ok 24 - retention is bounded by bytes as well as event count and reports eviction
+  ---
+  duration_ms: 1.853303
+  type: 'test'
+  ...
+# Subtest: stdio framing handles split UTF-8, CRLF and escaped newlines with strict byte bounds
+ok 25 - stdio framing handles split UTF-8, CRLF and escaped newlines with strict byte bounds
+  ---
+  duration_ms: 2.783049
+  type: 'test'
+  ...
+# Subtest: an oversized unfinished frame closes the MCP process promptly
+ok 26 - an oversized unfinished frame closes the MCP process promptly
+  ---
+  duration_ms: 167.18603
+  type: 'test'
+  ...
+# Subtest: SIGTERM exits within a deadline even when the host stops reading stdout
+ok 27 - SIGTERM exits within a deadline even when the host stops reading stdout
+  ---
+  duration_ms: 1204.702647
+  type: 'test'
+  ...
+# Subtest: stdio writes wait for readers and reject stalled or oversized output
+ok 28 - stdio writes wait for readers and reject stalled or oversized output
+  ---
+  duration_ms: 1004.177181
+  type: 'test'
+  ...
+# Subtest: rate limiting admits bursts, rejects excess calls and refills over time
+ok 29 - rate limiting admits bursts, rejects excess calls and refills over time
+  ---
+  duration_ms: 0.408453
+  type: 'test'
+  ...
+# Subtest: MCP tool floods receive actionable rate-limit errors
+ok 30 - MCP tool floods receive actionable rate-limit errors
+  ---
+  duration_ms: 150.118501
+  type: 'test'
+  ...
+# Subtest: live dev API: codex installed runtime verifies, enrolls, publishes OMEMO, restarts and stops on revocation
+ok 31 - live dev API: codex installed runtime verifies, enrolls, publishes OMEMO, restarts and stops on revocation # SKIP
+  ---
+  duration_ms: 0.929686
+  type: 'test'
+  ...
+# Subtest: live dev API: cursor installed runtime verifies, enrolls, publishes OMEMO, restarts and stops on revocation
+ok 32 - live dev API: cursor installed runtime verifies, enrolls, publishes OMEMO, restarts and stops on revocation # SKIP
+  ---
+  duration_ms: 0.151361
+  type: 'test'
+  ...
+# Subtest: live dev API: claude installed runtime verifies, enrolls, publishes OMEMO, restarts and stops on revocation
+ok 33 - live dev API: claude installed runtime verifies, enrolls, publishes OMEMO, restarts and stops on revocation # SKIP
+  ---
+  duration_ms: 0.139571
+  type: 'test'
+  ...
+# cursor: delayed shutdown released session lock; OMEMO snapshot unchanged
+# Subtest: cursor shutdown waits for session cleanup and releases its own lock without changing keys
+ok 34 - cursor shutdown waits for session cleanup and releases its own lock without changing keys
+  ---
+  duration_ms: 1383.51414
+  type: 'test'
+  ...
+# codex: delayed shutdown released session lock; OMEMO snapshot unchanged
+# Subtest: codex shutdown waits for session cleanup and releases its own lock without changing keys
+ok 35 - codex shutdown waits for session cleanup and releases its own lock without changing keys
+  ---
+  duration_ms: 1352.924604
+  type: 'test'
+  ...
+# Subtest: MCP shutdown finishes saving an in-flight verification response before exiting
+ok 36 - MCP shutdown finishes saving an in-flight verification response before exiting
+  ---
+  duration_ms: 1380.794222
+  type: 'test'
+  ...
+# Subtest: enrollment saves durable credential before XMPP, publishes before callback, and resumes without redemption
+ok 37 - enrollment saves durable credential before XMPP, publishes before callback, and resumes without redemption
+  ---
+  duration_ms: 255.456354
+  type: 'test'
+  ...
+# Subtest: origins, host identities and installations cannot be substituted
+ok 38 - origins, host identities and installations cannot be substituted
+  ---
+  duration_ms: 60.710659
+  type: 'test'
+  ...
+# Subtest: expiration, replay, wrong installation and revocation return safe actions
+ok 39 - expiration, replay, wrong installation and revocation return safe actions
+  ---
+  duration_ms: 96.764984
+  type: 'test'
+  ...
+# Subtest: background heartbeats preserve the stream and retry outages with bounded backoff and safe diagnostics
+ok 40 - background heartbeats preserve the stream and retry outages with bounded backoff and safe diagnostics
+  ---
+  duration_ms: 193.656108
+  type: 'test'
+  ...
+# Subtest: failed initial connection recovers in background without another redemption and close cancels retries
+ok 41 - failed initial connection recovers in background without another redemption and close cancels retries
+  ---
+  duration_ms: 53.733709
+  type: 'test'
+  ...
+# Subtest: failed XMPP ping closes only the broken stream and obtains a fresh grant on automatic retry
+ok 42 - failed XMPP ping closes only the broken stream and obtains a fresh grant on automatic retry
+  ---
+  duration_ms: 106.25227
+  type: 'test'
+  ...
+# Subtest: shutdown waits for a background grant request and prevents a new session after closing
+ok 43 - shutdown waits for a background grant request and prevents a new session after closing
+  ---
+  duration_ms: 30.368505
+  type: 'test'
+  ...
+# Subtest: failed OMEMO registration preserves credential, suppresses connected callback, and resumes
+ok 44 - failed OMEMO registration preserves credential, suppresses connected callback, and resumes
+  ---
+  duration_ms: 29.373307
+  type: 'test'
+  ...
+# Subtest: lost redemption and failed persistence never claim success
+ok 45 - lost redemption and failed persistence never claim success
+  ---
+  duration_ms: 21.24677
+  type: 'test'
+  ...
+# Subtest: unsafe permissions, symlinks and concurrent writes fail closed
+ok 46 - unsafe permissions, symlinks and concurrent writes fail closed
+  ---
+  duration_ms: 2.165316
+  type: 'test'
+  ...
+# Subtest: HTTP policy rejects non-loopback cleartext, URL credentials and redirects
+ok 47 - HTTP policy rejects non-loopback cleartext, URL credentials and redirects
+  ---
+  duration_ms: 15.754561
+  type: 'test'
+  ...
+# Subtest: existing native OMEMO identity survives reload; corrupt state is never regenerated
+ok 48 - existing native OMEMO identity survives reload; corrupt state is never regenerated
+  ---
+  duration_ms: 11.34871
+  type: 'test'
+  ...
+# Subtest: unsafe native OMEMO state permissions fail closed
+ok 49 - unsafe native OMEMO state permissions fail closed
+  ---
+  duration_ms: 7.999176
+  type: 'test'
+  ...
+# Subtest: a 1.x classic OMEMO identity is refused with re-enrollment guidance and left untouched
+ok 50 - a 1.x classic OMEMO identity is refused with re-enrollment guidance and left untouched
+  ---
+  duration_ms: 0.907586
+  type: 'test'
+  ...
+# Subtest: installed MCP tools verify via HTTP and never expose response credentials
+ok 51 - installed MCP tools verify via HTTP and never expose response credentials
+  ---
+  duration_ms: 191.07641
+  type: 'test'
+  ...
+# Subtest: cursor packaged MCP rejects a locally revoked identity without crashing or reporting connection
+ok 52 - cursor packaged MCP rejects a locally revoked identity without crashing or reporting connection
+  ---
+  duration_ms: 255.942927
+  type: 'test'
+  ...
+# Subtest: codex packaged MCP rejects a locally revoked identity without crashing or reporting connection
+ok 53 - codex packaged MCP rejects a locally revoked identity without crashing or reporting connection
+  ---
+  duration_ms: 301.052536
+  type: 'test'
+  ...
+# Subtest: a replaced session is terminal and never logs back in (the stream error arrives first)
+ok 54 - a replaced session is terminal and never logs back in (the stream error arrives first)
+  ---
+  duration_ms: 25.51241
+  type: 'test'
+  ...
+# Subtest: a replaced session is terminal and never logs back in (only the heartbeat notices it)
+ok 55 - a replaced session is terminal and never logs back in (only the heartbeat notices it)
+  ---
+  duration_ms: 105.090322
+  type: 'test'
+  ...
+# Subtest: release version matches all manifests
+ok 56 - release version matches all manifests
+  ---
+  duration_ms: 5.69621
+  type: 'test'
+  ...
+# Subtest: npm tarball installs the runtime with official libsignal and its thin plugins start it
+ok 57 - npm tarball installs the runtime with official libsignal and its thin plugins start it
+  ---
+  duration_ms: 2989.604911
+  type: 'test'
+  ...
+# Subtest: redeem and claim proofs match the API interoperability vectors byte for byte
+ok 58 - redeem and claim proofs match the API interoperability vectors byte for byte
+  ---
+  duration_ms: 2.053354
+  type: 'test'
+  ...
+# Subtest: runtime metadata is bounded display text without control characters
+ok 59 - runtime metadata is bounded display text without control characters
+  ---
+  duration_ms: 0.315332
+  type: 'test'
+  ...
+# Subtest: redeem refuses malformed codes before any request and persists the key before redeeming
+ok 60 - redeem refuses malformed codes before any request and persists the key before redeeming
+  ---
+  duration_ms: 2.84714
+  type: 'test'
+  ...
+# Subtest: claim polls every 5 s while pending, honours Retry-After, and ends at the local deadline
+ok 61 - claim polls every 5 s while pending, honours Retry-After, and ends at the local deadline
+  ---
+  duration_ms: 2.290126
+  type: 'test'
+  ...
+# Subtest: a confirmed pairing saves the credential locally and returns no secret
+ok 62 - a confirmed pairing saves the credential locally and returns no secret
+  ---
+  duration_ms: 243.773772
+  type: 'test'
+  ...
+# Subtest: a refused code or an unconfirmed pairing leaves no partial identity
+ok 63 - a refused code or an unconfirmed pairing leaves no partial identity
+  ---
+  duration_ms: 154.663842
+  type: 'test'
+  ...
+# Subtest: a pairing interrupted after redeem resumes with the same key and poll secret
+ok 64 - a pairing interrupted after redeem resumes with the same key and poll secret
+  ---
+  duration_ms: 215.28805
+  type: 'test'
+  ...
+# Subtest: codex plugin is a thin wrapper that starts this runtime and records its own provider
+ok 65 - codex plugin is a thin wrapper that starts this runtime and records its own provider
+  ---
+  duration_ms: 249.823664
+  type: 'test'
+  ...
+# Subtest: cursor plugin is a thin wrapper that starts this runtime and records its own provider
+ok 66 - cursor plugin is a thin wrapper that starts this runtime and records its own provider
+  ---
+  duration_ms: 212.058787
+  type: 'test'
+  ...
+# Subtest: claude plugin is a thin wrapper that starts this runtime and records its own provider
+ok 67 - claude plugin is a thin wrapper that starts this runtime and records its own provider
+  ---
+  duration_ms: 194.07821
+  type: 'test'
+  ...
+# Subtest: Claude, Cursor and Codex MCP processes have independent stores and ports
+ok 68 - Claude, Cursor and Codex MCP processes have independent stores and ports
+  ---
+  duration_ms: 202.056896
+  type: 'test'
+  ...
+# Subtest: installer refuses to overwrite an existing installation
+ok 69 - installer refuses to overwrite an existing installation
+  ---
+  duration_ms: 66.157557
+  type: 'test'
+  ...
+# Subtest: store validates messages, orders events and bounds retention
+ok 70 - store validates messages, orders events and bounds retention
+  ---
+  duration_ms: 1.839893
+  type: 'test'
+  ...
+# Subtest: loopback viewer serves assets and blocks cross-origin writes and traversal
+ok 71 - loopback viewer serves assets and blocks cross-origin writes and traversal
+  ---
+  duration_ms: 46.851681
+  type: 'test'
+  ...
+# Subtest: SSE delivers snapshot and live message, reconnect recovers snapshot
+ok 72 - SSE delivers snapshot and live message, reconnect recovers snapshot
+  ---
+  duration_ms: 263.45985
+  type: 'test'
+  ...
+# Subtest: MCP starts HTTP, records events and shuts down on stdin EOF
+ok 73 - MCP starts HTTP, records events and shuts down on stdin EOF
+  ---
+  duration_ms: 167.710714
+  type: 'test'
+  ...
+# Subtest: late history pages cannot duplicate live events, resurrect evictions or replace a new connection
+ok 74 - late history pages cannot duplicate live events, resurrect evictions or replace a new connection
+  ---
+  duration_ms: 1.275379
+  type: 'test'
+  ...
+# Subtest: history loading pins the snapshot sequence, follows cursors and respects cancellation
+ok 75 - history loading pins the snapshot sequence, follows cursors and respects cancellation
+  ---
+  duration_ms: 0.826555
+  type: 'test'
+  ...
+# Subtest: rate-limited history loading resumes from the same page instead of restarting the stream
+ok 76 - rate-limited history loading resumes from the same page instead of restarting the stream
+  ---
+  duration_ms: 1001.869705
+  type: 'test'
+  ...
+1..76
+# tests 76
+# suites 0
+# pass 73
+# fail 0
+# cancelled 0
+# skipped 3
+# todo 0
+# duration_ms 4318.525607

package/docs/evidence/issue-8/review-fixes/e2e-desktop-observer.txt

@@ -0,0 +1,28 @@
+# stack: lbframe/wacando #108 head 6198d92 + #109 merged locally (278968b); WACANDO_CHECKOUT=<work>/wacando-int
+$ tsx scripts/e2e-desktop-observer.mts
+PASS 01 two owners signed up (5b5ec631-3a26-4e33-a693-62fb5166da22, 87aa3afa-73c1-436a-95ba-1f69d8913d8b)
+PASS 02 CLI `wacando-agent pair` -> @e2eafeaac3e01a/bot (service), owner confirmed after checking the key fingerprint
+PASS 03 MCP tool `wacando_pair` -> @e2eb8e80c8642d/codex (human), resumed by a second call without code
+PASS 04 contact invitation accepted by the recipient owner
+PASS 05 both runtimes connected (grant, native OMEMO device, presence echo) via the SDK
+PASS 06 propose -> request cnv_c4f58a0f-5a35-4900-b6c9-ef4bfb5f694f created; first message refused fail-closed (owners' desktop devices not published yet)
+PASS 07 recipient agent sees nothing of the request before acceptance (list empty, read/send refused)
+PASS 08 both owners' desktop ObserverHubs enrolled per-installation devices (dev_c4321fb940caa9f458861bf441f2993f, dev_f12570ea75a33bffaf84a355fb36f715), published official-libsignal bundles, were activated and observe the room
+PASS 09 first message held by the policy component (stanza om-a000ba718bbb80a6), status visible to the agent
+PASS 10 requester owner approved the exact held ciphertext (locally recomputed digest) -> relayed
+PASS 11 recipient owner saw the request in the consent inbox and accepted it via the API
+PASS 12 recipient agent (human mode, room member) decrypted the approved first message from the archive
+PASS 13 human-mode reply sent without approval; service agent decrypted it from a policy delivery
+PASS 14 service-mode message held until its owner approved it, then delivered and decrypted
+PASS 15 alice's desktop ObserverHub (official libsignal) decrypted all 3 messages (3 entries)
+PASS 16 bob's desktop ObserverHub (official libsignal) decrypted all 3 messages (3 entries)
+PASS 17 owner A added a second desktop (dev_6835473dc8eaa8c90d5e841f2be2c9b1): the runtime discovered it before sending and both desktops decrypted the message
+PASS 18 owner A revoked that desktop: the next message carries no key for dev_6835473dc8eaa8c90d5e841f2be2c9b1, the remaining desktop still decrypts it
+PASS 19 after STOP by an owner both agents are refused explicitly; nothing is sent
+canary-scan: dumping mnesia via /home/ejabberd/bin/ejabberdctl
+canary-scan: scanning dump + logs + spool for canary
+canary-scan: total occurrences of canary: 0
+canary-scan: PASS — plaintext absent from server-side storage
+PASS 20 plaintext canary absent from ejabberd storage (MAM, offline, pubsub, logs), API/policy logs and runtime output
+E2E RESULT: PASS
+exit=0

package/docs/evidence/issue-8/review-fixes/onboarding-live.txt

@@ -0,0 +1,15 @@
+$ WACANDO_LIVE_TEST_ORIGIN=http://localhost:43001 node --test tests/onboarding-live.test.mjs
+# Subtest: live dev API: codex installed runtime verifies, enrolls, publishes OMEMO, restarts and stops on revocation
+ok 1 - live dev API: codex installed runtime verifies, enrolls, publishes OMEMO, restarts and stops on revocation
+# Subtest: live dev API: cursor installed runtime verifies, enrolls, publishes OMEMO, restarts and stops on revocation
+ok 2 - live dev API: cursor installed runtime verifies, enrolls, publishes OMEMO, restarts and stops on revocation
+# Subtest: live dev API: claude installed runtime verifies, enrolls, publishes OMEMO, restarts and stops on revocation
+ok 3 - live dev API: claude installed runtime verifies, enrolls, publishes OMEMO, restarts and stops on revocation
+# tests 3
+# suites 0
+# pass 3
+# fail 0
+# cancelled 0
+# skipped 0
+# todo 0
+# duration_ms 7122.277049

package/docs/evidence/issue-8/review-fixes/session-replacement-live.txt

@@ -0,0 +1,13 @@
+# stack: lbframe/wacando PR #108 head 6198d92 (already merges main f21f742 incl. #106) + PR #109 merged locally -> 278968b; ejabberd 26.07 from that tree's ci-up.sh; fresh DB
+$ WACANDO_LIVE_TEST_ORIGIN=http://localhost:43001 node scripts/check-daemon-live.mjs
+enrolled @daemon_ed9a6fd46c77/bot for host "cli" (synthetic owner)
+status: [{"agentId":"agt_e3c98714-530d-4b99-9f2c-a9094b3d658e","handle":"@daemon_ed9a6fd46c77/bot","origin":"http://localhost:43001","mode":"human","revoked":false,"connection":"disconnected"}]
+daemon: connected (grant, native OMEMO publication, presence echo, API callback) and running
+second daemon on the same identity: refused by the identity lock
+daemon: SIGTERM -> clean exit 0, lock released
+daemon restarted on the same saved identity and keys: connected again
+second copy connected; the first daemon got <conflict/>, reported SESSION_REPLACED and exited 3
+after 135 s (two heartbeats) the newer daemon is still connected and was never replaced back; no ping-pong
+exit=0
+$ docker logs wacando-agentside-ejabberd | grep -c "Replaced by new connection"   # whole run incl. the 135 s observation
+1

package/docs/evidence/npm-release/check-mcp.txt

@@ -0,0 +1,9 @@
+$ npm run check:mcp
+
+> @wacando/agent@2.0.0-rc.1 check:mcp
+> node scripts/check-mcp.mjs
+
+Official Inspector 2.7.0 passed: wacando
+Official Inspector 2.7.0 passed: wacando-cursor
+Official Inspector 2.7.0 passed: wacando-claude
+exit=0