@rubytech/create-maxy-code 0.1.316 → 0.1.317

package/payload/platform/plugins/admin/mcp/dist/index.js

@@ -25,6 +25,7 @@ import { resolvePublicHostname } from "./lib/public-hostname.js";
 import { publishSite } from "./tools/publish-site.js";
 import { resolveCapabilitiesHere } from "./tools/capabilities-here.js";
 import { runCatalogueCensus } from "./lib/catalogue-census.js";
+import { lifelineTool } from "../../../../lib/mcp-lifeline/dist/index.js";
 function refusalGuidance(kind) {
     switch (kind) {
         case "unsafe-slug":
@@ -513,7 +514,7 @@ eagerTool(server, "public-hostname", "Resolve this account's canonical public ho
         };
     }
 });
-server.tool("publish-site", "Publish an already-extracted static-site tree under <accountDir>/sites/<slug>/. Validates the slug, scans the source for symlinks, refuses on ambiguous landing pages, performs a single mv, then refreshes llms.txt + llms-full.txt at the site root via the AEO writer (best-effort — failure never unwinds the mv). Returns the canonical path slug; pair with public-hostname to build the full URL. Refusals are structured (unsafe-slug | destination-occupied | symlink-in-source | zero-html | ambiguous-html), each carrying a fixed operator message.", {
+lifelineTool(server, "publish-site", "Publish an already-extracted static-site tree under <accountDir>/sites/<slug>/. Validates the slug, scans the source for symlinks, refuses on ambiguous landing pages, performs a single mv, then refreshes llms.txt + llms-full.txt at the site root via the AEO writer (best-effort — failure never unwinds the mv). Returns the canonical path slug; pair with public-hostname to build the full URL. Refusals are structured (unsafe-slug | destination-occupied | symlink-in-source | zero-html | ambiguous-html), each carrying a fixed operator message.", {
     source: z
         .string()
         .min(1)
@@ -761,7 +762,7 @@ eagerTool(server, "account-update", "Update a user-configurable setting in accou
 // tool is the legitimate path: validates the plugin name, refuses core plugins,
 // confirms the plugin directory exists, and atomically updates the array.
 // Entitlement-bearing fields (tier, purchasedPlugins) are NOT writable here.
-server.tool("plugin-toggle-enabled", "Enable or disable a plugin in this account by adding/removing its name from account.json's enabledPlugins array. Validates the plugin exists under platform/plugins/, refuses to disable core plugins (admin, memory, docs, cloudflare), and writes atomically. Takes effect on next session start. Does NOT change purchasedPlugins or tier — those derive from the signed entitlement payload.", {
+lifelineTool(server, "plugin-toggle-enabled", "Enable or disable a plugin in this account by adding/removing its name from account.json's enabledPlugins array. Validates the plugin exists under platform/plugins/, refuses to disable core plugins (admin, memory, docs, cloudflare), and writes atomically. Takes effect on next session start. Does NOT change purchasedPlugins or tier — those derive from the signed entitlement payload.", {
     pluginName: z.string().describe("Plugin slug (lowercase a-z0-9-)."),
     action: z.enum(["enable", "disable"]).describe("enable adds to enabledPlugins; disable removes."),
 }, async ({ pluginName, action }) => {
@@ -1187,7 +1188,7 @@ eagerTool(server, "admin-update-pin", "Update an existing admin user's PIN. Defa
         content: [{ type: "text", text: `PIN updated${self ? "" : ` for userId ${userId}`}. The new PIN takes effect on the next login.` }],
     };
 });
-server.tool("agent-image", "Upload, update, or remove an agent's image. action=set: copy the file at filePath to the agent's assets directory and update config.json with image URL and shape. action=remove: delete the image file and clear the image fields from config.json. imageShape: 'circle' for avatars/icons, 'rounded' for logos.", {
+lifelineTool(server, "agent-image", "Upload, update, or remove an agent's image. action=set: copy the file at filePath to the agent's assets directory and update config.json with image URL and shape. action=remove: delete the image file and clear the image fields from config.json. imageShape: 'circle' for avatars/icons, 'rounded' for logos.", {
     agentSlug: z.string().describe("Agent slug (e.g. 'coaching', 'sales')"),
     action: z.enum(["set", "remove"]),
     filePath: z.string().optional().describe("Absolute path to the image file (required for action=set)"),
@@ -1302,7 +1303,7 @@ server.tool("agent-image", "Upload, update, or remove an agent's image. action=s
 // ---------------------------------------------------------------------------
 // Agent config tools — deterministic reads for agent configuration
 // ---------------------------------------------------------------------------
-server.tool("agent-config-read", "Read the full config.json for a specific public agent by slug. Returns the complete configuration including slug, displayName, model, plugins, status, and any other fields.", {
+lifelineTool(server, "agent-config-read", "Read the full config.json for a specific public agent by slug. Returns the complete configuration including slug, displayName, model, plugins, status, and any other fields.", {
     slug: z.string().describe("Agent slug (directory name under agents/)"),
 }, async ({ slug }) => {
     if (!ACCOUNT_ID)
@@ -1340,7 +1341,7 @@ server.tool("agent-config-read", "Read the full config.json for a specific publi
         };
     }
 });
-server.tool("agent-list", "List all public (non-admin) agents with their full configuration: slug, displayName, model, plugins, status, and whether each is the account's default agent.", {}, async () => {
+lifelineTool(server, "agent-list", "List all public (non-admin) agents with their full configuration: slug, displayName, model, plugins, status, and whether each is the account's default agent.", {}, async () => {
     if (!ACCOUNT_ID)
         return refuseNoAccount("agent-list");
     const TAG = "[admin:agent-list]";
@@ -1863,7 +1864,7 @@ eagerTool(server, "plugin-read", "Read a plugin definition (PLUGIN.md) or one of
 // most agents want (resolve + read body in one shot). `skill-find` is kept
 // for callers that need only the path (e.g. tooling that lists owners
 // without reading the body).
-server.tool("skill-find", "Find which plugin owns a skill by name. Walks plugins/*/skills/<skillName>/SKILL.md and returns the owning plugin (unique), every candidate (ambiguous), or not-found. For the common resolve-and-read case, prefer `skill-load skillName=<name>` — it returns the SKILL.md body in the same call.", {
+lifelineTool(server, "skill-find", "Find which plugin owns a skill by name. Walks plugins/*/skills/<skillName>/SKILL.md and returns the owning plugin (unique), every candidate (ambiguous), or not-found. For the common resolve-and-read case, prefer `skill-load skillName=<name>` — it returns the SKILL.md body in the same call.", {
     skillName: z.string().regex(/^[a-z0-9][a-z0-9-]*$/, "skillName must be lowercase kebab-case (a-z, 0-9, -)"),
 }, async ({ skillName }) => {
     if (!ACCOUNT_ID)
@@ -2034,7 +2035,7 @@ eagerTool(server, "session-resume", "Resume a previous session. Loads the select
         return refuseNoAccount("session-resume");
     return { content: [{ type: "text", text: "resumed" }] };
 });
-server.tool("remote-auth-set-password", "Set an admin's remote access password — the outer password the tunnel asks for before the PIN screen. " +
+lifelineTool(server, "remote-auth-set-password", "Set an admin's remote access password — the outer password the tunnel asks for before the PIN screen. " +
     "Each admin has their own; setting one does not affect any other admin's password. " +
     "Defaults to the calling admin; pass userId (from admin-list) to set another admin's. " +
     "Hashes with scrypt at mode 0600. Validates strength (8+ chars, digit, special character, no spaces anywhere). " +
@@ -2087,7 +2088,7 @@ server.tool("remote-auth-set-password", "Set an admin's remote access password
         };
     }
 });
-server.tool("remote-auth-revoke-password", "Revoke an admin's remote access password so they can no longer obtain a NEW remote session (an already-open session lapses within 24h). " +
+lifelineTool(server, "remote-auth-revoke-password", "Revoke an admin's remote access password so they can no longer obtain a NEW remote session (an already-open session lapses within 24h). " +
     "Does not affect any other admin's password and does not touch their PIN. Pass userId (from admin-list).", { userId: z.string().describe("The admin whose remote access password to revoke. Use admin-list to find userIds.") }, async ({ userId }) => {
     if (!ACCOUNT_ID)
         return refuseNoAccount("remote-auth-revoke-password");
@@ -2429,7 +2430,7 @@ eagerTool(server, "wifi", "Manage WiFi connections on this device. Actions: " +
 // ===================================================================
 // Premium plugin tools
 // ===================================================================
-server.tool("premium-list", "List available premium plugins and their delivery status. Returns structured data " +
+lifelineTool(server, "premium-list", "List available premium plugins and their delivery status. Returns structured data " +
     "for each premium plugin in the staging area: name, type (standalone/bundle), description, " +
     "purchase status, and delivery status (per sub-plugin for bundles).", {}, async () => {
     if (!ACCOUNT_ID)
@@ -2501,7 +2502,7 @@ server.tool("premium-list", "List available premium plugins and their delivery s
         };
     }
 });
-server.tool("premium-deliver", "Deliver a purchased premium plugin. Copies plugin files from the staging area to the active " +
+lifelineTool(server, "premium-deliver", "Deliver a purchased premium plugin. Copies plugin files from the staging area to the active " +
     "plugin directory, verifies each copy, updates enabledPlugins in account.json, and scans for " +
     "agent templates. Handles both standalone plugins and bundles (auto-detected). Idempotent — " +
     "already-delivered sub-plugins are skipped. Returns a structured result with per-sub-plugin " +