@rubytech/create-maxy-code 0.1.542 → 0.1.543

package/dist/index.js

@@ -2577,6 +2577,12 @@ function deployPayload() {
     // User data lives at {installDir}/data/ — outside the platform/ wipe zone.
     // Install path creates this fresh; runtime writers populate it on demand.
     mkdirSync(join(INSTALL_DIR, "data"), { recursive: true });
+    // Task 2323 — the install-wide shared folder: written by the house account,
+    // read by every account. Created here rather than lazily by a writer so the
+    // standing census reports exists=true from first boot, and so the pty-spawner's
+    // existsSync-guarded --add-dir and write-deny are live on the first spawn.
+    // Idempotent: an upgrade over an existing install leaves its contents alone.
+    mkdirSync(join(INSTALL_DIR, "data", "shared"), { recursive: true });
     // Task 848 — on upgrade the prior server/, platform/, premium-plugins/ trees are
     // immutable (chattr +i). Clear all three BEFORE the wipe loop, or the rmSync of
     // those dirs below fails with EPERM. Gate on INSTALL_DIR existence (any prior
@@ -3480,6 +3486,37 @@ function writeInstallDefaults(accountId) {
         console.log(`  [install-defaults] soul-md created path=${soulPath} bytes=${soulContent.length}`);
         logFile(`  [install-defaults] soul-md created path=${soulPath} bytes=${soulContent.length}`);
     }
+    // Admin INSTRUCTION.md is operator-controlled: it is the `## Instruction` body
+    // every WhatsApp channel turn carries, so the operator owns what their agent
+    // does with an inbound and can change it on disk without a publish. Create it
+    // from the bundled template on a fresh install and never overwrite it, exactly
+    // as SOUL.md above. install-defaults runs on upgrades too, which is what
+    // backfills accounts provisioned before this file existed. There is no
+    // code-level default downstream: an account with no such file has its channel
+    // turns refused, so this seeding is what keeps an upgraded install working.
+    //
+    // Unlike the SOUL.md branch above, a missing template here logs and continues
+    // rather than returning: returning would skip the public-agent seeding below.
+    const instructionPath = join(accountDir, "agents/admin/INSTRUCTION.md");
+    mkdirSync(dirname(instructionPath), { recursive: true });
+    if (existsSync(instructionPath)) {
+        const preservedBytes = statSync(instructionPath).size;
+        console.log(`  [install-defaults] instruction-md preserved path=${instructionPath} bytes=${preservedBytes}`);
+        logFile(`  [install-defaults] instruction-md preserved path=${instructionPath} bytes=${preservedBytes}`);
+    }
+    else {
+        const instructionTemplate = join(INSTALL_DIR, "platform/templates/agents/admin/INSTRUCTION.md");
+        try {
+            const content = readFileSync(instructionTemplate, "utf-8").replace(/\$\{PRODUCT_NAME\}/g, BRAND.productName);
+            writeFileSync(instructionPath, content);
+            console.log(`  [install-defaults] instruction-md created path=${instructionPath} bytes=${content.length}`);
+            logFile(`  [install-defaults] instruction-md created path=${instructionPath} bytes=${content.length}`);
+        }
+        catch (err) {
+            console.error(`  [install-defaults] admin-instruction template missing at ${instructionTemplate}: ${err.message}`);
+            logFile(`  [install-defaults] admin-instruction template missing: ${err.message}`);
+        }
+    }
     // Public agent IDENTITY.md — the only template-seeded public file, always
     // overwritten (Rubytech-controlled toolless directive). Per Task 618/623,
     // each public agent's SOUL.md, KNOWLEDGE.md, and config.json are authored

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@rubytech/create-maxy-code",
-  "version": "0.1.542",
+  "version": "0.1.543",
   "description": "Install Maxy — AI for Productive People",
   "bin": {
     "create-maxy-code": "./dist/index.js"

package/payload/platform/lib/shared-folder/dist/index.d.ts

@@ -0,0 +1,47 @@
+/** The one literal. The shared root is `<dataRoot>/shared`, a sibling of
+ *  `<dataRoot>/accounts`, so it is inside DATA_ROOT (which is what lets the
+ *  /data browser reach it at all) but outside every account partition. */
+export declare const SHARED_DIR_NAME = "shared";
+/** Absolute path of the shared root. `dataRoot` is `<install>/data`. */
+export declare function sharedRoot(dataRoot: string): string;
+/**
+ * True when a DATA_ROOT-relative path is inside the shared root.
+ *
+ * FIRST SEGMENT ONLY. `accounts/<id>/shared` is an account's own directory that
+ * happens to be called `shared` and must keep account semantics; a deeper
+ * `shared` segment is likewise ordinary content. Callers pass the `relative`
+ * that `resolveDataPath` already produces, which is DATA_ROOT-relative.
+ *
+ * The filesystem plugin does NOT call this: its tool paths are account-relative,
+ * so it selects the shared root with an explicit `shared` flag instead.
+ */
+export declare function isSharedPath(relPath: string): boolean;
+export type SharedWriteDecision = {
+    allow: true;
+} | {
+    reject: "shared-folder-read-only";
+};
+/**
+ * The write decision. `isHouse` is INJECTED rather than resolved here so the
+ * decision stays pure and unit-testable without a filesystem — the same reason
+ * `resolveEffectiveAccountCore` takes an injected `isValidAccountId`.
+ */
+export declare function decideSharedWrite(isHouse: boolean): SharedWriteDecision;
+/**
+ * Disk-backed house check for the two surfaces that have none: the `filesystem`
+ * plugin and the `/data` browser. Drift-safe, matching
+ * claude-session-manager/src/config.ts:464 — false when the census shows zero
+ * or more than one `role:"house"` account, because under drift there is no
+ * single house to grant write to.
+ *
+ * `platform/plugins/admin/mcp/src/tools/account-lifecycle.ts:85` is a SECOND,
+ * different definition (true for any role-house account). It is deliberately
+ * not consolidated here: it guards account deletion, where `true` means refuse,
+ * so giving it these drift semantics would make a drifted install start
+ * ALLOWING deletion of a house account. Consolidation is its own task.
+ *
+ * Never throws: an unreadable accounts dir or an unparseable account.json reads
+ * as "not house", which is the fail-closed answer for a write gate.
+ */
+export declare function isHouseAccountDir(accountsDir: string, accountId: string): boolean;
+//# sourceMappingURL=index.d.ts.map

package/payload/platform/lib/shared-folder/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAaA;;0EAE0E;AAC1E,eAAO,MAAM,eAAe,WAAW,CAAC;AAExC,wEAAwE;AACxE,wBAAgB,UAAU,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAEnD;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,YAAY,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAGrD;AAED,MAAM,MAAM,mBAAmB,GAC3B;IAAE,KAAK,EAAE,IAAI,CAAA;CAAE,GACf;IAAE,MAAM,EAAE,yBAAyB,CAAA;CAAE,CAAC;AAE1C;;;;GAIG;AACH,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,OAAO,GAAG,mBAAmB,CAEvE;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,iBAAiB,CAAC,WAAW,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAuBjF"}

package/payload/platform/lib/shared-folder/dist/index.js

@@ -0,0 +1,93 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SHARED_DIR_NAME = void 0;
+exports.sharedRoot = sharedRoot;
+exports.isSharedPath = isSharedPath;
+exports.decideSharedWrite = decideSharedWrite;
+exports.isHouseAccountDir = isHouseAccountDir;
+// shared-folder — the single definition of the install-wide shared directory.
+//
+// Task 2323. Three surfaces gate on this module: the `filesystem` plugin, the
+// `/data` admin browser, and the pty-spawner's native --add-dir + deny push.
+// One definition, no drift — the same discipline as platform/lib/account-scope.
+//
+// The pure predicates never touch the filesystem, so this module is safe to
+// import into an MCP server that boots with empty env during plugin-system
+// `tools/list` enumeration. `isHouseAccountDir` DOES read disk, but only when
+// called — nothing runs at module load.
+const node_fs_1 = require("node:fs");
+const node_path_1 = require("node:path");
+/** The one literal. The shared root is `<dataRoot>/shared`, a sibling of
+ *  `<dataRoot>/accounts`, so it is inside DATA_ROOT (which is what lets the
+ *  /data browser reach it at all) but outside every account partition. */
+exports.SHARED_DIR_NAME = "shared";
+/** Absolute path of the shared root. `dataRoot` is `<install>/data`. */
+function sharedRoot(dataRoot) {
+    return (0, node_path_1.resolve)(dataRoot, exports.SHARED_DIR_NAME);
+}
+/**
+ * True when a DATA_ROOT-relative path is inside the shared root.
+ *
+ * FIRST SEGMENT ONLY. `accounts/<id>/shared` is an account's own directory that
+ * happens to be called `shared` and must keep account semantics; a deeper
+ * `shared` segment is likewise ordinary content. Callers pass the `relative`
+ * that `resolveDataPath` already produces, which is DATA_ROOT-relative.
+ *
+ * The filesystem plugin does NOT call this: its tool paths are account-relative,
+ * so it selects the shared root with an explicit `shared` flag instead.
+ */
+function isSharedPath(relPath) {
+    const segs = relPath.split("/").filter(Boolean);
+    return segs.length >= 1 && segs[0] === exports.SHARED_DIR_NAME;
+}
+/**
+ * The write decision. `isHouse` is INJECTED rather than resolved here so the
+ * decision stays pure and unit-testable without a filesystem — the same reason
+ * `resolveEffectiveAccountCore` takes an injected `isValidAccountId`.
+ */
+function decideSharedWrite(isHouse) {
+    return isHouse ? { allow: true } : { reject: "shared-folder-read-only" };
+}
+/**
+ * Disk-backed house check for the two surfaces that have none: the `filesystem`
+ * plugin and the `/data` browser. Drift-safe, matching
+ * claude-session-manager/src/config.ts:464 — false when the census shows zero
+ * or more than one `role:"house"` account, because under drift there is no
+ * single house to grant write to.
+ *
+ * `platform/plugins/admin/mcp/src/tools/account-lifecycle.ts:85` is a SECOND,
+ * different definition (true for any role-house account). It is deliberately
+ * not consolidated here: it guards account deletion, where `true` means refuse,
+ * so giving it these drift semantics would make a drifted install start
+ * ALLOWING deletion of a house account. Consolidation is its own task.
+ *
+ * Never throws: an unreadable accounts dir or an unparseable account.json reads
+ * as "not house", which is the fail-closed answer for a write gate.
+ */
+function isHouseAccountDir(accountsDir, accountId) {
+    let entries;
+    try {
+        entries = (0, node_fs_1.readdirSync)(accountsDir, { withFileTypes: true })
+            .filter((d) => d.isDirectory())
+            .map((d) => d.name);
+    }
+    catch {
+        return false;
+    }
+    const houses = [];
+    for (const name of entries) {
+        let cfg;
+        try {
+            cfg = JSON.parse((0, node_fs_1.readFileSync)((0, node_path_1.join)(accountsDir, name, "account.json"), "utf-8"));
+        }
+        catch {
+            continue;
+        }
+        if (cfg.role === "house")
+            houses.push(name);
+    }
+    if (houses.length !== 1)
+        return false;
+    return houses[0] === accountId;
+}
+//# sourceMappingURL=index.js.map

package/payload/platform/lib/shared-folder/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";;;AAmBA,gCAEC;AAaD,oCAGC;AAWD,8CAEC;AAkBD,8CAuBC;AA3FD,8EAA8E;AAC9E,EAAE;AACF,8EAA8E;AAC9E,6EAA6E;AAC7E,gFAAgF;AAChF,EAAE;AACF,4EAA4E;AAC5E,2EAA2E;AAC3E,8EAA8E;AAC9E,wCAAwC;AACxC,qCAAoD;AACpD,yCAA0C;AAE1C;;0EAE0E;AAC7D,QAAA,eAAe,GAAG,QAAQ,CAAC;AAExC,wEAAwE;AACxE,SAAgB,UAAU,CAAC,QAAgB;IACzC,OAAO,IAAA,mBAAO,EAAC,QAAQ,EAAE,uBAAe,CAAC,CAAC;AAC5C,CAAC;AAED;;;;;;;;;;GAUG;AACH,SAAgB,YAAY,CAAC,OAAe;IAC1C,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAChD,OAAO,IAAI,CAAC,MAAM,IAAI,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,uBAAe,CAAC;AACzD,CAAC;AAMD;;;;GAIG;AACH,SAAgB,iBAAiB,CAAC,OAAgB;IAChD,OAAO,OAAO,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,yBAAyB,EAAE,CAAC;AAC3E,CAAC;AAED;;;;;;;;;;;;;;;GAeG;AACH,SAAgB,iBAAiB,CAAC,WAAmB,EAAE,SAAiB;IACtE,IAAI,OAAiB,CAAC;IACtB,IAAI,CAAC;QACH,OAAO,GAAG,IAAA,qBAAW,EAAC,WAAW,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC;aACxD,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;aAC9B,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IACxB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;IACD,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,KAAK,MAAM,IAAI,IAAI,OAAO,EAAE,CAAC;QAC3B,IAAI,GAAuB,CAAC;QAC5B,IAAI,CAAC;YACH,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAA,sBAAY,EAAC,IAAA,gBAAI,EAAC,WAAW,EAAE,IAAI,EAAE,cAAc,CAAC,EAAE,OAAO,CAAC,CAE9E,CAAC;QACJ,CAAC;QAAC,MAAM,CAAC;YACP,SAAS;QACX,CAAC;QACD,IAAI,GAAG,CAAC,IAAI,KAAK,OAAO;YAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC9C,CAAC;IACD,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACtC,OAAO,MAAM,CAAC,CAAC,CAAC,KAAK,SAAS,CAAC;AACjC,CAAC"}

package/payload/platform/lib/shared-folder/src/index.ts

@@ -0,0 +1,92 @@
+// shared-folder — the single definition of the install-wide shared directory.
+//
+// Task 2323. Three surfaces gate on this module: the `filesystem` plugin, the
+// `/data` admin browser, and the pty-spawner's native --add-dir + deny push.
+// One definition, no drift — the same discipline as platform/lib/account-scope.
+//
+// The pure predicates never touch the filesystem, so this module is safe to
+// import into an MCP server that boots with empty env during plugin-system
+// `tools/list` enumeration. `isHouseAccountDir` DOES read disk, but only when
+// called — nothing runs at module load.
+import { readFileSync, readdirSync } from "node:fs";
+import { join, resolve } from "node:path";
+
+/** The one literal. The shared root is `<dataRoot>/shared`, a sibling of
+ *  `<dataRoot>/accounts`, so it is inside DATA_ROOT (which is what lets the
+ *  /data browser reach it at all) but outside every account partition. */
+export const SHARED_DIR_NAME = "shared";
+
+/** Absolute path of the shared root. `dataRoot` is `<install>/data`. */
+export function sharedRoot(dataRoot: string): string {
+  return resolve(dataRoot, SHARED_DIR_NAME);
+}
+
+/**
+ * True when a DATA_ROOT-relative path is inside the shared root.
+ *
+ * FIRST SEGMENT ONLY. `accounts/<id>/shared` is an account's own directory that
+ * happens to be called `shared` and must keep account semantics; a deeper
+ * `shared` segment is likewise ordinary content. Callers pass the `relative`
+ * that `resolveDataPath` already produces, which is DATA_ROOT-relative.
+ *
+ * The filesystem plugin does NOT call this: its tool paths are account-relative,
+ * so it selects the shared root with an explicit `shared` flag instead.
+ */
+export function isSharedPath(relPath: string): boolean {
+  const segs = relPath.split("/").filter(Boolean);
+  return segs.length >= 1 && segs[0] === SHARED_DIR_NAME;
+}
+
+export type SharedWriteDecision =
+  | { allow: true }
+  | { reject: "shared-folder-read-only" };
+
+/**
+ * The write decision. `isHouse` is INJECTED rather than resolved here so the
+ * decision stays pure and unit-testable without a filesystem — the same reason
+ * `resolveEffectiveAccountCore` takes an injected `isValidAccountId`.
+ */
+export function decideSharedWrite(isHouse: boolean): SharedWriteDecision {
+  return isHouse ? { allow: true } : { reject: "shared-folder-read-only" };
+}
+
+/**
+ * Disk-backed house check for the two surfaces that have none: the `filesystem`
+ * plugin and the `/data` browser. Drift-safe, matching
+ * claude-session-manager/src/config.ts:464 — false when the census shows zero
+ * or more than one `role:"house"` account, because under drift there is no
+ * single house to grant write to.
+ *
+ * `platform/plugins/admin/mcp/src/tools/account-lifecycle.ts:85` is a SECOND,
+ * different definition (true for any role-house account). It is deliberately
+ * not consolidated here: it guards account deletion, where `true` means refuse,
+ * so giving it these drift semantics would make a drifted install start
+ * ALLOWING deletion of a house account. Consolidation is its own task.
+ *
+ * Never throws: an unreadable accounts dir or an unparseable account.json reads
+ * as "not house", which is the fail-closed answer for a write gate.
+ */
+export function isHouseAccountDir(accountsDir: string, accountId: string): boolean {
+  let entries: string[];
+  try {
+    entries = readdirSync(accountsDir, { withFileTypes: true })
+      .filter((d) => d.isDirectory())
+      .map((d) => d.name);
+  } catch {
+    return false;
+  }
+  const houses: string[] = [];
+  for (const name of entries) {
+    let cfg: { role?: unknown };
+    try {
+      cfg = JSON.parse(readFileSync(join(accountsDir, name, "account.json"), "utf-8")) as {
+        role?: unknown;
+      };
+    } catch {
+      continue;
+    }
+    if (cfg.role === "house") houses.push(name);
+  }
+  if (houses.length !== 1) return false;
+  return houses[0] === accountId;
+}

package/payload/platform/lib/shared-folder/tsconfig.json

@@ -0,0 +1,5 @@
+{
+  "extends": "../../tsconfig.base.json",
+  "compilerOptions": { "outDir": "dist", "rootDir": "src" },
+  "include": ["src"]
+}

package/payload/platform/package.json

@@ -10,8 +10,8 @@
     "pdf-lib": "^1.17.1"
   },
   "scripts": {
-    "build": "tsc -p lib/account-schema-regions/tsconfig.json && tsc -p lib/account-ingest-token/tsconfig.json && tsc -p lib/models/tsconfig.json && tsc -p lib/agent-slug/tsconfig.json && tsc -p lib/mcp-spawn-tee/tsconfig.json && tsc -p lib/mcp-lifeline/tsconfig.json && tsc -p lib/mcp-eager/tsconfig.json && tsc -p lib/account-enumeration/tsconfig.json && tsc -p lib/account-scope/tsconfig.json && tsc -p lib/graph-write/tsconfig.json && tsc -p lib/ledger-core/tsconfig.json && tsc -p lib/embed-client/tsconfig.json && tsc -p lib/graph-mcp/tsconfig.json && tsc -p lib/graph-trash/tsconfig.json && tsc -p lib/active-rules/tsconfig.json && tsc -p lib/admin-conversation-purge/tsconfig.json && tsc -p lib/graph-search/tsconfig.json && tsc -p lib/graph-style/tsconfig.json && tsc -p lib/device-url/tsconfig.json && tsc -p lib/brand-templating/tsconfig.json && tsc -p lib/entitlement/tsconfig.json && tsc -p lib/task-secrets/tsconfig.json && tsc -p lib/admins-write/tsconfig.json && tsc -p lib/admin-access-password/tsconfig.json && tsc -p lib/persistent-components/tsconfig.json && tsc -p lib/require-port-env/tsconfig.json && tsc -p lib/aeo-llms-txt-writer/tsconfig.json && tsc -p lib/obsidian-parser/tsconfig.json && tsc -p lib/storage-broker/tsconfig.json && tsc -p lib/routine-templates/tsconfig.json && tsc -p lib/agent-dispatch-rule/tsconfig.json && tsc -p lib/learning-constants/tsconfig.json && tsc -p services/claude-session-manager/tsconfig.json && tsc -p services/whatsapp-channel/tsconfig.json && tsc -p services/webchat-channel/tsconfig.json && tsc -p services/telegram-channel/tsconfig.json && NODE_OPTIONS='--max-old-space-size=8192' tsc -b plugins/*/mcp/tsconfig.json",
-    "build:lib": "tsc -p lib/account-schema-regions/tsconfig.json && tsc -p lib/account-ingest-token/tsconfig.json && tsc -p lib/models/tsconfig.json && tsc -p lib/agent-slug/tsconfig.json && tsc -p lib/mcp-spawn-tee/tsconfig.json && tsc -p lib/mcp-lifeline/tsconfig.json && tsc -p lib/mcp-eager/tsconfig.json && tsc -p lib/account-enumeration/tsconfig.json && tsc -p lib/account-scope/tsconfig.json && tsc -p lib/graph-write/tsconfig.json && tsc -p lib/ledger-core/tsconfig.json && tsc -p lib/embed-client/tsconfig.json && tsc -p lib/graph-mcp/tsconfig.json && tsc -p lib/graph-trash/tsconfig.json && tsc -p lib/active-rules/tsconfig.json && tsc -p lib/admin-conversation-purge/tsconfig.json && tsc -p lib/graph-search/tsconfig.json && tsc -p lib/graph-style/tsconfig.json && tsc -p lib/device-url/tsconfig.json && tsc -p lib/brand-templating/tsconfig.json && tsc -p lib/entitlement/tsconfig.json && tsc -p lib/task-secrets/tsconfig.json && tsc -p lib/admins-write/tsconfig.json && tsc -p lib/admin-access-password/tsconfig.json && tsc -p lib/persistent-components/tsconfig.json && tsc -p lib/require-port-env/tsconfig.json && tsc -p lib/aeo-llms-txt-writer/tsconfig.json && tsc -p lib/obsidian-parser/tsconfig.json && tsc -p lib/storage-broker/tsconfig.json && tsc -p lib/routine-templates/tsconfig.json && tsc -p lib/agent-dispatch-rule/tsconfig.json",
+    "build": "tsc -p lib/account-schema-regions/tsconfig.json && tsc -p lib/account-ingest-token/tsconfig.json && tsc -p lib/models/tsconfig.json && tsc -p lib/agent-slug/tsconfig.json && tsc -p lib/mcp-spawn-tee/tsconfig.json && tsc -p lib/mcp-lifeline/tsconfig.json && tsc -p lib/mcp-eager/tsconfig.json && tsc -p lib/account-enumeration/tsconfig.json && tsc -p lib/account-scope/tsconfig.json && tsc -p lib/shared-folder/tsconfig.json && tsc -p lib/graph-write/tsconfig.json && tsc -p lib/ledger-core/tsconfig.json && tsc -p lib/embed-client/tsconfig.json && tsc -p lib/graph-mcp/tsconfig.json && tsc -p lib/graph-trash/tsconfig.json && tsc -p lib/active-rules/tsconfig.json && tsc -p lib/admin-conversation-purge/tsconfig.json && tsc -p lib/graph-search/tsconfig.json && tsc -p lib/graph-style/tsconfig.json && tsc -p lib/device-url/tsconfig.json && tsc -p lib/brand-templating/tsconfig.json && tsc -p lib/entitlement/tsconfig.json && tsc -p lib/task-secrets/tsconfig.json && tsc -p lib/admins-write/tsconfig.json && tsc -p lib/admin-access-password/tsconfig.json && tsc -p lib/persistent-components/tsconfig.json && tsc -p lib/require-port-env/tsconfig.json && tsc -p lib/aeo-llms-txt-writer/tsconfig.json && tsc -p lib/obsidian-parser/tsconfig.json && tsc -p lib/storage-broker/tsconfig.json && tsc -p lib/routine-templates/tsconfig.json && tsc -p lib/agent-dispatch-rule/tsconfig.json && tsc -p lib/learning-constants/tsconfig.json && tsc -p services/claude-session-manager/tsconfig.json && tsc -p services/whatsapp-channel/tsconfig.json && tsc -p services/webchat-channel/tsconfig.json && tsc -p services/telegram-channel/tsconfig.json && NODE_OPTIONS='--max-old-space-size=8192' tsc -b plugins/*/mcp/tsconfig.json",
+    "build:lib": "tsc -p lib/account-schema-regions/tsconfig.json && tsc -p lib/account-ingest-token/tsconfig.json && tsc -p lib/models/tsconfig.json && tsc -p lib/agent-slug/tsconfig.json && tsc -p lib/mcp-spawn-tee/tsconfig.json && tsc -p lib/mcp-lifeline/tsconfig.json && tsc -p lib/mcp-eager/tsconfig.json && tsc -p lib/account-enumeration/tsconfig.json && tsc -p lib/account-scope/tsconfig.json && tsc -p lib/shared-folder/tsconfig.json && tsc -p lib/graph-write/tsconfig.json && tsc -p lib/ledger-core/tsconfig.json && tsc -p lib/embed-client/tsconfig.json && tsc -p lib/graph-mcp/tsconfig.json && tsc -p lib/graph-trash/tsconfig.json && tsc -p lib/active-rules/tsconfig.json && tsc -p lib/admin-conversation-purge/tsconfig.json && tsc -p lib/graph-search/tsconfig.json && tsc -p lib/graph-style/tsconfig.json && tsc -p lib/device-url/tsconfig.json && tsc -p lib/brand-templating/tsconfig.json && tsc -p lib/entitlement/tsconfig.json && tsc -p lib/task-secrets/tsconfig.json && tsc -p lib/admins-write/tsconfig.json && tsc -p lib/admin-access-password/tsconfig.json && tsc -p lib/persistent-components/tsconfig.json && tsc -p lib/require-port-env/tsconfig.json && tsc -p lib/aeo-llms-txt-writer/tsconfig.json && tsc -p lib/obsidian-parser/tsconfig.json && tsc -p lib/storage-broker/tsconfig.json && tsc -p lib/routine-templates/tsconfig.json && tsc -p lib/agent-dispatch-rule/tsconfig.json && tsc -p lib/shared-folder/tsconfig.json",
     "gen:canonical-tools": "node scripts/generate-canonical-tool-names.mjs",
     "build:memory": "tsc -p plugins/memory/mcp/tsconfig.json",
     "build:contacts": "tsc -p plugins/contacts/mcp/tsconfig.json",

package/payload/platform/plugins/admin/skills/platform-architecture/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: platform-architecture
 description: Use when grounding any documented-surface claim about what Maxy ships — plugins, skills, specialists, install/deploy flows, internals. This is the install catalogue, not evidence of what is enabled on the current account. For install state on this account, call `capabilities-here`; for documented surface, cite the `Source:` URL inline.
-content-hash: sha256:4140a189871ed59fff6f5edd3c48c8836a40f6999c584a611164533d12021cd2
+content-hash: sha256:16c402596ec41a4862a881217aada22c79ea15e59da8e41c624a0ab494952fc9
 brand: maxy-code
 product-name: Maxy
 ---
@@ -1661,6 +1661,20 @@ Changes are per-account and take effect immediately.
 
 Brand isolation extends to the device filesystem. Every Maxy install provisions an SMB share scoped to that brand's install folder, credentialled by the brand's install owner and the Maxy PIN. A device that hosts more than one brand carries one share per brand; tearing one brand down never exposes another brand's files. See [Samba Share](./samba.md) for the credential model, per-OS mount syntax, and peer-brand lifecycle.
 
+## The Shared Folder
+
+Every install has one shared folder that all accounts can see. The house account writes it; every other account reads it.
+
+It exists so the house can publish something once and have every sub-account use it. Brand tokens are the first use: put the house palette, typography and report template in the shared folder, and a sub-account can produce a report in the house format without being sent a copy.
+
+Ask Maxy to "put this in the shared folder" from the house account, or "read the brand tokens from the shared folder" from any account.
+
+A sub-account that tries to write there is refused, and says the folder is read-only. That refusal is the correct behaviour, not a fault. If a sub-account needs something changed in the shared folder, the change is made from the house account.
+
+If the install's account records are in an odd state — no house account, or more than one — the folder becomes read-only for everyone until that is resolved. This is deliberate: with no single house account there is no one whose writes should be trusted.
+
+One limit worth knowing. The read-only rule covers Maxy's file tools and the Data page. It does not cover shell commands, which an account's own operator can still run against the folder on their own install. The rule is there to stop accounts from changing shared material by accident, not to defend against the person who owns the install.
+
 ---
 # What Wakes a Session
 Source: https://docs.getmaxy.com/channel-wake-and-prompt.md

package/payload/platform/plugins/admin/skills/whats-new/SKILL.md

@@ -9,6 +9,14 @@ Invoked by the admin agent directly.
 
 This is the platform's release timeline, newest first. Each entry shows the date it shipped and the version it shipped in, so you can tell the operator how current their install is. To compare, read the installed version from `capabilities-here` and match it against the versions below. Keep answers high level and in plain English; this is a summary, not a full commit log.
 
+## 2026-08-01 (0.1.543)
+
+- There is now a shared folder every account can read and only the main account can write to, and an upload route that could reach out of an account into it has been closed.
+- Every timestamp on screen now shows in the account's own timezone, with a build check that stops a new one slipping back to the browser's.
+- A sub-account reading its WhatsApp now resolves its own conversations, and past messages that arrived on its connection have been filed to it.
+- How the assistant is told to handle a WhatsApp turn is now set per account rather than fixed in the code, seeded on install.
+- A chat session that freezes is now set aside and restarted rather than left stuck.
+
 ## 2026-08-01 (0.1.542)
 
 - A public agent's web chat now runs in the account that owns it, including its branding, rather than always the main account. A standing check reports the same agent name claimed by two accounts.

package/payload/platform/plugins/docs/references/access-control.md

@@ -82,3 +82,17 @@ Changes are per-account and take effect immediately.
 ## Filesystem Access (SMB Share)
 
 Brand isolation extends to the device filesystem. Every {{productName}} install provisions an SMB share scoped to that brand's install folder, credentialled by the brand's install owner and the {{productName}} PIN. A device that hosts more than one brand carries one share per brand; tearing one brand down never exposes another brand's files. See [Samba Share](./samba.md) for the credential model, per-OS mount syntax, and peer-brand lifecycle.
+
+## The Shared Folder
+
+Every install has one shared folder that all accounts can see. The house account writes it; every other account reads it.
+
+It exists so the house can publish something once and have every sub-account use it. Brand tokens are the first use: put the house palette, typography and report template in the shared folder, and a sub-account can produce a report in the house format without being sent a copy.
+
+Ask {{productName}} to "put this in the shared folder" from the house account, or "read the brand tokens from the shared folder" from any account.
+
+A sub-account that tries to write there is refused, and says the folder is read-only. That refusal is the correct behaviour, not a fault. If a sub-account needs something changed in the shared folder, the change is made from the house account.
+
+If the install's account records are in an odd state — no house account, or more than one — the folder becomes read-only for everyone until that is resolved. This is deliberate: with no single house account there is no one whose writes should be trusted.
+
+One limit worth knowing. The read-only rule covers {{productName}}'s file tools and the Data page. It does not cover shell commands, which an account's own operator can still run against the folder on their own install. The rule is there to stop accounts from changing shared material by accident, not to defend against the person who owns the install.

package/payload/platform/plugins/filesystem/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "filesystem",
-  "description": "Account-scoped file access. Read, write, edit, list, glob, and grep files under the session's own account directory; the house admin may reach any sub-account's files by naming targetAccountId, gated fail-closed and confined to that account's directory.",
+  "description": "Account-scoped file access. Read, write, edit, list, glob, and grep files under the session's own account directory; the house admin may reach any sub-account's files by naming targetAccountId, gated fail-closed and confined to that account's directory; every account may read the install-wide shared folder via shared:true, and only the house account may write it.",
   "version": "0.1.0",
   "author": {
     "name": "Rubytech LLC"

package/payload/platform/plugins/filesystem/PLUGIN.md

@@ -1,6 +1,6 @@
 ---
 name: filesystem
-description: "Account-scoped file access. Read, write, edit, list, glob, and grep files under the session's own account directory; the house admin may reach any sub-account's files by naming targetAccountId, gated fail-closed and confined to that account's directory."
+description: "Account-scoped file access. Read, write, edit, list, glob, and grep files under the session's own account directory; the house admin may reach any sub-account's files by naming targetAccountId, gated fail-closed and confined to that account's directory; every account may read the install-wide shared folder via shared:true, and only the house account may write it."
 tools:
   - name: file-read
     publicAllowlist: false
@@ -54,6 +54,16 @@ Omit `targetAccountId`. Every tool takes a `path` relative to your account direc
 
 Pass `targetAccountId` to operate on a sub-account's directory. This is honoured only for a house-scoped admin session. A sub-account, specialist, or public session that passes `targetAccountId` is refused with `cross-account-denied`; an account id that is not provisioned on disk is refused with `cross-account-target-not-provisioned`. The validity check re-scans the accounts dir on a miss, so a sub-account created at runtime this session resolves without a service restart (a stale boot-time cache no longer masks it). Use this to inspect or repair a client account's files from the house session without switching accounts.
 
+## Shared folder
+
+Pass `shared: true` to operate on the install-wide shared folder at `data/shared/` instead of an account directory. `path` is then relative to the shared root.
+
+Every account reads it: `file-read`, `file-list`, `file-glob` and `file-grep` are open to any session. Only the house account writes it: `file-write` and `file-edit` from any other account are refused with `shared-folder-read-only`. House-ness here is the account, not the session role, so a house specialist writes too. Under account-census drift (no house, or more than one) no account may write.
+
+`shared: true` together with `targetAccountId` is refused with `shared-and-target-exclusive` — `targetAccountId` selects an account root, and the shared folder is not an account. An install whose shared folder is missing refuses every shared call with `shared-folder-absent`; the installer creates the folder, and no tool call creates it on demand.
+
+Containment is identical to the account case: a path that escapes the shared root, including through a symlink into an account directory, is rejected before any filesystem operation.
+
 ## Boundaries
 
 Every path is confined to the resolved account directory. A path that escapes it — `../`, an absolute path outside the account root, or a symlink pointing out — is rejected before any filesystem operation. Reads and greps skip files over 5 MB; grep skips binary files.

package/payload/platform/plugins/filesystem/mcp/dist/index.js

@@ -22,6 +22,10 @@ const ownAccountId = process.env.ACCOUNT_ID ?? null;
 // literal ${HOUSE_ADMIN_SCOPE} placeholder or an empty value as a real scope.
 const houseScope = readPluginHouseScope(process.env);
 const platformRoot = process.env.PLATFORM_ROOT ?? "";
+// Task 2323 — the `sid=` correlation key on every [shared] line. Declared in
+// this plugin's PLUGIN.md env block, so it is present on a real spawn and
+// absent only in the metadata-only boot, where no call reaches a file op.
+const sessionId = process.env.SESSION_ID ?? null;
 process.stderr.write(`[filesystem] boot accountId=${ownAccountId ?? "null"} houseScope=${houseScope ? "set" : "null"}\n`);
 function refuseNoAccount(toolName) {
     process.stderr.write(`[filesystem] tool=${toolName} refuse reason=no-account-context\n`);
@@ -41,45 +45,57 @@ function refuseNoAccount(toolName) {
 function ctx() {
     if (!ownAccountId || !platformRoot)
         return null;
-    return { ownAccountId, houseScope, accountsDir: resolve(platformRoot, "..", "data/accounts") };
+    return {
+        ownAccountId,
+        houseScope,
+        accountsDir: resolve(platformRoot, "..", "data/accounts"),
+        sessionId,
+    };
 }
 const targetArg = z
     .string()
     .optional()
     .describe("House admin only: a sub-account ID to operate on. Omit to operate on your own account. A non-house session that passes this is denied (cross-account-denied).");
-eagerTool(server, "file-read", "Read a UTF-8 file under the account directory. Pass a path relative to the account root; pass targetAccountId (house admin only) to read a sub-account's file.", { path: z.string().describe("Path relative to the account directory"), targetAccountId: targetArg }, async (a) => {
+const sharedArg = z
+    .boolean()
+    .optional()
+    .describe("Operate on the install-wide shared folder instead of an account directory. Every account may read it; only the house account may write. Cannot be combined with targetAccountId (shared-and-target-exclusive).");
+eagerTool(server, "file-read", "Read a UTF-8 file under the account directory. Pass a path relative to the account root; pass targetAccountId (house admin only) to read a sub-account's file; pass shared:true to read the install-wide shared folder, which every account may read.", { path: z.string().describe("Path relative to the account directory"), targetAccountId: targetArg, shared: sharedArg }, async (a) => {
     const c = ctx();
     return c ? fileRead(a, c) : refuseNoAccount("file-read");
 });
-eagerTool(server, "file-write", "Write (create or overwrite) a UTF-8 file under the account directory, creating parent directories as needed.", {
+eagerTool(server, "file-write", "Write (create or overwrite) a UTF-8 file under the account directory, creating parent directories as needed. With shared:true the target is the install-wide shared folder, which is read-only unless you are the house account.", {
     path: z.string().describe("Path relative to the account directory"),
     content: z.string().describe("Full file contents to write"),
     targetAccountId: targetArg,
+    shared: sharedArg,
 }, async (a) => {
     const c = ctx();
     return c ? fileWrite(a, c) : refuseNoAccount("file-write");
 });
-eagerTool(server, "file-edit", "Replace a single unique occurrence of oldString with newString in a file under the account directory. Fails if oldString is absent or matches more than once.", {
+eagerTool(server, "file-edit", "Replace a single unique occurrence of oldString with newString in a file under the account directory. Fails if oldString is absent or matches more than once. With shared:true the target is the install-wide shared folder, which is read-only unless you are the house account.", {
     path: z.string().describe("Path relative to the account directory"),
     oldString: z.string().describe("Exact text to replace (must occur exactly once)"),
     newString: z.string().describe("Replacement text"),
     targetAccountId: targetArg,
+    shared: sharedArg,
 }, async (a) => {
     const c = ctx();
     return c ? fileEdit(a, c) : refuseNoAccount("file-edit");
 });
-eagerTool(server, "file-list", "List the entries of a directory under the account directory (name + type). Omit path to list the account root.", { path: z.string().optional().describe("Directory relative to the account root"), targetAccountId: targetArg }, async (a) => {
+eagerTool(server, "file-list", "List the entries of a directory under the account directory (name + type). Omit path to list the account root; pass shared:true to list the install-wide shared folder.", { path: z.string().optional().describe("Directory relative to the account root"), targetAccountId: targetArg, shared: sharedArg }, async (a) => {
     const c = ctx();
     return c ? fileList(a, c) : refuseNoAccount("file-list");
 });
-eagerTool(server, "file-glob", "List files under the account directory matching a glob (**, *, ?), returned as paths relative to the account root.", { pattern: z.string().describe("Glob pattern, e.g. **/*.md"), targetAccountId: targetArg }, async (a) => {
+eagerTool(server, "file-glob", "List files under the account directory matching a glob (**, *, ?), returned as paths relative to the account root; pass shared:true to glob the install-wide shared folder.", { pattern: z.string().describe("Glob pattern, e.g. **/*.md"), targetAccountId: targetArg, shared: sharedArg }, async (a) => {
     const c = ctx();
     return c ? fileGlob(a, c) : refuseNoAccount("file-glob");
 });
-eagerTool(server, "file-grep", "Search file contents under the account directory for a JavaScript regular expression, returning file:line:preview matches. Omit path to search the whole account.", {
+eagerTool(server, "file-grep", "Search file contents under the account directory for a JavaScript regular expression, returning file:line:preview matches. Omit path to search the whole account; pass shared:true to search the install-wide shared folder.", {
     pattern: z.string().describe("JavaScript regular expression"),
     path: z.string().optional().describe("Subdirectory (relative) to limit the search"),
     targetAccountId: targetArg,
+    shared: sharedArg,
 }, async (a) => {
     const c = ctx();
     return c ? fileGrep(a, c) : refuseNoAccount("file-grep");

package/payload/platform/plugins/filesystem/mcp/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AACpE,OAAO,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AACpE,OAAO,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAC;AACjF,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEpC,OAAO,EAAE,oBAAoB,EAAE,MAAM,gBAAgB,CAAC;AACtD,OAAO,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAChD,OAAO,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAC;AAClD,OAAO,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAChD,OAAO,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAChD,OAAO,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAChD,OAAO,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAEhD,wEAAwE;AACxE,8DAA8D;AAC9D,8DAA8D;AAC9D,MAAM,MAAM,GAAQ,IAAI,SAAS,CAAC,EAAE,IAAI,EAAE,iBAAiB,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC;AAEjF,4EAA4E;AAC5E,yEAAyE;AACzE,+BAA+B;AAC/B,MAAM,YAAY,GAAG,OAAO,CAAC,GAAG,CAAC,UAAU,IAAI,IAAI,CAAC;AACpD,8EAA8E;AAC9E,8EAA8E;AAC9E,MAAM,UAAU,GAAG,oBAAoB,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;AACrD,MAAM,YAAY,GAAG,OAAO,CAAC,GAAG,CAAC,aAAa,IAAI,EAAE,CAAC;AACrD,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,+BAA+B,YAAY,IAAI,MAAM,eAAe,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,IAAI,CACpG,CAAC;AAEF,SAAS,eAAe,CAAC,QAAgB;IACvC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,qBAAqB,QAAQ,qCAAqC,CAAC,CAAC;IACzF,OAAO;QACL,OAAO,EAAE;YACP;gBACE,IAAI,EAAE,MAAe;gBACrB,IAAI,EAAE,GAAG,QAAQ,sHAAsH;aACxI;SACF;QACD,OAAO,EAAE,IAAa;KACvB,CAAC;AACJ,CAAC;AAED;;mFAEmF;AACnF,SAAS,GAAG;IACV,IAAI,CAAC,YAAY,IAAI,CAAC,YAAY;QAAE,OAAO,IAAI,CAAC;IAChD,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,WAAW,EAAE,OAAO,CAAC,YAAY,EAAE,IAAI,EAAE,eAAe,CAAC,EAAE,CAAC;AACjG,CAAC;AAED,MAAM,SAAS,GAAG,CAAC;KAChB,MAAM,EAAE;KACR,QAAQ,EAAE;KACV,QAAQ,CACP,+JAA+J,CAChK,CAAC;AAEJ,SAAS,CACP,MAAM,EACN,WAAW,EACX,gKAAgK,EAChK,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,wCAAwC,CAAC,EAAE,eAAe,EAAE,SAAS,EAAE,EACnG,KAAK,EAAE,CAA6C,EAAE,EAAE;IACtD,MAAM,CAAC,GAAG,GAAG,EAAE,CAAC;IAChB,OAAO,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,WAAW,CAAC,CAAC;AAC3D,CAAC,CACF,CAAC;AAEF,SAAS,CACP,MAAM,EACN,YAAY,EACZ,8GAA8G,EAC9G;IACE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,wCAAwC,CAAC;IACnE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,6BAA6B,CAAC;IAC3D,eAAe,EAAE,SAAS;CAC3B,EACD,KAAK,EAAE,CAA8D,EAAE,EAAE;IACvE,MAAM,CAAC,GAAG,GAAG,EAAE,CAAC;IAChB,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,YAAY,CAAC,CAAC;AAC7D,CAAC,CACF,CAAC;AAEF,SAAS,CACP,MAAM,EACN,WAAW,EACX,+JAA+J,EAC/J;IACE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,wCAAwC,CAAC;IACnE,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,iDAAiD,CAAC;IACjF,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,kBAAkB,CAAC;IAClD,eAAe,EAAE,SAAS;CAC3B,EACD,KAAK,EAAE,CAAmF,EAAE,EAAE;IAC5F,MAAM,CAAC,GAAG,GAAG,EAAE,CAAC;IAChB,OAAO,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,WAAW,CAAC,CAAC;AAC3D,CAAC,CACF,CAAC;AAEF,SAAS,CACP,MAAM,EACN,WAAW,EACX,gHAAgH,EAChH,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,wCAAwC,CAAC,EAAE,eAAe,EAAE,SAAS,EAAE,EAC9G,KAAK,EAAE,CAA8C,EAAE,EAAE;IACvD,MAAM,CAAC,GAAG,GAAG,EAAE,CAAC;IAChB,OAAO,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,WAAW,CAAC,CAAC;AAC3D,CAAC,CACF,CAAC;AAEF,SAAS,CACP,MAAM,EACN,WAAW,EACX,oHAAoH,EACpH,EAAE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,4BAA4B,CAAC,EAAE,eAAe,EAAE,SAAS,EAAE,EAC1F,KAAK,EAAE,CAAgD,EAAE,EAAE;IACzD,MAAM,CAAC,GAAG,GAAG,EAAE,CAAC;IAChB,OAAO,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,WAAW,CAAC,CAAC;AAC3D,CAAC,CACF,CAAC;AAEF,SAAS,CACP,MAAM,EACN,WAAW,EACX,mKAAmK,EACnK;IACE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,+BAA+B,CAAC;IAC7D,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,6CAA6C,CAAC;IACnF,eAAe,EAAE,SAAS;CAC3B,EACD,KAAK,EAAE,CAA+D,EAAE,EAAE;IACxE,MAAM,CAAC,GAAG,GAAG,EAAE,CAAC;IAChB,OAAO,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,WAAW,CAAC,CAAC;AAC3D,CAAC,CACF,CAAC;AAEF,MAAM,SAAS,GAAG,IAAI,oBAAoB,EAAE,CAAC;AAC7C,MAAO,MAAoB,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AACpE,OAAO,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AACpE,OAAO,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAC;AACjF,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEpC,OAAO,EAAE,oBAAoB,EAAE,MAAM,gBAAgB,CAAC;AACtD,OAAO,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAChD,OAAO,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAC;AAClD,OAAO,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAChD,OAAO,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAChD,OAAO,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAChD,OAAO,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAEhD,wEAAwE;AACxE,8DAA8D;AAC9D,8DAA8D;AAC9D,MAAM,MAAM,GAAQ,IAAI,SAAS,CAAC,EAAE,IAAI,EAAE,iBAAiB,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC;AAEjF,4EAA4E;AAC5E,yEAAyE;AACzE,+BAA+B;AAC/B,MAAM,YAAY,GAAG,OAAO,CAAC,GAAG,CAAC,UAAU,IAAI,IAAI,CAAC;AACpD,8EAA8E;AAC9E,8EAA8E;AAC9E,MAAM,UAAU,GAAG,oBAAoB,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;AACrD,MAAM,YAAY,GAAG,OAAO,CAAC,GAAG,CAAC,aAAa,IAAI,EAAE,CAAC;AACrD,6EAA6E;AAC7E,0EAA0E;AAC1E,0EAA0E;AAC1E,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,UAAU,IAAI,IAAI,CAAC;AACjD,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,+BAA+B,YAAY,IAAI,MAAM,eAAe,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,IAAI,CACpG,CAAC;AAEF,SAAS,eAAe,CAAC,QAAgB;IACvC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,qBAAqB,QAAQ,qCAAqC,CAAC,CAAC;IACzF,OAAO;QACL,OAAO,EAAE;YACP;gBACE,IAAI,EAAE,MAAe;gBACrB,IAAI,EAAE,GAAG,QAAQ,sHAAsH;aACxI;SACF;QACD,OAAO,EAAE,IAAa;KACvB,CAAC;AACJ,CAAC;AAED;;mFAEmF;AACnF,SAAS,GAAG;IACV,IAAI,CAAC,YAAY,IAAI,CAAC,YAAY;QAAE,OAAO,IAAI,CAAC;IAChD,OAAO;QACL,YAAY;QACZ,UAAU;QACV,WAAW,EAAE,OAAO,CAAC,YAAY,EAAE,IAAI,EAAE,eAAe,CAAC;QACzD,SAAS;KACV,CAAC;AACJ,CAAC;AAED,MAAM,SAAS,GAAG,CAAC;KAChB,MAAM,EAAE;KACR,QAAQ,EAAE;KACV,QAAQ,CACP,+JAA+J,CAChK,CAAC;AAEJ,MAAM,SAAS,GAAG,CAAC;KAChB,OAAO,EAAE;KACT,QAAQ,EAAE;KACV,QAAQ,CACP,gNAAgN,CACjN,CAAC;AAEJ,SAAS,CACP,MAAM,EACN,WAAW,EACX,uPAAuP,EACvP,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,wCAAwC,CAAC,EAAE,eAAe,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,EACtH,KAAK,EAAE,CAA+D,EAAE,EAAE;IACxE,MAAM,CAAC,GAAG,GAAG,EAAE,CAAC;IAChB,OAAO,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,WAAW,CAAC,CAAC;AAC3D,CAAC,CACF,CAAC;AAEF,SAAS,CACP,MAAM,EACN,YAAY,EACZ,kOAAkO,EAClO;IACE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,wCAAwC,CAAC;IACnE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,6BAA6B,CAAC;IAC3D,eAAe,EAAE,SAAS;IAC1B,MAAM,EAAE,SAAS;CAClB,EACD,KAAK,EAAE,CAAgF,EAAE,EAAE;IACzF,MAAM,CAAC,GAAG,GAAG,EAAE,CAAC;IAChB,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,YAAY,CAAC,CAAC;AAC7D,CAAC,CACF,CAAC;AAEF,SAAS,CACP,MAAM,EACN,WAAW,EACX,mRAAmR,EACnR;IACE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,wCAAwC,CAAC;IACnE,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,iDAAiD,CAAC;IACjF,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,kBAAkB,CAAC;IAClD,eAAe,EAAE,SAAS;IAC1B,MAAM,EAAE,SAAS;CAClB,EACD,KAAK,EAAE,CAAqG,EAAE,EAAE;IAC9G,MAAM,CAAC,GAAG,GAAG,EAAE,CAAC;IAChB,OAAO,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,WAAW,CAAC,CAAC;AAC3D,CAAC,CACF,CAAC;AAEF,SAAS,CACP,MAAM,EACN,WAAW,EACX,yKAAyK,EACzK,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,wCAAwC,CAAC,EAAE,eAAe,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,EACjI,KAAK,EAAE,CAAgE,EAAE,EAAE;IACzE,MAAM,CAAC,GAAG,GAAG,EAAE,CAAC;IAChB,OAAO,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,WAAW,CAAC,CAAC;AAC3D,CAAC,CACF,CAAC;AAEF,SAAS,CACP,MAAM,EACN,WAAW,EACX,6KAA6K,EAC7K,EAAE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,4BAA4B,CAAC,EAAE,eAAe,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,EAC7G,KAAK,EAAE,CAAkE,EAAE,EAAE;IAC3E,MAAM,CAAC,GAAG,GAAG,EAAE,CAAC;IAChB,OAAO,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,WAAW,CAAC,CAAC;AAC3D,CAAC,CACF,CAAC;AAEF,SAAS,CACP,MAAM,EACN,WAAW,EACX,8NAA8N,EAC9N;IACE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,+BAA+B,CAAC;IAC7D,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,6CAA6C,CAAC;IACnF,eAAe,EAAE,SAAS;IAC1B,MAAM,EAAE,SAAS;CAClB,EACD,KAAK,EAAE,CAAiF,EAAE,EAAE;IAC1F,MAAM,CAAC,GAAG,GAAG,EAAE,CAAC;IAChB,OAAO,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,WAAW,CAAC,CAAC;AAC3D,CAAC,CACF,CAAC;AAEF,MAAM,SAAS,GAAG,IAAI,oBAAoB,EAAE,CAAC;AAC7C,MAAO,MAAoB,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC"}