@rubytech/create-maxy-code 0.1.411 → 0.1.414

package/payload/platform/plugins/memory/mcp/dist/index-testable.js

@@ -0,0 +1,60 @@
+// Pure, side-effect-free cross-account seam for the memory MCP plugin.
+//
+// Split out of index.ts so unit tests can exercise the resolution + [xacct]
+// logging without importing index.ts, which has stdio side effects at module
+// load (stderr tee, MCP server construction, schema load that throws on a
+// broken sidecar). Task 1455.
+import { resolveEffectiveAccountCore } from "../../../../lib/account-scope/dist/index.js";
+function errContent(text) {
+    return { content: [{ type: "text", text }], isError: true };
+}
+/** Preserve the exact wording of index.ts's `refuseNoAccount` so a metadata-only
+ *  spawn (no ACCOUNT_ID) returns the same message it always has. */
+function noAccountText(toolName) {
+    return (`${toolName} cannot execute: this MCP instance was launched without ACCOUNT_ID ` +
+        `(plugin-system metadata-only mode). Per-account graph access requires ACCOUNT_ID at spawn.`);
+}
+/** Operator-facing reject messages. Each CONTAINS its reject code so the
+ *  reason is greppable and the agent sees why the call was refused. */
+function rejectText(reason, target8) {
+    return reason === "cross-account-denied"
+        ? `cross-account-denied: only a house-scoped admin session may set targetAccountId.`
+        : `cross-account-invalid-target: "${target8}…" is not a valid account on this install.`;
+}
+/**
+ * Build the per-tool account resolver. `accountId` / `houseScope` are the boot
+ * constants; `isValid` is injected (from `enumerateValidAccountIds(accountsDir)`
+ * in production, a stub in tests). Returns a closure the tool handlers call with
+ * their optional `targetAccountId`.
+ *
+ * Contract:
+ *  - null boot `accountId` → refuse (no-account guard, unchanged behaviour).
+ *  - no `targetAccountId`  → own account, no `[xacct]` line (byte-identical).
+ *  - `targetAccountId` set → resolve via the shared 1440 resolver, emit one
+ *    `[xacct]` line, and on reject return the MCP error content.
+ * `houseScope=false decision=allow` cannot occur: a non-house session with a
+ * target is denied by the resolver before any allow path.
+ */
+export function makeResolveToolAccount(deps) {
+    const write = deps.log ?? ((l) => void process.stderr.write(l));
+    return (toolName, targetAccountId) => {
+        if (!deps.accountId) {
+            // Preserve the greppable no-account diagnostic the old refuseNoAccount wrote.
+            write(`[memory] tool=${toolName} refuse reason=no-account-context\n`);
+            return { reject: errContent(noAccountText(toolName)) };
+        }
+        const eff = resolveEffectiveAccountCore({ ownAccountId: deps.accountId, houseScope: deps.houseScope, targetAccountId }, deps.isValid);
+        if (targetAccountId) {
+            const decision = "reject" in eff ? "deny" : "allow";
+            const reason = "reject" in eff ? eff.reject : "ok";
+            write(`[xacct] op=call tool=${toolName} caller=${deps.accountId.slice(0, 8)} ` +
+                `target=${targetAccountId.slice(0, 8)} houseScope=${deps.houseScope ? "true" : "false"} ` +
+                `decision=${decision} reason=${reason}\n`);
+        }
+        if ("reject" in eff) {
+            return { reject: errContent(rejectText(eff.reject, (targetAccountId ?? "").slice(0, 8))) };
+        }
+        return { accountId: eff.accountId };
+    };
+}
+//# sourceMappingURL=index-testable.js.map

package/payload/platform/plugins/memory/mcp/dist/index-testable.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index-testable.js","sourceRoot":"","sources":["../src/index-testable.ts"],"names":[],"mappings":"AAAA,uEAAuE;AACvE,EAAE;AACF,4EAA4E;AAC5E,6EAA6E;AAC7E,0EAA0E;AAC1E,8BAA8B;AAC9B,OAAO,EAAE,2BAA2B,EAAE,MAAM,6CAA6C,CAAC;AAK1F,SAAS,UAAU,CAAC,IAAY;IAC9B,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,CAAC,EAAE,OAAO,EAAE,IAAa,EAAE,CAAC;AAChF,CAAC;AAED;oEACoE;AACpE,SAAS,aAAa,CAAC,QAAgB;IACrC,OAAO,CACL,GAAG,QAAQ,qEAAqE;QAChF,4FAA4F,CAC7F,CAAC;AACJ,CAAC;AAED;uEACuE;AACvE,SAAS,UAAU,CAAC,MAA+D,EAAE,OAAe;IAClG,OAAO,MAAM,KAAK,sBAAsB;QACtC,CAAC,CAAC,kFAAkF;QACpF,CAAC,CAAC,kCAAkC,OAAO,4CAA4C,CAAC;AAC5F,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,sBAAsB,CAAC,IAKtC;IACC,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC,CAAS,EAAE,EAAE,CAAC,KAAK,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IACxE,OAAO,CAAC,QAAQ,EAAE,eAAe,EAAE,EAAE;QACnC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;YACpB,8EAA8E;YAC9E,KAAK,CAAC,iBAAiB,QAAQ,qCAAqC,CAAC,CAAC;YACtE,OAAO,EAAE,MAAM,EAAE,UAAU,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC;QACzD,CAAC;QACD,MAAM,GAAG,GAAG,2BAA2B,CACrC,EAAE,YAAY,EAAE,IAAI,CAAC,SAAS,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,eAAe,EAAE,EAC9E,IAAI,CAAC,OAAO,CACb,CAAC;QACF,IAAI,eAAe,EAAE,CAAC;YACpB,MAAM,QAAQ,GAAG,QAAQ,IAAI,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC;YACpD,MAAM,MAAM,GAAG,QAAQ,IAAI,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC;YACnD,KAAK,CACH,wBAAwB,QAAQ,WAAW,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG;gBACtE,UAAU,eAAe,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,eAAe,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,GAAG;gBACzF,YAAY,QAAQ,WAAW,MAAM,IAAI,CAC5C,CAAC;QACJ,CAAC;QACD,IAAI,QAAQ,IAAI,GAAG,EAAE,CAAC;YACpB,OAAO,EAAE,MAAM,EAAE,UAAU,CAAC,UAAU,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC,eAAe,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7F,CAAC;QACD,OAAO,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,CAAC;IACtC,CAAC,CAAC;AACJ,CAAC"}