@rubytech/create-maxy-code 0.1.472 → 0.1.473

package/payload/platform/plugins/google/references/auth.md

@@ -16,8 +16,11 @@ outcome (values themselves deliberately not recorded):
 The 604799 figure is the concrete argument for completing brand verification: in Testing,
 every connected account silently re-consents weekly. Verification removes it.
 
-Phases 1–2 may now proceed against the flow below. Client-secret storage is decided:
-house-only at `${PLATFORM_ROOT}/config/google-house.env` (see below).
+The flow below is the ORIGINAL Phase 0 verdict and is retained for its evidence.
+It has since been superseded on two points: the vendor app is a
+Desktop client whose secret ships in brand config, and the redirect is loopback
+rather than a hosted HTTPS callback. Read the Desktop sections further down as
+authoritative where the two differ.
 
 ## Original spike verdict (documentation-backed, now confirmed)
 
@@ -46,9 +49,11 @@ What is decided from published behaviour:
 - The flow is therefore an **operator-assisted authorization-code (PKCE) flow**, and it
   needs a redirect method, because Google's out-of-band ("paste the code") flow is fully
   blocked.
-- The recommended redirect method is a **hosted HTTPS callback on the brand's existing
-  Cloudflare tunnel domain** (a "Web application" client), with a **loopback + manual
-  code relay** (a "Desktop app" client) as the secret-less fallback.
+- The redirect method recommended at the time was a hosted HTTPS callback on the
+  brand's Cloudflare tunnel domain (a "Web application" client). **Superseded by
+  the recent decision**: the fallback named here — a Desktop client with a loopback redirect
+  and a manual code relay — is what shipped, because only an installed-app secret
+  can be distributed to customer devices.
 - **Verification is the light kind.** Calendar is a *sensitive* scope, not a *restricted*
   one, so a brand's app needs only OAuth brand/consent-screen verification, never the
   annual third-party security assessment.
@@ -109,7 +114,7 @@ that carries the `code` and the process that exchanges it live on different mach
 concrete flows bridge that. The recommendation is Option B primary, Option A as the
 secret-less fallback.
 
-### Option B (recommended): hosted HTTPS callback on the brand tunnel domain
+### Option B (SUPERSEDED): hosted HTTPS callback on the brand tunnel domain
 
 Client type **Web application**. A stable authorized redirect URI on the install's existing
 Cloudflare **public** host, served by the always-running `platform/ui` server (the same
@@ -203,86 +208,93 @@ on that brand, exactly as `outlookClientId` does. The client id ships as the bra
 `GOOGLE_CLIENT_ID` and inherited down the spawn chain (manager unit env → PTY → MCP child).
 
 Divergence from Outlook: the recommended Web-application flow (Option B) also needs a
-**client secret**, which lives house-only at `${PLATFORM_ROOT}/config/google-house.env`
-(decided; see below). A brand that ships `googleClientId` empty has the plugin inert with an
+**client secret**, which ships in `brand.json` (the house-only file this
+once described is withdrawn). A brand that ships `googleClientId` empty has the plugin inert with an
 actionable signal (`clientIdConfigured=false`), register refuses, and no operator action
 makes it work until the vendor client exists — mirroring Outlook's inert behaviour.
 
-### Installing the secret on a device (operator step, once per install)
+### The vendor app is a Desktop client, and its secret ships in brand config
 
-Nothing automates this and nothing can: the secret cannot ship in the npm
-package, so it is placed by hand after the install exists. Until it is, the
-plugin's tools load and `google-account-register` refuses with a message naming
-this file — the refusal is deliberate and happens *before* the user consents,
-so nobody burns a consent on a flow that cannot complete.
+Decided 2026-07-18, superseding the house-only file this section
+used to describe. That model required placing a secret by hand on every install,
+which cannot reach a customer device and contradicts installer-only doctrine.
 
-On the device, with the values from the brand's Google Cloud OAuth client:
+There is no secret-free alternative: Google requires `client_secret` at the
+token endpoint for **every** client type, including Web clients using PKCE.
 
-```bash
-INSTALL=~/<brand>-code                 # e.g. ~/sitedesk-code
-( umask 077; mkdir -p "$INSTALL/platform/config" )
-( umask 077; cat > "$INSTALL/platform/config/google-house.env" <<'EOF'
-GOOGLE_CLIENT_ID=<the client id>
-GOOGLE_CLIENT_SECRET=<the client secret>
-EOF
-)
-chmod 600 "$INSTALL/platform/config/google-house.env"
+So the vendor app is a **Desktop (installed app)** client, because Google
+explicitly sanctions embedding that secret in distributed software — "the client
+secret is obviously not treated as a secret". `brand.json` therefore carries
+both values and the installer stamps them onto the session-manager unit:
+
+```jsonc
+// brands/<brand>/brand.json
+"googleClientId": "<the client id>",
+"googleClientSecret": "<the client secret>"
 ```
 
-Then restart the install's UI service so the route picks it up.
+They stamp **together or not at all**. A client id without its secret builds a
+consent URL the user can complete but an exchange that cannot, which fails later
+and less legibly than not offering the flow.
 
-Confirm it took without printing the secret — the boot line reports presence
-only:
+The secret ships to a **public** npm registry. That is the accepted trade: the
+residual risk is app impersonation and quota abuse against the brand's client
+id, not token theft, because PKCE still binds each code to its verifier.
 
-```bash
-grep -m1 'google-mcp. boot' ~/.<brand>-code/logs/server.log
-# ... houseSecretPresent=true
-```
+Rejected, each once and for a reason:
 
-`houseSecretPresent=false` on an install whose brand ships a `googleClientId`
-is the mis-provision signature. The secret is never echoed, never logged, and
-never read by the MCP process — only its presence is checked.
+- **Customer-owned apps** (the QuickBooks pattern, where the operator registers
+  their own app). Unlike Intuit, Google demands app verification for the
+  sensitive Calendar scope — homepage, privacy policy, domain ownership, demo
+  video — which the target customer cannot produce.
+- **A vendor-hosted exchange broker**, where the install posts the code to a
+  brand-operated endpoint. Best security and best UX, but it means operating a
+  credential-bearing service for every customer.
+- **A Web client with the secret shipped anyway.** A Web-app secret is genuinely
+  confidential in Google's model; publishing it would be a real credential leak
+  rather than a sanctioned embed.
 
-### Client-secret storage: house-only (decided 2026-07-18)
+### The redirect is loopback, and the IP literal is mandatory
 
-An earlier draft of this file said the secret is "held in the brand's secret store, the same
-way Cloudflare tokens are held". That was wrong — no brand-level secret store exists. The
-decision, mirroring the Cloudflare master token exactly:
+Desktop clients permit only loopback redirects. `https` is rejected outright and
+custom URI schemes are withdrawn ("no longer supported due to the risk of app
+impersonation"), so this is the entire option space.
 
 ```
-${PLATFORM_ROOT}/config/google-house.env      # mode 600, parent 700
-GOOGLE_CLIENT_ID=…
-GOOGLE_CLIENT_SECRET=…
+http://127.0.0.1:8571
+```
+
+**Never `localhost`.** RFC 8252 §7.3 makes the port irrelevant when matching a
+loopback redirect, but only for the IP literals `127.0.0.1` and `::1`; strict
+servers match the hostname literally. Register `http://127.0.0.1` on the client.
+
+Nothing listens on that port, by design. The consenting browser is the user's
+own phone, so the redirect fails to load and the user copies the code out of the
+address bar and pastes it back to `google-account-register-submit`. The port is
+fixed so consent URLs are deterministic and one register's logs compare with
+another's.
+
+This is why the hosted HTTPS callback that the earlier plugin built is gone, along with
+its allowlist entry and its refresh route: a Desktop client cannot use it.
+
+### Vendor runbook: creating the Desktop client
+
+1. In the **existing** Cloud project for the brand — not a new one, so the
+   consent screen and any verification progress carry over — go to
+   **Credentials → Create credentials → OAuth client ID**.
+2. Application type **Desktop app**. Name it for the brand.
+3. Copy the **Client ID** and **Client secret** into that brand's `brand.json`
+   as `googleClientId` and `googleClientSecret`.
+4. Re-bundle and publish. No file is placed on any device by hand.
+
+Confirm it took from the boot line, which reports presence and never values:
+
+```bash
+grep -m1 'google-mcp. boot' ~/.<brand>-code/logs/server.log
+# ... clientIdConfigured=true clientSecretConfigured=true
 ```
 
-Written once per install by the operator, never echoed, never in a project tree.
-`platform/plugins/cloudflare/references/api.md` already establishes this pattern for
-multi-client installs and names SiteDesk as the case: an account-wide credential inside a
-sub-account's secrets file lets that sub-account reach every other client's resources, so
-the master lives house-only at `${PLATFORM_ROOT}/config/cloudflare-house.env`, "a location
-no sub-account spawn sources". `google-house.env` is that file's twin.
-
-Rejected, with reasons:
-
-- **`brands/<brand>/brand.json`** ships inside the published npm package. It carries
-  `googleClientId` (public, exactly like `outlookClientId`, and the value the inert check
-  reads) and never the secret.
-- **`~/<brand>-code/data/accounts/<accountId>/secrets`** is wrong-scoped twice: the secret is
-  per-brand not per-account, so replicating it multiplies exposure for no benefit, and on a
-  multi-tenant install it drops a brand-wide credential into a client sub-account's own
-  directory.
-- **A Desktop-type client** (installed-app secret, documented non-confidential) would remove
-  the storage question but forces the loopback redirect and its copy-the-code-off-a-404 flow
-  on a phone, and discards the already-provisioned, verified Web-application client.
-
-House-only is sufficient here rather than merely tidier, because the token exchange runs in
-the `/api/google/oauth/callback` route inside the always-running `platform/ui` server, which
-is house-scoped. The secret never needs to reach a per-account MCP spawn.
-
-**It is a boundary of intent, not of permission.** Every account's session runs as the same
-unix user and the house path is deterministic, so an agent holding `Bash` can read the file
-regardless; OS user separation was costed and declined. Never cite house-only placement as
-proof a sub-account cannot reach the secret.
+Either reading `false` on a brand that ships both is the mis-stamp signature.
 
 ---
 
@@ -312,7 +324,7 @@ follow-up once the plugin lands (mirroring Outlook 1479/1485).
      new one."). Capture it at creation into its final destination, or plan to rotate. It is
      never pasted into a chat transcript, a shell command that lands in history, or the repo.
      Rotation is free and has no downtime: **Add secret**, store the new one, delete the old.
-     It lives house-only at `${PLATFORM_ROOT}/config/google-house.env` — see above.
+     It ships in `brand.json` as `googleClientSecret` — see the Desktop sections above.
    - **Option A (fallback):** application type **Desktop app**. Copy the **Client ID**.
 5. Set `googleClientId` in the brand's `brand.json` and re-bundle:
    ```jsonc
@@ -438,12 +450,17 @@ met and Phases 1–2 (the plugin build) proceed against the confirmed flow.
 
 | Brand | Client type | Redirect URI | Client ID | Status |
 |---|---|---|---|---|
-| `sitedesk-code` | Web application | `https://public.sitedesk.online/api/google/oauth/callback` | `1032860640027-p61l59fnog4mad5o7grginpaps9jnu8c.apps.googleusercontent.com` | **Testing** — round-trip verified 2026-07-18; brand verification not started; secret pending rotation into its Phase 1 home |
+| `sitedesk-code` | ~~Web application~~ **RETIRED** | ~~`https://public.sitedesk.online/api/google/oauth/callback`~~ | `1032860640027-…` | **Do not use.** A Web client cannot register a loopback redirect, so this id fails `redirect_uri_mismatch` under the Desktop flow. Cleared from `brand.json`; delete the client in the console and revoke its secret. |
+| `sitedesk-code` | Desktop app | `http://127.0.0.1` | *(not yet created)* | Awaiting provisioning in the **existing** `Sitedesk Calendar` project, so consent-screen and verification progress carry over. |
 
 The public host was confirmed live and routing to the `platform/ui` server (it serves the
-brand's public page). No secret or token is recorded here. The secret minted at creation was
-exposed to shell history during the manual round-trip and should be rotated (**Add secret** →
-store → delete old) when Phase 1 decides where it lives.
+brand's public page). No secret or token is recorded here. The Web client's secret was exposed to shell history during the manual round-trip.
+That client is retired rather than rotated: delete it in the console, which
+revokes the secret with it.
+
+**Devices touched by the earlier plugin may still hold `platform/config/google-house.env`
+containing that live Web-client secret.** Nothing reads it any more and nothing
+removes it. Delete it on each such device as part of retiring the Web client.
 
 Per-brand next step for `sitedesk-code`: start **brand/consent-screen verification** to lift
 the 100-test-user cap and the 7-day re-consent measured above. That review is the slow part;

package/payload/platform/plugins/ledger/PLUGIN.md

@@ -63,6 +63,16 @@ An `InvoicePayment` reached from an `Invoice` is money received. The same label
 
 `CashEntry` does carry `direction`, because it has no parent invoice to derive one from.
 
+## The counterparty is passed by id, never by name
+
+`ledger-invoice-record` and `ledger-cash-record` take the element id of an existing `Organization` or `Person`, and nothing else about them. The ledger never creates or matches them: look the counterparty up first with `memory-search` or `contact-lookup` and pass the id you find.
+
+The display name stored on the invoice is read from that node, not passed as a second argument. One lookup feeds both the stored name and the link, so an invoice cannot read as one company while pointing at another. An id that does not exist on this account is refused with `reason=unknown-counterparty` before anything is written.
+
+This is a deliberate boundary, not a convenience gap. The ledger records money; deciding whether "Beagle Direct Ltd" is the same company as an existing "Beagle Direct" is entity resolution, and doing it badly inside a write tool creates duplicate organisations that then split a payment history in two.
+
+A `CashEntry` must have a counterparty for a second reason: graph-write refuses a write with no relationship at all, so an unlinked entry cannot be stored.
+
 ## Over-application is refused
 
 A payment that would take applied-to-date above the invoice total is rejected. It is never clamped to the remaining amount and never recorded anyway. The refusal names the figure that would settle the invoice, so the operator can correct it in one step.
@@ -75,7 +85,9 @@ After writing a payment, the tool re-reads the invoice from the graph and compar
 
 Four ways this can fail emit no event at all: a write narrated but never landed, a payment with no parent invoice, a stored balance property that has reappeared, and a duplicate payment created under a second id. None of them can be caught by logging an action, because no action occurs.
 
-A `[ledger-census]` line is emitted every 15 minutes by the UI server, carrying counts for each, plus any ledger index declared in `schema.cypher` but absent from this database. `alarm=true` on that line means one of them has happened. `ledger-reconcile` is the same check on demand, sharing the same reconcile and the same line formatter.
+A `[ledger-census]` line is emitted every 15 minutes by the UI server, carrying counts for each, plus any ledger index declared in `schema.cypher` but absent from this database, plus `writeRejects24h`.
+
+That last counter exists because of a real failure. On 2026-07-18 every ledger write was rejected for a full day while the census reported `invoices=0 payments=0`, which is byte-identical to a healthy ledger nobody has used yet. A rejected write leaves nothing in the graph by definition, so the count is read from the plugin's own log rather than from Neo4j. `alarm=true` on that line means one of them has happened. `ledger-reconcile` is the same check on demand, sharing the same reconcile and the same line formatter.
 
 Registration drift between `PLUGIN.md`, the generated canonical-tool-names artifact and the specialist templates is **not** a census signal. It is caught at build time by `platform/scripts/check-canonical-tool-names.mjs` and `check-specialist-tool-surface.mjs`. A runtime counter for it was removed after review: the census runs in the UI server, which has no view of MCP spawns, so the counter could only ever have compared a constant against itself and reported healthy.
 

package/payload/platform/plugins/ledger/mcp/dist/index.js

@@ -4,7 +4,7 @@ import { eagerTool } from "../../../../lib/mcp-eager/dist/index.js";
 import { writeNodeWithEdges } from "../../../../lib/graph-write/dist/index.js";
 import { z } from "zod";
 import { closeDriver, getSession } from "./lib/neo4j.js";
-import { readCensus, readInvoice, readStatement, setPaymentStatus, verifyOutstanding, } from "./lib/read.js";
+import { readCensus, readCounterpartyName, readInvoice, readStatement, setPaymentStatus, verifyOutstanding, } from "./lib/read.js";
 import { invoiceRecord } from "./tools/invoice-record.js";
 import { paymentRecord } from "./tools/payment-record.js";
 import { cashRecord } from "./tools/cash-record.js";
@@ -32,15 +32,21 @@ function refuseNoAccount(toolName) {
         isError: true,
     };
 }
+// `agent` stays undefined when AGENT_SLUG is unset rather than defaulting to
+// "". graph-write resolves `agent ?? source ?? "unknown"`, and an empty string
+// is not nullish, so the old default printed a blank `agent=` on every reject
+// and defeated the fallback entirely.
 const createdBy = (tool) => ({
-    agent: agentSlug ?? "",
-    session: sessionId ?? "",
+    agent: agentSlug,
+    session: sessionId,
     tool,
+    source: "ledger",
 });
-// graph-write's params are structurally identical to the tools' WriteFn; the
-// cast keeps the tool modules free of a graph-write import so their unit tests
-// need no Neo4j driver.
-const write = (p) => writeNodeWithEdges(p);
+// No cast. Task 1788: the previous version cast writeNodeWithEdges to accept
+// this plugin's own relationship shape, under a comment claiming the params
+// were structurally identical. They were not, and the cast is what let a dead
+// write path ship.
+const write = writeNodeWithEdges;
 async function withSession(fn) {
     const session = getSession();
     try {
@@ -55,7 +61,10 @@ eagerTool(server, "ledger-invoice-record", "Record an invoice you raised (direct
         .enum(["receivable", "payable"])
         .describe("'receivable' is money owed to you; 'payable' is money you owe"),
     confirmationNumber: z.string().min(1).describe("Invoice or bill reference, e.g. INV-2026-014"),
-    counterparty: z.string().min(1).describe("Who owes you, or who you owe"),
+    counterpartyNodeId: z
+        .string()
+        .min(1)
+        .describe("Element id of the existing Organization. Look it up first (memory-search or contact-lookup) — this tool never creates or matches organisations, so passing a name alone will not work"),
     totalPaymentDue: z.number().positive().describe("Face value of the whole bill"),
     dueDate: z.string().describe("ISO date the payment falls due, e.g. 2026-08-01"),
     description: z.string().optional().describe("What the invoice is for"),
@@ -65,6 +74,7 @@ eagerTool(server, "ledger-invoice-record", "Record an invoice you raised (direct
     return withSession((session) => invoiceRecord({
         session,
         write,
+        readName: readCounterpartyName,
         accountId,
         createdBy: createdBy("ledger-invoice-record"),
         ...args,
@@ -98,7 +108,6 @@ eagerTool(server, "ledger-credit-record", "Apply a credit note to an invoice you
 }, async (args) => {
     if (accountId === null)
         return refuseNoAccount("ledger-credit-record");
-    const { reason: _reason, ...rest } = args;
     return withSession((session) => paymentRecord({
         session,
         read: readInvoice,
@@ -108,7 +117,7 @@ eagerTool(server, "ledger-credit-record", "Apply a credit note to an invoice you
         accountId,
         createdBy: createdBy("ledger-credit-record"),
         kind: "credit",
-        ...rest,
+        ...args,
         // After the spread: the credit schema exposes no paymentType, so this
         // is the only source of it and must not be overwritten by the cast.
         paymentType: "credit",
@@ -119,11 +128,10 @@ eagerTool(server, "ledger-cash-record", "Record money in or out that is not atta
     amount: z.number().positive().describe("Amount — always positive; direction carries the sign"),
     date: z.string().describe("ISO date of the movement"),
     description: z.string().min(1).describe("What it was for"),
-    counterparty: z.string().optional().describe("Who it was with"),
-    counterpartyType: z
-        .enum(["person", "organization"])
-        .optional()
-        .describe("Whether the counterparty is a person or a business; defaults to organization"),
+    counterpartyNodeId: z
+        .string()
+        .min(1)
+        .describe("Element id of the person or organisation this movement was with. Required — an entry linked to nothing cannot be stored"),
 }, async (args) => {
     if (accountId === null)
         return refuseNoAccount("ledger-cash-record");

package/payload/platform/plugins/ledger/mcp/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AACpE,OAAO,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAC;AACjF,OAAO,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AACpE,OAAO,EAAE,kBAAkB,EAAE,MAAM,2CAA2C,CAAC;AAC/E,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AACzD,OAAO,EACL,UAAU,EACV,WAAW,EACX,aAAa,EACb,gBAAgB,EAChB,iBAAiB,GAClB,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,aAAa,EAAE,MAAM,2BAA2B,CAAC;AAC1D,OAAO,EAAE,aAAa,EAAE,MAAM,2BAA2B,CAAC;AAC1D,OAAO,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AACpD,OAAO,EAAE,OAAO,EAAE,MAAM,oBAAoB,CAAC;AAC7C,OAAO,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AACjD,OAAO,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AAqBjD,MAAM,MAAM,GAAG,IAAI,SAAS,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC;AAExE,4EAA4E;AAC5E,2EAA2E;AAC3E,0EAA0E;AAC1E,0CAA0C;AAC1C,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,UAAU,IAAI,IAAI,CAAC;AACjD,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC;AACzC,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC;AACzC,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,2BAA2B,SAAS,IAAI,GAAG,cAAc,SAAS,IAAI,GAAG,cAAc,SAAS,IAAI,GAAG,IAAI,CAC5G,CAAC;AAEF,SAAS,eAAe,CAAC,QAAgB;IACvC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,iBAAiB,QAAQ,qCAAqC,CAAC,CAAC;IACrF,OAAO;QACL,OAAO,EAAE;YACP;gBACE,IAAI,EAAE,MAAe;gBACrB,IAAI,EAAE,GAAG,QAAQ,wJAAwJ;aAC1K;SACF;QACD,OAAO,EAAE,IAAa;KACvB,CAAC;AACJ,CAAC;AAED,MAAM,SAAS,GAAG,CAAC,IAAY,EAAE,EAAE,CAAC,CAAC;IACnC,KAAK,EAAE,SAAS,IAAI,EAAE;IACtB,OAAO,EAAE,SAAS,IAAI,EAAE;IACxB,IAAI;CACL,CAAC,CAAC;AAEH,6EAA6E;AAC7E,+EAA+E;AAC/E,wBAAwB;AACxB,MAAM,KAAK,GAAG,CAAC,CAAc,EAAE,EAAE,CAC9B,kBAAwF,CAAC,CAAC,CAAC,CAAC;AAE/F,KAAK,UAAU,WAAW,CAAI,EAA0D;IACtF,MAAM,OAAO,GAAG,UAAU,EAAE,CAAC;IAC7B,IAAI,CAAC;QACH,OAAO,MAAM,EAAE,CAAC,OAAO,CAAC,CAAC;IAC3B,CAAC;YAAS,CAAC;QACT,MAAM,OAAO,CAAC,KAAK,EAAE,CAAC;IACxB,CAAC;AACH,CAAC;AAED,SAAS,CACP,MAAM,EACN,uBAAuB,EACvB,2MAA2M,EAC3M;IACE,SAAS,EAAE,CAAC;SACT,IAAI,CAAC,CAAC,YAAY,EAAE,SAAS,CAAC,CAAC;SAC/B,QAAQ,CAAC,+DAA+D,CAAC;IAC5E,kBAAkB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,8CAA8C,CAAC;IAC9F,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,8BAA8B,CAAC;IACxE,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,8BAA8B,CAAC;IAC/E,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,iDAAiD,CAAC;IAC/E,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,yBAAyB,CAAC;CACvE,EACD,KAAK,EAAE,IAA6B,EAAE,EAAE;IACtC,IAAI,SAAS,KAAK,IAAI;QAAE,OAAO,eAAe,CAAC,uBAAuB,CAAC,CAAC;IACxE,OAAO,WAAW,CAAC,CAAC,OAAO,EAAE,EAAE,CAC7B,aAAa,CAAC;QACZ,OAAO;QACP,KAAK;QACL,SAAS;QACT,SAAS,EAAE,SAAS,CAAC,uBAAuB,CAAC;QAC7C,GAAI,IAA6C;KAClD,CAAC,CACH,CAAC;AACJ,CAAC,CACF,CAAC;AAEF,SAAS,CACP,MAAM,EACN,uBAAuB,EACvB,sJAAsJ,EACtJ;IACE,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,+BAA+B,CAAC;IACvE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,aAAa,CAAC;IACrD,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,+BAA+B,CAAC;IAC1D,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,iDAAiD,CAAC;CACpF,EACD,KAAK,EAAE,IAA6B,EAAE,EAAE;IACtC,IAAI,SAAS,KAAK,IAAI;QAAE,OAAO,eAAe,CAAC,uBAAuB,CAAC,CAAC;IACxE,OAAO,WAAW,CAAC,CAAC,OAAO,EAAE,EAAE,CAC7B,aAAa,CAAC;QACZ,OAAO;QACP,IAAI,EAAE,WAAW;QACjB,KAAK;QACL,MAAM,EAAE,iBAAiB;QACzB,SAAS,EAAE,gBAAgB;QAC3B,SAAS;QACT,SAAS,EAAE,SAAS,CAAC,uBAAuB,CAAC;QAC7C,IAAI,EAAE,SAAS;QACf,GAAI,IAA6C;KAClD,CAAC,CACH,CAAC;AACJ,CAAC,CACF,CAAC;AAEF,SAAS,CACP,MAAM,EACN,sBAAsB,EACtB,wGAAwG,EACxG;IACE,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,uBAAuB,CAAC;IAC/D,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,iBAAiB,CAAC;IACzD,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,wBAAwB,CAAC;IACnD,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,2BAA2B,CAAC;CACpE,EACD,KAAK,EAAE,IAA6B,EAAE,EAAE;IACtC,IAAI,SAAS,KAAK,IAAI;QAAE,OAAO,eAAe,CAAC,sBAAsB,CAAC,CAAC;IACvE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,IAAI,EAAE,GAAG,IAA+B,CAAC;IACrE,OAAO,WAAW,CAAC,CAAC,OAAO,EAAE,EAAE,CAC7B,aAAa,CAAC;QACZ,OAAO;QACP,IAAI,EAAE,WAAW;QACjB,KAAK;QACL,MAAM,EAAE,iBAAiB;QACzB,SAAS,EAAE,gBAAgB;QAC3B,SAAS;QACT,SAAS,EAAE,SAAS,CAAC,sBAAsB,CAAC;QAC5C,IAAI,EAAE,QAAQ;QACd,GAAI,IAA6C;QACjD,sEAAsE;QACtE,oEAAoE;QACpE,WAAW,EAAE,QAAQ;KACtB,CAAC,CACH,CAAC;AACJ,CAAC,CACF,CAAC;AAEF,SAAS,CACP,MAAM,EACN,oBAAoB,EACpB,6GAA6G,EAC7G;IACE,SAAS,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,6CAA6C,CAAC;IACxF,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,sDAAsD,CAAC;IAC9F,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,0BAA0B,CAAC;IACrD,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,iBAAiB,CAAC;IAC1D,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,iBAAiB,CAAC;IAC/D,gBAAgB,EAAE,CAAC;SAChB,IAAI,CAAC,CAAC,QAAQ,EAAE,cAAc,CAAC,CAAC;SAChC,QAAQ,EAAE;SACV,QAAQ,CAAC,8EAA8E,CAAC;CAC5F,EACD,KAAK,EAAE,IAA6B,EAAE,EAAE;IACtC,IAAI,SAAS,KAAK,IAAI;QAAE,OAAO,eAAe,CAAC,oBAAoB,CAAC,CAAC;IACrE,OAAO,WAAW,CAAC,CAAC,OAAO,EAAE,EAAE,CAC7B,UAAU,CAAC;QACT,OAAO;QACP,KAAK;QACL,SAAS;QACT,SAAS,EAAE,SAAS,CAAC,oBAAoB,CAAC;QAC1C,GAAI,IAA0C;KAC/C,CAAC,CACH,CAAC;AACJ,CAAC,CACF,CAAC;AAEF,SAAS,CACP,MAAM,EACN,gBAAgB,EAChB,2FAA2F,EAC3F,EAAE,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,+BAA+B,CAAC,EAAE,EAC3E,KAAK,EAAE,IAA6B,EAAE,EAAE;IACtC,IAAI,SAAS,KAAK,IAAI;QAAE,OAAO,eAAe,CAAC,gBAAgB,CAAC,CAAC;IACjE,OAAO,WAAW,CAAC,CAAC,OAAO,EAAE,EAAE,CAC7B,OAAO,CAAC;QACN,OAAO;QACP,IAAI,EAAE,WAAW;QACjB,SAAS;QACT,UAAU,EAAE,IAAI,CAAC,UAAoB;KACtC,CAAC,CACH,CAAC;AACJ,CAAC,CACF,CAAC;AAEF,SAAS,CACP,MAAM,EACN,kBAAkB,EAClB,6JAA6J,EAC7J,EAAE,EACF,KAAK,IAAI,EAAE;IACT,IAAI,SAAS,KAAK,IAAI;QAAE,OAAO,eAAe,CAAC,kBAAkB,CAAC,CAAC;IACnE,OAAO,WAAW,CAAC,CAAC,OAAO,EAAE,EAAE,CAC7B,SAAS,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,SAAS,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,CACxE,CAAC;AACJ,CAAC,CACF,CAAC;AAEF,SAAS,CACP,MAAM,EACN,kBAAkB,EAClB,sOAAsO,EACtO,EAAE,EACF,KAAK,IAAI,EAAE;IACT,IAAI,SAAS,KAAK,IAAI;QAAE,OAAO,eAAe,CAAC,kBAAkB,CAAC,CAAC;IACnE,OAAO,WAAW,CAAC,CAAC,OAAO,EAAE,EAAE,CAC7B,SAAS,CAAC;QACR,OAAO;QACP,IAAI,EAAE,UAAU;QAChB,SAAS;QACT,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE;KAChB,CAAC,CACH,CAAC;AACJ,CAAC,CACF,CAAC;AAEF,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,KAAK,IAAI,EAAE;IAC9B,MAAM,WAAW,EAAE,CAAC;IACpB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC;AAEH,MAAM,MAAM,CAAC,OAAO,CAAC,IAAI,oBAAoB,EAAE,CAAC,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AACpE,OAAO,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAC;AACjF,OAAO,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AACpE,OAAO,EAAE,kBAAkB,EAAE,MAAM,2CAA2C,CAAC;AAC/E,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AACzD,OAAO,EACL,UAAU,EACV,oBAAoB,EACpB,WAAW,EACX,aAAa,EACb,gBAAgB,EAChB,iBAAiB,GAClB,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,aAAa,EAAE,MAAM,2BAA2B,CAAC;AAC1D,OAAO,EAAE,aAAa,EAAE,MAAM,2BAA2B,CAAC;AAC1D,OAAO,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AACpD,OAAO,EAAE,OAAO,EAAE,MAAM,oBAAoB,CAAC;AAC7C,OAAO,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AACjD,OAAO,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AAsBjD,MAAM,MAAM,GAAG,IAAI,SAAS,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC;AAExE,4EAA4E;AAC5E,2EAA2E;AAC3E,0EAA0E;AAC1E,0CAA0C;AAC1C,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,UAAU,IAAI,IAAI,CAAC;AACjD,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC;AACzC,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC;AACzC,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,2BAA2B,SAAS,IAAI,GAAG,cAAc,SAAS,IAAI,GAAG,cAAc,SAAS,IAAI,GAAG,IAAI,CAC5G,CAAC;AAEF,SAAS,eAAe,CAAC,QAAgB;IACvC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,iBAAiB,QAAQ,qCAAqC,CAAC,CAAC;IACrF,OAAO;QACL,OAAO,EAAE;YACP;gBACE,IAAI,EAAE,MAAe;gBACrB,IAAI,EAAE,GAAG,QAAQ,wJAAwJ;aAC1K;SACF;QACD,OAAO,EAAE,IAAa;KACvB,CAAC;AACJ,CAAC;AAED,6EAA6E;AAC7E,+EAA+E;AAC/E,8EAA8E;AAC9E,sCAAsC;AACtC,MAAM,SAAS,GAAG,CAAC,IAAY,EAAE,EAAE,CAAC,CAAC;IACnC,KAAK,EAAE,SAAS;IAChB,OAAO,EAAE,SAAS;IAClB,IAAI;IACJ,MAAM,EAAE,QAAQ;CACjB,CAAC,CAAC;AAEH,6EAA6E;AAC7E,4EAA4E;AAC5E,8EAA8E;AAC9E,mBAAmB;AACnB,MAAM,KAAK,GAAY,kBAAkB,CAAC;AAE1C,KAAK,UAAU,WAAW,CAAI,EAA0D;IACtF,MAAM,OAAO,GAAG,UAAU,EAAE,CAAC;IAC7B,IAAI,CAAC;QACH,OAAO,MAAM,EAAE,CAAC,OAAO,CAAC,CAAC;IAC3B,CAAC;YAAS,CAAC;QACT,MAAM,OAAO,CAAC,KAAK,EAAE,CAAC;IACxB,CAAC;AACH,CAAC;AAED,SAAS,CACP,MAAM,EACN,uBAAuB,EACvB,2MAA2M,EAC3M;IACE,SAAS,EAAE,CAAC;SACT,IAAI,CAAC,CAAC,YAAY,EAAE,SAAS,CAAC,CAAC;SAC/B,QAAQ,CAAC,+DAA+D,CAAC;IAC5E,kBAAkB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,8CAA8C,CAAC;IAC9F,kBAAkB,EAAE,CAAC;SAClB,MAAM,EAAE;SACR,GAAG,CAAC,CAAC,CAAC;SACN,QAAQ,CACP,uLAAuL,CACxL;IACH,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,8BAA8B,CAAC;IAC/E,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,iDAAiD,CAAC;IAC/E,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,yBAAyB,CAAC;CACvE,EACD,KAAK,EAAE,IAA6B,EAAE,EAAE;IACtC,IAAI,SAAS,KAAK,IAAI;QAAE,OAAO,eAAe,CAAC,uBAAuB,CAAC,CAAC;IACxE,OAAO,WAAW,CAAC,CAAC,OAAO,EAAE,EAAE,CAC7B,aAAa,CAAC;QACZ,OAAO;QACP,KAAK;QACL,QAAQ,EAAE,oBAAoB;QAC9B,SAAS;QACT,SAAS,EAAE,SAAS,CAAC,uBAAuB,CAAC;QAC7C,GAAI,IAA6C;KAClD,CAAC,CACH,CAAC;AACJ,CAAC,CACF,CAAC;AAEF,SAAS,CACP,MAAM,EACN,uBAAuB,EACvB,sJAAsJ,EACtJ;IACE,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,+BAA+B,CAAC;IACvE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,aAAa,CAAC;IACrD,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,+BAA+B,CAAC;IAC1D,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,iDAAiD,CAAC;CACpF,EACD,KAAK,EAAE,IAA6B,EAAE,EAAE;IACtC,IAAI,SAAS,KAAK,IAAI;QAAE,OAAO,eAAe,CAAC,uBAAuB,CAAC,CAAC;IACxE,OAAO,WAAW,CAAC,CAAC,OAAO,EAAE,EAAE,CAC7B,aAAa,CAAC;QACZ,OAAO;QACP,IAAI,EAAE,WAAW;QACjB,KAAK;QACL,MAAM,EAAE,iBAAiB;QACzB,SAAS,EAAE,gBAAgB;QAC3B,SAAS;QACT,SAAS,EAAE,SAAS,CAAC,uBAAuB,CAAC;QAC7C,IAAI,EAAE,SAAS;QACf,GAAI,IAA6C;KAClD,CAAC,CACH,CAAC;AACJ,CAAC,CACF,CAAC;AAEF,SAAS,CACP,MAAM,EACN,sBAAsB,EACtB,wGAAwG,EACxG;IACE,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,uBAAuB,CAAC;IAC/D,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,iBAAiB,CAAC;IACzD,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,wBAAwB,CAAC;IACnD,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,2BAA2B,CAAC;CACpE,EACD,KAAK,EAAE,IAA6B,EAAE,EAAE;IACtC,IAAI,SAAS,KAAK,IAAI;QAAE,OAAO,eAAe,CAAC,sBAAsB,CAAC,CAAC;IACvE,OAAO,WAAW,CAAC,CAAC,OAAO,EAAE,EAAE,CAC7B,aAAa,CAAC;QACZ,OAAO;QACP,IAAI,EAAE,WAAW;QACjB,KAAK;QACL,MAAM,EAAE,iBAAiB;QACzB,SAAS,EAAE,gBAAgB;QAC3B,SAAS;QACT,SAAS,EAAE,SAAS,CAAC,sBAAsB,CAAC;QAC5C,IAAI,EAAE,QAAQ;QACd,GAAI,IAA6C;QACjD,sEAAsE;QACtE,oEAAoE;QACpE,WAAW,EAAE,QAAQ;KACtB,CAAC,CACH,CAAC;AACJ,CAAC,CACF,CAAC;AAEF,SAAS,CACP,MAAM,EACN,oBAAoB,EACpB,6GAA6G,EAC7G;IACE,SAAS,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,6CAA6C,CAAC;IACxF,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,sDAAsD,CAAC;IAC9F,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,0BAA0B,CAAC;IACrD,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,iBAAiB,CAAC;IAC1D,kBAAkB,EAAE,CAAC;SAClB,MAAM,EAAE;SACR,GAAG,CAAC,CAAC,CAAC;SACN,QAAQ,CACP,yHAAyH,CAC1H;CACJ,EACD,KAAK,EAAE,IAA6B,EAAE,EAAE;IACtC,IAAI,SAAS,KAAK,IAAI;QAAE,OAAO,eAAe,CAAC,oBAAoB,CAAC,CAAC;IACrE,OAAO,WAAW,CAAC,CAAC,OAAO,EAAE,EAAE,CAC7B,UAAU,CAAC;QACT,OAAO;QACP,KAAK;QACL,SAAS;QACT,SAAS,EAAE,SAAS,CAAC,oBAAoB,CAAC;QAC1C,GAAI,IAA0C;KAC/C,CAAC,CACH,CAAC;AACJ,CAAC,CACF,CAAC;AAEF,SAAS,CACP,MAAM,EACN,gBAAgB,EAChB,2FAA2F,EAC3F,EAAE,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,+BAA+B,CAAC,EAAE,EAC3E,KAAK,EAAE,IAA6B,EAAE,EAAE;IACtC,IAAI,SAAS,KAAK,IAAI;QAAE,OAAO,eAAe,CAAC,gBAAgB,CAAC,CAAC;IACjE,OAAO,WAAW,CAAC,CAAC,OAAO,EAAE,EAAE,CAC7B,OAAO,CAAC;QACN,OAAO;QACP,IAAI,EAAE,WAAW;QACjB,SAAS;QACT,UAAU,EAAE,IAAI,CAAC,UAAoB;KACtC,CAAC,CACH,CAAC;AACJ,CAAC,CACF,CAAC;AAEF,SAAS,CACP,MAAM,EACN,kBAAkB,EAClB,6JAA6J,EAC7J,EAAE,EACF,KAAK,IAAI,EAAE;IACT,IAAI,SAAS,KAAK,IAAI;QAAE,OAAO,eAAe,CAAC,kBAAkB,CAAC,CAAC;IACnE,OAAO,WAAW,CAAC,CAAC,OAAO,EAAE,EAAE,CAC7B,SAAS,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,SAAS,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,CACxE,CAAC;AACJ,CAAC,CACF,CAAC;AAEF,SAAS,CACP,MAAM,EACN,kBAAkB,EAClB,sOAAsO,EACtO,EAAE,EACF,KAAK,IAAI,EAAE;IACT,IAAI,SAAS,KAAK,IAAI;QAAE,OAAO,eAAe,CAAC,kBAAkB,CAAC,CAAC;IACnE,OAAO,WAAW,CAAC,CAAC,OAAO,EAAE,EAAE,CAC7B,SAAS,CAAC;QACR,OAAO;QACP,IAAI,EAAE,UAAU;QAChB,SAAS;QACT,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE;KAChB,CAAC,CACH,CAAC;AACJ,CAAC,CACF,CAAC;AAEF,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,KAAK,IAAI,EAAE;IAC9B,MAAM,WAAW,EAAE,CAAC;IACpB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC;AAEH,MAAM,MAAM,CAAC,OAAO,CAAC,IAAI,oBAAoB,EAAE,CAAC,CAAC"}

package/payload/platform/plugins/ledger/mcp/dist/lib/read.d.ts

@@ -10,6 +10,16 @@ import type { Session } from "neo4j-driver";
 import type { InvoiceRead } from "../tools/payment-record.js";
 import type { StatementRows } from "../tools/statement.js";
 import type { LedgerCensusRows } from "../../../../../lib/ledger-core/dist/index.js";
+/**
+ * The display name of a counterparty node, or null if that element id does not
+ * exist on this account.
+ *
+ * The invoice stores this name AND links to this node, so both must come from
+ * one lookup. Taking the name from a separate argument would let an invoice
+ * read as one company while pointing at another, and the account filter is
+ * what stops an id from a neighbouring account resolving at all.
+ */
+export declare function readCounterpartyName(session: Session, accountId: string, nodeId: string): Promise<string | null>;
 export declare function readInvoice(session: Session, accountId: string, ref: string): Promise<InvoiceRead | null>;
 /** The op=verify re-read. Deliberately goes back to the graph rather than
  *  trusting the figure the write path just computed. */
@@ -25,5 +35,5 @@ export declare function readStatement(session: Session, accountId: string): Prom
  * invoice, payments that look like accidental duplicates, and ledger indexes
  * that are declared in schema.cypher but absent from this database.
  */
-export declare function readCensus(session: Session, accountId: string): Promise<LedgerCensusRows>;
+export declare function readCensus(session: Session, accountId: string, now: number): Promise<LedgerCensusRows>;
 //# sourceMappingURL=read.d.ts.map

package/payload/platform/plugins/ledger/mcp/dist/lib/read.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"read.d.ts","sourceRoot":"","sources":["../../src/lib/read.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AAC5C,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,4BAA4B,CAAC;AAC9D,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAC3D,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,8CAA8C,CAAC;AAerF,wBAAsB,WAAW,CAC/B,OAAO,EAAE,OAAO,EAChB,SAAS,EAAE,MAAM,EACjB,GAAG,EAAE,MAAM,GACV,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC,CAgC7B;AAED;wDACwD;AACxD,wBAAsB,iBAAiB,CACrC,OAAO,EAAE,OAAO,EAChB,SAAS,EAAE,MAAM,EACjB,GAAG,EAAE,MAAM,GACV,OAAO,CAAC,MAAM,CAAC,CAIjB;AAED;;4BAE4B;AAC5B,wBAAsB,gBAAgB,CACpC,OAAO,EAAE,OAAO,EAChB,SAAS,EAAE,MAAM,EACjB,GAAG,EAAE,MAAM,EACX,MAAM,EAAE,MAAM,GAAG,WAAW,GAAG,MAAM,GACpC,OAAO,CAAC,IAAI,CAAC,CAMf;AAED,wBAAsB,aAAa,CACjC,OAAO,EAAE,OAAO,EAChB,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,aAAa,CAAC,CA6CxB;AAED;;;;;GAKG;AACH,wBAAsB,UAAU,CAC9B,OAAO,EAAE,OAAO,EAChB,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,gBAAgB,CAAC,CAqD3B"}
+{"version":3,"file":"read.d.ts","sourceRoot":"","sources":["../../src/lib/read.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AAC5C,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,4BAA4B,CAAC;AAC9D,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAC3D,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,8CAA8C,CAAC;AAgBrF;;;;;;;;GAQG;AACH,wBAAsB,oBAAoB,CACxC,OAAO,EAAE,OAAO,EAChB,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,MAAM,GACb,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAQxB;AAED,wBAAsB,WAAW,CAC/B,OAAO,EAAE,OAAO,EAChB,SAAS,EAAE,MAAM,EACjB,GAAG,EAAE,MAAM,GACV,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC,CAkC7B;AAED;wDACwD;AACxD,wBAAsB,iBAAiB,CACrC,OAAO,EAAE,OAAO,EAChB,SAAS,EAAE,MAAM,EACjB,GAAG,EAAE,MAAM,GACV,OAAO,CAAC,MAAM,CAAC,CAIjB;AAED;;4BAE4B;AAC5B,wBAAsB,gBAAgB,CACpC,OAAO,EAAE,OAAO,EAChB,SAAS,EAAE,MAAM,EACjB,GAAG,EAAE,MAAM,EACX,MAAM,EAAE,MAAM,GAAG,WAAW,GAAG,MAAM,GACpC,OAAO,CAAC,IAAI,CAAC,CAMf;AAED,wBAAsB,aAAa,CACjC,OAAO,EAAE,OAAO,EAChB,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,aAAa,CAAC,CA6CxB;AAED;;;;;GAKG;AACH,wBAAsB,UAAU,CAC9B,OAAO,EAAE,OAAO,EAChB,SAAS,EAAE,MAAM,EACjB,GAAG,EAAE,MAAM,GACV,OAAO,CAAC,gBAAgB,CAAC,CAsD3B"}

package/payload/platform/plugins/ledger/mcp/dist/lib/read.js

@@ -1,4 +1,5 @@
 import { LEDGER_INDEX_NAMES, computeOutstanding, } from "../../../../../lib/ledger-core/dist/index.js";
+import { countWriteRejects24h } from "./write-rejects.js";
 /** neo4j-driver returns Integer objects for counts; numbers pass through. */
 function toNum(v) {
     if (typeof v === "number")
@@ -8,6 +9,21 @@ function toNum(v) {
     }
     return 0;
 }
+/**
+ * The display name of a counterparty node, or null if that element id does not
+ * exist on this account.
+ *
+ * The invoice stores this name AND links to this node, so both must come from
+ * one lookup. Taking the name from a separate argument would let an invoice
+ * read as one company while pointing at another, and the account filter is
+ * what stops an id from a neighbouring account resolving at all.
+ */
+export async function readCounterpartyName(session, accountId, nodeId) {
+    const res = await session.run(`MATCH (o) WHERE elementId(o) = $nodeId AND o.accountId = $accountId
+     RETURN coalesce(o.name, trim(coalesce(o.givenName, "") + " " + coalesce(o.familyName, ""))) AS name`, { accountId, nodeId });
+    const name = res.records[0]?.get("name");
+    return typeof name === "string" && name.trim() !== "" ? name.trim() : null;
+}
 export async function readInvoice(session, accountId, ref) {
     // Staged WITH: payments collapse to one row before the credit match expands
     // again, so the two OPTIONAL MATCHes never form a cartesian product that
@@ -18,6 +34,7 @@ export async function readInvoice(session, accountId, ref) {
      OPTIONAL MATCH (i)-[:HAS_CREDIT]->(c:Credit)
      WITH i, ps, collect(DISTINCT c) AS cs
      RETURN labels(i) AS labels,
+            elementId(i) AS nodeId,
             i.confirmationNumber AS invoiceId,
             i.totalPaymentDue AS totalPaymentDue,
             i.dueDate AS dueDate,
@@ -30,6 +47,7 @@ export async function readInvoice(session, accountId, ref) {
     const labels = rec.get("labels");
     return {
         label: labels.includes("InboundInvoice") ? "InboundInvoice" : "Invoice",
+        nodeId: rec.get("nodeId"),
         invoiceId: rec.get("invoiceId"),
         totalPaymentDue: toNum(rec.get("totalPaymentDue")),
         dueDateMs: Date.parse(rec.get("dueDate") ?? "") || 0,
@@ -97,7 +115,7 @@ export async function readStatement(session, accountId) {
  * invoice, payments that look like accidental duplicates, and ledger indexes
  * that are declared in schema.cypher but absent from this database.
  */
-export async function readCensus(session, accountId) {
+export async function readCensus(session, accountId, now) {
     const counts = await session.run(
     // OPTIONAL MATCH, not MATCH: with no payments a plain MATCH eliminates the
     // row, so records[0] is undefined and invoices reports 0 as well. That is
@@ -133,6 +151,7 @@ export async function readCensus(session, accountId) {
             date: r.get("date") ?? "",
         })),
         declaredNotLive,
+        writeRejects24h: countWriteRejects24h(process.env.LOG_DIR ?? "", now),
     };
 }
 //# sourceMappingURL=read.js.map

package/payload/platform/plugins/ledger/mcp/dist/lib/read.js.map

@@ -1 +1 @@
-{"version":3,"file":"read.js","sourceRoot":"","sources":["../../src/lib/read.ts"],"names":[],"mappings":"AAYA,OAAO,EACL,kBAAkB,EAClB,kBAAkB,GACnB,MAAM,8CAA8C,CAAC;AAEtD,6EAA6E;AAC7E,SAAS,KAAK,CAAC,CAAU;IACvB,IAAI,OAAO,CAAC,KAAK,QAAQ;QAAE,OAAO,CAAC,CAAC;IACpC,IAAI,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,UAAU,IAAI,CAAC,EAAE,CAAC;QAClD,OAAQ,CAA4B,CAAC,QAAQ,EAAE,CAAC;IAClD,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,OAAgB,EAChB,SAAiB,EACjB,GAAW;IAEX,4EAA4E;IAC5E,yEAAyE;IACzE,gCAAgC;IAChC,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,GAAG,CAC3B;;;;;;;;;;;4CAWwC,EACxC,EAAE,SAAS,EAAE,GAAG,EAAE,CACnB,CAAC;IACF,MAAM,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;IAC3B,IAAI,GAAG,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IAEnC,MAAM,MAAM,GAAG,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAa,CAAC;IAC7C,OAAO;QACL,KAAK,EAAE,MAAM,CAAC,QAAQ,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,SAAS;QACvE,SAAS,EAAE,GAAG,CAAC,GAAG,CAAC,WAAW,CAAW;QACzC,eAAe,EAAE,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC;QAClD,SAAS,EAAE,IAAI,CAAC,KAAK,CAAE,GAAG,CAAC,GAAG,CAAC,SAAS,CAAY,IAAI,EAAE,CAAC,IAAI,CAAC;QAChE,QAAQ,EAAG,GAAG,CAAC,GAAG,CAAC,UAAU,CAAe,CAAC,GAAG,CAAC,KAAK,CAAC;QACvD,OAAO,EAAG,GAAG,CAAC,GAAG,CAAC,SAAS,CAAe,CAAC,GAAG,CAAC,KAAK,CAAC;QACrD,UAAU,EAAG,GAAG,CAAC,GAAG,CAAC,YAAY,CAAc,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,IAAI,CAAC;KAC1E,CAAC;AACJ,CAAC;AAED;wDACwD;AACxD,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,OAAgB,EAChB,SAAiB,EACjB,GAAW;IAEX,MAAM,OAAO,GAAG,MAAM,WAAW,CAAC,OAAO,EAAE,SAAS,EAAE,GAAG,CAAC,CAAC;IAC3D,IAAI,OAAO,KAAK,IAAI;QAAE,OAAO,MAAM,CAAC,GAAG,CAAC;IACxC,OAAO,kBAAkB,CAAC,OAAO,CAAC,eAAe,EAAE,OAAO,CAAC,QAAQ,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;AACxF,CAAC;AAED;;4BAE4B;AAC5B,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,OAAgB,EAChB,SAAiB,EACjB,GAAW,EACX,MAAqC;IAErC,MAAM,OAAO,CAAC,GAAG,CACf;mCAC+B,EAC/B,EAAE,SAAS,EAAE,GAAG,EAAE,MAAM,EAAE,CAC3B,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,OAAgB,EAChB,SAAiB;IAEjB,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,GAAG,CAC3B;;;;;;;8EAO0E,EAC1E,EAAE,SAAS,EAAE,CACd,CAAC;IAEF,MAAM,WAAW,GAAG,EAAE,CAAC;IACvB,MAAM,QAAQ,GAAG,EAAE,CAAC;IACpB,KAAK,MAAM,GAAG,IAAI,GAAG,CAAC,OAAO,EAAE,CAAC;QAC9B,MAAM,WAAW,GAAG,kBAAkB,CACpC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC,EAChC,GAAG,CAAC,GAAG,CAAC,UAAU,CAAe,CAAC,GAAG,CAAC,KAAK,CAAC,EAC5C,GAAG,CAAC,GAAG,CAAC,SAAS,CAAe,CAAC,GAAG,CAAC,KAAK,CAAC,CAC7C,CAAC;QACF,sDAAsD;QACtD,IAAI,WAAW,IAAI,CAAC;YAAE,SAAS;QAC/B,MAAM,GAAG,GAAG;YACV,GAAG,EAAE,GAAG,CAAC,GAAG,CAAC,KAAK,CAAW;YAC7B,SAAS,EAAE,IAAI,CAAC,KAAK,CAAE,GAAG,CAAC,GAAG,CAAC,SAAS,CAAY,IAAI,EAAE,CAAC,IAAI,CAAC;YAChE,WAAW;SACZ,CAAC;QACF,IAAK,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAc,CAAC,QAAQ,CAAC,gBAAgB,CAAC;YAAE,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;;YAC9E,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC7B,CAAC;IAED,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,GAAG,CAC5B;+DAC2D,EAC3D,EAAE,SAAS,EAAE,CACd,CAAC;IACF,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;QAC/B,IAAI,GAAG,CAAC,GAAG,CAAC,WAAW,CAAC,KAAK,IAAI;YAAE,MAAM,GAAG,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC;;YAC/D,OAAO,GAAG,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC;IACzC,CAAC;IAED,OAAO,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;AACpD,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAC9B,OAAgB,EAChB,SAAiB;IAEjB,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,GAAG;IAC9B,2EAA2E;IAC3E,0EAA0E;IAC1E,0EAA0E;IAC1E,sEAAsE;IACtE;;;2CAGuC,EACvC,EAAE,SAAS,EAAE,CACd,CAAC;IAEF,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,GAAG,CAC/B;;uCAEmC,EACnC,EAAE,SAAS,EAAE,CACd,CAAC;IAEF,yEAAyE;IACzE,8DAA8D;IAC9D,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,GAAG,CAC9B;;2CAEuC,EACvC,EAAE,SAAS,EAAE,CACd,CAAC;IAEF,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,GAAG,CAC5B;;+CAE2C,EAC3C,EAAE,SAAS,EAAE,CACd,CAAC;IAEF,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,uDAAuD,CAAC,CAAC;IAC3F,MAAM,IAAI,GAAG,IAAI,GAAG,CAAE,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,OAAO,CAAc,IAAI,EAAE,CAAC,CAAC;IAC3E,MAAM,eAAe,GAAG,kBAAkB,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IAEvE,OAAO;QACL,QAAQ,EAAE,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,UAAU,CAAC,CAAC;QACnD,QAAQ,EAAE,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,UAAU,CAAC,CAAC;QACnD,cAAc,EAAE,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,gBAAgB,CAAC,CAAC;QAChE,kBAAkB,EAAE,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,oBAAoB,CAAC,CAAC;QACvE,WAAW,EAAE,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YACpC,SAAS,EAAG,CAAC,CAAC,GAAG,CAAC,WAAW,CAAY,IAAI,EAAE;YAC/C,SAAS,EAAG,CAAC,CAAC,GAAG,CAAC,WAAW,CAAY,IAAI,EAAE;YAC/C,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;YAC9B,IAAI,EAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAY,IAAI,EAAE;SACtC,CAAC,CAAC;QACH,eAAe;KAChB,CAAC;AACJ,CAAC"}
+{"version":3,"file":"read.js","sourceRoot":"","sources":["../../src/lib/read.ts"],"names":[],"mappings":"AAYA,OAAO,EACL,kBAAkB,EAClB,kBAAkB,GACnB,MAAM,8CAA8C,CAAC;AACtD,OAAO,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAC;AAE1D,6EAA6E;AAC7E,SAAS,KAAK,CAAC,CAAU;IACvB,IAAI,OAAO,CAAC,KAAK,QAAQ;QAAE,OAAO,CAAC,CAAC;IACpC,IAAI,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,UAAU,IAAI,CAAC,EAAE,CAAC;QAClD,OAAQ,CAA4B,CAAC,QAAQ,EAAE,CAAC;IAClD,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,OAAgB,EAChB,SAAiB,EACjB,MAAc;IAEd,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,GAAG,CAC3B;yGACqG,EACrG,EAAE,SAAS,EAAE,MAAM,EAAE,CACtB,CAAC;IACF,MAAM,IAAI,GAAG,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;IACzC,OAAO,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AAC7E,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,OAAgB,EAChB,SAAiB,EACjB,GAAW;IAEX,4EAA4E;IAC5E,yEAAyE;IACzE,gCAAgC;IAChC,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,GAAG,CAC3B;;;;;;;;;;;;4CAYwC,EACxC,EAAE,SAAS,EAAE,GAAG,EAAE,CACnB,CAAC;IACF,MAAM,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;IAC3B,IAAI,GAAG,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IAEnC,MAAM,MAAM,GAAG,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAa,CAAC;IAC7C,OAAO;QACL,KAAK,EAAE,MAAM,CAAC,QAAQ,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,SAAS;QACvE,MAAM,EAAE,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAW;QACnC,SAAS,EAAE,GAAG,CAAC,GAAG,CAAC,WAAW,CAAW;QACzC,eAAe,EAAE,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC;QAClD,SAAS,EAAE,IAAI,CAAC,KAAK,CAAE,GAAG,CAAC,GAAG,CAAC,SAAS,CAAY,IAAI,EAAE,CAAC,IAAI,CAAC;QAChE,QAAQ,EAAG,GAAG,CAAC,GAAG,CAAC,UAAU,CAAe,CAAC,GAAG,CAAC,KAAK,CAAC;QACvD,OAAO,EAAG,GAAG,CAAC,GAAG,CAAC,SAAS,CAAe,CAAC,GAAG,CAAC,KAAK,CAAC;QACrD,UAAU,EAAG,GAAG,CAAC,GAAG,CAAC,YAAY,CAAc,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,IAAI,CAAC;KAC1E,CAAC;AACJ,CAAC;AAED;wDACwD;AACxD,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,OAAgB,EAChB,SAAiB,EACjB,GAAW;IAEX,MAAM,OAAO,GAAG,MAAM,WAAW,CAAC,OAAO,EAAE,SAAS,EAAE,GAAG,CAAC,CAAC;IAC3D,IAAI,OAAO,KAAK,IAAI;QAAE,OAAO,MAAM,CAAC,GAAG,CAAC;IACxC,OAAO,kBAAkB,CAAC,OAAO,CAAC,eAAe,EAAE,OAAO,CAAC,QAAQ,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;AACxF,CAAC;AAED;;4BAE4B;AAC5B,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,OAAgB,EAChB,SAAiB,EACjB,GAAW,EACX,MAAqC;IAErC,MAAM,OAAO,CAAC,GAAG,CACf;mCAC+B,EAC/B,EAAE,SAAS,EAAE,GAAG,EAAE,MAAM,EAAE,CAC3B,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,OAAgB,EAChB,SAAiB;IAEjB,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,GAAG,CAC3B;;;;;;;8EAO0E,EAC1E,EAAE,SAAS,EAAE,CACd,CAAC;IAEF,MAAM,WAAW,GAAG,EAAE,CAAC;IACvB,MAAM,QAAQ,GAAG,EAAE,CAAC;IACpB,KAAK,MAAM,GAAG,IAAI,GAAG,CAAC,OAAO,EAAE,CAAC;QAC9B,MAAM,WAAW,GAAG,kBAAkB,CACpC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC,EAChC,GAAG,CAAC,GAAG,CAAC,UAAU,CAAe,CAAC,GAAG,CAAC,KAAK,CAAC,EAC5C,GAAG,CAAC,GAAG,CAAC,SAAS,CAAe,CAAC,GAAG,CAAC,KAAK,CAAC,CAC7C,CAAC;QACF,sDAAsD;QACtD,IAAI,WAAW,IAAI,CAAC;YAAE,SAAS;QAC/B,MAAM,GAAG,GAAG;YACV,GAAG,EAAE,GAAG,CAAC,GAAG,CAAC,KAAK,CAAW;YAC7B,SAAS,EAAE,IAAI,CAAC,KAAK,CAAE,GAAG,CAAC,GAAG,CAAC,SAAS,CAAY,IAAI,EAAE,CAAC,IAAI,CAAC;YAChE,WAAW;SACZ,CAAC;QACF,IAAK,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAc,CAAC,QAAQ,CAAC,gBAAgB,CAAC;YAAE,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;;YAC9E,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC7B,CAAC;IAED,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,GAAG,CAC5B;+DAC2D,EAC3D,EAAE,SAAS,EAAE,CACd,CAAC;IACF,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;QAC/B,IAAI,GAAG,CAAC,GAAG,CAAC,WAAW,CAAC,KAAK,IAAI;YAAE,MAAM,GAAG,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC;;YAC/D,OAAO,GAAG,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC;IACzC,CAAC;IAED,OAAO,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;AACpD,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAC9B,OAAgB,EAChB,SAAiB,EACjB,GAAW;IAEX,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,GAAG;IAC9B,2EAA2E;IAC3E,0EAA0E;IAC1E,0EAA0E;IAC1E,sEAAsE;IACtE;;;2CAGuC,EACvC,EAAE,SAAS,EAAE,CACd,CAAC;IAEF,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,GAAG,CAC/B;;uCAEmC,EACnC,EAAE,SAAS,EAAE,CACd,CAAC;IAEF,yEAAyE;IACzE,8DAA8D;IAC9D,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,GAAG,CAC9B;;2CAEuC,EACvC,EAAE,SAAS,EAAE,CACd,CAAC;IAEF,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,GAAG,CAC5B;;+CAE2C,EAC3C,EAAE,SAAS,EAAE,CACd,CAAC;IAEF,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,uDAAuD,CAAC,CAAC;IAC3F,MAAM,IAAI,GAAG,IAAI,GAAG,CAAE,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,OAAO,CAAc,IAAI,EAAE,CAAC,CAAC;IAC3E,MAAM,eAAe,GAAG,kBAAkB,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IAEvE,OAAO;QACL,QAAQ,EAAE,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,UAAU,CAAC,CAAC;QACnD,QAAQ,EAAE,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,UAAU,CAAC,CAAC;QACnD,cAAc,EAAE,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,gBAAgB,CAAC,CAAC;QAChE,kBAAkB,EAAE,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,oBAAoB,CAAC,CAAC;QACvE,WAAW,EAAE,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YACpC,SAAS,EAAG,CAAC,CAAC,GAAG,CAAC,WAAW,CAAY,IAAI,EAAE;YAC/C,SAAS,EAAG,CAAC,CAAC,GAAG,CAAC,WAAW,CAAY,IAAI,EAAE;YAC/C,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;YAC9B,IAAI,EAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAY,IAAI,EAAE;SACtC,CAAC,CAAC;QACH,eAAe;QACf,eAAe,EAAE,oBAAoB,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,IAAI,EAAE,EAAE,GAAG,CAAC;KACtE,CAAC;AACJ,CAAC"}

package/payload/platform/plugins/ledger/mcp/dist/lib/types.d.ts

@@ -6,17 +6,20 @@
  * driver. `index.ts` passes the real `writeNodeWithEdges` and the real reads.
  */
 import type { Session } from "neo4j-driver";
-export interface CreatedBy {
-    agent: string;
-    session: string;
-    tool: string;
-}
-export interface GraphRelationship {
-    type: string;
-    direction: "incoming" | "outgoing";
-    targetLabel: string;
-    targetProps: Record<string, unknown>;
-}
+/**
+ * Task 1788 — the real graph-write contracts, imported rather than redeclared.
+ *
+ * This file used to declare its own `GraphRelationship` with
+ * `targetLabel`/`targetProps`, and `index.ts` forced it past the type checker
+ * with a cast. The real shape needs `targetNodeId`, an element id, so at
+ * runtime every relationship carried `undefined` and graph-write rejected every
+ * create with `reason=unresolved-target requested=1 found=0`. The whole write
+ * path was dead from the day it shipped. Importing the real types is what makes
+ * that a compile error instead of a silent runtime rejection, so the redeclared
+ * shape must never come back.
+ */
+import type { CreatedBy, GraphRelationship } from "../../../../../lib/graph-write/dist/index.js";
+export type { CreatedBy, GraphRelationship };
 export interface WriteParams {
     session: Session;
     labels: string[];

package/payload/platform/plugins/ledger/mcp/dist/lib/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/lib/types.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AAE5C,MAAM,WAAW,SAAS;IACxB,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,UAAU,GAAG,UAAU,CAAC;IACnC,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACtC;AAED,MAAM,WAAW,WAAW;IAC1B,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC/B,aAAa,EAAE,iBAAiB,EAAE,CAAC;IACnC,SAAS,EAAE,SAAS,CAAC;CACtB;AAED,MAAM,WAAW,WAAW;IAC1B,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,MAAM,OAAO,GAAG,CAAC,MAAM,EAAE,WAAW,KAAK,OAAO,CAAC,WAAW,CAAC,CAAC;AAEpE,MAAM,WAAW,UAAU;IACzB,OAAO,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC/C,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAED,wBAAgB,EAAE,CAAC,IAAI,EAAE,MAAM,GAAG,UAAU,CAE3C;AAED,wBAAgB,IAAI,CAAC,IAAI,EAAE,MAAM,GAAG,UAAU,CAE7C;AAED,6DAA6D;AAC7D,wBAAgB,KAAK,CAAC,CAAC,EAAE,MAAM,GAAG,MAAM,CAEvC;AAED;mEACmE;AACnE,MAAM,MAAM,gBAAgB,GAAG,YAAY,GAAG,SAAS,CAAC;AAExD,wBAAgB,QAAQ,CAAC,SAAS,EAAE,gBAAgB,GAAG,SAAS,GAAG,gBAAgB,CAElF"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/lib/types.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AAC5C;;;;;;;;;;;GAWG;AACH,OAAO,KAAK,EACV,SAAS,EACT,iBAAiB,EAClB,MAAM,8CAA8C,CAAC;AAEtD,YAAY,EAAE,SAAS,EAAE,iBAAiB,EAAE,CAAC;AAE7C,MAAM,WAAW,WAAW;IAC1B,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC/B,aAAa,EAAE,iBAAiB,EAAE,CAAC;IACnC,SAAS,EAAE,SAAS,CAAC;CACtB;AAED,MAAM,WAAW,WAAW;IAC1B,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,MAAM,OAAO,GAAG,CAAC,MAAM,EAAE,WAAW,KAAK,OAAO,CAAC,WAAW,CAAC,CAAC;AAEpE,MAAM,WAAW,UAAU;IACzB,OAAO,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC/C,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAED,wBAAgB,EAAE,CAAC,IAAI,EAAE,MAAM,GAAG,UAAU,CAE3C;AAED,wBAAgB,IAAI,CAAC,IAAI,EAAE,MAAM,GAAG,UAAU,CAE7C;AAED,6DAA6D;AAC7D,wBAAgB,KAAK,CAAC,CAAC,EAAE,MAAM,GAAG,MAAM,CAEvC;AAED;mEACmE;AACnE,MAAM,MAAM,gBAAgB,GAAG,YAAY,GAAG,SAAS,CAAC;AAExD,wBAAgB,QAAQ,CAAC,SAAS,EAAE,gBAAgB,GAAG,SAAS,GAAG,gBAAgB,CAElF"}

package/payload/platform/plugins/ledger/mcp/dist/lib/types.js.map

@@ -1 +1 @@
-{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/lib/types.ts"],"names":[],"mappings":"AA0CA,MAAM,UAAU,EAAE,CAAC,IAAY;IAC7B,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;AAC/C,CAAC;AAED,MAAM,UAAU,IAAI,CAAC,IAAY;IAC/B,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;AAC9D,CAAC;AAED,6DAA6D;AAC7D,MAAM,UAAU,KAAK,CAAC,CAAS;IAC7B,OAAO,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;AACtB,CAAC;AAMD,MAAM,UAAU,QAAQ,CAAC,SAA2B;IAClD,OAAO,SAAS,KAAK,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,gBAAgB,CAAC;AACnE,CAAC"}
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/lib/types.ts"],"names":[],"mappings":"AA+CA,MAAM,UAAU,EAAE,CAAC,IAAY;IAC7B,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;AAC/C,CAAC;AAED,MAAM,UAAU,IAAI,CAAC,IAAY;IAC/B,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;AAC9D,CAAC;AAED,6DAA6D;AAC7D,MAAM,UAAU,KAAK,CAAC,CAAS;IAC7B,OAAO,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;AACtB,CAAC;AAMD,MAAM,UAAU,QAAQ,CAAC,SAA2B;IAClD,OAAO,SAAS,KAAK,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,gBAAgB,CAAC;AACnE,CAAC"}

package/payload/platform/plugins/ledger/mcp/dist/lib/write-rejects.d.ts

@@ -0,0 +1,12 @@
+/**
+ * Counts `[graph-write] reject` lines across the ledger MCP tee logs modified
+ * within the trailing 24 hours.
+ *
+ * Uses file mtime rather than parsing per-line timestamps: the tee log carries
+ * no timestamp of its own, and a file untouched for a day cannot hold a reject
+ * from the last one. Best-effort — an unreadable log directory yields 0 rather
+ * than throwing, because a census that dies on a missing directory tells the
+ * operator nothing at all.
+ */
+export declare function countWriteRejects24h(logDir: string, now: number): number;
+//# sourceMappingURL=write-rejects.d.ts.map

package/payload/platform/plugins/ledger/mcp/dist/lib/write-rejects.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"write-rejects.d.ts","sourceRoot":"","sources":["../../src/lib/write-rejects.ts"],"names":[],"mappings":"AAeA;;;;;;;;;GASG;AACH,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,MAAM,CAwBxE"}

package/payload/platform/plugins/ledger/mcp/dist/lib/write-rejects.js

@@ -0,0 +1,50 @@
+/**
+ * Task 1788 — count recent write rejections from the ledger's own MCP logs.
+ *
+ * A rejected write cannot record its own failure in the graph, because the
+ * whole point is that nothing was written. The only durable trace is the
+ * stderr line graph-write emits, which `mcp-spawn-tee` captures per session.
+ * Counting those lines is what lets the census distinguish a healthy empty
+ * ledger from one whose write path is dead — on 2026-07-18 those two states
+ * printed identically for a full day.
+ */
+import { readdirSync, readFileSync, statSync } from "node:fs";
+import { join } from "node:path";
+const DAY_MS = 86_400_000;
+/**
+ * Counts `[graph-write] reject` lines across the ledger MCP tee logs modified
+ * within the trailing 24 hours.
+ *
+ * Uses file mtime rather than parsing per-line timestamps: the tee log carries
+ * no timestamp of its own, and a file untouched for a day cannot hold a reject
+ * from the last one. Best-effort — an unreadable log directory yields 0 rather
+ * than throwing, because a census that dies on a missing directory tells the
+ * operator nothing at all.
+ */
+export function countWriteRejects24h(logDir, now) {
+    let entries;
+    try {
+        entries = readdirSync(logDir).filter((f) => f.startsWith("mcp-ledger-") && f.endsWith(".log"));
+    }
+    catch {
+        return 0;
+    }
+    let total = 0;
+    for (const name of entries) {
+        const path = join(logDir, name);
+        try {
+            if (now - statSync(path).mtimeMs > DAY_MS)
+                continue;
+            for (const line of readFileSync(path, "utf8").split("\n")) {
+                if (line.includes("[graph-write] reject"))
+                    total += 1;
+            }
+        }
+        catch {
+            // A log rotated away mid-read is not a census failure.
+            continue;
+        }
+    }
+    return total;
+}
+//# sourceMappingURL=write-rejects.js.map