@rubytech/create-maxy-code 0.1.186 → 0.1.187

package/payload/platform/scripts/check-cypher-int-params.mjs

@@ -0,0 +1,277 @@
+#!/usr/bin/env node
+// Build-time gate: rejects raw JS numbers bound into Cypher integer positions.
+//
+// The neo4j-driver serializes a plain JS `number` as a Cypher FLOAT (15 -> 15.0).
+// Cypher `LIMIT`/`SKIP` reject non-integers: "Invalid input. '15.0' is not a
+// valid value. Must be a non-negative integer." A `LIMIT $p` / `SKIP $p` bound a
+// raw number therefore THROWS on every call — and the throw is usually swallowed
+// by a tool's catch and returned as empty data, so it presents as "no results"
+// rather than an error. The fix at every call site is `neo4j.int(p)` (or the
+// package's `int(...)` alias). Live repro: writer-craft voice-retrieve returned an
+// empty voice profile in production because `LIMIT $k` was bound k=15.
+//
+// Posture: TARGETED, FAIL-OPEN. The gate fails the build only on a DEFINITE
+// unwrapped binding — a `LIMIT $p`/`SKIP $p` param bound as object shorthand
+// (`{ p }`) or as `p: <expr>` where <expr> contains no `int(`. When the params
+// object cannot be statically resolved (built across multiple statements, spread
+// from `...rest`, or passed through a helper), the site is skipped rather than
+// flagged — zero false positives is the priority for a gate that must stay
+// trusted. A novel unparseable offender would still surface at runtime via the
+// existing per-tool error logging.
+//
+// Detection model:
+//   1. Tokenize once into two newline-preserving masked views: comments blanked
+//      in both; string/template CONTENTS kept in `keepStr` (so `LIMIT $p` inside a
+//      query template is visible) and blanked in `noStr` (so braces/parens/commas
+//      inside queries and string values never confuse structural scanning).
+//   2. Collect integer-position param names from `keepStr`: `LIMIT $p` / `SKIP $p`.
+//   3. For each `.run(` call, resolve its params argument from `noStr` — an inline
+//      `{...}` object, or a bare identifier traced back to its `const/let/var X = {`
+//      object literal in the same file.
+//   4. Within that object, flag each integer-position param bound shorthand or
+//      without an `int(` wrap.
+
+import { readFileSync, readdirSync, statSync } from 'node:fs'
+import { dirname, join, relative, basename } from 'node:path'
+import { fileURLToPath } from 'node:url'
+
+const SCRIPT_DIR = dirname(fileURLToPath(import.meta.url))
+const REPO_ROOT = join(SCRIPT_DIR, '..', '..')
+
+const SCAN_ROOTS = [
+  join(REPO_ROOT, 'premium-plugins'),
+  join(REPO_ROOT, 'platform', 'plugins'),
+  join(REPO_ROOT, 'platform', 'ui', 'server'),
+  join(REPO_ROOT, 'platform', 'ui', 'app'),
+]
+
+const ALLOWED_EXTS = new Set(['.ts', '.tsx'])
+const SKIP_DIR_NAMES = new Set([
+  'node_modules', 'dist', 'build', '.next', 'payload', '__tests__',
+])
+
+function shouldScanFile(filePath) {
+  const name = basename(filePath)
+  if (name.endsWith('.test.ts') || name.endsWith('.test.tsx')) return false
+  const ext = name.includes('.') ? '.' + name.split('.').pop() : ''
+  return ALLOWED_EXTS.has(ext)
+}
+
+function* walk(root) {
+  let entries
+  try { entries = readdirSync(root) } catch { return }
+  for (const name of entries) {
+    if (SKIP_DIR_NAMES.has(name)) continue
+    const full = join(root, name)
+    let st
+    try { st = statSync(full) } catch { continue }
+    if (st.isDirectory()) yield* walk(full)
+    else if (st.isFile()) yield full
+  }
+}
+
+// Single tokenizer pass. Returns two strings of identical length to `src`, with
+// newlines preserved so character offsets map back to line numbers:
+//   keepStr — comment characters replaced by spaces; string/template contents kept.
+//   noStr   — comment characters AND string/template contents replaced by spaces.
+// Delimiters (quotes, backticks, comment markers) become spaces in both.
+function mask(src) {
+  const keep = new Array(src.length)
+  const no = new Array(src.length)
+  // states: code, line (//), block (/* */), sq ('), dq ("), tpl (`)
+  let state = 'code'
+  for (let i = 0; i < src.length; i++) {
+    const c = src[i]
+    const n = src[i + 1]
+    const blank = c === '\n' ? '\n' : ' '
+    if (state === 'code') {
+      if (c === '/' && n === '/') { keep[i] = no[i] = blank; state = 'line'; continue }
+      if (c === '/' && n === '*') { keep[i] = no[i] = blank; state = 'block'; continue }
+      if (c === "'") { keep[i] = no[i] = blank; state = 'sq'; continue }
+      if (c === '"') { keep[i] = no[i] = blank; state = 'dq'; continue }
+      if (c === '`') { keep[i] = no[i] = blank; state = 'tpl'; continue }
+      keep[i] = no[i] = c
+      continue
+    }
+    if (state === 'line') {
+      keep[i] = no[i] = blank
+      if (c === '\n') state = 'code'
+      continue
+    }
+    if (state === 'block') {
+      keep[i] = no[i] = blank
+      if (c === '*' && n === '/') {
+        // blank the closing slash too on the next iteration
+        no[i + 1] = keep[i + 1] = ' '
+        i++
+        state = 'code'
+      }
+      continue
+    }
+    // inside a string/template: keep content in `keep`, blank it in `no`.
+    if (state === 'sq' || state === 'dq' || state === 'tpl') {
+      const closer = state === 'sq' ? "'" : state === 'dq' ? '"' : '`'
+      if (c === '\\') {
+        // escape: consume this and the next char as string content
+        keep[i] = c === '\n' ? '\n' : (c)
+        no[i] = blank
+        if (i + 1 < src.length) {
+          keep[i + 1] = src[i + 1] === '\n' ? '\n' : src[i + 1]
+          no[i + 1] = src[i + 1] === '\n' ? '\n' : ' '
+          i++
+        }
+        continue
+      }
+      if (c === closer) { keep[i] = no[i] = blank; state = 'code'; continue }
+      keep[i] = c
+      no[i] = blank
+      continue
+    }
+  }
+  return { keep: keep.join(''), no: no.join('') }
+}
+
+function lineAt(text, index) {
+  let line = 1
+  for (let i = 0; i < index && i < text.length; i++) if (text[i] === '\n') line++
+  return line
+}
+
+const IDENT_RE = /^[A-Za-z_$][\w$]*$/
+
+// Capture a balanced {...} starting at `noStr[start]` (which must be '{').
+// Returns [objTextInNoStr, endIndexExclusive] or null.
+function captureBraces(noStr, start) {
+  if (noStr[start] !== '{') return null
+  let depth = 0
+  for (let i = start; i < noStr.length; i++) {
+    if (noStr[i] === '{') depth++
+    else if (noStr[i] === '}') { depth--; if (depth === 0) return [noStr.slice(start, i + 1), i + 1] }
+  }
+  return null
+}
+
+// Capture a balanced (...) starting at `noStr[start]` (which must be '(').
+// Returns [argsTextInNoStr, endIndexExclusive] or null.
+function captureParens(noStr, start) {
+  if (noStr[start] !== '(') return null
+  let depth = 0
+  for (let i = start; i < noStr.length; i++) {
+    if (noStr[i] === '(') depth++
+    else if (noStr[i] === ')') { depth--; if (depth === 0) return [noStr.slice(start, i + 1), i + 1] }
+  }
+  return null
+}
+
+// Split args text (without the outer parens) on TOP-LEVEL commas only.
+function splitTopLevelArgs(argsInner) {
+  const parts = []
+  let depth = 0
+  let cur = ''
+  for (const ch of argsInner) {
+    if (ch === '(' || ch === '{' || ch === '[') depth++
+    else if (ch === ')' || ch === '}' || ch === ']') depth--
+    if (ch === ',' && depth === 0) { parts.push(cur); cur = ''; continue }
+    cur += ch
+  }
+  if (cur.trim() !== '') parts.push(cur)
+  return parts
+}
+
+// Given a params object's text (from noStr) and the set of integer-position
+// param names, return the names that are bound shorthand or without an int() wrap.
+function findUnwrapped(objText, intParams) {
+  const offenders = []
+  for (const name of intParams) {
+    const esc = name.replace(/[.*+?^${}()|[\]\\]/g, '\\$&')
+    // Explicit binding `name : value`
+    const explicit = new RegExp(`\\b${esc}\\s*:\\s*([^,}]+)`)
+    const m = objText.match(explicit)
+    if (m) {
+      if (!/\bint\s*\(/.test(m[1])) offenders.push(name)
+      continue
+    }
+    // Shorthand `{ name }` / `, name ,` / `, name }` — bare identifier, never wrapped.
+    const shorthand = new RegExp(`[{,]\\s*${esc}\\s*[,}]`)
+    if (shorthand.test(objText)) offenders.push(name)
+  }
+  return offenders
+}
+
+const violations = []
+
+for (const root of SCAN_ROOTS) {
+  for (const file of walk(root)) {
+    if (!shouldScanFile(file)) continue
+    let src
+    try { src = readFileSync(file, 'utf-8') } catch { continue }
+    if (!/\.run\s*\(/.test(src)) continue
+
+    const { keep, no } = mask(src)
+
+    // 1. Integer-position param names from the query strings (kept in `keep`).
+    const intParams = new Set()
+    for (const mm of keep.matchAll(/\b(?:LIMIT|SKIP)\s+\$(\w+)/gi)) intParams.add(mm[1])
+    if (intParams.size === 0) continue
+
+    // 2. Walk each `.run(` call.
+    for (const rm of no.matchAll(/\.run\s*\(/g)) {
+      const parenStart = rm.index + rm[0].length - 1
+      const cap = captureParens(no, parenStart)
+      if (!cap) continue
+      const inner = cap[0].slice(1, -1)
+      const args = splitTopLevelArgs(inner)
+      if (args.length < 2) continue
+      const paramArg = args[1].trim()
+
+      let objText = null
+      if (paramArg.startsWith('{')) {
+        // Inline object literal: re-capture against `no` for balanced braces.
+        const objStart = no.indexOf('{', parenStart)
+        const objCap = objStart >= 0 ? captureBraces(no, objStart) : null
+        if (objCap) objText = objCap[0]
+      } else if (IDENT_RE.test(paramArg)) {
+        // Single-variable params object: trace back to its declaration.
+        const esc = paramArg.replace(/[.*+?^${}()|[\]\\]/g, '\\$&')
+        const declRe = new RegExp(`(?:const|let|var)\\s+${esc}\\b[^=]*=\\s*\\{`)
+        const dm = no.match(declRe)
+        if (dm) {
+          const braceIdx = no.indexOf('{', dm.index)
+          const objCap = braceIdx >= 0 ? captureBraces(no, braceIdx) : null
+          if (objCap) objText = objCap[0]
+        }
+      }
+      // Unresolved params shape -> fail open (skip).
+      if (!objText) continue
+
+      for (const name of findUnwrapped(objText, intParams)) {
+        violations.push({
+          file: relative(REPO_ROOT, file),
+          line: lineAt(no, parenStart),
+          name,
+        })
+      }
+    }
+  }
+}
+
+if (violations.length > 0) {
+  // De-duplicate identical (file, line, name) tuples.
+  const seen = new Set()
+  const unique = violations.filter((v) => {
+    const k = `${v.file}:${v.line}:${v.name}`
+    if (seen.has(k)) return false
+    seen.add(k)
+    return true
+  })
+  console.error(`check-cypher-int-params: ${unique.length} raw-number Cypher integer binding(s):`)
+  for (const v of unique) {
+    console.error(`  ${v.file}:${v.line}: LIMIT/SKIP $${v.name} is bound a raw JS number — wrap with int(${v.name})`)
+  }
+  console.error('')
+  console.error('neo4j-driver serializes a JS number as a Cypher float (15 -> 15.0); LIMIT/SKIP')
+  console.error('reject non-integers. Bind neo4j.int(p) (or the package int() alias) instead.')
+  process.exit(1)
+}
+
+console.log('check-cypher-int-params: ok (0 raw-number integer-position bindings)')

package/payload/platform/templates/specialists/agents/content-producer.md

@@ -3,7 +3,7 @@ name: content-producer
 description: "Author professional business documents (proposal, report, brief, memo, plan, case study, brochure), render PDFs, generate images, and publish static websites. Delegate when the operator asks for a written document, a PDF render, a generated image, or to publish a prepared website."
 summary: "Produces visual output from your graph: generates images, renders pages to PDF, and hosts static websites you upload as a zip."
 model: claude-sonnet-4-6
-tools: Bash, Skill, mcp__memory__memory-search, mcp__replicate__image-generate, mcp__browser__browser-render, mcp__admin__file-attach, mcp__admin__plugin-read, mcp__admin__public-hostname, mcp__admin__publish-site
+tools: Bash, Skill, mcp__memory__memory-search, mcp__replicate__image-generate, mcp__browser__browser-render, mcp__browser__browser-navigate, mcp__browser__browser-evaluate, mcp__browser__browser-resize, mcp__browser__browser-screenshot, mcp__browser__browser-pdf-save, mcp__admin__file-attach, mcp__admin__plugin-read, mcp__admin__public-hostname, mcp__admin__publish-site
 ---
 
 # Content Producer
@@ -34,7 +34,7 @@ Three models via `image-generate`. Pick by output need: `recraft-v4` for design-
 
 Generate the HTML to the print-CSS constraints. For A4 print, **the first tool call of this workflow branch MUST be `Skill a4-print-documents`. Any rendering step before the skill content is loaded into context is a contract violation.** Load `skill-load skillName=a4-print-documents`: the skill carries the print-CSS constraints (page margins, glassmorphism fallback, page-break rules, dark-background colour-adjust). Do not paraphrase those rules; load and follow.
 
-On-device PDF capture (the print-to-PDF tool that turns the generated HTML into a PDF file) is tracked in Task 496 and is not yet available; until it lands, deliver the HTML and state that the PDF save step is pending. Use `browser-render` only to read back a rendered page's content, not to produce a PDF.
+Render the PDF on device with `browser-pdf-save`: serve or open the HTML, `browser-navigate` to it, then `browser-pdf-save` to the output path — it uses Chromium's print pipeline (honours `@page`/print CSS, prints backgrounds). For glassmorphism cover/back pages that do not survive print, `a4-print-documents` directs you to capture print-fallback images with `browser-screenshot` (element clip) after `browser-resize`; use `browser-evaluate` to hide on-screen chrome before the capture. Do not write or run Playwright scripts — these on-device tools are the rendering path.
 
 When the brief is to author a generic business document (proposal / report / brief / memo / white paper / plan / case study), **the first tool call MUST be `Skill professional-document`. Any browser tool call before the skill is loaded into context is a contract violation.** Load `skill-load skillName=professional-document`: it carries the document-type catalogue, the refusal taxonomy for briefs owned by other composers (fundraise → `venture-studio:investor-data-room`; property → `real-agent:property-brochure` or `:property-preval`; decks → `admin:deck-pages`), the brand-token resolution, and the outline-approve-draft-render-save-deliver workflow. The skill loads `a4-print-documents` itself at the render phase — do not load it earlier. Format-only briefs ("create a PDF of this HTML", "save this as a one-pager", "render this brochure") stay on the existing `a4-print-documents` route above.
 

package/payload/platform/templates/specialists/agents/personal-assistant.md

@@ -3,7 +3,7 @@ name: personal-assistant
 description: "Scheduling, platform settings, messaging channels (Telegram, WhatsApp, email, Outlook), tunnel and domain setup, and browser automation. Delegate when the work is on your calendar, configuring the platform, sending or reading messages, or driving a browser."
 summary: "Handles the operational tasks you'd give a personal assistant: scheduling meetings, managing your platform settings, connecting messaging channels, and completing browser-based tasks on your behalf."
 model: claude-sonnet-4-6
-tools: Skill, mcp__admin__system-status, mcp__admin__brand-settings, mcp__admin__account-manage, mcp__admin__account-update, mcp__admin__logs-read, mcp__admin__plugin-read, mcp__admin__file-attach, mcp__admin__wifi, mcp__contacts__contact-create, mcp__contacts__contact-lookup, mcp__contacts__contact-update, mcp__contacts__contact-delete, mcp__contacts__contact-list, mcp__contacts__contact-export, mcp__contacts__contact-erase, mcp__contacts__group-create, mcp__contacts__group-manage, mcp__telegram__message, mcp__telegram__message-history, mcp__telegram__telegram-webhook-register, mcp__whatsapp__whatsapp-login-start, mcp__whatsapp__whatsapp-login-wait, mcp__whatsapp__whatsapp-status, mcp__whatsapp__whatsapp-disconnect, mcp__whatsapp__whatsapp-send, mcp__whatsapp__whatsapp-send-document, mcp__whatsapp__whatsapp-config, mcp__whatsapp__whatsapp-activity, mcp__whatsapp__whatsapp-conversations, mcp__whatsapp__whatsapp-messages, mcp__whatsapp__whatsapp-conversation-graph-state, mcp__whatsapp__whatsapp-group-info, mcp__email__email-setup, mcp__email__email-read, mcp__email__email-send, mcp__email__email-reply, mcp__email__email-search, mcp__email__email-graph-query, mcp__email__email-otp-extract, mcp__email__email-status, mcp__email__email-fetch, mcp__email__email-ingest, mcp__outlook__outlook-account-register, mcp__outlook__outlook-mail-list, mcp__outlook__outlook-mail-search, mcp__outlook__outlook-calendar-list, mcp__outlook__outlook-calendar-event, mcp__outlook__outlook-contacts-list, mcp__outlook__outlook-mailbox-info, mcp__scheduling__schedule-event, mcp__scheduling__schedule-list, mcp__scheduling__schedule-get, mcp__scheduling__schedule-update, mcp__scheduling__schedule-cancel, mcp__scheduling__schedule-export-ics, mcp__scheduling__schedule-import-ics, mcp__scheduling__time-resolve, mcp__memory__memory-search, mcp__memory__profile-update, mcp__url-get__url-get, mcp__browser__browser-render
+tools: Skill, mcp__admin__system-status, mcp__admin__brand-settings, mcp__admin__account-manage, mcp__admin__account-update, mcp__admin__logs-read, mcp__admin__plugin-read, mcp__admin__file-attach, mcp__admin__wifi, mcp__contacts__contact-create, mcp__contacts__contact-lookup, mcp__contacts__contact-update, mcp__contacts__contact-delete, mcp__contacts__contact-list, mcp__contacts__contact-export, mcp__contacts__contact-erase, mcp__contacts__group-create, mcp__contacts__group-manage, mcp__telegram__message, mcp__telegram__message-history, mcp__telegram__telegram-webhook-register, mcp__whatsapp__whatsapp-login-start, mcp__whatsapp__whatsapp-login-wait, mcp__whatsapp__whatsapp-status, mcp__whatsapp__whatsapp-disconnect, mcp__whatsapp__whatsapp-send, mcp__whatsapp__whatsapp-send-document, mcp__whatsapp__whatsapp-config, mcp__whatsapp__whatsapp-activity, mcp__whatsapp__whatsapp-conversations, mcp__whatsapp__whatsapp-messages, mcp__whatsapp__whatsapp-conversation-graph-state, mcp__whatsapp__whatsapp-group-info, mcp__email__email-provider-info, mcp__email__email-setup, mcp__email__email-read, mcp__email__email-send, mcp__email__email-reply, mcp__email__email-search, mcp__email__email-graph-query, mcp__email__email-otp-extract, mcp__email__email-status, mcp__email__email-fetch, mcp__email__email-ingest, mcp__outlook__outlook-account-register, mcp__outlook__outlook-mail-list, mcp__outlook__outlook-mail-search, mcp__outlook__outlook-calendar-list, mcp__outlook__outlook-calendar-event, mcp__outlook__outlook-contacts-list, mcp__outlook__outlook-mailbox-info, mcp__scheduling__schedule-event, mcp__scheduling__schedule-list, mcp__scheduling__schedule-get, mcp__scheduling__schedule-update, mcp__scheduling__schedule-cancel, mcp__scheduling__schedule-export-ics, mcp__scheduling__schedule-import-ics, mcp__scheduling__time-resolve, mcp__memory__memory-search, mcp__memory__profile-update, mcp__url-get__url-get, mcp__browser__browser-render, mcp__browser__browser-navigate, mcp__browser__browser-snapshot, mcp__browser__browser-click, mcp__browser__browser-fill, mcp__browser__browser-fill-form, mcp__browser__browser-type, mcp__browser__browser-press-key, mcp__browser__browser-hover, mcp__browser__browser-select-option, mcp__browser__browser-wait-for, mcp__browser__browser-handle-dialog, mcp__browser__browser-evaluate, mcp__browser__browser-console-messages, mcp__browser__browser-tabs, mcp__browser__browser-pdf-save, mcp__browser__browser-screenshot, mcp__browser__browser-resize
 ---
 
 # Personal Assistant
@@ -40,7 +40,11 @@ Each domain has a small set of tools and, where it exists, a skill that drives t
 
 **Cloudflare lives in the operator's browser.** Cloudflare exposes zero MCP tools. The operator's logged-in dashboard is the single source of truth. Do not drive the dashboard with a browser tool. Do not synthesise `cloudflared` flag combinations. Do not call the Cloudflare API or SDK. Do not edit `cert.pem`, `tunnel.state`, `config.yml`, or `alias-domains.json` directly. When a sanctioned surface fails, report with evidence and cite `plugins/cloudflare/references/reset-guide.md`. User-facing language: "Cloudflare account", "domain", "address", "sign in", "browser". Never say "zone", "CNAME", "account ID", "API", "SDK", or any hexadecimal identifier. After a tunnel script finishes, verify with `curl -I https://<hostname>`; a non-530 response means the tunnel is live.
 
-**Reading JavaScript-rendered pages.** When a page needs JavaScript to show its content — and `url-get` comes back empty or as a shell — use `browser-render` with the page URL. It renders the page in the device's Chromium and returns the rendered HTML plus the visible text. It is read-only: it does not click, fill, or navigate within a page, and it does not save PDFs or screenshots (an interactive automation surface is tracked in Task 496). Report CAPTCHA or bot detection as a blocker; do not try to solve it.
+**Reading JavaScript-rendered pages.** When you only need to *read* a JS page and `url-get` comes back empty or as a shell, use `browser-render` with the URL. It renders the page in the device's Chromium and returns the rendered HTML plus visible text in one stateless call — it does not keep the page open.
+
+**Automating a page.** When a task needs to *act* on a page (log in, fill a form, click through a flow, drive a web app), use the persistent automation tools. Start with `browser-navigate` to open the page and keep it alive, then `browser-snapshot` to see what is on the page — it returns each interactive element as a role, a name, and a unique CSS selector. Pass those selectors verbatim to `browser-click`, `browser-fill`, `browser-fill-form`, `browser-hover`, and `browser-select-option`. Use `browser-type` / `browser-press-key` for real keyboard input (e.g. Enter to submit), `browser-wait-for` after anything that loads asynchronously, `browser-evaluate` to read page state, and `browser-console-messages` to debug. Arm `browser-handle-dialog` *before* the action that triggers an alert/confirm/prompt, because dialogs block the page. `browser-tabs` opens or switches to a fresh page so stale state from a prior task does not leak in. If an action returns `session-lost`, the page closed — call `browser-navigate` again. Element targeting is by CSS selector (always from a fresh `browser-snapshot`), not by Playwright-style refs. Report CAPTCHA or bot detection as a blocker; do not try to solve it.
+
+**Saving PDFs and screenshots.** `browser-pdf-save` renders the current page to a PDF on device (Chromium's print pipeline — honours `@page`/print CSS). `browser-screenshot` saves a PNG of the page or one element (CSS selector clip); `browser-resize` sets the viewport first when you need exact dimensions. For A4 print documents, follow the `a4-print-documents` skill rather than driving these directly.
 
 ## Optional capabilities
 

package/payload/premium-plugins/writer-craft/mcp/dist/tools/voice-retrieve-conditioning.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"voice-retrieve-conditioning.d.ts","sourceRoot":"","sources":["../../src/tools/voice-retrieve-conditioning.ts"],"names":[],"mappings":"AA+BA,OAAO,EAGL,KAAK,WAAW,EACjB,MAAM,wBAAwB,CAAC;AAMhC,MAAM,WAAW,+BAA+B;IAC9C,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE;QACL,KAAK,CAAC,EAAE,MAAM,CAAC;QACf;;;WAGG;QACH,MAAM,EAAE,WAAW,CAAC;QACpB;;;;WAIG;QACH,MAAM,CAAC,EAAE,OAAO,GAAG,MAAM,CAAC;QAC1B,QAAQ,CAAC,EAAE,MAAM,CAAC;KACnB,CAAC;IACF,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,aAAa;IAC5B,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;CAChB;AAED;;;;;;;;;;GAUG;AACH,MAAM,MAAM,mBAAmB,GAAG,IAAI,GAAG,SAAS,GAAG,OAAO,CAAC;AAE7D,MAAM,WAAW,+BAA+B;IAC9C,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,SAAS,EAAE,aAAa,EAAE,CAAC;IAC3B,MAAM,EAAE,mBAAmB,CAAC;IAC5B,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAMD,wBAAsB,yBAAyB,CAC7C,MAAM,EAAE,+BAA+B,GACtC,OAAO,CAAC,+BAA+B,CAAC,CAuI1C"}
+{"version":3,"file":"voice-retrieve-conditioning.d.ts","sourceRoot":"","sources":["../../src/tools/voice-retrieve-conditioning.ts"],"names":[],"mappings":"AA+BA,OAAO,EAGL,KAAK,WAAW,EACjB,MAAM,wBAAwB,CAAC;AAMhC,MAAM,WAAW,+BAA+B;IAC9C,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE;QACL,KAAK,CAAC,EAAE,MAAM,CAAC;QACf;;;WAGG;QACH,MAAM,EAAE,WAAW,CAAC;QACpB;;;;WAIG;QACH,MAAM,CAAC,EAAE,OAAO,GAAG,MAAM,CAAC;QAC1B,QAAQ,CAAC,EAAE,MAAM,CAAC;KACnB,CAAC;IACF,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,aAAa;IAC5B,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;CAChB;AAED;;;;;;;;;;GAUG;AACH,MAAM,MAAM,mBAAmB,GAAG,IAAI,GAAG,SAAS,GAAG,OAAO,CAAC;AAE7D,MAAM,WAAW,+BAA+B;IAC9C,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,SAAS,EAAE,aAAa,EAAE,CAAC;IAC3B,MAAM,EAAE,mBAAmB,CAAC;IAC5B,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAMD,wBAAsB,yBAAyB,CAC7C,MAAM,EAAE,+BAA+B,GACtC,OAAO,CAAC,+BAA+B,CAAC,CA0I1C"}

package/payload/premium-plugins/writer-craft/mcp/dist/tools/voice-retrieve-conditioning.js

@@ -1,3 +1,32 @@
+/**
+ * voice-retrieve-conditioning — return the operator's style card plus K
+ * voice-matched exemplars for a drafting brief.
+ *
+ * Task 462 changes:
+ *   - `brief.format` (K-selector: 'short'|'long') renamed to `brief.length`
+ *     to free the name for the new `brief.format: VoiceFormat` axis.
+ *   - `brief.format: VoiceFormat` (required) — corpus exemplars are filtered
+ *     to this writing format; the `:VoiceProfile` is the per-format profile.
+ *   - All callers updated in the same commit.
+ *
+ * Retrieval order (best to worst):
+ *   1. If brief.topic is provided AND keyword search on the per-format corpus
+ *      returns ≥K matches → use those (ordered by recency).
+ *   2. Otherwise, return the K most-recent per-format corpus nodes.
+ *
+ * Embeddings are not used in v1: the corpus is small (single operator's
+ * personal writing — typically <500 docs), and recency-with-keyword-filter
+ * is both faster and more predictable than vector ANN at that scale.
+ * Vector-search is a Task 365-follow-up if the corpus grows beyond the
+ * 500-doc breakeven point.
+ *
+ * Graceful degradation, discriminated (Task 493): the function never throws.
+ * Missing profile / empty corpus returns status "no-data"; a failed lookup
+ * (blank identity, driver/connection fault, Cypher error) returns status
+ * "error" with the message. The calling drafting skill falls back to its
+ * default register on both, but only "no-data" means "you have no profile".
+ */
+import neo4j from "neo4j-driver";
 import { getSession } from "../lib/neo4j.js";
 import { notTrashed } from "../lib/voice-corpus.js";
 import { voiceCorpusWhereWithFormat, } from "../lib/voice-corpus.js";
@@ -85,7 +114,10 @@ export async function voiceRetrieveConditioning(params) {
             accountId,
             format,
             topic,
-            k,
+            // neo4j-driver serializes a plain JS number as a Cypher float (15 → 15.0),
+            // which LIMIT rejects ("not a valid value. Must be a non-negative integer").
+            // Send it as a Neo4j integer.
+            k: neo4j.int(k),
         });
         let charsUsed = 0;
         const exemplars = [];

package/payload/premium-plugins/writer-craft/mcp/dist/tools/voice-retrieve-conditioning.js.map

@@ -1 +1 @@
-{"version":3,"file":"voice-retrieve-conditioning.js","sourceRoot":"","sources":["../../src/tools/voice-retrieve-conditioning.ts"],"names":[],"mappings":"AA6BA,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAC7C,OAAO,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AACpD,OAAO,EAEL,0BAA0B,GAE3B,MAAM,wBAAwB,CAAC;AAEhC,MAAM,0BAA0B,GAAG,MAAM,CAAC;AAC1C,MAAM,yBAAyB,GAAG,MAAM,CAAC;AACzC,MAAM,eAAe,GAAG,CAAC,CAAC;AAkD1B,SAAS,WAAW,CAAC,KAAa;IAChC,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;AACpE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC7C,MAAuC;IAEvC,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,CAAC;IAC5C,2EAA2E;IAC3E,2EAA2E;IAC3E,4EAA4E;IAC5E,sEAAsE;IACtE,IAAI,CAAC,SAAS,IAAI,CAAC,MAAM,EAAE,CAAC;QAC1B,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,sDAAsD,OAAO,CAAC,SAAS,CAAC,WAAW,OAAO,CAAC,MAAM,CAAC,IAAI,CACvG,CAAC;QACF,OAAO,WAAW,CAAC,0BAA0B,CAAC,CAAC;IACjD,CAAC;IAED,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,IAAI,OAAO,CAAC;IACvC,MAAM,CAAC,GAAG,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IACrC,MAAM,WAAW,GACf,MAAM,CAAC,WAAW;QAClB,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,yBAAyB,CAAC,CAAC,CAAC,0BAA0B,CAAC,CAAC;IAC/E,MAAM,UAAU,GAAG,WAAW,GAAG,eAAe,CAAC;IACjD,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC;IAC5B,MAAM,WAAW,GAAG,0BAA0B,CAAC,MAAM,CAAC,CAAC;IAEvD,4EAA4E;IAC5E,0EAA0E;IAC1E,yEAAyE;IACzE,cAAc;IACd,IAAI,OAA4B,CAAC;IACjC,IAAI,CAAC;QACH,OAAO,GAAG,UAAU,EAAE,CAAC;QACvB,sCAAsC;QACtC,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,GAAG,CAC/B;;uCAEiC,EACjC,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,CAC9B,CAAC;QACF,MAAM,SAAS,GAAI,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,WAAW,CAAmB,IAAI,IAAI,CAAC;QAElF,4EAA4E;QAC5E,EAAE;QACF,8BAA8B;QAC9B,oEAAoE;QACpE,uEAAuE;QACvE,+BAA+B;QAC/B,yEAAyE;QACzE,EAAE;QACF,mEAAmE;QACnE,kEAAkE;QAClE,gEAAgE;QAChE,MAAM,KAAK,GAAG,CAAC,KAAK,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QACzC,MAAM,SAAS,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC;QAEnC,MAAM,gBAAgB,GAAG;;iBAEZ,UAAU,CAAC,GAAG,CAAC;;;;;;;qBAOX,CAAC;QAElB,MAAM,MAAM,GAAG,SAAS;YACtB,CAAC,CAAC;iBACS,WAAW;WACjB,gBAAgB;;;;;;;;kBAQT;YACZ,CAAC,CAAC;iBACS,WAAW;WACjB,gBAAgB;;;;;;;kBAOT,CAAC;QAEf,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE;YACvC,SAAS;YACT,MAAM;YACN,KAAK;YACL,CAAC;SACF,CAAC,CAAC;QAEH,IAAI,SAAS,GAAG,CAAC,CAAC;QAClB,MAAM,SAAS,GAAoB,EAAE,CAAC;QACtC,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;YAC/B,MAAM,IAAI,GAAI,CAAC,CAAC,GAAG,CAAC,MAAM,CAAmB,IAAI,EAAE,CAAC;YACpD,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;gBAAE,SAAS;YAChC,MAAM,MAAM,GAAI,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAc,IAAI,EAAE,CAAC;YACnD,MAAM,KAAK,GACT,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAChB,CAAC,mBAAmB,EAAE,SAAS,EAAE,YAAY,EAAE,cAAc,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAC3E,IAAI,MAAM,CAAC,CAAC,CAAC,IAAI,SAAS,CAAC;YAC9B,MAAM,SAAS,GAAG,UAAU,GAAG,SAAS,CAAC;YACzC,IAAI,SAAS,IAAI,CAAC;gBAAE,MAAM;YAC1B,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;YAC5E,SAAS,CAAC,IAAI,CAAC;gBACb,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,IAAI,CAAW;gBAC7B,KAAK;gBACL,IAAI,EAAE,SAAS;gBACf,MAAM,EAAE,CAAE,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAmB,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC;aACjE,CAAC,CAAC;YACH,SAAS,IAAI,SAAS,CAAC,MAAM,CAAC;QAChC,CAAC;QAED,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,yBAAyB,KAAK,CAAC,KAAK,IAAI,MAAM,WAAW,MAAM,mBAC7D,SAAS,EAAE,MAAM,IAAI,CACvB,kBAAkB,SAAS,CAAC,MAAM,gBAAgB,WAAW,IAAI,CAClE,CAAC;QAEF,2EAA2E;QAC3E,wEAAwE;QACxE,8CAA8C;QAC9C,MAAM,YAAY,GAAG,SAAS,KAAK,IAAI,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC;QAChE,MAAM,MAAM,GACV,YAAY,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;QAC1D,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC;IAC1C,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACjE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,2BAA2B,OAAO,IAAI,CAAC,CAAC;QAC7D,OAAO,WAAW,CAAC,OAAO,CAAC,CAAC;IAC9B,CAAC;YAAS,CAAC;QACT,IAAI,OAAO;YAAE,MAAM,OAAO,CAAC,KAAK,EAAE,CAAC;IACrC,CAAC;AACH,CAAC"}
+{"version":3,"file":"voice-retrieve-conditioning.js","sourceRoot":"","sources":["../../src/tools/voice-retrieve-conditioning.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AACH,OAAO,KAAuB,MAAM,cAAc,CAAC;AACnD,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAC7C,OAAO,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AACpD,OAAO,EAEL,0BAA0B,GAE3B,MAAM,wBAAwB,CAAC;AAEhC,MAAM,0BAA0B,GAAG,MAAM,CAAC;AAC1C,MAAM,yBAAyB,GAAG,MAAM,CAAC;AACzC,MAAM,eAAe,GAAG,CAAC,CAAC;AAkD1B,SAAS,WAAW,CAAC,KAAa;IAChC,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;AACpE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC7C,MAAuC;IAEvC,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,CAAC;IAC5C,2EAA2E;IAC3E,2EAA2E;IAC3E,4EAA4E;IAC5E,sEAAsE;IACtE,IAAI,CAAC,SAAS,IAAI,CAAC,MAAM,EAAE,CAAC;QAC1B,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,sDAAsD,OAAO,CAAC,SAAS,CAAC,WAAW,OAAO,CAAC,MAAM,CAAC,IAAI,CACvG,CAAC;QACF,OAAO,WAAW,CAAC,0BAA0B,CAAC,CAAC;IACjD,CAAC;IAED,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,IAAI,OAAO,CAAC;IACvC,MAAM,CAAC,GAAG,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IACrC,MAAM,WAAW,GACf,MAAM,CAAC,WAAW;QAClB,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,yBAAyB,CAAC,CAAC,CAAC,0BAA0B,CAAC,CAAC;IAC/E,MAAM,UAAU,GAAG,WAAW,GAAG,eAAe,CAAC;IACjD,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC;IAC5B,MAAM,WAAW,GAAG,0BAA0B,CAAC,MAAM,CAAC,CAAC;IAEvD,4EAA4E;IAC5E,0EAA0E;IAC1E,yEAAyE;IACzE,cAAc;IACd,IAAI,OAA4B,CAAC;IACjC,IAAI,CAAC;QACH,OAAO,GAAG,UAAU,EAAE,CAAC;QACvB,sCAAsC;QACtC,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,GAAG,CAC/B;;uCAEiC,EACjC,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,CAC9B,CAAC;QACF,MAAM,SAAS,GAAI,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,WAAW,CAAmB,IAAI,IAAI,CAAC;QAElF,4EAA4E;QAC5E,EAAE;QACF,8BAA8B;QAC9B,oEAAoE;QACpE,uEAAuE;QACvE,+BAA+B;QAC/B,yEAAyE;QACzE,EAAE;QACF,mEAAmE;QACnE,kEAAkE;QAClE,gEAAgE;QAChE,MAAM,KAAK,GAAG,CAAC,KAAK,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QACzC,MAAM,SAAS,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC;QAEnC,MAAM,gBAAgB,GAAG;;iBAEZ,UAAU,CAAC,GAAG,CAAC;;;;;;;qBAOX,CAAC;QAElB,MAAM,MAAM,GAAG,SAAS;YACtB,CAAC,CAAC;iBACS,WAAW;WACjB,gBAAgB;;;;;;;;kBAQT;YACZ,CAAC,CAAC;iBACS,WAAW;WACjB,gBAAgB;;;;;;;kBAOT,CAAC;QAEf,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE;YACvC,SAAS;YACT,MAAM;YACN,KAAK;YACL,2EAA2E;YAC3E,6EAA6E;YAC7E,8BAA8B;YAC9B,CAAC,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;SAChB,CAAC,CAAC;QAEH,IAAI,SAAS,GAAG,CAAC,CAAC;QAClB,MAAM,SAAS,GAAoB,EAAE,CAAC;QACtC,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;YAC/B,MAAM,IAAI,GAAI,CAAC,CAAC,GAAG,CAAC,MAAM,CAAmB,IAAI,EAAE,CAAC;YACpD,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;gBAAE,SAAS;YAChC,MAAM,MAAM,GAAI,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAc,IAAI,EAAE,CAAC;YACnD,MAAM,KAAK,GACT,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAChB,CAAC,mBAAmB,EAAE,SAAS,EAAE,YAAY,EAAE,cAAc,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAC3E,IAAI,MAAM,CAAC,CAAC,CAAC,IAAI,SAAS,CAAC;YAC9B,MAAM,SAAS,GAAG,UAAU,GAAG,SAAS,CAAC;YACzC,IAAI,SAAS,IAAI,CAAC;gBAAE,MAAM;YAC1B,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;YAC5E,SAAS,CAAC,IAAI,CAAC;gBACb,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,IAAI,CAAW;gBAC7B,KAAK;gBACL,IAAI,EAAE,SAAS;gBACf,MAAM,EAAE,CAAE,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAmB,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC;aACjE,CAAC,CAAC;YACH,SAAS,IAAI,SAAS,CAAC,MAAM,CAAC;QAChC,CAAC;QAED,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,yBAAyB,KAAK,CAAC,KAAK,IAAI,MAAM,WAAW,MAAM,mBAC7D,SAAS,EAAE,MAAM,IAAI,CACvB,kBAAkB,SAAS,CAAC,MAAM,gBAAgB,WAAW,IAAI,CAClE,CAAC;QAEF,2EAA2E;QAC3E,wEAAwE;QACxE,8CAA8C;QAC9C,MAAM,YAAY,GAAG,SAAS,KAAK,IAAI,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC;QAChE,MAAM,MAAM,GACV,YAAY,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;QAC1D,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC;IAC1C,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACjE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,2BAA2B,OAAO,IAAI,CAAC,CAAC;QAC7D,OAAO,WAAW,CAAC,OAAO,CAAC,CAAC;IAC9B,CAAC;YAAS,CAAC;QACT,IAAI,OAAO;YAAE,MAAM,OAAO,CAAC,KAAK,EAAE,CAAC;IACrC,CAAC;AACH,CAAC"}

package/payload/premium-plugins/writer-craft/mcp/src/tools/voice-retrieve-conditioning.ts

@@ -26,7 +26,7 @@
  * "error" with the message. The calling drafting skill falls back to its
  * default register on both, but only "no-data" means "you have no profile".
  */
-import type { Session } from "neo4j-driver";
+import neo4j, { type Session } from "neo4j-driver";
 import { getSession } from "../lib/neo4j.js";
 import { notTrashed } from "../lib/voice-corpus.js";
 import {
@@ -183,7 +183,10 @@ export async function voiceRetrieveConditioning(
       accountId,
       format,
       topic,
-      k,
+      // neo4j-driver serializes a plain JS number as a Cypher float (15 → 15.0),
+      // which LIMIT rejects ("not a valid value. Must be a non-negative integer").
+      // Send it as a Neo4j integer.
+      k: neo4j.int(k),
     });
 
     let charsUsed = 0;

package/payload/server/{chunk-L2YK2VK3.js → chunk-EFJ2EXZK.js}

@@ -5042,7 +5042,9 @@ async function loadUserProfile(accountId, userId, sessionId) {
        WITH up, p, collect(pref) AS allPrefs
        WITH up, p, allPrefs[0..$limit] AS prefs
        RETURN up, p AS person, prefs`,
-      { accountId, userId, threshold: INJECTION_THRESHOLD, limit: MAX_SUMMARY_PREFERENCES }
+      // List-range slice bounds are an integer position; a raw JS number
+      // serializes as a Cypher float. Bind a Neo4j integer.
+      { accountId, userId, threshold: INJECTION_THRESHOLD, limit: neo4j.int(MAX_SUMMARY_PREFERENCES) }
     );
     if (result.records.length === 0 || !result.records[0].get("up")) {
       return null;

package/payload/server/maxy-edge.js

@@ -14,7 +14,7 @@ import {
   sanitizeClientCorrId,
   vncLog,
   websockifyLog
-} from "./chunk-L2YK2VK3.js";
+} from "./chunk-EFJ2EXZK.js";
 import "./chunk-PFF6I7KP.js";
 
 // server/edge.ts

package/payload/server/server.js

@@ -84,7 +84,7 @@ import {
   vncLog,
   walkPremiumBundles,
   writeAdminUserAndPerson
-} from "./chunk-L2YK2VK3.js";
+} from "./chunk-EFJ2EXZK.js";
 import {
   __commonJS,
   __toESM