claude-code-session-manager 0.68.0 → 0.70.0

package/src/main/lib/crossProjectFeedback.cjs

@@ -0,0 +1,545 @@
+'use strict';
+
+/**
+ * crossProjectFeedback.cjs — THE PROJECT-TO-PROJECT CONDUIT.
+ *
+ * Problem this solves. `/process-feedback`, `/my-feedback` and the
+ * `session-manager-operations/feedback/` intake folder were retired
+ * (2026-08-02), and the scheduler was correctly locked down so a PRD can only
+ * ever JOIN an Epic that a human already approved. Both changes were right on
+ * their own, and together they removed the last channel an agent working in
+ * Project-A had for handing a finding to Project-B. The finding either died in
+ * a transcript or the human relayed it by hand.
+ *
+ * What this restores, and what it deliberately does NOT restore. Session
+ * Manager's main process is the ONE process that legitimately holds several
+ * projects' operations roots open at once, so it — and only it — can perform
+ * the cross-folder write. A session in Project-A calls `feedback_open_session`
+ * (MCP) → this module mints a `proposed` Epic in **Project-B's own**
+ * `session-manager-operations/prompt-sessions/active-index.json`, carrying the
+ * report as its opening prompt and stamped with where it came from. It appears
+ * in Project-B's Sessions queue exactly like a hand-filed proposal.
+ *
+ * It does NOT re-open the agent-facing proposal channel that was removed. That
+ * channel let an agent file work into the project it was ALREADY running in,
+ * which is what "run /develop inside the Epic you're already in" replaced and
+ * which stays refused — `sameProject` below rejects toCwd === fromCwd outright
+ * and names /develop in the error. The only new power is depositing a proposal
+ * into a DIFFERENT project's inbox.
+ *
+ * Why that is safe. The part of the SINGLE-CREATOR LAW that actually guards
+ * spend is not "a human typed it" — it's "every Epic is born 'proposed' and
+ * nothing runs until a human presses Approve & start". A cross-project
+ * feedback Epic is born 'proposed' like every other Epic (epicMint.cjs's
+ * BORN-PROPOSED check applies to this mint authority verbatim), so the human
+ * in the RECEIVING project is still the one who decides whether a single token
+ * gets spent. An agent can ask; it cannot start.
+ *
+ * Guards, all fail-closed:
+ *   - both cwds go through config.cjs's validatePath (allowedRoots = home)
+ *   - both must be real, existing directories
+ *   - toCwd !== fromCwd (see above)
+ *   - toCwd must ALREADY be a Session Manager project — its
+ *     `session-manager-operations/` must exist. This module never conjures an
+ *     operations root in an arbitrary directory, so it can't be used to
+ *     scatter app state across the filesystem.
+ *   - title/body length caps, so one call can't write an unbounded blob into
+ *     another project's active-index.json.
+ *
+ * Single-writer law: the actual write is `ensureEpic`'s, which already
+ * declares writer 'scheduler' against prompt-sessions/'s narrow
+ * active-index.json delegation (opsOwnership.cjs). No new namespace, no new
+ * writer, no new delegation.
+ */
+
+const fs = require('node:fs');
+const fsp = require('node:fs/promises');
+const os = require('node:os');
+const path = require('node:path');
+
+const config = require('../config.cjs');
+const { readBody, sendJson } = require('./localAdminHttp.cjs');
+const {
+  ensureEpic,
+  readActiveIndex,
+  MINT_AUTHORITY_CROSS_PROJECT_FEEDBACK,
+} = require('./epicMint.cjs');
+const { appendAuditEvent } = require('./auditLog.cjs');
+const { OPS_ROOT_DIR } = require('./opsOwnership.cjs');
+
+/** Only these three Epic tags make sense for an inbound report — they are
+ *  exactly the tags that route through /develop (tagLibrary.ts). 'build',
+ *  'project-home-builder' and 'bilko-host-publisher' name dedicated local
+ *  pipelines and are meaningless as a request from another project. */
+const FEEDBACK_TAGS = Object.freeze(['bug', 'feature', 'discussion']);
+const DEFAULT_FEEDBACK_TAG = 'discussion';
+
+/** Default persona for the receiving session. 'architect' owns scope
+ *  clarification and decomposition, which is precisely what a receiving human
+ *  wants pointed at an incoming report. */
+const DEFAULT_FEEDBACK_AGENT = 'architect';
+
+const MAX_TITLE_CHARS = 200;
+const MAX_BODY_CHARS = 20000;
+const MAX_REFERENCES = 20;
+
+/** Bound on how many `~/.claude/projects/` folders listFeedbackTargets will
+ *  resolve. That directory accumulates one folder per path the CLI was ever
+ *  launched from (thousands here — see CLAUDE.md's knownProjectAggregate
+ *  note), so the scan is capped at the most recently active folders and
+ *  reports the truncation rather than silently covering a subset. */
+const TARGET_SCAN_LIMIT = 300;
+
+const PROJECTS_DIR = path.join(os.homedir(), '.claude', 'projects');
+
+/**
+ * Where listFeedbackTargets scans for transcript folders. Injectable rather
+ * than hardcoded to `os.homedir()` for a reason that bit immediately: the
+ * transcripts tests seed and then delete folders under the REAL
+ * `~/.claude/projects/` in their own afterEach, so a test that scanned the
+ * live directory raced their teardown and failed intermittently under the
+ * full suite while passing in isolation. A module whose only I/O root is
+ * baked into a constant can't be tested without touching the developer's
+ * actual home directory — so the root is a parameter, defaulted.
+ */
+function resolveProjectsDir(override) {
+  return override || process.env.SM_PROJECTS_DIR || PROJECTS_DIR;
+}
+
+function singleLine(s) {
+  return String(s ?? '').replace(/\r?\n/g, ' ').trim();
+}
+
+function isDirectory(p) {
+  try {
+    return fs.statSync(p).isDirectory();
+  } catch {
+    return false;
+  }
+}
+
+/** True when `cwd` is a Session Manager project — i.e. it already has an
+ *  operations root. Deliberately the ONLY definition of "can receive
+ *  feedback": it needs no registry, can't go stale, and refuses to create the
+ *  folder it is checking for. */
+function isSessionManagerProject(cwd) {
+  return isDirectory(path.join(cwd, OPS_ROOT_DIR));
+}
+
+/**
+ * composeFeedbackIntake({ fromCwd, fromEpicId, title, body, referencePaths })
+ *   → { goalText, openingPrompt, sections }
+ *
+ * Pure. Mirrors the renderer's `composeEpicIntake` (lib/epicIntake.ts) —
+ * same `EpicIntakeSection` shape, same emission order, same '\n\n' joins — so
+ * the receiving Epic's first turn renders the identical AIM briefing card as a
+ * hand-created one. It cannot import that module (TS, renderer-side), so it
+ * deliberately emits only the section kinds whose text it OWNS:
+ *
+ *   actor  — the persona line, same sentence template as composeEpicIntake
+ *   input  — AIM's Input axis: what grounds this session. For an inbound
+ *            report that is literally "an external report from Project-A",
+ *            which is this module's own fact to state.
+ *   goal   — the report itself.
+ *   reference — attached paths.
+ *
+ * There is NO `mission` section, on purpose. A mission section's text is the
+ * tag's `initialPromptTemplate`, which lives in agentTagDefs.ts; re-typing it
+ * here would be a second, drifting copy of a tag's meaning — the exact thing
+ * CLAUDE.md forbids. The Epic still carries its `tag` field, so every surface
+ * that renders a tag's meaning keeps reading it through `agentTagDef(tag)`.
+ *
+ * Complexity: O(n) in the number of references.
+ */
+function composeFeedbackIntake({
+  fromCwd,
+  fromEpicId = null,
+  title,
+  body,
+  agentName = DEFAULT_FEEDBACK_AGENT,
+  agentDescription = null,
+  referencePaths = [],
+} = {}) {
+  const trimmedTitle = singleLine(title);
+  const trimmedBody = String(body ?? '').trim();
+  const sections = [];
+
+  if (agentName && agentDescription) {
+    sections.push({
+      kind: 'actor',
+      label: 'Actor',
+      text: `You are acting as the "${singleLine(agentName)}" agent: ${singleLine(agentDescription)}`,
+      source: agentName,
+    });
+  }
+
+  const origin = fromEpicId
+    ? `${singleLine(fromCwd)} (session ${singleLine(fromEpicId)})`
+    : singleLine(fromCwd);
+  sections.push({
+    kind: 'input',
+    label: 'Input',
+    text:
+      `This session is INBOUND FEEDBACK from another project: ${origin}. `
+      + 'Nobody in this project wrote the report below — an agent working in that project did, and it '
+      + 'may be wrong about this codebase. Verify the claim against the code here before acting on it, '
+      + 'and if it does not hold, say so and close the session rather than building against it.',
+    source: fromCwd,
+  });
+
+  const goalBody = trimmedTitle ? `Goal: ${trimmedTitle}\n\n${trimmedBody}` : trimmedBody;
+  sections.push({ kind: 'goal', label: 'Goal', text: goalBody });
+
+  for (const p of referencePaths) {
+    sections.push({ kind: 'reference', label: 'Reference', text: `Reference: ${singleLine(p)}`, source: p });
+  }
+
+  // Same join rule as epicIntake.ts's joinSections: '\n\n' everywhere except
+  // between two consecutive reference lines, which stay one visual block.
+  const openingPrompt = sections.reduce((out, s, i) => {
+    if (i === 0) return s.text;
+    const sep = s.kind === 'reference' && sections[i - 1].kind === 'reference' ? '\n' : '\n\n';
+    return out + sep + s.text;
+  }, '');
+
+  const bodyText = trimmedTitle ? `${trimmedTitle}\n\n${trimmedBody}` : trimmedBody;
+  const refLines = referencePaths.map((p) => `Reference: ${singleLine(p)}`);
+  const goalText = refLines.length ? `${bodyText}\n\n${refLines.join('\n')}` : bodyText;
+
+  return { goalText, openingPrompt, sections };
+}
+
+/**
+ * validateFeedbackInput(input) → { ok: true, value } | { ok: false, status, error }
+ *
+ * Pure apart from filesystem existence checks. Split out from
+ * openFeedbackSession so every refusal is unit-testable without minting
+ * anything.
+ */
+function validateFeedbackInput(input = {}) {
+  const bad = (status, error) => ({ ok: false, status, error });
+
+  const title = singleLine(input.title);
+  if (!title) return bad(400, 'title is required');
+  if (title.length > MAX_TITLE_CHARS) {
+    return bad(400, `title is ${title.length} chars; cap is ${MAX_TITLE_CHARS}`);
+  }
+
+  const body = String(input.body ?? '').trim();
+  if (!body) return bad(400, 'body is required — the feedback report itself');
+  if (body.length > MAX_BODY_CHARS) {
+    return bad(400, `body is ${body.length} chars; cap is ${MAX_BODY_CHARS}. Summarize, and attach detail as a reference path.`);
+  }
+
+  const tag = input.tag ?? DEFAULT_FEEDBACK_TAG;
+  if (!FEEDBACK_TAGS.includes(tag)) {
+    return bad(400, `tag must be one of ${FEEDBACK_TAGS.join(' | ')} (got ${JSON.stringify(tag)})`);
+  }
+
+  const referencePaths = Array.isArray(input.referencePaths) ? input.referencePaths : [];
+  if (referencePaths.length > MAX_REFERENCES) {
+    return bad(400, `too many referencePaths (${referencePaths.length}); cap is ${MAX_REFERENCES}`);
+  }
+
+  if (!input.toCwd || typeof input.toCwd !== 'string') return bad(400, 'toCwd is required');
+  if (!input.fromCwd || typeof input.fromCwd !== 'string') return bad(400, 'fromCwd is required');
+
+  let toCwd;
+  let fromCwd;
+  try {
+    toCwd = config.validatePath(path.resolve(input.toCwd));
+  } catch (e) {
+    return bad(400, `toCwd rejected: ${e.message}`);
+  }
+  try {
+    fromCwd = config.validatePath(path.resolve(input.fromCwd));
+  } catch (e) {
+    return bad(400, `fromCwd rejected: ${e.message}`);
+  }
+
+  if (!isDirectory(toCwd)) return bad(400, `toCwd is not an existing directory: ${toCwd}`);
+  if (!isDirectory(fromCwd)) return bad(400, `fromCwd is not an existing directory: ${fromCwd}`);
+
+  if (toCwd === fromCwd) {
+    return bad(
+      400,
+      'toCwd and fromCwd are the same project — this tool is only for handing a finding to a DIFFERENT '
+      + 'project. Work you want done in the project you are already in goes through /develop inside the '
+      + 'Epic you are already in, which is what replaced the retired feedback folder.',
+    );
+  }
+
+  if (!isSessionManagerProject(toCwd)) {
+    return bad(
+      400,
+      `${toCwd} is not a Session Manager project — it has no ${OPS_ROOT_DIR}/ directory, so it has no `
+      + 'Sessions queue to deliver a proposal into. Open it as a project in Session Manager once (which '
+      + 'creates that directory), then send the feedback again.',
+    );
+  }
+
+  return {
+    ok: true,
+    value: {
+      toCwd,
+      fromCwd,
+      title,
+      body,
+      tag,
+      referencePaths: referencePaths.map((p) => String(p)),
+      fromEpicId: input.fromEpicId ? String(input.fromEpicId) : null,
+      agentType: input.agentType ? String(input.agentType) : DEFAULT_FEEDBACK_AGENT,
+      agentDescription: input.agentDescription ? String(input.agentDescription) : null,
+    },
+  };
+}
+
+/**
+ * openFeedbackSession(input, deps?) → { ok, status?, error?, epicId, toCwd, ... }
+ *
+ * Mints the `proposed` Epic in the RECEIVING project and, when the sending
+ * Epic is known and still active, chains a receipt onto its event chain so the
+ * sender's own transcript records where the finding went. The receipt is
+ * best-effort: a failure there never invalidates a delivered proposal, it just
+ * reports `receiptOnOriginEpic: false`.
+ *
+ * `deps` exists so tests can inject the two side-effecting collaborators
+ * without an Electron/main-process boot.
+ */
+async function openFeedbackSession(input, deps = {}) {
+  const mint = deps.ensureEpic || ensureEpic;
+  const appendReceipt =
+    deps.appendResponseEventIfKnown
+    // Required lazily: promptSessionEvents.cjs pulls in config.cjs's watcher
+    // machinery, and this module is also required from unit tests that never
+    // boot the main process.
+    || ((...args) => require('../promptSessionEvents.cjs').appendResponseEventIfKnown(...args));
+
+  const checked = validateFeedbackInput(input);
+  if (!checked.ok) return checked;
+  const v = checked.value;
+
+  // The MCP client can't know its own Epic id — it only inherits the claude
+  // session id chatRunner.cjs stamps on the `claude -p` child. Resolve it
+  // through prdCreate.cjs's existing resolver rather than a second copy of
+  // the same lookup (required lazily: prdCreate pulls in ipcSchemas/config).
+  if (!v.fromEpicId && input.originClaudeSessionId) {
+    try {
+      const { resolveSourcePromptIdFromClaudeSession } = require('./prdCreate.cjs');
+      v.fromEpicId = resolveSourcePromptIdFromClaudeSession(v.fromCwd, String(input.originClaudeSessionId)) || null;
+    } catch { /* unresolvable — the proposal still delivers, just without a receipt */ }
+  }
+
+  const { goalText, openingPrompt, sections } = composeFeedbackIntake({
+    fromCwd: v.fromCwd,
+    fromEpicId: v.fromEpicId,
+    title: v.title,
+    body: v.body,
+    agentName: v.agentType,
+    agentDescription: v.agentDescription,
+    referencePaths: v.referencePaths,
+  });
+
+  // The Epic's stored identity is the one-line title, not the whole report —
+  // that's what the receiving queue row shows. The report travels in
+  // openingPrompt, which is what Approve & start sends.
+  let minted;
+  try {
+    minted = await mint(v.toCwd, {
+      goalText: v.title,
+      tag: v.tag,
+      agentType: v.agentType,
+      status: 'proposed',
+      openingPrompt,
+      sections,
+      source: {
+        producer: 'cross-project-feedback',
+        fromCwd: v.fromCwd,
+        ...(v.fromEpicId ? { fromEpicId: v.fromEpicId } : {}),
+      },
+      mintAuthority: MINT_AUTHORITY_CROSS_PROJECT_FEEDBACK,
+    });
+  } catch (e) {
+    return { ok: false, status: 500, error: `could not open the feedback session: ${e.message}` };
+  }
+
+  appendAuditEvent('epic_cross_project_feedback', {
+    cwd: v.toCwd,
+    epicId: minted.epicId,
+    fromCwd: v.fromCwd,
+    fromEpicId: v.fromEpicId,
+    tag: v.tag,
+    title: v.title,
+  });
+
+  let receiptOnOriginEpic = false;
+  if (v.fromEpicId) {
+    try {
+      receiptOnOriginEpic = await appendReceipt(
+        v.fromCwd,
+        v.fromEpicId,
+        `Feedback delivered to ${v.toCwd} as a proposed session (${minted.epicId}): "${v.title}". `
+        + 'It will not run until a human in that project approves it.',
+      );
+    } catch {
+      receiptOnOriginEpic = false;
+    }
+  }
+
+  return {
+    ok: true,
+    epicId: minted.epicId,
+    toCwd: v.toCwd,
+    fromCwd: v.fromCwd,
+    tag: v.tag,
+    status: 'proposed',
+    receiptOnOriginEpic,
+    // Say plainly what did NOT happen, same posture as create-prd's
+    // `enqueued: false` — never let a caller report this as "work started".
+    note:
+      'Delivered as a PROPOSED session in the receiving project\'s Sessions queue. Nothing runs and no '
+      + 'tokens are spent until a human in that project presses Approve & start. There is no callback: '
+      + 'if you need an answer, ask the human to follow up.',
+    goalText,
+  };
+}
+
+/**
+ * listFeedbackTargets() → { projects: [{ cwd, lastActivity }], scanned, truncated }
+ *
+ * Which projects can receive feedback. Resolved the same way CLAUDE.md
+ * requires everywhere else: a PROJECT IS A CWD, resolved from transcript
+ * CONTENT, never by naively decoding a `~/.claude/projects/` folder name back
+ * into a path. A folder whose cwd cannot be resolved is DROPPED, not guessed.
+ * Results are then filtered to directories that still exist AND already carry
+ * an operations root — exactly `openFeedbackSession`'s own precondition, so
+ * this list can't offer a target that would then be refused.
+ */
+async function listFeedbackTargets({ limit = TARGET_SCAN_LIMIT, projectsDir } = {}) {
+  const root = resolveProjectsDir(projectsDir);
+  let entries;
+  try {
+    entries = await fsp.readdir(root, { withFileTypes: true });
+  } catch {
+    return { projects: [], scanned: 0, truncated: 0 };
+  }
+  const dirs = entries.filter((e) => e.isDirectory());
+
+  // Newest-first by folder mtime, so the cap keeps the projects actually in
+  // use rather than an arbitrary alphabetical slice.
+  const stamped = [];
+  for (const d of dirs) {
+    const full = path.join(root, d.name);
+    try {
+      stamped.push({ full, mtimeMs: (await fsp.stat(full)).mtimeMs });
+    } catch { /* raced away */ }
+  }
+  stamped.sort((a, b) => b.mtimeMs - a.mtimeMs);
+  const scanned = stamped.slice(0, limit);
+
+  const byCwd = new Map();
+  for (const { full, mtimeMs } of scanned) {
+    const cwd = await resolveCwdFromTranscriptDir(full);
+    if (!cwd) continue;
+    const prior = byCwd.get(cwd);
+    if (!prior || prior.lastActivity < mtimeMs) byCwd.set(cwd, { cwd, lastActivity: mtimeMs });
+  }
+
+  const projects = [...byCwd.values()]
+    .filter((p) => isDirectory(p.cwd) && isSessionManagerProject(p.cwd))
+    .sort((a, b) => b.lastActivity - a.lastActivity)
+    .map((p) => ({ cwd: p.cwd, lastActivity: new Date(p.lastActivity).toISOString() }));
+
+  return { projects, scanned: scanned.length, truncated: Math.max(0, stamped.length - scanned.length) };
+}
+
+/** Read the `cwd` field off the first JSON line of the newest .jsonl in a
+ *  `~/.claude/projects/<encoded>/` folder. Returns null when the folder holds
+ *  no transcript or no line carries a cwd — the caller drops it rather than
+ *  falling back to decoding the folder name. */
+async function resolveCwdFromTranscriptDir(dir) {
+  let files;
+  try {
+    files = (await fsp.readdir(dir)).filter((f) => f.endsWith('.jsonl'));
+  } catch {
+    return null;
+  }
+  if (!files.length) return null;
+  const stamped = [];
+  for (const f of files) {
+    try {
+      stamped.push({ f, mtimeMs: (await fsp.stat(path.join(dir, f))).mtimeMs });
+    } catch { /* raced away */ }
+  }
+  stamped.sort((a, b) => b.mtimeMs - a.mtimeMs);
+  for (const { f } of stamped.slice(0, 3)) {
+    try {
+      // Transcripts can be large; only the head is needed — the cwd is
+      // stamped on the very first records.
+      const handle = await fsp.open(path.join(dir, f), 'r');
+      try {
+        const buf = Buffer.alloc(64 * 1024);
+        const { bytesRead } = await handle.read(buf, 0, buf.length, 0);
+        const head = buf.subarray(0, bytesRead).toString('utf8');
+        for (const line of head.split('\n')) {
+          if (!line.trim()) continue;
+          try {
+            const parsed = JSON.parse(line);
+            if (parsed && typeof parsed.cwd === 'string' && parsed.cwd) return path.resolve(parsed.cwd);
+          } catch { /* partial trailing line */ }
+        }
+      } finally {
+        await handle.close();
+      }
+    } catch { /* unreadable */ }
+  }
+  return null;
+}
+
+/** Registers both routes on the injected loopback admin transport. Mirrors
+ *  prdCreate.cjs's registerAdminRoute — auth is the transport's job. */
+function registerAdminRoute(adminHttp) {
+  adminHttp.registerRoute('POST', '/admin/feedback/open-session', async (req, res) => {
+    const raw = await readBody(req);
+    let parsed;
+    try {
+      parsed = raw ? JSON.parse(raw) : {};
+    } catch {
+      sendJson(res, 400, { ok: false, error: 'invalid JSON body' });
+      return;
+    }
+    const result = await openFeedbackSession(parsed);
+    if (!result.ok) {
+      sendJson(res, result.status ?? 400, { ok: false, error: result.error });
+      return;
+    }
+    sendJson(res, 200, result);
+  });
+
+  adminHttp.registerRoute('GET', '/admin/feedback/targets', async (req, res, query) => {
+    // `projectsDir` is a test seam only — production callers never pass it,
+    // and it can only narrow WHICH transcript folders are scanned, never
+    // where a feedback session may be written (that stays governed by
+    // openFeedbackSession's own validatePath + ops-root checks).
+    const projectsDir = query?.get('projectsDir') || undefined;
+    const result = await listFeedbackTargets({ projectsDir });
+    sendJson(res, 200, { ok: true, ...result });
+  });
+}
+
+module.exports = {
+  FEEDBACK_TAGS,
+  DEFAULT_FEEDBACK_TAG,
+  DEFAULT_FEEDBACK_AGENT,
+  MAX_TITLE_CHARS,
+  MAX_BODY_CHARS,
+  MAX_REFERENCES,
+  PROJECTS_DIR,
+  resolveProjectsDir,
+  isSessionManagerProject,
+  composeFeedbackIntake,
+  validateFeedbackInput,
+  openFeedbackSession,
+  listFeedbackTargets,
+  registerAdminRoute,
+};

package/src/main/lib/epicMint.cjs

@@ -45,6 +45,33 @@ const promptSessionSchema = require('./promptSessionSchema.cjs');
 // deliberate domain-model change, not a convenience.
 const MINT_AUTHORITY_NEW_EPIC_UI = 'new-epic-ui';
 
+// The SECOND (and only other) mint authority — a deliberate domain-model
+// change, argued for here rather than discovered later.
+//
+// PROJECT-TO-PROJECT FEEDBACK. With `/process-feedback`, `/my-feedback` and
+// the `feedback/` folder retired (2026-08-02) and the scheduler correctly
+// locked down to join-only, an agent working in Project-A had NO way to hand
+// a finding to Project-B — the finding either died in a transcript or the
+// human had to relay it by hand. `lib/crossProjectFeedback.cjs` restores that
+// conduit, and it is the sole holder of this token.
+//
+// What makes it safe is the part of the SINGLE-CREATOR LAW that actually
+// guards spend: every Epic is born 'proposed', and NOTHING runs until a human
+// in the RECEIVING project presses "Approve & start". This authority cannot
+// change that — the BORN-PROPOSED check below still applies to it verbatim,
+// and `crossProjectFeedback.cjs` additionally pins tag/source before minting.
+// So this is not a re-opening of the agent-facing proposal channel that was
+// removed: an agent may deposit a proposal into another project's inbox, and
+// that is all it may do. The removed channel let an agent file work into the
+// project it was already running in, which is what /develop-inside-your-own-
+// Epic replaced and which stays refused.
+const MINT_AUTHORITY_CROSS_PROJECT_FEEDBACK = 'cross-project-feedback';
+
+const MINT_AUTHORITIES = Object.freeze([
+  MINT_AUTHORITY_NEW_EPIC_UI,
+  MINT_AUTHORITY_CROSS_PROJECT_FEEDBACK,
+]);
+
 function activeIndexPath(cwd) {
   return path.join(cwd, 'session-manager-operations', 'prompt-sessions', 'active-index.json');
 }
@@ -175,13 +202,15 @@ function ensureEpic(cwd, { goalText, tag, epicId: explicitEpicId, status = 'prop
       });
     }
 
-    // SINGLE-CREATOR LAW (see this file's header). Only the New Epic UI may
-    // mint; every other caller reaching this line was trying to JOIN an Epic
-    // that isn't there, which is a bug in the caller, not a cue to create one.
-    if (mintAuthority !== MINT_AUTHORITY_NEW_EPIC_UI) {
-      const reason = 'no open Epic to join — an Epic is created in exactly one place, the New Epic UI '
-        + '(mintAuthority). Agents that are sure the work is needed run /develop inside the Epic they are '
-        + 'already in; a PRD-authoring path may never conjure one';
+    // SINGLE-CREATOR LAW (see this file's header). Only the New Epic UI —
+    // or, for an inbound cross-project feedback proposal, lib/
+    // crossProjectFeedback.cjs — may mint; every other caller reaching this
+    // line was trying to JOIN an Epic that isn't there, which is a bug in the
+    // caller, not a cue to create one.
+    if (!MINT_AUTHORITIES.includes(mintAuthority)) {
+      const reason = 'no open Epic to join — an Epic is created in exactly two places, the New Epic UI and an '
+        + 'inbound cross-project feedback proposal (mintAuthority). Agents that are sure the work is needed run '
+        + '/develop inside the Epic they are already in; a PRD-authoring path may never conjure one';
       appendAuditEvent('epic_mint_refused', { cwd, epicId: explicitEpicId ?? null, status, reason });
       throw new Error(`ensureEpic: ${reason} (epicId=${explicitEpicId ?? 'none'})`);
     }
@@ -323,6 +352,8 @@ function removeEpic(cwd, epicId) {
 module.exports = {
   ensureEpic,
   MINT_AUTHORITY_NEW_EPIC_UI,
+  MINT_AUTHORITY_CROSS_PROJECT_FEEDBACK,
+  MINT_AUTHORITIES,
   appendPrdCreatedEvent,
   removeEpic,
   activeIndexPath,

package/src/main/lib/promptSessionSchema.cjs

@@ -32,10 +32,16 @@ const EpicTagSchema = z.enum([
 
 // Mirrors EpicSource (src/renderer/state/promptSessions.ts:22-27).
 const EpicSourceSchema = z.object({
-  producer: z.enum(['new-epic-ui', 'scheduler-dispatch']),
+  producer: z.enum(['new-epic-ui', 'scheduler-dispatch', 'cross-project-feedback']),
   prdSlug: z.string().optional(),
   runId: z.string().optional(),
   sourceTabId: z.string().optional(),
+  // Cross-project provenance ('cross-project-feedback' only): which project,
+  // and which Epic inside it, sent this proposal. Kept on the Epic itself so
+  // the receiving human can see who is asking without a second lookup table —
+  // there is no cross-project registry anywhere else.
+  fromCwd: z.string().optional(),
+  fromEpicId: z.string().optional(),
 });
 
 // Mirrors EpicIntakeSection (src/renderer/lib/epicIntake.ts) — the labeled

package/dist/assets/AgentLibrary-D1SHQWCQ.js

@@ -1,3 +0,0 @@
-import{K as e,p as U,Y as m,d as B,b as D,a5 as b,a2 as V,T as X,a4 as Z,ab as ee,A as R}from"./index-Ceid3k5X.js";import{P as te}from"./Panel-CVgA2-Y3.js";import{L as ne}from"./ListDetail-CVIhWPWb.js";import"./monaco-editor-BW5C4Iv1.js";function y({children:t,onClick:o,disabled:x,variant:g="default",tooltip:i,type:f="button",className:u}){const v=`px-2 py-0.5 text-xs rounded border transition-colors disabled:opacity-40 disabled:cursor-not-allowed ${g==="primary"?"text-accent border-accent/50 hover:bg-bg-hi":g==="danger"?"text-red-400 hover:text-red-300 border-line hover:border-red-400/50":"text-fg-dim border-line hover:text-fg hover:bg-bg-hi"} ${u??""}`,a=e.jsx("button",{type:f,title:i,onClick:o,disabled:x,className:v,children:t});return i?e.jsx(U,{content:i,align:"bottom-center",children:a}):a}const ae=["inherit","haiku","sonnet","opus"],I=["Read","Grep","Glob","Bash","Write","Edit","WebFetch","WebSearch","Task"],se=["","red","orange","yellow","green","cyan","blue","purple","pink"],G={red:"#c0392b",orange:"#b85c34",yellow:"#c9a227",green:"#6f7d52",cyan:"#3f8f8a",blue:"#4a6fa5",purple:"#7a6a8a",pink:"#b45a80"};function T(t){return{name:t.name,description:t.description??"",tools:t.tools,model:t.model??"inherit",color:t.color??"",tags:t.tags,projects:t.projects??[],action:t.action??"",actionLabel:t.actionLabel??"",body:t.body}}const z={name:"new-agent",description:"",tools:["Read","Grep"],model:"inherit",color:"",tags:[],projects:[],action:"",actionLabel:"",body:""};function re(){const[t,o]=m.useState(null),[x,g]=m.useState(null),[i,f]=m.useState(""),[u,c]=m.useState(null),[v,a]=m.useState(!1),[j,N]=m.useState(!1),[O,C]=m.useState(null),[k,s]=m.useState(!1),w=m.useRef(!0);m.useEffect(()=>()=>{w.current=!1},[]);const p=async n=>{try{const d=await window.api.agents.listPersonas();if(!w.current)return;o(d),g(L=>{var P;return n??L??((P=d[0])==null?void 0:P.name)??null})}catch(d){if(!w.current)return;o([]),b.error(d.message||"failed to load agent personas")}};if(m.useEffect(()=>{p()},[]),m.useEffect(()=>window.api.agents.onChanged(()=>p()),[]),m.useEffect(()=>{const n=V();n&&g(n);const d=L=>g(L.detail);return window.addEventListener("sm:select-persona",d),()=>window.removeEventListener("sm:select-persona",d)},[]),t===null)return e.jsx(B,{title:"loading…"});const $=i.toLowerCase(),E=t.filter(n=>!$||n.name.toLowerCase().includes($)||(n.description??"").toLowerCase().includes($)),l=t.find(n=>n.name===x)??t[0]??null,r=u??(l?T(l):null),F=!!u&&!!l&&JSON.stringify(u)!==JSON.stringify(T(l)),S=v,K=n=>{c(null),a(!1),N(!1),C(null),g(n)},M=n=>c(d=>({...d??(l?T(l):z),...n})),W=()=>{c({...z}),a(!0),N(!1)},_=()=>{r&&(c({...r,name:r.name+"-copy"}),a(!0))},J=()=>{c(null),a(!1)},Y=async()=>{if(r){if(!/^[a-z][a-z0-9-]*$/.test(r.name)){b.error('agent name must be lowercase, hyphenated (e.g. "my-agent")');return}s(!0);try{const n={name:r.name,originalName:S||l==null?void 0:l.name,description:r.description,tools:r.tools,model:r.model,color:r.color,tags:r.tags,projects:r.projects,action:r.action,actionLabel:r.actionLabel,body:r.body};await window.api.agents.savePersona(n),b.info(S?`created ${r.name}`:`saved ${r.name}`),c(null),a(!1),await p(r.name)}catch(n){b.error(n.message||"failed to save agent persona")}finally{s(!1)}}},H=async()=>{if(l){s(!0);try{await window.api.agents.deletePersona({name:l.name}),b.info(`deleted ${l.name}`),N(!1),c(null),a(!1),await p()}catch(n){b.error(n.message||"failed to delete agent persona")}finally{s(!1)}}},q=async n=>{s(!0);try{await window.api.agents.deletePersona({name:n}),b.info(`deleted ${n}`),C(null),x===n&&(c(null),a(!1)),await p()}catch(d){b.error(d.message||"failed to delete agent persona")}finally{s(!1)}},Q=async n=>{if(l)try{await window.api.agents.removeOverride({name:l.name,projectName:n}),b.info(`removed ${n}'s override of ${l.name}`),await p(l.name)}catch(d){b.error(d.message||"failed to remove override")}};return e.jsx(te,{toolbar:e.jsxs(e.Fragment,{children:[e.jsxs("span",{className:"text-fg-faint",children:[t.length," persona",t.length===1?"":"s"]}),e.jsx("input",{value:i,onChange:n=>f(n.target.value),placeholder:"filter…",className:"bg-bg border border-line rounded px-2 py-0.5 text-xs text-fg w-40"}),e.jsx("div",{className:"flex-1"}),e.jsx(y,{variant:"primary",onClick:W,children:"+ New agent"})]}),children:e.jsx(ne,{sidebar:e.jsxs("div",{className:"py-1",children:[S&&e.jsx("div",{className:"w-full text-left px-3 py-1 text-xs flex flex-col gap-0.5 bg-bg-hi text-fg border-l-2 border-accent",children:e.jsxs("span",{className:"flex items-center gap-2 justify-between w-full",children:[e.jsx("span",{className:"truncate font-mono",children:r==null?void 0:r.name}),e.jsx("span",{className:"shrink-0 text-[10px] font-semibold text-accent",children:"new"})]})}),E.length===0&&!S?e.jsx("div",{className:"px-3 py-1 text-xs text-fg-faint italic",children:"no agent personas found"}):E.map(n=>{const d=!S&&n.name===x,L=d&&F,P=O===n.name;return e.jsxs("div",{"data-agent-row":n.name,className:`group w-full text-left px-3 py-1 text-xs flex flex-col gap-0.5 border-l-2 cursor-pointer ${d?"bg-bg-hi text-fg border-accent":"text-fg-dim hover:text-fg hover:bg-bg-hi border-transparent"}`,onClick:()=>K(n.name),children:[e.jsxs("span",{className:"flex items-center gap-2 justify-between w-full",children:[e.jsxs("span",{className:"flex items-center gap-1.5 min-w-0",children:[e.jsx("span",{className:"w-2 h-2 rounded-sm shrink-0",style:{background:n.color?G[n.color]??n.color:"var(--fg-faint, #999)",opacity:n.color?1:.35}}),e.jsx("span",{className:"truncate font-mono",children:n.name})]}),e.jsxs("span",{className:"shrink-0 flex items-center gap-1.5",children:[L&&e.jsx("span",{className:"text-[10px] font-semibold text-accent",children:"unsaved"}),!L&&n.overridingProjects.length>0&&e.jsxs(D,{tone:"dim",children:[n.overridingProjects.length," override",n.overridingProjects.length>1?"s":""]}),P?e.jsxs("span",{className:"flex items-center gap-1",onClick:A=>A.stopPropagation(),children:[e.jsx("button",{onClick:()=>q(n.name),disabled:k,title:`Delete ${n.name}`,className:"text-[10px] font-semibold text-red-400 hover:text-red-300",children:"confirm"}),e.jsx("button",{onClick:()=>C(null),title:"Cancel",className:"text-[10px] text-fg-faint hover:text-fg",children:"cancel"})]}):e.jsx("button",{onClick:A=>{A.stopPropagation(),C(n.name)},title:`Delete ${n.name}`,className:"opacity-0 group-hover:opacity-100 text-fg-faint hover:text-red-400 transition-opacity",children:"×"})]})]}),n.description&&e.jsx("span",{className:"truncate text-fg-faint",children:n.description})]},n.name)})]}),detail:r?e.jsx(oe,{obj:r,set:M,saved:l,dirty:F,isNew:S,busy:k,confirmDelete:j,setConfirmDelete:N,onDuplicate:_,onRevert:J,onSave:Y,onDelete:H,onDropOverride:Q}):e.jsx(B,{title:"select an agent"})})})}const fe=m.memo(re);function oe({obj:t,set:o,saved:x,dirty:g,isNew:i,busy:f,confirmDelete:u,setConfirmDelete:c,onDuplicate:v,onRevert:a,onSave:j,onDelete:N,onDropOverride:O}){const C=`~/.claude/agents/${t.name}.md`,k=g||i;return e.jsxs("div",{className:"max-w-3xl",children:[e.jsxs("div",{className:"px-4 py-3 border-b border-line flex items-center gap-2 flex-wrap",children:[e.jsx("span",{className:"text-sm font-semibold text-fg font-mono",children:t.name}),i?e.jsx(D,{tone:"accent",children:"unsaved draft"}):g?e.jsx(D,{tone:"warn",children:"edited"}):e.jsx(D,{tone:"good",children:"saved"}),e.jsx("span",{className:"ml-auto text-[11px] text-fg-faint font-mono",children:C})]}),e.jsxs("div",{className:"p-4 space-y-4",children:[e.jsx(h,{label:"name",hint:"Filename on disk — lowercase, hyphenated.",children:e.jsx("input",{value:t.name,onChange:s=>o({name:s.target.value.toLowerCase()}),className:"w-full bg-bg border border-line rounded px-2 py-1 text-xs text-fg font-mono"})}),e.jsx(h,{label:"description",hint:"Shown in the list and in agent pickers.",children:e.jsx("input",{value:t.description,onChange:s=>o({description:s.target.value}),className:"w-full bg-bg border border-line rounded px-2 py-1 text-xs text-fg"})}),e.jsx(h,{label:"default model",hint:"This persona's default model for its Epics — sets the --model an Epic launches with (Terminal + Chat both honor it). 'inherit' falls back to each view's own default, not this Settings page. Cheap models for read-only personas; opus for judgement calls.",children:e.jsx(le,{options:ae,value:t.model,onChange:s=>o({model:s}),mono:!0})}),e.jsx(h,{label:"tools",hint:`${t.tools.length} of ${I.length} granted. Anything not ticked is refused at call time.`,children:e.jsx("div",{className:"flex flex-wrap gap-1.5",children:I.map(s=>{const w=t.tools.includes(s);return e.jsx("button",{onClick:()=>o({tools:w?t.tools.filter(p=>p!==s):[...t.tools,s]}),className:`px-2 py-0.5 rounded-full text-[11px] font-mono border ${w?"bg-sage/15 text-sage-dark border-sage/30":"bg-bg-hi text-fg-faint border-line"}`,children:s},s)})})}),e.jsx(h,{label:"color",children:e.jsx("div",{className:"flex gap-1.5",children:se.map(s=>e.jsx("button",{title:s||"none",onClick:()=>o({color:s}),className:"w-5 h-5 rounded",style:{background:s?G[s]:"transparent",border:t.color===s?"2px solid var(--accent, #b85c34)":"1px solid var(--line, #555)"}},s||"none"))})}),e.jsx(h,{label:"tags",hint:"Session mission tags this persona is associated with — shown as the default agent on that tag's own page. The first one (in Tag Library order) is the MISSION an Action button's session opens with.",children:e.jsx("div",{className:"flex flex-wrap gap-1.5",children:X.map(s=>{const w=t.tags.includes(s.tag),p=Z(s.tag);return e.jsxs("button",{onClick:()=>o({tags:w?t.tags.filter($=>$!==s.tag):[...t.tags,s.tag]}),className:`px-2 py-0.5 rounded-full text-[11px] font-mono border ${w?`${p.bg} ${p.text} ${p.border?"border-current/30":"border-transparent"}`:"bg-bg-hi text-fg-faint border-line"}`,children:["#",s.tag]},s.tag)})})}),e.jsx(ie,{obj:t,set:o}),e.jsx(h,{label:"definition",hint:"The system prompt this persona runs under.",children:e.jsx("textarea",{rows:9,value:t.body,onChange:s=>o({body:s.target.value}),className:"w-full bg-bg border border-line rounded px-2 py-1.5 text-xs text-fg font-mono leading-relaxed resize-y"})}),e.jsx(h,{label:"project overrides",hint:"Open projects that shadow this definition with a local copy.",children:x&&x.overridingProjects.length>0?e.jsx("div",{className:"flex flex-wrap gap-1.5",children:x.overridingProjects.map(s=>e.jsxs("span",{className:"inline-flex items-center gap-1.5 bg-bg-elev border border-line rounded px-2 py-0.5 text-[11px] font-mono text-fg-dim",children:[s,e.jsx("button",{onClick:()=>O(s),title:"Drop the local copy",className:"text-fg-faint hover:text-fg",children:"×"})]},s))}):e.jsx("div",{className:"text-xs text-fg-faint italic",children:i?"save first to see project overrides.":"no open project overlays this agent — the global definition applies everywhere."})})]}),e.jsx("div",{className:"px-4 py-2.5 border-t border-line flex items-center gap-2 flex-wrap",children:u?e.jsxs(e.Fragment,{children:[e.jsxs("span",{className:"text-xs text-fg-dim",children:["Delete ",e.jsx("strong",{className:"font-mono",children:t.name})," and its file?"]}),e.jsx(y,{variant:"danger",onClick:N,disabled:f,children:"Delete"}),e.jsx(y,{onClick:()=>c(!1),children:"Keep"})]}):e.jsxs(e.Fragment,{children:[e.jsx(y,{onClick:v,disabled:f,children:"Duplicate"}),!i&&e.jsx(y,{variant:"danger",onClick:()=>c(!0),disabled:f,children:"Delete"}),e.jsx("div",{className:"flex-1"}),k&&e.jsx("span",{className:"text-[11px] text-fg-faint",children:"unsaved changes"}),e.jsx(y,{onClick:a,disabled:!k||f,children:"Revert"}),e.jsx(y,{variant:"primary",onClick:j,disabled:!k||f,children:f?"Saving…":i?"Create":"Save"})]})})]})}function ie({obj:t,set:o}){const{projects:x}=ee(),g=x.map(a=>({cwd:a.cwd,name:a.name})),i=new Set(g.map(a=>a.cwd)),f=t.projects.filter(a=>a!==R&&!i.has(a)),u=t.projects.includes(R),c=a=>o({projects:t.projects.includes(a)?t.projects.filter(j=>j!==a):[...t.projects,a]}),v=t.projects.length>0;return e.jsxs(e.Fragment,{children:[e.jsx(h,{label:"action — appears in",hint:"Projects whose Sessions toolbar gets a one-click button for this agent. Pressing it starts a normal session: this persona is the ACTOR, its first tag is the MISSION, and the action text below is the opening goal. Leave empty for an agent that is only picked by hand in the New Session card.",children:e.jsxs("div",{className:"flex flex-wrap gap-1.5",children:[e.jsx("button",{onClick:()=>c(R),className:`px-2 py-0.5 rounded-full text-[11px] font-mono border ${u?"bg-accent/15 text-accent border-accent/40 font-semibold":"bg-bg-hi text-fg-faint border-line"}`,children:"every project"}),g.map(a=>{const j=t.projects.includes(a.cwd);return e.jsx("button",{title:a.cwd,onClick:()=>c(a.cwd),className:`px-2 py-0.5 rounded-full text-[11px] font-mono border ${j?"bg-sage/15 text-sage-dark border-sage/30":"bg-bg-hi text-fg-faint border-line"} ${u&&!j?"opacity-40":""}`,children:a.name},a.cwd)}),f.map(a=>e.jsxs("button",{title:`${a} — not a known project on this machine`,onClick:()=>c(a),className:"px-2 py-0.5 rounded-full text-[11px] font-mono border bg-bg-hi text-fg-faint border-dashed border-line",children:[a," ×"]},a))]})}),v&&e.jsxs(e.Fragment,{children:[e.jsx(h,{label:"action — button label",hint:"Caption on the Sessions toolbar button. Defaults to the agent name.",children:e.jsx("input",{value:t.actionLabel,onChange:a=>o({actionLabel:a.target.value}),placeholder:t.name,className:"w-full bg-bg border border-line rounded px-2 py-1 text-xs text-fg"})}),e.jsx(h,{label:"action — opening instruction",hint:"Sent as the session's first message, under the AIM framing. Falls back to this persona's description when empty; with neither, no button is shown.",children:e.jsx("textarea",{rows:3,value:t.action,onChange:a=>o({action:a.target.value}),placeholder:t.description||`e.g. /builder
-
-Check git vs the published package and publish anything new.`,className:"w-full bg-bg border border-line rounded px-2 py-1.5 text-xs text-fg font-mono leading-relaxed resize-y"})})]})]})}function h({label:t,hint:o,children:x}){return e.jsxs("div",{children:[e.jsx("div",{className:"text-[10.5px] font-semibold uppercase tracking-wide text-fg-faint mb-1.5 font-mono",children:t}),x,o&&e.jsx("div",{className:"text-[11px] text-fg-faint mt-1 leading-snug",children:o})]})}function le({options:t,value:o,onChange:x,mono:g}){return e.jsx("div",{className:"flex flex-wrap gap-1",children:t.map(i=>{const f=i===o;return e.jsx("button",{onClick:()=>x(i),className:`px-2.5 py-1 rounded text-xs border ${g?"font-mono":""} ${f?"bg-accent/15 text-accent border-accent/40 font-semibold":"bg-bg-hi text-fg-dim border-line"}`,children:i},i)})})}export{fe as AgentLibrary};