@rubytech/create-maxy-code 0.1.410 → 0.1.412

package/payload/platform/plugins/filesystem/mcp/dist/index.js

@@ -0,0 +1,91 @@
+import { initStderrTee } from "../../../../lib/mcp-stderr-tee/dist/index.js";
+initStderrTee("filesystem");
+import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
+import { eagerTool } from "../../../../lib/mcp-eager/dist/index.js";
+import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";
+import { z } from "zod";
+import { resolve } from "node:path";
+import { readPluginHouseScope } from "./lib/scope.js";
+import { fileRead } from "./tools/file-read.js";
+import { fileWrite } from "./tools/file-write.js";
+import { fileEdit } from "./tools/file-edit.js";
+import { fileList } from "./tools/file-list.js";
+import { fileGlob } from "./tools/file-glob.js";
+import { fileGrep } from "./tools/file-grep.js";
+// Cast to `any` to avoid TS2589 — the same accumulation limit the other
+// plugins hit when registering several typed tool signatures.
+// eslint-disable-next-line @typescript-eslint/no-explicit-any
+const server = new McpServer({ name: "maxy-filesystem", version: "0.1.0" });
+// Plugin-system boot tolerance: module-init must never throw; plugin-system
+// spawn enumerates tools/list before ACCOUNT_ID is set. Per-call refusal
+// preserves account isolation.
+const ownAccountId = process.env.ACCOUNT_ID ?? null;
+// Fail-closed read of the boundary — see readPluginHouseScope. Never trusts a
+// literal ${HOUSE_ADMIN_SCOPE} placeholder or an empty value as a real scope.
+const houseScope = readPluginHouseScope(process.env);
+const platformRoot = process.env.PLATFORM_ROOT ?? "";
+process.stderr.write(`[filesystem] boot accountId=${ownAccountId ?? "null"} houseScope=${houseScope ? "set" : "null"}\n`);
+function refuseNoAccount(toolName) {
+    process.stderr.write(`[filesystem] tool=${toolName} refuse reason=no-account-context\n`);
+    return {
+        content: [
+            {
+                type: "text",
+                text: `${toolName} cannot execute: this MCP instance was launched without ACCOUNT_ID/PLATFORM_ROOT (plugin-system metadata-only mode).`,
+            },
+        ],
+        isError: true,
+    };
+}
+/** Build the per-call context once from the spawn env. Null when the metadata-
+ *  only boot left ACCOUNT_ID/PLATFORM_ROOT unset. `accountsDir` mirrors
+ *  account.ts's `ACCOUNTS_DIR = resolve(PLATFORM_ROOT, "..", "data/accounts")`. */
+function ctx() {
+    if (!ownAccountId || !platformRoot)
+        return null;
+    return { ownAccountId, houseScope, accountsDir: resolve(platformRoot, "..", "data/accounts") };
+}
+const targetArg = z
+    .string()
+    .optional()
+    .describe("House admin only: a sub-account ID to operate on. Omit to operate on your own account. A non-house session that passes this is denied (cross-account-denied).");
+eagerTool(server, "file-read", "Read a UTF-8 file under the account directory. Pass a path relative to the account root; pass targetAccountId (house admin only) to read a sub-account's file.", { path: z.string().describe("Path relative to the account directory"), targetAccountId: targetArg }, async (a) => {
+    const c = ctx();
+    return c ? fileRead(a, c) : refuseNoAccount("file-read");
+});
+eagerTool(server, "file-write", "Write (create or overwrite) a UTF-8 file under the account directory, creating parent directories as needed.", {
+    path: z.string().describe("Path relative to the account directory"),
+    content: z.string().describe("Full file contents to write"),
+    targetAccountId: targetArg,
+}, async (a) => {
+    const c = ctx();
+    return c ? fileWrite(a, c) : refuseNoAccount("file-write");
+});
+eagerTool(server, "file-edit", "Replace a single unique occurrence of oldString with newString in a file under the account directory. Fails if oldString is absent or matches more than once.", {
+    path: z.string().describe("Path relative to the account directory"),
+    oldString: z.string().describe("Exact text to replace (must occur exactly once)"),
+    newString: z.string().describe("Replacement text"),
+    targetAccountId: targetArg,
+}, async (a) => {
+    const c = ctx();
+    return c ? fileEdit(a, c) : refuseNoAccount("file-edit");
+});
+eagerTool(server, "file-list", "List the entries of a directory under the account directory (name + type). Omit path to list the account root.", { path: z.string().optional().describe("Directory relative to the account root"), targetAccountId: targetArg }, async (a) => {
+    const c = ctx();
+    return c ? fileList(a, c) : refuseNoAccount("file-list");
+});
+eagerTool(server, "file-glob", "List files under the account directory matching a glob (**, *, ?), returned as paths relative to the account root.", { pattern: z.string().describe("Glob pattern, e.g. **/*.md"), targetAccountId: targetArg }, async (a) => {
+    const c = ctx();
+    return c ? fileGlob(a, c) : refuseNoAccount("file-glob");
+});
+eagerTool(server, "file-grep", "Search file contents under the account directory for a JavaScript regular expression, returning file:line:preview matches. Omit path to search the whole account.", {
+    pattern: z.string().describe("JavaScript regular expression"),
+    path: z.string().optional().describe("Subdirectory (relative) to limit the search"),
+    targetAccountId: targetArg,
+}, async (a) => {
+    const c = ctx();
+    return c ? fileGrep(a, c) : refuseNoAccount("file-grep");
+});
+const transport = new StdioServerTransport();
+await server.connect(transport);
+//# sourceMappingURL=index.js.map

package/payload/platform/plugins/filesystem/mcp/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,8CAA8C,CAAC;AAC7E,aAAa,CAAC,YAAY,CAAC,CAAC;AAE5B,OAAO,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AACpE,OAAO,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AACpE,OAAO,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAC;AACjF,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEpC,OAAO,EAAE,oBAAoB,EAAE,MAAM,gBAAgB,CAAC;AACtD,OAAO,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAChD,OAAO,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAC;AAClD,OAAO,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAChD,OAAO,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAChD,OAAO,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAChD,OAAO,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAEhD,wEAAwE;AACxE,8DAA8D;AAC9D,8DAA8D;AAC9D,MAAM,MAAM,GAAQ,IAAI,SAAS,CAAC,EAAE,IAAI,EAAE,iBAAiB,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC;AAEjF,4EAA4E;AAC5E,yEAAyE;AACzE,+BAA+B;AAC/B,MAAM,YAAY,GAAG,OAAO,CAAC,GAAG,CAAC,UAAU,IAAI,IAAI,CAAC;AACpD,8EAA8E;AAC9E,8EAA8E;AAC9E,MAAM,UAAU,GAAG,oBAAoB,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;AACrD,MAAM,YAAY,GAAG,OAAO,CAAC,GAAG,CAAC,aAAa,IAAI,EAAE,CAAC;AACrD,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,+BAA+B,YAAY,IAAI,MAAM,eAAe,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,IAAI,CACpG,CAAC;AAEF,SAAS,eAAe,CAAC,QAAgB;IACvC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,qBAAqB,QAAQ,qCAAqC,CAAC,CAAC;IACzF,OAAO;QACL,OAAO,EAAE;YACP;gBACE,IAAI,EAAE,MAAe;gBACrB,IAAI,EAAE,GAAG,QAAQ,sHAAsH;aACxI;SACF;QACD,OAAO,EAAE,IAAa;KACvB,CAAC;AACJ,CAAC;AAED;;mFAEmF;AACnF,SAAS,GAAG;IACV,IAAI,CAAC,YAAY,IAAI,CAAC,YAAY;QAAE,OAAO,IAAI,CAAC;IAChD,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,WAAW,EAAE,OAAO,CAAC,YAAY,EAAE,IAAI,EAAE,eAAe,CAAC,EAAE,CAAC;AACjG,CAAC;AAED,MAAM,SAAS,GAAG,CAAC;KAChB,MAAM,EAAE;KACR,QAAQ,EAAE;KACV,QAAQ,CACP,+JAA+J,CAChK,CAAC;AAEJ,SAAS,CACP,MAAM,EACN,WAAW,EACX,gKAAgK,EAChK,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,wCAAwC,CAAC,EAAE,eAAe,EAAE,SAAS,EAAE,EACnG,KAAK,EAAE,CAA6C,EAAE,EAAE;IACtD,MAAM,CAAC,GAAG,GAAG,EAAE,CAAC;IAChB,OAAO,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,WAAW,CAAC,CAAC;AAC3D,CAAC,CACF,CAAC;AAEF,SAAS,CACP,MAAM,EACN,YAAY,EACZ,8GAA8G,EAC9G;IACE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,wCAAwC,CAAC;IACnE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,6BAA6B,CAAC;IAC3D,eAAe,EAAE,SAAS;CAC3B,EACD,KAAK,EAAE,CAA8D,EAAE,EAAE;IACvE,MAAM,CAAC,GAAG,GAAG,EAAE,CAAC;IAChB,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,YAAY,CAAC,CAAC;AAC7D,CAAC,CACF,CAAC;AAEF,SAAS,CACP,MAAM,EACN,WAAW,EACX,+JAA+J,EAC/J;IACE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,wCAAwC,CAAC;IACnE,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,iDAAiD,CAAC;IACjF,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,kBAAkB,CAAC;IAClD,eAAe,EAAE,SAAS;CAC3B,EACD,KAAK,EAAE,CAAmF,EAAE,EAAE;IAC5F,MAAM,CAAC,GAAG,GAAG,EAAE,CAAC;IAChB,OAAO,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,WAAW,CAAC,CAAC;AAC3D,CAAC,CACF,CAAC;AAEF,SAAS,CACP,MAAM,EACN,WAAW,EACX,gHAAgH,EAChH,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,wCAAwC,CAAC,EAAE,eAAe,EAAE,SAAS,EAAE,EAC9G,KAAK,EAAE,CAA8C,EAAE,EAAE;IACvD,MAAM,CAAC,GAAG,GAAG,EAAE,CAAC;IAChB,OAAO,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,WAAW,CAAC,CAAC;AAC3D,CAAC,CACF,CAAC;AAEF,SAAS,CACP,MAAM,EACN,WAAW,EACX,oHAAoH,EACpH,EAAE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,4BAA4B,CAAC,EAAE,eAAe,EAAE,SAAS,EAAE,EAC1F,KAAK,EAAE,CAAgD,EAAE,EAAE;IACzD,MAAM,CAAC,GAAG,GAAG,EAAE,CAAC;IAChB,OAAO,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,WAAW,CAAC,CAAC;AAC3D,CAAC,CACF,CAAC;AAEF,SAAS,CACP,MAAM,EACN,WAAW,EACX,mKAAmK,EACnK;IACE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,+BAA+B,CAAC;IAC7D,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,6CAA6C,CAAC;IACnF,eAAe,EAAE,SAAS;CAC3B,EACD,KAAK,EAAE,CAA+D,EAAE,EAAE;IACxE,MAAM,CAAC,GAAG,GAAG,EAAE,CAAC;IAChB,OAAO,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,WAAW,CAAC,CAAC;AAC3D,CAAC,CACF,CAAC;AAEF,MAAM,SAAS,GAAG,IAAI,oBAAoB,EAAE,CAAC;AAC7C,MAAO,MAAoB,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC"}

package/payload/platform/plugins/filesystem/mcp/dist/lib/__tests__/scope.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=scope.test.d.ts.map

package/payload/platform/plugins/filesystem/mcp/dist/lib/__tests__/scope.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"scope.test.d.ts","sourceRoot":"","sources":["../../../src/lib/__tests__/scope.test.ts"],"names":[],"mappings":""}

package/payload/platform/plugins/filesystem/mcp/dist/lib/__tests__/scope.test.js

@@ -0,0 +1,89 @@
+import { describe, it, expect, beforeEach, afterEach } from "vitest";
+import { mkdtempSync, mkdirSync, writeFileSync, symlinkSync, rmSync, realpathSync } from "node:fs";
+import { tmpdir } from "node:os";
+import { join, resolve } from "node:path";
+import { resolveRoot, containedPath, readPluginHouseScope } from "../scope.js";
+// enumerateValidAccountIds only counts UUID-named dirs with a parseable
+// account.json, so the fixtures use real UUIDs.
+const HOUSE = "11111111-1111-4111-8111-111111111111";
+const CLIENT = "22222222-2222-4222-8222-222222222222";
+const GHOST = "33333333-3333-4333-8333-333333333333";
+let accountsDir;
+let outsideDir;
+beforeEach(() => {
+    accountsDir = mkdtempSync(join(tmpdir(), "xacct-accounts-"));
+    outsideDir = mkdtempSync(join(tmpdir(), "xacct-outside-"));
+    for (const id of [HOUSE, CLIENT]) {
+        mkdirSync(join(accountsDir, id), { recursive: true });
+        writeFileSync(join(accountsDir, id, "account.json"), JSON.stringify({ accountId: id }));
+    }
+    writeFileSync(join(outsideDir, "secret.txt"), "secret");
+});
+afterEach(() => {
+    rmSync(accountsDir, { recursive: true, force: true });
+    rmSync(outsideDir, { recursive: true, force: true });
+});
+const houseCtx = () => ({ ownAccountId: HOUSE, houseScope: HOUSE, accountsDir });
+const clientCtx = () => ({ ownAccountId: CLIENT, houseScope: null, accountsDir });
+describe("resolveRoot — fail-closed gate", () => {
+    it("no target → own account root", () => {
+        const r = resolveRoot(houseCtx(), undefined, "file-read");
+        expect(r).toEqual({ root: resolve(accountsDir, HOUSE), resolved: HOUSE });
+    });
+    it("house scope + valid target → target root", () => {
+        const r = resolveRoot(houseCtx(), CLIENT, "file-read");
+        expect(r).toEqual({ root: resolve(accountsDir, CLIENT), resolved: CLIENT });
+    });
+    it("non-house session + target → cross-account-denied", () => {
+        const r = resolveRoot(clientCtx(), HOUSE, "file-read");
+        expect(r).toEqual({ reject: "cross-account-denied" });
+    });
+    it("house scope + unknown target → cross-account-invalid-target", () => {
+        const r = resolveRoot(houseCtx(), GHOST, "file-read");
+        expect(r).toEqual({ reject: "cross-account-invalid-target" });
+    });
+    it("house scope + target == own → own root (self allowed)", () => {
+        const r = resolveRoot(houseCtx(), HOUSE, "file-read");
+        expect(r).toEqual({ root: resolve(accountsDir, HOUSE), resolved: HOUSE });
+    });
+});
+describe("readPluginHouseScope — fail-closed against loader substitution", () => {
+    it("returns the scope when a real value is set", () => {
+        expect(readPluginHouseScope({ HOUSE_ADMIN_SCOPE: HOUSE })).toBe(HOUSE);
+    });
+    it("returns null when absent (non-house session)", () => {
+        expect(readPluginHouseScope({})).toBeNull();
+    });
+    it("returns null when empty", () => {
+        expect(readPluginHouseScope({ HOUSE_ADMIN_SCOPE: "" })).toBeNull();
+    });
+    it("returns null for an unsubstituted ${...} placeholder (the escalation guard)", () => {
+        expect(readPluginHouseScope({ HOUSE_ADMIN_SCOPE: "${HOUSE_ADMIN_SCOPE}" })).toBeNull();
+    });
+});
+describe("containedPath — traversal guard", () => {
+    it("allows a legitimate file directly under root", () => {
+        const root = resolve(accountsDir, HOUSE);
+        const realRoot = realpathSync(root); // macOS resolves /var → /private/var
+        expect(containedPath(root, "SOUL.md")).toBe(join(realRoot, "SOUL.md"));
+    });
+    it("allows a nested not-yet-existing (create) path under root", () => {
+        const root = resolve(accountsDir, HOUSE);
+        const realRoot = realpathSync(root);
+        expect(containedPath(root, "agents/x/new.txt")).toBe(join(realRoot, "agents/x/new.txt"));
+    });
+    it("rejects ../ escape to a sibling account", () => {
+        const root = resolve(accountsDir, HOUSE);
+        expect(() => containedPath(root, `../${CLIENT}/account.json`)).toThrow("path-escape");
+    });
+    it("rejects an absolute path outside the account dir", () => {
+        const root = resolve(accountsDir, HOUSE);
+        expect(() => containedPath(root, "/etc/passwd")).toThrow("path-escape");
+    });
+    it("rejects a symlink that escapes the account dir", () => {
+        const root = resolve(accountsDir, HOUSE);
+        symlinkSync(outsideDir, join(root, "escape"));
+        expect(() => containedPath(root, "escape/secret.txt")).toThrow("path-escape");
+    });
+});
+//# sourceMappingURL=scope.test.js.map

package/payload/platform/plugins/filesystem/mcp/dist/lib/__tests__/scope.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"scope.test.js","sourceRoot":"","sources":["../../../src/lib/__tests__/scope.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAC;AACrE,OAAO,EAAE,WAAW,EAAE,SAAS,EAAE,aAAa,EAAE,WAAW,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACnG,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,WAAW,EAAE,aAAa,EAAE,oBAAoB,EAAY,MAAM,aAAa,CAAC;AAEzF,wEAAwE;AACxE,gDAAgD;AAChD,MAAM,KAAK,GAAG,sCAAsC,CAAC;AACrD,MAAM,MAAM,GAAG,sCAAsC,CAAC;AACtD,MAAM,KAAK,GAAG,sCAAsC,CAAC;AAErD,IAAI,WAAmB,CAAC;AACxB,IAAI,UAAkB,CAAC;AAEvB,UAAU,CAAC,GAAG,EAAE;IACd,WAAW,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,iBAAiB,CAAC,CAAC,CAAC;IAC7D,UAAU,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,gBAAgB,CAAC,CAAC,CAAC;IAC3D,KAAK,MAAM,EAAE,IAAI,CAAC,KAAK,EAAE,MAAM,CAAC,EAAE,CAAC;QACjC,SAAS,CAAC,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACtD,aAAa,CAAC,IAAI,CAAC,WAAW,EAAE,EAAE,EAAE,cAAc,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;IAC1F,CAAC;IACD,aAAa,CAAC,IAAI,CAAC,UAAU,EAAE,YAAY,CAAC,EAAE,QAAQ,CAAC,CAAC;AAC1D,CAAC,CAAC,CAAC;AAEH,SAAS,CAAC,GAAG,EAAE;IACb,MAAM,CAAC,WAAW,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACtD,MAAM,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;AACvD,CAAC,CAAC,CAAC;AAEH,MAAM,QAAQ,GAAG,GAAQ,EAAE,CAAC,CAAC,EAAE,YAAY,EAAE,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC;AACtF,MAAM,SAAS,GAAG,GAAQ,EAAE,CAAC,CAAC,EAAE,YAAY,EAAE,MAAM,EAAE,UAAU,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC;AAEvF,QAAQ,CAAC,gCAAgC,EAAE,GAAG,EAAE;IAC9C,EAAE,CAAC,8BAA8B,EAAE,GAAG,EAAE;QACtC,MAAM,CAAC,GAAG,WAAW,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,WAAW,CAAC,CAAC;QAC1D,MAAM,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,WAAW,EAAE,KAAK,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC;IAC5E,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0CAA0C,EAAE,GAAG,EAAE;QAClD,MAAM,CAAC,GAAG,WAAW,CAAC,QAAQ,EAAE,EAAE,MAAM,EAAE,WAAW,CAAC,CAAC;QACvD,MAAM,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,WAAW,EAAE,MAAM,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC;IAC9E,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mDAAmD,EAAE,GAAG,EAAE;QAC3D,MAAM,CAAC,GAAG,WAAW,CAAC,SAAS,EAAE,EAAE,KAAK,EAAE,WAAW,CAAC,CAAC;QACvD,MAAM,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,sBAAsB,EAAE,CAAC,CAAC;IACxD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6DAA6D,EAAE,GAAG,EAAE;QACrE,MAAM,CAAC,GAAG,WAAW,CAAC,QAAQ,EAAE,EAAE,KAAK,EAAE,WAAW,CAAC,CAAC;QACtD,MAAM,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,8BAA8B,EAAE,CAAC,CAAC;IAChE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uDAAuD,EAAE,GAAG,EAAE;QAC/D,MAAM,CAAC,GAAG,WAAW,CAAC,QAAQ,EAAE,EAAE,KAAK,EAAE,WAAW,CAAC,CAAC;QACtD,MAAM,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,WAAW,EAAE,KAAK,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC;IAC5E,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,gEAAgE,EAAE,GAAG,EAAE;IAC9E,EAAE,CAAC,4CAA4C,EAAE,GAAG,EAAE;QACpD,MAAM,CAAC,oBAAoB,CAAC,EAAE,iBAAiB,EAAE,KAAK,EAAuB,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC9F,CAAC,CAAC,CAAC;IACH,EAAE,CAAC,8CAA8C,EAAE,GAAG,EAAE;QACtD,MAAM,CAAC,oBAAoB,CAAC,EAAuB,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;IACnE,CAAC,CAAC,CAAC;IACH,EAAE,CAAC,yBAAyB,EAAE,GAAG,EAAE;QACjC,MAAM,CAAC,oBAAoB,CAAC,EAAE,iBAAiB,EAAE,EAAE,EAAuB,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;IAC1F,CAAC,CAAC,CAAC;IACH,EAAE,CAAC,6EAA6E,EAAE,GAAG,EAAE;QACrF,MAAM,CACJ,oBAAoB,CAAC,EAAE,iBAAiB,EAAE,sBAAsB,EAAuB,CAAC,CACzF,CAAC,QAAQ,EAAE,CAAC;IACf,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,iCAAiC,EAAE,GAAG,EAAE;IAC/C,EAAE,CAAC,8CAA8C,EAAE,GAAG,EAAE;QACtD,MAAM,IAAI,GAAG,OAAO,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC;QACzC,MAAM,QAAQ,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,qCAAqC;QAC1E,MAAM,CAAC,aAAa,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC,CAAC;IACzE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2DAA2D,EAAE,GAAG,EAAE;QACnE,MAAM,IAAI,GAAG,OAAO,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC;QACzC,MAAM,QAAQ,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;QACpC,MAAM,CAAC,aAAa,CAAC,IAAI,EAAE,kBAAkB,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,kBAAkB,CAAC,CAAC,CAAC;IAC3F,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yCAAyC,EAAE,GAAG,EAAE;QACjD,MAAM,IAAI,GAAG,OAAO,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC;QACzC,MAAM,CAAC,GAAG,EAAE,CAAC,aAAa,CAAC,IAAI,EAAE,MAAM,MAAM,eAAe,CAAC,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;IACxF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kDAAkD,EAAE,GAAG,EAAE;QAC1D,MAAM,IAAI,GAAG,OAAO,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC;QACzC,MAAM,CAAC,GAAG,EAAE,CAAC,aAAa,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;IAC1E,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gDAAgD,EAAE,GAAG,EAAE;QACxD,MAAM,IAAI,GAAG,OAAO,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC;QACzC,WAAW,CAAC,UAAU,EAAE,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC;QAC9C,MAAM,CAAC,GAAG,EAAE,CAAC,aAAa,CAAC,IAAI,EAAE,mBAAmB,CAAC,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;IAChF,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/payload/platform/plugins/filesystem/mcp/dist/lib/result.d.ts

@@ -0,0 +1,12 @@
+export interface ToolResult {
+    content: {
+        type: "text";
+        text: string;
+    }[];
+    /** Present and true only on error results, so `.isError` is well-typed on the
+     *  ok|err union that handlers return. */
+    isError?: true;
+}
+export declare const ok: (text: string) => ToolResult;
+export declare const err: (text: string) => ToolResult;
+//# sourceMappingURL=result.d.ts.map

package/payload/platform/plugins/filesystem/mcp/dist/lib/result.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"result.d.ts","sourceRoot":"","sources":["../../src/lib/result.ts"],"names":[],"mappings":"AACA,MAAM,WAAW,UAAU;IACzB,OAAO,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;IAC1C;6CACyC;IACzC,OAAO,CAAC,EAAE,IAAI,CAAC;CAChB;AAED,eAAO,MAAM,EAAE,GAAI,MAAM,MAAM,KAAG,UAAqD,CAAC;AACxF,eAAO,MAAM,GAAG,GAAI,MAAM,MAAM,KAAG,UAGjC,CAAC"}

package/payload/platform/plugins/filesystem/mcp/dist/lib/result.js

@@ -0,0 +1,6 @@
+export const ok = (text) => ({ content: [{ type: "text", text }] });
+export const err = (text) => ({
+    content: [{ type: "text", text }],
+    isError: true,
+});
+//# sourceMappingURL=result.js.map

package/payload/platform/plugins/filesystem/mcp/dist/lib/result.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"result.js","sourceRoot":"","sources":["../../src/lib/result.ts"],"names":[],"mappings":"AAQA,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,IAAY,EAAc,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC;AACxF,MAAM,CAAC,MAAM,GAAG,GAAG,CAAC,IAAY,EAAc,EAAE,CAAC,CAAC;IAChD,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;IACjC,OAAO,EAAE,IAAI;CACd,CAAC,CAAC"}

package/payload/platform/plugins/filesystem/mcp/dist/lib/scope.d.ts

@@ -0,0 +1,45 @@
+/**
+ * Read HOUSE_ADMIN_SCOPE for the plugin, fail-closed. HOUSE_ADMIN_SCOPE is the
+ * whole boundary: it is present in the spawn env ONLY for a house role:admin
+ * session (Task 1440). This plugin's PLUGIN.md also declares the key with a
+ * `${HOUSE_ADMIN_SCOPE}` placeholder so the value flows on loaders that pass
+ * only declared env keys — but an UNSET placeholder is substituted
+ * differently across spawn loaders: some yield empty, some leave the literal
+ * `${HOUSE_ADMIN_SCOPE}` string (which is truthy). Treating a literal
+ * placeholder or an empty value as "no scope" makes a non-house session
+ * deterministically fail-closed regardless of loader behaviour — the read
+ * never trusts a value it did not receive as a real scope. (This is why the
+ * plugin does not call the shared `readHouseAdminScope`, whose truthy test
+ * would accept the literal placeholder.)
+ */
+export declare function readPluginHouseScope(env: NodeJS.ProcessEnv): string | null;
+export interface Ctx {
+    /** The session's own account (spawn env ACCOUNT_ID). */
+    ownAccountId: string;
+    /** HOUSE_ADMIN_SCOPE from the spawn env; null for any non-house session. */
+    houseScope: string | null;
+    /** `<install>/data/accounts` — the root that all account dirs live under. */
+    accountsDir: string;
+}
+export type ResolveRootResult = {
+    root: string;
+    resolved: string;
+} | {
+    reject: "cross-account-denied" | "cross-account-invalid-target";
+};
+/**
+ * Resolve the account directory a tool call acts on, gated fail-closed. Emits
+ * the standing [xacct] decision line for every call and op=fs-root on allow.
+ * `root` is `<accountsDir>/<resolved>` — the strict filesystem root the caller
+ * must contain every path within.
+ */
+export declare function resolveRoot(ctx: Ctx, targetAccountId: string | undefined, tool: string): ResolveRootResult;
+/**
+ * Resolve `relPath` against the account `root` and prove it stays inside.
+ * Lexical containment rejects `../` and absolute-path escapes; a realpath check
+ * on the deepest EXISTING ancestor rejects symlink escapes and still permits a
+ * not-yet-existing (create) target. Throws Error("path-escape") after emitting
+ * op=path-escape-reject; the caller surfaces it as an isError tool result.
+ */
+export declare function containedPath(root: string, relPath: string): string;
+//# sourceMappingURL=scope.d.ts.map

package/payload/platform/plugins/filesystem/mcp/dist/lib/scope.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"scope.d.ts","sourceRoot":"","sources":["../../src/lib/scope.ts"],"names":[],"mappings":"AAqBA;;;;;;;;;;;;;GAaG;AACH,wBAAgB,oBAAoB,CAAC,GAAG,EAAE,MAAM,CAAC,UAAU,GAAG,MAAM,GAAG,IAAI,CAK1E;AAED,MAAM,WAAW,GAAG;IAClB,wDAAwD;IACxD,YAAY,EAAE,MAAM,CAAC;IACrB,4EAA4E;IAC5E,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,6EAA6E;IAC7E,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,MAAM,iBAAiB,GACzB;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,GAClC;IAAE,MAAM,EAAE,sBAAsB,GAAG,8BAA8B,CAAA;CAAE,CAAC;AAExE;;;;;GAKG;AACH,wBAAgB,WAAW,CACzB,GAAG,EAAE,GAAG,EACR,eAAe,EAAE,MAAM,GAAG,SAAS,EACnC,IAAI,EAAE,MAAM,GACX,iBAAiB,CAqBnB;AAED;;;;;;GAMG;AACH,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,MAAM,CAenE"}

package/payload/platform/plugins/filesystem/mcp/dist/lib/scope.js

@@ -0,0 +1,86 @@
+// scope.ts — the security core of the `filesystem` plugin.
+//
+// Every file tool routes through here. `resolveRoot` runs the ONE landed
+// fail-closed resolver (account-scope) with a valid-account check over
+// `enumerateValidAccountIds`, emitting the [xacct] per-call decision line and
+// the op=fs-root line BEFORE any fs op. `containedPath` roots every path under
+// the resolved account dir and rejects traversal (../, absolute escape) and
+// symlink escapes, emitting op=path-escape-reject.
+//
+// The fail-closed backbone is structural, not conventional: HOUSE_ADMIN_SCOPE
+// is stamped into the spawn env ONLY for a non-specialist role:admin session on
+// the house account (Task 1440), so a sub-account, specialist, or public
+// session's plugin process carries houseScope=null and any targetAccountId it
+// passes resolves to cross-account-denied.
+import { resolve, dirname, sep } from "node:path";
+import { realpathSync, existsSync } from "node:fs";
+import { resolveEffectiveAccountCore } from "../../../../../lib/account-scope/dist/index.js";
+import { enumerateValidAccountIds } from "../../../../../lib/account-enumeration/dist/index.js";
+const short = (id) => id.slice(0, 8);
+/**
+ * Read HOUSE_ADMIN_SCOPE for the plugin, fail-closed. HOUSE_ADMIN_SCOPE is the
+ * whole boundary: it is present in the spawn env ONLY for a house role:admin
+ * session (Task 1440). This plugin's PLUGIN.md also declares the key with a
+ * `${HOUSE_ADMIN_SCOPE}` placeholder so the value flows on loaders that pass
+ * only declared env keys — but an UNSET placeholder is substituted
+ * differently across spawn loaders: some yield empty, some leave the literal
+ * `${HOUSE_ADMIN_SCOPE}` string (which is truthy). Treating a literal
+ * placeholder or an empty value as "no scope" makes a non-house session
+ * deterministically fail-closed regardless of loader behaviour — the read
+ * never trusts a value it did not receive as a real scope. (This is why the
+ * plugin does not call the shared `readHouseAdminScope`, whose truthy test
+ * would accept the literal placeholder.)
+ */
+export function readPluginHouseScope(env) {
+    const raw = env.HOUSE_ADMIN_SCOPE;
+    if (!raw)
+        return null;
+    if (raw.startsWith("${"))
+        return null;
+    return raw;
+}
+/**
+ * Resolve the account directory a tool call acts on, gated fail-closed. Emits
+ * the standing [xacct] decision line for every call and op=fs-root on allow.
+ * `root` is `<accountsDir>/<resolved>` — the strict filesystem root the caller
+ * must contain every path within.
+ */
+export function resolveRoot(ctx, targetAccountId, tool) {
+    const isValidAccountId = (id) => enumerateValidAccountIds(ctx.accountsDir).includes(id);
+    const eff = resolveEffectiveAccountCore({ ownAccountId: ctx.ownAccountId, houseScope: ctx.houseScope, targetAccountId }, isValidAccountId);
+    const targetField = targetAccountId ? short(targetAccountId) : "self";
+    const houseField = ctx.houseScope ? "true" : "false";
+    if ("reject" in eff) {
+        process.stderr.write(`[xacct] op=call tool=${tool} caller=${short(ctx.ownAccountId)} target=${targetField} houseScope=${houseField} decision=deny reason=${eff.reject}\n`);
+        return { reject: eff.reject };
+    }
+    process.stderr.write(`[xacct] op=call tool=${tool} caller=${short(ctx.ownAccountId)} target=${targetField} houseScope=${houseField} decision=allow reason=none\n`);
+    const root = resolve(ctx.accountsDir, eff.accountId);
+    process.stderr.write(`[xacct] op=fs-root root=data/accounts/${short(eff.accountId)}/\n`);
+    return { root, resolved: eff.accountId };
+}
+/**
+ * Resolve `relPath` against the account `root` and prove it stays inside.
+ * Lexical containment rejects `../` and absolute-path escapes; a realpath check
+ * on the deepest EXISTING ancestor rejects symlink escapes and still permits a
+ * not-yet-existing (create) target. Throws Error("path-escape") after emitting
+ * op=path-escape-reject; the caller surfaces it as an isError tool result.
+ */
+export function containedPath(root, relPath) {
+    const realRoot = realpathSync(root);
+    const abs = resolve(realRoot, relPath);
+    const escape = () => {
+        process.stderr.write(`[xacct] op=path-escape-reject path=${relPath} resolved=${short(realRoot.split(sep).pop() ?? "")}\n`);
+        throw new Error("path-escape");
+    };
+    if (abs !== realRoot && !abs.startsWith(realRoot + sep))
+        escape();
+    let ancestor = abs;
+    while (!existsSync(ancestor))
+        ancestor = dirname(ancestor);
+    const realAncestor = realpathSync(ancestor);
+    if (realAncestor !== realRoot && !realAncestor.startsWith(realRoot + sep))
+        escape();
+    return abs;
+}
+//# sourceMappingURL=scope.js.map

package/payload/platform/plugins/filesystem/mcp/dist/lib/scope.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"scope.js","sourceRoot":"","sources":["../../src/lib/scope.ts"],"names":[],"mappings":"AAAA,2DAA2D;AAC3D,EAAE;AACF,yEAAyE;AACzE,uEAAuE;AACvE,8EAA8E;AAC9E,+EAA+E;AAC/E,4EAA4E;AAC5E,mDAAmD;AACnD,EAAE;AACF,8EAA8E;AAC9E,gFAAgF;AAChF,yEAAyE;AACzE,8EAA8E;AAC9E,2CAA2C;AAC3C,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AAClD,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,2BAA2B,EAAE,MAAM,gDAAgD,CAAC;AAC7F,OAAO,EAAE,wBAAwB,EAAE,MAAM,sDAAsD,CAAC;AAEhG,MAAM,KAAK,GAAG,CAAC,EAAU,EAAE,EAAE,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;AAE7C;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,oBAAoB,CAAC,GAAsB;IACzD,MAAM,GAAG,GAAG,GAAG,CAAC,iBAAiB,CAAC;IAClC,IAAI,CAAC,GAAG;QAAE,OAAO,IAAI,CAAC;IACtB,IAAI,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IACtC,OAAO,GAAG,CAAC;AACb,CAAC;AAeD;;;;;GAKG;AACH,MAAM,UAAU,WAAW,CACzB,GAAQ,EACR,eAAmC,EACnC,IAAY;IAEZ,MAAM,gBAAgB,GAAG,CAAC,EAAU,EAAE,EAAE,CACtC,wBAAwB,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;IACzD,MAAM,GAAG,GAAG,2BAA2B,CACrC,EAAE,YAAY,EAAE,GAAG,CAAC,YAAY,EAAE,UAAU,EAAE,GAAG,CAAC,UAAU,EAAE,eAAe,EAAE,EAC/E,gBAAgB,CACjB,CAAC;IACF,MAAM,WAAW,GAAG,eAAe,CAAC,CAAC,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;IACtE,MAAM,UAAU,GAAG,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC;IACrD,IAAI,QAAQ,IAAI,GAAG,EAAE,CAAC;QACpB,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,wBAAwB,IAAI,WAAW,KAAK,CAAC,GAAG,CAAC,YAAY,CAAC,WAAW,WAAW,eAAe,UAAU,yBAAyB,GAAG,CAAC,MAAM,IAAI,CACrJ,CAAC;QACF,OAAO,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,CAAC;IAChC,CAAC;IACD,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,wBAAwB,IAAI,WAAW,KAAK,CAAC,GAAG,CAAC,YAAY,CAAC,WAAW,WAAW,eAAe,UAAU,+BAA+B,CAC7I,CAAC;IACF,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,WAAW,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC;IACrD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,yCAAyC,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IACzF,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,CAAC,SAAS,EAAE,CAAC;AAC3C,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,aAAa,CAAC,IAAY,EAAE,OAAe;IACzD,MAAM,QAAQ,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;IACpC,MAAM,GAAG,GAAG,OAAO,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IACvC,MAAM,MAAM,GAAG,GAAU,EAAE;QACzB,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,sCAAsC,OAAO,aAAa,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC,IAAI,CACrG,CAAC;QACF,MAAM,IAAI,KAAK,CAAC,aAAa,CAAC,CAAC;IACjC,CAAC,CAAC;IACF,IAAI,GAAG,KAAK,QAAQ,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,QAAQ,GAAG,GAAG,CAAC;QAAE,MAAM,EAAE,CAAC;IAClE,IAAI,QAAQ,GAAG,GAAG,CAAC;IACnB,OAAO,CAAC,UAAU,CAAC,QAAQ,CAAC;QAAE,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC3D,MAAM,YAAY,GAAG,YAAY,CAAC,QAAQ,CAAC,CAAC;IAC5C,IAAI,YAAY,KAAK,QAAQ,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,QAAQ,GAAG,GAAG,CAAC;QAAE,MAAM,EAAE,CAAC;IACpF,OAAO,GAAG,CAAC;AACb,CAAC"}

package/payload/platform/plugins/filesystem/mcp/dist/lib/walk.d.ts

@@ -0,0 +1,11 @@
+/**
+ * List regular files under `root`, returning paths RELATIVE to root with "/"
+ * separators. Symlinked entries are skipped (no escape). Stops at `cap` files.
+ */
+export declare function walkFiles(root: string, cap: number): string[];
+/**
+ * Translate a glob (`**`, `*`, `?`) to an anchored RegExp over "/"-joined
+ * relative paths. `*` and `?` do not cross "/"; `**` crosses any depth.
+ */
+export declare function globToRegExp(glob: string): RegExp;
+//# sourceMappingURL=walk.d.ts.map

package/payload/platform/plugins/filesystem/mcp/dist/lib/walk.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"walk.d.ts","sourceRoot":"","sources":["../../src/lib/walk.ts"],"names":[],"mappings":"AAMA;;;GAGG;AACH,wBAAgB,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,MAAM,EAAE,CAoB7D;AAED;;;GAGG;AACH,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAmBjD"}

package/payload/platform/plugins/filesystem/mcp/dist/lib/walk.js

@@ -0,0 +1,64 @@
+// Recursive-walk + glob helpers for the glob/grep tools. Both are rooted at an
+// already-resolved account dir and NEVER follow symlinks, so the walk cannot
+// leave the account directory even if a symlink points outside.
+import { readdirSync } from "node:fs";
+import { join, relative, sep } from "node:path";
+/**
+ * List regular files under `root`, returning paths RELATIVE to root with "/"
+ * separators. Symlinked entries are skipped (no escape). Stops at `cap` files.
+ */
+export function walkFiles(root, cap) {
+    const out = [];
+    const stack = [root];
+    while (stack.length && out.length < cap) {
+        const dir = stack.pop();
+        let entries;
+        try {
+            entries = readdirSync(dir, { withFileTypes: true });
+        }
+        catch {
+            continue;
+        }
+        for (const e of entries) {
+            if (out.length >= cap)
+                break;
+            if (e.isSymbolicLink())
+                continue; // never follow a symlink out of root
+            const full = join(dir, e.name);
+            if (e.isDirectory())
+                stack.push(full);
+            else if (e.isFile())
+                out.push(relative(root, full).split(sep).join("/"));
+        }
+    }
+    return out;
+}
+/**
+ * Translate a glob (`**`, `*`, `?`) to an anchored RegExp over "/"-joined
+ * relative paths. `*` and `?` do not cross "/"; `**` crosses any depth.
+ */
+export function globToRegExp(glob) {
+    let re = "";
+    for (let i = 0; i < glob.length; i++) {
+        const c = glob[i];
+        if (c === "*") {
+            if (glob[i + 1] === "*") {
+                re += ".*";
+                i++;
+                if (glob[i + 1] === "/")
+                    i++; // absorb the slash after **
+            }
+            else {
+                re += "[^/]*";
+            }
+        }
+        else if (c === "?") {
+            re += "[^/]";
+        }
+        else {
+            re += c.replace(/[.+^${}()|[\]\\]/g, "\\$&");
+        }
+    }
+    return new RegExp("^" + re + "$");
+}
+//# sourceMappingURL=walk.js.map

package/payload/platform/plugins/filesystem/mcp/dist/lib/walk.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"walk.js","sourceRoot":"","sources":["../../src/lib/walk.ts"],"names":[],"mappings":"AAAA,+EAA+E;AAC/E,6EAA6E;AAC7E,gEAAgE;AAChE,OAAO,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AACtC,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AAEhD;;;GAGG;AACH,MAAM,UAAU,SAAS,CAAC,IAAY,EAAE,GAAW;IACjD,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,MAAM,KAAK,GAAa,CAAC,IAAI,CAAC,CAAC;IAC/B,OAAO,KAAK,CAAC,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,GAAG,EAAE,CAAC;QACxC,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,EAAY,CAAC;QAClC,IAAI,OAAO,CAAC;QACZ,IAAI,CAAC;YACH,OAAO,GAAG,WAAW,CAAC,GAAG,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;QACtD,CAAC;QAAC,MAAM,CAAC;YACP,SAAS;QACX,CAAC;QACD,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;YACxB,IAAI,GAAG,CAAC,MAAM,IAAI,GAAG;gBAAE,MAAM;YAC7B,IAAI,CAAC,CAAC,cAAc,EAAE;gBAAE,SAAS,CAAC,qCAAqC;YACvE,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;YAC/B,IAAI,CAAC,CAAC,WAAW,EAAE;gBAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;iBACjC,IAAI,CAAC,CAAC,MAAM,EAAE;gBAAE,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;QAC3E,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,YAAY,CAAC,IAAY;IACvC,IAAI,EAAE,GAAG,EAAE,CAAC;IACZ,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACrC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,IAAI,CAAC,KAAK,GAAG,EAAE,CAAC;YACd,IAAI,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;gBACxB,EAAE,IAAI,IAAI,CAAC;gBACX,CAAC,EAAE,CAAC;gBACJ,IAAI,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,GAAG;oBAAE,CAAC,EAAE,CAAC,CAAC,4BAA4B;YAC5D,CAAC;iBAAM,CAAC;gBACN,EAAE,IAAI,OAAO,CAAC;YAChB,CAAC;QACH,CAAC;aAAM,IAAI,CAAC,KAAK,GAAG,EAAE,CAAC;YACrB,EAAE,IAAI,MAAM,CAAC;QACf,CAAC;aAAM,CAAC;YACN,EAAE,IAAI,CAAC,CAAC,OAAO,CAAC,mBAAmB,EAAE,MAAM,CAAC,CAAC;QAC/C,CAAC;IACH,CAAC;IACD,OAAO,IAAI,MAAM,CAAC,GAAG,GAAG,EAAE,GAAG,GAAG,CAAC,CAAC;AACpC,CAAC"}

package/payload/platform/plugins/filesystem/mcp/dist/tools/__tests__/handlers.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=handlers.test.d.ts.map

package/payload/platform/plugins/filesystem/mcp/dist/tools/__tests__/handlers.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"handlers.test.d.ts","sourceRoot":"","sources":["../../../src/tools/__tests__/handlers.test.ts"],"names":[],"mappings":""}

package/payload/platform/plugins/filesystem/mcp/dist/tools/__tests__/handlers.test.js

@@ -0,0 +1,94 @@
+import { describe, it, expect, beforeEach, afterEach } from "vitest";
+import { mkdtempSync, mkdirSync, writeFileSync, readFileSync, existsSync, rmSync } from "node:fs";
+import { tmpdir } from "node:os";
+import { join } from "node:path";
+import { fileRead } from "../file-read.js";
+import { fileWrite } from "../file-write.js";
+import { fileEdit } from "../file-edit.js";
+import { fileList } from "../file-list.js";
+import { fileGlob } from "../file-glob.js";
+import { fileGrep } from "../file-grep.js";
+const HOUSE = "11111111-1111-4111-8111-111111111111";
+const CLIENT = "22222222-2222-4222-8222-222222222222";
+let accountsDir;
+beforeEach(() => {
+    accountsDir = mkdtempSync(join(tmpdir(), "xacct-handlers-"));
+    for (const id of [HOUSE, CLIENT]) {
+        mkdirSync(join(accountsDir, id), { recursive: true });
+        writeFileSync(join(accountsDir, id, "account.json"), JSON.stringify({ accountId: id }));
+    }
+});
+afterEach(() => rmSync(accountsDir, { recursive: true, force: true }));
+const house = () => ({ ownAccountId: HOUSE, houseScope: HOUSE, accountsDir });
+const client = () => ({ ownAccountId: CLIENT, houseScope: null, accountsDir });
+const text = (r) => r.content[0].text;
+describe("file handlers — own account round-trip", () => {
+    it("write → read → edit → list on the house's own account", () => {
+        expect(fileWrite({ path: "notes/a.txt", content: "hello world" }, house()).isError).toBeUndefined();
+        expect(existsSync(join(accountsDir, HOUSE, "notes/a.txt"))).toBe(true);
+        expect(text(fileRead({ path: "notes/a.txt" }, house()))).toBe("hello world");
+        expect(fileEdit({ path: "notes/a.txt", oldString: "world", newString: "there" }, house()).isError).toBeUndefined();
+        expect(readFileSync(join(accountsDir, HOUSE, "notes/a.txt"), "utf-8")).toBe("hello there");
+        const listed = text(fileList({ path: "notes" }, house()));
+        expect(listed).toContain("a.txt");
+    });
+    it("file-edit refuses a non-unique oldString", () => {
+        fileWrite({ path: "d.txt", content: "x x" }, house());
+        const r = fileEdit({ path: "d.txt", oldString: "x", newString: "y" }, house());
+        expect(r.isError).toBe(true);
+        expect(text(r)).toContain("not unique");
+    });
+    it("glob and grep find content in the account", () => {
+        fileWrite({ path: "docs/readme.md", content: "alpha\nbeta MATCHME gamma" }, house());
+        expect(text(fileGlob({ pattern: "**/*.md" }, house()))).toContain("docs/readme.md");
+        expect(text(fileGrep({ pattern: "MATCHME" }, house()))).toContain("docs/readme.md:2:");
+    });
+    it("grep with a path arg reports account-root-relative paths that round-trip", () => {
+        fileWrite({ path: "logs/app.log", content: "line1\nMATCHME here" }, house());
+        const hit = text(fileGrep({ pattern: "MATCHME", path: "logs" }, house()));
+        // root-relative, not subdir-relative — so it feeds straight back into file-read
+        expect(hit).toContain("logs/app.log:2:");
+        const reported = hit.split(":")[0];
+        expect(text(fileRead({ path: reported }, house()))).toContain("MATCHME");
+    });
+    it("file-edit rejects an empty oldString instead of silently splicing", () => {
+        fileWrite({ path: "e.txt", content: "ab" }, house());
+        const r = fileEdit({ path: "e.txt", oldString: "", newString: "X" }, house());
+        expect(r.isError).toBe(true);
+        expect(text(r)).toContain("must not be empty");
+        expect(readFileSync(join(accountsDir, HOUSE, "e.txt"), "utf-8")).toBe("ab");
+    });
+});
+describe("file handlers — cross-account gate", () => {
+    it("house admin writes into a sub-account by naming targetAccountId", () => {
+        const r = fileWrite({ path: "from-house.txt", content: "hi", targetAccountId: CLIENT }, house());
+        expect(r.isError).toBeUndefined();
+        expect(readFileSync(join(accountsDir, CLIENT, "from-house.txt"), "utf-8")).toBe("hi");
+    });
+    it("a non-house session naming a target is denied", () => {
+        const r = fileRead({ path: "account.json", targetAccountId: HOUSE }, client());
+        expect(r.isError).toBe(true);
+        expect(text(r)).toContain("cross-account-denied");
+        // and it did not read the house file
+        expect(text(r)).not.toContain("accountId");
+    });
+    it("an unknown target is invalid-target", () => {
+        const r = fileList({ targetAccountId: "99999999-9999-4999-8999-999999999999" }, house());
+        expect(r.isError).toBe(true);
+        expect(text(r)).toContain("cross-account-invalid-target");
+    });
+});
+describe("file handlers — traversal guard", () => {
+    it("write to a ../ escape is rejected, no file created outside the account", () => {
+        const r = fileWrite({ path: `../${CLIENT}/injected.txt`, content: "x" }, house());
+        expect(r.isError).toBe(true);
+        expect(text(r)).toContain("escapes the account directory");
+        expect(existsSync(join(accountsDir, CLIENT, "injected.txt"))).toBe(false);
+    });
+    it("read of an absolute path outside the account is rejected", () => {
+        const r = fileRead({ path: "/etc/hosts" }, house());
+        expect(r.isError).toBe(true);
+        expect(text(r)).toContain("escapes the account directory");
+    });
+});
+//# sourceMappingURL=handlers.test.js.map

package/payload/platform/plugins/filesystem/mcp/dist/tools/__tests__/handlers.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"handlers.test.js","sourceRoot":"","sources":["../../../src/tools/__tests__/handlers.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAC;AACrE,OAAO,EAAE,WAAW,EAAE,SAAS,EAAE,aAAa,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AAClG,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,OAAO,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AAC3C,OAAO,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAC7C,OAAO,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AAC3C,OAAO,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AAC3C,OAAO,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AAC3C,OAAO,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AAE3C,MAAM,KAAK,GAAG,sCAAsC,CAAC;AACrD,MAAM,MAAM,GAAG,sCAAsC,CAAC;AAEtD,IAAI,WAAmB,CAAC;AAExB,UAAU,CAAC,GAAG,EAAE;IACd,WAAW,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,iBAAiB,CAAC,CAAC,CAAC;IAC7D,KAAK,MAAM,EAAE,IAAI,CAAC,KAAK,EAAE,MAAM,CAAC,EAAE,CAAC;QACjC,SAAS,CAAC,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACtD,aAAa,CAAC,IAAI,CAAC,WAAW,EAAE,EAAE,EAAE,cAAc,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;IAC1F,CAAC;AACH,CAAC,CAAC,CAAC;AACH,SAAS,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,WAAW,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;AAEvE,MAAM,KAAK,GAAG,GAAQ,EAAE,CAAC,CAAC,EAAE,YAAY,EAAE,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC;AACnF,MAAM,MAAM,GAAG,GAAQ,EAAE,CAAC,CAAC,EAAE,YAAY,EAAE,MAAM,EAAE,UAAU,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC;AACpF,MAAM,IAAI,GAAG,CAAC,CAAkC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AAEvE,QAAQ,CAAC,wCAAwC,EAAE,GAAG,EAAE;IACtD,EAAE,CAAC,uDAAuD,EAAE,GAAG,EAAE;QAC/D,MAAM,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,aAAa,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,aAAa,EAAE,CAAC;QACpG,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,WAAW,EAAE,KAAK,EAAE,aAAa,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACvE,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QAE7E,MAAM,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,SAAS,EAAE,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,aAAa,EAAE,CAAC;QACnH,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,WAAW,EAAE,KAAK,EAAE,aAAa,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QAE3F,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;QAC1D,MAAM,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;IACpC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0CAA0C,EAAE,GAAG,EAAE;QAClD,SAAS,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;QACtD,MAAM,CAAC,GAAG,QAAQ,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,SAAS,EAAE,GAAG,EAAE,SAAS,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;QAC/E,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC7B,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC;IAC1C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2CAA2C,EAAE,GAAG,EAAE;QACnD,SAAS,CAAC,EAAE,IAAI,EAAE,gBAAgB,EAAE,OAAO,EAAE,2BAA2B,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;QACrF,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,OAAO,EAAE,SAAS,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,gBAAgB,CAAC,CAAC;QACpF,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,OAAO,EAAE,SAAS,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,mBAAmB,CAAC,CAAC;IACzF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0EAA0E,EAAE,GAAG,EAAE;QAClF,SAAS,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,OAAO,EAAE,qBAAqB,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;QAC7E,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,EAAE,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;QAC1E,gFAAgF;QAChF,MAAM,CAAC,GAAG,CAAC,CAAC,SAAS,CAAC,iBAAiB,CAAC,CAAC;QACzC,MAAM,QAAQ,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QACnC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;IAC3E,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mEAAmE,EAAE,GAAG,EAAE;QAC3E,SAAS,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;QACrD,MAAM,CAAC,GAAG,QAAQ,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,SAAS,EAAE,EAAE,EAAE,SAAS,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;QAC9E,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC7B,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,mBAAmB,CAAC,CAAC;QAC/C,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,WAAW,EAAE,KAAK,EAAE,OAAO,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC9E,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,oCAAoC,EAAE,GAAG,EAAE;IAClD,EAAE,CAAC,iEAAiE,EAAE,GAAG,EAAE;QACzE,MAAM,CAAC,GAAG,SAAS,CAAC,EAAE,IAAI,EAAE,gBAAgB,EAAE,OAAO,EAAE,IAAI,EAAE,eAAe,EAAE,MAAM,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;QACjG,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,aAAa,EAAE,CAAC;QAClC,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,WAAW,EAAE,MAAM,EAAE,gBAAgB,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACxF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+CAA+C,EAAE,GAAG,EAAE;QACvD,MAAM,CAAC,GAAG,QAAQ,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,eAAe,EAAE,KAAK,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;QAC/E,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC7B,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,sBAAsB,CAAC,CAAC;QAClD,qCAAqC;QACrC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC;IAC7C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qCAAqC,EAAE,GAAG,EAAE;QAC7C,MAAM,CAAC,GAAG,QAAQ,CAAC,EAAE,eAAe,EAAE,sCAAsC,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;QACzF,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC7B,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,8BAA8B,CAAC,CAAC;IAC5D,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,iCAAiC,EAAE,GAAG,EAAE;IAC/C,EAAE,CAAC,wEAAwE,EAAE,GAAG,EAAE;QAChF,MAAM,CAAC,GAAG,SAAS,CAAC,EAAE,IAAI,EAAE,MAAM,MAAM,eAAe,EAAE,OAAO,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;QAClF,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC7B,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,+BAA+B,CAAC,CAAC;QAC3D,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,WAAW,EAAE,MAAM,EAAE,cAAc,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC5E,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0DAA0D,EAAE,GAAG,EAAE;QAClE,MAAM,CAAC,GAAG,QAAQ,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;QACpD,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC7B,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,+BAA+B,CAAC,CAAC;IAC7D,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/payload/platform/plugins/filesystem/mcp/dist/tools/file-edit.d.ts

@@ -0,0 +1,8 @@
+import { type Ctx } from "../lib/scope.js";
+export declare function fileEdit(args: {
+    path: string;
+    oldString: string;
+    newString: string;
+    targetAccountId?: string;
+}, ctx: Ctx): import("../lib/result.js").ToolResult;
+//# sourceMappingURL=file-edit.d.ts.map

package/payload/platform/plugins/filesystem/mcp/dist/tools/file-edit.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"file-edit.d.ts","sourceRoot":"","sources":["../../src/tools/file-edit.ts"],"names":[],"mappings":"AACA,OAAO,EAA8B,KAAK,GAAG,EAAE,MAAM,iBAAiB,CAAC;AAGvE,wBAAgB,QAAQ,CACtB,IAAI,EAAE;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,eAAe,CAAC,EAAE,MAAM,CAAA;CAAE,EACtF,GAAG,EAAE,GAAG,yCA6BT"}