@rubytech/create-maxy-code 0.1.212 → 0.1.216

package/payload/platform/plugins/admin/mcp/dist/lib/catalogue-census.js

@@ -0,0 +1,50 @@
+import { existsSync, readdirSync, readFileSync, statSync } from "node:fs";
+import { resolve, join } from "node:path";
+function listSpecialists(dir) {
+    if (!existsSync(dir))
+        return [];
+    const out = [];
+    for (const entry of readdirSync(dir)) {
+        const full = join(dir, entry);
+        const st = statSync(full);
+        if (st.isFile() && entry.endsWith(".md"))
+            out.push(entry.replace(/\.md$/, ""));
+        else if (st.isDirectory() && existsSync(join(full, "IDENTITY.md")))
+            out.push(entry);
+    }
+    return out;
+}
+function slugify(s) {
+    return s.toLowerCase().replace(/[^a-z0-9]+/g, "-").replace(/^-|-$/g, "");
+}
+export function runCatalogueCensus(input) {
+    const platformSpecs = listSpecialists(resolve(input.platformRoot, "templates", "specialists", "agents"));
+    const premiumSpecs = [];
+    for (const bundle of input.enabledBundles) {
+        const dir = resolve(input.premiumPluginsRoot, bundle, "agents");
+        premiumSpecs.push(...listSpecialists(dir));
+    }
+    const disk = [...platformSpecs, ...premiumSpecs];
+    const body = existsSync(input.shippedSkillPath)
+        ? readFileSync(input.shippedSkillPath, "utf8")
+        : "";
+    const bodySlugs = new Set();
+    for (const match of body.matchAll(/^\|\s*([^|]+)\s*\|/gm)) {
+        const cell = match[1].trim();
+        if (!cell || cell.startsWith("---") || cell === "Role" || cell === "Plugin")
+            continue;
+        bodySlugs.add(slugify(cell));
+    }
+    const missing = disk.filter((s) => !bodySlugs.has(slugify(s)));
+    // Stale signal arrives via the per-brand drift gate and the
+    // check-roles-doc-completeness gate; this census closes the F5 leak —
+    // disk-but-undocumented — which the drift gates cannot see.
+    const stale = [];
+    return {
+        diskCount: disk.length,
+        documentedCount: bodySlugs.size,
+        missing,
+        stale,
+    };
+}
+//# sourceMappingURL=catalogue-census.js.map

package/payload/platform/plugins/admin/mcp/dist/lib/catalogue-census.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"catalogue-census.js","sourceRoot":"","sources":["../../src/lib/catalogue-census.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAC1E,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAyB1C,SAAS,eAAe,CAAC,GAAW;IAClC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,EAAE,CAAC;IAChC,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,KAAK,MAAM,KAAK,IAAI,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC;QACrC,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QAC9B,MAAM,EAAE,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;QAC1B,IAAI,EAAE,CAAC,MAAM,EAAE,IAAI,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC;YAAE,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC;aAC1E,IAAI,EAAE,CAAC,WAAW,EAAE,IAAI,UAAU,CAAC,IAAI,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC;YAAE,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACtF,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,OAAO,CAAC,CAAS;IACxB,OAAO,CAAC,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,aAAa,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;AAC3E,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,KAA2B;IAC5D,MAAM,aAAa,GAAG,eAAe,CACnC,OAAO,CAAC,KAAK,CAAC,YAAY,EAAE,WAAW,EAAE,aAAa,EAAE,QAAQ,CAAC,CAClE,CAAC;IACF,MAAM,YAAY,GAAa,EAAE,CAAC;IAClC,KAAK,MAAM,MAAM,IAAI,KAAK,CAAC,cAAc,EAAE,CAAC;QAC1C,MAAM,GAAG,GAAG,OAAO,CAAC,KAAK,CAAC,kBAAkB,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC;QAChE,YAAY,CAAC,IAAI,CAAC,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC;IAC7C,CAAC;IACD,MAAM,IAAI,GAAG,CAAC,GAAG,aAAa,EAAE,GAAG,YAAY,CAAC,CAAC;IAEjD,MAAM,IAAI,GAAG,UAAU,CAAC,KAAK,CAAC,gBAAgB,CAAC;QAC7C,CAAC,CAAC,YAAY,CAAC,KAAK,CAAC,gBAAgB,EAAE,MAAM,CAAC;QAC9C,CAAC,CAAC,EAAE,CAAC;IACP,MAAM,SAAS,GAAG,IAAI,GAAG,EAAU,CAAC;IACpC,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,QAAQ,CAAC,sBAAsB,CAAC,EAAE,CAAC;QAC1D,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAC7B,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,IAAI,KAAK,MAAM,IAAI,IAAI,KAAK,QAAQ;YAAE,SAAS;QACtF,SAAS,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;IAC/B,CAAC;IAED,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAE/D,4DAA4D;IAC5D,sEAAsE;IACtE,4DAA4D;IAC5D,MAAM,KAAK,GAAa,EAAE,CAAC;IAE3B,OAAO;QACL,SAAS,EAAE,IAAI,CAAC,MAAM;QACtB,eAAe,EAAE,SAAS,CAAC,IAAI;QAC/B,OAAO;QACP,KAAK;KACN,CAAC;AACJ,CAAC"}

package/payload/platform/plugins/admin/mcp/dist/tools/capabilities-here.d.ts

@@ -0,0 +1,28 @@
+export interface CapabilitiesHereInput {
+    accountId: string;
+    accountConfigPath: string;
+    brandConfigPath: string;
+    platformRoot: string;
+    premiumPluginsRoot: string;
+    claudeConfigDir: string;
+}
+export interface CapabilitiesHereResult {
+    accountId: string;
+    tier: string | null;
+    adminModel: string | null;
+    publicModel: string | null;
+    enabledPlugins: string[];
+    installedPlatformSpecialists: string[];
+    installedPremiumSpecialists: Array<{
+        bundle: string;
+        name: string;
+    }>;
+    registeredAgentTypes: string[];
+    brand: {
+        productName: string | null;
+        shipsPremiumBundles: string[];
+    };
+    capturedAt: string;
+}
+export declare function resolveCapabilitiesHere(input: CapabilitiesHereInput, nowIso: string): Promise<CapabilitiesHereResult>;
+//# sourceMappingURL=capabilities-here.d.ts.map

package/payload/platform/plugins/admin/mcp/dist/tools/capabilities-here.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"capabilities-here.d.ts","sourceRoot":"","sources":["../../src/tools/capabilities-here.ts"],"names":[],"mappings":"AAaA,MAAM,WAAW,qBAAqB;IACpC,SAAS,EAAE,MAAM,CAAC;IAClB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,eAAe,EAAE,MAAM,CAAC;IACxB,YAAY,EAAE,MAAM,CAAC;IACrB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,eAAe,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,sBAAsB;IACrC,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB,4BAA4B,EAAE,MAAM,EAAE,CAAC;IACvC,2BAA2B,EAAE,KAAK,CAAC;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACrE,oBAAoB,EAAE,MAAM,EAAE,CAAC;IAC/B,KAAK,EAAE;QACL,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;QAC3B,mBAAmB,EAAE,MAAM,EAAE,CAAC;KAC/B,CAAC;IACF,UAAU,EAAE,MAAM,CAAC;CACpB;AA0BD,wBAAsB,uBAAuB,CAC3C,KAAK,EAAE,qBAAqB,EAC5B,MAAM,EAAE,MAAM,GACb,OAAO,CAAC,sBAAsB,CAAC,CAgDjC"}

package/payload/platform/plugins/admin/mcp/dist/tools/capabilities-here.js

@@ -0,0 +1,68 @@
+import { readFile } from "node:fs/promises";
+import { existsSync, readdirSync, statSync } from "node:fs";
+import { resolve, join } from "node:path";
+function listSpecialistFiles(dir) {
+    if (!existsSync(dir))
+        return [];
+    const out = [];
+    for (const entry of readdirSync(dir)) {
+        const full = join(dir, entry);
+        const st = statSync(full);
+        if (st.isFile() && entry.endsWith(".md")) {
+            out.push(entry.replace(/\.md$/, ""));
+        }
+        else if (st.isDirectory() && existsSync(join(full, "IDENTITY.md"))) {
+            out.push(entry);
+        }
+    }
+    return out.sort();
+}
+function listAgentRegistry(dir) {
+    if (!existsSync(dir))
+        return [];
+    const out = [];
+    for (const entry of readdirSync(dir)) {
+        if (entry.endsWith(".md"))
+            out.push(entry.replace(/\.md$/, ""));
+    }
+    return out.sort();
+}
+export async function resolveCapabilitiesHere(input, nowIso) {
+    const accountRaw = await readFile(input.accountConfigPath, "utf-8");
+    const account = JSON.parse(accountRaw);
+    const brandRaw = await readFile(input.brandConfigPath, "utf-8");
+    const brand = JSON.parse(brandRaw);
+    const enabledPlugins = Array.isArray(account.enabledPlugins)
+        ? account.enabledPlugins.slice().sort()
+        : [];
+    const tier = typeof account.tier === "string" ? account.tier : null;
+    const adminModel = typeof account.adminModel === "string" ? account.adminModel : null;
+    const publicModel = typeof account.publicModel === "string" ? account.publicModel : null;
+    const productName = typeof brand.productName === "string" ? brand.productName : null;
+    const shipsPremiumBundles = Array.isArray(brand.shipsPremiumBundles)
+        ? brand.shipsPremiumBundles.slice().sort()
+        : [];
+    const platformSpecialistsDir = resolve(input.platformRoot, "templates", "specialists", "agents");
+    const installedPlatformSpecialists = listSpecialistFiles(platformSpecialistsDir);
+    const installedPremiumSpecialists = [];
+    for (const bundle of shipsPremiumBundles) {
+        const bundleAgentsDir = resolve(input.premiumPluginsRoot, bundle, "agents");
+        const names = listSpecialistFiles(bundleAgentsDir);
+        for (const name of names)
+            installedPremiumSpecialists.push({ bundle, name });
+    }
+    const registeredAgentTypes = listAgentRegistry(resolve(input.claudeConfigDir, "agents"));
+    return {
+        accountId: input.accountId,
+        tier,
+        adminModel,
+        publicModel,
+        enabledPlugins,
+        installedPlatformSpecialists,
+        installedPremiumSpecialists,
+        registeredAgentTypes,
+        brand: { productName, shipsPremiumBundles },
+        capturedAt: nowIso,
+    };
+}
+//# sourceMappingURL=capabilities-here.js.map

package/payload/platform/plugins/admin/mcp/dist/tools/capabilities-here.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"capabilities-here.js","sourceRoot":"","sources":["../../src/tools/capabilities-here.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAC5D,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAoC1C,SAAS,mBAAmB,CAAC,GAAW;IACtC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,EAAE,CAAC;IAChC,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,KAAK,MAAM,KAAK,IAAI,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC;QACrC,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QAC9B,MAAM,EAAE,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;QAC1B,IAAI,EAAE,CAAC,MAAM,EAAE,IAAI,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YACzC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC;QACvC,CAAC;aAAM,IAAI,EAAE,CAAC,WAAW,EAAE,IAAI,UAAU,CAAC,IAAI,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC,EAAE,CAAC;YACrE,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAClB,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC,IAAI,EAAE,CAAC;AACpB,CAAC;AAED,SAAS,iBAAiB,CAAC,GAAW;IACpC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,EAAE,CAAC;IAChC,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,KAAK,MAAM,KAAK,IAAI,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC;QACrC,IAAI,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC;YAAE,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC;IAClE,CAAC;IACD,OAAO,GAAG,CAAC,IAAI,EAAE,CAAC;AACpB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,KAA4B,EAC5B,MAAc;IAEd,MAAM,UAAU,GAAG,MAAM,QAAQ,CAAC,KAAK,CAAC,iBAAiB,EAAE,OAAO,CAAC,CAAC;IACpE,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,UAAU,CAA4B,CAAC;IAClE,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,KAAK,CAAC,eAAe,EAAE,OAAO,CAAC,CAAC;IAChE,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAA4B,CAAC;IAE9D,MAAM,cAAc,GAAG,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,cAAc,CAAC;QAC1D,CAAC,CAAE,OAAO,CAAC,cAA2B,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE;QACrD,CAAC,CAAC,EAAE,CAAC;IACP,MAAM,IAAI,GAAG,OAAO,OAAO,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;IACpE,MAAM,UAAU,GAAG,OAAO,OAAO,CAAC,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC;IACtF,MAAM,WAAW,GAAG,OAAO,OAAO,CAAC,WAAW,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC;IACzF,MAAM,WAAW,GAAG,OAAO,KAAK,CAAC,WAAW,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC;IACrF,MAAM,mBAAmB,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,mBAAmB,CAAC;QAClE,CAAC,CAAE,KAAK,CAAC,mBAAgC,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE;QACxD,CAAC,CAAC,EAAE,CAAC;IAEP,MAAM,sBAAsB,GAAG,OAAO,CACpC,KAAK,CAAC,YAAY,EAClB,WAAW,EACX,aAAa,EACb,QAAQ,CACT,CAAC;IACF,MAAM,4BAA4B,GAAG,mBAAmB,CAAC,sBAAsB,CAAC,CAAC;IAEjF,MAAM,2BAA2B,GAA4C,EAAE,CAAC;IAChF,KAAK,MAAM,MAAM,IAAI,mBAAmB,EAAE,CAAC;QACzC,MAAM,eAAe,GAAG,OAAO,CAAC,KAAK,CAAC,kBAAkB,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC;QAC5E,MAAM,KAAK,GAAG,mBAAmB,CAAC,eAAe,CAAC,CAAC;QACnD,KAAK,MAAM,IAAI,IAAI,KAAK;YAAE,2BAA2B,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;IAC/E,CAAC;IAED,MAAM,oBAAoB,GAAG,iBAAiB,CAC5C,OAAO,CAAC,KAAK,CAAC,eAAe,EAAE,QAAQ,CAAC,CACzC,CAAC;IAEF,OAAO;QACL,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,IAAI;QACJ,UAAU;QACV,WAAW;QACX,cAAc;QACd,4BAA4B;QAC5B,2BAA2B;QAC3B,oBAAoB;QACpB,KAAK,EAAE,EAAE,WAAW,EAAE,mBAAmB,EAAE;QAC3C,UAAU,EAAE,MAAM;KACnB,CAAC;AACJ,CAAC"}

package/payload/platform/plugins/admin/skills/capabilities-here/SKILL.md

@@ -0,0 +1,31 @@
+---
+name: capabilities-here
+description: Use when grounding any claim about what is installed on the current account — enabled plugins, available specialists, registered Claude Code agent types, brand, tier, models. Call the `capabilities-here` tool; the JSON it returns is the authoritative install snapshot. Never infer install state from the platform-architecture skill (that skill is the install catalogue, not evidence of what is enabled here).
+---
+
+# capabilities-here
+
+The `capabilities-here` admin MCP tool returns a single JSON object describing the live install state on the current account. Call it whenever you are about to:
+
+- Tell the operator what you can or cannot do here.
+- Decide whether a specialist exists before dispatching it.
+- Say which plugins are available on this account.
+- Compare the install against a catalogue claim from `platform-architecture`.
+
+## How to use
+
+Call `mcp__plugin_admin_admin__capabilities-here` with no arguments. The tool reads:
+
+- `account.json` for `enabledPlugins`, `tier`, `adminModel`, `publicModel`.
+- `brand.json` for `productName` and `shipsPremiumBundles`.
+- `platform/templates/specialists/agents/` for `installedPlatformSpecialists`.
+- Each enabled premium bundle's `agents/` for `installedPremiumSpecialists`.
+- `$CLAUDE_CONFIG_DIR/agents/` for `registeredAgentTypes` (the same registry the Agent tool resolves against).
+
+Returns one JSON object with those fields plus `accountId`, `capturedAt`, and the `brand` block. No LLM in the resolution path; pure disk + JSON reads.
+
+## Boundary against `platform-architecture`
+
+`platform-architecture` is the install catalogue — every plugin, skill, and specialist the platform can ship. It is not evidence that any of them is enabled here. For documented surface (how a plugin works, what a role is for) cite `platform-architecture` with the `Source:` URL. For what is actually installed on this account, cite `capabilities-here`.
+
+When the operator asks "what can you do" or "what plugins are enabled" or "do you have X", the answer comes from `capabilities-here`, not from this skill or from `platform-architecture`.

package/payload/platform/plugins/admin/skills/platform-architecture/SKILL.md

@@ -1,14 +1,18 @@
 ---
 name: platform-architecture
-description: Use when grounding any claim about what Maxy is, how the platform is built, how plugins/skills/specialists work, how install/deploy runs, or any other product-architecture fact. The body of this skill is the only permissible source for such claims. Cite the `Source:` URL inline.
-content-hash: sha256:f26ae06dff1c5b82b674893120da0454280946709391d6f9f79051f48e6f40e0
+description: Use when grounding any documented-surface claim about what Maxy ships — plugins, skills, specialists, install/deploy flows, internals. This is the install catalogue, not evidence of what is enabled on the current account. For install state on this account, call `capabilities-here`; for documented surface, cite the `Source:` URL inline.
+content-hash: sha256:b26da3e924270e5b1492f4c822c2e45e681b29f535c021c2cecb97ed2eabcda6
+brand: maxy-code
+product-name: Maxy
 ---
 
-# Platform architecture (reference)
+# Maxy platform architecture (catalogue)
 
-This skill is generated. Its body is the concatenated source markdown for every public Maxy docs page, emitted by `docs/scripts/copy-docs.mjs` as `docs/public/llms-full.txt` and assembled here by `maxy-code/scripts/assemble-architecture-skill.mjs`. Do not hand-edit — the drift gate in `platform/scripts/check-architecture-skill-no-drift.mjs` will fail CI.
+This skill is the install catalogue — every surface the platform can ship. It is not evidence of what is installed on the current account. Cite for documented surface. For 'what is installed here' / 'what can you do', call `capabilities-here` and read `account-manage`; do not infer install state from this body.
 
-When you load this skill to ground a factual claim, cite the `Source:` URL printed above the block you drew from. The URL is the canonical public docs page; relay it as a markdown link in your reply. Training-data recall is not a permitted source — the body below is.
+This skill is generated. Its body is the concatenated source markdown for every public Maxy docs page, emitted by `docs/scripts/copy-docs.mjs` as `docs/public/llms-full.maxy-code.txt` and assembled here by `maxy-code/scripts/assemble-architecture-skill.mjs`. Do not hand-edit — the drift gate in `platform/scripts/check-architecture-skill-no-drift.mjs` will fail CI.
+
+When you load this skill to ground a factual claim, cite the `Source:` URL printed above the block you drew from. The URL is the canonical public docs page (https://docs.getmaxy.com); relay it as a markdown link in your reply. Training-data recall is not a permitted source — the body below is.
 
 ---
 # Maxy Documentation — full corpus
@@ -145,18 +149,26 @@ Plugins are installed and managed through conversation. You can add marketplace
 
 ## Roles
 
-Maxy has six roles it can dispatch for specific tasks — like members of your team. You don't need to configure or manage them — Maxy decides when to use each role and handles everything automatically. You may see activity like "Dispatching personal-assistant..." in the chat timeline when this happens.
+Maxy ships twelve roles it can dispatch for specific tasks — like members of your team. You don't need to configure or manage them — Maxy decides when to use each role and handles everything automatically. You may see activity like "Dispatching personal-assistant..." in the chat timeline when this happens.
+
+The catalogue below is what the platform ships. It is not evidence of what is installed on the current account. For the live install set on this account, ask Maxy to call `capabilities-here`.
 
 | Role | What it does |
 |------|-------------|
-| Personal Assistant | Scheduling, platform administration, messaging channels, and browser automation |
-| Project Manager | Task and project management — creating, tracking, and completing work items |
-| Research Assistant | Web research, knowledge management, and visual production |
-| Content Producer | Image generation, PDF output, and static-site hosting from prepared archives |
-| Librarian | Foreground ingester for the memory graph — owns document ingestion (PDF / text / web), conversation-transcript ingestion (WhatsApp, Telegram, Signal, iMessage, Slack, Zoom, meeting minutes, LinkedIn DMs), LinkedIn Basic Data Exports, and post-unzip trees the admin agent forwards. Returns a structured outcome to admin per ingest. |
-| Database Operator | Background recorder for the memory graph — a Stop hook fires this specialist as a hidden PTY after every completed admin turn, and it writes whatever the turn implied into the graph. The admin agent itself never writes; it asks, listens, and acts on what the recorder has already captured. |
-
-Roles are installed during setup and listed when Maxy introduces itself. Some premium plugins add their own specialists (e.g. the writer-craft plugin adds a manuscript reviewer). Roles installed mid-session become active from the next session.
+| Archive Ingest Operator | Ingests bulk external archives — Obsidian, ICS, X, Notion — and surfaces schema-mapping ambiguity rather than catching all unmapped relations as :MENTIONS. |
+| Citation Auditor | Audits :TimelineEvent rows for missing citations and writes either citations directly or a CitationProposal stub. |
+| Coding Assistant | Runs shell commands, drives git repositories, and reads or edits code on your behalf — the specialist you reach for when the work belongs in a developer terminal. |
+| Compiled Truth Rewriter | Recomputes a node's compiledTruth (and public twin where applicable) from its 90-day timeline plus optional operator hints. |
+| Content Producer | Produces visual output from your graph: generates images, renders pages to PDF, and hosts static websites you upload as a zip. |
+| Database Operator | Executes graph writes on admin's behalf when delegated via the Task tool — admin names each write, the specialist runs it. |
+| Librarian | Owns foreground ingest of documents, conversation transcripts, and external archives into the memory graph. |
+| Personal Assistant | Handles the operational tasks you'd give a personal assistant: scheduling meetings, managing your platform settings, connecting messaging channels, and completing browser-based tasks on your behalf. |
+| Project Manager | Manages your tasks, projects, sessions, and workflows: linking work to people and goals, and keeping everything organised. |
+| Public Session Reviewer | Reads a gated public-agent transcript and dispatches database-operator for each per-visitor memory write. |
+| Research Assistant | Researches topics online, manages your knowledge graph, and produces supporting visuals. |
+| Typed Edge Classifier | Reads recently-written prose nodes and writes typed edges from a closed allowlist. |
+
+Roles are installed during setup and listed when Maxy introduces itself. Some premium bundles add their own specialists (e.g. the `real-agent` bundle adds a listing curator, negotiator, valuer, compliance officer, and buyer-enquiry public agent). Roles installed mid-session become active from the next session.
 
 ## Memory
 
@@ -230,6 +242,8 @@ Each session row also carries a small muted timestamp crumb under the name showi
 
 `verified=true` requires `master-fd=closed` AND `fdDelta>=1` AND `trackerRemoved=true`. `master-fd=close-failed` is logged at error level (`[rc-spawn-error]` prefix) — never swallowed; the next post-archive sweep is the catch-net.
 
+**Cross-arm `[rc-life]` schema (Task 562).** Both rc-spawn arms (the legacy node-pty one above and a new isolated `script-scope` arm exposed via the dashboard A/B toggle next to "New session") plus the rc-daemon emit a shared log shape so the populations can be compared from `server.log` alone. One spawn's full lifeline is `grep <unitToken>`; one arm's signature is `grep 'source=<arm>'`. The new `script-scope` arm spawns via the daemon's mechanism — `systemdSpawn` + the same `script(1)` wrap — and the manager holds zero fds. Capture files are retained at `~/.<brand>/logs/spawn-<unitToken>.log` for post-mortem. Full schema and operator runbook in [`.docs/rc-life-observability.md`](../../../.docs/rc-life-observability.md).
+
 **Post-archive fd sweep (Task 558).** Independent of spawn/archive request traffic, the manager runs a 60 s sweep that walks both directions of the master-fd invariant:
 
 - `[fd-audit] op=orphan-master sessionId=<8> pid=<n> archivedAt=<ms> heldSinceArchiveMs=<n> fd=<n|unknown>` — fires per tracker whose row is archived (the leak).
@@ -305,6 +319,8 @@ A plugin extends what Maxy can do. Each plugin adds a focused capability — con
 
 Maxy's own capabilities are plugins too. Marketplace plugins (like Stripe) work the same way — Maxy manages all of them through conversation.
 
+The tables below are the install catalogue — every plugin the platform can ship. They are not evidence of what is enabled on the current account. For the live install set, ask Maxy to call `capabilities-here`.
+
 ## Plugin Groups
 
 ### Core (always active)

package/payload/platform/plugins/docs/references/platform.md

@@ -37,18 +37,26 @@ Plugins are installed and managed through conversation. You can add marketplace
 
 ## Roles
 
-{{productName}} has six roles it can dispatch for specific tasks — like members of your team. You don't need to configure or manage them — {{productName}} decides when to use each role and handles everything automatically. You may see activity like "Dispatching personal-assistant..." in the chat timeline when this happens.
+{{productName}} ships twelve roles it can dispatch for specific tasks — like members of your team. You don't need to configure or manage them — {{productName}} decides when to use each role and handles everything automatically. You may see activity like "Dispatching personal-assistant..." in the chat timeline when this happens.
+
+The catalogue below is what the platform ships. It is not evidence of what is installed on the current account. For the live install set on this account, ask {{productName}} to call `capabilities-here`.
 
 | Role | What it does |
 |------|-------------|
-| Personal Assistant | Scheduling, platform administration, messaging channels, and browser automation |
-| Project Manager | Task and project management — creating, tracking, and completing work items |
-| Research Assistant | Web research, knowledge management, and visual production |
-| Content Producer | Image generation, PDF output, and static-site hosting from prepared archives |
-| Librarian | Foreground ingester for the memory graph — owns document ingestion (PDF / text / web), conversation-transcript ingestion (WhatsApp, Telegram, Signal, iMessage, Slack, Zoom, meeting minutes, LinkedIn DMs), LinkedIn Basic Data Exports, and post-unzip trees the admin agent forwards. Returns a structured outcome to admin per ingest. |
-| Database Operator | Background recorder for the memory graph — a Stop hook fires this specialist as a hidden PTY after every completed admin turn, and it writes whatever the turn implied into the graph. The admin agent itself never writes; it asks, listens, and acts on what the recorder has already captured. |
-
-Roles are installed during setup and listed when {{productName}} introduces itself. Some premium plugins add their own specialists (e.g. the writer-craft plugin adds a manuscript reviewer). Roles installed mid-session become active from the next session.
+| Archive Ingest Operator | Ingests bulk external archives — Obsidian, ICS, X, Notion — and surfaces schema-mapping ambiguity rather than catching all unmapped relations as :MENTIONS. |
+| Citation Auditor | Audits :TimelineEvent rows for missing citations and writes either citations directly or a CitationProposal stub. |
+| Coding Assistant | Runs shell commands, drives git repositories, and reads or edits code on your behalf — the specialist you reach for when the work belongs in a developer terminal. |
+| Compiled Truth Rewriter | Recomputes a node's compiledTruth (and public twin where applicable) from its 90-day timeline plus optional operator hints. |
+| Content Producer | Produces visual output from your graph: generates images, renders pages to PDF, and hosts static websites you upload as a zip. |
+| Database Operator | Executes graph writes on admin's behalf when delegated via the Task tool — admin names each write, the specialist runs it. |
+| Librarian | Owns foreground ingest of documents, conversation transcripts, and external archives into the memory graph. |
+| Personal Assistant | Handles the operational tasks you'd give a personal assistant: scheduling meetings, managing your platform settings, connecting messaging channels, and completing browser-based tasks on your behalf. |
+| Project Manager | Manages your tasks, projects, sessions, and workflows: linking work to people and goals, and keeping everything organised. |
+| Public Session Reviewer | Reads a gated public-agent transcript and dispatches database-operator for each per-visitor memory write. |
+| Research Assistant | Researches topics online, manages your knowledge graph, and produces supporting visuals. |
+| Typed Edge Classifier | Reads recently-written prose nodes and writes typed edges from a closed allowlist. |
+
+Roles are installed during setup and listed when {{productName}} introduces itself. Some premium bundles add their own specialists (e.g. the `real-agent` bundle adds a listing curator, negotiator, valuer, compliance officer, and buyer-enquiry public agent). Roles installed mid-session become active from the next session.
 
 ## Memory
 
@@ -122,6 +130,8 @@ Each session row also carries a small muted timestamp crumb under the name showi
 
 `verified=true` requires `master-fd=closed` AND `fdDelta>=1` AND `trackerRemoved=true`. `master-fd=close-failed` is logged at error level (`[rc-spawn-error]` prefix) — never swallowed; the next post-archive sweep is the catch-net.
 
+**Cross-arm `[rc-life]` schema (Task 562).** Both rc-spawn arms (the legacy node-pty one above and a new isolated `script-scope` arm exposed via the dashboard A/B toggle next to "New session") plus the rc-daemon emit a shared log shape so the populations can be compared from `server.log` alone. One spawn's full lifeline is `grep <unitToken>`; one arm's signature is `grep 'source=<arm>'`. The new `script-scope` arm spawns via the daemon's mechanism — `systemdSpawn` + the same `script(1)` wrap — and the manager holds zero fds. Capture files are retained at `~/.<brand>/logs/spawn-<unitToken>.log` for post-mortem. Full schema and operator runbook in [`.docs/rc-life-observability.md`](../../../.docs/rc-life-observability.md).
+
 **Post-archive fd sweep (Task 558).** Independent of spawn/archive request traffic, the manager runs a 60 s sweep that walks both directions of the master-fd invariant:
 
 - `[fd-audit] op=orphan-master sessionId=<8> pid=<n> archivedAt=<ms> heldSinceArchiveMs=<n> fd=<n|unknown>` — fires per tracker whose row is archived (the leak).

package/payload/platform/plugins/docs/references/plugins-guide.md

@@ -6,6 +6,8 @@ A plugin extends what {{productName}} can do. Each plugin adds a focused capabil
 
 {{productName}}'s own capabilities are plugins too. Marketplace plugins (like Stripe) work the same way — {{productName}} manages all of them through conversation.
 
+The tables below are the install catalogue — every plugin the platform can ship. They are not evidence of what is enabled on the current account. For the live install set, ask {{productName}} to call `capabilities-here`.
+
 ## Plugin Groups
 
 ### Core (always active)

package/payload/platform/scripts/check-architecture-skill-no-drift.mjs

@@ -1,20 +1,21 @@
 #!/usr/bin/env node
-/**
- * check-architecture-skill-no-drift.mjs — prepublishOnly gate.
- *
- * The platform-architecture skill at
- *   maxy-code/platform/plugins/admin/skills/platform-architecture/SKILL.md
- * is a generated artefact. Its body is the verbatim content of
- * `docs/public/llms-full.txt`, wrapped in a short header that carries a
- * sha256 of the body. The generator lives at
- *   maxy-code/scripts/assemble-architecture-skill.mjs
- *
- * This gate runs the generator against the current tree (after first
- * regenerating `docs/public/llms-full.txt` via `docs/scripts/copy-docs.mjs`
- * so the source is fresh) and asserts the bytes match the checked-in
- * SKILL.md. Fails if someone hand-edited the SKILL.md or updated the
- * source docs without re-running the release flow.
- */
+// check-architecture-skill-no-drift.mjs — prepublishOnly gate.
+//
+// The per-brand platform-architecture skill body is a generated artefact.
+// Source: docs/public/llms-full.<brand>.txt (emitted by copy-docs.mjs).
+// Generator: maxy-code/scripts/assemble-architecture-skill.mjs --brand <brand>.
+//
+// For brand=maxy-code, the gate also asserts byte-equality with the
+// checked-in skill source at platform/plugins/admin/skills/platform-architecture/SKILL.md
+// (back-compat with the existing release flow).
+//
+// For other brands, the gate asserts the assembled cache body exists and
+// contains the brand product name + the catalogue-boundary sentence.
+//
+// Usage:
+//   node platform/scripts/check-architecture-skill-no-drift.mjs                  # all brands
+//   node platform/scripts/check-architecture-skill-no-drift.mjs --brand maxy-code
+//   node platform/scripts/check-architecture-skill-no-drift.mjs --brand realagent-code
 
 import { readFileSync, existsSync } from 'node:fs';
 import { dirname, resolve } from 'node:path';
@@ -25,43 +26,89 @@ import { assemble } from '../../scripts/assemble-architecture-skill.mjs';
 const __dirname = dirname(fileURLToPath(import.meta.url));
 const MAXY_CODE_ROOT = resolve(__dirname, '..', '..');
 const REPO_ROOT = resolve(MAXY_CODE_ROOT, '..');
-const LLMS_FULL = resolve(REPO_ROOT, 'docs/public/llms-full.txt');
 const COPY_DOCS = resolve(REPO_ROOT, 'docs/scripts/copy-docs.mjs');
-const SKILL_PATH = resolve(
-  MAXY_CODE_ROOT,
-  'platform/plugins/admin/skills/platform-architecture/SKILL.md',
-);
+
+const args = process.argv.slice(2);
+const brandIdx = args.indexOf('--brand');
+const REQUESTED_BRAND = brandIdx === -1 ? null : args[brandIdx + 1];
+
+const CATALOGUE_BOUNDARY_SUBSTRING = 'not evidence of what is installed on the current account';
+
+const BRANDS = [
+  {
+    key: 'maxy-code',
+    productName: 'Maxy',
+    docsUrl: 'https://docs.getmaxy.com',
+    sourceSkillPath: resolve(
+      MAXY_CODE_ROOT,
+      'platform/plugins/admin/skills/platform-architecture/SKILL.md',
+    ),
+  },
+  {
+    key: 'realagent-code',
+    productName: 'Real Agent',
+    docsUrl: 'https://docs.realagent.network',
+    sourceSkillPath: null,
+  },
+];
 
 function fail(msg) {
   console.error(`[check-architecture-skill-no-drift] ERROR: ${msg}`);
   process.exit(1);
 }
 
-if (!existsSync(COPY_DOCS)) {
-  fail(`docs mirror script missing: ${COPY_DOCS}`);
-}
+if (!existsSync(COPY_DOCS)) fail(`docs mirror script missing: ${COPY_DOCS}`);
 
-// Regenerate the docs corpus so the comparison runs against current sources.
 execFileSync('node', [COPY_DOCS], { stdio: 'pipe' });
 
-if (!existsSync(LLMS_FULL)) {
-  fail(`expected ${LLMS_FULL} after running copy-docs.mjs`);
-}
-if (!existsSync(SKILL_PATH)) {
-  fail(`expected ${SKILL_PATH} (run scripts/assemble-architecture-skill.mjs)`);
-}
+const ASSEMBLER = resolve(MAXY_CODE_ROOT, 'scripts/assemble-architecture-skill.mjs');
 
-const body = readFileSync(LLMS_FULL, 'utf8');
-const expected = assemble(body);
-const actual = readFileSync(SKILL_PATH, 'utf8');
+const brandsToCheck = REQUESTED_BRAND
+  ? BRANDS.filter((b) => b.key === REQUESTED_BRAND)
+  : BRANDS;
 
-if (expected !== actual) {
-  fail(
-    `${SKILL_PATH} is out of sync with docs/public/llms-full.txt. ` +
-      `Run \`node maxy-code/scripts/assemble-architecture-skill.mjs\` and commit the result.`,
-  );
+if (REQUESTED_BRAND && brandsToCheck.length === 0) {
+  fail(`unknown brand: ${REQUESTED_BRAND}`);
 }
 
-console.log(
-  `[check-architecture-skill-no-drift] ok (${actual.length} bytes match)`,
-);
+for (const brand of brandsToCheck) {
+  const corpus = resolve(REPO_ROOT, `docs/public/llms-full.${brand.key}.txt`);
+  if (!existsSync(corpus)) fail(`expected ${corpus} after running copy-docs.mjs`);
+
+  // Re-run assembler for this brand. The assembler writes the cache file;
+  // we then compare its body to a fresh in-process assemble() call to catch
+  // drift between the assembler module and the cache write.
+  execFileSync('node', [ASSEMBLER, '--brand', brand.key], { stdio: 'pipe' });
+
+  const body = readFileSync(corpus, 'utf8');
+  const expected = assemble(body, {
+    productName: brand.productName,
+    brand: brand.key,
+    docsUrl: brand.docsUrl,
+  });
+
+  if (!expected.includes(CATALOGUE_BOUNDARY_SUBSTRING)) {
+    fail(`brand=${brand.key}: assembled body missing catalogue-boundary sentence`);
+  }
+  if (!expected.includes(brand.productName)) {
+    fail(`brand=${brand.key}: assembled body missing product name ${brand.productName}`);
+  }
+
+  if (brand.sourceSkillPath) {
+    if (!existsSync(brand.sourceSkillPath)) {
+      fail(
+        `brand=${brand.key}: source skill missing at ${brand.sourceSkillPath}; ` +
+          `run \`node maxy-code/scripts/assemble-architecture-skill.mjs\``,
+      );
+    }
+    const actual = readFileSync(brand.sourceSkillPath, 'utf8');
+    if (expected !== actual) {
+      fail(
+        `brand=${brand.key}: ${brand.sourceSkillPath} out of sync. ` +
+          `Run \`node maxy-code/scripts/assemble-architecture-skill.mjs\` and commit.`,
+      );
+    }
+  }
+
+  console.log(`[check-architecture-skill-no-drift] ok brand=${brand.key} (${expected.length} bytes)`);
+}

package/payload/platform/scripts/check-roles-doc-completeness.mjs

@@ -0,0 +1,96 @@
+#!/usr/bin/env node
+// check-roles-doc-completeness.mjs
+// Asserts every specialist on disk has a row in the authoritative roles doc.
+// Brands: --brand maxy (default) | --brand real-agent
+import { readFileSync, readdirSync, statSync, existsSync } from 'node:fs';
+import { resolve, join, dirname } from 'node:path';
+import { fileURLToPath } from 'node:url';
+
+const here = dirname(fileURLToPath(import.meta.url));
+const maxyCodeRoot = resolve(here, '..', '..');
+
+const args = process.argv.slice(2);
+const brandIdx = args.indexOf('--brand');
+const brand = brandIdx === -1 ? 'maxy' : args[brandIdx + 1];
+
+const config = {
+  maxy: {
+    diskDir: resolve(maxyCodeRoot, 'platform/templates/specialists/agents'),
+    docPath: resolve(maxyCodeRoot, 'platform/plugins/docs/references/platform.md'),
+  },
+  'real-agent': {
+    diskDir: resolve(maxyCodeRoot, 'premium-plugins/real-agent/agents'),
+    docPath: resolve(maxyCodeRoot, 'premium-plugins/real-agent/docs/references/real-agent-roles.md'),
+  },
+};
+
+if (!config[brand]) {
+  console.error(`[check-roles-doc] unknown brand: ${brand}`);
+  process.exit(2);
+}
+
+const { diskDir, docPath } = config[brand];
+const TABLE_HEADER = '| Role | What it does |';
+
+if (!existsSync(diskDir)) {
+  console.error(`[check-roles-doc] disk dir missing: ${diskDir}`);
+  process.exit(2);
+}
+
+function listSpecialists(dir) {
+  const out = [];
+  for (const entry of readdirSync(dir)) {
+    const full = join(dir, entry);
+    const st = statSync(full);
+    if (st.isFile() && entry.endsWith('.md')) {
+      out.push(entry.replace(/\.md$/, ''));
+    } else if (st.isDirectory()) {
+      if (existsSync(join(full, 'IDENTITY.md'))) out.push(entry);
+    }
+  }
+  return out.sort();
+}
+
+const diskSpecialists = listSpecialists(diskDir);
+
+if (!existsSync(docPath)) {
+  console.error(`[check-roles-doc] doc missing: ${docPath}`);
+  console.error(`[check-roles-doc] disk specialists (${diskSpecialists.length}): ${diskSpecialists.join(', ')}`);
+  process.exit(1);
+}
+
+const docBody = readFileSync(docPath, 'utf8');
+
+function extractRoleRows(body, header) {
+  const lines = body.split(/\r?\n/);
+  const start = lines.findIndex((l) => l.trim() === header.trim());
+  if (start === -1) return [];
+  const rows = [];
+  for (let i = start + 2; i < lines.length; i++) {
+    const ln = lines[i];
+    if (!ln.startsWith('|')) break;
+    const cells = ln.split('|').map((c) => c.trim()).filter(Boolean);
+    if (cells.length >= 2) rows.push(cells[0]);
+  }
+  return rows;
+}
+
+const rowLabels = extractRoleRows(docBody, TABLE_HEADER);
+
+const slugify = (s) => s.toLowerCase().replace(/[^a-z0-9]+/g, '-').replace(/^-|-$/g, '');
+const rowSlugs = new Set(rowLabels.map(slugify));
+
+const missing = diskSpecialists.filter((s) => !rowSlugs.has(slugify(s)));
+const stale = rowLabels.filter((r) => !diskSpecialists.some((s) => slugify(s) === slugify(r)));
+
+if (missing.length === 0 && stale.length === 0) {
+  console.log(`[check-roles-doc] brand=${brand} ok — ${diskSpecialists.length} specialists documented`);
+  process.exit(0);
+}
+
+console.error(`[check-roles-doc] brand=${brand} FAIL`);
+console.error(`  disk specialists (${diskSpecialists.length}): ${diskSpecialists.join(', ')}`);
+console.error(`  doc rows (${rowLabels.length}): ${rowLabels.join(', ')}`);
+if (missing.length) console.error(`  MISSING from doc: ${missing.join(', ')}`);
+if (stale.length) console.error(`  STALE in doc (no template): ${stale.join(', ')}`);
+process.exit(1);

package/payload/platform/scripts/check-specialist-tool-surface.mjs

@@ -50,7 +50,7 @@ function rootsFor(maxyCodeRoot) {
 // Mirrors CC_NATIVE_TOOLS in specialist-drift.ts. Listed exhaustively so a
 // new CC-native tool forces an explicit ledger update in both surfaces.
 const CC_NATIVE_TOOLS = new Set([
-  'Read', 'Write', 'Edit', 'Glob', 'Grep', 'Bash', 'BashOutput', 'KillShell',
+  'Read', 'Write', 'Edit', 'MultiEdit', 'Glob', 'Grep', 'Bash', 'BashOutput', 'KillShell',
   'Skill', 'WebSearch', 'WebFetch', 'Task', 'TodoWrite', 'NotebookEdit',
   'NotebookRead', 'AskUserQuestion',
 ]);

package/payload/platform/scripts/setup-account.sh

@@ -121,6 +121,12 @@ cat > "$ACCOUNT_SETTINGS" << SETTINGS_EOF
       }
     ],
     "PostToolUse": [
+      {
+        "matcher": "Agent",
+        "hooks": [
+          { "type": "command", "command": "bash $HOOKS_PATH/post-tool-use-agent.sh" }
+        ]
+      },
       {
         "matcher": "mcp__.*__.*-(export|import)-parse$",
         "hooks": [