@rubytech/create-maxy-code 0.1.126 → 0.1.127

package/payload/platform/plugins/admin/mcp/dist/tools/publish-site.js

@@ -0,0 +1,176 @@
+import { mkdir, readdir, rename, stat } from "node:fs/promises";
+import { resolve as resolvePath, join, dirname } from "node:path";
+import { writeLlmsTxt } from "../../../../../lib/aeo-llms-txt-writer/dist/index.js";
+/**
+ * Publish an already-extracted static-site tree into the per-account
+ * static-publish surface (<accountDir>/sites/<slug>/) and emit one
+ * canonical path slug. Pure function — the MCP registration in index.ts
+ * adapts the discriminated-union result onto the MCP transport response.
+ *
+ * Invariants (each maps to one Refusal kind):
+ *   - slug segments match SAFE_SEG_RE, no leading dot, no `..`
+ *   - destination must be absent or empty
+ *   - source tree must contain no symlinks at any depth
+ *   - source must have at least one .html at the top level
+ *   - if no index.html at top level, exactly one top-level .html
+ *
+ * Post-move:
+ *   - canonical path is `/sites/<slug>/` if index.html at top level,
+ *     otherwise `/sites/<slug>/<the-one-html>.html`
+ *   - llms.txt + llms-full.txt are refreshed via writeLlmsTxt
+ *     (best-effort: failure does not unwind the mv)
+ *
+ * All operator-visible log lines preserved verbatim from the prior
+ * skill-prose contract so existing grep targets keep working.
+ */
+const SAFE_SEG_RE = /^[a-z0-9_][a-z0-9_.-]{0,99}$/i;
+const TAG = "[publish-site]";
+function refusal(kind, detail, logLine) {
+    process.stderr.write(`${TAG} refused reason=${kind} ${logLine}\n`);
+    return { ok: false, refusal: kind, detail };
+}
+function validateSlug(slug) {
+    const segments = slug.split("/").filter((s) => s.length > 0);
+    if (segments.length === 0) {
+        return {
+            ok: false,
+            refusal: refusal("unsafe-slug", { slug }, `slug=${slug}`),
+        };
+    }
+    for (const seg of segments) {
+        if (seg === "..") {
+            return {
+                ok: false,
+                refusal: refusal("unsafe-slug", { slug, segment: seg }, `slug=${slug}`),
+            };
+        }
+        if (seg.startsWith(".")) {
+            return {
+                ok: false,
+                refusal: refusal("unsafe-slug", { slug, segment: seg }, `slug=${slug}`),
+            };
+        }
+        if (!SAFE_SEG_RE.test(seg)) {
+            return {
+                ok: false,
+                refusal: refusal("unsafe-slug", { slug, segment: seg }, `slug=${slug}`),
+            };
+        }
+    }
+    return { ok: true, segments };
+}
+async function findSymlinkAnywhere(dir) {
+    const entries = await readdir(dir, { withFileTypes: true });
+    for (const ent of entries) {
+        if (ent.isSymbolicLink())
+            return join(dir, ent.name);
+        if (ent.isDirectory()) {
+            const found = await findSymlinkAnywhere(join(dir, ent.name));
+            if (found)
+                return found;
+        }
+    }
+    return null;
+}
+async function countFiles(dir) {
+    let n = 0;
+    const entries = await readdir(dir, { withFileTypes: true });
+    for (const ent of entries) {
+        if (ent.isFile())
+            n += 1;
+        else if (ent.isDirectory())
+            n += await countFiles(join(dir, ent.name));
+    }
+    return n;
+}
+export async function publishSite(input, deps) {
+    const { accountId, accountDir, source, slug } = input;
+    const slugCheck = validateSlug(slug);
+    if (!slugCheck.ok)
+        return slugCheck.refusal;
+    const destination = resolvePath(accountDir, "sites", ...slugCheck.segments);
+    // Pre-flight: dest must be absent or empty.
+    try {
+        const destStat = await stat(destination);
+        if (destStat.isDirectory()) {
+            const entries = await readdir(destination);
+            if (entries.length > 0) {
+                return refusal("destination-occupied", { destination, entryCount: entries.length }, `dest=${destination}`);
+            }
+        }
+        else {
+            return refusal("destination-occupied", { destination, kind: "non-directory" }, `dest=${destination}`);
+        }
+    }
+    catch (err) {
+        const code = err?.code;
+        if (code !== "ENOENT")
+            throw err;
+        // ENOENT is the happy path — destination doesn't exist yet.
+    }
+    // Pre-flight: source symlink scan (any depth).
+    const symlink = await findSymlinkAnywhere(source);
+    if (symlink) {
+        return refusal("symlink-in-source", { source, entry: symlink }, `entry=${symlink}`);
+    }
+    // Pre-flight: top-level html inventory.
+    const topLevel = await readdir(source, { withFileTypes: true });
+    const topHtml = topLevel
+        .filter((e) => e.isFile() && e.name.toLowerCase().endsWith(".html"))
+        .map((e) => e.name);
+    if (topHtml.length === 0) {
+        return refusal("zero-html", { source }, `source=${source}`);
+    }
+    const hasIndex = topHtml.some((n) => n.toLowerCase() === "index.html");
+    if (!hasIndex && topHtml.length > 1) {
+        return refusal("ambiguous-html", { source, candidates: topHtml }, `candidates=${topHtml.join(",")}`);
+    }
+    const movedFiles = await countFiles(source);
+    // Move. Single rename — same filesystem assumed (accountDir-local).
+    // Ensure the parent (`<accountDir>/sites/...` up to the leaf) exists so
+    // the first publish on a fresh accountDir doesn't ENOENT. mkdir is
+    // idempotent on the parent; the leaf itself was confirmed absent above.
+    await mkdir(dirname(destination), { recursive: true });
+    // EXDEV or EACCES propagates as an exception → MCP isError surfacing
+    // via the registration layer in index.ts.
+    await rename(source, destination);
+    process.stderr.write(`${TAG} move from=${source} to=${destination}/ files=${movedFiles}\n`);
+    const kind = hasIndex ? "index" : "file";
+    const pathSlug = hasIndex
+        ? `/sites/${slugCheck.segments.join("/")}/`
+        : `/sites/${slugCheck.segments.join("/")}/${topHtml[0]}`;
+    process.stderr.write(`${TAG} url emitted=${pathSlug} kind=${kind}\n`);
+    // Post-move hook: refresh llms.txt at the site root. Best-effort.
+    // Never unwinds the mv — a stale llms.txt is strictly less bad than
+    // a failed publish.
+    let aeo;
+    try {
+        const llms = await writeLlmsTxt({
+            accountId,
+            siteName: slugCheck.segments[slugCheck.segments.length - 1],
+            siteDir: destination,
+            siteDescription: input.siteDescription,
+        }, { getSession: deps.getSession });
+        const indexPath = llms.writtenPaths?.index ?? "";
+        aeo = {
+            ok: true,
+            indexPath,
+            indexBytes: llms.sizeBytes.index,
+        };
+        process.stderr.write(`${TAG} aeo-llms-txt-ok wrote=${indexPath} indexBytes=${llms.sizeBytes.index}\n`);
+    }
+    catch (err) {
+        const reason = err instanceof Error ? err.message : String(err);
+        aeo = { ok: false, reason };
+        process.stderr.write(`${TAG} aeo-llms-txt-failed reason=${reason}\n`);
+    }
+    return {
+        ok: true,
+        pathSlug,
+        kind,
+        movedFiles,
+        destination,
+        aeo,
+    };
+}
+//# sourceMappingURL=publish-site.js.map

package/payload/platform/plugins/admin/mcp/dist/tools/publish-site.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"publish-site.js","sourceRoot":"","sources":["../../src/tools/publish-site.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AAChE,OAAO,EAAE,OAAO,IAAI,WAAW,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAGlE,OAAO,EAAE,YAAY,EAAE,MAAM,sDAAsD,CAAC;AAEpF;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH,MAAM,WAAW,GAAG,+BAA+B,CAAC;AACpD,MAAM,GAAG,GAAG,gBAAgB,CAAC;AAuC7B,SAAS,OAAO,CACd,IAAwB,EACxB,MAA+B,EAC/B,OAAe;IAEf,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,GAAG,mBAAmB,IAAI,IAAI,OAAO,IAAI,CAAC,CAAC;IACnE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;AAC9C,CAAC;AAED,SAAS,YAAY,CAAC,IAAY;IAGhC,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IAC7D,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1B,OAAO;YACL,EAAE,EAAE,KAAK;YACT,OAAO,EAAE,OAAO,CAAC,aAAa,EAAE,EAAE,IAAI,EAAE,EAAE,QAAQ,IAAI,EAAE,CAAC;SAC1D,CAAC;IACJ,CAAC;IACD,KAAK,MAAM,GAAG,IAAI,QAAQ,EAAE,CAAC;QAC3B,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;YACjB,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,OAAO,EAAE,OAAO,CAAC,aAAa,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,EAAE,QAAQ,IAAI,EAAE,CAAC;aACxE,CAAC;QACJ,CAAC;QACD,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YACxB,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,OAAO,EAAE,OAAO,CAAC,aAAa,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,EAAE,QAAQ,IAAI,EAAE,CAAC;aACxE,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YAC3B,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,OAAO,EAAE,OAAO,CAAC,aAAa,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,EAAE,QAAQ,IAAI,EAAE,CAAC;aACxE,CAAC;QACJ,CAAC;IACH,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;AAChC,CAAC;AAED,KAAK,UAAU,mBAAmB,CAAC,GAAW;IAC5C,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,GAAG,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;IAC5D,KAAK,MAAM,GAAG,IAAI,OAAO,EAAE,CAAC;QAC1B,IAAI,GAAG,CAAC,cAAc,EAAE;YAAE,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;QACrD,IAAI,GAAG,CAAC,WAAW,EAAE,EAAE,CAAC;YACtB,MAAM,KAAK,GAAG,MAAM,mBAAmB,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;YAC7D,IAAI,KAAK;gBAAE,OAAO,KAAK,CAAC;QAC1B,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,KAAK,UAAU,UAAU,CAAC,GAAW;IACnC,IAAI,CAAC,GAAG,CAAC,CAAC;IACV,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,GAAG,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;IAC5D,KAAK,MAAM,GAAG,IAAI,OAAO,EAAE,CAAC;QAC1B,IAAI,GAAG,CAAC,MAAM,EAAE;YAAE,CAAC,IAAI,CAAC,CAAC;aACpB,IAAI,GAAG,CAAC,WAAW,EAAE;YAAE,CAAC,IAAI,MAAM,UAAU,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;IACzE,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,KAAuB,EACvB,IAAqB;IAErB,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,KAAK,CAAC;IAEtD,MAAM,SAAS,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;IACrC,IAAI,CAAC,SAAS,CAAC,EAAE;QAAE,OAAO,SAAS,CAAC,OAAO,CAAC;IAE5C,MAAM,WAAW,GAAG,WAAW,CAAC,UAAU,EAAE,OAAO,EAAE,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;IAE5E,4CAA4C;IAC5C,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,CAAC;QACzC,IAAI,QAAQ,CAAC,WAAW,EAAE,EAAE,CAAC;YAC3B,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,WAAW,CAAC,CAAC;YAC3C,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACvB,OAAO,OAAO,CACZ,sBAAsB,EACtB,EAAE,WAAW,EAAE,UAAU,EAAE,OAAO,CAAC,MAAM,EAAE,EAC3C,QAAQ,WAAW,EAAE,CACtB,CAAC;YACJ,CAAC;QACH,CAAC;aAAM,CAAC;YACN,OAAO,OAAO,CACZ,sBAAsB,EACtB,EAAE,WAAW,EAAE,IAAI,EAAE,eAAe,EAAE,EACtC,QAAQ,WAAW,EAAE,CACtB,CAAC;QACJ,CAAC;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,GAAI,GAA6B,EAAE,IAAI,CAAC;QAClD,IAAI,IAAI,KAAK,QAAQ;YAAE,MAAM,GAAG,CAAC;QACjC,4DAA4D;IAC9D,CAAC;IAED,+CAA+C;IAC/C,MAAM,OAAO,GAAG,MAAM,mBAAmB,CAAC,MAAM,CAAC,CAAC;IAClD,IAAI,OAAO,EAAE,CAAC;QACZ,OAAO,OAAO,CACZ,mBAAmB,EACnB,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,EAC1B,SAAS,OAAO,EAAE,CACnB,CAAC;IACJ,CAAC;IAED,wCAAwC;IACxC,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,MAAM,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;IAChE,MAAM,OAAO,GAAG,QAAQ;SACrB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;SACnE,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IACtB,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,OAAO,CAAC,WAAW,EAAE,EAAE,MAAM,EAAE,EAAE,UAAU,MAAM,EAAE,CAAC,CAAC;IAC9D,CAAC;IACD,MAAM,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,KAAK,YAAY,CAAC,CAAC;IACvE,IAAI,CAAC,QAAQ,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACpC,OAAO,OAAO,CACZ,gBAAgB,EAChB,EAAE,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,EAC/B,cAAc,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAClC,CAAC;IACJ,CAAC;IAED,MAAM,UAAU,GAAG,MAAM,UAAU,CAAC,MAAM,CAAC,CAAC;IAE5C,oEAAoE;IACpE,wEAAwE;IACxE,mEAAmE;IACnE,wEAAwE;IACxE,MAAM,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACvD,qEAAqE;IACrE,0CAA0C;IAC1C,MAAM,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;IAClC,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,GAAG,GAAG,cAAc,MAAM,OAAO,WAAW,WAAW,UAAU,IAAI,CACtE,CAAC;IAEF,MAAM,IAAI,GAAqB,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC;IAC3D,MAAM,QAAQ,GAAG,QAAQ;QACvB,CAAC,CAAC,UAAU,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG;QAC3C,CAAC,CAAC,UAAU,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;IAC3D,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,GAAG,gBAAgB,QAAQ,SAAS,IAAI,IAAI,CAAC,CAAC;IAEtE,kEAAkE;IAClE,oEAAoE;IACpE,oBAAoB;IACpB,IAAI,GAE6B,CAAC;IAClC,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,YAAY,CAC7B;YACE,SAAS;YACT,QAAQ,EAAE,SAAS,CAAC,QAAQ,CAAC,SAAS,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC;YAC3D,OAAO,EAAE,WAAW;YACpB,eAAe,EAAE,KAAK,CAAC,eAAe;SACvC,EACD,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,CAChC,CAAC;QACF,MAAM,SAAS,GAAG,IAAI,CAAC,YAAY,EAAE,KAAK,IAAI,EAAE,CAAC;QACjD,GAAG,GAAG;YACJ,EAAE,EAAE,IAAI;YACR,SAAS;YACT,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK;SACjC,CAAC;QACF,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,GAAG,GAAG,0BAA0B,SAAS,eAAe,IAAI,CAAC,SAAS,CAAC,KAAK,IAAI,CACjF,CAAC;IACJ,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,MAAM,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAChE,GAAG,GAAG,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;QAC5B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,GAAG,+BAA+B,MAAM,IAAI,CAAC,CAAC;IACxE,CAAC;IAED,OAAO;QACL,EAAE,EAAE,IAAI;QACR,QAAQ;QACR,IAAI;QACJ,UAAU;QACV,WAAW;QACX,GAAG;KACJ,CAAC;AACJ,CAAC"}

package/payload/platform/plugins/admin/skills/publish-site/SKILL.md

@@ -1,75 +1,37 @@
 # Publish Site
 
-Move an already-extracted static-site tree into the per-account static-publish surface (`<accountDir>/sites/<slug>/`) and emit exactly one canonical path slug. Pair the slug with the deterministic public hostname returned by `mcp__admin__public-hostname` to surface the full URL in a single turn.
+Call `mcp__admin__publish-site` to move an already-extracted static-site tree into the per-account static-publish surface (`<accountDir>/sites/<slug>/`) and emit one canonical path slug. Pair the slug with `mcp__admin__public-hostname` to surface the full URL in the same turn.
 
-**Invoked from `specialists:content-producer`** when the brief carries a host-website / publish-site / put-online intent. Admin's IDENTITY.md routes those intents to that specialist on turn 1; running this skill inline on the main admin runner exhausts the 10-turn budget on per-turn ToolSearch + plugin-read discovery before publish-site executes.
+**Invoked from `specialists:content-producer`** when the brief carries a host-website / publish-site / put-online intent. The slug validation, symlink scan, refusal taxonomy, `mv`, canonical-path selection, and llms.txt refresh all run inside the typed tool — this skill is the intent router, not the implementer.
 
-## When to Use
+## When to use
 
 Activate when **both** are true:
 
 - The current turn carries a "host this website" / "publish this site" / "put this online" / equivalent intent.
-- A directory tree of HTML + assets is already on disk under `<accountDir>/extracted/<attachmentId>/` (the typical output of [unzip-attachment](../unzip-attachment/SKILL.md)), or the conversation already names a source directory under `<accountDir>/`.
+- A directory tree of HTML + assets is already on disk under `<accountDir>/extracted/<attachmentId>/` (typical output of [unzip-attachment](../unzip-attachment/SKILL.md)), or the conversation already names a source directory under `<accountDir>/`.
 
-Do **not** activate for `.pdf`, `.docx`, slide decks, single-image attachments, or zips whose extracted output is not a directory tree of HTML + assets — those have their own skills (`a4-print-documents`, `deck-pages`, etc.). The intent + tree shape is the gate.
+Do **not** activate for `.pdf`, `.docx`, slide decks, single-image attachments, or zips whose extracted output is not a directory tree of HTML + assets — those have their own skills (`a4-print-documents`, `deck-pages`, etc.).
 
-## Inputs
+## Call
 
-- `source` — absolute path to the extracted directory tree (already produced by `unzip-attachment`).
-- `slug` — operator-supplied or operator-confirmed path under `<accountDir>/sites/`. One or more `/`-separated segments; each segment matches the platform's `SAFE_SEG_RE` (`/^[a-z0-9_][a-z0-9_.-]{0,99}$/i`); no segment starts with `.`; no segment equals `..`. Confirm with the operator before proceeding when the slug is not already explicit.
+```
+mcp__admin__publish-site
+  source:           <absolute path to the extracted source directory>
+  slug:             <operator-supplied or operator-confirmed path under sites/>
+  siteName?:        <optional llms.txt header; defaults to the last slug segment>
+  siteDescription?: <optional one-line blockquote under the llms.txt header>
+```
 
-## Invariants
+Confirm the slug with the operator before calling if it isn't already explicit in the conversation.
 
-These are non-negotiable. Each is mechanically check-able and each maps to a fixed refusal log line.
+## Surface the result
 
-1. **Move, never copy.** The source tree is `mv`'d into `<accountDir>/sites/<slug>/`. No re-extraction, no `cp`. After success the source path no longer exists.
-2. **No filename invention.** Never `cp <any>.html index.html` to satisfy a URL form. If the moved tree's top level has no `index.html`, the canonical path slug points at the actual landing HTML by name.
-3. **One emitted path slug.** The skill emits exactly one path string starting with `/sites/`:
-   - `/sites/<slug>/` — when `<accountDir>/sites/<slug>/index.html` exists after the move.
-   - `/sites/<slug>/<file>.html` — when no `index.html` and exactly one HTML file sits at the top level.
-4. **Path only — no scheme, no host.** The emitted string is a path. Never emit a URL with a scheme or a host. The operator pairs the slug with their own public-host root.
-5. **No fallback servers, no Playwright probes, no service restarts.** If the move or URL form is wrong, refuse. Reaching for `python -m http.server`, `npx http-server`, browser-automation probes, or platform restarts in place of fixing the URL contract is the prior-session failure pattern this skill exists to close.
-6. **Source must be a real directory tree, no symlinks.** If `find <source> -type l` returns any entry, refuse.
-
-## Refusals
-
-Each refusal is a `[publish-site] refused` log line plus a fixed operator message. No retry, no silent substitution.
-
-| Reason | Trigger | Log line |
-|---|---|---|
-| `unsafe-slug` | Any segment fails `SAFE_SEG_RE`, has a leading `.`, or equals `..` | `[publish-site] refused reason=unsafe-slug slug=<value>` |
-| `destination-occupied` | `<accountDir>/sites/<slug>/` already exists with non-empty contents | `[publish-site] refused reason=destination-occupied dest=<path>` |
-| `symlink-in-source` | `find <source> -type l` returns at least one entry | `[publish-site] refused reason=symlink-in-source entry=<path>` |
-| `zero-html` | The top level of `<source>` has no `*.html` files | `[publish-site] refused reason=zero-html source=<path>` |
-| `ambiguous-html` | Multiple top-level `*.html` files and no `index.html` | `[publish-site] refused reason=ambiguous-html candidates=<f1>,<f2>,...` |
-
-The operator message for `ambiguous-html` names the candidate files and asks the operator to pick which file is the landing page (or to add an `index.html` to the source). No move happens until the choice is explicit.
-
-## Flow
-
-1. **Resolve and validate slug.** Split on `/`; reject any segment that violates the rules above.
-2. **Pre-flight checks.** Inspect the source tree's top level: count `*.html` files; check for `index.html`; run the symlink scan; check the destination is absent or empty. Apply refusals before any disk mutation.
-3. **Move.** Single `mv <source> <accountDir>/sites/<slug>/`. Emit one log line:
-   `[publish-site] move from=<source> to=<accountDir>/sites/<slug>/ files=<n>`
-4. **Choose the canonical path.** `index.html` present at top level → path is `/sites/<slug>/`. Otherwise the single top-level HTML file → path is `/sites/<slug>/<file>.html`.
-5. **Emit.** One log line:
-   `[publish-site] url emitted=<path-slug> kind=<index|file>`
-6. **Refresh `llms.txt` at the site root.** Call `mcp__aeo__aeo-write-llms-txt` with `{ siteName: "<slug>", siteDir: "<accountDir>/sites/<slug>" }`. The AEO tool reads the account's `KnowledgeDocument` set and writes `llms.txt` + `llms-full.txt` into `<siteDir>/`, so answer-engine crawlers always see the current page set at the moment of publish. `accountId` is implicit — the AEO plugin reads it from its own env. On success, emit `[publish-site] aeo-llms-txt-ok wrote=<indexPath> indexBytes=<n>`. **Best-effort invariant:** if the call fails (tool returns `isError`, throws, or the `aeo` plugin is not loaded for this account), emit `[publish-site] aeo-llms-txt-failed reason=<msg>` and continue. **Never unwind the `mv` on AEO failure** — the publish already succeeded, the URL is live, and a stale or missing `llms.txt` is strictly less bad than a failed publish.
-7. **Resolve the public hostname and emit the full URL.** Call `mcp__admin__public-hostname` to fetch this account's hostname; the tool reads `cloudflared/config.yml` + `alias-domains.json` — the same files the platform server trusts to route. Concatenate `https://<hostname><path-slug>` and surface that one URL to the operator. If the tool returns `reason: no-tunnel`, relay the tool's remediation message verbatim — do not improvise the URL. The route at `/sites/*` (see [server/routes/sites.ts](../../../../ui/server/routes/sites.ts)) handles the trailing-slash redirect on the dir form, so the slug is correct as-emitted whether the operator's HTML uses an `index.html` entry-point or a publisher-named landing file.
-
-## Log lines (grep targets)
-
-| When | Line |
-|---|---|
-| After move | `[publish-site] move from=<src> to=<dest> files=<n>` |
-| Path emission | `[publish-site] url emitted=<path-slug> kind=<index\|file>` |
-| AEO llms.txt success | `[publish-site] aeo-llms-txt-ok wrote=<indexPath> indexBytes=<n>` |
-| AEO llms.txt failure (best-effort, publish continues) | `[publish-site] aeo-llms-txt-failed reason=<msg>` |
-| Refusal (any reason) | `[publish-site] refused reason=<unsafe-slug\|destination-occupied\|symlink-in-source\|zero-html\|ambiguous-html> <key=value pairs>` |
+- **On success** the tool returns `pathSlug` (e.g. `/sites/demo/` or `/sites/demo/brochure.html`). Call `mcp__admin__public-hostname` next and surface `https://<hostname><pathSlug>` to the operator. The `aeo:` line on the response tells you whether `llms.txt` refresh succeeded; if it failed, the publish still succeeded — relay the URL anyway.
+- **On refusal** the tool returns a `refused: <kind>` body with a fixed `Operator action:` guidance line. Relay the guidance verbatim. The five refusal kinds are `unsafe-slug`, `destination-occupied`, `symlink-in-source`, `zero-html`, and `ambiguous-html`. No retry, no improvisation, no fallback server.
 
 ## Out of scope
 
-- Cleanup of pre-existing synthetic files left by earlier sessions (e.g. a stray `index.html` produced by an earlier `cp brochure.html index.html` workaround). Refuse with `destination-occupied` and let the operator clean up explicitly.
 - Extraction. `unzip-attachment` already owns the extract step; the source path is its output.
-- DNS, tunnels, certificates, or any public-host configuration. The route at `/sites/*` is the wire contract; this skill is a placement + URL-shape skill only.
-- Per-directory default-filename config (e.g. a `.publish.json` that names a default landing file). The publisher names the landing file; no inference layer.
+- DNS, tunnels, certificates, or any public-host configuration. The route at `/sites/*` is the wire contract.
+- Cleanup of pre-existing synthetic files left by earlier sessions. A non-empty destination produces `destination-occupied` and the operator cleans up explicitly.

package/payload/platform/plugins/aeo/mcp/dist/tools/aeo-write-llms-txt.d.ts

@@ -1,42 +1,9 @@
+import { type WriteLlmsTxtInput, type WriteLlmsTxtResult } from "../../../../../lib/aeo-llms-txt-writer/dist/index.js";
+export type { WriteLlmsTxtInput, WriteLlmsTxtResult };
 /**
- * Generates the `llms.txt` and `llms-full.txt` pair for an account's
- * published content. Format follows the current llmstxt.org draft:
- *
- *   # <Site name>
- *   > <Short description>
- *
- *   ## <Section name>
- *   - [<Title>](<URL>): <Summary>
- *
- * `llms-full.txt` concatenates the full text of every listed page in
- * the same order, separated by a blank line and the page's title as an
- * H1.
- *
- * Source: `KnowledgeDocument` nodes for the account that have a `url`
- * property. `summary` and `body` properties feed the index and the
- * concatenated dump respectively. Pages without a `url` are skipped
- * (they aren't reachable from a public site), and the count of skipped
- * pages is returned so the operator can audit completeness.
+ * Thin aeo-side wrapper around the plugin-agnostic writeLlmsTxt lib.
+ * Injects this plugin's neo4j session factory so the shared lib stays
+ * decoupled from any one plugin's driver wiring.
  */
-export interface WriteLlmsTxtInput {
-    accountId: string;
-    siteName: string;
-    siteDescription?: string;
-    siteDir?: string;
-}
-export interface WriteLlmsTxtResult {
-    llmsTxt: string;
-    llmsFullTxt: string;
-    pageCount: number;
-    skippedNoUrl: number;
-    sizeBytes: {
-        index: number;
-        full: number;
-    };
-    writtenPaths?: {
-        index: string;
-        full: string;
-    };
-}
 export declare function writeLlmsTxt(input: WriteLlmsTxtInput): Promise<WriteLlmsTxtResult>;
 //# sourceMappingURL=aeo-write-llms-txt.d.ts.map

package/payload/platform/plugins/aeo/mcp/dist/tools/aeo-write-llms-txt.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"aeo-write-llms-txt.d.ts","sourceRoot":"","sources":["../../src/tools/aeo-write-llms-txt.ts"],"names":[],"mappings":"AAKA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,MAAM,WAAW,iBAAiB;IAChC,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,eAAe,CAAC,EAAE,MAAM,CAAC;IAMzB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,kBAAkB;IACjC,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;IAC3C,YAAY,CAAC,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;CAChD;AAqBD,wBAAsB,YAAY,CAChC,KAAK,EAAE,iBAAiB,GACvB,OAAO,CAAC,kBAAkB,CAAC,CAsH7B"}
+{"version":3,"file":"aeo-write-llms-txt.d.ts","sourceRoot":"","sources":["../../src/tools/aeo-write-llms-txt.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,KAAK,iBAAiB,EACtB,KAAK,kBAAkB,EACxB,MAAM,sDAAsD,CAAC;AAG9D,YAAY,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,CAAC;AAEtD;;;;GAIG;AACH,wBAAsB,YAAY,CAChC,KAAK,EAAE,iBAAiB,GACvB,OAAO,CAAC,kBAAkB,CAAC,CAE7B"}

package/payload/platform/plugins/aeo/mcp/dist/tools/aeo-write-llms-txt.js

@@ -1,118 +1,11 @@
-import { stat, writeFile } from "node:fs/promises";
-import { resolve as resolvePath } from "node:path";
+import { writeLlmsTxt as writeLlmsTxtLib, } from "../../../../../lib/aeo-llms-txt-writer/dist/index.js";
 import { getSession } from "../lib/neo4j.js";
-const HEADER_RX = /^#\s/m;
-function escapeMarkdown(text) {
-    return text.replace(/[\[\]\(\)\n\r]/g, " ").trim();
-}
-function summariseBody(body) {
-    const flat = body.replace(/\s+/g, " ").trim();
-    if (flat.length <= 200)
-        return flat;
-    return flat.slice(0, 197).trimEnd() + "…";
-}
+/**
+ * Thin aeo-side wrapper around the plugin-agnostic writeLlmsTxt lib.
+ * Injects this plugin's neo4j session factory so the shared lib stays
+ * decoupled from any one plugin's driver wiring.
+ */
 export async function writeLlmsTxt(input) {
-    const session = getSession();
-    let rows = [];
-    let skippedNoUrl = 0;
-    try {
-        const r = await session.run(`MATCH (d:KnowledgeDocument {accountId: $accountId})
-       RETURN d.title AS title, d.url AS url, d.summary AS summary,
-              coalesce(d.body, d.abstract, '') AS body
-       ORDER BY d.title ASC`, { accountId: input.accountId });
-        for (const rec of r.records) {
-            const title = rec.get("title") ?? "";
-            const url = rec.get("url") ?? "";
-            const summary = rec.get("summary") ?? "";
-            const body = rec.get("body") ?? "";
-            if (!url || !title) {
-                skippedNoUrl += 1;
-                continue;
-            }
-            rows.push({
-                title: escapeMarkdown(title),
-                url: url.trim(),
-                summary: escapeMarkdown(summary) || summariseBody(body) || "(no summary)",
-                body: body.trim(),
-            });
-        }
-    }
-    finally {
-        await session.close();
-    }
-    const indexLines = [];
-    indexLines.push(`# ${escapeMarkdown(input.siteName)}`);
-    indexLines.push("");
-    if (input.siteDescription) {
-        indexLines.push(`> ${escapeMarkdown(input.siteDescription)}`);
-        indexLines.push("");
-    }
-    indexLines.push("## Pages");
-    indexLines.push("");
-    for (const row of rows) {
-        indexLines.push(`- [${row.title}](${row.url}): ${row.summary}`);
-    }
-    indexLines.push("");
-    indexLines.push("<!-- generated by @maxy/aeo aeo-write-llms-txt; spec: https://llmstxt.org/ -->");
-    const llmsTxt = indexLines.join("\n");
-    const fullLines = [];
-    fullLines.push(`# ${escapeMarkdown(input.siteName)}`);
-    fullLines.push("");
-    if (input.siteDescription) {
-        fullLines.push(`> ${escapeMarkdown(input.siteDescription)}`);
-        fullLines.push("");
-    }
-    for (const row of rows) {
-        fullLines.push(`# ${row.title}`);
-        fullLines.push("");
-        fullLines.push(`Source: ${row.url}`);
-        fullLines.push("");
-        if (row.body) {
-            // Demote any in-body H1s to H2 so a single H1 hierarchy holds.
-            const safeBody = row.body.replace(HEADER_RX, "## ");
-            fullLines.push(safeBody);
-        }
-        else {
-            fullLines.push(row.summary);
-        }
-        fullLines.push("");
-        fullLines.push("---");
-        fullLines.push("");
-    }
-    const llmsFullTxt = fullLines.join("\n");
-    const sizeBytes = {
-        index: Buffer.byteLength(llmsTxt, "utf-8"),
-        full: Buffer.byteLength(llmsFullTxt, "utf-8"),
-    };
-    process.stderr.write(`[aeo-llms-txt] site=${input.siteName} pages=${rows.length} skippedNoUrl=${skippedNoUrl} indexBytes=${sizeBytes.index} fullBytes=${sizeBytes.full}\n`);
-    let writtenPaths;
-    if (input.siteDir) {
-        const dir = resolvePath(input.siteDir);
-        let dirStat;
-        try {
-            dirStat = await stat(dir);
-        }
-        catch (err) {
-            const code = err?.code;
-            throw new Error(`siteDir does not exist (${code ?? "unknown"}): ${dir}`);
-        }
-        if (!dirStat.isDirectory()) {
-            throw new Error(`siteDir is not a directory: ${dir}`);
-        }
-        const indexPath = resolvePath(dir, "llms.txt");
-        const fullPath = resolvePath(dir, "llms-full.txt");
-        await writeFile(indexPath, llmsTxt, "utf-8");
-        await writeFile(fullPath, llmsFullTxt, "utf-8");
-        writtenPaths = { index: indexPath, full: fullPath };
-        process.stderr.write(`[aeo-llms-txt] wrote site=${dir} indexBytes=${sizeBytes.index} fullBytes=${sizeBytes.full}\n`);
-    }
-    return {
-        llmsTxt,
-        llmsFullTxt,
-        pageCount: rows.length,
-        skippedNoUrl,
-        sizeBytes,
-        writtenPaths,
-    };
+    return writeLlmsTxtLib(input, { getSession });
 }
 //# sourceMappingURL=aeo-write-llms-txt.js.map

package/payload/platform/plugins/aeo/mcp/dist/tools/aeo-write-llms-txt.js.map

@@ -1 +1 @@
-{"version":3,"file":"aeo-write-llms-txt.js","sourceRoot":"","sources":["../../src/tools/aeo-write-llms-txt.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AACnD,OAAO,EAAE,OAAO,IAAI,WAAW,EAAE,MAAM,WAAW,CAAC;AAEnD,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAmD7C,MAAM,SAAS,GAAG,OAAO,CAAC;AAE1B,SAAS,cAAc,CAAC,IAAY;IAClC,OAAO,IAAI,CAAC,OAAO,CAAC,iBAAiB,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;AACrD,CAAC;AAED,SAAS,aAAa,CAAC,IAAY;IACjC,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;IAC9C,IAAI,IAAI,CAAC,MAAM,IAAI,GAAG;QAAE,OAAO,IAAI,CAAC;IACpC,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,OAAO,EAAE,GAAG,GAAG,CAAC;AAC5C,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,KAAwB;IAExB,MAAM,OAAO,GAAG,UAAU,EAAE,CAAC;IAC7B,IAAI,IAAI,GAAc,EAAE,CAAC;IACzB,IAAI,YAAY,GAAG,CAAC,CAAC;IACrB,IAAI,CAAC;QACH,MAAM,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CACzB;;;4BAGsB,EACtB,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,CAC/B,CAAC;QACF,KAAK,MAAM,GAAG,IAAI,CAAC,CAAC,OAAO,EAAE,CAAC;YAC5B,MAAM,KAAK,GAAI,GAAG,CAAC,GAAG,CAAC,OAAO,CAAmB,IAAI,EAAE,CAAC;YACxD,MAAM,GAAG,GAAI,GAAG,CAAC,GAAG,CAAC,KAAK,CAAmB,IAAI,EAAE,CAAC;YACpD,MAAM,OAAO,GAAI,GAAG,CAAC,GAAG,CAAC,SAAS,CAAmB,IAAI,EAAE,CAAC;YAC5D,MAAM,IAAI,GAAI,GAAG,CAAC,GAAG,CAAC,MAAM,CAAmB,IAAI,EAAE,CAAC;YACtD,IAAI,CAAC,GAAG,IAAI,CAAC,KAAK,EAAE,CAAC;gBACnB,YAAY,IAAI,CAAC,CAAC;gBAClB,SAAS;YACX,CAAC;YACD,IAAI,CAAC,IAAI,CAAC;gBACR,KAAK,EAAE,cAAc,CAAC,KAAK,CAAC;gBAC5B,GAAG,EAAE,GAAG,CAAC,IAAI,EAAE;gBACf,OAAO,EACL,cAAc,CAAC,OAAO,CAAC,IAAI,aAAa,CAAC,IAAI,CAAC,IAAI,cAAc;gBAClE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE;aAClB,CAAC,CAAC;QACL,CAAC;IACH,CAAC;YAAS,CAAC;QACT,MAAM,OAAO,CAAC,KAAK,EAAE,CAAC;IACxB,CAAC;IAED,MAAM,UAAU,GAAa,EAAE,CAAC;IAChC,UAAU,CAAC,IAAI,CAAC,KAAK,cAAc,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;IACvD,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACpB,IAAI,KAAK,CAAC,eAAe,EAAE,CAAC;QAC1B,UAAU,CAAC,IAAI,CAAC,KAAK,cAAc,CAAC,KAAK,CAAC,eAAe,CAAC,EAAE,CAAC,CAAC;QAC9D,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACtB,CAAC;IACD,UAAU,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IAC5B,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACpB,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,UAAU,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,KAAK,KAAK,GAAG,CAAC,GAAG,MAAM,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;IAClE,CAAC;IACD,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACpB,UAAU,CAAC,IAAI,CACb,gFAAgF,CACjF,CAAC;IACF,MAAM,OAAO,GAAG,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAEtC,MAAM,SAAS,GAAa,EAAE,CAAC;IAC/B,SAAS,CAAC,IAAI,CAAC,KAAK,cAAc,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;IACtD,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACnB,IAAI,KAAK,CAAC,eAAe,EAAE,CAAC;QAC1B,SAAS,CAAC,IAAI,CAAC,KAAK,cAAc,CAAC,KAAK,CAAC,eAAe,CAAC,EAAE,CAAC,CAAC;QAC7D,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACrB,CAAC;IACD,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,SAAS,CAAC,IAAI,CAAC,KAAK,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC;QACjC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACnB,SAAS,CAAC,IAAI,CAAC,WAAW,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC;QACrC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACnB,IAAI,GAAG,CAAC,IAAI,EAAE,CAAC;YACb,+DAA+D;YAC/D,MAAM,QAAQ,GAAG,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;YACpD,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC3B,CAAC;aAAM,CAAC;YACN,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAC9B,CAAC;QACD,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACnB,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACtB,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACrB,CAAC;IACD,MAAM,WAAW,GAAG,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAEzC,MAAM,SAAS,GAAG;QAChB,KAAK,EAAE,MAAM,CAAC,UAAU,CAAC,OAAO,EAAE,OAAO,CAAC;QAC1C,IAAI,EAAE,MAAM,CAAC,UAAU,CAAC,WAAW,EAAE,OAAO,CAAC;KAC9C,CAAC;IAEF,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,uBAAuB,KAAK,CAAC,QAAQ,UAAU,IAAI,CAAC,MAAM,iBAAiB,YAAY,eAAe,SAAS,CAAC,KAAK,cAAc,SAAS,CAAC,IAAI,IAAI,CACtJ,CAAC;IAEF,IAAI,YAAyD,CAAC;IAC9D,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;QAClB,MAAM,GAAG,GAAG,WAAW,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACvC,IAAI,OAAO,CAAC;QACZ,IAAI,CAAC;YACH,OAAO,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,CAAC;QAC5B,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,IAAI,GAAI,GAA6B,EAAE,IAAI,CAAC;YAClD,MAAM,IAAI,KAAK,CACb,2BAA2B,IAAI,IAAI,SAAS,MAAM,GAAG,EAAE,CACxD,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC;YAC3B,MAAM,IAAI,KAAK,CAAC,+BAA+B,GAAG,EAAE,CAAC,CAAC;QACxD,CAAC;QACD,MAAM,SAAS,GAAG,WAAW,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC;QAC/C,MAAM,QAAQ,GAAG,WAAW,CAAC,GAAG,EAAE,eAAe,CAAC,CAAC;QACnD,MAAM,SAAS,CAAC,SAAS,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;QAC7C,MAAM,SAAS,CAAC,QAAQ,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC;QAChD,YAAY,GAAG,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;QACpD,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,6BAA6B,GAAG,eAAe,SAAS,CAAC,KAAK,cAAc,SAAS,CAAC,IAAI,IAAI,CAC/F,CAAC;IACJ,CAAC;IAED,OAAO;QACL,OAAO;QACP,WAAW;QACX,SAAS,EAAE,IAAI,CAAC,MAAM;QACtB,YAAY;QACZ,SAAS;QACT,YAAY;KACb,CAAC;AACJ,CAAC"}
+{"version":3,"file":"aeo-write-llms-txt.js","sourceRoot":"","sources":["../../src/tools/aeo-write-llms-txt.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,YAAY,IAAI,eAAe,GAGhC,MAAM,sDAAsD,CAAC;AAC9D,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAI7C;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,KAAwB;IAExB,OAAO,eAAe,CAAC,KAAK,EAAE,EAAE,UAAU,EAAE,CAAC,CAAC;AAChD,CAAC"}

package/payload/platform/templates/specialists/agents/content-producer.md

@@ -3,7 +3,7 @@ name: content-producer
 description: "Visual production and static-site hosting. Reads from the populated graph to produce visual artifacts (image generation, PDF rendering, component delivery) and hosts already-prepared static sites by extracting attached archives via unzip-attachment then placing the tree under <accountDir>/sites/<slug>/ via publish-site. Delegate for: generating images, saving rendered pages as PDF, or any 'host this website' / 'publish this site' / 'put this online' intent carrying an HTML+assets archive. Not document ingestion: graph ingestion of any kind routes to specialists:database-operator. Static-site zips are extracted to disk for publication, never written to the graph."
 summary: "Produces visual output from your graph: generates images, renders pages to PDF, and hosts static websites you upload as a zip."
 model: claude-sonnet-4-6
-tools: Bash, mcp__memory__memory-search, mcp__replicate__image-generate, mcp__plugin_playwright_playwright__browser_navigate, mcp__plugin_playwright_playwright__browser_snapshot, mcp__plugin_playwright_playwright__browser_take_screenshot, mcp__plugin_playwright_playwright__browser_pdf_save, mcp__admin__file-attach, mcp__admin__plugin-read, mcp__admin__public-hostname
+tools: Bash, mcp__memory__memory-search, mcp__replicate__image-generate, mcp__plugin_playwright_playwright__browser_navigate, mcp__plugin_playwright_playwright__browser_snapshot, mcp__plugin_playwright_playwright__browser_take_screenshot, mcp__plugin_playwright_playwright__browser_pdf_save, mcp__admin__file-attach, mcp__admin__plugin-read, mcp__admin__public-hostname, mcp__admin__publish-site
 ---
 
 # Content Producer
@@ -34,9 +34,9 @@ Generate the HTML, navigate the Playwright browser to it, and capture with `brow
 
 ## Hosting websites
 
-When a brief carries a "host this website" / "publish this site" / "put this online" intent with a `.zip` of HTML and assets, run the two-skill chain in order: `skill-load skillName=unzip-attachment` then `skill-load skillName=publish-site`. Both ship deterministic Bash entries with mechanically enforced invariants (zip-slip guard, slug regex, refusal taxonomy). Follow the skill, do not paraphrase, do not improvise a fallback server.
+When a brief carries a "host this website" / "publish this site" / "put this online" intent with a `.zip` of HTML and assets, run `skill-load skillName=unzip-attachment` to extract, then call `mcp__admin__publish-site` directly. The tool owns slug validation, the symlink scan, the `mv`, the refusal taxonomy, and the post-publish llms.txt refresh — load `skill-load skillName=publish-site` only if you need the intent-router context. Do not improvise a fallback server.
 
-Confirm the slug with the operator before publishing. The slug is one or more `/`-separated segments under `<accountDir>/sites/`. Refusals are loud-fail; relay the operator message verbatim and stop. On success, emit the canonical path slug (`/sites/<slug>/` or `/sites/<slug>/<file>.html`) as one line for the operator to paste after their public-host root.
+Confirm the slug with the operator before publishing. The slug is one or more `/`-separated segments under `<accountDir>/sites/`. Refusals are loud-fail; relay the tool's `Operator action:` line verbatim and stop. On success, take the `pathSlug` from the tool response, call `mcp__admin__public-hostname`, and surface `https://<hostname><pathSlug>` to the operator as one line.
 
 ## File delivery
 

package/payload/server/public/consent.css

@@ -0,0 +1,97 @@
+/* PECR consent banner styles (Task 375). Brand overrides arrive as inline
+ * CSS variables on :root from /consent.js after fetching /v/brand-config. */
+
+:root {
+  --mxy-consent-bg: #FFFFFF;
+  --mxy-consent-fg: #1F1F1F;
+  --mxy-consent-accent: #1F1F1F;
+  --mxy-consent-accentFg: #FFFFFF;
+  --mxy-consent-border: #E5E5E2;
+}
+
+#mxy-consent {
+  position: fixed;
+  left: 0;
+  right: 0;
+  bottom: 0;
+  z-index: 2147483640;
+  background: var(--mxy-consent-bg);
+  color: var(--mxy-consent-fg);
+  border-top: 1px solid var(--mxy-consent-border);
+  box-shadow: 0 -8px 24px rgba(0, 0, 0, 0.06);
+  font: 14px/1.45 -apple-system, BlinkMacSystemFont, "Segoe UI", system-ui, sans-serif;
+  padding: 16px 20px env(safe-area-inset-bottom, 16px);
+}
+
+#mxy-consent .mxy-consent__inner {
+  max-width: 1100px;
+  margin: 0 auto;
+  display: flex;
+  gap: 24px;
+  align-items: center;
+  flex-wrap: wrap;
+}
+
+#mxy-consent .mxy-consent__text {
+  flex: 1 1 320px;
+  min-width: 240px;
+}
+
+#mxy-consent .mxy-consent__title {
+  display: block;
+  font-size: 15px;
+  margin-bottom: 4px;
+}
+
+#mxy-consent .mxy-consent__body {
+  margin: 0 0 6px 0;
+  color: var(--mxy-consent-fg);
+}
+
+#mxy-consent .mxy-consent__link {
+  color: var(--mxy-consent-fg);
+  text-decoration: underline;
+  font-size: 13px;
+}
+
+#mxy-consent .mxy-consent__actions {
+  display: flex;
+  gap: 10px;
+  flex: 0 0 auto;
+}
+
+/* Accept and reject are equal-weighted per ICO guidance — same size,
+ * same prominence. Reject is the outlined variant only because the
+ * accent fill must indicate the active surface in monochrome palettes;
+ * both buttons share padding, font-weight and minimum width. */
+
+#mxy-consent .mxy-consent__btn {
+  appearance: none;
+  -webkit-appearance: none;
+  border-radius: 6px;
+  font: inherit;
+  font-weight: 600;
+  padding: 10px 18px;
+  min-width: 96px;
+  cursor: pointer;
+  border: 1px solid var(--mxy-consent-accent);
+  transition: opacity 120ms ease;
+}
+
+#mxy-consent .mxy-consent__btn:hover { opacity: 0.85; }
+#mxy-consent .mxy-consent__btn:focus { outline: 2px solid var(--mxy-consent-accent); outline-offset: 2px; }
+
+#mxy-consent .mxy-consent__btn--reject {
+  background: var(--mxy-consent-bg);
+  color: var(--mxy-consent-fg);
+}
+
+#mxy-consent .mxy-consent__btn--accept {
+  background: var(--mxy-consent-accent);
+  color: var(--mxy-consent-accentFg);
+}
+
+@media (max-width: 560px) {
+  #mxy-consent .mxy-consent__actions { width: 100%; }
+  #mxy-consent .mxy-consent__btn { flex: 1 1 0; }
+}