@rubytech/create-maxy-code 0.1.68 → 0.1.70

package/payload/platform/plugins/docs/references/admin-session.md

@@ -92,29 +92,32 @@ After every completed operator admin turn, the Stop hook `platform/plugins/admin
 Body overrides relative to a plain Sidebar click:
 - `specialist: 'database-operator'`
 - `model: 'haiku'`
-- `initialMessage: <json-envelope>` (string carrying a JSON-stringified object — see below)
+- `initialMessage: <filled-paragraph>` (the four-sentence database-operator template with `{schema}` and `{conversation}` substituted at hook time — see below)
 
 **Spawn body.** The hook POSTs `{adminSessionId, channel: 'browser', specialist: 'database-operator', model: 'haiku', initialMessage}` to `POST /api/admin/claude-sessions`. `adminSessionId` is the loopback-bypass key — the wrapper resolves the operator's real `senderId` from `GET <managerBase>/<adminSessionId>/meta` and forwards a Sidebar-shape body to the manager.
 
-**`initialMessage` JSON envelope (Task 177).** A single JSON object stringified to a string. Top-level keys exactly match the database-operator agent file `## Input shape`:
+**`initialMessage` substitution contract (Task 195).** The agent body on disk is the user-specified four-sentence paragraph verbatim, with two placeholders `{schema}` and `{conversation}`:
 
 ```
-{
-  "turns": [
-    { "role": "user",      "text": "...", "ts": "<ISO-8601>" },
-    { "role": "assistant", "text": "...", "ts": "<ISO-8601>",
-      "toolCalls": [ { "tool": "...", "input": {...}, "output": ... } ] },
-    ...
-  ],
-  "conversationId": "<operator session_id>",
-  "accountId":      "<ACCOUNT_ID env, stamped on the manager systemd unit>",
-  "occurredAt":     "<hook fire time, ISO-8601 UTC, .000Z>"
-}
+You are an expert Neo4J graph operator. Here is the schema {schema}.
+Use your expert judgement to update the graph in reaction to the
+following conversation {conversation}, using the tools at your disposal.
+You are not user-facing and your text goes nowhere — do not emit it.
 ```
 
-`turns` is the operator's full conversation transcript, oldest first, newest last — every user / assistant message in the operator's JSONL from session start to the moment the recorder fired. No windowing, no truncation, no env knob. The walker collapses multi-record assistant messages on `message.id` (e.g. one `thinking` record + one `text` record from the same message become one `turns` entry with combined text). `toolCalls` is assistant-only and omitted on turns that called no tools. `toolCalls[].input` and `toolCalls[].output` are native JSON values, not re-stringified — `jq -r '.toolCalls[0].input.foo'` reaches the inner field directly. `tool_use` and `tool_result` blocks are paired by `tool_use_id` and attach to the assistant turn that owned the `tool_use`; the user record carrying only the `tool_result` does not create a separate user turn. Unanswered `tool_use` calls surface with `output: null`. No leading instruction prose — the agent file's system prompt teaches the model what to do with the payload. If `turns` is empty after the walker runs, the hook emits `trigger-skipped reason=conversation-empty` and no recorder is spawned. (Task 175's earlier `(operatorMessage, assistantReply)` pair contract was superseded — the pair asserted a temporal Q→A relationship the walker never enforced, so Task 177 replaced it with the ordered window.)
+At fire time the Stop hook substitutes both placeholders and sends the filled paragraph as `initialMessage` — a plain string, not a JSON envelope, no instruction prose, no leading object.
 
-The hook also emits one summary line per fire immediately before `spawn-request`: `[turn-recorder] envelope sessionId=<op> turnsCount=<n> userTurns=<n> assistantTurns=<n> toolCallTurns=<n>`. `turnsCount` is monotone across spawns in the same operator session — a flat or decreasing series is the regression signature for "windowing crept back in".
+- `{schema}` ← the concatenated text of `platform/plugins/memory/references/schema-base.md` plus, when `brand.json#vertical` names a vertical file that exists in the same directory, that file's content joined with a blank-line separator (Task 193). When the brand declares `vertical: null`, the field is missing, or the named file is absent, the schema is `schema-base.md` alone — never loud-fail here; Task 193 owns the brand-config gate.
+- `{conversation}` ← a flat rendering of the envelope's `turns` array. Format: one line per turn, `role: text`, wrapped in leading and trailing newlines so each line lands on its own line in the filled prompt. Assistant turns that called tools carry inline `[tool: name(args)]` markers at the end of their line, with `args` being the call's input as a JSON literal. Tool outputs are not included — only the call shape the model has been emitting. The user record carrying only `tool_result` blocks does not create a separate transcript line; thinking-only records contribute nothing.
+
+The envelope walker still runs (so `[turn-recorder] envelope ...` continues to land for observability and the `trigger-skipped reason=conversation-empty` gate still fires on a turns-empty transcript), but its JSON shape never reaches the model.
+
+Walker semantics for `turns` (preserved from Task 177): oldest first, newest last; every user / assistant message in the operator's JSONL from session start to the moment the recorder fired; no windowing, no truncation, no env knob; multi-record assistant messages collapse on `message.id`; `tool_use` and `tool_result` blocks are paired by `tool_use_id` so the result attaches to the assistant turn that owned the call rather than fabricating a separate user turn; if `turns` is empty after the walker runs the hook emits `trigger-skipped reason=conversation-empty` and no recorder is spawned. The Task 177 envelope shape — `{turns, conversationId, accountId, occurredAt}` — is now an internal hook structure; it is not what the model sees.
+
+The hook emits two summary lines per fire immediately before `spawn-request`:
+
+- `[turn-recorder] envelope sessionId=<op> turnsCount=<n> userTurns=<n> assistantTurns=<n> toolCallTurns=<n>` — the walker's output. `turnsCount` is monotone across spawns in the same operator session; a flat or decreasing series is the regression signature for "windowing crept back in".
+- `[turn-recorder] substitution sessionId=<op> schemaBytes=<n> conversationBytes=<n> bodyBytes=<n>` — the per-spawn substitution. `schemaBytes` covers schema-base plus any vertical concatenated. `bodyBytes` equals the trailing `initialMessageBytes` field on the next `spawn-request` line — the two log lines read the same number.
 
 **Manager-side specialist branches.** The recorder is the first specialist subagent that exercises the full specialist flag matrix:
 - The bundled `platform/templates/specialists/agents/database-operator.md` template is symlinked into `$CLAUDE_CONFIG_DIR/agents/database-operator.md` by the installer; without that link `claude --agent database-operator` silently falls back to the admin agent.
@@ -200,10 +203,11 @@ Three log-line shapes, all keyed on the same recorder `sessionId`, distinguish t
 ```
 
 - `[pty-spawn-tool-inventory]` (Task 178) measures the **framework** layer — the argv built and the MCP servers' published tools. Argv-tools count must be 11; mcp-listed-tools must be ≥ 11.
-- `[recorder-session-init]` (Task 183 — emitted by the JSONL tail in `claude-session-manager`) measures the **CLI/SDK** layer — what the SDK actually exposed to the model. The set difference `toolsArgvMissingFromExposed` is the Outcome A fingerprint:
+- `[recorder-session-init]` (Task 183 — emitted by the JSONL tail in `claude-session-manager`) measures the **CLI/SDK** layer — what the SDK actually exposed to the model. The `source=` field names the data path; `toolsArgvMissingFromExposed` is the Outcome A fingerprint:
+  - `source=system.init` / `command_permissions` / `deferred_tools_delta` ⇒ the SDK wrote an init record to the JSONL and the tail matched one of the three known shapes. The bridge-attached `--remote-control` mode writes `attachment.deferred_tools_delta`; the headless SDK init record (`system.subtype=init`) is what `claude -p --output-format=stream-json` modes write.
+  - `source=headless-argv-fallback` ⇒ Task 185 finding (2026-05-20): headless `claude --verbose` PTY mode (which the database-operator recorder uses) does **not** write any tool-list record to the JSONL — none of the three probe shapes ever appears. The tail falls back to the spawner's `--allowed-tools` argv as the exposed set, independently verified by `[pty-spawn-tool-inventory]`'s `exposed=` field. Treat this source identically to a positive JSONL match: the argv set is authoritative for headless spawns.
   - `toolsArgvMissingFromExposed=—` ⇒ all argv tools made it through; Outcome A is ruled out.
-  - Any non-`—` value enumerates the names the SDK dropped and is the diagnosis.
-  - `error=init-record-not-found probedTypes=system.init,command_permissions,deferred_tools_delta` ⇒ no init-shaped record was found in the JSONL by the time the first assistant turn landed. The miss itself is the observable; iterate the probe list against the live JSONL to learn the new record shape.
+  - Any non-`—` value enumerates the names the SDK dropped and is the diagnosis. Only meaningful when `source` is JSONL-derived; under `headless-argv-fallback` the exposed set equals argv by construction, so this field is always `—`.
 - `[recorder-turn]` measures the **model** layer — Haiku's verbatim words (`textHead`) and the tool names it actually called (`toolUseNames`). `toolUseNames=—` paired with `toolsArgvMissingFromExposed=—` is the Outcome B signature: tools present, model abstained.
 
 The three lines are emitted into `server.log` via the platform UI's `/api/admin/log-ingest` loopback route, so a single grep against `server.log` answers the question for any past, present, or future recorder spawn:

package/payload/platform/plugins/docs/references/platform.md

@@ -82,10 +82,14 @@ The row feed sits behind `requireAdminSession` like every other admin route, so
 
 The trade-off is a longer-lived connection per tab: the manager's per-process subscriber count rises with open tabs, and the SSE channel must survive proxy idle timeouts. The manager emits a 25-second keep-alive comment line on every connection (ignored by EventSource consumers, refreshes the proxy clock) and the browser-side store force-closes-and-reconnects on transport errors with exponential backoff capped at 30s.
 
+The row payload carries `url: string | null` (Task 189) — the `claude.ai/code/session_<suffix>` URL captured from the `/remote-control` banner. The serialiser reads it from `SessionStore` (not the watcher's `SessionRow`) because URL is in-memory PTY state, not a filesystem property; the value is `null` whenever the spawn is headless (`HEADLESS_ROLES`, Task 171 — `--remote-control` not passed), or before url-capture has fired on a channel-facing spawn (~2 s after spawn), or on archived rows whose `StoredSession` has been removed. When url-capture eventually mutates `StoredSession.url`, the manager pushes a `row-updated` frame to every connected client carrying the fresh URL, so the client's Open-in-new-tab arrow appears in step. The Sidebar gates the arrow on `row.live && row.url !== null` and opens `row.url` directly with no `/meta` round-trip; each click logs `[admin-ui] sidebar-open-in-new-tab outcome=<ok|blocked> sessionId=<8-char>` (`blocked` fires when a popup blocker swallows `window.open`).
+
 **Spawn lifecycle: PID-file driven.** Clicking "+ New session" spawns the PTY and waits for Claude Code's PID file to appear at `${CLAUDE_CONFIG_DIR}/sessions/<pid>.json`. The PID file lands at process init (for `entrypoint: cli` spawns) and carries the intrinsic `sessionId`, `bridgeSessionId`, `agent`, and `status` directly. The manager's filesystem watcher reports the create event; the spawn response includes the canonical `sessionId` from that file. URL capture still runs in parallel to populate the operator-facing iframe URL, but it no longer gates readiness. The JSONL transcript is written on the first operator turn (true on 2.1.143 and 2.1.128); the watcher fires a separate event for that, and `/list`, `/meta`, `/log` resolve any of four ids — `sessionId`, `bridgeSessionId`, `bridgeSuffix`, or numeric `pid` — to the same row. The Sidebar POST body carries no `initialMessage` (Task 146): Claude Code's own `tail.aiTitle` is the canonical sidebar row label, and the wrapper does not inject any cold-start stimulus on operator-driven spawns. The wrapper at `platform/ui/server/routes/admin/claude-sessions.ts` is still the single canonical entry point for any programmatic admin spawn-with-prompt — see `admin-session.md` "Spawn-with-initialMessage wrapper" and `internals.md` "Programmatic spawn entry point" — and the turn-recorder loopback path still forwards an `initialMessage`. Resume flows are unaffected (the prior transcript is the stimulus).
 
 The sidebar row's displayed name is `tail.aiTitle` verbatim, parsed by `jsonl-enumerator.ts` from the JSONL Claude Code writes. Until Claude Code has written its title, the row label is null and the cell renders empty — no UI-stamped sidecar layer, no 8-char id fallback. When Claude Code later updates its title mid-session, the next `/list` or `/events` tick surfaces the new label. Task 146.
 
+Each session row also carries a small muted timestamp crumb under the name showing when the session was last active: "just now", "5m", "3h", "yesterday", a weekday name for 2-6 days back, "20 May" for older dates this year, or "20 May 2025" for prior years. Live rows tick forward on their own without a refresh — every row advances together on a single shared 30-second cadence so two rows with identical names (a fresh session whose `aiTitle` has not landed yet, plus a resumed session whose title also has not landed) are distinguishable at a glance. A row that renders "—" instead of a time is a loud-fail signal: the session manager lost the row's `updatedAt` (the JSONL `mtimeMs` for archived rows, the PID-file `updatedAt`/`startedAt` for live rows). Investigate the server log rather than treating "—" as a normal value. The pure formatter lives at `app/lib/relative-time.ts` and is pinned by `app/lib/__tests__/relative-time.test.ts` (every breakpoint, every '—' input, DST cross 2026-03-29); the shared tick is `app/lib/use-now-tick.ts`; the row-render wiring is pinned by `app/__tests__/Sidebar-timestamp.test.tsx`. Task 187.
+
 **Stop vs. delete.** `POST /<id>/stop` sends SIGTERM, leaves the JSONL on disk for audit, and is idempotent against an already-dead row. `DELETE /<id>` removes the JSONL + per-session subdir and returns 409 if the PTY is still alive (stop first). Any unknown id returns 404; nothing returns a silent 204 against an id the manager does not know.
 
 **PTY lifecycle contract (Tasks 170 + 176).** A PTY reaches its end via one of two branches: **operator-request** (operator clicks End or the auto-archive Stop hook calls `stopSession`) or **natural-exit** (the claude child exits on its own — operator typed `/quit`, SIGINT in the PTY, crash, network drop on `--remote-control`). Both branches honour a single invariant: the pty master file descriptor is released by an explicit `pty.destroy()` and the SessionStore row is removed before the next `/list` or `/events` tick. Without the explicit destroy, the master fd lingers in node-pty's internal socket until V8 GC finalises the IPty object — non-deterministic and accumulates under load until the kernel pty cap (Linux 3072, macOS 511) refuses new spawns. Without the explicit row removal, the manager shutdown loop SIGTERMs PIDs that already logged `process-exited`, masking the leak only because the manager restarts every few hours. When both branches fire on the same exit (operator clicks End and node-pty's `onExit` fans out the SIGTERM to both listeners), a per-row `fdReleased` flag short-circuits the second branch so `pty.destroy()` runs exactly once on the live socket — without the flag, the second call throws "socket already destroyed" and the operator-request line would falsely log `master-fd=close-failed`. If the first branch's destroy throws and is rescued, the flag stays unset and the second branch retries (defense in depth). Every `kill … pid=<n>` log line carries a `master-fd=closed` suffix (or `master-fd=close-failed err=<msg>` on the rescued throw branch — a graceful degradation so a corner-case socket-state failure cannot turn a logically-successful exit into a 500); the operator-request line additionally identifies `reason=operator-request`, the natural-exit line identifies `reason=process-exited`. Both branches are verified by the `stop-session-fd-release` and `endpoint-stop-delete` integration tests (operator-request live and already-exited cycles + natural-exit cycle + throw-then-retry coordination, Linux kernel-level ptmx fd accounting on each).

package/payload/platform/plugins/memory/PLUGIN.md

@@ -181,7 +181,15 @@ Restricted fields (`accountId`, `embedding`, `profileVersion`) cannot be set via
 
 ## Schema References
 
-Before any structured write, load `references/schema-base.md` via `plugin-read`. This defines property naming rules, required-property groups for documented types, forbidden-property rules, and relationship patterns. If the `LocalBusiness` node has a `businessType` property, also load the matching vertical schema (`references/schema-{businessType}.md`) — it extends the base with vertical-specific types. Confirm which schemas were consulted before writing.
+Before any structured write, load `references/schema-base.md` via `plugin-read`. This defines property naming rules, required-property groups for documented types, forbidden-property rules, and relationship patterns.
+
+**Brand declares the default vertical** in `brand.json#vertical` (the schema file basename without `.md`, e.g. `"schema-estate-agent"`, or `null` for non-vertical brands). The validator enforces base + that vertical against every write. If the file named by `brand.json#vertical` is absent from `references/`, the memory server fails to start — a misconfigured brand never validates against the wrong rule set silently.
+
+**Every account has exactly one root `:LocalBusiness`.** The installer's `seed-neo4j.sh` MERGEs it at install (and on every re-seed) with the unique key `accountId`, `createdBySource = 'installer'`, a non-null `createdAt`, and `businessType` set to the bare slug derived from `brand.json#vertical` (i.e. `"schema-estate-agent"` becomes `"estate-agent"`, `null` stays null). The MERGE is idempotent: re-runs preserve `createdAt`; `businessType` is coalesced so an operator override on the node wins over the brand default. Failure to write the node aborts the install with `[install-invariant] localbusiness-bootstrap result=failed reason=<text>`. The recorder, validator, and any other writer can rely on the LocalBusiness existing from the first turn of the first install — no first-use bootstrap branch.
+
+**A LocalBusiness with its own `businessType` overrides the default** for writes that resolve to it. The validator looks up the account's LocalBusiness on every write; if `businessType` is set (e.g. `"creator"`), the resolved vertical becomes `schema-${businessType}` instead of the brand default. The override applies only to writes anchored under that LocalBusiness.
+
+On every write the validator emits `[schema-validator] resolved-vertical=<X|none> source=<brand-default|localbusiness-override> accountId=<id>` so an operator can grep `server.log` to confirm which rules a write ran against without reading source.
 
 **Validation surface.** `memory-write` validates labels against `db.labels` ∪ `schema.cypher` declarations — not against this markdown. A label is recognised if it appears in either set. The markdown defines property *shape* (required-property groups, naming rules, forbidden-property rules) for documented labels only; recognised-but-undocumented labels (e.g. `LocalBusiness`, `AdminUser`, `KnowledgeDocument`) accept any property shape and emit `[schema-validator] markdown-undocumented label=<X>` so the doc gap is visible to operators. If `memory-write` rejects a label as unknown, the rejection lists both source sets — the agent can call `maxy-graph-get_neo4j_schema` to refresh its view.
 

package/payload/platform/plugins/memory/mcp/dist/lib/__tests__/resolve-active-vertical.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=resolve-active-vertical.test.d.ts.map

package/payload/platform/plugins/memory/mcp/dist/lib/__tests__/resolve-active-vertical.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"resolve-active-vertical.test.d.ts","sourceRoot":"","sources":["../../../src/lib/__tests__/resolve-active-vertical.test.ts"],"names":[],"mappings":""}

package/payload/platform/plugins/memory/mcp/dist/lib/__tests__/resolve-active-vertical.test.js

@@ -0,0 +1,116 @@
+import test from "node:test";
+import assert from "node:assert/strict";
+import { resolveActiveVertical } from "../resolve-active-vertical.js";
+function mockSession(records, capture) {
+    return {
+        run: async (cypher, params) => {
+            capture?.calls.push({ cypher, params });
+            return {
+                records: records.map((r) => ({
+                    get: (key) => r[key],
+                })),
+            };
+        },
+    };
+}
+test("resolveActiveVertical: undefined accountId → brand-default", async () => {
+    const session = mockSession([]);
+    const result = await resolveActiveVertical({
+        session,
+        accountId: undefined,
+        brandVertical: "schema-estate-agent",
+    });
+    assert.deepEqual(result, {
+        resolvedVertical: "schema-estate-agent",
+        source: "brand-default",
+    });
+});
+test("resolveActiveVertical: empty-string accountId → brand-default (no query)", async () => {
+    const capture = { calls: [] };
+    const session = mockSession([], capture);
+    const result = await resolveActiveVertical({
+        session,
+        accountId: "   ",
+        brandVertical: "schema-estate-agent",
+    });
+    assert.equal(result.source, "brand-default");
+    assert.equal(capture.calls.length, 0);
+});
+test("resolveActiveVertical: no LocalBusiness rows → brand-default", async () => {
+    const session = mockSession([]);
+    const result = await resolveActiveVertical({
+        session,
+        accountId: "acct-1",
+        brandVertical: "schema-estate-agent",
+    });
+    assert.equal(result.source, "brand-default");
+    assert.equal(result.resolvedVertical, "schema-estate-agent");
+});
+test("resolveActiveVertical: LocalBusiness without businessType → brand-default", async () => {
+    const session = mockSession([{ businessType: null }]);
+    const result = await resolveActiveVertical({
+        session,
+        accountId: "acct-1",
+        brandVertical: "schema-estate-agent",
+    });
+    assert.equal(result.source, "brand-default");
+    assert.equal(result.resolvedVertical, "schema-estate-agent");
+});
+test("resolveActiveVertical: LocalBusiness with businessType → localbusiness-override", async () => {
+    const session = mockSession([{ businessType: "creator" }]);
+    const result = await resolveActiveVertical({
+        session,
+        accountId: "acct-1",
+        brandVertical: "schema-estate-agent",
+    });
+    assert.deepEqual(result, {
+        resolvedVertical: "schema-creator",
+        source: "localbusiness-override",
+    });
+});
+test("resolveActiveVertical: businessType override wins when brandVertical is null", async () => {
+    const session = mockSession([{ businessType: "creator" }]);
+    const result = await resolveActiveVertical({
+        session,
+        accountId: "acct-1",
+        brandVertical: null,
+    });
+    assert.deepEqual(result, {
+        resolvedVertical: "schema-creator",
+        source: "localbusiness-override",
+    });
+});
+test("resolveActiveVertical: businessType whitespace-only → brand-default", async () => {
+    const session = mockSession([{ businessType: "   " }]);
+    const result = await resolveActiveVertical({
+        session,
+        accountId: "acct-1",
+        brandVertical: "schema-estate-agent",
+    });
+    assert.equal(result.source, "brand-default");
+});
+test("resolveActiveVertical: query parameters bind accountId", async () => {
+    const capture = { calls: [] };
+    const session = mockSession([{ businessType: "creator" }], capture);
+    await resolveActiveVertical({
+        session,
+        accountId: "acct-7",
+        brandVertical: null,
+    });
+    assert.equal(capture.calls.length, 1);
+    assert.deepEqual(capture.calls[0].params, { accountId: "acct-7" });
+    assert.match(capture.calls[0].cypher, /:LocalBusiness/);
+});
+test("resolveActiveVertical: session.run rejection propagates", async () => {
+    const session = {
+        run: async () => {
+            throw new Error("connection refused");
+        },
+    };
+    await assert.rejects(resolveActiveVertical({
+        session,
+        accountId: "acct-1",
+        brandVertical: null,
+    }), /connection refused/);
+});
+//# sourceMappingURL=resolve-active-vertical.test.js.map

package/payload/platform/plugins/memory/mcp/dist/lib/__tests__/resolve-active-vertical.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"resolve-active-vertical.test.js","sourceRoot":"","sources":["../../../src/lib/__tests__/resolve-active-vertical.test.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,MAAM,MAAM,oBAAoB,CAAC;AAExC,OAAO,EAAE,qBAAqB,EAAE,MAAM,+BAA+B,CAAC;AAEtE,SAAS,WAAW,CAClB,OAAuC,EACvC,OAA+D;IAE/D,OAAO;QACL,GAAG,EAAE,KAAK,EAAE,MAAc,EAAE,MAAe,EAAE,EAAE;YAC7C,OAAO,EAAE,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;YACxC,OAAO;gBACL,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;oBAC3B,GAAG,EAAE,CAAC,GAAW,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC;iBAC7B,CAAC,CAAC;aACJ,CAAC;QACJ,CAAC;KACoB,CAAC;AAC1B,CAAC;AAED,IAAI,CAAC,4DAA4D,EAAE,KAAK,IAAI,EAAE;IAC5E,MAAM,OAAO,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC;IAChC,MAAM,MAAM,GAAG,MAAM,qBAAqB,CAAC;QACzC,OAAO;QACP,SAAS,EAAE,SAAS;QACpB,aAAa,EAAE,qBAAqB;KACrC,CAAC,CAAC;IACH,MAAM,CAAC,SAAS,CAAC,MAAM,EAAE;QACvB,gBAAgB,EAAE,qBAAqB;QACvC,MAAM,EAAE,eAAe;KACxB,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,0EAA0E,EAAE,KAAK,IAAI,EAAE;IAC1F,MAAM,OAAO,GAAG,EAAE,KAAK,EAAE,EAAgD,EAAE,CAAC;IAC5E,MAAM,OAAO,GAAG,WAAW,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC;IACzC,MAAM,MAAM,GAAG,MAAM,qBAAqB,CAAC;QACzC,OAAO;QACP,SAAS,EAAE,KAAK;QAChB,aAAa,EAAE,qBAAqB;KACrC,CAAC,CAAC;IACH,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC;IAC7C,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;AACxC,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,8DAA8D,EAAE,KAAK,IAAI,EAAE;IAC9E,MAAM,OAAO,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC;IAChC,MAAM,MAAM,GAAG,MAAM,qBAAqB,CAAC;QACzC,OAAO;QACP,SAAS,EAAE,QAAQ;QACnB,aAAa,EAAE,qBAAqB;KACrC,CAAC,CAAC;IACH,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC;IAC7C,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,gBAAgB,EAAE,qBAAqB,CAAC,CAAC;AAC/D,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,2EAA2E,EAAE,KAAK,IAAI,EAAE;IAC3F,MAAM,OAAO,GAAG,WAAW,CAAC,CAAC,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;IACtD,MAAM,MAAM,GAAG,MAAM,qBAAqB,CAAC;QACzC,OAAO;QACP,SAAS,EAAE,QAAQ;QACnB,aAAa,EAAE,qBAAqB;KACrC,CAAC,CAAC;IACH,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC;IAC7C,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,gBAAgB,EAAE,qBAAqB,CAAC,CAAC;AAC/D,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,iFAAiF,EAAE,KAAK,IAAI,EAAE;IACjG,MAAM,OAAO,GAAG,WAAW,CAAC,CAAC,EAAE,YAAY,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC;IAC3D,MAAM,MAAM,GAAG,MAAM,qBAAqB,CAAC;QACzC,OAAO;QACP,SAAS,EAAE,QAAQ;QACnB,aAAa,EAAE,qBAAqB;KACrC,CAAC,CAAC;IACH,MAAM,CAAC,SAAS,CAAC,MAAM,EAAE;QACvB,gBAAgB,EAAE,gBAAgB;QAClC,MAAM,EAAE,wBAAwB;KACjC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,8EAA8E,EAAE,KAAK,IAAI,EAAE;IAC9F,MAAM,OAAO,GAAG,WAAW,CAAC,CAAC,EAAE,YAAY,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC;IAC3D,MAAM,MAAM,GAAG,MAAM,qBAAqB,CAAC;QACzC,OAAO;QACP,SAAS,EAAE,QAAQ;QACnB,aAAa,EAAE,IAAI;KACpB,CAAC,CAAC;IACH,MAAM,CAAC,SAAS,CAAC,MAAM,EAAE;QACvB,gBAAgB,EAAE,gBAAgB;QAClC,MAAM,EAAE,wBAAwB;KACjC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,qEAAqE,EAAE,KAAK,IAAI,EAAE;IACrF,MAAM,OAAO,GAAG,WAAW,CAAC,CAAC,EAAE,YAAY,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;IACvD,MAAM,MAAM,GAAG,MAAM,qBAAqB,CAAC;QACzC,OAAO;QACP,SAAS,EAAE,QAAQ;QACnB,aAAa,EAAE,qBAAqB;KACrC,CAAC,CAAC;IACH,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC;AAC/C,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,wDAAwD,EAAE,KAAK,IAAI,EAAE;IACxE,MAAM,OAAO,GAAG,EAAE,KAAK,EAAE,EAAgD,EAAE,CAAC;IAC5E,MAAM,OAAO,GAAG,WAAW,CAAC,CAAC,EAAE,YAAY,EAAE,SAAS,EAAE,CAAC,EAAE,OAAO,CAAC,CAAC;IACpE,MAAM,qBAAqB,CAAC;QAC1B,OAAO;QACP,SAAS,EAAE,QAAQ;QACnB,aAAa,EAAE,IAAI;KACpB,CAAC,CAAC;IACH,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IACtC,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC,CAAC;IACnE,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC;AAC1D,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,yDAAyD,EAAE,KAAK,IAAI,EAAE;IACzE,MAAM,OAAO,GAAG;QACd,GAAG,EAAE,KAAK,IAAI,EAAE;YACd,MAAM,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAC;QACxC,CAAC;KACoB,CAAC;IACxB,MAAM,MAAM,CAAC,OAAO,CAClB,qBAAqB,CAAC;QACpB,OAAO;QACP,SAAS,EAAE,QAAQ;QACnB,aAAa,EAAE,IAAI;KACpB,CAAC,EACF,oBAAoB,CACrB,CAAC;AACJ,CAAC,CAAC,CAAC"}

package/payload/platform/plugins/memory/mcp/dist/lib/__tests__/schema-loader.test.js

@@ -1,6 +1,15 @@
 import test from "node:test";
 import assert from "node:assert/strict";
+import { mkdtempSync, writeFileSync, rmSync } from "node:fs";
+import { tmpdir } from "node:os";
+import { join } from "node:path";
 import { loadSchema, splitPipeRow } from "../schema-loader.js";
+function writeBrandJson(content) {
+    const dir = mkdtempSync(join(tmpdir(), "schema-loader-brand-"));
+    const path = join(dir, "brand.json");
+    writeFileSync(path, JSON.stringify(content), "utf-8");
+    return path;
+}
 // schema-loader reads from platform/plugins/memory/references/schema-*.md
 // at runtime — these tests assert the contract surface (the renamed field
 // `markdownLabels` plus the loader's invariants) against the actual schema
@@ -71,6 +80,97 @@ test("splitPipeRow: multiple pipes inside multiple backtick spans are all litera
     const cells = splitPipeRow(row);
     assert.deepEqual(cells, ["`a|b`", "`c|d|e`", "f"]);
 });
+// ---------------------------------------------------------------------------
+// brand.json#vertical resolution (Task 193)
+// ---------------------------------------------------------------------------
+test("loadSchema: no brand.json discovery → brandVertical=null (dev default)", () => {
+    // No explicit path, no env var: matches paths.ts dev-default mode.
+    const prev = process.env.MAXY_PLATFORM_ROOT;
+    delete process.env.MAXY_PLATFORM_ROOT;
+    try {
+        const schema = loadSchema();
+        assert.equal(schema.brandVertical, null);
+    }
+    finally {
+        if (prev !== undefined)
+            process.env.MAXY_PLATFORM_ROOT = prev;
+    }
+});
+test("loadSchema: brand.json with vertical=null → brandVertical=null", () => {
+    const path = writeBrandJson({ vertical: null });
+    try {
+        const schema = loadSchema({ brandJsonPath: path });
+        assert.equal(schema.brandVertical, null);
+    }
+    finally {
+        rmSync(path, { force: true });
+    }
+});
+test("loadSchema: brand.json absent vertical field → brandVertical=null", () => {
+    // Backwards compatibility: a brand.json that pre-dates Task 193 has no
+    // `vertical` key. The loader must treat that as "no vertical declared",
+    // not as an error.
+    const path = writeBrandJson({ productName: "Test", configDir: ".test" });
+    try {
+        const schema = loadSchema({ brandJsonPath: path });
+        assert.equal(schema.brandVertical, null);
+    }
+    finally {
+        rmSync(path, { force: true });
+    }
+});
+test("loadSchema: brand.json vertical naming existing file → brandVertical set", () => {
+    // schema-estate-agent.md is shipped with the plugin; the loader should
+    // accept it without throwing and surface the name.
+    const path = writeBrandJson({ vertical: "schema-estate-agent" });
+    try {
+        const schema = loadSchema({ brandJsonPath: path });
+        assert.equal(schema.brandVertical, "schema-estate-agent");
+    }
+    finally {
+        rmSync(path, { force: true });
+    }
+});
+test("loadSchema: brand.json vertical naming a missing file → loud-fail at boot", () => {
+    // Task 193 verification: misconfigured vertical must block boot, with the
+    // missing file named in the error.
+    const path = writeBrandJson({ vertical: "schema-fake" });
+    try {
+        assert.throws(() => loadSchema({ brandJsonPath: path }), (err) => {
+            assert.match(err.message, /schema-fake\.md/);
+            assert.match(err.message, /not present/);
+            return true;
+        });
+    }
+    finally {
+        rmSync(path, { force: true });
+    }
+});
+test("loadSchema: brand.json vertical of wrong type → loud-fail at boot", () => {
+    const path = writeBrandJson({ vertical: 42 });
+    try {
+        assert.throws(() => loadSchema({ brandJsonPath: path }), /brand\.json#vertical.*must be a string or null/);
+    }
+    finally {
+        rmSync(path, { force: true });
+    }
+});
+test("loadSchema: brand.json vertical empty string → loud-fail with explicit message", () => {
+    // Operator typo guard: an empty string is misconfiguration, not "no
+    // vertical". The error must name the field and suggest the two valid
+    // shapes (null or a reference-file name).
+    const path = writeBrandJson({ vertical: "" });
+    try {
+        assert.throws(() => loadSchema({ brandJsonPath: path }), (err) => {
+            assert.match(err.message, /empty string/);
+            assert.match(err.message, /Use null/);
+            return true;
+        });
+    }
+    finally {
+        rmSync(path, { force: true });
+    }
+});
 test("splitPipeRow: ordinary row with no backticks splits as before", () => {
     const cells = splitPipeRow("| one | two | three |");
     assert.deepEqual(cells, ["one", "two", "three"]);

package/payload/platform/plugins/memory/mcp/dist/lib/__tests__/schema-loader.test.js.map

@@ -1 +1 @@
-{"version":3,"file":"schema-loader.test.js","sourceRoot":"","sources":["../../../src/lib/__tests__/schema-loader.test.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,MAAM,MAAM,oBAAoB,CAAC;AACxC,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAE/D,0EAA0E;AAC1E,0EAA0E;AAC1E,2EAA2E;AAC3E,2EAA2E;AAC3E,mDAAmD;AAEnD,IAAI,CAAC,0DAA0D,EAAE,GAAG,EAAE;IACpE,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;IAC5B,uEAAuE;IACvE,MAAM,CAAC,EAAE,CACP,MAAM,CAAC,cAAc,YAAY,GAAG,EACpC,8BAA8B,CAC/B,CAAC;IACF,MAAM,CAAC,KAAK,CACV,QAAQ,IAAI,MAAM,EAClB,KAAK,EACL,sEAAsE,CACvE,CAAC;AACJ,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,oEAAoE,EAAE,GAAG,EAAE;IAC9E,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;IAC5B,MAAM,MAAM,GAAG,MAAM,CAAC,cAAc,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IACnD,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,2BAA2B,CAAC,CAAC;IAC/C,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;IACrC,6DAA6D;IAC7D,kEAAkE;IAClE,wEAAwE;IACxE,uEAAuE;IACvE,MAAM,yBAAyB,GAAG,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE;QAC3D,IAAI,CAAC,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,CAAC,CAAC,IAAI,KAAK,WAAW,CAAC;QACvD,OAAO,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,WAAW,CAAC,CAAC;IAChD,CAAC,CAAC,CAAC;IACH,MAAM,CAAC,KAAK,CACV,yBAAyB,EACzB,KAAK,EACL,kFAAkF,CACnF,CAAC;AACJ,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,6DAA6D,EAAE,GAAG,EAAE;IACvE,gEAAgE;IAChE,yEAAyE;IACzE,+DAA+D;IAC/D,oEAAoE;IACpE,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;IAC5B,MAAM,CAAC,KAAK,CACV,MAAM,CAAC,cAAc,CAAC,GAAG,CAAC,eAAe,CAAC,EAC1C,KAAK,EACL,6EAA6E,CAC9E,CAAC;AACJ,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,qDAAqD,EAAE,GAAG,EAAE;IAC/D,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;IAC5B,oEAAoE;IACpE,qEAAqE;IACrE,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,cAAc,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC;IAC1C,MAAM,GAAG,GAAG,MAAM,CAAC,cAAc,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;IACnD,MAAM,CAAC,EAAE,CAAC,GAAG,EAAE,sCAAsC,CAAC,CAAC;IACvD,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;AACzC,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,iEAAiE,EAAE,GAAG,EAAE;IAC3E,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;IAC5B,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IACzC,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,WAAW,EAAE,CAAC;QACnC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,+BAA+B,CAAC,EAAE,CAAC,CAAC;QACjE,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,gBAAgB,CAAC,CAAC;IACpC,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,mEAAmE;AACnE,2EAA2E;AAC3E,0EAA0E;AAC1E,2EAA2E;AAC3E,8CAA8C;AAC9C,IAAI,CAAC,yDAAyD,EAAE,GAAG,EAAE;IACnE,MAAM,GAAG,GAAG,8EAA8E,CAAC;IAC3F,MAAM,KAAK,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;IAChC,MAAM,CAAC,KAAK,CACV,KAAK,CAAC,MAAM,EACZ,CAAC,EACD,sCAAsC,KAAK,CAAC,MAAM,KAAK,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAC/E,CAAC;IACF,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;IAClC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,6CAA6C,CAAC,CAAC;IACtE,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,kBAAkB,CAAC,CAAC;AAC7C,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,6EAA6E,EAAE,GAAG,EAAE;IACvF,MAAM,GAAG,GAAG,yBAAyB,CAAC;IACtC,MAAM,KAAK,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;IAChC,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC,OAAO,EAAE,SAAS,EAAE,GAAG,CAAC,CAAC,CAAC;AACrD,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,+DAA+D,EAAE,GAAG,EAAE;IACzE,MAAM,KAAK,GAAG,YAAY,CAAC,uBAAuB,CAAC,CAAC;IACpD,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC,KAAK,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC;AACnD,CAAC,CAAC,CAAC;AAEH,0DAA0D;AAC1D,qDAAqD;AACrD,IAAI,CAAC,wEAAwE,EAAE,GAAG,EAAE;IAClF,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;IAC5B,MAAM,CAAC,EAAE,CACP,MAAM,CAAC,gBAAgB,YAAY,GAAG,EACtC,gCAAgC,CACjC,CAAC;IACF,MAAM,eAAe,GAAG,MAAM,CAAC,gBAAgB,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAC9D,MAAM,CAAC,EAAE,CACP,eAAe,EACf,2EAA2E,CAC5E,CAAC;IACF,MAAM,QAAQ,GAAG,eAAe,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IAC7C,MAAM,CAAC,EAAE,CACP,QAAQ,EACR,mDAAmD,CACpD,CAAC;IACF,MAAM,CAAC,KAAK,CACV,QAAQ,CAAC,SAAS,EAClB,WAAW,EACX,4EAA4E,CAC7E,CAAC;AACJ,CAAC,CAAC,CAAC;AAEH,+DAA+D;AAC/D,wEAAwE;AACxE,wEAAwE;AACxE,wEAAwE;AACxE,IAAI,CAAC,sDAAsD,EAAE,GAAG,EAAE;IAChE,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;IAC5B,sEAAsE;IACtE,0EAA0E;IAC1E,uDAAuD;IACvD,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,cAAc,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC;AAC5C,CAAC,CAAC,CAAC"}
+{"version":3,"file":"schema-loader.test.js","sourceRoot":"","sources":["../../../src/lib/__tests__/schema-loader.test.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,MAAM,MAAM,oBAAoB,CAAC;AACxC,OAAO,EAAE,WAAW,EAAa,aAAa,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACxE,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAE/D,SAAS,cAAc,CAAC,OAAgC;IACtD,MAAM,GAAG,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,sBAAsB,CAAC,CAAC,CAAC;IAChE,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC;IACrC,aAAa,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC,CAAC;IACtD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,0EAA0E;AAC1E,0EAA0E;AAC1E,2EAA2E;AAC3E,2EAA2E;AAC3E,mDAAmD;AAEnD,IAAI,CAAC,0DAA0D,EAAE,GAAG,EAAE;IACpE,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;IAC5B,uEAAuE;IACvE,MAAM,CAAC,EAAE,CACP,MAAM,CAAC,cAAc,YAAY,GAAG,EACpC,8BAA8B,CAC/B,CAAC;IACF,MAAM,CAAC,KAAK,CACV,QAAQ,IAAI,MAAM,EAClB,KAAK,EACL,sEAAsE,CACvE,CAAC;AACJ,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,oEAAoE,EAAE,GAAG,EAAE;IAC9E,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;IAC5B,MAAM,MAAM,GAAG,MAAM,CAAC,cAAc,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IACnD,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,2BAA2B,CAAC,CAAC;IAC/C,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;IACrC,6DAA6D;IAC7D,kEAAkE;IAClE,wEAAwE;IACxE,uEAAuE;IACvE,MAAM,yBAAyB,GAAG,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE;QAC3D,IAAI,CAAC,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,CAAC,CAAC,IAAI,KAAK,WAAW,CAAC;QACvD,OAAO,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,WAAW,CAAC,CAAC;IAChD,CAAC,CAAC,CAAC;IACH,MAAM,CAAC,KAAK,CACV,yBAAyB,EACzB,KAAK,EACL,kFAAkF,CACnF,CAAC;AACJ,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,6DAA6D,EAAE,GAAG,EAAE;IACvE,gEAAgE;IAChE,yEAAyE;IACzE,+DAA+D;IAC/D,oEAAoE;IACpE,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;IAC5B,MAAM,CAAC,KAAK,CACV,MAAM,CAAC,cAAc,CAAC,GAAG,CAAC,eAAe,CAAC,EAC1C,KAAK,EACL,6EAA6E,CAC9E,CAAC;AACJ,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,qDAAqD,EAAE,GAAG,EAAE;IAC/D,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;IAC5B,oEAAoE;IACpE,qEAAqE;IACrE,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,cAAc,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC;IAC1C,MAAM,GAAG,GAAG,MAAM,CAAC,cAAc,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;IACnD,MAAM,CAAC,EAAE,CAAC,GAAG,EAAE,sCAAsC,CAAC,CAAC;IACvD,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;AACzC,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,iEAAiE,EAAE,GAAG,EAAE;IAC3E,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;IAC5B,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IACzC,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,WAAW,EAAE,CAAC;QACnC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,+BAA+B,CAAC,EAAE,CAAC,CAAC;QACjE,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,gBAAgB,CAAC,CAAC;IACpC,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,mEAAmE;AACnE,2EAA2E;AAC3E,0EAA0E;AAC1E,2EAA2E;AAC3E,8CAA8C;AAC9C,IAAI,CAAC,yDAAyD,EAAE,GAAG,EAAE;IACnE,MAAM,GAAG,GAAG,8EAA8E,CAAC;IAC3F,MAAM,KAAK,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;IAChC,MAAM,CAAC,KAAK,CACV,KAAK,CAAC,MAAM,EACZ,CAAC,EACD,sCAAsC,KAAK,CAAC,MAAM,KAAK,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAC/E,CAAC;IACF,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;IAClC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,6CAA6C,CAAC,CAAC;IACtE,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,kBAAkB,CAAC,CAAC;AAC7C,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,6EAA6E,EAAE,GAAG,EAAE;IACvF,MAAM,GAAG,GAAG,yBAAyB,CAAC;IACtC,MAAM,KAAK,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;IAChC,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC,OAAO,EAAE,SAAS,EAAE,GAAG,CAAC,CAAC,CAAC;AACrD,CAAC,CAAC,CAAC;AAEH,8EAA8E;AAC9E,4CAA4C;AAC5C,8EAA8E;AAE9E,IAAI,CAAC,wEAAwE,EAAE,GAAG,EAAE;IAClF,mEAAmE;IACnE,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC;IAC5C,OAAO,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC;IACtC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;QAC5B,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,aAAa,EAAE,IAAI,CAAC,CAAC;IAC3C,CAAC;YAAS,CAAC;QACT,IAAI,IAAI,KAAK,SAAS;YAAE,OAAO,CAAC,GAAG,CAAC,kBAAkB,GAAG,IAAI,CAAC;IAChE,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,gEAAgE,EAAE,GAAG,EAAE;IAC1E,MAAM,IAAI,GAAG,cAAc,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;IAChD,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,UAAU,CAAC,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;QACnD,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,aAAa,EAAE,IAAI,CAAC,CAAC;IAC3C,CAAC;YAAS,CAAC;QACT,MAAM,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAChC,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,mEAAmE,EAAE,GAAG,EAAE;IAC7E,uEAAuE;IACvE,wEAAwE;IACxE,mBAAmB;IACnB,MAAM,IAAI,GAAG,cAAc,CAAC,EAAE,WAAW,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC,CAAC;IACzE,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,UAAU,CAAC,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;QACnD,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,aAAa,EAAE,IAAI,CAAC,CAAC;IAC3C,CAAC;YAAS,CAAC;QACT,MAAM,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAChC,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,0EAA0E,EAAE,GAAG,EAAE;IACpF,uEAAuE;IACvE,mDAAmD;IACnD,MAAM,IAAI,GAAG,cAAc,CAAC,EAAE,QAAQ,EAAE,qBAAqB,EAAE,CAAC,CAAC;IACjE,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,UAAU,CAAC,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;QACnD,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,aAAa,EAAE,qBAAqB,CAAC,CAAC;IAC5D,CAAC;YAAS,CAAC;QACT,MAAM,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAChC,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,2EAA2E,EAAE,GAAG,EAAE;IACrF,0EAA0E;IAC1E,mCAAmC;IACnC,MAAM,IAAI,GAAG,cAAc,CAAC,EAAE,QAAQ,EAAE,aAAa,EAAE,CAAC,CAAC;IACzD,IAAI,CAAC;QACH,MAAM,CAAC,MAAM,CACX,GAAG,EAAE,CAAC,UAAU,CAAC,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,EACzC,CAAC,GAAU,EAAE,EAAE;YACb,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,EAAE,iBAAiB,CAAC,CAAC;YAC7C,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC;YACzC,OAAO,IAAI,CAAC;QACd,CAAC,CACF,CAAC;IACJ,CAAC;YAAS,CAAC;QACT,MAAM,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAChC,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,mEAAmE,EAAE,GAAG,EAAE;IAC7E,MAAM,IAAI,GAAG,cAAc,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,CAAC;IAC9C,IAAI,CAAC;QACH,MAAM,CAAC,MAAM,CACX,GAAG,EAAE,CAAC,UAAU,CAAC,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,EACzC,gDAAgD,CACjD,CAAC;IACJ,CAAC;YAAS,CAAC;QACT,MAAM,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAChC,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,gFAAgF,EAAE,GAAG,EAAE;IAC1F,oEAAoE;IACpE,qEAAqE;IACrE,0CAA0C;IAC1C,MAAM,IAAI,GAAG,cAAc,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,CAAC;IAC9C,IAAI,CAAC;QACH,MAAM,CAAC,MAAM,CACX,GAAG,EAAE,CAAC,UAAU,CAAC,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,EACzC,CAAC,GAAU,EAAE,EAAE;YACb,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC;YAC1C,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;YACtC,OAAO,IAAI,CAAC;QACd,CAAC,CACF,CAAC;IACJ,CAAC;YAAS,CAAC;QACT,MAAM,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAChC,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,+DAA+D,EAAE,GAAG,EAAE;IACzE,MAAM,KAAK,GAAG,YAAY,CAAC,uBAAuB,CAAC,CAAC;IACpD,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC,KAAK,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC;AACnD,CAAC,CAAC,CAAC;AAEH,0DAA0D;AAC1D,qDAAqD;AACrD,IAAI,CAAC,wEAAwE,EAAE,GAAG,EAAE;IAClF,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;IAC5B,MAAM,CAAC,EAAE,CACP,MAAM,CAAC,gBAAgB,YAAY,GAAG,EACtC,gCAAgC,CACjC,CAAC;IACF,MAAM,eAAe,GAAG,MAAM,CAAC,gBAAgB,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAC9D,MAAM,CAAC,EAAE,CACP,eAAe,EACf,2EAA2E,CAC5E,CAAC;IACF,MAAM,QAAQ,GAAG,eAAe,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IAC7C,MAAM,CAAC,EAAE,CACP,QAAQ,EACR,mDAAmD,CACpD,CAAC;IACF,MAAM,CAAC,KAAK,CACV,QAAQ,CAAC,SAAS,EAClB,WAAW,EACX,4EAA4E,CAC7E,CAAC;AACJ,CAAC,CAAC,CAAC;AAEH,+DAA+D;AAC/D,wEAAwE;AACxE,wEAAwE;AACxE,wEAAwE;AACxE,IAAI,CAAC,sDAAsD,EAAE,GAAG,EAAE;IAChE,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;IAC5B,sEAAsE;IACtE,0EAA0E;IAC1E,uDAAuD;IACvD,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,cAAc,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC;AAC5C,CAAC,CAAC,CAAC"}

package/payload/platform/plugins/memory/mcp/dist/lib/__tests__/schema-validator.test.js

@@ -12,12 +12,15 @@ function makeSchema(opts) {
         markdownLabels.set(entry.label, {
             label: entry.label,
             required: entry.required,
-            sourceFile: entry.sourceFile ?? "schema-test.md",
+            sourceFile: entry.sourceFile ?? "schema-base.md",
         });
     }
     const wrongToCorrect = new Map();
-    for (const [wrong, correct] of opts.synonyms ?? []) {
-        wrongToCorrect.set(wrong, { correct, sourceFile: "schema-test.md" });
+    for (const [wrong, correct, sourceFile] of opts.synonyms ?? []) {
+        wrongToCorrect.set(wrong, {
+            correct,
+            sourceFile: sourceFile ?? "schema-base.md",
+        });
     }
     const forbiddenByLabel = new Map();
     for (const entry of opts.forbidden ?? []) {
@@ -28,14 +31,15 @@ function makeSchema(opts) {
         }
         perLabel.set(entry.property, {
             rationale: entry.rationale ?? "test rationale",
-            sourceFile: "schema-test.md",
+            sourceFile: entry.sourceFile ?? "schema-base.md",
         });
     }
     return {
         markdownLabels,
         wrongToCorrect,
         forbiddenByLabel,
-        sourceFiles: ["schema-test.md"],
+        sourceFiles: ["schema-base.md"],
+        brandVertical: opts.brandVertical ?? null,
     };
 }
 function makeLiveSource(opts) {
@@ -445,4 +449,192 @@ test('(893) mode defaults to "create" when omitted; required-props still fires',
         accountId: "acct-1",
     }, { schema, liveSource }), /missing required property 'givenName'/);
 });
+// ---------------------------------------------------------------------------
+// Vertical scoping (Task 193)
+// ---------------------------------------------------------------------------
+test("vertical scoping: base rule applies for every resolved vertical (including null)", () => {
+    // schema-base.md rules — synonyms and forbidden — never filter out, even
+    // when no brand vertical is declared.
+    const schema = makeSchema({
+        synonyms: [["firstName", "givenName", "schema-base.md"]],
+    });
+    const liveSource = makeLiveSource({ live: ["Person"], declared: [] });
+    assert.throws(() => validateWrite({
+        labels: ["Person"],
+        properties: { firstName: "Sam" },
+        accountId: "acct-1",
+    }, { schema, liveSource }), /firstName.*givenName/);
+});
+test("vertical scoping: vertical synonym applies when its file is the active vertical", () => {
+    const schema = makeSchema({
+        synonyms: [["roomCount", "numberOfRooms", "schema-estate-agent.md"]],
+    });
+    const liveSource = makeLiveSource({ live: ["Property"], declared: [] });
+    assert.throws(() => validateWrite({
+        labels: ["Property"],
+        properties: { roomCount: 3 },
+        accountId: "acct-1",
+    }, {
+        schema,
+        liveSource,
+    }, {
+        verticalContext: {
+            resolvedVertical: "schema-estate-agent",
+            source: "brand-default",
+        },
+    }), /roomCount.*numberOfRooms/);
+});
+test("vertical scoping: vertical synonym is filtered out when a different vertical is active", () => {
+    // Estate-agent synonym must NOT fire when the LocalBusiness has overridden
+    // to creator. The doctrine in the task: "the per-LocalBusiness override
+    // wins". A write whose property name is wrong only in estate-agent should
+    // pass for a creator-scope write.
+    const schema = makeSchema({
+        synonyms: [["roomCount", "numberOfRooms", "schema-estate-agent.md"]],
+    });
+    const liveSource = makeLiveSource({ live: ["Property"], declared: [] });
+    assert.doesNotThrow(() => validateWrite({
+        labels: ["Property"],
+        properties: { roomCount: 3 },
+        accountId: "acct-1",
+    }, { schema, liveSource }, {
+        verticalContext: {
+            resolvedVertical: "schema-creator",
+            source: "localbusiness-override",
+        },
+    }));
+});
+test("vertical scoping: vertical synonym is filtered out when no vertical is active (null)", () => {
+    // Non-vertical install (Maxy default). Only base rules apply.
+    const schema = makeSchema({
+        synonyms: [["roomCount", "numberOfRooms", "schema-estate-agent.md"]],
+    });
+    const liveSource = makeLiveSource({ live: ["Property"], declared: [] });
+    assert.doesNotThrow(() => validateWrite({
+        labels: ["Property"],
+        properties: { roomCount: 3 },
+        accountId: "acct-1",
+    }, { schema, liveSource }));
+});
+test("vertical scoping: forbidden-property rule respects active vertical", () => {
+    const schema = makeSchema({
+        forbidden: [
+            {
+                label: "Person",
+                property: "agencyNotes",
+                rationale: "Applicant-specific",
+                sourceFile: "schema-estate-agent.md",
+            },
+        ],
+    });
+    const liveSource = makeLiveSource({ live: ["Person"], declared: [] });
+    // Active vertical = estate-agent → forbidden fires.
+    assert.throws(() => validateWrite({
+        labels: ["Person"],
+        properties: { agencyNotes: "x" },
+        accountId: "acct-1",
+    }, { schema, liveSource }, {
+        verticalContext: {
+            resolvedVertical: "schema-estate-agent",
+            source: "brand-default",
+        },
+    }), /agencyNotes/);
+    // Active vertical = creator → estate-agent forbidden rule out of scope.
+    assert.doesNotThrow(() => validateWrite({
+        labels: ["Person"],
+        properties: { agencyNotes: "x" },
+        accountId: "acct-1",
+    }, { schema, liveSource }, {
+        verticalContext: {
+            resolvedVertical: "schema-creator",
+            source: "localbusiness-override",
+        },
+    }));
+});
+test("vertical scoping: required-props from out-of-scope vertical are skipped (markdown-undocumented)", () => {
+    // Applicant is defined in schema-estate-agent.md. A write on Applicant
+    // under an active creator vertical should accept (label is recognised
+    // by the live source) but log the out-of-scope-vertical reason.
+    const schema = makeSchema({
+        documented: [
+            {
+                label: "Applicant",
+                required: [{ kind: "simple", name: "budget" }],
+                sourceFile: "schema-estate-agent.md",
+            },
+        ],
+    });
+    const liveSource = makeLiveSource({ live: ["Applicant"], declared: [] });
+    const { lines, emit } = captureEmits();
+    validateWrite({
+        labels: ["Applicant"],
+        properties: { name: "x" },
+        accountId: "acct-1",
+    }, { schema, liveSource, emit }, {
+        verticalContext: {
+            resolvedVertical: "schema-creator",
+            source: "localbusiness-override",
+        },
+    });
+    const accept = lines.find((l) => l.includes("outcome=accepted"));
+    assert.ok(accept, `expected accepted log, got ${lines.join(" | ")}`);
+    const skip = lines.find((l) => l.includes("markdown-undocumented") &&
+        l.includes("reason=out-of-scope-vertical"));
+    assert.ok(skip, `expected out-of-scope-vertical log, got ${lines.join(" | ")}`);
+    assert.match(skip, /definedIn=schema-estate-agent\.md/);
+    assert.match(skip, /active=schema-creator/);
+});
+test("vertical scoping: required-props from active vertical fire", () => {
+    const schema = makeSchema({
+        documented: [
+            {
+                label: "Applicant",
+                required: [{ kind: "simple", name: "budget" }],
+                sourceFile: "schema-estate-agent.md",
+            },
+        ],
+    });
+    const liveSource = makeLiveSource({ live: ["Applicant"], declared: [] });
+    assert.throws(() => validateWrite({
+        labels: ["Applicant"],
+        properties: { name: "x" },
+        accountId: "acct-1",
+    }, { schema, liveSource }, {
+        verticalContext: {
+            resolvedVertical: "schema-estate-agent",
+            source: "brand-default",
+        },
+    }), /missing required property 'budget'/);
+});
+test("vertical scoping: resolved-vertical log line emits once per write", () => {
+    const schema = makeSchema({});
+    const liveSource = makeLiveSource({ live: ["Person"], declared: [] });
+    const { lines, emit } = captureEmits();
+    validateWrite({
+        labels: ["Person"],
+        properties: {},
+        accountId: "acct-99",
+    }, { schema, liveSource, emit }, {
+        verticalContext: {
+            resolvedVertical: "schema-estate-agent",
+            source: "localbusiness-override",
+        },
+    });
+    const verticalLines = lines.filter((l) => l.startsWith("[schema-validator] resolved-vertical="));
+    assert.equal(verticalLines.length, 1);
+    assert.match(verticalLines[0], /resolved-vertical=schema-estate-agent source=localbusiness-override accountId=acct-99/);
+});
+test("vertical scoping: resolved-vertical=none logged when no context is passed", () => {
+    const schema = makeSchema({});
+    const liveSource = makeLiveSource({ live: ["Person"], declared: [] });
+    const { lines, emit } = captureEmits();
+    validateWrite({
+        labels: ["Person"],
+        properties: {},
+        accountId: "acct-1",
+    }, { schema, liveSource, emit });
+    const verticalLines = lines.filter((l) => l.startsWith("[schema-validator] resolved-vertical="));
+    assert.equal(verticalLines.length, 1);
+    assert.match(verticalLines[0], /resolved-vertical=none source=brand-default/);
+});
 //# sourceMappingURL=schema-validator.test.js.map