@rubytech/create-maxy-code 0.1.342 → 0.1.344

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@rubytech/create-maxy-code",
-  "version": "0.1.342",
+  "version": "0.1.344",
   "description": "Install Maxy — AI for Productive People",
   "bin": {
     "create-maxy-code": "./dist/index.js"

package/payload/platform/config/brand.json

@@ -40,7 +40,10 @@
     "logo": "maxy-square.png",
     "icon": "maxy-monochrome.png",
     "favicon": "favicon.ico",
-    "ogCard": "maxy-og-image.png"
+    "ogCard": "maxy-og-image.png",
+    "appIcon": "maxy-app-icon-512.png",
+    "appIcon192": "maxy-app-icon-192.png",
+    "maskableIcon": "maxy-app-icon-maskable-512.png"
   },
 
   "npm": {

package/payload/platform/neo4j/schema.cypher

@@ -671,13 +671,17 @@ OPTIONS {
 };
 
 // ----------------------------------------------------------
-// Meeting node — past or future calendar meetings ingested
-// from an .ics archive (scheduling/schedule-archive-ics).
+// Meeting node — past or future calendar meetings. Three
+// writers, all keyed on (accountId, uid): an .ics archive
+// (scheduling/schedule-archive-ics), public-booking reconcile
+// (source 'booking'), and a meeting booked conversationally
+// via schedule-event (source 'schedule-event', uid a content
+// hash of account + title + start).
 // Distinct from :Event (which models scheduled triggers /
 // recurring action dispatchers). A :Meeting carries the
-// title, start/end, location, description verbatim from the
-// source VEVENT plus the importing AdminUser's account scope.
-// Attendees are :Person nodes linked via (:Person)-[:ATTENDED]->(:Meeting).
+// title, start/end, location, description plus the owning
+// AdminUser's account scope. Attendees are :Person nodes
+// linked via (:Person)-[:ATTENDED]->(:Meeting).
 // ----------------------------------------------------------
 
 // Composite uniqueness so the same UID under two accounts

package/payload/platform/plugins/admin/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "admin",
-  "description": "Platform administration plugin. Provides system-status, public-hostname (deterministic Cloudflare public-URL resolver, single call returning the operator's canonical hostname so agents never guess property names on :CloudflareHostname nodes), publish-site (move an extracted static-site tree under <accountDir>/sites/<slug>/, emit one canonical path slug, and refresh llms.txt at the site root — typed refusal taxonomy replaces the prior skill-prose contract), brand-settings, account-manage, capabilities-here (deterministic install-introspection — returns enabledPlugins, tier, models, installed platform + premium specialists, registered Claude Code agent types, and the brand block as a single JSON object; the canonical tool for grounding any claim about what is enabled on the current account), account-update, the multi-account managed-service lifecycle tools (account_list, account_create, account_delete, account_purge — one Rubytech operator hosting N client accounts on one house install; create/delete/purge are operator-only and purge is two-step with a typed confirmation), admin-add, admin-remove, admin-list, admin-update-pin, agent-list, agent-config-read, logs-read, plugin-read, skill-load (one-call resolve+read for SKILL.md by skill name, the canonical primitive for loading a named skill; plugin-read remains the reader for references/* and PLUGIN.md), skill-search (free-text intent → skill resolver: ranks every plugin skill's SKILL.md name+description against a query and returns the top owners with their canonical skills/<slug>/ path, so intent→skill mapping survives the available-skills menu leaving context after a compaction), store-skill (deterministic write counterpart to plugin-read; persists operator-authored skills as plugin files under the active account), session-reset, session-resume, wifi, and action-approval tools (action-pending, action-approve, action-reject, action-edit) for managing the Maxy platform.",
+  "description": "Platform administration plugin. Provides system-status, public-hostname (deterministic Cloudflare public-URL resolver, single call returning the operator's canonical hostname so agents never guess property names on :CloudflareHostname nodes), admin-hostname (the admin-host twin of public-hostname — resolves the host that serves /calendar and the rest of the admin shell behind sign-in from the same ingress + alias + operator files, so agents point the operator at the admin /calendar URL instead of the public host that 404s it), publish-site (move an extracted static-site tree under <accountDir>/sites/<slug>/, emit one canonical path slug, and refresh llms.txt at the site root — typed refusal taxonomy replaces the prior skill-prose contract), brand-settings, account-manage, capabilities-here (deterministic install-introspection — returns enabledPlugins, tier, models, installed platform + premium specialists, registered Claude Code agent types, and the brand block as a single JSON object; the canonical tool for grounding any claim about what is enabled on the current account), account-update, the multi-account managed-service lifecycle tools (account_list, account_create, account_delete, account_purge — one Rubytech operator hosting N client accounts on one house install; create/delete/purge are operator-only and purge is two-step with a typed confirmation), admin-add, admin-remove, admin-list, admin-update-pin, agent-list, agent-config-read, logs-read, plugin-read, skill-load (one-call resolve+read for SKILL.md by skill name, the canonical primitive for loading a named skill; plugin-read remains the reader for references/* and PLUGIN.md), skill-search (free-text intent → skill resolver: ranks every plugin skill's SKILL.md name+description against a query and returns the top owners with their canonical skills/<slug>/ path, so intent→skill mapping survives the available-skills menu leaving context after a compaction), store-skill (deterministic write counterpart to plugin-read; persists operator-authored skills as plugin files under the active account), session-reset, session-resume, wifi, and action-approval tools (action-pending, action-approve, action-reject, action-edit) for managing the Maxy platform.",
   "version": "0.1.0",
   "author": {
     "name": "Rubytech LLC"

package/payload/platform/plugins/admin/PLUGIN.md

@@ -1,7 +1,7 @@
 ---
 name: admin
 surface: platform
-description: "Platform administration plugin. Provides system-status, public-hostname (deterministic Cloudflare public-URL resolver, single call returning the operator's canonical hostname so agents never guess property names on :CloudflareHostname nodes), publish-site (move an extracted static-site tree under <accountDir>/sites/<slug>/, emit one canonical path slug, and refresh llms.txt at the site root — typed refusal taxonomy replaces the prior skill-prose contract), brand-settings, account-manage, capabilities-here (deterministic install-introspection — returns enabledPlugins, tier, models, installed platform + premium specialists, registered Claude Code agent types, and the brand block as a single JSON object; the canonical tool for grounding any claim about what is enabled on the current account), account-update, the multi-account managed-service lifecycle tools (account_list, account_create, account_delete, account_purge — one Rubytech operator hosting N client accounts on one house install; create/delete/purge are operator-only and purge is two-step with a typed confirmation), admin-add, admin-remove, admin-list, admin-update-pin, agent-list, agent-config-read, logs-read, plugin-read, skill-load (one-call resolve+read for SKILL.md by skill name, the canonical primitive for loading a named skill; plugin-read remains the reader for references/* and PLUGIN.md), skill-search (free-text intent → skill resolver: ranks every plugin skill's SKILL.md name+description against a query and returns the top owners with their canonical skills/<slug>/ path, so intent→skill mapping survives the available-skills menu leaving context after a compaction), store-skill (deterministic write counterpart to plugin-read; persists operator-authored skills as plugin files under the active account), session-reset, session-resume, wifi, and action-approval tools (action-pending, action-approve, action-reject, action-edit) for managing the Maxy platform."
+description: "Platform administration plugin. Provides system-status, public-hostname (deterministic Cloudflare public-URL resolver, single call returning the operator's canonical hostname so agents never guess property names on :CloudflareHostname nodes), admin-hostname (the admin-host twin of public-hostname — resolves the host that serves /calendar and the rest of the admin shell behind sign-in from the same ingress + alias + operator files, so agents point the operator at the admin /calendar URL instead of the public host that 404s it), publish-site (move an extracted static-site tree under <accountDir>/sites/<slug>/, emit one canonical path slug, and refresh llms.txt at the site root — typed refusal taxonomy replaces the prior skill-prose contract), brand-settings, account-manage, capabilities-here (deterministic install-introspection — returns enabledPlugins, tier, models, installed platform + premium specialists, registered Claude Code agent types, and the brand block as a single JSON object; the canonical tool for grounding any claim about what is enabled on the current account), account-update, the multi-account managed-service lifecycle tools (account_list, account_create, account_delete, account_purge — one Rubytech operator hosting N client accounts on one house install; create/delete/purge are operator-only and purge is two-step with a typed confirmation), admin-add, admin-remove, admin-list, admin-update-pin, agent-list, agent-config-read, logs-read, plugin-read, skill-load (one-call resolve+read for SKILL.md by skill name, the canonical primitive for loading a named skill; plugin-read remains the reader for references/* and PLUGIN.md), skill-search (free-text intent → skill resolver: ranks every plugin skill's SKILL.md name+description against a query and returns the top owners with their canonical skills/<slug>/ path, so intent→skill mapping survives the available-skills menu leaving context after a compaction), store-skill (deterministic write counterpart to plugin-read; persists operator-authored skills as plugin files under the active account), session-reset, session-resume, wifi, and action-approval tools (action-pending, action-approve, action-reject, action-edit) for managing the Maxy platform."
 tools:
   - name: system-status
     publicAllowlist: false
@@ -9,6 +9,9 @@ tools:
   - name: public-hostname
     publicAllowlist: false
     adminAllowlist: false
+  - name: admin-hostname
+    publicAllowlist: false
+    adminAllowlist: false
   - name: publish-site
     publicAllowlist: false
     adminAllowlist: false

package/payload/platform/plugins/admin/mcp/dist/__tests__/admin-hostname.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=admin-hostname.test.d.ts.map

package/payload/platform/plugins/admin/mcp/dist/__tests__/admin-hostname.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"admin-hostname.test.d.ts","sourceRoot":"","sources":["../../src/__tests__/admin-hostname.test.ts"],"names":[],"mappings":""}

package/payload/platform/plugins/admin/mcp/dist/__tests__/admin-hostname.test.js

@@ -0,0 +1,175 @@
+// filesystem-only resolver tests — the admin-host twin of public-hostname.
+// Each test seeds a temp configDir on disk and asserts the chosen hostname,
+// source, and isApex flag. The admin host is the ingress hostname that routes
+// to the brand UI over http and is neither public (public. prefix or an
+// alias-domains.json entry) nor operator (an operator-domains.json entry).
+import { describe, it, expect, beforeEach, afterEach } from "vitest";
+import { mkdtempSync, mkdirSync, rmSync, writeFileSync } from "node:fs";
+import { tmpdir } from "node:os";
+import { join } from "node:path";
+import { resolveAdminHostname } from "../lib/admin-hostname.js";
+function writeConfigYml(configDir, body) {
+    mkdirSync(join(configDir, "cloudflared"), { recursive: true });
+    writeFileSync(join(configDir, "cloudflared", "config.yml"), body);
+}
+function writeAliasDomains(configDir, list) {
+    writeFileSync(join(configDir, "alias-domains.json"), JSON.stringify(list));
+}
+function writeOperatorDomains(configDir, list) {
+    writeFileSync(join(configDir, "operator-domains.json"), JSON.stringify(list));
+}
+describe("resolveAdminHostname", () => {
+    let configDir;
+    beforeEach(() => {
+        configDir = mkdtempSync(join(tmpdir(), "admin-hostname-test-"));
+    });
+    afterEach(() => {
+        rmSync(configDir, { recursive: true, force: true });
+    });
+    it("returns the admin host from a standard admin.+public. ingress", () => {
+        writeConfigYml(configDir, [
+            "tunnel: abc-123",
+            "ingress:",
+            "  - hostname: admin.maxy.bot",
+            "    service: http://localhost:8080",
+            "  - hostname: public.maxy.bot",
+            "    service: http://localhost:8080",
+            "  - service: http_status:404",
+            "",
+        ].join("\n"));
+        expect(resolveAdminHostname(configDir)).toEqual({
+            hostname: "admin.maxy.bot",
+            isApex: false,
+            source: "cloudflared-config.yml",
+        });
+    });
+    it("returns the admin host when the public host is an apex alias on a different base domain", () => {
+        // The reported bug: public-hostname resolves the alias apex (maxy.chat),
+        // admin-hostname must return admin.maxy.bot, an unrelated base domain.
+        writeConfigYml(configDir, [
+            "ingress:",
+            "  - hostname: admin.maxy.bot",
+            "    service: http://localhost:8080",
+            "  - hostname: maxy.chat",
+            "    service: http://localhost:8080",
+            "  - service: http_status:404",
+            "",
+        ].join("\n"));
+        writeAliasDomains(configDir, ["maxy.chat"]);
+        expect(resolveAdminHostname(configDir).hostname).toBe("admin.maxy.bot");
+    });
+    it("excludes ssh:// and tcp:// ingress rows so only the http UI host wins", () => {
+        writeConfigYml(configDir, [
+            "ingress:",
+            "  - hostname: admin.maxy.bot",
+            "    service: http://localhost:8080",
+            "  - hostname: public.maxy.bot",
+            "    service: http://localhost:8080",
+            "  - hostname: ssh.maxy.bot",
+            "    service: ssh://localhost:22",
+            "  - hostname: smb.maxy.bot",
+            "    service: tcp://localhost:445",
+            "  - service: http_status:404",
+            "",
+        ].join("\n"));
+        expect(resolveAdminHostname(configDir).hostname).toBe("admin.maxy.bot");
+    });
+    it("excludes the operator-dashboard host from the admin answer", () => {
+        writeConfigYml(configDir, [
+            "ingress:",
+            "  - hostname: ops.maxy.bot",
+            "    service: http://localhost:8080",
+            "  - hostname: admin.maxy.bot",
+            "    service: http://localhost:8080",
+            "  - hostname: public.maxy.bot",
+            "    service: http://localhost:8080",
+            "  - service: http_status:404",
+            "",
+        ].join("\n"));
+        writeOperatorDomains(configDir, ["ops.maxy.bot"]);
+        // ops.maxy.bot is first in file but operator-classified, so admin.maxy.bot wins.
+        expect(resolveAdminHostname(configDir).hostname).toBe("admin.maxy.bot");
+    });
+    it("returns first-in-file when more than one admin-class host exists", () => {
+        writeConfigYml(configDir, [
+            "ingress:",
+            "  - hostname: admin.maxy.bot",
+            "    service: http://localhost:8080",
+            "  - hostname: maxy.bot",
+            "    service: http://localhost:8080",
+            "  - service: http_status:404",
+            "",
+        ].join("\n"));
+        // Neither is public or operator; admin.maxy.bot is listed first.
+        expect(resolveAdminHostname(configDir).hostname).toBe("admin.maxy.bot");
+    });
+    it("flags an apex admin host via isApex", () => {
+        writeConfigYml(configDir, [
+            "ingress:",
+            "  - hostname: maxy.bot",
+            "    service: http://localhost:8080",
+            "  - hostname: public.maxy.bot",
+            "    service: http://localhost:8080",
+            "  - service: http_status:404",
+            "",
+        ].join("\n"));
+        expect(resolveAdminHostname(configDir)).toEqual({
+            hostname: "maxy.bot",
+            isApex: true,
+            source: "cloudflared-config.yml",
+        });
+    });
+    it("filters localhost and *.local entries from config.yml ingress", () => {
+        writeConfigYml(configDir, [
+            "ingress:",
+            "  - hostname: localhost",
+            "    service: http://127.0.0.1:7474",
+            "  - hostname: maxy.local",
+            "    service: http://127.0.0.1:7475",
+            "  - hostname: admin.maxy.bot",
+            "    service: http://localhost:8080",
+            "  - service: http_status:404",
+            "",
+        ].join("\n"));
+        expect(resolveAdminHostname(configDir).hostname).toBe("admin.maxy.bot");
+    });
+    it("returns reason=no-admin-host when every UI host is public or operator", () => {
+        writeConfigYml(configDir, [
+            "ingress:",
+            "  - hostname: public.maxy.bot",
+            "    service: http://localhost:8080",
+            "  - service: http_status:404",
+            "",
+        ].join("\n"));
+        expect(resolveAdminHostname(configDir)).toEqual({
+            hostname: null,
+            isApex: null,
+            source: null,
+            reason: "no-admin-host",
+        });
+    });
+    it("emits no host for a lone http_status:404 catch-all service line", () => {
+        // The catch-all `- service:` line carries no hostname; the pendingHost
+        // guard must keep it from ever being treated as a UI host.
+        writeConfigYml(configDir, [
+            "ingress:",
+            "  - service: http_status:404",
+            "",
+        ].join("\n"));
+        expect(resolveAdminHostname(configDir)).toEqual({
+            hostname: null,
+            isApex: null,
+            source: null,
+            reason: "no-admin-host",
+        });
+    });
+    it("returns reason=no-admin-host when config.yml is absent", () => {
+        expect(resolveAdminHostname(configDir)).toEqual({
+            hostname: null,
+            isApex: null,
+            source: null,
+            reason: "no-admin-host",
+        });
+    });
+});
+//# sourceMappingURL=admin-hostname.test.js.map

package/payload/platform/plugins/admin/mcp/dist/__tests__/admin-hostname.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"admin-hostname.test.js","sourceRoot":"","sources":["../../src/__tests__/admin-hostname.test.ts"],"names":[],"mappings":"AAAA,2EAA2E;AAC3E,4EAA4E;AAC5E,8EAA8E;AAC9E,wEAAwE;AACxE,2EAA2E;AAE3E,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAC;AACrE,OAAO,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACxE,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,oBAAoB,EAAE,MAAM,0BAA0B,CAAC;AAEhE,SAAS,cAAc,CAAC,SAAiB,EAAE,IAAY;IACrD,SAAS,CAAC,IAAI,CAAC,SAAS,EAAE,aAAa,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC/D,aAAa,CAAC,IAAI,CAAC,SAAS,EAAE,aAAa,EAAE,YAAY,CAAC,EAAE,IAAI,CAAC,CAAC;AACpE,CAAC;AAED,SAAS,iBAAiB,CAAC,SAAiB,EAAE,IAAa;IACzD,aAAa,CAAC,IAAI,CAAC,SAAS,EAAE,oBAAoB,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;AAC7E,CAAC;AAED,SAAS,oBAAoB,CAAC,SAAiB,EAAE,IAAa;IAC5D,aAAa,CAAC,IAAI,CAAC,SAAS,EAAE,uBAAuB,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;AAChF,CAAC;AAED,QAAQ,CAAC,sBAAsB,EAAE,GAAG,EAAE;IACpC,IAAI,SAAiB,CAAC;IAEtB,UAAU,CAAC,GAAG,EAAE;QACd,SAAS,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,sBAAsB,CAAC,CAAC,CAAC;IAClE,CAAC,CAAC,CAAC;IAEH,SAAS,CAAC,GAAG,EAAE;QACb,MAAM,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACtD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+DAA+D,EAAE,GAAG,EAAE;QACvE,cAAc,CAAC,SAAS,EAAE;YACxB,iBAAiB;YACjB,UAAU;YACV,8BAA8B;YAC9B,oCAAoC;YACpC,+BAA+B;YAC/B,oCAAoC;YACpC,8BAA8B;YAC9B,EAAE;SACH,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QACd,MAAM,CAAC,oBAAoB,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC;YAC9C,QAAQ,EAAE,gBAAgB;YAC1B,MAAM,EAAE,KAAK;YACb,MAAM,EAAE,wBAAwB;SACjC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yFAAyF,EAAE,GAAG,EAAE;QACjG,yEAAyE;QACzE,uEAAuE;QACvE,cAAc,CAAC,SAAS,EAAE;YACxB,UAAU;YACV,8BAA8B;YAC9B,oCAAoC;YACpC,yBAAyB;YACzB,oCAAoC;YACpC,8BAA8B;YAC9B,EAAE;SACH,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QACd,iBAAiB,CAAC,SAAS,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC;QAC5C,MAAM,CAAC,oBAAoB,CAAC,SAAS,CAAC,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;IAC1E,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uEAAuE,EAAE,GAAG,EAAE;QAC/E,cAAc,CAAC,SAAS,EAAE;YACxB,UAAU;YACV,8BAA8B;YAC9B,oCAAoC;YACpC,+BAA+B;YAC/B,oCAAoC;YACpC,4BAA4B;YAC5B,iCAAiC;YACjC,4BAA4B;YAC5B,kCAAkC;YAClC,8BAA8B;YAC9B,EAAE;SACH,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QACd,MAAM,CAAC,oBAAoB,CAAC,SAAS,CAAC,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;IAC1E,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4DAA4D,EAAE,GAAG,EAAE;QACpE,cAAc,CAAC,SAAS,EAAE;YACxB,UAAU;YACV,4BAA4B;YAC5B,oCAAoC;YACpC,8BAA8B;YAC9B,oCAAoC;YACpC,+BAA+B;YAC/B,oCAAoC;YACpC,8BAA8B;YAC9B,EAAE;SACH,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QACd,oBAAoB,CAAC,SAAS,EAAE,CAAC,cAAc,CAAC,CAAC,CAAC;QAClD,iFAAiF;QACjF,MAAM,CAAC,oBAAoB,CAAC,SAAS,CAAC,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;IAC1E,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kEAAkE,EAAE,GAAG,EAAE;QAC1E,cAAc,CAAC,SAAS,EAAE;YACxB,UAAU;YACV,8BAA8B;YAC9B,oCAAoC;YACpC,wBAAwB;YACxB,oCAAoC;YACpC,8BAA8B;YAC9B,EAAE;SACH,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QACd,iEAAiE;QACjE,MAAM,CAAC,oBAAoB,CAAC,SAAS,CAAC,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;IAC1E,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qCAAqC,EAAE,GAAG,EAAE;QAC7C,cAAc,CAAC,SAAS,EAAE;YACxB,UAAU;YACV,wBAAwB;YACxB,oCAAoC;YACpC,+BAA+B;YAC/B,oCAAoC;YACpC,8BAA8B;YAC9B,EAAE;SACH,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QACd,MAAM,CAAC,oBAAoB,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC;YAC9C,QAAQ,EAAE,UAAU;YACpB,MAAM,EAAE,IAAI;YACZ,MAAM,EAAE,wBAAwB;SACjC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+DAA+D,EAAE,GAAG,EAAE;QACvE,cAAc,CAAC,SAAS,EAAE;YACxB,UAAU;YACV,yBAAyB;YACzB,oCAAoC;YACpC,0BAA0B;YAC1B,oCAAoC;YACpC,8BAA8B;YAC9B,oCAAoC;YACpC,8BAA8B;YAC9B,EAAE;SACH,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QACd,MAAM,CAAC,oBAAoB,CAAC,SAAS,CAAC,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;IAC1E,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uEAAuE,EAAE,GAAG,EAAE;QAC/E,cAAc,CAAC,SAAS,EAAE;YACxB,UAAU;YACV,+BAA+B;YAC/B,oCAAoC;YACpC,8BAA8B;YAC9B,EAAE;SACH,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QACd,MAAM,CAAC,oBAAoB,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC;YAC9C,QAAQ,EAAE,IAAI;YACd,MAAM,EAAE,IAAI;YACZ,MAAM,EAAE,IAAI;YACZ,MAAM,EAAE,eAAe;SACxB,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iEAAiE,EAAE,GAAG,EAAE;QACzE,uEAAuE;QACvE,2DAA2D;QAC3D,cAAc,CAAC,SAAS,EAAE;YACxB,UAAU;YACV,8BAA8B;YAC9B,EAAE;SACH,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QACd,MAAM,CAAC,oBAAoB,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC;YAC9C,QAAQ,EAAE,IAAI;YACd,MAAM,EAAE,IAAI;YACZ,MAAM,EAAE,IAAI;YACZ,MAAM,EAAE,eAAe;SACxB,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wDAAwD,EAAE,GAAG,EAAE;QAChE,MAAM,CAAC,oBAAoB,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC;YAC9C,QAAQ,EAAE,IAAI;YACd,MAAM,EAAE,IAAI;YACZ,MAAM,EAAE,IAAI;YACZ,MAAM,EAAE,eAAe;SACxB,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/payload/platform/plugins/admin/mcp/dist/index.js

@@ -22,6 +22,7 @@ import QRCode from "qrcode";
 import { getSession, closeDriver } from "./lib/neo4j.js";
 import { findSkillOwners, searchSkills, computePluginReadHint, loadSkill, parseRequiredInputs, adminAuthoringSkillBlock, skillSlugFromReadArgs, AUTHORING_DISPATCH_HINT } from "./skill-resolution.js";
 import { resolvePublicHostname } from "./lib/public-hostname.js";
+import { resolveAdminHostname } from "./lib/admin-hostname.js";
 import { publishSite } from "./tools/publish-site.js";
 import { resolveCapabilitiesHere } from "./tools/capabilities-here.js";
 import { runCatalogueCensus } from "./lib/catalogue-census.js";
@@ -515,6 +516,38 @@ eagerTool(server, "public-hostname", "Resolve this account's canonical public ho
         };
     }
 });
+eagerTool(server, "admin-hostname", "Resolve this account's admin hostname — the host that serves /calendar and the rest of the admin shell behind sign-in. Reads the same cloudflared ingress + alias-domains.json + operator-domains.json files the platform server trusts to route, and returns the ingress host that is neither public nor operator. Use this (not public-hostname) to build any admin-surface URL such as the /calendar booking-calendar link; the public host 404s /calendar.", {}, async () => {
+    if (!ACCOUNT_ID)
+        return refuseNoAccount("admin-hostname");
+    const TAG = "[admin:admin-hostname]";
+    try {
+        const result = resolveAdminHostname(CONFIG_DIR);
+        if (result.hostname !== null) {
+            console.error(`${TAG} resolved accountId=${ACCOUNT_ID} hostname=${result.hostname} source=${result.source}`);
+            const body = `hostname: ${result.hostname}\n` +
+                `isApex: ${result.isApex}\n` +
+                `source: ${result.source}\n` +
+                `usage: paste \`https://${result.hostname}/calendar\` to the operator for the admin calendar — the public host 404s this path.`;
+            return { content: [{ type: "text", text: body }] };
+        }
+        console.error(`${TAG} empty accountId=${ACCOUNT_ID} reason=${result.reason} files-checked=cloudflared-config.yml,alias-domains.json,operator-domains.json`);
+        return {
+            content: [{
+                    type: "text",
+                    text: `hostname: (none)\nreason: ${result.reason}\n` +
+                        `No admin hostname is configured for this account. Run the cloudflare skill to stand up the admin host before pointing the operator at /calendar.`,
+                }],
+        };
+    }
+    catch (err) {
+        const errMsg = err instanceof Error ? err.message : String(err);
+        console.error(`${TAG} error accountId=${ACCOUNT_ID} message="${errMsg.replace(/"/g, "'")}"`);
+        return {
+            content: [{ type: "text", text: `error resolving admin hostname: ${errMsg}` }],
+            isError: true,
+        };
+    }
+});
 lifelineTool(server, "publish-site", "Publish an already-extracted static-site tree under <accountDir>/sites/<slug>/. Validates the slug, scans the source for symlinks, refuses on ambiguous landing pages, performs a single mv, then refreshes llms.txt + llms-full.txt at the site root via the AEO writer (best-effort — failure never unwinds the mv). Returns the canonical path slug; pair with public-hostname to build the full URL. Refusals are structured (unsafe-slug | destination-occupied | symlink-in-source | zero-html | ambiguous-html), each carrying a fixed operator message.", {
     source: z
         .string()