@rubytech/create-maxy-code 0.1.126 → 0.1.127

package/dist/index.js

@@ -3510,6 +3510,7 @@ else {
     // Upgrade detection: preserve existing DISPLAY_MODE from .env
     const persistDir = resolve(process.env.HOME ?? "/root", BRAND.configDir);
     const envPath = join(persistDir, ".env");
+    let preservedFromEnv = false;
     try {
         if (existsSync(envPath)) {
             const envContent = readFileSync(envPath, "utf-8");
@@ -3517,10 +3518,21 @@ else {
             if (envMatch) {
                 DISPLAY_MODE = envMatch[1];
                 DISPLAY_MODE_SOURCE = ".env (preserved)";
+                preservedFromEnv = true;
             }
         }
     }
     catch { /* non-critical */ }
+    // Darwin has no VNC/X11 stack — `virtual` mode is Pi-only (tigervnc +
+    // websockify + novnc, none of which exist on macOS). Without this guard
+    // a fresh Mac install defaults to virtual, the OAuth step calls the
+    // "Open browser" path that requires a virtual display, and the user
+    // sees "VNC display failed to start" before they ever get to sign in.
+    // Auto-flip to native on darwin when the operator didn't pick a mode.
+    if (!preservedFromEnv && process.platform === "darwin") {
+        DISPLAY_MODE = "native";
+        DISPLAY_MODE_SOURCE = "darwin-auto (no VNC stack)";
+    }
 }
 // ---------------------------------------------------------------------------
 // Embedding model — install-time flag, not a brand attribute.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@rubytech/create-maxy-code",
-  "version": "0.1.126",
+  "version": "0.1.127",
   "description": "Install Maxy — AI for Productive People",
   "bin": {
     "create-maxy-code": "./dist/index.js"

package/payload/platform/config/brand.json

@@ -58,5 +58,24 @@
     { "name": "telegram", "marketplace": "claude-plugins-official", "configureSecret": "TELEGRAM_BOT_TOKEN", "channelPlugin": true },
     { "name": "discord",  "marketplace": "claude-plugins-official", "configureSecret": "DISCORD_BOT_TOKEN",  "channelPlugin": true },
     { "name": "imessage", "marketplace": "claude-plugins-official", "channelPlugin": true }
-  ]
+  ],
+
+  "consent": {
+    "copy": {
+      "title": "Before you browse this listing",
+      "body": "Maxy uses a first-party script to count page views, scrolls and clicks. Nothing is shared with third parties. You can change your mind any time via Manage cookies in the footer.",
+      "accept": "Accept",
+      "reject": "Reject",
+      "manage": "Manage cookies",
+      "policyLinkText": "Read the cookie policy",
+      "policyHref": "/privacy.html#cookies"
+    },
+    "palette": {
+      "bg": "#FAFAF8",
+      "fg": "#1F1F1F",
+      "accent": "#7C8C72",
+      "accentFg": "#FFFFFF",
+      "border": "#E8ECF0"
+    }
+  }
 }

package/payload/platform/lib/aeo-llms-txt-writer/dist/index.d.ts

@@ -0,0 +1,33 @@
+import type { Session } from "neo4j-driver";
+/**
+ * Pure llms.txt + llms-full.txt generator for an account's published
+ * KnowledgeDocument set. llmstxt.org draft format. Plugin-agnostic:
+ * the caller injects its own neo4j session factory so the lib can
+ * be consumed from any plugin that already has a configured driver
+ * (aeo, admin's publish-site tool, future hook callers).
+ */
+export interface WriteLlmsTxtInput {
+    accountId: string;
+    siteName: string;
+    siteDescription?: string;
+    siteDir?: string;
+}
+export interface WriteLlmsTxtDeps {
+    getSession: () => Session;
+}
+export interface WriteLlmsTxtResult {
+    llmsTxt: string;
+    llmsFullTxt: string;
+    pageCount: number;
+    skippedNoUrl: number;
+    sizeBytes: {
+        index: number;
+        full: number;
+    };
+    writtenPaths?: {
+        index: string;
+        full: string;
+    };
+}
+export declare function writeLlmsTxt(input: WriteLlmsTxtInput, deps: WriteLlmsTxtDeps): Promise<WriteLlmsTxtResult>;
+//# sourceMappingURL=index.d.ts.map

package/payload/platform/lib/aeo-llms-txt-writer/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AAE5C;;;;;;GAMG;AAEH,MAAM,WAAW,iBAAiB;IAChC,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,gBAAgB;IAC/B,UAAU,EAAE,MAAM,OAAO,CAAC;CAC3B;AAED,MAAM,WAAW,kBAAkB;IACjC,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;IAC3C,YAAY,CAAC,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;CAChD;AAqBD,wBAAsB,YAAY,CAChC,KAAK,EAAE,iBAAiB,EACxB,IAAI,EAAE,gBAAgB,GACrB,OAAO,CAAC,kBAAkB,CAAC,CAqH7B"}

package/payload/platform/lib/aeo-llms-txt-writer/dist/index.js

@@ -0,0 +1,119 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.writeLlmsTxt = writeLlmsTxt;
+const promises_1 = require("node:fs/promises");
+const node_path_1 = require("node:path");
+const HEADER_RX = /^#\s/m;
+function escapeMarkdown(text) {
+    return text.replace(/[\[\]\(\)\n\r]/g, " ").trim();
+}
+function summariseBody(body) {
+    const flat = body.replace(/\s+/g, " ").trim();
+    if (flat.length <= 200)
+        return flat;
+    return flat.slice(0, 197).trimEnd() + "…";
+}
+async function writeLlmsTxt(input, deps) {
+    const session = deps.getSession();
+    let rows = [];
+    let skippedNoUrl = 0;
+    try {
+        const r = await session.run(`MATCH (d:KnowledgeDocument {accountId: $accountId})
+       RETURN d.title AS title, d.url AS url, d.summary AS summary,
+              coalesce(d.body, d.abstract, '') AS body
+       ORDER BY d.title ASC`, { accountId: input.accountId });
+        for (const rec of r.records) {
+            const title = rec.get("title") ?? "";
+            const url = rec.get("url") ?? "";
+            const summary = rec.get("summary") ?? "";
+            const body = rec.get("body") ?? "";
+            if (!url || !title) {
+                skippedNoUrl += 1;
+                continue;
+            }
+            rows.push({
+                title: escapeMarkdown(title),
+                url: url.trim(),
+                summary: escapeMarkdown(summary) || summariseBody(body) || "(no summary)",
+                body: body.trim(),
+            });
+        }
+    }
+    finally {
+        await session.close();
+    }
+    const indexLines = [];
+    indexLines.push(`# ${escapeMarkdown(input.siteName)}`);
+    indexLines.push("");
+    if (input.siteDescription) {
+        indexLines.push(`> ${escapeMarkdown(input.siteDescription)}`);
+        indexLines.push("");
+    }
+    indexLines.push("## Pages");
+    indexLines.push("");
+    for (const row of rows) {
+        indexLines.push(`- [${row.title}](${row.url}): ${row.summary}`);
+    }
+    indexLines.push("");
+    indexLines.push("<!-- generated by @maxy/aeo-llms-txt-writer; spec: https://llmstxt.org/ -->");
+    const llmsTxt = indexLines.join("\n");
+    const fullLines = [];
+    fullLines.push(`# ${escapeMarkdown(input.siteName)}`);
+    fullLines.push("");
+    if (input.siteDescription) {
+        fullLines.push(`> ${escapeMarkdown(input.siteDescription)}`);
+        fullLines.push("");
+    }
+    for (const row of rows) {
+        fullLines.push(`# ${row.title}`);
+        fullLines.push("");
+        fullLines.push(`Source: ${row.url}`);
+        fullLines.push("");
+        if (row.body) {
+            const safeBody = row.body.replace(HEADER_RX, "## ");
+            fullLines.push(safeBody);
+        }
+        else {
+            fullLines.push(row.summary);
+        }
+        fullLines.push("");
+        fullLines.push("---");
+        fullLines.push("");
+    }
+    const llmsFullTxt = fullLines.join("\n");
+    const sizeBytes = {
+        index: Buffer.byteLength(llmsTxt, "utf-8"),
+        full: Buffer.byteLength(llmsFullTxt, "utf-8"),
+    };
+    process.stderr.write(`[aeo-llms-txt] site=${input.siteName} pages=${rows.length} skippedNoUrl=${skippedNoUrl} indexBytes=${sizeBytes.index} fullBytes=${sizeBytes.full}\n`);
+    let writtenPaths;
+    if (input.siteDir) {
+        const dir = (0, node_path_1.resolve)(input.siteDir);
+        let dirStat;
+        try {
+            dirStat = await (0, promises_1.stat)(dir);
+        }
+        catch (err) {
+            const code = err?.code;
+            throw new Error(`siteDir does not exist (${code ?? "unknown"}): ${dir}`);
+        }
+        if (!dirStat.isDirectory()) {
+            throw new Error(`siteDir is not a directory: ${dir}`);
+        }
+        const indexPath = (0, node_path_1.resolve)(dir, "llms.txt");
+        const fullPath = (0, node_path_1.resolve)(dir, "llms-full.txt");
+        await (0, promises_1.writeFile)(indexPath, llmsTxt, "utf-8");
+        await (0, promises_1.writeFile)(fullPath, llmsFullTxt, "utf-8");
+        writtenPaths = { index: indexPath, full: fullPath };
+        process.stderr.write(`[aeo-llms-txt] wrote site=${dir} indexBytes=${sizeBytes.index} fullBytes=${sizeBytes.full}\n`);
+    }
+    return {
+        llmsTxt,
+        llmsFullTxt,
+        pageCount: rows.length,
+        skippedNoUrl,
+        sizeBytes,
+        writtenPaths,
+    };
+}
+//# sourceMappingURL=index.js.map

package/payload/platform/lib/aeo-llms-txt-writer/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";;AAmDA,oCAwHC;AA3KD,+CAAmD;AACnD,yCAAmD;AAsCnD,MAAM,SAAS,GAAG,OAAO,CAAC;AAE1B,SAAS,cAAc,CAAC,IAAY;IAClC,OAAO,IAAI,CAAC,OAAO,CAAC,iBAAiB,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;AACrD,CAAC;AAED,SAAS,aAAa,CAAC,IAAY;IACjC,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;IAC9C,IAAI,IAAI,CAAC,MAAM,IAAI,GAAG;QAAE,OAAO,IAAI,CAAC;IACpC,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,OAAO,EAAE,GAAG,GAAG,CAAC;AAC5C,CAAC;AAEM,KAAK,UAAU,YAAY,CAChC,KAAwB,EACxB,IAAsB;IAEtB,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,EAAE,CAAC;IAClC,IAAI,IAAI,GAAc,EAAE,CAAC;IACzB,IAAI,YAAY,GAAG,CAAC,CAAC;IACrB,IAAI,CAAC;QACH,MAAM,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CACzB;;;4BAGsB,EACtB,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,CAC/B,CAAC;QACF,KAAK,MAAM,GAAG,IAAI,CAAC,CAAC,OAAO,EAAE,CAAC;YAC5B,MAAM,KAAK,GAAI,GAAG,CAAC,GAAG,CAAC,OAAO,CAAmB,IAAI,EAAE,CAAC;YACxD,MAAM,GAAG,GAAI,GAAG,CAAC,GAAG,CAAC,KAAK,CAAmB,IAAI,EAAE,CAAC;YACpD,MAAM,OAAO,GAAI,GAAG,CAAC,GAAG,CAAC,SAAS,CAAmB,IAAI,EAAE,CAAC;YAC5D,MAAM,IAAI,GAAI,GAAG,CAAC,GAAG,CAAC,MAAM,CAAmB,IAAI,EAAE,CAAC;YACtD,IAAI,CAAC,GAAG,IAAI,CAAC,KAAK,EAAE,CAAC;gBACnB,YAAY,IAAI,CAAC,CAAC;gBAClB,SAAS;YACX,CAAC;YACD,IAAI,CAAC,IAAI,CAAC;gBACR,KAAK,EAAE,cAAc,CAAC,KAAK,CAAC;gBAC5B,GAAG,EAAE,GAAG,CAAC,IAAI,EAAE;gBACf,OAAO,EACL,cAAc,CAAC,OAAO,CAAC,IAAI,aAAa,CAAC,IAAI,CAAC,IAAI,cAAc;gBAClE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE;aAClB,CAAC,CAAC;QACL,CAAC;IACH,CAAC;YAAS,CAAC;QACT,MAAM,OAAO,CAAC,KAAK,EAAE,CAAC;IACxB,CAAC;IAED,MAAM,UAAU,GAAa,EAAE,CAAC;IAChC,UAAU,CAAC,IAAI,CAAC,KAAK,cAAc,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;IACvD,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACpB,IAAI,KAAK,CAAC,eAAe,EAAE,CAAC;QAC1B,UAAU,CAAC,IAAI,CAAC,KAAK,cAAc,CAAC,KAAK,CAAC,eAAe,CAAC,EAAE,CAAC,CAAC;QAC9D,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACtB,CAAC;IACD,UAAU,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IAC5B,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACpB,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,UAAU,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,KAAK,KAAK,GAAG,CAAC,GAAG,MAAM,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;IAClE,CAAC;IACD,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACpB,UAAU,CAAC,IAAI,CACb,6EAA6E,CAC9E,CAAC;IACF,MAAM,OAAO,GAAG,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAEtC,MAAM,SAAS,GAAa,EAAE,CAAC;IAC/B,SAAS,CAAC,IAAI,CAAC,KAAK,cAAc,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;IACtD,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACnB,IAAI,KAAK,CAAC,eAAe,EAAE,CAAC;QAC1B,SAAS,CAAC,IAAI,CAAC,KAAK,cAAc,CAAC,KAAK,CAAC,eAAe,CAAC,EAAE,CAAC,CAAC;QAC7D,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACrB,CAAC;IACD,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,SAAS,CAAC,IAAI,CAAC,KAAK,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC;QACjC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACnB,SAAS,CAAC,IAAI,CAAC,WAAW,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC;QACrC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACnB,IAAI,GAAG,CAAC,IAAI,EAAE,CAAC;YACb,MAAM,QAAQ,GAAG,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;YACpD,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC3B,CAAC;aAAM,CAAC;YACN,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAC9B,CAAC;QACD,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACnB,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACtB,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACrB,CAAC;IACD,MAAM,WAAW,GAAG,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAEzC,MAAM,SAAS,GAAG;QAChB,KAAK,EAAE,MAAM,CAAC,UAAU,CAAC,OAAO,EAAE,OAAO,CAAC;QAC1C,IAAI,EAAE,MAAM,CAAC,UAAU,CAAC,WAAW,EAAE,OAAO,CAAC;KAC9C,CAAC;IAEF,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,uBAAuB,KAAK,CAAC,QAAQ,UAAU,IAAI,CAAC,MAAM,iBAAiB,YAAY,eAAe,SAAS,CAAC,KAAK,cAAc,SAAS,CAAC,IAAI,IAAI,CACtJ,CAAC;IAEF,IAAI,YAAyD,CAAC;IAC9D,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;QAClB,MAAM,GAAG,GAAG,IAAA,mBAAW,EAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACvC,IAAI,OAAO,CAAC;QACZ,IAAI,CAAC;YACH,OAAO,GAAG,MAAM,IAAA,eAAI,EAAC,GAAG,CAAC,CAAC;QAC5B,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,IAAI,GAAI,GAA6B,EAAE,IAAI,CAAC;YAClD,MAAM,IAAI,KAAK,CACb,2BAA2B,IAAI,IAAI,SAAS,MAAM,GAAG,EAAE,CACxD,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC;YAC3B,MAAM,IAAI,KAAK,CAAC,+BAA+B,GAAG,EAAE,CAAC,CAAC;QACxD,CAAC;QACD,MAAM,SAAS,GAAG,IAAA,mBAAW,EAAC,GAAG,EAAE,UAAU,CAAC,CAAC;QAC/C,MAAM,QAAQ,GAAG,IAAA,mBAAW,EAAC,GAAG,EAAE,eAAe,CAAC,CAAC;QACnD,MAAM,IAAA,oBAAS,EAAC,SAAS,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;QAC7C,MAAM,IAAA,oBAAS,EAAC,QAAQ,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC;QAChD,YAAY,GAAG,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;QACpD,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,6BAA6B,GAAG,eAAe,SAAS,CAAC,KAAK,cAAc,SAAS,CAAC,IAAI,IAAI,CAC/F,CAAC;IACJ,CAAC;IAED,OAAO;QACL,OAAO;QACP,WAAW;QACX,SAAS,EAAE,IAAI,CAAC,MAAM;QACtB,YAAY;QACZ,SAAS;QACT,YAAY;KACb,CAAC;AACJ,CAAC"}

package/payload/platform/lib/aeo-llms-txt-writer/src/index.ts

@@ -0,0 +1,172 @@
+import { stat, writeFile } from "node:fs/promises";
+import { resolve as resolvePath } from "node:path";
+import type { Session } from "neo4j-driver";
+
+/**
+ * Pure llms.txt + llms-full.txt generator for an account's published
+ * KnowledgeDocument set. llmstxt.org draft format. Plugin-agnostic:
+ * the caller injects its own neo4j session factory so the lib can
+ * be consumed from any plugin that already has a configured driver
+ * (aeo, admin's publish-site tool, future hook callers).
+ */
+
+export interface WriteLlmsTxtInput {
+  accountId: string;
+  siteName: string;
+  siteDescription?: string;
+  siteDir?: string;
+}
+
+export interface WriteLlmsTxtDeps {
+  getSession: () => Session;
+}
+
+export interface WriteLlmsTxtResult {
+  llmsTxt: string;
+  llmsFullTxt: string;
+  pageCount: number;
+  skippedNoUrl: number;
+  sizeBytes: { index: number; full: number };
+  writtenPaths?: { index: string; full: string };
+}
+
+interface PageRow {
+  title: string;
+  url: string;
+  summary: string;
+  body: string;
+}
+
+const HEADER_RX = /^#\s/m;
+
+function escapeMarkdown(text: string): string {
+  return text.replace(/[\[\]\(\)\n\r]/g, " ").trim();
+}
+
+function summariseBody(body: string): string {
+  const flat = body.replace(/\s+/g, " ").trim();
+  if (flat.length <= 200) return flat;
+  return flat.slice(0, 197).trimEnd() + "…";
+}
+
+export async function writeLlmsTxt(
+  input: WriteLlmsTxtInput,
+  deps: WriteLlmsTxtDeps,
+): Promise<WriteLlmsTxtResult> {
+  const session = deps.getSession();
+  let rows: PageRow[] = [];
+  let skippedNoUrl = 0;
+  try {
+    const r = await session.run(
+      `MATCH (d:KnowledgeDocument {accountId: $accountId})
+       RETURN d.title AS title, d.url AS url, d.summary AS summary,
+              coalesce(d.body, d.abstract, '') AS body
+       ORDER BY d.title ASC`,
+      { accountId: input.accountId },
+    );
+    for (const rec of r.records) {
+      const title = (rec.get("title") as string | null) ?? "";
+      const url = (rec.get("url") as string | null) ?? "";
+      const summary = (rec.get("summary") as string | null) ?? "";
+      const body = (rec.get("body") as string | null) ?? "";
+      if (!url || !title) {
+        skippedNoUrl += 1;
+        continue;
+      }
+      rows.push({
+        title: escapeMarkdown(title),
+        url: url.trim(),
+        summary:
+          escapeMarkdown(summary) || summariseBody(body) || "(no summary)",
+        body: body.trim(),
+      });
+    }
+  } finally {
+    await session.close();
+  }
+
+  const indexLines: string[] = [];
+  indexLines.push(`# ${escapeMarkdown(input.siteName)}`);
+  indexLines.push("");
+  if (input.siteDescription) {
+    indexLines.push(`> ${escapeMarkdown(input.siteDescription)}`);
+    indexLines.push("");
+  }
+  indexLines.push("## Pages");
+  indexLines.push("");
+  for (const row of rows) {
+    indexLines.push(`- [${row.title}](${row.url}): ${row.summary}`);
+  }
+  indexLines.push("");
+  indexLines.push(
+    "<!-- generated by @maxy/aeo-llms-txt-writer; spec: https://llmstxt.org/ -->",
+  );
+  const llmsTxt = indexLines.join("\n");
+
+  const fullLines: string[] = [];
+  fullLines.push(`# ${escapeMarkdown(input.siteName)}`);
+  fullLines.push("");
+  if (input.siteDescription) {
+    fullLines.push(`> ${escapeMarkdown(input.siteDescription)}`);
+    fullLines.push("");
+  }
+  for (const row of rows) {
+    fullLines.push(`# ${row.title}`);
+    fullLines.push("");
+    fullLines.push(`Source: ${row.url}`);
+    fullLines.push("");
+    if (row.body) {
+      const safeBody = row.body.replace(HEADER_RX, "## ");
+      fullLines.push(safeBody);
+    } else {
+      fullLines.push(row.summary);
+    }
+    fullLines.push("");
+    fullLines.push("---");
+    fullLines.push("");
+  }
+  const llmsFullTxt = fullLines.join("\n");
+
+  const sizeBytes = {
+    index: Buffer.byteLength(llmsTxt, "utf-8"),
+    full: Buffer.byteLength(llmsFullTxt, "utf-8"),
+  };
+
+  process.stderr.write(
+    `[aeo-llms-txt] site=${input.siteName} pages=${rows.length} skippedNoUrl=${skippedNoUrl} indexBytes=${sizeBytes.index} fullBytes=${sizeBytes.full}\n`,
+  );
+
+  let writtenPaths: { index: string; full: string } | undefined;
+  if (input.siteDir) {
+    const dir = resolvePath(input.siteDir);
+    let dirStat;
+    try {
+      dirStat = await stat(dir);
+    } catch (err) {
+      const code = (err as NodeJS.ErrnoException)?.code;
+      throw new Error(
+        `siteDir does not exist (${code ?? "unknown"}): ${dir}`,
+      );
+    }
+    if (!dirStat.isDirectory()) {
+      throw new Error(`siteDir is not a directory: ${dir}`);
+    }
+    const indexPath = resolvePath(dir, "llms.txt");
+    const fullPath = resolvePath(dir, "llms-full.txt");
+    await writeFile(indexPath, llmsTxt, "utf-8");
+    await writeFile(fullPath, llmsFullTxt, "utf-8");
+    writtenPaths = { index: indexPath, full: fullPath };
+    process.stderr.write(
+      `[aeo-llms-txt] wrote site=${dir} indexBytes=${sizeBytes.index} fullBytes=${sizeBytes.full}\n`,
+    );
+  }
+
+  return {
+    llmsTxt,
+    llmsFullTxt,
+    pageCount: rows.length,
+    skippedNoUrl,
+    sizeBytes,
+    writtenPaths,
+  };
+}

package/payload/platform/lib/aeo-llms-txt-writer/tsconfig.json

@@ -0,0 +1,8 @@
+{
+  "extends": "../../tsconfig.base.json",
+  "compilerOptions": {
+    "outDir": "dist",
+    "rootDir": "src"
+  },
+  "include": ["src"]
+}

package/payload/platform/package.json

@@ -6,8 +6,8 @@
     "services/*"
   ],
   "scripts": {
-    "build": "tsc -p lib/models/tsconfig.json && tsc -p lib/oauth-llm/tsconfig.json && tsc -p lib/mcp-stderr-tee/tsconfig.json && tsc -p lib/mcp-spawn-tee/tsconfig.json && tsc -p lib/mcp-eager/tsconfig.json && tsc -p lib/account-enumeration/tsconfig.json && tsc -p lib/graph-write/tsconfig.json && tsc -p lib/graph-mcp/tsconfig.json && tsc -p lib/graph-trash/tsconfig.json && tsc -p lib/admin-conversation-purge/tsconfig.json && tsc -p lib/graph-search/tsconfig.json && tsc -p lib/graph-style/tsconfig.json && tsc -p lib/screening-patterns/tsconfig.json && tsc -p lib/device-url/tsconfig.json && tsc -p lib/brand-templating/tsconfig.json && tsc -p lib/entitlement/tsconfig.json && tsc -p lib/task-secrets/tsconfig.json && tsc -p lib/admins-write/tsconfig.json && tsc -p lib/persistent-components/tsconfig.json && tsc -p lib/require-port-env/tsconfig.json && tsc -p services/claude-session-manager/tsconfig.json && NODE_OPTIONS='--max-old-space-size=8192' tsc -b plugins/*/mcp/tsconfig.json",
-    "build:lib": "tsc -p lib/models/tsconfig.json && tsc -p lib/oauth-llm/tsconfig.json && tsc -p lib/mcp-stderr-tee/tsconfig.json && tsc -p lib/mcp-spawn-tee/tsconfig.json && tsc -p lib/mcp-eager/tsconfig.json && tsc -p lib/account-enumeration/tsconfig.json && tsc -p lib/graph-write/tsconfig.json && tsc -p lib/graph-mcp/tsconfig.json && tsc -p lib/graph-trash/tsconfig.json && tsc -p lib/admin-conversation-purge/tsconfig.json && tsc -p lib/graph-search/tsconfig.json && tsc -p lib/graph-style/tsconfig.json && tsc -p lib/screening-patterns/tsconfig.json && tsc -p lib/device-url/tsconfig.json && tsc -p lib/brand-templating/tsconfig.json && tsc -p lib/entitlement/tsconfig.json && tsc -p lib/task-secrets/tsconfig.json && tsc -p lib/admins-write/tsconfig.json && tsc -p lib/persistent-components/tsconfig.json && tsc -p lib/require-port-env/tsconfig.json",
+    "build": "tsc -p lib/models/tsconfig.json && tsc -p lib/oauth-llm/tsconfig.json && tsc -p lib/mcp-stderr-tee/tsconfig.json && tsc -p lib/mcp-spawn-tee/tsconfig.json && tsc -p lib/mcp-eager/tsconfig.json && tsc -p lib/account-enumeration/tsconfig.json && tsc -p lib/graph-write/tsconfig.json && tsc -p lib/graph-mcp/tsconfig.json && tsc -p lib/graph-trash/tsconfig.json && tsc -p lib/admin-conversation-purge/tsconfig.json && tsc -p lib/graph-search/tsconfig.json && tsc -p lib/graph-style/tsconfig.json && tsc -p lib/screening-patterns/tsconfig.json && tsc -p lib/device-url/tsconfig.json && tsc -p lib/brand-templating/tsconfig.json && tsc -p lib/entitlement/tsconfig.json && tsc -p lib/task-secrets/tsconfig.json && tsc -p lib/admins-write/tsconfig.json && tsc -p lib/persistent-components/tsconfig.json && tsc -p lib/require-port-env/tsconfig.json && tsc -p lib/aeo-llms-txt-writer/tsconfig.json && tsc -p services/claude-session-manager/tsconfig.json && NODE_OPTIONS='--max-old-space-size=8192' tsc -b plugins/*/mcp/tsconfig.json",
+    "build:lib": "tsc -p lib/models/tsconfig.json && tsc -p lib/oauth-llm/tsconfig.json && tsc -p lib/mcp-stderr-tee/tsconfig.json && tsc -p lib/mcp-spawn-tee/tsconfig.json && tsc -p lib/mcp-eager/tsconfig.json && tsc -p lib/account-enumeration/tsconfig.json && tsc -p lib/graph-write/tsconfig.json && tsc -p lib/graph-mcp/tsconfig.json && tsc -p lib/graph-trash/tsconfig.json && tsc -p lib/admin-conversation-purge/tsconfig.json && tsc -p lib/graph-search/tsconfig.json && tsc -p lib/graph-style/tsconfig.json && tsc -p lib/screening-patterns/tsconfig.json && tsc -p lib/device-url/tsconfig.json && tsc -p lib/brand-templating/tsconfig.json && tsc -p lib/entitlement/tsconfig.json && tsc -p lib/task-secrets/tsconfig.json && tsc -p lib/admins-write/tsconfig.json && tsc -p lib/persistent-components/tsconfig.json && tsc -p lib/require-port-env/tsconfig.json && tsc -p lib/aeo-llms-txt-writer/tsconfig.json",
     "build:memory": "tsc -p plugins/memory/mcp/tsconfig.json",
     "build:contacts": "tsc -p plugins/contacts/mcp/tsconfig.json",
     "build:telegram": "tsc -p plugins/telegram/mcp/tsconfig.json",

package/payload/platform/plugins/admin/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "admin",
-  "description": "Platform administration plugin. Provides system-status, public-hostname (deterministic Cloudflare public-URL resolver, single call returning the operator's canonical hostname so agents never guess property names on :CloudflareHostname nodes), brand-settings, account-manage, account-update, admin-add, admin-remove, admin-list, admin-update-pin, agent-list, agent-config-read, logs-read, plugin-read, skill-load (one-call resolve+read for SKILL.md by skill name, the canonical primitive for loading a named skill; plugin-read remains the reader for references/* and PLUGIN.md), store-skill (deterministic write counterpart to plugin-read; persists operator-authored skills as plugin files under the active account), session-reset, session-resume, file-attach, wifi, action-approval tools (action-pending, action-approve, action-reject, action-edit), and session-retrospective-mark-complete (the deterministic sentinel the session-end Stop hook reads via JSONL grep to release the retrospective gate; admin calls it once per session after running the three-pass retrospective) for managing the Maxy platform.",
+  "description": "Platform administration plugin. Provides system-status, public-hostname (deterministic Cloudflare public-URL resolver, single call returning the operator's canonical hostname so agents never guess property names on :CloudflareHostname nodes), publish-site (move an extracted static-site tree under <accountDir>/sites/<slug>/, emit one canonical path slug, and refresh llms.txt at the site root — typed refusal taxonomy replaces the prior skill-prose contract), brand-settings, account-manage, account-update, admin-add, admin-remove, admin-list, admin-update-pin, agent-list, agent-config-read, logs-read, plugin-read, skill-load (one-call resolve+read for SKILL.md by skill name, the canonical primitive for loading a named skill; plugin-read remains the reader for references/* and PLUGIN.md), store-skill (deterministic write counterpart to plugin-read; persists operator-authored skills as plugin files under the active account), session-reset, session-resume, file-attach, wifi, action-approval tools (action-pending, action-approve, action-reject, action-edit), and session-retrospective-mark-complete (the deterministic sentinel the session-end Stop hook reads via JSONL grep to release the retrospective gate; admin calls it once per session after running the three-pass retrospective) for managing the Maxy platform.",
   "version": "0.1.0",
   "author": {
     "name": "Rubytech LLC"

package/payload/platform/plugins/admin/PLUGIN.md

@@ -1,7 +1,7 @@
 ---
 name: admin
 surface: platform
-description: "Platform administration plugin. Provides system-status, public-hostname (deterministic Cloudflare public-URL resolver, single call returning the operator's canonical hostname so agents never guess property names on :CloudflareHostname nodes), brand-settings, account-manage, account-update, admin-add, admin-remove, admin-list, admin-update-pin, agent-list, agent-config-read, logs-read, plugin-read, skill-load (one-call resolve+read for SKILL.md by skill name, the canonical primitive for loading a named skill; plugin-read remains the reader for references/* and PLUGIN.md), store-skill (deterministic write counterpart to plugin-read; persists operator-authored skills as plugin files under the active account), session-reset, session-resume, file-attach, wifi, action-approval tools (action-pending, action-approve, action-reject, action-edit), and session-retrospective-mark-complete (the deterministic sentinel the session-end Stop hook reads via JSONL grep to release the retrospective gate; admin calls it once per session after running the three-pass retrospective) for managing the Maxy platform."
+description: "Platform administration plugin. Provides system-status, public-hostname (deterministic Cloudflare public-URL resolver, single call returning the operator's canonical hostname so agents never guess property names on :CloudflareHostname nodes), publish-site (move an extracted static-site tree under <accountDir>/sites/<slug>/, emit one canonical path slug, and refresh llms.txt at the site root — typed refusal taxonomy replaces the prior skill-prose contract), brand-settings, account-manage, account-update, admin-add, admin-remove, admin-list, admin-update-pin, agent-list, agent-config-read, logs-read, plugin-read, skill-load (one-call resolve+read for SKILL.md by skill name, the canonical primitive for loading a named skill; plugin-read remains the reader for references/* and PLUGIN.md), store-skill (deterministic write counterpart to plugin-read; persists operator-authored skills as plugin files under the active account), session-reset, session-resume, file-attach, wifi, action-approval tools (action-pending, action-approve, action-reject, action-edit), and session-retrospective-mark-complete (the deterministic sentinel the session-end Stop hook reads via JSONL grep to release the retrospective gate; admin calls it once per session after running the three-pass retrospective) for managing the Maxy platform."
 tools:
   - name: system-status
     publicAllowlist: false
@@ -9,6 +9,9 @@ tools:
   - name: public-hostname
     publicAllowlist: false
     adminAllowlist: false
+  - name: publish-site
+    publicAllowlist: false
+    adminAllowlist: false
   - name: brand-settings
     publicAllowlist: false
     adminAllowlist: false

package/payload/platform/plugins/admin/mcp/dist/index.js

@@ -20,6 +20,21 @@ import QRCode from "qrcode";
 import { getSession, closeDriver } from "./lib/neo4j.js";
 import { findSkillOwners, computePluginReadHint, loadSkill, parseRequiredInputs } from "./skill-resolution.js";
 import { resolvePublicHostname } from "./lib/public-hostname.js";
+import { publishSite } from "./tools/publish-site.js";
+function refusalGuidance(kind) {
+    switch (kind) {
+        case "unsafe-slug":
+            return "Operator action: pick a slug whose segments match /^[a-z0-9_][a-z0-9_.-]{0,99}$/i, no leading dot, no `..`.";
+        case "destination-occupied":
+            return "Operator action: the target directory already exists with contents. Clean it up explicitly or pick a different slug.";
+        case "symlink-in-source":
+            return "Operator action: the source tree contains a symlink. Resolve or remove the symlink before publishing.";
+        case "zero-html":
+            return "Operator action: the source has no top-level .html file. Confirm the tree shape.";
+        case "ambiguous-html":
+            return "Operator action: pick which top-level .html file is the landing page (or add an index.html to the source).";
+    }
+}
 const server = new McpServer({
     name: "admin",
     version: "0.1.0",
@@ -468,6 +483,64 @@ eagerTool(server, "public-hostname", "Resolve this account's canonical public ho
         };
     }
 });
+server.tool("publish-site", "Publish an already-extracted static-site tree under <accountDir>/sites/<slug>/. Validates the slug, scans the source for symlinks, refuses on ambiguous landing pages, performs a single mv, then refreshes llms.txt + llms-full.txt at the site root via the AEO writer (best-effort — failure never unwinds the mv). Returns the canonical path slug; pair with public-hostname to build the full URL. Refusals are structured (unsafe-slug | destination-occupied | symlink-in-source | zero-html | ambiguous-html), each carrying a fixed operator message.", {
+    source: z
+        .string()
+        .min(1)
+        .describe("Absolute path to the extracted source directory (typically the output of unzip-attachment under <accountDir>/extracted/<id>/). Must be a directory tree of HTML + assets."),
+    slug: z
+        .string()
+        .min(1)
+        .describe("Operator-supplied path under <accountDir>/sites/. One or more `/`-separated segments; each segment matches /^[a-z0-9_][a-z0-9_.-]{0,99}$/i, no leading dot, no `..`."),
+    siteName: z
+        .string()
+        .optional()
+        .describe("Optional display name used in the generated llms.txt header. Defaults to the last slug segment."),
+    siteDescription: z
+        .string()
+        .optional()
+        .describe("Optional one-line description rendered as a blockquote under the llms.txt header."),
+}, async (args) => {
+    if (!ACCOUNT_ID)
+        return refuseNoAccount("publish-site");
+    const accountDir = getAccountDir();
+    try {
+        const result = await publishSite({
+            accountId: ACCOUNT_ID,
+            accountDir,
+            source: args.source,
+            slug: args.slug,
+            siteName: args.siteName,
+            siteDescription: args.siteDescription,
+        }, { getSession });
+        if (!result.ok) {
+            const body = `refused: ${result.refusal}\n` +
+                `detail: ${JSON.stringify(result.detail)}\n` +
+                refusalGuidance(result.refusal);
+            return { content: [{ type: "text", text: body }] };
+        }
+        const aeoLine = result.aeo.ok
+            ? `aeo: ok wrote=${result.aeo.indexPath} indexBytes=${result.aeo.indexBytes}`
+            : `aeo: failed reason=${result.aeo.reason}`;
+        const body = `pathSlug: ${result.pathSlug}\n` +
+            `kind: ${result.kind}\n` +
+            `movedFiles: ${result.movedFiles}\n` +
+            `destination: ${result.destination}\n` +
+            `${aeoLine}\n` +
+            `usage: call public-hostname next and concatenate \`https://<hostname>${result.pathSlug}\` to surface the full URL to the operator.`;
+        return { content: [{ type: "text", text: body }] };
+    }
+    catch (err) {
+        const errMsg = err instanceof Error ? err.message : String(err);
+        process.stderr.write(`[publish-site] error accountId=${ACCOUNT_ID} message="${errMsg.replace(/"/g, "'")}"\n`);
+        return {
+            content: [
+                { type: "text", text: `publish-site failed: ${errMsg}` },
+            ],
+            isError: true,
+        };
+    }
+});
 eagerTool(server, "remote-auth-status", "Check whether the remote access password is configured. When not configured, emits a device-bound URL affordance (maxy-device-url fenced block) pointing at the password setup page — this URL opens on the device's own screen when the operator clicks it. The agent never constructs the password file path or runs shell commands — this tool is the single authority.", {}, async () => {
     if (!ACCOUNT_ID)
         return refuseNoAccount("remote-auth-status");