@rubytech/create-maxy-code 0.1.572 → 0.1.574

package/payload/platform/plugins/admin/hooks/quote-render-pdf-conformance.sh

@@ -4,20 +4,37 @@
 # The companion to the PreToolUse quote-render-gate: that gate checks the
 # rendered HTML on the deterministic path (via the render receipt) before the
 # PDF is printed; the HTML the tool gated cannot yet be a PDF at PreToolUse, so
-# the two PDF-only conformance checks run here, once the PDF exists.
+# the PDF-only conformance checks run here, once the PDF exists.
 #
-# For a gated client-quote PDF (memory/users/<phone>/documents/quote-<jobId>.pdf
-# or ...-breakdown.pdf) whose render receipt names the source HTML, it asserts:
-#   1. the PDF's /URI annotation count >= the source HTML's absolute-link count
+# PAGE CHROME — receipt-free and path-agnostic, so it also covers template-seeded
+# documents (budget estimates, valuations, works orders) that never pass through
+# the quote renderer. Each check gates only a document that DECLARES the thing it
+# checks, so a brochure is never touched:
+#   1. a running header on every physical page, when the source declares a text
+#      margin box. Chrome decides pagination at print time, so a header placed
+#      next to a hand-declared page break misses every bleed page.
+#   2. that header's image no wider than a third of the page, when the source
+#      declares an image margin box. Chromium paints a margin box's content:url()
+#      at intrinsic pixel size and does NOT scale it to the declared box.
+# Both are offline, and both report before either exits, so one print surfaces
+# both faults rather than the second appearing only after the first is reprinted.
+#
+# LINKS — for a gated client-quote PDF (memory/users/<phone>/documents/
+# quote-<jobId>.pdf or ...-breakdown.pdf) whose render receipt names the source:
+#   3. the PDF's /URI annotation count >= the source HTML's absolute-link count
 #      (a print that dropped links — a rasterised or flattened copy — carries
 #      fewer /URI than the HTML had anchors);
-#   2. every embedded https:// anchor in the source HTML answers 200 (a pending
+#   4. every embedded https:// anchor in the source HTML answers 200 (a pending
 #      redeploy that would 404 the Sign-Online link is caught before the PDF is
 #      sent).
 # The /URI-count check is offline and runs first; the network fetch runs only
 # when the count check passes, so a link-loss regression never depends on the
 # network being up.
 #
+# Every path that inspects nothing emits `op=skip reason=…`: a silent return is
+# indistinguishable from a gate that never ran, which is the state an account
+# with a stale PostToolUse matcher is actually in.
+#
 # Exit codes: 0 = allow, 2 = block (stderr shown to the agent). Fail OPEN on any
 # uninspectable call (tty / empty stdin / no python3 / no receipt / PDF not
 # written): the no-receipt case is already the PreToolUse gate's to block, and
@@ -184,16 +201,73 @@ for p in range(first, pages + 1):
         missing.append(p)
 
 checked = pages - first + 1
+print("LOG|op=pdf-header-conformance file=%s pages=%d pagesChecked=%d pagesHeaderless=%d"
+      % (base, pages, checked, len(missing)))
 if missing:
-    print("LOG|op=pdf-header-conformance file=%s pages=%d pagesChecked=%d pagesHeaderless=%d"
-          % (base, pages, checked, len(missing)))
-    out("HBLOCK|%s|pagesHeaderless=%d pages=%s"
-        % (base, len(missing), ",".join(str(x) for x in missing)))
-out("LOG|op=pdf-header-conformance file=%s pages=%d pagesChecked=%d pagesHeaderless=0"
-    % (base, pages, checked))
+    print("HBLOCK|%s|pagesHeaderless=%d pages=%s"
+          % (base, len(missing), ",".join(str(x) for x in missing)))
+
+# --- running-image geometry -------------------------------------------------
+# Chromium paints a page-margin box's content:url() at INTRINSIC pixel size (one
+# image px to one CSS px at 96 px/in) and does NOT scale it to the box's declared
+# width/height, so a full-resolution logo covers most of the page on every page
+# the box paints. Measured 2026-08-05 on a real print: a 700x252 asset in a
+# declared 34mm box rendered 525.0 pt wide on a 594.96 pt A4 page, 88%.
+#
+# The assertion is scoped to the RUNNING image — the object present on every
+# checked page, which is what a running header is by construction — never to
+# every image. A content photo legitimately runs wider: measured across three
+# real quotes, running headers occupy 9.0% to 18.9% of page width while
+# single-page content photos occupy 38.7% to 77.2%, so a whole-page threshold
+# blocks legitimate documents while the recurrence-scoped one separates the
+# correct case from the defect by more than four to one.
+#
+# This runs after the header verdict rather than instead of it, so one print
+# reports a headerless page AND an oversized logo together. Both are offline, so
+# the file's offline-before-network ordering still holds.
+if re.search(r'@top-(?:left|center|right)\s*\{[^}]*?content\s*:\s*url\(', doc, re.S) and checked >= 2:
+    try:
+        listing = subprocess.run(["pdfimages", "-list", pdf],
+                                 capture_output=True, text=True, timeout=30).stdout
+    except Exception:
+        listing = ""
+    if not listing:
+        out("LOG|op=pdf-image-geometry file=%s pagesChecked=0 reason=no-poppler" % base)
+    # Columns, zero-based: 0 page, 3 width, 10 object, 12 x-ppi. A row whose
+    # object or ppi is not numeric (an inline image) is skipped rather than
+    # guessed at.
+    per = {}
+    for row in listing.splitlines()[2:]:
+        f = row.split()
+        if len(f) < 13:
+            continue
+        try:
+            pg, wpx, obj, ppi = int(f[0]), int(f[3]), f[10], float(f[12])
+        except ValueError:
+            continue
+        if pg < first or pg > pages or ppi <= 0:
+            continue
+        seen = per.setdefault(obj, {})
+        seen[pg] = max(seen.get(pg, 0.0), wpx / ppi * 72.0)
+    limit = pw / 3.0
+    running = {o: max(v.values()) for o, v in per.items() if len(v) == checked}
+    widest = max(running.values()) if running else 0.0
+    over = sorted(w for w in running.values() if w > limit)
+    # Logged whether or not it fails: this is the line that decides the verdict.
+    print("LOG|op=pdf-image-geometry file=%s pagesChecked=%d runningImages=%d "
+          "widestPt=%.1f fracPage=%.1f%% limitPt=%.1f"
+          % (base, checked, len(running), widest, widest / pw * 100.0, limit))
+    if over:
+        print("GBLOCK|%s|widestPt=%.1f fracPage=%.1f%% limitPt=%.1f"
+              % (base, over[-1], over[-1] / pw * 100.0, limit))
+sys.exit(0)
 PY
 )
 
+# Both page-chrome faults are collected before exiting, so a document with a
+# headerless page AND an oversized running logo reports both on one print rather
+# than surfacing the second only after the first is fixed and reprinted.
+BLOCKED=0
 while IFS= read -r hline; do
   case "$hline" in
     LOG\|*) emit_log "${hline#LOG|}" ;;
@@ -203,32 +277,49 @@ while IFS= read -r hline; do
       hdetail=${hrest#*|}
       emit_log "op=bypass file=$hfile reason=pdf-header-conformance detail=$hdetail"
       echo "Blocked: this printed document has physical pages carrying no running header, so it would go out with unbranded pages ($hdetail). The header must be a property of the page itself, a page margin box, not a header block placed next to a declared page break, because the browser decides the real page boundaries at print time. Fix the document's print CSS, print it again, and check every page." >&2
-      exit 2
+      BLOCKED=1
+      ;;
+    GBLOCK\|*)
+      grest=${hline#GBLOCK|}
+      gfile=${grest%%|*}
+      gdetail=${grest#*|}
+      emit_log "op=bypass file=$gfile reason=pdf-header-image-geometry detail=$gdetail"
+      echo "Blocked: the running header image on this printed document covers most of the page width ($gdetail). An image used as a page margin box's content is painted at its own pixel size and is not scaled down to the box you declared, so the image file itself has to be made the size the box expects. Shrink the asset, rebuild the document, print it again, and check a page after the first." >&2
+      BLOCKED=1
       ;;
   esac
 done <<< "$HRESULT"
+[ "$BLOCKED" -eq 1 ] && exit 2
 
 RESULT=$(INPUT="$INPUT" BASE="$PWD" python3 - <<'PY' 2>/dev/null || true
 import os, json, re, sys, urllib.request
 
+# Every return that inspects nothing names its reason. A silent return is
+# indistinguishable from a gate that never ran at all, which is the state a
+# stale PostToolUse matcher leaves an account in; fail-open behaviour itself is
+# unchanged, only its visibility.
+def skip(reason):
+    print("SKIP|%s" % reason)
+    sys.exit(0)
+
 try:
     d = json.loads(os.environ["INPUT"])
 except Exception:
-    sys.exit(0)  # uninspectable envelope -> fail open
+    skip("bad-envelope")
 
 tool = d.get("tool_name", "") or ""
 if not tool.endswith("browser-pdf-save"):
-    sys.exit(0)
+    skip("not-browser-tool")
 path = (d.get("tool_input", {}) or {}).get("path", "") or ""
 if not path:
-    sys.exit(0)
+    skip("no-path")
 norm = os.path.normpath(path)
 m = re.search(r'(?:^|/)memory/users/[^/]+/documents/quote-(.+?)(-breakdown)?\.pdf$', norm)
 if not m:
-    sys.exit(0)  # not a gated client-quote artefact
+    skip("not-gated")  # not a gated client-quote artefact
 jobid = m.group(1)
 if "/" in jobid or ".." in jobid:
-    sys.exit(0)  # the PreToolUse gate owns bad-jobid; here fail open
+    skip("bad-jobid")  # the PreToolUse gate owns bad-jobid; here fail open
 variant = m.group(2)  # "-breakdown" or None
 
 base = os.environ["BASE"]
@@ -236,12 +327,12 @@ receipt_path = os.path.join(base, "quoting", "jobs", jobid, "render-receipt.json
 try:
     receipt = json.load(open(receipt_path))
 except Exception:
-    sys.exit(0)  # no receipt -> PreToolUse gate already blocks; fail open
+    skip("no-receipt")  # PreToolUse gate already blocks that; fail open here
 
 filed = receipt.get("filed", {}) or {}
 html_path = filed.get("breakdown" if variant else "quote", "")
 if not html_path or not os.path.isfile(html_path) or not os.path.isfile(path):
-    sys.exit(0)  # nothing to compare against -> fail open
+    skip("no-source")  # nothing to compare against -> fail open
 
 html = open(html_path, encoding="utf-8", errors="replace").read()
 # Anchors that become a /URI annotation in the printed PDF: absolute http(s) or
@@ -274,6 +365,7 @@ PY
 )
 
 case "$RESULT" in
+  SKIP\|*) emit_log "op=skip reason=${RESULT#SKIP|}" ;;
   BLOCK\|*)
     rest=${RESULT#BLOCK|}
     jobid=${rest%%|*}

package/payload/platform/plugins/admin/hooks/specialist-dispatch-gate.sh

@@ -0,0 +1,159 @@
+#!/usr/bin/env bash
+# specialist-dispatch-gate — PreToolUse gate on every tool.
+#
+# An account's own specialists own their tools. This gate refuses the main
+# conversation a tool one of the account's authored cards declares, and names the
+# specialist to dispatch instead. It exists because skipped delegation writes no
+# record: an inline draft logs an ordinary success, so nothing in any log
+# separates "the clerk did it" from "the admin did it by hand". On one account
+# four authored clerks owned email, works orders, invoices and quotes while the
+# admin produced all of them inline for three days.
+#
+# Two narrowings, both load-bearing.
+#
+# Card axis — the account's OWN cards only. Provisioning copies every shipped
+# template into each account, and one of them declares roughly 130 tools
+# including the whole email, WhatsApp, calendar and browser surfaces, so reading
+# every card would refuse the admin nearly its entire seat. A card is the
+# account's own when its filename appears in none of the shipped roots. The
+# account's own plugin root is deliberately NOT one of those: a card filed there
+# is that account's durable copy, not something we ship.
+#
+# Tool axis — native tools are never gated. Every card declares some of Bash,
+# Read, Write and Edit, and refusing those would brick the seat. The NATIVE set
+# below mirrors CC_NATIVE_TOOLS in the session manager, which a bash hook cannot
+# import; the gate's own test compares the two sets rather than trusting them to
+# stay equal.
+#
+# Caller identity is `agent_type` from the hook envelope, which Claude Code sets
+# when a hook fires inside a subagent. A non-empty value exits 0 unconditionally:
+# this gate must never filter a subagent's tool surface, which is the failure an
+# inherited CLI deny produced when it stripped the writers from a specialist's
+# own frontmatter. The MAXY_SPECIALIST env is not usable — it is stamped only for
+# a specialist spawned as its own PTY process, and native Agent-tool subagents
+# inherit the admin process env.
+#
+# Exit codes: 0 = allow, 2 = block (stderr shown to the agent). Fail OPEN on an
+# uninspectable envelope, and say so with op=degraded when the card set cannot be
+# read: failing open is fine, failing open silently is the fault. No task numbers
+# or internal refs in any operator-visible string.
+
+set -uo pipefail
+
+# No envelope (tty or empty stdin) → allow: cannot inspect, must not brick tools.
+if [ -t 0 ]; then exit 0; fi
+INPUT=$(cat)
+[ -z "$INPUT" ] && exit 0
+
+# Prints nothing for an out-of-scope call, "block <specialist>" for a refusal, or
+# "degraded <reason>" when the card set could not be read.
+DECISION=$(INPUT="$INPUT" python3 - <<'PY' 2>/dev/null || true
+import os, json, re, sys, glob
+
+# Mirrors CC_NATIVE_TOOLS (claude-session-manager/src/specialist-drift.ts). A
+# card that declares these declares them for its own use; they are the admin's
+# too, and gating them would refuse the seat its own disk and shell.
+NATIVE = {
+    "Read", "Write", "Edit", "MultiEdit", "Glob", "Grep", "LS", "Bash",
+    "BashOutput", "KillShell", "Skill", "WebSearch", "WebFetch", "Task",
+    "TodoWrite", "NotebookEdit", "NotebookRead", "AskUserQuestion",
+}
+
+try:
+    d = json.loads(os.environ["INPUT"])
+except Exception:
+    sys.exit(0)
+
+tool = (d.get("tool_name", "") or "").strip()
+if not tool or tool in NATIVE:
+    sys.exit(0)
+
+# A subagent is never filtered. This is the whole reason the gate can be broad:
+# it constrains one seat, not a tool surface.
+if (d.get("agent_type") or "").strip():
+    sys.exit(0)
+
+agents_dir = os.path.join(os.getcwd(), "specialists", "agents")
+platform_root = os.environ.get("PLATFORM_ROOT", "")
+
+shipped = set()
+try:
+    if platform_root:
+        for f in glob.glob(os.path.join(platform_root, "templates", "specialists", "agents", "*.md")):
+            shipped.add(os.path.basename(f))
+        for f in glob.glob(os.path.join(platform_root, "plugins", "*", "agents", "*.md")):
+            shipped.add(os.path.basename(f))
+        premium = os.path.join(os.path.dirname(platform_root), "premium-plugins")
+        for f in glob.glob(os.path.join(premium, "*", "agents", "*.md")):
+            shipped.add(os.path.basename(f))
+    if not os.path.isdir(agents_dir):
+        # An account with no specialists directory is normal, not degraded.
+        sys.exit(0)
+    cards = sorted(os.listdir(agents_dir))
+except Exception as err:
+    print("degraded %s" % type(err).__name__)
+    sys.exit(0)
+
+
+def fields(path):
+    """(name, tools) from a card's frontmatter, or None when there is none."""
+    try:
+        with open(path, encoding="utf-8") as fh:
+            lines = fh.read().split("\n")
+    except Exception:
+        return None
+    if not lines or lines[0].strip() != "---":
+        return None
+    name = tools = None
+    for line in lines[1:]:
+        if line.strip() == "---":
+            break
+        m = re.match(r'^name:\s*(.+?)\s*$', line)
+        if m:
+            name = m.group(1).strip().strip('"').strip("'")
+        m = re.match(r'^tools:\s*(.+?)\s*$', line)
+        if m:
+            tools = m.group(1)
+    return (name, tools)
+
+
+for filename in cards:
+    if not filename.endswith(".md"):
+        continue
+    if filename in shipped:
+        continue
+    got = fields(os.path.join(agents_dir, filename))
+    if not got:
+        continue
+    name, tools = got
+    if not name or not tools:
+        continue
+    # Match the tool itself, never a substring of a longer name.
+    for declared in tools.split(","):
+        declared = declared.strip()
+        if not declared or declared in NATIVE:
+            continue
+        if declared == tool:
+            print("block %s" % name)
+            sys.exit(0)
+PY
+)
+
+[ -z "$DECISION" ] && exit 0
+
+VERB=${DECISION%% *}
+ARG=${DECISION#* }
+
+if [ "$VERB" = "degraded" ]; then
+  echo "[specialist-gate] op=degraded reason=$ARG" >&2
+  exit 0
+fi
+
+ACCOUNT_ID8=$(basename "$PWD" | cut -c1-8)
+TOOL=$(printf '%s' "$INPUT" \
+  | python3 -c 'import sys,json;print(json.load(sys.stdin).get("tool_name",""))' 2>/dev/null \
+  || echo "")
+
+echo "[specialist-gate] op=refuse account=$ACCOUNT_ID8 tool=$TOOL specialist=$ARG" >&2
+echo "Blocked: this tool belongs to your $ARG. Dispatch that specialist with the Agent tool and let it do the work — it holds the tool and the standards that go with it." >&2
+exit 2

package/payload/platform/plugins/admin/mcp/dist/admin-bind-classify.d.ts

@@ -0,0 +1,27 @@
+export type AdminBindVerdict = {
+    kind: "ok";
+    pin: string;
+} | {
+    kind: "nothing-to-set";
+} | {
+    kind: "bad-phone";
+} | {
+    kind: "bad-telegram";
+} | {
+    kind: "no-such-user";
+} | {
+    kind: "not-an-admin";
+};
+export declare function classifyAdminBind(input: {
+    userId: string;
+    phone?: string;
+    telegram?: string;
+    users: ReadonlyArray<{
+        userId: string;
+        pin: string;
+    }>;
+    admins: ReadonlyArray<{
+        userId: string;
+    }>;
+}): AdminBindVerdict;
+//# sourceMappingURL=admin-bind-classify.d.ts.map

package/payload/platform/plugins/admin/mcp/dist/admin-bind-classify.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"admin-bind-classify.d.ts","sourceRoot":"","sources":["../src/admin-bind-classify.ts"],"names":[],"mappings":"AAaA,MAAM,MAAM,gBAAgB,GACxB;IAAE,IAAI,EAAE,IAAI,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,GAC3B;IAAE,IAAI,EAAE,gBAAgB,CAAA;CAAE,GAC1B;IAAE,IAAI,EAAE,WAAW,CAAA;CAAE,GACrB;IAAE,IAAI,EAAE,cAAc,CAAA;CAAE,GACxB;IAAE,IAAI,EAAE,cAAc,CAAA;CAAE,GACxB;IAAE,IAAI,EAAE,cAAc,CAAA;CAAE,CAAC;AAE7B,wBAAgB,iBAAiB,CAAC,KAAK,EAAE;IACvC,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,aAAa,CAAC;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACtD,MAAM,EAAE,aAAa,CAAC;QAAE,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CAC3C,GAAG,gBAAgB,CAUnB"}

package/payload/platform/plugins/admin/mcp/dist/admin-bind-classify.js

@@ -0,0 +1,29 @@
+/**
+ * Task 2531 — the pure refusal policy for `admin-bind`, split from the IO
+ * wrapper for the same reason `resolve-admin-userid.ts` splits its picker: every
+ * refusal is then unit-testable without a filesystem, and the policy cannot
+ * drift from the tool that enforces it.
+ *
+ * Never infers a userId. `addAdminPhone` takes an account directory and a phone
+ * with no userId, which is exactly why it cannot write a binding: the allowlist
+ * knows a number, not a person. Binding runs the other way, so the caller names
+ * whom and an unknown userId is refused rather than guessed at.
+ */
+import { isE164, isTelegramChatId } from "./binding-validate.js";
+export function classifyAdminBind(input) {
+    if (input.phone === undefined && input.telegram === undefined)
+        return { kind: "nothing-to-set" };
+    if (input.phone !== undefined && !isE164(input.phone))
+        return { kind: "bad-phone" };
+    if (input.telegram !== undefined && !isTelegramChatId(input.telegram))
+        return { kind: "bad-telegram" };
+    const row = input.users.find(u => u.userId === input.userId);
+    if (!row)
+        return { kind: "no-such-user" };
+    if (!input.admins.some(a => a.userId === input.userId))
+        return { kind: "not-an-admin" };
+    // The existing hash, returned so the caller can route through writeAdminEntry
+    // (which requires a pin) without rotating the credential it is not touching.
+    return { kind: "ok", pin: row.pin };
+}
+//# sourceMappingURL=admin-bind-classify.js.map

package/payload/platform/plugins/admin/mcp/dist/admin-bind-classify.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"admin-bind-classify.js","sourceRoot":"","sources":["../src/admin-bind-classify.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,OAAO,EAAE,MAAM,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AAUjE,MAAM,UAAU,iBAAiB,CAAC,KAMjC;IACC,IAAI,KAAK,CAAC,KAAK,KAAK,SAAS,IAAI,KAAK,CAAC,QAAQ,KAAK,SAAS;QAAE,OAAO,EAAE,IAAI,EAAE,gBAAgB,EAAE,CAAC;IACjG,IAAI,KAAK,CAAC,KAAK,KAAK,SAAS,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC;IACpF,IAAI,KAAK,CAAC,QAAQ,KAAK,SAAS,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC,QAAQ,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC;IACvG,MAAM,GAAG,GAAG,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM,CAAC,CAAC;IAC7D,IAAI,CAAC,GAAG;QAAE,OAAO,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC;IAC1C,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC;IACxF,8EAA8E;IAC9E,6EAA6E;IAC7E,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,CAAC;AACtC,CAAC"}

package/payload/platform/plugins/admin/mcp/dist/binding-validate.d.ts

@@ -0,0 +1,11 @@
+/**
+ * Task 2531 — the two channel-binding shapes, in one place.
+ *
+ * Imported by `index.ts` (admin-add's own validation) and by
+ * `admin-bind-classify.ts` (admin-bind's refusal policy), so the tool and the
+ * policy cannot disagree about what a valid binding is. Two copies of a
+ * validation rule drift the same way two copies of the record type did.
+ */
+export declare function isE164(v: string): boolean;
+export declare function isTelegramChatId(v: string): boolean;
+//# sourceMappingURL=binding-validate.d.ts.map

package/payload/platform/plugins/admin/mcp/dist/binding-validate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"binding-validate.d.ts","sourceRoot":"","sources":["../src/binding-validate.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAKH,wBAAgB,MAAM,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,CAEzC;AAMD,wBAAgB,gBAAgB,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,CAEnD"}

package/payload/platform/plugins/admin/mcp/dist/binding-validate.js

@@ -0,0 +1,20 @@
+/**
+ * Task 2531 — the two channel-binding shapes, in one place.
+ *
+ * Imported by `index.ts` (admin-add's own validation) and by
+ * `admin-bind-classify.ts` (admin-bind's refusal policy), so the tool and the
+ * policy cannot disagree about what a valid binding is. Two copies of a
+ * validation rule drift the same way two copies of the record type did.
+ */
+/** E.164, the same shape `config-persist.ts` enforces for `adminPhones`. */
+const E164 = /^\+[1-9]\d{1,14}$/;
+export function isE164(v) {
+    return E164.test(v);
+}
+/** A Telegram chat id is an integer. A group chat's is negative, so the leading
+ *  minus is legal and refusing it would reject a real binding. */
+const TG_CHAT_ID = /^-?\d+$/;
+export function isTelegramChatId(v) {
+    return TG_CHAT_ID.test(v);
+}
+//# sourceMappingURL=binding-validate.js.map

package/payload/platform/plugins/admin/mcp/dist/binding-validate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"binding-validate.js","sourceRoot":"","sources":["../src/binding-validate.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,4EAA4E;AAC5E,MAAM,IAAI,GAAG,mBAAmB,CAAC;AAEjC,MAAM,UAAU,MAAM,CAAC,CAAS;IAC9B,OAAO,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AACtB,CAAC;AAED;kEACkE;AAClE,MAAM,UAAU,GAAG,SAAS,CAAC;AAE7B,MAAM,UAAU,gBAAgB,CAAC,CAAS;IACxC,OAAO,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAC5B,CAAC"}