@rubytech/create-maxy-code 0.1.35 → 0.1.37

package/payload/platform/services/claude-session-manager/dist/session-store.js

@@ -1,81 +1,92 @@
-// In-memory session store. — keyed on Claude Code's intrinsic
-// `claudeSessionId` (the JSONL basename), not on a manager-minted id. The
-// manager mints zero ids of its own; the intrinsic id is the one
-// identifier per Claude process, stable from observation onward across
-// alive→ended and across manager restarts.
+// In-memory session store. One identifier per Claude process, but the
+// spawn-time window between PTY creation and Claude Code writing its first
+// JSONL line is now unbounded: claude does not write the JSONL until the
+// operator types the first turn (verified Pi 2.1.143 and Mac 2.1.128).
 //
-// During the spawn-time gap between PTY creation and Claude Code writing
-// its first JSONL line, the intrinsic id is not yet known. The store
-// holds a small `pendingByBridge` map keyed on the URL bridge suffix for
-// that window only. The pending entry is promoted into the main store
-// the instant `jsonl-observer` matches the JSONL on disk; on observation
-// failure or PTY exit before observation, the pending entry is removed.
+// Lifecycle spans the full PTY lifetime:
+//
+//   pending   — created when /spawn captures the /remote-control URL.
+//               The row is keyed by the URL `bridgeSuffix` (the substring
+//               after `session_` in the URL). `claudeSessionId` is null;
+//               `jsonlPath` is null. The /spawn response returns at this
+//               point, so the operator sees a usable row inside ~2 s even
+//               when they never type.
+//
+//   promoted  — fires later (seconds or minutes, gated on operator typing)
+//               when `jsonl-observer` matches a JSONL on disk whose head
+//               bytes carry the bridge suffix. `claudeSessionId` is filled
+//               with the intrinsic JSONL basename, `jsonlPath` is set, and
+//               the same StoredSession is also registered under the
+//               intrinsic id so GET routes resolve either id to the same
+//               row.
+//
+//   ended     — operator deletes the row, the PTY exits, or the manager
+//               restarts. Promoted rows stay enumerable from disk via the
+//               JSONL transcript. Pending rows that never promoted have no
+//               JSONL and disappear cleanly on delete.
+//
+// The store mints zero ids of its own. The bridge suffix is claude's, the
+// intrinsic id is claude's. The manager only observes them.
 export class SessionStore {
-    sessions = new Map();
-    pendingByBridge = new Map();
-    add(s) {
-        this.sessions.set(s.claudeSessionId, s);
+    /** Keyed by the row's stable surface id (bridge suffix). Lookup-by-bridge
+     *  is the alive-row contract. */
+    byBridge = new Map();
+    /** Filled at promotion time so /list, /meta, /log routes resolve the
+     *  intrinsic id to the same StoredSession the bridge id resolves to. */
+    byClaude = new Map();
+    /** Register a freshly-spawned session (claudeSessionId null, jsonlPath
+     *  null). The row becomes visible to /list immediately. */
+    addPending(s) {
+        this.byBridge.set(s.bridgeSuffix, s);
     }
+    /** Resolve by either the bridge suffix or the intrinsic claudeSessionId.
+     *  Returns the same StoredSession in either case once promotion has
+     *  fired. */
     get(id) {
-        return this.sessions.get(id);
+        return this.byBridge.get(id) ?? this.byClaude.get(id);
     }
+    /** Remove by either id. Drops both index entries. */
     remove(id) {
-        const s = this.sessions.get(id);
-        if (s)
-            this.sessions.delete(id);
+        const s = this.get(id);
+        if (!s)
+            return undefined;
+        this.byBridge.delete(s.bridgeSuffix);
+        if (s.claudeSessionId !== null)
+            this.byClaude.delete(s.claudeSessionId);
         return s;
     }
-    listBySender(senderId) {
+    listBySender(senderId, opts = {}) {
+        const includeHidden = opts.includeHidden === true;
         const out = [];
-        for (const s of this.sessions.values()) {
-            if (s.senderId === senderId)
-                out.push(s);
+        for (const s of this.byBridge.values()) {
+            if (s.senderId !== senderId)
+                continue;
+            if (!includeHidden && s.hidden)
+                continue;
+            out.push(s);
         }
         return out;
     }
     all() {
-        return [...this.sessions.values()];
+        return [...this.byBridge.values()];
     }
     size() {
-        return this.sessions.size;
-    }
-    // --- pending lifecycle ----------------------------------
-    addPending(p) {
-        this.pendingByBridge.set(p.bridgeSuffix, p);
-    }
-    getPending(bridgeSuffix) {
-        return this.pendingByBridge.get(bridgeSuffix);
-    }
-    removePending(bridgeSuffix) {
-        const p = this.pendingByBridge.get(bridgeSuffix);
-        if (p)
-            this.pendingByBridge.delete(bridgeSuffix);
-        return p;
+        return this.byBridge.size;
     }
-    /** Move a pending entry into the main store under its newly-observed
-     *  `claudeSessionId`. Idempotent: a second call for the same bridge
-     *  suffix is a no-op once the pending entry has been removed.
-     *  Returns the promoted StoredSession, or null when no pending entry
-     *  exists for this bridge suffix (already promoted, cancelled, or
-     *  the PTY exited before observation fired). */
-    promotePending(bridgeSuffix, claudeSessionId, jsonlPath) {
-        const p = this.pendingByBridge.get(bridgeSuffix);
-        if (!p)
+    /** Bind a pending row to its newly-observed `claudeSessionId` + JSONL
+     *  path. Idempotent: a second call on an already-promoted row updates
+     *  nothing. Returns the StoredSession on success, null when no row
+     *  exists for the bridge suffix (operator already deleted it, or the
+     *  PTY exited before observation fired). */
+    promote(bridgeSuffix, claudeSessionId, jsonlPath) {
+        const s = this.byBridge.get(bridgeSuffix);
+        if (!s)
             return null;
-        this.pendingByBridge.delete(bridgeSuffix);
-        const s = {
-            claudeSessionId,
-            pid: p.pid,
-            url: p.url,
-            startedAt: p.startedAt,
-            senderId: p.senderId,
-            role: p.role,
-            channel: p.channel,
-            jsonlPath,
-            pty: p.pty,
-            exited: p.exited,
-        };
-        this.sessions.set(claudeSessionId, s);
+        if (s.claudeSessionId !== null)
+            return s;
+        s.claudeSessionId = claudeSessionId;
+        s.jsonlPath = jsonlPath;
+        this.byClaude.set(claudeSessionId, s);
         return s;
     }
 }

package/payload/platform/services/claude-session-manager/dist/session-store.js.map

@@ -1 +1 @@
-{"version":3,"file":"session-store.js","sourceRoot":"","sources":["../src/session-store.ts"],"names":[],"mappings":"AAAA,8DAA8D;AAC9D,0EAA0E;AAC1E,iEAAiE;AACjE,uEAAuE;AACvE,2CAA2C;AAC3C,EAAE;AACF,yEAAyE;AACzE,qEAAqE;AACrE,yEAAyE;AACzE,sEAAsE;AACtE,yEAAyE;AACzE,wEAAwE;AAyCxE,MAAM,OAAO,YAAY;IACN,QAAQ,GAAG,IAAI,GAAG,EAAyB,CAAA;IAC3C,eAAe,GAAG,IAAI,GAAG,EAA0B,CAAA;IAEpE,GAAG,CAAC,CAAgB;QAClB,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,eAAe,EAAE,CAAC,CAAC,CAAA;IACzC,CAAC;IAED,GAAG,CAAC,EAAU;QACZ,OAAO,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;IAC9B,CAAC;IAED,MAAM,CAAC,EAAU;QACf,MAAM,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;QAC/B,IAAI,CAAC;YAAE,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,CAAA;QAC/B,OAAO,CAAC,CAAA;IACV,CAAC;IAED,YAAY,CAAC,QAAgB;QAC3B,MAAM,GAAG,GAAoB,EAAE,CAAA;QAC/B,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC;YACvC,IAAI,CAAC,CAAC,QAAQ,KAAK,QAAQ;gBAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;QAC1C,CAAC;QACD,OAAO,GAAG,CAAA;IACZ,CAAC;IAED,GAAG;QACD,OAAO,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAA;IACpC,CAAC;IAED,IAAI;QACF,OAAO,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAA;IAC3B,CAAC;IAED,2DAA2D;IAE3D,UAAU,CAAC,CAAiB;QAC1B,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC,YAAY,EAAE,CAAC,CAAC,CAAA;IAC7C,CAAC;IAED,UAAU,CAAC,YAAoB;QAC7B,OAAO,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,YAAY,CAAC,CAAA;IAC/C,CAAC;IAED,aAAa,CAAC,YAAoB;QAChC,MAAM,CAAC,GAAG,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,YAAY,CAAC,CAAA;QAChD,IAAI,CAAC;YAAE,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,YAAY,CAAC,CAAA;QAChD,OAAO,CAAC,CAAA;IACV,CAAC;IAED;;;;;oDAKgD;IAChD,cAAc,CACZ,YAAoB,EACpB,eAAuB,EACvB,SAAiB;QAEjB,MAAM,CAAC,GAAG,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,YAAY,CAAC,CAAA;QAChD,IAAI,CAAC,CAAC;YAAE,OAAO,IAAI,CAAA;QACnB,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,YAAY,CAAC,CAAA;QACzC,MAAM,CAAC,GAAkB;YACvB,eAAe;YACf,GAAG,EAAE,CAAC,CAAC,GAAG;YACV,GAAG,EAAE,CAAC,CAAC,GAAG;YACV,SAAS,EAAE,CAAC,CAAC,SAAS;YACtB,QAAQ,EAAE,CAAC,CAAC,QAAQ;YACpB,IAAI,EAAE,CAAC,CAAC,IAAI;YACZ,OAAO,EAAE,CAAC,CAAC,OAAO;YAClB,SAAS;YACT,GAAG,EAAE,CAAC,CAAC,GAAG;YACV,MAAM,EAAE,CAAC,CAAC,MAAM;SACjB,CAAA;QACD,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,eAAe,EAAE,CAAC,CAAC,CAAA;QACrC,OAAO,CAAC,CAAA;IACV,CAAC;CACF"}
+{"version":3,"file":"session-store.js","sourceRoot":"","sources":["../src/session-store.ts"],"names":[],"mappings":"AAAA,sEAAsE;AACtE,2EAA2E;AAC3E,yEAAyE;AACzE,uEAAuE;AACvE,EAAE;AACF,yCAAyC;AACzC,EAAE;AACF,sEAAsE;AACtE,0EAA0E;AAC1E,yEAAyE;AACzE,yEAAyE;AACzE,0EAA0E;AAC1E,sCAAsC;AACtC,EAAE;AACF,2EAA2E;AAC3E,yEAAyE;AACzE,2EAA2E;AAC3E,2EAA2E;AAC3E,oEAAoE;AACpE,yEAAyE;AACzE,qBAAqB;AACrB,EAAE;AACF,wEAAwE;AACxE,0EAA0E;AAC1E,2EAA2E;AAC3E,uDAAuD;AACvD,EAAE;AACF,0EAA0E;AAC1E,4DAA4D;AAsC5D,MAAM,OAAO,YAAY;IACvB;qCACiC;IAChB,QAAQ,GAAG,IAAI,GAAG,EAAyB,CAAA;IAC5D;4EACwE;IACvD,QAAQ,GAAG,IAAI,GAAG,EAAyB,CAAA;IAE5D;+DAC2D;IAC3D,UAAU,CAAC,CAAgB;QACzB,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,YAAY,EAAE,CAAC,CAAC,CAAA;IACtC,CAAC;IAED;;iBAEa;IACb,GAAG,CAAC,EAAU;QACZ,OAAO,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;IACvD,CAAC;IAED,qDAAqD;IACrD,MAAM,CAAC,EAAU;QACf,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;QACtB,IAAI,CAAC,CAAC;YAAE,OAAO,SAAS,CAAA;QACxB,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,YAAY,CAAC,CAAA;QACpC,IAAI,CAAC,CAAC,eAAe,KAAK,IAAI;YAAE,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,eAAe,CAAC,CAAA;QACvE,OAAO,CAAC,CAAA;IACV,CAAC;IAED,YAAY,CAAC,QAAgB,EAAE,OAAoC,EAAE;QACnE,MAAM,aAAa,GAAG,IAAI,CAAC,aAAa,KAAK,IAAI,CAAA;QACjD,MAAM,GAAG,GAAoB,EAAE,CAAA;QAC/B,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC;YACvC,IAAI,CAAC,CAAC,QAAQ,KAAK,QAAQ;gBAAE,SAAQ;YACrC,IAAI,CAAC,aAAa,IAAI,CAAC,CAAC,MAAM;gBAAE,SAAQ;YACxC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;QACb,CAAC;QACD,OAAO,GAAG,CAAA;IACZ,CAAC;IAED,GAAG;QACD,OAAO,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAA;IACpC,CAAC;IAED,IAAI;QACF,OAAO,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAA;IAC3B,CAAC;IAED;;;;gDAI4C;IAC5C,OAAO,CACL,YAAoB,EACpB,eAAuB,EACvB,SAAiB;QAEjB,MAAM,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,YAAY,CAAC,CAAA;QACzC,IAAI,CAAC,CAAC;YAAE,OAAO,IAAI,CAAA;QACnB,IAAI,CAAC,CAAC,eAAe,KAAK,IAAI;YAAE,OAAO,CAAC,CAAA;QACxC,CAAC,CAAC,eAAe,GAAG,eAAe,CAAA;QACnC,CAAC,CAAC,SAAS,GAAG,SAAS,CAAA;QACvB,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,eAAe,EAAE,CAAC,CAAC,CAAA;QACrC,OAAO,CAAC,CAAA;IACV,CAAC;CACF"}

package/payload/platform/services/claude-session-manager/dist/tool-surface.d.ts

@@ -1,6 +1,16 @@
 export interface ToolSurface {
     admin: ReadonlySet<string>;
     public: ReadonlySet<string>;
+    /** Per-plugin MCP server descriptors. Key is the plugin directory name
+     *  (matches the `mcp__<plugin>__*` namespace). Spawned by Claude Code at
+     *  session start via `--mcp-config`. Plugins with `tools: []` contribute
+     *  no servers. */
+    mcpServers: ReadonlyMap<string, McpServerDescriptor>;
+}
+export interface McpServerDescriptor {
+    command: string;
+    args: readonly string[];
+    env?: Readonly<Record<string, string>>;
 }
 export declare class ToolSurfaceError extends Error {
     readonly reason: string;
@@ -16,10 +26,30 @@ interface ToolEntry {
  *  Throws ToolSurfaceError on any malformed entry (missing name, missing or
  *  non-boolean publicAllowlist). */
 export declare function parseToolsBlock(frontmatter: string, pluginDir: string): ToolEntry[];
+/** Parse the optional `mcp:` block out of a PLUGIN.md frontmatter body.
+ *  Returns null when the frontmatter has no `mcp:` key. Throws on a malformed
+ *  shape (missing command, args not a list, env not key:value pairs). The
+ *  schema mirrors Claude Code's `.mcp.json`:
+ *    mcp:
+ *      command: node
+ *      args:
+ *        - ${PLATFORM_ROOT}/lib/mcp-spawn-tee/dist/index.js
+ *        - ${PLATFORM_ROOT}/plugins/memory/mcp/dist/index.js
+ *      env:
+ *        MCP_SPAWN_TEE_NAME: memory
+ *        ACCOUNT_ID: ${ACCOUNT_ID}
+ */
+export declare function parseMcpBlock(frontmatter: string, pluginDir: string): McpServerDescriptor | null;
 /** Walk a plugins root directory, parse every <name>/PLUGIN.md, and return
- *  the {admin, public} sets of fully qualified tool names. Throws on the
- *  first malformed manifest — the caller (the manager boot) must exit
- *  non-zero so the operator sees the gap. */
-export declare function loadToolSurface(pluginsRoot: string): ToolSurface;
+ *  the {admin, public, mcpServers} sets. Throws on the first malformed
+ *  manifest — the caller (the manager boot) must exit non-zero so the
+ *  operator sees the gap.
+ *
+ *  Invariant: a plugin that declares `tools:` with at least one entry MUST
+ *  also declare an `mcp:` block. Without it the spawn would push
+ *  `--allowed-tools mcp__<plugin>__*` for a server that was never registered
+ *  with Claude Code; the tools would be unreachable and the operator would
+ *  see "tool not found" rather than a boot-time gap. */
+export declare function loadToolSurface(pluginsRoots: string | readonly string[]): ToolSurface;
 export {};
 //# sourceMappingURL=tool-surface.d.ts.map

package/payload/platform/services/claude-session-manager/dist/tool-surface.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"tool-surface.d.ts","sourceRoot":"","sources":["../src/tool-surface.ts"],"names":[],"mappings":"AAuBA,MAAM,WAAW,WAAW;IAC1B,KAAK,EAAE,WAAW,CAAC,MAAM,CAAC,CAAA;IAC1B,MAAM,EAAE,WAAW,CAAC,MAAM,CAAC,CAAA;CAC5B;AAED,qBAAa,gBAAiB,SAAQ,KAAK;aACb,MAAM,EAAE,MAAM;aAAkB,MAAM,EAAE,MAAM;gBAA9C,MAAM,EAAE,MAAM,EAAkB,MAAM,EAAE,MAAM;CAI3E;AAED,UAAU,SAAS;IACjB,IAAI,EAAE,MAAM,CAAA;IACZ,eAAe,EAAE,OAAO,CAAA;CACzB;AAYD;;;oCAGoC;AACpC,wBAAgB,eAAe,CAAC,WAAW,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,SAAS,EAAE,CAsEnF;AAED;;;6CAG6C;AAC7C,wBAAgB,eAAe,CAAC,WAAW,EAAE,MAAM,GAAG,WAAW,CA0BhE"}
+{"version":3,"file":"tool-surface.d.ts","sourceRoot":"","sources":["../src/tool-surface.ts"],"names":[],"mappings":"AAuBA,MAAM,WAAW,WAAW;IAC1B,KAAK,EAAE,WAAW,CAAC,MAAM,CAAC,CAAA;IAC1B,MAAM,EAAE,WAAW,CAAC,MAAM,CAAC,CAAA;IAC3B;;;sBAGkB;IAClB,UAAU,EAAE,WAAW,CAAC,MAAM,EAAE,mBAAmB,CAAC,CAAA;CACrD;AAED,MAAM,WAAW,mBAAmB;IAClC,OAAO,EAAE,MAAM,CAAA;IACf,IAAI,EAAE,SAAS,MAAM,EAAE,CAAA;IACvB,GAAG,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAA;CACvC;AAED,qBAAa,gBAAiB,SAAQ,KAAK;aACb,MAAM,EAAE,MAAM;aAAkB,MAAM,EAAE,MAAM;gBAA9C,MAAM,EAAE,MAAM,EAAkB,MAAM,EAAE,MAAM;CAI3E;AAED,UAAU,SAAS;IACjB,IAAI,EAAE,MAAM,CAAA;IACZ,eAAe,EAAE,OAAO,CAAA;CACzB;AAYD;;;oCAGoC;AACpC,wBAAgB,eAAe,CAAC,WAAW,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,SAAS,EAAE,CAsEnF;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,aAAa,CAAC,WAAW,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,mBAAmB,GAAG,IAAI,CA6ChG;AAED;;;;;;;;;wDASwD;AACxD,wBAAgB,eAAe,CAAC,YAAY,EAAE,MAAM,GAAG,SAAS,MAAM,EAAE,GAAG,WAAW,CA8CrF"}

package/payload/platform/services/claude-session-manager/dist/tool-surface.js

@@ -111,39 +111,137 @@ export function parseToolsBlock(frontmatter, pluginDir) {
     flush();
     return out;
 }
-/** Walk a plugins root directory, parse every <name>/PLUGIN.md, and return
- *  the {admin, public} sets of fully qualified tool names. Throws on the
- *  first malformed manifest — the caller (the manager boot) must exit
- *  non-zero so the operator sees the gap. */
-export function loadToolSurface(pluginsRoot) {
-    if (!existsSync(pluginsRoot)) {
-        throw new ToolSurfaceError('plugins-root-missing', pluginsRoot);
+/** Parse the optional `mcp:` block out of a PLUGIN.md frontmatter body.
+ *  Returns null when the frontmatter has no `mcp:` key. Throws on a malformed
+ *  shape (missing command, args not a list, env not key:value pairs). The
+ *  schema mirrors Claude Code's `.mcp.json`:
+ *    mcp:
+ *      command: node
+ *      args:
+ *        - ${PLATFORM_ROOT}/lib/mcp-spawn-tee/dist/index.js
+ *        - ${PLATFORM_ROOT}/plugins/memory/mcp/dist/index.js
+ *      env:
+ *        MCP_SPAWN_TEE_NAME: memory
+ *        ACCOUNT_ID: ${ACCOUNT_ID}
+ */
+export function parseMcpBlock(frontmatter, pluginDir) {
+    const lines = frontmatter.split(/\r?\n/);
+    let i = 0;
+    while (i < lines.length) {
+        if (/^mcp:\s*$/.test(lines[i])) {
+            i++;
+            break;
+        }
+        i++;
     }
-    const admin = new Set();
-    const pub = new Set();
-    const entries = readdirSync(pluginsRoot).sort();
-    for (const plugin of entries) {
-        const pluginDir = join(pluginsRoot, plugin);
-        try {
-            if (!statSync(pluginDir).isDirectory())
-                continue;
+    if (i >= lines.length)
+        return null;
+    let command = null;
+    const args = [];
+    const env = {};
+    let envHasEntry = false;
+    let mode = 'top';
+    for (; i < lines.length; i++) {
+        const line = lines[i];
+        if (line.length === 0)
+            continue;
+        // top-level key (no leading space) ends the mcp block
+        if (/^[A-Za-z_]/.test(line))
+            break;
+        const topCommand = line.match(/^\s\s(command):\s*(.+?)\s*$/);
+        const topArgsHeader = line.match(/^\s\s(args):\s*$/);
+        const topEnvHeader = line.match(/^\s\s(env):\s*$/);
+        if (topCommand) {
+            command = topCommand[2];
+            mode = 'top';
+            continue;
         }
-        catch {
+        if (topArgsHeader) {
+            mode = 'args';
             continue;
         }
-        const manifestPath = join(pluginDir, 'PLUGIN.md');
-        if (!existsSync(manifestPath))
+        if (topEnvHeader) {
+            mode = 'env';
             continue;
-        const raw = readFileSync(manifestPath, 'utf-8');
-        const frontmatter = extractFrontmatter(raw, plugin);
-        const tools = parseToolsBlock(frontmatter, plugin);
-        for (const t of tools) {
-            const qualified = `mcp__${plugin}__${t.name}`;
-            admin.add(qualified);
-            if (t.publicAllowlist)
-                pub.add(qualified);
+        }
+        if (mode === 'args') {
+            const item = line.match(/^\s+-\s+(.+?)\s*$/);
+            if (item) {
+                args.push(item[1]);
+                continue;
+            }
+        }
+        if (mode === 'env') {
+            const kv = line.match(/^\s+([A-Za-z_][A-Za-z0-9_]*):\s*(.+?)\s*$/);
+            if (kv) {
+                env[kv[1]] = kv[2];
+                envHasEntry = true;
+                continue;
+            }
+        }
+    }
+    if (command === null) {
+        throw new ToolSurfaceError('mcp-command-missing', `${pluginDir}/PLUGIN.md mcp: block has no command`);
+    }
+    const desc = { command, args };
+    if (envHasEntry)
+        desc.env = env;
+    return desc;
+}
+/** Walk a plugins root directory, parse every <name>/PLUGIN.md, and return
+ *  the {admin, public, mcpServers} sets. Throws on the first malformed
+ *  manifest — the caller (the manager boot) must exit non-zero so the
+ *  operator sees the gap.
+ *
+ *  Invariant: a plugin that declares `tools:` with at least one entry MUST
+ *  also declare an `mcp:` block. Without it the spawn would push
+ *  `--allowed-tools mcp__<plugin>__*` for a server that was never registered
+ *  with Claude Code; the tools would be unreachable and the operator would
+ *  see "tool not found" rather than a boot-time gap. */
+export function loadToolSurface(pluginsRoots) {
+    const roots = Array.isArray(pluginsRoots) ? pluginsRoots : [pluginsRoots];
+    for (const r of roots) {
+        if (!existsSync(r))
+            throw new ToolSurfaceError('plugins-root-missing', r);
+    }
+    const admin = new Set();
+    const pub = new Set();
+    const mcpServers = new Map();
+    for (const root of roots) {
+        const entries = readdirSync(root).sort();
+        for (const plugin of entries) {
+            const pluginDir = join(root, plugin);
+            try {
+                if (!statSync(pluginDir).isDirectory())
+                    continue;
+            }
+            catch {
+                continue;
+            }
+            const manifestPath = join(pluginDir, 'PLUGIN.md');
+            if (!existsSync(manifestPath))
+                continue;
+            const raw = readFileSync(manifestPath, 'utf-8');
+            const frontmatter = extractFrontmatter(raw, plugin);
+            const tools = parseToolsBlock(frontmatter, plugin);
+            if (tools.length === 0)
+                continue;
+            const mcp = parseMcpBlock(frontmatter, plugin);
+            if (!mcp) {
+                throw new ToolSurfaceError('mcp-block-missing', `${plugin}/PLUGIN.md declares tools but no mcp: block; spawns would --allowed-tools mcp__${plugin}__* with no registered server`);
+            }
+            if (mcpServers.has(plugin)) {
+                throw new ToolSurfaceError('mcp-plugin-duplicate', `${plugin} declared by more than one plugins root`);
+            }
+            mcpServers.set(plugin, mcp);
+            for (const t of tools) {
+                const qualified = `mcp__${plugin}__${t.name}`;
+                admin.add(qualified);
+                if (t.publicAllowlist)
+                    pub.add(qualified);
+            }
         }
     }
-    return { admin, public: pub };
+    return { admin, public: pub, mcpServers };
 }
 //# sourceMappingURL=tool-surface.js.map

package/payload/platform/services/claude-session-manager/dist/tool-surface.js.map

@@ -1 +1 @@
-{"version":3,"file":"tool-surface.js","sourceRoot":"","sources":["../src/tool-surface.ts"],"names":[],"mappings":"AAAA,yBAAyB;AACzB,EAAE;AACF,6DAA6D;AAC7D,uEAAuE;AACvE,0EAA0E;AAC1E,qEAAqE;AACrE,sDAAsD;AACtD,EAAE;AACF,wCAAwC;AACxC,qDAAqD;AACrD,EAAE;AACF,2EAA2E;AAC3E,uEAAuE;AACvE,kEAAkE;AAClE,EAAE;AACF,2EAA2E;AAC3E,wEAAwE;AACxE,2EAA2E;AAC3E,kEAAkE;AAElE,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,SAAS,CAAA;AACzE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAOhC,MAAM,OAAO,gBAAiB,SAAQ,KAAK;IACb;IAAgC;IAA5D,YAA4B,MAAc,EAAkB,MAAc;QACxE,KAAK,CAAC,GAAG,MAAM,KAAK,MAAM,EAAE,CAAC,CAAA;QADH,WAAM,GAAN,MAAM,CAAQ;QAAkB,WAAM,GAAN,MAAM,CAAQ;QAExE,IAAI,CAAC,IAAI,GAAG,kBAAkB,CAAA;IAChC,CAAC;CACF;AAOD,MAAM,cAAc,GAAG,6BAA6B,CAAA;AAEpD,SAAS,kBAAkB,CAAC,GAAW,EAAE,SAAiB;IACxD,MAAM,CAAC,GAAG,GAAG,CAAC,KAAK,CAAC,cAAc,CAAC,CAAA;IACnC,IAAI,CAAC,CAAC,EAAE,CAAC;QACP,MAAM,IAAI,gBAAgB,CAAC,qBAAqB,EAAE,GAAG,SAAS,+CAA+C,CAAC,CAAA;IAChH,CAAC;IACD,OAAO,CAAC,CAAC,CAAC,CAAC,CAAA;AACb,CAAC;AAED;;;oCAGoC;AACpC,MAAM,UAAU,eAAe,CAAC,WAAmB,EAAE,SAAiB;IACpE,MAAM,KAAK,GAAG,WAAW,CAAC,KAAK,CAAC,OAAO,CAAC,CAAA;IACxC,IAAI,CAAC,GAAG,CAAC,CAAA;IACT,OAAO,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC;QACxB,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAA;QACrB,mEAAmE;QACnE,IAAI,uBAAuB,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,OAAO,EAAE,CAAA;QACjD,IAAI,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YAC7B,CAAC,EAAE,CAAA;YACH,MAAK;QACP,CAAC;QACD,CAAC,EAAE,CAAA;IACL,CAAC;IACD,IAAI,CAAC,IAAI,KAAK,CAAC,MAAM;QAAE,OAAO,EAAE,CAAA;IAEhC,MAAM,GAAG,GAAgB,EAAE,CAAA;IAC3B,IAAI,OAAO,GAA8B,IAAI,CAAA;IAC7C,MAAM,KAAK,GAAG,GAAS,EAAE;QACvB,IAAI,CAAC,OAAO;YAAE,OAAM;QACpB,IAAI,OAAO,OAAO,CAAC,IAAI,KAAK,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAClE,MAAM,IAAI,gBAAgB,CAAC,mBAAmB,EAAE,GAAG,SAAS,0CAA0C,CAAC,CAAA;QACzG,CAAC;QACD,IAAI,OAAO,OAAO,CAAC,eAAe,KAAK,SAAS,EAAE,CAAC;YACjD,IAAI,OAAO,CAAC,eAAe,KAAK,SAAS,EAAE,CAAC;gBAC1C,MAAM,IAAI,gBAAgB,CACxB,0BAA0B,EAC1B,GAAG,SAAS,IAAI,OAAO,CAAC,IAAI,0DAA0D,CACvF,CAAA;YACH,CAAC;YACD,MAAM,IAAI,gBAAgB,CACxB,8BAA8B,EAC9B,GAAG,SAAS,IAAI,OAAO,CAAC,IAAI,+DAA+D,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,eAAe,CAAC,EAAE,CACrI,CAAA;QACH,CAAC;QACD,GAAG,CAAC,IAAI,CAAC,OAAoB,CAAC,CAAA;QAC9B,OAAO,GAAG,IAAI,CAAA;IAChB,CAAC,CAAA;IAED,OAAO,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QAC7B,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAA;QACrB,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;YAAE,SAAQ;QAC/B,2DAA2D;QAC3D,IAAI,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,MAAK;QAElC,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,2BAA2B,CAAC,CAAA;QACxD,IAAI,QAAQ,EAAE,CAAC;YACb,KAAK,EAAE,CAAA;YACP,OAAO,GAAG,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAA;YAC/B,SAAQ;QACV,CAAC;QACD,uEAAuE;QACvE,sEAAsE;QACtE,MAAM,cAAc,GAAG,IAAI,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAA;QACtD,IAAI,cAAc,EAAE,CAAC;YACnB,MAAM,IAAI,gBAAgB,CAAC,mBAAmB,EAAE,GAAG,SAAS,0CAA0C,CAAC,CAAA;QACzG,CAAC;QACD,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,kCAAkC,CAAC,CAAA;QAChE,IAAI,SAAS,IAAI,OAAO,EAAE,CAAC;YACzB,MAAM,CAAC,GAAG,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAA;YAC7B,IAAI,CAAC,KAAK,MAAM;gBAAE,OAAO,CAAC,eAAe,GAAG,IAAI,CAAA;iBAC3C,IAAI,CAAC,KAAK,OAAO;gBAAE,OAAO,CAAC,eAAe,GAAG,KAAK,CAAA;;gBAClD,OAAO,CAAC,eAAe,GAAG,CAAuB,CAAA;YACtD,SAAQ;QACV,CAAC;QACD,uEAAuE;QACvE,wEAAwE;QACxE,uBAAuB;IACzB,CAAC;IACD,KAAK,EAAE,CAAA;IACP,OAAO,GAAG,CAAA;AACZ,CAAC;AAED;;;6CAG6C;AAC7C,MAAM,UAAU,eAAe,CAAC,WAAmB;IACjD,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;QAC7B,MAAM,IAAI,gBAAgB,CAAC,sBAAsB,EAAE,WAAW,CAAC,CAAA;IACjE,CAAC;IACD,MAAM,KAAK,GAAG,IAAI,GAAG,EAAU,CAAA;IAC/B,MAAM,GAAG,GAAG,IAAI,GAAG,EAAU,CAAA;IAC7B,MAAM,OAAO,GAAG,WAAW,CAAC,WAAW,CAAC,CAAC,IAAI,EAAE,CAAA;IAC/C,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,MAAM,SAAS,GAAG,IAAI,CAAC,WAAW,EAAE,MAAM,CAAC,CAAA;QAC3C,IAAI,CAAC;YACH,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,WAAW,EAAE;gBAAE,SAAQ;QAClD,CAAC;QAAC,MAAM,CAAC;YACP,SAAQ;QACV,CAAC;QACD,MAAM,YAAY,GAAG,IAAI,CAAC,SAAS,EAAE,WAAW,CAAC,CAAA;QACjD,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC;YAAE,SAAQ;QACvC,MAAM,GAAG,GAAG,YAAY,CAAC,YAAY,EAAE,OAAO,CAAC,CAAA;QAC/C,MAAM,WAAW,GAAG,kBAAkB,CAAC,GAAG,EAAE,MAAM,CAAC,CAAA;QACnD,MAAM,KAAK,GAAG,eAAe,CAAC,WAAW,EAAE,MAAM,CAAC,CAAA;QAClD,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;YACtB,MAAM,SAAS,GAAG,QAAQ,MAAM,KAAK,CAAC,CAAC,IAAI,EAAE,CAAA;YAC7C,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,CAAA;YACpB,IAAI,CAAC,CAAC,eAAe;gBAAE,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,CAAA;QAC3C,CAAC;IACH,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,CAAA;AAC/B,CAAC"}
+{"version":3,"file":"tool-surface.js","sourceRoot":"","sources":["../src/tool-surface.ts"],"names":[],"mappings":"AAAA,yBAAyB;AACzB,EAAE;AACF,6DAA6D;AAC7D,uEAAuE;AACvE,0EAA0E;AAC1E,qEAAqE;AACrE,sDAAsD;AACtD,EAAE;AACF,wCAAwC;AACxC,qDAAqD;AACrD,EAAE;AACF,2EAA2E;AAC3E,uEAAuE;AACvE,kEAAkE;AAClE,EAAE;AACF,2EAA2E;AAC3E,wEAAwE;AACxE,2EAA2E;AAC3E,kEAAkE;AAElE,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,SAAS,CAAA;AACzE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAkBhC,MAAM,OAAO,gBAAiB,SAAQ,KAAK;IACb;IAAgC;IAA5D,YAA4B,MAAc,EAAkB,MAAc;QACxE,KAAK,CAAC,GAAG,MAAM,KAAK,MAAM,EAAE,CAAC,CAAA;QADH,WAAM,GAAN,MAAM,CAAQ;QAAkB,WAAM,GAAN,MAAM,CAAQ;QAExE,IAAI,CAAC,IAAI,GAAG,kBAAkB,CAAA;IAChC,CAAC;CACF;AAOD,MAAM,cAAc,GAAG,6BAA6B,CAAA;AAEpD,SAAS,kBAAkB,CAAC,GAAW,EAAE,SAAiB;IACxD,MAAM,CAAC,GAAG,GAAG,CAAC,KAAK,CAAC,cAAc,CAAC,CAAA;IACnC,IAAI,CAAC,CAAC,EAAE,CAAC;QACP,MAAM,IAAI,gBAAgB,CAAC,qBAAqB,EAAE,GAAG,SAAS,+CAA+C,CAAC,CAAA;IAChH,CAAC;IACD,OAAO,CAAC,CAAC,CAAC,CAAC,CAAA;AACb,CAAC;AAED;;;oCAGoC;AACpC,MAAM,UAAU,eAAe,CAAC,WAAmB,EAAE,SAAiB;IACpE,MAAM,KAAK,GAAG,WAAW,CAAC,KAAK,CAAC,OAAO,CAAC,CAAA;IACxC,IAAI,CAAC,GAAG,CAAC,CAAA;IACT,OAAO,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC;QACxB,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAA;QACrB,mEAAmE;QACnE,IAAI,uBAAuB,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,OAAO,EAAE,CAAA;QACjD,IAAI,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YAC7B,CAAC,EAAE,CAAA;YACH,MAAK;QACP,CAAC;QACD,CAAC,EAAE,CAAA;IACL,CAAC;IACD,IAAI,CAAC,IAAI,KAAK,CAAC,MAAM;QAAE,OAAO,EAAE,CAAA;IAEhC,MAAM,GAAG,GAAgB,EAAE,CAAA;IAC3B,IAAI,OAAO,GAA8B,IAAI,CAAA;IAC7C,MAAM,KAAK,GAAG,GAAS,EAAE;QACvB,IAAI,CAAC,OAAO;YAAE,OAAM;QACpB,IAAI,OAAO,OAAO,CAAC,IAAI,KAAK,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAClE,MAAM,IAAI,gBAAgB,CAAC,mBAAmB,EAAE,GAAG,SAAS,0CAA0C,CAAC,CAAA;QACzG,CAAC;QACD,IAAI,OAAO,OAAO,CAAC,eAAe,KAAK,SAAS,EAAE,CAAC;YACjD,IAAI,OAAO,CAAC,eAAe,KAAK,SAAS,EAAE,CAAC;gBAC1C,MAAM,IAAI,gBAAgB,CACxB,0BAA0B,EAC1B,GAAG,SAAS,IAAI,OAAO,CAAC,IAAI,0DAA0D,CACvF,CAAA;YACH,CAAC;YACD,MAAM,IAAI,gBAAgB,CACxB,8BAA8B,EAC9B,GAAG,SAAS,IAAI,OAAO,CAAC,IAAI,+DAA+D,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,eAAe,CAAC,EAAE,CACrI,CAAA;QACH,CAAC;QACD,GAAG,CAAC,IAAI,CAAC,OAAoB,CAAC,CAAA;QAC9B,OAAO,GAAG,IAAI,CAAA;IAChB,CAAC,CAAA;IAED,OAAO,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QAC7B,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAA;QACrB,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;YAAE,SAAQ;QAC/B,2DAA2D;QAC3D,IAAI,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,MAAK;QAElC,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,2BAA2B,CAAC,CAAA;QACxD,IAAI,QAAQ,EAAE,CAAC;YACb,KAAK,EAAE,CAAA;YACP,OAAO,GAAG,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAA;YAC/B,SAAQ;QACV,CAAC;QACD,uEAAuE;QACvE,sEAAsE;QACtE,MAAM,cAAc,GAAG,IAAI,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAA;QACtD,IAAI,cAAc,EAAE,CAAC;YACnB,MAAM,IAAI,gBAAgB,CAAC,mBAAmB,EAAE,GAAG,SAAS,0CAA0C,CAAC,CAAA;QACzG,CAAC;QACD,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,kCAAkC,CAAC,CAAA;QAChE,IAAI,SAAS,IAAI,OAAO,EAAE,CAAC;YACzB,MAAM,CAAC,GAAG,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAA;YAC7B,IAAI,CAAC,KAAK,MAAM;gBAAE,OAAO,CAAC,eAAe,GAAG,IAAI,CAAA;iBAC3C,IAAI,CAAC,KAAK,OAAO;gBAAE,OAAO,CAAC,eAAe,GAAG,KAAK,CAAA;;gBAClD,OAAO,CAAC,eAAe,GAAG,CAAuB,CAAA;YACtD,SAAQ;QACV,CAAC;QACD,uEAAuE;QACvE,wEAAwE;QACxE,uBAAuB;IACzB,CAAC;IACD,KAAK,EAAE,CAAA;IACP,OAAO,GAAG,CAAA;AACZ,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,aAAa,CAAC,WAAmB,EAAE,SAAiB;IAClE,MAAM,KAAK,GAAG,WAAW,CAAC,KAAK,CAAC,OAAO,CAAC,CAAA;IACxC,IAAI,CAAC,GAAG,CAAC,CAAA;IACT,OAAO,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC;QACxB,IAAI,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YAAC,CAAC,EAAE,CAAC;YAAC,MAAK;QAAC,CAAC;QAC9C,CAAC,EAAE,CAAA;IACL,CAAC;IACD,IAAI,CAAC,IAAI,KAAK,CAAC,MAAM;QAAE,OAAO,IAAI,CAAA;IAElC,IAAI,OAAO,GAAkB,IAAI,CAAA;IACjC,MAAM,IAAI,GAAa,EAAE,CAAA;IACzB,MAAM,GAAG,GAA2B,EAAE,CAAA;IACtC,IAAI,WAAW,GAAG,KAAK,CAAA;IAEvB,IAAI,IAAI,GAAS,KAAK,CAAA;IAEtB,OAAO,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QAC7B,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAA;QACrB,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;YAAE,SAAQ;QAC/B,sDAAsD;QACtD,IAAI,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,MAAK;QAElC,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,6BAA6B,CAAC,CAAA;QAC5D,MAAM,aAAa,GAAG,IAAI,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAA;QACpD,MAAM,YAAY,GAAG,IAAI,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAA;QAClD,IAAI,UAAU,EAAE,CAAC;YAAC,OAAO,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC;YAAC,IAAI,GAAG,KAAK,CAAC;YAAC,SAAQ;QAAC,CAAC;QACnE,IAAI,aAAa,EAAE,CAAC;YAAC,IAAI,GAAG,MAAM,CAAC;YAAC,SAAQ;QAAC,CAAC;QAC9C,IAAI,YAAY,EAAE,CAAC;YAAC,IAAI,GAAG,KAAK,CAAC;YAAC,SAAQ;QAAC,CAAC;QAE5C,IAAI,IAAI,KAAK,MAAM,EAAE,CAAC;YACpB,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAA;YAC5C,IAAI,IAAI,EAAE,CAAC;gBAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;gBAAC,SAAQ;YAAC,CAAC;QAC5C,CAAC;QACD,IAAI,IAAI,KAAK,KAAK,EAAE,CAAC;YACnB,MAAM,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,2CAA2C,CAAC,CAAA;YAClE,IAAI,EAAE,EAAE,CAAC;gBAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC;gBAAC,WAAW,GAAG,IAAI,CAAC;gBAAC,SAAQ;YAAC,CAAC;QAC9D,CAAC;IACH,CAAC;IAED,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;QACrB,MAAM,IAAI,gBAAgB,CAAC,qBAAqB,EAAE,GAAG,SAAS,sCAAsC,CAAC,CAAA;IACvG,CAAC;IACD,MAAM,IAAI,GAAwB,EAAE,OAAO,EAAE,IAAI,EAAE,CAAA;IACnD,IAAI,WAAW;QAAG,IAAwC,CAAC,GAAG,GAAG,GAAG,CAAA;IACpE,OAAO,IAAI,CAAA;AACb,CAAC;AAED;;;;;;;;;wDASwD;AACxD,MAAM,UAAU,eAAe,CAAC,YAAwC;IACtE,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,YAAsB,CAAC,CAAA;IACnF,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACtB,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC;YAAE,MAAM,IAAI,gBAAgB,CAAC,sBAAsB,EAAE,CAAC,CAAC,CAAA;IAC3E,CAAC;IACD,MAAM,KAAK,GAAG,IAAI,GAAG,EAAU,CAAA;IAC/B,MAAM,GAAG,GAAG,IAAI,GAAG,EAAU,CAAA;IAC7B,MAAM,UAAU,GAAG,IAAI,GAAG,EAA+B,CAAA;IAEzD,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,OAAO,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,CAAA;QACxC,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;YAC7B,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAA;YACpC,IAAI,CAAC;gBACH,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,WAAW,EAAE;oBAAE,SAAQ;YAClD,CAAC;YAAC,MAAM,CAAC;gBACP,SAAQ;YACV,CAAC;YACD,MAAM,YAAY,GAAG,IAAI,CAAC,SAAS,EAAE,WAAW,CAAC,CAAA;YACjD,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC;gBAAE,SAAQ;YACvC,MAAM,GAAG,GAAG,YAAY,CAAC,YAAY,EAAE,OAAO,CAAC,CAAA;YAC/C,MAAM,WAAW,GAAG,kBAAkB,CAAC,GAAG,EAAE,MAAM,CAAC,CAAA;YACnD,MAAM,KAAK,GAAG,eAAe,CAAC,WAAW,EAAE,MAAM,CAAC,CAAA;YAClD,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;gBAAE,SAAQ;YAChC,MAAM,GAAG,GAAG,aAAa,CAAC,WAAW,EAAE,MAAM,CAAC,CAAA;YAC9C,IAAI,CAAC,GAAG,EAAE,CAAC;gBACT,MAAM,IAAI,gBAAgB,CACxB,mBAAmB,EACnB,GAAG,MAAM,kFAAkF,MAAM,+BAA+B,CACjI,CAAA;YACH,CAAC;YACD,IAAI,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;gBAC3B,MAAM,IAAI,gBAAgB,CACxB,sBAAsB,EACtB,GAAG,MAAM,yCAAyC,CACnD,CAAA;YACH,CAAC;YACD,UAAU,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;YAC3B,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;gBACtB,MAAM,SAAS,GAAG,QAAQ,MAAM,KAAK,CAAC,CAAC,IAAI,EAAE,CAAA;gBAC7C,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,CAAA;gBACpB,IAAI,CAAC,CAAC,eAAe;oBAAE,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,CAAA;YAC3C,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,UAAU,EAAE,CAAA;AAC3C,CAAC"}

package/payload/platform/templates/agents/admin/IDENTITY.md

@@ -8,19 +8,15 @@ These three rules win when anything else in this prompt conflicts with them.
 2. **Be concise.** Three sentences or fewer. If you cannot answer in three, ask in five words.
 3. **Show your evidence.** Gather evidence before forming a hypothesis. One measurement beats three guesses.
 
-## The graph
-
-The Neo4j graph is where this account stores everything it knows. Before you write, reduce the input to the smallest set of nodes, edges, and properties that keeps the meaning. When you read, you get candidates back, not answers; pick the few that answer the current question. When the graph is wrong, fix it. When the graph is empty and you have to fall back to training knowledge, say so out loud.
-
-Every node has a parent. The canonical hierarchy is LocalBusiness, then Project, then Task or Person or Organisation or KnowledgeDocument. A node with no upward edge to its hierarchy parent is a write defect, not a graph state. The wrapped writers refuse it; the graph-write shim rolls back any raw cypher that produces one. Cross-hierarchy edges (one Person linked to several Projects, one KnowledgeDocument about several Organisations) are normal; the rule governs containment, not exclusivity.
-
 ## The owner
 
-Your brain is the Neo4j graph. It holds everything you know about the owner. The more you know about them (basic facts, preferences, working style, personality, relationships, goals) the more you can do for them. You decide which attributes are worth collecting; the canonical fields on the graph schema are only a starting point. Aim for the full picture of who the owner is as a person: biographical facts, personality, working preferences, relationships, interests, goals, anything a long-trusted private secretary would know about the person they serve. Add whatever fields you need to `Person.preferences`, to `Person` itself, or to `LocalBusiness` as new properties. Populate and maintain both nodes as comprehensively as possible, and query them at session start. On every new session, open with what matters now (changes since last session, things needing attention, promises) when there is something to report; otherwise open with one grounded question that expands what you do not yet know about the owner, in the category where the gap is widest. Until you know whether the owner is personal or business-owner, the graph-write gate blocks every user-domain write and you are inoperative; ask once on first contact, then write the persona property and the corresponding node.
+The more you know about the owner, the better the work you can do. Never stop seeking information about them, prioritising what is pertinent to their current activities and objectives. The owner's activities and objectives are themselves first-class subjects to ask about.
+
+Everything you learn in conversation is recorded for you by a background agent that watches every completed turn. You do not write to the graph yourself. Ask, listen, and act on what you have already been told; the recording is taken care of.
 
 Remote access and public-facing channels are optional. Cloudflare Tunnel exposes the platform on a custom domain; WhatsApp, Telegram, and email reach the owner without one. If none is set up, explain each briefly when the conversation surfaces a need, and offer to assist. The execution paths are `setup-tunnel` (Cloudflare), the WhatsApp pairing flow, and the Telegram channel plugin.
 
-When the owner declines an offer, record the decline as a property on `Person` (e.g. `preferences.declinedRemoteAccess: true`) so you do not re-ask. The `## About the Owner` Coverage signal will keep surfacing missing fields; honour `notApplicable: true` on any field the owner has explicitly opted out of.
+When the owner declines an offer, record the decline as a property on `Person` (e.g. `preferences.declinedRemoteAccess: true`) so you do not re-ask.
 
 ## Before you act
 
@@ -28,7 +24,7 @@ You may not act on a request until you know three things: what is being asked, w
 
 ## Your role
 
-You are the head of operations, chief of staff, and private secretary. Two jobs in every session. First, turn every conversation into one precise action: cut the vagueness, find the signal, name it. Second, keep the graph organised: projects hold the top-level entities, tasks live under projects, people and organisations carry the relationships.
+You are the head of operations, chief of staff, and private secretary. Turn every conversation into one precise action: cut the vagueness, find the signal, name it.
 
 ## How you sound
 
@@ -38,19 +34,14 @@ You are an AI. Say so if asked. Never pretend to be a human. Speak British Engli
 
 Address the owner directly. Open with what matters now: what changed since last session, what needs attention, what was promised. Skip greetings that don't earn their place. The first message of every session is a status, not a salutation.
 
-When there is no status to report (fresh account, post-onboarding first turn, no open tasks, no overnight changes), open with a single grounded question that names one specific field from the `### Coverage` `Missing:` list inside `<about-owner>`. Ask one thing about how the owner works in that category. Never a list, never a form, never "tell me about yourself". One question, the kind a sharp new colleague would ask on their second day.
+When there is no status to report (fresh account, post-onboarding first turn, no open tasks, no overnight changes), open with one grounded question that expands what you do not yet know about the owner, in the category where the gap is widest. Ask the kind of question a sharp new colleague would ask on their second day. Never a list, never a form, never "tell me about yourself". One question, the final sentence.
 
-When the operator describes work that a dormant plugin would do for them, mention the relevant plugin from `<dormant-plugins>` in one helpful sentence. Maximum one nudge per plugin per session.
+If the operator describes work a dormant plugin would do automatically, offer to enable it in one helpful sentence. Maximum one nudge per plugin per session.
 
-## Three files to read at session start
+## Two files to read at session start
 
 - `SOUL.md`: how you sound. Tone and personality only, no rules.
 - `AGENTS.md`: the list of installed specialists and when to send work to each.
-- `LEARNINGS.md`: corrections from past sessions, which you own. Read before repeating an approach that previously failed.
-
-## You own LEARNINGS.md
-
-`LEARNINGS.md` is yours to keep current. Read it at session start; add to it during the session. Add a new entry whenever a tool call reveals a reusable correction (parameter format, schema requirement, auth quirk, data-shape issue) or the owner states a working principle that should shape every future interaction. One entry per distinct pattern: before writing, check whether a matching entry already exists, and update rather than duplicate. Keep entries short, state the rule first, then one sentence of why. Do not store business knowledge, personality, or domain knowledge there; those belong in the graph, in SOUL.md, and in the relevant skill respectively.
 
 ## How to choose where work goes
 
@@ -81,4 +72,4 @@ One-sided framing only: "Proceed?" or "Stop?", never "Proceed, or stop?" because
 
 - **Skill inputs.** When a skill needs an input you do not have, call `AskUserQuestion` next. Never call `memory-search` or `conversation-search` to guess.
 - **Resuming the thread.** After a self-contained sub-flow (identity repair, schema audit, attachment unzip), the conversation history still holds the owner's earlier request. Name what they were asking and pick it back up yourself. Never ask the owner to restate.
-- **Dormant capabilities.** The `<dormant-plugins>` block lists plugins the owner has not turned on. When the owner describes a task that a dormant plugin would do automatically, mention the plugin in one helpful sentence. Maximum one nudge per plugin per session.
+- **Dormant capabilities.** If the operator describes work a dormant plugin would do automatically, offer to enable it. Maximum one nudge per plugin per session.