@wacando/agent 2.0.0-rc.1 → 2.0.1

package/docs/evidence/issue-2/local-check.txt

@@ -1,376 +0,0 @@
-
-> wacando-plugins@1.0.0 check
-> npm run build && npm run check:generated && npm test
-
-
-> wacando-plugins@1.0.0 build
-> node scripts/build.mjs
-
-Built self-contained codex plugin: wacando@1.0.0
-Built self-contained cursor plugin: wacando-cursor@1.0.0
-Built self-contained claude plugin: wacando-claude@1.0.0
-
-> wacando-plugins@1.0.0 check:generated
-> node scripts/check-generated.mjs
-
-Verified exact runtime: wacando
-Verified exact runtime: wacando-cursor
-Verified exact runtime: wacando-claude
-
-> wacando-plugins@1.0.0 test
-> node --test tests/*.test.mjs
-
-TAP version 13
-# Subtest: clean package builds remove deleted sources and preserve the old runtime on preparation failure
-ok 1 - clean package builds remove deleted sources and preserve the old runtime on preparation failure
-  ---
-  duration_ms: 2876.948694
-  type: 'test'
-  ...
-# Subtest: cursor checker requires an affirmative parsed payload even when the wrapper says success
-ok 2 - cursor checker requires an affirmative parsed payload even when the wrapper says success
-  ---
-  duration_ms: 2.023074
-  type: 'test'
-  ...
-# Subtest: cursor checker distinguishes clear revocation from a crash, lock error or false connection
-ok 3 - cursor checker distinguishes clear revocation from a crash, lock error or false connection
-  ---
-  duration_ms: 1.187868
-  type: 'test'
-  ...
-# Subtest: codex checker requires an affirmative parsed payload even when the wrapper says success
-ok 4 - codex checker requires an affirmative parsed payload even when the wrapper says success
-  ---
-  duration_ms: 0.321162
-  type: 'test'
-  ...
-# Subtest: codex checker distinguishes clear revocation from a crash, lock error or false connection
-ok 5 - codex checker distinguishes clear revocation from a crash, lock error or false connection
-  ---
-  duration_ms: 0.322433
-  type: 'test'
-  ...
-# Subtest: checker requires verified:true for installation readiness
-ok 6 - checker requires verified:true for installation readiness
-  ---
-  duration_ms: 0.375223
-  type: 'test'
-  ...
-# Subtest: malformed viewer request targets return 400 without losing MCP events
-ok 7 - malformed viewer request targets return 400 without losing MCP events
-  ---
-  duration_ms: 84.120392
-  type: 'test'
-  ...
-# Subtest: MCP shutdown on EOF closes SSE and unfinished HTTP headers
-ok 8 - MCP shutdown on EOF closes SSE and unfinished HTTP headers
-  ---
-  duration_ms: 339.73003
-  type: 'test'
-  ...
-# Subtest: MCP shutdown on SIGTERM closes SSE and unfinished HTTP headers
-ok 9 - MCP shutdown on SIGTERM closes SSE and unfinished HTTP headers
-  ---
-  duration_ms: 329.629378
-  type: 'test'
-  ...
-# Subtest: HTTP and SSE snapshots use bounded pages and preserve large Unicode events
-ok 10 - HTTP and SSE snapshots use bounded pages and preserve large Unicode events
-  ---
-  duration_ms: 67.807607
-  type: 'test'
-  ...
-# Subtest: SSE client and queue limits isolate slow readers
-ok 11 - SSE client and queue limits isolate slow readers
-  ---
-  duration_ms: 13.783017
-  type: 'test'
-  ...
-# Subtest: legacy negotiation requires valid initialization and the initialized notification
-ok 12 - legacy negotiation requires valid initialization and the initialized notification
-  ---
-  duration_ms: 97.457936
-  type: 'test'
-  ...
-# Subtest: JSON-RPC rejects invalid IDs and parameters without answering responses or notifications
-ok 13 - JSON-RPC rejects invalid IDs and parameters without answering responses or notifications
-  ---
-  duration_ms: 68.859524
-  type: 'test'
-  ...
-# Subtest: tools enforce schemas, preserve Unicode limits, and never claim observed visibility
-ok 14 - tools enforce schemas, preserve Unicode limits, and never claim observed visibility
-  ---
-  duration_ms: 101.768055
-  type: 'test'
-  ...
-# Subtest: event pages obey encoded byte limits and traverse without losing filtered records
-ok 15 - event pages obey encoded byte limits and traverse without losing filtered records
-  ---
-  duration_ms: 15.431858
-  type: 'test'
-  ...
-# Subtest: retention is bounded by bytes as well as event count and reports eviction
-ok 16 - retention is bounded by bytes as well as event count and reports eviction
-  ---
-  duration_ms: 2.999111
-  type: 'test'
-  ...
-# Subtest: stdio framing handles split UTF-8, CRLF and escaped newlines with strict byte bounds
-ok 17 - stdio framing handles split UTF-8, CRLF and escaped newlines with strict byte bounds
-  ---
-  duration_ms: 4.25906
-  type: 'test'
-  ...
-# Subtest: an oversized unfinished frame closes the MCP process promptly
-ok 18 - an oversized unfinished frame closes the MCP process promptly
-  ---
-  duration_ms: 69.221057
-  type: 'test'
-  ...
-# Subtest: SIGTERM exits within a deadline even when the host stops reading stdout
-ok 19 - SIGTERM exits within a deadline even when the host stops reading stdout
-  ---
-  duration_ms: 1132.750787
-  type: 'test'
-  ...
-# Subtest: stdio writes wait for readers and reject stalled or oversized output
-ok 20 - stdio writes wait for readers and reject stalled or oversized output
-  ---
-  duration_ms: 1004.471704
-  type: 'test'
-  ...
-# Subtest: rate limiting admits bursts, rejects excess calls and refills over time
-ok 21 - rate limiting admits bursts, rejects excess calls and refills over time
-  ---
-  duration_ms: 0.468634
-  type: 'test'
-  ...
-# Subtest: MCP tool floods receive actionable rate-limit errors
-ok 22 - MCP tool floods receive actionable rate-limit errors
-  ---
-  duration_ms: 61.424582
-  type: 'test'
-  ...
-# Subtest: live dev API: codex installed runtime verifies, enrolls, publishes OMEMO, restarts and stops on revocation
-ok 23 - live dev API: codex installed runtime verifies, enrolls, publishes OMEMO, restarts and stops on revocation
-  ---
-  duration_ms: 3784.80163
-  type: 'test'
-  ...
-# Subtest: live dev API: cursor installed runtime verifies, enrolls, publishes OMEMO, restarts and stops on revocation
-ok 24 - live dev API: cursor installed runtime verifies, enrolls, publishes OMEMO, restarts and stops on revocation
-  ---
-  duration_ms: 1586.976822
-  type: 'test'
-  ...
-# Subtest: live dev API: claude installed runtime verifies, enrolls, publishes OMEMO, restarts and stops on revocation
-ok 25 - live dev API: claude installed runtime verifies, enrolls, publishes OMEMO, restarts and stops on revocation
-  ---
-  duration_ms: 1548.809503
-  type: 'test'
-  ...
-# cursor: delayed shutdown released session lock; OMEMO snapshot unchanged
-# Subtest: cursor shutdown waits for session cleanup and releases its own lock without changing keys
-ok 26 - cursor shutdown waits for session cleanup and releases its own lock without changing keys
-  ---
-  duration_ms: 2153.758858
-  type: 'test'
-  ...
-# codex: delayed shutdown released session lock; OMEMO snapshot unchanged
-# Subtest: codex shutdown waits for session cleanup and releases its own lock without changing keys
-ok 27 - codex shutdown waits for session cleanup and releases its own lock without changing keys
-  ---
-  duration_ms: 2019.857877
-  type: 'test'
-  ...
-# Subtest: MCP shutdown finishes saving an in-flight verification response before exiting
-ok 28 - MCP shutdown finishes saving an in-flight verification response before exiting
-  ---
-  duration_ms: 1294.428754
-  type: 'test'
-  ...
-# Subtest: enrollment saves durable credential before XMPP, publishes before callback, and resumes without redemption
-ok 29 - enrollment saves durable credential before XMPP, publishes before callback, and resumes without redemption
-  ---
-  duration_ms: 373.662398
-  type: 'test'
-  ...
-# Subtest: origins, host identities and installations cannot be substituted
-ok 30 - origins, host identities and installations cannot be substituted
-  ---
-  duration_ms: 460.532748
-  type: 'test'
-  ...
-# Subtest: expiration, replay, wrong installation and revocation return safe actions
-ok 31 - expiration, replay, wrong installation and revocation return safe actions
-  ---
-  duration_ms: 498.788858
-  type: 'test'
-  ...
-# Subtest: background heartbeats preserve the stream and retry outages with bounded backoff and safe diagnostics
-ok 32 - background heartbeats preserve the stream and retry outages with bounded backoff and safe diagnostics
-  ---
-  duration_ms: 911.763132
-  type: 'test'
-  ...
-# Subtest: failed initial connection recovers in background without another redemption and close cancels retries
-ok 33 - failed initial connection recovers in background without another redemption and close cancels retries
-  ---
-  duration_ms: 682.402009
-  type: 'test'
-  ...
-# Subtest: failed XMPP ping closes only the broken stream and obtains a fresh grant on automatic retry
-ok 34 - failed XMPP ping closes only the broken stream and obtains a fresh grant on automatic retry
-  ---
-  duration_ms: 34.601413
-  type: 'test'
-  ...
-# Subtest: shutdown waits for a background grant request and prevents a new session after closing
-ok 35 - shutdown waits for a background grant request and prevents a new session after closing
-  ---
-  duration_ms: 23.135233
-  type: 'test'
-  ...
-# Subtest: failed OMEMO registration preserves credential, suppresses connected callback, and resumes
-ok 36 - failed OMEMO registration preserves credential, suppresses connected callback, and resumes
-  ---
-  duration_ms: 19.488027
-  type: 'test'
-  ...
-# Subtest: lost redemption and failed persistence never claim success
-ok 37 - lost redemption and failed persistence never claim success
-  ---
-  duration_ms: 16.773288
-  type: 'test'
-  ...
-# Subtest: unsafe permissions, symlinks and concurrent writes fail closed
-ok 38 - unsafe permissions, symlinks and concurrent writes fail closed
-  ---
-  duration_ms: 2.226706
-  type: 'test'
-  ...
-# Subtest: HTTP policy rejects non-loopback cleartext, URL credentials and redirects
-ok 39 - HTTP policy rejects non-loopback cleartext, URL credentials and redirects
-  ---
-  duration_ms: 17.253491
-  type: 'test'
-  ...
-# Subtest: existing Wacando OMEMO identity survives reload; corrupt state is never regenerated
-ok 40 - existing Wacando OMEMO identity survives reload; corrupt state is never regenerated
-  ---
-  duration_ms: 515.791078
-  type: 'test'
-  ...
-# Subtest: installed MCP tools verify via HTTP and never expose response credentials
-ok 41 - installed MCP tools verify via HTTP and never expose response credentials
-  ---
-  duration_ms: 77.224993
-  type: 'test'
-  ...
-# Subtest: cursor packaged MCP rejects a locally revoked identity without crashing or reporting connection
-ok 42 - cursor packaged MCP rejects a locally revoked identity without crashing or reporting connection
-  ---
-  duration_ms: 115.950595
-  type: 'test'
-  ...
-# Subtest: codex packaged MCP rejects a locally revoked identity without crashing or reporting connection
-ok 43 - codex packaged MCP rejects a locally revoked identity without crashing or reporting connection
-  ---
-  duration_ms: 86.042236
-  type: 'test'
-  ...
-# Subtest: release version matches all manifests
-ok 44 - release version matches all manifests
-  ---
-  duration_ms: 7.697715
-  type: 'test'
-  ...
-# Subtest: local npm tarball contains standalone hosts and installer preserves existing installations
-ok 45 - local npm tarball contains standalone hosts and installer preserves existing installations
-  ---
-  duration_ms: 2790.246184
-  type: 'test'
-  ...
-# Subtest: codex package runs relocated without the repository and records its own provider
-ok 46 - codex package runs relocated without the repository and records its own provider
-  ---
-  duration_ms: 513.441491
-  type: 'test'
-  ...
-# Subtest: cursor package runs relocated without the repository and records its own provider
-ok 47 - cursor package runs relocated without the repository and records its own provider
-  ---
-  duration_ms: 105.023188
-  type: 'test'
-  ...
-# Subtest: claude package runs relocated without the repository and records its own provider
-ok 48 - claude package runs relocated without the repository and records its own provider
-  ---
-  duration_ms: 572.99299
-  type: 'test'
-  ...
-# Subtest: Claude, Cursor and Codex MCP processes have independent stores and ports
-ok 49 - Claude, Cursor and Codex MCP processes have independent stores and ports
-  ---
-  duration_ms: 67.315774
-  type: 'test'
-  ...
-# Subtest: Cursor installer copies a real package and refuses to overwrite an existing install
-ok 50 - Cursor installer copies a real package and refuses to overwrite an existing install
-  ---
-  duration_ms: 1036.706251
-  type: 'test'
-  ...
-# Subtest: store validates messages, orders events and bounds retention
-ok 51 - store validates messages, orders events and bounds retention
-  ---
-  duration_ms: 2.420697
-  type: 'test'
-  ...
-# Subtest: loopback viewer serves assets and blocks cross-origin writes and traversal
-ok 52 - loopback viewer serves assets and blocks cross-origin writes and traversal
-  ---
-  duration_ms: 48.452361
-  type: 'test'
-  ...
-# Subtest: SSE delivers snapshot and live message, reconnect recovers snapshot
-ok 53 - SSE delivers snapshot and live message, reconnect recovers snapshot
-  ---
-  duration_ms: 261.803551
-  type: 'test'
-  ...
-# Subtest: MCP starts HTTP, records events and shuts down on stdin EOF
-ok 54 - MCP starts HTTP, records events and shuts down on stdin EOF
-  ---
-  duration_ms: 91.02007
-  type: 'test'
-  ...
-# Subtest: late history pages cannot duplicate live events, resurrect evictions or replace a new connection
-ok 55 - late history pages cannot duplicate live events, resurrect evictions or replace a new connection
-  ---
-  duration_ms: 1.647741
-  type: 'test'
-  ...
-# Subtest: history loading pins the snapshot sequence, follows cursors and respects cancellation
-ok 56 - history loading pins the snapshot sequence, follows cursors and respects cancellation
-  ---
-  duration_ms: 1.131738
-  type: 'test'
-  ...
-# Subtest: rate-limited history loading resumes from the same page instead of restarting the stream
-ok 57 - rate-limited history loading resumes from the same page instead of restarting the stream
-  ---
-  duration_ms: 1002.265869
-  type: 'test'
-  ...
-1..57
-# tests 57
-# suites 0
-# pass 57
-# fail 0
-# cancelled 0
-# skipped 0
-# todo 0
-# duration_ms 6982.870563

package/docs/evidence/issue-2/local-codex-probe.txt

@@ -1,3 +0,0 @@
-WARNING: proceeding, even though we could not create PATH aliases: Read-only file system (os error 30)
-Reading additional input from stdin...
-Error: failed to initialize in-process app-server client: Read-only file system (os error 30)

package/docs/evidence/issue-2/local-codex-probe2.txt

@@ -1,3 +0,0 @@
-WARNING: proceeding, even though we could not create PATH aliases: Read-only file system (os error 30)
-Reading additional input from stdin...
-Error: failed to initialize in-process app-server client: Read-only file system (os error 30)

package/docs/evidence/issue-2/local-codex.txt

@@ -1,2 +0,0 @@
-Host exit=1; protected state partition=a545539c9fb8afa4b2772b93fb81a69abd699b0eee9fa1afbfe0762caf20d1cc; locks=none
-Real codex host did not confirm wacando_verify_installation; exit=1, calls=0. Parsed tool diagnostic: {}. Raw host output suppressed.

package/docs/evidence/issue-2/local-cursor-probe.txt

@@ -1 +0,0 @@
-Error: EROFS: read-only file system, open '/home/kyle/.cursor/sandbox-policies/sandbox-policy-ab97f73e2a601171'

package/docs/evidence/issue-2/local-cursor.txt

@@ -1,2 +0,0 @@
-Host exit=1; protected state partition=573dd65109883105b435723458109f7f8fa6eeff9982b6fac81153ba2410c5cc; locks=none
-Real cursor host did not confirm wacando_verify_installation; exit=1, calls=0. Parsed tool diagnostic: {}. Raw host output suppressed.

package/docs/evidence/issue-2/local-down.txt

@@ -1,32 +0,0 @@
- Container wacando-agent2-web-1 Stopping 
- Container wacando-agent2-web-1 Stopped 
- Container wacando-agent2-web-1 Removing 
- Container wacando-agent2-web-1 Removed 
- Container wacando-agent2-api-1 Stopping 
- Container wacando-agent2-api-1 Stopped 
- Container wacando-agent2-api-1 Removing 
- Container wacando-agent2-api-1 Removed 
- Container wacando-agent2-policy-1 Stopping 
- Container wacando-agent2-postgres-1 Stopping 
- Container wacando-agent2-postgres-1 Stopped 
- Container wacando-agent2-postgres-1 Removing 
- Container wacando-agent2-policy-1 Stopped 
- Container wacando-agent2-policy-1 Removing 
- Container wacando-agent2-postgres-1 Removed 
- Container wacando-agent2-policy-1 Removed 
- Container wacando-agent2-ejabberd-1 Stopping 
- Container wacando-agent2-ejabberd-1 Stopped 
- Container wacando-agent2-ejabberd-1 Removing 
- Container wacando-agent2-ejabberd-1 Removed 
- Volume wacando-agent2_dev-ejabberd-data Removing 
- Volume wacando-agent2_dev-ejabberd-logs Removing 
- Volume wacando-agent2_dev-pgdata Removing 
- Network wacando-agent2_wacando Removing 
- Volume wacando-agent2_dev-ejabberd-data Removed 
- Volume wacando-agent2_dev-ejabberd-logs Removed 
- Volume wacando-agent2_dev-pgdata Removed 
- Network wacando-agent2_wacando Removed 
-NAME      IMAGE     COMMAND   SERVICE   CREATED   STATUS    PORTS
-DRIVER    VOLUME NAME
-/wacando-issue10-postgres status=running started=2026-10-14T23:30:46.147696329Z restarts=0
-/wacando-issue10-ejabberd status=running started=2026-10-14T23:53:35.168365444Z restarts=0

package/docs/evidence/issue-2/local-health.txt

@@ -1 +0,0 @@
-{"ok":true}Web onboarding HTTP 200

package/docs/evidence/issue-2/local-live.txt

@@ -1,28 +0,0 @@
-TAP version 13
-# Subtest: live dev API: codex installed runtime verifies, enrolls, publishes OMEMO, restarts and stops on revocation
-ok 1 - live dev API: codex installed runtime verifies, enrolls, publishes OMEMO, restarts and stops on revocation
-  ---
-  duration_ms: 2077.400751
-  type: 'test'
-  ...
-# Subtest: live dev API: cursor installed runtime verifies, enrolls, publishes OMEMO, restarts and stops on revocation
-ok 2 - live dev API: cursor installed runtime verifies, enrolls, publishes OMEMO, restarts and stops on revocation
-  ---
-  duration_ms: 2120.705886
-  type: 'test'
-  ...
-# Subtest: live dev API: claude installed runtime verifies, enrolls, publishes OMEMO, restarts and stops on revocation
-ok 3 - live dev API: claude installed runtime verifies, enrolls, publishes OMEMO, restarts and stops on revocation
-  ---
-  duration_ms: 2578.078336
-  type: 'test'
-  ...
-1..3
-# tests 3
-# suites 0
-# pass 3
-# fail 0
-# cancelled 0
-# skipped 0
-# todo 0
-# duration_ms 6896.88793

package/docs/evidence/issue-2/local-seed.txt

@@ -1,26 +0,0 @@
-[ci-up] ejabberd container: 38c417189e555abbfa48361e6f630946e9709ae10297edef9aae70c0d42dfb7a (wacando-agent2-ejabberd-1)
-[ci-up] waiting for stock ejabberd node
-[ci-up] injecting /home/kyle/timon-projects/wacando/agent2-api/infra/ejabberd/ejabberd.ci.yml -> 38c417189e555abbfa48361e6f630946e9709ae10297edef9aae70c0d42dfb7a:/home/ejabberd/conf/ejabberd.yml
-[ci-up] restarting container to load the CI config
-The node ejabberd@localhost is started with status: started
-ejabberd 26.7.0 is running in that node
-[ci-up] ejabberd node is up with the CI config
-[ci-up] registered: admin@wacando.localhost
-[ci-up] registered: agt_a01@wacando.localhost
-[ci-up] registered: agt_b01@wacando.localhost
-[ci-up] registered: agt_c01@wacando.localhost
-[ci-up] registered: usr_a01@wacando.localhost
-[ci-up] registered: usr_b01@wacando.localhost
-[ci-up] registered users on wacando.localhost:
-admin
-agt_a01
-agt_b01
-agt_c01
-usr_a01
-usr_b01
-[ci-up] probing listeners
-[ci-up] admin account reachable via ctl
-[ci-up] 127.0.0.1:25222 open
-[ci-up] 127.0.0.1:25280 open
-[ci-up] 127.0.0.1:25347 open
-[ci-up] done. c2s=127.0.0.1:25222  ws+api=http://127.0.0.1:25280  component=127.0.0.1:25347

package/docs/evidence/issue-2/local-status.txt

@@ -1,6 +0,0 @@
-NAME                        IMAGE                   COMMAND                  SERVICE    CREATED          STATUS                    PORTS
-wacando-agent2-api-1        wacando-agent2-api      "/usr/local/bin/api-…"   api        5 minutes ago    Up 5 minutes (healthy)    127.0.0.1:23001->3001/tcp
-wacando-agent2-ejabberd-1   ejabberd/ecs:26.07      "/sbin/tini -- /home…"   ejabberd   18 minutes ago   Up 18 minutes (healthy)   1880/tcp, 1883/tcp, 4369-4399/tcp, 5210/tcp, 5269/tcp, 5443/tcp, 5478/tcp, 7777/tcp, 50000-50099/tcp, 127.0.0.1:25222->5222/tcp, 127.0.0.1:25280->5280/tcp, 127.0.0.1:25347->5347/tcp
-wacando-agent2-policy-1     wacando-agent2-policy   "docker-entrypoint.s…"   policy     2 minutes ago    Up 2 minutes (healthy)    127.0.0.1:23002->3002/tcp
-wacando-agent2-postgres-1   postgres:17-alpine      "docker-entrypoint.s…"   postgres   18 minutes ago   Up 18 minutes (healthy)   127.0.0.1:25432->5432/tcp
-wacando-agent2-web-1        wacando-agent2-web      "docker-entrypoint.s…"   web        29 seconds ago   Up 19 seconds (healthy)   127.0.0.1:23000->3000/tcp

package/docs/evidence/issue-2/local-up.txt

@@ -1,18 +0,0 @@
- Container wacando-agent2-ejabberd-1 Running 
- Container wacando-agent2-policy-1 Running 
- Container wacando-agent2-postgres-1 Running 
- Container wacando-agent2-api-1 Running 
- Container wacando-agent2-web-1 Creating 
- Container wacando-agent2-web-1 Created 
- Container wacando-agent2-ejabberd-1 Waiting 
- Container wacando-agent2-ejabberd-1 Healthy 
- Container wacando-agent2-policy-1 Waiting 
- Container wacando-agent2-postgres-1 Waiting 
- Container wacando-agent2-ejabberd-1 Waiting 
- Container wacando-agent2-policy-1 Healthy 
- Container wacando-agent2-postgres-1 Healthy 
- Container wacando-agent2-ejabberd-1 Healthy 
- Container wacando-agent2-api-1 Waiting 
- Container wacando-agent2-api-1 Healthy 
- Container wacando-agent2-web-1 Starting 
- Container wacando-agent2-web-1 Started 

package/docs/evidence/issue-2/prepare-local-stack.py

@@ -1,67 +0,0 @@
-"""Reproduce the isolated, ephemeral issue-2 dev target from Wacando main.
-
-Run with the absolute Wacando checkout as the sole argument. Inherited dev
-secrets stay in a mode-0600 /tmp file; do not attach that file as evidence.
-"""
-import json
-from pathlib import Path
-import subprocess
-import sys
-
-repo = Path(sys.argv[1]).resolve(strict=True)
-config = json.loads(subprocess.check_output([
-    "docker", "compose", "-f", str(repo / "docker-compose.dev.yml"),
-    "config", "--format", "json",
-], cwd=repo))
-config["name"] = "wacando-agent2"
-ports = {
-    "postgres": {5432: 25432},
-    "ejabberd": {5222: 25222, 5280: 25280, 5347: 25347},
-    "policy": {3002: 23002},
-    "api": {3001: 23001},
-    "web": {3000: 23000},
-}
-for name, service in config["services"].items():
-    service["restart"] = "no"
-    for port in service.get("ports", []):
-        port["published"] = str(ports[name][port["target"]])
-        port["host_ip"] = "127.0.0.1"
-    if "build" in service:
-        service["build"]["context"] = str(repo)
-for volume in config["volumes"].values():
-    volume.pop("name", None)
-for network in config["networks"].values():
-    network.pop("name", None)
-config["services"]["api"]["environment"].update(
-    BETTER_AUTH_URL="http://localhost:23001",
-    WEB_ORIGIN="http://localhost:23000",
-    WACANDO_PUBLIC_XMPP_SERVICE="ws://localhost:25280/ws",
-)
-web = config["services"]["web"]
-web["build"]["args"].update(
-    NEXT_PUBLIC_API_URL="",
-    NEXT_PUBLIC_XMPP_WS_URL="ws://localhost:25280/ws",
-    NEXT_PUBLIC_XMPP_DOMAIN="wacando.localhost",
-)
-web["environment"] = {"API_PROXY_TARGET": "http://api:3001"}
-target = Path("/tmp/wacando-agent2.compose.json")
-target.write_text(json.dumps(config, indent=2))
-target.chmod(0o600)
-
-# Preserve the official config injection and dev seed, but select ONLY this
-# project's container. The upstream ancestor-image selector could pick issue 10.
-seed = (repo / "infra/ejabberd/ci-up.sh").read_text()
-seed = seed.replace(
-    'REPO_ROOT="$(cd "$(dirname "${BASH_SOURCE[0]}")/../.." && pwd)"',
-    f'REPO_ROOT="{repo}"',
-).replace(
-    'docker ps --filter "ancestor=$IMAGE" --format \'{{.ID}}\' | head -n1',
-    "docker compose -p wacando-agent2 -f /tmp/wacando-agent2.compose.json ps -q ejabberd",
-).replace(
-    "for port in 5222 5280 5347", "for port in 25222 25280 25347",
-).replace(
-    "c2s=127.0.0.1:5222  ws+api=http://127.0.0.1:5280  component=127.0.0.1:5347",
-    "c2s=127.0.0.1:25222  ws+api=http://127.0.0.1:25280  component=127.0.0.1:25347",
-)
-Path("/tmp/wacando-agent2-ci-up.sh").write_text(seed)
-print("Prepared wacando-agent2: loopback-only ports, isolated network and volumes.")

package/docs/evidence/issue-2/qualification-body-validation.txt

@@ -1,9 +0,0 @@
-PASS: PR #9 body PATCH/read-back exact; OPEN+DRAFT; independent follow-up review pending.
-PASS: issue #2 body PATCH/read-back exact; OPEN; three proven-runtime boxes checked, review/merge unchecked; OPEN/in-progress requirement explicit.
-PASS: Wacando #17 body PATCH/read-back exact; OPEN; blocker line and unchecked qualification boxes unchanged.
-PASS: native blocked_by unchanged: repos/lbframe/wacando-agent/issues/2/dependencies/blocked_by = []
-PASS: native blocked_by unchanged: repos/lbframe/wacando/issues/17/dependencies/blocked_by = [3, 4, 12, 16, 40, 37]
-PASS: native blocked_by unchanged: repos/lbframe/wacando/issues/42/dependencies/blocked_by = [40, 37]
-PASS: #42 record/body untouched; #17/#42 retirement references preserved in all edited bodies.
-PASS: immutable abd3e52 link target exists: docs/CURSOR_IDENTITY_RESUME.md
-PASS: immutable abd3e52 link target exists: docs/evidence/issue-2/DOCUMENTARY_FOLLOWUP.md