@rubytech/create-maxy-code 0.1.33 → 0.1.34

package/payload/platform/templates/specialists/agents/personal-assistant.md

@@ -3,7 +3,7 @@ name: personal-assistant
 description: "Your personal assistant. Scheduling, platform administration, messaging channels (Telegram, WhatsApp, email, Outlook), system health, Cloudflare tunnel setup, and browser automation. Delegate when a task involves managing your calendar, configuring the platform, operating messaging channels, setting up a tunnel or domain, or completing interactive browser tasks."
 summary: "Handles the operational tasks you'd give a personal assistant: scheduling meetings, managing your platform settings, connecting messaging channels, and completing browser-based tasks on your behalf."
 model: claude-sonnet-4-6
-tools: mcp__admin__system-status, mcp__admin__brand-settings, mcp__admin__account-manage, mcp__admin__account-update, mcp__admin__logs-read, mcp__admin__plugin-read, mcp__admin__api-key-store, mcp__admin__api-key-verify, mcp__admin__file-attach, mcp__admin__wifi, mcp__contacts__contact-create, mcp__contacts__contact-lookup, mcp__contacts__contact-update, mcp__contacts__contact-delete, mcp__contacts__contact-list, mcp__contacts__contact-export, mcp__contacts__contact-erase, mcp__contacts__group-create, mcp__contacts__group-manage, mcp__telegram__message, mcp__telegram__message-history, mcp__telegram__telegram-webhook-register, mcp__whatsapp__whatsapp-login-start, mcp__whatsapp__whatsapp-login-wait, mcp__whatsapp__whatsapp-status, mcp__whatsapp__whatsapp-disconnect, mcp__whatsapp__whatsapp-send, mcp__whatsapp__whatsapp-send-document, mcp__whatsapp__whatsapp-config, mcp__whatsapp__whatsapp-activity, mcp__whatsapp__whatsapp-conversations, mcp__whatsapp__whatsapp-messages, mcp__whatsapp__whatsapp-conversation-graph-state, mcp__whatsapp__whatsapp-group-info, mcp__email__email-setup, mcp__email__email-read, mcp__email__email-send, mcp__email__email-reply, mcp__email__email-search, mcp__email__email-graph-query, mcp__email__email-otp-extract, mcp__email__email-status, mcp__email__email-auto-respond-config, mcp__outlook__outlook-account-register, mcp__outlook__outlook-mail-list, mcp__outlook__outlook-mail-search, mcp__outlook__outlook-calendar-list, mcp__outlook__outlook-calendar-event, mcp__outlook__outlook-contacts-list, mcp__outlook__outlook-mailbox-info, mcp__scheduling__schedule-event, mcp__scheduling__schedule-list, mcp__scheduling__schedule-get, mcp__scheduling__schedule-update, mcp__scheduling__schedule-cancel, mcp__scheduling__schedule-export-ics, mcp__scheduling__schedule-import-ics, mcp__scheduling__time-resolve, mcp__memory__memory-search, mcp__memory__profile-update, mcp__plugin_playwright_playwright__browser_navigate, mcp__plugin_playwright_playwright__browser_navigate_back, mcp__plugin_playwright_playwright__browser_snapshot, mcp__plugin_playwright_playwright__browser_click, mcp__plugin_playwright_playwright__browser_fill, mcp__plugin_playwright_playwright__browser_fill_form, mcp__plugin_playwright_playwright__browser_type, mcp__plugin_playwright_playwright__browser_press_key, mcp__plugin_playwright_playwright__browser_hover, mcp__plugin_playwright_playwright__browser_select_option, mcp__plugin_playwright_playwright__browser_wait_for, mcp__plugin_playwright_playwright__browser_handle_dialog, mcp__plugin_playwright_playwright__browser_evaluate, mcp__plugin_playwright_playwright__browser_console_messages, mcp__plugin_playwright_playwright__browser_resize, mcp__plugin_playwright_playwright__browser_tabs, mcp__plugin_playwright_playwright__browser_close
+tools: mcp__admin__system-status, mcp__admin__brand-settings, mcp__admin__account-manage, mcp__admin__account-update, mcp__admin__logs-read, mcp__admin__plugin-read, mcp__admin__file-attach, mcp__admin__wifi, mcp__contacts__contact-create, mcp__contacts__contact-lookup, mcp__contacts__contact-update, mcp__contacts__contact-delete, mcp__contacts__contact-list, mcp__contacts__contact-export, mcp__contacts__contact-erase, mcp__contacts__group-create, mcp__contacts__group-manage, mcp__telegram__message, mcp__telegram__message-history, mcp__telegram__telegram-webhook-register, mcp__whatsapp__whatsapp-login-start, mcp__whatsapp__whatsapp-login-wait, mcp__whatsapp__whatsapp-status, mcp__whatsapp__whatsapp-disconnect, mcp__whatsapp__whatsapp-send, mcp__whatsapp__whatsapp-send-document, mcp__whatsapp__whatsapp-config, mcp__whatsapp__whatsapp-activity, mcp__whatsapp__whatsapp-conversations, mcp__whatsapp__whatsapp-messages, mcp__whatsapp__whatsapp-conversation-graph-state, mcp__whatsapp__whatsapp-group-info, mcp__email__email-setup, mcp__email__email-read, mcp__email__email-send, mcp__email__email-reply, mcp__email__email-search, mcp__email__email-graph-query, mcp__email__email-otp-extract, mcp__email__email-status, mcp__email__email-auto-respond-config, mcp__outlook__outlook-account-register, mcp__outlook__outlook-mail-list, mcp__outlook__outlook-mail-search, mcp__outlook__outlook-calendar-list, mcp__outlook__outlook-calendar-event, mcp__outlook__outlook-contacts-list, mcp__outlook__outlook-mailbox-info, mcp__scheduling__schedule-event, mcp__scheduling__schedule-list, mcp__scheduling__schedule-get, mcp__scheduling__schedule-update, mcp__scheduling__schedule-cancel, mcp__scheduling__schedule-export-ics, mcp__scheduling__schedule-import-ics, mcp__scheduling__time-resolve, mcp__memory__memory-search, mcp__memory__profile-update, mcp__plugin_playwright_playwright__browser_navigate, mcp__plugin_playwright_playwright__browser_navigate_back, mcp__plugin_playwright_playwright__browser_snapshot, mcp__plugin_playwright_playwright__browser_click, mcp__plugin_playwright_playwright__browser_fill, mcp__plugin_playwright_playwright__browser_fill_form, mcp__plugin_playwright_playwright__browser_type, mcp__plugin_playwright_playwright__browser_press_key, mcp__plugin_playwright_playwright__browser_hover, mcp__plugin_playwright_playwright__browser_select_option, mcp__plugin_playwright_playwright__browser_wait_for, mcp__plugin_playwright_playwright__browser_handle_dialog, mcp__plugin_playwright_playwright__browser_evaluate, mcp__plugin_playwright_playwright__browser_console_messages, mcp__plugin_playwright_playwright__browser_resize, mcp__plugin_playwright_playwright__browser_tabs, mcp__plugin_playwright_playwright__browser_close
 ---
 
 # Personal Assistant
@@ -40,8 +40,6 @@ Each domain has a small set of tools and, where it exists, a skill that drives t
 
 **Browser is visible.** Playwright is rendered to the operator's VNC viewer. They see every navigation, every fill, every click. After `browser_navigate`, call `browser_tabs` with `action: "select"` on the current tab index so the VNC viewer shows the page you just opened. Prefer `browser_snapshot` (accessibility tree with `ref` IDs) over `browser_take_screenshot`; take a screenshot only when you need to verify layout, colour, image, or canvas content. Use `browser_fill_form` over repeated `browser_fill`. Use `browser_evaluate` for state checks. Check `browser_console_messages` when something behaves unexpectedly. Dismiss cookie consent before the main task. Report CAPTCHA or bot detection as a blocker; do not try to solve it.
 
-**Anthropic API key acquisition is cookie-based.** Tell the operator the Anthropic Console will appear in the VNC browser already mounted in the chat (no extra tool call). Credits must exist before key creation; keys on zero-balance accounts are permanently rejected. The operator signs in themselves. Never fill credentials yourself. After creation, store via `api-key-store` and verify via `api-key-verify`.
-
 ## Optional capabilities
 
 Some tools come from optional plugins. When a brief needs a capability and the tools are absent from your tool list, name the gap in your output so admin can suggest activation. Telegram, WhatsApp, business-assistant (behaviour, no tools), sales (behaviour, no tools).

package/payload/platform/templates/specialists/agents/project-manager.md

@@ -38,7 +38,7 @@ A workflow is a named, persistent composition of executable steps. Steps are eit
 
 Confirm name and steps with the user before creating. `workflow-validate` checks every referenced tool and plugin is available; a workflow with unmet dependencies stays in `draft`. Status moves through `draft`, `active`, `paused`. Runs are `completed`, `partial`, or `failed`; read history via `workflow-runs`.
 
-Workflows can be triggered by scheduled events through the `check-due-events` dispatcher. As of Task 039 the dispatcher is not currently scheduled; migration to Desktop scheduled tasks is tracked separately. Until that lands, a workflow scheduled via `action: { plugin: "workflows", tool: "workflow-execute", args: { workflowId: "..." } }` stays inert until an operator invokes the dispatcher manually.
+Workflows can be triggered by scheduled events through the `check-due-events` dispatcher. The dispatcher is not currently scheduled; migration to Desktop scheduled tasks is tracked separately. Until that lands, a workflow scheduled via `action: { plugin: "workflows", tool: "workflow-execute", args: { workflowId: "..." } }` stays inert until an operator invokes the dispatcher manually.
 
 ## Graph adjacency at write time
 

package/payload/platform/templates/systemd/edge.service.template

@@ -9,9 +9,9 @@ Description=Edge service (public port + VNC transport — independent of the mai
 Type=simple
 # ExecStartPre owns the VNC stack so an `npx -y @rubytech/create-maxy@latest`
 # run from the admin UI can restart the main brand service without taking
-# Xtigervnc or websockify down with it. Task 647. Task 664 removed the ttyd
-# transport — upgrades now run via systemd-run --user transient units that
-# are peers of maxy-ui and survive its restart structurally.
+# Xtigervnc or websockify down with it. The ttyd transport was removed —
+# upgrades now run via systemd-run --user transient units that are peers
+# of maxy-ui and survive its restart structurally.
 ExecStartPre=/bin/bash __INSTALL_DIR__/platform/scripts/vnc.sh start
 ExecStart=/usr/bin/node __INSTALL_DIR__/server/maxy-edge.js
 ExecStopPost=/bin/bash __INSTALL_DIR__/platform/scripts/vnc.sh stop

package/payload/premium-plugins/real-agent/BUNDLE.md

@@ -1,6 +1,6 @@
 ---
 name: real-agent
-description: "UK estate agency skills + Loop CRM integration — 11 sub-plugins covering sales, listings, vendor management, buyer management, lead generation, coaching, business operations, onboarding, teaching, Loop CRM, and property brochures. 3 specialist roles (negotiator, valuer, compliance). 32 skills + 23 MCP tools."
+description: "UK estate agency skills + Loop CRM integration — 10 sub-plugins covering sales, listings, vendor management, buyer management, lead generation, coaching, business operations, teaching, Loop CRM, and property brochures. 3 specialist roles (negotiator, valuer, compliance). 31 skills + 23 MCP tools."
 plugins:
   - estate-sales
   - listings
@@ -9,7 +9,6 @@ plugins:
   - leads
   - estate-coaching
   - estate-business
-  - estate-onboarding
   - estate-teaching
   - loop
   - brochures
@@ -17,7 +16,7 @@ plugins:
 
 # Real Agent
 
-Premium plugin bundle for UK estate agency professionals. Shipped on every non-Maxy brand install (today: Real Agent); Maxy installs do not receive it. All 11 sub-plugins ship as a set, each independently activatable via `enabledPlugins`. Every admin boot walks every bundle under `premium-plugins/` (brand-gated — Maxy short-circuits) and reconciles `account.json` `enabledPlugins` against on-disk presence: any sub-plugin from the `plugins:` list above whose `platform/plugins/<sub>/PLUGIN.md` exists gets stamped via an idempotent set-union, so `mcp__loop__*` tools and the other sub-plugin surfaces are visible to the admin agent from the first turn after install — and on first boot post-deploy for accounts that already had the bundle on disk from a prior install. Disable individual sub-plugins with `plugin-toggle-enabled`. The bundle also delivers three specialist roles (negotiator, valuer, and compliance) that embed domain knowledge from the sub-plugins and operate autonomously with Loop CRM tools.
+Premium plugin bundle for UK estate agency professionals. Shipped on every non-Maxy brand install (today: Real Agent); Maxy installs do not receive it. All 10 sub-plugins ship as a set, each independently activatable via `enabledPlugins`. Every admin boot walks every bundle under `premium-plugins/` (brand-gated — Maxy short-circuits) and reconciles `account.json` `enabledPlugins` against on-disk presence: any sub-plugin from the `plugins:` list above whose `platform/plugins/<sub>/PLUGIN.md` exists gets stamped via an idempotent set-union, so `mcp__loop__*` tools and the other sub-plugin surfaces are visible to the admin agent from the first turn after install — and on first boot post-deploy for accounts that already had the bundle on disk from a prior install. Disable individual sub-plugins with `plugin-toggle-enabled`. The bundle also delivers three specialist roles (negotiator, valuer, and compliance) that embed domain knowledge from the sub-plugins and operate autonomously with Loop CRM tools.
 
 ## Specialist Roles
 
@@ -38,7 +37,6 @@ Premium plugin bundle for UK estate agency professionals. Shipped on every non-M
 | `leads` | 2 | — | Pipeline building — nurturing and prospecting |
 | `estate-coaching` | 4 | — | People development — coaching, training, performance |
 | `estate-business` | 4 | — | Business owner skills — growth, operations, brand, partnerships |
-| `estate-onboarding` | 1 | — | First-run member onboarding |
 | `estate-teaching` | 1 | — | Structured education module browsing and delivery |
 | `loop` | — | 23 | Loop CRM integration — properties, people, viewings, feedback, team, marketing, customer preferences, supplier |
 | `brochures` | 5 | — | Property brochure pipeline — brand extract, property extract, A4 layout, print constraints |

package/payload/premium-plugins/real-agent/plugins/.claude-plugin/marketplace.json

@@ -24,11 +24,6 @@
       "source": "./estate-coaching",
       "version": "0.1.0"
     },
-    {
-      "name": "estate-onboarding",
-      "source": "./estate-onboarding",
-      "version": "0.1.0"
-    },
     {
       "name": "estate-sales",
       "source": "./estate-sales",

package/payload/premium-plugins/real-agent/plugins/loop/mcp/dist/lib/neo4j.js

@@ -15,11 +15,11 @@ function readPassword() {
 }
 export function getDriver() {
     if (!driver) {
-        // Task 580: NEO4J_URI must be explicit. Silent default to :7687 was the
-        // vector for Task 577's orphan data in Maxy's DB from a realagent install.
+        // NEO4J_URI must be explicit. Silent default to:7687 was the
+        // vector for the orphan data in Maxy's DB from a realagent install.
         const uri = process.env.NEO4J_URI;
         if (!uri) {
-            throw new Error("[loop] NEO4J_URI unset — refusing to default to bolt://localhost:7687 (Task 580)");
+            throw new Error("[loop] NEO4J_URI unset — refusing to default to bolt://localhost:7687");
         }
         const user = process.env.NEO4J_USER ?? "neo4j";
         const password = readPassword();

package/payload/premium-plugins/real-agent/plugins/loop/mcp/dist/lib/neo4j.js.map

@@ -1 +1 @@
-{"version":3,"file":"neo4j.js","sourceRoot":"","sources":["../../src/lib/neo4j.ts"],"names":[],"mappings":"AAAA,OAAO,KAA0B,MAAM,cAAc,CAAC;AACtD,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEpC,IAAI,MAAM,GAAkB,IAAI,CAAC;AAEjC,SAAS,YAAY;IACnB,IAAI,OAAO,CAAC,GAAG,CAAC,cAAc;QAAE,OAAO,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC;IAElE,MAAM,YAAY,GAAG,OAAO,CAC1B,OAAO,CAAC,GAAG,CAAC,aAAa,IAAI,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,aAAa,CAAC,EACxE,wBAAwB,CACzB,CAAC;IAEF,IAAI,CAAC;QACH,OAAO,YAAY,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC;IACpD,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CACb,yCAAyC,YAAY,gCAAgC,CACtF,CAAC;IACJ,CAAC;AACH,CAAC;AAED,MAAM,UAAU,SAAS;IACvB,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,wEAAwE;QACxE,2EAA2E;QAC3E,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC;QAClC,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,MAAM,IAAI,KAAK,CACb,kFAAkF,CACnF,CAAC;QACJ,CAAC;QACD,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,UAAU,IAAI,OAAO,CAAC;QAC/C,MAAM,QAAQ,GAAG,YAAY,EAAE,CAAC;QAChC,OAAO,CAAC,KAAK,CAAC,6BAA6B,GAAG,EAAE,CAAC,CAAC;QAClD,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC;IAC/D,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,UAAU;IACxB,OAAO,SAAS,EAAE,CAAC,OAAO,EAAE,CAAC;AAC/B,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,WAAW;IAC/B,IAAI,MAAM,EAAE,CAAC;QACX,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;QACrB,MAAM,GAAG,IAAI,CAAC;IAChB,CAAC;AACH,CAAC"}
+{"version":3,"file":"neo4j.js","sourceRoot":"","sources":["../../src/lib/neo4j.ts"],"names":[],"mappings":"AAAA,OAAO,KAA0B,MAAM,cAAc,CAAC;AACtD,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEpC,IAAI,MAAM,GAAkB,IAAI,CAAC;AAEjC,SAAS,YAAY;IACnB,IAAI,OAAO,CAAC,GAAG,CAAC,cAAc;QAAE,OAAO,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC;IAElE,MAAM,YAAY,GAAG,OAAO,CAC1B,OAAO,CAAC,GAAG,CAAC,aAAa,IAAI,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,aAAa,CAAC,EACxE,wBAAwB,CACzB,CAAC;IAEF,IAAI,CAAC;QACH,OAAO,YAAY,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC;IACpD,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CACb,yCAAyC,YAAY,gCAAgC,CACtF,CAAC;IACJ,CAAC;AACH,CAAC;AAED,MAAM,UAAU,SAAS;IACvB,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,6DAA6D;QAC7D,oEAAoE;QACpE,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC;QAClC,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,MAAM,IAAI,KAAK,CACb,uEAAuE,CACxE,CAAC;QACJ,CAAC;QACD,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,UAAU,IAAI,OAAO,CAAC;QAC/C,MAAM,QAAQ,GAAG,YAAY,EAAE,CAAC;QAChC,OAAO,CAAC,KAAK,CAAC,6BAA6B,GAAG,EAAE,CAAC,CAAC;QAClD,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC;IAC/D,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,UAAU;IACxB,OAAO,SAAS,EAAE,CAAC,OAAO,EAAE,CAAC;AAC/B,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,WAAW;IAC/B,IAAI,MAAM,EAAE,CAAC;QACX,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;QACrB,MAAM,GAAG,IAAI,CAAC;IAChB,CAAC;AACH,CAAC"}

package/payload/premium-plugins/real-agent/plugins/loop/mcp/src/lib/neo4j.ts

@@ -23,12 +23,12 @@ function readPassword(): string {
 
 export function getDriver(): Driver {
   if (!driver) {
-    // Task 580: NEO4J_URI must be explicit. Silent default to :7687 was the
-    // vector for Task 577's orphan data in Maxy's DB from a realagent install.
+    // NEO4J_URI must be explicit. Silent default to:7687 was the
+    // vector for the orphan data in Maxy's DB from a realagent install.
     const uri = process.env.NEO4J_URI;
     if (!uri) {
       throw new Error(
-        "[loop] NEO4J_URI unset — refusing to default to bolt://localhost:7687 (Task 580)"
+        "[loop] NEO4J_URI unset — refusing to default to bolt://localhost:7687"
       );
     }
     const user = process.env.NEO4J_USER ?? "neo4j";

package/payload/server/{chunk-ZGJ6CUU2.js → chunk-3G6JMV7N.js}

@@ -1,6 +1,6 @@
 import {
   getConversationOwner
-} from "./chunk-KVGTWNKQ.js";
+} from "./chunk-NNHHGQJL.js";
 
 // node_modules/hono/dist/compose.js
 var compose = (middleware, onError, onNotFound) => {

package/payload/server/{chunk-KVGTWNKQ.js → chunk-NNHHGQJL.js}

@@ -229,7 +229,7 @@ async function persistMessage(conversationId, role, content, accountId, tokens,
        OPTIONAL MATCH (tail:Message)-[:PART_OF]->(c)
          WHERE NOT (tail)-[:NEXT]->(:Message)
            AND (tail:UserMessage OR tail:AssistantMessage)
-       // Task 857 \u2014 sublabel-scope the tail to the agent-path's own sublabels.
+       // sublabel-scope the tail to the agent-path's own sublabels.
        // Without this, a Task-857 :WhatsAppMessage row (no outgoing :NEXT)
        // would be picked as tail and the agent-path would chain
        // :WhatsAppMessage\u2192:UserMessage, crossing the live-channel chain.
@@ -277,7 +277,7 @@ async function persistMessage(conversationId, role, content, accountId, tokens,
            textOffset: comp.textOffset,
            submitted: false,
            createdAt: datetime(),
-           // Task 942 \u2014 store the artefact attachmentId on the :Component
+           // store the artefact attachmentId on the:Component
            // itself when this is a PERSISTENT_COMPONENTS write whose disk
            // write succeeded. Field is null for non-persistent / mime-skip
            // / disk-fail components. Lets the audit + backfill scripts
@@ -288,7 +288,7 @@ async function persistMessage(conversationId, role, content, accountId, tokens,
            attachmentId: comp.artefactAttachmentId
          })
        )
-       // Task 942 \u2014 for PERSISTENT_COMPONENTS whose disk write succeeded
+       // for PERSISTENT_COMPONENTS whose disk write succeeded
        // (artefactAttachmentId is non-null), MERGE the sibling
        // :KnowledgeDocument projection AND a :HAS_KNOWLEDGE_DOCUMENT edge
        // from the parent :Message in the same Cypher tx. ON CREATE stamps
@@ -346,13 +346,13 @@ async function persistMessage(conversationId, role, content, accountId, tokens,
           data: comp.data,
           ordinal: neo4j.int(comp.ordinal),
           textOffset: neo4j.int(comp.textOffset),
-          // Task 942 — null for non-persistent / mime-skip / disk-fail
+          // null for non-persistent / mime-skip / disk-fail
           // components; the FOREACH stamps this directly onto the
           // :Component row so audit + backfill read attachmentId without
           // re-deriving from componentId.
           artefactAttachmentId: comp.artefactAttachmentId ?? null
         })),
-        // Task 942 — :KnowledgeDocument MERGE list. One row per
+        //:KnowledgeDocument MERGE list. One row per
         // PERSISTENT_COMPONENTS component whose disk write succeeded;
         // text-only / mime-skip / disk-fail components are absent so
         // the FOREACH no-ops on them. attachmentId here matches the
@@ -860,6 +860,10 @@ async function renameConversation(conversationId, label) {
     await session.close();
   }
 }
+var DECAY_THRESHOLD_DAYS = 14;
+var DECAY_RATE_PER_DAY = 0.05;
+var INJECTION_THRESHOLD = 0.4;
+var MAX_SUMMARY_PREFERENCES = 30;
 async function getUserTimezone(accountId, userId) {
   const session = getSession();
   try {
@@ -968,6 +972,14 @@ async function writeAdminUserAndPerson(params) {
     await session.close();
   }
 }
+var PROFILE_CATEGORIES = [
+  "communication",
+  "scheduling",
+  "decision",
+  "workflow",
+  "content",
+  "interaction"
+];
 var PROFILE_FIELD_TEMPLATES = {
   communication: [
     "preferredChannel",
@@ -1014,6 +1026,302 @@ var TOTAL_PROFILE_FIELDS = Object.values(PROFILE_FIELD_TEMPLATES).reduce(
   (n, fs) => n + fs.length,
   0
 );
+function computeAbsentFields(preferences, extraTemplates = {}) {
+  const covered = /* @__PURE__ */ new Set();
+  for (const pref of preferences) {
+    const isCovered = pref.notApplicable === true || pref.confidence >= INJECTION_THRESHOLD;
+    if (isCovered) covered.add(`${pref.category}.${pref.key}`);
+  }
+  const absent = [];
+  for (const [category, fields] of Object.entries(PROFILE_FIELD_TEMPLATES)) {
+    for (const field of fields) {
+      const dotted = `${category}.${field}`;
+      if (!covered.has(dotted)) absent.push(dotted);
+    }
+  }
+  for (const [category, fields] of Object.entries(extraTemplates)) {
+    if (category in PROFILE_FIELD_TEMPLATES) continue;
+    for (const field of fields) {
+      const dotted = `${category}.${field}`;
+      if (!covered.has(dotted)) absent.push(dotted);
+    }
+  }
+  return absent;
+}
+function parsePluginProfileKeys(manifest) {
+  const fm = manifest.match(/^---\n([\s\S]*?)\n---/);
+  if (!fm) return [];
+  const out = [];
+  let inBlock = false;
+  for (const line of fm[1].split("\n")) {
+    if (/^profileKeys:/.test(line)) {
+      inBlock = true;
+      continue;
+    }
+    if (inBlock) {
+      const m = line.match(/^\s+-\s+(.+?)\s*$/);
+      if (m) out.push(m[1]);
+      else break;
+    }
+  }
+  return out;
+}
+function loadEnabledPluginProfileKeys(accountId) {
+  const accountFile = resolve(PLATFORM_ROOT, "..", "data/accounts", accountId, "account.json");
+  if (!existsSync(accountFile)) return {};
+  let enabled;
+  try {
+    const raw = readFileSync(accountFile, "utf-8");
+    const parsed = JSON.parse(raw);
+    enabled = Array.isArray(parsed.enabledPlugins) ? parsed.enabledPlugins.filter((p) => typeof p === "string") : [];
+  } catch (err) {
+    console.error(
+      `[profile-keys] account.json read failed for ${accountId.slice(0, 8)}\u2026: ${err instanceof Error ? err.message : String(err)}`
+    );
+    return {};
+  }
+  const merged = {};
+  for (const pluginName of enabled) {
+    const manifestPath = resolve(PLATFORM_ROOT, "plugins", pluginName, "PLUGIN.md");
+    if (!existsSync(manifestPath)) continue;
+    let manifest;
+    try {
+      manifest = readFileSync(manifestPath, "utf-8");
+    } catch {
+      continue;
+    }
+    for (const dotted of parsePluginProfileKeys(manifest)) {
+      const dot = dotted.indexOf(".");
+      if (dot <= 0 || dot === dotted.length - 1) {
+        console.error(`[profile-keys] malformed dotted key in ${pluginName}: ${dotted}`);
+        continue;
+      }
+      const category = dotted.slice(0, dot);
+      const key = dotted.slice(dot + 1);
+      if (!merged[category]) merged[category] = /* @__PURE__ */ new Set();
+      merged[category].add(key);
+    }
+  }
+  const out = {};
+  for (const [cat, set] of Object.entries(merged)) out[cat] = [...set];
+  return out;
+}
+var sparseStateLogged = /* @__PURE__ */ new Set();
+async function loadUserProfile(accountId, userId, conversationId) {
+  console.error(
+    `[profile] loadUserProfile entry accountId=${accountId.slice(0, 8)}\u2026 userId=${userId} conversationId=${conversationId ? `${conversationId.slice(0, 8)}\u2026` : "<none>"}`
+  );
+  const session = getSession();
+  try {
+    const serverTimezone = Intl.DateTimeFormat().resolvedOptions().timeZone;
+    const mergeResult = await session.run(
+      `MATCH (au:AdminUser {userId: $userId})
+       MERGE (au)-[:HAS_PROFILE]->(up:UserProfile {accountId: $accountId, userId: $userId})
+       ON CREATE SET
+         up.createdAt = $now,
+         up.updatedAt = $now,
+         up.profileVersion = 0,
+         up.scope = 'admin',
+         up.timezone = $serverTimezone
+       ON MATCH SET
+         up.timezone = CASE WHEN up.timezone IS NULL OR trim(up.timezone) = '' THEN $serverTimezone ELSE up.timezone END
+       RETURN up.createdAt = $now AS isNew`,
+      { accountId, userId, now: (/* @__PURE__ */ new Date()).toISOString(), serverTimezone }
+    );
+    if (mergeResult.records.length === 0) {
+      console.error(`[profile] loadUserProfile: AdminUser not found for userId=${userId} accountId=${accountId.slice(0, 8)}\u2026 \u2014 profile not created, invariant violated`);
+      return null;
+    }
+    const isNew = mergeResult.records[0].get("isNew");
+    if (isNew) {
+      console.error(`[profile] created new profile: userId=${userId} accountId=${accountId.slice(0, 8)}\u2026 timezone=${serverTimezone}`);
+    }
+    const nowMs = Date.now();
+    const thresholdMs = DECAY_THRESHOLD_DAYS * 24 * 60 * 60 * 1e3;
+    const staleResult = await session.run(
+      `MATCH (up:UserProfile {accountId: $accountId, userId: $userId})-[:HAS_PREFERENCE]->(pref:Preference)
+       WHERE pref.observedAt IS NOT NULL
+       RETURN pref.preferenceId AS preferenceId,
+              pref.observedAt AS observedAt,
+              pref.confidence AS confidence`,
+      { accountId, userId }
+    );
+    let decayCount = 0;
+    for (const record of staleResult.records) {
+      const observedAt = record.get("observedAt");
+      const confidence = record.get("confidence");
+      const observedMs = new Date(observedAt).getTime();
+      const ageMs = nowMs - observedMs;
+      if (ageMs > thresholdMs && confidence > 0) {
+        const daysPastThreshold = (ageMs - thresholdMs) / (24 * 60 * 60 * 1e3);
+        const decayedConfidence = Math.max(0, confidence - DECAY_RATE_PER_DAY * daysPastThreshold);
+        if (decayedConfidence !== confidence) {
+          await session.run(
+            `MATCH (pref:Preference {preferenceId: $preferenceId, accountId: $accountId})
+             SET pref.confidence = $confidence`,
+            {
+              preferenceId: record.get("preferenceId"),
+              accountId,
+              confidence: decayedConfidence
+            }
+          );
+          decayCount++;
+        }
+      }
+    }
+    const result = await session.run(
+      `MATCH (up:UserProfile {accountId: $accountId, userId: $userId})
+       OPTIONAL MATCH (au:AdminUser {userId: $userId})-[:OWNS]->(p:Person {accountId: $accountId})
+       OPTIONAL MATCH (up)-[:HAS_PREFERENCE]->(pref:Preference)
+       WHERE pref.confidence >= $threshold OR pref.notApplicable = true
+       WITH up, p, pref
+       ORDER BY pref.confidence DESC
+       WITH up, p, collect(pref) AS allPrefs
+       WITH up, p, allPrefs[0..$limit] AS prefs
+       RETURN up, p AS person, prefs`,
+      { accountId, userId, threshold: INJECTION_THRESHOLD, limit: MAX_SUMMARY_PREFERENCES }
+    );
+    if (result.records.length === 0 || !result.records[0].get("up")) {
+      return null;
+    }
+    const upNode = result.records[0].get("up");
+    const profileProps = { ...upNode.properties };
+    const personNode = result.records[0].get("person");
+    if (personNode?.properties) {
+      if (personNode.properties.givenName !== void 0) profileProps.givenName = personNode.properties.givenName;
+      if (personNode.properties.familyName !== void 0) profileProps.familyName = personNode.properties.familyName;
+      if (personNode.properties.email !== void 0) profileProps.email = personNode.properties.email;
+      if (personNode.properties.telephone !== void 0) profileProps.telephone = personNode.properties.telephone;
+    }
+    const prefNodes = result.records[0].get("prefs");
+    const preferences = prefNodes.map((p) => ({
+      preferenceId: p.properties.preferenceId,
+      category: p.properties.category,
+      key: p.properties.key,
+      value: p.properties.value,
+      confidence: p.properties.confidence,
+      source: p.properties.source,
+      observedAt: p.properties.observedAt,
+      notApplicable: p.properties.notApplicable === true
+    }));
+    const extraTemplates = loadEnabledPluginProfileKeys(accountId);
+    const extraFieldCount = Object.values(extraTemplates).reduce((n, fs) => n + fs.length, 0);
+    const summary = formatProfileSummary(profileProps, preferences, extraTemplates);
+    const absentFields = computeAbsentFields(preferences, extraTemplates);
+    const totalFields = TOTAL_PROFILE_FIELDS + extraFieldCount;
+    const fieldCoverageCount = totalFields - absentFields.length;
+    const presentCategories = new Set(
+      preferences.filter((p) => p.notApplicable === true || p.confidence >= INJECTION_THRESHOLD).map((p) => p.category)
+    );
+    const absentCategories = PROFILE_CATEGORIES.filter((c) => !presentCategories.has(c));
+    const categoryCoverage = PROFILE_CATEGORIES.length - absentCategories.length;
+    console.error(
+      `[profile] loaded for userId=${userId} accountId=${accountId.slice(0, 8)}\u2026 preferences=${preferences.length} fieldCoverage=${fieldCoverageCount}/${totalFields} categoryCoverage=${categoryCoverage}/${PROFILE_CATEGORIES.length} (decay: ${decayCount} updated)`
+    );
+    const identityKeys = [
+      { prop: "email", token: "email" },
+      // Schema-canonical name. `phone` is the synonym (rejected at tool
+      // surface); the log uses `telephone` to keep grep aligned with
+      // schema-base.md doctrine the brief enforces.
+      { prop: "telephone", token: "telephone" },
+      { prop: "givenName", token: "givenName" },
+      { prop: "familyName", token: "familyName" },
+      { prop: "role", token: "role" }
+    ];
+    const absentIdentity = identityKeys.filter((k) => {
+      const v = profileProps[k.prop];
+      return typeof v !== "string" || v.trim().length === 0;
+    });
+    const sparseFired = absentCategories.length > 0 || absentFields.length > 0 || absentIdentity.length > 0;
+    if (conversationId && sparseFired) {
+      const dedupeKey = `${accountId}:${userId}:${conversationId}`;
+      if (!sparseStateLogged.has(dedupeKey)) {
+        sparseStateLogged.add(dedupeKey);
+        const FIELDS_LOG_CAP = 10;
+        const absentFieldsTruncated = absentFields.length <= FIELDS_LOG_CAP ? absentFields.join(",") : `${absentFields.slice(0, FIELDS_LOG_CAP).join(",")}+${absentFields.length - FIELDS_LOG_CAP} more`;
+        console.error(
+          `[profile] sparse-state injected accountId=${accountId.slice(0, 8)}\u2026 userId=${userId} conversationId=${conversationId.slice(0, 8)}\u2026 absentCategories=${absentCategories.join(",")} absentFields=${absentFieldsTruncated || "none"} absentIdentity=${absentIdentity.map((k) => k.token).join(",") || "none"}`
+        );
+      }
+    }
+    return summary;
+  } catch (err) {
+    console.error(`[profile] loadUserProfile failed: ${err instanceof Error ? err.message : String(err)}`);
+    return null;
+  } finally {
+    await session.close();
+  }
+}
+function formatProfileSummary(profile, preferences, extraTemplates = {}) {
+  const givenName = typeof profile.givenName === "string" ? profile.givenName.trim() : "";
+  const familyName = typeof profile.familyName === "string" ? profile.familyName.trim() : "";
+  const joined = familyName ? `${givenName} ${familyName}` : givenName;
+  const name = joined || "Owner";
+  const role = profile.role ? ` (${profile.role})` : "";
+  const tz = profile.timezone ? ` \u2014 ${profile.timezone}` : "";
+  const locale = profile.locale ? `, ${profile.locale}` : "";
+  const expertise = profile.expertise ? `
+Expertise: ${typeof profile.expertise === "string" ? profile.expertise : JSON.stringify(profile.expertise)}` : "";
+  const lines = [`## About the Owner
+`];
+  lines.push(`${name}${role}${tz}${locale}${expertise}
+`);
+  const categories = {};
+  for (const pref of preferences) {
+    if (pref.notApplicable === true) continue;
+    if (!categories[pref.category]) categories[pref.category] = [];
+    categories[pref.category].push(pref);
+  }
+  const categoryLabels = {
+    communication: "Communication",
+    scheduling: "Scheduling",
+    decision: "Decisions",
+    workflow: "Workflow",
+    content: "Content",
+    interaction: "Interaction patterns"
+  };
+  const workCategories = ["communication", "scheduling", "decision", "workflow", "content"];
+  const workPrefs = workCategories.filter((c) => categories[c]);
+  if (workPrefs.length > 0) {
+    lines.push(`### How they work`);
+    for (const cat of workPrefs) {
+      const label = categoryLabels[cat] || cat;
+      const items = categories[cat].map((p) => p.value).join("; ");
+      lines.push(`- ${label}: ${items}`);
+    }
+    lines.push("");
+  }
+  if (categories.interaction) {
+    lines.push(`### Interaction patterns`);
+    for (const pref of categories.interaction) {
+      lines.push(`- ${pref.value}`);
+    }
+    lines.push("");
+  }
+  const identityFields = [
+    { key: "email", label: "email" },
+    { key: "telephone", label: "phone" },
+    { key: "givenName", label: "first name" },
+    { key: "familyName", label: "last name" },
+    { key: "role", label: "role" }
+  ];
+  const absentIdentity = identityFields.filter((f) => {
+    const v = profile[f.key];
+    return typeof v !== "string" || v.trim().length === 0;
+  });
+  if (absentIdentity.length > 0) {
+    lines.push(`### Identity coverage`);
+    lines.push(`Missing: ${absentIdentity.map((f) => f.label).join(", ")}`);
+    lines.push("");
+  }
+  const absentFields = computeAbsentFields(preferences, extraTemplates);
+  if (absentFields.length > 0) {
+    lines.push(`### Coverage`);
+    lines.push(`Missing: ${absentFields.join(", ")}`);
+    lines.push("");
+  }
+  return lines.join("\n");
+}
 var RECENT_FAILURES_TAIL_BYTES = 10 * 1024;
 var AGENT_FILE_ROLES = [
   { filename: "IDENTITY.md", role: "identity" },
@@ -1205,6 +1513,7 @@ export {
   getUserTimezone,
   loadAdminUserName,
   writeAdminUserAndPerson,
+  loadUserProfile,
   projectAgent,
   deleteAgentProjection
 };

package/payload/server/{chunk-RZQMYJVY.js → chunk-QC5LHYPH.js}

@@ -1,6 +1,6 @@
 import {
   getSession
-} from "./chunk-KVGTWNKQ.js";
+} from "./chunk-NNHHGQJL.js";
 import {
   __commonJS,
   __toESM
@@ -219,7 +219,7 @@ var require_dist = __commonJS({
         const actionToolField = reviewDigestActionTool ? "review-digest-compose" : "n/a";
         process.stderr.write(`[graph-write] reject reason=removed-feature labels=${labelCsv} actionTool=${actionToolField} agent=${agentLabel}
 `);
-        throw new Error("Write doctrine violated: review-detector feature removed (Task 884) \u2014 `:ReviewAlert` and `:Event {actionTool:'review-digest-compose'}` writes are not allowed.");
+        throw new Error("Write doctrine violated: review-detector feature removed \u2014 `:ReviewAlert` and `:Event {actionTool:'review-digest-compose'}` writes are not allowed.");
       }
       if (!relationships || relationships.length < 1) {
         process.stderr.write(`[graph-write] reject reason=zero-relationships labels=${labelCsv} agent=${agentLabel}
@@ -468,7 +468,7 @@ async function completeCloudflareTask(params) {
   const now = (/* @__PURE__ */ new Date()).toISOString();
   if (status === "failed" && (!errorMessage || errorMessage.trim().length === 0)) {
     throw new Error(
-      "cloudflare-task-tracker: errorMessage is required when status='failed' (Task 885 process-provenance contract)."
+      "cloudflare-task-tracker: errorMessage is required when status='failed' (process-provenance contract)."
     );
   }
   const session = getSession();

package/payload/server/{cloudflare-task-tracker-4PKOLE4H.js → cloudflare-task-tracker-NEB3X6O2.js}

@@ -7,8 +7,8 @@ import {
   readTunnelState,
   recoverRunningCloudflareTasks,
   resolveUnitGoneVerdict
-} from "./chunk-RZQMYJVY.js";
-import "./chunk-KVGTWNKQ.js";
+} from "./chunk-QC5LHYPH.js";
+import "./chunk-NNHHGQJL.js";
 import "./chunk-JSBRDJBE.js";
 export {
   CLOUDFLARE_TASK_DIAGNOSTICS,

package/payload/server/maxy-edge.js

@@ -18,8 +18,8 @@ import {
   streamActionEvents,
   vncLog,
   websockifyLog
-} from "./chunk-ZGJ6CUU2.js";
-import "./chunk-KVGTWNKQ.js";
+} from "./chunk-3G6JMV7N.js";
+import "./chunk-NNHHGQJL.js";
 import "./chunk-JSBRDJBE.js";
 
 // server/edge.ts