@rubytech/create-maxy-code 0.1.0

package/payload/platform/plugins/memory/mcp/dist/tools/profile-update.js

@@ -0,0 +1,369 @@
+import { getSession } from "../lib/neo4j.js";
+import { embed } from "../lib/embeddings.js";
+import { randomUUID } from "node:crypto";
+import { notTrashed } from "../../../../../lib/graph-trash/dist/index.js";
+import { validateWrite } from "../lib/schema-validator.js";
+// Cross-process agreement: these values must match neo4j-store.ts
+const INITIAL_CONFIDENCE = 0.5;
+const REINFORCEMENT_INCREMENT = 0.15;
+const CONTRADICTION_DECREMENT = 0.3;
+const VALID_CATEGORIES = new Set([
+    "communication",
+    "scheduling",
+    "decision",
+    "workflow",
+    "content",
+    "interaction",
+]);
+const VALID_MODES = new Set(["reinforce", "update", "contradict", "merge"]);
+// Task 893 — system-managed Person properties that agent input must never
+// overwrite. Account-isolation (accountId, userId, scope) and write
+// provenance (createdAt, createdByAgent, createdBySession, updatedAt)
+// belong to the platform, not the agent. The Cypher MATCH pins the row
+// by accountId, but `SET p += $fields` would still overwrite that
+// property if accountId appears in the map — silently breaking account
+// isolation for any future read keyed on the property. Defence in depth.
+const PERSON_SYSTEM_MANAGED_PROPS = new Set([
+    "accountId",
+    "userId",
+    "scope",
+    "embedding",
+    "createdAt",
+    "updatedAt",
+    "createdByAgent",
+    "createdByTool",
+    "createdBySession",
+]);
+export async function profileUpdate(params) {
+    const { accountId, userId, category, key, value, source = "behavioural", mode = "reinforce", conversationId, profileFields, personFields, mergeSourceIds, notApplicable = false, validator, } = params;
+    if (!VALID_CATEGORIES.has(category)) {
+        throw new Error(`Invalid category "${category}". Must be one of: ${[...VALID_CATEGORIES].join(", ")}`);
+    }
+    if (!VALID_MODES.has(mode)) {
+        throw new Error(`Invalid mode "${mode}". Must be one of: ${[...VALID_MODES].join(", ")}`);
+    }
+    // Task 888 — notApplicable validation. Mutually exclusive with non-empty
+    // value; rejects mode merge|contradict (declination is immutable once
+    // set — the agent calls profile-delete if the user reverses themselves).
+    if (notApplicable === true) {
+        if (typeof value === "string" && value.trim().length > 0) {
+            throw new Error("profile-update: `notApplicable: true` is mutually exclusive with a non-empty `value` — a declination has no value to record.");
+        }
+        if (mode === "merge" || mode === "contradict") {
+            throw new Error(`profile-update: \`notApplicable: true\` rejects mode "${mode}" — declination is immutable once set. Call profile-delete to reverse.`);
+        }
+    }
+    else if (!value || value.trim().length === 0) {
+        throw new Error("Value is required and cannot be empty.");
+    }
+    if (mode === "merge" && (!mergeSourceIds || mergeSourceIds.length === 0)) {
+        throw new Error("mergeSourceIds required when mode is 'merge'.");
+    }
+    // Task 893 — synchronous personFields hygiene + schema validation. Runs
+    // here (before getSession()/embed()) so synonym/forbidden rejection
+    // throws without opening a Neo4j session or burning an Ollama call. The
+    // resulting `personSafeFields` map is reused below for the SET.
+    //
+    // Two layers of protection on the input:
+    //   1. Validator (synonyms + Forbidden Properties) — semantic enforcement.
+    //   2. System-managed-property strip — defends account-isolation and
+    //      provenance from LLM-driven tampering. Never accept agent input
+    //      that would overwrite accountId, userId, scope, or createdBy*
+    //      stamps on the Person; those are env- or system-managed.
+    //      Account isolation is doctrine (loud-fail rather than silent
+    //      cross-account write).
+    let personSafeFields = null;
+    if (personFields && Object.keys(personFields).length > 0) {
+        const filtered = {};
+        for (const [k, v] of Object.entries(personFields)) {
+            if (v === null || v === undefined)
+                continue;
+            if (typeof v === "string" && v.trim().length === 0)
+                continue;
+            if (PERSON_SYSTEM_MANAGED_PROPS.has(k)) {
+                throw new Error(`profile-update personFields: '${k}' is a system-managed Person property — refusing to accept agent input that would overwrite it. Account isolation and provenance stamps are set by the platform, not the agent.`);
+            }
+            filtered[k] = v;
+        }
+        if (Object.keys(filtered).length > 0) {
+            if (!validator) {
+                throw new Error("profile-update: `personFields` requires the schema validator — caller (MCP server) must pass `validator` from the env built at startup.");
+            }
+            // Throws on synonym (e.g. `phone`) or forbidden (`name`) keys.
+            validateWrite({ labels: ["Person"], properties: filtered, accountId }, validator, { mode: "update" });
+            personSafeFields = filtered;
+        }
+    }
+    const session = getSession();
+    const now = new Date().toISOString();
+    try {
+        // Compute embedding from preference text representation
+        const embeddingText = `${category}: ${key} — ${value}`;
+        let embedding = null;
+        try {
+            embedding = await embed(embeddingText);
+        }
+        catch {
+            // Preference will be written without embedding — searchable by
+            // property queries but not vector search until reindexed.
+        }
+        // Update top-level UserProfile fields if provided
+        if (profileFields && Object.keys(profileFields).length > 0) {
+            const restricted = new Set([
+                "accountId",
+                "userId",
+                "embedding",
+                "createdAt",
+                "profileVersion",
+            ]);
+            const safeFields = {};
+            for (const [k, v] of Object.entries(profileFields)) {
+                if (!restricted.has(k))
+                    safeFields[k] = v;
+            }
+            if (Object.keys(safeFields).length > 0) {
+                await session.run(`
+          MATCH (up:UserProfile {accountId: $accountId, userId: $userId})
+          SET up += $fields, up.updatedAt = $now
+          `, { accountId, userId, fields: safeFields, now });
+            }
+        }
+        // Task 893 — open Person properties for personal-profile elicitation.
+        // The closed `{ email?, telephone? }` literal from Task 886 §D is gone;
+        // hygiene + validator both ran synchronously above, so by here
+        // `personSafeFields` is either null (nothing to write) or a non-empty
+        // map of validator-accepted keys. Writes route via the OWNS edge.
+        // The RETURN count guard is mandatory: MATCH-SET against a missing
+        // Person silently no-ops (sprint-learning: neo4j-match-set-no-op).
+        if (personSafeFields !== null) {
+            const personUpdate = await session.run(`
+        MATCH (au:AdminUser {userId: $userId})-[:OWNS]->(p:Person {accountId: $accountId})
+        SET p += $fields, p.updatedAt = $now
+        RETURN count(p) AS affected, collect(elementId(p))[0] AS personElementId
+        `, { accountId, userId, fields: personSafeFields, now });
+            const affected = personUpdate.records[0]?.get("affected");
+            const affectedN = typeof affected === "number" ? affected : (affected?.toNumber?.() ?? 0);
+            if (affectedN !== 1) {
+                throw new Error(`profile-update personFields: AdminUser-OWNS-Person not found for userId=${userId} accountId=${accountId.slice(0, 8)}… (affected=${affectedN}). Personal-profile Person is created at PIN setup; if this fires the OWNS edge is missing and the operator-identity capture path is broken.`);
+            }
+            // One log line per Person property set in this call — generic over
+            // the open Record, not per-kind. Operators grep
+            // `[profile] identity-completed` to see what landed.
+            for (const fieldName of Object.keys(personSafeFields)) {
+                process.stderr.write(`[profile] identity-completed accountId=${accountId.slice(0, 8)}… field=${fieldName}\n`);
+            }
+        }
+        // Handle merge mode — combines multiple preferences into one
+        if (mode === "merge") {
+            return await executeMerge(session, accountId, userId, category, key, value, source, embedding, mergeSourceIds, now);
+        }
+        // Check if preference already exists for this account+category+key.
+        // Trashed preferences are skipped — a new live preference can be created
+        // while the trashed one awaits empty-trash, and memory-restore handles
+        // the unique-key conflict if the user restores the trashed one later.
+        const existingResult = await session.run(`
+      MATCH (up:UserProfile {accountId: $accountId, userId: $userId})-[:HAS_PREFERENCE]->(pref:Preference {category: $category, key: $key})
+      WHERE ${notTrashed("pref")}
+      RETURN pref.preferenceId AS preferenceId, pref.confidence AS confidence
+      `, { accountId, userId, category, key });
+        if (existingResult.records.length > 0) {
+            // Existing preference — apply mode
+            const existingId = existingResult.records[0].get("preferenceId");
+            const existingConfidence = existingResult.records[0].get("confidence");
+            let newConfidence;
+            let action;
+            // Task 888 — notApplicable bypasses the reinforcement curve and forces
+            // confidence: 1.0. The action label "updated" matches the existing
+            // contract for in-place writes (the agent doesn't need a new label
+            // for declination — the notApplicable flag carries the semantic).
+            if (notApplicable === true) {
+                newConfidence = 1.0;
+                action = "updated";
+            }
+            else {
+                switch (mode) {
+                    case "reinforce":
+                        // Converge toward 1.0: increment scaled by distance from max
+                        newConfidence = Math.min(1.0, existingConfidence + REINFORCEMENT_INCREMENT * (1.0 - existingConfidence));
+                        action = "reinforced";
+                        break;
+                    case "update":
+                        newConfidence = existingConfidence;
+                        action = "updated";
+                        break;
+                    case "contradict":
+                        newConfidence = Math.max(0.0, existingConfidence - CONTRADICTION_DECREMENT);
+                        action = "contradicted";
+                        break;
+                    default:
+                        newConfidence = existingConfidence;
+                        action = "updated";
+                }
+            }
+            const writeValue = notApplicable === true ? "" : value;
+            const updateProps = {
+                accountId,
+                preferenceId: existingId,
+                value: writeValue,
+                source,
+                confidence: newConfidence,
+                observedAt: now,
+                updatedAt: now,
+                notApplicable: notApplicable === true,
+            };
+            if (embedding && notApplicable !== true)
+                updateProps.embedding = embedding;
+            await session.run(`
+        MATCH (pref:Preference {preferenceId: $preferenceId, accountId: $accountId})
+        SET pref.value = $value,
+            pref.source = $source,
+            pref.confidence = $confidence,
+            pref.observedAt = $observedAt,
+            pref.updatedAt = $updatedAt,
+            pref.notApplicable = $notApplicable
+            ${embedding && notApplicable !== true ? ", pref.embedding = $embedding" : ""}
+        `, updateProps);
+            if (notApplicable === true) {
+                process.stderr.write(`[profile] not-applicable accountId=${accountId.slice(0, 8)}… userId=${userId} field=${category}.${key}\n`);
+            }
+            // Add evidence link if conversationId provided
+            if (conversationId) {
+                await session.run(`
+          MATCH (pref:Preference {preferenceId: $preferenceId})
+          MATCH (conv:Conversation {conversationId: $conversationId})
+          MERGE (pref)-[:OBSERVED_IN]->(conv)
+          `, { preferenceId: existingId, conversationId });
+            }
+            return { preferenceId: existingId, action, confidence: newConfidence };
+        }
+        // New preference — create node and link to UserProfile
+        // Task 888 — notApplicable forces confidence: 1.0 and stamps the flag;
+        // value is empty (declination has no value to record).
+        const preferenceId = randomUUID();
+        const createProps = {
+            preferenceId,
+            accountId,
+            userId,
+            category,
+            key,
+            value: notApplicable === true ? "" : value,
+            confidence: notApplicable === true ? 1.0 : INITIAL_CONFIDENCE,
+            source,
+            observedAt: now,
+            createdAt: now,
+            updatedAt: now,
+            scope: "admin",
+            notApplicable: notApplicable === true,
+        };
+        if (embedding && notApplicable !== true)
+            createProps.embedding = embedding;
+        await session.run(`
+      MATCH (up:UserProfile {accountId: $accountId, userId: $userId})
+      CREATE (pref:Preference $props)
+      CREATE (up)-[:HAS_PREFERENCE]->(pref)
+      `, { accountId, userId, props: createProps });
+        if (notApplicable === true) {
+            process.stderr.write(`[profile] not-applicable accountId=${accountId.slice(0, 8)}… userId=${userId} field=${category}.${key}\n`);
+        }
+        // Add evidence link if conversationId provided
+        if (conversationId) {
+            await session.run(`
+        MATCH (pref:Preference {preferenceId: $preferenceId})
+        MATCH (conv:Conversation {conversationId: $conversationId})
+        MERGE (pref)-[:OBSERVED_IN]->(conv)
+        `, { preferenceId, conversationId });
+        }
+        return {
+            preferenceId,
+            action: "created",
+            confidence: notApplicable === true ? 1.0 : INITIAL_CONFIDENCE,
+        };
+    }
+    finally {
+        await session.close();
+    }
+}
+async function executeMerge(session, accountId, userId, category, key, value, source, embedding, mergeSourceIds, now) {
+    const txc = session.beginTransaction();
+    try {
+        // Collect evidence links and max confidence from source preferences.
+        // Merge only absorbs live sources — a trashed source cannot be re-merged.
+        // If the caller passed a trashed sourceId, loud-fail: silently computing
+        // a partial merge would produce a merged preference with misleading
+        // confidence and evidence drawn from a subset of what the caller asked
+        // for (doctrine: "loud failures mandatory").
+        const sourcesResult = await txc.run(`
+      MATCH (pref:Preference)
+      WHERE pref.preferenceId IN $sourceIds AND pref.accountId = $accountId AND ${notTrashed("pref")}
+      OPTIONAL MATCH (pref)-[:OBSERVED_IN]->(conv:Conversation) WHERE ${notTrashed("conv")}
+      RETURN pref.preferenceId AS id, pref.confidence AS confidence,
+             collect(DISTINCT conv.conversationId) AS convIds
+      `, { sourceIds: mergeSourceIds, accountId });
+        if (sourcesResult.records.length !== mergeSourceIds.length) {
+            const foundIds = new Set(sourcesResult.records.map((r) => r.get("id")));
+            const missing = mergeSourceIds.filter((id) => !foundIds.has(id));
+            throw new Error(`Merge failed: ${missing.length} of ${mergeSourceIds.length} source preference(s) could not be merged (not found, trashed, or belong to a different account): ${missing.join(", ")}`);
+        }
+        const maxConfidence = sourcesResult.records.reduce((max, r) => Math.max(max, r.get("confidence")), INITIAL_CONFIDENCE);
+        const allConvIds = new Set();
+        for (const r of sourcesResult.records) {
+            for (const id of r.get("convIds")) {
+                if (id)
+                    allConvIds.add(id);
+            }
+        }
+        // Create the merged preference
+        const preferenceId = randomUUID();
+        const mergedProps = {
+            preferenceId,
+            accountId,
+            userId,
+            category,
+            key,
+            value,
+            confidence: maxConfidence,
+            source,
+            observedAt: now,
+            createdAt: now,
+            updatedAt: now,
+            scope: "admin",
+        };
+        if (embedding)
+            mergedProps.embedding = embedding;
+        await txc.run(`
+      MATCH (up:UserProfile {accountId: $accountId, userId: $userId})
+      CREATE (pref:Preference $props)
+      CREATE (up)-[:HAS_PREFERENCE]->(pref)
+      `, { accountId, userId, props: mergedProps });
+        // Transfer evidence links to the merged preference
+        for (const convId of allConvIds) {
+            await txc.run(`
+        MATCH (pref:Preference {preferenceId: $preferenceId})
+        MATCH (conv:Conversation {conversationId: $convId})
+        MERGE (pref)-[:OBSERVED_IN]->(conv)
+        `, { preferenceId, convId });
+        }
+        // Remove merged-away source preferences. Hard-delete is deliberate
+        // (Task 602): merge absorbs the sources into the new preference, so
+        // they have no independent identity to restore — resurrecting them
+        // would duplicate facts in profile-read. The user-facing delete path
+        // (profile-delete) does soft-delete via trashNode.
+        await txc.run(`
+      MATCH (pref:Preference)
+      WHERE pref.preferenceId IN $sourceIds AND pref.accountId = $accountId
+      DETACH DELETE pref
+      `, { sourceIds: mergeSourceIds, accountId });
+        await txc.commit();
+        return {
+            preferenceId,
+            action: "merged",
+            confidence: maxConfidence,
+            mergedCount: sourcesResult.records.length,
+        };
+    }
+    catch (err) {
+        await txc.rollback();
+        throw err;
+    }
+}
+//# sourceMappingURL=profile-update.js.map

package/payload/platform/plugins/memory/mcp/dist/tools/profile-update.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"profile-update.js","sourceRoot":"","sources":["../../src/tools/profile-update.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAC7C,OAAO,EAAE,KAAK,EAAE,MAAM,sBAAsB,CAAC;AAC7C,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,UAAU,EAAE,MAAM,8CAA8C,CAAC;AAC1E,OAAO,EAAE,aAAa,EAAqB,MAAM,4BAA4B,CAAC;AAE9E,kEAAkE;AAClE,MAAM,kBAAkB,GAAG,GAAG,CAAC;AAC/B,MAAM,uBAAuB,GAAG,IAAI,CAAC;AACrC,MAAM,uBAAuB,GAAG,GAAG,CAAC;AAEpC,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAAC;IAC/B,eAAe;IACf,YAAY;IACZ,UAAU;IACV,UAAU;IACV,SAAS;IACT,aAAa;CACd,CAAC,CAAC;AAEH,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,CAAC,WAAW,EAAE,QAAQ,EAAE,YAAY,EAAE,OAAO,CAAC,CAAC,CAAC;AAE5E,0EAA0E;AAC1E,oEAAoE;AACpE,sEAAsE;AACtE,uEAAuE;AACvE,kEAAkE;AAClE,uEAAuE;AACvE,yEAAyE;AACzE,MAAM,2BAA2B,GAAG,IAAI,GAAG,CAAC;IAC1C,WAAW;IACX,QAAQ;IACR,OAAO;IACP,WAAW;IACX,WAAW;IACX,WAAW;IACX,gBAAgB;IAChB,eAAe;IACf,kBAAkB;CACnB,CAAC,CAAC;AAiEH,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,MAA2B;IAE3B,MAAM,EACJ,SAAS,EACT,MAAM,EACN,QAAQ,EACR,GAAG,EACH,KAAK,EACL,MAAM,GAAG,aAAa,EACtB,IAAI,GAAG,WAAW,EAClB,cAAc,EACd,aAAa,EACb,YAAY,EACZ,cAAc,EACd,aAAa,GAAG,KAAK,EACrB,SAAS,GACV,GAAG,MAAM,CAAC;IAEX,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;QACpC,MAAM,IAAI,KAAK,CACb,qBAAqB,QAAQ,sBAAsB,CAAC,GAAG,gBAAgB,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CACtF,CAAC;IACJ,CAAC;IAED,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;QAC3B,MAAM,IAAI,KAAK,CACb,iBAAiB,IAAI,sBAAsB,CAAC,GAAG,WAAW,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CACzE,CAAC;IACJ,CAAC;IAED,yEAAyE;IACzE,sEAAsE;IACtE,yEAAyE;IACzE,IAAI,aAAa,KAAK,IAAI,EAAE,CAAC;QAC3B,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACzD,MAAM,IAAI,KAAK,CACb,8HAA8H,CAC/H,CAAC;QACJ,CAAC;QACD,IAAI,IAAI,KAAK,OAAO,IAAI,IAAI,KAAK,YAAY,EAAE,CAAC;YAC9C,MAAM,IAAI,KAAK,CACb,yDAAyD,IAAI,wEAAwE,CACtI,CAAC;QACJ,CAAC;IACH,CAAC;SAAM,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC/C,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;IAC5D,CAAC;IAED,IAAI,IAAI,KAAK,OAAO,IAAI,CAAC,CAAC,cAAc,IAAI,cAAc,CAAC,MAAM,KAAK,CAAC,CAAC,EAAE,CAAC;QACzE,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;IACnE,CAAC;IAED,wEAAwE;IACxE,oEAAoE;IACpE,wEAAwE;IACxE,gEAAgE;IAChE,EAAE;IACF,yCAAyC;IACzC,2EAA2E;IAC3E,qEAAqE;IACrE,sEAAsE;IACtE,oEAAoE;IACpE,+DAA+D;IAC/D,mEAAmE;IACnE,6BAA6B;IAC7B,IAAI,gBAAgB,GAAmC,IAAI,CAAC;IAC5D,IAAI,YAAY,IAAI,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACzD,MAAM,QAAQ,GAA4B,EAAE,CAAC;QAC7C,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,CAAC;YAClD,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,SAAS;gBAAE,SAAS;YAC5C,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC;gBAAE,SAAS;YAC7D,IAAI,2BAA2B,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;gBACvC,MAAM,IAAI,KAAK,CACb,iCAAiC,CAAC,iLAAiL,CACpN,CAAC;YACJ,CAAC;YACD,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;QAClB,CAAC;QACD,IAAI,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACrC,IAAI,CAAC,SAAS,EAAE,CAAC;gBACf,MAAM,IAAI,KAAK,CACb,yIAAyI,CAC1I,CAAC;YACJ,CAAC;YACD,+DAA+D;YAC/D,aAAa,CACX,EAAE,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,UAAU,EAAE,QAAQ,EAAE,SAAS,EAAE,EACvD,SAAS,EACT,EAAE,IAAI,EAAE,QAAQ,EAAE,CACnB,CAAC;YACF,gBAAgB,GAAG,QAAQ,CAAC;QAC9B,CAAC;IACH,CAAC;IAED,MAAM,OAAO,GAAG,UAAU,EAAE,CAAC;IAC7B,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAErC,IAAI,CAAC;QACH,wDAAwD;QACxD,MAAM,aAAa,GAAG,GAAG,QAAQ,KAAK,GAAG,MAAM,KAAK,EAAE,CAAC;QACvD,IAAI,SAAS,GAAoB,IAAI,CAAC;QACtC,IAAI,CAAC;YACH,SAAS,GAAG,MAAM,KAAK,CAAC,aAAa,CAAC,CAAC;QACzC,CAAC;QAAC,MAAM,CAAC;YACP,+DAA+D;YAC/D,0DAA0D;QAC5D,CAAC;QAED,kDAAkD;QAClD,IAAI,aAAa,IAAI,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC3D,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC;gBACzB,WAAW;gBACX,QAAQ;gBACR,WAAW;gBACX,WAAW;gBACX,gBAAgB;aACjB,CAAC,CAAC;YACH,MAAM,UAAU,GAA4B,EAAE,CAAC;YAC/C,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,CAAC;gBACnD,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC;oBAAE,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;YAC5C,CAAC;YAED,IAAI,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACvC,MAAM,OAAO,CAAC,GAAG,CACf;;;WAGC,EACD,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,GAAG,EAAE,CAC/C,CAAC;YACJ,CAAC;QACH,CAAC;QAED,sEAAsE;QACtE,wEAAwE;QACxE,+DAA+D;QAC/D,sEAAsE;QACtE,kEAAkE;QAClE,mEAAmE;QACnE,mEAAmE;QACnE,IAAI,gBAAgB,KAAK,IAAI,EAAE,CAAC;YAC9B,MAAM,YAAY,GAAG,MAAM,OAAO,CAAC,GAAG,CACpC;;;;SAIC,EACD,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,gBAAgB,EAAE,GAAG,EAAE,CACrD,CAAC;YACF,MAAM,QAAQ,GAAI,YAAY,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,UAAU,CAAsD,CAAC;YAChH,MAAM,SAAS,GAAG,OAAO,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,QAAQ,EAAE,EAAE,IAAI,CAAC,CAAC,CAAC;YAC1F,IAAI,SAAS,KAAK,CAAC,EAAE,CAAC;gBACpB,MAAM,IAAI,KAAK,CACb,2EAA2E,MAAM,cAAc,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,eAAe,SAAS,8IAA8I,CAC3R,CAAC;YACJ,CAAC;YACD,mEAAmE;YACnE,gDAAgD;YAChD,qDAAqD;YACrD,KAAK,MAAM,SAAS,IAAI,MAAM,CAAC,IAAI,CAAC,gBAAgB,CAAC,EAAE,CAAC;gBACtD,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,0CAA0C,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,WAAW,SAAS,IAAI,CACxF,CAAC;YACJ,CAAC;QACH,CAAC;QAED,6DAA6D;QAC7D,IAAI,IAAI,KAAK,OAAO,EAAE,CAAC;YACrB,OAAO,MAAM,YAAY,CACvB,OAAO,EACP,SAAS,EACT,MAAM,EACN,QAAQ,EACR,GAAG,EACH,KAAK,EACL,MAAM,EACN,SAAS,EACT,cAAe,EACf,GAAG,CACJ,CAAC;QACJ,CAAC;QAED,oEAAoE;QACpE,yEAAyE;QACzE,uEAAuE;QACvE,sEAAsE;QACtE,MAAM,cAAc,GAAG,MAAM,OAAO,CAAC,GAAG,CACtC;;cAEQ,UAAU,CAAC,MAAM,CAAC;;OAEzB,EACD,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,EAAE,CACrC,CAAC;QAEF,IAAI,cAAc,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACtC,mCAAmC;YACnC,MAAM,UAAU,GAAG,cAAc,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,cAAc,CAAW,CAAC;YAC3E,MAAM,kBAAkB,GAAG,cAAc,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,YAAY,CAAW,CAAC;YAEjF,IAAI,aAAqB,CAAC;YAC1B,IAAI,MAAiD,CAAC;YAEtD,uEAAuE;YACvE,mEAAmE;YACnE,mEAAmE;YACnE,kEAAkE;YAClE,IAAI,aAAa,KAAK,IAAI,EAAE,CAAC;gBAC3B,aAAa,GAAG,GAAG,CAAC;gBACpB,MAAM,GAAG,SAAS,CAAC;YACrB,CAAC;iBAAM,CAAC;gBACN,QAAQ,IAAI,EAAE,CAAC;oBACb,KAAK,WAAW;wBACd,6DAA6D;wBAC7D,aAAa,GAAG,IAAI,CAAC,GAAG,CACtB,GAAG,EACH,kBAAkB,GAAG,uBAAuB,GAAG,CAAC,GAAG,GAAG,kBAAkB,CAAC,CAC1E,CAAC;wBACF,MAAM,GAAG,YAAY,CAAC;wBACtB,MAAM;oBACR,KAAK,QAAQ;wBACX,aAAa,GAAG,kBAAkB,CAAC;wBACnC,MAAM,GAAG,SAAS,CAAC;wBACnB,MAAM;oBACR,KAAK,YAAY;wBACf,aAAa,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,kBAAkB,GAAG,uBAAuB,CAAC,CAAC;wBAC5E,MAAM,GAAG,cAAc,CAAC;wBACxB,MAAM;oBACR;wBACE,aAAa,GAAG,kBAAkB,CAAC;wBACnC,MAAM,GAAG,SAAS,CAAC;gBACvB,CAAC;YACH,CAAC;YAED,MAAM,UAAU,GAAG,aAAa,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC;YACvD,MAAM,WAAW,GAA4B;gBAC3C,SAAS;gBACT,YAAY,EAAE,UAAU;gBACxB,KAAK,EAAE,UAAU;gBACjB,MAAM;gBACN,UAAU,EAAE,aAAa;gBACzB,UAAU,EAAE,GAAG;gBACf,SAAS,EAAE,GAAG;gBACd,aAAa,EAAE,aAAa,KAAK,IAAI;aACtC,CAAC;YACF,IAAI,SAAS,IAAI,aAAa,KAAK,IAAI;gBAAE,WAAW,CAAC,SAAS,GAAG,SAAS,CAAC;YAE3E,MAAM,OAAO,CAAC,GAAG,CACf;;;;;;;;cAQM,SAAS,IAAI,aAAa,KAAK,IAAI,CAAC,CAAC,CAAC,+BAA+B,CAAC,CAAC,CAAC,EAAE;SAC/E,EACD,WAAW,CACZ,CAAC;YAEF,IAAI,aAAa,KAAK,IAAI,EAAE,CAAC;gBAC3B,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,sCAAsC,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,YAAY,MAAM,UAAU,QAAQ,IAAI,GAAG,IAAI,CAC3G,CAAC;YACJ,CAAC;YAED,+CAA+C;YAC/C,IAAI,cAAc,EAAE,CAAC;gBACnB,MAAM,OAAO,CAAC,GAAG,CACf;;;;WAIC,EACD,EAAE,YAAY,EAAE,UAAU,EAAE,cAAc,EAAE,CAC7C,CAAC;YACJ,CAAC;YAED,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,EAAE,UAAU,EAAE,aAAa,EAAE,CAAC;QACzE,CAAC;QAED,uDAAuD;QACvD,uEAAuE;QACvE,uDAAuD;QACvD,MAAM,YAAY,GAAG,UAAU,EAAE,CAAC;QAClC,MAAM,WAAW,GAA4B;YAC3C,YAAY;YACZ,SAAS;YACT,MAAM;YACN,QAAQ;YACR,GAAG;YACH,KAAK,EAAE,aAAa,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK;YAC1C,UAAU,EAAE,aAAa,KAAK,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,kBAAkB;YAC7D,MAAM;YACN,UAAU,EAAE,GAAG;YACf,SAAS,EAAE,GAAG;YACd,SAAS,EAAE,GAAG;YACd,KAAK,EAAE,OAAO;YACd,aAAa,EAAE,aAAa,KAAK,IAAI;SACtC,CAAC;QACF,IAAI,SAAS,IAAI,aAAa,KAAK,IAAI;YAAE,WAAW,CAAC,SAAS,GAAG,SAAS,CAAC;QAE3E,MAAM,OAAO,CAAC,GAAG,CACf;;;;OAIC,EACD,EAAE,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,WAAW,EAAE,CAC1C,CAAC;QAEF,IAAI,aAAa,KAAK,IAAI,EAAE,CAAC;YAC3B,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,sCAAsC,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,YAAY,MAAM,UAAU,QAAQ,IAAI,GAAG,IAAI,CAC3G,CAAC;QACJ,CAAC;QAED,+CAA+C;QAC/C,IAAI,cAAc,EAAE,CAAC;YACnB,MAAM,OAAO,CAAC,GAAG,CACf;;;;SAIC,EACD,EAAE,YAAY,EAAE,cAAc,EAAE,CACjC,CAAC;QACJ,CAAC;QAED,OAAO;YACL,YAAY;YACZ,MAAM,EAAE,SAAS;YACjB,UAAU,EAAE,aAAa,KAAK,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,kBAAkB;SAC9D,CAAC;IACJ,CAAC;YAAS,CAAC;QACT,MAAM,OAAO,CAAC,KAAK,EAAE,CAAC;IACxB,CAAC;AACH,CAAC;AAED,KAAK,UAAU,YAAY,CACzB,OAAsC,EACtC,SAAiB,EACjB,MAAc,EACd,QAAgB,EAChB,GAAW,EACX,KAAa,EACb,MAAc,EACd,SAA0B,EAC1B,cAAwB,EACxB,GAAW;IAEX,MAAM,GAAG,GAAG,OAAO,CAAC,gBAAgB,EAAE,CAAC;IAEvC,IAAI,CAAC;QACH,qEAAqE;QACrE,0EAA0E;QAC1E,yEAAyE;QACzE,oEAAoE;QACpE,uEAAuE;QACvE,6CAA6C;QAC7C,MAAM,aAAa,GAAG,MAAM,GAAG,CAAC,GAAG,CACjC;;kFAE4E,UAAU,CAAC,MAAM,CAAC;wEAC5B,UAAU,CAAC,MAAM,CAAC;;;OAGnF,EACD,EAAE,SAAS,EAAE,cAAc,EAAE,SAAS,EAAE,CACzC,CAAC;QAEF,IAAI,aAAa,CAAC,OAAO,CAAC,MAAM,KAAK,cAAc,CAAC,MAAM,EAAE,CAAC;YAC3D,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,aAAa,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAW,CAAC,CAAC,CAAC;YAClF,MAAM,OAAO,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;YACjE,MAAM,IAAI,KAAK,CACb,iBAAiB,OAAO,CAAC,MAAM,OAAO,cAAc,CAAC,MAAM,qGAAqG,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CACrL,CAAC;QACJ,CAAC;QAED,MAAM,aAAa,GAAG,aAAa,CAAC,OAAO,CAAC,MAAM,CAChD,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC,GAAG,CAAC,YAAY,CAAW,CAAC,EACxD,kBAAkB,CACnB,CAAC;QAEF,MAAM,UAAU,GAAG,IAAI,GAAG,EAAU,CAAC;QACrC,KAAK,MAAM,CAAC,IAAI,aAAa,CAAC,OAAO,EAAE,CAAC;YACtC,KAAK,MAAM,EAAE,IAAI,CAAC,CAAC,GAAG,CAAC,SAAS,CAAa,EAAE,CAAC;gBAC9C,IAAI,EAAE;oBAAE,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAC7B,CAAC;QACH,CAAC;QAED,+BAA+B;QAC/B,MAAM,YAAY,GAAG,UAAU,EAAE,CAAC;QAClC,MAAM,WAAW,GAA4B;YAC3C,YAAY;YACZ,SAAS;YACT,MAAM;YACN,QAAQ;YACR,GAAG;YACH,KAAK;YACL,UAAU,EAAE,aAAa;YACzB,MAAM;YACN,UAAU,EAAE,GAAG;YACf,SAAS,EAAE,GAAG;YACd,SAAS,EAAE,GAAG;YACd,KAAK,EAAE,OAAO;SACf,CAAC;QACF,IAAI,SAAS;YAAE,WAAW,CAAC,SAAS,GAAG,SAAS,CAAC;QAEjD,MAAM,GAAG,CAAC,GAAG,CACX;;;;OAIC,EACD,EAAE,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,WAAW,EAAE,CAC1C,CAAC;QAEF,mDAAmD;QACnD,KAAK,MAAM,MAAM,IAAI,UAAU,EAAE,CAAC;YAChC,MAAM,GAAG,CAAC,GAAG,CACX;;;;SAIC,EACD,EAAE,YAAY,EAAE,MAAM,EAAE,CACzB,CAAC;QACJ,CAAC;QAED,mEAAmE;QACnE,oEAAoE;QACpE,mEAAmE;QACnE,qEAAqE;QACrE,mDAAmD;QACnD,MAAM,GAAG,CAAC,GAAG,CACX;;;;OAIC,EACD,EAAE,SAAS,EAAE,cAAc,EAAE,SAAS,EAAE,CACzC,CAAC;QAEF,MAAM,GAAG,CAAC,MAAM,EAAE,CAAC;QAEnB,OAAO;YACL,YAAY;YACZ,MAAM,EAAE,QAAQ;YAChB,UAAU,EAAE,aAAa;YACzB,WAAW,EAAE,aAAa,CAAC,OAAO,CAAC,MAAM;SAC1C,CAAC;IACJ,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,GAAG,CAAC,QAAQ,EAAE,CAAC;QACrB,MAAM,GAAG,CAAC;IACZ,CAAC;AACH,CAAC"}

package/payload/platform/plugins/memory/mcp/package.json

@@ -0,0 +1,24 @@
+{
+  "name": "@maxy/memory",
+  "version": "0.1.0",
+  "private": true,
+  "type": "module",
+  "main": "dist/index.js",
+  "scripts": {
+    "build": "tsc",
+    "start": "node dist/index.js",
+    "smoke": "bash ./scripts/boot-smoke.sh",
+    "prepublish": "bash ./scripts/boot-smoke.sh",
+    "test": "vitest run"
+  },
+  "dependencies": {
+    "@anthropic-ai/sdk": "^0.81.0",
+    "@modelcontextprotocol/sdk": "^1.12.1",
+    "neo4j-driver": "^5.28.1"
+  },
+  "devDependencies": {
+    "typescript": "^5.7.0",
+    "@types/node": "^22.0.0",
+    "vitest": "^4.1.2"
+  }
+}

package/payload/platform/plugins/memory/mcp/scripts/boot-smoke.sh

@@ -0,0 +1,69 @@
+#!/usr/bin/env bash
+# Memory MCP boot-smoke gate (Task 743).
+#
+# Spawns dist/index.js with a stub env, holds stdin open via `tail -f /dev/null`
+# (the MCP SDK's StdioServerTransport exits on EOF — closing stdin would mask a
+# clean boot as a failure), sleeps 2s, then asserts the process is still alive.
+# A schema-loader throw, an import failure, or any other module-load fault
+# would have killed the child by now and `kill -0` would return non-zero.
+#
+# Wired to the memory MCP `prepublish` script in package.json so a regression
+# can never reach npm publish without the gate firing first. Local matrix:
+#
+#   $ ./scripts/boot-smoke.sh
+#   [boot-smoke] memory ok
+#
+#   $ # break the schema content, rebuild, retry
+#   $ ./scripts/boot-smoke.sh
+#   [boot-smoke] memory FAILED tail=<schema-loader throw>
+#   exit 1
+set -euo pipefail
+
+SCRIPT_DIR=$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)
+MCP_DIR=$(cd "$SCRIPT_DIR/.." && pwd)
+ENTRY="$MCP_DIR/dist/index.js"
+PLATFORM_ROOT=$(cd "$MCP_DIR/../../.." && pwd)
+
+if [ ! -f "$ENTRY" ]; then
+  echo "[boot-smoke] memory FAILED tail=\"dist/index.js missing — run npm run build first\"" >&2
+  exit 1
+fi
+
+LOG_DIR=$(mktemp -d -t mcp-boot-smoke.XXXXXX)
+trap 'rm -rf "$LOG_DIR"' EXIT
+
+# stdin from a `tail -f /dev/null` keeps the StdioServerTransport open. The
+# pipeline's left side is a tiny long-running process; the right side is the
+# MCP server we are smoke-testing. Both are killed below.
+# Disable pipefail for this block — when bash forks the pipeline, $! is the
+# PID of the LAST command (the node process), which is what we test below.
+set +o pipefail
+
+tail -f /dev/null | env \
+  ACCOUNT_ID=boot-smoke-test \
+  PLATFORM_ROOT="$PLATFORM_ROOT" \
+  LOG_DIR="$LOG_DIR" \
+  STREAM_LOG_PATH="$LOG_DIR/stream.log" \
+  NEO4J_URI=bolt://localhost:7687 \
+  SESSION_ID=boot-smoke \
+  node "$ENTRY" > /dev/null 2>"$LOG_DIR/stderr-direct.log" &
+
+NODE_PID=$!
+sleep 2
+
+if ! kill -0 "$NODE_PID" 2>/dev/null; then
+  TAIL=$(tail -n 5 "$LOG_DIR/stderr-direct.log" 2>/dev/null | tr '\n' ' ' | sed 's/"/\\"/g')
+  echo "[boot-smoke] memory FAILED tail=\"$TAIL\"" >&2
+  # Reap the tail process by killing its parent group (the pipeline subshell).
+  kill 0 2>/dev/null || true
+  exit 1
+fi
+
+echo "[boot-smoke] memory ok"
+kill "$NODE_PID" 2>/dev/null || true
+# Reap the still-running `tail -f /dev/null` so the script exits cleanly.
+# `disown` first so bash does not print a job-control "Terminated" line
+# when the pipeline subshell is killed by exit-trap.
+{ disown -a 2>/dev/null; pkill -P $$ -f "tail -f /dev/null"; } 2>/dev/null || true
+wait 2>/dev/null || true
+exit 0