stage-launch

1# Phase 2 — Stage → Launch
2 
3Turn the build sheet into runnable artifacts, then let the founder launch with
4their own key. **No script here touches the network or the key** — the user runs
5`launch.sh`.
6 
7## Workflow
8 
91. **Generate payloads.**
10   ```bash
11   python3 scripts/payload_generator.py \
12     --sheet ./my-agent/build-sheet.json --out-dir ./my-agent
13   # -> ./my-agent/payloads/{01-environment,02-agent,03-session,04-kickoff}.json
14   ```
15   Agent toolset → `always_allow`; every MCP toolset → `always_ask` (baked into
16   the agent payload's `permission_policies`).
172. **Write the launch script.**
18   ```bash
19   python3 scripts/launch_script_writer.py --out-dir ./my-agent
20   ```
21   `launch.sh` creates environment → agent → session → kickoff **in order**,
22   chaining IDs, and **resumes** on re-run (each step skips if its `*.id` file
23   exists). It reads `$ANTHROPIC_API_KEY` at runtime.
243. **Validate before launch.**
25   ```bash
26   python3 scripts/payload_validator.py --dir ./my-agent
27   ```
28   FAIL blocks — especially a `key_leak` finding. Fix and re-run.
294. **Minimal key step (never in chat).** Check the shell first:
30   ```bash
31   [ -n "$ANTHROPIC_API_KEY" ] && echo "key present" || echo "export ANTHROPIC_API_KEY=... first"
32   ```
33   Point the founder to platform.claude.com → API keys. **Never print the key to
34   chat, never write it to a file.**
355. **Launch + watch the first poll.**
36   ```bash
37   export ANTHROPIC_API_KEY=...      # in their shell, not in chat
38…