@rubytech/create-maxy-code 0.1.497 → 0.1.499

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@rubytech/create-maxy-code",
-  "version": "0.1.497",
+  "version": "0.1.499",
   "description": "Install Maxy — AI for Productive People",
   "bin": {
     "create-maxy-code": "./dist/index.js"

package/payload/platform/lib/active-rules/dist/index.d.ts

@@ -1,7 +1,5 @@
 export declare const SAME_SUBJECT_COSINE = 0.85;
-export declare const INJECTION_RULE_CAP = 12;
 export declare const ACTIVE_CANDIDATE_FLOOR = 0.4;
-export declare const ACTIVE_CANDIDATE_LIMIT = 30;
 export interface RuleCandidate {
     preferenceId: string;
     category: string;
@@ -19,9 +17,7 @@ export interface ActiveRule {
     confidence: number;
     observedAt: string;
 }
-export declare function cosine(a: number[], b: number[]): number;
-export declare function deconflictBySubject(records: RuleCandidate[], cosineThreshold?: number): ActiveRule[];
-export declare function formatStandingRulesBlock(rules: ActiveRule[], cap?: number): string;
+export declare function formatStandingRulesBlock(rules: ActiveRule[]): string;
 interface MinimalSession {
     run: (q: string, p: Record<string, unknown>) => Promise<{
         records: Array<{
@@ -43,7 +39,7 @@ export interface StandingRulesInjection {
 }
 export declare function resolveOwnerUserId(session: MinimalSession, accountId: string): Promise<string | null>;
 export declare function queryActiveRuleCandidates(session: MinimalSession, accountId: string): Promise<RuleCandidate[]>;
-export declare function resolveActiveRules(session: MinimalSession, accountId: string, cap?: number): Promise<ActiveRuleResolution>;
-export declare function activeRuleSet(session: MinimalSession, accountId: string, cap?: number): Promise<ActiveRule[]>;
+export declare function resolveActiveRules(session: MinimalSession, accountId: string): Promise<ActiveRuleResolution>;
+export declare function activeRuleSet(session: MinimalSession, accountId: string): Promise<ActiveRule[]>;
 export {};
 //# sourceMappingURL=index.d.ts.map

package/payload/platform/lib/active-rules/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAMA,eAAO,MAAM,mBAAmB,OAAO,CAAC;AACxC,eAAO,MAAM,kBAAkB,KAAK,CAAC;AACrC,eAAO,MAAM,sBAAsB,MAAM,CAAC;AAC1C,eAAO,MAAM,sBAAsB,KAAK,CAAC;AAEzC,MAAM,WAAW,aAAa;IAC5B,YAAY,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,MAAM,CAAC;IACjB,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC;CAC5B;AAED,MAAM,WAAW,UAAU;IACzB,YAAY,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,MAAM,CAAC;IACjB,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,wBAAgB,MAAM,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,CAAC,EAAE,MAAM,EAAE,GAAG,MAAM,CAYvD;AAOD,wBAAgB,mBAAmB,CACjC,OAAO,EAAE,aAAa,EAAE,EACxB,eAAe,GAAE,MAA4B,GAC5C,UAAU,EAAE,CAgBd;AAED,wBAAgB,wBAAwB,CACtC,KAAK,EAAE,UAAU,EAAE,EACnB,GAAG,GAAE,MAA2B,GAC/B,MAAM,CAIR;AAED,UAAU,cAAc;IACtB,GAAG,EAAE,CACH,CAAC,EAAE,MAAM,EACT,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KACvB,OAAO,CAAC;QAAE,OAAO,EAAE,KAAK,CAAC;YAAE,GAAG,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,CAAA;SAAE,CAAC,CAAA;KAAE,CAAC,CAAC;CAC/D;AAMD,MAAM,MAAM,gBAAgB,GAAG,OAAO,GAAG,UAAU,GAAG,aAAa,CAAC;AACpE,MAAM,MAAM,eAAe,GAAG,gBAAgB,GAAG,aAAa,CAAC;AAE/D,MAAM,WAAW,oBAAoB;IACnC,KAAK,EAAE,UAAU,EAAE,CAAC;IACpB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,MAAM,EAAE,gBAAgB,CAAC;CAC1B;AAID,MAAM,WAAW,sBAAsB;IACrC,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,MAAM,EAAE,eAAe,CAAC;CACzB;AAOD,wBAAsB,kBAAkB,CACtC,OAAO,EAAE,cAAc,EACvB,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAaxB;AAoED,wBAAsB,yBAAyB,CAC7C,OAAO,EAAE,cAAc,EACvB,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,aAAa,EAAE,CAAC,CAE1B;AAGD,wBAAsB,kBAAkB,CACtC,OAAO,EAAE,cAAc,EACvB,SAAS,EAAE,MAAM,EACjB,GAAG,GAAE,MAA2B,GAC/B,OAAO,CAAC,oBAAoB,CAAC,CAG/B;AAID,wBAAsB,aAAa,CACjC,OAAO,EAAE,cAAc,EACvB,SAAS,EAAE,MAAM,EACjB,GAAG,GAAE,MAA2B,GAC/B,OAAO,CAAC,UAAU,EAAE,CAAC,CAEvB"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAUA,eAAO,MAAM,mBAAmB,OAAO,CAAC;AACxC,eAAO,MAAM,sBAAsB,MAAM,CAAC;AAE1C,MAAM,WAAW,aAAa;IAC5B,YAAY,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,MAAM,CAAC;IACjB,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC;CAC5B;AAED,MAAM,WAAW,UAAU;IACzB,YAAY,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,MAAM,CAAC;IACjB,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;CACpB;AAKD,wBAAgB,wBAAwB,CAAC,KAAK,EAAE,UAAU,EAAE,GAAG,MAAM,CAIpE;AAED,UAAU,cAAc;IACtB,GAAG,EAAE,CACH,CAAC,EAAE,MAAM,EACT,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KACvB,OAAO,CAAC;QAAE,OAAO,EAAE,KAAK,CAAC;YAAE,GAAG,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,CAAA;SAAE,CAAC,CAAA;KAAE,CAAC,CAAC;CAC/D;AAMD,MAAM,MAAM,gBAAgB,GAAG,OAAO,GAAG,UAAU,GAAG,aAAa,CAAC;AACpE,MAAM,MAAM,eAAe,GAAG,gBAAgB,GAAG,aAAa,CAAC;AAE/D,MAAM,WAAW,oBAAoB;IACnC,KAAK,EAAE,UAAU,EAAE,CAAC;IACpB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,MAAM,EAAE,gBAAgB,CAAC;CAC1B;AAID,MAAM,WAAW,sBAAsB;IACrC,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,MAAM,EAAE,eAAe,CAAC;CACzB;AAOD,wBAAsB,kBAAkB,CACtC,OAAO,EAAE,cAAc,EACvB,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAaxB;AAgED,wBAAsB,yBAAyB,CAC7C,OAAO,EAAE,cAAc,EACvB,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,aAAa,EAAE,CAAC,CAE1B;AAKD,wBAAsB,kBAAkB,CACtC,OAAO,EAAE,cAAc,EACvB,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,oBAAoB,CAAC,CAI/B;AAID,wBAAsB,aAAa,CACjC,OAAO,EAAE,cAAc,EACvB,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,UAAU,EAAE,CAAC,CAEvB"}

package/payload/platform/lib/active-rules/dist/index.js

@@ -5,56 +5,25 @@
 // free of neo4j-driver types so both an MCP process and the UI can import the
 // built dist.
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.ACTIVE_CANDIDATE_LIMIT = exports.ACTIVE_CANDIDATE_FLOOR = exports.INJECTION_RULE_CAP = exports.SAME_SUBJECT_COSINE = void 0;
-exports.cosine = cosine;
-exports.deconflictBySubject = deconflictBySubject;
+exports.ACTIVE_CANDIDATE_FLOOR = exports.SAME_SUBJECT_COSINE = void 0;
 exports.formatStandingRulesBlock = formatStandingRulesBlock;
 exports.resolveOwnerUserId = resolveOwnerUserId;
 exports.queryActiveRuleCandidates = queryActiveRuleCandidates;
 exports.resolveActiveRules = resolveActiveRules;
 exports.activeRuleSet = activeRuleSet;
+// Write-time only: profile-update routes a same-subject write (a neighbour at
+// or above this raw-cosine threshold) into the existing node instead of minting
+// a duplicate. Injection no longer dedups — it surfaces every stored active
+// preference verbatim (Task 1951) — so this constant has no read-side use.
 exports.SAME_SUBJECT_COSINE = 0.85;
-exports.INJECTION_RULE_CAP = 12;
 exports.ACTIVE_CANDIDATE_FLOOR = 0.4;
-exports.ACTIVE_CANDIDATE_LIMIT = 30;
-function cosine(a, b) {
-    if (!a.length || !b.length || a.length !== b.length)
-        return 0;
-    let dot = 0;
-    let na = 0;
-    let nb = 0;
-    for (let i = 0; i < a.length; i++) {
-        dot += a[i] * b[i];
-        na += a[i] * a[i];
-        nb += b[i] * b[i];
-    }
-    if (na === 0 || nb === 0)
-        return 0;
-    return dot / (Math.sqrt(na) * Math.sqrt(nb));
-}
-// records MUST be confidence-desc on entry. Greedy: the first record of a
-// cluster is the winner; any later record within cosineThreshold of an
-// already-kept winner is a rephrasing and is dropped. A record with no usable
-// embedding is never folded — it is kept as its own subject (we cannot prove it
-// is a duplicate).
-function deconflictBySubject(records, cosineThreshold = exports.SAME_SUBJECT_COSINE) {
-    const winners = [];
-    for (const r of records) {
-        const emb = r.embedding;
-        const isDup = Array.isArray(emb) &&
-            emb.length > 0 &&
-            winners.some((w) => Array.isArray(w.embedding) &&
-                w.embedding.length > 0 &&
-                cosine(emb, w.embedding) >= cosineThreshold);
-        if (!isDup)
-            winners.push(r);
-    }
-    return winners.map(({ embedding: _embedding, ...rest }) => rest);
-}
-function formatStandingRulesBlock(rules, cap = exports.INJECTION_RULE_CAP) {
+// Render every rule verbatim. Injection has no cap (Task 1951): concision is
+// enforced at write time by the conversational-memory skill so each stored
+// value is already short, not by truncating the block here.
+function formatStandingRulesBlock(rules) {
     if (rules.length === 0)
         return "";
-    const lines = rules.slice(0, cap).map((r) => `- ${r.value}`);
+    const lines = rules.map((r) => `- ${r.value}`);
     return `## Standing rules\n${lines.join("\n")}`;
 }
 // The account's owner identity (Task 1461). One `AdminUser {role:'owner'}` is
@@ -80,11 +49,8 @@ async function resolveOwnerUserId(session, accountId) {
 // most-recent wins de-confliction. The trashed predicate mirrors graph-trash's
 // `notTrashed()` exactly (label + deletedAt) so this lib stays dependency-free.
 async function queryOwnerCandidates(session, accountId, ownerUserId) {
-    // ACTIVE_CANDIDATE_LIMIT is inlined as a Cypher literal rather than bound as a
-    // param: a plain JS number bound to `LIMIT $p` serializes as a FLOAT and Neo4j
-    // rejects it ("not a valid value. Must be a non-negative integer"). This lib
-    // is dependency-free (no neo4j-driver), so it cannot call `neo4j.int()`; the
-    // constant is a hardcoded integer, so inlining it is safe and gate-clean.
+    // No LIMIT — every owner admin preference above the floor is a candidate
+    // (Task 1951). The result is bounded by how many the owner has, not by a cap.
     const result = await session.run(`
     MATCH (up:UserProfile {accountId: $accountId, userId: $ownerUserId})-[:HAS_PREFERENCE]->(pref:Preference {scope: 'admin'})
     WHERE NOT pref:Trashed AND pref.deletedAt IS NULL
@@ -94,7 +60,6 @@ async function queryOwnerCandidates(session, accountId, ownerUserId) {
            pref.key AS key, pref.value AS value, pref.confidence AS confidence,
            pref.observedAt AS observedAt, pref.embedding AS embedding
     ORDER BY pref.confidence DESC, pref.observedAt DESC
-    LIMIT ${exports.ACTIVE_CANDIDATE_LIMIT}
     `, { accountId, ownerUserId, floor: exports.ACTIVE_CANDIDATE_FLOOR });
     return result.records.map((r) => ({
         preferenceId: r.get("preferenceId"),
@@ -128,14 +93,17 @@ async function resolveCandidates(session, accountId) {
 async function queryActiveRuleCandidates(session, accountId) {
     return (await resolveCandidates(session, accountId)).candidates;
 }
-// The account's active, de-conflicted, bounded rule-set plus its provenance.
-async function resolveActiveRules(session, accountId, cap = exports.INJECTION_RULE_CAP) {
+// The account's active rule-set plus its provenance. Every owner candidate is
+// returned verbatim, in `confidence DESC, observedAt DESC` order — no cap, no
+// de-confliction (Task 1951). Only the read-facing `embedding` is dropped.
+async function resolveActiveRules(session, accountId) {
     const { candidates, ownerUserId, source } = await resolveCandidates(session, accountId);
-    return { rules: deconflictBySubject(candidates).slice(0, cap), ownerUserId, source };
+    const rules = candidates.map(({ embedding: _embedding, ...rest }) => rest);
+    return { rules, ownerUserId, source };
 }
 // The rule array alone — the unchanged call boundary for profile-read and the
 // ui/server injection wrapper.
-async function activeRuleSet(session, accountId, cap = exports.INJECTION_RULE_CAP) {
-    return (await resolveActiveRules(session, accountId, cap)).rules;
+async function activeRuleSet(session, accountId) {
+    return (await resolveActiveRules(session, accountId)).rules;
 }
 //# sourceMappingURL=index.js.map

package/payload/platform/lib/active-rules/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AAAA,uEAAuE;AACvE,sEAAsE;AACtE,gFAAgF;AAChF,8EAA8E;AAC9E,cAAc;;;AA0Bd,wBAYC;AAOD,kDAmBC;AAED,4DAOC;AAmCD,gDAgBC;AAoED,8DAKC;AAGD,gDAOC;AAID,sCAMC;AAvNY,QAAA,mBAAmB,GAAG,IAAI,CAAC;AAC3B,QAAA,kBAAkB,GAAG,EAAE,CAAC;AACxB,QAAA,sBAAsB,GAAG,GAAG,CAAC;AAC7B,QAAA,sBAAsB,GAAG,EAAE,CAAC;AAqBzC,SAAgB,MAAM,CAAC,CAAW,EAAE,CAAW;IAC7C,IAAI,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM;QAAE,OAAO,CAAC,CAAC;IAC9D,IAAI,GAAG,GAAG,CAAC,CAAC;IACZ,IAAI,EAAE,GAAG,CAAC,CAAC;IACX,IAAI,EAAE,GAAG,CAAC,CAAC;IACX,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QAClC,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QACnB,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QAClB,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IACpB,CAAC;IACD,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC;QAAE,OAAO,CAAC,CAAC;IACnC,OAAO,GAAG,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;AAC/C,CAAC;AAED,0EAA0E;AAC1E,uEAAuE;AACvE,8EAA8E;AAC9E,gFAAgF;AAChF,mBAAmB;AACnB,SAAgB,mBAAmB,CACjC,OAAwB,EACxB,kBAA0B,2BAAmB;IAE7C,MAAM,OAAO,GAAoB,EAAE,CAAC;IACpC,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;QACxB,MAAM,GAAG,GAAG,CAAC,CAAC,SAAS,CAAC;QACxB,MAAM,KAAK,GACT,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC;YAClB,GAAG,CAAC,MAAM,GAAG,CAAC;YACd,OAAO,CAAC,IAAI,CACV,CAAC,CAAC,EAAE,EAAE,CACJ,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;gBAC1B,CAAC,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC;gBACtB,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,SAAS,CAAC,IAAI,eAAe,CAC9C,CAAC;QACJ,IAAI,CAAC,KAAK;YAAE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC9B,CAAC;IACD,OAAO,OAAO,CAAC,GAAG,CAAC,CAAC,EAAE,SAAS,EAAE,UAAU,EAAE,GAAG,IAAI,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC;AACnE,CAAC;AAED,SAAgB,wBAAwB,CACtC,KAAmB,EACnB,MAAc,0BAAkB;IAEhC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAClC,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;IAC7D,OAAO,sBAAsB,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;AAClD,CAAC;AA8BD,8EAA8E;AAC9E,2EAA2E;AAC3E,6EAA6E;AAC7E,yEAAyE;AACzE,4EAA4E;AACrE,KAAK,UAAU,kBAAkB,CACtC,OAAuB,EACvB,SAAiB;IAEjB,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,GAAG,CAC3B;;;;;KAKC,EACD,EAAE,SAAS,EAAE,CACd,CAAC;IACF,MAAM,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;IAC3B,MAAM,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC9C,OAAO,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC;AACzE,CAAC;AAED,mEAAmE;AACnE,8EAA8E;AAC9E,6EAA6E;AAC7E,8EAA8E;AAC9E,+EAA+E;AAC/E,gFAAgF;AAChF,KAAK,UAAU,oBAAoB,CACjC,OAAuB,EACvB,SAAiB,EACjB,WAAmB;IAEnB,+EAA+E;IAC/E,+EAA+E;IAC/E,6EAA6E;IAC7E,6EAA6E;IAC7E,0EAA0E;IAC1E,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,GAAG,CAC9B;;;;;;;;;YASQ,8BAAsB;KAC7B,EACD,EAAE,SAAS,EAAE,WAAW,EAAE,KAAK,EAAE,8BAAsB,EAAE,CAC1D,CAAC;IACF,OAAO,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAChC,YAAY,EAAE,CAAC,CAAC,GAAG,CAAC,cAAc,CAAW;QAC7C,QAAQ,EAAE,CAAC,CAAC,GAAG,CAAC,UAAU,CAAW;QACrC,GAAG,EAAE,CAAC,CAAC,GAAG,CAAC,KAAK,CAAW;QAC3B,KAAK,EAAE,CAAC,CAAC,GAAG,CAAC,OAAO,CAAW;QAC/B,UAAU,EAAE,CAAC,CAAC,GAAG,CAAC,YAAY,CAAW;QACzC,UAAU,EAAG,CAAC,CAAC,GAAG,CAAC,YAAY,CAAY,IAAI,EAAE;QACjD,SAAS,EAAG,CAAC,CAAC,GAAG,CAAC,WAAW,CAAqB,IAAI,IAAI;KAC3D,CAAC,CAAC,CAAC;AACN,CAAC;AAED,gFAAgF;AAChF,8EAA8E;AAC9E,6EAA6E;AAC7E,+DAA+D;AAC/D,KAAK,UAAU,iBAAiB,CAC9B,OAAuB,EACvB,SAAiB;IAMjB,IAAI,WAA0B,CAAC;IAC/B,IAAI,CAAC;QACH,WAAW,GAAG,MAAM,kBAAkB,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;IAC7D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,UAAU,EAAE,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC;IACtE,CAAC;IACD,IAAI,CAAC,WAAW;QAAE,OAAO,EAAE,UAAU,EAAE,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;IACnF,MAAM,UAAU,GAAG,MAAM,oBAAoB,CAAC,OAAO,EAAE,SAAS,EAAE,WAAW,CAAC,CAAC;IAC/E,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;AACtD,CAAC;AAED,2EAA2E;AAC3E,uEAAuE;AAChE,KAAK,UAAU,yBAAyB,CAC7C,OAAuB,EACvB,SAAiB;IAEjB,OAAO,CAAC,MAAM,iBAAiB,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC,CAAC,UAAU,CAAC;AAClE,CAAC;AAED,6EAA6E;AACtE,KAAK,UAAU,kBAAkB,CACtC,OAAuB,EACvB,SAAiB,EACjB,MAAc,0BAAkB;IAEhC,MAAM,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,EAAE,GAAG,MAAM,iBAAiB,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;IACxF,OAAO,EAAE,KAAK,EAAE,mBAAmB,CAAC,UAAU,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,WAAW,EAAE,MAAM,EAAE,CAAC;AACvF,CAAC;AAED,8EAA8E;AAC9E,+BAA+B;AACxB,KAAK,UAAU,aAAa,CACjC,OAAuB,EACvB,SAAiB,EACjB,MAAc,0BAAkB;IAEhC,OAAO,CAAC,MAAM,kBAAkB,CAAC,OAAO,EAAE,SAAS,EAAE,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC;AACnE,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AAAA,uEAAuE;AACvE,sEAAsE;AACtE,gFAAgF;AAChF,8EAA8E;AAC9E,cAAc;;;AA+Bd,4DAIC;AAmCD,gDAgBC;AAgED,8DAKC;AAKD,gDAOC;AAID,sCAKC;AA9KD,8EAA8E;AAC9E,gFAAgF;AAChF,4EAA4E;AAC5E,2EAA2E;AAC9D,QAAA,mBAAmB,GAAG,IAAI,CAAC;AAC3B,QAAA,sBAAsB,GAAG,GAAG,CAAC;AAqB1C,6EAA6E;AAC7E,2EAA2E;AAC3E,4DAA4D;AAC5D,SAAgB,wBAAwB,CAAC,KAAmB;IAC1D,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAClC,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;IAC/C,OAAO,sBAAsB,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;AAClD,CAAC;AA8BD,8EAA8E;AAC9E,2EAA2E;AAC3E,6EAA6E;AAC7E,yEAAyE;AACzE,4EAA4E;AACrE,KAAK,UAAU,kBAAkB,CACtC,OAAuB,EACvB,SAAiB;IAEjB,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,GAAG,CAC3B;;;;;KAKC,EACD,EAAE,SAAS,EAAE,CACd,CAAC;IACF,MAAM,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;IAC3B,MAAM,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC9C,OAAO,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC;AACzE,CAAC;AAED,mEAAmE;AACnE,8EAA8E;AAC9E,6EAA6E;AAC7E,8EAA8E;AAC9E,+EAA+E;AAC/E,gFAAgF;AAChF,KAAK,UAAU,oBAAoB,CACjC,OAAuB,EACvB,SAAiB,EACjB,WAAmB;IAEnB,yEAAyE;IACzE,8EAA8E;IAC9E,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,GAAG,CAC9B;;;;;;;;;KASC,EACD,EAAE,SAAS,EAAE,WAAW,EAAE,KAAK,EAAE,8BAAsB,EAAE,CAC1D,CAAC;IACF,OAAO,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAChC,YAAY,EAAE,CAAC,CAAC,GAAG,CAAC,cAAc,CAAW;QAC7C,QAAQ,EAAE,CAAC,CAAC,GAAG,CAAC,UAAU,CAAW;QACrC,GAAG,EAAE,CAAC,CAAC,GAAG,CAAC,KAAK,CAAW;QAC3B,KAAK,EAAE,CAAC,CAAC,GAAG,CAAC,OAAO,CAAW;QAC/B,UAAU,EAAE,CAAC,CAAC,GAAG,CAAC,YAAY,CAAW;QACzC,UAAU,EAAG,CAAC,CAAC,GAAG,CAAC,YAAY,CAAY,IAAI,EAAE;QACjD,SAAS,EAAG,CAAC,CAAC,GAAG,CAAC,WAAW,CAAqB,IAAI,IAAI;KAC3D,CAAC,CAAC,CAAC;AACN,CAAC;AAED,gFAAgF;AAChF,8EAA8E;AAC9E,6EAA6E;AAC7E,+DAA+D;AAC/D,KAAK,UAAU,iBAAiB,CAC9B,OAAuB,EACvB,SAAiB;IAMjB,IAAI,WAA0B,CAAC;IAC/B,IAAI,CAAC;QACH,WAAW,GAAG,MAAM,kBAAkB,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;IAC7D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,UAAU,EAAE,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC;IACtE,CAAC;IACD,IAAI,CAAC,WAAW;QAAE,OAAO,EAAE,UAAU,EAAE,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;IACnF,MAAM,UAAU,GAAG,MAAM,oBAAoB,CAAC,OAAO,EAAE,SAAS,EAAE,WAAW,CAAC,CAAC;IAC/E,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;AACtD,CAAC;AAED,2EAA2E;AAC3E,uEAAuE;AAChE,KAAK,UAAU,yBAAyB,CAC7C,OAAuB,EACvB,SAAiB;IAEjB,OAAO,CAAC,MAAM,iBAAiB,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC,CAAC,UAAU,CAAC;AAClE,CAAC;AAED,8EAA8E;AAC9E,8EAA8E;AAC9E,2EAA2E;AACpE,KAAK,UAAU,kBAAkB,CACtC,OAAuB,EACvB,SAAiB;IAEjB,MAAM,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,EAAE,GAAG,MAAM,iBAAiB,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;IACxF,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC,EAAE,SAAS,EAAE,UAAU,EAAE,GAAG,IAAI,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC;IAC3E,OAAO,EAAE,KAAK,EAAE,WAAW,EAAE,MAAM,EAAE,CAAC;AACxC,CAAC;AAED,8EAA8E;AAC9E,+BAA+B;AACxB,KAAK,UAAU,aAAa,CACjC,OAAuB,EACvB,SAAiB;IAEjB,OAAO,CAAC,MAAM,kBAAkB,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC;AAC9D,CAAC"}

package/payload/platform/lib/active-rules/src/index.test.ts

@@ -1,76 +1,12 @@
 import { describe, it, expect } from "vitest";
 import {
-  cosine,
-  deconflictBySubject,
   formatStandingRulesBlock,
   resolveActiveRules,
   activeRuleSet,
   queryActiveRuleCandidates,
-  INJECTION_RULE_CAP,
   type RuleCandidate,
 } from "./index.js";
 
-const vec = (n: number, fill: number): number[] => Array(n).fill(fill);
-
-function cand(over: Partial<RuleCandidate>): RuleCandidate {
-  return {
-    preferenceId: "p",
-    category: "communication",
-    key: "k",
-    value: "v",
-    confidence: 0.5,
-    observedAt: "2026-07-01T00:00:00Z",
-    embedding: vec(4, 1),
-    ...over,
-  };
-}
-
-describe("cosine", () => {
-  it("is 1 for identical vectors and 0 for an empty one", () => {
-    expect(cosine([1, 0, 0], [1, 0, 0])).toBeCloseTo(1, 6);
-    expect(cosine([], [1, 2, 3])).toBe(0);
-  });
-});
-
-describe("deconflictBySubject", () => {
-  it("folds a near-duplicate into the higher-confidence winner", () => {
-    const a = cand({
-      preferenceId: "a",
-      key: "header_rule",
-      value: "use header A",
-      confidence: 0.8,
-      embedding: [1, 0, 0, 0],
-    });
-    const b = cand({
-      preferenceId: "b",
-      key: "doc_header",
-      value: "use header A restated",
-      confidence: 0.5,
-      embedding: [0.99, 0.01, 0, 0],
-    });
-    const out = deconflictBySubject([a, b], 0.85);
-    expect(out.map((r) => r.preferenceId)).toEqual(["a"]);
-  });
-
-  it("keeps genuinely different subjects", () => {
-    const a = cand({ preferenceId: "a", embedding: [1, 0, 0, 0] });
-    const b = cand({ preferenceId: "b", embedding: [0, 1, 0, 0] });
-    expect(deconflictBySubject([a, b], 0.85).map((r) => r.preferenceId)).toEqual([
-      "a",
-      "b",
-    ]);
-  });
-
-  it("never folds a candidate with no embedding", () => {
-    const a = cand({ preferenceId: "a", embedding: [1, 0, 0, 0] });
-    const b = cand({ preferenceId: "b", embedding: null });
-    expect(deconflictBySubject([a, b], 0.85).map((r) => r.preferenceId)).toEqual([
-      "a",
-      "b",
-    ]);
-  });
-});
-
 // A fake Neo4j session that dispatches on query text: the owner-resolution
 // query (matches `role: 'owner'`) returns a configurable owner userId or none;
 // the candidate query (matches HAS_PREFERENCE) returns configurable pref rows
@@ -115,7 +51,7 @@ const prefRow = (over: Partial<RuleCandidate>): Record<string, unknown> => ({
   ...over,
 });
 
-describe("resolveActiveRules — owner-scoped selection", () => {
+describe("resolveActiveRules — owner-scoped, uncapped, verbatim", () => {
   it("returns the owner's prefs with source=owner when an owner exists", async () => {
     const s = fakeSession({
       ownerId: "owner-35fed05e",
@@ -132,6 +68,36 @@ describe("resolveActiveRules — owner-scoped selection", () => {
     expect(s.candidateRuns).toBe(1);
   });
 
+  it("returns MORE than 12 candidates with no cap and no truncation", async () => {
+    const rows = Array.from({ length: 20 }, (_, i) =>
+      prefRow({
+        preferenceId: `p${i}`,
+        value: `rule ${i}`,
+        confidence: 1 - i * 0.01,
+      }),
+    );
+    const s = fakeSession({ ownerId: "owner-x", prefRows: rows });
+    const res = await resolveActiveRules(s, "acct-1");
+    expect(res.rules.length).toBe(20);
+    expect(res.rules.map((r) => r.preferenceId)).toEqual(
+      rows.map((r) => r.preferenceId),
+    );
+  });
+
+  it("preserves the candidate order verbatim (no reordering, no dedup)", async () => {
+    // Two rows that a cosine dedup would once have folded (identical embeddings)
+    // are BOTH returned now — injection never dedups.
+    const s = fakeSession({
+      ownerId: "owner-1",
+      prefRows: [
+        prefRow({ preferenceId: "a", value: "use header A", embedding: [1, 0, 0, 0] }),
+        prefRow({ preferenceId: "b", value: "use header A restated", embedding: [1, 0, 0, 0] }),
+      ],
+    });
+    const res = await resolveActiveRules(s, "acct-1");
+    expect(res.rules.map((r) => r.preferenceId)).toEqual(["a", "b"]);
+  });
+
   it("returns empty with source=no-owner and never runs the candidate query", async () => {
     const s = fakeSession({ ownerId: null });
     const res = await resolveActiveRules(s, "acct-1");
@@ -176,10 +142,10 @@ describe("resolveActiveRules — owner-scoped selection", () => {
 
 describe("formatStandingRulesBlock", () => {
   it("returns empty string for no rules", () => {
-    expect(formatStandingRulesBlock([], INJECTION_RULE_CAP)).toBe("");
+    expect(formatStandingRulesBlock([])).toBe("");
   });
 
-  it("caps the number of rendered rules", () => {
+  it("renders every rule, with no cap", () => {
     const rules = Array.from({ length: 20 }, (_, i) => ({
       preferenceId: `p${i}`,
       category: "communication",
@@ -188,8 +154,8 @@ describe("formatStandingRulesBlock", () => {
       confidence: 1 - i * 0.01,
       observedAt: "2026-07-01T00:00:00Z",
     }));
-    const block = formatStandingRulesBlock(rules, 12);
+    const block = formatStandingRulesBlock(rules);
     expect(block).toContain("## Standing rules");
-    expect((block.match(/^- /gm) ?? []).length).toBe(12);
+    expect((block.match(/^- /gm) ?? []).length).toBe(20);
   });
 });

package/payload/platform/lib/active-rules/src/index.ts

@@ -4,10 +4,12 @@
 // free of neo4j-driver types so both an MCP process and the UI can import the
 // built dist.
 
+// Write-time only: profile-update routes a same-subject write (a neighbour at
+// or above this raw-cosine threshold) into the existing node instead of minting
+// a duplicate. Injection no longer dedups — it surfaces every stored active
+// preference verbatim (Task 1951) — so this constant has no read-side use.
 export const SAME_SUBJECT_COSINE = 0.85;
-export const INJECTION_RULE_CAP = 12;
 export const ACTIVE_CANDIDATE_FLOOR = 0.4;
-export const ACTIVE_CANDIDATE_LIMIT = 30;
 
 export interface RuleCandidate {
   preferenceId: string;
@@ -28,52 +30,12 @@ export interface ActiveRule {
   observedAt: string;
 }
 
-export function cosine(a: number[], b: number[]): number {
-  if (!a.length || !b.length || a.length !== b.length) return 0;
-  let dot = 0;
-  let na = 0;
-  let nb = 0;
-  for (let i = 0; i < a.length; i++) {
-    dot += a[i] * b[i];
-    na += a[i] * a[i];
-    nb += b[i] * b[i];
-  }
-  if (na === 0 || nb === 0) return 0;
-  return dot / (Math.sqrt(na) * Math.sqrt(nb));
-}
-
-// records MUST be confidence-desc on entry. Greedy: the first record of a
-// cluster is the winner; any later record within cosineThreshold of an
-// already-kept winner is a rephrasing and is dropped. A record with no usable
-// embedding is never folded — it is kept as its own subject (we cannot prove it
-// is a duplicate).
-export function deconflictBySubject(
-  records: RuleCandidate[],
-  cosineThreshold: number = SAME_SUBJECT_COSINE,
-): ActiveRule[] {
-  const winners: RuleCandidate[] = [];
-  for (const r of records) {
-    const emb = r.embedding;
-    const isDup =
-      Array.isArray(emb) &&
-      emb.length > 0 &&
-      winners.some(
-        (w) =>
-          Array.isArray(w.embedding) &&
-          w.embedding.length > 0 &&
-          cosine(emb, w.embedding) >= cosineThreshold,
-      );
-    if (!isDup) winners.push(r);
-  }
-  return winners.map(({ embedding: _embedding, ...rest }) => rest);
-}
-
-export function formatStandingRulesBlock(
-  rules: ActiveRule[],
-  cap: number = INJECTION_RULE_CAP,
-): string {
+// Render every rule verbatim. Injection has no cap (Task 1951): concision is
+// enforced at write time by the conversational-memory skill so each stored
+// value is already short, not by truncating the block here.
+export function formatStandingRulesBlock(rules: ActiveRule[]): string {
   if (rules.length === 0) return "";
-  const lines = rules.slice(0, cap).map((r) => `- ${r.value}`);
+  const lines = rules.map((r) => `- ${r.value}`);
   return `## Standing rules\n${lines.join("\n")}`;
 }
 
@@ -139,11 +101,8 @@ async function queryOwnerCandidates(
   accountId: string,
   ownerUserId: string,
 ): Promise<RuleCandidate[]> {
-  // ACTIVE_CANDIDATE_LIMIT is inlined as a Cypher literal rather than bound as a
-  // param: a plain JS number bound to `LIMIT $p` serializes as a FLOAT and Neo4j
-  // rejects it ("not a valid value. Must be a non-negative integer"). This lib
-  // is dependency-free (no neo4j-driver), so it cannot call `neo4j.int()`; the
-  // constant is a hardcoded integer, so inlining it is safe and gate-clean.
+  // No LIMIT — every owner admin preference above the floor is a candidate
+  // (Task 1951). The result is bounded by how many the owner has, not by a cap.
   const result = await session.run(
     `
     MATCH (up:UserProfile {accountId: $accountId, userId: $ownerUserId})-[:HAS_PREFERENCE]->(pref:Preference {scope: 'admin'})
@@ -154,7 +113,6 @@ async function queryOwnerCandidates(
            pref.key AS key, pref.value AS value, pref.confidence AS confidence,
            pref.observedAt AS observedAt, pref.embedding AS embedding
     ORDER BY pref.confidence DESC, pref.observedAt DESC
-    LIMIT ${ACTIVE_CANDIDATE_LIMIT}
     `,
     { accountId, ownerUserId, floor: ACTIVE_CANDIDATE_FLOOR },
   );
@@ -201,14 +159,16 @@ export async function queryActiveRuleCandidates(
   return (await resolveCandidates(session, accountId)).candidates;
 }
 
-// The account's active, de-conflicted, bounded rule-set plus its provenance.
+// The account's active rule-set plus its provenance. Every owner candidate is
+// returned verbatim, in `confidence DESC, observedAt DESC` order — no cap, no
+// de-confliction (Task 1951). Only the read-facing `embedding` is dropped.
 export async function resolveActiveRules(
   session: MinimalSession,
   accountId: string,
-  cap: number = INJECTION_RULE_CAP,
 ): Promise<ActiveRuleResolution> {
   const { candidates, ownerUserId, source } = await resolveCandidates(session, accountId);
-  return { rules: deconflictBySubject(candidates).slice(0, cap), ownerUserId, source };
+  const rules = candidates.map(({ embedding: _embedding, ...rest }) => rest);
+  return { rules, ownerUserId, source };
 }
 
 // The rule array alone — the unchanged call boundary for profile-read and the
@@ -216,7 +176,6 @@ export async function resolveActiveRules(
 export async function activeRuleSet(
   session: MinimalSession,
   accountId: string,
-  cap: number = INJECTION_RULE_CAP,
 ): Promise<ActiveRule[]> {
-  return (await resolveActiveRules(session, accountId, cap)).rules;
+  return (await resolveActiveRules(session, accountId)).rules;
 }

package/payload/platform/plugins/admin/skills/platform-architecture/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: platform-architecture
 description: Use when grounding any documented-surface claim about what Maxy ships — plugins, skills, specialists, install/deploy flows, internals. This is the install catalogue, not evidence of what is enabled on the current account. For install state on this account, call `capabilities-here`; for documented surface, cite the `Source:` URL inline.
-content-hash: sha256:5db8891dfc1b60b2180597591dcad1b7ca9e89612f488314dd07e7dd73e5c119
+content-hash: sha256:de872279f0c40b8dee0a8ef51dba6534e2452d6034ca2765d6ab912447bc95b3
 brand: maxy-code
 product-name: Maxy
 ---
@@ -1905,6 +1905,22 @@ A site capture becomes one of these too: an enquiry becomes a new contact routed
 
 Run a sweep a second time and it proposes nothing it already recorded on the first run, because those records are now in memory and it recognises them. A repeat sweep is quiet on purpose; that is the sign your graph is already up to date.
 
+## Automatic email→graph sweep (opt-in)
+
+The sweep above runs only when you ask, and it proposes rather than writes. There is a second, opt-in routine that runs on a schedule and writes on its own: the automatic email→graph sweep, set up through the `email-graph-sweep` skill. On each run it reads the new inbound mail on your mailbox, pulls out the organisations, people, and live jobs it finds, checks each against what Maxy already holds, saves the genuinely new ones, and then sends you a short report of what it read and saved.
+
+Turning it on needs two things, and Maxy tells you which is missing if either is absent:
+
+- **A connected mailbox.** The routine reads your mail, so a mail account (a standard IMAP mailbox, or a Microsoft 365 mailbox) must be connected. With no mailbox connected there is nothing to sweep, and Maxy says so instead of switching anything on.
+- **A place to send the report.** The routine reports over a persistent channel, so you name the WhatsApp number or Telegram chat that receives it, and that destination must already be registered as an admin or account-manager. If it is not registered, Maxy tells you that rather than falling back to a silent run.
+
+Two things to know before you switch it on:
+
+- **It messages you on every run.** It is a report you receive each time, not a silent background job. If you want a quiet, always-on tidy-up of the graph instead, that is a different routine.
+- **It is one-account, deliberate opt-in.** Maxy does not turn this on for you automatically, and it is held back from broad rollout for now while a safety fix for scheduled runs lands. Enable it for an account you are watching, not as a default.
+
+Turn it off with the same skill: ask to stop the automatic email sweep and Maxy cancels the schedule, so no further runs fire.
+
 ---
 # Slides
 Source: https://docs.getmaxy.com/slides.md
@@ -2994,6 +3010,35 @@ either is a regression.
 
 **Public visitor surface.** The public-host root (`GET /`), the `/:slug` agent routes, and the admin-host `/public` / `/public-chat` previews all serve one shell, `public.html` → [`app/public-entry.tsx`](../../../ui/app/public-entry.tsx) → `PublicChat`. `PublicChat` reuses `useSession` purely as the magic-link gatekeeper — it drives `AccessGate`, resolves the agent slug from the path, and handles `?token=` verification; once the grant is satisfied it mounts `ChatSurface variant="public"`, whose transcript reads the visitor-scoped, **delivered-only** stream `GET /api/public-reader/stream` ([`server/routes/public-reader.ts`](../../../ui/server/routes/public-reader.ts)) — the visitor sees the agent's delivered prose, never the tool/tool-result/directive bytes the legacy `/api/chat` SSE render exposed. The human visitor's branding is resolved client-side by `useSession`. For the head only, the server injects per-agent link-preview meta — `<title>`, `og:title`/`og:description`/`og:image`, `theme-color`, and a per-agent favicon, resolved from the same branding cache `useSession` reads — into the served shell, so a link-preview crawler (which never runs the client bundle) gets a branded card per agent instead of one generic shell; an agent with no branding cache gets the clean brand-default shell with no empty meta tags. There is exactly one public client surface and it is 1:1 visitor↔agent: the earlier `?surface=next` A/B handle is retired, group messaging is retired (not a supported product surface), and a former `/g/<slug>` group URL now serves the same 1:1 shell — a stale bookmark gets the 1:1 chat, never a broken render.
 
+### Routines
+
+The Routines surface (`/routines`) is the admin view of the account's
+automation `:Event` nodes — the device's scheduled agent turns and tool
+dispatches, which the Calendar surface deliberately excludes (`calendar.ts`
+unions only appointment events, `actionPlugin IS NULL`). It renders one card per
+routine (title, human-readable schedule, next run, channel/destination or tool,
+status); a card opens a detail modal modeled on the calendar `EventDetailModal`.
+The modal edits the prose instruction (`agentPrompt`, agent-dispatch routines
+only) and the schedule via a friendly builder (frequency daily/weekly/monthly,
+day-of-week, day-of-month, time) that falls back to a raw-cron field for patterns
+it cannot represent.
+
+The route (`server/routes/admin/routines.ts`) is account-scoped like `calendar.ts`
+(a foreign-account or non-automation `eventId` 404s):
+
+| Route | Behaviour |
+|-------|-----------|
+| `GET /api/admin/routines` | Lists automation Events: `recurrence IS NOT NULL OR agentChannel IS NOT NULL OR actionPlugin IS NOT NULL`. Keyed by the `eventId` property. |
+| `GET /api/admin/routines/:eventId` | One routine, same automation+account guard. |
+| `PATCH /api/admin/routines/:eventId` | Edits `agentPrompt` and/or `recurrence`. Cron validation and the timezone-aware `nextRun` recompute copy the scheduling plugin's `schedule-update` tool. An invalid cron is rejected 400 with no write. Only creation and deletion stay agent-only (`schedule-event`/`schedule-cancel`). |
+
+Observability rides `[admin:routines]`: `op=list accountId=<8> count=<n>`,
+`op=get id=<8> found=<bool>`, and `op=patch id=<8> fields=<…> outcome=ok|rejected
+reason=<invalid-cron|not-found> nextRun=<…> cron=<serialized>`. A `count=0` while
+routines exist for the account is the account-scope-miss signature; the logged
+`cron=` on `outcome=ok` confirms the persisted expression without opening the
+graph.
+
 ### Graph
 
 | Mount | Purpose |
@@ -3302,12 +3347,13 @@ authoritative. This section names the surfaces and what backs each.
 > owns all navigation; the full-width top header bar, the burger flyout, and the
 > "Powered by Claude Code" footer strip are retired. After the redesign:
 >
-> - **Nav rows** are Dashboard, Chat, Tasks, Calendar, Data, the brand container
->   row (Projects / Properties / Jobs, opening the graph filtered to the brand's
->   primary container), Graph (the unfiltered whole graph at `/graph`, waypoints
->   icon — active on plain `/graph`; the container row is active only when a
->   `label=` filter is present), Activity, and Browser. The active row carries an
->   accent left indicator. The older People / Agents / Artefacts entries in the
+> - **Nav rows** are Dashboard, Chat, Tasks, Calendar, Routines (the automation
+>   `:Event` nodes at `/routines`, `Zap` icon), Data, the brand container
+>   row (Projects / Properties / Jobs, `Folder` icon, opening the graph filtered
+>   to the brand's primary container), Graph (the unfiltered whole graph at
+>   `/graph`, waypoints icon — active on plain `/graph`; the container row is
+>   active only when a `label=` filter is present), Activity, and Browser. The
+>   active row carries an accent left indicator. The older People / Agents / Artefacts entries in the
 >   table below are pre-redesign.
 > - **Dashboard home** renders on `/` (a greeting, stat cards, a Live-now column,
 >   a Recent artefacts card, and a Channels column), consuming existing endpoints
@@ -4244,13 +4290,13 @@ Standing rules the operator gives over a channel are `Preference` nodes. Two mec
 
 **Reconcile by meaning on write (`profile-update`).** The existence check is two-tier. First an exact `(category, key)` match — the classic fast path, unchanged. When that misses, a semantic-neighbour lookup runs over the `preference_embedding` vector index, scoped to the same `accountId` and `scope:'admin'`, non-trashed. If the nearest neighbour is at or above `SAME_SUBJECT_COSINE` (0.85), the write lands on that node through the existing reinforce/update/contradict curve instead of minting a duplicate; the matched neighbours are returned in the tool result so the agent can classify future writes against real prior state. The confidence constants are unchanged — only the join key widens, so a rephrasing under a new `key` no longer forks the rule and a correction demotes the prior node rather than adding a contradictory one.
 
-**Inject the active rule-set every turn (channel gateways).** The one definition of "this account's active rules" is `@maxy/active-rules`: the account owner's admin-scope preferences (resolve the seeded `AdminUser {role:'owner'}`, then select through that owner's `UserProfile` via `HAS_PREFERENCE`), a bounded, floor-filtered (`confidence >= 0.4`), confidence-ordered candidate query, then semantic de-confliction (one winner per subject at the same 0.85 cosine), capped to `INJECTION_RULE_CAP` (12). A preference owned by a non-owner profile (an operator's, stranded on the operator's own profile while managing the account) is never injected; an account with no seeded owner injects nothing. `profile-read` exposes this same owner-scoped set as `activeRules`, and the three inbound gateways (`wa-gateway`, `telegram-gateway`, `webchat-gateway`) fetch it for the effective session account and attach it as `standingRules` on the inbound frame; the channel builders prepend it as a `## Standing rules` block above `## Context`. Both channel-server inbound paths carry the block: the single-target SSE loop parses the whole frame, and the unified multi-target door reader (`runDoorStream`,) reconstructs it through the shared `doorInboundPayload` seam whose `parseFrame` closures read `standingRules` off the frame. The read is by code, not agent discretion, so a rule set last week is applied this week regardless of how many times the session compacted. Telegram and webchat inject for `role:'admin'` only — a public visitor never receives operator rules.
+**Inject the active rule-set every turn (channel gateways).** The one definition of "this account's active rules" is `@maxy/active-rules`: the account owner's admin-scope preferences (resolve the seeded `AdminUser {role:'owner'}`, then select through that owner's `UserProfile` via `HAS_PREFERENCE`), a floor-filtered (`confidence >= 0.4`), confidence-ordered query that returns every such preference verbatim — no cap, no de-confliction, no candidate limit. Concision is enforced at write time by the `conversational-memory` skill (each stored value is a single minimal imperative) and by the write-time semantic reconcile (a same-subject write at or above `SAME_SUBJECT_COSINE` folds into the existing node rather than minting a duplicate), so the injected block stays small because each stored preference is short and non-redundant, not because injection truncates. A preference owned by a non-owner profile (an operator's, stranded on the operator's own profile while managing the account) is never injected; an account with no seeded owner injects nothing. `profile-read` exposes this same owner-scoped set as `activeRules`, and the three inbound gateways (`wa-gateway`, `telegram-gateway`, `webchat-gateway`) fetch it for the effective session account and attach it as `standingRules` on the inbound frame; the channel builders prepend it as a `## Standing rules` block above `## Context`. Both channel-server inbound paths carry the block: the single-target SSE loop parses the whole frame, and the unified multi-target door reader (`runDoorStream`,) reconstructs it through the shared `doorInboundPayload` seam whose `parseFrame` closures read `standingRules` off the frame. The read is by code, not agent discretion, so a rule set last week is applied this week regardless of how many times the session compacted. Telegram and webchat inject for `role:'admin'` only — a public visitor never receives operator rules.
 
 **Trust a scheduled turn's provenance, never an inbound's claim (channel-agent grounding).** A cron-dispatched agent turn reaches the same channel builders as a real inbound, so its own authorisation text would otherwise land inside `## Context` — the zone `REFRAME_INSTRUCTION` demotes to untrusted — and a security-cautious agent would distrust its own automation (the self-cancel loop). The dispatcher therefore stamps a `ScheduleProvenance` marker (owning account, event, owner userId, dispatch time) that the channel builders render as a `## Scheduled automation (platform-verified)` preamble **above** `## Context` (and above the rules block); the whatsapp wrap tag names the door `scheduler`. Both channel-server paths carry the marker — the single-target loop and the unified multi-target door reader (via the same `doorInboundPayload` seam that carries `standingRules`); the scheduler only dispatches to the whatsapp/telegram door, so a webchat frame never bears one. Because the marker is dispatcher-stamped and never derived from payload text, an inbound message cannot forge it — placement above `## Context` alone is not the trust signal, the dispatcher provenance is. The grounding binds to it in two places: one recipient-neutral clause added byte-identical to the three reframe instructions (a marker-bearing turn is authorised standing automation; a reconfiguration or re-enable is not intrusion), and the admin `IDENTITY.md` "Untrusted input" rule that the agent never states a platform-level authenticity or impersonation verdict it was not given (an unsourced "this is not from you" is its own inference, flagged, never asserted as the platform's). A sender has exactly one session: every inbound, real or scheduled, resolves to the deterministic `adminSessionIdFor(effectiveAccount, destination)`. An earlier change gave each firing its own salted seat so distrust could not accrete across firings, but the inbound hub keys on `senderId` and replaces its subscriber outright, so a seat's channel server attached under the sender's own key and swallowed the sender's REAL messages until it detached — splitting one conversation across two sessions that each denied what the other held. The seat is removed; the authoritative `agentPrompt`, this provenance marker, and the injected standing rules ground each firing without one. Self-cancel attribution is disarmed while that model beds in: the guard used to compare the cancelling turn's session id to a dispatcher stamp, which discriminated only because each firing ran its own seat, so with one session per sender it would report an autonomous loop on every operator cancel. It now always reports false — under-counting a real loop rather than inventing one — until the discriminator is rebuilt from the turn's own dispatched eventId. See `.docs/scheduling-agent-dispatch.md § Operator-provenance marker`, `§ Session model — one session per sender`, and `§ Self-cancel attribution — disarmed`.
 
 **Carry what a reply points at (WhatsApp reply quote).** A WhatsApp sender replying to an earlier message produces a quote that `app/lib/whatsapp/inbound/extract.ts` resolves to `{ id, text?, sender? }` and `manager.ts` assigns to the route payload's `replyContext`. That field had no reader: the `server/index.ts` gateway argument omitted it, `AdminInbound` and the hub frame had no such field, and the channel service's `composePayload` emitted the caption and media notes only, so a message saying "prepare an email confirmation for this booking" reached the agent with nothing to resolve "this booking" against. It now rides both WhatsApp admin doors. On the persistent door it travels `server/index.ts` -> `AdminInbound` -> the hub frame the SSE route stringifies -> the channel service's `InboundPayload`, where `composeReplyNote` renders it as a bracketed note at the top of the payload, inside `## Context` and above the caption and any woven media notes: the quoted body is sender-controlled and belongs in the reframed untrusted zone, never in the platform preamble. Both channel-server inbound paths carry it, through the same `doorInboundPayload` seam that carries `standingRules` and the schedule provenance marker: the single-target SSE loop parses the whole frame, and the unified multi-target door reader rebuilds the payload field by field, so a field that seam omits is dropped on multi-target sessions alone. That seam is guarded by a test which reads the `InboundPayload` declaration and the rebuild function rather than a fixture, because the pre-existing byte-identity guard compared one hardcoded payload and so stayed green for every field added after it was written. On the passive account-manager door there is no channel server and no `## Context` frame, so the one-shot's whole initial prompt is read at face value; `composePassivePrompt` therefore puts the BARE sentence above the requirement and never the quoted body. The body arrives from the sender's own client and is never checked against the message store, so quoting it in a platform-voiced bracket on the door with no untrusted zone would let a modified client put words the agent never said into a `work-create` filing. The empty-text drop gate still tests the requirement alone, so a quote never rescues an inbound carrying no requirement of its own. The quoted body is capped at `QUOTED_TEXT_CAP` (500 characters, `…` appended when cut) because it is unbounded sender-controlled input, and the cut lands on whole characters so a body whose 500th boundary falls inside a surrogate pair cannot emit a lone surrogate at a position the sender chose. Only the channel service renders a body, so the cap lives there alone; platform/ui's `app/lib/whatsapp/reply-quote.ts` holds just the bare sentence for the passive door, and both packages hardcode that sentence in their own tests so the two doors cannot drift apart on the wording (the packages never cross-import, the same arrangement `REFRAME_INSTRUCTION` and `MediaRef` use). Telegram and webchat extract no quote at all, so neither carries one. `payloadBytes` measures the whole inner payload, so a reply carrying a quote produces a visibly larger `[reframe] op=applied … payloadBytes=<n>` than the same text without one, and a bare-text-length `payloadBytes` on an inbound whose store row has a non-null `quotedId` is the signature of this defect returning. Because the field is optional at every hop, dropping it from either `server/index.ts` argument would be silent (tsc stays green, and no unit test executes that wiring file), so the `check-reply-context-threaded` build gate asserts both argument sites.
 
-**Observability.** `[preference-write] op=reconcile … mode=<reinforce|update|contradict|new> similarity=…` — a stream of `mode=new` for subjects that already exist is the duplicate-minting signature. `[preference-inject] op=inject channel=<wa|tg|web> injected=<N> owner=<8> source=<owner|no-owner|owner-error|fetch-error>` — injection selects only the account owner's admin preferences, so `source=owner injected=0` is a genuinely empty owner, `source=no-owner` is an account with no seeded owner (injects nothing, a missed owner seeding), and `injected=0 source=owner` on an account whose owner holds rules is the write-only regression re-appearing. `[preference-audit] op=drift accountId=… storedActive=… injectedActive=… duplicateClusters=…` — the standing reconciliation audit (claude-session-manager, 5-minute tick) flags any account whose store holds more active rows than injection would surface, the no-event detector for drift.
+**Observability.** `[preference-write] op=reconcile … mode=<reinforce|update|contradict|new> similarity=…` — a stream of `mode=new` for subjects that already exist is the duplicate-minting signature. `[preference-inject] op=inject channel=<wa|tg|web> injected=<N> owner=<8> source=<owner|no-owner|owner-error|fetch-error>` — injection selects only the account owner's admin preferences, so `source=owner injected=0` is a genuinely empty owner, `source=no-owner` is an account with no seeded owner (injects nothing, a missed owner seeding), and `injected=0 source=owner` on an account whose owner holds rules is the write-only regression re-appearing. `[preference-inject] op=reconcile accountId=… stored=… injected=…` — the standing reconciliation audit (claude-session-manager, 5-minute tick) flags any account whose stored active count diverges from what injection surfaces; injection now surfaces every stored active preference verbatim, so `stored == injected` is the healthy signal and any gap is a dropped-row regression (a reintroduced cap, filter, or truncation). A clean pass logs `op=reconcile drifted=0`, the no-event detector.
 
 **Consult-before-send gate.** Injection (above) puts the owner's active rules in front of every channel turn, but the growing layer-2 `Preference` set is read on demand with `profile-read`, a per-turn judgement the agent can skip, the miss that dropped a customer signature on a delivered document. `hooks/preference-consult-gate.sh` (admin plugin) is the deliverable-boundary enforcement: a PreToolUse gate on customer-facing document deliverables (`browser-pdf-save`/`SendUserFile` to `memory/users/<phone>/documents/`, and email/Outlook sends carrying attachments) that blocks (exit 2) when no `profile-read` ran after the last user message in the transcript. It fires on documents only, never on casual replies. **Observability:** `[preference-gate] op=allow tool=<name> consulted=true` on an allowed document deliverable, `op=bypass tool=<name> detail=no profile-read this turn` on a block; a stream of `op=bypass` is the un-consulted-send signature. The advisory companion `hooks/preference-consult-directive.sh` injects the two-layer architecture reminder every turn (`[pref-wrapper] op=inject`). The placement half, promoting finished deliverables out of `output/` scratch, is counted by the `data-manager` reconcile audit (`scratch-refs`, `stranded`); making that audit run on a standing periodic cadence is a filed follow-up.