@rubytech/create-maxy-code 0.1.411 → 0.1.412

package/payload/platform/plugins/filesystem/mcp/dist/tools/file-edit.js

@@ -0,0 +1,40 @@
+import { readFileSync, writeFileSync } from "node:fs";
+import { resolveRoot, containedPath } from "../lib/scope.js";
+import { ok, err } from "../lib/result.js";
+export function fileEdit(args, ctx) {
+    const r = resolveRoot(ctx, args.targetAccountId, "file-edit");
+    if ("reject" in r)
+        return err(`file-edit denied: ${r.reject}`);
+    // An empty oldString has no unique match semantics — "ab".split("") yields a
+    // spurious single "match" that would silently splice newString into the file.
+    if (args.oldString === "")
+        return err("file-edit: oldString must not be empty");
+    let abs;
+    try {
+        abs = containedPath(r.root, args.path);
+    }
+    catch {
+        return err("file-edit rejected: path escapes the account directory");
+    }
+    let content;
+    try {
+        content = readFileSync(abs, "utf-8");
+    }
+    catch (e) {
+        return err(`file-edit: ${e.message}`);
+    }
+    const parts = content.split(args.oldString);
+    const count = parts.length - 1;
+    if (count === 0)
+        return err(`file-edit: oldString not found in ${args.path}`);
+    if (count > 1)
+        return err(`file-edit: oldString is not unique in ${args.path} (${count} matches)`);
+    try {
+        writeFileSync(abs, parts.join(args.newString), "utf-8");
+        return ok(`edited ${args.path}`);
+    }
+    catch (e) {
+        return err(`file-edit: ${e.message}`);
+    }
+}
+//# sourceMappingURL=file-edit.js.map

package/payload/platform/plugins/filesystem/mcp/dist/tools/file-edit.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"file-edit.js","sourceRoot":"","sources":["../../src/tools/file-edit.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACtD,OAAO,EAAE,WAAW,EAAE,aAAa,EAAY,MAAM,iBAAiB,CAAC;AACvE,OAAO,EAAE,EAAE,EAAE,GAAG,EAAE,MAAM,kBAAkB,CAAC;AAE3C,MAAM,UAAU,QAAQ,CACtB,IAAsF,EACtF,GAAQ;IAER,MAAM,CAAC,GAAG,WAAW,CAAC,GAAG,EAAE,IAAI,CAAC,eAAe,EAAE,WAAW,CAAC,CAAC;IAC9D,IAAI,QAAQ,IAAI,CAAC;QAAE,OAAO,GAAG,CAAC,qBAAqB,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;IAC/D,6EAA6E;IAC7E,8EAA8E;IAC9E,IAAI,IAAI,CAAC,SAAS,KAAK,EAAE;QAAE,OAAO,GAAG,CAAC,wCAAwC,CAAC,CAAC;IAChF,IAAI,GAAW,CAAC;IAChB,IAAI,CAAC;QACH,GAAG,GAAG,aAAa,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;IACzC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,GAAG,CAAC,wDAAwD,CAAC,CAAC;IACvE,CAAC;IACD,IAAI,OAAe,CAAC;IACpB,IAAI,CAAC;QACH,OAAO,GAAG,YAAY,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;IACvC,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,OAAO,GAAG,CAAC,cAAe,CAAW,CAAC,OAAO,EAAE,CAAC,CAAC;IACnD,CAAC;IACD,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAC5C,MAAM,KAAK,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC;IAC/B,IAAI,KAAK,KAAK,CAAC;QAAE,OAAO,GAAG,CAAC,qCAAqC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;IAC9E,IAAI,KAAK,GAAG,CAAC;QAAE,OAAO,GAAG,CAAC,yCAAyC,IAAI,CAAC,IAAI,KAAK,KAAK,WAAW,CAAC,CAAC;IACnG,IAAI,CAAC;QACH,aAAa,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,CAAC,CAAC;QACxD,OAAO,EAAE,CAAC,UAAU,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;IACnC,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,OAAO,GAAG,CAAC,cAAe,CAAW,CAAC,OAAO,EAAE,CAAC,CAAC;IACnD,CAAC;AACH,CAAC"}

package/payload/platform/plugins/filesystem/mcp/dist/tools/file-glob.d.ts

@@ -0,0 +1,6 @@
+import { type Ctx } from "../lib/scope.js";
+export declare function fileGlob(args: {
+    pattern: string;
+    targetAccountId?: string;
+}, ctx: Ctx): import("../lib/result.js").ToolResult;
+//# sourceMappingURL=file-glob.d.ts.map

package/payload/platform/plugins/filesystem/mcp/dist/tools/file-glob.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"file-glob.d.ts","sourceRoot":"","sources":["../../src/tools/file-glob.ts"],"names":[],"mappings":"AAAA,OAAO,EAAe,KAAK,GAAG,EAAE,MAAM,iBAAiB,CAAC;AAMxD,wBAAgB,QAAQ,CAAC,IAAI,EAAE;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,eAAe,CAAC,EAAE,MAAM,CAAA;CAAE,EAAE,GAAG,EAAE,GAAG,yCAMrF"}

package/payload/platform/plugins/filesystem/mcp/dist/tools/file-glob.js

@@ -0,0 +1,13 @@
+import { resolveRoot } from "../lib/scope.js";
+import { walkFiles, globToRegExp } from "../lib/walk.js";
+import { ok, err } from "../lib/result.js";
+const GLOB_CAP = 1000;
+export function fileGlob(args, ctx) {
+    const r = resolveRoot(ctx, args.targetAccountId, "file-glob");
+    if ("reject" in r)
+        return err(`file-glob denied: ${r.reject}`);
+    const re = globToRegExp(args.pattern);
+    const hits = walkFiles(r.root, GLOB_CAP).filter((rel) => re.test(rel));
+    return ok(hits.length ? hits.join("\n") : "(no matches)");
+}
+//# sourceMappingURL=file-glob.js.map

package/payload/platform/plugins/filesystem/mcp/dist/tools/file-glob.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"file-glob.js","sourceRoot":"","sources":["../../src/tools/file-glob.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAY,MAAM,iBAAiB,CAAC;AACxD,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AACzD,OAAO,EAAE,EAAE,EAAE,GAAG,EAAE,MAAM,kBAAkB,CAAC;AAE3C,MAAM,QAAQ,GAAG,IAAI,CAAC;AAEtB,MAAM,UAAU,QAAQ,CAAC,IAAmD,EAAE,GAAQ;IACpF,MAAM,CAAC,GAAG,WAAW,CAAC,GAAG,EAAE,IAAI,CAAC,eAAe,EAAE,WAAW,CAAC,CAAC;IAC9D,IAAI,QAAQ,IAAI,CAAC;QAAE,OAAO,GAAG,CAAC,qBAAqB,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;IAC/D,MAAM,EAAE,GAAG,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACtC,MAAM,IAAI,GAAG,SAAS,CAAC,CAAC,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IACvE,OAAO,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC;AAC5D,CAAC"}

package/payload/platform/plugins/filesystem/mcp/dist/tools/file-grep.d.ts

@@ -0,0 +1,7 @@
+import { type Ctx } from "../lib/scope.js";
+export declare function fileGrep(args: {
+    pattern: string;
+    path?: string;
+    targetAccountId?: string;
+}, ctx: Ctx): import("../lib/result.js").ToolResult;
+//# sourceMappingURL=file-grep.d.ts.map

package/payload/platform/plugins/filesystem/mcp/dist/tools/file-grep.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"file-grep.d.ts","sourceRoot":"","sources":["../../src/tools/file-grep.ts"],"names":[],"mappings":"AAEA,OAAO,EAA8B,KAAK,GAAG,EAAE,MAAM,iBAAiB,CAAC;AAQvE,wBAAgB,QAAQ,CACtB,IAAI,EAAE;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IAAC,eAAe,CAAC,EAAE,MAAM,CAAA;CAAE,EAClE,GAAG,EAAE,GAAG,yCAmDT"}

package/payload/platform/plugins/filesystem/mcp/dist/tools/file-grep.js

@@ -0,0 +1,71 @@
+import { statSync, readFileSync } from "node:fs";
+import { join, relative, resolve, sep } from "node:path";
+import { resolveRoot, containedPath } from "../lib/scope.js";
+import { walkFiles } from "../lib/walk.js";
+import { ok, err } from "../lib/result.js";
+const GREP_CAP = 500; // max match lines returned
+const WALK_CAP = 20000; // max files scanned
+const MAX_FILE = 5 * 1024 * 1024;
+export function fileGrep(args, ctx) {
+    const r = resolveRoot(ctx, args.targetAccountId, "file-grep");
+    if ("reject" in r)
+        return err(`file-grep denied: ${r.reject}`);
+    let base;
+    // `prefix` is the search subdir expressed relative to the account root, so
+    // every reported path stays root-relative and round-trips into file-read /
+    // file-glob regardless of which subdir was searched.
+    let prefix = "";
+    try {
+        if (args.path) {
+            base = containedPath(r.root, args.path);
+            prefix = relative(r.root, resolve(r.root, args.path)).split(sep).join("/");
+        }
+        else {
+            base = r.root;
+        }
+    }
+    catch {
+        return err("file-grep rejected: path escapes the account directory");
+    }
+    let re;
+    try {
+        re = new RegExp(args.pattern);
+    }
+    catch (e) {
+        return err(`file-grep: invalid pattern: ${e.message}`);
+    }
+    const hits = [];
+    for (const rel of walkFiles(base, WALK_CAP)) {
+        if (hits.length >= GREP_CAP)
+            break;
+        const abs = join(base, rel);
+        const rootRel = prefix ? `${prefix}/${rel}` : rel;
+        let st;
+        try {
+            st = statSync(abs);
+        }
+        catch {
+            continue;
+        }
+        if (st.size > MAX_FILE)
+            continue;
+        let text;
+        try {
+            text = readFileSync(abs, "utf-8");
+        }
+        catch {
+            continue;
+        }
+        if (text.includes("\u0000"))
+            continue; // skip binary
+        const lines = text.split("\n");
+        for (let i = 0; i < lines.length; i++) {
+            if (hits.length >= GREP_CAP)
+                break;
+            if (re.test(lines[i]))
+                hits.push(`${rootRel}:${i + 1}:${lines[i].slice(0, 200)}`);
+        }
+    }
+    return ok(hits.length ? hits.join("\n") : "(no matches)");
+}
+//# sourceMappingURL=file-grep.js.map

package/payload/platform/plugins/filesystem/mcp/dist/tools/file-grep.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"file-grep.js","sourceRoot":"","sources":["../../src/tools/file-grep.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACjD,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AACzD,OAAO,EAAE,WAAW,EAAE,aAAa,EAAY,MAAM,iBAAiB,CAAC;AACvE,OAAO,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAC3C,OAAO,EAAE,EAAE,EAAE,GAAG,EAAE,MAAM,kBAAkB,CAAC;AAE3C,MAAM,QAAQ,GAAG,GAAG,CAAC,CAAC,2BAA2B;AACjD,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,oBAAoB;AAC5C,MAAM,QAAQ,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC;AAEjC,MAAM,UAAU,QAAQ,CACtB,IAAkE,EAClE,GAAQ;IAER,MAAM,CAAC,GAAG,WAAW,CAAC,GAAG,EAAE,IAAI,CAAC,eAAe,EAAE,WAAW,CAAC,CAAC;IAC9D,IAAI,QAAQ,IAAI,CAAC;QAAE,OAAO,GAAG,CAAC,qBAAqB,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;IAC/D,IAAI,IAAY,CAAC;IACjB,2EAA2E;IAC3E,2EAA2E;IAC3E,qDAAqD;IACrD,IAAI,MAAM,GAAG,EAAE,CAAC;IAChB,IAAI,CAAC;QACH,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;YACd,IAAI,GAAG,aAAa,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;YACxC,MAAM,GAAG,QAAQ,CAAC,CAAC,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC7E,CAAC;aAAM,CAAC;YACN,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC;QAChB,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,GAAG,CAAC,wDAAwD,CAAC,CAAC;IACvE,CAAC;IACD,IAAI,EAAU,CAAC;IACf,IAAI,CAAC;QACH,EAAE,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAChC,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,OAAO,GAAG,CAAC,+BAAgC,CAAW,CAAC,OAAO,EAAE,CAAC,CAAC;IACpE,CAAC;IACD,MAAM,IAAI,GAAa,EAAE,CAAC;IAC1B,KAAK,MAAM,GAAG,IAAI,SAAS,CAAC,IAAI,EAAE,QAAQ,CAAC,EAAE,CAAC;QAC5C,IAAI,IAAI,CAAC,MAAM,IAAI,QAAQ;YAAE,MAAM;QACnC,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QAC5B,MAAM,OAAO,GAAG,MAAM,CAAC,CAAC,CAAC,GAAG,MAAM,IAAI,GAAG,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC;QAClD,IAAI,EAAE,CAAC;QACP,IAAI,CAAC;YACH,EAAE,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC;QACrB,CAAC;QAAC,MAAM,CAAC;YACP,SAAS;QACX,CAAC;QACD,IAAI,EAAE,CAAC,IAAI,GAAG,QAAQ;YAAE,SAAS;QACjC,IAAI,IAAY,CAAC;QACjB,IAAI,CAAC;YACH,IAAI,GAAG,YAAY,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;QACpC,CAAC;QAAC,MAAM,CAAC;YACP,SAAS;QACX,CAAC;QACD,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC;YAAE,SAAS,CAAC,cAAc;QACrD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC/B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACtC,IAAI,IAAI,CAAC,MAAM,IAAI,QAAQ;gBAAE,MAAM;YACnC,IAAI,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;gBAAE,IAAI,CAAC,IAAI,CAAC,GAAG,OAAO,IAAI,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;QACpF,CAAC;IACH,CAAC;IACD,OAAO,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC;AAC5D,CAAC"}

package/payload/platform/plugins/filesystem/mcp/dist/tools/file-list.d.ts

@@ -0,0 +1,6 @@
+import { type Ctx } from "../lib/scope.js";
+export declare function fileList(args: {
+    path?: string;
+    targetAccountId?: string;
+}, ctx: Ctx): import("../lib/result.js").ToolResult;
+//# sourceMappingURL=file-list.d.ts.map

package/payload/platform/plugins/filesystem/mcp/dist/tools/file-list.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"file-list.d.ts","sourceRoot":"","sources":["../../src/tools/file-list.ts"],"names":[],"mappings":"AACA,OAAO,EAA8B,KAAK,GAAG,EAAE,MAAM,iBAAiB,CAAC;AAGvE,wBAAgB,QAAQ,CAAC,IAAI,EAAE;IAAE,IAAI,CAAC,EAAE,MAAM,CAAC;IAAC,eAAe,CAAC,EAAE,MAAM,CAAA;CAAE,EAAE,GAAG,EAAE,GAAG,yCAkBnF"}

package/payload/platform/plugins/filesystem/mcp/dist/tools/file-list.js

@@ -0,0 +1,26 @@
+import { readdirSync } from "node:fs";
+import { resolveRoot, containedPath } from "../lib/scope.js";
+import { ok, err } from "../lib/result.js";
+export function fileList(args, ctx) {
+    const r = resolveRoot(ctx, args.targetAccountId, "file-list");
+    if ("reject" in r)
+        return err(`file-list denied: ${r.reject}`);
+    let dir;
+    try {
+        dir = args.path ? containedPath(r.root, args.path) : r.root;
+    }
+    catch {
+        return err("file-list rejected: path escapes the account directory");
+    }
+    try {
+        const rows = readdirSync(dir, { withFileTypes: true }).map((e) => {
+            const type = e.isDirectory() ? "dir" : e.isSymbolicLink() ? "symlink" : "file";
+            return `${type}\t${e.name}`;
+        });
+        return ok(rows.length ? rows.join("\n") : "(empty)");
+    }
+    catch (e) {
+        return err(`file-list: ${e.message}`);
+    }
+}
+//# sourceMappingURL=file-list.js.map

package/payload/platform/plugins/filesystem/mcp/dist/tools/file-list.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"file-list.js","sourceRoot":"","sources":["../../src/tools/file-list.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AACtC,OAAO,EAAE,WAAW,EAAE,aAAa,EAAY,MAAM,iBAAiB,CAAC;AACvE,OAAO,EAAE,EAAE,EAAE,GAAG,EAAE,MAAM,kBAAkB,CAAC;AAE3C,MAAM,UAAU,QAAQ,CAAC,IAAiD,EAAE,GAAQ;IAClF,MAAM,CAAC,GAAG,WAAW,CAAC,GAAG,EAAE,IAAI,CAAC,eAAe,EAAE,WAAW,CAAC,CAAC;IAC9D,IAAI,QAAQ,IAAI,CAAC;QAAE,OAAO,GAAG,CAAC,qBAAqB,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;IAC/D,IAAI,GAAW,CAAC;IAChB,IAAI,CAAC;QACH,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC9D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,GAAG,CAAC,wDAAwD,CAAC,CAAC;IACvE,CAAC;IACD,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,WAAW,CAAC,GAAG,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;YAC/D,MAAM,IAAI,GAAG,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC;YAC/E,OAAO,GAAG,IAAI,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC;QAC9B,CAAC,CAAC,CAAC;QACH,OAAO,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IACvD,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,OAAO,GAAG,CAAC,cAAe,CAAW,CAAC,OAAO,EAAE,CAAC,CAAC;IACnD,CAAC;AACH,CAAC"}

package/payload/platform/plugins/filesystem/mcp/dist/tools/file-read.d.ts

@@ -0,0 +1,6 @@
+import { type Ctx } from "../lib/scope.js";
+export declare function fileRead(args: {
+    path: string;
+    targetAccountId?: string;
+}, ctx: Ctx): import("../lib/result.js").ToolResult;
+//# sourceMappingURL=file-read.d.ts.map

package/payload/platform/plugins/filesystem/mcp/dist/tools/file-read.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"file-read.d.ts","sourceRoot":"","sources":["../../src/tools/file-read.ts"],"names":[],"mappings":"AACA,OAAO,EAA8B,KAAK,GAAG,EAAE,MAAM,iBAAiB,CAAC;AAKvE,wBAAgB,QAAQ,CAAC,IAAI,EAAE;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,eAAe,CAAC,EAAE,MAAM,CAAA;CAAE,EAAE,GAAG,EAAE,GAAG,yCAiBlF"}

package/payload/platform/plugins/filesystem/mcp/dist/tools/file-read.js

@@ -0,0 +1,28 @@
+import { statSync, readFileSync } from "node:fs";
+import { resolveRoot, containedPath } from "../lib/scope.js";
+import { ok, err } from "../lib/result.js";
+const MAX_FILE = 5 * 1024 * 1024; // 5 MB
+export function fileRead(args, ctx) {
+    const r = resolveRoot(ctx, args.targetAccountId, "file-read");
+    if ("reject" in r)
+        return err(`file-read denied: ${r.reject}`);
+    let abs;
+    try {
+        abs = containedPath(r.root, args.path);
+    }
+    catch {
+        return err("file-read rejected: path escapes the account directory");
+    }
+    try {
+        const st = statSync(abs);
+        if (!st.isFile())
+            return err(`file-read: not a file: ${args.path}`);
+        if (st.size > MAX_FILE)
+            return err(`file-read: file too large (${st.size} bytes, max ${MAX_FILE})`);
+        return ok(readFileSync(abs, "utf-8"));
+    }
+    catch (e) {
+        return err(`file-read: ${e.message}`);
+    }
+}
+//# sourceMappingURL=file-read.js.map

package/payload/platform/plugins/filesystem/mcp/dist/tools/file-read.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"file-read.js","sourceRoot":"","sources":["../../src/tools/file-read.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACjD,OAAO,EAAE,WAAW,EAAE,aAAa,EAAY,MAAM,iBAAiB,CAAC;AACvE,OAAO,EAAE,EAAE,EAAE,GAAG,EAAE,MAAM,kBAAkB,CAAC;AAE3C,MAAM,QAAQ,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC,CAAC,OAAO;AAEzC,MAAM,UAAU,QAAQ,CAAC,IAAgD,EAAE,GAAQ;IACjF,MAAM,CAAC,GAAG,WAAW,CAAC,GAAG,EAAE,IAAI,CAAC,eAAe,EAAE,WAAW,CAAC,CAAC;IAC9D,IAAI,QAAQ,IAAI,CAAC;QAAE,OAAO,GAAG,CAAC,qBAAqB,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;IAC/D,IAAI,GAAW,CAAC;IAChB,IAAI,CAAC;QACH,GAAG,GAAG,aAAa,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;IACzC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,GAAG,CAAC,wDAAwD,CAAC,CAAC;IACvE,CAAC;IACD,IAAI,CAAC;QACH,MAAM,EAAE,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC;QACzB,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE;YAAE,OAAO,GAAG,CAAC,0BAA0B,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;QACpE,IAAI,EAAE,CAAC,IAAI,GAAG,QAAQ;YAAE,OAAO,GAAG,CAAC,8BAA8B,EAAE,CAAC,IAAI,eAAe,QAAQ,GAAG,CAAC,CAAC;QACpG,OAAO,EAAE,CAAC,YAAY,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC,CAAC;IACxC,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,OAAO,GAAG,CAAC,cAAe,CAAW,CAAC,OAAO,EAAE,CAAC,CAAC;IACnD,CAAC;AACH,CAAC"}

package/payload/platform/plugins/filesystem/mcp/dist/tools/file-write.d.ts

@@ -0,0 +1,7 @@
+import { type Ctx } from "../lib/scope.js";
+export declare function fileWrite(args: {
+    path: string;
+    content: string;
+    targetAccountId?: string;
+}, ctx: Ctx): import("../lib/result.js").ToolResult;
+//# sourceMappingURL=file-write.d.ts.map

package/payload/platform/plugins/filesystem/mcp/dist/tools/file-write.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"file-write.d.ts","sourceRoot":"","sources":["../../src/tools/file-write.ts"],"names":[],"mappings":"AAEA,OAAO,EAA8B,KAAK,GAAG,EAAE,MAAM,iBAAiB,CAAC;AAGvE,wBAAgB,SAAS,CACvB,IAAI,EAAE;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,eAAe,CAAC,EAAE,MAAM,CAAA;CAAE,EACjE,GAAG,EAAE,GAAG,yCAiBT"}

package/payload/platform/plugins/filesystem/mcp/dist/tools/file-write.js

@@ -0,0 +1,25 @@
+import { mkdirSync, writeFileSync } from "node:fs";
+import { dirname } from "node:path";
+import { resolveRoot, containedPath } from "../lib/scope.js";
+import { ok, err } from "../lib/result.js";
+export function fileWrite(args, ctx) {
+    const r = resolveRoot(ctx, args.targetAccountId, "file-write");
+    if ("reject" in r)
+        return err(`file-write denied: ${r.reject}`);
+    let abs;
+    try {
+        abs = containedPath(r.root, args.path);
+    }
+    catch {
+        return err("file-write rejected: path escapes the account directory");
+    }
+    try {
+        mkdirSync(dirname(abs), { recursive: true });
+        writeFileSync(abs, args.content, "utf-8");
+        return ok(`wrote ${Buffer.byteLength(args.content)} bytes to ${args.path}`);
+    }
+    catch (e) {
+        return err(`file-write: ${e.message}`);
+    }
+}
+//# sourceMappingURL=file-write.js.map

package/payload/platform/plugins/filesystem/mcp/dist/tools/file-write.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"file-write.js","sourceRoot":"","sources":["../../src/tools/file-write.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,WAAW,EAAE,aAAa,EAAY,MAAM,iBAAiB,CAAC;AACvE,OAAO,EAAE,EAAE,EAAE,GAAG,EAAE,MAAM,kBAAkB,CAAC;AAE3C,MAAM,UAAU,SAAS,CACvB,IAAiE,EACjE,GAAQ;IAER,MAAM,CAAC,GAAG,WAAW,CAAC,GAAG,EAAE,IAAI,CAAC,eAAe,EAAE,YAAY,CAAC,CAAC;IAC/D,IAAI,QAAQ,IAAI,CAAC;QAAE,OAAO,GAAG,CAAC,sBAAsB,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;IAChE,IAAI,GAAW,CAAC;IAChB,IAAI,CAAC;QACH,GAAG,GAAG,aAAa,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;IACzC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,GAAG,CAAC,yDAAyD,CAAC,CAAC;IACxE,CAAC;IACD,IAAI,CAAC;QACH,SAAS,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC7C,aAAa,CAAC,GAAG,EAAE,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAC1C,OAAO,EAAE,CAAC,SAAS,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,aAAa,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;IAC9E,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,OAAO,GAAG,CAAC,eAAgB,CAAW,CAAC,OAAO,EAAE,CAAC,CAAC;IACpD,CAAC;AACH,CAAC"}

package/payload/platform/plugins/filesystem/mcp/package.json

@@ -0,0 +1,21 @@
+{
+  "name": "@maxy/filesystem",
+  "version": "0.1.0",
+  "private": true,
+  "type": "module",
+  "main": "dist/index.js",
+  "scripts": {
+    "build": "tsc",
+    "start": "node dist/index.js",
+    "test": "vitest run"
+  },
+  "dependencies": {
+    "@modelcontextprotocol/sdk": "^1.12.1",
+    "zod": "^3.24.0"
+  },
+  "devDependencies": {
+    "typescript": "^5.7.0",
+    "@types/node": "^22.0.0",
+    "vitest": "^2.0.0"
+  }
+}

package/payload/platform/plugins/filesystem/mcp/vitest.config.ts

@@ -0,0 +1,8 @@
+import { defineConfig } from "vitest/config";
+
+export default defineConfig({
+  test: {
+    include: ["src/**/__tests__/**/*.test.ts"],
+    environment: "node",
+  },
+});

package/payload/platform/plugins/memory/PLUGIN.md

@@ -185,6 +185,12 @@ Writes targeting `:Person`, `:UserProfile`, `:AdminUser`, `:Organization`, `:Loc
 
 - **Direct-ask path — `SESSION_NODE_ID` env-stamp.** When `producedByTaskId` is not provided (typical of direct admin asks like "add Anneke as person"), `memory-write` falls back to the `SESSION_NODE_ID` env var. The admin server stamps it at PTY spawn time on both admin sessions and on the specialist subagent spawns the admin dispatches (listing-curator, content-producer, database-operator and friends inherit the same anchor). The value is the `sessionId` UUID of the active `:AdminConversation`; the wrapper's `injectConversationProvenance` MATCHes `(c:Conversation {sessionId, accountId})` so account isolation is enforced inside the natural key — a cross-account stamp returns zero rows and never injects. Autonomous spawns with no parent conversation (cron, scheduled-task) legitimately have no env-stamp; those must thread `producedByTaskId` via `work-create` instead. The env-stamp is invisible to the agent (no schema field changes); the LLM never decides whether to use it.
 
+## Cross-account access (house admin) — `targetAccountId`
+
+The memory tools whose Neo4j read/write is scoped **solely** by `accountId` accept an optional `targetAccountId`. A house-scoped `role:admin` session sets it to read or write a **sub-account's** subgraph instead of its own; omitting it is byte-identical to the pre-existing own-account behaviour. Only a house-scoped session may set it: a sub-account or public session that passes `targetAccountId` is rejected `cross-account-denied`, and a house session naming an account that does not exist on this install is rejected `cross-account-invalid-target`. Resolution runs through the shared `resolveEffectiveAccount` primitive — there is no house fallback and no local re-implementation. Each call that sets `targetAccountId` emits one `[xacct] op=call tool=<t> caller=<own8> target=<tgt8> houseScope=<bool> decision=<allow|deny> reason=<…>` line before the graph call, and the tool's own `[memory-<t>] [<accountId>]` line prints the resolved (target) id as a wrong-subgraph cross-check.
+
+Tools that do **not** take `targetAccountId` fall into three groups. **Not account-scoped:** `image-fetch` fetches image bytes by URL; `graph-prune-denylist-add/remove/list` mutate a brand-global deny-list; `memory-ingest-extract` stages a temp file — none read or write a sub-account subgraph. **Bound to a caller constant the parameter cannot re-scope:** `profile-read/update/delete` key on the operator's `userId`, and `session-compact` keys on the caller's live session — cross-account support for these is deferred (it needs `userId`/session re-scoping, a separate design question). **Scheduled, not interactive:** the dream-cycle **cron** (`lib/dream-cycle/*`) takes its account from the scheduler context, not a tool argument; only the interactive `memory-dream-run` tool is house-targetable. These tools keep their own-account no-account guard.
+
 ## Graph Hygiene
 
 Graph hygiene is **agent-directed, case by case** — no autonomous rule engine, no cron. The Neo4j graph degrades into a landfill if pollution from prior agent errors (wrong-account hostnames, fabricated identifiers, raw monologue dumps) is allowed to compound. Cleanup happens when the admin agent observes a match against the operator-curated deny-list (or the user directly asks) and applies discretion using `memory-update`, `memory-delete`, or `conversation-memory-expunge`.

package/payload/platform/plugins/memory/mcp/dist/index-testable.d.ts

@@ -0,0 +1,34 @@
+type RejectContent = {
+    content: {
+        type: "text";
+        text: string;
+    }[];
+    isError: true;
+};
+export type ToolAccount = {
+    accountId: string;
+} | {
+    reject: RejectContent;
+};
+/**
+ * Build the per-tool account resolver. `accountId` / `houseScope` are the boot
+ * constants; `isValid` is injected (from `enumerateValidAccountIds(accountsDir)`
+ * in production, a stub in tests). Returns a closure the tool handlers call with
+ * their optional `targetAccountId`.
+ *
+ * Contract:
+ *  - null boot `accountId` → refuse (no-account guard, unchanged behaviour).
+ *  - no `targetAccountId`  → own account, no `[xacct]` line (byte-identical).
+ *  - `targetAccountId` set → resolve via the shared 1440 resolver, emit one
+ *    `[xacct]` line, and on reject return the MCP error content.
+ * `houseScope=false decision=allow` cannot occur: a non-house session with a
+ * target is denied by the resolver before any allow path.
+ */
+export declare function makeResolveToolAccount(deps: {
+    accountId: string | null;
+    houseScope: string | null;
+    isValid: (id: string) => boolean;
+    log?: (line: string) => void;
+}): (toolName: string, targetAccountId?: string | null) => ToolAccount;
+export {};
+//# sourceMappingURL=index-testable.d.ts.map

package/payload/platform/plugins/memory/mcp/dist/index-testable.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index-testable.d.ts","sourceRoot":"","sources":["../src/index-testable.ts"],"names":[],"mappings":"AAQA,KAAK,aAAa,GAAG;IAAE,OAAO,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;IAAC,OAAO,EAAE,IAAI,CAAA;CAAE,CAAC;AAClF,MAAM,MAAM,WAAW,GAAG;IAAE,SAAS,EAAE,MAAM,CAAA;CAAE,GAAG;IAAE,MAAM,EAAE,aAAa,CAAA;CAAE,CAAC;AAuB5E;;;;;;;;;;;;;GAaG;AACH,wBAAgB,sBAAsB,CAAC,IAAI,EAAE;IAC3C,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,OAAO,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC;IACjC,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;CAC9B,GAAG,CAAC,QAAQ,EAAE,MAAM,EAAE,eAAe,CAAC,EAAE,MAAM,GAAG,IAAI,KAAK,WAAW,CA0BrE"}

package/payload/platform/plugins/memory/mcp/dist/index-testable.js

@@ -0,0 +1,60 @@
+// Pure, side-effect-free cross-account seam for the memory MCP plugin.
+//
+// Split out of index.ts so unit tests can exercise the resolution + [xacct]
+// logging without importing index.ts, which has stdio side effects at module
+// load (stderr tee, MCP server construction, schema load that throws on a
+// broken sidecar). Task 1455.
+import { resolveEffectiveAccountCore } from "../../../../lib/account-scope/dist/index.js";
+function errContent(text) {
+    return { content: [{ type: "text", text }], isError: true };
+}
+/** Preserve the exact wording of index.ts's `refuseNoAccount` so a metadata-only
+ *  spawn (no ACCOUNT_ID) returns the same message it always has. */
+function noAccountText(toolName) {
+    return (`${toolName} cannot execute: this MCP instance was launched without ACCOUNT_ID ` +
+        `(plugin-system metadata-only mode). Per-account graph access requires ACCOUNT_ID at spawn.`);
+}
+/** Operator-facing reject messages. Each CONTAINS its reject code so the
+ *  reason is greppable and the agent sees why the call was refused. */
+function rejectText(reason, target8) {
+    return reason === "cross-account-denied"
+        ? `cross-account-denied: only a house-scoped admin session may set targetAccountId.`
+        : `cross-account-invalid-target: "${target8}…" is not a valid account on this install.`;
+}
+/**
+ * Build the per-tool account resolver. `accountId` / `houseScope` are the boot
+ * constants; `isValid` is injected (from `enumerateValidAccountIds(accountsDir)`
+ * in production, a stub in tests). Returns a closure the tool handlers call with
+ * their optional `targetAccountId`.
+ *
+ * Contract:
+ *  - null boot `accountId` → refuse (no-account guard, unchanged behaviour).
+ *  - no `targetAccountId`  → own account, no `[xacct]` line (byte-identical).
+ *  - `targetAccountId` set → resolve via the shared 1440 resolver, emit one
+ *    `[xacct]` line, and on reject return the MCP error content.
+ * `houseScope=false decision=allow` cannot occur: a non-house session with a
+ * target is denied by the resolver before any allow path.
+ */
+export function makeResolveToolAccount(deps) {
+    const write = deps.log ?? ((l) => void process.stderr.write(l));
+    return (toolName, targetAccountId) => {
+        if (!deps.accountId) {
+            // Preserve the greppable no-account diagnostic the old refuseNoAccount wrote.
+            write(`[memory] tool=${toolName} refuse reason=no-account-context\n`);
+            return { reject: errContent(noAccountText(toolName)) };
+        }
+        const eff = resolveEffectiveAccountCore({ ownAccountId: deps.accountId, houseScope: deps.houseScope, targetAccountId }, deps.isValid);
+        if (targetAccountId) {
+            const decision = "reject" in eff ? "deny" : "allow";
+            const reason = "reject" in eff ? eff.reject : "ok";
+            write(`[xacct] op=call tool=${toolName} caller=${deps.accountId.slice(0, 8)} ` +
+                `target=${targetAccountId.slice(0, 8)} houseScope=${deps.houseScope ? "true" : "false"} ` +
+                `decision=${decision} reason=${reason}\n`);
+        }
+        if ("reject" in eff) {
+            return { reject: errContent(rejectText(eff.reject, (targetAccountId ?? "").slice(0, 8))) };
+        }
+        return { accountId: eff.accountId };
+    };
+}
+//# sourceMappingURL=index-testable.js.map

package/payload/platform/plugins/memory/mcp/dist/index-testable.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index-testable.js","sourceRoot":"","sources":["../src/index-testable.ts"],"names":[],"mappings":"AAAA,uEAAuE;AACvE,EAAE;AACF,4EAA4E;AAC5E,6EAA6E;AAC7E,0EAA0E;AAC1E,8BAA8B;AAC9B,OAAO,EAAE,2BAA2B,EAAE,MAAM,6CAA6C,CAAC;AAK1F,SAAS,UAAU,CAAC,IAAY;IAC9B,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,CAAC,EAAE,OAAO,EAAE,IAAa,EAAE,CAAC;AAChF,CAAC;AAED;oEACoE;AACpE,SAAS,aAAa,CAAC,QAAgB;IACrC,OAAO,CACL,GAAG,QAAQ,qEAAqE;QAChF,4FAA4F,CAC7F,CAAC;AACJ,CAAC;AAED;uEACuE;AACvE,SAAS,UAAU,CAAC,MAA+D,EAAE,OAAe;IAClG,OAAO,MAAM,KAAK,sBAAsB;QACtC,CAAC,CAAC,kFAAkF;QACpF,CAAC,CAAC,kCAAkC,OAAO,4CAA4C,CAAC;AAC5F,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,sBAAsB,CAAC,IAKtC;IACC,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC,CAAS,EAAE,EAAE,CAAC,KAAK,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IACxE,OAAO,CAAC,QAAQ,EAAE,eAAe,EAAE,EAAE;QACnC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;YACpB,8EAA8E;YAC9E,KAAK,CAAC,iBAAiB,QAAQ,qCAAqC,CAAC,CAAC;YACtE,OAAO,EAAE,MAAM,EAAE,UAAU,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC;QACzD,CAAC;QACD,MAAM,GAAG,GAAG,2BAA2B,CACrC,EAAE,YAAY,EAAE,IAAI,CAAC,SAAS,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,eAAe,EAAE,EAC9E,IAAI,CAAC,OAAO,CACb,CAAC;QACF,IAAI,eAAe,EAAE,CAAC;YACpB,MAAM,QAAQ,GAAG,QAAQ,IAAI,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC;YACpD,MAAM,MAAM,GAAG,QAAQ,IAAI,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC;YACnD,KAAK,CACH,wBAAwB,QAAQ,WAAW,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG;gBACtE,UAAU,eAAe,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,eAAe,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,GAAG;gBACzF,YAAY,QAAQ,WAAW,MAAM,IAAI,CAC5C,CAAC;QACJ,CAAC;QACD,IAAI,QAAQ,IAAI,GAAG,EAAE,CAAC;YACpB,OAAO,EAAE,MAAM,EAAE,UAAU,CAAC,UAAU,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC,eAAe,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7F,CAAC;QACD,OAAO,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,CAAC;IACtC,CAAC,CAAC;AACJ,CAAC"}