@rubytech/create-maxy 1.0.0

package/payload/platform/package.json

@@ -0,0 +1,17 @@
+{
+  "name": "maxy-platform",
+  "version": "0.1.0",
+  "private": true,
+  "workspaces": [
+    "plugins/*/mcp"
+  ],
+  "scripts": {
+    "build": "tsc -b plugins/*/mcp/tsconfig.json",
+    "build:memory": "tsc -p plugins/memory/mcp/tsconfig.json",
+    "build:contacts": "tsc -p plugins/contacts/mcp/tsconfig.json",
+    "build:telegram": "tsc -p plugins/telegram/mcp/tsconfig.json",
+    "build:admin": "tsc -p plugins/admin/mcp/tsconfig.json",
+    "build:cloudflare": "tsc -p plugins/cloudflare/mcp/tsconfig.json",
+    "build:stubs": "tsc -p plugins/scheduling/mcp/tsconfig.json && tsc -p plugins/documents/mcp/tsconfig.json && tsc -p plugins/web/mcp/tsconfig.json"
+  }
+}

package/payload/platform/plugins/admin/PLUGIN.md

@@ -0,0 +1,24 @@
+---
+name: admin
+description: "Platform administration plugin. Provides system-status, brand-settings, account-manage, logs-read, and plugin-read tools for managing the Maxy platform."
+icon: ⚙️
+tools:
+  - system-status
+  - brand-settings
+  - account-manage
+  - logs-read
+  - plugin-read
+always: true
+embed: false
+---
+
+# Admin
+
+Platform management tools for both the admin and public agents. The `plugin-read` tool is available to the public agent (read-only) for loading plugin definitions and references. All other tools are admin-only.
+
+Tools are available via the `admin` MCP server.
+
+## Hooks
+
+- `hooks/session-start.sh` — loads IDENTITY.md on session start
+- `hooks/pre-tool-use.sh` — enforces public agent read-only lockdown

package/payload/platform/plugins/admin/hooks/pre-tool-use.sh

@@ -0,0 +1,56 @@
+#!/usr/bin/env bash
+# PreToolUse hook — enforces agent tool boundaries.
+# Usage: pre-tool-use.sh <agent-type>
+# Receives tool call JSON on stdin (from Claude Code hook protocol).
+# Exit 0 = allow, exit 2 = block.
+
+AGENT_TYPE="${1:-public}"
+
+# Read stdin — fail closed if unavailable
+if [ -t 0 ]; then
+  echo "Blocked: Cannot determine tool call (no stdin). Failing closed." >&2
+  exit 2
+fi
+INPUT=$(cat)
+TOOL_NAME=$(echo "$INPUT" | grep -o '"tool_name":"[^"]*"' | head -1 | cut -d'"' -f4)
+
+# ---------------------------------------------------------------------------
+# Admin agent — allow all tools EXCEPT writes to protected code directories.
+# The agent must never modify app source, platform code, or its own hooks.
+# ---------------------------------------------------------------------------
+if [ "$AGENT_TYPE" = "admin" ]; then
+  case "$TOOL_NAME" in
+    Write|Edit)
+      FILE_PATH=$(echo "$INPUT" | grep -o '"file_path":"[^"]*"' | head -1 | cut -d'"' -f4)
+      case "$FILE_PATH" in
+        # Next.js platform app source
+        */maxy/app/*|*/maxy/lib/*|*/maxy/*.ts|*/maxy/*.tsx|*/maxy/*.mjs)
+          echo "Blocked: Admin agent cannot modify app source at $FILE_PATH" >&2
+          exit 2
+          ;;
+        # Platform MCP server code, hooks, and scripts
+        */platform/plugins/*/mcp/*|*/platform/plugins/*/hooks/*|*/platform/scripts/*)
+          echo "Blocked: Admin agent cannot modify platform code at $FILE_PATH" >&2
+          exit 2
+          ;;
+      esac
+      ;;
+  esac
+  exit 0
+fi
+
+# ---------------------------------------------------------------------------
+# Public agent — strict allowlist (memory-search only).
+# ---------------------------------------------------------------------------
+case "$TOOL_NAME" in
+  "memory-search"|"mcp__memory__memory-search")
+    exit 0
+    ;;
+  "plugin-read"|"mcp__admin__plugin-read")
+    exit 0
+    ;;
+  *)
+    echo "Blocked: Public agent cannot use tool '$TOOL_NAME'. Only memory-search and plugin-read are permitted." >&2
+    exit 2
+    ;;
+esac

package/payload/platform/plugins/admin/hooks/session-start.sh

@@ -0,0 +1,20 @@
+#!/usr/bin/env bash
+# SessionStart hook — loads the agent's IDENTITY.md.
+# IDENTITY.md is the single source of truth for character and capability.
+# This hook does not add context — it ensures IDENTITY is loaded.
+#
+# Usage: session-start.sh <account-dir> <agent-name>
+# Example: session-start.sh /path/to/accounts/uuid admin
+
+ACCOUNT_DIR="${1:-}"
+AGENT_NAME="${2:-}"
+
+if [ -z "$ACCOUNT_DIR" ] || [ -z "$AGENT_NAME" ]; then
+  exit 0
+fi
+
+IDENTITY_PATH="$ACCOUNT_DIR/agents/$AGENT_NAME/IDENTITY.md"
+
+if [ -f "$IDENTITY_PATH" ]; then
+  cat "$IDENTITY_PATH"
+fi

package/payload/platform/plugins/admin/mcp/dist/index.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=index.d.ts.map

package/payload/platform/plugins/admin/mcp/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":""}

package/payload/platform/plugins/admin/mcp/dist/index.js

@@ -0,0 +1,149 @@
+import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
+import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";
+import { z } from "zod";
+import { readFile } from "node:fs/promises";
+import { resolve, join } from "node:path";
+import { execFileSync } from "node:child_process";
+import { existsSync } from "node:fs";
+const server = new McpServer({
+    name: "admin",
+    version: "0.1.0",
+});
+const PLATFORM_ROOT = process.env.PLATFORM_ROOT ?? resolve(import.meta.dirname, "../../../..");
+const ACCOUNT_ID = process.env.ACCOUNT_ID;
+if (!ACCOUNT_ID) {
+    throw new Error("ACCOUNT_ID environment variable is required");
+}
+// Resolve account directory
+function getAccountDir() {
+    const dir = resolve(PLATFORM_ROOT, "config/accounts", ACCOUNT_ID);
+    if (!existsSync(dir)) {
+        throw new Error(`Account directory not found: ${dir}`);
+    }
+    return dir;
+}
+async function readAccountConfig() {
+    const configPath = join(getAccountDir(), "account.json");
+    const content = await readFile(configPath, "utf-8");
+    return JSON.parse(content);
+}
+// ===================================================================
+// System tools
+// ===================================================================
+server.tool("system-status", "Check health of all Maxy platform services: Neo4j, Ollama, Cloudflare tunnel.", {}, async () => {
+    const checks = {};
+    try {
+        const neo4jUri = process.env.NEO4J_URI ?? "bolt://localhost:7687";
+        const res = await fetch(neo4jUri.replace("bolt://", "http://").replace("7687", "7474"), { signal: AbortSignal.timeout(3000) });
+        checks.neo4j = res.ok ? "healthy" : `unhealthy (${res.status})`;
+    }
+    catch (err) {
+        checks.neo4j = `unreachable: ${err instanceof Error ? err.message : String(err)}`;
+    }
+    try {
+        const ollamaUrl = process.env.OLLAMA_URL ?? "http://localhost:11434";
+        const res = await fetch(`${ollamaUrl}/api/tags`, {
+            signal: AbortSignal.timeout(3000),
+        });
+        if (res.ok) {
+            const data = (await res.json());
+            const models = data.models?.map((m) => m.name).join(", ") ?? "none";
+            checks.ollama = `healthy (models: ${models})`;
+        }
+        else {
+            checks.ollama = `unhealthy (${res.status})`;
+        }
+    }
+    catch (err) {
+        checks.ollama = `unreachable: ${err instanceof Error ? err.message : String(err)}`;
+    }
+    // Cloudflare tunnel: lightweight process check (full status via tunnel-status in cloudflare plugin)
+    try {
+        execFileSync("pgrep", ["-x", "cloudflared"], { timeout: 2000 });
+        checks.cloudflare = "running";
+    }
+    catch {
+        // pgrep exits non-zero if no process found
+        try {
+            execFileSync("which", ["cloudflared"], { encoding: "utf-8", timeout: 3000 });
+            checks.cloudflare = "installed but not running";
+        }
+        catch {
+            checks.cloudflare = "not installed";
+        }
+    }
+    const formatted = Object.entries(checks)
+        .map(([service, status]) => `${service}: ${status}`)
+        .join("\n");
+    return { content: [{ type: "text", text: formatted }] };
+});
+server.tool("brand-settings", "Read the brand/styling configuration for the current account.", {}, async () => {
+    try {
+        const config = await readAccountConfig();
+        return {
+            content: [{ type: "text", text: JSON.stringify(config.brand, null, 2) }],
+        };
+    }
+    catch (err) {
+        return {
+            content: [{ type: "text", text: `Failed: ${err instanceof Error ? err.message : String(err)}` }],
+            isError: true,
+        };
+    }
+});
+server.tool("account-manage", "Read the account configuration (tier, domains, settings).", {}, async () => {
+    try {
+        const config = await readAccountConfig();
+        return {
+            content: [{ type: "text", text: JSON.stringify(config, null, 2) }],
+        };
+    }
+    catch (err) {
+        return {
+            content: [{ type: "text", text: `Failed: ${err instanceof Error ? err.message : String(err)}` }],
+            isError: true,
+        };
+    }
+});
+server.tool("logs-read", "Read recent system or session logs.", {
+    type: z.enum(["system", "session", "error"]).optional(),
+    lines: z.number().optional(),
+}, async ({ type = "system", lines = 50 }) => {
+    try {
+        const logFile = type === "error" ? "/tmp/maxy-error.log"
+            : type === "session" ? "/tmp/maxy-session.log"
+                : "/tmp/maxy-system.log";
+        const result = execFileSync("tail", ["-n", String(lines), logFile], {
+            timeout: 5000,
+        }).toString();
+        return { content: [{ type: "text", text: result }] };
+    }
+    catch {
+        return { content: [{ type: "text", text: `No logs found for type '${type}'.` }] };
+    }
+});
+server.tool("plugin-read", "Read a plugin definition (PLUGIN.md) or one of its reference files.", {
+    pluginName: z.string().describe("Name of the plugin directory (e.g. 'sales', 'business-assistant')"),
+    file: z.string().optional().describe("Specific file to read (e.g. 'references/pricing.md'). Defaults to PLUGIN.md."),
+}, async ({ pluginName, file }) => {
+    try {
+        const pluginPath = resolve(PLATFORM_ROOT, "plugins", pluginName, file ?? "PLUGIN.md");
+        if (!existsSync(pluginPath)) {
+            return {
+                content: [{ type: "text", text: `Plugin file not found: ${pluginPath}` }],
+                isError: true,
+            };
+        }
+        const content = await readFile(pluginPath, "utf-8");
+        return { content: [{ type: "text", text: content }] };
+    }
+    catch (err) {
+        return {
+            content: [{ type: "text", text: `Failed: ${err instanceof Error ? err.message : String(err)}` }],
+            isError: true,
+        };
+    }
+});
+const transport = new StdioServerTransport();
+await server.connect(transport);
+//# sourceMappingURL=index.js.map

package/payload/platform/plugins/admin/mcp/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AACpE,OAAO,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAC;AACjF,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAErC,MAAM,MAAM,GAAG,IAAI,SAAS,CAAC;IAC3B,IAAI,EAAE,OAAO;IACb,OAAO,EAAE,OAAO;CACjB,CAAC,CAAC;AAEH,MAAM,aAAa,GAAG,OAAO,CAAC,GAAG,CAAC,aAAa,IAAI,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC;AAC/F,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC;AAC1C,IAAI,CAAC,UAAU,EAAE,CAAC;IAChB,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;AACjE,CAAC;AAED,4BAA4B;AAC5B,SAAS,aAAa;IACpB,MAAM,GAAG,GAAG,OAAO,CAAC,aAAa,EAAE,iBAAiB,EAAE,UAAW,CAAC,CAAC;IACnE,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACrB,MAAM,IAAI,KAAK,CAAC,gCAAgC,GAAG,EAAE,CAAC,CAAC;IACzD,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,KAAK,UAAU,iBAAiB;IAC9B,MAAM,UAAU,GAAG,IAAI,CAAC,aAAa,EAAE,EAAE,cAAc,CAAC,CAAC;IACzD,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;IACpD,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;AAC7B,CAAC;AAED,sEAAsE;AACtE,eAAe;AACf,sEAAsE;AAEtE,MAAM,CAAC,IAAI,CACT,eAAe,EACf,+EAA+E,EAC/E,EAAE,EACF,KAAK,IAAI,EAAE;IACT,MAAM,MAAM,GAA2B,EAAE,CAAC;IAE1C,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,SAAS,IAAI,uBAAuB,CAAC;QAClE,MAAM,GAAG,GAAG,MAAM,KAAK,CACrB,QAAQ,CAAC,OAAO,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,MAAM,CAAC,EAC9D,EAAE,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CACtC,CAAC;QACF,MAAM,CAAC,KAAK,GAAG,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,cAAc,GAAG,CAAC,MAAM,GAAG,CAAC;IAClE,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,CAAC,KAAK,GAAG,gBAAgB,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;IACpF,CAAC;IAED,IAAI,CAAC;QACH,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,UAAU,IAAI,wBAAwB,CAAC;QACrE,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,SAAS,WAAW,EAAE;YAC/C,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC;SAClC,CAAC,CAAC;QACH,IAAI,GAAG,CAAC,EAAE,EAAE,CAAC;YACX,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAyC,CAAC;YACxE,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,MAAM,CAAC;YACpE,MAAM,CAAC,MAAM,GAAG,oBAAoB,MAAM,GAAG,CAAC;QAChD,CAAC;aAAM,CAAC;YACN,MAAM,CAAC,MAAM,GAAG,cAAc,GAAG,CAAC,MAAM,GAAG,CAAC;QAC9C,CAAC;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,CAAC,MAAM,GAAG,gBAAgB,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;IACrF,CAAC;IAED,oGAAoG;IACpG,IAAI,CAAC;QACH,YAAY,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,aAAa,CAAC,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;QAChE,MAAM,CAAC,UAAU,GAAG,SAAS,CAAC;IAChC,CAAC;IAAC,MAAM,CAAC;QACP,2CAA2C;QAC3C,IAAI,CAAC;YACH,YAAY,CAAC,OAAO,EAAE,CAAC,aAAa,CAAC,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;YAC7E,MAAM,CAAC,UAAU,GAAG,2BAA2B,CAAC;QAClD,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,CAAC,UAAU,GAAG,eAAe,CAAC;QACtC,CAAC;IACH,CAAC;IAED,MAAM,SAAS,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC;SACrC,GAAG,CAAC,CAAC,CAAC,OAAO,EAAE,MAAM,CAAC,EAAE,EAAE,CAAC,GAAG,OAAO,KAAK,MAAM,EAAE,CAAC;SACnD,IAAI,CAAC,IAAI,CAAC,CAAC;IAEd,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC;AACnE,CAAC,CACF,CAAC;AAEF,MAAM,CAAC,IAAI,CACT,gBAAgB,EAChB,+DAA+D,EAC/D,EAAE,EACF,KAAK,IAAI,EAAE;IACT,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,iBAAiB,EAAE,CAAC;QACzC,OAAO;YACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;SAClF,CAAC;IACJ,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO;YACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,WAAW,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACzG,OAAO,EAAE,IAAI;SACd,CAAC;IACJ,CAAC;AACH,CAAC,CACF,CAAC;AAEF,MAAM,CAAC,IAAI,CACT,gBAAgB,EAChB,2DAA2D,EAC3D,EAAE,EACF,KAAK,IAAI,EAAE;IACT,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,iBAAiB,EAAE,CAAC;QACzC,OAAO;YACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;SAC5E,CAAC;IACJ,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO;YACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,WAAW,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACzG,OAAO,EAAE,IAAI;SACd,CAAC;IACJ,CAAC;AACH,CAAC,CACF,CAAC;AAEF,MAAM,CAAC,IAAI,CACT,WAAW,EACX,qCAAqC,EACrC;IACE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC,CAAC,QAAQ,EAAE;IACvD,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAC7B,EACD,KAAK,EAAE,EAAE,IAAI,GAAG,QAAQ,EAAE,KAAK,GAAG,EAAE,EAAE,EAAE,EAAE;IACxC,IAAI,CAAC;QACH,MAAM,OAAO,GACX,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,qBAAqB;YACxC,CAAC,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,uBAAuB;gBAC9C,CAAC,CAAC,sBAAsB,CAAC;QAE3B,MAAM,MAAM,GAAG,YAAY,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC,EAAE;YAClE,OAAO,EAAE,IAAI;SACd,CAAC,CAAC,QAAQ,EAAE,CAAC;QAEd,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC;IAChE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,2BAA2B,IAAI,IAAI,EAAE,CAAC,EAAE,CAAC;IAC7F,CAAC;AACH,CAAC,CACF,CAAC;AAEF,MAAM,CAAC,IAAI,CACT,aAAa,EACb,qEAAqE,EACrE;IACE,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,mEAAmE,CAAC;IACpG,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,8EAA8E,CAAC;CACrH,EACD,KAAK,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,EAAE,EAAE;IAC7B,IAAI,CAAC;QACH,MAAM,UAAU,GAAG,OAAO,CAAC,aAAa,EAAE,SAAS,EAAE,UAAU,EAAE,IAAI,IAAI,WAAW,CAAC,CAAC;QACtF,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;YAC5B,OAAO;gBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,0BAA0B,UAAU,EAAE,EAAE,CAAC;gBAClF,OAAO,EAAE,IAAI;aACd,CAAC;QACJ,CAAC;QACD,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;QACpD,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC;IACjE,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO;YACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,WAAW,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACzG,OAAO,EAAE,IAAI;SACd,CAAC;IACJ,CAAC;AACH,CAAC,CACF,CAAC;AAEF,MAAM,SAAS,GAAG,IAAI,oBAAoB,EAAE,CAAC;AAC7C,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC"}

package/payload/platform/plugins/admin/mcp/package.json

@@ -0,0 +1,18 @@
+{
+  "name": "@maxy/admin",
+  "version": "0.1.0",
+  "private": true,
+  "type": "module",
+  "main": "dist/index.js",
+  "scripts": {
+    "build": "tsc",
+    "start": "node dist/index.js"
+  },
+  "dependencies": {
+    "@modelcontextprotocol/sdk": "^1.12.1"
+  },
+  "devDependencies": {
+    "typescript": "^5.7.0",
+    "@types/node": "^22.0.0"
+  }
+}

package/payload/platform/plugins/anthropic/PLUGIN.md

@@ -0,0 +1,30 @@
+---
+name: anthropic
+description: Guide users through connecting Claude — either via Claude Pro sign-in (recommended) or by pasting an Anthropic API key.
+metadata: {"taskmaster":{"emoji":"🔑"}}
+---
+
+# Anthropic / Claude Setup
+
+Walks users through connecting Taskmaster to Claude. There are two paths — Claude Pro sign-in (no API key needed) and direct API key entry. The plugin determines which path to offer based on what the user is trying to do and what they already have configured.
+
+## When to activate
+
+- User asks how to connect Claude, get an Anthropic key, or set up their AI
+- User is on the Setup page and asks about the "Connect to Claude" button or API keys
+- BOOTSTRAP detects no working Claude/Anthropic connection
+- User sees an authentication error or "Connection expired" message
+- User asks which provider to choose in the API keys dropdown
+
+## What it unlocks
+
+- Claude as the primary AI model — powers all conversations, reasoning, and tool use
+- Two connection methods: subscription-based (Claude Pro) or pay-per-use (API key)
+
+## References
+
+| Task | When to use | Reference |
+|------|-------------|-----------|
+| Guided setup | User wants help connecting Claude | `references/setup-guide.md` |
+
+Load the reference and follow its instructions.

package/payload/platform/plugins/anthropic/references/setup-guide.md

@@ -0,0 +1,146 @@
+# Anthropic / Claude — Setup Guide
+
+Walk the user through connecting Taskmaster to Claude. There are two options — determine which one is right for the user, then guide them through it.
+
+---
+
+## The two options
+
+| | Option A: Claude Pro sign-in | Option B: API key |
+|---|---|---|
+| **Best for** | Users with a Claude Pro/Team/Enterprise subscription | Users who want pay-per-use or don't have a Claude subscription |
+| **Cost** | Included in existing subscription | Pay per API call (requires billing setup at Anthropic) |
+| **How it works** | OAuth sign-in — no key to manage | Paste a secret key from console.anthropic.com |
+| **Setup location** | Setup page → "Connect to Claude" | Setup page → API Keys → Add provider |
+
+---
+
+## Step 1: Determine which option
+
+Ask the user which situation applies:
+
+> "There are two ways to connect Claude:
+>
+> **Option A (recommended):** If you have a **Claude Pro subscription** (the one you use at claude.ai), you can sign in directly — no API key needed. This is the easiest option.
+>
+> **Option B:** If you don't have a Claude subscription, or you prefer pay-per-use, you can paste an **API key** from Anthropic's developer console.
+>
+> Which would you like to do?"
+
+If the user isn't sure:
+
+> "Do you pay for Claude Pro (at claude.ai)? If yes, go with Option A — it's simpler and uses your existing subscription. If you don't have a Claude subscription, go with Option B."
+
+---
+
+## Option A: Claude Pro sign-in (recommended)
+
+This uses OAuth device-code flow — the user signs in on their computer and pastes a code back into Taskmaster.
+
+### A1: Navigate to Setup
+
+> "Go to your Taskmaster **Setup** page. Under **Connect to Claude**, click the **Connect to Claude** button."
+
+If the user can't find it:
+
+> "Open your browser and go to your Taskmaster's address followed by **/setup** — for example: `http://taskmaster.local:18789/setup`. You should see a section called **Connect to Claude** with a button."
+
+### A2: Sign in and copy the code
+
+> "After clicking the button, a sign-in page will open on your computer (or you'll be given a link to open). Sign in with your **Claude account** — the same email you use at claude.ai.
+>
+> After signing in, the page will show a **code**. Copy that code."
+
+### A3: Paste the code
+
+> "Paste the code into Taskmaster where it says to enter the code, then click **Submit**."
+
+### A4: Verify connection
+
+> "You're done when the Claude/LLM status light goes **green**. That means Taskmaster is connected and ready to use your Claude subscription."
+
+If the status light doesn't go green:
+
+> "If the status light stays red or amber, try refreshing the Setup page. If it still doesn't work, the sign-in might have timed out — click **Connect to Claude** again to start over."
+
+**Done.** No further setup needed — OAuth handles everything automatically, including token refresh.
+
+---
+
+## Option B: Paste an API key
+
+This uses a direct API key from Anthropic's developer console. The user pays per API call.
+
+### B1: Get the key from Anthropic
+
+> "You'll need an API key from Anthropic's developer console. Here's how to get one:
+>
+> 1. Go to **console.anthropic.com** in your browser
+> 2. Sign in or create an account (you'll need to set up billing — Anthropic charges per API call)
+> 3. Once logged in, go to **API Keys** (in the left sidebar or top menu)
+> 4. Click **Create Key**
+> 5. Give it a name like **Taskmaster**
+> 6. Copy the key — it starts with **sk-ant-** and is quite long
+>
+> **Copy it now** — Anthropic only shows it once. If you lose it, you'll need to create a new one.
+>
+> Send me the key when you have it."
+
+If the user navigated away or can't find API Keys:
+
+> "On console.anthropic.com, look for **API Keys** in the left sidebar. If you don't see it, click on the **Settings** icon or look under your account menu."
+
+### B2: Verify the key format
+
+When the user sends a key, verify it looks correct:
+
+- Starts with `sk-ant-`
+- Usually 90+ characters long
+
+If it doesn't match:
+
+> "That doesn't look like an Anthropic API key — it should start with **sk-ant-** and be quite long (about 100 characters). Can you check you copied the full key?"
+
+### B3: Store the key
+
+Use the `api_keys` tool to store the key:
+
+```
+api_keys({ action: "set", provider: "anthropic", apiKey: "<the key>" })
+```
+
+The key is applied immediately — no restart needed. Confirm to the user:
+
+> "Done — I've saved your Anthropic API key. Claude is now connected. You can start chatting and I'll use Claude for all my responses."
+
+---
+
+## If the user already has a connection
+
+If the user has a working Claude connection (OAuth or API key) and is asking about API keys for a different reason:
+
+> "You're already connected to Claude — I can see your connection is active. Were you looking to set up a different provider (like OpenAI or Google), or is there a problem with your current connection?"
+
+---
+
+## Troubleshooting
+
+| Problem | Solution |
+|---------|----------|
+| "Connection expired" on Setup page | Try sending a message first — the connection auto-refreshes. Reload the Setup page after. If it persists, click **Connect to Claude** to sign in again. |
+| OAuth code expired before pasting | Click **Connect to Claude** again to get a fresh code. The code is only valid for a few minutes. |
+| API key rejected | Verify it starts with `sk-ant-`. Check that billing is set up on console.anthropic.com — keys don't work without an active billing method. |
+| "Which provider should I pick?" | For most users, **Anthropic / Claude** is the right choice. It powers all of Taskmaster's conversations and reasoning. |
+| User has both OAuth and API key | OAuth takes precedence. If the user wants to switch to an API key, they can disconnect OAuth on the Setup page first. |
+
+---
+
+## Common questions
+
+| Question | Answer |
+|----------|--------|
+| "Is Claude Pro enough?" | Yes — Option A uses your existing Claude Pro subscription. No additional cost. |
+| "How much does the API cost?" | Anthropic charges per API call. For small business use, typical costs are a few dollars per month. See anthropic.com/pricing for current rates. |
+| "Can I use both OAuth and an API key?" | Yes, but OAuth takes precedence when active. The API key acts as a fallback. |
+| "Do I need to restart?" | No — both OAuth and API keys are applied immediately. |
+| "What if my subscription lapses?" | Taskmaster will show a connection error. Renew your subscription or switch to an API key. |

package/payload/platform/plugins/business-assistant/PLUGIN.md

@@ -0,0 +1,46 @@
+---
+name: business-assistant
+description: "Business assistant for small businesses. Handles customer enquiries, appointment booking, quote formatting, invoice generation, and daily briefings. Responds instantly, triages by urgency, and never lets a message fall through the cracks."
+metadata: {"taskmaster":{"always":true,"embed":true,"emoji":"💼","pluginKey":"business-assistant"}}
+---
+
+# Business Assistant
+
+You are a business assistant for a small business. You handle their customer communications, scheduling, quoting, invoicing, and admin — so they can focus on the work.
+
+## Core Principle: Memory First
+
+**ALWAYS search memory before responding to any message.** Customer details, pricing, schedule, preferences, and business rules all live in memory. Never answer from assumptions — check first.
+
+1. Receive message
+2. Search memory for customer info, schedule, pricing, preferences
+3. Formulate response using what you found
+4. Send response
+5. Update memory with any new information learned
+
+## Identity & Tone
+
+You are an AI-powered business assistant — like a trusted secretary who knows the business. Professional but warm. Match the business owner's tone. Use first names with customers. Keep messages short. Always honest about being an AI when asked.
+
+**Never:** Pretend to be the business owner. Pretend to be human. Commit to a price without approval. Diagnose with certainty. Share the business owner's personal details.
+
+## Core Workflow
+
+Every incoming customer message: identify (new vs existing) → triage (urgent/routine/quick) → gather info → respond or escalate → update memory.
+
+Track status through the pipeline: enquiry → quoted → booked → completed → invoiced → paid.
+
+## Industry Overlays
+
+Load industry-specific references from `overlays/` based on the business type in memory. If no industry is set, ask during the first conversation.
+
+## References
+
+Load the relevant reference when the task requires it:
+
+- **Triage & escalation** → `references/escalation.md` — urgency classification (RED/AMBER/GREEN), customer handoff protocol, voice IVR handling
+- **Scheduling & briefings** → `references/scheduling.md` — booking protocol, geographic clustering, travel time estimation, morning briefings, holiday mode, GPS integration
+- **Quotes** → `references/quoting.md` — photo-to-quote, formatting, follow-up timings
+- **Invoices & payment** → `references/invoicing.md` — HTML invoice creation, PDF generation via `document_to_pdf`, sending, payment chase protocol
+- **Customer records** → `references/crm.md` — contact record management, `contact_lookup`/`contact_update` usage, pipeline tracking, when to create/update records
+- **Document filing** → `references/document-management.md` — dual-scope filing system, naming conventions, folder structure for customer-facing vs internal documents

package/payload/platform/plugins/business-assistant/references/crm.md

@@ -0,0 +1,112 @@
+# Customer Records (CRM)
+
+## Contacts as Source of Truth
+
+The **contact record** is the highest-level directory for every customer relationship. Its phone number and name are the canonical identifiers — all user-scoped data (memory profiles, conversations, documents, events) hangs off the contact via the phone number.
+
+| Concept | What it is | Storage |
+|---------|-----------|---------|
+| **Contact record** | Structured directory entry (phone, name, pipeline status, address) | `~/.taskmaster/records.json` via `contact_*` tools |
+| **User memory** | Freeform narrative, conversation history, media, documents | `memory/users/{phone}/` via `memory_*` tools |
+
+The contact record determines the relationship. User memory provides the detail. A memory profile without a contact record is orphaned data. A contact record without memory is a directory entry awaiting context.
+
+## Tools
+
+| Tool | Access | Purpose |
+|------|--------|---------|
+| `contact_create` | Admin only | Create a new contact record (phone + name + optional fields) |
+| `contact_lookup` | All agents | Search by phone number or name. Use before every customer interaction |
+| `contact_update` | Admin only | Update record fields or rename a contact. Use after every meaningful event |
+| `contact_delete` | Admin only | Remove a contact record. Does not delete user memory |
+| `contact_is_bot` | All agents | Check whether a phone number belongs to a registered bot. Returns `is_bot`, and when true, the owner's name and phone |
+
+### Creating a Contact Record vs Creating User Memory
+
+These are distinct operations:
+
+- **`contact_create`** — Creates a structured directory entry in the secure records store. Use when you have a name and phone number for a new customer.
+- **`memory_write` to `memory/users/{phone}/profile.md`** — Creates or updates the freeform narrative profile. Use to store context, personality, preferences, and history.
+
+On first meaningful interaction, do **both**: create the contact record, then write an initial memory profile.
+
+## When to Create a Record
+
+Create a contact record on the **first meaningful interaction** with a new customer — when you have at least a name and phone number. Do not create records for:
+- Spam or wrong numbers
+- One-off enquiries that go nowhere (unless the business owner asks you to)
+
+## When to Update a Record
+
+Update the contact record after every event that changes the customer's status or adds useful information:
+- New job booked → update `status` to `booked`, add `lastContact`
+- Quote sent → update `status` to `quoted`
+- Job completed → update `status` to `completed`, update `lastJob`
+- Invoice sent → update `status` to `invoiced`
+- Payment received → update `status` to `paid`
+- New address or contact details provided
+- Notable preferences discovered ("prefers mornings", "dog in garden")
+
+## Standard Fields
+
+| Field | Description | Example |
+|-------|-------------|---------|
+| `name` | Full name (set via `contact_create`, update via `contact_update` with field `name`) | `Mrs Sarah Jenkins` |
+| `status` | Pipeline stage | `enquiry`, `quoted`, `booked`, `completed`, `invoiced`, `paid`, `archived` |
+| `address` | Full postal address | `42 Oak Lane, Stansted, CM23 4AB` |
+| `postcode` | Extracted postcode (for geographic clustering) | `CM23 4AB` |
+| `source` | How they found the business | `referral`, `Google`, `WhatsApp`, `repeat customer` |
+| `notes` | Brief context | `Elderly, prefers mornings. Has a dog.` |
+| `lastJob` | Date and description of most recent job | `2026-02-20 Boiler service` |
+| `lastContact` | Date of most recent interaction | `2026-02-24` |
+| `bot_number` | Phone number of a bot owned by this customer (E.164) | `+447700900099` |
+| `bot_number_N` | Additional bot numbers (`bot_number_1`, `bot_number_2`, etc.) | `+447700900100` |
+
+## Pipeline Stages
+
+```
+enquiry → quoted → booked → completed → invoiced → paid
+                                                     ↓
+                                                  archived
+```
+
+- **enquiry** — Customer has made contact, no quote or booking yet
+- **quoted** — Quote sent, awaiting response
+- **booked** — Job scheduled
+- **completed** — Job done, not yet invoiced
+- **invoiced** — Invoice sent, awaiting payment
+- **paid** — Payment received
+- **archived** — Customer is inactive (no contact for 6+ months, or explicitly closed)
+
+Update the status at each transition. This enables the business owner to see their pipeline at a glance.
+
+## Bot Number Registration
+
+Customers who operate their own bots (e.g. another Taskmaster instance, an automated service) can have those bot phone numbers registered on their contact record. This enables inbound bot detection — when a message arrives from a registered bot number, the system identifies it as automated rather than human.
+
+**Registering a bot number:** Use `contact_update` to set a `bot_number` field on the customer's contact record. The value is the bot's phone number in E.164 format. If a customer has multiple bots, use `bot_number_1`, `bot_number_2`, etc.
+
+**Checking inbound messages:** `contact_is_bot` takes a phone number and returns whether it belongs to a registered bot. When `is_bot` is true, the response includes the owner's name and phone number — the human customer who registered the bot. Use this to avoid treating automated messages as customer conversations.
+
+## Contact Records vs User Memory
+
+Contact records and memory serve different purposes. Use both.
+
+| | Contact Records | User Memory |
+|---|---|---|
+| **Store** | `contact_create` / `contact_update` / `contact_lookup` | `memory/users/{phone}/profile.md` |
+| **Structure** | Key-value fields (name, status, address, etc.) | Freeform narrative |
+| **Purpose** | Directory entry, pipeline tracking, structured queries | Context, personality, history |
+| **Example** | `status: invoiced`, `postcode: CM23 4AB` | "Mrs Jenkins is elderly, lives alone, prefers morning appointments. She had a boiler service last month and was very happy with the work." |
+
+When searching for a customer, check **both**: `contact_lookup` for structured data, `memory_search` for context.
+
+## Document Linking
+
+Customer documents are filed at `memory/users/{phone}/documents/`. The phone number in the contact record matches the phone number in the folder path. See `references/document-management.md` for the full filing system.
+
+When creating documents for a customer, always:
+1. Verify the contact record exists (`contact_lookup`)
+2. Create the record if needed (`contact_create`) or update it (`contact_update`)
+3. File the document in the correct path
+4. Update the contact record status