@rubytech/create-maxy-code 0.1.165 → 0.1.167

package/dist/index.js

@@ -2333,11 +2333,19 @@ function setupVncViewer() {
 }
 function setupAccount() {
     log("10", TOTAL, "Setting up...");
-    // seed-neo4j.sh hard-exits without NEO4J_URI. The installer
-    // owns the brand-correct URI and password, so we derive them once.
-    // Missing password file is a hard error: ensureNeo4jPassword() ran
-    // upstream and would have thrown already if it couldn't reach the
-    // brand's Neo4j.
+    // Account-side setup runs first: creates the account dir, writes the
+    // Claude Code project settings (hooks only — no permissions.allow),
+    // installs specialist templates, seeds account.json. Then seed-neo4j.sh
+    // applies the schema and MERGEs the root :LocalBusiness / owner
+    // :AdminUser nodes. setup-account.sh has no Neo4j env dependency;
+    // seed-neo4j.sh hard-exits without NEO4J_URI, so we derive the URI +
+    // password (a missing password file is a hard error here — the
+    // upstream ensureNeo4jPassword() would have thrown if it couldn't
+    // reach the brand's Neo4j).
+    const setupScript = join(INSTALL_DIR, "platform/scripts/setup-account.sh");
+    if (existsSync(setupScript)) {
+        shell("bash", [setupScript], { cwd: INSTALL_DIR });
+    }
     const passwordFile = join(INSTALL_DIR, "platform/config/.neo4j-password");
     if (!existsSync(passwordFile)) {
         throw new Error(`Neo4j password file missing at ${passwordFile} — required by setup step.`);
@@ -2489,7 +2497,7 @@ function registerSpecialistAgents() {
 // `installService` stamps `Environment=ACCOUNT_ID=` into the brand
 // systemd unit so the writeNodeWithEdges gate has a non-undefined identity to
 // compare against. Pulled from `INSTALL_DIR/data/accounts/<uuid>/account.json`
-// written by seed-neo4j.sh during setupAccount(). One reader, one shape, one
+// written by setup-account.sh during setupAccount(). One reader, one shape, one
 // source of truth.
 //
 // retired the installer's cron registration — `resolveInstallAccountId`
@@ -2573,7 +2581,7 @@ function installServiceDarwin() {
     const installAccountId = resolveInstallAccountId();
     if (!installAccountId) {
         throw new Error(`installServiceDarwin: no account discovered at ${INSTALL_DIR}/data/accounts/<uuid>/account.json — ` +
-            `setupAccount() (seed-neo4j.sh) should have created one. Refusing to write .env ` +
+            `setupAccount() (setup-account.sh) should have created one. Refusing to write .env ` +
             `without ACCOUNT_ID; the boot validator would FATAL on every kickstart.`);
     }
     const envPath = join(persistDir, ".env");
@@ -3002,13 +3010,13 @@ function installService() {
     // ACCOUNT_ID stamped into the brand unit so the writeNodeWithEdges
     // gate at platform/lib/graph-write/src/index.ts:170 has a real identity to
     // compare against (instead of process.env.ACCOUNT_ID === undefined). Resolved
-    // here AFTER setupAccount() ran upstream — seed-neo4j.sh wrote account.json,
+    // here AFTER setupAccount() ran upstream — setup-account.sh wrote account.json,
     // so an empty resolution at this point is a corrupted install (e.g. the seed
     // failed silently, or accounts/ was wiped between setup and unit-write).
     const installAccountId = resolveInstallAccountId();
     if (!installAccountId) {
         throw new Error(`installService: no account discovered at ${INSTALL_DIR}/data/accounts/<uuid>/account.json — ` +
-            `setupAccount() (seed-neo4j.sh) should have created one. Refusing to write a systemd unit ` +
+            `setupAccount() (setup-account.sh) should have created one. Refusing to write a systemd unit ` +
             `without ACCOUNT_ID; the boot validator would FATAL on every restart.`);
     }
     const serviceFile = buildMaxyUnitFile({

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@rubytech/create-maxy-code",
-  "version": "0.1.165",
+  "version": "0.1.167",
   "description": "Install Maxy — AI for Productive People",
   "bin": {
     "create-maxy-code": "./dist/index.js"

package/payload/platform/neo4j/schema.cypher

@@ -827,11 +827,9 @@ OPTIONS {
 //   accountId, email, agentAddress, imapHost, imapPort,
 //   imapSecurity, smtpHost, smtpPort, smtpSecurity, updatedAt
 //
-// Auto-respond properties (added by email-auto-respond-config):
-//   autoRespond (boolean), respondingAgentSlug (string),
-//   pollIntervalMinutes (integer, default 5),
-//   lastRespondedUid (integer — IMAP UID high-water mark),
-//   lastPollAt (ISO 8601), consecutiveFailures (integer)
+// Poll state (written by email-ingest after each successful fetch):
+//   agentSlug, pollIntervalMinutes, lastFetchedUid, lastPollAt,
+//   uidValidity
 // ----------------------------------------------------------
 
 // ----------------------------------------------------------

package/payload/platform/plugins/email/mcp/dist/lib/credentials.d.ts

@@ -15,16 +15,6 @@ export interface PollState {
     lastPollAt: string | null;
     uidValidity: number | null;
 }
-export interface AutoRespondConfig {
-    autoRespond: boolean;
-    respondingAgentSlug: string | null;
-    pollIntervalMinutes: number;
-    lastRespondedUid: number;
-    lastPollAt: string | null;
-    consecutiveFailures: number;
-    autoRespondHourlyLimit: number;
-    autoRespondDailyLimit: number;
-}
 export interface FullCredentials {
     config: EmailConfig;
     password: string;
@@ -87,25 +77,6 @@ export declare function writeBindingConfig(accountId: string, agentSlug: string,
  * Returns the conflicting agentSlug if claimed, or null if available.
  */
 export declare function checkAddressBinding(agentAddress: string, currentSlug: string): Promise<string | null>;
-/**
- * Read auto-respond config from the EmailAccount node.
- * Returns defaults if fields are not yet set.
- */
-export declare function readAutoRespondConfig(accountId: string): Promise<AutoRespondConfig | null>;
-/**
- * Write auto-respond config fields on the EmailAccount node.
- * Only updates the specified fields — does not touch email/IMAP/SMTP config.
- */
-export declare function writeAutoRespondConfig(accountId: string, config: Partial<AutoRespondConfig>): Promise<void>;
-/**
- * Read all EmailAccounts that have auto-respond enabled.
- * Returns config + auto-respond settings for each.
- */
-export declare function readAutoRespondAccounts(): Promise<Array<{
-    accountId: string;
-    config: EmailConfig;
-    autoRespond: AutoRespondConfig;
-}>>;
 /**
  * Load full credentials (config + password).
  * Returns null with a reason if either piece is missing.

package/payload/platform/plugins/email/mcp/dist/lib/credentials.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"credentials.d.ts","sourceRoot":"","sources":["../../src/lib/credentials.ts"],"names":[],"mappings":"AAQA,MAAM,WAAW,WAAW;IAC1B,KAAK,EAAE,MAAM,CAAC;IACd,YAAY,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,KAAK,GAAG,UAAU,CAAC;IACjC,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,KAAK,GAAG,UAAU,CAAC;CAClC;AAED,MAAM,WAAW,SAAS;IACxB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,mBAAmB,EAAE,MAAM,CAAC;IAC5B,cAAc,EAAE,MAAM,CAAC;IACvB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;CAC5B;AAED,MAAM,WAAW,iBAAiB;IAChC,WAAW,EAAE,OAAO,CAAC;IACrB,mBAAmB,EAAE,MAAM,GAAG,IAAI,CAAC;IACnC,mBAAmB,EAAE,MAAM,CAAC;IAC5B,gBAAgB,EAAE,MAAM,CAAC;IACzB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,mBAAmB,EAAE,MAAM,CAAC;IAC5B,sBAAsB,EAAE,MAAM,CAAC;IAC/B,qBAAqB,EAAE,MAAM,CAAC;CAC/B;AAED,MAAM,WAAW,eAAe;IAC9B,MAAM,EAAE,WAAW,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED;;;GAGG;AACH,wBAAgB,YAAY,IAAI,MAAM,CAarC;AAED;;GAEG;AACH,wBAAgB,aAAa,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAIpD;AAED;;GAEG;AACH,wBAAgB,cAAc,IAAI,IAAI,CAMrC;AAED;;;GAGG;AACH,wBAAsB,UAAU,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC,CAwB/E;AAED;;;;;;;;GAQG;AACH,wBAAsB,WAAW,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAqCvF;AAED;;;;;;;;;GASG;AACH,wBAAsB,YAAY,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAUnE;AAED;;;GAGG;AACH,wBAAsB,aAAa,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,GAAG,IAAI,CAAC,CA2BhF;AAED;;GAEG;AACH,wBAAsB,eAAe,CACnC,SAAS,EAAE,MAAM,EACjB,cAAc,EAAE,MAAM,EACtB,WAAW,EAAE,MAAM,GAClB,OAAO,CAAC,IAAI,CAAC,CAkBf;AAED;;;GAGG;AACH,wBAAsB,kBAAkB,CACtC,SAAS,EAAE,MAAM,EACjB,SAAS,EAAE,MAAM,EACjB,mBAAmB,EAAE,MAAM,GAC1B,OAAO,CAAC,IAAI,CAAC,CAgBf;AAED;;;GAGG;AACH,wBAAsB,mBAAmB,CACvC,YAAY,EAAE,MAAM,EACpB,WAAW,EAAE,MAAM,GAClB,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAiBxB;AAED;;;GAGG;AACH,wBAAsB,qBAAqB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,GAAG,IAAI,CAAC,CAuBhG;AAED;;;GAGG;AACH,wBAAsB,sBAAsB,CAC1C,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,OAAO,CAAC,iBAAiB,CAAC,GACjC,OAAO,CAAC,IAAI,CAAC,CAgDf;AAED;;;GAGG;AACH,wBAAsB,uBAAuB,IAAI,OAAO,CACtD,KAAK,CAAC;IAAE,SAAS,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,WAAW,CAAC;IAAC,WAAW,EAAE,iBAAiB,CAAA;CAAE,CAAC,CAClF,CAoCA;AAED;;;GAGG;AACH,wBAAsB,eAAe,CACnC,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC;IAAE,WAAW,EAAE,eAAe,CAAA;CAAE,GAAG;IAAE,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC,CAc/D"}
+{"version":3,"file":"credentials.d.ts","sourceRoot":"","sources":["../../src/lib/credentials.ts"],"names":[],"mappings":"AAQA,MAAM,WAAW,WAAW;IAC1B,KAAK,EAAE,MAAM,CAAC;IACd,YAAY,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,KAAK,GAAG,UAAU,CAAC;IACjC,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,KAAK,GAAG,UAAU,CAAC;CAClC;AAED,MAAM,WAAW,SAAS;IACxB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,mBAAmB,EAAE,MAAM,CAAC;IAC5B,cAAc,EAAE,MAAM,CAAC;IACvB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;CAC5B;AAED,MAAM,WAAW,eAAe;IAC9B,MAAM,EAAE,WAAW,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED;;;GAGG;AACH,wBAAgB,YAAY,IAAI,MAAM,CAarC;AAED;;GAEG;AACH,wBAAgB,aAAa,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAIpD;AAED;;GAEG;AACH,wBAAgB,cAAc,IAAI,IAAI,CAMrC;AAED;;;GAGG;AACH,wBAAsB,UAAU,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC,CAwB/E;AAED;;;;;;;;GAQG;AACH,wBAAsB,WAAW,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CA2CvF;AAED;;;;;;;;;GASG;AACH,wBAAsB,YAAY,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAUnE;AAED;;;GAGG;AACH,wBAAsB,aAAa,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,GAAG,IAAI,CAAC,CA2BhF;AAED;;GAEG;AACH,wBAAsB,eAAe,CACnC,SAAS,EAAE,MAAM,EACjB,cAAc,EAAE,MAAM,EACtB,WAAW,EAAE,MAAM,GAClB,OAAO,CAAC,IAAI,CAAC,CAkBf;AAED;;;GAGG;AACH,wBAAsB,kBAAkB,CACtC,SAAS,EAAE,MAAM,EACjB,SAAS,EAAE,MAAM,EACjB,mBAAmB,EAAE,MAAM,GAC1B,OAAO,CAAC,IAAI,CAAC,CAgBf;AAED;;;GAGG;AACH,wBAAsB,mBAAmB,CACvC,YAAY,EAAE,MAAM,EACpB,WAAW,EAAE,MAAM,GAClB,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAiBxB;AAED;;;GAGG;AACH,wBAAsB,eAAe,CACnC,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC;IAAE,WAAW,EAAE,eAAe,CAAA;CAAE,GAAG;IAAE,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC,CAc/D"}

package/payload/platform/plugins/email/mcp/dist/lib/credentials.js

@@ -89,7 +89,13 @@ export async function writeConfig(accountId, config) {
            e.smtpHost = $smtpHost,
            e.smtpPort = $smtpPort,
            e.smtpSecurity = $smtpSecurity,
-           e.updatedAt = $updatedAt`, {
+           e.updatedAt = $updatedAt
+       REMOVE e.autoRespond,
+              e.autoRespondHourlyLimit,
+              e.autoRespondDailyLimit,
+              e.respondingAgentSlug,
+              e.lastRespondedUid,
+              e.consecutiveFailures`, {
             accountId,
             email: config.email,
             agentAddress: config.agentAddress,
@@ -217,120 +223,6 @@ export async function checkAddressBinding(agentAddress, currentSlug) {
         await session.close();
     }
 }
-/**
- * Read auto-respond config from the EmailAccount node.
- * Returns defaults if fields are not yet set.
- */
-export async function readAutoRespondConfig(accountId) {
-    const session = getSession();
-    try {
-        const result = await session.run(`MATCH (e:EmailAccount {accountId: $accountId}) RETURN e LIMIT 1`, { accountId });
-        if (result.records.length === 0)
-            return null;
-        const props = result.records[0].get("e").properties;
-        return {
-            autoRespond: props.autoRespond === true,
-            respondingAgentSlug: props.respondingAgentSlug ?? null,
-            pollIntervalMinutes: props.pollIntervalMinutes ? neo4j.integer.toNumber(props.pollIntervalMinutes) : 5,
-            lastRespondedUid: props.lastRespondedUid ? neo4j.integer.toNumber(props.lastRespondedUid) : 0,
-            lastPollAt: props.lastPollAt ?? null,
-            consecutiveFailures: props.consecutiveFailures ? neo4j.integer.toNumber(props.consecutiveFailures) : 0,
-            autoRespondHourlyLimit: props.autoRespondHourlyLimit ? neo4j.integer.toNumber(props.autoRespondHourlyLimit) : 20,
-            autoRespondDailyLimit: props.autoRespondDailyLimit ? neo4j.integer.toNumber(props.autoRespondDailyLimit) : 100,
-        };
-    }
-    finally {
-        await session.close();
-    }
-}
-/**
- * Write auto-respond config fields on the EmailAccount node.
- * Only updates the specified fields — does not touch email/IMAP/SMTP config.
- */
-export async function writeAutoRespondConfig(accountId, config) {
-    const session = getSession();
-    try {
-        const setClauses = [];
-        const params = { accountId };
-        if (config.autoRespond !== undefined) {
-            setClauses.push("e.autoRespond = $autoRespond");
-            params.autoRespond = config.autoRespond;
-        }
-        if (config.respondingAgentSlug !== undefined) {
-            setClauses.push("e.respondingAgentSlug = $respondingAgentSlug");
-            params.respondingAgentSlug = config.respondingAgentSlug;
-        }
-        if (config.pollIntervalMinutes !== undefined) {
-            setClauses.push("e.pollIntervalMinutes = $pollIntervalMinutes");
-            params.pollIntervalMinutes = neo4j.int(config.pollIntervalMinutes);
-        }
-        if (config.lastRespondedUid !== undefined) {
-            setClauses.push("e.lastRespondedUid = $lastRespondedUid");
-            params.lastRespondedUid = neo4j.int(config.lastRespondedUid);
-        }
-        if (config.lastPollAt !== undefined) {
-            setClauses.push("e.lastPollAt = $lastPollAt");
-            params.lastPollAt = config.lastPollAt;
-        }
-        if (config.consecutiveFailures !== undefined) {
-            setClauses.push("e.consecutiveFailures = $consecutiveFailures");
-            params.consecutiveFailures = neo4j.int(config.consecutiveFailures);
-        }
-        if (config.autoRespondHourlyLimit !== undefined) {
-            setClauses.push("e.autoRespondHourlyLimit = $autoRespondHourlyLimit");
-            params.autoRespondHourlyLimit = neo4j.int(config.autoRespondHourlyLimit);
-        }
-        if (config.autoRespondDailyLimit !== undefined) {
-            setClauses.push("e.autoRespondDailyLimit = $autoRespondDailyLimit");
-            params.autoRespondDailyLimit = neo4j.int(config.autoRespondDailyLimit);
-        }
-        if (setClauses.length === 0)
-            return;
-        await session.run(`MATCH (e:EmailAccount {accountId: $accountId}) SET ${setClauses.join(", ")}`, params);
-    }
-    finally {
-        await session.close();
-    }
-}
-/**
- * Read all EmailAccounts that have auto-respond enabled.
- * Returns config + auto-respond settings for each.
- */
-export async function readAutoRespondAccounts() {
-    const session = getSession();
-    try {
-        const result = await session.run(`MATCH (e:EmailAccount {autoRespond: true}) RETURN e`);
-        return result.records.map((record) => {
-            const props = record.get("e").properties;
-            return {
-                accountId: props.accountId,
-                config: {
-                    email: props.email,
-                    agentAddress: props.agentAddress ?? props.email,
-                    imapHost: props.imapHost,
-                    imapPort: neo4j.integer.toNumber(props.imapPort),
-                    imapSecurity: props.imapSecurity,
-                    smtpHost: props.smtpHost,
-                    smtpPort: neo4j.integer.toNumber(props.smtpPort),
-                    smtpSecurity: props.smtpSecurity,
-                },
-                autoRespond: {
-                    autoRespond: true,
-                    respondingAgentSlug: props.respondingAgentSlug ?? null,
-                    pollIntervalMinutes: props.pollIntervalMinutes ? neo4j.integer.toNumber(props.pollIntervalMinutes) : 5,
-                    lastRespondedUid: props.lastRespondedUid ? neo4j.integer.toNumber(props.lastRespondedUid) : 0,
-                    lastPollAt: props.lastPollAt ?? null,
-                    consecutiveFailures: props.consecutiveFailures ? neo4j.integer.toNumber(props.consecutiveFailures) : 0,
-                    autoRespondHourlyLimit: props.autoRespondHourlyLimit ? neo4j.integer.toNumber(props.autoRespondHourlyLimit) : 20,
-                    autoRespondDailyLimit: props.autoRespondDailyLimit ? neo4j.integer.toNumber(props.autoRespondDailyLimit) : 100,
-                },
-            };
-        });
-    }
-    finally {
-        await session.close();
-    }
-}
 /**
  * Load full credentials (config + password).
  * Returns null with a reason if either piece is missing.

package/payload/platform/plugins/email/mcp/dist/lib/credentials.js.map

@@ -1 +1 @@
-{"version":3,"file":"credentials.js","sourceRoot":"","sources":["../../src/lib/credentials.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,SAAS,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AACxF,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AACxC,OAAO,KAAK,MAAM,cAAc,CAAC;AAEjC,MAAM,aAAa,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,OAAO,EAAE,iBAAiB,CAAC,CAAC;AAqClE;;;GAGG;AACH,MAAM,UAAU,YAAY;IAC1B,IAAI,CAAC;QACH,MAAM,EAAE,GAAG,YAAY,CAAC,aAAa,EAAE,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC;QACvD,IAAI,CAAC,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;QACnD,OAAO,EAAE,CAAC;IACZ,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAK,GAA6B,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YACrD,MAAM,IAAI,KAAK,CACb,8CAA8C,aAAa,0BAA0B,CACtF,CAAC;QACJ,CAAC;QACD,MAAM,GAAG,CAAC;IACZ,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,aAAa,CAAC,QAAgB;IAC5C,SAAS,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACvD,aAAa,CAAC,aAAa,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACxD,SAAS,CAAC,aAAa,EAAE,KAAK,CAAC,CAAC;AAClC,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,cAAc;IAC5B,IAAI,CAAC;QACH,UAAU,CAAC,aAAa,CAAC,CAAC;IAC5B,CAAC;IAAC,MAAM,CAAC;QACP,mCAAmC;IACrC,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,SAAiB;IAChD,MAAM,OAAO,GAAG,UAAU,EAAE,CAAC;IAC7B,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,GAAG,CAC9B,iEAAiE,EACjE,EAAE,SAAS,EAAE,CACd,CAAC;QAEF,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QAE7C,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,UAAU,CAAC;QACpD,OAAO;YACL,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,YAAY,EAAE,KAAK,CAAC,YAAY,IAAI,KAAK,CAAC,KAAK;YAC/C,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,QAAQ,EAAE,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC;YAChD,YAAY,EAAE,KAAK,CAAC,YAAY;YAChC,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,QAAQ,EAAE,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC;YAChD,YAAY,EAAE,KAAK,CAAC,YAAY;SACjC,CAAC;IACJ,CAAC;YAAS,CAAC;QACT,MAAM,OAAO,CAAC,KAAK,EAAE,CAAC;IACxB,CAAC;AACH,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,SAAiB,EAAE,MAAmB;IACtE,MAAM,SAAS,GAAG,MAAM,UAAU,CAAC,SAAS,CAAC,CAAC;IAE9C,MAAM,OAAO,GAAG,UAAU,EAAE,CAAC;IAC7B,IAAI,CAAC;QACH,MAAM,OAAO,CAAC,GAAG,CACf;;;;;;;;;oCAS8B,EAC9B;YACE,SAAS;YACT,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,YAAY,EAAE,MAAM,CAAC,YAAY;YACjC,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,QAAQ,EAAE,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC;YACpC,YAAY,EAAE,MAAM,CAAC,YAAY;YACjC,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,QAAQ,EAAE,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC;YACpC,YAAY,EAAE,MAAM,CAAC,YAAY;YACjC,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;SACpC,CACF,CAAC;QAEF,kEAAkE;QAClE,mEAAmE;QACnE,uEAAuE;QACvE,qBAAqB;IACvB,CAAC;YAAS,CAAC;QACT,MAAM,OAAO,CAAC,KAAK,EAAE,CAAC;IACxB,CAAC;AACH,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,SAAiB;IAClD,MAAM,OAAO,GAAG,UAAU,EAAE,CAAC;IAC7B,IAAI,CAAC;QACH,MAAM,OAAO,CAAC,GAAG,CACf,gEAAgE,EAChE,EAAE,SAAS,EAAE,CACd,CAAC;IACJ,CAAC;YAAS,CAAC;QACT,MAAM,OAAO,CAAC,KAAK,EAAE,CAAC;IACxB,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,SAAiB;IACnD,MAAM,OAAO,GAAG,UAAU,EAAE,CAAC;IAC7B,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,GAAG,CAC9B,iEAAiE,EACjE,EAAE,SAAS,EAAE,CACd,CAAC;QAEF,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QAE7C,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,UAAU,CAAC;QACpD,OAAO;YACL,SAAS,EAAE,KAAK,CAAC,SAAS,IAAI,IAAI;YAClC,mBAAmB,EAAE,KAAK,CAAC,mBAAmB;gBAC5C,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,mBAAmB,CAAC;gBACnD,CAAC,CAAC,CAAC;YACL,cAAc,EAAE,KAAK,CAAC,cAAc;gBAClC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,cAAc,CAAC;gBAC9C,CAAC,CAAC,CAAC;YACL,UAAU,EAAE,KAAK,CAAC,UAAU,IAAI,IAAI;YACpC,WAAW,EAAE,KAAK,CAAC,WAAW;gBAC5B,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,WAAW,CAAC;gBAC3C,CAAC,CAAC,IAAI;SACT,CAAC;IACJ,CAAC;YAAS,CAAC;QACT,MAAM,OAAO,CAAC,KAAK,EAAE,CAAC;IACxB,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,SAAiB,EACjB,cAAsB,EACtB,WAAmB;IAEnB,MAAM,OAAO,GAAG,UAAU,EAAE,CAAC;IAC7B,IAAI,CAAC;QACH,MAAM,OAAO,CAAC,GAAG,CACf;;;wCAGkC,EAClC;YACE,SAAS;YACT,cAAc,EAAE,KAAK,CAAC,GAAG,CAAC,cAAc,CAAC;YACzC,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACpC,WAAW,EAAE,KAAK,CAAC,GAAG,CAAC,WAAW,CAAC;SACpC,CACF,CAAC;IACJ,CAAC;YAAS,CAAC;QACT,MAAM,OAAO,CAAC,KAAK,EAAE,CAAC;IACxB,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,SAAiB,EACjB,SAAiB,EACjB,mBAA2B;IAE3B,MAAM,OAAO,GAAG,UAAU,EAAE,CAAC;IAC7B,IAAI,CAAC;QACH,MAAM,OAAO,CAAC,GAAG,CACf;;wDAEkD,EAClD;YACE,SAAS;YACT,SAAS;YACT,mBAAmB,EAAE,KAAK,CAAC,GAAG,CAAC,mBAAmB,CAAC;SACpD,CACF,CAAC;IACJ,CAAC;YAAS,CAAC;QACT,MAAM,OAAO,CAAC,KAAK,EAAE,CAAC;IACxB,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,YAAoB,EACpB,WAAmB;IAEnB,MAAM,OAAO,GAAG,UAAU,EAAE,CAAC;IAC7B,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,GAAG,CAC9B;;;;0CAIoC,EACpC,EAAE,YAAY,EAAE,WAAW,EAAE,CAC9B,CAAC;QAEF,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QAC7C,OAAO,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAW,CAAC;IACjD,CAAC;YAAS,CAAC;QACT,MAAM,OAAO,CAAC,KAAK,EAAE,CAAC;IACxB,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,SAAiB;IAC3D,MAAM,OAAO,GAAG,UAAU,EAAE,CAAC;IAC7B,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,GAAG,CAC9B,iEAAiE,EACjE,EAAE,SAAS,EAAE,CACd,CAAC;QACF,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QAE7C,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,UAAU,CAAC;QACpD,OAAO;YACL,WAAW,EAAE,KAAK,CAAC,WAAW,KAAK,IAAI;YACvC,mBAAmB,EAAE,KAAK,CAAC,mBAAmB,IAAI,IAAI;YACtD,mBAAmB,EAAE,KAAK,CAAC,mBAAmB,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC,CAAC,CAAC,CAAC;YACtG,gBAAgB,EAAE,KAAK,CAAC,gBAAgB,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,CAAC;YAC7F,UAAU,EAAE,KAAK,CAAC,UAAU,IAAI,IAAI;YACpC,mBAAmB,EAAE,KAAK,CAAC,mBAAmB,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC,CAAC,CAAC,CAAC;YACtG,sBAAsB,EAAE,KAAK,CAAC,sBAAsB,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,sBAAsB,CAAC,CAAC,CAAC,CAAC,EAAE;YAChH,qBAAqB,EAAE,KAAK,CAAC,qBAAqB,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC,GAAG;SAC/G,CAAC;IACJ,CAAC;YAAS,CAAC;QACT,MAAM,OAAO,CAAC,KAAK,EAAE,CAAC;IACxB,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,SAAiB,EACjB,MAAkC;IAElC,MAAM,OAAO,GAAG,UAAU,EAAE,CAAC;IAC7B,IAAI,CAAC;QACH,MAAM,UAAU,GAAa,EAAE,CAAC;QAChC,MAAM,MAAM,GAA4B,EAAE,SAAS,EAAE,CAAC;QAEtD,IAAI,MAAM,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;YACrC,UAAU,CAAC,IAAI,CAAC,8BAA8B,CAAC,CAAC;YAChD,MAAM,CAAC,WAAW,GAAG,MAAM,CAAC,WAAW,CAAC;QAC1C,CAAC;QACD,IAAI,MAAM,CAAC,mBAAmB,KAAK,SAAS,EAAE,CAAC;YAC7C,UAAU,CAAC,IAAI,CAAC,8CAA8C,CAAC,CAAC;YAChE,MAAM,CAAC,mBAAmB,GAAG,MAAM,CAAC,mBAAmB,CAAC;QAC1D,CAAC;QACD,IAAI,MAAM,CAAC,mBAAmB,KAAK,SAAS,EAAE,CAAC;YAC7C,UAAU,CAAC,IAAI,CAAC,8CAA8C,CAAC,CAAC;YAChE,MAAM,CAAC,mBAAmB,GAAG,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,mBAAmB,CAAC,CAAC;QACrE,CAAC;QACD,IAAI,MAAM,CAAC,gBAAgB,KAAK,SAAS,EAAE,CAAC;YAC1C,UAAU,CAAC,IAAI,CAAC,wCAAwC,CAAC,CAAC;YAC1D,MAAM,CAAC,gBAAgB,GAAG,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC;QAC/D,CAAC;QACD,IAAI,MAAM,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;YACpC,UAAU,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAC;YAC9C,MAAM,CAAC,UAAU,GAAG,MAAM,CAAC,UAAU,CAAC;QACxC,CAAC;QACD,IAAI,MAAM,CAAC,mBAAmB,KAAK,SAAS,EAAE,CAAC;YAC7C,UAAU,CAAC,IAAI,CAAC,8CAA8C,CAAC,CAAC;YAChE,MAAM,CAAC,mBAAmB,GAAG,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,mBAAmB,CAAC,CAAC;QACrE,CAAC;QACD,IAAI,MAAM,CAAC,sBAAsB,KAAK,SAAS,EAAE,CAAC;YAChD,UAAU,CAAC,IAAI,CAAC,oDAAoD,CAAC,CAAC;YACtE,MAAM,CAAC,sBAAsB,GAAG,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,sBAAsB,CAAC,CAAC;QAC3E,CAAC;QACD,IAAI,MAAM,CAAC,qBAAqB,KAAK,SAAS,EAAE,CAAC;YAC/C,UAAU,CAAC,IAAI,CAAC,kDAAkD,CAAC,CAAC;YACpE,MAAM,CAAC,qBAAqB,GAAG,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,qBAAqB,CAAC,CAAC;QACzE,CAAC;QAED,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO;QAEpC,MAAM,OAAO,CAAC,GAAG,CACf,sDAAsD,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAC7E,MAAM,CACP,CAAC;IACJ,CAAC;YAAS,CAAC;QACT,MAAM,OAAO,CAAC,KAAK,EAAE,CAAC;IACxB,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,uBAAuB;IAG3C,MAAM,OAAO,GAAG,UAAU,EAAE,CAAC;IAC7B,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,GAAG,CAC9B,qDAAqD,CACtD,CAAC;QAEF,OAAO,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE;YACnC,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,UAAU,CAAC;YACzC,OAAO;gBACL,SAAS,EAAE,KAAK,CAAC,SAAS;gBAC1B,MAAM,EAAE;oBACN,KAAK,EAAE,KAAK,CAAC,KAAK;oBAClB,YAAY,EAAE,KAAK,CAAC,YAAY,IAAI,KAAK,CAAC,KAAK;oBAC/C,QAAQ,EAAE,KAAK,CAAC,QAAQ;oBACxB,QAAQ,EAAE,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC;oBAChD,YAAY,EAAE,KAAK,CAAC,YAAY;oBAChC,QAAQ,EAAE,KAAK,CAAC,QAAQ;oBACxB,QAAQ,EAAE,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC;oBAChD,YAAY,EAAE,KAAK,CAAC,YAAY;iBACjC;gBACD,WAAW,EAAE;oBACX,WAAW,EAAE,IAAI;oBACjB,mBAAmB,EAAE,KAAK,CAAC,mBAAmB,IAAI,IAAI;oBACtD,mBAAmB,EAAE,KAAK,CAAC,mBAAmB,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC,CAAC,CAAC,CAAC;oBACtG,gBAAgB,EAAE,KAAK,CAAC,gBAAgB,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,CAAC;oBAC7F,UAAU,EAAE,KAAK,CAAC,UAAU,IAAI,IAAI;oBACpC,mBAAmB,EAAE,KAAK,CAAC,mBAAmB,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC,CAAC,CAAC,CAAC;oBACtG,sBAAsB,EAAE,KAAK,CAAC,sBAAsB,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,sBAAsB,CAAC,CAAC,CAAC,CAAC,EAAE;oBAChH,qBAAqB,EAAE,KAAK,CAAC,qBAAqB,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC,GAAG;iBAC/G;aACF,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC;YAAS,CAAC;QACT,MAAM,OAAO,CAAC,KAAK,EAAE,CAAC;IACxB,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,SAAiB;IAEjB,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,SAAS,CAAC,CAAC;IAC3C,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO,EAAE,KAAK,EAAE,4EAA4E,EAAE,CAAC;IACjG,CAAC;IAED,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,YAAY,EAAE,CAAC;QAChC,OAAO,EAAE,WAAW,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,EAAE,CAAC;IAC/C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO;YACL,KAAK,EAAE,iBAAiB,MAAM,CAAC,KAAK,yEAAyE;SAC9G,CAAC;IACJ,CAAC;AACH,CAAC"}
+{"version":3,"file":"credentials.js","sourceRoot":"","sources":["../../src/lib/credentials.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,SAAS,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AACxF,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AACxC,OAAO,KAAK,MAAM,cAAc,CAAC;AAEjC,MAAM,aAAa,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,OAAO,EAAE,iBAAiB,CAAC,CAAC;AA0BlE;;;GAGG;AACH,MAAM,UAAU,YAAY;IAC1B,IAAI,CAAC;QACH,MAAM,EAAE,GAAG,YAAY,CAAC,aAAa,EAAE,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC;QACvD,IAAI,CAAC,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;QACnD,OAAO,EAAE,CAAC;IACZ,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAK,GAA6B,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YACrD,MAAM,IAAI,KAAK,CACb,8CAA8C,aAAa,0BAA0B,CACtF,CAAC;QACJ,CAAC;QACD,MAAM,GAAG,CAAC;IACZ,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,aAAa,CAAC,QAAgB;IAC5C,SAAS,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACvD,aAAa,CAAC,aAAa,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACxD,SAAS,CAAC,aAAa,EAAE,KAAK,CAAC,CAAC;AAClC,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,cAAc;IAC5B,IAAI,CAAC;QACH,UAAU,CAAC,aAAa,CAAC,CAAC;IAC5B,CAAC;IAAC,MAAM,CAAC;QACP,mCAAmC;IACrC,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,SAAiB;IAChD,MAAM,OAAO,GAAG,UAAU,EAAE,CAAC;IAC7B,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,GAAG,CAC9B,iEAAiE,EACjE,EAAE,SAAS,EAAE,CACd,CAAC;QAEF,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QAE7C,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,UAAU,CAAC;QACpD,OAAO;YACL,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,YAAY,EAAE,KAAK,CAAC,YAAY,IAAI,KAAK,CAAC,KAAK;YAC/C,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,QAAQ,EAAE,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC;YAChD,YAAY,EAAE,KAAK,CAAC,YAAY;YAChC,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,QAAQ,EAAE,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC;YAChD,YAAY,EAAE,KAAK,CAAC,YAAY;SACjC,CAAC;IACJ,CAAC;YAAS,CAAC;QACT,MAAM,OAAO,CAAC,KAAK,EAAE,CAAC;IACxB,CAAC;AACH,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,SAAiB,EAAE,MAAmB;IACtE,MAAM,SAAS,GAAG,MAAM,UAAU,CAAC,SAAS,CAAC,CAAC;IAE9C,MAAM,OAAO,GAAG,UAAU,EAAE,CAAC;IAC7B,IAAI,CAAC;QACH,MAAM,OAAO,CAAC,GAAG,CACf;;;;;;;;;;;;;;;oCAe8B,EAC9B;YACE,SAAS;YACT,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,YAAY,EAAE,MAAM,CAAC,YAAY;YACjC,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,QAAQ,EAAE,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC;YACpC,YAAY,EAAE,MAAM,CAAC,YAAY;YACjC,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,QAAQ,EAAE,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC;YACpC,YAAY,EAAE,MAAM,CAAC,YAAY;YACjC,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;SACpC,CACF,CAAC;QAEF,kEAAkE;QAClE,mEAAmE;QACnE,uEAAuE;QACvE,qBAAqB;IACvB,CAAC;YAAS,CAAC;QACT,MAAM,OAAO,CAAC,KAAK,EAAE,CAAC;IACxB,CAAC;AACH,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,SAAiB;IAClD,MAAM,OAAO,GAAG,UAAU,EAAE,CAAC;IAC7B,IAAI,CAAC;QACH,MAAM,OAAO,CAAC,GAAG,CACf,gEAAgE,EAChE,EAAE,SAAS,EAAE,CACd,CAAC;IACJ,CAAC;YAAS,CAAC;QACT,MAAM,OAAO,CAAC,KAAK,EAAE,CAAC;IACxB,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,SAAiB;IACnD,MAAM,OAAO,GAAG,UAAU,EAAE,CAAC;IAC7B,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,GAAG,CAC9B,iEAAiE,EACjE,EAAE,SAAS,EAAE,CACd,CAAC;QAEF,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QAE7C,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,UAAU,CAAC;QACpD,OAAO;YACL,SAAS,EAAE,KAAK,CAAC,SAAS,IAAI,IAAI;YAClC,mBAAmB,EAAE,KAAK,CAAC,mBAAmB;gBAC5C,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,mBAAmB,CAAC;gBACnD,CAAC,CAAC,CAAC;YACL,cAAc,EAAE,KAAK,CAAC,cAAc;gBAClC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,cAAc,CAAC;gBAC9C,CAAC,CAAC,CAAC;YACL,UAAU,EAAE,KAAK,CAAC,UAAU,IAAI,IAAI;YACpC,WAAW,EAAE,KAAK,CAAC,WAAW;gBAC5B,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,WAAW,CAAC;gBAC3C,CAAC,CAAC,IAAI;SACT,CAAC;IACJ,CAAC;YAAS,CAAC;QACT,MAAM,OAAO,CAAC,KAAK,EAAE,CAAC;IACxB,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,SAAiB,EACjB,cAAsB,EACtB,WAAmB;IAEnB,MAAM,OAAO,GAAG,UAAU,EAAE,CAAC;IAC7B,IAAI,CAAC;QACH,MAAM,OAAO,CAAC,GAAG,CACf;;;wCAGkC,EAClC;YACE,SAAS;YACT,cAAc,EAAE,KAAK,CAAC,GAAG,CAAC,cAAc,CAAC;YACzC,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACpC,WAAW,EAAE,KAAK,CAAC,GAAG,CAAC,WAAW,CAAC;SACpC,CACF,CAAC;IACJ,CAAC;YAAS,CAAC;QACT,MAAM,OAAO,CAAC,KAAK,EAAE,CAAC;IACxB,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,SAAiB,EACjB,SAAiB,EACjB,mBAA2B;IAE3B,MAAM,OAAO,GAAG,UAAU,EAAE,CAAC;IAC7B,IAAI,CAAC;QACH,MAAM,OAAO,CAAC,GAAG,CACf;;wDAEkD,EAClD;YACE,SAAS;YACT,SAAS;YACT,mBAAmB,EAAE,KAAK,CAAC,GAAG,CAAC,mBAAmB,CAAC;SACpD,CACF,CAAC;IACJ,CAAC;YAAS,CAAC;QACT,MAAM,OAAO,CAAC,KAAK,EAAE,CAAC;IACxB,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,YAAoB,EACpB,WAAmB;IAEnB,MAAM,OAAO,GAAG,UAAU,EAAE,CAAC;IAC7B,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,GAAG,CAC9B;;;;0CAIoC,EACpC,EAAE,YAAY,EAAE,WAAW,EAAE,CAC9B,CAAC;QAEF,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QAC7C,OAAO,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAW,CAAC;IACjD,CAAC;YAAS,CAAC;QACT,MAAM,OAAO,CAAC,KAAK,EAAE,CAAC;IACxB,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,SAAiB;IAEjB,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,SAAS,CAAC,CAAC;IAC3C,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO,EAAE,KAAK,EAAE,4EAA4E,EAAE,CAAC;IACjG,CAAC;IAED,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,YAAY,EAAE,CAAC;QAChC,OAAO,EAAE,WAAW,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,EAAE,CAAC;IAC/C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO;YACL,KAAK,EAAE,iBAAiB,MAAM,CAAC,KAAK,yEAAyE;SAC9G,CAAC;IACJ,CAAC;AACH,CAAC"}

package/payload/platform/plugins/email/skills/email-composition/SKILL.md

@@ -19,7 +19,7 @@ Activate when the operator asks for any of:
 Do **not** activate for:
 
 - Listing or searching emails as the end-goal (no draft intent) — let `email-search` / `email-graph-query` answer directly.
-- Setup, status checks, OTP extraction, auto-respond config — those are direct tool calls.
+- Setup, status checks, OTP extraction — those are direct tool calls.
 - Any automated send loop. If the operator asks for drip / scheduled / broadcast sends, decline and explain that this skill is human-in-the-loop only.
 
 ## Flow — reply to an existing thread

package/payload/platform/scripts/lib/read-brand-json.sh

@@ -1,7 +1,7 @@
 #!/usr/bin/env bash
 # read-brand-json.sh — brand.json reader + LocalBusiness bootstrap helpers.
 #
-# Sourced by seed-neo4j.sh. Three functions:
+# Sourced by setup-account.sh and seed-neo4j.sh. Three functions:
 #
 #   read_brand_json_key <brand.json path> <key>
 #     Sets the global BRAND_JSON_VALUE to the value at <key>, or empty when

package/payload/platform/scripts/lib/resolve-account-dir.sh

@@ -1,5 +1,5 @@
 # resolve-account-dir.sh — identity-aware account resolver + orphan sweeper
-# Sourced by seed-neo4j.sh. Defines `resolve_and_sweep_account_dir`.
+# Sourced by setup-account.sh and seed-neo4j.sh. Defines `resolve_and_sweep_account_dir`.
 #
 # Invariant: the TypeScript `resolveAccount()` at platform/ui/app/lib/claude-agent.ts
 # is READ-ONLY. This bash helper is the SOLE sweep surface, because seed-time is

package/payload/platform/scripts/seed-neo4j.sh

@@ -1,20 +1,23 @@
 #!/usr/bin/env bash
 # ============================================================
-# seed-neo4j.sh — Phase 0 setup
-# Creates the account from templates and applies Neo4j schema.
-# Product knowledge is ingested post-installation via the admin
-# agent, not seeded as cypher.
+# seed-neo4j.sh — Neo4j schema + root-node seeding
+# Applies the schema (constraints, indexes, vector indexes) and
+# MERGEs the per-account root :LocalBusiness and owner :AdminUser
+# nodes. Account directory creation, Claude Code settings, hooks
+# wiring, and specialist templates live in `setup-account.sh`.
+# This script does no filesystem setup beyond reading what
+# setup-account.sh wrote.
 # ============================================================
 
 set -euo pipefail
 
 SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
 PROJECT_DIR="$(dirname "$SCRIPT_DIR")"
-TEMPLATES_DIR="$PROJECT_DIR/templates"
-# Accounts live at {installDir}/data/accounts/ — outside the platform/ wipe zone.
+NEO4J_DIR="$PROJECT_DIR/neo4j"
+# Accounts live at {installDir}/data/accounts/ — outside the platform/ wipe
+# zone. resolve_and_sweep_account_dir reads ACCOUNTS_DIR from env.
 INSTALL_DIR="$(dirname "$PROJECT_DIR")"
 ACCOUNTS_DIR="$INSTALL_DIR/data/accounts"
-NEO4J_DIR="$PROJECT_DIR/neo4j"
 
 # NEO4J_URI is hard-required. The previous default
 # `bolt://localhost:7687` would silently route the seed to the wrong Neo4j on
@@ -41,426 +44,20 @@ fi
 CYPHER_SHELL="cypher-shell"
 
 # ------------------------------------------------------------------
-# 1. Create account from templates
+# 1. Resolve the account dir (must already exist; setup-account.sh
+#    is the creator). The resolver is idempotent — calling it here
+#    re-finds the same ACCOUNT_DIR / ACCOUNT_ID setup-account.sh
+#    minted.
 # ------------------------------------------------------------------
-
-# Resolve existing account by identity (users.json[0].userId) or mint a new one on fresh install.
-# Orphan siblings under data/accounts/ — non-matching dirs left behind by the userId
-# regeneration — are swept to data/accounts/.trash/<uuid>-<ISO8601-ts>/. Multi-candidate with
-# no identity match aborts loud; .trash/ is operator-emptied, never auto-cleaned.
 # shellcheck source=lib/resolve-account-dir.sh
 . "$SCRIPT_DIR/lib/resolve-account-dir.sh"
 # shellcheck source=lib/read-brand-json.sh
 . "$SCRIPT_DIR/lib/read-brand-json.sh"
-# Resolve brand-aware persistent users.json path before the resolver runs.
-# Mirrors the resolution lower in this file (around the post-Task-904 USERS_FILE
-# block); duplicated here because resolve_and_sweep_account_dir runs first.
 _RESOLVER_CONFIG_DIR_NAME=".maxy"
 read_brand_json_key "$PROJECT_DIR/config/brand.json" "configDir"
 [ -n "$BRAND_JSON_VALUE" ] && _RESOLVER_CONFIG_DIR_NAME="$BRAND_JSON_VALUE"
 USERS_FILE="$HOME/$_RESOLVER_CONFIG_DIR_NAME/users.json" resolve_and_sweep_account_dir
 
-mkdir -p "$ACCOUNT_DIR/agents/admin" "$ACCOUNT_DIR/agents/public" "$ACCOUNT_DIR/.claude" "$ACCOUNT_DIR/specialists/.claude-plugin" "$ACCOUNT_DIR/specialists/agents"
-
-# Claude Code discovers project-level .claude/ (agents, settings) relative to the
-# nearest .git root. Without a .git in the account directory, Claude Code traverses
-# up to ~/maxy/.git and misses everything in accountDir/.claude/. Initialise a git
-# repo so the account directory IS the project root for Claude Code.
-[ -d "$ACCOUNT_DIR/.git" ] || git init -q "$ACCOUNT_DIR"
-
-# Claude Code permissions — project-level settings now work since the account dir
-# has .git. Write permissions to the account's own .claude/settings.json.
-ACCOUNT_SETTINGS="$ACCOUNT_DIR/.claude/settings.json"
-
-# Wildcard permissions for all plugin MCP servers (core + optional).
-# Including optional plugins here is safe — permissions without a running
-# MCP server are inert. This ensures tools are allowed when the user
-# enables an optional plugin, without requiring a re-seed.
-MAXY_PERMISSIONS='["Read","Edit","Write","Bash","Glob","Grep","Agent","mcp__memory__*","mcp__contacts__*","mcp__telegram__*","mcp__admin__*","mcp__cloudflare__*","mcp__work__*","mcp__scheduling__*","mcp__email__*","mcp__workflows__*","mcp__web__*","mcp__plugin_playwright_playwright__*"]'
-
-# Append wildcard permissions for any optional plugins not already covered
-PLUGINS_DIR="$(dirname "$0")/../plugins"
-if [ -d "$PLUGINS_DIR" ]; then
-  for PLUGIN_DIR in "$PLUGINS_DIR"/*/; do
-    PLUGIN_NAME="$(basename "$PLUGIN_DIR")"
-    # Skip plugins already in the static list
-    case "$MAXY_PERMISSIONS" in
-      *"mcp__${PLUGIN_NAME}__"*) continue ;;
-    esac
-    # Only add if plugin has an MCP server
-    if [ -d "$PLUGIN_DIR/mcp" ]; then
-      MAXY_PERMISSIONS="${MAXY_PERMISSIONS%]},\"mcp__${PLUGIN_NAME}__*\"]"
-    fi
-  done
-fi
-
-# Always overwrite — Rubytech-controlled. Project-level settings take
-# precedence over global, so each account is properly isolated.
-#
-# Hook commands use $PLATFORM_ROOT (set by claude-agent.ts at spawn time)
-# to locate scripts relative to the platform installation, not the account dir.
-#
-# Hooks wired:
-#   PreToolUse — pre-tool-use.sh: admin write boundaries
-#                playwright-file-guard.sh: intercepts browser_navigate with file:// URLs
-#                webfetch-preflight.mjs: detects JS-SPA shells before WebFetch's
-#                  60s extraction timeout. Fail-open on any error;
-#                  on positive SPA detection exits 2 with WEBFETCH_CANNOT_READ_JS_SPA.
-#                archive-ingest-surface-gate.sh:
-#                  narrows the database-operator subagent's effective surface
-#                  during conversation-archive ingestion to exactly one Bash
-#                  entry (memory/bin/conversation-archive-ingest.sh --source
-#                  <enum>) plus read-only neighbours. Defensive blocks on
-#                  withdrawn MCP tool names (mcp__memory__whatsapp-export-
-#                  {parse,preview,insight-write,insight-pass},
-#                  mcp__memory__memory-archive-write when
-#                  archiveType=whatsapp-export) remain so any future
-#                  reintroduction loud-fails. Preserves the plugin-source
-#                  edit, JS test-runner, and post-parse-error blocks.
-#                  Wired at three points: explicit Edit/Write/NotebookEdit/Bash
-#                  matchers, a no-matcher PreToolUse entry (the
-#                  post-parse-error gate fires on every tool),
-#                  and a PostToolUse regex matcher for parse tools.
-#                UserPromptSubmit — archive-ingest-surface-gate.sh clears the
-#                  parse-error flag when the operator's next prompt arrives.
-#                askuserquestion-investigate-gate.sh (Task 241): PreToolUse
-#                  matcher=AskUserQuestion. Blocks the question when no
-#                  read-only investigation tool has fired since the latest
-#                  real user turn in the session JSONL. Fail-open on
-#                  missing transcript or parse error. One [ask-gate]
-#                  decision line per call.
-#
-# Task 214 — the per-turn Stop-hook registration that fired
-# turn-completed-graph-write.sh once per admin turn is no longer written.
-# The script, envelope walker, loopback /api/admin/claude-sessions 127.0.0.1
-# bypass, [turn-recorder] emitters, recorder-auto-archive subscriber, and
-# initialMessage envelope spec are preserved as dormant infrastructure for
-# any future autonomous post-turn flow. Admin now delegates graph writes
-# to database-operator via the Task tool inside its own session.
-#
-# Task 282 — Stop hook session-end-retrospective.sh wired below. Fires on
-# every assistant end_turn but exits 0 with `trigger-skipped reason=…`
-# on every path EXCEPT when the operator's latest real-user message
-# carries an end-intent token (/end, /archive, end session,
-# archive this session). On that path it blocks (exit 2 + stderr
-# instruction block) until the admin agent calls the
-# session-retrospective-mark-complete MCP sentinel tool, whose tool_use
-# in the JSONL is the release signal. Recursion guard: any session
-# carrying MAXY_SPECIALIST=<name> (specialist subagent) skips the gate.
-HOOKS_PATH="\$PLATFORM_ROOT/plugins/admin/hooks"
-cat > "$ACCOUNT_SETTINGS" << SETTINGS_EOF
-{
-  "permissions": {
-    "allow": $MAXY_PERMISSIONS
-  },
-  "hooks": {
-    "PreToolUse": [
-      {
-        "matcher": "Write",
-        "hooks": [
-          { "type": "command", "command": "bash $HOOKS_PATH/pre-tool-use.sh admin" },
-          { "type": "command", "command": "bash $HOOKS_PATH/archive-ingest-surface-gate.sh" }
-        ]
-      },
-      {
-        "matcher": "Edit",
-        "hooks": [
-          { "type": "command", "command": "bash $HOOKS_PATH/pre-tool-use.sh admin" },
-          { "type": "command", "command": "bash $HOOKS_PATH/archive-ingest-surface-gate.sh" }
-        ]
-      },
-      {
-        "matcher": "NotebookEdit",
-        "hooks": [
-          { "type": "command", "command": "bash $HOOKS_PATH/archive-ingest-surface-gate.sh" }
-        ]
-      },
-      {
-        "matcher": "Bash",
-        "hooks": [
-          { "type": "command", "command": "bash $HOOKS_PATH/pre-tool-use.sh admin" },
-          { "type": "command", "command": "bash $HOOKS_PATH/archive-ingest-surface-gate.sh" }
-        ]
-      },
-      {
-        "matcher": "mcp__plugin_memory_memory__memory-write",
-        "hooks": [
-          { "type": "command", "command": "bash $HOOKS_PATH/pre-tool-use.sh admin" }
-        ]
-      },
-      {
-        "matcher": "mcp__plugin_memory_memory__memory-update",
-        "hooks": [
-          { "type": "command", "command": "bash $HOOKS_PATH/pre-tool-use.sh admin" }
-        ]
-      },
-      {
-        "hooks": [
-          { "type": "command", "command": "bash $HOOKS_PATH/archive-ingest-surface-gate.sh" }
-        ]
-      },
-      {
-        "matcher": "mcp__plugin_playwright_playwright__browser_navigate",
-        "hooks": [
-          { "type": "command", "command": "bash $HOOKS_PATH/playwright-file-guard.sh" }
-        ]
-      },
-      {
-        "matcher": "WebFetch",
-        "hooks": [
-          { "type": "command", "command": "node $HOOKS_PATH/webfetch-preflight.mjs" }
-        ]
-      },
-      {
-        "matcher": "AskUserQuestion",
-        "hooks": [
-          { "type": "command", "command": "bash $HOOKS_PATH/askuserquestion-investigate-gate.sh" }
-        ]
-      }
-    ],
-    "PostToolUse": [
-      {
-        "matcher": "mcp__.*__.*-(export|import)-parse$",
-        "hooks": [
-          { "type": "command", "command": "bash $HOOKS_PATH/archive-ingest-surface-gate.sh" }
-        ]
-      }
-    ],
-    "UserPromptSubmit": [
-      {
-        "hooks": [
-          { "type": "command", "command": "bash $HOOKS_PATH/archive-ingest-surface-gate.sh" }
-        ]
-      }
-    ],
-    "Stop": [
-      {
-        "hooks": [
-          { "type": "command", "command": "bash $HOOKS_PATH/session-end-retrospective.sh" }
-        ]
-      }
-    ]
-  }
-}
-SETTINGS_EOF
-
-# Always overwrite IDENTITY.md — Rubytech-controlled, pure behaviour.
-cp "$TEMPLATES_DIR/agents/admin/IDENTITY.md" "$ACCOUNT_DIR/agents/admin/IDENTITY.md"
-cp "$TEMPLATES_DIR/agents/public/IDENTITY.md" "$ACCOUNT_DIR/agents/public/IDENTITY.md"
-echo "  agents/public/IDENTITY.md installed"
-
-# Always overwrite specialist plugin — Rubytech-controlled, not user-editable.
-# Specialists are a Claude Code plugin loaded via --plugin-dir. The plugin lives at
-# accountDir/specialists/ with .claude-plugin/plugin.json and agents/*.md.
-# The admin agent dispatches them as specialists:{name} via the Agent tool.
-cp "$TEMPLATES_DIR/specialists/.claude-plugin/plugin.json" "$ACCOUNT_DIR/specialists/.claude-plugin/plugin.json"
-
-# Remove orphaned core specialist files before copying fresh templates.
-# Core specialists (no '--' in filename) are Rubytech-controlled and fully replaced
-# on every seed. Premium plugin agents (filename contains '--') are preserved —
-# they are managed by the admin agent when plugins are activated/deactivated.
-for _existing in "$ACCOUNT_DIR/specialists/agents/"*.md; do
-  [ -f "$_existing" ] || continue
-  case "$(basename "$_existing")" in
-    *--*) continue ;;  # Premium plugin agent — preserve
-  esac
-  rm -f "$_existing"
-done
-
-for specialist in "$TEMPLATES_DIR/specialists/agents/"*.md; do
-  [ -f "$specialist" ] && cp "$specialist" "$ACCOUNT_DIR/specialists/agents/$(basename "$specialist")"
-done
-
-# Clean up stale .claude/agents/*.md from previous seed format.
-# The old format placed specialists here as slash-command agents — that never worked
-# for programmatic dispatch. Safe to remove; .claude/ dir stays for settings.json.
-rm -f "$ACCOUNT_DIR/.claude/agents/"*.md 2>/dev/null || true
-
-# SOUL.md — user-controlled personalisation. Only create if missing. Never overwrite.
-[ -f "$ACCOUNT_DIR/agents/admin/SOUL.md" ] || cp "$TEMPLATES_DIR/agents/admin/SOUL.md" "$ACCOUNT_DIR/agents/admin/SOUL.md"
-
-# Public agent SOUL.md + config.json — create if missing, never overwrite.
-# IDENTITY.md is handled in the Rubytech-controlled block above.
-[ -f "$ACCOUNT_DIR/agents/public/SOUL.md" ] || cp "$TEMPLATES_DIR/agents/public/SOUL.md" "$ACCOUNT_DIR/agents/public/SOUL.md"
-[ -f "$ACCOUNT_DIR/agents/public/config.json" ] || cp "$TEMPLATES_DIR/agents/public/config.json" "$ACCOUNT_DIR/agents/public/config.json"
-
-# AGENTS.md — specialist registry. Pre-populated from templates, maintained by admin agent at runtime.
-# Always overwrite on re-seed (Rubytech-controlled initial state, like IDENTITY.md).
-# Dispatch format: specialists:{name} via the Agent tool.
-printf '# Installed Roles\n\nDispatch via the Agent tool with `subagent_type: "specialists:{name}"`.\n\n' > "$ACCOUNT_DIR/agents/admin/AGENTS.md"
-for specialist in "$ACCOUNT_DIR/specialists/agents/"*.md; do
-  [ -f "$specialist" ] || continue
-  # Extract name and description from YAML frontmatter
-  _name=$(sed -n 's/^name: *//p' "$specialist" | head -1)
-  _desc=$(sed -n 's/^description: *"*//p' "$specialist" | sed 's/"$//' | head -1)
-  [ -z "$_name" ] && continue
-  # Skip Phase 1 stubs — not yet functional
-  echo "$_desc" | grep -qi "Phase 1" && continue
-  printf -- '- **specialists:%s**: %s\n' "$_name" "$_desc" >> "$ACCOUNT_DIR/agents/admin/AGENTS.md"
-done
-
-# Create account.json only if it doesn't exist (business config is in the graph).
-# Reads defaults from the template so there is a single source of truth.
-if [ ! -f "$ACCOUNT_DIR/account.json" ]; then
-  TEMPLATE="$TEMPLATES_DIR/account.json"
-  if [ -f "$TEMPLATE" ]; then
-    sed "s/\"accountId\": *\"[^\"]*\"/\"accountId\":\"$ACCOUNT_ID\"/" "$TEMPLATE" \
-      | sed "s/\"tier\": *\"[^\"]*\"/\"tier\":\"solo\"/" \
-      > "$ACCOUNT_DIR/account.json"
-  else
-    echo "ERROR: account.json template not found at $TEMPLATE" >&2
-    exit 1
-  fi
-fi
-
-# Backfill defaultAgent in account.json if missing (existing accounts earlier).
-# Uses the first non-admin agent directory that has a config.json.
-if [ -f "$ACCOUNT_DIR/account.json" ] && ! grep -q '"defaultAgent"' "$ACCOUNT_DIR/account.json"; then
-  _DEFAULT_SLUG=""
-  for _AGENT_DIR in "$ACCOUNT_DIR/agents"/*/; do
-    _AGENT_NAME="$(basename "$_AGENT_DIR")"
-    [ "$_AGENT_NAME" = "admin" ] && continue
-    [ -f "$_AGENT_DIR/config.json" ] && { _DEFAULT_SLUG="$_AGENT_NAME"; break; }
-  done
-  if [ -n "$_DEFAULT_SLUG" ]; then
-    # Insert defaultAgent before the closing brace
-    sed -i'' "s/}$/,\"defaultAgent\":\"$_DEFAULT_SLUG\"}/" "$ACCOUNT_DIR/account.json"
-    echo "  Backfilled defaultAgent=$_DEFAULT_SLUG in account.json"
-  fi
-fi
-
-# ------------------------------------------------------------------
-# Seed enabledPlugins from brand.json plugins.defaultEnabled
-# ------------------------------------------------------------------
-# Fresh accounts: replaces the template's empty [] with defaultEnabled.
-# Existing accounts: additive merge — adds missing defaultEnabled entries,
-# never removes plugins the user enabled manually.
-# Dependency validation: skips any defaultEnabled plugin whose PLUGIN.md
-# `requires:` dependencies are not satisfied by core or defaultEnabled.
-BRAND_JSON="$PROJECT_DIR/config/brand.json"
-if [ -f "$BRAND_JSON" ] && [ -f "$ACCOUNT_DIR/account.json" ]; then
-  python3 -c "
-import json, os, sys
-
-brand_path = '$BRAND_JSON'
-account_path = '$ACCOUNT_DIR/account.json'
-plugins_dir = '$PROJECT_DIR/plugins'
-
-with open(brand_path) as f:
-    brand = json.load(f)
-
-plugins_cfg = brand.get('plugins', {})
-default_enabled = plugins_cfg.get('defaultEnabled', [])
-core = set(plugins_cfg.get('core', []))
-
-if not default_enabled:
-    print('  [seed] no defaultEnabled plugins in brand.json — skipping')
-    sys.exit(0)
-
-# Dependency validation: check each plugin's PLUGIN.md requires field.
-# A dependency is satisfied if it appears in core or in defaultEnabled.
-satisfied = core | set(default_enabled)
-validated = []
-for plugin in default_enabled:
-    plugin_md = os.path.join(plugins_dir, plugin, 'PLUGIN.md')
-    requires = []
-    if os.path.isfile(plugin_md):
-        in_frontmatter = False
-        in_requires = False
-        with open(plugin_md) as f:
-            for line in f:
-                stripped = line.rstrip()
-                if stripped == '---':
-                    if in_frontmatter:
-                        break
-                    in_frontmatter = True
-                    continue
-                if not in_frontmatter:
-                    continue
-                if stripped.startswith('requires:'):
-                    # Handle inline list: requires: [a, b]
-                    inline = stripped.split(':', 1)[1].strip()
-                    if inline.startswith('['):
-                        requires = [x.strip().strip('\"').strip(\"'\") for x in inline.strip('[]').split(',') if x.strip()]
-                        in_requires = False
-                    else:
-                        in_requires = True
-                    continue
-                if in_requires:
-                    if stripped.startswith('  - '):
-                        requires.append(stripped.lstrip(' -').strip())
-                    else:
-                        in_requires = False
-    unmet = [r for r in requires if r not in satisfied]
-    if unmet:
-        print(f'  [seed] WARNING: skipping defaultEnabled plugin \"{plugin}\" — unmet requires: {unmet}')
-    else:
-        validated.append(plugin)
-
-with open(account_path) as f:
-    account = json.load(f)
-
-existing = account.get('enabledPlugins', [])
-existing_set = set(existing)
-added = [p for p in validated if p not in existing_set]
-account['enabledPlugins'] = existing + added
-
-with open(account_path, 'w') as f:
-    json.dump(account, f, indent=2)
-    f.write('\n')
-
-if not existing:
-    print(f'  [seed] seeded enabledPlugins: {validated}')
-elif added:
-    print(f'  [seed] merged into enabledPlugins: +{added} (existing: {existing})')
-else:
-    print(f'  [seed] enabledPlugins already contains all defaultEnabled entries')
-"
-fi
-
-echo "  Account $ACCOUNT_ID at $ACCOUNT_DIR"
-
-# ------------------------------------------------------------------
-# 1b. Resolve first admin userId from users.json
-# ------------------------------------------------------------------
-# users.json is created by the set-pin POST during onboarding. The seed
-# script reads it to stamp the AdminUser node; it never creates users.json.
-
-CONFIG_DIR="$PROJECT_DIR/config"
-
-# Resolve the brand-specific config directory.
-# Mirrors the logic in platform/ui/app/lib/paths.ts.
-_CONFIG_DIR_NAME=".maxy"
-read_brand_json_key "$CONFIG_DIR/brand.json" "configDir"
-[ -n "$BRAND_JSON_VALUE" ] && _CONFIG_DIR_NAME="$BRAND_JSON_VALUE"
-# users.json lives under $HOME/$_CONFIG_DIR_NAME, not the wipe zone.
-USERS_FILE="$HOME/$_CONFIG_DIR_NAME/users.json"
-mkdir -p "$HOME/$_CONFIG_DIR_NAME"
-
-if [ -f "$USERS_FILE" ]; then
-  USER_ID=$(python3 -c "import json; print(json.load(open('$USERS_FILE'))[0]['userId'])" 2>/dev/null || true)
-  [ -n "$USER_ID" ] && echo "  Existing users.json found, userId=$USER_ID"
-
-  # Ensure account.json admins[] contains the owner. Idempotent.
-  if [ -n "$USER_ID" ] && [ -f "$ACCOUNT_DIR/account.json" ]; then
-    python3 -c "
-import json
-with open('$ACCOUNT_DIR/account.json', 'r') as f:
-    config = json.load(f)
-config.setdefault('admins', [])
-if not any(a.get('userId') == '$USER_ID' for a in config['admins']):
-    config['admins'].append({'userId': '$USER_ID', 'role': 'owner'})
-    with open('$ACCOUNT_DIR/account.json', 'w') as f:
-        json.dump(config, f, indent=2)
-        f.write('\n')
-    print('  Stamped userId=$USER_ID as owner in account.json admins')
-"
-  fi
-else
-  echo "  No users.json found — skipping AdminUser seed (set-pin POST creates it)"
-  USER_ID=""
-fi
-
 # ------------------------------------------------------------------
 # 2. Apply Neo4j schema (constraints + indexes only)
 # ------------------------------------------------------------------
@@ -486,7 +83,7 @@ fi
 echo "$SCHEMA_CYPHER" | "$CYPHER_SHELL" -u "$NEO4J_USER" -p "$NEO4J_PASSWORD" -a "$NEO4J_URI"
 
 # ------------------------------------------------------------------
-# 2.5 Bootstrap root :LocalBusiness for the account
+# 3. Bootstrap root :LocalBusiness for the account
 # ------------------------------------------------------------------
 # Every node in the graph hierarchy (Project, Task, Person, Organisation,
 # KnowledgeDocument) anchors to a :LocalBusiness via accountId. Without a
@@ -505,6 +102,7 @@ echo "$SCHEMA_CYPHER" | "$CYPHER_SHELL" -u "$NEO4J_USER" -p "$NEO4J_PASSWORD" -a
 # default filled in on re-seed. createdAt is set ON CREATE only, so re-runs
 # preserve the original timestamp.
 
+BRAND_JSON="$PROJECT_DIR/config/brand.json"
 read_brand_json_key "$BRAND_JSON" "vertical"
 LOCALBUSINESS_BUSINESS_TYPE=$(derive_business_type "$BRAND_JSON_VALUE")
 LOCALBUSINESS_BT_CYPHER=$(business_type_cypher "$LOCALBUSINESS_BUSINESS_TYPE")
@@ -547,10 +145,22 @@ fi
 echo "  [install-invariant] localbusiness-bootstrap accountId=${ACCOUNT_ID:0:8} businessType=$LOCALBUSINESS_BT_LOG result=$LOCALBUSINESS_RESULT"
 
 # ------------------------------------------------------------------
-# 3. Create AdminUser node + ADMIN_OF relationship
+# 4. Create AdminUser node + ADMIN_OF relationship
 # ------------------------------------------------------------------
+# Resolve owner userId from users.json (set-pin POST creates it).
+# Same brand-aware resolution as setup-account.sh.
+CONFIG_DIR="$PROJECT_DIR/config"
+_CONFIG_DIR_NAME=".maxy"
+read_brand_json_key "$CONFIG_DIR/brand.json" "configDir"
+[ -n "$BRAND_JSON_VALUE" ] && _CONFIG_DIR_NAME="$BRAND_JSON_VALUE"
+USERS_FILE="$HOME/$_CONFIG_DIR_NAME/users.json"
+
+USER_ID=""
+if [ -f "$USERS_FILE" ]; then
+  USER_ID=$(python3 -c "import json; print(json.load(open('$USERS_FILE'))[0]['userId'])" 2>/dev/null || true)
+fi
 
-if [ -n "${USER_ID:-}" ]; then
+if [ -n "$USER_ID" ]; then
   # Escape single quotes for Cypher string interpolation (e.g. O'Brien → O''Brien).
   USER_NAME=$(python3 -c "import json; n=json.load(open('$USERS_FILE'))[0]['name']; print(n.replace(\"'\",\"''\"))" 2>/dev/null || echo "Owner")
   CREATED_AT=$(date -u +%Y-%m-%dT%H:%M:%SZ)
@@ -576,6 +186,8 @@ ON CREATE SET r.role = 'owner', r.grantedAt = '$CREATED_AT'
 RETURN au.userId, b.accountId;
 CYPHER_EOF
   echo "  [seed] AdminUser stamped userId=${USER_ID:0:8} accountId=${ACCOUNT_ID:0:8} role=owner"
+else
+  echo "  No users.json found — skipping AdminUser seed (set-pin POST creates it)"
 fi
 
 echo "  Done."

package/payload/platform/scripts/setup-account.sh

@@ -0,0 +1,370 @@
+#!/usr/bin/env bash
+# ============================================================
+# setup-account.sh — Phase 0 account setup
+# Creates the account directory from templates, writes the
+# Claude Code project settings file (hooks only — no permission
+# allowlist; native agent frontmatter is the permission surface),
+# installs specialist plugin templates, seeds account.json
+# defaults, and resolves the owner userId. Neo4j seeding lives
+# in `seed-neo4j.sh`; this script does no Neo4j work.
+# ============================================================
+
+set -euo pipefail
+
+SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+PROJECT_DIR="$(dirname "$SCRIPT_DIR")"
+TEMPLATES_DIR="$PROJECT_DIR/templates"
+# Accounts live at {installDir}/data/accounts/ — outside the platform/ wipe zone.
+INSTALL_DIR="$(dirname "$PROJECT_DIR")"
+ACCOUNTS_DIR="$INSTALL_DIR/data/accounts"
+
+# ------------------------------------------------------------------
+# 1. Resolve / create account directory
+# ------------------------------------------------------------------
+# Resolve existing account by identity (users.json[0].userId) or mint a new one on fresh install.
+# Orphan siblings under data/accounts/ — non-matching dirs left behind by the userId
+# regeneration — are swept to data/accounts/.trash/<uuid>-<ISO8601-ts>/. Multi-candidate with
+# no identity match aborts loud; .trash/ is operator-emptied, never auto-cleaned.
+# shellcheck source=lib/resolve-account-dir.sh
+. "$SCRIPT_DIR/lib/resolve-account-dir.sh"
+# shellcheck source=lib/read-brand-json.sh
+. "$SCRIPT_DIR/lib/read-brand-json.sh"
+# Resolve brand-aware persistent users.json path before the resolver runs.
+_RESOLVER_CONFIG_DIR_NAME=".maxy"
+read_brand_json_key "$PROJECT_DIR/config/brand.json" "configDir"
+[ -n "$BRAND_JSON_VALUE" ] && _RESOLVER_CONFIG_DIR_NAME="$BRAND_JSON_VALUE"
+USERS_FILE="$HOME/$_RESOLVER_CONFIG_DIR_NAME/users.json" resolve_and_sweep_account_dir
+
+mkdir -p "$ACCOUNT_DIR/agents/admin" "$ACCOUNT_DIR/agents/public" "$ACCOUNT_DIR/.claude" "$ACCOUNT_DIR/specialists/.claude-plugin" "$ACCOUNT_DIR/specialists/agents"
+
+# Claude Code discovers project-level .claude/ (agents, settings) relative to the
+# nearest .git root. Without a .git in the account directory, Claude Code traverses
+# up to ~/maxy/.git and misses everything in accountDir/.claude/. Initialise a git
+# repo so the account directory IS the project root for Claude Code.
+[ -d "$ACCOUNT_DIR/.git" ] || git init -q "$ACCOUNT_DIR"
+
+# ------------------------------------------------------------------
+# 2. Write project-level .claude/settings.json (HOOKS ONLY)
+# ------------------------------------------------------------------
+# Task 453: no `permissions.allow` block. The previous short-prefix
+# allowlist (mcp__memory__*, mcp__contacts__*, …) never matched the
+# plugin-manifest long-prefix tool names Claude Code actually emits
+# (mcp__plugin_memory_memory__…), so every Task-subagent plugin call
+# was denied at use-time. Permission enforcement comes from each agent's
+# frontmatter `tools:` list (native CC permission surface) and from the
+# PreToolUse approval hooks below for review-gated tools.
+#
+# Hook commands use $PLATFORM_ROOT (set by claude-agent.ts at spawn time)
+# to locate scripts relative to the platform installation, not the account dir.
+ACCOUNT_SETTINGS="$ACCOUNT_DIR/.claude/settings.json"
+HOOKS_PATH="\$PLATFORM_ROOT/plugins/admin/hooks"
+cat > "$ACCOUNT_SETTINGS" << SETTINGS_EOF
+{
+  "hooks": {
+    "PreToolUse": [
+      {
+        "matcher": "Write",
+        "hooks": [
+          { "type": "command", "command": "bash $HOOKS_PATH/pre-tool-use.sh admin" },
+          { "type": "command", "command": "bash $HOOKS_PATH/archive-ingest-surface-gate.sh" }
+        ]
+      },
+      {
+        "matcher": "Edit",
+        "hooks": [
+          { "type": "command", "command": "bash $HOOKS_PATH/pre-tool-use.sh admin" },
+          { "type": "command", "command": "bash $HOOKS_PATH/archive-ingest-surface-gate.sh" }
+        ]
+      },
+      {
+        "matcher": "NotebookEdit",
+        "hooks": [
+          { "type": "command", "command": "bash $HOOKS_PATH/archive-ingest-surface-gate.sh" }
+        ]
+      },
+      {
+        "matcher": "Bash",
+        "hooks": [
+          { "type": "command", "command": "bash $HOOKS_PATH/pre-tool-use.sh admin" },
+          { "type": "command", "command": "bash $HOOKS_PATH/archive-ingest-surface-gate.sh" }
+        ]
+      },
+      {
+        "matcher": "mcp__plugin_memory_memory__memory-write",
+        "hooks": [
+          { "type": "command", "command": "bash $HOOKS_PATH/pre-tool-use.sh admin" }
+        ]
+      },
+      {
+        "matcher": "mcp__plugin_memory_memory__memory-update",
+        "hooks": [
+          { "type": "command", "command": "bash $HOOKS_PATH/pre-tool-use.sh admin" }
+        ]
+      },
+      {
+        "hooks": [
+          { "type": "command", "command": "bash $HOOKS_PATH/archive-ingest-surface-gate.sh" }
+        ]
+      },
+      {
+        "matcher": "mcp__plugin_playwright_playwright__browser_navigate",
+        "hooks": [
+          { "type": "command", "command": "bash $HOOKS_PATH/playwright-file-guard.sh" }
+        ]
+      },
+      {
+        "matcher": "WebFetch",
+        "hooks": [
+          { "type": "command", "command": "node $HOOKS_PATH/webfetch-preflight.mjs" }
+        ]
+      },
+      {
+        "matcher": "AskUserQuestion",
+        "hooks": [
+          { "type": "command", "command": "bash $HOOKS_PATH/askuserquestion-investigate-gate.sh" }
+        ]
+      }
+    ],
+    "PostToolUse": [
+      {
+        "matcher": "mcp__.*__.*-(export|import)-parse$",
+        "hooks": [
+          { "type": "command", "command": "bash $HOOKS_PATH/archive-ingest-surface-gate.sh" }
+        ]
+      }
+    ],
+    "UserPromptSubmit": [
+      {
+        "hooks": [
+          { "type": "command", "command": "bash $HOOKS_PATH/archive-ingest-surface-gate.sh" }
+        ]
+      }
+    ],
+    "Stop": [
+      {
+        "hooks": [
+          { "type": "command", "command": "bash $HOOKS_PATH/session-end-retrospective.sh" }
+        ]
+      }
+    ]
+  }
+}
+SETTINGS_EOF
+
+# ------------------------------------------------------------------
+# 3. Install agent identities and specialist plugin templates
+# ------------------------------------------------------------------
+# Always overwrite IDENTITY.md — Rubytech-controlled, pure behaviour.
+cp "$TEMPLATES_DIR/agents/admin/IDENTITY.md" "$ACCOUNT_DIR/agents/admin/IDENTITY.md"
+cp "$TEMPLATES_DIR/agents/public/IDENTITY.md" "$ACCOUNT_DIR/agents/public/IDENTITY.md"
+echo "  agents/public/IDENTITY.md installed"
+
+# Always overwrite specialist plugin — Rubytech-controlled, not user-editable.
+# Specialists are a Claude Code plugin loaded via --plugin-dir. The plugin lives at
+# accountDir/specialists/ with .claude-plugin/plugin.json and agents/*.md.
+# The admin agent dispatches them as specialists:{name} via the Agent tool.
+cp "$TEMPLATES_DIR/specialists/.claude-plugin/plugin.json" "$ACCOUNT_DIR/specialists/.claude-plugin/plugin.json"
+
+# Remove orphaned core specialist files before copying fresh templates.
+# Core specialists (no '--' in filename) are Rubytech-controlled and fully replaced
+# on every seed. Premium plugin agents (filename contains '--') are preserved —
+# they are managed by the admin agent when plugins are activated/deactivated.
+for _existing in "$ACCOUNT_DIR/specialists/agents/"*.md; do
+  [ -f "$_existing" ] || continue
+  case "$(basename "$_existing")" in
+    *--*) continue ;;  # Premium plugin agent — preserve
+  esac
+  rm -f "$_existing"
+done
+
+for specialist in "$TEMPLATES_DIR/specialists/agents/"*.md; do
+  [ -f "$specialist" ] && cp "$specialist" "$ACCOUNT_DIR/specialists/agents/$(basename "$specialist")"
+done
+
+# Clean up stale .claude/agents/*.md from previous seed format.
+# The old format placed specialists here as slash-command agents — that never worked
+# for programmatic dispatch. Safe to remove; .claude/ dir stays for settings.json.
+rm -f "$ACCOUNT_DIR/.claude/agents/"*.md 2>/dev/null || true
+
+# SOUL.md — user-controlled personalisation. Only create if missing. Never overwrite.
+[ -f "$ACCOUNT_DIR/agents/admin/SOUL.md" ] || cp "$TEMPLATES_DIR/agents/admin/SOUL.md" "$ACCOUNT_DIR/agents/admin/SOUL.md"
+
+# Public agent SOUL.md + config.json — create if missing, never overwrite.
+# IDENTITY.md is handled in the Rubytech-controlled block above.
+[ -f "$ACCOUNT_DIR/agents/public/SOUL.md" ] || cp "$TEMPLATES_DIR/agents/public/SOUL.md" "$ACCOUNT_DIR/agents/public/SOUL.md"
+[ -f "$ACCOUNT_DIR/agents/public/config.json" ] || cp "$TEMPLATES_DIR/agents/public/config.json" "$ACCOUNT_DIR/agents/public/config.json"
+
+# AGENTS.md — specialist registry. Pre-populated from templates, maintained by admin agent at runtime.
+# Always overwrite on re-seed (Rubytech-controlled initial state, like IDENTITY.md).
+# Dispatch format: specialists:{name} via the Agent tool.
+printf '# Installed Roles\n\nDispatch via the Agent tool with `subagent_type: "specialists:{name}"`.\n\n' > "$ACCOUNT_DIR/agents/admin/AGENTS.md"
+for specialist in "$ACCOUNT_DIR/specialists/agents/"*.md; do
+  [ -f "$specialist" ] || continue
+  # Extract name and description from YAML frontmatter
+  _name=$(sed -n 's/^name: *//p' "$specialist" | head -1)
+  _desc=$(sed -n 's/^description: *"*//p' "$specialist" | sed 's/"$//' | head -1)
+  [ -z "$_name" ] && continue
+  # Skip Phase 1 stubs — not yet functional
+  echo "$_desc" | grep -qi "Phase 1" && continue
+  printf -- '- **specialists:%s**: %s\n' "$_name" "$_desc" >> "$ACCOUNT_DIR/agents/admin/AGENTS.md"
+done
+
+# ------------------------------------------------------------------
+# 4. Create / backfill account.json
+# ------------------------------------------------------------------
+# Create account.json only if it doesn't exist (business config is in the graph).
+# Reads defaults from the template so there is a single source of truth.
+if [ ! -f "$ACCOUNT_DIR/account.json" ]; then
+  TEMPLATE="$TEMPLATES_DIR/account.json"
+  if [ -f "$TEMPLATE" ]; then
+    sed "s/\"accountId\": *\"[^\"]*\"/\"accountId\":\"$ACCOUNT_ID\"/" "$TEMPLATE" \
+      | sed "s/\"tier\": *\"[^\"]*\"/\"tier\":\"solo\"/" \
+      > "$ACCOUNT_DIR/account.json"
+  else
+    echo "ERROR: account.json template not found at $TEMPLATE" >&2
+    exit 1
+  fi
+fi
+
+# Backfill defaultAgent in account.json if missing (existing accounts earlier).
+# Uses the first non-admin agent directory that has a config.json.
+if [ -f "$ACCOUNT_DIR/account.json" ] && ! grep -q '"defaultAgent"' "$ACCOUNT_DIR/account.json"; then
+  _DEFAULT_SLUG=""
+  for _AGENT_DIR in "$ACCOUNT_DIR/agents"/*/; do
+    _AGENT_NAME="$(basename "$_AGENT_DIR")"
+    [ "$_AGENT_NAME" = "admin" ] && continue
+    [ -f "$_AGENT_DIR/config.json" ] && { _DEFAULT_SLUG="$_AGENT_NAME"; break; }
+  done
+  if [ -n "$_DEFAULT_SLUG" ]; then
+    # Insert defaultAgent before the closing brace
+    sed -i'' "s/}$/,\"defaultAgent\":\"$_DEFAULT_SLUG\"}/" "$ACCOUNT_DIR/account.json"
+    echo "  Backfilled defaultAgent=$_DEFAULT_SLUG in account.json"
+  fi
+fi
+
+# ------------------------------------------------------------------
+# 5. Seed enabledPlugins from brand.json plugins.defaultEnabled
+# ------------------------------------------------------------------
+# Fresh accounts: replaces the template's empty [] with defaultEnabled.
+# Existing accounts: additive merge — adds missing defaultEnabled entries,
+# never removes plugins the user enabled manually.
+# Dependency validation: skips any defaultEnabled plugin whose PLUGIN.md
+# `requires:` dependencies are not satisfied by core or defaultEnabled.
+BRAND_JSON="$PROJECT_DIR/config/brand.json"
+if [ -f "$BRAND_JSON" ] && [ -f "$ACCOUNT_DIR/account.json" ]; then
+  python3 -c "
+import json, os, sys
+
+brand_path = '$BRAND_JSON'
+account_path = '$ACCOUNT_DIR/account.json'
+plugins_dir = '$PROJECT_DIR/plugins'
+
+with open(brand_path) as f:
+    brand = json.load(f)
+
+plugins_cfg = brand.get('plugins', {})
+default_enabled = plugins_cfg.get('defaultEnabled', [])
+core = set(plugins_cfg.get('core', []))
+
+if not default_enabled:
+    print('  [setup] no defaultEnabled plugins in brand.json — skipping')
+    sys.exit(0)
+
+# Dependency validation: check each plugin's PLUGIN.md requires field.
+# A dependency is satisfied if it appears in core or in defaultEnabled.
+satisfied = core | set(default_enabled)
+validated = []
+for plugin in default_enabled:
+    plugin_md = os.path.join(plugins_dir, plugin, 'PLUGIN.md')
+    requires = []
+    if os.path.isfile(plugin_md):
+        in_frontmatter = False
+        in_requires = False
+        with open(plugin_md) as f:
+            for line in f:
+                stripped = line.rstrip()
+                if stripped == '---':
+                    if in_frontmatter:
+                        break
+                    in_frontmatter = True
+                    continue
+                if not in_frontmatter:
+                    continue
+                if stripped.startswith('requires:'):
+                    # Handle inline list: requires: [a, b]
+                    inline = stripped.split(':', 1)[1].strip()
+                    if inline.startswith('['):
+                        requires = [x.strip().strip('\"').strip(\"'\") for x in inline.strip('[]').split(',') if x.strip()]
+                        in_requires = False
+                    else:
+                        in_requires = True
+                    continue
+                if in_requires:
+                    if stripped.startswith('  - '):
+                        requires.append(stripped.lstrip(' -').strip())
+                    else:
+                        in_requires = False
+    unmet = [r for r in requires if r not in satisfied]
+    if unmet:
+        print(f'  [setup] WARNING: skipping defaultEnabled plugin \"{plugin}\" — unmet requires: {unmet}')
+    else:
+        validated.append(plugin)
+
+with open(account_path) as f:
+    account = json.load(f)
+
+existing = account.get('enabledPlugins', [])
+existing_set = set(existing)
+added = [p for p in validated if p not in existing_set]
+account['enabledPlugins'] = existing + added
+
+with open(account_path, 'w') as f:
+    json.dump(account, f, indent=2)
+    f.write('\n')
+
+if not existing:
+    print(f'  [setup] seeded enabledPlugins: {validated}')
+elif added:
+    print(f'  [setup] merged into enabledPlugins: +{added} (existing: {existing})')
+else:
+    print(f'  [setup] enabledPlugins already contains all defaultEnabled entries')
+"
+fi
+
+# ------------------------------------------------------------------
+# 6. Stamp first admin userId into account.json (if users.json present)
+# ------------------------------------------------------------------
+# users.json is created by the set-pin POST during onboarding. This
+# script reads it to stamp the owner into account.json admins[]; the
+# matching :AdminUser graph node is created by seed-neo4j.sh.
+CONFIG_DIR="$PROJECT_DIR/config"
+_CONFIG_DIR_NAME=".maxy"
+read_brand_json_key "$CONFIG_DIR/brand.json" "configDir"
+[ -n "$BRAND_JSON_VALUE" ] && _CONFIG_DIR_NAME="$BRAND_JSON_VALUE"
+USERS_FILE="$HOME/$_CONFIG_DIR_NAME/users.json"
+mkdir -p "$HOME/$_CONFIG_DIR_NAME"
+
+if [ -f "$USERS_FILE" ]; then
+  USER_ID=$(python3 -c "import json; print(json.load(open('$USERS_FILE'))[0]['userId'])" 2>/dev/null || true)
+  [ -n "$USER_ID" ] && echo "  Existing users.json found, userId=$USER_ID"
+
+  # Ensure account.json admins[] contains the owner. Idempotent.
+  if [ -n "$USER_ID" ] && [ -f "$ACCOUNT_DIR/account.json" ]; then
+    python3 -c "
+import json
+with open('$ACCOUNT_DIR/account.json', 'r') as f:
+    config = json.load(f)
+config.setdefault('admins', [])
+if not any(a.get('userId') == '$USER_ID' for a in config['admins']):
+    config['admins'].append({'userId': '$USER_ID', 'role': 'owner'})
+    with open('$ACCOUNT_DIR/account.json', 'w') as f:
+        json.dump(config, f, indent=2)
+        f.write('\n')
+    print('  Stamped userId=$USER_ID as owner in account.json admins')
+"
+  fi
+else
+  echo "  No users.json found — skipping owner stamp (set-pin POST creates it)"
+fi
+
+echo "  Account $ACCOUNT_ID at $ACCOUNT_DIR"

package/payload/platform/services/claude-session-manager/dist/config.js

@@ -177,12 +177,12 @@ export function loadConfig(env = process.env) {
     const accountDir = resolveAccountDir(platformRoot);
     if (!accountDir) {
         throw new Error(`[claude-session-manager] account-dir-unresolved: no <installDir>/data/accounts/<uuid>/account.json under ${dirname(platformRoot)}/data/accounts. ` +
-            'The installer (seed-neo4j.sh / writeInstallDefaults) must run before manager start.');
+            'The installer (setup-account.sh / writeInstallDefaults) must run before manager start.');
     }
     // Claude Code walks `.claude/settings.json` from cwd to .git root. Defaulting
     // spawnCwd to process.cwd() — i.e. the manager service directory — strands
     // the account-scoped settings.json (and its Stop hook) outside that walk.
-    // Default to accountDir so seed-neo4j.sh's `<accountDir>/.claude/settings.json`
+    // Default to accountDir so setup-account.sh's `<accountDir>/.claude/settings.json`
     // is on the discovery path. Env-var override is preserved for tests.
     const spawnCwd = env.CLAUDE_SESSION_MANAGER_SPAWN_CWD ?? accountDir;
     const lan = resolveLanIPv4();

package/payload/platform/services/claude-session-manager/dist/config.js.map

@@ -1 +1 @@
-{"version":3,"file":"config.js","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,SAAS,CAAA;AAC/D,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,iBAAiB,EAAE,MAAM,SAAS,CAAA;AAC9D,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAEzC,OAAO,EACL,2BAA2B,GAG5B,MAAM,yBAAyB,CAAA;AAoDhC,MAAM,YAAY,GAAG,KAAK,CAAA;AAC1B,MAAM,sBAAsB,GAAG,MAAM,CAAA;AACrC,MAAM,qBAAqB,GAAG,KAAK,CAAA;AACnC,MAAM,4BAA4B,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI,CAAA;AACpD,MAAM,kBAAkB,GAAG,KAAK,CAAA;AAChC,MAAM,sBAAsB,GAAG,CAAC,CAAA;AAChC,MAAM,wBAAwB,GAAG,CAAC,CAAA;AAClC,MAAM,qBAAqB,GAAG,EAAE,CAAA;AAChC,MAAM,4BAA4B,GAAG,OAAO,CAAA;AAC5C,MAAM,YAAY,GAAG,0BAA0B,CAAA;AAE/C,SAAS,gBAAgB,CAAC,GAAuB,EAAE,QAAgB;IACjE,IAAI,GAAG,KAAK,SAAS;QAAE,OAAO,QAAQ,CAAA;IACtC,MAAM,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,CAAA;IACrB,OAAO,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAA;AACpD,CAAC;AAED,SAAS,gBAAgB;IACvB,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,YAAY,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC,IAAI,EAAE,CAAA;QACtD,MAAM,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,CAAA;QACrB,OAAO,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,iBAAiB,CAAA;IACpE,CAAC;IAAC,MAAM,CAAC;QACP,2EAA2E;QAC3E,OAAO,MAAM,CAAC,iBAAiB,CAAA;IACjC,CAAC;AACH,CAAC;AAOD,MAAM,mBAAmB,GAAuB;IAC9C,SAAS;IACT,UAAU;IACV,UAAU;IACV,SAAS;IACT,OAAO;CACR,CAAA;AAED,SAAS,WAAW,CAAC,GAAY,EAAE,QAAqB;IACtD,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,OAAO,QAAQ,CAAA;IACpD,MAAM,CAAC,GAAG,GAA4C,CAAA;IACtD,MAAM,GAAG,GAAG,OAAO,CAAC,CAAC,GAAG,KAAK,QAAQ,IAAI,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAA;IACpG,MAAM,QAAQ,GACZ,OAAO,CAAC,CAAC,QAAQ,KAAK,QAAQ,IAAI,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,QAAQ,GAAG,CAAC;QAC9E,CAAC,CAAC,CAAC,CAAC,QAAQ;QACZ,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAA;IACvB,OAAO,EAAE,GAAG,EAAE,QAAQ,EAAE,CAAA;AAC1B,CAAC;AAED,SAAS,sBAAsB,CAAC,GAAY;IAC1C,MAAM,QAAQ,GAAG,2BAA2B,CAAA;IAC5C,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,OAAO,QAAQ,CAAA;IACpD,MAAM,CAAC,GAAG,GAAiD,CAAA;IAC3D,MAAM,aAAa,GAAG,CAAC,CAAC,CAAC,UAAU,IAAI,OAAO,CAAC,CAAC,UAAU,KAAK,QAAQ;QACrE,CAAC,CAAE,CAAC,CAAC,UAAsC;QAC3C,CAAC,CAAC,EAAE,CAAC,CAAA;IACP,MAAM,UAAU,GAAG,EAAkC,CAAA;IACrD,KAAK,MAAM,EAAE,IAAI,mBAAmB,EAAE,CAAC;QACrC,UAAU,CAAC,EAAE,CAAC,GAAG,WAAW,CAAC,aAAa,CAAC,EAAE,CAAC,EAAE,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC,CAAA;IAC1E,CAAC;IACD,OAAO;QACL,UAAU;QACV,MAAM,EAAE,WAAW,CAAC,CAAC,CAAC,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC;KAC/C,CAAA;AACH,CAAC;AAED,SAAS,gBAAgB,CAAC,MAAyB,EAAE,GAAsB;IACzE,MAAM,MAAM,GAAG,GAAG,CAAC,qBAAqB,CAAA;IACxC,MAAM,MAAM,GAAG,GAAG,CAAC,2BAA2B,CAAA;IAC9C,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;IAC3C,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;IAC3C,IAAI,IAAI,KAAK,IAAI,IAAI,IAAI,KAAK,IAAI;QAAE,OAAO,MAAM,CAAA;IACjD,MAAM,IAAI,GAAG,EAAE,UAAU,EAAE,EAAkC,EAAE,MAAM,EAAE,EAAE,GAAG,MAAM,CAAC,MAAM,EAAE,EAAE,CAAA;IAC7F,MAAM,WAAW,GAAG,IAAI,KAAK,IAAI,IAAI,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAA;IACrF,MAAM,cAAc,GAAG,IAAI,KAAK,IAAI,IAAI,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAA;IACxF,KAAK,MAAM,EAAE,IAAI,mBAAmB,EAAE,CAAC;QACrC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC,GAAG;YACpB,GAAG,EAAE,WAAW,IAAI,MAAM,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC,GAAG;YAC7C,QAAQ,EAAE,cAAc,IAAI,MAAM,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC,QAAQ;SAC3D,CAAA;IACH,CAAC;IACD,IAAI,WAAW,KAAK,IAAI;QAAE,IAAI,CAAC,MAAM,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,WAAW,GAAG,CAAC,CAAC,CAAA;IACtF,IAAI,cAAc,KAAK,IAAI;QAAE,IAAI,CAAC,MAAM,CAAC,QAAQ,GAAG,cAAc,CAAA;IAClE,OAAO,IAAI,CAAA;AACb,CAAC;AAED,SAAS,SAAS,CAAC,GAAsB;IACvC,MAAM,YAAY,GAAG,GAAG,CAAC,aAAa,IAAI,GAAG,CAAC,kBAAkB,CAAA;IAChE,IAAI,CAAC,YAAY,EAAE,CAAC;QAClB,MAAM,IAAI,KAAK,CACb,yGAAyG;YACvG,kEAAkE,CACrE,CAAA;IACH,CAAC;IACD,MAAM,SAAS,GAAG,IAAI,CAAC,YAAY,EAAE,QAAQ,EAAE,YAAY,CAAC,CAAA;IAC5D,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QAC3B,MAAM,IAAI,KAAK,CACb,kDAAkD,SAAS,yEAAyE,CACrI,CAAA;IACH,CAAC;IACD,IAAI,KAA8B,CAAA;IAClC,IAAI,CAAC;QACH,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,SAAS,EAAE,OAAO,CAAC,CAA4B,CAAA;IACjF,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,MAAM,GAAG,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAA;QAC/E,MAAM,IAAI,KAAK,CAAC,0CAA0C,SAAS,kBAAkB,MAAM,EAAE,CAAC,CAAA;IAChG,CAAC;IACD,MAAM,EAAE,GAAG,OAAO,KAAK,CAAC,QAAQ,KAAK,QAAQ,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAA;IAClG,IAAI,CAAC,EAAE,EAAE,CAAC;QACR,MAAM,IAAI,KAAK,CACb,0CAA0C,SAAS,mCAAmC,CACvF,CAAA;IACH,CAAC;IACD,MAAM,iBAAiB,GAAG,sBAAsB,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAA;IACzE,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,iBAAiB,EAAE,EAAE,CAAA;AACnE,CAAC;AAED,SAAS,cAAc;IACrB,MAAM,MAAM,GAAG,iBAAiB,EAAE,CAAA;IAClC,KAAK,MAAM,CAAC,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QAC/C,IAAI,CAAC,KAAK;YAAE,SAAQ;QACpB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,IAAI,IAAI,CAAC,MAAM,KAAK,MAAM,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;gBAC7C,OAAO,EAAE,EAAE,EAAE,IAAI,CAAC,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,CAAA;YAC/C,CAAC;QACH,CAAC;IACH,CAAC;IACD,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,0BAA0B,CAAA;IACzE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,2CAA2C,KAAK,EAAE,EAAE,CAAA;AACrF,CAAC;AAED;;;;;;;uEAOuE;AACvE,SAAS,iBAAiB,CAAC,YAAoB;IAC7C,MAAM,UAAU,GAAG,OAAO,CAAC,YAAY,CAAC,CAAA;IACxC,MAAM,YAAY,GAAG,IAAI,CAAC,UAAU,EAAE,MAAM,EAAE,UAAU,CAAC,CAAA;IACzD,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC;QAAE,OAAO,IAAI,CAAA;IAC1C,IAAI,OAAiB,CAAA;IACrB,IAAI,CAAC;QACH,OAAO,GAAG,WAAW,CAAC,YAAY,CAAC,CAAA;IACrC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAA;IACb,CAAC;IACD,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,MAAM,SAAS,GAAG,IAAI,CAAC,YAAY,EAAE,KAAK,CAAC,CAAA;QAC3C,IAAI,UAAU,CAAC,IAAI,CAAC,SAAS,EAAE,cAAc,CAAC,CAAC;YAAE,OAAO,SAAS,CAAA;IACnE,CAAC;IACD,OAAO,IAAI,CAAA;AACb,CAAC;AAED,SAAS,gBAAgB,CAAC,GAAsB;IAC9C,MAAM,GAAG,GAAG,GAAG,CAAC,eAAe,IAAI,GAAG,CAAC,IAAI,CAAA;IAC3C,IAAI,CAAC,GAAG;QAAE,OAAO,kBAAkB,CAAA;IACnC,MAAM,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,CAAA;IACrB,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,KAAK;QAAE,OAAO,kBAAkB,CAAA;IACzE,OAAO,CAAC,CAAA;AACV,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,MAAyB,OAAO,CAAC,GAAG;IAC7D,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,2BAA2B,IAAI,YAAY,CAAC,CAAA;IACpE,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,IAAI,GAAG,CAAC,IAAI,IAAI,GAAG,KAAK,EAAE,CAAC;QACxD,MAAM,IAAI,KAAK,CAAC,wCAAwC,GAAG,CAAC,2BAA2B,EAAE,CAAC,CAAA;IAC5F,CAAC;IACD,MAAM,UAAU,GAAG,GAAG,CAAC,kCAAkC,IAAI,IAAI,CAAC,OAAO,EAAE,EAAE,OAAO,CAAC,CAAA;IACrF,MAAM,SAAS,GAAG,GAAG,CAAC,UAAU,IAAI,QAAQ,CAAA;IAE5C,MAAM,KAAK,GAAG,SAAS,CAAC,GAAG,CAAC,CAAA;IAC5B,MAAM,YAAY,GAAG,GAAG,CAAC,aAAa,IAAI,GAAG,CAAC,kBAAkB,CAAA;IAChE,IAAI,CAAC,YAAY,EAAE,CAAC;QAClB,yEAAyE;QACzE,oEAAoE;QACpE,MAAM,IAAI,KAAK,CAAC,oFAAoF,CAAC,CAAA;IACvG,CAAC;IACD,MAAM,UAAU,GAAG,iBAAiB,CAAC,YAAY,CAAC,CAAA;IAClD,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,MAAM,IAAI,KAAK,CACb,4GAA4G,OAAO,CAAC,YAAY,CAAC,kBAAkB;YACjJ,qFAAqF,CACxF,CAAA;IACH,CAAC;IACD,8EAA8E;IAC9E,2EAA2E;IAC3E,0EAA0E;IAC1E,gFAAgF;IAChF,qEAAqE;IACrE,MAAM,QAAQ,GAAG,GAAG,CAAC,gCAAgC,IAAI,UAAU,CAAA;IACnE,MAAM,GAAG,GAAG,cAAc,EAAE,CAAA;IAC5B,MAAM,SAAS,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAA;IACvC,MAAM,MAAM,GAAG,QAAQ,EAAE,CAAA;IACzB,yEAAyE;IACzE,2EAA2E;IAC3E,mEAAmE;IACnE,uEAAuE;IACvE,qEAAqE;IACrE,uCAAuC;IACvC,MAAM,QAAQ,GAAG,GAAG,CAAC,EAAE;QACrB,CAAC,CAAC,UAAU,GAAG,CAAC,EAAE,IAAI,SAAS,EAAE;QACjC,CAAC,CAAC,UAAU,KAAK,CAAC,MAAM,CAAC,QAAQ,UAAU,SAAS,EAAE,CAAA;IACxD,MAAM,SAAS,GAAkB,IAAI,CAAA;IAErC,MAAM,aAAa,GAAG,gBAAgB,CAAC,GAAG,CAAC,qCAAqC,EAAE,sBAAsB,CAAC,CAAA;IACzG,MAAM,eAAe,GAAG,gBAAgB,CAAC,GAAG,CAAC,uCAAuC,EAAE,wBAAwB,CAAC,CAAA;IAC/G,MAAM,WAAW,GAAG,gBAAgB,CAAC,GAAG,CAAC,oCAAoC,EAAE,qBAAqB,CAAC,CAAA;IACrG,MAAM,WAAW,GAAG,IAAI,CAAC,GAAG,CAAC,gBAAgB,EAAE,EAAE,WAAW,CAAC,CAAA;IAC7D,MAAM,iBAAiB,GAAG,gBAAgB,CAAC,GAAG,CAAC,2CAA2C,EAAE,4BAA4B,CAAC,CAAA;IAEzH,OAAO;QACL,IAAI;QACJ,UAAU;QACV,SAAS;QACT,QAAQ;QACR,mBAAmB,EAAE,sBAAsB;QAC3C,WAAW,EAAE,qBAAqB;QAClC,iBAAiB,EAAE,4BAA4B;QAC/C,aAAa;QACb,eAAe;QACf,WAAW;QACX,iBAAiB;QACjB,IAAI,EAAE;YACJ,QAAQ,EAAE,MAAM;YAChB,OAAO,EAAE,GAAG,CAAC,EAAE;YACf,QAAQ;YACR,SAAS;YACT,iBAAiB,EAAE,GAAG,CAAC,UAAU;SAClC;QACD,UAAU;QACV,iBAAiB,EAAE,gBAAgB,CAAC,KAAK,CAAC,MAAM,CAAC,iBAAiB,EAAE,GAAG,CAAC;KACzE,CAAA;AACH,CAAC"}
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,SAAS,CAAA;AAC/D,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,iBAAiB,EAAE,MAAM,SAAS,CAAA;AAC9D,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAEzC,OAAO,EACL,2BAA2B,GAG5B,MAAM,yBAAyB,CAAA;AAoDhC,MAAM,YAAY,GAAG,KAAK,CAAA;AAC1B,MAAM,sBAAsB,GAAG,MAAM,CAAA;AACrC,MAAM,qBAAqB,GAAG,KAAK,CAAA;AACnC,MAAM,4BAA4B,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI,CAAA;AACpD,MAAM,kBAAkB,GAAG,KAAK,CAAA;AAChC,MAAM,sBAAsB,GAAG,CAAC,CAAA;AAChC,MAAM,wBAAwB,GAAG,CAAC,CAAA;AAClC,MAAM,qBAAqB,GAAG,EAAE,CAAA;AAChC,MAAM,4BAA4B,GAAG,OAAO,CAAA;AAC5C,MAAM,YAAY,GAAG,0BAA0B,CAAA;AAE/C,SAAS,gBAAgB,CAAC,GAAuB,EAAE,QAAgB;IACjE,IAAI,GAAG,KAAK,SAAS;QAAE,OAAO,QAAQ,CAAA;IACtC,MAAM,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,CAAA;IACrB,OAAO,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAA;AACpD,CAAC;AAED,SAAS,gBAAgB;IACvB,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,YAAY,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC,IAAI,EAAE,CAAA;QACtD,MAAM,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,CAAA;QACrB,OAAO,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,iBAAiB,CAAA;IACpE,CAAC;IAAC,MAAM,CAAC;QACP,2EAA2E;QAC3E,OAAO,MAAM,CAAC,iBAAiB,CAAA;IACjC,CAAC;AACH,CAAC;AAOD,MAAM,mBAAmB,GAAuB;IAC9C,SAAS;IACT,UAAU;IACV,UAAU;IACV,SAAS;IACT,OAAO;CACR,CAAA;AAED,SAAS,WAAW,CAAC,GAAY,EAAE,QAAqB;IACtD,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,OAAO,QAAQ,CAAA;IACpD,MAAM,CAAC,GAAG,GAA4C,CAAA;IACtD,MAAM,GAAG,GAAG,OAAO,CAAC,CAAC,GAAG,KAAK,QAAQ,IAAI,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAA;IACpG,MAAM,QAAQ,GACZ,OAAO,CAAC,CAAC,QAAQ,KAAK,QAAQ,IAAI,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,QAAQ,GAAG,CAAC;QAC9E,CAAC,CAAC,CAAC,CAAC,QAAQ;QACZ,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAA;IACvB,OAAO,EAAE,GAAG,EAAE,QAAQ,EAAE,CAAA;AAC1B,CAAC;AAED,SAAS,sBAAsB,CAAC,GAAY;IAC1C,MAAM,QAAQ,GAAG,2BAA2B,CAAA;IAC5C,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,OAAO,QAAQ,CAAA;IACpD,MAAM,CAAC,GAAG,GAAiD,CAAA;IAC3D,MAAM,aAAa,GAAG,CAAC,CAAC,CAAC,UAAU,IAAI,OAAO,CAAC,CAAC,UAAU,KAAK,QAAQ;QACrE,CAAC,CAAE,CAAC,CAAC,UAAsC;QAC3C,CAAC,CAAC,EAAE,CAAC,CAAA;IACP,MAAM,UAAU,GAAG,EAAkC,CAAA;IACrD,KAAK,MAAM,EAAE,IAAI,mBAAmB,EAAE,CAAC;QACrC,UAAU,CAAC,EAAE,CAAC,GAAG,WAAW,CAAC,aAAa,CAAC,EAAE,CAAC,EAAE,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC,CAAA;IAC1E,CAAC;IACD,OAAO;QACL,UAAU;QACV,MAAM,EAAE,WAAW,CAAC,CAAC,CAAC,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC;KAC/C,CAAA;AACH,CAAC;AAED,SAAS,gBAAgB,CAAC,MAAyB,EAAE,GAAsB;IACzE,MAAM,MAAM,GAAG,GAAG,CAAC,qBAAqB,CAAA;IACxC,MAAM,MAAM,GAAG,GAAG,CAAC,2BAA2B,CAAA;IAC9C,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;IAC3C,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;IAC3C,IAAI,IAAI,KAAK,IAAI,IAAI,IAAI,KAAK,IAAI;QAAE,OAAO,MAAM,CAAA;IACjD,MAAM,IAAI,GAAG,EAAE,UAAU,EAAE,EAAkC,EAAE,MAAM,EAAE,EAAE,GAAG,MAAM,CAAC,MAAM,EAAE,EAAE,CAAA;IAC7F,MAAM,WAAW,GAAG,IAAI,KAAK,IAAI,IAAI,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAA;IACrF,MAAM,cAAc,GAAG,IAAI,KAAK,IAAI,IAAI,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAA;IACxF,KAAK,MAAM,EAAE,IAAI,mBAAmB,EAAE,CAAC;QACrC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC,GAAG;YACpB,GAAG,EAAE,WAAW,IAAI,MAAM,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC,GAAG;YAC7C,QAAQ,EAAE,cAAc,IAAI,MAAM,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC,QAAQ;SAC3D,CAAA;IACH,CAAC;IACD,IAAI,WAAW,KAAK,IAAI;QAAE,IAAI,CAAC,MAAM,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,WAAW,GAAG,CAAC,CAAC,CAAA;IACtF,IAAI,cAAc,KAAK,IAAI;QAAE,IAAI,CAAC,MAAM,CAAC,QAAQ,GAAG,cAAc,CAAA;IAClE,OAAO,IAAI,CAAA;AACb,CAAC;AAED,SAAS,SAAS,CAAC,GAAsB;IACvC,MAAM,YAAY,GAAG,GAAG,CAAC,aAAa,IAAI,GAAG,CAAC,kBAAkB,CAAA;IAChE,IAAI,CAAC,YAAY,EAAE,CAAC;QAClB,MAAM,IAAI,KAAK,CACb,yGAAyG;YACvG,kEAAkE,CACrE,CAAA;IACH,CAAC;IACD,MAAM,SAAS,GAAG,IAAI,CAAC,YAAY,EAAE,QAAQ,EAAE,YAAY,CAAC,CAAA;IAC5D,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QAC3B,MAAM,IAAI,KAAK,CACb,kDAAkD,SAAS,yEAAyE,CACrI,CAAA;IACH,CAAC;IACD,IAAI,KAA8B,CAAA;IAClC,IAAI,CAAC;QACH,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,SAAS,EAAE,OAAO,CAAC,CAA4B,CAAA;IACjF,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,MAAM,GAAG,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAA;QAC/E,MAAM,IAAI,KAAK,CAAC,0CAA0C,SAAS,kBAAkB,MAAM,EAAE,CAAC,CAAA;IAChG,CAAC;IACD,MAAM,EAAE,GAAG,OAAO,KAAK,CAAC,QAAQ,KAAK,QAAQ,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAA;IAClG,IAAI,CAAC,EAAE,EAAE,CAAC;QACR,MAAM,IAAI,KAAK,CACb,0CAA0C,SAAS,mCAAmC,CACvF,CAAA;IACH,CAAC;IACD,MAAM,iBAAiB,GAAG,sBAAsB,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAA;IACzE,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,iBAAiB,EAAE,EAAE,CAAA;AACnE,CAAC;AAED,SAAS,cAAc;IACrB,MAAM,MAAM,GAAG,iBAAiB,EAAE,CAAA;IAClC,KAAK,MAAM,CAAC,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QAC/C,IAAI,CAAC,KAAK;YAAE,SAAQ;QACpB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,IAAI,IAAI,CAAC,MAAM,KAAK,MAAM,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;gBAC7C,OAAO,EAAE,EAAE,EAAE,IAAI,CAAC,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,CAAA;YAC/C,CAAC;QACH,CAAC;IACH,CAAC;IACD,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,0BAA0B,CAAA;IACzE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,2CAA2C,KAAK,EAAE,EAAE,CAAA;AACrF,CAAC;AAED;;;;;;;uEAOuE;AACvE,SAAS,iBAAiB,CAAC,YAAoB;IAC7C,MAAM,UAAU,GAAG,OAAO,CAAC,YAAY,CAAC,CAAA;IACxC,MAAM,YAAY,GAAG,IAAI,CAAC,UAAU,EAAE,MAAM,EAAE,UAAU,CAAC,CAAA;IACzD,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC;QAAE,OAAO,IAAI,CAAA;IAC1C,IAAI,OAAiB,CAAA;IACrB,IAAI,CAAC;QACH,OAAO,GAAG,WAAW,CAAC,YAAY,CAAC,CAAA;IACrC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAA;IACb,CAAC;IACD,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,MAAM,SAAS,GAAG,IAAI,CAAC,YAAY,EAAE,KAAK,CAAC,CAAA;QAC3C,IAAI,UAAU,CAAC,IAAI,CAAC,SAAS,EAAE,cAAc,CAAC,CAAC;YAAE,OAAO,SAAS,CAAA;IACnE,CAAC;IACD,OAAO,IAAI,CAAA;AACb,CAAC;AAED,SAAS,gBAAgB,CAAC,GAAsB;IAC9C,MAAM,GAAG,GAAG,GAAG,CAAC,eAAe,IAAI,GAAG,CAAC,IAAI,CAAA;IAC3C,IAAI,CAAC,GAAG;QAAE,OAAO,kBAAkB,CAAA;IACnC,MAAM,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,CAAA;IACrB,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,KAAK;QAAE,OAAO,kBAAkB,CAAA;IACzE,OAAO,CAAC,CAAA;AACV,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,MAAyB,OAAO,CAAC,GAAG;IAC7D,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,2BAA2B,IAAI,YAAY,CAAC,CAAA;IACpE,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,IAAI,GAAG,CAAC,IAAI,IAAI,GAAG,KAAK,EAAE,CAAC;QACxD,MAAM,IAAI,KAAK,CAAC,wCAAwC,GAAG,CAAC,2BAA2B,EAAE,CAAC,CAAA;IAC5F,CAAC;IACD,MAAM,UAAU,GAAG,GAAG,CAAC,kCAAkC,IAAI,IAAI,CAAC,OAAO,EAAE,EAAE,OAAO,CAAC,CAAA;IACrF,MAAM,SAAS,GAAG,GAAG,CAAC,UAAU,IAAI,QAAQ,CAAA;IAE5C,MAAM,KAAK,GAAG,SAAS,CAAC,GAAG,CAAC,CAAA;IAC5B,MAAM,YAAY,GAAG,GAAG,CAAC,aAAa,IAAI,GAAG,CAAC,kBAAkB,CAAA;IAChE,IAAI,CAAC,YAAY,EAAE,CAAC;QAClB,yEAAyE;QACzE,oEAAoE;QACpE,MAAM,IAAI,KAAK,CAAC,oFAAoF,CAAC,CAAA;IACvG,CAAC;IACD,MAAM,UAAU,GAAG,iBAAiB,CAAC,YAAY,CAAC,CAAA;IAClD,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,MAAM,IAAI,KAAK,CACb,4GAA4G,OAAO,CAAC,YAAY,CAAC,kBAAkB;YACjJ,wFAAwF,CAC3F,CAAA;IACH,CAAC;IACD,8EAA8E;IAC9E,2EAA2E;IAC3E,0EAA0E;IAC1E,mFAAmF;IACnF,qEAAqE;IACrE,MAAM,QAAQ,GAAG,GAAG,CAAC,gCAAgC,IAAI,UAAU,CAAA;IACnE,MAAM,GAAG,GAAG,cAAc,EAAE,CAAA;IAC5B,MAAM,SAAS,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAA;IACvC,MAAM,MAAM,GAAG,QAAQ,EAAE,CAAA;IACzB,yEAAyE;IACzE,2EAA2E;IAC3E,mEAAmE;IACnE,uEAAuE;IACvE,qEAAqE;IACrE,uCAAuC;IACvC,MAAM,QAAQ,GAAG,GAAG,CAAC,EAAE;QACrB,CAAC,CAAC,UAAU,GAAG,CAAC,EAAE,IAAI,SAAS,EAAE;QACjC,CAAC,CAAC,UAAU,KAAK,CAAC,MAAM,CAAC,QAAQ,UAAU,SAAS,EAAE,CAAA;IACxD,MAAM,SAAS,GAAkB,IAAI,CAAA;IAErC,MAAM,aAAa,GAAG,gBAAgB,CAAC,GAAG,CAAC,qCAAqC,EAAE,sBAAsB,CAAC,CAAA;IACzG,MAAM,eAAe,GAAG,gBAAgB,CAAC,GAAG,CAAC,uCAAuC,EAAE,wBAAwB,CAAC,CAAA;IAC/G,MAAM,WAAW,GAAG,gBAAgB,CAAC,GAAG,CAAC,oCAAoC,EAAE,qBAAqB,CAAC,CAAA;IACrG,MAAM,WAAW,GAAG,IAAI,CAAC,GAAG,CAAC,gBAAgB,EAAE,EAAE,WAAW,CAAC,CAAA;IAC7D,MAAM,iBAAiB,GAAG,gBAAgB,CAAC,GAAG,CAAC,2CAA2C,EAAE,4BAA4B,CAAC,CAAA;IAEzH,OAAO;QACL,IAAI;QACJ,UAAU;QACV,SAAS;QACT,QAAQ;QACR,mBAAmB,EAAE,sBAAsB;QAC3C,WAAW,EAAE,qBAAqB;QAClC,iBAAiB,EAAE,4BAA4B;QAC/C,aAAa;QACb,eAAe;QACf,WAAW;QACX,iBAAiB;QACjB,IAAI,EAAE;YACJ,QAAQ,EAAE,MAAM;YAChB,OAAO,EAAE,GAAG,CAAC,EAAE;YACf,QAAQ;YACR,SAAS;YACT,iBAAiB,EAAE,GAAG,CAAC,UAAU;SAClC;QACD,UAAU;QACV,iBAAiB,EAAE,gBAAgB,CAAC,KAAK,CAAC,MAAM,CAAC,iBAAiB,EAAE,GAAG,CAAC;KACzE,CAAA;AACH,CAAC"}