@rubytech/create-maxy-code 0.1.156 → 0.1.158

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@rubytech/create-maxy-code",
-  "version": "0.1.156",
+  "version": "0.1.158",
   "description": "Install Maxy — AI for Productive People",
   "bin": {
     "create-maxy-code": "./dist/index.js"

package/payload/platform/neo4j/schema.cypher

@@ -1397,8 +1397,9 @@ FOR (rec:Recommendation) ON (rec.sessionKey);
 
 // ----------------------------------------------------------
 // Idea (Task 352) — original-thinking candidates extracted by
-// the signal-detector specialist from admin-side conversations.
-// Written via memory-write(labels:["Idea"], ...) with one edge
+// the pre-turn graph pass from admin-side conversations and written
+// by `database-operator` per-write briefs admin dispatches. Written
+// via memory-write(labels:["Idea"], ...) with one edge
 // (:Conversation)-[:HAS_IDEA]->(:Idea). Forward-only write surface:
 // no historical backfill, no dedup, no clustering — let the brain
 // accumulate first. Declared here so memory-write's label validator

package/payload/platform/plugins/admin/hooks/lib/admin-graph-pass-common.sh

@@ -0,0 +1,140 @@
+#!/usr/bin/env bash
+# Shared plumbing for the two admin-side hooks that orchestrate admin-walked
+# graph writes: `pre-turn-graph-pass.sh` (UserPromptSubmit) and
+# `session-end-retrospective.sh` (Stop on operator end-intent). Task 439.
+#
+# Both hooks are the same process — same stdin parse, same role / specialist
+# / transcript guards, same log-ingest envelope, same admin-walks contract
+# dispatching per-write briefs to `database-operator`. Divergence across
+# Tasks 303 → 412 → 425 → 430 → 282 made shared plumbing a recurring-bug
+# surface; this file is the single body. Only the trigger-specific gating
+# and the dispatch directive text live in each hook.
+#
+# Caller contract:
+#   1. Set `AGP_LOG_TAG` to the hook's identifying tag before sourcing.
+#      `pre-turn-graph-pass` and `session-retrospective` are the two
+#      current values; the helper itself does not log under its own tag.
+#   2. Source this file.
+#   3. Call `agp_setup_logging`, `agp_read_stdin`, `agp_parse_stdin`,
+#      `agp_guard_role_specialist`, `agp_guard_transcript` in that order.
+#      Each guard exits 0 from inside the helper when its condition fires
+#      (sourced `exit` exits the caller).
+#   4. After the guards return, the hook proceeds with its event-specific
+#      body (sentinel-grep + intent token for session-end; post-turn-context
+#      fetch + directive envelope for pre-turn).
+#
+# Globals set by the helper (read by callers):
+#   INPUT                — raw stdin (empty when none piped)
+#   SESSION_ID           — parsed `session_id` field, empty on parse failure
+#   TRANSCRIPT_PATH      — parsed `transcript_path` field
+#   HOOK_EVENT_NAME      — parsed `hook_event_name` field
+#   SESSION_ID_REPORTED  — `$SESSION_ID` or the literal "unknown"
+#   UI_BASE              — `http://127.0.0.1:${MAXY_UI_INTERNAL_PORT}`
+#   LOG_INGEST_URL       — `${UI_BASE}/api/admin/log-ingest`
+#
+# Functions:
+#   agp_setup_logging          — resolves UI port + URLs, or exits 0 with
+#                                a stderr loud-fail when the port is unset
+#                                (fail-open so a missing port never bricks
+#                                the operator).
+#   agp_emit_log <line>        — POSTs `{tag, level:"info", line}` to
+#                                log-ingest; silent on network failure.
+#   agp_read_stdin             — slurps stdin into `INPUT`, leaves it empty
+#                                when no input is piped.
+#   agp_parse_stdin            — populates `SESSION_ID`, `TRANSCRIPT_PATH`,
+#                                `HOOK_EVENT_NAME`, `SESSION_ID_REPORTED`.
+#   agp_guard_role_specialist  — exits 0 with `trigger-skipped` log on
+#                                `role-not-admin` or `is-specialist`.
+#   agp_guard_transcript       — exits 0 with `trigger-skipped` log on
+#                                `empty-stdin` (when $1="require-stdin") or
+#                                `missing-transcript`.
+
+if [ -z "${AGP_LOG_TAG:-}" ]; then
+  echo "[admin-graph-pass-common] AGP_LOG_TAG not set by caller" >&2
+  exit 1
+fi
+
+agp_setup_logging() {
+  local ui_port="${MAXY_UI_INTERNAL_PORT:-}"
+  if [ -z "$ui_port" ]; then
+    echo "[${AGP_LOG_TAG}] trigger-skipped sessionId=unknown reason=missing-env env=MAXY_UI_INTERNAL_PORT" >&2
+    exit 0
+  fi
+  UI_BASE="http://127.0.0.1:${ui_port}"
+  LOG_INGEST_URL="${UI_BASE}/api/admin/log-ingest"
+}
+
+agp_emit_log() {
+  local line="$1"
+  curl -sS -o /dev/null -X POST \
+    -H 'Content-Type: application/json' \
+    --max-time 2 \
+    --data "$(AGP_TAG="$AGP_LOG_TAG" AGP_LINE="$line" python3 -c '
+import os, json
+print(json.dumps({"tag": os.environ["AGP_TAG"], "level": "info", "line": os.environ["AGP_LINE"]}))
+')" \
+    "$LOG_INGEST_URL" 2>/dev/null || true
+}
+
+agp_read_stdin() {
+  INPUT=""
+  if [ ! -t 0 ]; then
+    INPUT=$(cat)
+  fi
+}
+
+agp_parse_stdin() {
+  local parsed
+  parsed=$(printf '%s' "$INPUT" | python3 -c '
+import sys, json
+try:
+    d = json.load(sys.stdin)
+    sid = d.get("session_id", "") or ""
+    tpath = d.get("transcript_path", "") or ""
+    event = d.get("hook_event_name", "") or ""
+    print(f"{sid}\t{tpath}\t{event}")
+except Exception:
+    print("\t\t")
+' 2>/dev/null)
+  SESSION_ID="${parsed%%	*}"
+  local rest="${parsed#*	}"
+  TRANSCRIPT_PATH="${rest%%	*}"
+  HOOK_EVENT_NAME="${rest#*	}"
+  SESSION_ID_REPORTED="${SESSION_ID:-unknown}"
+}
+
+agp_guard_role_specialist() {
+  if [ "${MAXY_SESSION_ROLE:-}" != "admin" ]; then
+    agp_emit_log "trigger-skipped sessionId=${SESSION_ID_REPORTED} reason=role-not-admin"
+    exit 0
+  fi
+  # Recursion guard. A specialist subagent dispatched via the Task tool
+  # (e.g. database-operator running the operator's graph writes) carries
+  # `MAXY_SPECIALIST=<name>` on the PTY env. Skip — the hooks only fire
+  # for the operator's own admin session.
+  #
+  # Invariant the PTY spawner is expected to honour: `MAXY_SPECIALIST` is
+  # either set to a non-empty specialist name OR absent. An explicit empty
+  # string from a wrapper would slip the recursion guard here (`-n ""` is
+  # false) — that would be a defect at the spawn site, not here.
+  if [ -n "${MAXY_SPECIALIST:-}" ]; then
+    agp_emit_log "trigger-skipped sessionId=${SESSION_ID_REPORTED} reason=is-specialist specialist=${MAXY_SPECIALIST}"
+    exit 0
+  fi
+}
+
+# Usage: agp_guard_transcript [require-stdin]
+# Pass `require-stdin` (session-end-retrospective) to emit `empty-stdin` on a
+# blank `INPUT`. The pre-turn-graph-pass hook calls without the flag because
+# its `wrong-hook-event` guard already runs before this point and parse
+# failure on a non-empty INPUT collapses to `missing-transcript` cleanly.
+agp_guard_transcript() {
+  if [ "${1:-}" = "require-stdin" ] && [ -z "$INPUT" ]; then
+    agp_emit_log "trigger-skipped sessionId=${SESSION_ID_REPORTED} reason=empty-stdin"
+    exit 0
+  fi
+  if [ -z "$SESSION_ID" ] || [ -z "$TRANSCRIPT_PATH" ] || [ ! -f "$TRANSCRIPT_PATH" ]; then
+    agp_emit_log "trigger-skipped sessionId=${SESSION_ID_REPORTED} reason=missing-transcript"
+    exit 0
+  fi
+}

package/payload/platform/plugins/admin/hooks/pre-turn-graph-pass.sh

@@ -1,5 +1,5 @@
 #!/usr/bin/env bash
-# UserPromptSubmit hook — pre-turn graph pass. Tasks 425, 430.
+# UserPromptSubmit hook — pre-turn graph pass. Tasks 425, 430, 439.
 #
 # Fires once per admin-agent operator prompt submission. Emits a
 # directive into the admin agent's `additionalContext` that instructs
@@ -9,32 +9,19 @@
 # per candidate write. Admin is the session-walker; the specialist only
 # sees a narrowly-scoped per-write brief, never the conversation.
 #
-# Task 430 corrects the Task 425 orchestration shape. The Task 425 hook
-# packaged the full conversation blob into the specialist's prompt; that
-# collapsed the data channel and the instruction channel into one
-# context, so operator prose pattern-matching as a writer-binding
-# instruction ("memory-update is denied this session") was treated as
-# binding and the pass self-denied. Same failure class as the writer-POV
-# schema doctrine read as binding the agent (Task 199 / 995). The
-# session-end retrospective never had this defect because admin walked
-# the transcript itself and dispatched per-item briefs to the
-# specialist — Task 430 brings the per-turn pass to the same shape.
+# Task 430 corrects the Task 425 orchestration shape (the Task 425 hook
+# packaged the full conversation blob into the specialist's prompt and
+# collapsed data and instruction channels into one context, so operator
+# prose pattern-matching as a writer-binding instruction was treated as
+# binding and the pass self-denied — same failure class as the writer-POV
+# schema doctrine read as binding the agent, Tasks 199 / 995).
 #
-# Supersedes Task 412's Stop-hook registration. The Stop hook fired on
-# every assistant `end_turn`, including the agent's own ack after the
-# dispatch, producing an unbounded loop. Firing on `UserPromptSubmit`
-# fires once per operator turn and removes the loop primitive entirely.
-# The agent's response to the most recent operator turn is not covered
-# by a per-turn pass until the next operator turn; the
-# `session-end-retrospective.sh` Stop hook walks the full transcript at
-# `/end` and picks up the final assistant reply.
-#
-# The doctrinal early exits remain:
-#   - MAXY_SESSION_ROLE must equal "admin"  → reason=role-not-admin
-#   - MAXY_SPECIALIST must be empty         → reason=is-specialist
-# `missing-transcript` is retained as a safety exit (the prior-writes
-# context fetch still needs a real session). `wrong-hook-event` rejects
-# stale Stop-shaped fires.
+# Task 439 converges the shared plumbing — stdin parse, role / specialist
+# / transcript guards, log-ingest envelope — with `session-end-retrospective.sh`
+# via `lib/admin-graph-pass-common.sh`. The only event-specific code in
+# this hook is the wrong-hook-event check, the post-turn-context fetch,
+# the directive-body composition, and the UserPromptSubmit JSON envelope
+# emission on stdout.
 #
 # Input: Claude Code's UserPromptSubmit hook stdin shape
 #   { "session_id": "<intrinsic>", "transcript_path": "<jsonl path>",
@@ -46,74 +33,37 @@
 # Output: stdout JSON of the documented UserPromptSubmit shape:
 #   { "hookSpecificOutput": { "hookEventName": "UserPromptSubmit",
 #                              "additionalContext": "<directive body>" } }
-# exit 0. The directive carries the literal token
-# `[system: pre-turn-graph-pass-hook]` so the agent's IDENTITY.md
-# UserPromptSubmit-directive section can distinguish it from operator
-# text. The agent performs the per-write dispatches as a background
-# pass and then continues with its normal response to the operator.
+# exit 0.
 
 set -uo pipefail
 
-UI_PORT="${MAXY_UI_INTERNAL_PORT:-}"
-if [ -z "$UI_PORT" ]; then
-  echo "[pre-turn-graph-pass] trigger-skipped sessionId=unknown reason=missing-env env=MAXY_UI_INTERNAL_PORT" >&2
+AGP_LOG_TAG="pre-turn-graph-pass"
+AGP_LIB="$(dirname "$0")/lib/admin-graph-pass-common.sh"
+if [ ! -f "$AGP_LIB" ]; then
+  echo "[${AGP_LOG_TAG}] trigger-skipped sessionId=unknown reason=missing-helper path=${AGP_LIB}" >&2
   exit 0
 fi
-UI_BASE="http://127.0.0.1:${UI_PORT}"
-LOG_INGEST_URL="${UI_BASE}/api/admin/log-ingest"
-CONTEXT_URL="${UI_BASE}/api/admin/post-turn-context"
+# shellcheck source=lib/admin-graph-pass-common.sh
+source "$AGP_LIB"
 
-emit_log() {
-  local line="$1"
-  curl -sS -o /dev/null -X POST \
-    -H 'Content-Type: application/json' \
-    --max-time 2 \
-    --data "$(python3 -c '
-import sys, json
-print(json.dumps({"tag": "pre-turn-graph-pass", "level": "info", "line": sys.argv[1]}))
-' "$line")" \
-    "$LOG_INGEST_URL" 2>/dev/null || true
-}
-
-INPUT=""
-if [ ! -t 0 ]; then
-  INPUT=$(cat)
-fi
+agp_setup_logging
+CONTEXT_URL="${UI_BASE}/api/admin/post-turn-context"
 
-PARSED=$(printf '%s' "$INPUT" | python3 -c '
-import sys, json
-try:
-    d = json.load(sys.stdin)
-    sid = d.get("session_id", "") or ""
-    tpath = d.get("transcript_path", "") or ""
-    event = d.get("hook_event_name", "") or ""
-    print(f"{sid}\t{tpath}\t{event}")
-except Exception:
-    print("\t\t")
-' 2>/dev/null)
-SESSION_ID="${PARSED%%	*}"
-REST="${PARSED#*	}"
-TRANSCRIPT_PATH="${REST%%	*}"
-HOOK_EVENT_NAME="${REST#*	}"
-SESSION_ID_REPORTED="${SESSION_ID:-unknown}"
+agp_read_stdin
+agp_parse_stdin
 
+# Wrong-hook-event guard. Pre-turn-graph-pass is UserPromptSubmit-only;
+# reject stale Stop-shaped payloads before the role / transcript guards
+# run so the operator observes a `wrong-hook-event` skip line, not a
+# misleading `missing-transcript`.
 if [ -n "$HOOK_EVENT_NAME" ] && [ "$HOOK_EVENT_NAME" != "UserPromptSubmit" ]; then
-  emit_log "trigger-skipped sessionId=${SESSION_ID_REPORTED} reason=wrong-hook-event event=${HOOK_EVENT_NAME}"
-  exit 0
-fi
-if [ "${MAXY_SESSION_ROLE:-}" != "admin" ]; then
-  emit_log "trigger-skipped sessionId=${SESSION_ID_REPORTED} reason=role-not-admin"
-  exit 0
-fi
-if [ -n "${MAXY_SPECIALIST:-}" ]; then
-  emit_log "trigger-skipped sessionId=${SESSION_ID_REPORTED} reason=is-specialist specialist=${MAXY_SPECIALIST}"
-  exit 0
-fi
-if [ -z "$SESSION_ID" ] || [ -z "$TRANSCRIPT_PATH" ] || [ ! -f "$TRANSCRIPT_PATH" ]; then
-  emit_log "trigger-skipped sessionId=${SESSION_ID_REPORTED} reason=missing-transcript"
+  agp_emit_log "trigger-skipped sessionId=${SESSION_ID_REPORTED} reason=wrong-hook-event event=${HOOK_EVENT_NAME}"
   exit 0
 fi
 
+agp_guard_role_specialist
+agp_guard_transcript
+
 CONVERSATION_ID="${CONVERSATION_NODE_ID:-}"
 
 # Fetch the actual content of every node already written under this
@@ -196,7 +146,7 @@ PY
 )
 CONTEXT_BYTES=${#DIRECTIVE_BODY}
 
-emit_log "dispatch sessionId=${SESSION_ID} conversationId=${CONVERSATION_ID:-<unset>} directive-shape=admin-walks priorWritesCount=${PRIOR_WRITES_COUNT} contextBytes=${CONTEXT_BYTES} ms=0"
+agp_emit_log "dispatch sessionId=${SESSION_ID} conversationId=${CONVERSATION_ID:-<unset>} directive-shape=admin-walks priorWritesCount=${PRIOR_WRITES_COUNT} contextBytes=${CONTEXT_BYTES} ms=0"
 
 # Emit the documented UserPromptSubmit JSON envelope on stdout. Python
 # handles JSON encoding so embedded newlines, quotes, and backslashes

package/payload/platform/plugins/admin/hooks/session-end-retrospective.sh

@@ -1,8 +1,9 @@
 #!/usr/bin/env bash
 # Stop hook — gates session termination until the admin agent has performed
-# a three-pass retrospective (technical learnings, operator-relationship
-# updates, graph-completeness sweep) and called the deterministic
-# `session-retrospective-mark-complete` MCP sentinel tool. Task 282.
+# a four-pass retrospective (technical learnings, operator-relationship
+# updates, graph-completeness sweep, typed-edge auto-extraction) and called
+# the deterministic `session-retrospective-mark-complete` MCP sentinel
+# tool. Task 282; converged onto the Task 439 shared helper.
 #
 # Trigger detection. End-intent is the operator's most recent real-user
 # message matching one of the literal token strings:
@@ -23,109 +24,49 @@
 # whose `name` is exactly `mcp__admin__session-retrospective-mark-complete`
 # — that is the prefixed form Claude Code writes for MCP tools in the
 # JSONL; the unprefixed name only appears in the operator-facing
-# instruction text below. The
-# sentinel-grep doubles as the re-entry guard: every Stop that fires after
-# the agent's sentinel call sees the sentinel and exits 0 with
-# `gate-released`, so the agent's wrap-up turn never re-blocks.
+# instruction text below. The sentinel-grep doubles as the re-entry guard:
+# every Stop that fires after the agent's sentinel call sees the sentinel
+# and exits 0 with `gate-released`, so the agent's wrap-up turn never
+# re-blocks.
 # [[feedback_no_stdout_parsing_for_control_flow]],
 # [[feedback_doctrine_paragraph_is_not_a_gate]] — the LLM is removed from
 # the per-decision path entirely.
 #
-# Gating (emits via `/api/admin/log-ingest`; hook stderr stays silent on
-# every skip path; the gate-blocked path is the only stderr emitter, by
-# Stop-hook contract — exit 2 + stderr is how the agent receives the
-# retrospective instruction block):
-#   - MAXY_SESSION_ROLE must equal "admin"      → reason=role-not-admin
-#   - MAXY_SPECIALIST must NOT equal            → reason=is-specialist
-#     "database-operator" (and any other        (recursion guard — a
-#     specialist value)                         specialist subagent stop
-#                                               must not re-enter this gate)
-#   - Stop-hook stdin must be non-empty         → reason=empty-stdin
-#   - transcript_path must exist on disk        → reason=missing-transcript
-#   - latest real-user message must match an    → reason=no-intent-match
-#     end-intent token
+# Gating (common guards live in `lib/admin-graph-pass-common.sh`; this
+# hook adds the end-intent gating layered on top):
+#   - role-not-admin / is-specialist / empty-stdin / missing-transcript:
+#     handled by the shared helper, emit `trigger-skipped` and exit 0.
+#   - no-intent-match: latest real-user message has no end-intent token,
+#     emit `trigger-skipped` and exit 0.
 #
 # Releases:
 #   - gate-released sessionId=<id> (when sentinel present in transcript)
 #
 # Blocks:
 #   - gate-blocked sessionId=<id> reason=sentinel-absent
-#     (exit 2; stderr carries the three-pass retrospective instruction)
+#     (exit 2; stderr carries the four-pass retrospective instruction —
+#     stderr is the Stop-hook contract for handing instructions back to
+#     the agent).
 #
 # Input: Claude Code's Stop hook stdin shape
 #   { "session_id": "<intrinsic>", "transcript_path": "<jsonl path>", ... }
 
 set -uo pipefail
 
-UI_PORT="${MAXY_UI_INTERNAL_PORT:-}"
-if [ -z "$UI_PORT" ]; then
-  # No log-ingest reachable; emit to stderr instead of silently swallowing.
-  # Skip the gate rather than block — fail-open on infra absence so the
-  # operator is never bricked by a missing port.
-  echo "[session-retrospective] trigger-skipped sessionId=unknown reason=missing-env env=MAXY_UI_INTERNAL_PORT" >&2
+AGP_LOG_TAG="session-retrospective"
+AGP_LIB="$(dirname "$0")/lib/admin-graph-pass-common.sh"
+if [ ! -f "$AGP_LIB" ]; then
+  echo "[${AGP_LOG_TAG}] trigger-skipped sessionId=unknown reason=missing-helper path=${AGP_LIB}" >&2
   exit 0
 fi
-UI_BASE="http://127.0.0.1:${UI_PORT}"
-LOG_INGEST_URL="${UI_BASE}/api/admin/log-ingest"
+# shellcheck source=lib/admin-graph-pass-common.sh
+source "$AGP_LIB"
 
-emit_log() {
-  local line="$1"
-  curl -sS -o /dev/null -X POST \
-    -H 'Content-Type: application/json' \
-    --max-time 2 \
-    --data "$(python3 -c '
-import sys, json
-print(json.dumps({"tag": "session-retrospective", "level": "info", "line": sys.argv[1]}))
-' "$line")" \
-    "$LOG_INGEST_URL" 2>/dev/null || true
-}
-
-INPUT=""
-if [ -t 0 ]; then
-  INPUT=""
-else
-  INPUT=$(cat)
-fi
-
-PARSED=$(printf '%s' "$INPUT" | python3 -c '
-import sys, json
-try:
-    d = json.load(sys.stdin)
-    sid = d.get("session_id", "") or ""
-    tpath = d.get("transcript_path", "") or ""
-    print(f"{sid}\t{tpath}")
-except Exception:
-    print("\t")
-' 2>/dev/null)
-SESSION_ID="${PARSED%%	*}"
-TRANSCRIPT_PATH="${PARSED#*	}"
-SESSION_ID_REPORTED="${SESSION_ID:-unknown}"
-
-if [ "${MAXY_SESSION_ROLE:-}" != "admin" ]; then
-  emit_log "trigger-skipped sessionId=${SESSION_ID_REPORTED} reason=role-not-admin"
-  exit 0
-fi
-# Recursion guard. A specialist subagent dispatched via the Task tool
-# (e.g. database-operator running the operator's graph writes) carries
-# `MAXY_SPECIALIST=<name>` on the PTY env. Skip — the gate only enforces
-# end-of-session for the operator's own admin session.
-#
-# Invariant the PTY spawner is expected to honour: `MAXY_SPECIALIST` is
-# either set to a non-empty specialist name OR absent. An explicit empty
-# string from a wrapper would slip the recursion guard here (`-n ""` is
-# false) — that would be a defect at the spawn site, not here.
-if [ -n "${MAXY_SPECIALIST:-}" ]; then
-  emit_log "trigger-skipped sessionId=${SESSION_ID_REPORTED} reason=is-specialist specialist=${MAXY_SPECIALIST}"
-  exit 0
-fi
-if [ -z "$INPUT" ]; then
-  emit_log "trigger-skipped sessionId=${SESSION_ID_REPORTED} reason=empty-stdin"
-  exit 0
-fi
-if [ -z "$SESSION_ID" ] || [ -z "$TRANSCRIPT_PATH" ] || [ ! -f "$TRANSCRIPT_PATH" ]; then
-  emit_log "trigger-skipped sessionId=${SESSION_ID_REPORTED} reason=missing-transcript"
-  exit 0
-fi
+agp_setup_logging
+agp_read_stdin
+agp_parse_stdin
+agp_guard_role_specialist
+agp_guard_transcript require-stdin
 
 # Single Python pass walks the transcript and reports two facts:
 #   1. The latest end-intent token in the most recent real-user message,
@@ -243,18 +184,18 @@ INTENT_TOKEN="${INSPECTION%%	*}"
 SENTINEL_PRESENT="${INSPECTION#*	}"
 
 if [ -z "$INTENT_TOKEN" ]; then
-  emit_log "trigger-skipped sessionId=${SESSION_ID} reason=no-intent-match"
+  agp_emit_log "trigger-skipped sessionId=${SESSION_ID} reason=no-intent-match"
   exit 0
 fi
 
-emit_log "trigger sessionId=${SESSION_ID} token=${INTENT_TOKEN}"
+agp_emit_log "trigger sessionId=${SESSION_ID} token=${INTENT_TOKEN}"
 
 if [ "$SENTINEL_PRESENT" = "yes" ]; then
-  emit_log "gate-released sessionId=${SESSION_ID}"
+  agp_emit_log "gate-released sessionId=${SESSION_ID}"
   exit 0
 fi
 
-emit_log "gate-blocked sessionId=${SESSION_ID} reason=sentinel-absent"
+agp_emit_log "gate-blocked sessionId=${SESSION_ID} reason=sentinel-absent"
 
 cat >&2 <<'INSTRUCTION'
 The operator signalled session end. Before this session can close, run the four-pass retrospective inside this same admin session — do not spawn a new session, do not background anything. Use the tools you already have.

package/payload/platform/plugins/docs/references/deployment.md

@@ -107,7 +107,9 @@ LOUD-FAIL output is `startup-self-test system-prompt-sentinels=fail missing=<tag
 
 ### Pre-publish boot smoke
 
-`platform/scripts/smoke-boot-services.sh` runs inside `prepublishOnly` of the installer (`packages/create-maxy-code/`). For every service in its `SERVICES` list it builds a synthetic install dir (`brand.json`, empty `plugins/`, a single `account.json` with `agents/admin/{IDENTITY,SOUL}.md`), spawns `node dist/index.js`, waits up to 5 s for the canonical `[claude-session-manager] boot port=…` line, SIGTERMs, and fails publish if any `^\[.*\] fatal ` line appears in stdout/stderr. Catches the class of regressions tsc and vitest miss because they evaluate TS source rather than the compiled ESM module (e.g. a stray `require()` in an ESM-typed package: tsc allows it because `@types/node` declares `require` globally, and Vite's vitest loader shims it, but native Node ESM throws `ReferenceError: require is not defined` at boot).
+`platform/scripts/smoke-boot-services.sh` runs inside `prepublishOnly` of the installer (`packages/create-maxy-code/`). For every service in its `SERVICES` list it builds a synthetic install dir that mirrors what `seed-neo4j.sh` writes on first boot — real templates copied from `platform/templates/agents/admin/*.md` and `platform/templates/specialists/agents/*.md` into both `<accountDir>/` and `<platformRoot>/templates/`, real plugin `PLUGIN.md` manifests, plus a `.claude/` dir for `CLAUDE_CONFIG_DIR`. The fixture stamps the same env shape the installer's systemd unit writes (dummy `NEO4J_URI`/`NEO4J_PASSWORD` — the manager only checks presence at boot; the live cypher gate runs separately). Then it spawns `node dist/index.js`, waits up to 10 s for the `startup-self-test identity-drift=` line (the last startup self-test the manager logs), SIGTERMs, and fails publish if any `boot-failed reason=` or `^\[.*\] fatal ` line appears. The script asserts each of the three startup self-tests (`specialist-tool-drift=ok`, `system-prompt-sentinels=ok`, `identity-drift=ok`) is present — the real-templates fixture is what makes the assertions non-trivial; Task 438 added it after the 0.1.143 / 0.1.147 / 0.1.155 / 0.1.156 install regressions slipped past an empty fixture. The original Task 099 motivation still holds (module-load regressions tsc and vitest miss — e.g. a stray `require()` in an ESM-typed package).
+
+Cypher schema gate (Task 438): the same script applies `platform/neo4j/schema.cypher` to the maintainer's local Neo4j via `cypher-shell`, using `NEO4J_URI` / `NEO4J_USER` / `NEO4J_PASSWORD` env (same shape `seed-neo4j.sh` reads — falls back to `platform/config/.neo4j-password` for the password). The dev's database is the test surface; schema commands use `IF NOT EXISTS` / `IF EXISTS` so re-apply is idempotent. Catches Neo4j 4 → 5 syntax drift (e.g. 0.1.151's `DROP FULLTEXT INDEX`) at publish time, not on a real install. Absence of `cypher-shell` on PATH or unset `NEO4J_URI` fails the gate loudly — the same toolchain the installer requires on every device.
 
 Companion lint: `platform/scripts/check-no-esm-require.mjs` rejects `require(` calls in any `.ts/.tsx/.js` file inside a package with `"type": "module"`, also wired into `prepublishOnly`. Allowlist lives at the top of the script.
 

package/payload/platform/plugins/memory/PLUGIN.md

@@ -86,7 +86,7 @@ tools:
   - name: profile-delete
     publicAllowlist: false
     adminAllowlist: true
-  - name: memory-signals-recent
+  - name: memory-brain-capture-recent
     publicAllowlist: false
     adminAllowlist: true
   - name: graph-prune-denylist-add
@@ -182,9 +182,9 @@ Graph hygiene is **agent-directed, case by case** — no autonomous rule engine,
 
 `memory-dream-run` is the operator-initiated graph-hygiene sweep — four phases (orphan detection on `:Person`/`:Organization`/`:Concept`/`:Project`; stale compiled-truth scan on `compiledTruthUpdatedAt`; mark edges to `:Trashed` targets with `staleTarget: true`; LLM-bounded citation audit on `:TimelineEvent`). Each run writes a `:Report` (via `memory-report-write` from Task 332) summarising counts; per-phase log lines `[dream-cycle:phase-<n>]` join on the run id. Failure of any phase logs `[dream-cycle:phase-<n>:error]` and continues — subsequent phases still run. Pass `phases: [4]` to run only the citation audit (e.g. after a bulk ingest); `maxEventsPerRun` defaults to 200 to cap LLM cost, with a resume cursor stored as `:Report.lastEventCursor` so subsequent runs continue from the last processed event. `memory-review-queue` is the read-only surface for `:OrphanCandidate` and `:CitationProposal` queues — counts plus a small sample per queue. Phase 5 (backlinks) and phase 6 (tag consistency) are deferred to follow-up tasks. Task 327; absorbs Task 330.
 
-## Brain-capture diagnostic — `memory-signals-recent`
+## Brain-capture diagnostic — `memory-brain-capture-recent`
 
-Read-only window into the extractive graph writes produced under this account. Returns recent `:MENTIONS` edges (`:Message-[:MENTIONS]->Entity`) and `:Idea` nodes interleaved by `observedAt`. Default window is 24 hours; pass `windowHours` (max 720) and `limit` (max 200) to scan a longer arc. Use this when the operator asks "what has the brain captured today?", "show me recent mentions of X", or "what ideas did I leave on the table this week?". Writes are produced by `database-operator` per-write briefs admin dispatches — either inline mid-turn, or as part of the once-per-operator-prompt pre-turn graph pass orchestrated by admin (`platform/plugins/admin/hooks/pre-turn-graph-pass.sh`, Tasks 425 + 430 — 430 reshaped the hook so admin walks the turn and dispatches per-write, after the 425 shape was found to self-deny when operator prose pattern-matched as a writer instruction; 425 itself superseded the Task 412 Stop-hook variant, which superseded the original `signal-detector` specialist + throttled hook from Task 303).
+Read-only window into the extractive graph writes produced under this account. Returns recent `:MENTIONS` edges (`:Message-[:MENTIONS]->Entity`) and `:Idea` nodes interleaved by `observedAt`. Default window is 24 hours; pass `windowHours` (max 720) and `limit` (max 200) to scan a longer arc. Use this when the operator asks "what has the brain captured today?", "show me recent mentions of X", or "what ideas did I leave on the table this week?". Writes are produced by `database-operator` per-write briefs admin dispatches — either inline mid-turn, or as part of the once-per-operator-prompt pre-turn graph pass orchestrated by admin (`platform/plugins/admin/hooks/pre-turn-graph-pass.sh`, Tasks 425 + 430 + 439 — 430 reshaped the hook so admin walks the turn and dispatches per-write, 439 converged the hook's shared plumbing with `session-end-retrospective.sh`).
 
 ## Conversational Memory
 

package/payload/platform/plugins/memory/mcp/dist/index.js

@@ -32,7 +32,7 @@ import { memoryReadAttachment } from "./tools/memory-read-attachment.js";
 import { memoryEditAttachment } from "./tools/memory-edit-attachment.js";
 import { memoryRenameAttachment } from "./tools/memory-rename-attachment.js";
 import { profileRead } from "./tools/profile-read.js";
-import { memorySignalsRecent } from "./tools/memory-signals-recent.js";
+import { memoryBrainCaptureRecent } from "./tools/memory-brain-capture-recent.js";
 import { profileUpdate } from "./tools/profile-update.js";
 import { profileDelete } from "./tools/profile-delete.js";
 import { graphPruneDenylistAdd } from "./tools/graph-prune-denylist-add.js";
@@ -1801,14 +1801,13 @@ if (!readOnly) {
             };
         }
     });
-    // memory-signals-recent: read-only diagnostic for the signal-detector
-    // specialist's writes. Returns recent :MENTIONS edges
-    // (:Message-[:MENTIONS]->Entity) and :Idea nodes filtered by
-    // r.createdByAgent='signal-detector'. The admin agent uses this to
-    // answer "what has the brain captured today?" without touching cypher.
-    // The signal-detector specialist itself is dispatched only by the
-    // admin-agent Stop hook — never by operator intent. Task 303.
-    server.tool("memory-signals-recent", "Read the most recent signal-detector writes for this account: entity mentions extracted from operator messages, and original-thinking :Idea nodes. " +
+    // memory-brain-capture-recent: read-only diagnostic for the per-turn
+    // pre-turn-graph-pass writes that admin dispatches to `database-operator`.
+    // Returns recent :MENTIONS edges (:Message-[:MENTIONS]->Entity) and
+    // :Idea nodes filtered by r.createdByAgent='database-operator'. The
+    // admin agent uses this to answer "what has the brain captured today?"
+    // without touching cypher. Task 439.
+    server.tool("memory-brain-capture-recent", "Read the most recent per-turn graph-pass writes for this account: entity mentions extracted from operator messages, and original-thinking :Idea nodes. " +
         "Default window is the last 24 hours. " +
         "Use this when the operator asks 'what has the brain captured today?', 'show me recent mentions of X', or 'what ideas did I leave on the table this week?'.", {
         windowHours: z.number().int().optional().describe("Hours back from now. Default 24. Capped at 720 (30 days)."),
@@ -1816,8 +1815,8 @@ if (!readOnly) {
     }, async ({ windowHours, limit }) => {
         try {
             if (!accountId)
-                return refuseNoAccount("memory-signals-recent");
-            const result = await memorySignalsRecent({ accountId, windowHours, limit });
+                return refuseNoAccount("memory-brain-capture-recent");
+            const result = await memoryBrainCaptureRecent({ accountId, windowHours, limit });
             return {
                 content: [{ type: "text", text: JSON.stringify(result, null, 2) }],
             };
@@ -1826,7 +1825,7 @@ if (!readOnly) {
             return {
                 content: [{
                         type: "text",
-                        text: `memory-signals-recent failed: ${err instanceof Error ? err.message : String(err)}`,
+                        text: `memory-brain-capture-recent failed: ${err instanceof Error ? err.message : String(err)}`,
                     }],
                 isError: true,
             };