@rubytech/create-maxy-code 0.1.502 → 0.1.504

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@rubytech/create-maxy-code",
-  "version": "0.1.502",
+  "version": "0.1.504",
   "description": "Install Maxy — AI for Productive People",
   "bin": {
     "create-maxy-code": "./dist/index.js"

package/payload/platform/plugins/admin/PLUGIN.md

@@ -189,6 +189,7 @@ Tools are available via the `admin` MCP server.
 ## Hooks
 
 - `hooks/quote-render-gate.sh` — **PreToolUse matcher=`mcp__plugin_browser_browser__browser-pdf-save`.** Makes the deterministic quote-render path the only route a client-facing quote PDF can reach a customer. Blocks (exit 2) a `browser-pdf-save` whose output path is a client-quote artefact (`memory/users/<phone>/documents/quote-<jobId>.pdf` or `…-breakdown.pdf`) when no render receipt exists at `quoting/jobs/<jobId>/render-receipt.json` — the receipt `quote-render` writes only after its reconcile / margin-leak / link-liveness gates all pass. A hand-authored quote (the SiteDesk 2026-07-14 bypass: `Write` HTML → `browser-pdf-save`, `quote-render` never called, an internal back-test caveat naming another client folded into the free-text region) has no receipt, so the print is refused rather than delivered. **Block message:** `Blocked: this client quote was not produced by the quote-render tool, so its fixed layout and the reconcile, margin-leak and link-liveness gates never ran. Run quote-render for this job (it files the document and its receipt), then print the client HTML path it returns to PDF.` **Log line** (stderr, on a block): `[quote-render] op=bypass jobId=<jobId> detail=client quote PDF has no render receipt` (or `reason=bad-jobid` when the filename does not resolve to a job). Every non-quote PDF — brochures, invoices, the admin-scope internal view — and the deterministic path itself (receipt present) pass at exit 0. **Fail-open** on an uninspectable call (tty / empty stdin / no `python3`): `browser-pdf-save` is a general-purpose tool and the agent never controls this hook's stdin, so failing open opens no bypass while never bricking unrelated PDFs.
+- `hooks/quote-engine-gate.sh` — **PreToolUse matcher=`Bash`** (a third command on the same `Bash` matcher as `archive-ingest-surface-gate` and `fs-schema-guard-bash-pre`, any exit 2 blocks). Makes the deterministic `quote-engine-run` / `quote-render` tools the only route the account's persisted quoting scripts can run. Blocks (exit 2) a `Bash` `command` that executes `quoting/engine.mjs` or `quoting/render.mjs` directly — the pricing and render scripts must run through their MCP tools, which apply the reconcile / margin-leak / link-liveness gates and write the figures and render receipts. A hand-run `node quoting/engine.mjs` (the SiteDesk 2026-07-25 bypass: a repricing dispatched to content-producer that ran the engine by hand and re-rendered off the deterministic path) skips all of that, so it is refused. It fires only on an execution (a JS runtime invoking the script, or the script run at command position); a read or inspect of the file (`cat`/`grep`/`git diff quoting/engine.mjs`) and every unrelated `Bash` command pass at exit 0. A `mode=verify` reproduction is gated too — it must also run through `quote-engine-run`, so a hand-run `node quoting/engine.mjs mode=verify` is refused. Known fail-open gap (accepted, consistent with the soft posture): a `cd quoting && node engine.mjs` drops the `quoting/` prefix and is not matched. **Block message:** `Blocked: the quoting engine and render scripts must run through their tools, not directly. Use the quote-engine-run tool to price a job (it files the figures) and the quote-render tool to produce the documents (it files them behind the reconcile, margin-leak and link-liveness gates). Running quoting/engine.mjs or quoting/render.mjs by hand skips those gates and files no receipt.` **Log line** (stderr, on a block): `[quote-engine] op=bypass reason=direct-script-exec`. **Fail-open** on an uninspectable call (tty / empty stdin / no `python3`): `Bash` is a general-purpose tool and the agent never controls this hook's stdin, so failing open opens no bypass while never bricking unrelated commands.
 - `hooks/preference-consult-gate.sh` — **PreToolUse gate on customer-facing document deliverables.** Registered against `mcp__plugin_browser_browser__browser-pdf-save` (a second command on the same matcher as `quote-render-gate`, either exit 2 blocks) and against the email/Outlook send tools plus `SendUserFile`. It fires only in the document-deliverable shape: a `browser-pdf-save` or `SendUserFile` whose path is under `memory/users/<phone>/documents/` (or a `SendUserFile` of a `.pdf`/`.html`/`.docx`), and `email-send`/`email-reply`/`email-draft-send`/`outlook-mail-send`/`outlook-mail-reply`/`outlook-draft-send` carrying a non-empty `attachments`. For a gated call it reads the session transcript (`transcript_path`) and blocks (exit 2) when no `profile-read` tool call ran after the last user message, because the account's layer-2 `Preference` records (signature policy, header, naming, styling) were not consulted this turn, the exact miss that dropped a customer signature on a delivered document. **Block message:** `Blocked: this customer document is about to go out without the account's saved preferences being checked this turn. Those records hold the signature, header, naming and styling rules. Run profile-read for this account, apply anything relevant, then send again.` **Log line** (stderr): `[preference-gate] op=bypass tool=<name> detail=no profile-read this turn` on a block, `op=allow tool=<name> consulted=true` on an allowed document deliverable. Every non-document tool/shape, and every casual channel reply or plain-text email, passes at exit 0. **Fail-open** on an uninspectable call (tty / empty stdin / no `python3` / transcript missing or unreadable). Scope decision: the gate fires on document deliverables only, not on every send, so it never blocks routine chat. The standing reconcile counterpart for stranded `output/` deliverables is filed as a follow-up task.
 - `hooks/quote-render-pdf-conformance.sh` — **PostToolUse matcher=`mcp__plugin_browser_browser__browser-pdf-save`.** The PDF-time companion to the PreToolUse `quote-render-gate`: the HTML gates run inside `quote-render` before the receipt, but the two PDF-only conformance checks cannot, because the PDF does not exist until `browser-pdf-save` runs. For a gated client-quote PDF (`memory/users/<phone>/documents/quote-<jobId>.pdf` or `…-breakdown.pdf`) whose render receipt names the source HTML, it blocks (exit 2) when the printed PDF's `/URI` annotation count is below the source HTML's absolute-link count (a rasterised or flattened print that dropped links) or when an embedded `https://` link does not answer 200 (a Sign-Online link a pending redeploy would 404). The offline `/URI`-count check runs first and short-circuits, so a link-loss regression never depends on the network. **Block message:** `Blocked: the printed quote PDF is missing links the document declared, or an embedded link is not live (…). Do not send it. If a Sign-Online link is not live yet, deploy the signing page first; then re-render and re-print so the PDF carries every link the document declares.` **Log line** (stderr, on a block): `[quote-render] op=bypass jobId=<jobId> reason=pdf-link-conformance detail=<uri-count …|link <url> -> <code>>`. Every non-quote PDF, and any call with no receipt (the PreToolUse gate owns that block), passes at exit 0. **Fail-open** on an uninspectable call (tty / empty stdin / no `python3` / receipt or PDF absent). **Reach on upgrade:** `provision-account-dir.sh` writes this PostToolUse matcher only at account-provision time, so accounts provisioned before it landed keep a stale matcher and need a settings backfill (tracked as a follow-up task), the same reach limit the AskUserQuestion carrier gate hit.
 - `hooks/webfetch-preflight.mjs` — short-circuits WebFetch on JS-SPA shells with a structured `WEBFETCH_CANNOT_READ_JS_SPA` error so the agent surfaces a loud failure to the owner instead of paying the 60s extraction timeout. Fail-open on any internal error.

package/payload/platform/plugins/admin/hooks/__tests__/quote-engine-gate.test.sh

@@ -0,0 +1,98 @@
+#!/usr/bin/env bash
+# Regression test for quote-engine-gate.sh.
+#
+# The gate is a PreToolUse hook on Bash. It refuses a Bash command that runs the
+# persisted quoting engine or render script directly (quoting/engine.mjs or
+# quoting/render.mjs), because those scripts must run only through the
+# deterministic quote-engine-run / quote-render MCP tools (which apply the gates
+# and write receipts). A mode=verify engine run and every unrelated command pass.
+#
+# Covers:
+#   A. Bash running quoting/engine.mjs            → BLOCKED (exit 2)
+#   B. Bash running quoting/render.mjs            → BLOCKED
+#   C. engine.mjs run with mode=verify by hand    → BLOCKED (verify runs through the tool too)
+#   D. engine.mjs run with a `# mode=verify` tail → BLOCKED (no token-anywhere escape)
+#   E. unrelated Bash (ls quoting)                → ALLOWED
+#   F. a quote-engine-run MCP tool call           → ALLOWED (not Bash)
+#   G. empty stdin                                → ALLOWED (fail-open)
+#   H. a non-Bash tool                            → ALLOWED (matcher defence-in-depth)
+#   I. a block emits the op=bypass fault line
+#   J. reading the script (cat) is not execution  → ALLOWED
+#   K. grepping the script is not execution       → ALLOWED
+#   L. the script run at command position         → BLOCKED
+
+set -u
+
+HOOK="$(cd "$(dirname "$0")/.." && pwd)/quote-engine-gate.sh"
+if [[ ! -x "$HOOK" ]]; then
+  echo "FAIL: $HOOK not executable" >&2
+  exit 1
+fi
+
+PASS=0
+FAIL=0
+
+run_case() {
+  local name="$1" stdin="$2" expected_exit="$3"
+  local actual_exit
+  ( printf '%s' "$stdin" | bash "$HOOK" >/dev/null 2>/dev/null )
+  actual_exit=$?
+  if [[ "$actual_exit" -eq "$expected_exit" ]]; then
+    echo "PASS: $name (exit=$actual_exit)"
+    PASS=$((PASS + 1))
+  else
+    echo "FAIL: $name (expected exit=$expected_exit, got=$actual_exit)" >&2
+    FAIL=$((FAIL + 1))
+  fi
+}
+
+bash_env() { # command string (JSON-escaped by caller)
+  printf '{"hook_event_name":"PreToolUse","tool_name":"Bash","tool_input":{"command":"%s"}}' "$1"
+}
+
+run_case "A: Bash runs quoting/engine.mjs → BLOCKED" \
+  "$(bash_env "node quoting/engine.mjs < quoting/job-1854.json")" 2
+
+run_case "B: Bash runs quoting/render.mjs → BLOCKED" \
+  "$(bash_env "node quoting/render.mjs")" 2
+
+run_case "C: engine.mjs mode=verify by hand → BLOCKED" \
+  "$(bash_env "node quoting/engine.mjs mode=verify")" 2
+
+run_case "D: engine.mjs with # mode=verify tail → BLOCKED" \
+  "$(bash_env "node quoting/engine.mjs < job.json # mode=verify")" 2
+
+run_case "E: unrelated Bash → ALLOWED" \
+  "$(bash_env "ls quoting")" 0
+
+run_case "J: reading the script (cat) → ALLOWED" \
+  "$(bash_env "cat quoting/engine.mjs")" 0
+
+run_case "K: grepping the script → ALLOWED" \
+  "$(bash_env "grep foo quoting/render.mjs")" 0
+
+run_case "L: script at command position → BLOCKED" \
+  "$(bash_env "./quoting/engine.mjs < job.json")" 2
+
+run_case "F: quote-engine-run MCP call → ALLOWED" \
+  '{"hook_event_name":"PreToolUse","tool_name":"mcp__plugin_sitedesk-job_sitedesk-job__quote-engine-run","tool_input":{"job":"1854","mode":"quote"}}' 0
+
+run_case "G: empty stdin → ALLOWED (fail-open)" \
+  "" 0
+
+run_case "H: non-Bash tool → ALLOWED" \
+  '{"hook_event_name":"PreToolUse","tool_name":"Write","tool_input":{"file_path":"/x/quoting/engine.mjs"}}' 0
+
+# I: a block emits the op=bypass fault line on stderr.
+STDERR=$( printf '%s' "$(bash_env "node quoting/engine.mjs")" | bash "$HOOK" 2>&1 >/dev/null )
+if printf '%s' "$STDERR" | grep -q '\[quote-engine\] op=bypass reason=direct-script-exec'; then
+  echo "PASS: I: block emits op=bypass reason=direct-script-exec"
+  PASS=$((PASS + 1))
+else
+  echo "FAIL: I: op=bypass line absent (got: $STDERR)" >&2
+  FAIL=$((FAIL + 1))
+fi
+
+echo "──────── quote-engine-gate test summary ────────"
+echo "PASS=$PASS FAIL=$FAIL"
+[[ "$FAIL" -eq 0 ]]

package/payload/platform/plugins/admin/hooks/quote-engine-gate.sh

@@ -0,0 +1,68 @@
+#!/usr/bin/env bash
+# quote-engine-gate — PreToolUse gate on Bash.
+#
+# The account's quoting method is applied by two persisted scripts,
+# quoting/engine.mjs (pricing) and quoting/render.mjs (documents). They must run
+# ONLY through their MCP tools — quote-engine-run and quote-render — which apply
+# the reconcile / margin-leak / link-liveness gates and write the figures and
+# render receipts. Running either script directly from a Bash command bypasses
+# all of that (the SiteDesk 2026-07-25 bypass: a repricing dispatched to
+# content-producer that ran `node quoting/engine.mjs` and re-rendered by hand).
+# This gate refuses that Bash call and points the agent at the tools. It fires
+# only on an execution of the persisted script (a JS runtime invoking it, or the
+# script run at command position), never on a read like `cat quoting/engine.mjs`.
+# A mode=verify reproduction must also run through the quote-engine-run tool, so
+# a hand-run `node quoting/engine.mjs mode=verify` is gated too.
+#
+# Exit codes: 0 = allow, 2 = block (stderr shown to the agent). Fail OPEN on an
+# uninspectable call (Bash is a general-purpose tool and the agent never controls
+# this hook's stdin, so failing open opens no bypass while never bricking
+# unrelated commands). No task numbers or internal refs in operator-visible text.
+
+set -uo pipefail
+
+# No envelope (tty or empty stdin) → allow: cannot inspect, must not brick Bash.
+if [ -t 0 ]; then exit 0; fi
+INPUT=$(cat)
+[ -z "$INPUT" ] && exit 0
+
+# Print "block" when the Bash command runs a persisted quoting script directly
+# (and is not a mode=verify run), or nothing for any other call.
+DECISION=$(INPUT="$INPUT" python3 - <<'PY' 2>/dev/null || true
+import os, json, re, sys
+try:
+    d = json.loads(os.environ["INPUT"])
+except Exception:
+    sys.exit(0)
+if (d.get("tool_name", "") or "") != "Bash":
+    sys.exit(0)
+cmd = (d.get("tool_input", {}) or {}).get("command", "") or ""
+if not cmd:
+    sys.exit(0)
+script = r'quoting/(engine|render)\.mjs\b'
+# Block only an EXECUTION of the persisted script, not a read/inspect of it:
+#  - a JS runtime invoking it: `node|nodejs|bun|deno|ts-node ... quoting/engine.mjs`
+#  - the script run directly at command position: `./quoting/engine.mjs`, or the
+#    path as a bare command after a separator.
+# A read (`cat|grep|git diff|head|wc quoting/engine.mjs`) leaves the path as an
+# argument, not at command position, so it is not matched and passes.
+# Verify runs are NOT carved out: `mode=verify` must also go through the
+# quote-engine-run tool, never a hand-run of the persisted script.
+executed = (
+    re.search(r'\b(?:node|nodejs|bun|deno|ts-node)\b[^;&|\n]*' + script, cmd)
+    or re.search(r'(?:^|[;&|]\s*)\.?/?' + script, cmd)
+)
+# Known fail-open gap (accepted, consistent with this gate's soft posture): a
+# cd-relative run like `cd quoting && node engine.mjs` drops the `quoting/`
+# prefix and is not matched.
+if not executed:
+    sys.exit(0)
+print("block")
+PY
+)
+
+[ "$DECISION" = "block" ] || exit 0
+
+echo "[quote-engine] op=bypass reason=direct-script-exec" >&2
+echo "Blocked: the quoting engine and render scripts must run through their tools, not directly. Use the quote-engine-run tool to price a job (it files the figures) and the quote-render tool to produce the documents (it files them behind the reconcile, margin-leak and link-liveness gates). Running quoting/engine.mjs or quoting/render.mjs by hand skips those gates and files no receipt." >&2
+exit 2

package/payload/platform/plugins/admin/skills/platform-architecture/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: platform-architecture
 description: Use when grounding any documented-surface claim about what Maxy ships — plugins, skills, specialists, install/deploy flows, internals. This is the install catalogue, not evidence of what is enabled on the current account. For install state on this account, call `capabilities-here`; for documented surface, cite the `Source:` URL inline.
-content-hash: sha256:f78dfe81d9832fd7197627e1cf770c730bb2d16b4b640f1a47558e86acfe0db8
+content-hash: sha256:11d9347727ac157b2724bab8fb4011912235c2395a787ca178277396029eb14a
 brand: maxy-code
 product-name: Maxy
 ---
@@ -3076,6 +3076,38 @@ skillDirGone=<bool> pluginDirRemoved=<bool>` (`skillDirGone=false` with
 `outcome=ok` is a named failure) / `outcome=rejected reason=<invalid-name|
 not-found|rm-error>`.
 
+### Agents
+
+The Agents surface (`/agents`) is the admin view of the account's public agents —
+the per-agent directories under `<accountDir>/agents/<slug>/`, each carrying a
+`config.json` (`displayName`, `status`, `model`, `knowledgeKeywords`) plus the
+four owned docs `IDENTITY.md`, `SOUL.md`, `KNOWLEDGE.md`, `KNOWLEDGE-SUMMARY.md`.
+It renders one card per agent (display name, `/slug`, status dot); a card opens a
+**read-only** detail modal showing the status, model, whichever owned docs are
+present on disk, the knowledge keywords, and an open-agent link to the agent's
+public URL (computed client-side: an `admin.` host maps to the `public.` host).
+Read-only by design — agents are authored and edited through chat — with one
+exception: a **delete** behind an explicit confirm in the modal, which runs the
+existing loud-fail `DELETE` (graph projection cleanup precedes file removal).
+This page is the sole agent surface; the former "Public" flyout toggle in the
+account menu was removed.
+
+The route (`server/routes/admin/agents.ts`) resolves the current account via
+`resolveAccount`; `:slug` params reject `/`, `..`, `\` (the traversal guard).
+
+| Route | Behaviour |
+|-------|-----------|
+| `GET /api/admin/agents` | Lists `agents/*/` dirs with a valid `config.json` (never the `admin` agent), returns `{agents, skipped}` where `skipped` counts dirs whose `config.json` failed to parse — surfacing the drop the list used to make silently. |
+| `GET /api/admin/agents/:slug` | One agent's config fields plus the four owned docs and a `present` map. A missing doc is an empty string with `present.<role>=false`, never a 500; an unknown agent 404s. |
+| `DELETE /api/admin/agents/:slug` | Removes the agent dir after `deleteAgentProjection`; refuses the `admin` slug. Loud-fail: a graph-cleanup throw aborts the file removal. |
+
+Observability rides `[admin/agents]`: `op=list agents=<n> skipped=<m>` (the
+surface heartbeat — `skipped>0` is a malformed-config signal the page renders as
+a banner), `op=detail slug=<…> present=<comma-list|none>` (a role absent from
+`present=` for an agent expected complete is the missing-doc signature), and the
+existing delete lines (`deleted agent "<slug>"` / `graph cleanup failed …
+aborting file removal`).
+
 ### Graph
 
 | Mount | Purpose |

package/payload/platform/plugins/admin/skills/whats-new/SKILL.md

@@ -9,6 +9,18 @@ Invoked by the admin agent directly.
 
 This is the platform's release timeline, newest first. Each entry shows the date it shipped and the version it shipped in, so you can tell the operator how current their install is. To compare, read the installed version from `capabilities-here` and match it against the versions below. Keep answers high level and in plain English; this is a summary, not a full commit log.
 
+## 2026-07-25 (0.1.504)
+
+- Tasks can now be assigned to a person directly from the picker in the Tasks view.
+- The Agents page is back as its own admin surface, with a card grid and a detail view for each agent.
+- The loading screen now covers every screen's first load, not just when switching accounts.
+
+## 2026-07-25 (0.1.503)
+
+- The "stalled" indicator in chat now only shows when a turn is genuinely stuck, not during a normal pause.
+- Quote price changes always go through the proper pricing engine now, closing a path that could skip its checks.
+- The Skills and Calendar detail views are wider and no longer show an unnecessary scrollbar.
+
 ## 2026-07-25 (0.1.502)
 
 - Uploading a file from the phone or desktop app now shows as a proper thumbnail in chat, not a raw file path.

package/payload/platform/plugins/docs/references/admin-ui.md

@@ -149,6 +149,38 @@ skillDirGone=<bool> pluginDirRemoved=<bool>` (`skillDirGone=false` with
 `outcome=ok` is a named failure) / `outcome=rejected reason=<invalid-name|
 not-found|rm-error>`.
 
+### Agents
+
+The Agents surface (`/agents`) is the admin view of the account's public agents —
+the per-agent directories under `<accountDir>/agents/<slug>/`, each carrying a
+`config.json` (`displayName`, `status`, `model`, `knowledgeKeywords`) plus the
+four owned docs `IDENTITY.md`, `SOUL.md`, `KNOWLEDGE.md`, `KNOWLEDGE-SUMMARY.md`.
+It renders one card per agent (display name, `/slug`, status dot); a card opens a
+**read-only** detail modal showing the status, model, whichever owned docs are
+present on disk, the knowledge keywords, and an open-agent link to the agent's
+public URL (computed client-side: an `admin.` host maps to the `public.` host).
+Read-only by design — agents are authored and edited through chat — with one
+exception: a **delete** behind an explicit confirm in the modal, which runs the
+existing loud-fail `DELETE` (graph projection cleanup precedes file removal).
+This page is the sole agent surface; the former "Public" flyout toggle in the
+account menu was removed.
+
+The route (`server/routes/admin/agents.ts`) resolves the current account via
+`resolveAccount`; `:slug` params reject `/`, `..`, `\` (the traversal guard).
+
+| Route | Behaviour |
+|-------|-----------|
+| `GET /api/admin/agents` | Lists `agents/*/` dirs with a valid `config.json` (never the `admin` agent), returns `{agents, skipped}` where `skipped` counts dirs whose `config.json` failed to parse — surfacing the drop the list used to make silently. |
+| `GET /api/admin/agents/:slug` | One agent's config fields plus the four owned docs and a `present` map. A missing doc is an empty string with `present.<role>=false`, never a 500; an unknown agent 404s. |
+| `DELETE /api/admin/agents/:slug` | Removes the agent dir after `deleteAgentProjection`; refuses the `admin` slug. Loud-fail: a graph-cleanup throw aborts the file removal. |
+
+Observability rides `[admin/agents]`: `op=list agents=<n> skipped=<m>` (the
+surface heartbeat — `skipped>0` is a malformed-config signal the page renders as
+a banner), `op=detail slug=<…> present=<comma-list|none>` (a role absent from
+`present=` for an agent expected complete is the missing-doc signature), and the
+existing delete lines (`deleted agent "<slug>"` / `graph cleanup failed …
+aborting file removal`).
+
 ### Graph
 
 | Mount | Purpose |

package/payload/platform/plugins/work/PLUGIN.md

@@ -106,9 +106,9 @@ Run `work-ready` and surface the ready set if the user has open work. This answe
 
 ## Tools
 
-- `work-create` — Create a work item, optionally linked to a person (RAISED_BY) and entities (AFFECTS). For durable-action records, pass `kind` (e.g. `"onboarding-establish-owner"`, `"cloudflare-tunnel-login"`) to set status `running`; pass `inputs` with the form payload and `inputSchema` declaring any secret fields — values land on the Task as `inputs.<field>` props after `redactSecrets` strips schema-tagged keys; `inputsProvided` records the call-shape (names submitted) alongside the value-bearing `inputs.*`. Pass `raisedDuringConversationKey` to write a `:RAISED_DURING` edge to the originating Conversation when it differs from the current session. For estate-agent client work surfaced on the `/tasks` operator page, pass `clientName`, `propertyAddress`, and `fee` (GBP major units, e.g. `10` = £10) — all optional, recorded on the Task; the platform performs no charge computation.
-- `work-update` — Update name, description, status, priority, due date, or append a note (append-only). Pass `appendStep` to atomically append one entry to `steps[]` (call once per action phase); `errorMessage` is required when status transitions to `failed`; `completed` and `failed` transitions auto-set `completedAt`.
-- `work-list` — List work items filtered by status, priority, or related entity
+- `work-create` — Create a work item, optionally linked to a person (RAISED_BY) and entities (AFFECTS). For durable-action records, pass `kind` (e.g. `"onboarding-establish-owner"`, `"cloudflare-tunnel-login"`) to set status `running`; pass `inputs` with the form payload and `inputSchema` declaring any secret fields — values land on the Task as `inputs.<field>` props after `redactSecrets` strips schema-tagged keys; `inputsProvided` records the call-shape (names submitted) alongside the value-bearing `inputs.*`. Pass `raisedDuringConversationKey` to write a `:RAISED_DURING` edge to the originating Conversation when it differs from the current session. For estate-agent client work surfaced on the `/tasks` operator page, pass `clientName`, `propertyAddress`, and `fee` (GBP major units, e.g. `10` = £10) — all optional, recorded on the Task; the platform performs no charge computation. Pass `assigneeUserId` to assign the task to a house/platform admin or this account's business owner (validated against the assignable set — house admins ∪ owner; an out-of-set userId assigns no one).
+- `work-update` — Update name, description, status, priority, due date, or append a note (append-only). Pass `appendStep` to atomically append one entry to `steps[]` (call once per action phase); `errorMessage` is required when status transitions to `failed`; `completed` and `failed` transitions auto-set `completedAt`. Pass `assigneeUserId` to reassign (a house-admin/owner userId), `null` to unassign, or omit to leave assignment unchanged.
+- `work-list` — List work items filtered by status, priority, or related entity. Each row includes the assignee userId (or `unassigned`).
 - `work-get` — Fetch a work item with full details and all relationships
 - `work-relate` — Add AFFECTS, BLOCKS, PART_OF, or RAISED_BY relationships. For Task targets, pass the taskId (UUID) from work-create. For other labels, pass the elementId from memory-search.
 - `work-complete` — Mark done, re-embed, surface newly-unblocked work

package/payload/platform/plugins/work/mcp/dist/__tests__/assignable-admins.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=assignable-admins.test.d.ts.map

package/payload/platform/plugins/work/mcp/dist/__tests__/assignable-admins.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"assignable-admins.test.d.ts","sourceRoot":"","sources":["../../src/__tests__/assignable-admins.test.ts"],"names":[],"mappings":""}

package/payload/platform/plugins/work/mcp/dist/__tests__/assignable-admins.test.js

@@ -0,0 +1,55 @@
+// @vitest-environment node
+//
+// Task 1982 — readHouseAdminUserIds reads the house account.json admins[] from
+// the accounts root; accountsRootFromEnv derives it from ACCOUNT_DIR.
+import { describe, it, expect, afterEach } from "vitest";
+import { mkdtempSync, mkdirSync, writeFileSync, rmSync } from "node:fs";
+import { tmpdir } from "node:os";
+import { join } from "node:path";
+import { readHouseAdminUserIds, accountsRootFromEnv } from "../lib/assignable-admins.js";
+let roots = [];
+function makeAccounts(accounts) {
+    const root = mkdtempSync(join(tmpdir(), "acct-root-"));
+    roots.push(root);
+    for (const a of accounts) {
+        mkdirSync(join(root, a.id));
+        writeFileSync(join(root, a.id, "account.json"), JSON.stringify(a.cfg));
+    }
+    return root;
+}
+afterEach(() => {
+    for (const r of roots)
+        rmSync(r, { recursive: true, force: true });
+    roots = [];
+    delete process.env.ACCOUNT_DIR;
+});
+describe("readHouseAdminUserIds (Task 1982)", () => {
+    it("returns the house admins[] userIds in file order", () => {
+        const root = makeAccounts([
+            { id: "client-1", cfg: { role: "client", accountId: "client-1" } },
+            { id: "house-1", cfg: { role: "house", accountId: "house-1", admins: [{ userId: "primary" }, { userId: "second" }] } },
+        ]);
+        expect(readHouseAdminUserIds(root)).toEqual(["primary", "second"]);
+    });
+    it("returns [] when there is no house account", () => {
+        const root = makeAccounts([{ id: "client-1", cfg: { role: "client", accountId: "client-1" } }]);
+        expect(readHouseAdminUserIds(root)).toEqual([]);
+    });
+    it("returns [] when the house admins[] is absent", () => {
+        const root = makeAccounts([{ id: "house-1", cfg: { role: "house", accountId: "house-1" } }]);
+        expect(readHouseAdminUserIds(root)).toEqual([]);
+    });
+    it("returns [] for an unreadable accounts root", () => {
+        expect(readHouseAdminUserIds("/no/such/dir/anywhere")).toEqual([]);
+    });
+});
+describe("accountsRootFromEnv (Task 1982)", () => {
+    it("is the parent of ACCOUNT_DIR", () => {
+        process.env.ACCOUNT_DIR = "/srv/data/accounts/acct-9";
+        expect(accountsRootFromEnv()).toBe("/srv/data/accounts");
+    });
+    it("is null when ACCOUNT_DIR is absent", () => {
+        expect(accountsRootFromEnv()).toBeNull();
+    });
+});
+//# sourceMappingURL=assignable-admins.test.js.map

package/payload/platform/plugins/work/mcp/dist/__tests__/assignable-admins.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"assignable-admins.test.js","sourceRoot":"","sources":["../../src/__tests__/assignable-admins.test.ts"],"names":[],"mappings":"AAAA,2BAA2B;AAC3B,EAAE;AACF,+EAA+E;AAC/E,sEAAsE;AACtE,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAC;AACzD,OAAO,EAAE,WAAW,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACxE,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,qBAAqB,EAAE,mBAAmB,EAAE,MAAM,6BAA6B,CAAC;AAEzF,IAAI,KAAK,GAAa,EAAE,CAAC;AACzB,SAAS,YAAY,CAAC,QAA6C;IACjE,MAAM,IAAI,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,YAAY,CAAC,CAAC,CAAC;IACvD,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACjB,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;QACzB,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QAC5B,aAAa,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,cAAc,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IACzE,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,CAAC,GAAG,EAAE;IACb,KAAK,MAAM,CAAC,IAAI,KAAK;QAAE,MAAM,CAAC,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACnE,KAAK,GAAG,EAAE,CAAC;IACX,OAAO,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC;AACjC,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,mCAAmC,EAAE,GAAG,EAAE;IACjD,EAAE,CAAC,kDAAkD,EAAE,GAAG,EAAE;QAC1D,MAAM,IAAI,GAAG,YAAY,CAAC;YACxB,EAAE,EAAE,EAAE,UAAU,EAAE,GAAG,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,UAAU,EAAE,EAAE;YAClE,EAAE,EAAE,EAAE,SAAS,EAAE,GAAG,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,EAAE,EAAE;SACvH,CAAC,CAAC;QACH,MAAM,CAAC,qBAAqB,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC,CAAC;IACrE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2CAA2C,EAAE,GAAG,EAAE;QACnD,MAAM,IAAI,GAAG,YAAY,CAAC,CAAC,EAAE,EAAE,EAAE,UAAU,EAAE,GAAG,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,UAAU,EAAE,EAAE,CAAC,CAAC,CAAC;QAChG,MAAM,CAAC,qBAAqB,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IAClD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8CAA8C,EAAE,GAAG,EAAE;QACtD,MAAM,IAAI,GAAG,YAAY,CAAC,CAAC,EAAE,EAAE,EAAE,SAAS,EAAE,GAAG,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,EAAE,CAAC,CAAC,CAAC;QAC7F,MAAM,CAAC,qBAAqB,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IAClD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4CAA4C,EAAE,GAAG,EAAE;QACpD,MAAM,CAAC,qBAAqB,CAAC,uBAAuB,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IACrE,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,iCAAiC,EAAE,GAAG,EAAE;IAC/C,EAAE,CAAC,8BAA8B,EAAE,GAAG,EAAE;QACtC,OAAO,CAAC,GAAG,CAAC,WAAW,GAAG,2BAA2B,CAAC;QACtD,MAAM,CAAC,mBAAmB,EAAE,CAAC,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;IAC3D,CAAC,CAAC,CAAC;IACH,EAAE,CAAC,oCAAoC,EAAE,GAAG,EAAE;QAC5C,MAAM,CAAC,mBAAmB,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC;IAC3C,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/payload/platform/plugins/work/mcp/dist/__tests__/work-create-assigned-admin-env.test.js

@@ -8,7 +8,9 @@
 // userId that resolves to no AdminUser, writes no ASSIGNED_TO edge.
 import { describe, it, expect, vi, afterEach } from "vitest";
 const { runMock, closeMock, writeMock } = vi.hoisted(() => ({
-    runMock: vi.fn(async () => ({ records: [] })),
+    runMock: vi.fn(async (_cypher, _params) => ({
+        records: [],
+    })),
     closeMock: vi.fn(async () => { }),
     writeMock: vi.fn(async (_arg) => ({})),
 }));
@@ -69,4 +71,34 @@ describe("work-create ASSIGNED_TO env (Task 1500)", () => {
         expect(rels.some((r) => r.type === "ASSIGNED_TO")).toBe(false);
     });
 });
+// Task 1982 — an agent may pass `assigneeUserId` explicitly. The param path is
+// validated against the assignable set (house admins ∪ owner). With no
+// ACCOUNT_DIR the house set is empty, so the owner (resolved from the graph) is
+// the sole in-roster identity in these tests. The two run calls per assign are
+// [owner-query, AdminUser-MATCH].
+describe("work-create assigneeUserId param (Task 1982)", () => {
+    it("writes an ASSIGNED_TO edge for the account owner passed as assigneeUserId", async () => {
+        runMock
+            .mockResolvedValueOnce({ records: [{ get: (k) => (k === "userId" ? "owner-1" : null) }] }) // owner query
+            .mockResolvedValueOnce({ records: [{ get: () => "4:owner:9" }] }); // AdminUser MATCH
+        await workCreate({ ...baseParams, assigneeUserId: "owner-1" });
+        const assigned = relationshipsFromWrite().filter((r) => r.type === "ASSIGNED_TO");
+        expect(assigned).toEqual([{ type: "ASSIGNED_TO", direction: "outgoing", targetNodeId: "4:owner:9" }]);
+    });
+    it("param wins over the passive-intake env var", async () => {
+        process.env.INTAKE_ASSIGNED_ADMIN_USER_ID = "env-admin";
+        runMock
+            .mockResolvedValueOnce({ records: [{ get: (k) => (k === "userId" ? "owner-1" : null) }] }) // owner query
+            .mockResolvedValueOnce({ records: [{ get: () => "4:owner:9" }] }); // AdminUser MATCH
+        await workCreate({ ...baseParams, assigneeUserId: "owner-1" });
+        // The AdminUser MATCH must resolve the PARAM userId, not the env one.
+        const matchCall = runMock.mock.calls.find((c) => String(c[0]).includes("MATCH (au:AdminUser {userId: $userId})"));
+        expect(matchCall?.[1]).toMatchObject({ userId: "owner-1" });
+    });
+    it("writes no ASSIGNED_TO edge when the param userId is not in the roster", async () => {
+        runMock.mockResolvedValueOnce({ records: [{ get: (k) => (k === "userId" ? "owner-1" : null) }] }); // owner query only
+        await workCreate({ ...baseParams, assigneeUserId: "stranger" });
+        expect(relationshipsFromWrite().some((r) => r.type === "ASSIGNED_TO")).toBe(false);
+    });
+});
 //# sourceMappingURL=work-create-assigned-admin-env.test.js.map

package/payload/platform/plugins/work/mcp/dist/__tests__/work-create-assigned-admin-env.test.js.map

@@ -1 +1 @@
-{"version":3,"file":"work-create-assigned-admin-env.test.js","sourceRoot":"","sources":["../../src/__tests__/work-create-assigned-admin-env.test.ts"],"names":[],"mappings":"AAAA,2BAA2B;AAC3B,EAAE;AACF,gFAAgF;AAChF,8EAA8E;AAC9E,uEAAuE;AACvE,gFAAgF;AAChF,+EAA+E;AAC/E,oEAAoE;AACpE,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAC;AAE7D,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;IAC1D,OAAO,EAAE,EAAE,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,EAA4C,EAAE,CAAC,CAAC;IACvF,SAAS,EAAE,EAAE,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,GAAE,CAAC,CAAC;IAChC,SAAS,EAAE,EAAE,CAAC,EAAE,CAAC,KAAK,EAAE,IAAyF,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;CAC5H,CAAC,CAAC,CAAC;AAEJ,EAAE,CAAC,IAAI,CAAC,iBAAiB,EAAE,GAAG,EAAE,CAAC,CAAC;IAChC,UAAU,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC;CACvD,CAAC,CAAC,CAAC;AACJ,EAAE,CAAC,IAAI,CAAC,sBAAsB,EAAE,GAAG,EAAE,CAAC,CAAC;IACrC,gBAAgB,EAAE,KAAK,IAAI,EAAE,CAAC,EAAc;CAC7C,CAAC,CAAC,CAAC;AACJ,EAAE,CAAC,IAAI,CAAC,8CAA8C,EAAE,GAAG,EAAE,CAAC,CAAC;IAC7D,kBAAkB,EAAE,SAAS;CAC9B,CAAC,CAAC,CAAC;AACJ,EAAE,CAAC,IAAI,CAAC,+CAA+C,EAAE,GAAG,EAAE,CAAC,CAAC;IAC9D,aAAa,EAAE,CAAC,MAA2C,EAAE,EAAE,CAAC,CAAC;QAC/D,QAAQ,EAAE,MAAM,IAAI,EAAE;QACtB,aAAa,EAAE,CAAC;QAChB,iBAAiB,EAAE,EAAc;KAClC,CAAC;CACH,CAAC,CAAC,CAAC;AAEJ,OAAO,EAAE,UAAU,EAAE,MAAM,yBAAyB,CAAC;AAErD,MAAM,UAAU,GAAG;IACjB,SAAS,EAAE,OAAO;IAClB,IAAI,EAAE,kBAAkB;IACxB,WAAW,EAAE,sCAAsC;IACnD,QAAQ,EAAE,SAAS,EAAE,mEAAmE;IACxF,SAAS,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,OAAO,EAAE;CACA,CAAC;AAEjD,SAAS,sBAAsB;IAC7B,OAAO,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC;AAClD,CAAC;AAED,SAAS,CAAC,GAAG,EAAE;IACb,OAAO,OAAO,CAAC,GAAG,CAAC,6BAA6B,CAAC;IACjD,OAAO,CAAC,SAAS,EAAE,CAAC;IACpB,OAAO,CAAC,iBAAiB,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC;IAC3C,SAAS,CAAC,SAAS,EAAE,CAAC;AACxB,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,yCAAyC,EAAE,GAAG,EAAE;IACvD,EAAE,CAAC,8EAA8E,EAAE,KAAK,IAAI,EAAE;QAC5F,OAAO,CAAC,GAAG,CAAC,6BAA6B,GAAG,WAAW,CAAC;QACxD,OAAO,CAAC,iBAAiB,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,EAAE,CAAC,CAAC;QACrE,MAAM,UAAU,CAAC,UAAU,CAAC,CAAC;QAC7B,MAAM,IAAI,GAAG,sBAAsB,EAAE,CAAC;QACtC,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,aAAa,CAAC,CAAC;QAC9D,MAAM,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,SAAS,EAAE,UAAU,EAAE,YAAY,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC;IACxG,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uDAAuD,EAAE,KAAK,IAAI,EAAE;QACrE,MAAM,UAAU,CAAC,UAAU,CAAC,CAAC;QAC7B,MAAM,IAAI,GAAG,sBAAsB,EAAE,CAAC;QACtC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC/D,gEAAgE;QAChE,MAAM,CAAC,IAAI,CAAC,CAAC,cAAc,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,SAAS,EAAE,UAAU,EAAE,YAAY,EAAE,SAAS,EAAE,CAAC,CAAC;IACrG,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yEAAyE,EAAE,KAAK,IAAI,EAAE;QACvF,OAAO,CAAC,GAAG,CAAC,6BAA6B,GAAG,YAAY,CAAC;QACzD,OAAO,CAAC,iBAAiB,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,gCAAgC;QAC5E,MAAM,UAAU,CAAC,UAAU,CAAC,CAAC;QAC7B,MAAM,IAAI,GAAG,sBAAsB,EAAE,CAAC;QACtC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACjE,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}
+{"version":3,"file":"work-create-assigned-admin-env.test.js","sourceRoot":"","sources":["../../src/__tests__/work-create-assigned-admin-env.test.ts"],"names":[],"mappings":"AAAA,2BAA2B;AAC3B,EAAE;AACF,gFAAgF;AAChF,8EAA8E;AAC9E,uEAAuE;AACvE,gFAAgF;AAChF,+EAA+E;AAC/E,oEAAoE;AACpE,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAC;AAE7D,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;IAC1D,OAAO,EAAE,EAAE,CAAC,EAAE,CAAC,KAAK,EAAE,OAAe,EAAE,OAAiC,EAAE,EAAE,CAAC,CAAC;QAC5E,OAAO,EAAE,EAA4C;KACtD,CAAC,CAAC;IACH,SAAS,EAAE,EAAE,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,GAAE,CAAC,CAAC;IAChC,SAAS,EAAE,EAAE,CAAC,EAAE,CAAC,KAAK,EAAE,IAAyF,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;CAC5H,CAAC,CAAC,CAAC;AAEJ,EAAE,CAAC,IAAI,CAAC,iBAAiB,EAAE,GAAG,EAAE,CAAC,CAAC;IAChC,UAAU,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC;CACvD,CAAC,CAAC,CAAC;AACJ,EAAE,CAAC,IAAI,CAAC,sBAAsB,EAAE,GAAG,EAAE,CAAC,CAAC;IACrC,gBAAgB,EAAE,KAAK,IAAI,EAAE,CAAC,EAAc;CAC7C,CAAC,CAAC,CAAC;AACJ,EAAE,CAAC,IAAI,CAAC,8CAA8C,EAAE,GAAG,EAAE,CAAC,CAAC;IAC7D,kBAAkB,EAAE,SAAS;CAC9B,CAAC,CAAC,CAAC;AACJ,EAAE,CAAC,IAAI,CAAC,+CAA+C,EAAE,GAAG,EAAE,CAAC,CAAC;IAC9D,aAAa,EAAE,CAAC,MAA2C,EAAE,EAAE,CAAC,CAAC;QAC/D,QAAQ,EAAE,MAAM,IAAI,EAAE;QACtB,aAAa,EAAE,CAAC;QAChB,iBAAiB,EAAE,EAAc;KAClC,CAAC;CACH,CAAC,CAAC,CAAC;AAEJ,OAAO,EAAE,UAAU,EAAE,MAAM,yBAAyB,CAAC;AAErD,MAAM,UAAU,GAAG;IACjB,SAAS,EAAE,OAAO;IAClB,IAAI,EAAE,kBAAkB;IACxB,WAAW,EAAE,sCAAsC;IACnD,QAAQ,EAAE,SAAS,EAAE,mEAAmE;IACxF,SAAS,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,OAAO,EAAE;CACA,CAAC;AAEjD,SAAS,sBAAsB;IAC7B,OAAO,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC;AAClD,CAAC;AAED,SAAS,CAAC,GAAG,EAAE;IACb,OAAO,OAAO,CAAC,GAAG,CAAC,6BAA6B,CAAC;IACjD,OAAO,CAAC,SAAS,EAAE,CAAC;IACpB,OAAO,CAAC,iBAAiB,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC;IAC3C,SAAS,CAAC,SAAS,EAAE,CAAC;AACxB,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,yCAAyC,EAAE,GAAG,EAAE;IACvD,EAAE,CAAC,8EAA8E,EAAE,KAAK,IAAI,EAAE;QAC5F,OAAO,CAAC,GAAG,CAAC,6BAA6B,GAAG,WAAW,CAAC;QACxD,OAAO,CAAC,iBAAiB,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,EAAE,CAAC,CAAC;QACrE,MAAM,UAAU,CAAC,UAAU,CAAC,CAAC;QAC7B,MAAM,IAAI,GAAG,sBAAsB,EAAE,CAAC;QACtC,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,aAAa,CAAC,CAAC;QAC9D,MAAM,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,SAAS,EAAE,UAAU,EAAE,YAAY,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC;IACxG,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uDAAuD,EAAE,KAAK,IAAI,EAAE;QACrE,MAAM,UAAU,CAAC,UAAU,CAAC,CAAC;QAC7B,MAAM,IAAI,GAAG,sBAAsB,EAAE,CAAC;QACtC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC/D,gEAAgE;QAChE,MAAM,CAAC,IAAI,CAAC,CAAC,cAAc,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,SAAS,EAAE,UAAU,EAAE,YAAY,EAAE,SAAS,EAAE,CAAC,CAAC;IACrG,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yEAAyE,EAAE,KAAK,IAAI,EAAE;QACvF,OAAO,CAAC,GAAG,CAAC,6BAA6B,GAAG,YAAY,CAAC;QACzD,OAAO,CAAC,iBAAiB,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,gCAAgC;QAC5E,MAAM,UAAU,CAAC,UAAU,CAAC,CAAC;QAC7B,MAAM,IAAI,GAAG,sBAAsB,EAAE,CAAC;QACtC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACjE,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,+EAA+E;AAC/E,uEAAuE;AACvE,gFAAgF;AAChF,+EAA+E;AAC/E,kCAAkC;AAClC,QAAQ,CAAC,8CAA8C,EAAE,GAAG,EAAE;IAC5D,EAAE,CAAC,2EAA2E,EAAE,KAAK,IAAI,EAAE;QACzF,OAAO;aACJ,qBAAqB,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC,CAAS,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,cAAc;aAChH,qBAAqB,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,kBAAkB;QACvF,MAAM,UAAU,CAAC,EAAE,GAAG,UAAU,EAAE,cAAc,EAAE,SAAS,EAAE,CAAC,CAAC;QAC/D,MAAM,QAAQ,GAAG,sBAAsB,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,aAAa,CAAC,CAAC;QAClF,MAAM,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,SAAS,EAAE,UAAU,EAAE,YAAY,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC;IACxG,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4CAA4C,EAAE,KAAK,IAAI,EAAE;QAC1D,OAAO,CAAC,GAAG,CAAC,6BAA6B,GAAG,WAAW,CAAC;QACxD,OAAO;aACJ,qBAAqB,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC,CAAS,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,cAAc;aAChH,qBAAqB,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,kBAAkB;QACvF,MAAM,UAAU,CAAC,EAAE,GAAG,UAAU,EAAE,cAAc,EAAE,SAAS,EAAE,CAAC,CAAC;QAC/D,sEAAsE;QACtE,MAAM,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,wCAAwC,CAAC,CAAC,CAAC;QAClH,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;IAC9D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uEAAuE,EAAE,KAAK,IAAI,EAAE;QACrF,OAAO,CAAC,qBAAqB,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC,CAAS,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,mBAAmB;QAC9H,MAAM,UAAU,CAAC,EAAE,GAAG,UAAU,EAAE,cAAc,EAAE,UAAU,EAAE,CAAC,CAAC;QAChE,MAAM,CAAC,sBAAsB,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACrF,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/payload/platform/plugins/work/mcp/dist/__tests__/work-update-assign.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=work-update-assign.test.d.ts.map

package/payload/platform/plugins/work/mcp/dist/__tests__/work-update-assign.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"work-update-assign.test.d.ts","sourceRoot":"","sources":["../../src/__tests__/work-update-assign.test.ts"],"names":[],"mappings":""}

package/payload/platform/plugins/work/mcp/dist/__tests__/work-update-assign.test.js

@@ -0,0 +1,73 @@
+// @vitest-environment node
+//
+// Task 1982 — work-update accepts `assigneeUserId`: a non-empty string reassigns
+// (validated against the assignable set), null unassigns, absent leaves it. Any
+// prior ASSIGNED_TO is cleared first. With no ACCOUNT_DIR the house set is empty,
+// so the account owner is the sole in-roster identity here.
+import { describe, it, expect, vi, afterEach } from "vitest";
+const { runMock, closeMock } = vi.hoisted(() => ({
+    runMock: vi.fn(),
+    closeMock: vi.fn(async () => { }),
+}));
+vi.mock("../lib/neo4j.js", () => ({
+    getSession: () => ({ run: runMock, close: closeMock }),
+}));
+vi.mock("../lib/embeddings.js", () => ({
+    computeEmbedding: async () => [],
+}));
+import { workUpdate } from "../tools/work-update.js";
+const rec = (fields) => ({ get: (k) => fields[k] ?? null });
+// One mock that answers by query shape, so the test is order-independent.
+function installRun(opts) {
+    runMock.mockImplementation(async (query) => {
+        if (query.includes("RETURN t.name AS name")) {
+            return { records: [rec({ name: "n", description: "d", notes: "", status: "pending", priority: "normal", kind: null, stepsCount: 0 })] };
+        }
+        if (query.includes("role: 'owner'")) {
+            return { records: opts.ownerId ? [rec({ userId: opts.ownerId })] : [] };
+        }
+        if (query.includes("MERGE (t)-[:ASSIGNED_TO]->(au)")) {
+            return { records: opts.adminNodeExists === false ? [] : [rec({ userId: "x" })] };
+        }
+        // main SET update, clear DELETE, anything else
+        return { records: [rec({ stepsCount: 0 })] };
+    });
+}
+function assignCalls() {
+    return runMock.mock.calls.filter((c) => String(c[0]).includes("MERGE (t)-[:ASSIGNED_TO]->(au)"));
+}
+function clearCalls() {
+    return runMock.mock.calls.filter((c) => String(c[0]).includes("OPTIONAL MATCH (t)-[r:ASSIGNED_TO]->(:AdminUser) DELETE r"));
+}
+afterEach(() => { runMock.mockReset(); });
+const base = { taskId: "t-1", accountId: "acct-1" };
+describe("work-update assigneeUserId (Task 1982)", () => {
+    it("sets the edge for an in-roster owner (clear then MERGE)", async () => {
+        installRun({ ownerId: "owner-1", adminNodeExists: true });
+        await workUpdate({ ...base, assigneeUserId: "owner-1" });
+        expect(clearCalls().length).toBe(1);
+        expect(assignCalls().length).toBe(1);
+        expect(assignCalls()[0][1]).toMatchObject({ target: "owner-1" });
+    });
+    it("unassigns on null: clears the edge and creates no new one", async () => {
+        installRun({ ownerId: "owner-1" });
+        await workUpdate({ ...base, assigneeUserId: null });
+        expect(clearCalls().length).toBe(1);
+        expect(assignCalls().length).toBe(0);
+    });
+    it("leaves assignment untouched when assigneeUserId is absent", async () => {
+        installRun({ ownerId: "owner-1" });
+        await workUpdate({ ...base, note: "just a note" });
+        expect(clearCalls().length).toBe(0);
+        expect(assignCalls().length).toBe(0);
+    });
+    it("leaves the existing edge untouched for a userId outside the roster (validate-first)", async () => {
+        installRun({ ownerId: "owner-1" });
+        await workUpdate({ ...base, assigneeUserId: "stranger" });
+        // Validated before any write, so the old assignment is neither cleared nor
+        // replaced — matches task-assign.ts's 403 guarantee.
+        expect(clearCalls().length).toBe(0);
+        expect(assignCalls().length).toBe(0);
+    });
+});
+//# sourceMappingURL=work-update-assign.test.js.map

package/payload/platform/plugins/work/mcp/dist/__tests__/work-update-assign.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"work-update-assign.test.js","sourceRoot":"","sources":["../../src/__tests__/work-update-assign.test.ts"],"names":[],"mappings":"AAAA,2BAA2B;AAC3B,EAAE;AACF,iFAAiF;AACjF,gFAAgF;AAChF,kFAAkF;AAClF,4DAA4D;AAC5D,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAC;AAE7D,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;IAC/C,OAAO,EAAE,EAAE,CAAC,EAAE,EAAE;IAChB,SAAS,EAAE,EAAE,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,GAAE,CAAC,CAAC;CACjC,CAAC,CAAC,CAAC;AAEJ,EAAE,CAAC,IAAI,CAAC,iBAAiB,EAAE,GAAG,EAAE,CAAC,CAAC;IAChC,UAAU,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC;CACvD,CAAC,CAAC,CAAC;AACJ,EAAE,CAAC,IAAI,CAAC,sBAAsB,EAAE,GAAG,EAAE,CAAC,CAAC;IACrC,gBAAgB,EAAE,KAAK,IAAI,EAAE,CAAC,EAAc;CAC7C,CAAC,CAAC,CAAC;AAEJ,OAAO,EAAE,UAAU,EAAE,MAAM,yBAAyB,CAAC;AAErD,MAAM,GAAG,GAAG,CAAC,MAA+B,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,CAAS,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;AAE7F,0EAA0E;AAC1E,SAAS,UAAU,CAAC,IAA4D;IAC9E,OAAO,CAAC,kBAAkB,CAAC,KAAK,EAAE,KAAa,EAAE,EAAE;QACjD,IAAI,KAAK,CAAC,QAAQ,CAAC,uBAAuB,CAAC,EAAE,CAAC;YAC5C,OAAO,EAAE,OAAO,EAAE,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,WAAW,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;QAC1I,CAAC;QACD,IAAI,KAAK,CAAC,QAAQ,CAAC,eAAe,CAAC,EAAE,CAAC;YACpC,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;QAC1E,CAAC;QACD,IAAI,KAAK,CAAC,QAAQ,CAAC,gCAAgC,CAAC,EAAE,CAAC;YACrD,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,eAAe,KAAK,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC;QACnF,CAAC;QACD,+CAA+C;QAC/C,OAAO,EAAE,OAAO,EAAE,CAAC,GAAG,CAAC,EAAE,UAAU,EAAE,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;IAC/C,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,WAAW;IAClB,OAAO,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,gCAAgC,CAAC,CAAC,CAAC;AACnG,CAAC;AACD,SAAS,UAAU;IACjB,OAAO,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,2DAA2D,CAAC,CAAC,CAAC;AAC9H,CAAC;AAED,SAAS,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;AAE1C,MAAM,IAAI,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC;AAEpD,QAAQ,CAAC,wCAAwC,EAAE,GAAG,EAAE;IACtD,EAAE,CAAC,yDAAyD,EAAE,KAAK,IAAI,EAAE;QACvE,UAAU,CAAC,EAAE,OAAO,EAAE,SAAS,EAAE,eAAe,EAAE,IAAI,EAAE,CAAC,CAAC;QAC1D,MAAM,UAAU,CAAC,EAAE,GAAG,IAAI,EAAE,cAAc,EAAE,SAAS,EAAE,CAAC,CAAC;QACzD,MAAM,CAAC,UAAU,EAAE,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACpC,MAAM,CAAC,WAAW,EAAE,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACrC,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;IACnE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2DAA2D,EAAE,KAAK,IAAI,EAAE;QACzE,UAAU,CAAC,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC,CAAC;QACnC,MAAM,UAAU,CAAC,EAAE,GAAG,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE,CAAC,CAAC;QACpD,MAAM,CAAC,UAAU,EAAE,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACpC,MAAM,CAAC,WAAW,EAAE,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACvC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2DAA2D,EAAE,KAAK,IAAI,EAAE;QACzE,UAAU,CAAC,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC,CAAC;QACnC,MAAM,UAAU,CAAC,EAAE,GAAG,IAAI,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC,CAAC;QACnD,MAAM,CAAC,UAAU,EAAE,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACpC,MAAM,CAAC,WAAW,EAAE,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACvC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qFAAqF,EAAE,KAAK,IAAI,EAAE;QACnG,UAAU,CAAC,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC,CAAC;QACnC,MAAM,UAAU,CAAC,EAAE,GAAG,IAAI,EAAE,cAAc,EAAE,UAAU,EAAE,CAAC,CAAC;QAC1D,2EAA2E;QAC3E,qDAAqD;QACrD,MAAM,CAAC,UAAU,EAAE,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACpC,MAAM,CAAC,WAAW,EAAE,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACvC,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/payload/platform/plugins/work/mcp/dist/index.js

@@ -87,6 +87,7 @@ eagerTool(server, "work-create", "Create a Task node in the graph. Every Task mu
         .optional()
         .describe("Form schema declaring secret-tagged fields. Omit when the action records no secrets."),
     raisedDuringConversationKey: z.string().optional().describe("Conversation sessionKey for the RAISED_DURING edge. Defaults to the current session. Use this when the Task is raised by an out-of-band surface (e.g. an HTTP endpoint) but should still link to a specific conversation."),
+    assigneeUserId: z.string().optional().describe("userId of a house/platform admin or this account's business owner to assign the task to. Validated against the assignable set; an out-of-set userId assigns no one."),
 }, async (params) => {
     if (!accountId)
         return refuseNoAccount("work-create");
@@ -126,6 +127,7 @@ eagerTool(server, "work-update", "Update a task's name, description, status, pri
     note: z.string().optional().describe("Progress note to append. Timestamped and appended to history — never replaces existing notes."),
     appendStep: z.string().optional().describe("Append a single step label to the Task's `steps[]` array. Atomic — one Cypher round-trip; safe under concurrent calls. Use one call per action phase."),
     errorMessage: z.string().optional().describe("Error message stored on the Task when status transitions to `failed`. Required for the `failed` transition; non-empty errorMessage strings only."),
+    assigneeUserId: z.string().nullable().optional().describe("Reassign the task: userId of a house/platform admin or this account's owner to assign to, `null` to unassign, or omit to leave assignment unchanged. Validated against the assignable set."),
 }, async (params) => {
     if (!accountId)
         return refuseNoAccount("work-update");
@@ -158,7 +160,8 @@ eagerTool(server, "work-list", "List tasks filtered by status, priority, or rela
         }
         const lines = tasks.map((t) => {
             const due = t.dueDate ? ` due:${t.dueDate.slice(0, 10)}` : "";
-            return `[${t.priority.toUpperCase()}] ${t.status} — ${t.name}${due} (${t.taskId})`;
+            const assignee = t.assigneeUserId ? ` assignee:${t.assigneeUserId}` : " assignee:unassigned";
+            return `[${t.priority.toUpperCase()}] ${t.status} — ${t.name}${due}${assignee} (${t.taskId})`;
         });
         return {
             content: [{ type: "text", text: `${tasks.length} task(s):\n\n${lines.join("\n")}` }],