@rubytech/create-maxy-code 0.1.563 → 0.1.565

package/payload/server/{chunk-SKYZG6OT.js → chunk-PGGGWUBM.js}

@@ -1,122 +1,162 @@
 import { createRequire as __createRequire } from 'node:module'; const require = __createRequire(import.meta.url);
+import {
+  __esm,
+  __export
+} from "./chunk-KVR2FT6O.js";
 
 // app/lib/paths.ts
+var paths_exports = {};
+__export(paths_exports, {
+  ADMIN_SESSION_SECRET_FILE: () => ADMIN_SESSION_SECRET_FILE,
+  BIN_DIR: () => BIN_DIR,
+  BRAND_NAME: () => BRAND_NAME,
+  BUNDLE_ALLOWLIST: () => BUNDLE_ALLOWLIST,
+  BUNDLE_MODE: () => BUNDLE_MODE,
+  CDP_PORT: () => CDP_PORT,
+  CHROMIUM_PROFILE_DIR: () => CHROMIUM_PROFILE_DIR,
+  CLAUDE_CREDENTIALS_FILE: () => CLAUDE_CREDENTIALS_FILE,
+  COMMERCIAL_MODE: () => COMMERCIAL_MODE,
+  INSTALL_OWNER_FILE: () => INSTALL_OWNER_FILE,
+  LID_MAP_FILE: () => LID_MAP_FILE,
+  LOG_DIR: () => LOG_DIR,
+  MAXY_DIR: () => MAXY_DIR,
+  REMOTE_PASSWORD_FILE: () => REMOTE_PASSWORD_FILE,
+  REMOTE_SESSION_SECRET_FILE: () => REMOTE_SESSION_SECRET_FILE,
+  RFB_PORT: () => RFB_PORT,
+  SHIPS_PREMIUM_BUNDLES: () => SHIPS_PREMIUM_BUNDLES,
+  TELEGRAM_ADMIN_WEBHOOK_SECRET_FILE: () => TELEGRAM_ADMIN_WEBHOOK_SECRET_FILE,
+  TELEGRAM_WEBHOOK_SECRET_FILE: () => TELEGRAM_WEBHOOK_SECRET_FILE,
+  USERS_AUDIT_LOG: () => USERS_AUDIT_LOG,
+  USERS_FILE: () => USERS_FILE,
+  VISITOR_TOKEN_SECRET_FILE: () => VISITOR_TOKEN_SECRET_FILE,
+  VNC_DISPLAY: () => VNC_DISPLAY,
+  VNC_DISPLAY_NUM: () => VNC_DISPLAY_NUM,
+  WEBSOCKIFY_PORT: () => WEBSOCKIFY_PORT
+});
 import { homedir } from "os";
 import { resolve, join } from "path";
 import { existsSync, readFileSync } from "fs";
-var configDirName = ".maxy";
-var commercialMode = false;
-var bundleMode = "none";
-var bundleAllowlist = [];
-var vncDisplayNum = 99;
-var rfbPortNum = 5900;
-var websockifyPortNum = 6080;
-var cdpPortNum = 9222;
-var portSource = "dev-default";
-var platformRoot = process.env.MAXY_PLATFORM_ROOT;
-if (platformRoot) {
-  const brandPath = join(platformRoot, "config", "brand.json");
-  if (existsSync(brandPath)) {
-    let brand;
-    try {
-      brand = JSON.parse(readFileSync(brandPath, "utf-8"));
-    } catch (err) {
-      const detail = (err instanceof Error ? err.message : String(err)).slice(0, 160);
-      console.error(`[paths] error reason=brand-config-missing path=${brandPath} detail="parse failed: ${detail.replace(/"/g, "'")}"`);
-      throw err;
-    }
-    if (typeof brand.configDir === "string") configDirName = brand.configDir;
-    if (brand.commercialMode === true) commercialMode = true;
-    if (brand.shipsPremiumBundles === true) {
-      bundleMode = "all";
-    } else if (Array.isArray(brand.shipsPremiumBundles)) {
-      const arr = brand.shipsPremiumBundles;
-      for (const entry of arr) {
-        if (typeof entry !== "string" || entry.length === 0) {
-          throw new Error(
-            `brand.json at ${brandPath} shipsPremiumBundles array contains invalid entry: ${JSON.stringify(entry)}`
-          );
+var configDirName, commercialMode, bundleMode, bundleAllowlist, vncDisplayNum, rfbPortNum, websockifyPortNum, cdpPortNum, portSource, platformRoot, MAXY_DIR, BRAND_NAME, COMMERCIAL_MODE, BUNDLE_MODE, BUNDLE_ALLOWLIST, SHIPS_PREMIUM_BUNDLES, VNC_DISPLAY_NUM, VNC_DISPLAY, RFB_PORT, WEBSOCKIFY_PORT, CDP_PORT, CHROMIUM_PROFILE_DIR, PLATFORM_ROOT, USERS_FILE, LID_MAP_FILE, LOG_DIR, USERS_AUDIT_LOG, BIN_DIR, REMOTE_PASSWORD_FILE, REMOTE_SESSION_SECRET_FILE, ADMIN_SESSION_SECRET_FILE, INSTALL_OWNER_FILE, TELEGRAM_WEBHOOK_SECRET_FILE, TELEGRAM_ADMIN_WEBHOOK_SECRET_FILE, VISITOR_TOKEN_SECRET_FILE, CLAUDE_CREDENTIALS_FILE;
+var init_paths = __esm({
+  "app/lib/paths.ts"() {
+    "use strict";
+    configDirName = ".maxy";
+    commercialMode = false;
+    bundleMode = "none";
+    bundleAllowlist = [];
+    vncDisplayNum = 99;
+    rfbPortNum = 5900;
+    websockifyPortNum = 6080;
+    cdpPortNum = 9222;
+    portSource = "dev-default";
+    platformRoot = process.env.MAXY_PLATFORM_ROOT;
+    if (platformRoot) {
+      const brandPath = join(platformRoot, "config", "brand.json");
+      if (existsSync(brandPath)) {
+        let brand;
+        try {
+          brand = JSON.parse(readFileSync(brandPath, "utf-8"));
+        } catch (err) {
+          const detail = (err instanceof Error ? err.message : String(err)).slice(0, 160);
+          console.error(`[paths] error reason=brand-config-missing path=${brandPath} detail="parse failed: ${detail.replace(/"/g, "'")}"`);
+          throw err;
         }
-      }
-      bundleMode = "allowlist";
-      bundleAllowlist = arr;
-    }
-    if (typeof brand.vncDisplay === "number") vncDisplayNum = brand.vncDisplay;
-    const brandLabel = configDirName.replace(/^\./, "");
-    const required = [
-      ["rfbPort", brand.rfbPort],
-      ["websockifyPort", brand.websockifyPort],
-      ["cdpPort", brand.cdpPort]
-    ];
-    for (const [field, value] of required) {
-      if (typeof value !== "number") {
-        const keys = Object.keys(brand).join(",");
-        console.error(`[paths] error reason=cdp-port-unresolved brand=${brandLabel} path=${brandPath} field=${field} json_keys=${keys}`);
-        throw new Error(`brand.json at ${brandPath} missing required field: ${field}`);
+        if (typeof brand.configDir === "string") configDirName = brand.configDir;
+        if (brand.commercialMode === true) commercialMode = true;
+        if (brand.shipsPremiumBundles === true) {
+          bundleMode = "all";
+        } else if (Array.isArray(brand.shipsPremiumBundles)) {
+          const arr = brand.shipsPremiumBundles;
+          for (const entry of arr) {
+            if (typeof entry !== "string" || entry.length === 0) {
+              throw new Error(
+                `brand.json at ${brandPath} shipsPremiumBundles array contains invalid entry: ${JSON.stringify(entry)}`
+              );
+            }
+          }
+          bundleMode = "allowlist";
+          bundleAllowlist = arr;
+        }
+        if (typeof brand.vncDisplay === "number") vncDisplayNum = brand.vncDisplay;
+        const brandLabel = configDirName.replace(/^\./, "");
+        const required = [
+          ["rfbPort", brand.rfbPort],
+          ["websockifyPort", brand.websockifyPort],
+          ["cdpPort", brand.cdpPort]
+        ];
+        for (const [field, value] of required) {
+          if (typeof value !== "number") {
+            const keys = Object.keys(brand).join(",");
+            console.error(`[paths] error reason=cdp-port-unresolved brand=${brandLabel} path=${brandPath} field=${field} json_keys=${keys}`);
+            throw new Error(`brand.json at ${brandPath} missing required field: ${field}`);
+          }
+        }
+        rfbPortNum = brand.rfbPort;
+        websockifyPortNum = brand.websockifyPort;
+        cdpPortNum = brand.cdpPort;
+        portSource = "brand.json";
       }
     }
-    rfbPortNum = brand.rfbPort;
-    websockifyPortNum = brand.websockifyPort;
-    cdpPortNum = brand.cdpPort;
-    portSource = "brand.json";
-  }
-}
-var MAXY_DIR = resolve(homedir(), configDirName);
-var BRAND_NAME = configDirName.replace(/^\./, "");
-var COMMERCIAL_MODE = commercialMode;
-var BUNDLE_MODE = bundleMode;
-var BUNDLE_ALLOWLIST = bundleAllowlist;
-var VNC_DISPLAY = `:${vncDisplayNum}`;
-var RFB_PORT = rfbPortNum;
-var WEBSOCKIFY_PORT = websockifyPortNum;
-var CDP_PORT = cdpPortNum;
-console.log(
-  `[paths] brand=${configDirName.replace(/^\./, "")} vncDisplay=${vncDisplayNum} rfbPort=${RFB_PORT} websockifyPort=${WEBSOCKIFY_PORT} cdpPort=${CDP_PORT} source=${portSource}`
-);
-var CHROMIUM_PROFILE_DIR = resolve(homedir(), configDirName, "chromium-profile");
-var PLATFORM_ROOT = process.env.MAXY_PLATFORM_ROOT ?? resolve(process.cwd(), "..");
-var USERS_FILE = resolve(MAXY_DIR, "users.json");
-var LID_MAP_FILE = resolve(MAXY_DIR, "whatsapp-lid-map.json");
-var LOG_DIR = resolve(MAXY_DIR, "logs");
-var USERS_AUDIT_LOG = resolve(LOG_DIR, "users-audit.log");
-var BIN_DIR = resolve(MAXY_DIR, "bin");
-var REMOTE_PASSWORD_FILE = resolve(MAXY_DIR, ".remote-password");
-var REMOTE_SESSION_SECRET_FILE = resolve(MAXY_DIR, "credentials", "remote-session-secret");
-var ADMIN_SESSION_SECRET_FILE = resolve(MAXY_DIR, "credentials", "admin-session-secret");
-var INSTALL_OWNER_FILE = resolve(MAXY_DIR, ".install-owner");
-var TELEGRAM_WEBHOOK_SECRET_FILE = resolve(MAXY_DIR, ".telegram-webhook-secret");
-var TELEGRAM_ADMIN_WEBHOOK_SECRET_FILE = resolve(MAXY_DIR, ".telegram-admin-webhook-secret");
-var VISITOR_TOKEN_SECRET_FILE = resolve(MAXY_DIR, "credentials", "visitor-token-secret");
-var CLAUDE_CREDENTIALS_FILE = resolve(MAXY_DIR, ".claude", ".credentials.json");
+    MAXY_DIR = resolve(homedir(), configDirName);
+    BRAND_NAME = configDirName.replace(/^\./, "");
+    COMMERCIAL_MODE = commercialMode;
+    BUNDLE_MODE = bundleMode;
+    BUNDLE_ALLOWLIST = bundleAllowlist;
+    SHIPS_PREMIUM_BUNDLES = bundleMode !== "none";
+    VNC_DISPLAY_NUM = vncDisplayNum;
+    VNC_DISPLAY = `:${vncDisplayNum}`;
+    RFB_PORT = rfbPortNum;
+    WEBSOCKIFY_PORT = websockifyPortNum;
+    CDP_PORT = cdpPortNum;
+    console.log(
+      `[paths] brand=${configDirName.replace(/^\./, "")} vncDisplay=${vncDisplayNum} rfbPort=${RFB_PORT} websockifyPort=${WEBSOCKIFY_PORT} cdpPort=${CDP_PORT} source=${portSource}`
+    );
+    CHROMIUM_PROFILE_DIR = resolve(homedir(), configDirName, "chromium-profile");
+    PLATFORM_ROOT = process.env.MAXY_PLATFORM_ROOT ?? resolve(process.cwd(), "..");
+    USERS_FILE = resolve(MAXY_DIR, "users.json");
+    LID_MAP_FILE = resolve(MAXY_DIR, "whatsapp-lid-map.json");
+    LOG_DIR = resolve(MAXY_DIR, "logs");
+    USERS_AUDIT_LOG = resolve(LOG_DIR, "users-audit.log");
+    BIN_DIR = resolve(MAXY_DIR, "bin");
+    REMOTE_PASSWORD_FILE = resolve(MAXY_DIR, ".remote-password");
+    REMOTE_SESSION_SECRET_FILE = resolve(MAXY_DIR, "credentials", "remote-session-secret");
+    ADMIN_SESSION_SECRET_FILE = resolve(MAXY_DIR, "credentials", "admin-session-secret");
+    INSTALL_OWNER_FILE = resolve(MAXY_DIR, ".install-owner");
+    TELEGRAM_WEBHOOK_SECRET_FILE = resolve(MAXY_DIR, ".telegram-webhook-secret");
+    TELEGRAM_ADMIN_WEBHOOK_SECRET_FILE = resolve(MAXY_DIR, ".telegram-admin-webhook-secret");
+    VISITOR_TOKEN_SECRET_FILE = resolve(MAXY_DIR, "credentials", "visitor-token-secret");
+    CLAUDE_CREDENTIALS_FILE = resolve(MAXY_DIR, ".claude", ".credentials.json");
+  }
+});
 
 // ../lib/agent-slug/src/index.ts
-var SYSTEM_PATH_SLUGS = ["public", "public-chat", "chat", "graph", "data", "browser"];
-var RESERVED_AGENT_SLUGS = [
-  "admin",
-  "api",
-  "assets",
-  "agent-assets",
-  "brand",
-  "bot",
-  "privacy"
-];
-var AGENT_SLUG_PATTERN = /^[a-z][a-z0-9-]{2,49}$/;
 function checkAgentSlug(slug) {
   if (!AGENT_SLUG_PATTERN.test(slug)) return { ok: false, reason: "shape" };
   if (RESERVED_AGENT_SLUGS.includes(slug)) return { ok: false, reason: "reserved" };
   if (SYSTEM_PATH_SLUGS.includes(slug)) return { ok: false, reason: "shadowed" };
   return { ok: true };
 }
-
-// app/lib/claude-agent/account.ts
-import { resolve as resolve2 } from "path";
-import { readFileSync as readFileSync3, readdirSync, existsSync as existsSync3, statSync } from "fs";
+var SYSTEM_PATH_SLUGS, RESERVED_AGENT_SLUGS, AGENT_SLUG_PATTERN;
+var init_src = __esm({
+  "../lib/agent-slug/src/index.ts"() {
+    "use strict";
+    SYSTEM_PATH_SLUGS = ["public", "public-chat", "chat", "graph", "data", "browser"];
+    RESERVED_AGENT_SLUGS = [
+      "admin",
+      "api",
+      "assets",
+      "agent-assets",
+      "brand",
+      "bot",
+      "privacy"
+    ];
+    AGENT_SLUG_PATTERN = /^[a-z][a-z0-9-]{2,49}$/;
+  }
+});
 
 // ../lib/brand-templating/src/index.ts
 import { join as join2 } from "path";
 import { existsSync as existsSync2, readFileSync as readFileSync2 } from "fs";
-var PLACEHOLDER = "{{productName}}";
-var cachedProductName = null;
 function brandJsonPath() {
   const platformRoot2 = process.env.MAXY_PLATFORM_ROOT;
   if (!platformRoot2) {
@@ -167,17 +207,61 @@ function substituteBrandPlaceholders(content, sourcePath) {
   );
   return substituted;
 }
+var PLACEHOLDER, cachedProductName;
+var init_src2 = __esm({
+  "../lib/brand-templating/src/index.ts"() {
+    "use strict";
+    PLACEHOLDER = "{{productName}}";
+    cachedProductName = null;
+  }
+});
+
+// ../lib/account-scope/src/index.ts
+function resolveEffectiveAccountCore(input, isValidAccountId2, notProvisionedReason = "cross-account-invalid-target") {
+  const { ownAccountId, houseScope, targetAccountId } = input;
+  if (!targetAccountId) return { accountId: ownAccountId };
+  if (!houseScope) return { reject: "cross-account-denied" };
+  if (!isValidAccountId2(targetAccountId)) return { reject: notProvisionedReason };
+  return { accountId: targetAccountId };
+}
+function readHouseAdminScope(env = process.env) {
+  return env.HOUSE_ADMIN_SCOPE ? env.HOUSE_ADMIN_SCOPE : null;
+}
+var init_src3 = __esm({
+  "../lib/account-scope/src/index.ts"() {
+    "use strict";
+  }
+});
 
 // app/lib/claude-agent/account.ts
-var PLATFORM_ROOT2 = process.env.MAXY_PLATFORM_ROOT ?? resolve2(process.cwd(), "..");
-var ACCOUNTS_DIR = resolve2(PLATFORM_ROOT2, "..", "data/accounts");
-if (!existsSync3(PLATFORM_ROOT2)) {
-  throw new Error(
-    `PLATFORM_ROOT does not exist: ${PLATFORM_ROOT2}
-Set the MAXY_PLATFORM_ROOT environment variable to the absolute path of the platform directory.`
-  );
+var account_exports = {};
+__export(account_exports, {
+  ACCOUNTS_DIR: () => ACCOUNTS_DIR,
+  DEFAULT_REQUIRE_REVIEW: () => DEFAULT_REQUIRE_REVIEW,
+  PLATFORM_ROOT: () => PLATFORM_ROOT2,
+  getDefaultAccountId: () => getDefaultAccountId,
+  hasStubAccountDir: () => hasStubAccountDir,
+  isActiveAgentSlug: () => isActiveAgentSlug,
+  isValidAccountId: () => isValidAccountId,
+  listValidAccounts: () => listValidAccounts,
+  readAgentFile: () => readAgentFile,
+  readHouseAdminScope: () => readHouseAdminScope,
+  readIdentity: () => readIdentity,
+  resolveAccount: () => resolveAccount,
+  resolveAgentConfig: () => resolveAgentConfig,
+  resolveApprovalPolicy: () => resolveApprovalPolicy,
+  resolveDefaultAgentSlug: () => resolveDefaultAgentSlug,
+  resolveEffectiveAccount: () => resolveEffectiveAccount,
+  validateAgentSlug: () => validateAgentSlug
+});
+import { resolve as resolve2 } from "path";
+import { readFileSync as readFileSync3, readdirSync, existsSync as existsSync3, statSync } from "fs";
+function resolveApprovalPolicy(toolName, accountConfig) {
+  if (accountConfig.approvalPolicy?.[toolName]) {
+    return accountConfig.approvalPolicy[toolName];
+  }
+  return DEFAULT_REQUIRE_REVIEW.includes(toolName) ? "require-review" : "auto-execute";
 }
-var _stubDirsLoggedThisBoot = /* @__PURE__ */ new Set();
 function listValidAccounts() {
   if (!existsSync3(ACCOUNTS_DIR)) return [];
   const out = [];
@@ -212,6 +296,21 @@ function listValidAccounts() {
 function isValidAccountId(id) {
   return listValidAccounts().some((a) => a.accountId === id);
 }
+function resolveEffectiveAccount(input, deps = {}) {
+  return resolveEffectiveAccountCore(input, deps.isValidAccountId ?? isValidAccountId);
+}
+function hasStubAccountDir() {
+  if (!existsSync3(ACCOUNTS_DIR)) return { stub: false, dirs: [] };
+  const stubs = [];
+  const entries2 = readdirSync(ACCOUNTS_DIR, { withFileTypes: true });
+  for (const entry of entries2) {
+    if (!entry.isDirectory()) continue;
+    if (entry.name.startsWith(".")) continue;
+    const configPath = resolve2(ACCOUNTS_DIR, entry.name, "account.json");
+    if (!existsSync3(configPath)) stubs.push(entry.name);
+  }
+  return { stub: stubs.length > 0, dirs: stubs };
+}
 function resolveAccount() {
   if (!existsSync3(ACCOUNTS_DIR)) return null;
   let usersJsonUserId = null;
@@ -278,6 +377,9 @@ function readAgentFile(accountDir, agentName, filename) {
   }
   return raw;
 }
+function readIdentity(accountDir, agentName) {
+  return readAgentFile(accountDir, agentName, "IDENTITY.md");
+}
 function validateAgentSlug(slug) {
   const verdict = checkAgentSlug(slug);
   if (verdict.ok) return true;
@@ -402,20 +504,36 @@ function isActiveAgentSlug(accountDir, slug) {
 function getDefaultAccountId() {
   return resolveAccount()?.accountId ?? null;
 }
+var PLATFORM_ROOT2, ACCOUNTS_DIR, DEFAULT_REQUIRE_REVIEW, _stubDirsLoggedThisBoot;
+var init_account = __esm({
+  "app/lib/claude-agent/account.ts"() {
+    "use strict";
+    init_src2();
+    init_src3();
+    init_paths();
+    init_src();
+    PLATFORM_ROOT2 = process.env.MAXY_PLATFORM_ROOT ?? resolve2(process.cwd(), "..");
+    ACCOUNTS_DIR = resolve2(PLATFORM_ROOT2, "..", "data/accounts");
+    if (!existsSync3(PLATFORM_ROOT2)) {
+      throw new Error(
+        `PLATFORM_ROOT does not exist: ${PLATFORM_ROOT2}
+Set the MAXY_PLATFORM_ROOT environment variable to the absolute path of the platform directory.`
+      );
+    }
+    DEFAULT_REQUIRE_REVIEW = [
+      "email-send",
+      "email-reply",
+      "message",
+      // telegram
+      "contact-erase"
+      // GDPR — only gates confirm:true calls (hook handles this)
+    ];
+    _stubDirsLoggedThisBoot = /* @__PURE__ */ new Set();
+  }
+});
 
 // server/loop-registry.ts
 import { readFileSync as readFileSync4 } from "fs";
-var TAG = "[loop-registry]";
-var STALL_INTERVALS = 3;
-var entries = /* @__PURE__ */ new Map();
-var defaultCpuIo = {
-  ownCpuUs: () => {
-    const u = process.cpuUsage();
-    return u.user + u.system;
-  },
-  childCpuUs: (pid) => readPidCpuUs(pid)
-};
-var cpuIo = defaultCpuIo;
 function parsePidStatCpuUs(raw) {
   const close = raw.lastIndexOf(")");
   if (close === -1) return null;
@@ -460,7 +578,6 @@ function sampleCpu(nowMs = Date.now()) {
     e.prior = { cpuUs: totalUs, atMs: nowMs };
   }
 }
-var processPrior = null;
 function sampleProcessCpu(nowMs = Date.now()) {
   const cpuUs = cpuIo.ownCpuUs();
   let processPct = null;
@@ -626,14 +743,30 @@ function listLoops(nowMs = Date.now()) {
 function armedCount() {
   return entries.size;
 }
+var TAG, STALL_INTERVALS, entries, defaultCpuIo, cpuIo, processPrior;
+var init_loop_registry = __esm({
+  "server/loop-registry.ts"() {
+    "use strict";
+    TAG = "[loop-registry]";
+    STALL_INTERVALS = 3;
+    entries = /* @__PURE__ */ new Map();
+    defaultCpuIo = {
+      ownCpuUs: () => {
+        const u = process.cpuUsage();
+        return u.user + u.system;
+      },
+      childCpuUs: (pid) => readPidCpuUs(pid)
+    };
+    cpuIo = defaultCpuIo;
+    processPrior = null;
+  }
+});
 
 // app/lib/neo4j-store.ts
 import neo4j from "neo4j-driver";
 import { randomUUID } from "crypto";
 import { readFileSync as readFileSync5, readdirSync as readdirSync2, existsSync as existsSync4, openSync, readSync, closeSync, statSync as statSync2 } from "fs";
 import { resolve as resolve3 } from "path";
-var PLATFORM_ROOT3 = process.env.MAXY_PLATFORM_ROOT ?? resolve3(process.cwd(), "..");
-var driver = null;
 function readPassword() {
   if (process.env.NEO4J_PASSWORD) return process.env.NEO4J_PASSWORD;
   const passwordFile = resolve3(PLATFORM_ROOT3, "config/.neo4j-password");
@@ -666,43 +799,19 @@ function getSession() {
   return getDriver().session();
 }
 async function runAdminUserSelfHeal(args) {
-  const { selfHealAdminUser } = await import("./adminuser-self-heal-ZHFNDKJK.js");
+  const { selfHealAdminUser } = await import("./adminuser-self-heal-Y4U3UNKF.js");
   return selfHealAdminUser({ driver: getDriver(), ...args });
 }
 async function runUserProfileReconcile() {
-  const { reconcileUserProfiles } = await import("./userprofile-reconcile-TL4JKBPG.js");
+  const { reconcileUserProfiles } = await import("./userprofile-reconcile-PUA657YX.js");
   return reconcileUserProfiles({ driver: getDriver() });
 }
-process.on("SIGINT", async () => {
-  if (driver) {
-    await driver.close();
-    driver = null;
-  }
-});
-var OLLAMA_URL = process.env.OLLAMA_URL ?? "http://localhost:11434";
-var EMBED_MODEL = process.env.EMBED_MODEL ?? "nomic-embed-text";
 function envInt(name, def) {
   const raw = process.env[name];
   if (raw === void 0 || raw === "") return def;
   const n = Number(raw);
   return Number.isFinite(n) ? n : def;
 }
-var EMBED_MODEL_CONTEXT_TOKENS = Math.max(1, Math.floor(envInt("EMBED_MODEL_CONTEXT_TOKENS", 2048)));
-var EMBED_CONTEXT_MARGIN_TOKENS = 48;
-var EMBED_WORST_CASE_CHARS_PER_TOKEN = 2;
-var EMBED_INPUT_MAX_CHARS = Math.max(
-  1,
-  Math.floor(
-    envInt(
-      "EMBED_INPUT_MAX_CHARS",
-      (EMBED_MODEL_CONTEXT_TOKENS - EMBED_CONTEXT_MARGIN_TOKENS) * EMBED_WORST_CASE_CHARS_PER_TOKEN
-    )
-  )
-);
-var EMBED_KEEP_ALIVE_RAW = process.env.EMBED_KEEP_ALIVE === void 0 || process.env.EMBED_KEEP_ALIVE === "" ? "-1" : process.env.EMBED_KEEP_ALIVE;
-var EMBED_KEEP_ALIVE = /^-?\d+$/.test(EMBED_KEEP_ALIVE_RAW) ? Number(EMBED_KEEP_ALIVE_RAW) : EMBED_KEEP_ALIVE_RAW;
-var EMBED_INTERACTIVE_TIMEOUT_MS = 5e3;
-var EMBED_PRELOAD_TIMEOUT_MS = 6e4;
 async function embed(text, timeoutMs = EMBED_INTERACTIVE_TIMEOUT_MS) {
   const input = text.length > EMBED_INPUT_MAX_CHARS ? text.slice(0, EMBED_INPUT_MAX_CHARS) : text;
   const startedAt = Date.now();
@@ -762,7 +871,6 @@ async function embedForWrite(text) {
     return [];
   }
 }
-var sessionStoreRef = null;
 function getCachedSessionId(cacheKey) {
   return sessionStoreRef?.get(cacheKey)?.sessionId;
 }
@@ -772,7 +880,6 @@ function cacheSessionId(cacheKey, sessionId) {
     session.sessionId = sessionId;
   }
 }
-var GREETING_DIRECTIVE = "[New session. Greet the visitor.]";
 async function ensureConversation(accountId, agentType, cacheKey, visitorId, agentSlug, userId, channelOverride, channelAddressOverride) {
   const cached = getCachedSessionId(cacheKey);
   if (cached) return { sessionId: cached, created: false };
@@ -951,7 +1058,6 @@ async function createNewAdminConversation(userId, accountId, cacheKey, preMinted
     await session.close();
   }
 }
-var HEX_COLOR_RE = /^#[0-9a-fA-F]{3,8}$/;
 async function fetchBranding(accountId) {
   const session = getSession();
   try {
@@ -1018,8 +1124,6 @@ async function fetchAccountName(accountId) {
     await session.close();
   }
 }
-var SUMMARY_MAX_LEN = 200;
-var persistMessageLocks = /* @__PURE__ */ new Map();
 async function persistMessage(sessionId, role, content, accountId, tokens, createdAt, sender, components, attachments) {
   if (!content) return null;
   const messageId = randomUUID();
@@ -1487,10 +1591,6 @@ async function renameConversation(sessionId, label) {
     await session.close();
   }
 }
-var DECAY_THRESHOLD_DAYS = 14;
-var DECAY_RATE_PER_DAY = 0.05;
-var INJECTION_THRESHOLD = 0.4;
-var MAX_SUMMARY_PREFERENCES = 30;
 async function getUserTimezone(accountId, userId) {
   const session = getSession();
   try {
@@ -1666,60 +1766,6 @@ async function writeAdminUserAndPerson(params) {
     await session.close();
   }
 }
-var PROFILE_CATEGORIES = [
-  "communication",
-  "scheduling",
-  "decision",
-  "workflow",
-  "content",
-  "interaction"
-];
-var PROFILE_FIELD_TEMPLATES = {
-  communication: [
-    "preferredChannel",
-    "quietHours",
-    "responseLatencyExpectation",
-    "formalityLevel",
-    "escalationPath"
-  ],
-  scheduling: [
-    "workdayStartTime",
-    "workdayEndTime",
-    "weekendAvailability",
-    "meetingBlockPreference",
-    "focusBlockTiming"
-  ],
-  decision: [
-    "riskTolerance",
-    "autonomyBoundary",
-    "evidenceThreshold",
-    "reversibilityPreference",
-    "stakeholderConsultation"
-  ],
-  workflow: [
-    "batchingPreference",
-    "taskGranularity",
-    "deepWorkBlocks",
-    "statusUpdateCadence",
-    "toolingChoices"
-  ],
-  content: [
-    "outputFormat",
-    "lengthPreference",
-    "citationStyle",
-    "tonality"
-  ],
-  interaction: [
-    "addressForm",
-    "humourTolerance",
-    "directnessLevel",
-    "emotionalRegisterPreference"
-  ]
-};
-var TOTAL_PROFILE_FIELDS = Object.values(PROFILE_FIELD_TEMPLATES).reduce(
-  (n, fs) => n + fs.length,
-  0
-);
 function computeAbsentFields(preferences, extraTemplates = {}) {
   const covered = /* @__PURE__ */ new Set();
   for (const pref of preferences) {
@@ -1800,7 +1846,6 @@ function loadEnabledPluginProfileKeys(accountId) {
   for (const [cat, set] of Object.entries(merged)) out[cat] = [...set];
   return out;
 }
-var sparseStateLogged = /* @__PURE__ */ new Set();
 async function loadUserProfile(accountId, userId, sessionId) {
   console.error(
     `[profile] loadUserProfile entry accountId=${accountId.slice(0, 8)}\u2026 userId=${userId} sessionId=${sessionId ? `${sessionId.slice(0, 8)}\u2026` : "<none>"}`
@@ -1994,19 +2039,6 @@ function composeOperatorSummary(profile, preferences) {
   }
   return facts.length > 0 ? facts.join("; ") : "NOTHING";
 }
-var RECENT_FAILURES_TAIL_BYTES = 10 * 1024;
-var AGENT_FILE_ROLES = [
-  { filename: "IDENTITY.md", role: "identity" },
-  { filename: "SOUL.md", role: "soul" },
-  { filename: "KNOWLEDGE.md", role: "knowledge" },
-  { filename: "KNOWLEDGE-SUMMARY.md", role: "knowledge-summary" }
-];
-var ROLE_TO_EDGE = {
-  identity: "HAS_IDENTITY",
-  soul: "HAS_SOUL",
-  knowledge: "HAS_KNOWLEDGE",
-  "knowledge-summary": "HAS_KNOWLEDGE"
-};
 function assertSafeAgentSlug(slug) {
   if (!slug || slug.includes("/") || slug.includes("\\") || slug.includes("..")) {
     throw new Error(`[agent-graph] refusing unsafe slug=${JSON.stringify(slug)}`);
@@ -2162,6 +2194,115 @@ async function deleteAgentProjection(accountId, slug) {
     await session.close();
   }
 }
+var PLATFORM_ROOT3, driver, OLLAMA_URL, EMBED_MODEL, EMBED_MODEL_CONTEXT_TOKENS, EMBED_CONTEXT_MARGIN_TOKENS, EMBED_WORST_CASE_CHARS_PER_TOKEN, EMBED_INPUT_MAX_CHARS, EMBED_KEEP_ALIVE_RAW, EMBED_KEEP_ALIVE, EMBED_INTERACTIVE_TIMEOUT_MS, EMBED_PRELOAD_TIMEOUT_MS, sessionStoreRef, GREETING_DIRECTIVE, HEX_COLOR_RE, SUMMARY_MAX_LEN, persistMessageLocks, DECAY_THRESHOLD_DAYS, DECAY_RATE_PER_DAY, INJECTION_THRESHOLD, MAX_SUMMARY_PREFERENCES, PROFILE_CATEGORIES, PROFILE_FIELD_TEMPLATES, TOTAL_PROFILE_FIELDS, sparseStateLogged, RECENT_FAILURES_TAIL_BYTES, AGENT_FILE_ROLES, ROLE_TO_EDGE;
+var init_neo4j_store = __esm({
+  "app/lib/neo4j-store.ts"() {
+    "use strict";
+    PLATFORM_ROOT3 = process.env.MAXY_PLATFORM_ROOT ?? resolve3(process.cwd(), "..");
+    driver = null;
+    process.on("SIGINT", async () => {
+      if (driver) {
+        await driver.close();
+        driver = null;
+      }
+    });
+    OLLAMA_URL = process.env.OLLAMA_URL ?? "http://localhost:11434";
+    EMBED_MODEL = process.env.EMBED_MODEL ?? "nomic-embed-text";
+    EMBED_MODEL_CONTEXT_TOKENS = Math.max(1, Math.floor(envInt("EMBED_MODEL_CONTEXT_TOKENS", 2048)));
+    EMBED_CONTEXT_MARGIN_TOKENS = 48;
+    EMBED_WORST_CASE_CHARS_PER_TOKEN = 2;
+    EMBED_INPUT_MAX_CHARS = Math.max(
+      1,
+      Math.floor(
+        envInt(
+          "EMBED_INPUT_MAX_CHARS",
+          (EMBED_MODEL_CONTEXT_TOKENS - EMBED_CONTEXT_MARGIN_TOKENS) * EMBED_WORST_CASE_CHARS_PER_TOKEN
+        )
+      )
+    );
+    EMBED_KEEP_ALIVE_RAW = process.env.EMBED_KEEP_ALIVE === void 0 || process.env.EMBED_KEEP_ALIVE === "" ? "-1" : process.env.EMBED_KEEP_ALIVE;
+    EMBED_KEEP_ALIVE = /^-?\d+$/.test(EMBED_KEEP_ALIVE_RAW) ? Number(EMBED_KEEP_ALIVE_RAW) : EMBED_KEEP_ALIVE_RAW;
+    EMBED_INTERACTIVE_TIMEOUT_MS = 5e3;
+    EMBED_PRELOAD_TIMEOUT_MS = 6e4;
+    sessionStoreRef = null;
+    GREETING_DIRECTIVE = "[New session. Greet the visitor.]";
+    HEX_COLOR_RE = /^#[0-9a-fA-F]{3,8}$/;
+    SUMMARY_MAX_LEN = 200;
+    persistMessageLocks = /* @__PURE__ */ new Map();
+    DECAY_THRESHOLD_DAYS = 14;
+    DECAY_RATE_PER_DAY = 0.05;
+    INJECTION_THRESHOLD = 0.4;
+    MAX_SUMMARY_PREFERENCES = 30;
+    PROFILE_CATEGORIES = [
+      "communication",
+      "scheduling",
+      "decision",
+      "workflow",
+      "content",
+      "interaction"
+    ];
+    PROFILE_FIELD_TEMPLATES = {
+      communication: [
+        "preferredChannel",
+        "quietHours",
+        "responseLatencyExpectation",
+        "formalityLevel",
+        "escalationPath"
+      ],
+      scheduling: [
+        "workdayStartTime",
+        "workdayEndTime",
+        "weekendAvailability",
+        "meetingBlockPreference",
+        "focusBlockTiming"
+      ],
+      decision: [
+        "riskTolerance",
+        "autonomyBoundary",
+        "evidenceThreshold",
+        "reversibilityPreference",
+        "stakeholderConsultation"
+      ],
+      workflow: [
+        "batchingPreference",
+        "taskGranularity",
+        "deepWorkBlocks",
+        "statusUpdateCadence",
+        "toolingChoices"
+      ],
+      content: [
+        "outputFormat",
+        "lengthPreference",
+        "citationStyle",
+        "tonality"
+      ],
+      interaction: [
+        "addressForm",
+        "humourTolerance",
+        "directnessLevel",
+        "emotionalRegisterPreference"
+      ]
+    };
+    TOTAL_PROFILE_FIELDS = Object.values(PROFILE_FIELD_TEMPLATES).reduce(
+      (n, fs) => n + fs.length,
+      0
+    );
+    sparseStateLogged = /* @__PURE__ */ new Set();
+    RECENT_FAILURES_TAIL_BYTES = 10 * 1024;
+    AGENT_FILE_ROLES = [
+      { filename: "IDENTITY.md", role: "identity" },
+      { filename: "SOUL.md", role: "soul" },
+      { filename: "KNOWLEDGE.md", role: "knowledge" },
+      { filename: "KNOWLEDGE-SUMMARY.md", role: "knowledge-summary" }
+    ];
+    ROLE_TO_EDGE = {
+      identity: "HAS_IDENTITY",
+      soul: "HAS_SOUL",
+      knowledge: "HAS_KNOWLEDGE",
+      "knowledge-summary": "HAS_KNOWLEDGE"
+    };
+  }
+});
 
 export {
   MAXY_DIR,
@@ -2183,8 +2324,11 @@ export {
   INSTALL_OWNER_FILE,
   VISITOR_TOKEN_SECRET_FILE,
   CLAUDE_CREDENTIALS_FILE,
+  paths_exports,
+  init_paths,
   SYSTEM_PATH_SLUGS,
   AGENT_SLUG_PATTERN,
+  init_src,
   PLATFORM_ROOT2 as PLATFORM_ROOT,
   ACCOUNTS_DIR,
   listValidAccounts,
@@ -2196,11 +2340,14 @@ export {
   resolveAgentConfig,
   isActiveAgentSlug,
   getDefaultAccountId,
+  account_exports,
+  init_account,
   sampleCpu,
   sampleProcessCpu,
   registerLoop,
   listLoops,
   armedCount,
+  init_loop_registry,
   getSession,
   runAdminUserSelfHeal,
   runUserProfileReconcile,
@@ -2231,5 +2378,6 @@ export {
   writeAdminUserAndPerson,
   loadUserProfile,
   projectAgent,
-  deleteAgentProjection
+  deleteAgentProjection,
+  init_neo4j_store
 };