@rubytech/create-maxy-code 0.1.505 → 0.1.507

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@rubytech/create-maxy-code",
-  "version": "0.1.505",
+  "version": "0.1.507",
   "description": "Install Maxy — AI for Productive People",
   "bin": {
     "create-maxy-code": "./dist/index.js"
@@ -13,7 +13,7 @@
     "build": "tsc",
     "bundle": "node scripts/bundle.js",
     "test": "npm run build && node --test 'dist/__tests__/*.test.js'",
-    "prepublishOnly": "bash ../../platform/scripts/verify-skill-tool-surface.sh && node ../../platform/scripts/check-plugin-tools-mcp-consistency.mjs && node ../../platform/scripts/check-specialist-tool-surface.mjs && node ../../platform/scripts/check-agent-contract.mjs && node ../../platform/scripts/check-routing-prose-bash.mjs && node ../../platform/scripts/check-no-task-id-leaks.mjs && node ../../platform/scripts/check-no-esm-require.mjs && node ../../platform/scripts/check-no-raw-mcp-registrations.mjs && node ../../platform/scripts/check-skill-load-coverage.mjs && node ../../platform/scripts/check-architecture-skill-no-drift.mjs && node ../../platform/ui/scripts/check-route-wiring.mjs && node ../../platform/ui/scripts/check-edge-admin-routes.mjs && npm run build && node --test 'dist/__tests__/*.test.js' && chmod +x dist/index.js && npm run bundle && bash ../../platform/scripts/smoke-boot-services.sh && node ../../platform/ui/scripts/check-bundle-node-imports.mjs --dir=./payload/server/public/assets"
+    "prepublishOnly": "bash ../../platform/scripts/verify-skill-tool-surface.sh && node ../../platform/scripts/check-plugin-tools-mcp-consistency.mjs && node ../../platform/scripts/check-risk-class.mjs && node ../../platform/scripts/check-specialist-tool-surface.mjs && node ../../platform/scripts/check-agent-contract.mjs && node ../../platform/scripts/check-routing-prose-bash.mjs && node ../../platform/scripts/check-no-task-id-leaks.mjs && node ../../platform/scripts/check-no-esm-require.mjs && node ../../platform/scripts/check-no-raw-mcp-registrations.mjs && node ../../platform/scripts/check-skill-load-coverage.mjs && node ../../platform/scripts/check-architecture-skill-no-drift.mjs && node ../../platform/ui/scripts/check-route-wiring.mjs && node ../../platform/ui/scripts/check-edge-admin-routes.mjs && npm run build && node --test 'dist/__tests__/*.test.js' && chmod +x dist/index.js && npm run bundle && bash ../../platform/scripts/smoke-boot-services.sh && node ../../platform/ui/scripts/check-bundle-node-imports.mjs --dir=./payload/server/public/assets"
   },
   "files": [
     "dist",

package/payload/platform/config/brand.json

@@ -19,9 +19,16 @@
   "googleClientSecret": "",
   "commercialMode": false,
   "vertical": "schema-knowledge-work",
-  "shipsPremiumBundles": ["venture-studio", "writer-craft", "teaching", "management-consulting"],
-  "primaryContainer": { "label": "Project", "term": "Projects" },
-
+  "shipsPremiumBundles": [
+    "venture-studio",
+    "writer-craft",
+    "teaching",
+    "management-consulting"
+  ],
+  "primaryContainer": {
+    "label": "Project",
+    "term": "Projects"
+  },
   "defaultColors": {
     "primary": "#7C8C72",
     "primaryHover": "#6A7A62",
@@ -31,14 +38,11 @@
     "background": "#F6F5F2",
     "agentBubble": "#F5F2ED"
   },
-
   "defaultFonts": {
     "display": "'Newsreader', Georgia, serif",
     "body": "'Inter', -apple-system, BlinkMacSystemFont, sans-serif"
   },
-
   "logoContainsName": true,
-
   "assets": {
     "logo": "maxy-square.png",
     "icon": "maxy-monochrome.png",
@@ -48,27 +52,69 @@
     "appIcon192": "maxy-app-icon-192.png",
     "maskableIcon": "maxy-app-icon-maskable-512.png"
   },
-
   "npm": {
     "packageName": "@rubytech/create-maxy-code",
     "binName": "create-maxy-code",
     "author": "Rubytech LLC"
   },
-
   "plugins": {
-    "core": ["admin", "memory", "docs", "cloudflare", "anthropic", "workflows", "work", "ledger", "scheduling", "email", "contacts", "projects", "prompt-optimiser", "browser"],
-    "defaultEnabled": ["business-assistant", "sales", "web-designer"],
-    "available": ["connector", "telegram", "deep-research", "whatsapp", "replicate", "linkedin-import", "notion-import", "obsidian-import", "x-import", "slides"],
-    "excluded": ["joblogic"]
+    "core": [
+      "admin",
+      "memory",
+      "docs",
+      "cloudflare",
+      "anthropic",
+      "workflows",
+      "work",
+      "ledger",
+      "scheduling",
+      "email",
+      "contacts",
+      "projects",
+      "prompt-optimiser",
+      "browser"
+    ],
+    "defaultEnabled": [
+      "business-assistant",
+      "sales",
+      "web-designer"
+    ],
+    "available": [
+      "connector",
+      "telegram",
+      "deep-research",
+      "whatsapp",
+      "replicate",
+      "linkedin-import",
+      "notion-import",
+      "obsidian-import",
+      "x-import",
+      "slides"
+    ],
+    "excluded": [
+      "joblogic"
+    ]
   },
-
   "externalPlugins": [
-    { "name": "discord",  "marketplace": "claude-plugins-official", "channelPlugin": true },
-    { "name": "imessage", "marketplace": "claude-plugins-official", "channelPlugin": true },
-    { "name": "superpowers", "marketplace": "claude-plugins-official" },
-    { "name": "code-review", "marketplace": "claude-plugins-official" }
+    {
+      "name": "discord",
+      "marketplace": "claude-plugins-official",
+      "channelPlugin": true
+    },
+    {
+      "name": "imessage",
+      "marketplace": "claude-plugins-official",
+      "channelPlugin": true
+    },
+    {
+      "name": "superpowers",
+      "marketplace": "claude-plugins-official"
+    },
+    {
+      "name": "code-review",
+      "marketplace": "claude-plugins-official"
+    }
   ],
-
   "consent": {
     "copy": {
       "title": "Before you browse this listing",
@@ -86,5 +132,20 @@
       "accentFg": "#FFFFFF",
       "border": "#E8ECF0"
     }
+  },
+  "fonts": {
+    "body": {
+      "family": "Inter",
+      "faces": [
+        {
+          "weight": 400,
+          "file": "inter-400.woff2"
+        },
+        {
+          "weight": 500,
+          "file": "inter-500.woff2"
+        }
+      ]
+    }
   }
 }

package/payload/platform/lib/account-schema-regions/dist/index.d.ts

@@ -0,0 +1,72 @@
+/**
+ * Parser for the three machine-readable regions of an account's SCHEMA.md.
+ *
+ * Shared because two separate builds need the same answer: the admin UI server
+ * (platform/ui/server/lib/account-root-groups.ts, which groups the /data root
+ * into home/system) and the session manager's standing schema reconcile
+ * (platform/services/claude-session-manager/src/account-dir-schema-reconcile.ts,
+ * which audits declared-versus-on-disk parity). A third reader,
+ * platform/plugins/cloudflare/bin/schema-exposed-dirs.mjs, ships in a separate
+ * deploy tree and keeps its own copy; a parity test asserts the two agree.
+ *
+ * The regions are written by platform/scripts/lib/account-schema-owned-dirs.py
+ * merge(). Their separators differ:
+ *
+ *   ontology roots:  - `jobs/` - one folder per Job record.      (ASCII hyphen)
+ *   plugin-owned:    - `pages/` — Owned by the … plugin.         (em dash)
+ *
+ * .docs/data-portal-folder-index.md records that parsing the ontology region on
+ * the wrong separator matches nothing and reads as "this account has no
+ * deliverables". This parser sidesteps that failure entirely by anchoring on the
+ * backticked `dir/` head rather than the separator, and a test pins the
+ * behaviour so a future edit cannot reintroduce separator sensitivity.
+ */
+/**
+ * Non-ontology buckets that are still the operator's own work, so they are home
+ * on every brand. They carry no ontology row because they are not entity
+ * buckets. On a vertical with no `## Top-level node types` table
+ * (schema-knowledge-work) they are the whole of home.
+ *
+ * The membership test is "would the operator go looking for this?", not "who
+ * writes it". `output`, `generated` and `extracted` hold delivered work product;
+ * `sites` holds published websites; `uploads` holds what a client sent in. The
+ * shipped template groups those five under "tool-owned", but that is a rule
+ * about not reorganising their internals — a write constraint, not a reason to
+ * file them behind the platform's own plumbing. What stays out is genuinely
+ * internal: caches, state, logs, secrets, temp, the git and Claude control
+ * dirs, and plugin workspaces.
+ *
+ * Every name here is created at provision (provision-account-dir.sh `_seed_dirs`),
+ * so the standing home-parity audit finds them on disk rather than reporting
+ * them missing.
+ *
+ * Lives here rather than in either consumer because both the /data page and the
+ * standing reconcile audit must agree on the same set; a hand-synced copy in
+ * each build is precisely the drift this shared module exists to prevent.
+ */
+export declare const HOME_FIXED: readonly string[];
+export interface SchemaRegions {
+    /** Root bucket dirs from the ontology region, in table order, deduped. */
+    ontologyRoots: string[];
+    /** Dirs from the plugin-owned region, in file order, deduped. */
+    pluginOwned: string[];
+    /** Entries of the ```allowed-top-level fence, in file order. */
+    allowedTopLevel: string[];
+    /**
+     * True when the allowed-top-level fence was found with at least one entry.
+     * That fence is present in every valid account SCHEMA.md (it ships in
+     * platform/templates/account-schema/SCHEMA.md), so its absence means the file
+     * is missing or not an account schema. An EMPTY ontology region is NOT a
+     * parse failure: a vertical with no `## Top-level node types` table (for
+     * example schema-knowledge-work) legitimately projects no buckets.
+     */
+    parsed: boolean;
+    /**
+     * Why `parsed` is false, for the caller's log line. The two states need
+     * different remediation — provision the account versus regenerate its schema
+     * — so a single `status=parse-failed` cannot be acted on.
+     */
+    reason: 'ok' | 'schema-absent' | 'fence-absent';
+}
+export declare function parseSchemaRegions(schemaMd: string | null): SchemaRegions;
+//# sourceMappingURL=index.d.ts.map

package/payload/platform/lib/account-schema-regions/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAEH;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,eAAO,MAAM,UAAU,EAAE,SAAS,MAAM,EAEtC,CAAA;AAiBF,MAAM,WAAW,aAAa;IAC5B,0EAA0E;IAC1E,aAAa,EAAE,MAAM,EAAE,CAAA;IACvB,iEAAiE;IACjE,WAAW,EAAE,MAAM,EAAE,CAAA;IACrB,gEAAgE;IAChE,eAAe,EAAE,MAAM,EAAE,CAAA;IACzB;;;;;;;OAOG;IACH,MAAM,EAAE,OAAO,CAAA;IACf;;;;OAIG;IACH,MAAM,EAAE,IAAI,GAAG,eAAe,GAAG,cAAc,CAAA;CAChD;AAiCD,wBAAgB,kBAAkB,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,GAAG,aAAa,CAazE"}

package/payload/platform/lib/account-schema-regions/dist/index.js

@@ -0,0 +1,115 @@
+"use strict";
+/**
+ * Parser for the three machine-readable regions of an account's SCHEMA.md.
+ *
+ * Shared because two separate builds need the same answer: the admin UI server
+ * (platform/ui/server/lib/account-root-groups.ts, which groups the /data root
+ * into home/system) and the session manager's standing schema reconcile
+ * (platform/services/claude-session-manager/src/account-dir-schema-reconcile.ts,
+ * which audits declared-versus-on-disk parity). A third reader,
+ * platform/plugins/cloudflare/bin/schema-exposed-dirs.mjs, ships in a separate
+ * deploy tree and keeps its own copy; a parity test asserts the two agree.
+ *
+ * The regions are written by platform/scripts/lib/account-schema-owned-dirs.py
+ * merge(). Their separators differ:
+ *
+ *   ontology roots:  - `jobs/` - one folder per Job record.      (ASCII hyphen)
+ *   plugin-owned:    - `pages/` — Owned by the … plugin.         (em dash)
+ *
+ * .docs/data-portal-folder-index.md records that parsing the ontology region on
+ * the wrong separator matches nothing and reads as "this account has no
+ * deliverables". This parser sidesteps that failure entirely by anchoring on the
+ * backticked `dir/` head rather than the separator, and a test pins the
+ * behaviour so a future edit cannot reintroduce separator sensitivity.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.HOME_FIXED = void 0;
+exports.parseSchemaRegions = parseSchemaRegions;
+/**
+ * Non-ontology buckets that are still the operator's own work, so they are home
+ * on every brand. They carry no ontology row because they are not entity
+ * buckets. On a vertical with no `## Top-level node types` table
+ * (schema-knowledge-work) they are the whole of home.
+ *
+ * The membership test is "would the operator go looking for this?", not "who
+ * writes it". `output`, `generated` and `extracted` hold delivered work product;
+ * `sites` holds published websites; `uploads` holds what a client sent in. The
+ * shipped template groups those five under "tool-owned", but that is a rule
+ * about not reorganising their internals — a write constraint, not a reason to
+ * file them behind the platform's own plumbing. What stays out is genuinely
+ * internal: caches, state, logs, secrets, temp, the git and Claude control
+ * dirs, and plugin workspaces.
+ *
+ * Every name here is created at provision (provision-account-dir.sh `_seed_dirs`),
+ * so the standing home-parity audit finds them on disk rather than reporting
+ * them missing.
+ *
+ * Lives here rather than in either consumer because both the /data page and the
+ * standing reconcile audit must agree on the same set; a hand-synced copy in
+ * each build is precisely the drift this shared module exists to prevent.
+ */
+exports.HOME_FIXED = Object.freeze([
+    'projects', 'contacts', 'documents', 'output', 'generated', 'extracted', 'sites', 'uploads',
+]);
+const ONT_START = '<!-- ontology-buckets:start -->';
+const ONT_END = '<!-- ontology-buckets:end -->';
+const PLUGIN_START = '<!-- plugin-owned-dirs:start -->';
+const PLUGIN_END = '<!-- plugin-owned-dirs:end -->';
+const ALLOWED_FENCE = '```allowed-top-level';
+/**
+ * A region line declaring a directory: `- \`<dir>/\` …`. The trailing slash
+ * inside the backticks is what excludes a nested-entity line
+ * (`- \`Quote\` records live under \`jobs/\` …`), whose first backtick span is a
+ * bare label. Anything after the closing backtick is ignored, so both
+ * separators parse.
+ */
+const DIR_LINE = /^-\s+`([^`/]+)\/`/;
+function regionLines(text, start, end) {
+    const from = text.indexOf(start);
+    if (from === -1)
+        return [];
+    const to = text.indexOf(end, from);
+    if (to === -1)
+        return [];
+    return text.slice(from + start.length, to).split('\n');
+}
+function dirsIn(lines) {
+    const out = [];
+    for (const line of lines) {
+        const m = DIR_LINE.exec(line.trim());
+        if (m && !out.includes(m[1]))
+            out.push(m[1]);
+    }
+    return out;
+}
+function fenceEntries(text) {
+    const from = text.indexOf(ALLOWED_FENCE);
+    if (from === -1)
+        return [];
+    const bodyStart = text.indexOf('\n', from);
+    if (bodyStart === -1)
+        return [];
+    const to = text.indexOf('```', bodyStart);
+    if (to === -1)
+        return [];
+    return text
+        .slice(bodyStart + 1, to)
+        .split('\n')
+        .map((s) => s.trim())
+        .filter((s) => s.length > 0);
+}
+function parseSchemaRegions(schemaMd) {
+    if (schemaMd === null || schemaMd.length === 0) {
+        return { ontologyRoots: [], pluginOwned: [], allowedTopLevel: [], parsed: false, reason: 'schema-absent' };
+    }
+    const allowedTopLevel = fenceEntries(schemaMd);
+    const parsed = allowedTopLevel.length > 0;
+    return {
+        ontologyRoots: dirsIn(regionLines(schemaMd, ONT_START, ONT_END)),
+        pluginOwned: dirsIn(regionLines(schemaMd, PLUGIN_START, PLUGIN_END)),
+        allowedTopLevel,
+        parsed,
+        reason: parsed ? 'ok' : 'fence-absent',
+    };
+}
+//# sourceMappingURL=index.js.map

package/payload/platform/lib/account-schema-regions/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;;;AAmGH,gDAaC;AA9GD;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACU,QAAA,UAAU,GAAsB,MAAM,CAAC,MAAM,CAAC;IACzD,UAAU,EAAE,UAAU,EAAE,WAAW,EAAE,QAAQ,EAAE,WAAW,EAAE,WAAW,EAAE,OAAO,EAAE,SAAS;CAC5F,CAAC,CAAA;AAEF,MAAM,SAAS,GAAG,iCAAiC,CAAA;AACnD,MAAM,OAAO,GAAG,+BAA+B,CAAA;AAC/C,MAAM,YAAY,GAAG,kCAAkC,CAAA;AACvD,MAAM,UAAU,GAAG,gCAAgC,CAAA;AACnD,MAAM,aAAa,GAAG,sBAAsB,CAAA;AAE5C;;;;;;GAMG;AACH,MAAM,QAAQ,GAAG,mBAAmB,CAAA;AA0BpC,SAAS,WAAW,CAAC,IAAY,EAAE,KAAa,EAAE,GAAW;IAC3D,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAA;IAChC,IAAI,IAAI,KAAK,CAAC,CAAC;QAAE,OAAO,EAAE,CAAA;IAC1B,MAAM,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC,CAAA;IAClC,IAAI,EAAE,KAAK,CAAC,CAAC;QAAE,OAAO,EAAE,CAAA;IACxB,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,GAAG,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;AACxD,CAAC;AAED,SAAS,MAAM,CAAC,KAAe;IAC7B,MAAM,GAAG,GAAa,EAAE,CAAA;IACxB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,CAAC,GAAG,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAA;QACpC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;IAC9C,CAAC;IACD,OAAO,GAAG,CAAA;AACZ,CAAC;AAED,SAAS,YAAY,CAAC,IAAY;IAChC,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,CAAA;IACxC,IAAI,IAAI,KAAK,CAAC,CAAC;QAAE,OAAO,EAAE,CAAA;IAC1B,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,CAAA;IAC1C,IAAI,SAAS,KAAK,CAAC,CAAC;QAAE,OAAO,EAAE,CAAA;IAC/B,MAAM,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,SAAS,CAAC,CAAA;IACzC,IAAI,EAAE,KAAK,CAAC,CAAC;QAAE,OAAO,EAAE,CAAA;IACxB,OAAO,IAAI;SACR,KAAK,CAAC,SAAS,GAAG,CAAC,EAAE,EAAE,CAAC;SACxB,KAAK,CAAC,IAAI,CAAC;SACX,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;SACpB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAA;AAChC,CAAC;AAED,SAAgB,kBAAkB,CAAC,QAAuB;IACxD,IAAI,QAAQ,KAAK,IAAI,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC/C,OAAO,EAAE,aAAa,EAAE,EAAE,EAAE,WAAW,EAAE,EAAE,EAAE,eAAe,EAAE,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,eAAe,EAAE,CAAA;IAC5G,CAAC;IACD,MAAM,eAAe,GAAG,YAAY,CAAC,QAAQ,CAAC,CAAA;IAC9C,MAAM,MAAM,GAAG,eAAe,CAAC,MAAM,GAAG,CAAC,CAAA;IACzC,OAAO;QACL,aAAa,EAAE,MAAM,CAAC,WAAW,CAAC,QAAQ,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;QAChE,WAAW,EAAE,MAAM,CAAC,WAAW,CAAC,QAAQ,EAAE,YAAY,EAAE,UAAU,CAAC,CAAC;QACpE,eAAe;QACf,MAAM;QACN,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,cAAc;KACvC,CAAA;AACH,CAAC"}

package/payload/platform/lib/account-schema-regions/package.json

@@ -0,0 +1,7 @@
+{
+  "name": "@maxy/account-schema-regions",
+  "version": "0.1.0",
+  "private": true,
+  "type": "commonjs",
+  "main": "dist/index.js"
+}

package/payload/platform/lib/account-schema-regions/src/index.ts

@@ -0,0 +1,135 @@
+/**
+ * Parser for the three machine-readable regions of an account's SCHEMA.md.
+ *
+ * Shared because two separate builds need the same answer: the admin UI server
+ * (platform/ui/server/lib/account-root-groups.ts, which groups the /data root
+ * into home/system) and the session manager's standing schema reconcile
+ * (platform/services/claude-session-manager/src/account-dir-schema-reconcile.ts,
+ * which audits declared-versus-on-disk parity). A third reader,
+ * platform/plugins/cloudflare/bin/schema-exposed-dirs.mjs, ships in a separate
+ * deploy tree and keeps its own copy; a parity test asserts the two agree.
+ *
+ * The regions are written by platform/scripts/lib/account-schema-owned-dirs.py
+ * merge(). Their separators differ:
+ *
+ *   ontology roots:  - `jobs/` - one folder per Job record.      (ASCII hyphen)
+ *   plugin-owned:    - `pages/` — Owned by the … plugin.         (em dash)
+ *
+ * .docs/data-portal-folder-index.md records that parsing the ontology region on
+ * the wrong separator matches nothing and reads as "this account has no
+ * deliverables". This parser sidesteps that failure entirely by anchoring on the
+ * backticked `dir/` head rather than the separator, and a test pins the
+ * behaviour so a future edit cannot reintroduce separator sensitivity.
+ */
+
+/**
+ * Non-ontology buckets that are still the operator's own work, so they are home
+ * on every brand. They carry no ontology row because they are not entity
+ * buckets. On a vertical with no `## Top-level node types` table
+ * (schema-knowledge-work) they are the whole of home.
+ *
+ * The membership test is "would the operator go looking for this?", not "who
+ * writes it". `output`, `generated` and `extracted` hold delivered work product;
+ * `sites` holds published websites; `uploads` holds what a client sent in. The
+ * shipped template groups those five under "tool-owned", but that is a rule
+ * about not reorganising their internals — a write constraint, not a reason to
+ * file them behind the platform's own plumbing. What stays out is genuinely
+ * internal: caches, state, logs, secrets, temp, the git and Claude control
+ * dirs, and plugin workspaces.
+ *
+ * Every name here is created at provision (provision-account-dir.sh `_seed_dirs`),
+ * so the standing home-parity audit finds them on disk rather than reporting
+ * them missing.
+ *
+ * Lives here rather than in either consumer because both the /data page and the
+ * standing reconcile audit must agree on the same set; a hand-synced copy in
+ * each build is precisely the drift this shared module exists to prevent.
+ */
+export const HOME_FIXED: readonly string[] = Object.freeze([
+  'projects', 'contacts', 'documents', 'output', 'generated', 'extracted', 'sites', 'uploads',
+])
+
+const ONT_START = '<!-- ontology-buckets:start -->'
+const ONT_END = '<!-- ontology-buckets:end -->'
+const PLUGIN_START = '<!-- plugin-owned-dirs:start -->'
+const PLUGIN_END = '<!-- plugin-owned-dirs:end -->'
+const ALLOWED_FENCE = '```allowed-top-level'
+
+/**
+ * A region line declaring a directory: `- \`<dir>/\` …`. The trailing slash
+ * inside the backticks is what excludes a nested-entity line
+ * (`- \`Quote\` records live under \`jobs/\` …`), whose first backtick span is a
+ * bare label. Anything after the closing backtick is ignored, so both
+ * separators parse.
+ */
+const DIR_LINE = /^-\s+`([^`/]+)\/`/
+
+export interface SchemaRegions {
+  /** Root bucket dirs from the ontology region, in table order, deduped. */
+  ontologyRoots: string[]
+  /** Dirs from the plugin-owned region, in file order, deduped. */
+  pluginOwned: string[]
+  /** Entries of the ```allowed-top-level fence, in file order. */
+  allowedTopLevel: string[]
+  /**
+   * True when the allowed-top-level fence was found with at least one entry.
+   * That fence is present in every valid account SCHEMA.md (it ships in
+   * platform/templates/account-schema/SCHEMA.md), so its absence means the file
+   * is missing or not an account schema. An EMPTY ontology region is NOT a
+   * parse failure: a vertical with no `## Top-level node types` table (for
+   * example schema-knowledge-work) legitimately projects no buckets.
+   */
+  parsed: boolean
+  /**
+   * Why `parsed` is false, for the caller's log line. The two states need
+   * different remediation — provision the account versus regenerate its schema
+   * — so a single `status=parse-failed` cannot be acted on.
+   */
+  reason: 'ok' | 'schema-absent' | 'fence-absent'
+}
+
+function regionLines(text: string, start: string, end: string): string[] {
+  const from = text.indexOf(start)
+  if (from === -1) return []
+  const to = text.indexOf(end, from)
+  if (to === -1) return []
+  return text.slice(from + start.length, to).split('\n')
+}
+
+function dirsIn(lines: string[]): string[] {
+  const out: string[] = []
+  for (const line of lines) {
+    const m = DIR_LINE.exec(line.trim())
+    if (m && !out.includes(m[1])) out.push(m[1])
+  }
+  return out
+}
+
+function fenceEntries(text: string): string[] {
+  const from = text.indexOf(ALLOWED_FENCE)
+  if (from === -1) return []
+  const bodyStart = text.indexOf('\n', from)
+  if (bodyStart === -1) return []
+  const to = text.indexOf('```', bodyStart)
+  if (to === -1) return []
+  return text
+    .slice(bodyStart + 1, to)
+    .split('\n')
+    .map((s) => s.trim())
+    .filter((s) => s.length > 0)
+}
+
+export function parseSchemaRegions(schemaMd: string | null): SchemaRegions {
+  if (schemaMd === null || schemaMd.length === 0) {
+    return { ontologyRoots: [], pluginOwned: [], allowedTopLevel: [], parsed: false, reason: 'schema-absent' }
+  }
+  const allowedTopLevel = fenceEntries(schemaMd)
+  const parsed = allowedTopLevel.length > 0
+  return {
+    ontologyRoots: dirsIn(regionLines(schemaMd, ONT_START, ONT_END)),
+    pluginOwned: dirsIn(regionLines(schemaMd, PLUGIN_START, PLUGIN_END)),
+    allowedTopLevel,
+    parsed,
+    reason: parsed ? 'ok' : 'fence-absent',
+  }
+}

package/payload/platform/lib/account-schema-regions/tsconfig.json

@@ -0,0 +1,9 @@
+{
+  "extends": "../../tsconfig.base.json",
+  "compilerOptions": {
+    "outDir": "dist",
+    "rootDir": "src"
+  },
+  "include": ["src"],
+  "exclude": ["src/**/*.test.ts"]
+}

package/payload/platform/package.json

@@ -6,8 +6,8 @@
     "services/*"
   ],
   "scripts": {
-    "build": "tsc -p lib/models/tsconfig.json && tsc -p lib/mcp-spawn-tee/tsconfig.json && tsc -p lib/mcp-lifeline/tsconfig.json && tsc -p lib/mcp-eager/tsconfig.json && tsc -p lib/account-enumeration/tsconfig.json && tsc -p lib/account-scope/tsconfig.json && tsc -p lib/graph-write/tsconfig.json && tsc -p lib/ledger-core/tsconfig.json && tsc -p lib/embed-client/tsconfig.json && tsc -p lib/graph-mcp/tsconfig.json && tsc -p lib/graph-trash/tsconfig.json && tsc -p lib/active-rules/tsconfig.json && tsc -p lib/admin-conversation-purge/tsconfig.json && tsc -p lib/graph-search/tsconfig.json && tsc -p lib/graph-style/tsconfig.json && tsc -p lib/device-url/tsconfig.json && tsc -p lib/brand-templating/tsconfig.json && tsc -p lib/entitlement/tsconfig.json && tsc -p lib/task-secrets/tsconfig.json && tsc -p lib/admins-write/tsconfig.json && tsc -p lib/admin-access-password/tsconfig.json && tsc -p lib/persistent-components/tsconfig.json && tsc -p lib/require-port-env/tsconfig.json && tsc -p lib/aeo-llms-txt-writer/tsconfig.json && tsc -p lib/obsidian-parser/tsconfig.json && tsc -p lib/storage-broker/tsconfig.json && tsc -p services/claude-session-manager/tsconfig.json && tsc -p services/whatsapp-channel/tsconfig.json && tsc -p services/webchat-channel/tsconfig.json && tsc -p services/telegram-channel/tsconfig.json && NODE_OPTIONS='--max-old-space-size=8192' tsc -b plugins/*/mcp/tsconfig.json",
-    "build:lib": "tsc -p lib/models/tsconfig.json && tsc -p lib/mcp-spawn-tee/tsconfig.json && tsc -p lib/mcp-lifeline/tsconfig.json && tsc -p lib/mcp-eager/tsconfig.json && tsc -p lib/account-enumeration/tsconfig.json && tsc -p lib/account-scope/tsconfig.json && tsc -p lib/graph-write/tsconfig.json && tsc -p lib/ledger-core/tsconfig.json && tsc -p lib/embed-client/tsconfig.json && tsc -p lib/graph-mcp/tsconfig.json && tsc -p lib/graph-trash/tsconfig.json && tsc -p lib/active-rules/tsconfig.json && tsc -p lib/admin-conversation-purge/tsconfig.json && tsc -p lib/graph-search/tsconfig.json && tsc -p lib/graph-style/tsconfig.json && tsc -p lib/device-url/tsconfig.json && tsc -p lib/brand-templating/tsconfig.json && tsc -p lib/entitlement/tsconfig.json && tsc -p lib/task-secrets/tsconfig.json && tsc -p lib/admins-write/tsconfig.json && tsc -p lib/admin-access-password/tsconfig.json && tsc -p lib/persistent-components/tsconfig.json && tsc -p lib/require-port-env/tsconfig.json && tsc -p lib/aeo-llms-txt-writer/tsconfig.json && tsc -p lib/obsidian-parser/tsconfig.json && tsc -p lib/storage-broker/tsconfig.json",
+    "build": "tsc -p lib/account-schema-regions/tsconfig.json && tsc -p lib/models/tsconfig.json && tsc -p lib/mcp-spawn-tee/tsconfig.json && tsc -p lib/mcp-lifeline/tsconfig.json && tsc -p lib/mcp-eager/tsconfig.json && tsc -p lib/account-enumeration/tsconfig.json && tsc -p lib/account-scope/tsconfig.json && tsc -p lib/graph-write/tsconfig.json && tsc -p lib/ledger-core/tsconfig.json && tsc -p lib/embed-client/tsconfig.json && tsc -p lib/graph-mcp/tsconfig.json && tsc -p lib/graph-trash/tsconfig.json && tsc -p lib/active-rules/tsconfig.json && tsc -p lib/admin-conversation-purge/tsconfig.json && tsc -p lib/graph-search/tsconfig.json && tsc -p lib/graph-style/tsconfig.json && tsc -p lib/device-url/tsconfig.json && tsc -p lib/brand-templating/tsconfig.json && tsc -p lib/entitlement/tsconfig.json && tsc -p lib/task-secrets/tsconfig.json && tsc -p lib/admins-write/tsconfig.json && tsc -p lib/admin-access-password/tsconfig.json && tsc -p lib/persistent-components/tsconfig.json && tsc -p lib/require-port-env/tsconfig.json && tsc -p lib/aeo-llms-txt-writer/tsconfig.json && tsc -p lib/obsidian-parser/tsconfig.json && tsc -p lib/storage-broker/tsconfig.json && tsc -p services/claude-session-manager/tsconfig.json && tsc -p services/whatsapp-channel/tsconfig.json && tsc -p services/webchat-channel/tsconfig.json && tsc -p services/telegram-channel/tsconfig.json && NODE_OPTIONS='--max-old-space-size=8192' tsc -b plugins/*/mcp/tsconfig.json",
+    "build:lib": "tsc -p lib/account-schema-regions/tsconfig.json && tsc -p lib/models/tsconfig.json && tsc -p lib/mcp-spawn-tee/tsconfig.json && tsc -p lib/mcp-lifeline/tsconfig.json && tsc -p lib/mcp-eager/tsconfig.json && tsc -p lib/account-enumeration/tsconfig.json && tsc -p lib/account-scope/tsconfig.json && tsc -p lib/graph-write/tsconfig.json && tsc -p lib/ledger-core/tsconfig.json && tsc -p lib/embed-client/tsconfig.json && tsc -p lib/graph-mcp/tsconfig.json && tsc -p lib/graph-trash/tsconfig.json && tsc -p lib/active-rules/tsconfig.json && tsc -p lib/admin-conversation-purge/tsconfig.json && tsc -p lib/graph-search/tsconfig.json && tsc -p lib/graph-style/tsconfig.json && tsc -p lib/device-url/tsconfig.json && tsc -p lib/brand-templating/tsconfig.json && tsc -p lib/entitlement/tsconfig.json && tsc -p lib/task-secrets/tsconfig.json && tsc -p lib/admins-write/tsconfig.json && tsc -p lib/admin-access-password/tsconfig.json && tsc -p lib/persistent-components/tsconfig.json && tsc -p lib/require-port-env/tsconfig.json && tsc -p lib/aeo-llms-txt-writer/tsconfig.json && tsc -p lib/obsidian-parser/tsconfig.json && tsc -p lib/storage-broker/tsconfig.json",
     "gen:canonical-tools": "node scripts/generate-canonical-tool-names.mjs",
     "build:memory": "tsc -p plugins/memory/mcp/tsconfig.json",
     "build:contacts": "tsc -p plugins/contacts/mcp/tsconfig.json",
@@ -22,7 +22,7 @@
     "build:replicate": "tsc -p plugins/replicate/mcp/tsconfig.json",
     "build:graph-viewer": "tsc -p plugins/graph-viewer/mcp/tsconfig.json",
     "build:claude-session-manager": "tsc -p services/claude-session-manager/tsconfig.json",
-  "build:whatsapp-channel": "tsc -p services/whatsapp-channel/tsconfig.json",
+    "build:whatsapp-channel": "tsc -p services/whatsapp-channel/tsconfig.json",
     "build:webchat-channel": "tsc -p services/webchat-channel/tsconfig.json",
     "build:telegram-channel": "tsc -p services/telegram-channel/tsconfig.json"
   },