@rubytech/create-maxy-code 0.1.382 → 0.1.384

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@rubytech/create-maxy-code",
-  "version": "0.1.382",
+  "version": "0.1.384",
   "description": "Install Maxy — AI for Productive People",
   "bin": {
     "create-maxy-code": "./dist/index.js"

package/payload/platform/plugins/admin/mcp/dist/index.js

@@ -27,7 +27,7 @@ import { publishSite } from "./tools/publish-site.js";
 import { resolveCapabilitiesHere } from "./tools/capabilities-here.js";
 import { runCatalogueCensus } from "./lib/catalogue-census.js";
 import { lifelineTool } from "../../../../lib/mcp-lifeline/dist/index.js";
-import { listAccountsFromDir, isHouseAccount, archiveAccountDir, provisionClientAccount, findHouseAccount, getChannelRoutingAccountId, setChannelRoutingAccountId, ACCOUNT_NODE_COUNT_CYPHER, ACCOUNT_PURGE_CYPHER, } from "./tools/account-lifecycle.js";
+import { listAccountsFromDir, isHouseAccount, archiveAccountDir, provisionClientAccount, findHouseAccount, getChannelRoutingAccountId, setChannelRoutingAccountId, seedAccountGraphRoot, ACCOUNT_NODE_COUNT_CYPHER, ACCOUNT_PURGE_CYPHER, } from "./tools/account-lifecycle.js";
 function refusalGuidance(kind) {
     switch (kind) {
         case "unsafe-slug":
@@ -3256,7 +3256,7 @@ eagerTool(server, "account_list", "List every sub-account on this install (one h
         content: [{ type: "text", text: accounts.length ? lines.join("\n") : "No accounts found." }],
     };
 });
-eagerTool(server, "account_create", "Provision a new CLIENT sub-account on this install (managed service). Mints a UUID, scaffolds the account directory (agents, specialists, settings, account.json with role:\"client\"), seeds default plugins, and adds you (the install owner) to the sub-account's admins so you can switch to it. Returns the new accountId. Operator-only; never creates the house sub-account (that is the install itself).", {}, async () => {
+eagerTool(server, "account_create", "Provision a new CLIENT sub-account on this install (managed service). Mints a UUID, scaffolds the account directory (agents, specialists, settings, account.json with role:\"client\"), seeds default plugins, and seeds the account's graph root (a :LocalBusiness plus its owner :AdminUser) so you can populate it immediately. Returns the new accountId. Operator-only; never creates the house sub-account (that is the install itself).", {}, async () => {
     if (!ACCOUNT_ID)
         return refuseNoAccount("account_create");
     const newId = randomUUID();
@@ -3269,20 +3269,48 @@ eagerTool(server, "account_create", "Provision a new CLIENT sub-account on this
         });
         const accountJson = join(accountDir, "account.json");
         const dirExists = existsSync(accountJson);
-        let role = "client";
-        try {
-            role = String(JSON.parse(readFileSync(accountJson, "utf-8")).role ?? "client");
-        }
-        catch { /* keep default */ }
-        process.stderr.write(`[account-lifecycle] op=create accountId=${newId} dir-exists=${dirExists} role=${role}\n`);
         if (!dirExists) {
+            process.stderr.write(`[account-lifecycle] op=create accountId=${newId} dir-exists=false root-seeded=false\n`);
             return { content: [{ type: "text", text: `account_create FAILED: scaffold did not produce ${accountJson}` }], isError: true };
         }
+        // Task 1359 — seed the account's graph root so checkGraphWriteGate is
+        // satisfiable immediately (otherwise the account is rootless: no write
+        // succeeds and the agent cannot create the root itself). The owner
+        // AdminUser gets a fresh userId — the install owner's AdminUser is
+        // MERGE-keyed on its own userId at accountId=house, so reusing it would
+        // leave the client's account-scoped AdminUser MATCH empty.
+        const ownerUserId = randomUUID();
+        let ownerName = "Owner";
+        try {
+            const users = JSON.parse(readFileSync(USERS_FILE, "utf-8"));
+            if (Array.isArray(users) && typeof users[0]?.name === "string")
+                ownerName = users[0].name;
+        }
+        catch { /* no users.json — default "Owner" */ }
+        const seedSession = getSession();
+        let rootSeeded = false;
+        try {
+            const { businessSeeded, adminSeeded } = await seedAccountGraphRoot({
+                session: seedSession,
+                accountId: newId,
+                ownerUserId,
+                ownerName,
+                createdAt: new Date().toISOString(),
+            });
+            rootSeeded = businessSeeded && adminSeeded;
+        }
+        finally {
+            await seedSession.close();
+        }
+        process.stderr.write(`[account-lifecycle] op=create accountId=${newId} dir-exists=${dirExists} root-seeded=${rootSeeded}\n`);
+        if (!rootSeeded) {
+            return { content: [{ type: "text", text: `account_create FAILED: graph root not seeded for ${newId} (business+admin read-back failed). The account directory was scaffolded but is rootless — run account_delete ${newId} and retry.` }], isError: true };
+        }
         return { content: [{ type: "text", text: `Created client sub-account ${newId}. Switch to it from the sub-account picker to work in its data.` }] };
     }
     catch (err) {
         const msg = err instanceof Error ? err.message : String(err);
-        process.stderr.write(`[account-lifecycle] op=create accountId=${newId} dir-exists=false role=client error=${msg}\n`);
+        process.stderr.write(`[account-lifecycle] op=create accountId=${newId} dir-exists=false root-seeded=false error=${msg}\n`);
         return { content: [{ type: "text", text: `account_create FAILED: ${msg}` }], isError: true };
     }
 });