@rubytech/create-maxy-code 0.1.125 → 0.1.127

package/payload/platform/plugins/admin/mcp/dist/tools/publish-site.js

@@ -0,0 +1,176 @@
+import { mkdir, readdir, rename, stat } from "node:fs/promises";
+import { resolve as resolvePath, join, dirname } from "node:path";
+import { writeLlmsTxt } from "../../../../../lib/aeo-llms-txt-writer/dist/index.js";
+/**
+ * Publish an already-extracted static-site tree into the per-account
+ * static-publish surface (<accountDir>/sites/<slug>/) and emit one
+ * canonical path slug. Pure function — the MCP registration in index.ts
+ * adapts the discriminated-union result onto the MCP transport response.
+ *
+ * Invariants (each maps to one Refusal kind):
+ *   - slug segments match SAFE_SEG_RE, no leading dot, no `..`
+ *   - destination must be absent or empty
+ *   - source tree must contain no symlinks at any depth
+ *   - source must have at least one .html at the top level
+ *   - if no index.html at top level, exactly one top-level .html
+ *
+ * Post-move:
+ *   - canonical path is `/sites/<slug>/` if index.html at top level,
+ *     otherwise `/sites/<slug>/<the-one-html>.html`
+ *   - llms.txt + llms-full.txt are refreshed via writeLlmsTxt
+ *     (best-effort: failure does not unwind the mv)
+ *
+ * All operator-visible log lines preserved verbatim from the prior
+ * skill-prose contract so existing grep targets keep working.
+ */
+const SAFE_SEG_RE = /^[a-z0-9_][a-z0-9_.-]{0,99}$/i;
+const TAG = "[publish-site]";
+function refusal(kind, detail, logLine) {
+    process.stderr.write(`${TAG} refused reason=${kind} ${logLine}\n`);
+    return { ok: false, refusal: kind, detail };
+}
+function validateSlug(slug) {
+    const segments = slug.split("/").filter((s) => s.length > 0);
+    if (segments.length === 0) {
+        return {
+            ok: false,
+            refusal: refusal("unsafe-slug", { slug }, `slug=${slug}`),
+        };
+    }
+    for (const seg of segments) {
+        if (seg === "..") {
+            return {
+                ok: false,
+                refusal: refusal("unsafe-slug", { slug, segment: seg }, `slug=${slug}`),
+            };
+        }
+        if (seg.startsWith(".")) {
+            return {
+                ok: false,
+                refusal: refusal("unsafe-slug", { slug, segment: seg }, `slug=${slug}`),
+            };
+        }
+        if (!SAFE_SEG_RE.test(seg)) {
+            return {
+                ok: false,
+                refusal: refusal("unsafe-slug", { slug, segment: seg }, `slug=${slug}`),
+            };
+        }
+    }
+    return { ok: true, segments };
+}
+async function findSymlinkAnywhere(dir) {
+    const entries = await readdir(dir, { withFileTypes: true });
+    for (const ent of entries) {
+        if (ent.isSymbolicLink())
+            return join(dir, ent.name);
+        if (ent.isDirectory()) {
+            const found = await findSymlinkAnywhere(join(dir, ent.name));
+            if (found)
+                return found;
+        }
+    }
+    return null;
+}
+async function countFiles(dir) {
+    let n = 0;
+    const entries = await readdir(dir, { withFileTypes: true });
+    for (const ent of entries) {
+        if (ent.isFile())
+            n += 1;
+        else if (ent.isDirectory())
+            n += await countFiles(join(dir, ent.name));
+    }
+    return n;
+}
+export async function publishSite(input, deps) {
+    const { accountId, accountDir, source, slug } = input;
+    const slugCheck = validateSlug(slug);
+    if (!slugCheck.ok)
+        return slugCheck.refusal;
+    const destination = resolvePath(accountDir, "sites", ...slugCheck.segments);
+    // Pre-flight: dest must be absent or empty.
+    try {
+        const destStat = await stat(destination);
+        if (destStat.isDirectory()) {
+            const entries = await readdir(destination);
+            if (entries.length > 0) {
+                return refusal("destination-occupied", { destination, entryCount: entries.length }, `dest=${destination}`);
+            }
+        }
+        else {
+            return refusal("destination-occupied", { destination, kind: "non-directory" }, `dest=${destination}`);
+        }
+    }
+    catch (err) {
+        const code = err?.code;
+        if (code !== "ENOENT")
+            throw err;
+        // ENOENT is the happy path — destination doesn't exist yet.
+    }
+    // Pre-flight: source symlink scan (any depth).
+    const symlink = await findSymlinkAnywhere(source);
+    if (symlink) {
+        return refusal("symlink-in-source", { source, entry: symlink }, `entry=${symlink}`);
+    }
+    // Pre-flight: top-level html inventory.
+    const topLevel = await readdir(source, { withFileTypes: true });
+    const topHtml = topLevel
+        .filter((e) => e.isFile() && e.name.toLowerCase().endsWith(".html"))
+        .map((e) => e.name);
+    if (topHtml.length === 0) {
+        return refusal("zero-html", { source }, `source=${source}`);
+    }
+    const hasIndex = topHtml.some((n) => n.toLowerCase() === "index.html");
+    if (!hasIndex && topHtml.length > 1) {
+        return refusal("ambiguous-html", { source, candidates: topHtml }, `candidates=${topHtml.join(",")}`);
+    }
+    const movedFiles = await countFiles(source);
+    // Move. Single rename — same filesystem assumed (accountDir-local).
+    // Ensure the parent (`<accountDir>/sites/...` up to the leaf) exists so
+    // the first publish on a fresh accountDir doesn't ENOENT. mkdir is
+    // idempotent on the parent; the leaf itself was confirmed absent above.
+    await mkdir(dirname(destination), { recursive: true });
+    // EXDEV or EACCES propagates as an exception → MCP isError surfacing
+    // via the registration layer in index.ts.
+    await rename(source, destination);
+    process.stderr.write(`${TAG} move from=${source} to=${destination}/ files=${movedFiles}\n`);
+    const kind = hasIndex ? "index" : "file";
+    const pathSlug = hasIndex
+        ? `/sites/${slugCheck.segments.join("/")}/`
+        : `/sites/${slugCheck.segments.join("/")}/${topHtml[0]}`;
+    process.stderr.write(`${TAG} url emitted=${pathSlug} kind=${kind}\n`);
+    // Post-move hook: refresh llms.txt at the site root. Best-effort.
+    // Never unwinds the mv — a stale llms.txt is strictly less bad than
+    // a failed publish.
+    let aeo;
+    try {
+        const llms = await writeLlmsTxt({
+            accountId,
+            siteName: slugCheck.segments[slugCheck.segments.length - 1],
+            siteDir: destination,
+            siteDescription: input.siteDescription,
+        }, { getSession: deps.getSession });
+        const indexPath = llms.writtenPaths?.index ?? "";
+        aeo = {
+            ok: true,
+            indexPath,
+            indexBytes: llms.sizeBytes.index,
+        };
+        process.stderr.write(`${TAG} aeo-llms-txt-ok wrote=${indexPath} indexBytes=${llms.sizeBytes.index}\n`);
+    }
+    catch (err) {
+        const reason = err instanceof Error ? err.message : String(err);
+        aeo = { ok: false, reason };
+        process.stderr.write(`${TAG} aeo-llms-txt-failed reason=${reason}\n`);
+    }
+    return {
+        ok: true,
+        pathSlug,
+        kind,
+        movedFiles,
+        destination,
+        aeo,
+    };
+}
+//# sourceMappingURL=publish-site.js.map

package/payload/platform/plugins/admin/mcp/dist/tools/publish-site.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"publish-site.js","sourceRoot":"","sources":["../../src/tools/publish-site.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AAChE,OAAO,EAAE,OAAO,IAAI,WAAW,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAGlE,OAAO,EAAE,YAAY,EAAE,MAAM,sDAAsD,CAAC;AAEpF;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH,MAAM,WAAW,GAAG,+BAA+B,CAAC;AACpD,MAAM,GAAG,GAAG,gBAAgB,CAAC;AAuC7B,SAAS,OAAO,CACd,IAAwB,EACxB,MAA+B,EAC/B,OAAe;IAEf,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,GAAG,mBAAmB,IAAI,IAAI,OAAO,IAAI,CAAC,CAAC;IACnE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;AAC9C,CAAC;AAED,SAAS,YAAY,CAAC,IAAY;IAGhC,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IAC7D,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1B,OAAO;YACL,EAAE,EAAE,KAAK;YACT,OAAO,EAAE,OAAO,CAAC,aAAa,EAAE,EAAE,IAAI,EAAE,EAAE,QAAQ,IAAI,EAAE,CAAC;SAC1D,CAAC;IACJ,CAAC;IACD,KAAK,MAAM,GAAG,IAAI,QAAQ,EAAE,CAAC;QAC3B,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;YACjB,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,OAAO,EAAE,OAAO,CAAC,aAAa,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,EAAE,QAAQ,IAAI,EAAE,CAAC;aACxE,CAAC;QACJ,CAAC;QACD,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YACxB,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,OAAO,EAAE,OAAO,CAAC,aAAa,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,EAAE,QAAQ,IAAI,EAAE,CAAC;aACxE,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YAC3B,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,OAAO,EAAE,OAAO,CAAC,aAAa,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,EAAE,QAAQ,IAAI,EAAE,CAAC;aACxE,CAAC;QACJ,CAAC;IACH,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;AAChC,CAAC;AAED,KAAK,UAAU,mBAAmB,CAAC,GAAW;IAC5C,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,GAAG,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;IAC5D,KAAK,MAAM,GAAG,IAAI,OAAO,EAAE,CAAC;QAC1B,IAAI,GAAG,CAAC,cAAc,EAAE;YAAE,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;QACrD,IAAI,GAAG,CAAC,WAAW,EAAE,EAAE,CAAC;YACtB,MAAM,KAAK,GAAG,MAAM,mBAAmB,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;YAC7D,IAAI,KAAK;gBAAE,OAAO,KAAK,CAAC;QAC1B,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,KAAK,UAAU,UAAU,CAAC,GAAW;IACnC,IAAI,CAAC,GAAG,CAAC,CAAC;IACV,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,GAAG,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;IAC5D,KAAK,MAAM,GAAG,IAAI,OAAO,EAAE,CAAC;QAC1B,IAAI,GAAG,CAAC,MAAM,EAAE;YAAE,CAAC,IAAI,CAAC,CAAC;aACpB,IAAI,GAAG,CAAC,WAAW,EAAE;YAAE,CAAC,IAAI,MAAM,UAAU,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;IACzE,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,KAAuB,EACvB,IAAqB;IAErB,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,KAAK,CAAC;IAEtD,MAAM,SAAS,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;IACrC,IAAI,CAAC,SAAS,CAAC,EAAE;QAAE,OAAO,SAAS,CAAC,OAAO,CAAC;IAE5C,MAAM,WAAW,GAAG,WAAW,CAAC,UAAU,EAAE,OAAO,EAAE,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;IAE5E,4CAA4C;IAC5C,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,CAAC;QACzC,IAAI,QAAQ,CAAC,WAAW,EAAE,EAAE,CAAC;YAC3B,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,WAAW,CAAC,CAAC;YAC3C,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACvB,OAAO,OAAO,CACZ,sBAAsB,EACtB,EAAE,WAAW,EAAE,UAAU,EAAE,OAAO,CAAC,MAAM,EAAE,EAC3C,QAAQ,WAAW,EAAE,CACtB,CAAC;YACJ,CAAC;QACH,CAAC;aAAM,CAAC;YACN,OAAO,OAAO,CACZ,sBAAsB,EACtB,EAAE,WAAW,EAAE,IAAI,EAAE,eAAe,EAAE,EACtC,QAAQ,WAAW,EAAE,CACtB,CAAC;QACJ,CAAC;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,GAAI,GAA6B,EAAE,IAAI,CAAC;QAClD,IAAI,IAAI,KAAK,QAAQ;YAAE,MAAM,GAAG,CAAC;QACjC,4DAA4D;IAC9D,CAAC;IAED,+CAA+C;IAC/C,MAAM,OAAO,GAAG,MAAM,mBAAmB,CAAC,MAAM,CAAC,CAAC;IAClD,IAAI,OAAO,EAAE,CAAC;QACZ,OAAO,OAAO,CACZ,mBAAmB,EACnB,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,EAC1B,SAAS,OAAO,EAAE,CACnB,CAAC;IACJ,CAAC;IAED,wCAAwC;IACxC,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,MAAM,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;IAChE,MAAM,OAAO,GAAG,QAAQ;SACrB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;SACnE,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IACtB,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,OAAO,CAAC,WAAW,EAAE,EAAE,MAAM,EAAE,EAAE,UAAU,MAAM,EAAE,CAAC,CAAC;IAC9D,CAAC;IACD,MAAM,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,KAAK,YAAY,CAAC,CAAC;IACvE,IAAI,CAAC,QAAQ,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACpC,OAAO,OAAO,CACZ,gBAAgB,EAChB,EAAE,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,EAC/B,cAAc,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAClC,CAAC;IACJ,CAAC;IAED,MAAM,UAAU,GAAG,MAAM,UAAU,CAAC,MAAM,CAAC,CAAC;IAE5C,oEAAoE;IACpE,wEAAwE;IACxE,mEAAmE;IACnE,wEAAwE;IACxE,MAAM,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACvD,qEAAqE;IACrE,0CAA0C;IAC1C,MAAM,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;IAClC,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,GAAG,GAAG,cAAc,MAAM,OAAO,WAAW,WAAW,UAAU,IAAI,CACtE,CAAC;IAEF,MAAM,IAAI,GAAqB,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC;IAC3D,MAAM,QAAQ,GAAG,QAAQ;QACvB,CAAC,CAAC,UAAU,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG;QAC3C,CAAC,CAAC,UAAU,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;IAC3D,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,GAAG,gBAAgB,QAAQ,SAAS,IAAI,IAAI,CAAC,CAAC;IAEtE,kEAAkE;IAClE,oEAAoE;IACpE,oBAAoB;IACpB,IAAI,GAE6B,CAAC;IAClC,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,YAAY,CAC7B;YACE,SAAS;YACT,QAAQ,EAAE,SAAS,CAAC,QAAQ,CAAC,SAAS,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC;YAC3D,OAAO,EAAE,WAAW;YACpB,eAAe,EAAE,KAAK,CAAC,eAAe;SACvC,EACD,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,CAChC,CAAC;QACF,MAAM,SAAS,GAAG,IAAI,CAAC,YAAY,EAAE,KAAK,IAAI,EAAE,CAAC;QACjD,GAAG,GAAG;YACJ,EAAE,EAAE,IAAI;YACR,SAAS;YACT,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK;SACjC,CAAC;QACF,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,GAAG,GAAG,0BAA0B,SAAS,eAAe,IAAI,CAAC,SAAS,CAAC,KAAK,IAAI,CACjF,CAAC;IACJ,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,MAAM,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAChE,GAAG,GAAG,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;QAC5B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,GAAG,+BAA+B,MAAM,IAAI,CAAC,CAAC;IACxE,CAAC;IAED,OAAO;QACL,EAAE,EAAE,IAAI;QACR,QAAQ;QACR,IAAI;QACJ,UAAU;QACV,WAAW;QACX,GAAG;KACJ,CAAC;AACJ,CAAC"}

package/payload/platform/plugins/admin/skills/publish-site/SKILL.md

@@ -1,75 +1,37 @@
 # Publish Site
 
-Move an already-extracted static-site tree into the per-account static-publish surface (`<accountDir>/sites/<slug>/`) and emit exactly one canonical path slug. Pair the slug with the deterministic public hostname returned by `mcp__admin__public-hostname` to surface the full URL in a single turn.
+Call `mcp__admin__publish-site` to move an already-extracted static-site tree into the per-account static-publish surface (`<accountDir>/sites/<slug>/`) and emit one canonical path slug. Pair the slug with `mcp__admin__public-hostname` to surface the full URL in the same turn.
 
-**Invoked from `specialists:content-producer`** when the brief carries a host-website / publish-site / put-online intent. Admin's IDENTITY.md routes those intents to that specialist on turn 1; running this skill inline on the main admin runner exhausts the 10-turn budget on per-turn ToolSearch + plugin-read discovery before publish-site executes.
+**Invoked from `specialists:content-producer`** when the brief carries a host-website / publish-site / put-online intent. The slug validation, symlink scan, refusal taxonomy, `mv`, canonical-path selection, and llms.txt refresh all run inside the typed tool — this skill is the intent router, not the implementer.
 
-## When to Use
+## When to use
 
 Activate when **both** are true:
 
 - The current turn carries a "host this website" / "publish this site" / "put this online" / equivalent intent.
-- A directory tree of HTML + assets is already on disk under `<accountDir>/extracted/<attachmentId>/` (the typical output of [unzip-attachment](../unzip-attachment/SKILL.md)), or the conversation already names a source directory under `<accountDir>/`.
+- A directory tree of HTML + assets is already on disk under `<accountDir>/extracted/<attachmentId>/` (typical output of [unzip-attachment](../unzip-attachment/SKILL.md)), or the conversation already names a source directory under `<accountDir>/`.
 
-Do **not** activate for `.pdf`, `.docx`, slide decks, single-image attachments, or zips whose extracted output is not a directory tree of HTML + assets — those have their own skills (`a4-print-documents`, `deck-pages`, etc.). The intent + tree shape is the gate.
+Do **not** activate for `.pdf`, `.docx`, slide decks, single-image attachments, or zips whose extracted output is not a directory tree of HTML + assets — those have their own skills (`a4-print-documents`, `deck-pages`, etc.).
 
-## Inputs
+## Call
 
-- `source` — absolute path to the extracted directory tree (already produced by `unzip-attachment`).
-- `slug` — operator-supplied or operator-confirmed path under `<accountDir>/sites/`. One or more `/`-separated segments; each segment matches the platform's `SAFE_SEG_RE` (`/^[a-z0-9_][a-z0-9_.-]{0,99}$/i`); no segment starts with `.`; no segment equals `..`. Confirm with the operator before proceeding when the slug is not already explicit.
+```
+mcp__admin__publish-site
+  source:           <absolute path to the extracted source directory>
+  slug:             <operator-supplied or operator-confirmed path under sites/>
+  siteName?:        <optional llms.txt header; defaults to the last slug segment>
+  siteDescription?: <optional one-line blockquote under the llms.txt header>
+```
 
-## Invariants
+Confirm the slug with the operator before calling if it isn't already explicit in the conversation.
 
-These are non-negotiable. Each is mechanically check-able and each maps to a fixed refusal log line.
+## Surface the result
 
-1. **Move, never copy.** The source tree is `mv`'d into `<accountDir>/sites/<slug>/`. No re-extraction, no `cp`. After success the source path no longer exists.
-2. **No filename invention.** Never `cp <any>.html index.html` to satisfy a URL form. If the moved tree's top level has no `index.html`, the canonical path slug points at the actual landing HTML by name.
-3. **One emitted path slug.** The skill emits exactly one path string starting with `/sites/`:
-   - `/sites/<slug>/` — when `<accountDir>/sites/<slug>/index.html` exists after the move.
-   - `/sites/<slug>/<file>.html` — when no `index.html` and exactly one HTML file sits at the top level.
-4. **Path only — no scheme, no host.** The emitted string is a path. Never emit a URL with a scheme or a host. The operator pairs the slug with their own public-host root.
-5. **No fallback servers, no Playwright probes, no service restarts.** If the move or URL form is wrong, refuse. Reaching for `python -m http.server`, `npx http-server`, browser-automation probes, or platform restarts in place of fixing the URL contract is the prior-session failure pattern this skill exists to close.
-6. **Source must be a real directory tree, no symlinks.** If `find <source> -type l` returns any entry, refuse.
-
-## Refusals
-
-Each refusal is a `[publish-site] refused` log line plus a fixed operator message. No retry, no silent substitution.
-
-| Reason | Trigger | Log line |
-|---|---|---|
-| `unsafe-slug` | Any segment fails `SAFE_SEG_RE`, has a leading `.`, or equals `..` | `[publish-site] refused reason=unsafe-slug slug=<value>` |
-| `destination-occupied` | `<accountDir>/sites/<slug>/` already exists with non-empty contents | `[publish-site] refused reason=destination-occupied dest=<path>` |
-| `symlink-in-source` | `find <source> -type l` returns at least one entry | `[publish-site] refused reason=symlink-in-source entry=<path>` |
-| `zero-html` | The top level of `<source>` has no `*.html` files | `[publish-site] refused reason=zero-html source=<path>` |
-| `ambiguous-html` | Multiple top-level `*.html` files and no `index.html` | `[publish-site] refused reason=ambiguous-html candidates=<f1>,<f2>,...` |
-
-The operator message for `ambiguous-html` names the candidate files and asks the operator to pick which file is the landing page (or to add an `index.html` to the source). No move happens until the choice is explicit.
-
-## Flow
-
-1. **Resolve and validate slug.** Split on `/`; reject any segment that violates the rules above.
-2. **Pre-flight checks.** Inspect the source tree's top level: count `*.html` files; check for `index.html`; run the symlink scan; check the destination is absent or empty. Apply refusals before any disk mutation.
-3. **Move.** Single `mv <source> <accountDir>/sites/<slug>/`. Emit one log line:
-   `[publish-site] move from=<source> to=<accountDir>/sites/<slug>/ files=<n>`
-4. **Choose the canonical path.** `index.html` present at top level → path is `/sites/<slug>/`. Otherwise the single top-level HTML file → path is `/sites/<slug>/<file>.html`.
-5. **Emit.** One log line:
-   `[publish-site] url emitted=<path-slug> kind=<index|file>`
-6. **Refresh `llms.txt` at the site root.** Call `mcp__aeo__aeo-write-llms-txt` with `{ siteName: "<slug>", siteDir: "<accountDir>/sites/<slug>" }`. The AEO tool reads the account's `KnowledgeDocument` set and writes `llms.txt` + `llms-full.txt` into `<siteDir>/`, so answer-engine crawlers always see the current page set at the moment of publish. `accountId` is implicit — the AEO plugin reads it from its own env. On success, emit `[publish-site] aeo-llms-txt-ok wrote=<indexPath> indexBytes=<n>`. **Best-effort invariant:** if the call fails (tool returns `isError`, throws, or the `aeo` plugin is not loaded for this account), emit `[publish-site] aeo-llms-txt-failed reason=<msg>` and continue. **Never unwind the `mv` on AEO failure** — the publish already succeeded, the URL is live, and a stale or missing `llms.txt` is strictly less bad than a failed publish.
-7. **Resolve the public hostname and emit the full URL.** Call `mcp__admin__public-hostname` to fetch this account's hostname; the tool reads `cloudflared/config.yml` + `alias-domains.json` — the same files the platform server trusts to route. Concatenate `https://<hostname><path-slug>` and surface that one URL to the operator. If the tool returns `reason: no-tunnel`, relay the tool's remediation message verbatim — do not improvise the URL. The route at `/sites/*` (see [server/routes/sites.ts](../../../../ui/server/routes/sites.ts)) handles the trailing-slash redirect on the dir form, so the slug is correct as-emitted whether the operator's HTML uses an `index.html` entry-point or a publisher-named landing file.
-
-## Log lines (grep targets)
-
-| When | Line |
-|---|---|
-| After move | `[publish-site] move from=<src> to=<dest> files=<n>` |
-| Path emission | `[publish-site] url emitted=<path-slug> kind=<index\|file>` |
-| AEO llms.txt success | `[publish-site] aeo-llms-txt-ok wrote=<indexPath> indexBytes=<n>` |
-| AEO llms.txt failure (best-effort, publish continues) | `[publish-site] aeo-llms-txt-failed reason=<msg>` |
-| Refusal (any reason) | `[publish-site] refused reason=<unsafe-slug\|destination-occupied\|symlink-in-source\|zero-html\|ambiguous-html> <key=value pairs>` |
+- **On success** the tool returns `pathSlug` (e.g. `/sites/demo/` or `/sites/demo/brochure.html`). Call `mcp__admin__public-hostname` next and surface `https://<hostname><pathSlug>` to the operator. The `aeo:` line on the response tells you whether `llms.txt` refresh succeeded; if it failed, the publish still succeeded — relay the URL anyway.
+- **On refusal** the tool returns a `refused: <kind>` body with a fixed `Operator action:` guidance line. Relay the guidance verbatim. The five refusal kinds are `unsafe-slug`, `destination-occupied`, `symlink-in-source`, `zero-html`, and `ambiguous-html`. No retry, no improvisation, no fallback server.
 
 ## Out of scope
 
-- Cleanup of pre-existing synthetic files left by earlier sessions (e.g. a stray `index.html` produced by an earlier `cp brochure.html index.html` workaround). Refuse with `destination-occupied` and let the operator clean up explicitly.
 - Extraction. `unzip-attachment` already owns the extract step; the source path is its output.
-- DNS, tunnels, certificates, or any public-host configuration. The route at `/sites/*` is the wire contract; this skill is a placement + URL-shape skill only.
-- Per-directory default-filename config (e.g. a `.publish.json` that names a default landing file). The publisher names the landing file; no inference layer.
+- DNS, tunnels, certificates, or any public-host configuration. The route at `/sites/*` is the wire contract.
+- Cleanup of pre-existing synthetic files left by earlier sessions. A non-empty destination produces `destination-occupied` and the operator cleans up explicitly.

package/payload/platform/plugins/aeo/mcp/dist/tools/aeo-write-llms-txt.d.ts

@@ -1,42 +1,9 @@
+import { type WriteLlmsTxtInput, type WriteLlmsTxtResult } from "../../../../../lib/aeo-llms-txt-writer/dist/index.js";
+export type { WriteLlmsTxtInput, WriteLlmsTxtResult };
 /**
- * Generates the `llms.txt` and `llms-full.txt` pair for an account's
- * published content. Format follows the current llmstxt.org draft:
- *
- *   # <Site name>
- *   > <Short description>
- *
- *   ## <Section name>
- *   - [<Title>](<URL>): <Summary>
- *
- * `llms-full.txt` concatenates the full text of every listed page in
- * the same order, separated by a blank line and the page's title as an
- * H1.
- *
- * Source: `KnowledgeDocument` nodes for the account that have a `url`
- * property. `summary` and `body` properties feed the index and the
- * concatenated dump respectively. Pages without a `url` are skipped
- * (they aren't reachable from a public site), and the count of skipped
- * pages is returned so the operator can audit completeness.
+ * Thin aeo-side wrapper around the plugin-agnostic writeLlmsTxt lib.
+ * Injects this plugin's neo4j session factory so the shared lib stays
+ * decoupled from any one plugin's driver wiring.
  */
-export interface WriteLlmsTxtInput {
-    accountId: string;
-    siteName: string;
-    siteDescription?: string;
-    siteDir?: string;
-}
-export interface WriteLlmsTxtResult {
-    llmsTxt: string;
-    llmsFullTxt: string;
-    pageCount: number;
-    skippedNoUrl: number;
-    sizeBytes: {
-        index: number;
-        full: number;
-    };
-    writtenPaths?: {
-        index: string;
-        full: string;
-    };
-}
 export declare function writeLlmsTxt(input: WriteLlmsTxtInput): Promise<WriteLlmsTxtResult>;
 //# sourceMappingURL=aeo-write-llms-txt.d.ts.map

package/payload/platform/plugins/aeo/mcp/dist/tools/aeo-write-llms-txt.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"aeo-write-llms-txt.d.ts","sourceRoot":"","sources":["../../src/tools/aeo-write-llms-txt.ts"],"names":[],"mappings":"AAKA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,MAAM,WAAW,iBAAiB;IAChC,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,eAAe,CAAC,EAAE,MAAM,CAAC;IAMzB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,kBAAkB;IACjC,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;IAC3C,YAAY,CAAC,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;CAChD;AAqBD,wBAAsB,YAAY,CAChC,KAAK,EAAE,iBAAiB,GACvB,OAAO,CAAC,kBAAkB,CAAC,CAsH7B"}
+{"version":3,"file":"aeo-write-llms-txt.d.ts","sourceRoot":"","sources":["../../src/tools/aeo-write-llms-txt.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,KAAK,iBAAiB,EACtB,KAAK,kBAAkB,EACxB,MAAM,sDAAsD,CAAC;AAG9D,YAAY,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,CAAC;AAEtD;;;;GAIG;AACH,wBAAsB,YAAY,CAChC,KAAK,EAAE,iBAAiB,GACvB,OAAO,CAAC,kBAAkB,CAAC,CAE7B"}

package/payload/platform/plugins/aeo/mcp/dist/tools/aeo-write-llms-txt.js

@@ -1,118 +1,11 @@
-import { stat, writeFile } from "node:fs/promises";
-import { resolve as resolvePath } from "node:path";
+import { writeLlmsTxt as writeLlmsTxtLib, } from "../../../../../lib/aeo-llms-txt-writer/dist/index.js";
 import { getSession } from "../lib/neo4j.js";
-const HEADER_RX = /^#\s/m;
-function escapeMarkdown(text) {
-    return text.replace(/[\[\]\(\)\n\r]/g, " ").trim();
-}
-function summariseBody(body) {
-    const flat = body.replace(/\s+/g, " ").trim();
-    if (flat.length <= 200)
-        return flat;
-    return flat.slice(0, 197).trimEnd() + "…";
-}
+/**
+ * Thin aeo-side wrapper around the plugin-agnostic writeLlmsTxt lib.
+ * Injects this plugin's neo4j session factory so the shared lib stays
+ * decoupled from any one plugin's driver wiring.
+ */
 export async function writeLlmsTxt(input) {
-    const session = getSession();
-    let rows = [];
-    let skippedNoUrl = 0;
-    try {
-        const r = await session.run(`MATCH (d:KnowledgeDocument {accountId: $accountId})
-       RETURN d.title AS title, d.url AS url, d.summary AS summary,
-              coalesce(d.body, d.abstract, '') AS body
-       ORDER BY d.title ASC`, { accountId: input.accountId });
-        for (const rec of r.records) {
-            const title = rec.get("title") ?? "";
-            const url = rec.get("url") ?? "";
-            const summary = rec.get("summary") ?? "";
-            const body = rec.get("body") ?? "";
-            if (!url || !title) {
-                skippedNoUrl += 1;
-                continue;
-            }
-            rows.push({
-                title: escapeMarkdown(title),
-                url: url.trim(),
-                summary: escapeMarkdown(summary) || summariseBody(body) || "(no summary)",
-                body: body.trim(),
-            });
-        }
-    }
-    finally {
-        await session.close();
-    }
-    const indexLines = [];
-    indexLines.push(`# ${escapeMarkdown(input.siteName)}`);
-    indexLines.push("");
-    if (input.siteDescription) {
-        indexLines.push(`> ${escapeMarkdown(input.siteDescription)}`);
-        indexLines.push("");
-    }
-    indexLines.push("## Pages");
-    indexLines.push("");
-    for (const row of rows) {
-        indexLines.push(`- [${row.title}](${row.url}): ${row.summary}`);
-    }
-    indexLines.push("");
-    indexLines.push("<!-- generated by @maxy/aeo aeo-write-llms-txt; spec: https://llmstxt.org/ -->");
-    const llmsTxt = indexLines.join("\n");
-    const fullLines = [];
-    fullLines.push(`# ${escapeMarkdown(input.siteName)}`);
-    fullLines.push("");
-    if (input.siteDescription) {
-        fullLines.push(`> ${escapeMarkdown(input.siteDescription)}`);
-        fullLines.push("");
-    }
-    for (const row of rows) {
-        fullLines.push(`# ${row.title}`);
-        fullLines.push("");
-        fullLines.push(`Source: ${row.url}`);
-        fullLines.push("");
-        if (row.body) {
-            // Demote any in-body H1s to H2 so a single H1 hierarchy holds.
-            const safeBody = row.body.replace(HEADER_RX, "## ");
-            fullLines.push(safeBody);
-        }
-        else {
-            fullLines.push(row.summary);
-        }
-        fullLines.push("");
-        fullLines.push("---");
-        fullLines.push("");
-    }
-    const llmsFullTxt = fullLines.join("\n");
-    const sizeBytes = {
-        index: Buffer.byteLength(llmsTxt, "utf-8"),
-        full: Buffer.byteLength(llmsFullTxt, "utf-8"),
-    };
-    process.stderr.write(`[aeo-llms-txt] site=${input.siteName} pages=${rows.length} skippedNoUrl=${skippedNoUrl} indexBytes=${sizeBytes.index} fullBytes=${sizeBytes.full}\n`);
-    let writtenPaths;
-    if (input.siteDir) {
-        const dir = resolvePath(input.siteDir);
-        let dirStat;
-        try {
-            dirStat = await stat(dir);
-        }
-        catch (err) {
-            const code = err?.code;
-            throw new Error(`siteDir does not exist (${code ?? "unknown"}): ${dir}`);
-        }
-        if (!dirStat.isDirectory()) {
-            throw new Error(`siteDir is not a directory: ${dir}`);
-        }
-        const indexPath = resolvePath(dir, "llms.txt");
-        const fullPath = resolvePath(dir, "llms-full.txt");
-        await writeFile(indexPath, llmsTxt, "utf-8");
-        await writeFile(fullPath, llmsFullTxt, "utf-8");
-        writtenPaths = { index: indexPath, full: fullPath };
-        process.stderr.write(`[aeo-llms-txt] wrote site=${dir} indexBytes=${sizeBytes.index} fullBytes=${sizeBytes.full}\n`);
-    }
-    return {
-        llmsTxt,
-        llmsFullTxt,
-        pageCount: rows.length,
-        skippedNoUrl,
-        sizeBytes,
-        writtenPaths,
-    };
+    return writeLlmsTxtLib(input, { getSession });
 }
 //# sourceMappingURL=aeo-write-llms-txt.js.map

package/payload/platform/plugins/aeo/mcp/dist/tools/aeo-write-llms-txt.js.map

@@ -1 +1 @@
-{"version":3,"file":"aeo-write-llms-txt.js","sourceRoot":"","sources":["../../src/tools/aeo-write-llms-txt.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AACnD,OAAO,EAAE,OAAO,IAAI,WAAW,EAAE,MAAM,WAAW,CAAC;AAEnD,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAmD7C,MAAM,SAAS,GAAG,OAAO,CAAC;AAE1B,SAAS,cAAc,CAAC,IAAY;IAClC,OAAO,IAAI,CAAC,OAAO,CAAC,iBAAiB,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;AACrD,CAAC;AAED,SAAS,aAAa,CAAC,IAAY;IACjC,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;IAC9C,IAAI,IAAI,CAAC,MAAM,IAAI,GAAG;QAAE,OAAO,IAAI,CAAC;IACpC,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,OAAO,EAAE,GAAG,GAAG,CAAC;AAC5C,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,KAAwB;IAExB,MAAM,OAAO,GAAG,UAAU,EAAE,CAAC;IAC7B,IAAI,IAAI,GAAc,EAAE,CAAC;IACzB,IAAI,YAAY,GAAG,CAAC,CAAC;IACrB,IAAI,CAAC;QACH,MAAM,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CACzB;;;4BAGsB,EACtB,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,CAC/B,CAAC;QACF,KAAK,MAAM,GAAG,IAAI,CAAC,CAAC,OAAO,EAAE,CAAC;YAC5B,MAAM,KAAK,GAAI,GAAG,CAAC,GAAG,CAAC,OAAO,CAAmB,IAAI,EAAE,CAAC;YACxD,MAAM,GAAG,GAAI,GAAG,CAAC,GAAG,CAAC,KAAK,CAAmB,IAAI,EAAE,CAAC;YACpD,MAAM,OAAO,GAAI,GAAG,CAAC,GAAG,CAAC,SAAS,CAAmB,IAAI,EAAE,CAAC;YAC5D,MAAM,IAAI,GAAI,GAAG,CAAC,GAAG,CAAC,MAAM,CAAmB,IAAI,EAAE,CAAC;YACtD,IAAI,CAAC,GAAG,IAAI,CAAC,KAAK,EAAE,CAAC;gBACnB,YAAY,IAAI,CAAC,CAAC;gBAClB,SAAS;YACX,CAAC;YACD,IAAI,CAAC,IAAI,CAAC;gBACR,KAAK,EAAE,cAAc,CAAC,KAAK,CAAC;gBAC5B,GAAG,EAAE,GAAG,CAAC,IAAI,EAAE;gBACf,OAAO,EACL,cAAc,CAAC,OAAO,CAAC,IAAI,aAAa,CAAC,IAAI,CAAC,IAAI,cAAc;gBAClE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE;aAClB,CAAC,CAAC;QACL,CAAC;IACH,CAAC;YAAS,CAAC;QACT,MAAM,OAAO,CAAC,KAAK,EAAE,CAAC;IACxB,CAAC;IAED,MAAM,UAAU,GAAa,EAAE,CAAC;IAChC,UAAU,CAAC,IAAI,CAAC,KAAK,cAAc,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;IACvD,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACpB,IAAI,KAAK,CAAC,eAAe,EAAE,CAAC;QAC1B,UAAU,CAAC,IAAI,CAAC,KAAK,cAAc,CAAC,KAAK,CAAC,eAAe,CAAC,EAAE,CAAC,CAAC;QAC9D,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACtB,CAAC;IACD,UAAU,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IAC5B,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACpB,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,UAAU,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,KAAK,KAAK,GAAG,CAAC,GAAG,MAAM,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;IAClE,CAAC;IACD,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACpB,UAAU,CAAC,IAAI,CACb,gFAAgF,CACjF,CAAC;IACF,MAAM,OAAO,GAAG,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAEtC,MAAM,SAAS,GAAa,EAAE,CAAC;IAC/B,SAAS,CAAC,IAAI,CAAC,KAAK,cAAc,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;IACtD,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACnB,IAAI,KAAK,CAAC,eAAe,EAAE,CAAC;QAC1B,SAAS,CAAC,IAAI,CAAC,KAAK,cAAc,CAAC,KAAK,CAAC,eAAe,CAAC,EAAE,CAAC,CAAC;QAC7D,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACrB,CAAC;IACD,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,SAAS,CAAC,IAAI,CAAC,KAAK,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC;QACjC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACnB,SAAS,CAAC,IAAI,CAAC,WAAW,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC;QACrC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACnB,IAAI,GAAG,CAAC,IAAI,EAAE,CAAC;YACb,+DAA+D;YAC/D,MAAM,QAAQ,GAAG,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;YACpD,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC3B,CAAC;aAAM,CAAC;YACN,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAC9B,CAAC;QACD,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACnB,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACtB,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACrB,CAAC;IACD,MAAM,WAAW,GAAG,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAEzC,MAAM,SAAS,GAAG;QAChB,KAAK,EAAE,MAAM,CAAC,UAAU,CAAC,OAAO,EAAE,OAAO,CAAC;QAC1C,IAAI,EAAE,MAAM,CAAC,UAAU,CAAC,WAAW,EAAE,OAAO,CAAC;KAC9C,CAAC;IAEF,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,uBAAuB,KAAK,CAAC,QAAQ,UAAU,IAAI,CAAC,MAAM,iBAAiB,YAAY,eAAe,SAAS,CAAC,KAAK,cAAc,SAAS,CAAC,IAAI,IAAI,CACtJ,CAAC;IAEF,IAAI,YAAyD,CAAC;IAC9D,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;QAClB,MAAM,GAAG,GAAG,WAAW,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACvC,IAAI,OAAO,CAAC;QACZ,IAAI,CAAC;YACH,OAAO,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,CAAC;QAC5B,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,IAAI,GAAI,GAA6B,EAAE,IAAI,CAAC;YAClD,MAAM,IAAI,KAAK,CACb,2BAA2B,IAAI,IAAI,SAAS,MAAM,GAAG,EAAE,CACxD,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC;YAC3B,MAAM,IAAI,KAAK,CAAC,+BAA+B,GAAG,EAAE,CAAC,CAAC;QACxD,CAAC;QACD,MAAM,SAAS,GAAG,WAAW,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC;QAC/C,MAAM,QAAQ,GAAG,WAAW,CAAC,GAAG,EAAE,eAAe,CAAC,CAAC;QACnD,MAAM,SAAS,CAAC,SAAS,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;QAC7C,MAAM,SAAS,CAAC,QAAQ,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC;QAChD,YAAY,GAAG,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;QACpD,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,6BAA6B,GAAG,eAAe,SAAS,CAAC,KAAK,cAAc,SAAS,CAAC,IAAI,IAAI,CAC/F,CAAC;IACJ,CAAC;IAED,OAAO;QACL,OAAO;QACP,WAAW;QACX,SAAS,EAAE,IAAI,CAAC,MAAM;QACtB,YAAY;QACZ,SAAS;QACT,YAAY;KACb,CAAC;AACJ,CAAC"}
+{"version":3,"file":"aeo-write-llms-txt.js","sourceRoot":"","sources":["../../src/tools/aeo-write-llms-txt.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,YAAY,IAAI,eAAe,GAGhC,MAAM,sDAAsD,CAAC;AAC9D,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAI7C;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,KAAwB;IAExB,OAAO,eAAe,CAAC,KAAK,EAAE,EAAE,UAAU,EAAE,CAAC,CAAC;AAChD,CAAC"}

package/payload/platform/plugins/docs/references/visitor-graph.md

@@ -50,10 +50,11 @@ All under the `real-agent-buyers` plugin, admin-side only:
 | `visitor-recent-by-person` | Recent sessions for a known `:Person` (morning round, 1:1 prep). |
 | `visitor-recent-by-page` | Recent visitors of a given listing slug or URL. |
 | `visitor-engagement-score` | Engagement-ranked `:Person` list (nurture queue). |
-| `visitor-recommendation-ctr` | Graph-backed CTR over a window. Replaces the Task 336 log-scan after the 14-day parity cutover. |
+| `visitor-recommendation-ctr` | Graph-backed CTR over a window, joined from `:Recommendation` and `:Click` nodes. |
 | `visitor-session-detail` | Full event timeline for one `:Session`. |
 | `visitor-event-ingest` | Admin companion to `POST /v/event` for test harness work. |
-| `visitor-backfill-from-logs` | One-shot importer: parses `[property-recommended]` and `[property-card-click]` log lines, computes a parity check, populates the graph. |
+| `visitor-backfill-from-logs` | One-shot importer: parses `[property-recommended]` and `[property-card-click]` log lines into the graph; used to recover late-arriving sessions and for ad-hoc forensics. |
+| `mint-visitor-token` | Mints a signed token bound to a `:Person` for outbound URLs in `morning-round`, `lead-nurturing`, `vendor-updates`. Returns `{ token, expiryMs }`; the agent appends `&v=<token>` to `/listings/<slug>/click?session=<sk>`. Same secret file as the UI server; both processes share it via the wx-create pattern. (Task 362) |
 
 ## Privacy
 
@@ -70,7 +71,7 @@ Quick checks the operator can run after deployment:
 1. Load a published listing page; grep `[visitor-event] type=pageview` in `server.log` within 1s.
 2. Scroll past 50%; grep `[visitor-event] type=scroll depth=50`.
 3. Click an element marked `data-track="floorplan"`; grep `[visitor-event] type=click label=floorplan`.
-4. Run `visitor-backfill-from-logs` over the existing Task 336 log window; the response includes `parityCheck=ok` when graph CTR matches log-scan CTR exactly.
+4. Run `visitor-backfill-from-logs` over a log window where live writes were lost (process restart, etc.); the response reports `recWritten` and `clickWritten` counts. Subsequent runs over the same window are idempotent for `:Recommendation` and append-only for `:Click`.
 
 ## Failure signals
 

package/payload/platform/plugins/graph-viewer/.claude-plugin/plugin.json

@@ -0,0 +1,8 @@
+{
+  "name": "graph-viewer",
+  "description": "Inline Neo4j subgraph renderer. Provides graph-render — a Node-side PNG renderer that walks N hops from a starting node, applies the same palette and display strings the live /graph page uses, and returns the image as an MCP image content block. Removes the device-switch otherwise required for the agent to show the operator what a subgraph looks like. Account-scoped: the tool refuses to render nodes outside the caller's accountId. Layout is d3-force with a deterministic seed; drawing is @napi-rs/canvas with a system-font fallback for labels. The fidelity contract is palette and display-string parity — node positions will differ from the live page's vis-network layout. Ships one skill: render-graph.",
+  "version": "0.1.0",
+  "author": {
+    "name": "Rubytech LLC"
+  }
+}

package/payload/platform/plugins/graph-viewer/PLUGIN.md

@@ -0,0 +1,56 @@
+---
+name: graph-viewer
+mcp:
+  command: node
+  args:
+    - ${PLATFORM_ROOT}/lib/mcp-spawn-tee/dist/index.js
+    - ${PLATFORM_ROOT}/plugins/graph-viewer/mcp/dist/index.js
+  env:
+    MCP_SPAWN_TEE_NAME: graph-viewer
+    LOG_DIR: ${LOG_DIR}
+    PLATFORM_ROOT: ${PLATFORM_ROOT}
+    ACCOUNT_ID: ${ACCOUNT_ID}
+    SESSION_ID: ${SESSION_ID}
+mcp-manifest: skip
+description: "Inline Neo4j subgraph renderer. Provides graph-render — a Node-side PNG renderer that walks N hops from a starting node, applies the same palette and display strings the live /graph page uses, and returns the image as an MCP image content block. Removes the device-switch otherwise required for the agent to show the operator what a subgraph looks like. Account-scoped: the tool refuses to render nodes outside the caller's accountId. Layout is d3-force with a deterministic seed; drawing is @napi-rs/canvas with a system-font fallback for labels. The fidelity contract is palette and display-string parity — node positions will differ from the live page's vis-network layout. Ships one skill: render-graph."
+tools:
+  - name: graph-render
+    publicAllowlist: false
+    adminAllowlist: true
+---
+
+# graph-viewer
+
+## What it does
+
+A single MCP tool, `graph-render`, takes a Neo4j node ID and a hop depth and
+returns an inline PNG of the subgraph rooted at that node. The agent
+attaches the PNG to its reply so the operator can see the graph without
+opening the admin UI on a different device.
+
+## Why it exists
+
+Before this plugin, the agent had no way to ship the operator a picture
+of a subgraph from inside chat. Mermaid and ASCII substitutes were
+illegible and bore no resemblance to the live `/graph` page. Operators
+otherwise had to leave the chat surface, open the admin UI on whatever
+device hosts it, and re-find the same subgraph by hand.
+
+## Surface boundaries
+
+- `graph-render` only accepts a `nodeId + hopDepth` query shape. Arbitrary
+  Cypher is not supported and is filed as a follow-up task.
+- Pixel-equivalence with `/graph` is not a goal. The layout engine is
+  d3-force, not the live page's vis-network port; node positions will
+  differ. The colour palette, label precedence, and short-label strings
+  are shared with `/graph` via `platform/lib/graph-style/`.
+- Subgraphs above 200 nodes return a truncation envelope alongside the
+  capped render.
+- `:Trashed` nodes are filtered out, matching `memory-search`'s contract.
+
+## Enabling
+
+The plugin is auto-discovered from `platform/plugins/`. Each operator
+account must list `graph-viewer` in its `enabledPlugins` (use the admin
+`plugin-toggle-enabled` MCP tool) before `graph-render` appears in the
+agent's tool surface.

package/payload/platform/plugins/graph-viewer/mcp/dist/index.d.ts

@@ -0,0 +1,7 @@
+/**
+ * MCP server entrypoint for the graph-viewer plugin. Registers one tool,
+ * `graph-render`, on the standard stdio transport. Account-scoping is
+ * enforced inside the tool handler against the caller-supplied accountId.
+ */
+export {};
+//# sourceMappingURL=index.d.ts.map

package/payload/platform/plugins/graph-viewer/mcp/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG"}