@rubytech/create-maxy-code 0.1.214 → 0.1.219

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@rubytech/create-maxy-code",
-  "version": "0.1.214",
+  "version": "0.1.219",
   "description": "Install Maxy — AI for Productive People",
   "bin": {
     "create-maxy-code": "./dist/index.js"

package/payload/platform/lib/mcp-eager/dist/index.d.ts

@@ -20,41 +20,6 @@
  */
 /** Wire-format metadata key the Claude Code SDK reads. */
 export declare const ALWAYS_LOAD_META_KEY: "anthropic/alwaysLoad";
-/**
- * Admin-seat detection. The rc-daemon exports `MAXY_SESSION_ROLE=admin` and
- * `MAXY_SPECIALIST=""` for the orchestrator process and its MCP plugin
- * children; specialist spawns set `MAXY_SPECIALIST=<name>`. A plugin process
- * inheriting the env can therefore decide at registration AND invocation
- * time whether it is loaded inside the admin seat.
- *
- * Mirrors `isAdminSeat` in platform/plugins/admin/mcp/src/skill-resolution.ts
- * — this is a duplicate at the library layer so plugins that cannot import
- * from the admin plugin (a sibling, not a dependency) share the same rule.
- */
-export declare function isAdminSeat(env?: NodeJS.ProcessEnv): boolean;
-/**
- * MCP refusal envelope returned when the admin seat invokes a specialist-
- * owned tool. The text names the dispatch route so the model's next action
- * is the `Agent` dispatch rather than a dead end.
- */
-export declare function adminBlockedResponse(toolName: string, owner: string): {
-    content: {
-        type: "text";
-        text: string;
-    }[];
-    isError: true;
-};
-/**
- * Wrap a tool handler so any admin-seat invocation short-circuits with the
- * refusal envelope above and emits one `[admin-tool-gate]` line to stderr.
- *
- * Specialist seats pass through unchanged: this is the primitive Task 529
- * defines for closing the in-message authoring path that Task 516 could
- * not reach. The handler signature is preserved so existing call sites
- * substitute `eagerTool(... handler)` for `eagerTool(... withAdminGate(name,
- * owner, handler))` mechanically.
- */
-export declare function withAdminGate<H extends (...args: any[]) => any>(toolName: string, owner: string, handler: H): H;
 /**
  * Loose structural type for any object exposing a `registerTool` method. The
  * MCP SDK ships dual ESM/CJS packages with conditional exports, so importing
@@ -92,25 +57,5 @@ type LocalZodRawShape = Record<string, unknown>;
  * the consumer's own zod version) infers the handler args.
  */
 export declare function eagerTool<Args extends LocalZodRawShape>(server: EagerCapableServer, name: string, description: string, inputSchema: Args, handler: (...args: any[]) => any): void;
-/**
- * Loose structural type for the legacy four-arg `server.tool(name, desc,
- * schema, handler)` call shape — used when the admin seat must register a
- * specialist-owned tool as deferred (not eager) so it does not appear in
- * the admin's eager tool list.
- */
-type DeferredCapableServer = {
-    tool: (name: string, description: string, inputSchema: any, handler: (...args: any[]) => any) => any;
-};
-/**
- * Register a tool that is eager for specialists but deferred + admin-gated
- * for the admin seat. The owning specialist name is named here so the
- * refusal envelope (and the `[admin-tool-gate]` log line) carries it.
- *
- * Use for every tool whose owner is a specialist (database-operator, writer-
- * craft, research-assistant, personal-assistant, content-producer). The
- * admin seat sees the tool only via ToolSearch — and any invocation from the
- * admin seat refuses with the dispatch hint.
- */
-export declare function eagerToolGated<Args extends LocalZodRawShape>(server: EagerCapableServer & DeferredCapableServer, name: string, owner: string, description: string, inputSchema: Args, handler: (...args: any[]) => any): void;
 export {};
 //# sourceMappingURL=index.d.ts.map

package/payload/platform/lib/mcp-eager/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AACH,0DAA0D;AAC1D,eAAO,MAAM,oBAAoB,EAAG,sBAA+B,CAAC;AAEpE;;;;;;;;;;GAUG;AACH,wBAAgB,WAAW,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,OAAO,CAEzE;AAED;;;;GAIG;AACH,wBAAgB,oBAAoB,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG;IACrE,OAAO,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;IAC1C,OAAO,EAAE,IAAI,CAAC;CACf,CAYA;AAED;;;;;;;;;GASG;AAEH,wBAAgB,aAAa,CAAC,CAAC,SAAS,CAAC,GAAG,IAAI,EAAE,GAAG,EAAE,KAAK,GAAG,EAC7D,QAAQ,EAAE,MAAM,EAChB,KAAK,EAAE,MAAM,EACb,OAAO,EAAE,CAAC,GACT,CAAC,CAYH;AAED;;;;;;;GAOG;AAEH,KAAK,kBAAkB,GAAG;IAAE,YAAY,EAAE,CAAC,GAAG,IAAI,EAAE,GAAG,EAAE,KAAK,GAAG,CAAA;CAAE,CAAC;AAEpE;;;;;;;;;;GAUG;AACH,KAAK,gBAAgB,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AAEhD;;;;;;;;;;;;GAYG;AACH,wBAAgB,SAAS,CAAC,IAAI,SAAS,gBAAgB,EACrD,MAAM,EAAE,kBAAkB,EAC1B,IAAI,EAAE,MAAM,EACZ,WAAW,EAAE,MAAM,EACnB,WAAW,EAAE,IAAI,EAEjB,OAAO,EAAE,CAAC,GAAG,IAAI,EAAE,GAAG,EAAE,KAAK,GAAG,GAC/B,IAAI,CAUN;AAED;;;;;GAKG;AAEH,KAAK,qBAAqB,GAAG;IAAE,IAAI,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,WAAW,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC,GAAG,IAAI,EAAE,GAAG,EAAE,KAAK,GAAG,KAAK,GAAG,CAAA;CAAE,CAAC;AAEtI;;;;;;;;;GASG;AACH,wBAAgB,cAAc,CAAC,IAAI,SAAS,gBAAgB,EAC1D,MAAM,EAAE,kBAAkB,GAAG,qBAAqB,EAClD,IAAI,EAAE,MAAM,EACZ,KAAK,EAAE,MAAM,EACb,WAAW,EAAE,MAAM,EACnB,WAAW,EAAE,IAAI,EAEjB,OAAO,EAAE,CAAC,GAAG,IAAI,EAAE,GAAG,EAAE,KAAK,GAAG,GAC/B,IAAI,CAMN"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AACH,0DAA0D;AAC1D,eAAO,MAAM,oBAAoB,EAAG,sBAA+B,CAAC;AAEpE;;;;;;;GAOG;AAEH,KAAK,kBAAkB,GAAG;IAAE,YAAY,EAAE,CAAC,GAAG,IAAI,EAAE,GAAG,EAAE,KAAK,GAAG,CAAA;CAAE,CAAC;AAEpE;;;;;;;;;;GAUG;AACH,KAAK,gBAAgB,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AAEhD;;;;;;;;;;;;GAYG;AACH,wBAAgB,SAAS,CAAC,IAAI,SAAS,gBAAgB,EACrD,MAAM,EAAE,kBAAkB,EAC1B,IAAI,EAAE,MAAM,EACZ,WAAW,EAAE,MAAM,EACnB,WAAW,EAAE,IAAI,EAEjB,OAAO,EAAE,CAAC,GAAG,IAAI,EAAE,GAAG,EAAE,KAAK,GAAG,GAC/B,IAAI,CAUN"}

package/payload/platform/lib/mcp-eager/dist/index.js

@@ -1,11 +1,7 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.ALWAYS_LOAD_META_KEY = void 0;
-exports.isAdminSeat = isAdminSeat;
-exports.adminBlockedResponse = adminBlockedResponse;
-exports.withAdminGate = withAdminGate;
 exports.eagerTool = eagerTool;
-exports.eagerToolGated = eagerToolGated;
 /**
  * MCP eager-load helper.
  *
@@ -28,59 +24,6 @@ exports.eagerToolGated = eagerToolGated;
  */
 /** Wire-format metadata key the Claude Code SDK reads. */
 exports.ALWAYS_LOAD_META_KEY = "anthropic/alwaysLoad";
-/**
- * Admin-seat detection. The rc-daemon exports `MAXY_SESSION_ROLE=admin` and
- * `MAXY_SPECIALIST=""` for the orchestrator process and its MCP plugin
- * children; specialist spawns set `MAXY_SPECIALIST=<name>`. A plugin process
- * inheriting the env can therefore decide at registration AND invocation
- * time whether it is loaded inside the admin seat.
- *
- * Mirrors `isAdminSeat` in platform/plugins/admin/mcp/src/skill-resolution.ts
- * — this is a duplicate at the library layer so plugins that cannot import
- * from the admin plugin (a sibling, not a dependency) share the same rule.
- */
-function isAdminSeat(env = process.env) {
-    return env.MAXY_SESSION_ROLE === "admin" && !(env.MAXY_SPECIALIST && env.MAXY_SPECIALIST.length > 0);
-}
-/**
- * MCP refusal envelope returned when the admin seat invokes a specialist-
- * owned tool. The text names the dispatch route so the model's next action
- * is the `Agent` dispatch rather than a dead end.
- */
-function adminBlockedResponse(toolName, owner) {
-    return {
-        content: [
-            {
-                type: "text",
-                text: `Tool \`${toolName}\` is owned by the \`${owner}\` specialist and is not callable from the admin seat. ` +
-                    `Dispatch \`${owner}\` with the Agent tool and pass the work as the brief.`,
-            },
-        ],
-        isError: true,
-    };
-}
-/**
- * Wrap a tool handler so any admin-seat invocation short-circuits with the
- * refusal envelope above and emits one `[admin-tool-gate]` line to stderr.
- *
- * Specialist seats pass through unchanged: this is the primitive Task 529
- * defines for closing the in-message authoring path that Task 516 could
- * not reach. The handler signature is preserved so existing call sites
- * substitute `eagerTool(... handler)` for `eagerTool(... withAdminGate(name,
- * owner, handler))` mechanically.
- */
-// eslint-disable-next-line @typescript-eslint/no-explicit-any
-function withAdminGate(toolName, owner, handler) {
-    // eslint-disable-next-line @typescript-eslint/no-explicit-any
-    const wrapped = ((...args) => {
-        if (isAdminSeat(process.env)) {
-            process.stderr.write(`[admin-tool-gate] role=admin tool=${toolName} decision=block reason=specialist-owned owner=${owner}\n`);
-            return adminBlockedResponse(toolName, owner);
-        }
-        return handler(...args);
-    });
-    return wrapped;
-}
 /**
  * Register an MCP tool that the Claude Code SDK eager-loads into the
  * model's prompt at session boot, bypassing the ToolSearch round-trip.
@@ -103,23 +46,4 @@ handler) {
         _meta: { [exports.ALWAYS_LOAD_META_KEY]: true },
     }, handler);
 }
-/**
- * Register a tool that is eager for specialists but deferred + admin-gated
- * for the admin seat. The owning specialist name is named here so the
- * refusal envelope (and the `[admin-tool-gate]` log line) carries it.
- *
- * Use for every tool whose owner is a specialist (database-operator, writer-
- * craft, research-assistant, personal-assistant, content-producer). The
- * admin seat sees the tool only via ToolSearch — and any invocation from the
- * admin seat refuses with the dispatch hint.
- */
-function eagerToolGated(server, name, owner, description, inputSchema, 
-// eslint-disable-next-line @typescript-eslint/no-explicit-any
-handler) {
-    if (isAdminSeat(process.env)) {
-        server.tool(name, description, inputSchema, withAdminGate(name, owner, handler));
-        return;
-    }
-    eagerTool(server, name, description, inputSchema, handler);
-}
 //# sourceMappingURL=index.js.map

package/payload/platform/lib/mcp-eager/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";;;AAkCA,kCAEC;AAOD,oDAeC;AAaD,sCAgBC;AAuCD,8BAiBC;AAqBD,wCAcC;AAlLD;;;;;;;;;;;;;;;;;;;GAmBG;AACH,0DAA0D;AAC7C,QAAA,oBAAoB,GAAG,sBAA+B,CAAC;AAEpE;;;;;;;;;;GAUG;AACH,SAAgB,WAAW,CAAC,MAAyB,OAAO,CAAC,GAAG;IAC9D,OAAO,GAAG,CAAC,iBAAiB,KAAK,OAAO,IAAI,CAAC,CAAC,GAAG,CAAC,eAAe,IAAI,GAAG,CAAC,eAAe,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;AACvG,CAAC;AAED;;;;GAIG;AACH,SAAgB,oBAAoB,CAAC,QAAgB,EAAE,KAAa;IAIlE,OAAO;QACL,OAAO,EAAE;YACP;gBACE,IAAI,EAAE,MAAM;gBACZ,IAAI,EACF,UAAU,QAAQ,wBAAwB,KAAK,yDAAyD;oBACxG,cAAc,KAAK,wDAAwD;aAC9E;SACF;QACD,OAAO,EAAE,IAAI;KACd,CAAC;AACJ,CAAC;AAED;;;;;;;;;GASG;AACH,8DAA8D;AAC9D,SAAgB,aAAa,CAC3B,QAAgB,EAChB,KAAa,EACb,OAAU;IAEV,8DAA8D;IAC9D,MAAM,OAAO,GAAG,CAAC,CAAC,GAAG,IAAW,EAAE,EAAE;QAClC,IAAI,WAAW,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;YAC7B,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,qCAAqC,QAAQ,iDAAiD,KAAK,IAAI,CACxG,CAAC;YACF,OAAO,oBAAoB,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;QAC/C,CAAC;QACD,OAAO,OAAO,CAAC,GAAG,IAAI,CAAC,CAAC;IAC1B,CAAC,CAAiB,CAAC;IACnB,OAAO,OAAO,CAAC;AACjB,CAAC;AA0BD;;;;;;;;;;;;GAYG;AACH,SAAgB,SAAS,CACvB,MAA0B,EAC1B,IAAY,EACZ,WAAmB,EACnB,WAAiB;AACjB,8DAA8D;AAC9D,OAAgC;IAEhC,MAAM,CAAC,YAAY,CACjB,IAAI,EACJ;QACE,WAAW;QACX,WAAW;QACX,KAAK,EAAE,EAAE,CAAC,4BAAoB,CAAC,EAAE,IAAI,EAAE;KACxC,EACD,OAAO,CACR,CAAC;AACJ,CAAC;AAWD;;;;;;;;;GASG;AACH,SAAgB,cAAc,CAC5B,MAAkD,EAClD,IAAY,EACZ,KAAa,EACb,WAAmB,EACnB,WAAiB;AACjB,8DAA8D;AAC9D,OAAgC;IAEhC,IAAI,WAAW,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QAC7B,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,WAAW,EAAE,WAAW,EAAE,aAAa,CAAC,IAAI,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC;QACjF,OAAO;IACT,CAAC;IACD,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,WAAW,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC;AAC7D,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";;;AA4DA,8BAiBC;AA7ED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,0DAA0D;AAC7C,QAAA,oBAAoB,GAAG,sBAA+B,CAAC;AA0BpE;;;;;;;;;;;;GAYG;AACH,SAAgB,SAAS,CACvB,MAA0B,EAC1B,IAAY,EACZ,WAAmB,EACnB,WAAiB;AACjB,8DAA8D;AAC9D,OAAgC;IAEhC,MAAM,CAAC,YAAY,CACjB,IAAI,EACJ;QACE,WAAW;QACX,WAAW;QACX,KAAK,EAAE,EAAE,CAAC,4BAAoB,CAAC,EAAE,IAAI,EAAE;KACxC,EACD,OAAO,CACR,CAAC;AACJ,CAAC"}

package/payload/platform/lib/mcp-eager/src/index.ts

@@ -21,72 +21,6 @@
 /** Wire-format metadata key the Claude Code SDK reads. */
 export const ALWAYS_LOAD_META_KEY = "anthropic/alwaysLoad" as const;
 
-/**
- * Admin-seat detection. The rc-daemon exports `MAXY_SESSION_ROLE=admin` and
- * `MAXY_SPECIALIST=""` for the orchestrator process and its MCP plugin
- * children; specialist spawns set `MAXY_SPECIALIST=<name>`. A plugin process
- * inheriting the env can therefore decide at registration AND invocation
- * time whether it is loaded inside the admin seat.
- *
- * Mirrors `isAdminSeat` in platform/plugins/admin/mcp/src/skill-resolution.ts
- * — this is a duplicate at the library layer so plugins that cannot import
- * from the admin plugin (a sibling, not a dependency) share the same rule.
- */
-export function isAdminSeat(env: NodeJS.ProcessEnv = process.env): boolean {
-  return env.MAXY_SESSION_ROLE === "admin" && !(env.MAXY_SPECIALIST && env.MAXY_SPECIALIST.length > 0);
-}
-
-/**
- * MCP refusal envelope returned when the admin seat invokes a specialist-
- * owned tool. The text names the dispatch route so the model's next action
- * is the `Agent` dispatch rather than a dead end.
- */
-export function adminBlockedResponse(toolName: string, owner: string): {
-  content: { type: "text"; text: string }[];
-  isError: true;
-} {
-  return {
-    content: [
-      {
-        type: "text",
-        text:
-          `Tool \`${toolName}\` is owned by the \`${owner}\` specialist and is not callable from the admin seat. ` +
-          `Dispatch \`${owner}\` with the Agent tool and pass the work as the brief.`,
-      },
-    ],
-    isError: true,
-  };
-}
-
-/**
- * Wrap a tool handler so any admin-seat invocation short-circuits with the
- * refusal envelope above and emits one `[admin-tool-gate]` line to stderr.
- *
- * Specialist seats pass through unchanged: this is the primitive Task 529
- * defines for closing the in-message authoring path that Task 516 could
- * not reach. The handler signature is preserved so existing call sites
- * substitute `eagerTool(... handler)` for `eagerTool(... withAdminGate(name,
- * owner, handler))` mechanically.
- */
-// eslint-disable-next-line @typescript-eslint/no-explicit-any
-export function withAdminGate<H extends (...args: any[]) => any>(
-  toolName: string,
-  owner: string,
-  handler: H,
-): H {
-  // eslint-disable-next-line @typescript-eslint/no-explicit-any
-  const wrapped = ((...args: any[]) => {
-    if (isAdminSeat(process.env)) {
-      process.stderr.write(
-        `[admin-tool-gate] role=admin tool=${toolName} decision=block reason=specialist-owned owner=${owner}\n`,
-      );
-      return adminBlockedResponse(toolName, owner);
-    }
-    return handler(...args);
-  }) as unknown as H;
-  return wrapped;
-}
-
 /**
  * Loose structural type for any object exposing a `registerTool` method. The
  * MCP SDK ships dual ESM/CJS packages with conditional exports, so importing
@@ -142,38 +76,3 @@ export function eagerTool<Args extends LocalZodRawShape>(
     handler,
   );
 }
-
-/**
- * Loose structural type for the legacy four-arg `server.tool(name, desc,
- * schema, handler)` call shape — used when the admin seat must register a
- * specialist-owned tool as deferred (not eager) so it does not appear in
- * the admin's eager tool list.
- */
-// eslint-disable-next-line @typescript-eslint/no-explicit-any
-type DeferredCapableServer = { tool: (name: string, description: string, inputSchema: any, handler: (...args: any[]) => any) => any };
-
-/**
- * Register a tool that is eager for specialists but deferred + admin-gated
- * for the admin seat. The owning specialist name is named here so the
- * refusal envelope (and the `[admin-tool-gate]` log line) carries it.
- *
- * Use for every tool whose owner is a specialist (database-operator, writer-
- * craft, research-assistant, personal-assistant, content-producer). The
- * admin seat sees the tool only via ToolSearch — and any invocation from the
- * admin seat refuses with the dispatch hint.
- */
-export function eagerToolGated<Args extends LocalZodRawShape>(
-  server: EagerCapableServer & DeferredCapableServer,
-  name: string,
-  owner: string,
-  description: string,
-  inputSchema: Args,
-  // eslint-disable-next-line @typescript-eslint/no-explicit-any
-  handler: (...args: any[]) => any,
-): void {
-  if (isAdminSeat(process.env)) {
-    server.tool(name, description, inputSchema, withAdminGate(name, owner, handler));
-    return;
-  }
-  eagerTool(server, name, description, inputSchema, handler);
-}

package/payload/platform/plugins/admin/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "admin",
-  "description": "Platform administration plugin. Provides system-status, public-hostname (deterministic Cloudflare public-URL resolver, single call returning the operator's canonical hostname so agents never guess property names on :CloudflareHostname nodes), publish-site (move an extracted static-site tree under <accountDir>/sites/<slug>/, emit one canonical path slug, and refresh llms.txt at the site root — typed refusal taxonomy replaces the prior skill-prose contract), brand-settings, account-manage, account-update, admin-add, admin-remove, admin-list, admin-update-pin, agent-list, agent-config-read, logs-read, plugin-read, skill-load (one-call resolve+read for SKILL.md by skill name, the canonical primitive for loading a named skill; plugin-read remains the reader for references/* and PLUGIN.md), store-skill (deterministic write counterpart to plugin-read; persists operator-authored skills as plugin files under the active account), session-reset, session-resume, wifi, action-approval tools (action-pending, action-approve, action-reject, action-edit), and session-retrospective-mark-complete (the deterministic sentinel the session-end Stop hook reads via JSONL grep to release the retrospective gate; admin calls it once per session after running the three-pass retrospective) for managing the Maxy platform.",
+  "description": "Platform administration plugin. Provides system-status, public-hostname (deterministic Cloudflare public-URL resolver, single call returning the operator's canonical hostname so agents never guess property names on :CloudflareHostname nodes), publish-site (move an extracted static-site tree under <accountDir>/sites/<slug>/, emit one canonical path slug, and refresh llms.txt at the site root — typed refusal taxonomy replaces the prior skill-prose contract), brand-settings, account-manage, capabilities-here (deterministic install-introspection — returns enabledPlugins, tier, models, installed platform + premium specialists, registered Claude Code agent types, and the brand block as a single JSON object; the canonical tool for grounding any claim about what is enabled on the current account), account-update, admin-add, admin-remove, admin-list, admin-update-pin, agent-list, agent-config-read, logs-read, plugin-read, skill-load (one-call resolve+read for SKILL.md by skill name, the canonical primitive for loading a named skill; plugin-read remains the reader for references/* and PLUGIN.md), store-skill (deterministic write counterpart to plugin-read; persists operator-authored skills as plugin files under the active account), session-reset, session-resume, wifi, action-approval tools (action-pending, action-approve, action-reject, action-edit), and session-retrospective-mark-complete (the deterministic sentinel the session-end Stop hook reads via JSONL grep to release the retrospective gate; admin calls it once per session after running the three-pass retrospective) for managing the Maxy platform.",
   "version": "0.1.0",
   "author": {
     "name": "Rubytech LLC"

package/payload/platform/plugins/admin/PLUGIN.md

@@ -1,7 +1,7 @@
 ---
 name: admin
 surface: platform
-description: "Platform administration plugin. Provides system-status, public-hostname (deterministic Cloudflare public-URL resolver, single call returning the operator's canonical hostname so agents never guess property names on :CloudflareHostname nodes), publish-site (move an extracted static-site tree under <accountDir>/sites/<slug>/, emit one canonical path slug, and refresh llms.txt at the site root — typed refusal taxonomy replaces the prior skill-prose contract), brand-settings, account-manage, account-update, admin-add, admin-remove, admin-list, admin-update-pin, agent-list, agent-config-read, logs-read, plugin-read, skill-load (one-call resolve+read for SKILL.md by skill name, the canonical primitive for loading a named skill; plugin-read remains the reader for references/* and PLUGIN.md), store-skill (deterministic write counterpart to plugin-read; persists operator-authored skills as plugin files under the active account), session-reset, session-resume, wifi, action-approval tools (action-pending, action-approve, action-reject, action-edit), and session-retrospective-mark-complete (the deterministic sentinel the session-end Stop hook reads via JSONL grep to release the retrospective gate; admin calls it once per session after running the three-pass retrospective) for managing the Maxy platform."
+description: "Platform administration plugin. Provides system-status, public-hostname (deterministic Cloudflare public-URL resolver, single call returning the operator's canonical hostname so agents never guess property names on :CloudflareHostname nodes), publish-site (move an extracted static-site tree under <accountDir>/sites/<slug>/, emit one canonical path slug, and refresh llms.txt at the site root — typed refusal taxonomy replaces the prior skill-prose contract), brand-settings, account-manage, capabilities-here (deterministic install-introspection — returns enabledPlugins, tier, models, installed platform + premium specialists, registered Claude Code agent types, and the brand block as a single JSON object; the canonical tool for grounding any claim about what is enabled on the current account), account-update, admin-add, admin-remove, admin-list, admin-update-pin, agent-list, agent-config-read, logs-read, plugin-read, skill-load (one-call resolve+read for SKILL.md by skill name, the canonical primitive for loading a named skill; plugin-read remains the reader for references/* and PLUGIN.md), store-skill (deterministic write counterpart to plugin-read; persists operator-authored skills as plugin files under the active account), session-reset, session-resume, wifi, action-approval tools (action-pending, action-approve, action-reject, action-edit), and session-retrospective-mark-complete (the deterministic sentinel the session-end Stop hook reads via JSONL grep to release the retrospective gate; admin calls it once per session after running the three-pass retrospective) for managing the Maxy platform."
 tools:
   - name: system-status
     publicAllowlist: false
@@ -18,6 +18,9 @@ tools:
   - name: account-manage
     publicAllowlist: false
     adminAllowlist: false
+  - name: capabilities-here
+    publicAllowlist: false
+    adminAllowlist: false
   - name: account-update
     publicAllowlist: false
     adminAllowlist: false

package/payload/platform/plugins/admin/hooks/__tests__/hook-emit-stale-lock-ttl.test.sh

@@ -0,0 +1,102 @@
+#!/usr/bin/env bash
+# Task 569 — stale-lockdir TTL reclamation in _hook_acquire_lock and
+# _drain_acquire_lock. A backdated lockdir is force-removed on acquire;
+# a freshly held lockdir is not.
+set -u
+
+ROOT="$(cd "$(dirname "$0")/.." && pwd)"
+LIB="$ROOT/lib/hook-emit.sh"
+DRAIN="$ROOT/post-tool-use-agent.sh"
+[[ -f "$LIB" ]] || { echo "FAIL: $LIB missing"; exit 1; }
+[[ -f "$DRAIN" ]] || { echo "FAIL: $DRAIN missing"; exit 1; }
+
+TMP=$(mktemp -d)
+export MAXY_HOOK_BUFFER_DIR="$TMP/buffers"
+export MAXY_HOOK_SERVER_LOG="$TMP/server.log"
+# Tight test budget — 20 × 10ms = 200ms ceiling so the negative case
+# returns quickly.
+export MAXY_HOOK_LOCK_ATTEMPTS=20
+export MAXY_HOOK_LOCK_SLEEP=0.01
+export MAXY_HOOK_LOCK_TTL_SECONDS=2
+mkdir -p "$MAXY_HOOK_BUFFER_DIR"
+
+PASS=0; FAIL=0
+pass() { PASS=$((PASS+1)); echo "PASS: $1"; }
+fail() { FAIL=$((FAIL+1)); echo "FAIL: $1" >&2; }
+
+# shellcheck disable=SC1090
+source "$LIB" || { fail "source library"; exit 1; }
+pass "source library"
+
+# Test 1: a stale lockdir (mtime backdated 10s; TTL=2s) is reclaimed and
+# acquire succeeds.
+LOCK1="$TMP/lock-stale"
+mkdir "$LOCK1"
+# Backdate mtime by 10s. -t needs YYYYMMDDhhmm.SS form; portable form
+# uses -d on GNU and -A/-r on BSD, so we use python to set it.
+python3 -c "import os,time; os.utime('$LOCK1', (time.time()-10, time.time()-10))"
+if _hook_acquire_lock "$LOCK1"; then
+  pass "stale lockdir reclaimed (emit-path)"
+else
+  fail "stale lockdir not reclaimed within budget (emit-path)"
+fi
+# Verify observability line.
+if grep -q "\[hook-propagate-error\] reason=stale-lock-reclaimed lockdir=$LOCK1" "$MAXY_HOOK_SERVER_LOG"; then
+  pass "stale-lock-reclaimed observability line emitted"
+else
+  fail "stale-lock-reclaimed line missing from server.log"
+fi
+rmdir "$LOCK1" 2>/dev/null || true
+
+# Test 2: a fresh lockdir (mtime = now) is NOT reclaimed and acquire
+# returns 1 within the attempt budget.
+LOCK2="$TMP/lock-fresh"
+mkdir "$LOCK2"
+START=$(date +%s)
+if _hook_acquire_lock "$LOCK2"; then
+  fail "fresh lockdir wrongly reclaimed (emit-path)"
+else
+  END=$(date +%s)
+  pass "fresh lockdir not reclaimed; acquire timed out (emit-path, ${END}-${START}s)"
+fi
+# Verify no stale-lock-reclaimed line was written for LOCK2.
+if grep -q "lockdir=$LOCK2 ageSeconds=" "$MAXY_HOOK_SERVER_LOG"; then
+  fail "fresh lockdir wrongly logged as stale (emit-path)"
+else
+  pass "no stale-lock log for fresh lockdir (emit-path)"
+fi
+rmdir "$LOCK2" 2>/dev/null || true
+
+# Test 3: same property for the drainer-side function. Extract
+# _drain_acquire_lock + its age helper from post-tool-use-agent.sh and
+# source them in isolation.
+DRAIN_LIB="$TMP/drain-lock.sh"
+awk '
+  /^_drain_lockdir_age_seconds\(\)/,/^}/ { print; next }
+  /^_drain_acquire_lock\(\)/,/^}/ { print; next }
+' "$DRAIN" > "$DRAIN_LIB"
+[[ -s "$DRAIN_LIB" ]] || { fail "drain lock extract empty"; }
+# shellcheck disable=SC1090
+source "$DRAIN_LIB" || fail "source drain lib"
+
+LOCK3="$TMP/lock-drain-stale"
+mkdir "$LOCK3"
+python3 -c "import os,time; os.utime('$LOCK3', (time.time()-10, time.time()-10))"
+if _drain_acquire_lock "$LOCK3"; then
+  pass "stale lockdir reclaimed (drain-path)"
+else
+  fail "stale lockdir not reclaimed (drain-path)"
+fi
+
+LOCK4="$TMP/lock-drain-fresh"
+mkdir "$LOCK4"
+if _drain_acquire_lock "$LOCK4"; then
+  fail "fresh lockdir wrongly reclaimed (drain-path)"
+else
+  pass "fresh lockdir not reclaimed; acquire timed out (drain-path)"
+fi
+
+rm -rf "$TMP"
+echo "----"
+echo "$PASS pass, $FAIL fail"
+[[ "$FAIL" -eq 0 ]]

package/payload/platform/plugins/admin/hooks/__tests__/post-tool-use-agent.test.sh

@@ -72,6 +72,102 @@ echo "$CENSUS_LOG" | grep -qE 'attachmentsEmitted=2' \
   && pass "census M equals N when stdout open" \
   || fail "census M wrong: $CENSUS_LOG"
 
-rm -rf "$TMP"
+# Task 563 — concurrency hardening.
+
+# Concurrent emitter + drainer on the same buffer must not drop records.
+# Spawn an emitter that writes 50 records in a tight loop while two
+# drainer fires race against it. Union of attachments must equal 50.
+LIB="$(cd "$(dirname "$0")/.." && pwd)/lib/hook-emit.sh"
+[[ -f "$LIB" ]] || { fail "lib missing"; }
+CONCUR_TMP=$(mktemp -d)
+export MAXY_HOOK_BUFFER_DIR="$CONCUR_TMP/buffers"
+export MAXY_HOOK_SERVER_LOG="$CONCUR_TMP/server.log"
+mkdir -p "$MAXY_HOOK_BUFFER_DIR"
+PARENT_C="parent-CONC"
+SUB_C="sub-CONC"
+INPUT_C=$(python3 -c '
+import json, sys
+print(json.dumps({"hook_event_name":"PostToolUse","tool_name":"Agent",
+  "session_id":sys.argv[1]}, separators=(",",":")))
+' "$PARENT_C")
+
+# Emitter: 50 records as fast as possible.
+EMIT_OUT="$CONCUR_TMP/emit.log"
+(
+  # shellcheck disable=SC1090
+  source "$LIB"
+  for i in $(seq 1 50); do
+    hook_emit_decision "$SUB_C" "h" "Bash" "block" "r$i" "x" 2 1
+  done
+  echo "done" >"$EMIT_OUT"
+) &
+EMIT_PID=$!
+
+# Two drainer fires racing the emitter.
+DRAIN1="$CONCUR_TMP/drain1.out"
+DRAIN2="$CONCUR_TMP/drain2.out"
+(printf '%s' "$INPUT_C" | bash "$HOOK" >"$DRAIN1" 2>/dev/null) &
+D1=$!
+(printf '%s' "$INPUT_C" | bash "$HOOK" >"$DRAIN2" 2>/dev/null) &
+D2=$!
+wait "$EMIT_PID" "$D1" "$D2"
+
+# Drain any leftovers after emitter+drainers settled.
+DRAIN3="$CONCUR_TMP/drain3.out"
+printf '%s' "$INPUT_C" | bash "$HOOK" >"$DRAIN3" 2>/dev/null
+# A second sweep catches buffer files created after drainer 3 started.
+DRAIN4="$CONCUR_TMP/drain4.out"
+printf '%s' "$INPUT_C" | bash "$HOOK" >"$DRAIN4" 2>/dev/null
+
+TOTAL_ATTACHED=$(cat "$DRAIN1" "$DRAIN2" "$DRAIN3" "$DRAIN4" | grep -c '^\[hook-propagate\] {' || true)
+UNIQUE_R=$(cat "$DRAIN1" "$DRAIN2" "$DRAIN3" "$DRAIN4" | grep '^\[hook-propagate\] {' | \
+  python3 -c 'import json,sys
+seen=set()
+for line in sys.stdin:
+    rec=line.split(" ",1)[1]
+    d=json.loads(rec)
+    seen.add(d["reason"])
+print(len(seen))')
+[[ "$TOTAL_ATTACHED" -eq 50 ]] && pass "concurrent: 50 records attached, no duplicates" \
+  || fail "concurrent: expected 50 attached, got $TOTAL_ATTACHED"
+[[ "$UNIQUE_R" -eq 50 ]] && pass "concurrent: 50 unique records, no drops" \
+  || fail "concurrent: expected 50 unique reasons, got $UNIQUE_R"
+
+# No cursor file should exist (cursor mechanism removed).
+[[ -z "$(ls "$MAXY_HOOK_BUFFER_DIR"/.*.cursor 2>/dev/null)" ]] \
+  && pass "cursor mechanism removed (no .cursor files)" \
+  || fail "cursor file unexpectedly present: $(ls "$MAXY_HOOK_BUFFER_DIR"/.*.cursor 2>/dev/null)"
+
+rm -rf "$CONCUR_TMP"
+
+# Unknown-parent fallback emits observability line and does not corrupt
+# state across concurrent fires.
+UNK_TMP=$(mktemp -d)
+export MAXY_HOOK_BUFFER_DIR="$UNK_TMP/buffers"
+export MAXY_HOOK_SERVER_LOG="$UNK_TMP/server.log"
+mkdir -p "$MAXY_HOOK_BUFFER_DIR"
+# Stdin with no session_id at all.
+BAD_INPUT='{"hook_event_name":"PostToolUse","tool_name":"Agent"}'
+UNK1="$UNK_TMP/unk1.out"
+UNK2="$UNK_TMP/unk2.out"
+(printf '%s' "$BAD_INPUT" | bash "$HOOK" >"$UNK1" 2>/dev/null) &
+U1=$!
+(printf '%s' "$BAD_INPUT" | bash "$HOOK" >"$UNK2" 2>/dev/null) &
+U2=$!
+wait "$U1" "$U2"
+
+grep -q 'parentSession=unknown reason=session-id-missing' "$UNK1" "$UNK2" \
+  && pass "unknown parent emits observability line" \
+  || fail "unknown parent missing observability line: $(cat "$UNK1" "$UNK2")"
+grep -q 'parentSession=unknown reason=session-id-missing' "$MAXY_HOOK_SERVER_LOG" \
+  && pass "unknown parent line logged to server.log" \
+  || fail "server.log missing unknown-parent line"
+# No .unknown.cursor file — cursor mechanism is gone.
+[[ ! -e "$MAXY_HOOK_BUFFER_DIR/.unknown.cursor" ]] \
+  && pass "no shared .unknown.cursor file" \
+  || fail ".unknown.cursor unexpectedly present"
+
+rm -rf "$UNK_TMP"
+
 echo "----"; echo "$PASS pass, $FAIL fail"
 [[ "$FAIL" -eq 0 ]]