@rubytech/create-maxy-code 0.1.459 → 0.1.460

package/payload/platform/plugins/voice-mirror/mcp/dist/tools/voice-ingest-session-text.js.map

@@ -1 +1 @@
-{"version":3,"file":"voice-ingest-session-text.js","sourceRoot":"","sources":["../../src/tools/voice-ingest-session-text.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AACH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAC7C,OAAO,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AAe/D;;;;GAIG;AACH,MAAM,UAAU,kBAAkB,CAAC,IAAa;IAC9C,IAAI,OAAO,IAAI,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC1C,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;IAC5B,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACtC,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC,CAAC,gBAAgB;IAC1D,IAAI,OAAO,CAAC,QAAQ,CAAC,mBAAmB,CAAC;QAAE,OAAO,IAAI,CAAC,CAAC,oBAAoB;IAC5E,IAAI,OAAO,CAAC,MAAM,IAAI,IAAI;QAAE,OAAO,IAAI,CAAC,CAAC,cAAc;IACvD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,MAAoC;IAEpC,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,GAAG,IAAI,EAAE,GAAG,MAAM,CAAC;IAE9D,IAAI,CAAC,SAAS,IAAI,CAAC,MAAM,EAAE,CAAC;QAC1B,MAAM,IAAI,KAAK,CAAC,0DAA0D,CAAC,CAAC;IAC9E,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAC1B,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;IACrE,CAAC;IAED,2DAA2D;IAC3D,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,IAAI,GAAG,kBAAkB,CAAC,IAAI,CAAC,CAAC;QACtC,IAAI,IAAI,KAAK,IAAI;YAAE,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACzC,CAAC;IAED,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1B,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,yCAAyC,SAAS,IAAI,SAAS,cAAc,MAAM,oBAAoB,CACxG,CAAC;QACF,OAAO,EAAE,aAAa,EAAE,CAAC,EAAE,YAAY,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC;IAC1D,CAAC;IAED,iFAAiF;IACjF,MAAM,OAAO,GAAG,UAAU,EAAE,CAAC;IAC7B,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACrC,IAAI,aAAa,GAAG,CAAC,CAAC;IACtB,IAAI,YAAY,GAAG,CAAC,CAAC;IACrB,IAAI,UAAU,GAAG,CAAC,CAAC;IAEnB,IAAI,CAAC;QACH,KAAK,MAAM,IAAI,IAAI,QAAQ,EAAE,CAAC;YAC5B,MAAM,WAAW,GAAG,UAAU,CAAC,QAAQ,CAAC;iBACrC,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC;iBACrB,MAAM,CAAC,KAAK,CAAC,CAAC;YAEjB,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,GAAG,CAC9B;;;;;;;;;;;;;4CAaoC,EACpC;gBACE,SAAS;gBACT,MAAM;gBACN,WAAW;gBACX,IAAI;gBACJ,GAAG;gBACH,SAAS;aACV,CACF,CAAC;YAEF,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAChC,yDAAyD;gBACzD,MAAM,IAAI,KAAK,CACb,qDAAqD,SAAS,cAAc,MAAM,iFAAiF,CACpK,CAAC;YACJ,CAAC;YAED,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,IAAI,CAAC;YACtD,IAAI,KAAK,EAAE,CAAC;gBACV,aAAa,EAAE,CAAC;gBAChB,UAAU,IAAI,IAAI,CAAC,MAAM,CAAC;YAC5B,CAAC;iBAAM,CAAC;gBACN,YAAY,EAAE,CAAC;YACjB,CAAC;QACH,CAAC;IACH,CAAC;YAAS,CAAC;QACT,MAAM,OAAO,CAAC,KAAK,EAAE,CAAC;IACxB,CAAC;IAED,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,yCAAyC,SAAS,IAAI,SAAS,cAAc,MAAM,UAAU,aAAa,UAAU,UAAU,YAAY,YAAY,IAAI,CAC3J,CAAC;IAEF,8EAA8E;IAC9E,IAAI,aAAa,GAAG,CAAC,EAAE,CAAC;QACtB,IAAI,CAAC;YACH,MAAM,kBAAkB,CAAC,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;QAClE,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,2CAA2C;YAC3C,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,0DAA0D,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAC/G,CAAC;QACJ,CAAC;IACH,CAAC;IAED,OAAO,EAAE,aAAa,EAAE,YAAY,EAAE,SAAS,EAAE,CAAC;AACpD,CAAC"}
+{"version":3,"file":"voice-ingest-session-text.js","sourceRoot":"","sources":["../../src/tools/voice-ingest-session-text.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AACH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAC7C,OAAO,EAAE,uBAAuB,EAAE,MAAM,sBAAsB,CAAC;AAC/D,OAAO,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AAe/D;;;;GAIG;AACH,MAAM,UAAU,kBAAkB,CAAC,IAAa;IAC9C,IAAI,OAAO,IAAI,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC1C,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;IAC5B,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACtC,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC,CAAC,gBAAgB;IAC1D,IAAI,OAAO,CAAC,QAAQ,CAAC,mBAAmB,CAAC;QAAE,OAAO,IAAI,CAAC,CAAC,oBAAoB;IAC5E,IAAI,OAAO,CAAC,MAAM,IAAI,IAAI;QAAE,OAAO,IAAI,CAAC,CAAC,cAAc;IACvD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,MAAoC;IAEpC,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,GAAG,IAAI,EAAE,GAAG,MAAM,CAAC;IAE9D,IAAI,CAAC,SAAS,IAAI,CAAC,MAAM,EAAE,CAAC;QAC1B,MAAM,IAAI,KAAK,CAAC,0DAA0D,CAAC,CAAC;IAC9E,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAC1B,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;IACrE,CAAC;IAED,2DAA2D;IAC3D,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,IAAI,GAAG,kBAAkB,CAAC,IAAI,CAAC,CAAC;QACtC,IAAI,IAAI,KAAK,IAAI;YAAE,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACzC,CAAC;IAED,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1B,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,yCAAyC,SAAS,IAAI,SAAS,cAAc,MAAM,oBAAoB,CACxG,CAAC;QACF,OAAO,EAAE,aAAa,EAAE,CAAC,EAAE,YAAY,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC;IAC1D,CAAC;IAED,iFAAiF;IACjF,MAAM,OAAO,GAAG,UAAU,EAAE,CAAC;IAC7B,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACrC,IAAI,aAAa,GAAG,CAAC,CAAC;IACtB,IAAI,YAAY,GAAG,CAAC,CAAC;IACrB,IAAI,UAAU,GAAG,CAAC,CAAC;IAEnB,IAAI,CAAC;QACH,KAAK,MAAM,IAAI,IAAI,QAAQ,EAAE,CAAC;YAC5B,MAAM,WAAW,GAAG,UAAU,CAAC,QAAQ,CAAC;iBACrC,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC;iBACrB,MAAM,CAAC,KAAK,CAAC,CAAC;YAEjB,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,GAAG,CAC9B;;;;;;;;;;;;;4CAaoC,EACpC;gBACE,SAAS;gBACT,MAAM;gBACN,WAAW;gBACX,IAAI;gBACJ,GAAG;gBACH,SAAS;aACV,CACF,CAAC;YAEF,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAChC,yDAAyD;gBACzD,MAAM,IAAI,KAAK,CACb,uBAAuB,CAAC,2BAA2B,EAAE,MAAM,EAAE,SAAS,CAAC,CACxE,CAAC;YACJ,CAAC;YAED,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,IAAI,CAAC;YACtD,IAAI,KAAK,EAAE,CAAC;gBACV,aAAa,EAAE,CAAC;gBAChB,UAAU,IAAI,IAAI,CAAC,MAAM,CAAC;YAC5B,CAAC;iBAAM,CAAC;gBACN,YAAY,EAAE,CAAC;YACjB,CAAC;QACH,CAAC;IACH,CAAC;YAAS,CAAC;QACT,MAAM,OAAO,CAAC,KAAK,EAAE,CAAC;IACxB,CAAC;IAED,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,yCAAyC,SAAS,IAAI,SAAS,cAAc,MAAM,UAAU,aAAa,UAAU,UAAU,YAAY,YAAY,IAAI,CAC3J,CAAC;IAEF,8EAA8E;IAC9E,IAAI,aAAa,GAAG,CAAC,EAAE,CAAC;QACtB,IAAI,CAAC;YACH,MAAM,kBAAkB,CAAC,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;QAClE,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,2CAA2C;YAC3C,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,0DAA0D,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAC/G,CAAC;QACJ,CAAC;IACH,CAAC;IAED,OAAO,EAAE,aAAa,EAAE,YAAY,EAAE,SAAS,EAAE,CAAC;AACpD,CAAC"}

package/payload/platform/plugins/voice-mirror/mcp/dist/tools/voice-record-feedback.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"voice-record-feedback.d.ts","sourceRoot":"","sources":["../../src/tools/voice-record-feedback.ts"],"names":[],"mappings":"AAmBA,OAAO,EAEL,KAAK,WAAW,EAChB,KAAK,UAAU,EAChB,MAAM,wBAAwB,CAAC;AAEhC,MAAM,WAAW,yBAAyB;IACxC,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,MAAM,CAAC;IACnB;;;OAGG;IACH,MAAM,EAAE,WAAW,CAAC;IACpB;;;;OAIG;IACH,KAAK,CAAC,EAAE,UAAU,CAAC;IACnB;;;;;;OAMG;IACH,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE;QACR,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,KAAK,CAAC,EAAE,MAAM,CAAC;KAChB,CAAC;CACH;AAED,MAAM,WAAW,yBAAyB;IACxC,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,OAAO,CAAC;CACrB;AAED,wBAAsB,mBAAmB,CACvC,MAAM,EAAE,yBAAyB,GAChC,OAAO,CAAC,yBAAyB,CAAC,CAmFpC"}
+{"version":3,"file":"voice-record-feedback.d.ts","sourceRoot":"","sources":["../../src/tools/voice-record-feedback.ts"],"names":[],"mappings":"AAoBA,OAAO,EAEL,KAAK,WAAW,EAChB,KAAK,UAAU,EAChB,MAAM,wBAAwB,CAAC;AAEhC,MAAM,WAAW,yBAAyB;IACxC,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,MAAM,CAAC;IACnB;;;OAGG;IACH,MAAM,EAAE,WAAW,CAAC;IACpB;;;;OAIG;IACH,KAAK,CAAC,EAAE,UAAU,CAAC;IACnB;;;;;;OAMG;IACH,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE;QACR,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,KAAK,CAAC,EAAE,MAAM,CAAC;KAChB,CAAC;CACH;AAED,MAAM,WAAW,yBAAyB;IACxC,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,OAAO,CAAC;CACrB;AAED,wBAAsB,mBAAmB,CACvC,MAAM,EAAE,yBAAyB,GAChC,OAAO,CAAC,yBAAyB,CAAC,CAmFpC"}

package/payload/platform/plugins/voice-mirror/mcp/dist/tools/voice-record-feedback.js

@@ -17,6 +17,7 @@
  */
 import { randomUUID } from "node:crypto";
 import { getSession } from "../lib/neo4j.js";
+import { unknownAdminUserMessage } from "../lib/admin-user.js";
 import { profileUserIdForScope, } from "../lib/voice-corpus.js";
 export async function voiceRecordFeedback(params) {
     const { accountId, userId, originalText, editedText, format, intent: rawIntent, context } = params;
@@ -80,7 +81,7 @@ export async function voiceRecordFeedback(params) {
             brief: context?.brief ?? null,
         });
         if (result.records.length === 0) {
-            throw new Error(`voice-mirror: :AdminUser {accountId='${accountId}', userId='${userId}'} not found. Onboarding must promote the operator to :AdminUser before feedback can be recorded.`);
+            throw new Error(unknownAdminUserMessage("voice-record-feedback", userId, accountId));
         }
         const hadProfile = result.records[0].get("hadProfile") === true;
         process.stderr.write(`[voice-record-feedback] scope=${scope} userId=${profileUserId} format=${format} intent="${cappedIntent.replace(/"/g, "'")}" diffBytes=${editedText.length - originalText.length}\n`);

package/payload/platform/plugins/voice-mirror/mcp/dist/tools/voice-record-feedback.js.map

@@ -1 +1 @@
-{"version":3,"file":"voice-record-feedback.js","sourceRoot":"","sources":["../../src/tools/voice-record-feedback.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AACH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAC7C,OAAO,EACL,qBAAqB,GAGtB,MAAM,wBAAwB,CAAC;AAuChC,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,MAAiC;IAEjC,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,GAAG,MAAM,CAAC;IACnG,MAAM,KAAK,GAAe,MAAM,CAAC,KAAK,IAAI,UAAU,CAAC;IACrD,MAAM,aAAa,GAAG,qBAAqB,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;IAC3D,IAAI,CAAC,SAAS,IAAI,CAAC,MAAM,EAAE,CAAC;QAC1B,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAC;IAC1E,CAAC;IACD,IAAI,CAAC,YAAY,IAAI,CAAC,UAAU,EAAE,CAAC;QACjC,MAAM,IAAI,KAAK,CAAC,6DAA6D,CAAC,CAAC;IACjF,CAAC;IACD,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;IAC/D,CAAC;IACD,MAAM,MAAM,GAAG,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IACxC,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,IAAI,KAAK,CACb,mHAAmH,CACpH,CAAC;IACJ,CAAC;IAED,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;IAC5B,MAAM,UAAU,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC5C,MAAM,YAAY,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IAE1C,MAAM,OAAO,GAAG,UAAU,EAAE,CAAC;IAC7B,IAAI,CAAC;QACH,sEAAsE;QACtE,6EAA6E;QAC7E,4EAA4E;QAC5E,wEAAwE;QACxE,wEAAwE;QACxE,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,GAAG,CAC9B;;;;;;;;;;;;;;;;;;;;oEAoB8D,EAC9D;YACE,SAAS;YACT,MAAM;YACN,aAAa;YACb,KAAK;YACL,MAAM;YACN,MAAM;YACN,YAAY;YACZ,UAAU;YACV,MAAM,EAAE,YAAY;YACpB,UAAU;YACV,KAAK,EAAE,OAAO,EAAE,KAAK,IAAI,IAAI;YAC7B,KAAK,EAAE,OAAO,EAAE,KAAK,IAAI,IAAI;SAC9B,CACF,CAAC;QACF,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAChC,MAAM,IAAI,KAAK,CACb,wCAAwC,SAAS,cAAc,MAAM,mGAAmG,CACzK,CAAC;QACJ,CAAC;QACD,MAAM,UAAU,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,YAAY,CAAC,KAAK,IAAI,CAAC;QAEhE,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,iCAAiC,KAAK,WAAW,aAAa,WAAW,MAAM,YAAY,YAAY,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,eAAe,UAAU,CAAC,MAAM,GAAG,YAAY,CAAC,MAAM,IAAI,CACrL,CAAC;QAEF,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,YAAY,EAAE,UAAU,EAAE,UAAU,EAAE,CAAC;IAClE,CAAC;YAAS,CAAC;QACT,MAAM,OAAO,CAAC,KAAK,EAAE,CAAC;IACxB,CAAC;AACH,CAAC"}
+{"version":3,"file":"voice-record-feedback.js","sourceRoot":"","sources":["../../src/tools/voice-record-feedback.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AACH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAC7C,OAAO,EAAE,uBAAuB,EAAE,MAAM,sBAAsB,CAAC;AAC/D,OAAO,EACL,qBAAqB,GAGtB,MAAM,wBAAwB,CAAC;AAuChC,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,MAAiC;IAEjC,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,GAAG,MAAM,CAAC;IACnG,MAAM,KAAK,GAAe,MAAM,CAAC,KAAK,IAAI,UAAU,CAAC;IACrD,MAAM,aAAa,GAAG,qBAAqB,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;IAC3D,IAAI,CAAC,SAAS,IAAI,CAAC,MAAM,EAAE,CAAC;QAC1B,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAC;IAC1E,CAAC;IACD,IAAI,CAAC,YAAY,IAAI,CAAC,UAAU,EAAE,CAAC;QACjC,MAAM,IAAI,KAAK,CAAC,6DAA6D,CAAC,CAAC;IACjF,CAAC;IACD,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;IAC/D,CAAC;IACD,MAAM,MAAM,GAAG,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IACxC,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,IAAI,KAAK,CACb,mHAAmH,CACpH,CAAC;IACJ,CAAC;IAED,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;IAC5B,MAAM,UAAU,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC5C,MAAM,YAAY,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IAE1C,MAAM,OAAO,GAAG,UAAU,EAAE,CAAC;IAC7B,IAAI,CAAC;QACH,sEAAsE;QACtE,6EAA6E;QAC7E,4EAA4E;QAC5E,wEAAwE;QACxE,wEAAwE;QACxE,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,GAAG,CAC9B;;;;;;;;;;;;;;;;;;;;oEAoB8D,EAC9D;YACE,SAAS;YACT,MAAM;YACN,aAAa;YACb,KAAK;YACL,MAAM;YACN,MAAM;YACN,YAAY;YACZ,UAAU;YACV,MAAM,EAAE,YAAY;YACpB,UAAU;YACV,KAAK,EAAE,OAAO,EAAE,KAAK,IAAI,IAAI;YAC7B,KAAK,EAAE,OAAO,EAAE,KAAK,IAAI,IAAI;SAC9B,CACF,CAAC;QACF,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAChC,MAAM,IAAI,KAAK,CACb,uBAAuB,CAAC,uBAAuB,EAAE,MAAM,EAAE,SAAS,CAAC,CACpE,CAAC;QACJ,CAAC;QACD,MAAM,UAAU,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,YAAY,CAAC,KAAK,IAAI,CAAC;QAEhE,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,iCAAiC,KAAK,WAAW,aAAa,WAAW,MAAM,YAAY,YAAY,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,eAAe,UAAU,CAAC,MAAM,GAAG,YAAY,CAAC,MAAM,IAAI,CACrL,CAAC;QAEF,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,YAAY,EAAE,UAAU,EAAE,UAAU,EAAE,CAAC;IAClE,CAAC;YAAS,CAAC;QACT,MAAM,OAAO,CAAC,KAAK,EAAE,CAAC;IACxB,CAAC;AACH,CAAC"}

package/payload/platform/plugins/voice-mirror/mcp/dist/tools/voice-tag-content.d.ts

@@ -4,8 +4,8 @@ export declare const AUTHORSHIP_MODES: ReadonlySet<AuthorshipMode>;
 /**
  * Resolve the corpus author for a tag write (Task 676). An explicit, non-blank
  * `author` wins; otherwise the tagging operator's `userId`. Throws when neither
- * is available (no `author` argument and no `ADMIN_USER_ID` in spawn env), so a
- * tag can never silently land with a null author.
+ * is available (no `author` argument and no `USER_ID` in spawn env), so a tag
+ * can never silently land with a null author.
  *
  * This is why single-operator accounts get personal attribution for free: with
  * `author` omitted, the sole operator is the implicit author, so their personal

package/payload/platform/plugins/voice-mirror/mcp/dist/tools/voice-tag-content.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"voice-tag-content.d.ts","sourceRoot":"","sources":["../../src/tools/voice-tag-content.ts"],"names":[],"mappings":"AAeA,OAAO,EAGL,KAAK,WAAW,EACjB,MAAM,wBAAwB,CAAC;AAEhC,MAAM,MAAM,cAAc,GACtB,YAAY,GACZ,0BAA0B,GAC1B,0BAA0B,GAC1B,YAAY,GACZ,SAAS,CAAC;AAEd,eAAO,MAAM,gBAAgB,EAAE,WAAW,CAAC,cAAc,CAMvD,CAAC;AAEH;;;;;;;;;GASG;AACH,wBAAgB,kBAAkB,CAChC,MAAM,EAAE,MAAM,GAAG,SAAS,EAC1B,cAAc,EAAE,MAAM,GAAG,IAAI,GAC5B,MAAM,CAOR;AAED,MAAM,WAAW,qBAAqB;IACpC,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,IAAI,EAAE,cAAc,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,+EAA+E;IAC/E,MAAM,EAAE,WAAW,CAAC;IACpB;;;;;OAKG;IACH,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,qBAAqB;IACpC,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,cAAc,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACxC;AAED,wBAAsB,eAAe,CACnC,MAAM,EAAE,qBAAqB,GAC5B,OAAO,CAAC,qBAAqB,CAAC,CAmGhC"}
+{"version":3,"file":"voice-tag-content.d.ts","sourceRoot":"","sources":["../../src/tools/voice-tag-content.ts"],"names":[],"mappings":"AAgBA,OAAO,EAGL,KAAK,WAAW,EACjB,MAAM,wBAAwB,CAAC;AAEhC,MAAM,MAAM,cAAc,GACtB,YAAY,GACZ,0BAA0B,GAC1B,0BAA0B,GAC1B,YAAY,GACZ,SAAS,CAAC;AAEd,eAAO,MAAM,gBAAgB,EAAE,WAAW,CAAC,cAAc,CAMvD,CAAC;AAEH;;;;;;;;;GASG;AACH,wBAAgB,kBAAkB,CAChC,MAAM,EAAE,MAAM,GAAG,SAAS,EAC1B,cAAc,EAAE,MAAM,GAAG,IAAI,GAC5B,MAAM,CAOR;AAED,MAAM,WAAW,qBAAqB;IACpC,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,IAAI,EAAE,cAAc,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,+EAA+E;IAC/E,MAAM,EAAE,WAAW,CAAC;IACpB;;;;;OAKG;IACH,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,qBAAqB;IACpC,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,cAAc,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACxC;AAED,wBAAsB,eAAe,CACnC,MAAM,EAAE,qBAAqB,GAC5B,OAAO,CAAC,qBAAqB,CAAC,CA2GhC"}

package/payload/platform/plugins/voice-mirror/mcp/dist/tools/voice-tag-content.js

@@ -13,6 +13,7 @@
  * `:Message` rows where the operator is not in the loop (Task 471).
  */
 import { getSession } from "../lib/neo4j.js";
+import { assertAdminUserOnAccount } from "../lib/admin-user.js";
 import { TAGGABLE_PRIMARY_LABELS, FORMAT_VALUES, } from "../lib/voice-corpus.js";
 export const AUTHORSHIP_MODES = new Set([
     "human-only",
@@ -24,8 +25,8 @@ export const AUTHORSHIP_MODES = new Set([
 /**
  * Resolve the corpus author for a tag write (Task 676). An explicit, non-blank
  * `author` wins; otherwise the tagging operator's `userId`. Throws when neither
- * is available (no `author` argument and no `ADMIN_USER_ID` in spawn env), so a
- * tag can never silently land with a null author.
+ * is available (no `author` argument and no `USER_ID` in spawn env), so a tag
+ * can never silently land with a null author.
  *
  * This is why single-operator accounts get personal attribution for free: with
  * `author` omitted, the sole operator is the implicit author, so their personal
@@ -37,7 +38,7 @@ export function resolveVoiceAuthor(author, operatorUserId) {
         return explicit;
     if (operatorUserId)
         return operatorUserId;
-    throw new Error("voice-tag-content: author required — no ADMIN_USER_ID in spawn env and no author given.");
+    throw new Error("voice-tag-content: author required — no USER_ID in spawn env and no author given.");
 }
 export async function voiceTagContent(params) {
     const { nodeIds, mode, accountId, format, voiceAuthor } = params;
@@ -64,6 +65,14 @@ export async function voiceTagContent(params) {
     if (!voiceAuthor) {
         throw new Error("voice-tag-content: voiceAuthor is required (resolve via resolveVoiceAuthor before calling).");
     }
+    // Task 1701 — the stamped author must name a real :AdminUser on this account.
+    // An unvalidated stamp is dead data on arrival: personal distillation anchors
+    // on (:AdminUser {accountId, userId}) and refuses to read it back, so the
+    // corpus ends up attributed to an identity that does not exist and no profile
+    // can ever be built from it. Gating the resolved value covers the `author`
+    // argument, the `userId` argument, and the USER_ID env path in one place,
+    // because the resolved value is what actually lands on the node.
+    await assertAdminUserOnAccount("voice-tag-content", voiceAuthor, accountId);
     const session = getSession();
     const now = new Date().toISOString();
     const skippedReasons = {};

package/payload/platform/plugins/voice-mirror/mcp/dist/tools/voice-tag-content.js.map

@@ -1 +1 @@
-{"version":3,"file":"voice-tag-content.js","sourceRoot":"","sources":["../../src/tools/voice-tag-content.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AACH,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAC7C,OAAO,EACL,uBAAuB,EACvB,aAAa,GAEd,MAAM,wBAAwB,CAAC;AAShC,MAAM,CAAC,MAAM,gBAAgB,GAAgC,IAAI,GAAG,CAAC;IACnE,YAAY;IACZ,0BAA0B;IAC1B,0BAA0B;IAC1B,YAAY;IACZ,SAAS;CACV,CAAC,CAAC;AAEH;;;;;;;;;GASG;AACH,MAAM,UAAU,kBAAkB,CAChC,MAA0B,EAC1B,cAA6B;IAE7B,MAAM,QAAQ,GAAG,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IACvC,IAAI,QAAQ;QAAE,OAAO,QAAQ,CAAC;IAC9B,IAAI,cAAc;QAAE,OAAO,cAAc,CAAC;IAC1C,MAAM,IAAI,KAAK,CACb,yFAAyF,CAC1F,CAAC;AACJ,CAAC;AAuBD,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,MAA6B;IAE7B,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,WAAW,EAAE,GAAG,MAAM,CAAC;IAEjE,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;QAChC,MAAM,IAAI,KAAK,CACb,8CAA8C,IAAI,oBAAoB;YACpE,GAAG,gBAAgB;SACpB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CACf,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;IAC9D,CAAC;IACD,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;QAC5C,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;IAC3D,CAAC;IACD,IAAI,CAAE,aAAmC,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;QAC3D,MAAM,IAAI,KAAK,CACb,sCAAsC,MAAM,oBAAoB,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAC3F,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACpD,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,cAAc,EAAE,EAAE,EAAE,CAAC;IACxD,CAAC;IACD,+EAA+E;IAC/E,2EAA2E;IAC3E,yEAAyE;IACzE,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,MAAM,IAAI,KAAK,CACb,6FAA6F,CAC9F,CAAC;IACJ,CAAC;IAED,MAAM,OAAO,GAAG,UAAU,EAAE,CAAC;IAC7B,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACrC,MAAM,cAAc,GAA2B,EAAE,CAAC;IAClD,IAAI,OAAO,GAAG,CAAC,CAAC;IAEhB,IAAI,CAAC;QACH,oEAAoE;QACpE,MAAM,KAAK,GAAG,EAAE,CAAC;QACjB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,IAAI,KAAK,EAAE,CAAC;YAC/C,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,CAAC;YAC1C,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,GAAG;YAC9B,kEAAkE;YAClE,6DAA6D;YAC7D,iEAAiE;YACjE,8DAA8D;YAC9D,8DAA8D;YAC9D,yBAAyB;YACzB;;;;;;;;;;;;mCAY2B,EAC3B;gBACE,GAAG,EAAE,KAAK;gBACV,SAAS;gBACT,IAAI;gBACJ,GAAG;gBACH,MAAM;gBACN,WAAW;gBACX,aAAa,EAAE,CAAC,GAAG,uBAAuB,CAAC;aAC5C,CACF,CAAC;YACF,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAW,CAAC,CAAC,CAAC;YAC1E,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC;YACxB,KAAK,MAAM,EAAE,IAAI,KAAK,EAAE,CAAC;gBACvB,IAAI,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;oBAAE,SAAS;gBAC9B,MAAM,MAAM,GAAG,gCAAgC,CAAC;gBAChD,cAAc,CAAC,MAAM,CAAC,GAAG,CAAC,cAAc,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;YAC7D,CAAC;QACH,CAAC;IACH,CAAC;YAAS,CAAC;QACT,MAAM,OAAO,CAAC,KAAK,EAAE,CAAC;IACxB,CAAC;IAED,6EAA6E;IAC7E,6EAA6E;IAC7E,2EAA2E;IAC3E,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,oBAAoB,IAAI,WAAW,MAAM,0BAA0B,WAAW,cAAc,SAAS,YAAY,OAAO,YACtH,OAAO,CAAC,MAAM,GAAG,OACnB,IAAI,CACL,CAAC;IAEF,OAAO;QACL,OAAO;QACP,OAAO,EAAE,OAAO,CAAC,MAAM,GAAG,OAAO;QACjC,cAAc;KACf,CAAC;AACJ,CAAC"}
+{"version":3,"file":"voice-tag-content.js","sourceRoot":"","sources":["../../src/tools/voice-tag-content.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AACH,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAC7C,OAAO,EAAE,wBAAwB,EAAE,MAAM,sBAAsB,CAAC;AAChE,OAAO,EACL,uBAAuB,EACvB,aAAa,GAEd,MAAM,wBAAwB,CAAC;AAShC,MAAM,CAAC,MAAM,gBAAgB,GAAgC,IAAI,GAAG,CAAC;IACnE,YAAY;IACZ,0BAA0B;IAC1B,0BAA0B;IAC1B,YAAY;IACZ,SAAS;CACV,CAAC,CAAC;AAEH;;;;;;;;;GASG;AACH,MAAM,UAAU,kBAAkB,CAChC,MAA0B,EAC1B,cAA6B;IAE7B,MAAM,QAAQ,GAAG,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IACvC,IAAI,QAAQ;QAAE,OAAO,QAAQ,CAAC;IAC9B,IAAI,cAAc;QAAE,OAAO,cAAc,CAAC;IAC1C,MAAM,IAAI,KAAK,CACb,mFAAmF,CACpF,CAAC;AACJ,CAAC;AAuBD,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,MAA6B;IAE7B,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,WAAW,EAAE,GAAG,MAAM,CAAC;IAEjE,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;QAChC,MAAM,IAAI,KAAK,CACb,8CAA8C,IAAI,oBAAoB;YACpE,GAAG,gBAAgB;SACpB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CACf,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;IAC9D,CAAC;IACD,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;QAC5C,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;IAC3D,CAAC;IACD,IAAI,CAAE,aAAmC,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;QAC3D,MAAM,IAAI,KAAK,CACb,sCAAsC,MAAM,oBAAoB,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAC3F,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACpD,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,cAAc,EAAE,EAAE,EAAE,CAAC;IACxD,CAAC;IACD,+EAA+E;IAC/E,2EAA2E;IAC3E,yEAAyE;IACzE,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,MAAM,IAAI,KAAK,CACb,6FAA6F,CAC9F,CAAC;IACJ,CAAC;IACD,8EAA8E;IAC9E,8EAA8E;IAC9E,0EAA0E;IAC1E,8EAA8E;IAC9E,2EAA2E;IAC3E,0EAA0E;IAC1E,iEAAiE;IACjE,MAAM,wBAAwB,CAAC,mBAAmB,EAAE,WAAW,EAAE,SAAS,CAAC,CAAC;IAE5E,MAAM,OAAO,GAAG,UAAU,EAAE,CAAC;IAC7B,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACrC,MAAM,cAAc,GAA2B,EAAE,CAAC;IAClD,IAAI,OAAO,GAAG,CAAC,CAAC;IAEhB,IAAI,CAAC;QACH,oEAAoE;QACpE,MAAM,KAAK,GAAG,EAAE,CAAC;QACjB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,IAAI,KAAK,EAAE,CAAC;YAC/C,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,CAAC;YAC1C,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,GAAG;YAC9B,kEAAkE;YAClE,6DAA6D;YAC7D,iEAAiE;YACjE,8DAA8D;YAC9D,8DAA8D;YAC9D,yBAAyB;YACzB;;;;;;;;;;;;mCAY2B,EAC3B;gBACE,GAAG,EAAE,KAAK;gBACV,SAAS;gBACT,IAAI;gBACJ,GAAG;gBACH,MAAM;gBACN,WAAW;gBACX,aAAa,EAAE,CAAC,GAAG,uBAAuB,CAAC;aAC5C,CACF,CAAC;YACF,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAW,CAAC,CAAC,CAAC;YAC1E,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC;YACxB,KAAK,MAAM,EAAE,IAAI,KAAK,EAAE,CAAC;gBACvB,IAAI,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;oBAAE,SAAS;gBAC9B,MAAM,MAAM,GAAG,gCAAgC,CAAC;gBAChD,cAAc,CAAC,MAAM,CAAC,GAAG,CAAC,cAAc,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;YAC7D,CAAC;QACH,CAAC;IACH,CAAC;YAAS,CAAC;QACT,MAAM,OAAO,CAAC,KAAK,EAAE,CAAC;IACxB,CAAC;IAED,6EAA6E;IAC7E,6EAA6E;IAC7E,2EAA2E;IAC3E,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,oBAAoB,IAAI,WAAW,MAAM,0BAA0B,WAAW,cAAc,SAAS,YAAY,OAAO,YACtH,OAAO,CAAC,MAAM,GAAG,OACnB,IAAI,CACL,CAAC;IAEF,OAAO;QACL,OAAO;QACP,OAAO,EAAE,OAAO,CAAC,MAAM,GAAG,OAAO;QACjC,cAAc;KACf,CAAC;AACJ,CAAC"}

package/payload/platform/plugins/voice-mirror/mcp/scripts/smoke.mjs

@@ -33,6 +33,7 @@ import { readFileSync } from "node:fs";
 import { join, dirname } from "node:path";
 import { fileURLToPath } from "node:url";
 import { readdirSync } from "node:fs";
+import { spawn } from "node:child_process";
 
 const __dirname = dirname(fileURLToPath(import.meta.url));
 const TOOLS_SRC = join(__dirname, "../src/tools");
@@ -410,6 +411,339 @@ await check(
   },
 );
 
+// ---------------------------------------------------------------------------
+// 12. Boot identity resolution (Task 1699). The server resolves the operator
+//     from USER_ID — the variable the PTY spawn stamps and MCP children
+//     inherit. ADMIN_USER_ID was never emitted by the platform, so every boot
+//     logged userId=null and four of five tools refused.
+//
+//     Spawning the built server is the only faithful test: userId is read at
+//     module scope, and the boot line is the contract the operator diagnoses
+//     from. An empty USER_ID (silent-compaction / recorder / public spawns
+//     legitimately stamp empty) must resolve to null, not "" — an empty string
+//     is truthy enough to reach voiceRetrieveConditioning's `userId` and would
+//     become a profile key.
+// ---------------------------------------------------------------------------
+console.log("\n-- boot identity --");
+
+const DIST_ENTRY = join(__dirname, "../dist/index.js");
+
+function bootUserId(env) {
+  return new Promise((resolve, reject) => {
+    const child = spawn(process.execPath, [DIST_ENTRY], {
+      env: { PATH: process.env.PATH, ACCOUNT_ID: "acct-smoke", ...env },
+      stdio: ["pipe", "pipe", "pipe"],
+    });
+    let stderr = "";
+    const timer = setTimeout(() => {
+      child.kill("SIGKILL");
+      reject(new Error(`no boot line within 10s; stderr=${stderr.slice(0, 300)}`));
+    }, 10_000);
+    child.stderr.on("data", (chunk) => {
+      stderr += chunk.toString();
+      const m = stderr.match(/\[voice-mirror\] boot accountId=(\S+) userId=(\S+)/);
+      if (m) {
+        clearTimeout(timer);
+        child.kill("SIGKILL");
+        resolve({ accountId: m[1], userId: m[2] });
+      }
+    });
+    child.on("error", (err) => {
+      clearTimeout(timer);
+      reject(err);
+    });
+    // A child that dies before printing the boot line would otherwise sit here
+    // until the timeout and report "no boot line", hiding the real cause.
+    child.on("exit", (code, signal) => {
+      if (signal === "SIGKILL") return; // our own kill, after a successful match
+      clearTimeout(timer);
+      reject(new Error(`exited code=${code} before boot line; stderr=${stderr.slice(0, 300)}`));
+    });
+  });
+}
+
+await check("boot resolves userId from USER_ID (the var the platform emits)", async () => {
+  const { accountId, userId } = await bootUserId({ USER_ID: "436fdf2d-cfa7-4836-9ffa-77d91cef15f9" });
+  assert.equal(accountId, "acct-smoke");
+  assert.equal(userId, "436fdf2d-cfa7-4836-9ffa-77d91cef15f9");
+});
+
+await check("boot reports userId=null when USER_ID is absent", async () => {
+  const { userId } = await bootUserId({});
+  assert.equal(userId, "null");
+});
+
+await check("boot reports userId=null when USER_ID is empty (not \"\")", async () => {
+  const { userId } = await bootUserId({ USER_ID: "" });
+  assert.equal(userId, "null");
+});
+
+await check("ADMIN_USER_ID is inert — it is not an identity source", async () => {
+  const { userId } = await bootUserId({ ADMIN_USER_ID: "should-be-ignored" });
+  assert.equal(userId, "null");
+});
+
+// ---------------------------------------------------------------------------
+// 12. Identity gate (Task 1701).
+//     A userId / voiceAuthor that names no :AdminUser on the calling account
+//     must never become a profile key or an author stamp. The reserved org
+//     sentinel legitimately names no :AdminUser and must bypass (Tasks 676, 975).
+// ---------------------------------------------------------------------------
+console.log("\n-- identity gate --");
+
+const adminUserMod = await import("../dist/lib/admin-user.js");
+
+check("unknownAdminUserMessage names the tool, the rejected key and the account", () => {
+  const msg = adminUserMod.unknownAdminUserMessage(
+    "voice-tag-content",
+    "rob-mead",
+    "68b50910",
+  );
+  assert.ok(msg.includes("rob-mead"), `names the rejected key: ${msg}`);
+  assert.ok(msg.includes("68b50910"), `names the account: ${msg}`);
+  assert.ok(msg.includes("voice-tag-content"), `names the tool: ${msg}`);
+});
+
+check("refusal wording does not invite the caller to guess another userId", () => {
+  // The prior text told callers to supply userId explicitly. An agent with no
+  // way to learn a real id supplied a plausible-looking name instead, which is
+  // how `rob-mead` reached a live client account.
+  const msg = adminUserMod.unknownAdminUserMessage(
+    "voice-tag-content",
+    "rob-mead",
+    "68b50910",
+  );
+  assert.ok(
+    !/supply\s+\S*\s*userId|pass\s+\S*\s*userId\s+explicitly|provide\s+a\s+userId/i.test(
+      msg,
+    ),
+    `must not invite the caller to supply a userId: ${msg}`,
+  );
+});
+
+check("VoiceIdentityError carries the rejected key and account", () => {
+  const err = new adminUserMod.VoiceIdentityError(
+    "voice-tag-content",
+    "rob-mead",
+    "68b50910",
+  );
+  assert.ok(err instanceof Error);
+  assert.equal(err.name, "VoiceIdentityError");
+  assert.equal(err.userId, "rob-mead");
+  assert.equal(err.accountId, "68b50910");
+});
+
+await check("ORG_USER_ID bypasses the gate without opening a session", async () => {
+  // With NEO4J_URI unset, getDriver() throws. Returning normally proves the
+  // org sentinel short-circuits before any session is opened, so an org
+  // distil/retrieve still works on a spawn with no personal identity.
+  const saved = process.env.NEO4J_URI;
+  delete process.env.NEO4J_URI;
+  try {
+    await adminUserMod.assertAdminUserOnAccount(
+      "voice-distil-profile",
+      corpusMod.ORG_USER_ID,
+      "acct-1",
+    );
+  } finally {
+    if (saved !== undefined) process.env.NEO4J_URI = saved;
+  }
+});
+
+await check("a non-org key is looked up, never passed through (fail-closed)", async () => {
+  // The converse of the bypass: a real key must reach the lookup. With
+  // NEO4J_URI unset that surfaces as a driver throw. A gate that returned
+  // normally here would be failing open on every unverified key.
+  const saved = process.env.NEO4J_URI;
+  delete process.env.NEO4J_URI;
+  try {
+    await assert.rejects(
+      () =>
+        adminUserMod.assertAdminUserOnAccount(
+          "voice-tag-content",
+          "rob-mead",
+          "68b50910",
+        ),
+      /NEO4J_URI unset/,
+      "must attempt the lookup rather than silently accepting the key",
+    );
+  } finally {
+    if (saved !== undefined) process.env.NEO4J_URI = saved;
+  }
+});
+
+// ---------------------------------------------------------------------------
+// 13. Identity-gate wiring (Task 1701).
+//     The gate's own behaviour is covered above against the helper. These are
+//     structural invariants on the call sites: a live Neo4j is needed to tell
+//     "gate refused" from "write failed" at runtime (both surface as the same
+//     driver error), so ordering and presence are asserted on the source —
+//     the same idiom as the Cypher forbidden-pattern gate above.
+// ---------------------------------------------------------------------------
+console.log("\n-- identity-gate wiring --");
+
+const tagSrc = readFileSync(join(TOOLS_SRC, "voice-tag-content.ts"), "utf-8");
+
+check("voice-tag-content gates the resolved voiceAuthor", () => {
+  assert.ok(
+    /assertAdminUserOnAccount\(/.test(tagSrc),
+    "voice-tag-content must gate voiceAuthor via assertAdminUserOnAccount",
+  );
+});
+
+check("voice-tag-content gates before it stamps voiceAuthor", () => {
+  // The stamp is the write this task exists to stop. A gate ordered after it
+  // would refuse only once the dead data was already on the node.
+  const gateAt = tagSrc.indexOf("assertAdminUserOnAccount(");
+  const writeAt = tagSrc.indexOf("n.voiceAuthor = $voiceAuthor");
+  assert.ok(gateAt > -1, "gate present");
+  assert.ok(writeAt > -1, "voiceAuthor write present");
+  assert.ok(gateAt < writeAt, "identity gate must run before the voiceAuthor write");
+});
+
+await check("voice-tag-content: empty nodeIds stays a no-op (no identity lookup)", async () => {
+  // An empty tag has nothing to attribute, so it must not reach the driver.
+  // Guards the ordering of the early return against the new gate.
+  const saved = process.env.NEO4J_URI;
+  delete process.env.NEO4J_URI;
+  try {
+    const result = await tagMod.voiceTagContent({
+      nodeIds: [],
+      mode: "human-only",
+      accountId: "acct-1",
+      format: "text",
+      voiceAuthor: "rob-mead",
+    });
+    assert.equal(result.updated, 0);
+    assert.equal(result.skipped, 0);
+  } finally {
+    if (saved !== undefined) process.env.NEO4J_URI = saved;
+  }
+});
+
+const distilSrc = readFileSync(join(TOOLS_SRC, "voice-distil-profile.ts"), "utf-8");
+
+check("voice-distil-profile gates the profile key at its single entry point", () => {
+  // Gating the exported entry rather than distilForFormat covers sample, amend,
+  // amend-write and multi-format enumeration with one lookup, instead of one
+  // per format.
+  const entryAt = distilSrc.indexOf("export async function voiceDistilProfile");
+  assert.ok(entryAt > -1, "exported entry present");
+  assert.ok(
+    /assertAdminUserOnAccount\(/.test(distilSrc.slice(entryAt)),
+    "the exported entry must gate the profile key",
+  );
+});
+
+check("voice-distil-profile keeps both structural write anchors", () => {
+  // The anchor MATCH binds `anchor` for MERGE (anchor)-[:HAS_VOICE_PROFILE]->(p).
+  // The entry gate is additive; removing these would drop the edge.
+  const anchors = distilSrc.match(
+    /MATCH \(anchor:AdminUser \{accountId: \$accountId, userId: \$profileUserId\}\)/g,
+  );
+  assert.equal(anchors?.length, 2, "both write-path anchors retained");
+});
+
+const retrieveSrc = readFileSync(
+  join(TOOLS_SRC, "voice-retrieve-conditioning.ts"),
+  "utf-8",
+);
+
+check("voice-retrieve-conditioning does NOT gate identity (it writes nothing)", () => {
+  // Deliberately ungated. Retrieve mutates nothing, so it sits outside the
+  // "validate before any write keyed on it" rule, and gating it broke the
+  // personal->org fallback below. Invented keys are stopped at
+  // voice-tag-content, which is the only path that puts one in the graph.
+  assert.ok(
+    !/assertAdminUserOnAccount\(/.test(retrieveSrc),
+    "retrieve must not gate identity: it regresses the personal->org fallback",
+  );
+});
+
+check("voice-retrieve-conditioning keeps the personal->org fallback", () => {
+  // The regression guard. A personal lookup with no data must borrow the org
+  // (house) voice, not degrade to the default register. A house operator
+  // scoped into a client sub-account has no :AdminUser on that account, so
+  // this fallback is the only thing that puts the client's house card into
+  // their drafts.
+  assert.ok(
+    /const org = await orgLookup\(\);/.test(retrieveSrc),
+    "personal miss must fall back to orgLookup()",
+  );
+  assert.ok(
+    /status = hasData\(org\) \? "fallback-org" : "no-data";/.test(retrieveSrc),
+    "personal miss must report fallback-org when the org voice resolves",
+  );
+});
+
+check("voice-retrieve-conditioning never sets isError", () => {
+  // Match the property assignment, not the word: prose about isError is fine,
+  // setting it is not.
+  assert.ok(
+    !/isError\s*[:=]/.test(retrieveSrc),
+    "retrieve degrades via status, never isError",
+  );
+});
+
+// ---------------------------------------------------------------------------
+// 14. One refusal wording across every gate (Task 1701).
+//     record-feedback and ingest already enforced the rule via an inline
+//     MATCH (a:AdminUser {accountId, userId}). That match is structural — it
+//     binds `a` for the AUTHORED edge — so it stays exactly where it is and
+//     only the wording is shared.
+// ---------------------------------------------------------------------------
+console.log("\n-- shared refusal wording --");
+
+for (const file of [
+  "voice-record-feedback.ts",
+  "voice-ingest-session-text.ts",
+  "voice-distil-profile.ts",
+]) {
+  const src = readFileSync(join(TOOLS_SRC, file), "utf-8");
+  check(`${file} refuses with the shared wording`, () => {
+    assert.ok(
+      /unknownAdminUserMessage\(/.test(src),
+      `${file} must use the shared refusal wording`,
+    );
+  });
+  check(`${file} drops the un-actionable onboarding wording`, () => {
+    // "Onboarding must promote the operator to :AdminUser" names a remedy the
+    // caller cannot perform and never names the account.
+    assert.ok(
+      !/Onboarding must promote the operator/.test(src),
+      `${file} still carries the old onboarding wording`,
+    );
+  });
+}
+
+check("record-feedback keeps its structural AdminUser match (binds the AUTHORED edge)", () => {
+  const fb = readFileSync(join(TOOLS_SRC, "voice-record-feedback.ts"), "utf-8");
+  assert.ok(
+    /MATCH \(a:AdminUser \{accountId: \$accountId, userId: \$userId\}\)/.test(fb),
+    "structural match removed — the AUTHORED edge would be dropped",
+  );
+  assert.ok(/CREATE \(a\)-\[:AUTHORED\]->\(e\)/.test(fb), "AUTHORED edge retained");
+});
+
+check("ingest keeps its structural AdminUser match (binds the AUTHORED edge)", () => {
+  const ing = readFileSync(join(TOOLS_SRC, "voice-ingest-session-text.ts"), "utf-8");
+  assert.ok(
+    /MATCH \(a:AdminUser \{accountId: \$accountId, userId: \$userId\}\)/.test(ing),
+    "structural match removed — the AUTHORED edge would be dropped",
+  );
+  assert.ok(/MERGE \(a\)-\[:AUTHORED\]->\(n\)/.test(ing), "AUTHORED edge retained");
+});
+
+check("distil keeps the :LocalBusiness wording for the org branch", () => {
+  // An org distil failing on a missing business node is a different failure
+  // from an unknown personal key; it must not collapse into the shared wording.
+  const src = readFileSync(join(TOOLS_SRC, "voice-distil-profile.ts"), "utf-8");
+  assert.ok(
+    /:LocalBusiness \{accountId='\$\{accountId\}'\} not found/.test(src),
+    "org branch must keep its own :LocalBusiness message",
+  );
+});
+
 // ---------------------------------------------------------------------------
 // Final summary.
 // ---------------------------------------------------------------------------

package/payload/platform/plugins/voice-mirror/skills/voice-mirror/SKILL.md

@@ -201,6 +201,18 @@ Which voice a draft uses is the `scope` on the retrieval brief: `"my voice"` →
 
 **Single-operator accounts are unchanged.** With author omitted at tag time, the sole operator is the implicit author, so their personal corpus equals the account-wide corpus and personal distillation reproduces the prior single profile. Legacy content carries no `voiceAuthor`; it appears only in the account-wide org walk until re-tagged, and personal drafts fall back to the org voice in the meantime.
 
+## Identity is never guessed
+
+Every `userId` and every `author` is an `:AdminUser` id that already exists on the account being operated. It is never a person's name, and never a slug built from one. `rob-mead` is not an identity.
+
+A value naming no `:AdminUser` on the account is refused, and nothing is written. This is not a formality. A profile keyed on an admin who does not exist cannot be read back by any seat that resolves identity properly, so it becomes dead data that looks like a real operator profile. A `voiceAuthor` stamped the same way attributes writing to somebody who does not exist.
+
+The tools resolve identity from the spawn environment on their own. Pass `author:` only to attribute content to a different operator on a multi-operator account, and only with that operator's real `:AdminUser` id.
+
+If a tool refuses, the id is wrong. Do not retry with a different guess. The account's real admin identity is the operator's to supply.
+
+`__org__` is exempt, because the house voice anchors on the business rather than on a person.
+
 ## Observability
 
 | Tag | When |
@@ -213,6 +225,7 @@ Which voice a draft uses is the `scope` on the retrieval brief: `"my voice"` →
 | `[voice-retrieve] scope=<scope> format=<format> status=<ok\|fallback-org\|no-data\|error> styleCardBytes=<n> exemplarCount=<k> tokenBudget=<n>` | Each retrieval. `status=fallback-org` proves the personal→org fallback fired. |
 | `[voice-record-feedback] scope=<scope> userId=<id\|__org__> format=<format> intent="<haiku-summary>" diffBytes=<n>` | Each feedback write. |
 | `[voice-ingest-session-text] sessionId=<id> adminUser=<id> turns=<n> bytes=<n> skipped=<m>` | On-demand session-text capture. |
+| `[voice-identity] refuse tool=<tool> reason=unknown-admin-user userId=<key> accountId=<account>` | A key naming no `:AdminUser` on the account was refused. Names the rejected key and the account, so an invented key is visible in the logs instead of only in the graph. |
 
 **Confirms working:** `[voice-retrieve] exemplarCount≥1` precedes every drafting-skill prompt assembly when the calling skill has not opted out. `[voice-distil]` appears at least once per 30-day window per active format per operator. `[voice-ingest-session-text] turns≥1` appears when the operator asks to capture a session's voice.