@rubytech/create-maxy-code 0.1.411 → 0.1.414

package/payload/platform/plugins/filesystem/mcp/dist/lib/walk.js

@@ -0,0 +1,64 @@
+// Recursive-walk + glob helpers for the glob/grep tools. Both are rooted at an
+// already-resolved account dir and NEVER follow symlinks, so the walk cannot
+// leave the account directory even if a symlink points outside.
+import { readdirSync } from "node:fs";
+import { join, relative, sep } from "node:path";
+/**
+ * List regular files under `root`, returning paths RELATIVE to root with "/"
+ * separators. Symlinked entries are skipped (no escape). Stops at `cap` files.
+ */
+export function walkFiles(root, cap) {
+    const out = [];
+    const stack = [root];
+    while (stack.length && out.length < cap) {
+        const dir = stack.pop();
+        let entries;
+        try {
+            entries = readdirSync(dir, { withFileTypes: true });
+        }
+        catch {
+            continue;
+        }
+        for (const e of entries) {
+            if (out.length >= cap)
+                break;
+            if (e.isSymbolicLink())
+                continue; // never follow a symlink out of root
+            const full = join(dir, e.name);
+            if (e.isDirectory())
+                stack.push(full);
+            else if (e.isFile())
+                out.push(relative(root, full).split(sep).join("/"));
+        }
+    }
+    return out;
+}
+/**
+ * Translate a glob (`**`, `*`, `?`) to an anchored RegExp over "/"-joined
+ * relative paths. `*` and `?` do not cross "/"; `**` crosses any depth.
+ */
+export function globToRegExp(glob) {
+    let re = "";
+    for (let i = 0; i < glob.length; i++) {
+        const c = glob[i];
+        if (c === "*") {
+            if (glob[i + 1] === "*") {
+                re += ".*";
+                i++;
+                if (glob[i + 1] === "/")
+                    i++; // absorb the slash after **
+            }
+            else {
+                re += "[^/]*";
+            }
+        }
+        else if (c === "?") {
+            re += "[^/]";
+        }
+        else {
+            re += c.replace(/[.+^${}()|[\]\\]/g, "\\$&");
+        }
+    }
+    return new RegExp("^" + re + "$");
+}
+//# sourceMappingURL=walk.js.map

package/payload/platform/plugins/filesystem/mcp/dist/lib/walk.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"walk.js","sourceRoot":"","sources":["../../src/lib/walk.ts"],"names":[],"mappings":"AAAA,+EAA+E;AAC/E,6EAA6E;AAC7E,gEAAgE;AAChE,OAAO,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AACtC,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AAEhD;;;GAGG;AACH,MAAM,UAAU,SAAS,CAAC,IAAY,EAAE,GAAW;IACjD,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,MAAM,KAAK,GAAa,CAAC,IAAI,CAAC,CAAC;IAC/B,OAAO,KAAK,CAAC,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,GAAG,EAAE,CAAC;QACxC,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,EAAY,CAAC;QAClC,IAAI,OAAO,CAAC;QACZ,IAAI,CAAC;YACH,OAAO,GAAG,WAAW,CAAC,GAAG,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;QACtD,CAAC;QAAC,MAAM,CAAC;YACP,SAAS;QACX,CAAC;QACD,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;YACxB,IAAI,GAAG,CAAC,MAAM,IAAI,GAAG;gBAAE,MAAM;YAC7B,IAAI,CAAC,CAAC,cAAc,EAAE;gBAAE,SAAS,CAAC,qCAAqC;YACvE,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;YAC/B,IAAI,CAAC,CAAC,WAAW,EAAE;gBAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;iBACjC,IAAI,CAAC,CAAC,MAAM,EAAE;gBAAE,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;QAC3E,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,YAAY,CAAC,IAAY;IACvC,IAAI,EAAE,GAAG,EAAE,CAAC;IACZ,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACrC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,IAAI,CAAC,KAAK,GAAG,EAAE,CAAC;YACd,IAAI,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;gBACxB,EAAE,IAAI,IAAI,CAAC;gBACX,CAAC,EAAE,CAAC;gBACJ,IAAI,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,GAAG;oBAAE,CAAC,EAAE,CAAC,CAAC,4BAA4B;YAC5D,CAAC;iBAAM,CAAC;gBACN,EAAE,IAAI,OAAO,CAAC;YAChB,CAAC;QACH,CAAC;aAAM,IAAI,CAAC,KAAK,GAAG,EAAE,CAAC;YACrB,EAAE,IAAI,MAAM,CAAC;QACf,CAAC;aAAM,CAAC;YACN,EAAE,IAAI,CAAC,CAAC,OAAO,CAAC,mBAAmB,EAAE,MAAM,CAAC,CAAC;QAC/C,CAAC;IACH,CAAC;IACD,OAAO,IAAI,MAAM,CAAC,GAAG,GAAG,EAAE,GAAG,GAAG,CAAC,CAAC;AACpC,CAAC"}

package/payload/platform/plugins/filesystem/mcp/dist/tools/__tests__/handlers.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=handlers.test.d.ts.map

package/payload/platform/plugins/filesystem/mcp/dist/tools/__tests__/handlers.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"handlers.test.d.ts","sourceRoot":"","sources":["../../../src/tools/__tests__/handlers.test.ts"],"names":[],"mappings":""}

package/payload/platform/plugins/filesystem/mcp/dist/tools/__tests__/handlers.test.js

@@ -0,0 +1,94 @@
+import { describe, it, expect, beforeEach, afterEach } from "vitest";
+import { mkdtempSync, mkdirSync, writeFileSync, readFileSync, existsSync, rmSync } from "node:fs";
+import { tmpdir } from "node:os";
+import { join } from "node:path";
+import { fileRead } from "../file-read.js";
+import { fileWrite } from "../file-write.js";
+import { fileEdit } from "../file-edit.js";
+import { fileList } from "../file-list.js";
+import { fileGlob } from "../file-glob.js";
+import { fileGrep } from "../file-grep.js";
+const HOUSE = "11111111-1111-4111-8111-111111111111";
+const CLIENT = "22222222-2222-4222-8222-222222222222";
+let accountsDir;
+beforeEach(() => {
+    accountsDir = mkdtempSync(join(tmpdir(), "xacct-handlers-"));
+    for (const id of [HOUSE, CLIENT]) {
+        mkdirSync(join(accountsDir, id), { recursive: true });
+        writeFileSync(join(accountsDir, id, "account.json"), JSON.stringify({ accountId: id }));
+    }
+});
+afterEach(() => rmSync(accountsDir, { recursive: true, force: true }));
+const house = () => ({ ownAccountId: HOUSE, houseScope: HOUSE, accountsDir });
+const client = () => ({ ownAccountId: CLIENT, houseScope: null, accountsDir });
+const text = (r) => r.content[0].text;
+describe("file handlers — own account round-trip", () => {
+    it("write → read → edit → list on the house's own account", () => {
+        expect(fileWrite({ path: "notes/a.txt", content: "hello world" }, house()).isError).toBeUndefined();
+        expect(existsSync(join(accountsDir, HOUSE, "notes/a.txt"))).toBe(true);
+        expect(text(fileRead({ path: "notes/a.txt" }, house()))).toBe("hello world");
+        expect(fileEdit({ path: "notes/a.txt", oldString: "world", newString: "there" }, house()).isError).toBeUndefined();
+        expect(readFileSync(join(accountsDir, HOUSE, "notes/a.txt"), "utf-8")).toBe("hello there");
+        const listed = text(fileList({ path: "notes" }, house()));
+        expect(listed).toContain("a.txt");
+    });
+    it("file-edit refuses a non-unique oldString", () => {
+        fileWrite({ path: "d.txt", content: "x x" }, house());
+        const r = fileEdit({ path: "d.txt", oldString: "x", newString: "y" }, house());
+        expect(r.isError).toBe(true);
+        expect(text(r)).toContain("not unique");
+    });
+    it("glob and grep find content in the account", () => {
+        fileWrite({ path: "docs/readme.md", content: "alpha\nbeta MATCHME gamma" }, house());
+        expect(text(fileGlob({ pattern: "**/*.md" }, house()))).toContain("docs/readme.md");
+        expect(text(fileGrep({ pattern: "MATCHME" }, house()))).toContain("docs/readme.md:2:");
+    });
+    it("grep with a path arg reports account-root-relative paths that round-trip", () => {
+        fileWrite({ path: "logs/app.log", content: "line1\nMATCHME here" }, house());
+        const hit = text(fileGrep({ pattern: "MATCHME", path: "logs" }, house()));
+        // root-relative, not subdir-relative — so it feeds straight back into file-read
+        expect(hit).toContain("logs/app.log:2:");
+        const reported = hit.split(":")[0];
+        expect(text(fileRead({ path: reported }, house()))).toContain("MATCHME");
+    });
+    it("file-edit rejects an empty oldString instead of silently splicing", () => {
+        fileWrite({ path: "e.txt", content: "ab" }, house());
+        const r = fileEdit({ path: "e.txt", oldString: "", newString: "X" }, house());
+        expect(r.isError).toBe(true);
+        expect(text(r)).toContain("must not be empty");
+        expect(readFileSync(join(accountsDir, HOUSE, "e.txt"), "utf-8")).toBe("ab");
+    });
+});
+describe("file handlers — cross-account gate", () => {
+    it("house admin writes into a sub-account by naming targetAccountId", () => {
+        const r = fileWrite({ path: "from-house.txt", content: "hi", targetAccountId: CLIENT }, house());
+        expect(r.isError).toBeUndefined();
+        expect(readFileSync(join(accountsDir, CLIENT, "from-house.txt"), "utf-8")).toBe("hi");
+    });
+    it("a non-house session naming a target is denied", () => {
+        const r = fileRead({ path: "account.json", targetAccountId: HOUSE }, client());
+        expect(r.isError).toBe(true);
+        expect(text(r)).toContain("cross-account-denied");
+        // and it did not read the house file
+        expect(text(r)).not.toContain("accountId");
+    });
+    it("an unknown target is invalid-target", () => {
+        const r = fileList({ targetAccountId: "99999999-9999-4999-8999-999999999999" }, house());
+        expect(r.isError).toBe(true);
+        expect(text(r)).toContain("cross-account-invalid-target");
+    });
+});
+describe("file handlers — traversal guard", () => {
+    it("write to a ../ escape is rejected, no file created outside the account", () => {
+        const r = fileWrite({ path: `../${CLIENT}/injected.txt`, content: "x" }, house());
+        expect(r.isError).toBe(true);
+        expect(text(r)).toContain("escapes the account directory");
+        expect(existsSync(join(accountsDir, CLIENT, "injected.txt"))).toBe(false);
+    });
+    it("read of an absolute path outside the account is rejected", () => {
+        const r = fileRead({ path: "/etc/hosts" }, house());
+        expect(r.isError).toBe(true);
+        expect(text(r)).toContain("escapes the account directory");
+    });
+});
+//# sourceMappingURL=handlers.test.js.map

package/payload/platform/plugins/filesystem/mcp/dist/tools/__tests__/handlers.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"handlers.test.js","sourceRoot":"","sources":["../../../src/tools/__tests__/handlers.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAC;AACrE,OAAO,EAAE,WAAW,EAAE,SAAS,EAAE,aAAa,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AAClG,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,OAAO,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AAC3C,OAAO,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAC7C,OAAO,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AAC3C,OAAO,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AAC3C,OAAO,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AAC3C,OAAO,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AAE3C,MAAM,KAAK,GAAG,sCAAsC,CAAC;AACrD,MAAM,MAAM,GAAG,sCAAsC,CAAC;AAEtD,IAAI,WAAmB,CAAC;AAExB,UAAU,CAAC,GAAG,EAAE;IACd,WAAW,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,iBAAiB,CAAC,CAAC,CAAC;IAC7D,KAAK,MAAM,EAAE,IAAI,CAAC,KAAK,EAAE,MAAM,CAAC,EAAE,CAAC;QACjC,SAAS,CAAC,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACtD,aAAa,CAAC,IAAI,CAAC,WAAW,EAAE,EAAE,EAAE,cAAc,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;IAC1F,CAAC;AACH,CAAC,CAAC,CAAC;AACH,SAAS,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,WAAW,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;AAEvE,MAAM,KAAK,GAAG,GAAQ,EAAE,CAAC,CAAC,EAAE,YAAY,EAAE,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC;AACnF,MAAM,MAAM,GAAG,GAAQ,EAAE,CAAC,CAAC,EAAE,YAAY,EAAE,MAAM,EAAE,UAAU,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC;AACpF,MAAM,IAAI,GAAG,CAAC,CAAkC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AAEvE,QAAQ,CAAC,wCAAwC,EAAE,GAAG,EAAE;IACtD,EAAE,CAAC,uDAAuD,EAAE,GAAG,EAAE;QAC/D,MAAM,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,aAAa,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,aAAa,EAAE,CAAC;QACpG,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,WAAW,EAAE,KAAK,EAAE,aAAa,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACvE,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QAE7E,MAAM,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,SAAS,EAAE,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,aAAa,EAAE,CAAC;QACnH,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,WAAW,EAAE,KAAK,EAAE,aAAa,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QAE3F,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;QAC1D,MAAM,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;IACpC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0CAA0C,EAAE,GAAG,EAAE;QAClD,SAAS,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;QACtD,MAAM,CAAC,GAAG,QAAQ,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,SAAS,EAAE,GAAG,EAAE,SAAS,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;QAC/E,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC7B,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC;IAC1C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2CAA2C,EAAE,GAAG,EAAE;QACnD,SAAS,CAAC,EAAE,IAAI,EAAE,gBAAgB,EAAE,OAAO,EAAE,2BAA2B,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;QACrF,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,OAAO,EAAE,SAAS,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,gBAAgB,CAAC,CAAC;QACpF,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,OAAO,EAAE,SAAS,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,mBAAmB,CAAC,CAAC;IACzF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0EAA0E,EAAE,GAAG,EAAE;QAClF,SAAS,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,OAAO,EAAE,qBAAqB,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;QAC7E,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,EAAE,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;QAC1E,gFAAgF;QAChF,MAAM,CAAC,GAAG,CAAC,CAAC,SAAS,CAAC,iBAAiB,CAAC,CAAC;QACzC,MAAM,QAAQ,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QACnC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;IAC3E,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mEAAmE,EAAE,GAAG,EAAE;QAC3E,SAAS,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;QACrD,MAAM,CAAC,GAAG,QAAQ,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,SAAS,EAAE,EAAE,EAAE,SAAS,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;QAC9E,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC7B,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,mBAAmB,CAAC,CAAC;QAC/C,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,WAAW,EAAE,KAAK,EAAE,OAAO,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC9E,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,oCAAoC,EAAE,GAAG,EAAE;IAClD,EAAE,CAAC,iEAAiE,EAAE,GAAG,EAAE;QACzE,MAAM,CAAC,GAAG,SAAS,CAAC,EAAE,IAAI,EAAE,gBAAgB,EAAE,OAAO,EAAE,IAAI,EAAE,eAAe,EAAE,MAAM,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;QACjG,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,aAAa,EAAE,CAAC;QAClC,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,WAAW,EAAE,MAAM,EAAE,gBAAgB,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACxF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+CAA+C,EAAE,GAAG,EAAE;QACvD,MAAM,CAAC,GAAG,QAAQ,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,eAAe,EAAE,KAAK,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;QAC/E,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC7B,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,sBAAsB,CAAC,CAAC;QAClD,qCAAqC;QACrC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC;IAC7C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qCAAqC,EAAE,GAAG,EAAE;QAC7C,MAAM,CAAC,GAAG,QAAQ,CAAC,EAAE,eAAe,EAAE,sCAAsC,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;QACzF,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC7B,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,8BAA8B,CAAC,CAAC;IAC5D,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,iCAAiC,EAAE,GAAG,EAAE;IAC/C,EAAE,CAAC,wEAAwE,EAAE,GAAG,EAAE;QAChF,MAAM,CAAC,GAAG,SAAS,CAAC,EAAE,IAAI,EAAE,MAAM,MAAM,eAAe,EAAE,OAAO,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;QAClF,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC7B,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,+BAA+B,CAAC,CAAC;QAC3D,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,WAAW,EAAE,MAAM,EAAE,cAAc,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC5E,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0DAA0D,EAAE,GAAG,EAAE;QAClE,MAAM,CAAC,GAAG,QAAQ,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;QACpD,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC7B,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,+BAA+B,CAAC,CAAC;IAC7D,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/payload/platform/plugins/filesystem/mcp/dist/tools/file-edit.d.ts

@@ -0,0 +1,8 @@
+import { type Ctx } from "../lib/scope.js";
+export declare function fileEdit(args: {
+    path: string;
+    oldString: string;
+    newString: string;
+    targetAccountId?: string;
+}, ctx: Ctx): import("../lib/result.js").ToolResult;
+//# sourceMappingURL=file-edit.d.ts.map

package/payload/platform/plugins/filesystem/mcp/dist/tools/file-edit.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"file-edit.d.ts","sourceRoot":"","sources":["../../src/tools/file-edit.ts"],"names":[],"mappings":"AACA,OAAO,EAA8B,KAAK,GAAG,EAAE,MAAM,iBAAiB,CAAC;AAGvE,wBAAgB,QAAQ,CACtB,IAAI,EAAE;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,eAAe,CAAC,EAAE,MAAM,CAAA;CAAE,EACtF,GAAG,EAAE,GAAG,yCA6BT"}

package/payload/platform/plugins/filesystem/mcp/dist/tools/file-edit.js

@@ -0,0 +1,40 @@
+import { readFileSync, writeFileSync } from "node:fs";
+import { resolveRoot, containedPath } from "../lib/scope.js";
+import { ok, err } from "../lib/result.js";
+export function fileEdit(args, ctx) {
+    const r = resolveRoot(ctx, args.targetAccountId, "file-edit");
+    if ("reject" in r)
+        return err(`file-edit denied: ${r.reject}`);
+    // An empty oldString has no unique match semantics — "ab".split("") yields a
+    // spurious single "match" that would silently splice newString into the file.
+    if (args.oldString === "")
+        return err("file-edit: oldString must not be empty");
+    let abs;
+    try {
+        abs = containedPath(r.root, args.path);
+    }
+    catch {
+        return err("file-edit rejected: path escapes the account directory");
+    }
+    let content;
+    try {
+        content = readFileSync(abs, "utf-8");
+    }
+    catch (e) {
+        return err(`file-edit: ${e.message}`);
+    }
+    const parts = content.split(args.oldString);
+    const count = parts.length - 1;
+    if (count === 0)
+        return err(`file-edit: oldString not found in ${args.path}`);
+    if (count > 1)
+        return err(`file-edit: oldString is not unique in ${args.path} (${count} matches)`);
+    try {
+        writeFileSync(abs, parts.join(args.newString), "utf-8");
+        return ok(`edited ${args.path}`);
+    }
+    catch (e) {
+        return err(`file-edit: ${e.message}`);
+    }
+}
+//# sourceMappingURL=file-edit.js.map

package/payload/platform/plugins/filesystem/mcp/dist/tools/file-edit.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"file-edit.js","sourceRoot":"","sources":["../../src/tools/file-edit.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACtD,OAAO,EAAE,WAAW,EAAE,aAAa,EAAY,MAAM,iBAAiB,CAAC;AACvE,OAAO,EAAE,EAAE,EAAE,GAAG,EAAE,MAAM,kBAAkB,CAAC;AAE3C,MAAM,UAAU,QAAQ,CACtB,IAAsF,EACtF,GAAQ;IAER,MAAM,CAAC,GAAG,WAAW,CAAC,GAAG,EAAE,IAAI,CAAC,eAAe,EAAE,WAAW,CAAC,CAAC;IAC9D,IAAI,QAAQ,IAAI,CAAC;QAAE,OAAO,GAAG,CAAC,qBAAqB,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;IAC/D,6EAA6E;IAC7E,8EAA8E;IAC9E,IAAI,IAAI,CAAC,SAAS,KAAK,EAAE;QAAE,OAAO,GAAG,CAAC,wCAAwC,CAAC,CAAC;IAChF,IAAI,GAAW,CAAC;IAChB,IAAI,CAAC;QACH,GAAG,GAAG,aAAa,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;IACzC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,GAAG,CAAC,wDAAwD,CAAC,CAAC;IACvE,CAAC;IACD,IAAI,OAAe,CAAC;IACpB,IAAI,CAAC;QACH,OAAO,GAAG,YAAY,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;IACvC,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,OAAO,GAAG,CAAC,cAAe,CAAW,CAAC,OAAO,EAAE,CAAC,CAAC;IACnD,CAAC;IACD,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAC5C,MAAM,KAAK,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC;IAC/B,IAAI,KAAK,KAAK,CAAC;QAAE,OAAO,GAAG,CAAC,qCAAqC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;IAC9E,IAAI,KAAK,GAAG,CAAC;QAAE,OAAO,GAAG,CAAC,yCAAyC,IAAI,CAAC,IAAI,KAAK,KAAK,WAAW,CAAC,CAAC;IACnG,IAAI,CAAC;QACH,aAAa,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,CAAC,CAAC;QACxD,OAAO,EAAE,CAAC,UAAU,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;IACnC,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,OAAO,GAAG,CAAC,cAAe,CAAW,CAAC,OAAO,EAAE,CAAC,CAAC;IACnD,CAAC;AACH,CAAC"}

package/payload/platform/plugins/filesystem/mcp/dist/tools/file-glob.d.ts

@@ -0,0 +1,6 @@
+import { type Ctx } from "../lib/scope.js";
+export declare function fileGlob(args: {
+    pattern: string;
+    targetAccountId?: string;
+}, ctx: Ctx): import("../lib/result.js").ToolResult;
+//# sourceMappingURL=file-glob.d.ts.map

package/payload/platform/plugins/filesystem/mcp/dist/tools/file-glob.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"file-glob.d.ts","sourceRoot":"","sources":["../../src/tools/file-glob.ts"],"names":[],"mappings":"AAAA,OAAO,EAAe,KAAK,GAAG,EAAE,MAAM,iBAAiB,CAAC;AAMxD,wBAAgB,QAAQ,CAAC,IAAI,EAAE;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,eAAe,CAAC,EAAE,MAAM,CAAA;CAAE,EAAE,GAAG,EAAE,GAAG,yCAMrF"}

package/payload/platform/plugins/filesystem/mcp/dist/tools/file-glob.js

@@ -0,0 +1,13 @@
+import { resolveRoot } from "../lib/scope.js";
+import { walkFiles, globToRegExp } from "../lib/walk.js";
+import { ok, err } from "../lib/result.js";
+const GLOB_CAP = 1000;
+export function fileGlob(args, ctx) {
+    const r = resolveRoot(ctx, args.targetAccountId, "file-glob");
+    if ("reject" in r)
+        return err(`file-glob denied: ${r.reject}`);
+    const re = globToRegExp(args.pattern);
+    const hits = walkFiles(r.root, GLOB_CAP).filter((rel) => re.test(rel));
+    return ok(hits.length ? hits.join("\n") : "(no matches)");
+}
+//# sourceMappingURL=file-glob.js.map

package/payload/platform/plugins/filesystem/mcp/dist/tools/file-glob.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"file-glob.js","sourceRoot":"","sources":["../../src/tools/file-glob.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAY,MAAM,iBAAiB,CAAC;AACxD,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AACzD,OAAO,EAAE,EAAE,EAAE,GAAG,EAAE,MAAM,kBAAkB,CAAC;AAE3C,MAAM,QAAQ,GAAG,IAAI,CAAC;AAEtB,MAAM,UAAU,QAAQ,CAAC,IAAmD,EAAE,GAAQ;IACpF,MAAM,CAAC,GAAG,WAAW,CAAC,GAAG,EAAE,IAAI,CAAC,eAAe,EAAE,WAAW,CAAC,CAAC;IAC9D,IAAI,QAAQ,IAAI,CAAC;QAAE,OAAO,GAAG,CAAC,qBAAqB,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;IAC/D,MAAM,EAAE,GAAG,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACtC,MAAM,IAAI,GAAG,SAAS,CAAC,CAAC,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IACvE,OAAO,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC;AAC5D,CAAC"}

package/payload/platform/plugins/filesystem/mcp/dist/tools/file-grep.d.ts

@@ -0,0 +1,7 @@
+import { type Ctx } from "../lib/scope.js";
+export declare function fileGrep(args: {
+    pattern: string;
+    path?: string;
+    targetAccountId?: string;
+}, ctx: Ctx): import("../lib/result.js").ToolResult;
+//# sourceMappingURL=file-grep.d.ts.map

package/payload/platform/plugins/filesystem/mcp/dist/tools/file-grep.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"file-grep.d.ts","sourceRoot":"","sources":["../../src/tools/file-grep.ts"],"names":[],"mappings":"AAEA,OAAO,EAA8B,KAAK,GAAG,EAAE,MAAM,iBAAiB,CAAC;AAQvE,wBAAgB,QAAQ,CACtB,IAAI,EAAE;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IAAC,eAAe,CAAC,EAAE,MAAM,CAAA;CAAE,EAClE,GAAG,EAAE,GAAG,yCAmDT"}

package/payload/platform/plugins/filesystem/mcp/dist/tools/file-grep.js

@@ -0,0 +1,71 @@
+import { statSync, readFileSync } from "node:fs";
+import { join, relative, resolve, sep } from "node:path";
+import { resolveRoot, containedPath } from "../lib/scope.js";
+import { walkFiles } from "../lib/walk.js";
+import { ok, err } from "../lib/result.js";
+const GREP_CAP = 500; // max match lines returned
+const WALK_CAP = 20000; // max files scanned
+const MAX_FILE = 5 * 1024 * 1024;
+export function fileGrep(args, ctx) {
+    const r = resolveRoot(ctx, args.targetAccountId, "file-grep");
+    if ("reject" in r)
+        return err(`file-grep denied: ${r.reject}`);
+    let base;
+    // `prefix` is the search subdir expressed relative to the account root, so
+    // every reported path stays root-relative and round-trips into file-read /
+    // file-glob regardless of which subdir was searched.
+    let prefix = "";
+    try {
+        if (args.path) {
+            base = containedPath(r.root, args.path);
+            prefix = relative(r.root, resolve(r.root, args.path)).split(sep).join("/");
+        }
+        else {
+            base = r.root;
+        }
+    }
+    catch {
+        return err("file-grep rejected: path escapes the account directory");
+    }
+    let re;
+    try {
+        re = new RegExp(args.pattern);
+    }
+    catch (e) {
+        return err(`file-grep: invalid pattern: ${e.message}`);
+    }
+    const hits = [];
+    for (const rel of walkFiles(base, WALK_CAP)) {
+        if (hits.length >= GREP_CAP)
+            break;
+        const abs = join(base, rel);
+        const rootRel = prefix ? `${prefix}/${rel}` : rel;
+        let st;
+        try {
+            st = statSync(abs);
+        }
+        catch {
+            continue;
+        }
+        if (st.size > MAX_FILE)
+            continue;
+        let text;
+        try {
+            text = readFileSync(abs, "utf-8");
+        }
+        catch {
+            continue;
+        }
+        if (text.includes("\u0000"))
+            continue; // skip binary
+        const lines = text.split("\n");
+        for (let i = 0; i < lines.length; i++) {
+            if (hits.length >= GREP_CAP)
+                break;
+            if (re.test(lines[i]))
+                hits.push(`${rootRel}:${i + 1}:${lines[i].slice(0, 200)}`);
+        }
+    }
+    return ok(hits.length ? hits.join("\n") : "(no matches)");
+}
+//# sourceMappingURL=file-grep.js.map

package/payload/platform/plugins/filesystem/mcp/dist/tools/file-grep.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"file-grep.js","sourceRoot":"","sources":["../../src/tools/file-grep.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACjD,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AACzD,OAAO,EAAE,WAAW,EAAE,aAAa,EAAY,MAAM,iBAAiB,CAAC;AACvE,OAAO,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAC3C,OAAO,EAAE,EAAE,EAAE,GAAG,EAAE,MAAM,kBAAkB,CAAC;AAE3C,MAAM,QAAQ,GAAG,GAAG,CAAC,CAAC,2BAA2B;AACjD,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,oBAAoB;AAC5C,MAAM,QAAQ,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC;AAEjC,MAAM,UAAU,QAAQ,CACtB,IAAkE,EAClE,GAAQ;IAER,MAAM,CAAC,GAAG,WAAW,CAAC,GAAG,EAAE,IAAI,CAAC,eAAe,EAAE,WAAW,CAAC,CAAC;IAC9D,IAAI,QAAQ,IAAI,CAAC;QAAE,OAAO,GAAG,CAAC,qBAAqB,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;IAC/D,IAAI,IAAY,CAAC;IACjB,2EAA2E;IAC3E,2EAA2E;IAC3E,qDAAqD;IACrD,IAAI,MAAM,GAAG,EAAE,CAAC;IAChB,IAAI,CAAC;QACH,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;YACd,IAAI,GAAG,aAAa,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;YACxC,MAAM,GAAG,QAAQ,CAAC,CAAC,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC7E,CAAC;aAAM,CAAC;YACN,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC;QAChB,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,GAAG,CAAC,wDAAwD,CAAC,CAAC;IACvE,CAAC;IACD,IAAI,EAAU,CAAC;IACf,IAAI,CAAC;QACH,EAAE,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAChC,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,OAAO,GAAG,CAAC,+BAAgC,CAAW,CAAC,OAAO,EAAE,CAAC,CAAC;IACpE,CAAC;IACD,MAAM,IAAI,GAAa,EAAE,CAAC;IAC1B,KAAK,MAAM,GAAG,IAAI,SAAS,CAAC,IAAI,EAAE,QAAQ,CAAC,EAAE,CAAC;QAC5C,IAAI,IAAI,CAAC,MAAM,IAAI,QAAQ;YAAE,MAAM;QACnC,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QAC5B,MAAM,OAAO,GAAG,MAAM,CAAC,CAAC,CAAC,GAAG,MAAM,IAAI,GAAG,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC;QAClD,IAAI,EAAE,CAAC;QACP,IAAI,CAAC;YACH,EAAE,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC;QACrB,CAAC;QAAC,MAAM,CAAC;YACP,SAAS;QACX,CAAC;QACD,IAAI,EAAE,CAAC,IAAI,GAAG,QAAQ;YAAE,SAAS;QACjC,IAAI,IAAY,CAAC;QACjB,IAAI,CAAC;YACH,IAAI,GAAG,YAAY,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;QACpC,CAAC;QAAC,MAAM,CAAC;YACP,SAAS;QACX,CAAC;QACD,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC;YAAE,SAAS,CAAC,cAAc;QACrD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC/B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACtC,IAAI,IAAI,CAAC,MAAM,IAAI,QAAQ;gBAAE,MAAM;YACnC,IAAI,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;gBAAE,IAAI,CAAC,IAAI,CAAC,GAAG,OAAO,IAAI,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;QACpF,CAAC;IACH,CAAC;IACD,OAAO,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC;AAC5D,CAAC"}

package/payload/platform/plugins/filesystem/mcp/dist/tools/file-list.d.ts

@@ -0,0 +1,6 @@
+import { type Ctx } from "../lib/scope.js";
+export declare function fileList(args: {
+    path?: string;
+    targetAccountId?: string;
+}, ctx: Ctx): import("../lib/result.js").ToolResult;
+//# sourceMappingURL=file-list.d.ts.map

package/payload/platform/plugins/filesystem/mcp/dist/tools/file-list.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"file-list.d.ts","sourceRoot":"","sources":["../../src/tools/file-list.ts"],"names":[],"mappings":"AACA,OAAO,EAA8B,KAAK,GAAG,EAAE,MAAM,iBAAiB,CAAC;AAGvE,wBAAgB,QAAQ,CAAC,IAAI,EAAE;IAAE,IAAI,CAAC,EAAE,MAAM,CAAC;IAAC,eAAe,CAAC,EAAE,MAAM,CAAA;CAAE,EAAE,GAAG,EAAE,GAAG,yCAkBnF"}

package/payload/platform/plugins/filesystem/mcp/dist/tools/file-list.js

@@ -0,0 +1,26 @@
+import { readdirSync } from "node:fs";
+import { resolveRoot, containedPath } from "../lib/scope.js";
+import { ok, err } from "../lib/result.js";
+export function fileList(args, ctx) {
+    const r = resolveRoot(ctx, args.targetAccountId, "file-list");
+    if ("reject" in r)
+        return err(`file-list denied: ${r.reject}`);
+    let dir;
+    try {
+        dir = args.path ? containedPath(r.root, args.path) : r.root;
+    }
+    catch {
+        return err("file-list rejected: path escapes the account directory");
+    }
+    try {
+        const rows = readdirSync(dir, { withFileTypes: true }).map((e) => {
+            const type = e.isDirectory() ? "dir" : e.isSymbolicLink() ? "symlink" : "file";
+            return `${type}\t${e.name}`;
+        });
+        return ok(rows.length ? rows.join("\n") : "(empty)");
+    }
+    catch (e) {
+        return err(`file-list: ${e.message}`);
+    }
+}
+//# sourceMappingURL=file-list.js.map

package/payload/platform/plugins/filesystem/mcp/dist/tools/file-list.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"file-list.js","sourceRoot":"","sources":["../../src/tools/file-list.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AACtC,OAAO,EAAE,WAAW,EAAE,aAAa,EAAY,MAAM,iBAAiB,CAAC;AACvE,OAAO,EAAE,EAAE,EAAE,GAAG,EAAE,MAAM,kBAAkB,CAAC;AAE3C,MAAM,UAAU,QAAQ,CAAC,IAAiD,EAAE,GAAQ;IAClF,MAAM,CAAC,GAAG,WAAW,CAAC,GAAG,EAAE,IAAI,CAAC,eAAe,EAAE,WAAW,CAAC,CAAC;IAC9D,IAAI,QAAQ,IAAI,CAAC;QAAE,OAAO,GAAG,CAAC,qBAAqB,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;IAC/D,IAAI,GAAW,CAAC;IAChB,IAAI,CAAC;QACH,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC9D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,GAAG,CAAC,wDAAwD,CAAC,CAAC;IACvE,CAAC;IACD,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,WAAW,CAAC,GAAG,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;YAC/D,MAAM,IAAI,GAAG,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC;YAC/E,OAAO,GAAG,IAAI,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC;QAC9B,CAAC,CAAC,CAAC;QACH,OAAO,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IACvD,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,OAAO,GAAG,CAAC,cAAe,CAAW,CAAC,OAAO,EAAE,CAAC,CAAC;IACnD,CAAC;AACH,CAAC"}

package/payload/platform/plugins/filesystem/mcp/dist/tools/file-read.d.ts

@@ -0,0 +1,6 @@
+import { type Ctx } from "../lib/scope.js";
+export declare function fileRead(args: {
+    path: string;
+    targetAccountId?: string;
+}, ctx: Ctx): import("../lib/result.js").ToolResult;
+//# sourceMappingURL=file-read.d.ts.map

package/payload/platform/plugins/filesystem/mcp/dist/tools/file-read.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"file-read.d.ts","sourceRoot":"","sources":["../../src/tools/file-read.ts"],"names":[],"mappings":"AACA,OAAO,EAA8B,KAAK,GAAG,EAAE,MAAM,iBAAiB,CAAC;AAKvE,wBAAgB,QAAQ,CAAC,IAAI,EAAE;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,eAAe,CAAC,EAAE,MAAM,CAAA;CAAE,EAAE,GAAG,EAAE,GAAG,yCAiBlF"}

package/payload/platform/plugins/filesystem/mcp/dist/tools/file-read.js

@@ -0,0 +1,28 @@
+import { statSync, readFileSync } from "node:fs";
+import { resolveRoot, containedPath } from "../lib/scope.js";
+import { ok, err } from "../lib/result.js";
+const MAX_FILE = 5 * 1024 * 1024; // 5 MB
+export function fileRead(args, ctx) {
+    const r = resolveRoot(ctx, args.targetAccountId, "file-read");
+    if ("reject" in r)
+        return err(`file-read denied: ${r.reject}`);
+    let abs;
+    try {
+        abs = containedPath(r.root, args.path);
+    }
+    catch {
+        return err("file-read rejected: path escapes the account directory");
+    }
+    try {
+        const st = statSync(abs);
+        if (!st.isFile())
+            return err(`file-read: not a file: ${args.path}`);
+        if (st.size > MAX_FILE)
+            return err(`file-read: file too large (${st.size} bytes, max ${MAX_FILE})`);
+        return ok(readFileSync(abs, "utf-8"));
+    }
+    catch (e) {
+        return err(`file-read: ${e.message}`);
+    }
+}
+//# sourceMappingURL=file-read.js.map

package/payload/platform/plugins/filesystem/mcp/dist/tools/file-read.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"file-read.js","sourceRoot":"","sources":["../../src/tools/file-read.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACjD,OAAO,EAAE,WAAW,EAAE,aAAa,EAAY,MAAM,iBAAiB,CAAC;AACvE,OAAO,EAAE,EAAE,EAAE,GAAG,EAAE,MAAM,kBAAkB,CAAC;AAE3C,MAAM,QAAQ,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC,CAAC,OAAO;AAEzC,MAAM,UAAU,QAAQ,CAAC,IAAgD,EAAE,GAAQ;IACjF,MAAM,CAAC,GAAG,WAAW,CAAC,GAAG,EAAE,IAAI,CAAC,eAAe,EAAE,WAAW,CAAC,CAAC;IAC9D,IAAI,QAAQ,IAAI,CAAC;QAAE,OAAO,GAAG,CAAC,qBAAqB,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;IAC/D,IAAI,GAAW,CAAC;IAChB,IAAI,CAAC;QACH,GAAG,GAAG,aAAa,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;IACzC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,GAAG,CAAC,wDAAwD,CAAC,CAAC;IACvE,CAAC;IACD,IAAI,CAAC;QACH,MAAM,EAAE,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC;QACzB,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE;YAAE,OAAO,GAAG,CAAC,0BAA0B,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;QACpE,IAAI,EAAE,CAAC,IAAI,GAAG,QAAQ;YAAE,OAAO,GAAG,CAAC,8BAA8B,EAAE,CAAC,IAAI,eAAe,QAAQ,GAAG,CAAC,CAAC;QACpG,OAAO,EAAE,CAAC,YAAY,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC,CAAC;IACxC,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,OAAO,GAAG,CAAC,cAAe,CAAW,CAAC,OAAO,EAAE,CAAC,CAAC;IACnD,CAAC;AACH,CAAC"}

package/payload/platform/plugins/filesystem/mcp/dist/tools/file-write.d.ts

@@ -0,0 +1,7 @@
+import { type Ctx } from "../lib/scope.js";
+export declare function fileWrite(args: {
+    path: string;
+    content: string;
+    targetAccountId?: string;
+}, ctx: Ctx): import("../lib/result.js").ToolResult;
+//# sourceMappingURL=file-write.d.ts.map

package/payload/platform/plugins/filesystem/mcp/dist/tools/file-write.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"file-write.d.ts","sourceRoot":"","sources":["../../src/tools/file-write.ts"],"names":[],"mappings":"AAEA,OAAO,EAA8B,KAAK,GAAG,EAAE,MAAM,iBAAiB,CAAC;AAGvE,wBAAgB,SAAS,CACvB,IAAI,EAAE;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,eAAe,CAAC,EAAE,MAAM,CAAA;CAAE,EACjE,GAAG,EAAE,GAAG,yCAiBT"}

package/payload/platform/plugins/filesystem/mcp/dist/tools/file-write.js

@@ -0,0 +1,25 @@
+import { mkdirSync, writeFileSync } from "node:fs";
+import { dirname } from "node:path";
+import { resolveRoot, containedPath } from "../lib/scope.js";
+import { ok, err } from "../lib/result.js";
+export function fileWrite(args, ctx) {
+    const r = resolveRoot(ctx, args.targetAccountId, "file-write");
+    if ("reject" in r)
+        return err(`file-write denied: ${r.reject}`);
+    let abs;
+    try {
+        abs = containedPath(r.root, args.path);
+    }
+    catch {
+        return err("file-write rejected: path escapes the account directory");
+    }
+    try {
+        mkdirSync(dirname(abs), { recursive: true });
+        writeFileSync(abs, args.content, "utf-8");
+        return ok(`wrote ${Buffer.byteLength(args.content)} bytes to ${args.path}`);
+    }
+    catch (e) {
+        return err(`file-write: ${e.message}`);
+    }
+}
+//# sourceMappingURL=file-write.js.map

package/payload/platform/plugins/filesystem/mcp/dist/tools/file-write.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"file-write.js","sourceRoot":"","sources":["../../src/tools/file-write.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,WAAW,EAAE,aAAa,EAAY,MAAM,iBAAiB,CAAC;AACvE,OAAO,EAAE,EAAE,EAAE,GAAG,EAAE,MAAM,kBAAkB,CAAC;AAE3C,MAAM,UAAU,SAAS,CACvB,IAAiE,EACjE,GAAQ;IAER,MAAM,CAAC,GAAG,WAAW,CAAC,GAAG,EAAE,IAAI,CAAC,eAAe,EAAE,YAAY,CAAC,CAAC;IAC/D,IAAI,QAAQ,IAAI,CAAC;QAAE,OAAO,GAAG,CAAC,sBAAsB,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;IAChE,IAAI,GAAW,CAAC;IAChB,IAAI,CAAC;QACH,GAAG,GAAG,aAAa,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;IACzC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,GAAG,CAAC,yDAAyD,CAAC,CAAC;IACxE,CAAC;IACD,IAAI,CAAC;QACH,SAAS,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC7C,aAAa,CAAC,GAAG,EAAE,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAC1C,OAAO,EAAE,CAAC,SAAS,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,aAAa,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;IAC9E,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,OAAO,GAAG,CAAC,eAAgB,CAAW,CAAC,OAAO,EAAE,CAAC,CAAC;IACpD,CAAC;AACH,CAAC"}

package/payload/platform/plugins/filesystem/mcp/package.json

@@ -0,0 +1,21 @@
+{
+  "name": "@maxy/filesystem",
+  "version": "0.1.0",
+  "private": true,
+  "type": "module",
+  "main": "dist/index.js",
+  "scripts": {
+    "build": "tsc",
+    "start": "node dist/index.js",
+    "test": "vitest run"
+  },
+  "dependencies": {
+    "@modelcontextprotocol/sdk": "^1.12.1",
+    "zod": "^3.24.0"
+  },
+  "devDependencies": {
+    "typescript": "^5.7.0",
+    "@types/node": "^22.0.0",
+    "vitest": "^2.0.0"
+  }
+}

package/payload/platform/plugins/filesystem/mcp/vitest.config.ts

@@ -0,0 +1,8 @@
+import { defineConfig } from "vitest/config";
+
+export default defineConfig({
+  test: {
+    include: ["src/**/__tests__/**/*.test.ts"],
+    environment: "node",
+  },
+});

package/payload/platform/plugins/memory/PLUGIN.md

@@ -185,6 +185,14 @@ Writes targeting `:Person`, `:UserProfile`, `:AdminUser`, `:Organization`, `:Loc
 
 - **Direct-ask path — `SESSION_NODE_ID` env-stamp.** When `producedByTaskId` is not provided (typical of direct admin asks like "add Anneke as person"), `memory-write` falls back to the `SESSION_NODE_ID` env var. The admin server stamps it at PTY spawn time on both admin sessions and on the specialist subagent spawns the admin dispatches (listing-curator, content-producer, database-operator and friends inherit the same anchor). The value is the `sessionId` UUID of the active `:AdminConversation`; the wrapper's `injectConversationProvenance` MATCHes `(c:Conversation {sessionId, accountId})` so account isolation is enforced inside the natural key — a cross-account stamp returns zero rows and never injects. Autonomous spawns with no parent conversation (cron, scheduled-task) legitimately have no env-stamp; those must thread `producedByTaskId` via `work-create` instead. The env-stamp is invisible to the agent (no schema field changes); the LLM never decides whether to use it.
 
+## Cross-account access (house admin) — `targetAccountId`
+
+The memory tools whose Neo4j read/write re-scopes on the resolved account accept an optional `targetAccountId`. A house-scoped `role:admin` session sets it to read or write a **sub-account's** subgraph instead of its own; omitting it is byte-identical to the pre-existing own-account behaviour. Only a house-scoped session may set it: a sub-account or public session that passes `targetAccountId` is rejected `cross-account-denied`, and a house session naming an account that does not exist on this install is rejected `cross-account-invalid-target`. Resolution runs through the shared `resolveEffectiveAccount` primitive — there is no house fallback and no local re-implementation. Each call that sets `targetAccountId` emits one `[xacct] op=call tool=<t> caller=<own8> target=<tgt8> houseScope=<bool> decision=<allow|deny> reason=<…>` line before the graph call, and the tool's own `[memory-<t>] [<accountId>]` line prints the resolved (target) id as a wrong-subgraph cross-check.
+
+`profile-read/update/delete` also take `targetAccountId`. They key on `userId` as well as `accountId`, so cross-account they cannot use the caller's boot `USER_ID` (a house operator has no node in the sub-account subgraph). Instead they resolve the target sub-account's **owner** `AdminUser` — the single identity seeded per account (`role:"owner"`, one per account) — and attribute the read/write to it, emitting `[xacct] op=identity tool=profile-* target=<sub8> resolved-userId=<owner8>`. A target with no owner `AdminUser` is rejected loudly (never a wrong-identity write). `profile-update` bootstraps the owner's `UserProfile` on this path so a preference-only write lands. This covers preferences and every `profileFields` value (name via `givenName`/`familyName`, `role`, `timezone`, `locale`, `expertise`); no `Person` node or PIN is required. Setting `personFields` identity (email/telephone → the owner `Person`) cross-account is deferred and keeps loud-failing until then.
+
+Tools that do **not** take `targetAccountId` fall into three groups. **Not account-scoped:** `image-fetch` fetches image bytes by URL; `graph-prune-denylist-add/remove/list` mutate a brand-global deny-list; `memory-ingest-extract` stages a temp file — none read or write a sub-account subgraph. **Bound to the caller's own live session:** `session-compact` compacts the caller's `SESSION_ID` Conversation, which belongs to the house account the operator sits in — re-scoping `accountId` to a sub-account matches nothing and "compact a sub-account's live session" has no referent. **Scheduled, not interactive:** the dream-cycle **cron** (`lib/dream-cycle/*`) takes its account from the scheduler context, not a tool argument; only the interactive `memory-dream-run` tool is house-targetable. These tools keep their own-account no-account guard.
+
 ## Graph Hygiene
 
 Graph hygiene is **agent-directed, case by case** — no autonomous rule engine, no cron. The Neo4j graph degrades into a landfill if pollution from prior agent errors (wrong-account hostnames, fabricated identifiers, raw monologue dumps) is allowed to compound. Cleanup happens when the admin agent observes a match against the operator-curated deny-list (or the user directly asks) and applies discretion using `memory-update`, `memory-delete`, or `conversation-memory-expunge`.

package/payload/platform/plugins/memory/mcp/dist/index-testable.d.ts

@@ -0,0 +1,34 @@
+type RejectContent = {
+    content: {
+        type: "text";
+        text: string;
+    }[];
+    isError: true;
+};
+export type ToolAccount = {
+    accountId: string;
+} | {
+    reject: RejectContent;
+};
+/**
+ * Build the per-tool account resolver. `accountId` / `houseScope` are the boot
+ * constants; `isValid` is injected (from `enumerateValidAccountIds(accountsDir)`
+ * in production, a stub in tests). Returns a closure the tool handlers call with
+ * their optional `targetAccountId`.
+ *
+ * Contract:
+ *  - null boot `accountId` → refuse (no-account guard, unchanged behaviour).
+ *  - no `targetAccountId`  → own account, no `[xacct]` line (byte-identical).
+ *  - `targetAccountId` set → resolve via the shared 1440 resolver, emit one
+ *    `[xacct]` line, and on reject return the MCP error content.
+ * `houseScope=false decision=allow` cannot occur: a non-house session with a
+ * target is denied by the resolver before any allow path.
+ */
+export declare function makeResolveToolAccount(deps: {
+    accountId: string | null;
+    houseScope: string | null;
+    isValid: (id: string) => boolean;
+    log?: (line: string) => void;
+}): (toolName: string, targetAccountId?: string | null) => ToolAccount;
+export {};
+//# sourceMappingURL=index-testable.d.ts.map

package/payload/platform/plugins/memory/mcp/dist/index-testable.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index-testable.d.ts","sourceRoot":"","sources":["../src/index-testable.ts"],"names":[],"mappings":"AAQA,KAAK,aAAa,GAAG;IAAE,OAAO,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;IAAC,OAAO,EAAE,IAAI,CAAA;CAAE,CAAC;AAClF,MAAM,MAAM,WAAW,GAAG;IAAE,SAAS,EAAE,MAAM,CAAA;CAAE,GAAG;IAAE,MAAM,EAAE,aAAa,CAAA;CAAE,CAAC;AAuB5E;;;;;;;;;;;;;GAaG;AACH,wBAAgB,sBAAsB,CAAC,IAAI,EAAE;IAC3C,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,OAAO,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC;IACjC,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;CAC9B,GAAG,CAAC,QAAQ,EAAE,MAAM,EAAE,eAAe,CAAC,EAAE,MAAM,GAAG,IAAI,KAAK,WAAW,CA0BrE"}