@rubytech/create-maxy-code 0.1.246 → 0.1.248

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@rubytech/create-maxy-code",
-  "version": "0.1.246",
+  "version": "0.1.248",
   "description": "Install Maxy — AI for Productive People",
   "bin": {
     "create-maxy-code": "./dist/index.js"

package/payload/platform/config/brand.json

@@ -24,13 +24,13 @@
     "primarySubtle": "rgba(124, 140, 114, 0.08)",
     "primaryGlow": "rgba(124, 140, 114, 0.15)",
     "accent": "#E8ECF0",
-    "background": "#FAFAF8",
+    "background": "#F6F5F2",
     "agentBubble": "#F5F2ED"
   },
 
   "defaultFonts": {
-    "display": "'Cormorant', Georgia, serif",
-    "body": "'DM Sans', -apple-system, BlinkMacSystemFont, sans-serif"
+    "display": "'Newsreader', Georgia, serif",
+    "body": "'Inter', -apple-system, BlinkMacSystemFont, sans-serif"
   },
 
   "logoContainsName": true,

package/payload/platform/plugins/admin/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "admin",
-  "description": "Platform administration plugin. Provides system-status, public-hostname (deterministic Cloudflare public-URL resolver, single call returning the operator's canonical hostname so agents never guess property names on :CloudflareHostname nodes), publish-site (move an extracted static-site tree under <accountDir>/sites/<slug>/, emit one canonical path slug, and refresh llms.txt at the site root — typed refusal taxonomy replaces the prior skill-prose contract), brand-settings, account-manage, capabilities-here (deterministic install-introspection — returns enabledPlugins, tier, models, installed platform + premium specialists, registered Claude Code agent types, and the brand block as a single JSON object; the canonical tool for grounding any claim about what is enabled on the current account), account-update, admin-add, admin-remove, admin-list, admin-update-pin, agent-list, agent-config-read, logs-read, plugin-read, skill-load (one-call resolve+read for SKILL.md by skill name, the canonical primitive for loading a named skill; plugin-read remains the reader for references/* and PLUGIN.md), store-skill (deterministic write counterpart to plugin-read; persists operator-authored skills as plugin files under the active account), session-reset, session-resume, wifi, action-approval tools (action-pending, action-approve, action-reject, action-edit), and session-retrospective-mark-complete (the deterministic sentinel the session-end Stop hook reads via JSONL grep to release the retrospective gate; admin calls it once per session after running the three-pass retrospective) for managing the Maxy platform.",
+  "description": "Platform administration plugin. Provides system-status, public-hostname (deterministic Cloudflare public-URL resolver, single call returning the operator's canonical hostname so agents never guess property names on :CloudflareHostname nodes), publish-site (move an extracted static-site tree under <accountDir>/sites/<slug>/, emit one canonical path slug, and refresh llms.txt at the site root — typed refusal taxonomy replaces the prior skill-prose contract), brand-settings, account-manage, capabilities-here (deterministic install-introspection — returns enabledPlugins, tier, models, installed platform + premium specialists, registered Claude Code agent types, and the brand block as a single JSON object; the canonical tool for grounding any claim about what is enabled on the current account), account-update, admin-add, admin-remove, admin-list, admin-update-pin, agent-list, agent-config-read, logs-read, plugin-read, skill-load (one-call resolve+read for SKILL.md by skill name, the canonical primitive for loading a named skill; plugin-read remains the reader for references/* and PLUGIN.md), store-skill (deterministic write counterpart to plugin-read; persists operator-authored skills as plugin files under the active account), session-reset, session-resume, wifi, action-approval tools (action-pending, action-approve, action-reject, action-edit), session-retrospective-mark-complete (the deterministic sentinel the session-end Stop hook reads via JSONL grep to release the retrospective gate; admin calls it once per session after running the three-pass retrospective), and admin-identity-authenticate (native-CC PIN identity gate — the operator submits their PIN as the first action of every session to bind their authenticated userId; the PreToolUse pin-identity-gate hook blocks all other tools until this succeeds) for managing the Maxy platform.",
   "version": "0.1.0",
   "author": {
     "name": "Rubytech LLC"

package/payload/platform/plugins/admin/PLUGIN.md

@@ -1,7 +1,7 @@
 ---
 name: admin
 surface: platform
-description: "Platform administration plugin. Provides system-status, public-hostname (deterministic Cloudflare public-URL resolver, single call returning the operator's canonical hostname so agents never guess property names on :CloudflareHostname nodes), publish-site (move an extracted static-site tree under <accountDir>/sites/<slug>/, emit one canonical path slug, and refresh llms.txt at the site root — typed refusal taxonomy replaces the prior skill-prose contract), brand-settings, account-manage, capabilities-here (deterministic install-introspection — returns enabledPlugins, tier, models, installed platform + premium specialists, registered Claude Code agent types, and the brand block as a single JSON object; the canonical tool for grounding any claim about what is enabled on the current account), account-update, admin-add, admin-remove, admin-list, admin-update-pin, agent-list, agent-config-read, logs-read, plugin-read, skill-load (one-call resolve+read for SKILL.md by skill name, the canonical primitive for loading a named skill; plugin-read remains the reader for references/* and PLUGIN.md), store-skill (deterministic write counterpart to plugin-read; persists operator-authored skills as plugin files under the active account), session-reset, session-resume, wifi, action-approval tools (action-pending, action-approve, action-reject, action-edit), and session-retrospective-mark-complete (the deterministic sentinel the session-end Stop hook reads via JSONL grep to release the retrospective gate; admin calls it once per session after running the three-pass retrospective) for managing the Maxy platform."
+description: "Platform administration plugin. Provides system-status, public-hostname (deterministic Cloudflare public-URL resolver, single call returning the operator's canonical hostname so agents never guess property names on :CloudflareHostname nodes), publish-site (move an extracted static-site tree under <accountDir>/sites/<slug>/, emit one canonical path slug, and refresh llms.txt at the site root — typed refusal taxonomy replaces the prior skill-prose contract), brand-settings, account-manage, capabilities-here (deterministic install-introspection — returns enabledPlugins, tier, models, installed platform + premium specialists, registered Claude Code agent types, and the brand block as a single JSON object; the canonical tool for grounding any claim about what is enabled on the current account), account-update, admin-add, admin-remove, admin-list, admin-update-pin, agent-list, agent-config-read, logs-read, plugin-read, skill-load (one-call resolve+read for SKILL.md by skill name, the canonical primitive for loading a named skill; plugin-read remains the reader for references/* and PLUGIN.md), store-skill (deterministic write counterpart to plugin-read; persists operator-authored skills as plugin files under the active account), session-reset, session-resume, wifi, action-approval tools (action-pending, action-approve, action-reject, action-edit), session-retrospective-mark-complete (the deterministic sentinel the session-end Stop hook reads via JSONL grep to release the retrospective gate; admin calls it once per session after running the three-pass retrospective), and admin-identity-authenticate (native-CC PIN identity gate — the operator submits their PIN as the first action of every session to bind their authenticated userId; the PreToolUse pin-identity-gate hook blocks all other tools until this succeeds) for managing the Maxy platform."
 tools:
   - name: system-status
     publicAllowlist: false
@@ -75,6 +75,9 @@ tools:
   - name: session-retrospective-mark-complete
     publicAllowlist: false
     adminAllowlist: true
+  - name: admin-identity-authenticate
+    publicAllowlist: false
+    adminAllowlist: true
 hidden:
   - remote-auth-status
   - remote-auth-set-password

package/payload/platform/plugins/admin/hooks/__tests__/pin-identity-gate.test.sh

@@ -0,0 +1,96 @@
+#!/usr/bin/env bash
+# Regression test for pin-identity-gate.sh (Task 619).
+#
+# Covers:
+#   1. Non-admin role                                  → ALLOW (no-op)
+#   2. admin, unauthenticated, ordinary tool           → BLOCK (op=pin-prompted)
+#   3. admin, already authenticated (state file)       → ALLOW
+#   4. admin, auth tool, endpoint match                → ALLOW + state written (op=pin-bound)
+#   5. admin, auth tool, endpoint miss                 → BLOCK (op=session-terminated)
+#   6. admin, auth tool, endpoint unavailable          → BLOCK (op=pin-unavailable)
+#   7. admin, auth tool, endpoint unreachable          → BLOCK (op=pin-error)
+#
+# The validate endpoint is stubbed via a `curl` shim on PATH whose response is
+# driven by $FAKE_VALIDATE_KIND.
+
+set -u
+HOOK="$(cd "$(dirname "$0")/.." && pwd)/pin-identity-gate.sh"
+[ -x "$HOOK" ] || { echo "FAIL: $HOOK not executable" >&2; exit 1; }
+
+TMP_DIR=$(mktemp -d)
+trap 'rm -rf "$TMP_DIR"' EXIT
+mkdir -p "$TMP_DIR/bin" "$TMP_DIR/state"
+
+# curl shim: emit a canned validate response based on $FAKE_VALIDATE_KIND.
+cat > "$TMP_DIR/bin/curl" <<'SHIM'
+#!/usr/bin/env bash
+case "${FAKE_VALIDATE_KIND:-}" in
+  match)       echo '{"kind":"match","userId":"user-0001"}' ;;
+  miss)        echo '{"kind":"miss"}' ;;
+  unavailable) echo '{"kind":"unavailable"}' ;;
+  corrupt)     echo '{"kind":"corrupt"}' ;;
+  unreachable) echo '' ;;
+  *)           echo '' ;;
+esac
+SHIM
+chmod +x "$TMP_DIR/bin/curl"
+
+AUTH_TOOL='mcp__plugin_admin_admin__admin-identity-authenticate'
+PASS=0; FAIL=0
+
+# run <role> <kind> <stdin-json> [specialist] ; sets EXIT and ERR
+run() {
+  ERR=$(printf '%s' "$3" | \
+    PATH="$TMP_DIR/bin:$PATH" \
+    MAXY_SESSION_ROLE="$1" \
+    MAXY_SPECIALIST="${4:-}" \
+    FAKE_VALIDATE_KIND="$2" \
+    MAXY_IDENTITY_GATE_STATE_DIR="$TMP_DIR/state" \
+    MAXY_IDENTITY_VALIDATE_URL="http://stub/validate" \
+    bash "$HOOK" 2>&1 >/dev/null)
+  EXIT=$?
+}
+
+check() { # <label> <want-exit> <grep-or-->
+  if [ "$EXIT" != "$2" ]; then echo "FAIL[$1]: exit=$EXIT want=$2 err=$ERR"; FAIL=$((FAIL+1)); return; fi
+  if [ "$3" != "-" ] && ! printf '%s' "$ERR" | grep -q "$3"; then echo "FAIL[$1]: missing '$3' in: $ERR"; FAIL=$((FAIL+1)); return; fi
+  echo "PASS[$1]"; PASS=$((PASS+1))
+}
+
+# 1. non-admin → allow
+run public '' '{"session_id":"s1","tool_name":"Bash","tool_input":{}}'
+check non-admin 0 -
+
+# 1b. admin but specialist subagent (MAXY_SPECIALIST set) → allow (no-op)
+run admin '' '{"session_id":"s1b","tool_name":"Bash","tool_input":{}}' database-operator
+check specialist-exempt 0 -
+
+# 2. admin unauth, ordinary tool → block
+run admin '' '{"session_id":"s2","tool_name":"Bash","tool_input":{}}'
+check unauth-block 2 "op=pin-prompted"
+
+# 3. admin, authenticated (state file present) → allow
+echo '{"userId":"user-0001"}' > "$TMP_DIR/state/s3.json"
+run admin '' '{"session_id":"s3","tool_name":"Bash","tool_input":{}}'
+check authed-allow 0 -
+
+# 4. admin, auth tool, match → allow + state written + pin-bound
+run admin match "{\"session_id\":\"s4\",\"tool_name\":\"$AUTH_TOOL\",\"tool_input\":{\"pin\":\"1234\"}}"
+check match-allow 0 "op=pin-bound"
+[ -f "$TMP_DIR/state/s4.json" ] && { echo "PASS[match-state-written]"; PASS=$((PASS+1)); } || { echo "FAIL[match-state-written]"; FAIL=$((FAIL+1)); }
+
+# 5. admin, auth tool, miss → block + terminate
+run admin miss "{\"session_id\":\"s5\",\"tool_name\":\"$AUTH_TOOL\",\"tool_input\":{\"pin\":\"9999\"}}"
+check miss-block 2 "op=session-terminated"
+
+# 6. admin, auth tool, unavailable → block
+run admin unavailable "{\"session_id\":\"s6\",\"tool_name\":\"$AUTH_TOOL\",\"tool_input\":{\"pin\":\"1\"}}"
+check unavailable-block 2 "op=pin-unavailable"
+
+# 7. admin, auth tool, unreachable endpoint → block (fail-closed)
+run admin unreachable "{\"session_id\":\"s7\",\"tool_name\":\"$AUTH_TOOL\",\"tool_input\":{\"pin\":\"1\"}}"
+check unreachable-block 2 "op=pin-error"
+
+echo "---"
+echo "PASS=$PASS FAIL=$FAIL"
+[ "$FAIL" = 0 ] || exit 1

package/payload/platform/plugins/admin/hooks/pin-identity-gate.sh

@@ -0,0 +1,136 @@
+#!/usr/bin/env bash
+# Native-CC admin PIN identity gate (Task 619).
+#
+# PreToolUse hook, registered under the universal (no-matcher) entry so it fires
+# for EVERY tool call on a native-CC admin session. It denies all tools until the
+# operator authenticates: the agent must call `admin-identity-authenticate` with a
+# PIN that the loopback validate endpoint matches against users.json. On match the
+# hook records per-session auth state (keyed by the conversation `session_id` it
+# reads from stdin) and lets every subsequent tool through. Enforcement is here —
+# a model that skips the prompt cannot reach any other tool.
+#
+# Scope: only native loopback admin sessions (MAXY_SESSION_ROLE=admin). Specialist
+# subagents dispatched via the Task tool share the parent conversation's
+# session_id, so they pass once the operator session is authenticated.
+#
+# Protocol: exit 0 = allow, exit 2 = block (stderr message shown to the agent),
+# matching the sibling gate hooks. Fail-closed on terminal stdin.
+#
+# Lifecycle (one [admin-identity] line per step, correlated by sessionId):
+#   op=loopback-spawn-received → op=pin-prompted → (op=pin-bound source=pin |
+#   op=pin-miss → op=session-terminated) ; the MCP tool emits op=about-owner-loaded.
+
+set -uo pipefail
+
+if [ -t 0 ]; then
+  echo "Blocked: pin-identity-gate received no stdin (cannot inspect tool call). Failing closed." >&2
+  exit 2
+fi
+INPUT=$(cat)
+
+# Only native loopback admin OPERATOR sessions are in scope:
+#  - MAXY_SESSION_ROLE=admin excludes public/access sessions.
+#  - MAXY_SPECIALIST empty excludes pty-spawned specialist/recorder sessions,
+#    which carry role=admin but are not human operators and never enter a PIN
+#    (mirrors the recursion guard the other admin hooks use). Task-tool
+#    specialist subagents share the operator's session_id + empty MAXY_SPECIALIST,
+#    so they pass via the operator's auth-state file once it is bound.
+[ "${MAXY_SESSION_ROLE:-}" = "admin" ] || exit 0
+[ -z "${MAXY_SPECIALIST:-}" ] || exit 0
+
+# ----- Parse fields from stdin (python3, robust on nested tool_input) -------
+SESSION_ID=$(printf '%s' "$INPUT" | python3 -c 'import json,sys
+try: d=json.load(sys.stdin)
+except Exception: d={}
+print(d.get("session_id","") or "")' 2>/dev/null)
+TOOL_NAME=$(printf '%s' "$INPUT" | python3 -c 'import json,sys
+try: d=json.load(sys.stdin)
+except Exception: d={}
+print(d.get("tool_name","") or "")' 2>/dev/null)
+
+SID8="${SESSION_ID:0:8}"; [ -z "$SID8" ] && SID8='-'
+log() { echo "[admin-identity] $1" >&2; }
+
+# ----- Resolve account/state dir -------------------------------------------
+# The account dir basename IS the ACCOUNT_ID (resolve-account-dir.sh), and the
+# rc child env carries ACCOUNT_ID, so resolve deterministically rather than
+# `find | head -1` — which does not skip dotfiles and could pick the sibling
+# `data/accounts/.trash/`, diverging from the manager's `spawnCwd` (= the
+# account dir) and stranding state the standing audit can never reconcile.
+HOOK_DIR="$(cd "$(dirname "$0")" 2>/dev/null && pwd)"
+PLATFORM_ROOT_RESOLVED="${HOOK_DIR}/../../.."
+ACCOUNTS_DIR="${PLATFORM_ROOT_RESOLVED}/../data/accounts"
+ACCOUNT_DIR=""
+if [ -n "${ACCOUNT_ID:-}" ]; then
+  ACCOUNT_DIR="${ACCOUNTS_DIR}/${ACCOUNT_ID}"
+elif [ -d "$ACCOUNTS_DIR" ]; then
+  # Defensive fallback only when ACCOUNT_ID is unset — exclude dot-entries.
+  ACCOUNT_DIR=$(find "$ACCOUNTS_DIR" -mindepth 1 -maxdepth 1 -type d ! -name '.*' 2>/dev/null | head -1)
+fi
+STATE_DIR="${MAXY_IDENTITY_GATE_STATE_DIR:-${ACCOUNT_DIR}/state/admin-identity}"
+STATE_FILE="${STATE_DIR}/${SESSION_ID}.json"
+
+AUTH_TOOL='mcp__plugin_admin_admin__admin-identity-authenticate'
+VALIDATE_URL="${MAXY_IDENTITY_VALIDATE_URL:-http://127.0.0.1:${MAXY_UI_INTERNAL_PORT:-0}/api/admin/identity/validate}"
+
+# Already authenticated for this conversation → pass everything through.
+if [ -n "$SESSION_ID" ] && [ -f "$STATE_FILE" ]; then
+  exit 0
+fi
+
+log "op=loopback-spawn-received sessionId=${SID8}"
+
+# ----- The authenticate tool: validate, bind on match, terminate on miss ----
+if [ "$TOOL_NAME" = "$AUTH_TOOL" ]; then
+  PIN=$(printf '%s' "$INPUT" | python3 -c 'import json,sys
+try: d=json.load(sys.stdin)
+except Exception: d={}
+ti=d.get("tool_input") or {}
+print(ti.get("pin","") or "")' 2>/dev/null)
+
+  REQ=$(python3 -c 'import json,sys
+print(json.dumps({"pin": sys.argv[1], "sessionId": sys.argv[2]}))' "$PIN" "$SESSION_ID" 2>/dev/null)
+  RESP=$(printf '%s' "$REQ" | curl -s --max-time 5 -X POST -H 'content-type: application/json' -d @- "$VALIDATE_URL" 2>/dev/null)
+  KIND=$(printf '%s' "$RESP" | python3 -c 'import json,sys
+try: print((json.load(sys.stdin) or {}).get("kind","") or "")
+except Exception: print("")' 2>/dev/null)
+
+  case "$KIND" in
+    match)
+      USERID=$(printf '%s' "$RESP" | python3 -c 'import json,sys
+print(json.load(sys.stdin).get("userId","") or "")' 2>/dev/null)
+      mkdir -p "$STATE_DIR" 2>/dev/null
+      printf '{"userId":%s,"ts":"%s"}' \
+        "$(python3 -c 'import json,sys;print(json.dumps(sys.argv[1]))' "$USERID")" \
+        "$(date -u +%FT%TZ)" > "$STATE_FILE" 2>/dev/null
+      log "op=pin-bound sessionId=${SID8} userId=${USERID:0:8} source=pin authSurface=loopback"
+      exit 0
+      ;;
+    miss)
+      log "op=pin-miss sessionId=${SID8} reason=no-matching-user"
+      log "op=session-terminated sessionId=${SID8} reason=pin-auth-failed"
+      echo "PIN did not match. This session is being terminated. Start a new session and enter a valid PIN." >&2
+      exit 2
+      ;;
+    unavailable)
+      log "op=pin-unavailable sessionId=${SID8} reason=users-json-empty"
+      echo "No admin PIN is configured for this install. Complete onboarding before using the admin agent." >&2
+      exit 2
+      ;;
+    corrupt)
+      log "op=pin-error sessionId=${SID8} reason=users-json-corrupt"
+      echo "Admin user configuration is corrupt. Re-run the seed script before authenticating." >&2
+      exit 2
+      ;;
+    *)
+      log "op=pin-error sessionId=${SID8} reason=validate-unreachable"
+      echo "Identity validation is unavailable; cannot proceed without authentication." >&2
+      exit 2
+      ;;
+  esac
+fi
+
+# ----- Unauthenticated and not the auth tool → block -----------------------
+log "op=pin-prompted sessionId=${SID8}"
+echo "Authenticate first: call admin-identity-authenticate with the operator's PIN. No other tool is reachable until a matching PIN is bound for this session." >&2
+exit 2

package/payload/platform/plugins/admin/mcp/dist/__tests__/admin-identity-authenticate.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=admin-identity-authenticate.test.d.ts.map

package/payload/platform/plugins/admin/mcp/dist/__tests__/admin-identity-authenticate.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"admin-identity-authenticate.test.d.ts","sourceRoot":"","sources":["../../src/__tests__/admin-identity-authenticate.test.ts"],"names":[],"mappings":""}

package/payload/platform/plugins/admin/mcp/dist/__tests__/admin-identity-authenticate.test.js

@@ -0,0 +1,34 @@
+import { describe, it, expect, vi } from "vitest";
+import { runAuthenticate } from "../tools/admin-identity-authenticate.js";
+function fetchReturning(json) {
+    return vi.fn(async () => ({ json: async () => json }));
+}
+describe("runAuthenticate", () => {
+    it("returns the operator name and profile on match", async () => {
+        const f = fetchReturning({ kind: "match", userId: "u-1", userName: "Ada", aboutOwner: { ok: true, body: "PROFILE" } });
+        const res = await runAuthenticate("1234", { fetchImpl: f, uiPort: "1" });
+        expect(res).toContain("Ada");
+        expect(res).toContain("PROFILE");
+    });
+    it("returns Invalid PIN on miss", async () => {
+        const f = fetchReturning({ kind: "miss" });
+        const res = await runAuthenticate("9999", { fetchImpl: f, uiPort: "1" });
+        expect(res).toBe("Invalid PIN.");
+    });
+    it("omits the profile when aboutOwner is unresolved but still authenticates", async () => {
+        const f = fetchReturning({ kind: "match", userId: "u-1", userName: "Ada", aboutOwner: { ok: false, reason: "profile-not-found" } });
+        const res = await runAuthenticate("1234", { fetchImpl: f, uiPort: "1" });
+        expect(res).toBe("Authenticated as Ada.");
+    });
+    it("reports service-unavailable when the endpoint throws", async () => {
+        const f = vi.fn(async () => { throw new Error("ECONNREFUSED"); });
+        const res = await runAuthenticate("1234", { fetchImpl: f, uiPort: "1" });
+        expect(res).toContain("unavailable");
+    });
+    it("posts the pin to the loopback validate endpoint", async () => {
+        const f = vi.fn(async () => ({ json: async () => ({ kind: "miss" }) }));
+        await runAuthenticate("1234", { fetchImpl: f, uiPort: "19200" });
+        expect(f).toHaveBeenCalledWith("http://127.0.0.1:19200/api/admin/identity/validate", expect.objectContaining({ method: "POST", body: JSON.stringify({ pin: "1234" }) }));
+    });
+});
+//# sourceMappingURL=admin-identity-authenticate.test.js.map

package/payload/platform/plugins/admin/mcp/dist/__tests__/admin-identity-authenticate.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"admin-identity-authenticate.test.js","sourceRoot":"","sources":["../../src/__tests__/admin-identity-authenticate.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAClD,OAAO,EAAE,eAAe,EAAE,MAAM,yCAAyC,CAAC;AAE1E,SAAS,cAAc,CAAC,IAAa;IACnC,OAAO,EAAE,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC,CAA4B,CAAC;AACpF,CAAC;AAED,QAAQ,CAAC,iBAAiB,EAAE,GAAG,EAAE;IAC/B,EAAE,CAAC,gDAAgD,EAAE,KAAK,IAAI,EAAE;QAC9D,MAAM,CAAC,GAAG,cAAc,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,UAAU,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,CAAC,CAAC;QACvH,MAAM,GAAG,GAAG,MAAM,eAAe,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;QACzE,MAAM,CAAC,GAAG,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QAC7B,MAAM,CAAC,GAAG,CAAC,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;IACnC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6BAA6B,EAAE,KAAK,IAAI,EAAE;QAC3C,MAAM,CAAC,GAAG,cAAc,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;QAC3C,MAAM,GAAG,GAAG,MAAM,eAAe,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;QACzE,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;IACnC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yEAAyE,EAAE,KAAK,IAAI,EAAE;QACvF,MAAM,CAAC,GAAG,cAAc,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,UAAU,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,mBAAmB,EAAE,EAAE,CAAC,CAAC;QACpI,MAAM,GAAG,GAAG,MAAM,eAAe,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;QACzE,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC;IAC5C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sDAAsD,EAAE,KAAK,IAAI,EAAE;QACpE,MAAM,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,GAAG,MAAM,IAAI,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,CAA4B,CAAC;QAC7F,MAAM,GAAG,GAAG,MAAM,eAAe,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;QACzE,MAAM,CAAC,GAAG,CAAC,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC;IACvC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iDAAiD,EAAE,KAAK,IAAI,EAAE;QAC/D,MAAM,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC,CAA4B,CAAC;QACnG,MAAM,eAAe,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC;QACjE,MAAM,CAAC,CAAC,CAAC,CAAC,oBAAoB,CAC5B,oDAAoD,EACpD,MAAM,CAAC,gBAAgB,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC,CACnF,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/payload/platform/plugins/admin/mcp/dist/__tests__/skill-no-prescribed-role.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=skill-no-prescribed-role.test.d.ts.map

package/payload/platform/plugins/admin/mcp/dist/__tests__/skill-no-prescribed-role.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"skill-no-prescribed-role.test.d.ts","sourceRoot":"","sources":["../../src/__tests__/skill-no-prescribed-role.test.ts"],"names":[],"mappings":""}

package/payload/platform/plugins/admin/mcp/dist/__tests__/skill-no-prescribed-role.test.js

@@ -0,0 +1,50 @@
+// Standing guard for Task 622 — no prescribed lead-capture role in any admin skill.
+//
+// SOUL.md is personality plus the role the operator defines at creation. The
+// skill text must never re-prescribe a fixed Rubytech role (lead-capture /
+// contact-form / "give basic public info"). This is a no-event failure mode:
+// nothing logs when the prescribed role creeps back into the skill prose, so
+// the reconciliation between expected state (no prescribed role) and actual
+// file content lives here. A green run is the success signal; a match prints
+// the offending `file:line` and fails the build.
+import { describe, it, expect } from "vitest";
+import { readdirSync, readFileSync } from "node:fs";
+import { join, dirname } from "node:path";
+import { fileURLToPath } from "node:url";
+const SKILLS_DIR = join(dirname(fileURLToPath(import.meta.url)), "..", "..", "..", "skills");
+// Case-insensitive. The exact phrases the operator confirmed as prescriptive
+// and wrong (session ebff1750); see .tasks/archive/622-*.md.
+const FORBIDDEN = [
+    "capture the visitor's contact details",
+    "landing-page contact form",
+    "give basic public info",
+];
+function skillFiles(dir) {
+    const out = [];
+    for (const entry of readdirSync(dir, { withFileTypes: true })) {
+        const full = join(dir, entry.name);
+        if (entry.isDirectory())
+            out.push(...skillFiles(full));
+        else if (entry.name === "SKILL.md")
+            out.push(full);
+    }
+    return out;
+}
+describe("admin skills carry no prescribed lead-capture role (Task 622)", () => {
+    it("no SKILL.md contains a forbidden prescribed-role phrase", () => {
+        const hits = [];
+        for (const file of skillFiles(SKILLS_DIR)) {
+            const lines = readFileSync(file, "utf8").split("\n");
+            lines.forEach((line, i) => {
+                const lower = line.toLowerCase();
+                for (const phrase of FORBIDDEN) {
+                    if (lower.includes(phrase.toLowerCase())) {
+                        hits.push(`${file}:${i + 1} — ${phrase}`);
+                    }
+                }
+            });
+        }
+        expect(hits, `prescribed-role phrasing found:\n${hits.join("\n")}`).toEqual([]);
+    });
+});
+//# sourceMappingURL=skill-no-prescribed-role.test.js.map

package/payload/platform/plugins/admin/mcp/dist/__tests__/skill-no-prescribed-role.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"skill-no-prescribed-role.test.js","sourceRoot":"","sources":["../../src/__tests__/skill-no-prescribed-role.test.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,EAAE;AACF,6EAA6E;AAC7E,2EAA2E;AAC3E,6EAA6E;AAC7E,6EAA6E;AAC7E,4EAA4E;AAC5E,6EAA6E;AAC7E,iDAAiD;AACjD,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACpD,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAEzC,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC;AAE7F,6EAA6E;AAC7E,6DAA6D;AAC7D,MAAM,SAAS,GAAG;IAChB,uCAAuC;IACvC,2BAA2B;IAC3B,wBAAwB;CACzB,CAAC;AAEF,SAAS,UAAU,CAAC,GAAW;IAC7B,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,KAAK,MAAM,KAAK,IAAI,WAAW,CAAC,GAAG,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;QAC9D,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;QACnC,IAAI,KAAK,CAAC,WAAW,EAAE;YAAE,GAAG,CAAC,IAAI,CAAC,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC;aAClD,IAAI,KAAK,CAAC,IAAI,KAAK,UAAU;YAAE,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACrD,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,QAAQ,CAAC,+DAA+D,EAAE,GAAG,EAAE;IAC7E,EAAE,CAAC,yDAAyD,EAAE,GAAG,EAAE;QACjE,MAAM,IAAI,GAAa,EAAE,CAAC;QAC1B,KAAK,MAAM,IAAI,IAAI,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;YAC1C,MAAM,KAAK,GAAG,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YACrD,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,EAAE;gBACxB,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;gBACjC,KAAK,MAAM,MAAM,IAAI,SAAS,EAAE,CAAC;oBAC/B,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC,EAAE,CAAC;wBACzC,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,MAAM,MAAM,EAAE,CAAC,CAAC;oBAC5C,CAAC;gBACH,CAAC;YACH,CAAC,CAAC,CAAC;QACL,CAAC;QACD,MAAM,CAAC,IAAI,EAAE,oCAAoC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IAClF,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/payload/platform/plugins/admin/mcp/dist/index.js

@@ -23,6 +23,7 @@ import { resolvePublicHostname } from "./lib/public-hostname.js";
 import { publishSite } from "./tools/publish-site.js";
 import { resolveCapabilitiesHere } from "./tools/capabilities-here.js";
 import { runCatalogueCensus } from "./lib/catalogue-census.js";
+import { runAuthenticate } from "./tools/admin-identity-authenticate.js";
 function refusalGuidance(kind) {
     switch (kind) {
         case "unsafe-slug":
@@ -3146,6 +3147,13 @@ server.tool("session-retrospective-mark-complete", "Marks the end-of-session ret
             }],
     };
 });
+// Task 619 — native-CC admin PIN identity gate. Eager-loaded so it is visible
+// from the first turn: the operator must authenticate before any other tool is
+// reachable (the PreToolUse pin-identity-gate hook enforces that; this tool is
+// the agent-callable PIN-submit surface and returns the operator's profile).
+eagerTool(server, "admin-identity-authenticate", "Authenticate the current operator by PIN. MUST be the first tool you call in a session: submit the operator's PIN to bind their identity. No other tool is reachable until this succeeds. Returns the authenticated operator's profile.", { pin: z.string().describe("The operator's PIN, exactly as they typed it.") }, async ({ pin }) => ({
+    content: [{ type: "text", text: await runAuthenticate(pin) }],
+}));
 // Cleanup on exit (SIGTERM for systemd service stops on Pi)
 const cleanup = async () => {
     await closeDriver();