@rubytech/create-maxy-code 0.1.222 → 0.1.223

package/dist/index.js

@@ -18,7 +18,7 @@ import { classifyPortHolder } from "./preflight-port-classifier.js";
 import { parsePluginList, computeInstallActions, computeConfigureActions, parseExternalPlugins, } from "./lib/plugin-install.js";
 import { findPremiumMcpDirs } from "./lib/premium-mcp-discover.js";
 import { pickLanInterface, mergeSmbConf, formatSambaMarker, } from "./samba-provision.js";
-import { networkInterfaces, userInfo, homedir } from "node:os";
+import { networkInterfaces, userInfo } from "node:os";
 const PAYLOAD_DIR = resolve(import.meta.dirname, "../payload");
 // Brand manifest — read from payload to derive all brand-specific installation values.
 // The bundler stamps brand.json into the payload at build time.
@@ -3276,51 +3276,6 @@ WantedBy=multi-user.target
     // and fail with EADDRINUSE. Fresh installs: the stop is a no-op.
     const unitName = BRAND.serviceName.replace(".service", "");
     const claudeSessionManagerUnitShort = claudeSessionManagerUnitName.replace(".service", "");
-    // Task 579 — admin-enumeration acceptance gate. Runs against the
-    // freshly-deployed payload before the systemctl restart cluster so a
-    // regression in the admin tool surface fails the install and keeps
-    // the old service running. The harness exit code is the gate; a
-    // non-zero exit logs the JSONL evidence path to install.log and
-    // process.exit(1) before we touch any unit. Set MAXY_SKIP_ENUMERATE_GATE=1
-    // to bypass for cases where the operator is iterating on a different
-    // surface and accepts the regression risk; absence is the default.
-    if (!process.env.MAXY_SKIP_ENUMERATE_GATE) {
-        const harness = join(INSTALL_DIR, "platform/plugins/admin/__tests__/admin-can-enumerate.test.sh");
-        if (existsSync(harness)) {
-            const brandConfigDir = join(homedir(), BRAND.configDir, ".claude");
-            console.log("  Running admin-enumerate acceptance gate...");
-            const gateResult = spawnSync("bash", [harness], {
-                stdio: "inherit",
-                env: {
-                    ...process.env,
-                    CLAUDE_CONFIG_DIR: brandConfigDir,
-                    INSTALL_DIR,
-                },
-            });
-            if (gateResult.status !== 0) {
-                const installLog = join(homedir(), BRAND.configDir, "logs", "install.log");
-                const ts = new Date().toISOString();
-                try {
-                    mkdirSync(dirname(installLog), { recursive: true });
-                    appendFileSync(installLog, `${ts} [admin-enumerate-gate] FAIL exit=${gateResult.status ?? "null"} — admin seat could not locate seeded site within budget. Payload NOT swapped into systemd.\n`);
-                }
-                catch {
-                    // best-effort
-                }
-                console.error(`\n  ❌ admin-enumerate gate failed (exit ${gateResult.status ?? "null"}).\n` +
-                    `  The new payload is on disk at ${INSTALL_DIR} but systemd was NOT restarted.\n` +
-                    `  Old service is still running. See ${installLog} for one-line summary.\n`);
-                process.exit(1);
-            }
-            console.log("  admin-enumerate gate passed.");
-        }
-        else {
-            console.log(`  [admin-enumerate-gate] SKIP reason=harness-not-on-disk path=${harness}`);
-        }
-    }
-    else {
-        console.log("  [admin-enumerate-gate] SKIP reason=MAXY_SKIP_ENUMERATE_GATE=1");
-    }
     spawnSync("systemctl", ["--user", "stop", unitName], { stdio: "inherit" });
     spawnSync("systemctl", ["--user", "daemon-reload"], { stdio: "inherit" });
     spawnSync("systemctl", ["--user", "enable", edgeUnitShort], { stdio: "inherit" });

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@rubytech/create-maxy-code",
-  "version": "0.1.222",
+  "version": "0.1.223",
   "description": "Install Maxy — AI for Productive People",
   "bin": {
     "create-maxy-code": "./dist/index.js"

package/payload/platform/plugins/admin/__tests__/admin-can-enumerate.test.sh

@@ -1,129 +0,0 @@
-#!/usr/bin/env bash
-# admin-can-enumerate.test.sh
-#
-# Acceptance gate for Task 579. Verifies that a fresh admin session
-# locates a file under <accountDir>/sites/ on the FIRST enumeration
-# attempt — no slug guessing, no `EISDIR`, no false-empty 200s, no
-# "Log directory does not exist" against a path that resolves
-# elsewhere. The gate runs from the installer post-install step against
-# the freshly-deployed payload, before systemd services are restarted
-# into it. A non-zero exit aborts the deploy and the old payload keeps
-# running.
-#
-# Required environment:
-#   CLAUDE_CONFIG_DIR   per-brand .claude directory (e.g. ~/.realagent-code/.claude)
-#   INSTALL_DIR         the brand install root (e.g. ~/realagent-code)
-#
-# Exit codes:
-#   0  pass — admin enumerated and emitted the seeded path within budget
-#   1  fail — one or more assertions tripped (see stderr for the line)
-#   2  setup error — could not seed test account or could not invoke claude
-
-set -euo pipefail
-
-CONFIG_DIR="${CLAUDE_CONFIG_DIR:?CLAUDE_CONFIG_DIR not set}"
-INSTALL_DIR="${INSTALL_DIR:?INSTALL_DIR not set}"
-
-if ! command -v claude >/dev/null 2>&1; then
-  echo "[admin-enumerate-gate] setup-error reason=claude-not-on-path" >&2
-  exit 2
-fi
-if ! command -v jq >/dev/null 2>&1; then
-  echo "[admin-enumerate-gate] setup-error reason=jq-not-on-path" >&2
-  exit 2
-fi
-
-ACCOUNTS_DIR="$INSTALL_DIR/data/accounts"
-TEST_ACCT_ID="enumerate-gate-$$"
-TEST_ACCT_DIR="$ACCOUNTS_DIR/$TEST_ACCT_ID"
-JSONL_OUT=$(mktemp)
-EXIT=0
-
-cleanup() {
-  rm -rf "$TEST_ACCT_DIR"
-  if [ "$EXIT" -eq 0 ]; then
-    rm -f "$JSONL_OUT"
-  else
-    echo "[admin-enumerate-gate] evidence-jsonl=$JSONL_OUT" >&2
-  fi
-}
-trap cleanup EXIT
-
-# Seed: one target site + 5 decoys. Target index.html is the file the
-# agent must locate and emit the absolute path for.
-mkdir -p "$TEST_ACCT_DIR/sites/exp-uk-got-talent"
-echo "<html><body>eXp Has Got Talent</body></html>" > "$TEST_ACCT_DIR/sites/exp-uk-got-talent/index.html"
-for decoy in alpha-corp-careers beta-properties gamma-events delta-news epsilon-portal; do
-  mkdir -p "$TEST_ACCT_DIR/sites/$decoy"
-  echo "<html>decoy</html>" > "$TEST_ACCT_DIR/sites/$decoy/index.html"
-done
-
-TARGET_PATH="$TEST_ACCT_DIR/sites/exp-uk-got-talent/index.html"
-
-PROMPT="find the eXp Has Got Talent site in this account and print the absolute path to its index.html"
-
-# Spawn claude headless against the test account. ACCOUNT_ID + the
-# MAXY_SESSION_ROLE/PLATFORM_ROOT env are what the platform MCPs read
-# to scope themselves; PLATFORM_ROOT resolves the on-disk payload that
-# was just deployed. JSONL goes to a file we parse below.
-ACCOUNT_ID="$TEST_ACCT_ID" \
-MAXY_SESSION_ROLE="admin" \
-PLATFORM_ROOT="$INSTALL_DIR/platform" \
-CLAUDE_CONFIG_DIR="$CONFIG_DIR" \
-  claude -p "$PROMPT" --output-format=stream-json --verbose \
-    > "$JSONL_OUT" 2>&1 \
-  || { echo "[admin-enumerate-gate] setup-error reason=claude-spawn-failed exit=$?" >&2; EXIT=2; exit 2; }
-
-fail() {
-  echo "[admin-enumerate-gate] FAIL $1" >&2
-  EXIT=1
-}
-
-# Assertion 1: the target path appears verbatim in some assistant turn
-# or tool-use input. Either as the agent's final message or as an arg
-# passed to a tool.
-if ! grep -F -q "$TARGET_PATH" "$JSONL_OUT"; then
-  fail "correct-path-not-emitted target=$TARGET_PATH"
-fi
-
-# Assertion 2: zero forbidden error patterns from the surfaces this
-# task fixed.
-FORBIDDEN_HITS=$(grep -E -c "EISDIR|Log directory does not exist|Plugin file not found|page has no readable text content" "$JSONL_OUT" || true)
-if [ "${FORBIDDEN_HITS:-0}" -gt 0 ]; then
-  fail "forbidden-error-patterns=$FORBIDDEN_HITS"
-fi
-
-# Assertion 3: total tool-use calls from the user prompt to the
-# correct-path emission are at most 3. The earlier failing run issued
-# ~15.
-TOOL_USE_COUNT=$(jq -r 'select(.type=="assistant") | .message.content[]? | select(.type=="tool_use") | .name' < "$JSONL_OUT" 2>/dev/null | wc -l | tr -d ' ' || echo 0)
-if [ "${TOOL_USE_COUNT:-0}" -gt 3 ]; then
-  fail "tool-use-budget-exceeded count=$TOOL_USE_COUNT cap=3"
-fi
-
-# Assertion 4: the FIRST disk-listing tool call returns an enumeration
-# of <accountDir>/sites/. "Disk-listing" means LS, Glob, or Bash with
-# `ls`. We accept any of those as the first relevant call; what we
-# reject is a Read against a directory path.
-FIRST_DIR_TOOL=$(jq -r 'select(.type=="assistant") | .message.content[]? | select(.type=="tool_use") | {name, input} | @json' < "$JSONL_OUT" 2>/dev/null \
-  | jq -r 'select(.name=="LS" or .name=="Glob" or (.name=="Bash" and (.input.command // "" | test("\\bls\\b")))) | .name' \
-  | head -1)
-if [ -z "$FIRST_DIR_TOOL" ]; then
-  fail "no-disk-listing-tool-call-emitted"
-fi
-
-# Assertion 5: no Read tool call against a path under <accountDir>/sites/
-# that is a directory (would have produced EISDIR pre-fix; should not
-# even be attempted now).
-BAD_READ=$(jq -r 'select(.type=="assistant") | .message.content[]? | select(.type=="tool_use" and .name=="Read") | .input.file_path // ""' < "$JSONL_OUT" 2>/dev/null \
-  | while read -r p; do
-      [ -n "$p" ] && [ -d "$p" ] && echo "$p"
-    done | head -1)
-if [ -n "$BAD_READ" ]; then
-  fail "read-against-directory path=$BAD_READ"
-fi
-
-if [ "$EXIT" -eq 0 ]; then
-  echo "[admin-enumerate-gate] PASS target=$TARGET_PATH tool-use-count=$TOOL_USE_COUNT first-dir-tool=$FIRST_DIR_TOOL"
-fi
-exit "$EXIT"