@rubytech/create-maxy-code 0.1.316 → 0.1.317

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@rubytech/create-maxy-code",
-  "version": "0.1.316",
+  "version": "0.1.317",
   "description": "Install Maxy — AI for Productive People",
   "bin": {
     "create-maxy-code": "./dist/index.js"
@@ -13,7 +13,7 @@
     "build": "tsc",
     "bundle": "node scripts/bundle.js",
     "test": "npm run build && node --test 'dist/__tests__/*.test.js'",
-    "prepublishOnly": "bash ../../platform/scripts/verify-skill-tool-surface.sh && node ../../platform/scripts/check-plugin-tools-mcp-consistency.mjs && node ../../platform/scripts/check-specialist-tool-surface.mjs && node ../../platform/scripts/check-no-task-id-leaks.mjs && node ../../platform/scripts/check-no-esm-require.mjs && node ../../platform/scripts/check-skill-load-coverage.mjs && node ../../platform/scripts/check-architecture-skill-no-drift.mjs && node ../../platform/ui/scripts/check-route-wiring.mjs && node ../../platform/ui/scripts/check-edge-admin-routes.mjs && npm run build && node --test 'dist/__tests__/*.test.js' && chmod +x dist/index.js && npm run bundle && bash ../../platform/scripts/smoke-boot-services.sh && node ../../platform/ui/scripts/check-bundle-node-imports.mjs --dir=./payload/server/public/assets"
+    "prepublishOnly": "bash ../../platform/scripts/verify-skill-tool-surface.sh && node ../../platform/scripts/check-plugin-tools-mcp-consistency.mjs && node ../../platform/scripts/check-specialist-tool-surface.mjs && node ../../platform/scripts/check-no-task-id-leaks.mjs && node ../../platform/scripts/check-no-esm-require.mjs && node ../../platform/scripts/check-no-raw-mcp-registrations.mjs && node ../../platform/scripts/check-skill-load-coverage.mjs && node ../../platform/scripts/check-architecture-skill-no-drift.mjs && node ../../platform/ui/scripts/check-route-wiring.mjs && node ../../platform/ui/scripts/check-edge-admin-routes.mjs && npm run build && node --test 'dist/__tests__/*.test.js' && chmod +x dist/index.js && npm run bundle && bash ../../platform/scripts/smoke-boot-services.sh && node ../../platform/ui/scripts/check-bundle-node-imports.mjs --dir=./payload/server/public/assets"
   },
   "files": [
     "dist",

package/payload/platform/lib/mcp-eager/dist/index.d.ts

@@ -1,23 +1,3 @@
-/**
- * MCP eager-load helper.
- *
- * The Claude Code SDK marks every MCP tool as deferred-by-default: the model
- * cannot invoke an MCP tool until it has first called `ToolSearch` to load
- * the schema, which costs one extra turn per unique schema. The SDK's per-
- * tool override is `_meta["anthropic/alwaysLoad"]: true` on the tool's
- * `tools/list` entry, which `isDeferredTool` reads to flip the default.
- *
- * The MCP SDK exposes that channel only via `server.registerTool(name,
- * config, handler)`; the older `server.tool(name, desc, schema, handler)`
- * has no `_meta` parameter. This helper wraps the registerTool call so
- * every plugin's index.ts can opt a tool into eager-load with one line
- * matching the shape of the existing four-arg `server.tool` overload.
- *
- * Use for every tool that appears in `ADMIN_CORE_TOOLS` — the permission
- * allow-list IS the curation per the CEO review. Tools the
- * admin should not see should be removed from the allow-list, not merely
- * left deferred.
- */
 /** Wire-format metadata key the Claude Code SDK reads. */
 export declare const ALWAYS_LOAD_META_KEY: "anthropic/alwaysLoad";
 /**

package/payload/platform/lib/mcp-eager/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AACH,0DAA0D;AAC1D,eAAO,MAAM,oBAAoB,EAAG,sBAA+B,CAAC;AAEpE;;;;;;;GAOG;AAEH,KAAK,kBAAkB,GAAG;IAAE,YAAY,EAAE,CAAC,GAAG,IAAI,EAAE,GAAG,EAAE,KAAK,GAAG,CAAA;CAAE,CAAC;AAEpE;;;;;;;;;;GAUG;AACH,KAAK,gBAAgB,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AAEhD;;;;;;;;;;;;GAYG;AACH,wBAAgB,SAAS,CAAC,IAAI,SAAS,gBAAgB,EACrD,MAAM,EAAE,kBAAkB,EAC1B,IAAI,EAAE,MAAM,EACZ,WAAW,EAAE,MAAM,EACnB,WAAW,EAAE,IAAI,EAEjB,OAAO,EAAE,CAAC,GAAG,IAAI,EAAE,GAAG,EAAE,KAAK,GAAG,GAC/B,IAAI,CAUN"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAsBA,0DAA0D;AAC1D,eAAO,MAAM,oBAAoB,EAAG,sBAA+B,CAAC;AAEpE;;;;;;;GAOG;AAEH,KAAK,kBAAkB,GAAG;IAAE,YAAY,EAAE,CAAC,GAAG,IAAI,EAAE,GAAG,EAAE,KAAK,GAAG,CAAA;CAAE,CAAC;AAEpE;;;;;;;;;;GAUG;AACH,KAAK,gBAAgB,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AAEhD;;;;;;;;;;;;GAYG;AACH,wBAAgB,SAAS,CAAC,IAAI,SAAS,gBAAgB,EACrD,MAAM,EAAE,kBAAkB,EAC1B,IAAI,EAAE,MAAM,EACZ,WAAW,EAAE,MAAM,EACnB,WAAW,EAAE,IAAI,EAEjB,OAAO,EAAE,CAAC,GAAG,IAAI,EAAE,GAAG,EAAE,KAAK,GAAG,GAC/B,IAAI,CAUN"}

package/payload/platform/lib/mcp-eager/dist/index.js

@@ -22,6 +22,7 @@ exports.eagerTool = eagerTool;
  * admin should not see should be removed from the allow-list, not merely
  * left deferred.
  */
+const index_js_1 = require("../../mcp-lifeline/dist/index.js");
 /** Wire-format metadata key the Claude Code SDK reads. */
 exports.ALWAYS_LOAD_META_KEY = "anthropic/alwaysLoad";
 /**
@@ -44,6 +45,6 @@ handler) {
         description,
         inputSchema,
         _meta: { [exports.ALWAYS_LOAD_META_KEY]: true },
-    }, handler);
+    }, (0, index_js_1.wrapWithLifeline)(name, handler));
 }
 //# sourceMappingURL=index.js.map

package/payload/platform/lib/mcp-eager/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";;;AA4DA,8BAiBC;AA7ED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,0DAA0D;AAC7C,QAAA,oBAAoB,GAAG,sBAA+B,CAAC;AA0BpE;;;;;;;;;;;;GAYG;AACH,SAAgB,SAAS,CACvB,MAA0B,EAC1B,IAAY,EACZ,WAAmB,EACnB,WAAiB;AACjB,8DAA8D;AAC9D,OAAgC;IAEhC,MAAM,CAAC,YAAY,CACjB,IAAI,EACJ;QACE,WAAW;QACX,WAAW;QACX,KAAK,EAAE,EAAE,CAAC,4BAAoB,CAAC,EAAE,IAAI,EAAE;KACxC,EACD,OAAO,CACR,CAAC;AACJ,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";;;AA8DA,8BAiBC;AA/ED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,+DAAoE;AAEpE,0DAA0D;AAC7C,QAAA,oBAAoB,GAAG,sBAA+B,CAAC;AA0BpE;;;;;;;;;;;;GAYG;AACH,SAAgB,SAAS,CACvB,MAA0B,EAC1B,IAAY,EACZ,WAAmB,EACnB,WAAiB;AACjB,8DAA8D;AAC9D,OAAgC;IAEhC,MAAM,CAAC,YAAY,CACjB,IAAI,EACJ;QACE,WAAW;QACX,WAAW;QACX,KAAK,EAAE,EAAE,CAAC,4BAAoB,CAAC,EAAE,IAAI,EAAE;KACxC,EACD,IAAA,2BAAgB,EAAC,IAAI,EAAE,OAAO,CAAC,CAChC,CAAC;AACJ,CAAC"}

package/payload/platform/lib/mcp-eager/src/index.ts

@@ -18,6 +18,8 @@
  * admin should not see should be removed from the allow-list, not merely
  * left deferred.
  */
+import { wrapWithLifeline } from "../../mcp-lifeline/dist/index.js";
+
 /** Wire-format metadata key the Claude Code SDK reads. */
 export const ALWAYS_LOAD_META_KEY = "anthropic/alwaysLoad" as const;
 
@@ -73,6 +75,6 @@ export function eagerTool<Args extends LocalZodRawShape>(
       inputSchema,
       _meta: { [ALWAYS_LOAD_META_KEY]: true },
     },
-    handler,
+    wrapWithLifeline(name, handler),
   );
 }

package/payload/platform/lib/mcp-lifeline/dist/index.d.ts

@@ -0,0 +1,8 @@
+type AnyHandler = (...args: any[]) => any;
+type AnyServer = {
+    registerTool: (...args: any[]) => any;
+};
+export declare function wrapWithLifeline(name: string, handler: AnyHandler): AnyHandler;
+export declare function lifelineTool(server: AnyServer, name: string, description: string, inputSchema: Record<string, unknown>, handler: AnyHandler): void;
+export {};
+//# sourceMappingURL=index.d.ts.map

package/payload/platform/lib/mcp-lifeline/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AACA,KAAK,UAAU,GAAG,CAAC,GAAG,IAAI,EAAE,GAAG,EAAE,KAAK,GAAG,CAAC;AAE1C,KAAK,SAAS,GAAG;IAAE,YAAY,EAAE,CAAC,GAAG,IAAI,EAAE,GAAG,EAAE,KAAK,GAAG,CAAA;CAAE,CAAC;AA4B3D,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,UAAU,GAAG,UAAU,CAoC9E;AAED,wBAAgB,YAAY,CAC1B,MAAM,EAAE,SAAS,EACjB,IAAI,EAAE,MAAM,EACZ,WAAW,EAAE,MAAM,EACnB,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EACpC,OAAO,EAAE,UAAU,GAClB,IAAI,CAEN"}

package/payload/platform/lib/mcp-lifeline/dist/index.js

@@ -0,0 +1,71 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.wrapWithLifeline = wrapWithLifeline;
+exports.lifelineTool = lifelineTool;
+let callCounter = 0;
+function nextToken() {
+    return (++callCounter).toString(16).padStart(6, "0");
+}
+function censusHandles() {
+    try {
+        const resources = process.getActiveResourcesInfo?.();
+        if (!resources)
+            return "unavailable";
+        if (resources.length === 0)
+            return "none";
+        const counts = {};
+        for (const r of resources) {
+            counts[r] = (counts[r] ?? 0) + 1;
+        }
+        return Object.entries(counts)
+            .map(([k, v]) => `${k}:${v}`)
+            .join(" ");
+    }
+    catch {
+        return "unavailable";
+    }
+}
+function wrapWithLifeline(name, handler) {
+    return async (...args) => {
+        const plugin = process.env.MCP_SPAWN_TEE_NAME ?? "unknown";
+        const token = nextToken();
+        try {
+            process.stderr.write(`[${plugin}] op=request tool=${name} token=${token}\n`);
+        }
+        catch {
+            try {
+                process.stderr.write(`[mcp-lifeline] op=self-error tool=${name}\n`);
+            }
+            catch {
+                // stderr completely broken — still run handler
+            }
+            return handler(...args);
+        }
+        const start = process.hrtime.bigint();
+        let outcome = "ok";
+        let thrown;
+        let result;
+        try {
+            result = await handler(...args);
+        }
+        catch (err) {
+            outcome = "error";
+            thrown = err;
+        }
+        const ms = Number((process.hrtime.bigint() - start) / BigInt(1_000_000));
+        const handles = censusHandles();
+        try {
+            process.stderr.write(`[${plugin}] op=result tool=${name} token=${token} outcome=${outcome} ms=${ms} handles=${handles}\n`);
+        }
+        catch {
+            // broken pipe on result write — ignore, handler outcome takes priority
+        }
+        if (outcome === "error")
+            throw thrown;
+        return result;
+    };
+}
+function lifelineTool(server, name, description, inputSchema, handler) {
+    server.registerTool(name, { description, inputSchema }, wrapWithLifeline(name, handler));
+}
+//# sourceMappingURL=index.js.map

package/payload/platform/lib/mcp-lifeline/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";;AA+BA,4CAoCC;AAED,oCAQC;AAxED,IAAI,WAAW,GAAG,CAAC,CAAC;AACpB,SAAS,SAAS;IAChB,OAAO,CAAC,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;AACvD,CAAC;AAED,SAAS,aAAa;IACpB,IAAI,CAAC;QACH,MAAM,SAAS,GACb,OAGD,CAAC,sBAAsB,EAAE,EAAE,CAAC;QAC7B,IAAI,CAAC,SAAS;YAAE,OAAO,aAAa,CAAC;QACrC,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,MAAM,CAAC;QAC1C,MAAM,MAAM,GAA2B,EAAE,CAAC;QAC1C,KAAK,MAAM,CAAC,IAAI,SAAS,EAAE,CAAC;YAC1B,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;QACnC,CAAC;QACD,OAAO,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC;aAC1B,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;aAC5B,IAAI,CAAC,GAAG,CAAC,CAAC;IACf,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,aAAa,CAAC;IACvB,CAAC;AACH,CAAC;AAED,SAAgB,gBAAgB,CAAC,IAAY,EAAE,OAAmB;IAChE,OAAO,KAAK,EAAE,GAAG,IAAe,EAAE,EAAE;QAClC,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,kBAAkB,IAAI,SAAS,CAAC;QAC3D,MAAM,KAAK,GAAG,SAAS,EAAE,CAAC;QAC1B,IAAI,CAAC;YACH,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,MAAM,qBAAqB,IAAI,UAAU,KAAK,IAAI,CAAC,CAAC;QAC/E,CAAC;QAAC,MAAM,CAAC;YACP,IAAI,CAAC;gBACH,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,qCAAqC,IAAI,IAAI,CAAC,CAAC;YACtE,CAAC;YAAC,MAAM,CAAC;gBACP,+CAA+C;YACjD,CAAC;YACD,OAAO,OAAO,CAAC,GAAG,IAAI,CAAC,CAAC;QAC1B,CAAC;QACD,MAAM,KAAK,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;QACtC,IAAI,OAAO,GAAmB,IAAI,CAAC;QACnC,IAAI,MAAe,CAAC;QACpB,IAAI,MAAe,CAAC;QACpB,IAAI,CAAC;YACH,MAAM,GAAG,MAAM,OAAO,CAAC,GAAG,IAAI,CAAC,CAAC;QAClC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,GAAG,OAAO,CAAC;YAClB,MAAM,GAAG,GAAG,CAAC;QACf,CAAC;QACD,MAAM,EAAE,GAAG,MAAM,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,KAAK,CAAC,GAAG,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC;QACzE,MAAM,OAAO,GAAG,aAAa,EAAE,CAAC;QAChC,IAAI,CAAC;YACH,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,IAAI,MAAM,oBAAoB,IAAI,UAAU,KAAK,YAAY,OAAO,OAAO,EAAE,YAAY,OAAO,IAAI,CACrG,CAAC;QACJ,CAAC;QAAC,MAAM,CAAC;YACP,uEAAuE;QACzE,CAAC;QACD,IAAI,OAAO,KAAK,OAAO;YAAE,MAAM,MAAM,CAAC;QACtC,OAAO,MAAM,CAAC;IAChB,CAAC,CAAC;AACJ,CAAC;AAED,SAAgB,YAAY,CAC1B,MAAiB,EACjB,IAAY,EACZ,WAAmB,EACnB,WAAoC,EACpC,OAAmB;IAEnB,MAAM,CAAC,YAAY,CAAC,IAAI,EAAE,EAAE,WAAW,EAAE,WAAW,EAAE,EAAE,gBAAgB,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC;AAC3F,CAAC"}

package/payload/platform/lib/mcp-lifeline/package.json

@@ -0,0 +1,7 @@
+{
+  "name": "@maxy/mcp-lifeline",
+  "version": "0.1.0",
+  "private": true,
+  "type": "commonjs",
+  "main": "dist/index.js"
+}

package/payload/platform/lib/mcp-lifeline/src/__tests__/lifeline.test.ts

@@ -0,0 +1,146 @@
+import { describe, it, expect, vi, beforeEach } from "vitest";
+import { wrapWithLifeline } from "../index.js";
+
+function captureStderr(): { lines: string[]; restore: () => void } {
+  const lines: string[] = [];
+  const original = process.stderr.write.bind(process.stderr);
+  const spy = vi
+    .spyOn(process.stderr, "write")
+    .mockImplementation((chunk: unknown) => {
+      lines.push(String(chunk));
+      return true;
+    });
+  return {
+    lines,
+    restore: () => {
+      spy.mockRestore();
+      process.stderr.write = original;
+    },
+  };
+}
+
+beforeEach(() => {
+  process.env.MCP_SPAWN_TEE_NAME = "test-plugin";
+});
+
+describe("wrapWithLifeline — op=request before handler", () => {
+  it("writes op=request before the handler runs", async () => {
+    const { lines, restore } = captureStderr();
+    const order: string[] = [];
+    const handler = async () => {
+      order.push("handler");
+      return { content: [] };
+    };
+    const wrapped = wrapWithLifeline("my-tool", handler);
+    await wrapped({});
+    restore();
+    const requestIdx = lines.findIndex((l) => l.includes("op=request"));
+    expect(requestIdx).toBeGreaterThanOrEqual(0);
+    expect(order[0]).toBe("handler");
+    const resultIdx = lines.findIndex((l) => l.includes("op=result"));
+    expect(requestIdx).toBeLessThan(resultIdx);
+  });
+});
+
+describe("wrapWithLifeline — token correlation", () => {
+  it("op=request and op=result share the same token", async () => {
+    const { lines, restore } = captureStderr();
+    const wrapped = wrapWithLifeline("my-tool", async () => ({ content: [] }));
+    await wrapped({});
+    restore();
+    const reqLine = lines.find((l) => l.includes("op=request"));
+    const resLine = lines.find((l) => l.includes("op=result"));
+    expect(reqLine).toBeDefined();
+    expect(resLine).toBeDefined();
+    const reqToken = reqLine!.match(/token=(\S+)/)?.[1];
+    const resToken = resLine!.match(/token=(\S+)/)?.[1];
+    expect(reqToken).toBeDefined();
+    expect(reqToken).toBe(resToken);
+  });
+});
+
+describe("wrapWithLifeline — outcome=ok on success", () => {
+  it("writes outcome=ok when handler resolves", async () => {
+    const { lines, restore } = captureStderr();
+    const wrapped = wrapWithLifeline("my-tool", async () => ({ content: [] }));
+    await wrapped({});
+    restore();
+    const resLine = lines.find((l) => l.includes("op=result"));
+    expect(resLine).toContain("outcome=ok");
+  });
+});
+
+describe("wrapWithLifeline — outcome=error on throw, error re-thrown", () => {
+  it("writes outcome=error and re-throws the original error", async () => {
+    const { lines, restore } = captureStderr();
+    const boom = new Error("handler-boom");
+    const wrapped = wrapWithLifeline("my-tool", async () => {
+      throw boom;
+    });
+    let caught: unknown;
+    try {
+      await wrapped({});
+    } catch (e) {
+      caught = e;
+    }
+    restore();
+    expect(caught).toBe(boom);
+    const resLine = lines.find((l) => l.includes("op=result"));
+    expect(resLine).toContain("outcome=error");
+  });
+});
+
+describe("wrapWithLifeline — ms field", () => {
+  it("op=result contains a non-negative integer ms= field", async () => {
+    const { lines, restore } = captureStderr();
+    const wrapped = wrapWithLifeline("my-tool", async () => ({ content: [] }));
+    await wrapped({});
+    restore();
+    const resLine = lines.find((l) => l.includes("op=result"));
+    const ms = resLine?.match(/ms=(\d+)/)?.[1];
+    expect(ms).toBeDefined();
+    expect(Number(ms)).toBeGreaterThanOrEqual(0);
+  });
+});
+
+describe("wrapWithLifeline — handles field", () => {
+  it("op=result contains a handles= field", async () => {
+    const { lines, restore } = captureStderr();
+    const wrapped = wrapWithLifeline("my-tool", async () => ({ content: [] }));
+    await wrapped({});
+    restore();
+    const resLine = lines.find((l) => l.includes("op=result"));
+    expect(resLine).toMatch(/handles=\S+/);
+  });
+});
+
+describe("wrapWithLifeline — fail-open on broken stderr", () => {
+  it("runs handler even if pre-log write throws", async () => {
+    let handlerRan = false;
+    const writeStub = vi
+      .spyOn(process.stderr, "write")
+      .mockImplementationOnce(() => {
+        throw new Error("pipe broken");
+      })
+      .mockImplementation(() => true);
+    const wrapped = wrapWithLifeline("my-tool", async () => {
+      handlerRan = true;
+      return { content: [] };
+    });
+    await wrapped({});
+    writeStub.mockRestore();
+    expect(handlerRan).toBe(true);
+  });
+});
+
+describe("wrapWithLifeline — plugin label from env", () => {
+  it("uses MCP_SPAWN_TEE_NAME env var in log lines", async () => {
+    process.env.MCP_SPAWN_TEE_NAME = "email";
+    const { lines, restore } = captureStderr();
+    const wrapped = wrapWithLifeline("my-tool", async () => ({ content: [] }));
+    await wrapped({});
+    restore();
+    delete process.env.MCP_SPAWN_TEE_NAME;
+    expect(lines.some((l) => l.startsWith("[email]"))).toBe(true);
+  });
+});

package/payload/platform/lib/mcp-lifeline/src/index.ts

@@ -0,0 +1,78 @@
+// eslint-disable-next-line @typescript-eslint/no-explicit-any
+type AnyHandler = (...args: any[]) => any;
+// eslint-disable-next-line @typescript-eslint/no-explicit-any
+type AnyServer = { registerTool: (...args: any[]) => any };
+
+let callCounter = 0;
+function nextToken(): string {
+  return (++callCounter).toString(16).padStart(6, "0");
+}
+
+function censusHandles(): string {
+  try {
+    const resources = (
+      process as unknown as {
+        getActiveResourcesInfo?: () => string[];
+      }
+    ).getActiveResourcesInfo?.();
+    if (!resources) return "unavailable";
+    if (resources.length === 0) return "none";
+    const counts: Record<string, number> = {};
+    for (const r of resources) {
+      counts[r] = (counts[r] ?? 0) + 1;
+    }
+    return Object.entries(counts)
+      .map(([k, v]) => `${k}:${v}`)
+      .join(" ");
+  } catch {
+    return "unavailable";
+  }
+}
+
+export function wrapWithLifeline(name: string, handler: AnyHandler): AnyHandler {
+  return async (...args: unknown[]) => {
+    const plugin = process.env.MCP_SPAWN_TEE_NAME ?? "unknown";
+    const token = nextToken();
+    try {
+      process.stderr.write(`[${plugin}] op=request tool=${name} token=${token}\n`);
+    } catch {
+      try {
+        process.stderr.write(`[mcp-lifeline] op=self-error tool=${name}\n`);
+      } catch {
+        // stderr completely broken — still run handler
+      }
+      return handler(...args);
+    }
+    const start = process.hrtime.bigint();
+    let outcome: "ok" | "error" = "ok";
+    let thrown: unknown;
+    let result: unknown;
+    try {
+      result = await handler(...args);
+    } catch (err) {
+      outcome = "error";
+      thrown = err;
+    }
+    const ms = Number((process.hrtime.bigint() - start) / BigInt(1_000_000));
+    const handles = censusHandles();
+    try {
+      process.stderr.write(
+        `[${plugin}] op=result tool=${name} token=${token} outcome=${outcome} ms=${ms} handles=${handles}\n`,
+      );
+    } catch {
+      // broken pipe on result write — ignore, handler outcome takes priority
+    }
+    if (outcome === "error") throw thrown;
+    return result;
+  };
+}
+
+export function lifelineTool(
+  server: AnyServer,
+  name: string,
+  description: string,
+  inputSchema: Record<string, unknown>,
+  handler: AnyHandler,
+): void {
+  server.registerTool(name, { description, inputSchema }, wrapWithLifeline(name, handler));
+}

package/payload/platform/lib/mcp-lifeline/tsconfig.json

@@ -0,0 +1,9 @@
+{
+  "extends": "../../tsconfig.base.json",
+  "compilerOptions": {
+    "outDir": "dist",
+    "rootDir": "src"
+  },
+  "include": ["src"],
+  "exclude": ["src/__tests__"]
+}

package/payload/platform/lib/mcp-lifeline/vitest.config.ts

@@ -0,0 +1,9 @@
+import { defineConfig } from "vitest/config";
+
+export default defineConfig({
+  test: {
+    environment: "node",
+    globals: false,
+    include: ["src/__tests__/**/*.test.ts"],
+  },
+});

package/payload/platform/lib/models/dist/index.d.ts

@@ -24,4 +24,12 @@ export declare function isSelectableModel(id: string): boolean;
  *  real change from the running one — a raw `selected !== live` compare is
  *  always true for `[1m]` models. */
 export declare function baseModelId(id: string): string;
+/** The 5 permission modes the /chat composer and re-seat fork may write. */
+export declare const PERMISSION_MODES: readonly ["default", "acceptEdits", "plan", "auto", "bypassPermissions"];
+export type PermissionMode = (typeof PERMISSION_MODES)[number];
+export declare function isPermissionMode(value: string): value is PermissionMode;
+/** The 4 settings.json effort levels, low→highest. */
+export declare const EFFORT_LEVELS: readonly ["low", "medium", "high", "xhigh"];
+export type EffortLevel = (typeof EFFORT_LEVELS)[number];
+export declare function isEffortLevel(value: string): value is EffortLevel;
 //# sourceMappingURL=index.d.ts.map

package/payload/platform/lib/models/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAOA,eAAO,MAAM,UAAU,wBAAwB,CAAC;AAChD,eAAO,MAAM,YAAY,sBAAsB,CAAC;AAChD,eAAO,MAAM,WAAW,qBAAqB,CAAC;AAE9C,eAAO,MAAM,oBAAoB,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAIvD,CAAC;AAEF,wEAAwE;AACxE,wBAAgB,aAAa,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAEnD;AAED;;qEAEqE;AACrE,eAAO,MAAM,mBAAmB,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAItD,CAAC;AAEF;+DAC+D;AAC/D,wBAAgB,gBAAgB,CAAC,EAAE,EAAE,MAAM,GAAG,MAAM,CAEnD;AAED;;;mCAGmC;AACnC,eAAO,MAAM,iBAAiB,EAAE,SAAS,MAAM,EAA4C,CAAC;AAC5F,wBAAgB,iBAAiB,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAErD;AAED;;;;;qCAKqC;AACrC,wBAAgB,WAAW,CAAC,EAAE,EAAE,MAAM,GAAG,MAAM,CAE9C"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAOA,eAAO,MAAM,UAAU,wBAAwB,CAAC;AAChD,eAAO,MAAM,YAAY,sBAAsB,CAAC;AAChD,eAAO,MAAM,WAAW,qBAAqB,CAAC;AAE9C,eAAO,MAAM,oBAAoB,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAIvD,CAAC;AAEF,wEAAwE;AACxE,wBAAgB,aAAa,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAEnD;AAED;;qEAEqE;AACrE,eAAO,MAAM,mBAAmB,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAItD,CAAC;AAEF;+DAC+D;AAC/D,wBAAgB,gBAAgB,CAAC,EAAE,EAAE,MAAM,GAAG,MAAM,CAEnD;AAED;;;mCAGmC;AACnC,eAAO,MAAM,iBAAiB,EAAE,SAAS,MAAM,EAA4C,CAAC;AAC5F,wBAAgB,iBAAiB,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAErD;AAED;;;;;qCAKqC;AACrC,wBAAgB,WAAW,CAAC,EAAE,EAAE,MAAM,GAAG,MAAM,CAE9C;AAUD,4EAA4E;AAC5E,eAAO,MAAM,gBAAgB,0EAA2E,CAAC;AACzG,MAAM,MAAM,cAAc,GAAG,CAAC,OAAO,gBAAgB,CAAC,CAAC,MAAM,CAAC,CAAC;AAC/D,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,MAAM,GAAG,KAAK,IAAI,cAAc,CAEvE;AAED,sDAAsD;AACtD,eAAO,MAAM,aAAa,6CAA8C,CAAC;AACzE,MAAM,MAAM,WAAW,GAAG,CAAC,OAAO,aAAa,CAAC,CAAC,MAAM,CAAC,CAAC;AACzD,wBAAgB,aAAa,CAAC,KAAK,EAAE,MAAM,GAAG,KAAK,IAAI,WAAW,CAEjE"}

package/payload/platform/lib/models/dist/index.js

@@ -3,11 +3,13 @@
 // Templates, docs, and skills reference these values as strings;
 // all TypeScript consumers import from here.
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.SELECTABLE_MODELS = exports.MODEL_DISPLAY_NAMES = exports.MODEL_CONTEXT_WINDOW = exports.HAIKU_MODEL = exports.SONNET_MODEL = exports.OPUS_MODEL = void 0;
+exports.EFFORT_LEVELS = exports.PERMISSION_MODES = exports.SELECTABLE_MODELS = exports.MODEL_DISPLAY_NAMES = exports.MODEL_CONTEXT_WINDOW = exports.HAIKU_MODEL = exports.SONNET_MODEL = exports.OPUS_MODEL = void 0;
 exports.contextWindow = contextWindow;
 exports.modelDisplayName = modelDisplayName;
 exports.isSelectableModel = isSelectableModel;
 exports.baseModelId = baseModelId;
+exports.isPermissionMode = isPermissionMode;
+exports.isEffortLevel = isEffortLevel;
 // Opus defaults to the 1M-context variant ([1m] is Claude Code's
 // context-extension suffix, valid in settings.json "model" and agent
 // frontmatter); Sonnet/Haiku stay on the standard 200k window.
@@ -53,4 +55,21 @@ function isSelectableModel(id) {
 function baseModelId(id) {
     return id.replace(/\[1m\]$/, "");
 }
+// ── Protocol-level Claude Code lever enums ───────────────────────────────────
+// Two value sets tied to the Claude Code CLI: the composer-writable permission
+// modes and the settings.json effort levels. Single source of truth, imported
+// by the webchat route, the session manager (rc-daemon + fork), the re-seat
+// route, and the two /chat lever components. Friendly labels stay UI-local;
+// only the value sets and their validators live here. `dontAsk` and `max` are
+// deliberately excluded — neither is offered by these surfaces.
+/** The 5 permission modes the /chat composer and re-seat fork may write. */
+exports.PERMISSION_MODES = ["default", "acceptEdits", "plan", "auto", "bypassPermissions"];
+function isPermissionMode(value) {
+    return exports.PERMISSION_MODES.includes(value);
+}
+/** The 4 settings.json effort levels, low→highest. */
+exports.EFFORT_LEVELS = ["low", "medium", "high", "xhigh"];
+function isEffortLevel(value) {
+    return exports.EFFORT_LEVELS.includes(value);
+}
 //# sourceMappingURL=index.js.map

package/payload/platform/lib/models/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AAAA,0DAA0D;AAC1D,iEAAiE;AACjE,6CAA6C;;;AAgB7C,sCAEC;AAaD,4CAEC;AAOD,8CAEC;AAQD,kCAEC;AAlDD,iEAAiE;AACjE,qEAAqE;AACrE,+DAA+D;AAClD,QAAA,UAAU,GAAG,qBAAqB,CAAC;AACnC,QAAA,YAAY,GAAG,mBAAmB,CAAC;AACnC,QAAA,WAAW,GAAG,kBAAkB,CAAC;AAEjC,QAAA,oBAAoB,GAA2B;IAC1D,CAAC,kBAAU,CAAC,EAAE,SAAS;IACvB,CAAC,oBAAY,CAAC,EAAE,OAAO;IACvB,CAAC,mBAAW,CAAC,EAAE,OAAO;CACvB,CAAC;AAEF,wEAAwE;AACxE,SAAgB,aAAa,CAAC,KAAa;IACzC,OAAO,4BAAoB,CAAC,KAAK,CAAC,IAAI,OAAO,CAAC;AAChD,CAAC;AAED;;qEAEqE;AACxD,QAAA,mBAAmB,GAA2B;IACzD,CAAC,kBAAU,CAAC,EAAE,uBAAuB;IACrC,CAAC,oBAAY,CAAC,EAAE,YAAY;IAC5B,CAAC,mBAAW,CAAC,EAAE,WAAW;CAC3B,CAAC;AAEF;+DAC+D;AAC/D,SAAgB,gBAAgB,CAAC,EAAU;IACzC,OAAO,2BAAmB,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC;AACvC,CAAC;AAED;;;mCAGmC;AACtB,QAAA,iBAAiB,GAAsB,CAAC,kBAAU,EAAE,oBAAY,EAAE,mBAAW,CAAC,CAAC;AAC5F,SAAgB,iBAAiB,CAAC,EAAU;IAC1C,OAAO,yBAAiB,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;AACxC,CAAC;AAED;;;;;qCAKqC;AACrC,SAAgB,WAAW,CAAC,EAAU;IACpC,OAAO,EAAE,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;AACnC,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AAAA,0DAA0D;AAC1D,iEAAiE;AACjE,6CAA6C;;;AAgB7C,sCAEC;AAaD,4CAEC;AAOD,8CAEC;AAQD,kCAEC;AAaD,4CAEC;AAKD,sCAEC;AAxED,iEAAiE;AACjE,qEAAqE;AACrE,+DAA+D;AAClD,QAAA,UAAU,GAAG,qBAAqB,CAAC;AACnC,QAAA,YAAY,GAAG,mBAAmB,CAAC;AACnC,QAAA,WAAW,GAAG,kBAAkB,CAAC;AAEjC,QAAA,oBAAoB,GAA2B;IAC1D,CAAC,kBAAU,CAAC,EAAE,SAAS;IACvB,CAAC,oBAAY,CAAC,EAAE,OAAO;IACvB,CAAC,mBAAW,CAAC,EAAE,OAAO;CACvB,CAAC;AAEF,wEAAwE;AACxE,SAAgB,aAAa,CAAC,KAAa;IACzC,OAAO,4BAAoB,CAAC,KAAK,CAAC,IAAI,OAAO,CAAC;AAChD,CAAC;AAED;;qEAEqE;AACxD,QAAA,mBAAmB,GAA2B;IACzD,CAAC,kBAAU,CAAC,EAAE,uBAAuB;IACrC,CAAC,oBAAY,CAAC,EAAE,YAAY;IAC5B,CAAC,mBAAW,CAAC,EAAE,WAAW;CAC3B,CAAC;AAEF;+DAC+D;AAC/D,SAAgB,gBAAgB,CAAC,EAAU;IACzC,OAAO,2BAAmB,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC;AACvC,CAAC;AAED;;;mCAGmC;AACtB,QAAA,iBAAiB,GAAsB,CAAC,kBAAU,EAAE,oBAAY,EAAE,mBAAW,CAAC,CAAC;AAC5F,SAAgB,iBAAiB,CAAC,EAAU;IAC1C,OAAO,yBAAiB,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;AACxC,CAAC;AAED;;;;;qCAKqC;AACrC,SAAgB,WAAW,CAAC,EAAU;IACpC,OAAO,EAAE,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;AACnC,CAAC;AAED,gFAAgF;AAChF,+EAA+E;AAC/E,8EAA8E;AAC9E,4EAA4E;AAC5E,4EAA4E;AAC5E,8EAA8E;AAC9E,gEAAgE;AAEhE,4EAA4E;AAC/D,QAAA,gBAAgB,GAAG,CAAC,SAAS,EAAE,aAAa,EAAE,MAAM,EAAE,MAAM,EAAE,mBAAmB,CAAU,CAAC;AAEzG,SAAgB,gBAAgB,CAAC,KAAa;IAC5C,OAAQ,wBAAsC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;AACjE,CAAC;AAED,sDAAsD;AACzC,QAAA,aAAa,GAAG,CAAC,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,CAAU,CAAC;AAEzE,SAAgB,aAAa,CAAC,KAAa;IACzC,OAAQ,qBAAmC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;AAC9D,CAAC"}

package/payload/platform/lib/models/src/index.ts

@@ -53,3 +53,25 @@ export function isSelectableModel(id: string): boolean {
 export function baseModelId(id: string): string {
   return id.replace(/\[1m\]$/, "");
 }
+
+// ── Protocol-level Claude Code lever enums ───────────────────────────────────
+// Two value sets tied to the Claude Code CLI: the composer-writable permission
+// modes and the settings.json effort levels. Single source of truth, imported
+// by the webchat route, the session manager (rc-daemon + fork), the re-seat
+// route, and the two /chat lever components. Friendly labels stay UI-local;
+// only the value sets and their validators live here. `dontAsk` and `max` are
+// deliberately excluded — neither is offered by these surfaces.
+
+/** The 5 permission modes the /chat composer and re-seat fork may write. */
+export const PERMISSION_MODES = ["default", "acceptEdits", "plan", "auto", "bypassPermissions"] as const;
+export type PermissionMode = (typeof PERMISSION_MODES)[number];
+export function isPermissionMode(value: string): value is PermissionMode {
+  return (PERMISSION_MODES as readonly string[]).includes(value);
+}
+
+/** The 4 settings.json effort levels, low→highest. */
+export const EFFORT_LEVELS = ["low", "medium", "high", "xhigh"] as const;
+export type EffortLevel = (typeof EFFORT_LEVELS)[number];
+export function isEffortLevel(value: string): value is EffortLevel {
+  return (EFFORT_LEVELS as readonly string[]).includes(value);
+}

package/payload/platform/package.json

@@ -6,8 +6,8 @@
     "services/*"
   ],
   "scripts": {
-    "build": "tsc -p lib/models/tsconfig.json && tsc -p lib/mcp-stderr-tee/tsconfig.json && tsc -p lib/mcp-spawn-tee/tsconfig.json && tsc -p lib/mcp-eager/tsconfig.json && tsc -p lib/account-enumeration/tsconfig.json && tsc -p lib/graph-write/tsconfig.json && tsc -p lib/embed-client/tsconfig.json && tsc -p lib/graph-mcp/tsconfig.json && tsc -p lib/graph-trash/tsconfig.json && tsc -p lib/admin-conversation-purge/tsconfig.json && tsc -p lib/graph-search/tsconfig.json && tsc -p lib/graph-style/tsconfig.json && tsc -p lib/device-url/tsconfig.json && tsc -p lib/brand-templating/tsconfig.json && tsc -p lib/entitlement/tsconfig.json && tsc -p lib/task-secrets/tsconfig.json && tsc -p lib/admins-write/tsconfig.json && tsc -p lib/admin-access-password/tsconfig.json && tsc -p lib/persistent-components/tsconfig.json && tsc -p lib/require-port-env/tsconfig.json && tsc -p lib/aeo-llms-txt-writer/tsconfig.json && tsc -p lib/obsidian-parser/tsconfig.json && tsc -p services/claude-session-manager/tsconfig.json && tsc -p services/whatsapp-channel/tsconfig.json && tsc -p services/webchat-channel/tsconfig.json && NODE_OPTIONS='--max-old-space-size=8192' tsc -b plugins/*/mcp/tsconfig.json",
-    "build:lib": "tsc -p lib/models/tsconfig.json && tsc -p lib/mcp-stderr-tee/tsconfig.json && tsc -p lib/mcp-spawn-tee/tsconfig.json && tsc -p lib/mcp-eager/tsconfig.json && tsc -p lib/account-enumeration/tsconfig.json && tsc -p lib/graph-write/tsconfig.json && tsc -p lib/embed-client/tsconfig.json && tsc -p lib/graph-mcp/tsconfig.json && tsc -p lib/graph-trash/tsconfig.json && tsc -p lib/admin-conversation-purge/tsconfig.json && tsc -p lib/graph-search/tsconfig.json && tsc -p lib/graph-style/tsconfig.json && tsc -p lib/device-url/tsconfig.json && tsc -p lib/brand-templating/tsconfig.json && tsc -p lib/entitlement/tsconfig.json && tsc -p lib/task-secrets/tsconfig.json && tsc -p lib/admins-write/tsconfig.json && tsc -p lib/admin-access-password/tsconfig.json && tsc -p lib/persistent-components/tsconfig.json && tsc -p lib/require-port-env/tsconfig.json && tsc -p lib/aeo-llms-txt-writer/tsconfig.json && tsc -p lib/obsidian-parser/tsconfig.json",
+    "build": "tsc -p lib/models/tsconfig.json && tsc -p lib/mcp-stderr-tee/tsconfig.json && tsc -p lib/mcp-spawn-tee/tsconfig.json && tsc -p lib/mcp-lifeline/tsconfig.json && tsc -p lib/mcp-eager/tsconfig.json && tsc -p lib/account-enumeration/tsconfig.json && tsc -p lib/graph-write/tsconfig.json && tsc -p lib/embed-client/tsconfig.json && tsc -p lib/graph-mcp/tsconfig.json && tsc -p lib/graph-trash/tsconfig.json && tsc -p lib/admin-conversation-purge/tsconfig.json && tsc -p lib/graph-search/tsconfig.json && tsc -p lib/graph-style/tsconfig.json && tsc -p lib/device-url/tsconfig.json && tsc -p lib/brand-templating/tsconfig.json && tsc -p lib/entitlement/tsconfig.json && tsc -p lib/task-secrets/tsconfig.json && tsc -p lib/admins-write/tsconfig.json && tsc -p lib/admin-access-password/tsconfig.json && tsc -p lib/persistent-components/tsconfig.json && tsc -p lib/require-port-env/tsconfig.json && tsc -p lib/aeo-llms-txt-writer/tsconfig.json && tsc -p lib/obsidian-parser/tsconfig.json && tsc -p services/claude-session-manager/tsconfig.json && tsc -p services/whatsapp-channel/tsconfig.json && tsc -p services/webchat-channel/tsconfig.json && NODE_OPTIONS='--max-old-space-size=8192' tsc -b plugins/*/mcp/tsconfig.json",
+    "build:lib": "tsc -p lib/models/tsconfig.json && tsc -p lib/mcp-stderr-tee/tsconfig.json && tsc -p lib/mcp-spawn-tee/tsconfig.json && tsc -p lib/mcp-lifeline/tsconfig.json && tsc -p lib/mcp-eager/tsconfig.json && tsc -p lib/account-enumeration/tsconfig.json && tsc -p lib/graph-write/tsconfig.json && tsc -p lib/embed-client/tsconfig.json && tsc -p lib/graph-mcp/tsconfig.json && tsc -p lib/graph-trash/tsconfig.json && tsc -p lib/admin-conversation-purge/tsconfig.json && tsc -p lib/graph-search/tsconfig.json && tsc -p lib/graph-style/tsconfig.json && tsc -p lib/device-url/tsconfig.json && tsc -p lib/brand-templating/tsconfig.json && tsc -p lib/entitlement/tsconfig.json && tsc -p lib/task-secrets/tsconfig.json && tsc -p lib/admins-write/tsconfig.json && tsc -p lib/admin-access-password/tsconfig.json && tsc -p lib/persistent-components/tsconfig.json && tsc -p lib/require-port-env/tsconfig.json && tsc -p lib/aeo-llms-txt-writer/tsconfig.json && tsc -p lib/obsidian-parser/tsconfig.json",
     "gen:canonical-tools": "node scripts/generate-canonical-tool-names.mjs",
     "build:memory": "tsc -p plugins/memory/mcp/tsconfig.json",
     "build:contacts": "tsc -p plugins/contacts/mcp/tsconfig.json",
@@ -24,5 +24,8 @@
     "build:claude-session-manager": "tsc -p services/claude-session-manager/tsconfig.json",
   "build:whatsapp-channel": "tsc -p services/whatsapp-channel/tsconfig.json",
     "build:webchat-channel": "tsc -p services/webchat-channel/tsconfig.json"
+  },
+  "overrides": {
+    "zod": "3.x"
   }
 }